@fitlab-ai/agent-infra 0.9.3 → 0.9.5

package/README.md

@@ -91,6 +91,7 @@ Every command above works the same way in Claude Code, Codex, Antigravity CLI, a
 - **Bilingual project docs**: English-first docs with synchronized Chinese translations
 - **Template-source architecture**: `templates/` mirrors the rendered project structure
 - **AI-assisted updates**: template changes can be merged while preserving project-specific customization
+- **Auditable process-data archive**: preserve local tasks and GitHub evidence in append-only, verifiable snapshots
 
 ## Quick Start
 
@@ -175,7 +176,7 @@ The most-used lifecycle commands, in delivery order. The command prefix varies b
 | Command | Purpose |
 |---------|---------|
 | `create-task` / `import-issue` | Start a task from a description or a GitHub Issue |
-| `run-task` | Resume the lifecycle with fresh isolated executors/reviewers when the selected client exposes verified actual model/effort evidence; current built-in clients, including Claude Code and Codex, fail closed before delegation because their native start events do not expose all required evidence |
+| `run-task` | Resume the lifecycle with fresh isolated executors/reviewers when the selected client exposes verified actual model/effort evidence; Codex now has an experimental Hooks + App Server evidence channel, but orchestration remains disabled until that channel is connected to delegation receipts |
 | `analyze-task` → `review-analysis` | Capture scope and risks, then review the analysis |
 | `plan-task` → `review-plan` | Design the approach, then review the plan |
 | `code-task` → `review-code` | Implement and test, then run a structured code review |
@@ -206,6 +207,7 @@ my-project/
 
 In-depth guides live under [`docs/en/`](./docs/en/README.md):
 
+- [Process Data Archive](./docs/en/process-data.md) — capture, verify, audit, repair, export, privacy, and backup guidance
 - [Architecture Overview](./docs/en/architecture.md) — bootstrap CLI, end-to-end flow, layered architecture
 - [Platform Support](./docs/en/platform-support.md) — macOS, Linux, Windows; sandbox engines and resources
 - [Sandbox](./docs/en/sandbox.md) — sandbox aliases, host-sandbox file exchange, user-level dotfiles channel

package/README.zh-CN.md

@@ -90,6 +90,7 @@ agent-infra 的目标就是把这层共享基础设施标准化。它为所有
 - **双语文档**：英文为主文档，配套同步的中文版本
 - **模板源架构**：`templates/` 目录镜像最终渲染出的项目结构
 - **AI 辅助升级**：模板升级时可合并变更，同时尽量保留项目侧定制
+- **可审计的过程数据归档**：把本地任务与 GitHub 证据保存为只追加、可校验的快照
 
 ## 快速开始
 
@@ -174,7 +175,7 @@ ai agent-client configure
 | 命令 | 用途 |
 |------|------|
 | `create-task` / `import-issue` | 从描述或 GitHub Issue 创建任务 |
-| `run-task` | 当所选客户端能提供已验证的 actual model/effort 证据时，用 fresh 隔离 executor/reviewer 续跑生命周期；当前内建客户端（含 Claude Code 与 Codex）因原生 start 事件未暴露全部必需证据，会在委派前失败关闭 |
+| `run-task` | 当所选客户端能提供已验证的 actual model/effort 证据时，用 fresh 隔离 executor/reviewer 续跑生命周期；Codex 现已具备实验性的 Hooks + App Server 证据通道，但在该通道接入 delegation receipt 前仍不会启用 orchestration |
 | `analyze-task` → `review-analysis` | 明确范围与风险，再审查分析 |
 | `plan-task` → `review-plan` | 设计实现路径，再审查方案 |
 | `code-task` → `review-code` | 实现并测试，再执行结构化代码审查 |
@@ -205,6 +206,7 @@ my-project/
 
 深度指南位于 [`docs/zh-CN/`](./docs/zh-CN/README.md)：
 
+- [过程数据归档](./docs/zh-CN/process-data.md) — 采集、校验、审计、修复、导出、隐私与备份指南
 - [架构概览](./docs/zh-CN/architecture.md) — 引导 CLI、端到端流程、分层架构
 - [平台支持](./docs/zh-CN/platform-support.md) — macOS、Linux、Windows；沙箱引擎与资源配置
 - [沙箱](./docs/zh-CN/sandbox.md) — 沙箱 aliases、宿主-沙箱文件交换、用户级 dotfiles 通道

