@fitlab-ai/agent-infra 0.9.2 → 0.9.4

package/README.md

@@ -5,7 +5,7 @@
 <h1 align="center">Agent Infra</h1>
 
 <p align="center">
-  Collaboration infrastructure for AI coding agents — skills, workflows, and sandboxes for Claude Code, Codex, Gemini CLI, and OpenCode.
+  Collaboration infrastructure for AI coding agents — skills, workflows, and sandboxes for Claude Code, Codex, Antigravity CLI, and OpenCode.
 </p>
 
 <p align="center">
@@ -28,7 +28,7 @@
 
 ## Why agent-infra?
 
-Teams increasingly mix Claude Code, Codex, Gemini CLI, OpenCode, and other AI TUIs in the same repository, but each tool tends to introduce its own commands, prompts, and local conventions. Without a shared layer, the result is fragmented workflows, duplicated setup, and task history that is difficult to audit.
+Teams increasingly mix Claude Code, Codex, Antigravity CLI, OpenCode, and other AI TUIs in the same repository, but each tool tends to introduce its own commands, prompts, and local conventions. Without a shared layer, the result is fragmented workflows, duplicated setup, and task history that is difficult to audit.
 
 agent-infra standardizes that shared infrastructure. It gives every supported AI TUI the same task lifecycle, the same skill vocabulary, the same project governance files, isolated development sandboxes, and the same upgrade path, so teams can switch tools without rebuilding process from scratch.
 
@@ -81,16 +81,17 @@ Just fix it at the application layer in LoginService.
 
 **11 commands. 1 natural-language correction. From issue to merged PR.** That is the entire SOP — programming can have a standard operating procedure too.
 
-Every command above works the same way in Claude Code, Codex, Gemini CLI, and OpenCode. Switch tools mid-task — the workflow state follows. For what each skill does under the hood, see [Built-in AI Skills](./docs/en/skills.md).
+Every command above works the same way in Claude Code, Codex, Antigravity CLI, and OpenCode. Switch tools mid-task — the workflow state follows. For what each skill does under the hood, see [Built-in AI Skills](./docs/en/skills.md).
 
 ## Key Features
 
-- **Multi-AI collaboration**: one shared operating model for Claude Code, Codex, Gemini CLI, and OpenCode
+- **Multi-AI collaboration**: one shared operating model for Claude Code, Codex, Antigravity CLI, and OpenCode
 - **Bootstrap CLI + skill-driven execution**: initialize once, then let AI skills drive day-to-day work
 - **IM command bridge**: route Feishu messages to built-ins, read-only task views, sandbox management, and controlled lifecycle skill runs
 - **Bilingual project docs**: English-first docs with synchronized Chinese translations
 - **Template-source architecture**: `templates/` mirrors the rendered project structure
 - **AI-assisted updates**: template changes can be merged while preserving project-specific customization
+- **Auditable process-data archive**: preserve local tasks and GitHub evidence in append-only, verifiable snapshots
 
 ## Quick Start
 
@@ -153,7 +154,7 @@ Open the project in any AI TUI and run `update-agent-infra`:
 |-----|---------|
 | Claude Code | `/update-agent-infra` |
 | Codex | `$update-agent-infra` |
-| Gemini CLI | `/{{project}}:update-agent-infra` |
+| Antigravity CLI | `/update-agent-infra` |
 | OpenCode | `/update-agent-infra` |
 
