@fitlab-ai/agent-infra 0.8.1 → 0.8.3

package/dist/lib/server/protocol.js

@@ -1,5 +1,5 @@
-import { VERSION } from "../version.js";
-import { getSkillRunSpec } from "../run/skills.js";
+import { VERSION } from '../version.js';
+import { getSkillRunSpec } from '../run/skills.js';
 const TASK_READ = new Set(['ls', 'list', 'status', 'show', 'log', 'decisions']);
 const SANDBOX_READ = new Set(['ls', 'list', 'show']);
 const SANDBOX_WRITE = new Set(['create', 'start']);
@@ -12,10 +12,26 @@ function taskSubcommand(subcommand) {
 export function commandHelp() {
     return [
         `agent-infra ${VERSION}`,
-        'Built-ins: /help, /ping, /version',
-        'Read: /sandbox ls|show|vm status, /task decisions|log|ls|show|status',
-        'Write: /sandbox create|start',
-        'Exec: /decide <task-ref> <HD-id> <decision>, /run create-task <description>, /run <skill> <task-ref> ...'
+        'Built-ins:',
+        '/help',
+        '/ping',
+        '/version',
+        'Read:',
+        '/sandbox ls',
+        '/sandbox show {ref}',
+        '/sandbox vm status',
+        '/task decisions {ref}',
+        '/task log {ref}',
+        '/task ls',
+        '/task show {ref}',
+        '/task status {ref}',
+        'Write:',
+        '/sandbox create {ref}',
+        '/sandbox start {ref}',
+        'Exec:',
+        '/decide {task-ref} {HD-id} {decision}',
+        '/run create-task {description}',
+        '/run {skill} {task-ref}'
     ].join('\n');
 }
 export function parseCommand(text) {

package/dist/lib/server/streamer.js

@@ -1,4 +1,5 @@
-import { redactSecrets } from "./redact.js";
+import { streamEvent } from './display.js';
+import { redactSecrets } from './redact.js';
 function chunks(text, size) {
     if (text.length === 0)
         return [];
@@ -9,7 +10,7 @@ function chunks(text, size) {
     return out;
 }
 export async function streamCommand(options, run, send) {
-    await send(`started ${options.title}`);
+    await send(streamEvent(options.title, 'started'));
     const size = options.chunkChars ?? 4000;
     const throttleMs = options.throttleMs ?? 0;
     let streamed = false;
@@ -22,7 +23,7 @@ export async function streamCommand(options, run, send) {
         buffer = '';
         lastFlush = Date.now();
         for (const chunk of chunks(text, size)) {
-            await send(chunk);
+            await send(streamEvent(options.title, 'chunk', chunk));
         }
     };
     const emit = async (chunk) => {
@@ -38,7 +39,7 @@ export async function streamCommand(options, run, send) {
         buffer += [result.stdout, result.stderr].filter(Boolean).join('\n');
     }
     await flush();
-    await send(`finished ${options.title} exitCode=${result.exitCode} signal=${result.signal ?? 'null'}`);
+    await send(streamEvent(options.title, 'finished', undefined, result.exitCode, result.signal));
     return result;
 }
 //# sourceMappingURL=streamer.js.map

package/dist/lib/task/commands/cat.js

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
-import { resolveTaskRef } from "../resolve-ref.js";
-import { resolveArtifact } from "../artifacts.js";
+import { resolveTaskRef } from '../resolve-ref.js';
+import { resolveArtifact } from '../artifacts.js';
 const USAGE = `Usage: ai task cat <N | #N | TASK-id> <artifact | N>
 
 Prints a task artifact's raw content to stdout.

package/dist/lib/task/commands/decisions.js

@@ -1,9 +1,9 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { formatTable } from "../../table.js";
-import { resolveTaskRef } from "../resolve-ref.js";
-import { parseLedger, HUMAN_DECISION_STATUSES } from "../ledger.js";
-import { extractSubSection } from "../sections.js";
+import { formatTable } from '../../table.js';
+import { resolveTaskRef } from '../resolve-ref.js';
+import { parseLedger, HUMAN_DECISION_STATUSES } from '../ledger.js';
+import { extractSubSection } from '../sections.js';
 const USAGE = `Usage: ai task decisions <N | #N | TASK-id> [selector] [options]
 