package/bin/cli.ts

@@ -17,6 +17,7 @@ Usage: ai <command> [options]
 Commands:
   agent-client    List, inspect, enable, disable, or configure Agent Clients
   cp <ssh-alias>  Copy local clipboard image to a remote macOS clipboard or Linux sandbox over SSH
+  data            Capture, verify, audit, repair, and export process data
   decide          Record a ruling; code-stage decisions require explicit implementation intent
   help            Show this help message
   init            Initialize a new project with update-agent-infra seed command
@@ -94,6 +95,17 @@ switch (command) {
     if (code) process.exitCode = code;
     break;
   }
+  case 'data': {
+    const imported = await importCommand('../lib/process-data/index.ts');
+    if (!imported) break;
+    const { cmdData } = imported;
+    const code = await cmdData(process.argv.slice(3)).catch((e: unknown) => {
+      process.stderr.write(`Error: ${errorMessage(e)}\n`);
+      return 1;
+    });
+    if (code) process.exitCode = code;
+    break;
+  }
   case 'decide': {
     const imported = await importCommand('../lib/decide.ts');
     if (!imported) break;

package/dist/bin/cli.js

@@ -21,6 +21,7 @@ Usage: ai <command> [options]
 Commands:
   agent-client    List, inspect, enable, disable, or configure Agent Clients
   cp <ssh-alias>  Copy local clipboard image to a remote macOS clipboard or Linux sandbox over SSH
+  data            Capture, verify, audit, repair, and export process data
   decide          Record a ruling; code-stage decisions require explicit implementation intent
   help            Show this help message
   init            Initialize a new project with update-agent-infra seed command
@@ -96,6 +97,19 @@ switch (command) {
             process.exitCode = code;
         break;
     }
+    case 'data': {
+        const imported = await importCommand('../lib/process-data/index.ts');
+        if (!imported)
+            break;
+        const { cmdData } = imported;
+        const code = await cmdData(process.argv.slice(3)).catch((e) => {
+            process.stderr.write(`Error: ${errorMessage(e)}\n`);
+            return 1;
+        });
+        if (code)
+            process.exitCode = code;
+        break;
+    }
     case 'decide': {
         const imported = await importCommand('../lib/decide.ts');
         if (!imported)

