@fitlab-ai/agent-infra 0.8.1 → 0.8.2

package/README.md

@@ -16,7 +16,7 @@
   <a href="https://www.npmjs.com/package/@fitlab-ai/agent-infra"><img src="https://img.shields.io/npm/v/@fitlab-ai/agent-infra" alt="npm version"></a>
   <a href="https://www.npmjs.com/package/@fitlab-ai/agent-infra"><img src="https://img.shields.io/npm/dm/@fitlab-ai/agent-infra" alt="npm downloads"></a>
   <a href="License.txt"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License: MIT"></a>
-  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-brightgreen?logo=node.js" alt="Node.js >= 22"></a>
+  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%3E%3D22.9.0-brightgreen?logo=node.js" alt="Node.js >= 22.9.0"></a>
   <a href="https://github.com/fitlab-ai/agent-infra/releases"><img src="https://img.shields.io/github/v/release/fitlab-ai/agent-infra" alt="GitHub release"></a>
   <a href="https://codecov.io/gh/fitlab-ai/agent-infra"><img src="https://codecov.io/gh/fitlab-ai/agent-infra/graph/badge.svg" alt="codecov"></a>
   <a href="CONTRIBUTING.md"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen.svg" alt="PRs Welcome"></a>

package/README.zh-CN.md

@@ -16,7 +16,7 @@
   <a href="https://www.npmjs.com/package/@fitlab-ai/agent-infra"><img src="https://img.shields.io/npm/v/@fitlab-ai/agent-infra" alt="npm version"></a>
   <a href="https://www.npmjs.com/package/@fitlab-ai/agent-infra"><img src="https://img.shields.io/npm/dm/@fitlab-ai/agent-infra" alt="npm downloads"></a>
   <a href="License.txt"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License: MIT"></a>
-  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%3E%3D22-brightgreen?logo=node.js" alt="Node.js >= 22"></a>
+  <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/Node.js-%3E%3D22.9.0-brightgreen?logo=node.js" alt="Node.js >= 22.9.0"></a>
   <a href="https://github.com/fitlab-ai/agent-infra/releases"><img src="https://img.shields.io/github/v/release/fitlab-ai/agent-infra" alt="GitHub release"></a>
   <a href="https://codecov.io/gh/fitlab-ai/agent-infra"><img src="https://codecov.io/gh/fitlab-ai/agent-infra/graph/badge.svg" alt="codecov"></a>
   <a href="CONTRIBUTING.zh-CN.md"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen.svg" alt="PRs Welcome"></a>

package/bin/cli.ts

@@ -2,10 +2,10 @@
 import { VERSION } from '../lib/version.ts';
 
 // Node.js version check
-const [major = 0] = process.versions.node.split('.').map((part) => parseInt(part, 10));
-if (major < 22) {
+const [major = 0, minor = 0] = process.versions.node.split('.').map((part) => parseInt(part, 10));
+if (major < 22 || (major === 22 && minor < 9)) {
   process.stderr.write(
-    `agent-infra requires Node.js >= 22 (current: ${process.version})\n`
+    `agent-infra requires Node.js >= 22.9.0 (current: ${process.version})\n`
   );
   process.exit(1);
 }

package/dist/bin/cli.js

@@ -9,9 +9,9 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
 };
 import { VERSION } from "../lib/version.js";
 // Node.js version check
-const [major = 0] = process.versions.node.split('.').map((part) => parseInt(part, 10));
-if (major < 22) {
-    process.stderr.write(`agent-infra requires Node.js >= 22 (current: ${process.version})\n`);
+const [major = 0, minor = 0] = process.versions.node.split('.').map((part) => parseInt(part, 10));
+if (major < 22 || (major === 22 && minor < 9)) {
+    process.stderr.write(`agent-infra requires Node.js >= 22.9.0 (current: ${process.version})\n`);
     process.exit(1);
 }
 const USAGE = `agent-infra ${VERSION} - bootstrap AI collaboration infrastructure

package/dist/lib/defaults.json

@@ -8,6 +8,7 @@
       "node22"
     ],
     "tools": [
+      "agent-infra",
       "claude-code",
       "codex",
       "gemini-cli",