 Lists the human-decision (HD-) items recorded in a task's review disagreement

package/dist/lib/task/commands/files.js

@@ -1,6 +1,6 @@
-import { formatTable } from "../../table.js";
-import { resolveTaskRef } from "../resolve-ref.js";
-import { enumerateArtifacts } from "../artifacts.js";
+import { formatTable } from '../../table.js';
+import { resolveTaskRef } from '../resolve-ref.js';
+import { enumerateArtifacts } from '../artifacts.js';
 const USAGE = `Usage: ai task files <N | #N | TASK-id>
 
 Lists the artifacts in a task directory with stable numbers.

package/dist/lib/task/commands/grep.js

@@ -1,8 +1,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { resolveTaskRef, detectRepoRoot, enumerateTaskDirs } from "../resolve-ref.js";
-import { enumerateArtifacts, resolveArtifact } from "../artifacts.js";
-import { loadShortIdByTaskId } from "../short-id.js";
+import { resolveTaskRef, detectRepoRoot, enumerateTaskDirs } from '../resolve-ref.js';
+import { enumerateArtifacts, resolveArtifact } from '../artifacts.js';
+import { loadShortIdByTaskId } from '../short-id.js';
 const USAGE = `Usage: ai task grep <pattern> [ref] [artifact | N]
 
 Literal (non-regex) line search across task artifacts.

package/dist/lib/task/commands/issue-body.js

@@ -1,8 +1,8 @@
 import fs from 'node:fs';
-import { resolveTaskRef } from "../resolve-ref.js";
-import { extractTitle } from "../frontmatter.js";
-import { extractSection, findSectionHeading } from "../sections.js";
-import { renderTemplateBody, PLACEHOLDER } from "../issue-form.js";
+import { resolveTaskRef } from '../resolve-ref.js';
+import { extractTitle } from '../frontmatter.js';
+import { extractSection, findSectionHeading } from '../sections.js';
+import { renderTemplateBody, PLACEHOLDER } from '../issue-form.js';
 const USAGE = `Usage: ai task issue-body <N | #N | TASK-id> [--template <path>]
 
 Print a deterministic Issue body extracted from a task's task.md.

package/dist/lib/task/commands/log.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
-import { formatTable } from "../../table.js";
-import { resolveTaskRef } from "../resolve-ref.js";
-import { parseLedger, HUMAN_DECISION_STATUSES } from "../ledger.js";
+import { formatTable } from '../../table.js';
+import { resolveTaskRef } from '../resolve-ref.js';
+import { parseLedger } from '../ledger.js';
 const USAGE = `Usage: ai task log <N | #N | TASK-id>
 
 Renders a task's activity log as a per-step status table. A step's start and
@@ -13,7 +13,7 @@ Columns: # (row) / STEP / AGENT / STARTED / DONE / NOTE
   A human-executed step shows AGENT as 'human' and, when it has no start marker,
   a '-' STARTED placeholder. Review-step NOTE also carries two human counts in
   the verdict list, right after blockers/major/minor: manual-validation
-  and human-decision (current ledger stage total).
+  and human-decision (current pending ledger stage total).
 `;
 const TABLE_HEADERS = ['#', 'STEP', 'AGENT', 'STARTED', 'DONE', 'NOTE'];
 // The activity-log H2 heading is language-dependent (zh template / en template).
@@ -100,7 +100,7 @@ function pairEntries(entries) {
 function countHumanDecisionsByStage(rows) {
     const counts = new Map();
     for (const row of rows) {
-        if (!isReviewStage(row.stage) || !HUMAN_DECISION_STATUSES.has(row.status))
+        if (!isReviewStage(row.stage) || row.status !== 'needs-human-decision')
             continue;
         counts.set(row.stage, (counts.get(row.stage) ?? 0) + 1);
     }

package/dist/lib/task/commands/ls.js

@@ -1,9 +1,9 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
-import { formatTable } from "../../table.js";
-import { parseTaskFrontmatter, extractTitle } from "../frontmatter.js";
-import { loadShortIdByTaskId } from "../short-id.js";
+import { formatTable } from '../../table.js';
+import { parseTaskFrontmatter, extractTitle } from '../frontmatter.js';
+import { loadShortIdByTaskId } from '../short-id.js';
 const USAGE = `Usage: ai task ls [--all | --blocked | --completed]
 