package/dist/bin/internal-cli.js

@@ -5,129 +5,150 @@ if (major < 22 || (major === 22 && minor < 9)) {
     process.exit(1);
 }
 const command = process.argv[2] || '';
-switch (command) {
-    case 'agent-client': {
-        const { agentClient } = await import('../lib/internal/agent-client.js');
-        agentClient(process.argv.slice(3));
-        break;
-    }
-    case 'git-workflow': {
-        const { gitWorkflow } = await import('../lib/internal/git-workflow.js');
-        gitWorkflow(process.argv.slice(3));
-        break;
-    }
-    case 'release-workflow': {
-        const { releaseWorkflow } = await import('../lib/internal/release-workflow.js');
-        await releaseWorkflow(process.argv.slice(3));
-        break;
-    }
-    case 'platform-release-notes': {
-        const { platformReleaseNotes } = await import('../lib/internal/platform-release-notes.js');
-        platformReleaseNotes(process.argv.slice(3));
-        break;
-    }
-    case 'platform-context': {
-        const { platformContext } = await import('../lib/internal/platform-context.js');
-        platformContext(process.argv.slice(3));
-        break;
-    }
-    case 'platform-comment': {
-        const { platformComment } = await import('../lib/internal/platform-comment.js');
-        platformComment(process.argv.slice(3));
-        break;
-    }
-    case 'platform-issue': {
-        const { platformIssue } = await import('../lib/internal/platform-issue.js');
-        platformIssue(process.argv.slice(3));
-        break;
-    }
-    case 'platform-pr': {
-        const { platformPr } = await import('../lib/internal/platform-pr.js');
-        platformPr(process.argv.slice(3));
-        break;
-    }
-    case 'platform-pr-review': {
-        const { platformPrReview } = await import('../lib/internal/platform-pr-review.js');
-        platformPrReview(process.argv.slice(3));
-        break;
-    }
-    case 'pr-review-grade': {
-        const { prReviewGrade } = await import('../lib/internal/pr-review-grade.js');
-        prReviewGrade(process.argv.slice(3));
-        break;
-    }
-    case 'platform-checks': {
-        const { platformChecks } = await import('../lib/internal/platform-checks.js');
-        await platformChecks(process.argv.slice(3));
-        break;
-    }
-    case 'task-context': {
-        const { taskContext } = await import('../lib/internal/task-context.js');
-        taskContext(process.argv.slice(3));
-        break;
-    }
-    case 'task-ledger': {
-        const { taskLedger } = await import('../lib/internal/task-ledger.js');
-        taskLedger(process.argv.slice(3));
-        break;
-    }
-    case 'task-warning': {
-        const { taskWarning } = await import('../lib/internal/task-warning.js');
-        taskWarning(process.argv.slice(3));
-        break;
-    }
-    case 'task-activity': {
-        const { taskActivity } = await import('../lib/internal/task-activity.js');
-        taskActivity(process.argv.slice(3));
-        break;
-    }
-    case 'task-artifact': {
-        const { taskArtifact } = await import('../lib/internal/task-artifact.js');
-        taskArtifact(process.argv.slice(3));
-        break;
-    }
-    case 'task-orchestration': {
-        const { taskOrchestration } = await import('../lib/internal/task-orchestration.js');
-        taskOrchestration(process.argv.slice(3));
-        break;
-    }
-    case 'task-review': {
-        const { taskReview } = await import('../lib/internal/task-review.js');
-        taskReview(process.argv.slice(3));
-        break;
-    }
-    case 'task-event': {
-        const { taskEvent } = await import('../lib/internal/task-event.js');
-        taskEvent(process.argv.slice(3));
-        break;
-    }
-    case 'task-lifecycle': {
-        const { taskLifecycle } = await import('../lib/internal/task-lifecycle.js');
-        taskLifecycle(process.argv.slice(3));
-        break;
-    }
-    case 'task-short-id': {
-        const { taskShortId } = await import('../lib/internal/task-short-id.js');
-        taskShortId(process.argv.slice(3));
-        break;
-    }
-    case 'task-snapshot': {
-        const { taskSnapshot } = await import('../lib/internal/task-snapshot.js');
-        taskSnapshot(process.argv.slice(3));
-        break;
-    }
-    case 'task-verify': {
-        const { taskVerify } = await import('../lib/internal/task-verify.js');
-        taskVerify(process.argv.slice(3));
-        break;
-    }
-    default:
-        process.stdout.write(`${JSON.stringify({
-            status: 'failed',
-            changed: false,
-            error: { code: 'INTERNAL_COMMAND_INVALID', message: `unknown internal command '${command}'` }
-        })}\n`);
-        process.exitCode = 1;
+if (process.env.AGENT_INFRA_CONTROL_TOKEN
+    && (command === 'task-lifecycle' || command === 'task-orchestration')) {
+    const { sandboxControl } = await import('../lib/internal/sandbox-control.js');
+    sandboxControl(['client', command, ...process.argv.slice(3)]);
 }
+else
+    switch (command) {
+        case 'task-create': {
+            const { taskCreate } = await import('../lib/internal/task-create.js');
+            taskCreate(process.argv.slice(3));
+            break;
+        }
+        case 'sandbox-control': {
+            const { sandboxControl } = await import('../lib/internal/sandbox-control.js');
+            sandboxControl(process.argv.slice(3));
+            break;
+        }
+        case 'agent-client': {
+            const { agentClient } = await import('../lib/internal/agent-client.js');
+            agentClient(process.argv.slice(3));
+            break;
+        }
+        case 'codex-lifecycle': {
+            const { codexLifecycle } = await import('../lib/internal/codex-lifecycle.js');
+            await codexLifecycle(process.argv.slice(3));
+            break;
+        }
+        case 'git-workflow': {
+            const { gitWorkflow } = await import('../lib/internal/git-workflow.js');
+            gitWorkflow(process.argv.slice(3));
+            break;
+        }
+        case 'release-workflow': {
+            const { releaseWorkflow } = await import('../lib/internal/release-workflow.js');
+            await releaseWorkflow(process.argv.slice(3));
+            break;
+        }
+        case 'platform-release-notes': {
+            const { platformReleaseNotes } = await import('../lib/internal/platform-release-notes.js');
+            platformReleaseNotes(process.argv.slice(3));
+            break;
+        }
+        case 'platform-context': {
+            const { platformContext } = await import('../lib/internal/platform-context.js');
+            platformContext(process.argv.slice(3));
+            break;
+        }
+        case 'platform-comment': {
+            const { platformComment } = await import('../lib/internal/platform-comment.js');
+            platformComment(process.argv.slice(3));
+            break;
+        }
+        case 'platform-issue': {
+            const { platformIssue } = await import('../lib/internal/platform-issue.js');
+            platformIssue(process.argv.slice(3));
+            break;
+        }
+        case 'platform-pr': {
+            const { platformPr } = await import('../lib/internal/platform-pr.js');
+            platformPr(process.argv.slice(3));
+            break;
+        }
+        case 'platform-pr-review': {
+            const { platformPrReview } = await import('../lib/internal/platform-pr-review.js');
+            platformPrReview(process.argv.slice(3));
+            break;
+        }
+        case 'pr-review-grade': {
+            const { prReviewGrade } = await import('../lib/internal/pr-review-grade.js');
+            prReviewGrade(process.argv.slice(3));
+            break;
+        }
+        case 'platform-checks': {
+            const { platformChecks } = await import('../lib/internal/platform-checks.js');
+            await platformChecks(process.argv.slice(3));
+            break;
+        }
+        case 'task-context': {
+            const { taskContext } = await import('../lib/internal/task-context.js');
+            taskContext(process.argv.slice(3));
+            break;
+        }
+        case 'task-ledger': {
+            const { taskLedger } = await import('../lib/internal/task-ledger.js');
+            taskLedger(process.argv.slice(3));
+            break;
+        }
+        case 'task-warning': {
+            const { taskWarning } = await import('../lib/internal/task-warning.js');
+            taskWarning(process.argv.slice(3));
+            break;
+        }
+        case 'task-activity': {
+            const { taskActivity } = await import('../lib/internal/task-activity.js');
+            taskActivity(process.argv.slice(3));
+            break;
+        }
+        case 'task-artifact': {
+            const { taskArtifact } = await import('../lib/internal/task-artifact.js');
+            taskArtifact(process.argv.slice(3));
+            break;
+        }
+        case 'task-orchestration': {
+            const { taskOrchestration } = await import('../lib/internal/task-orchestration.js');
+            taskOrchestration(process.argv.slice(3));
+            break;
+        }
+        case 'task-review': {
+            const { taskReview } = await import('../lib/internal/task-review.js');
+            taskReview(process.argv.slice(3));
+            break;
+        }
+        case 'task-event': {
+            const { taskEvent } = await import('../lib/internal/task-event.js');
+            taskEvent(process.argv.slice(3));
+            break;
+        }
+        case 'task-lifecycle': {
+            const { taskLifecycle } = await import('../lib/internal/task-lifecycle.js');
+            taskLifecycle(process.argv.slice(3));
+            break;
+        }
+        case 'task-short-id': {
+            const { taskShortId } = await import('../lib/internal/task-short-id.js');
+            taskShortId(process.argv.slice(3));
+            break;
+        }
+        case 'task-snapshot': {
+            const { taskSnapshot } = await import('../lib/internal/task-snapshot.js');
+            taskSnapshot(process.argv.slice(3));
+            break;
+        }
+        case 'task-verify': {
+            const { taskVerify } = await import('../lib/internal/task-verify.js');
+            taskVerify(process.argv.slice(3));
+            break;
+        }
+        default:
+            process.stdout.write(`${JSON.stringify({
+                status: 'failed',
+                changed: false,
+                error: { code: 'INTERNAL_COMMAND_INVALID', message: `unknown internal command '${command}'` }
+            })}\n`);
+            process.exitCode = 1;
+    }
 export {};
 //# sourceMappingURL=internal-cli.js.map