 This detects the packaged template version and renders all managed files. The same command is used both for first-time setup and for future template upgrades.
@@ -166,21 +167,23 @@ Manage the four built-in Agent Clients independently from the project lifecycle:
 ai agent-client list
 ai agent-client status
 ai agent-client enable codex
-ai agent-client disable gemini-cli
+ai agent-client disable antigravity-cli
 ai agent-client configure
 ```
 
-The most-used lifecycle commands, in delivery order. The command prefix varies by TUI (`/skill` in Claude Code/OpenCode, `$skill` in Codex, `/{{project}}:skill` in Gemini CLI); the workflow semantics stay the same.
+The most-used lifecycle commands, in delivery order. The command prefix varies by TUI (`/skill` in Claude Code/Antigravity/OpenCode and `$skill` in Codex); the workflow semantics stay the same.
 
 | Command | Purpose |
 |---------|---------|
 | `create-task` / `import-issue` | Start a task from a description or a GitHub Issue |
-| `run-task` | Resume and orchestrate the lifecycle in Claude Code with fresh isolated executors/reviewers until a safe commit or stable pause; Codex currently fails closed because its multi-agent runtime does not expose the required lifecycle events |
+| `run-task` | Resume the lifecycle with fresh isolated executors/reviewers when the selected client exposes verified actual model/effort evidence; current built-in clients, including Claude Code and Codex, fail closed before delegation because their native start events do not expose all required evidence |
 | `analyze-task` → `review-analysis` | Capture scope and risks, then review the analysis |
 | `plan-task` → `review-plan` | Design the approach, then review the plan |
 | `code-task` → `review-code` | Implement and test, then run a structured code review |
 | `commit` → `create-pr` → `complete-task` | Commit, open a PR, and archive the task |
 
+Start with one atomic role policy, for example: `$run-task 42 --executor-model <id> --executor-reasoning-effort <value> --reviewer-model <id> --reviewer-reasoning-effort <value>`. Both roles may use the same model. With no explicit policy, `run-task` reads the current Agent Client's optional `agentClients[].orchestration`; if neither source is complete, it shows the host model-selection guidance before creating any run. Re-entry uses the persisted v2 policy.
+
 See the full catalog — task status, release, security, and project-maintenance skills — in [Built-in AI Skills](./docs/en/skills.md).
 
 ## What You Get
@@ -196,7 +199,6 @@ my-project/
 │   ├── workflows/         # 4 prebuilt workflows
 │   └── templates/         # Task and artifact templates
 ├── .claude/               # Claude Code config and commands
-├── .gemini/               # Gemini CLI config and commands
 ├── .opencode/             # OpenCode config and commands
 └── AGENTS.md              # Universal AI agent instructions
 ```
@@ -205,6 +207,7 @@ my-project/
 
 In-depth guides live under [`docs/en/`](./docs/en/README.md):
 
+- [Process Data Archive](./docs/en/process-data.md) — capture, verify, audit, repair, export, privacy, and backup guidance
 - [Architecture Overview](./docs/en/architecture.md) — bootstrap CLI, end-to-end flow, layered architecture
 - [Platform Support](./docs/en/platform-support.md) — macOS, Linux, Windows; sandbox engines and resources
 - [Sandbox](./docs/en/sandbox.md) — sandbox aliases, host-sandbox file exchange, user-level dotfiles channel

package/README.zh-CN.md

@@ -5,7 +5,7 @@
 <h1 align="center">Agent Infra</h1>
 
 <p align="center">
-  AI 编程代理的协作基础设施 —— 为 Claude Code、Codex、Gemini CLI、OpenCode 提供 skills、工作流和沙箱。
+  AI 编程代理的协作基础设施 —— 为 Claude Code、Codex、Antigravity CLI、OpenCode 提供 skills、工作流和沙箱。
 </p>
 
 <p align="center">
@@ -28,7 +28,7 @@
 
 ## 为什么需要 agent-infra？
 
-越来越多的团队会在同一个仓库里混用 Claude Code、Codex、Gemini CLI、OpenCode 等 AI TUI，但每个工具往往都会带来自己的命令体系、提示词习惯和本地约定。缺少共享层时，结果通常是工作流割裂、初始化重复、任务历史难以追踪。
+越来越多的团队会在同一个仓库里混用 Claude Code、Codex、Antigravity CLI、OpenCode 等 AI TUI，但每个工具往往都会带来自己的命令体系、提示词习惯和本地约定。缺少共享层时，结果通常是工作流割裂、初始化重复、任务历史难以追踪。
 
 agent-infra 的目标就是把这层共享基础设施标准化。它为所有支持的 AI TUI 提供统一的任务生命周期、统一的 skill 词汇、统一的项目治理文件、隔离的开发沙箱以及统一的升级路径，让团队切换工具时不必重新发明流程。
 