 Lists tasks under .agents/workspace/. Defaults to active tasks only.

package/dist/lib/task/commands/show.js

@@ -1,5 +1,5 @@
 import fs from 'node:fs';
-import { resolveTaskRef } from "../resolve-ref.js";
+import { resolveTaskRef } from '../resolve-ref.js';
 const USAGE = `Usage: ai task show <N | #N | TASK-id>
 
 Prints the task.md content for the matching task.

package/dist/lib/task/commands/status.js

@@ -1,12 +1,14 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
-import { commandForEngine } from "../../sandbox/shell.js";
-import { resolveTaskRef } from "../resolve-ref.js";
-import { enumerateArtifacts } from "../artifacts.js";
-import { parseTaskFrontmatter, extractTitle } from "../frontmatter.js";
-import { loadShortIdByTaskId } from "../short-id.js";
-import { parseActivityLog, pairEntries } from "./log.js";
+import { commandForEngine } from '../../sandbox/shell.js';
+import { resolveTaskRef } from '../resolve-ref.js';
+import { enumerateArtifacts } from '../artifacts.js';
+import { parseTaskFrontmatter, extractTitle } from '../frontmatter.js';
+import { loadShortIdByTaskId } from '../short-id.js';
+import { getOpenWorkflowWarnings, formatWorkflowWarningSummary } from '../workflow-warnings.js';
+import { parseActivityLog, pairEntries } from './log.js';
+import { statusCard } from '../../server/display.js';
 const USAGE = `Usage: ai task status <N | #N | TASK-id>
 
 Prints an aggregated "health check" view for a task: header, metadata,
@@ -267,6 +269,9 @@ function renderStatus(model) {
     if (model.title)
         lines.push(model.title);
     lines.push('', 'Metadata', ...renderPairs(model.metadata));
+    if (model.workflowWarnings.length > 0) {
+        lines.push('', `Workflow Warnings (${model.workflowWarnings.length} open)`, ...formatWorkflowWarningSummary(model.workflowWarnings).map((line) => `  ${line}`));
+    }
     lines.push('', `Artifacts (${model.artifacts.count})`);
     if (model.artifacts.groups.length === 0) {
         lines.push('  (none)');
@@ -302,6 +307,59 @@ function renderStatus(model) {
     ]));
     return lines;
 }
+function modelTone(model) {
+    if (model.workflow.state === 'in-progress')
+        return model.workflow.stale === 'yes' ? 'warning' : 'running';
+    if (model.metadata.some(([key, value]) => key === 'status' && value === 'completed'))
+        return 'success';
+    if (model.metadata.some(([key, value]) => key === 'status' && (value === 'blocked' || value === 'cancelled'))) {
+        return 'danger';
+    }
+    return 'info';
+}
+function buildFromResolved(input) {
+    const content = fs.readFileSync(input.taskMdPath, 'utf8');
+    const fm = parseTaskFrontmatter(content);
+    const run = input.run ?? makeRunner(input.repoRoot);
+    const artifacts = enumerateArtifacts(input.taskDir);
+    const workflow = collectWorkflow(content, input.now);
+    return {
+        taskId: input.taskId,
+        shortId: input.shortId ?? loadShortIdByTaskId(input.repoRoot).get(input.taskId) ?? DASH,
+        title: extractTitle(content),
+        metadata: collectMetadata(fm),
+        workflowWarnings: getOpenWorkflowWarnings(content),
+        artifacts: { count: artifacts.length, groups: groupArtifacts(artifacts) },
+        workflow,
+        runtime: collectRuntime(input.taskDir, workflow, run),
+        git: collectGit(fm.branch ?? '', run)
+    };
+}
+function buildStatusModel(refOrInput, options = {}) {
+    if (typeof refOrInput !== 'string') {
+        return buildFromResolved(refOrInput);
+    }
+    const resolved = resolveTaskRef(refOrInput);
+    if (!resolved.ok) {
+        throw new Error(resolved.message);
+    }
+    return buildFromResolved({
+        taskId: resolved.taskId,
+        taskDir: resolved.taskDir,
+        taskMdPath: resolved.taskMdPath,
+        repoRoot: resolved.repoRoot,
+        run: options.run,
+        now: options.now
+    });
+}
+function statusModelToDisplay(model) {
+    return statusCard(`Task ${model.taskId} (${model.shortId})`, modelTone(model), [
+        ['workflow', model.workflow.state],
+        ['step', model.workflow.step],
+        ['runtime', model.runtime.status],
+        ['git', model.git.uncommitted]
+    ], renderStatus(model).join('\n'));
+}
 function status(args = []) {
     if (args.length === 0 || args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
@@ -309,30 +367,18 @@ function status(args = []) {
             process.exitCode = 1;
         return;
     }
-    const resolved = resolveTaskRef(args[0]);
-    if (!resolved.ok) {
-        process.stderr.write(`ai task status: ${resolved.message}\n`);
+    let model;
+    try {
+        model = buildStatusModel(args[0]);
+    }
+    catch (error) {
+        process.stderr.write(`ai task status: ${error instanceof Error ? error.message : String(error)}\n`);
         process.exitCode = 1;
         return;
     }
-    const content = fs.readFileSync(resolved.taskMdPath, 'utf8');
-    const fm = parseTaskFrontmatter(content);
-    const run = makeRunner(resolved.repoRoot);
-    const artifacts = enumerateArtifacts(resolved.taskDir);
-    const workflow = collectWorkflow(content);
-    const model = {
-        taskId: resolved.taskId,
-        shortId: loadShortIdByTaskId(resolved.repoRoot).get(resolved.taskId) ?? DASH,
-        title: extractTitle(content),
-        metadata: collectMetadata(fm),
-        artifacts: { count: artifacts.length, groups: groupArtifacts(artifacts) },
-        workflow,
-        runtime: collectRuntime(resolved.taskDir, workflow, run),
-        git: collectGit(fm.branch ?? '', run)
-    };
     for (const line of renderStatus(model)) {
         process.stdout.write(`${line}\n`);
     }
 }
-export { status, makeRunner, collectMetadata, groupArtifacts, collectGit, collectWorkflow, collectRuntime, renderStatus, METADATA_KEYS };
+export { status, makeRunner, buildStatusModel, collectMetadata, groupArtifacts, collectGit, collectWorkflow, collectRuntime, renderStatus, statusModelToDisplay, METADATA_KEYS };
 //# sourceMappingURL=status.js.map