package/dist/lib/sandbox/commands/create.js

@@ -678,6 +678,38 @@ function resolveHostCatalogPath(value, hostHomeDir) {
         return null;
     }
 }
+const CODEX_DISABLED_FEATURE_FLAGS = ['apps', 'enable_mcp_apps'];
+function removeCodexMcpServers(sandboxParsed) {
+    if (!Object.hasOwn(sandboxParsed, 'mcp_servers')) {
+        return false;
+    }
+    delete sandboxParsed.mcp_servers;
+    return true;
+}
+function inheritDisabledCodexFeatureFlags(sandboxParsed, hostParsed) {
+    if (!isJsonObjectRecord(hostParsed.features)) {
+        return false;
+    }
+    if (Object.hasOwn(sandboxParsed, 'features') && !isJsonObjectRecord(sandboxParsed.features)) {
+        return false;
+    }
+    let sandboxFeatures = sandboxParsed.features;
+    let changed = false;
+    for (const key of CODEX_DISABLED_FEATURE_FLAGS) {
+        if (hostParsed.features[key] !== false) {
+            continue;
+        }
+        if (!sandboxFeatures) {
+            sandboxFeatures = {};
+            sandboxParsed.features = sandboxFeatures;
+        }
+        if (sandboxFeatures[key] !== false) {
+            sandboxFeatures[key] = false;
+            changed = true;
+        }
+    }
+    return changed;
+}
 export function ensureCodexModelInheritance(toolDir, hostHomeDir, containerCodexDir = '/home/devuser/.codex') {
     if (!hostHomeDir) {
         return;
@@ -704,12 +736,13 @@ export function ensureCodexModelInheritance(toolDir, hostHomeDir, containerCodex
             return;
         }
     }
+    let changed = removeCodexMcpServers(sandboxParsed);
+    changed = inheritDisabledCodexFeatureFlags(sandboxParsed, hostParsed) || changed;
     const inheritSpecs = [
         ['model', 'string'],
         ['model_reasoning_effort', 'string'],
         ['model_auto_compact_token_limit', 'number']
     ];
-    let changed = false;
     for (const [key, type] of inheritSpecs) {
         if (Object.hasOwn(sandboxParsed, key)) {
             continue;

package/dist/lib/sandbox/config.js

@@ -10,7 +10,7 @@ import { parseCustomTools } from "./tools.js";
 const DEFAULTS = Object.freeze({
     engine: null,
     runtimes: ['node22'],
-    tools: ['claude-code', 'codex', 'gemini-cli', 'opencode'],
+    tools: ['agent-infra', 'claude-code', 'codex', 'gemini-cli', 'opencode'],
     dockerfile: null,
     vm: {
         cpu: null,

package/dist/lib/sandbox/runtimes/node20.dockerfile

@@ -1,3 +1,3 @@
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && \
+RUN bash -o pipefail -c 'curl -fsSL --retry 5 --retry-delay 2 --retry-all-errors https://deb.nodesource.com/setup_20.x | bash -' && \
     apt-get install -y nodejs && \
     rm -rf /var/lib/apt/lists/*

package/dist/lib/sandbox/runtimes/node22.dockerfile

@@ -1,3 +1,3 @@
-RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
+RUN bash -o pipefail -c 'curl -fsSL --retry 5 --retry-delay 2 --retry-all-errors https://deb.nodesource.com/setup_22.x | bash -' && \
     apt-get install -y nodejs && \
     rm -rf /var/lib/apt/lists/*

package/dist/lib/sandbox/tools.js

@@ -88,6 +88,15 @@ function createBuiltinTools(home, project) {
                 { hostPath: hostJoin(home, '.gemini', 'settings.json'), sandboxName: 'settings.json' },
                 { hostPath: hostJoin(home, '.gemini', 'google_accounts.json'), sandboxName: 'google_accounts.json' }
             ]
+        },
+        'agent-infra': {
+            id: 'agent-infra',
+            name: 'agent-infra CLI',
+            install: { type: 'npm', cmd: '@fitlab-ai/agent-infra@latest' },
+            sandboxBase: hostJoin(home, '.agent-infra', 'sandboxes', 'agent-infra'),
+            containerMount: '/home/devuser/.agent-infra-cli',
+            versionCmd: 'ai version --raw',
+            setupHint: 'Provides the ai and agent-infra CLI commands inside the sandbox.'
         }
     };
 }