@@ -80,16 +80,17 @@ agent-infra 的目标就是把这层共享基础设施标准化。它为所有
 
 **11 条命令，1 次自然语言纠正，从 Issue 到合并 PR。** 这就是完整的 SOP —— 编程也可以有标准作业流程。
 
-以上每条命令在 Claude Code、Codex、Gemini CLI、OpenCode 中完全通用。任务进行到一半切换工具，工作流状态照常延续。每个 skill 背后做了什么，见 [内置 AI Skills](./docs/zh-CN/skills.md)。
+以上每条命令在 Claude Code、Codex、Antigravity CLI、OpenCode 中完全通用。任务进行到一半切换工具，工作流状态照常延续。每个 skill 背后做了什么，见 [内置 AI Skills](./docs/zh-CN/skills.md)。
 
 ## 核心特性
 
-- **多 AI 协作**：为 Claude Code、Codex、Gemini CLI、OpenCode 提供统一的协作模型
+- **多 AI 协作**：为 Claude Code、Codex、Antigravity CLI、OpenCode 提供统一的协作模型
 - **引导 CLI + skill 驱动执行**：初始化一次，后续日常操作交给 AI skills
 - **IM 命令桥接**：把飞书消息路由到内置命令、任务只读视图、沙箱管理和受控生命周期 skill 执行
 - **双语文档**：英文为主文档，配套同步的中文版本
 - **模板源架构**：`templates/` 目录镜像最终渲染出的项目结构
 - **AI 辅助升级**：模板升级时可合并变更，同时尽量保留项目侧定制
+- **可审计的过程数据归档**：把本地任务与 GitHub 证据保存为只追加、可校验的快照
 
 ## 快速开始
 
@@ -152,7 +153,7 @@ CLI 会收集项目元数据，让你选择启用的 Agent Client，为其安装
 |-----|------|
 | Claude Code | `/update-agent-infra` |
 | Codex | `$update-agent-infra` |
-| Gemini CLI | `/{{project}}:update-agent-infra` |
+| Antigravity CLI | `/update-agent-infra` |
 | OpenCode | `/update-agent-infra` |
 
 该命令会检测当前打包模板版本并渲染所有受管理文件。首次安装和后续升级都使用同一条命令。
@@ -165,21 +166,23 @@ CLI 会收集项目元数据，让你选择启用的 Agent Client，为其安装
 ai agent-client list
 ai agent-client status
 ai agent-client enable codex
-ai agent-client disable gemini-cli
+ai agent-client disable antigravity-cli
 ai agent-client configure
 ```
 
-最常用的生命周期命令，按交付顺序排列。命令前缀因 TUI 而异（Claude Code/OpenCode 用 `/skill`，Codex 用 `$skill`，Gemini CLI 用 `/{{project}}:skill`），工作流语义保持一致。
+最常用的生命周期命令，按交付顺序排列。命令前缀因 TUI 而异（Claude Code/Antigravity/OpenCode 用 `/skill`，Codex 用 `$skill`），工作流语义保持一致。
 
 | 命令 | 用途 |
 |------|------|
 | `create-task` / `import-issue` | 从描述或 GitHub Issue 创建任务 |
-| `run-task` | 在 Claude Code 中从当前状态续跑生命周期，用 fresh 隔离 executor/reviewer 推进到安全提交或稳定暂停；Codex 当前因多代理运行时未暴露所需生命周期事件而失败关闭 |
+| `run-task` | 当所选客户端能提供已验证的 actual model/effort 证据时，用 fresh 隔离 executor/reviewer 续跑生命周期；当前内建客户端（含 Claude Code 与 Codex）因原生 start 事件未暴露全部必需证据，会在委派前失败关闭 |
 | `analyze-task` → `review-analysis` | 明确范围与风险，再审查分析 |
 | `plan-task` → `review-plan` | 设计实现路径，再审查方案 |
 | `code-task` → `review-code` | 实现并测试，再执行结构化代码审查 |
 | `commit` → `create-pr` → `complete-task` | 提交、创建 PR、归档任务 |
 
+启动时可提供原子角色策略，例如：`$run-task 42 --executor-model <id> --executor-reasoning-effort <值> --reviewer-model <id> --reviewer-reasoning-effort <值>`。两个角色可以使用同一模型。完全没有显式策略时，`run-task` 读取当前 Agent Client 可选的 `agentClients[].orchestration`；两个来源都不完整时，会在创建任何 run 前展示宿主模型选择指引。重入使用已持久化的 v2 策略。
+
 完整清单（任务状态、发布、安全、项目维护等 skill）见 [内置 AI Skills](./docs/zh-CN/skills.md)。
 
 ## 安装效果
@@ -195,7 +198,6 @@ my-project/
 │   ├── workflows/         # 4 个预置工作流
 │   └── templates/         # 任务与产物模板
 ├── .claude/               # Claude Code 配置与命令
-├── .gemini/               # Gemini CLI 配置与命令
 ├── .opencode/             # OpenCode 配置与命令
 └── AGENTS.md              # 通用 AI agent 指令
 ```
@@ -204,6 +206,7 @@ my-project/
 