package/dist/lib/task/index.js

@@ -41,48 +41,48 @@ export async function runTask(args) {
     }
     switch (subcommand) {
         case 'cat': {
-            const { cat } = await import("./commands/cat.js");
+            const { cat } = await import('./commands/cat.js');
             cat(rest);
             break;
         }
         case 'decisions':
         case 'd': {
-            const { decisions } = await import("./commands/decisions.js");
+            const { decisions } = await import('./commands/decisions.js');
             decisions(rest);
             break;
         }
         case 'files': {
-            const { files } = await import("./commands/files.js");
+            const { files } = await import('./commands/files.js');
             files(rest);
             break;
         }
         case 'grep': {
-            const { grep } = await import("./commands/grep.js");
+            const { grep } = await import('./commands/grep.js');
             grep(rest);
             break;
         }
         case 'issue-body': {
-            const { issueBody } = await import("./commands/issue-body.js");
+            const { issueBody } = await import('./commands/issue-body.js');
             issueBody(rest);
             break;
         }
         case 'log': {
-            const { log } = await import("./commands/log.js");
+            const { log } = await import('./commands/log.js');
             log(rest);
             break;
         }
         case 'ls': {
-            const { ls } = await import("./commands/ls.js");
+            const { ls } = await import('./commands/ls.js');
             ls(rest);
             break;
         }
         case 'show': {
-            const { show } = await import("./commands/show.js");
+            const { show } = await import('./commands/show.js');
             show(rest);
             break;
         }
         case 'status': {
-            const { status } = await import("./commands/status.js");
+            const { status } = await import('./commands/status.js');
             status(rest);
             break;
         }

package/dist/lib/task/resolve-ref.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync, spawnSync } from 'node:child_process';
-import { normalizeShortIdInput } from "./short-id.js";
+import { normalizeShortIdInput } from './short-id.js';
 const TASK_ID_RE = /^TASK-\d{8}-\d{6}$/;
 // Flat-structured workspace dirs that hold tasks under `{dir}/{taskId}/task.md`.
 // Note: `archive` uses a three-level YYYY/MM/DD layout and is handled separately.