package/dist/lib/server/adapters/feishu/index.js

@@ -1,4 +1,4 @@
-import { createFeishuTransport, normalizeMessage } from "./transport.js";
+import { cardMessage, createFeishuTransport, normalizeMessage } from "./transport.js";
 // Assemble the feishu adapter. The transport is injectable so unit tests can
 // drive start/dispatch/reply/sendMessage against a fake transport without the
 // real SDK; production uses the default SDK-backed transport.
@@ -18,7 +18,9 @@ export function createFeishuAdapter(config, transport = createFeishuTransport(co
                         text: normalized.text,
                         messageId: normalized.messageId,
                         raw: normalized.raw,
-                        reply: (text) => transport.send(normalized.chatId, text)
+                        reply: async (text) => {
+                            await transport.send(normalized.chatId, cardMessage(text));
+                        }
                     };
                     await adapterCtx.dispatch(message);
                 }
@@ -31,7 +33,7 @@ export function createFeishuAdapter(config, transport = createFeishuTransport(co
             await transport.stop();
         },
         async sendMessage(target, text) {
-            await transport.send(target.chatId, text);
+            await transport.send(target.chatId, cardMessage(text));
         }
     };
 }

package/dist/lib/server/adapters/feishu/transport.js

@@ -1,4 +1,5 @@
 import * as lark from '@larksuiteoapi/node-sdk';
+import { stripVTControlCharacters } from 'node:util';
 function asRecord(value) {
     return typeof value === 'object' && value !== null ? value : {};
 }
@@ -40,6 +41,23 @@ export function normalizeMessage(event) {
 function resolveDomain(value) {
     return value === 'lark' || value === 'Lark' ? lark.Domain.Lark : lark.Domain.Feishu;
 }
+export function cleanFeishuText(text) {
+    return stripVTControlCharacters(text).replace(/\r\n/g, '\n');
+}
+export function cardMessage(text) {
+    return { kind: 'interactive', title: 'agent-infra', text: cleanFeishuText(text) };
+}
+export function toFeishuCreateData(chatId, message) {
+    return {
+        receive_id: chatId,
+        msg_type: 'interactive',
+        content: JSON.stringify({
+            config: { wide_screen_mode: true },
+            header: { title: { tag: 'plain_text', content: message.title }, template: 'blue' },
+            elements: [{ tag: 'div', text: { tag: 'lark_md', content: message.text } }]
+        })
+    };
+}
 // Build the real SDK-backed transport from adapter config. appId/appSecret come
 // from server config (appSecret only via server.local.json / env). The WSClient
 // long connection delivers events; the Client REST call sends replies.
@@ -84,10 +102,10 @@ export function createFeishuTransport(config) {
                 // Ignore: the daemon is shutting down regardless.
             }
         },
-        async send(chatId, text) {
+        async send(chatId, message) {
             await client.im.message.create({
                 params: { receive_id_type: 'chat_id' },
-                data: { receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text }) }
+                data: toFeishuCreateData(chatId, message)
             });
         }
     };

package/dist/lib/server/protocol.js

@@ -12,10 +12,26 @@ function taskSubcommand(subcommand) {
 export function commandHelp() {
     return [
         `agent-infra ${VERSION}`,
-        'Built-ins: /help, /ping, /version',
-        'Read: /sandbox ls|show|vm status, /task decisions|log|ls|show|status',
-        'Write: /sandbox create|start',
-        'Exec: /decide <task-ref> <HD-id> <decision>, /run create-task <description>, /run <skill> <task-ref> ...'
+        'Built-ins:',
+        '/help',
+        '/ping',
+        '/version',
+        'Read:',
+        '/sandbox ls',
+        '/sandbox show {ref}',
+        '/sandbox vm status',
+        '/task decisions {ref}',
+        '/task log {ref}',
+        '/task ls',
+        '/task show {ref}',
+        '/task status {ref}',
+        'Write:',
+        '/sandbox create {ref}',
+        '/sandbox start {ref}',
+        'Exec:',
+        '/decide {task-ref} {HD-id} {decision}',
+        '/run create-task {description}',
+        '/run {skill} {task-ref}'
     ].join('\n');
 }
 export function parseCommand(text) {