 深度指南位于 [`docs/zh-CN/`](./docs/zh-CN/README.md)：
 
+- [过程数据归档](./docs/zh-CN/process-data.md) — 采集、校验、审计、修复、导出、隐私与备份指南
 - [架构概览](./docs/zh-CN/architecture.md) — 引导 CLI、端到端流程、分层架构
 - [平台支持](./docs/zh-CN/platform-support.md) — macOS、Linux、Windows；沙箱引擎与资源配置
 - [沙箱](./docs/zh-CN/sandbox.md) — 沙箱 aliases、宿主-沙箱文件交换、用户级 dotfiles 通道

package/bin/cli.ts

@@ -17,6 +17,7 @@ Usage: ai <command> [options]
 Commands:
   agent-client    List, inspect, enable, disable, or configure Agent Clients
   cp <ssh-alias>  Copy local clipboard image to a remote macOS clipboard or Linux sandbox over SSH
+  data            Capture, verify, audit, repair, and export process data
   decide          Record a ruling; code-stage decisions require explicit implementation intent
   help            Show this help message
   init            Initialize a new project with update-agent-infra seed command
@@ -94,6 +95,17 @@ switch (command) {
     if (code) process.exitCode = code;
     break;
   }
+  case 'data': {
+    const imported = await importCommand('../lib/process-data/index.ts');
+    if (!imported) break;
+    const { cmdData } = imported;
+    const code = await cmdData(process.argv.slice(3)).catch((e: unknown) => {
+      process.stderr.write(`Error: ${errorMessage(e)}\n`);
+      return 1;
+    });
+    if (code) process.exitCode = code;
+    break;
+  }
   case 'decide': {
     const imported = await importCommand('../lib/decide.ts');
     if (!imported) break;

package/dist/bin/cli.js

@@ -21,6 +21,7 @@ Usage: ai <command> [options]
 Commands:
   agent-client    List, inspect, enable, disable, or configure Agent Clients
   cp <ssh-alias>  Copy local clipboard image to a remote macOS clipboard or Linux sandbox over SSH
+  data            Capture, verify, audit, repair, and export process data
   decide          Record a ruling; code-stage decisions require explicit implementation intent
   help            Show this help message
   init            Initialize a new project with update-agent-infra seed command
@@ -96,6 +97,19 @@ switch (command) {
             process.exitCode = code;
         break;
     }
+    case 'data': {
+        const imported = await importCommand('../lib/process-data/index.ts');
+        if (!imported)
+            break;
+        const { cmdData } = imported;
+        const code = await cmdData(process.argv.slice(3)).catch((e) => {
+            process.stderr.write(`Error: ${errorMessage(e)}\n`);
+            return 1;
+        });
+        if (code)
+            process.exitCode = code;
+        break;
+    }
     case 'decide': {
         const imported = await importCommand('../lib/decide.ts');
         if (!imported)