package/dist/lib/task/workflow-warnings.js

@@ -0,0 +1,94 @@
+import { extractSection } from './sections.js';
+const WORKFLOW_WARNING_HEADINGS = ['工作流告警', 'Workflow Warnings'];
+const WORKFLOW_WARNING_STATUSES = new Set(['open', 'resolved', 'ignored']);
+const WORKFLOW_WARNING_SEVERITIES = new Set(['IMPORTANT', 'ACTION_REQUIRED']);
+function splitTableRow(line) {
+    let value = line.trim();
+    if (!value.startsWith('|'))
+        return [];
+    value = value.replace(/^\|/, '').replace(/\|$/, '');
+    const cells = [];
+    let cell = '';
+    for (let index = 0; index < value.length; index += 1) {
+        const char = value[index];
+        if (char === '|' && !isEscapedAt(value, index)) {
+            cells.push(unescapeTableCell(cell.trim()));
+            cell = '';
+            continue;
+        }
+        cell += char;
+    }
+    cells.push(unescapeTableCell(cell.trim()));
+    return cells;
+}
+function unescapeTableCell(value) {
+    let output = '';
+    for (let index = 0; index < value.length; index += 1) {
+        const char = value[index];
+        const next = value[index + 1];
+        if (char === '\\' && (next === '\\' || next === '|')) {
+            output += next;
+            index += 1;
+            continue;
+        }
+        output += char;
+    }
+    return output;
+}
+function isEscapedAt(value, index) {
+    let backslashes = 0;
+    for (let cursor = index - 1; cursor >= 0 && value[cursor] === '\\'; cursor -= 1) {
+        backslashes += 1;
+    }
+    return backslashes % 2 === 1;
+}
+function isSeparatorRow(cells) {
+    return cells.length > 0 && cells.every((cell) => /^:?-{3,}:?$/.test(cell));
+}
+/**
+ * Parses well-formed workflow warning rows. Malformed rows are intentionally
+ * ignored here; validate-artifact is responsible for reporting structure errors.
+ */
+function parseWorkflowWarnings(content) {
+    const section = extractSection(content, WORKFLOW_WARNING_HEADINGS);
+    if (!section)
+        return [];
+    const rows = [];
+    for (const rawLine of section.split(/\r?\n/)) {
+        const cells = splitTableRow(rawLine);
+        if (cells.length === 0)
+            continue;
+        if ((cells[0] ?? '').toLowerCase() === 'id')
+            continue;
+        if (isSeparatorRow(cells))
+            continue;
+        if (cells.length < 11)
+            continue;
+        rows.push({
+            id: cells[0] ?? '',
+            time: cells[1] ?? '',
+            step: cells[2] ?? '',
+            severity: cells[3] ?? '',
+            code: cells[4] ?? '',
+            status: cells[5] ?? '',
+            target: cells[6] ?? '',
+            message: cells[7] ?? '',
+            action: cells[8] ?? '',
+            resolvedAt: cells[9] ?? '',
+            resolution: cells[10] ?? ''
+        });
+    }
+    return rows;
+}
+function getOpenWorkflowWarnings(content) {
+    return parseWorkflowWarnings(content).filter((warning) => warning.status === 'open');
+}
+function formatWorkflowWarningSummary(warnings) {
+    return warnings.map((warning) => {
+        const target = warning.target ? ` ${warning.target}` : '';
+        const action = warning.action ? ` - ${warning.action}` : '';
+        return `${warning.id} [${warning.severity}] ${warning.code}${target}${action}`;
+    });
+}
+export { WORKFLOW_WARNING_HEADINGS, WORKFLOW_WARNING_STATUSES, WORKFLOW_WARNING_SEVERITIES, parseWorkflowWarnings, getOpenWorkflowWarnings, formatWorkflowWarningSummary };
+//# sourceMappingURL=workflow-warnings.js.map