package/dist/lib/update.js

@@ -7,6 +7,9 @@ import { isPathOwnedByDisabledTUI, resolveEnabledTUIs } from "./builtin-tuis.js"
 const defaults = JSON.parse(fs.readFileSync(new URL('./defaults.json', import.meta.url), 'utf8'));
 const CONFIG_DIR = '.agents';
 const CONFIG_PATH = path.join(CONFIG_DIR, '.airc.json');
+const AGENT_INFRA_SANDBOX_TOOL = 'agent-infra';
+const LEGACY_DEFAULT_SANDBOX_TOOLS = ['claude-code', 'codex', 'gemini-cli', 'opencode'];
+const DEFAULT_SANDBOX_TOOLS = [AGENT_INFRA_SANDBOX_TOOL, ...LEGACY_DEFAULT_SANDBOX_TOOLS];
 // One-time migration of the legacy project-level PR switch to the three-state
 // `prFlow` preference. `true` (the old default / "PR flow on") maps to the
 // strong constraint `required`; `false` maps to `disabled`. A missing or
@@ -25,6 +28,24 @@ function migratePrFlow(config) {
     }
     return null;
 }
+function isLegacyDefaultSandboxTools(value) {
+    if (!Array.isArray(value) || value.length !== LEGACY_DEFAULT_SANDBOX_TOOLS.length) {
+        return false;
+    }
+    const tools = new Set(value);
+    return LEGACY_DEFAULT_SANDBOX_TOOLS.every((tool) => tools.has(tool));
+}
+function migrateSandboxTools(config) {
+    const tools = config.sandbox?.tools;
+    if (!isLegacyDefaultSandboxTools(tools)) {
+        return false;
+    }
+    config.sandbox = {
+        ...config.sandbox,
+        tools: [...DEFAULT_SANDBOX_TOOLS]
+    };
+    return true;
+}
 function isPathOwnedByOtherPlatform(relativePath, platformType) {
     const top = String(relativePath || '').replace(/\\/g, '/').replace(/^\.\//, '').split('/')[0] ?? '';
     if (!top.startsWith('.'))
@@ -153,6 +174,7 @@ async function cmdUpdate() {
     const taskAdded = !config.task;
     const labelsAdded = !config.labels;
     const prFlowMigrated = migratePrFlow(config);
+    const sandboxToolsMigrated = !sandboxAdded && migrateSandboxTools(config);
     let configChanged = changed;
     if (platformAdded) {
         config.platform = structuredClone(defaults.platform);
@@ -173,6 +195,9 @@ async function cmdUpdate() {
     if (prFlowMigrated) {
         configChanged = true;
     }
+    if (sandboxToolsMigrated) {
+        configChanged = true;
+    }
     if (configChanged) {
         console.log('');
         if (hasNewEntries) {
@@ -200,6 +225,9 @@ async function cmdUpdate() {
             if (prFlowMigrated) {
                 info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
             }
+            if (sandboxToolsMigrated) {
+                info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+            }
         }
         else {
             info(`File registry changed in ${CONFIG_PATH}.`);
@@ -219,6 +247,9 @@ async function cmdUpdate() {
         if (hasNewEntries && prFlowMigrated) {
             info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
         }
+        if (hasNewEntries && sandboxToolsMigrated) {
+            info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+        }
         fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', 'utf8');
         ok(`Updated ${CONFIG_PATH}`);
     }

package/lib/defaults.json

@@ -8,6 +8,7 @@
       "node22"
     ],
     "tools": [
+      "agent-infra",
       "claude-code",
       "codex",
       "gemini-cli",

package/lib/sandbox/commands/create.ts

@@ -915,6 +915,42 @@ function resolveHostCatalogPath(value: unknown, hostHomeDir: string): string | n
   }
 }
 
+const CODEX_DISABLED_FEATURE_FLAGS = ['apps', 'enable_mcp_apps'] as const;
+
+function removeCodexMcpServers(sandboxParsed: JsonObject): boolean {
+  if (!Object.hasOwn(sandboxParsed, 'mcp_servers')) {
+    return false;
+  }
+  delete sandboxParsed.mcp_servers;
+  return true;
+}
+
+function inheritDisabledCodexFeatureFlags(sandboxParsed: JsonObject, hostParsed: JsonObject): boolean {
+  if (!isJsonObjectRecord(hostParsed.features)) {
+    return false;
+  }
+  if (Object.hasOwn(sandboxParsed, 'features') && !isJsonObjectRecord(sandboxParsed.features)) {
+    return false;
+  }
+
+  let sandboxFeatures = sandboxParsed.features as JsonObject | undefined;
+  let changed = false;
+  for (const key of CODEX_DISABLED_FEATURE_FLAGS) {
+    if (hostParsed.features[key] !== false) {
+      continue;
+    }
+    if (!sandboxFeatures) {
+      sandboxFeatures = {};
+      sandboxParsed.features = sandboxFeatures;
+    }
+    if (sandboxFeatures[key] !== false) {
+      sandboxFeatures[key] = false;
+      changed = true;
+    }
+  }
+  return changed;
+}
+
 export function ensureCodexModelInheritance(
   toolDir: string,
   hostHomeDir?: string,
@@ -947,13 +983,15 @@ export function ensureCodexModelInheritance(
     }
   }
 