package/dist/bin/internal-cli.js

@@ -5,114 +5,140 @@ if (major < 22 || (major === 22 && minor < 9)) {
     process.exit(1);
 }
 const command = process.argv[2] || '';
-switch (command) {
-    case 'agent-client': {
-        const { agentClient } = await import('../lib/internal/agent-client.js');
-        agentClient(process.argv.slice(3));
-        break;
-    }
-    case 'git-workflow': {
-        const { gitWorkflow } = await import('../lib/internal/git-workflow.js');
-        gitWorkflow(process.argv.slice(3));
-        break;
-    }
-    case 'release-workflow': {
-        const { releaseWorkflow } = await import('../lib/internal/release-workflow.js');
-        await releaseWorkflow(process.argv.slice(3));
-        break;
-    }
-    case 'platform-release-notes': {
-        const { platformReleaseNotes } = await import('../lib/internal/platform-release-notes.js');
-        platformReleaseNotes(process.argv.slice(3));
-        break;
-    }
-    case 'platform-context': {
-        const { platformContext } = await import('../lib/internal/platform-context.js');
-        platformContext(process.argv.slice(3));
-        break;
-    }
-    case 'platform-comment': {
-        const { platformComment } = await import('../lib/internal/platform-comment.js');
-        platformComment(process.argv.slice(3));
-        break;
-    }
-    case 'platform-issue': {
-        const { platformIssue } = await import('../lib/internal/platform-issue.js');
-        platformIssue(process.argv.slice(3));
-        break;
-    }
-    case 'platform-pr': {
-        const { platformPr } = await import('../lib/internal/platform-pr.js');
-        platformPr(process.argv.slice(3));
-        break;
-    }
-    case 'platform-checks': {
-        const { platformChecks } = await import('../lib/internal/platform-checks.js');
-        await platformChecks(process.argv.slice(3));
-        break;
-    }
-    case 'task-context': {
-        const { taskContext } = await import('../lib/internal/task-context.js');
-        taskContext(process.argv.slice(3));
-        break;
-    }
-    case 'task-ledger': {
-        const { taskLedger } = await import('../lib/internal/task-ledger.js');
-        taskLedger(process.argv.slice(3));
-        break;
-    }
-    case 'task-warning': {
-        const { taskWarning } = await import('../lib/internal/task-warning.js');
-        taskWarning(process.argv.slice(3));
-        break;
-    }
-    case 'task-artifact': {
-        const { taskArtifact } = await import('../lib/internal/task-artifact.js');
-        taskArtifact(process.argv.slice(3));
-        break;
-    }
-    case 'task-orchestration': {
-        const { taskOrchestration } = await import('../lib/internal/task-orchestration.js');
-        taskOrchestration(process.argv.slice(3));
-        break;
-    }
-    case 'task-review': {
-        const { taskReview } = await import('../lib/internal/task-review.js');
-        taskReview(process.argv.slice(3));
-        break;
-    }
-    case 'task-event': {
-        const { taskEvent } = await import('../lib/internal/task-event.js');
-        taskEvent(process.argv.slice(3));
-        break;
-    }
-    case 'task-lifecycle': {
-        const { taskLifecycle } = await import('../lib/internal/task-lifecycle.js');
-        taskLifecycle(process.argv.slice(3));
-        break;
-    }
-    case 'task-short-id': {
-        const { taskShortId } = await import('../lib/internal/task-short-id.js');
-        taskShortId(process.argv.slice(3));
-        break;
-    }
-    case 'task-snapshot': {
-        const { taskSnapshot } = await import('../lib/internal/task-snapshot.js');
-        taskSnapshot(process.argv.slice(3));
-        break;
-    }
-    case 'task-verify': {
-        const { taskVerify } = await import('../lib/internal/task-verify.js');
-        taskVerify(process.argv.slice(3));
-        break;
-    }
-    default:
-        process.stdout.write(`${JSON.stringify({
-            status: 'failed',
-            changed: false,
-            error: { code: 'INTERNAL_COMMAND_INVALID', message: `unknown internal command '${command}'` }
-        })}\n`);
-        process.exitCode = 1;
+if (process.env.AGENT_INFRA_CONTROL_TOKEN
+    && (command === 'task-lifecycle' || command === 'task-orchestration')) {
+    const { sandboxControl } = await import('../lib/internal/sandbox-control.js');
+    sandboxControl(['client', command, ...process.argv.slice(3)]);
 }
+else
+    switch (command) {
+        case 'sandbox-control': {
+            const { sandboxControl } = await import('../lib/internal/sandbox-control.js');
+            sandboxControl(process.argv.slice(3));
+            break;
+        }
+        case 'agent-client': {
+            const { agentClient } = await import('../lib/internal/agent-client.js');
+            agentClient(process.argv.slice(3));
+            break;
+        }