package/dist/lib/update.js

@@ -1,12 +1,15 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { info, ok, err } from "./log.js";
-import { resolveTemplateDir } from "./paths.js";
-import { renderFile, copySkillDir, KNOWN_PLATFORMS } from "./render.js";
-import { isPathOwnedByDisabledTUI, resolveEnabledTUIs } from "./builtin-tuis.js";
+import { info, ok, err } from './log.js';
+import { resolveTemplateDir } from './paths.js';
+import { renderFile, copySkillDir, KNOWN_PLATFORMS } from './render.js';
+import { isPathOwnedByDisabledTUI, resolveEnabledTUIs } from './builtin-tuis.js';
 const defaults = JSON.parse(fs.readFileSync(new URL('./defaults.json', import.meta.url), 'utf8'));
 const CONFIG_DIR = '.agents';
 const CONFIG_PATH = path.join(CONFIG_DIR, '.airc.json');
+const AGENT_INFRA_SANDBOX_TOOL = 'agent-infra';
+const LEGACY_DEFAULT_SANDBOX_TOOLS = ['claude-code', 'codex', 'gemini-cli', 'opencode'];
+const DEFAULT_SANDBOX_TOOLS = [AGENT_INFRA_SANDBOX_TOOL, ...LEGACY_DEFAULT_SANDBOX_TOOLS];
 // One-time migration of the legacy project-level PR switch to the three-state
 // `prFlow` preference. `true` (the old default / "PR flow on") maps to the
 // strong constraint `required`; `false` maps to `disabled`. A missing or
@@ -25,6 +28,24 @@ function migratePrFlow(config) {
     }
     return null;
 }
+function isLegacyDefaultSandboxTools(value) {
+    if (!Array.isArray(value) || value.length !== LEGACY_DEFAULT_SANDBOX_TOOLS.length) {
+        return false;
+    }
+    const tools = new Set(value);
+    return LEGACY_DEFAULT_SANDBOX_TOOLS.every((tool) => tools.has(tool));
+}
+function migrateSandboxTools(config) {
+    const tools = config.sandbox?.tools;
+    if (!isLegacyDefaultSandboxTools(tools)) {
+        return false;
+    }
+    config.sandbox = {
+        ...config.sandbox,
+        tools: [...DEFAULT_SANDBOX_TOOLS]
+    };
+    return true;
+}
 function isPathOwnedByOtherPlatform(relativePath, platformType) {
     const top = String(relativePath || '').replace(/\\/g, '/').replace(/^\.\//, '').split('/')[0] ?? '';
     if (!top.startsWith('.'))
@@ -153,6 +174,7 @@ async function cmdUpdate() {
     const taskAdded = !config.task;
     const labelsAdded = !config.labels;
     const prFlowMigrated = migratePrFlow(config);
+    const sandboxToolsMigrated = !sandboxAdded && migrateSandboxTools(config);
     let configChanged = changed;
     if (platformAdded) {
         config.platform = structuredClone(defaults.platform);
@@ -173,6 +195,9 @@ async function cmdUpdate() {
     if (prFlowMigrated) {
         configChanged = true;
     }
+    if (sandboxToolsMigrated) {
+        configChanged = true;
+    }
     if (configChanged) {
         console.log('');
         if (hasNewEntries) {
@@ -200,6 +225,9 @@ async function cmdUpdate() {
             if (prFlowMigrated) {
                 info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
             }
+            if (sandboxToolsMigrated) {
+                info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+            }
         }
         else {
             info(`File registry changed in ${CONFIG_PATH}.`);
@@ -219,6 +247,9 @@ async function cmdUpdate() {
         if (hasNewEntries && prFlowMigrated) {
             info(`Migrated legacy requiresPullRequest to prFlow="${prFlowMigrated}" in ${CONFIG_PATH}.`);
         }
+        if (hasNewEntries && sandboxToolsMigrated) {
+            info(`Migrated default sandbox.tools to include ${AGENT_INFRA_SANDBOX_TOOL} in ${CONFIG_PATH}.`);
+        }
         fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', 'utf8');
         ok(`Updated ${CONFIG_PATH}`);
     }

package/lib/defaults.json

@@ -8,11 +8,13 @@
       "node22"
     ],
     "tools": [
+      "agent-infra",
       "claude-code",
       "codex",
       "gemini-cli",
       "opencode"
     ],
+    "refreshIntervalDays": 7,
     "dockerfile": null,
     "vm": {
       "cpu": null,