+  let changed = removeCodexMcpServers(sandboxParsed);
+  changed = inheritDisabledCodexFeatureFlags(sandboxParsed, hostParsed) || changed;
+
   const inheritSpecs: Array<readonly [string, 'string' | 'number']> = [
     ['model', 'string'],
     ['model_reasoning_effort', 'string'],
     ['model_auto_compact_token_limit', 'number']
   ];
 
-  let changed = false;
   for (const [key, type] of inheritSpecs) {
     if (Object.hasOwn(sandboxParsed, key)) {
       continue;

package/lib/sandbox/config.ts

@@ -12,7 +12,7 @@ import type { SandboxTool } from './tools.ts';
 const DEFAULTS = Object.freeze({
   engine: null,
   runtimes: ['node22'],
-  tools: ['claude-code', 'codex', 'gemini-cli', 'opencode'],
+  tools: ['agent-infra', 'claude-code', 'codex', 'gemini-cli', 'opencode'],
   dockerfile: null,
   vm: {
     cpu: null,

package/lib/sandbox/runtimes/node20.dockerfile

@@ -1,3 +1,3 @@
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && \
+RUN bash -o pipefail -c 'curl -fsSL --retry 5 --retry-delay 2 --retry-all-errors https://deb.nodesource.com/setup_20.x | bash -' && \
     apt-get install -y nodejs && \
     rm -rf /var/lib/apt/lists/*

package/lib/sandbox/runtimes/node22.dockerfile

@@ -1,3 +1,3 @@
-RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
+RUN bash -o pipefail -c 'curl -fsSL --retry 5 --retry-delay 2 --retry-all-errors https://deb.nodesource.com/setup_22.x | bash -' && \
     apt-get install -y nodejs && \
     rm -rf /var/lib/apt/lists/*

package/lib/sandbox/tools.ts

@@ -124,6 +124,15 @@ function createBuiltinTools(home: string, project: string): Record<string, Sandb
         { hostPath: hostJoin(home, '.gemini', 'settings.json'), sandboxName: 'settings.json' },
         { hostPath: hostJoin(home, '.gemini', 'google_accounts.json'), sandboxName: 'google_accounts.json' }
       ]
+    },
+    'agent-infra': {
+      id: 'agent-infra',
+      name: 'agent-infra CLI',
+      install: { type: 'npm', cmd: '@fitlab-ai/agent-infra@latest' },
+      sandboxBase: hostJoin(home, '.agent-infra', 'sandboxes', 'agent-infra'),
+      containerMount: '/home/devuser/.agent-infra-cli',
+      versionCmd: 'ai version --raw',
+      setupHint: 'Provides the ai and agent-infra CLI commands inside the sandbox.'
     }
   };
 }

package/lib/server/adapters/feishu/index.ts

@@ -1,5 +1,5 @@
 import type { Adapter, AdapterCtx, AdapterFactory, InboundMessage } from '../_contract.ts';
-import { createFeishuTransport, normalizeMessage } from './transport.ts';
+import { cardMessage, createFeishuTransport, normalizeMessage } from './transport.ts';
 import type { FeishuTransport } from './transport.ts';
 
 // Assemble the feishu adapter. The transport is injectable so unit tests can
@@ -25,7 +25,9 @@ export function createFeishuAdapter(
             text: normalized.text,
             messageId: normalized.messageId,
             raw: normalized.raw,
-            reply: (text) => transport.send(normalized.chatId, text)
+            reply: async (text) => {
+              await transport.send(normalized.chatId, cardMessage(text));
+            }
           };
           await adapterCtx.dispatch(message);
         } catch (error) {
@@ -37,7 +39,7 @@ export function createFeishuAdapter(
       await transport.stop();
     },
     async sendMessage(target, text) {
-      await transport.send(target.chatId, text);
+      await transport.send(target.chatId, cardMessage(text));
     }
   };
 }

package/lib/server/adapters/feishu/transport.ts

@@ -1,4 +1,5 @@
 import * as lark from '@larksuiteoapi/node-sdk';
+import { stripVTControlCharacters } from 'node:util';
 
 // Transport layer for the feishu adapter. All @larksuiteoapi/node-sdk surface is
 // confined here so the adapter body (index.ts) depends only on this narrow
@@ -10,7 +11,15 @@ export type FeishuTransport = {
   // each inbound im.message.receive_v1.
   start: (onMessage: (raw: unknown) => Promise<void>) => Promise<void>;
   stop: () => Promise<void>;
-  send: (chatId: string, text: string) => Promise<void>;
+  send: (chatId: string, message: FeishuOutgoingMessage) => Promise<void>;
+};
+
+export type FeishuOutgoingMessage = { kind: 'interactive'; title: string; text: string };
+
+type FeishuCreateData = {
+  receive_id: string;
+  msg_type: 'interactive';
+  content: string;
 };
 
 export type NormalizedMessage = {
@@ -69,6 +78,26 @@ function resolveDomain(value: unknown): number {
   return value === 'lark' || value === 'Lark' ? lark.Domain.Lark : lark.Domain.Feishu;
 }
 