+        case 'git-workflow': {
+            const { gitWorkflow } = await import('../lib/internal/git-workflow.js');
+            gitWorkflow(process.argv.slice(3));
+            break;
+        }
+        case 'release-workflow': {
+            const { releaseWorkflow } = await import('../lib/internal/release-workflow.js');
+            await releaseWorkflow(process.argv.slice(3));
+            break;
+        }
+        case 'platform-release-notes': {
+            const { platformReleaseNotes } = await import('../lib/internal/platform-release-notes.js');
+            platformReleaseNotes(process.argv.slice(3));
+            break;
+        }
+        case 'platform-context': {
+            const { platformContext } = await import('../lib/internal/platform-context.js');
+            platformContext(process.argv.slice(3));
+            break;
+        }
+        case 'platform-comment': {
+            const { platformComment } = await import('../lib/internal/platform-comment.js');
+            platformComment(process.argv.slice(3));
+            break;
+        }
+        case 'platform-issue': {
+            const { platformIssue } = await import('../lib/internal/platform-issue.js');
+            platformIssue(process.argv.slice(3));
+            break;
+        }
+        case 'platform-pr': {
+            const { platformPr } = await import('../lib/internal/platform-pr.js');
+            platformPr(process.argv.slice(3));
+            break;
+        }
+        case 'platform-pr-review': {
+            const { platformPrReview } = await import('../lib/internal/platform-pr-review.js');
+            platformPrReview(process.argv.slice(3));
+            break;
+        }
+        case 'pr-review-grade': {
+            const { prReviewGrade } = await import('../lib/internal/pr-review-grade.js');
+            prReviewGrade(process.argv.slice(3));
+            break;
+        }
+        case 'platform-checks': {
+            const { platformChecks } = await import('../lib/internal/platform-checks.js');
+            await platformChecks(process.argv.slice(3));
+            break;
+        }
+        case 'task-context': {
+            const { taskContext } = await import('../lib/internal/task-context.js');
+            taskContext(process.argv.slice(3));
+            break;
+        }
+        case 'task-ledger': {
+            const { taskLedger } = await import('../lib/internal/task-ledger.js');
+            taskLedger(process.argv.slice(3));
+            break;
+        }
+        case 'task-warning': {
+            const { taskWarning } = await import('../lib/internal/task-warning.js');
+            taskWarning(process.argv.slice(3));
+            break;
+        }
+        case 'task-activity': {
+            const { taskActivity } = await import('../lib/internal/task-activity.js');
+            taskActivity(process.argv.slice(3));
+            break;
+        }
+        case 'task-artifact': {
+            const { taskArtifact } = await import('../lib/internal/task-artifact.js');
+            taskArtifact(process.argv.slice(3));
+            break;
+        }
+        case 'task-orchestration': {
+            const { taskOrchestration } = await import('../lib/internal/task-orchestration.js');
+            taskOrchestration(process.argv.slice(3));
+            break;
+        }
+        case 'task-review': {
+            const { taskReview } = await import('../lib/internal/task-review.js');
+            taskReview(process.argv.slice(3));
+            break;
+        }
+        case 'task-event': {
+            const { taskEvent } = await import('../lib/internal/task-event.js');
+            taskEvent(process.argv.slice(3));
+            break;
+        }
+        case 'task-lifecycle': {
+            const { taskLifecycle } = await import('../lib/internal/task-lifecycle.js');
+            taskLifecycle(process.argv.slice(3));
+            break;
+        }
+        case 'task-short-id': {
+            const { taskShortId } = await import('../lib/internal/task-short-id.js');
+            taskShortId(process.argv.slice(3));
+            break;
+        }
+        case 'task-snapshot': {
+            const { taskSnapshot } = await import('../lib/internal/task-snapshot.js');
+            taskSnapshot(process.argv.slice(3));
+            break;
+        }
+        case 'task-verify': {
+            const { taskVerify } = await import('../lib/internal/task-verify.js');
+            taskVerify(process.argv.slice(3));
+            break;
+        }
+        default:
+            process.stdout.write(`${JSON.stringify({
+                status: 'failed',
+                changed: false,
+                error: { code: 'INTERNAL_COMMAND_INVALID', message: `unknown internal command '${command}'` }
+            })}\n`);
+            process.exitCode = 1;
+    }
 export {};
 //# sourceMappingURL=internal-cli.js.map

package/dist/lib/agent-clients/adapter.js

@@ -3,6 +3,43 @@ import { SANDBOX_HOOK_PHASES } from '../sandbox/tool-types.js';
 const PROJECT_ASSET_CATEGORIES = ['managed', 'merged', 'ejected'];
 const MAX_SANDBOX_HOOK_TIMEOUT_MS = 300_000;
 const TOOL_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+function freezeSandboxImageDescriptor(id, value) {
+    if (value === undefined)
+        return undefined;
+    const keys = value && typeof value === 'object' && !Array.isArray(value)
+        ? Object.keys(value)
+        : [];
+    const fragment = value?.dockerfileFragment;
+    const exclusions = value?.dotfilesExclusions;
+    const validExclusion = (entry) => {
+        if (typeof entry !== 'string'
+            || entry === ''
+            || entry.startsWith('/')
+            || entry.endsWith('/')
+            || entry.includes('\\')
+            || /[*?[\]]/.test(entry)) {
+            return false;
+        }
+        return entry.split('/').every((segment) => segment !== '' && segment !== '.' && segment !== '..');
+    };
+    if (!value
+        || typeof value !== 'object'
+        || Array.isArray(value)
+        || keys.length === 0
+        || keys.some((key) => !['dockerfileFragment', 'dotfilesExclusions'].includes(key))
+        || (fragment !== undefined && (typeof fragment !== 'string' || !TOOL_ID_PATTERN.test(fragment)))
+        || (exclusions !== undefined && (!Array.isArray(exclusions)
+            || exclusions.some((entry) => !validExclusion(entry))
+            || new Set(exclusions).size !== exclusions.length))) {
+        throw new Error(`Agent Client '${id}' has an invalid sandbox image descriptor`);
+    }
+    return Object.freeze({
+        ...(fragment === undefined ? {} : { dockerfileFragment: fragment }),
+        ...(exclusions === undefined
+            ? {}
+            : { dotfilesExclusions: Object.freeze([...exclusions]) })
+    });
+}
 function freezeRecoveryProbe(id, checkId, value) {
     if (!value
         || typeof value.script !== 'string'
@@ -116,14 +153,55 @@ function defineAgentClientAdapter(candidate) {
         }
         return [capability, Object.freeze({ level: support.level })];
     }));
+    const modelSelection = candidate.modelSelection;
+    if (!modelSelection || typeof modelSelection !== 'object') {
+        throw new Error(`Agent Client '${candidate.id}' has an invalid model-selection context`);
+    }
+    let frozenModelSelection;
+    if (modelSelection.kind === 'interactive-only') {
+        if (!modelSelection.command?.trim() || !modelSelection.guidance?.trim()) {
+            throw new Error(`Agent Client '${candidate.id}' has an invalid model-selection context`);
+        }
+        frozenModelSelection = Object.freeze({ ...modelSelection });
+    }
+    else if (modelSelection.kind === 'catalog'
+        && ['complete', 'partial'].includes(modelSelection.completeness)
+        && typeof modelSelection.source === 'string'
+        && modelSelection.source.trim() !== ''
+        && Array.isArray(modelSelection.models)) {
+        const models = modelSelection.models.map((model) => {
+            if (!model?.id?.trim() || (model.reasoningEfforts && !Array.isArray(model.reasoningEfforts))) {
+                throw new Error(`Agent Client '${candidate.id}' has an invalid model-selection context`);
+            }
+            return Object.freeze({
+                id: model.id,
+                ...(model.reasoningEfforts
+                    ? { reasoningEfforts: Object.freeze([...model.reasoningEfforts]) }
+                    : {})
+            });
+        });
+        frozenModelSelection = Object.freeze({
+            ...modelSelection,
+            models: Object.freeze(models)
+        });
+    }
+    else {
+        throw new Error(`Agent Client '${candidate.id}' has an invalid model-selection context`);
+    }
+    const evidence = candidate.delegationEvidence;
+    if (!evidence
+        || !['host-event', 'unavailable'].includes(evidence.actualModel)
+        || !['host-event', 'spawn-ack', 'unavailable'].includes(evidence.actualReasoningEffort)) {
+        throw new Error(`Agent Client '${candidate.id}' has invalid delegation evidence`);
+    }
     if (typeof candidate.project !== 'object'
         || candidate.project === null
         || Array.isArray(candidate.project)) {