+export function cleanFeishuText(text: string): string {
+  return stripVTControlCharacters(text).replace(/\r\n/g, '\n');
+}
+
+export function cardMessage(text: string): FeishuOutgoingMessage {
+  return { kind: 'interactive', title: 'agent-infra', text: cleanFeishuText(text) };
+}
+
+export function toFeishuCreateData(chatId: string, message: FeishuOutgoingMessage): FeishuCreateData {
+  return {
+    receive_id: chatId,
+    msg_type: 'interactive',
+    content: JSON.stringify({
+      config: { wide_screen_mode: true },
+      header: { title: { tag: 'plain_text', content: message.title }, template: 'blue' },
+      elements: [{ tag: 'div', text: { tag: 'lark_md', content: message.text } }]
+    })
+  };
+}
+
 // Build the real SDK-backed transport from adapter config. appId/appSecret come
 // from server config (appSecret only via server.local.json / env). The WSClient
 // long connection delivers events; the Client REST call sends replies.
@@ -118,10 +147,10 @@ export function createFeishuTransport(config: Record<string, unknown>): FeishuTr
         // Ignore: the daemon is shutting down regardless.
       }
     },
-    async send(chatId, text) {
+    async send(chatId, message) {
       await client.im.message.create({
         params: { receive_id_type: 'chat_id' },
-        data: { receive_id: chatId, msg_type: 'text', content: JSON.stringify({ text }) }
+        data: toFeishuCreateData(chatId, message)
       });
     }
   };

package/lib/server/protocol.ts

@@ -23,10 +23,26 @@ function taskSubcommand(subcommand: string): string {
 export function commandHelp(): string {
   return [
     `agent-infra ${VERSION}`,
-    'Built-ins: /help, /ping, /version',
-    'Read: /sandbox ls|show|vm status, /task decisions|log|ls|show|status',
-    'Write: /sandbox create|start',
-    'Exec: /decide <task-ref> <HD-id> <decision>, /run create-task <description>, /run <skill> <task-ref> ...'
+    'Built-ins:',
+    '/help',
+    '/ping',
+    '/version',
+    'Read:',
+    '/sandbox ls',
+    '/sandbox show {ref}',
+    '/sandbox vm status',
+    '/task decisions {ref}',
+    '/task log {ref}',
+    '/task ls',
+    '/task show {ref}',
+    '/task status {ref}',
+    'Write:',
+    '/sandbox create {ref}',
+    '/sandbox start {ref}',
+    'Exec:',
+    '/decide {task-ref} {HD-id} {decision}',
+    '/run create-task {description}',
+    '/run {skill} {task-ref}'
   ].join('\n');
 }
 

package/lib/update.ts

@@ -40,6 +40,9 @@ const defaults = JSON.parse(
 
 const CONFIG_DIR = '.agents';
 const CONFIG_PATH = path.join(CONFIG_DIR, '.airc.json');
+const AGENT_INFRA_SANDBOX_TOOL = 'agent-infra';
+const LEGACY_DEFAULT_SANDBOX_TOOLS = ['claude-code', 'codex', 'gemini-cli', 'opencode'];
+const DEFAULT_SANDBOX_TOOLS = [AGENT_INFRA_SANDBOX_TOOL, ...LEGACY_DEFAULT_SANDBOX_TOOLS];
 
 // One-time migration of the legacy project-level PR switch to the three-state
 // `prFlow` preference. `true` (the old default / "PR flow on") maps to the
@@ -60,6 +63,26 @@ function migratePrFlow(config: UpdateConfig): 'required' | 'disabled' | null {
   return null;
 }
 
+function isLegacyDefaultSandboxTools(value: unknown): value is string[] {
+  if (!Array.isArray(value) || value.length !== LEGACY_DEFAULT_SANDBOX_TOOLS.length) {
+    return false;
+  }
+  const tools = new Set(value);
+  return LEGACY_DEFAULT_SANDBOX_TOOLS.every((tool) => tools.has(tool));
+}
+
+function migrateSandboxTools(config: UpdateConfig): boolean {
+  const tools = config.sandbox?.tools;
+  if (!isLegacyDefaultSandboxTools(tools)) {
+    return false;
+  }
+  config.sandbox = {
+    ...config.sandbox,
+    tools: [...DEFAULT_SANDBOX_TOOLS]
+  };
+  return true;
+}
+
 function isPathOwnedByOtherPlatform(relativePath: string, platformType: string): boolean {
   const top = String(relativePath || '').replace(/\\/g, '/').replace(/^\.\//, '').split('/')[0] ?? '';
   if (!top.startsWith('.')) return false;
@@ -215,6 +238,7 @@ async function cmdUpdate(): Promise<void> {
   const taskAdded = !config.task;
   const labelsAdded = !config.labels;
   const prFlowMigrated = migratePrFlow(config);
+  const sandboxToolsMigrated = !sandboxAdded && migrateSandboxTools(config);
   let configChanged = changed;
 
   if (platformAdded) {
@@ -241,6 +265,10 @@ async function cmdUpdate(): Promise<void> {
     configChanged = true;
   }
 
+  if (sandboxToolsMigrated) {
+    configChanged = true;
+  }
+
   if (configChanged) {
     console.log('');
     if (hasNewEntries) {
@@ -267,6 +295,9 @@ async function cmdUpdate(): Promise<void> {
       if (prFlowMigrated) {
         info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
       }
+      if (sandboxToolsMigrated) {
+        info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+      }
     } else {
       info(`File registry changed in ${CONFIG_PATH}.`);
     }
@@ -285,6 +316,9 @@ async function cmdUpdate(): Promise<void> {
     if (hasNewEntries && prFlowMigrated) {
       info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
     }
+    if (hasNewEntries && sandboxToolsMigrated) {
+      info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+    }
     fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', 'utf8');
     ok(`Updated ${CONFIG_PATH}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fitlab-ai/agent-infra",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Bootstrap tool for AI multi-tool collaboration infrastructure — works with Claude Code, Codex, Gemini CLI, and OpenCode",
   "license": "MIT",
   "type": "module",
@@ -29,7 +29,7 @@
     "templates/"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=22.9.0"
   },
   "keywords": [
     "ai",

package/templates/.agents/README.en.md

@@ -260,7 +260,7 @@ Supported `invoke` placeholders:
 | Placeholder | Replaced with | Example |
 |-------------|---------------|---------|
 | `${skillName}` | The skill command name, such as `review-code` or `commit`. | `<your-cli> ${skillName}` -> `<your-cli> review-code` |
-| `${projectName}` | The `.airc.json` `project` value. Use this for namespaced commands. | `/${projectName}:${skillName}` -> `/agent-infra:review-code` |
+| `${projectName}` | The `.airc.json` `project` value. Use this for namespaced commands. | `/${projectName}:${skillName}` -> `/your-project:review-code` |
 
 Non-namespaced custom TUI:
 
@@ -280,7 +280,7 @@ Namespaced custom TUI:
 
 ```json
 {
-  "project": "agent-infra",
+  "project": "your-project",
   "customTUIs": [
     {
       "name": "<your-tui-name>",
@@ -295,7 +295,7 @@ Namespaced custom TUI:
 
 ## Sandbox Custom Tools
 
-`customTUIs` (above) generates slash-command files but does not change the sandbox image. To install a non-npm TUI (pip / cargo / curl-based / pre-built binary) into the sandbox image and live-mount its credentials, declare it under `sandbox.customTools` in `.agents/.airc.json`. Built-in tools (`claude-code`, `codex`, `opencode`, `gemini-cli`) keep working unchanged.
+`customTUIs` generates slash-command files but does not change the sandbox image. To install a non-npm CLI or tool (pip / cargo / curl-based / pre-built binary) into the sandbox image and live-mount its credentials, declare it under `sandbox.customTools` in `.agents/.airc.json`. Built-in sandbox tools (`claude-code`, `codex`, `opencode`, `gemini-cli`, `agent-infra`) keep working unchanged; `agent-infra` only provides the in-sandbox `ai` / `agent-infra` CLI and is not part of `tuis` or `customTUIs`.
 
 ### Required fields
 

package/templates/.agents/README.zh-CN.md

@@ -260,7 +260,7 @@ args: "<task-id>"   # 可选
 | 占位符 | 替换为 | 示例 |
 |--------|--------|------|
 | `${skillName}` | skill 命令名，例如 `review-code` 或 `commit`。 | `<your-cli> ${skillName}` -> `<your-cli> review-code` |
-| `${projectName}` | `.airc.json` 中的 `project` 值，适用于带命名空间的命令。 | `/${projectName}:${skillName}` -> `/agent-infra:review-code` |
+| `${projectName}` | `.airc.json` 中的 `project` 值，适用于带命名空间的命令。 | `/${projectName}:${skillName}` -> `/your-project:review-code` |
 
 不带命名空间的自定义 TUI：
 
@@ -280,7 +280,7 @@ args: "<task-id>"   # 可选
 