         throw new Error(`Agent Client '${candidate.id}' has an invalid project descriptor`);
     }
     const ownedPathPrefixes = candidate.project.ownedPathPrefixes;
-    if (!Array.isArray(ownedPathPrefixes) || ownedPathPrefixes.length === 0) {
-        throw new Error(`Agent Client '${candidate.id}' requires owned path prefixes`);
+    if (!Array.isArray(ownedPathPrefixes)) {
+        throw new Error(`Agent Client '${candidate.id}' has invalid owned path prefixes`);
     }
     const paths = ownedPathPrefixes.map((prefix) => {
         if (typeof prefix !== 'string'
@@ -195,9 +273,55 @@ function defineAgentClientAdapter(candidate) {
             target: seed.target
         });
     });
+    let customCommand;
+    if (candidate.project.customCommand !== undefined) {
+        const descriptor = candidate.project.customCommand;
+        const placeholders = typeof descriptor?.target === 'string'
+            ? [...descriptor.target.matchAll(/\$\{([^}]+)\}/g)].map((match) => match[1])
+            : [];
+        const targetProbe = typeof descriptor?.target === 'string'
+            ? descriptor.target.replaceAll('${skillName}', 'skill')
+            : '';
+        const frontmatter = descriptor?.frontmatter;
+        if (!descriptor
+            || typeof descriptor !== 'object'
+            || placeholders.length !== 1
+            || placeholders[0] !== 'skillName'
+            || targetProbe.includes('${')
+            || !isProjectRelativeLiteral(targetProbe)
+            || !paths.some((prefix) => targetProbe.startsWith(prefix))
+            || !frontmatter
+            || typeof frontmatter !== 'object'
+            || Array.isArray(frontmatter)
+            || Object.values(frontmatter).some((value) => typeof value !== 'string' && typeof value !== 'boolean')
+            || (descriptor.argumentsToken !== undefined
+                && (typeof descriptor.argumentsToken !== 'string'
+                    || descriptor.argumentsToken === ''
+                    || /[\r\n]/.test(descriptor.argumentsToken)))
+            || (descriptor.includeUsage !== undefined
+                && typeof descriptor.includeUsage !== 'boolean')
+            || (descriptor.inheritDisableModelInvocation !== undefined
+                && typeof descriptor.inheritDisableModelInvocation !== 'boolean')) {
+            throw new Error(`Agent Client '${candidate.id}' has an invalid custom command`);
+        }
+        customCommand = Object.freeze({
+            target: descriptor.target,
+            frontmatter: Object.freeze({ ...frontmatter }),
+            ...(descriptor.argumentsToken === undefined
+                ? {}
+                : { argumentsToken: descriptor.argumentsToken }),
+            ...(descriptor.includeUsage === undefined
+                ? {}
+                : { includeUsage: descriptor.includeUsage }),
+            ...(descriptor.inheritDisableModelInvocation === undefined
+                ? {}
+                : { inheritDisableModelInvocation: descriptor.inheritDisableModelInvocation })
+        });
+    }
     if (!candidate.sandbox || typeof candidate.sandbox.createTool !== 'function') {
         throw new Error(`Agent Client '${candidate.id}' requires a sandbox descriptor`);
     }
+    const image = freezeSandboxImageDescriptor(candidate.id, candidate.sandbox.image);
     const hookIds = new Set();
     const hooks = Object.freeze(candidate.sandbox.hooks.map((hook) => {
         if (!hook.id
@@ -282,12 +406,21 @@ function defineAgentClientAdapter(candidate) {
         displayName: candidate.displayName,
         invocation: candidate.invocation,
         capabilities: Object.freeze(capabilities),
+        modelSelection: frozenModelSelection,
+        delegationEvidence: Object.freeze({ ...evidence }),
         project: Object.freeze({
             ownedPathPrefixes: Object.freeze(paths),
             ...projectAssets,
-            seedCommands: Object.freeze(seedCommands)
+            seedCommands: Object.freeze(seedCommands),
+            ...(customCommand === undefined ? {} : { customCommand })
         }),
-        sandbox: Object.freeze({ createTool, aliases, hooks, recoveryChecks })
+        sandbox: Object.freeze({
+            createTool,
+            aliases,
+            hooks,
+            recoveryChecks,
+            ...(image === undefined ? {} : { image })
+        })
     });
 }
 export { defineAgentClientAdapter };