 ```json
 {
-  "project": "agent-infra",
+  "project": "your-project",
   "customTUIs": [
     {
       "name": "<your-tui-name>",
@@ -295,7 +295,7 @@ args: "<task-id>"   # 可选
 
 ## 沙箱自定义工具（Sandbox Custom Tools）
 
-上文 `customTUIs` 只负责生成 slash-command 文件，**不影响沙箱镜像**。如果要把一个非 npm 分发的 TUI（pip / cargo / curl 脚本 / 裸二进制）装进沙箱镜像、并 live-mount 它的凭证目录，需要在 `.agents/.airc.json` 的 `sandbox.customTools` 中声明。内建的四个工具（`claude-code` / `codex` / `opencode` / `gemini-cli`）行为保持不变。
+`customTUIs` 只负责生成 slash-command 文件，**不影响沙箱镜像**。如果要把一个非 npm 分发的 CLI 或工具（pip / cargo / curl 脚本 / 裸二进制）装进沙箱镜像、并 live-mount 它的凭证目录，需要在 `.agents/.airc.json` 的 `sandbox.customTools` 中声明。内建 sandbox 工具（`claude-code` / `codex` / `opencode` / `gemini-cli` / `agent-infra`）行为保持不变；其中 `agent-infra` 只提供沙箱内 `ai` / `agent-infra` CLI，不属于 `tuis` 或 `customTUIs` 配置。
 
 ### 必填字段
 

package/templates/.agents/skills/update-agent-infra/scripts/sync-templates.js

@@ -29,6 +29,7 @@ const DEFAULTS = {
       "node22"
     ],
     "tools": [
+      "agent-infra",
       "claude-code",
       "codex",
       "gemini-cli",
@@ -86,6 +87,9 @@ const DEFAULTS = {
 };
 
 const PACKAGE_NAME = '@fitlab-ai/agent-infra';
+const AGENT_INFRA_SANDBOX_TOOL = 'agent-infra';
+const LEGACY_DEFAULT_SANDBOX_TOOLS = ['claude-code', 'codex', 'gemini-cli', 'opencode'];
+const DEFAULT_SANDBOX_TOOLS = [AGENT_INFRA_SANDBOX_TOOL, ...LEGACY_DEFAULT_SANDBOX_TOOLS];
 // Add a new identifier here only after shipping matching .{platform}. template variants.
 const KNOWN_PLATFORMS = new Set(['github']);
 const KNOWN_LANGUAGES = new Set(['en', 'zh-CN']);
@@ -123,6 +127,26 @@ function isPathOwnedByDisabledTUI(rel, enabledSet) {
   return false;
 }
 
+function isLegacyDefaultSandboxTools(value) {
+  if (!Array.isArray(value) || value.length !== LEGACY_DEFAULT_SANDBOX_TOOLS.length) {
+    return false;
+  }
+  const tools = new Set(value);
+  return LEGACY_DEFAULT_SANDBOX_TOOLS.every(tool => tools.has(tool));
+}
+
+function migrateSandboxTools(cfg) {
+  const tools = cfg.sandbox?.tools;
+  if (!isLegacyDefaultSandboxTools(tools)) {
+    return false;
+  }
+  cfg.sandbox = {
+    ...cfg.sandbox,
+    tools: [...DEFAULT_SANDBOX_TOOLS]
+  };
+  return true;
+}
+
 function norm(p) { return p.replace(/\\/g, '/'); }
 
 function normDir(p) {
@@ -1296,6 +1320,7 @@ function syncTemplates(projectRoot, templateRootOverride) {
   ) > 0;
 
   const prevVersion = cfg.templateVersion;
+  const sandboxToolsMigrated = migrateSandboxTools(cfg);
 
   cfg.files.managed = managed;
   cfg.files.merged  = merged;
@@ -1303,7 +1328,7 @@ function syncTemplates(projectRoot, templateRootOverride) {
   cfg.templateVersion = version;
   delete cfg.templateSource;
 
-  report.configUpdated = hasChanges || prevVersion !== version || hadTemplateSource;
+  report.configUpdated = hasChanges || prevVersion !== version || hadTemplateSource || sandboxToolsMigrated;
 
   fs.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2) + '\n', 'utf8');