package/dist/lib/agent-clients/adapter.js

@@ -3,6 +3,43 @@ import { SANDBOX_HOOK_PHASES } from '../sandbox/tool-types.js';
 const PROJECT_ASSET_CATEGORIES = ['managed', 'merged', 'ejected'];
 const MAX_SANDBOX_HOOK_TIMEOUT_MS = 300_000;
 const TOOL_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+function freezeSandboxImageDescriptor(id, value) {
+    if (value === undefined)
+        return undefined;
+    const keys = value && typeof value === 'object' && !Array.isArray(value)
+        ? Object.keys(value)
+        : [];
+    const fragment = value?.dockerfileFragment;
+    const exclusions = value?.dotfilesExclusions;
+    const validExclusion = (entry) => {
+        if (typeof entry !== 'string'
+            || entry === ''
+            || entry.startsWith('/')
+            || entry.endsWith('/')
+            || entry.includes('\\')
+            || /[*?[\]]/.test(entry)) {
+            return false;
+        }
+        return entry.split('/').every((segment) => segment !== '' && segment !== '.' && segment !== '..');
+    };
+    if (!value
+        || typeof value !== 'object'
+        || Array.isArray(value)
+        || keys.length === 0
+        || keys.some((key) => !['dockerfileFragment', 'dotfilesExclusions'].includes(key))
+        || (fragment !== undefined && (typeof fragment !== 'string' || !TOOL_ID_PATTERN.test(fragment)))
+        || (exclusions !== undefined && (!Array.isArray(exclusions)
+            || exclusions.some((entry) => !validExclusion(entry))
+            || new Set(exclusions).size !== exclusions.length))) {
+        throw new Error(`Agent Client '${id}' has an invalid sandbox image descriptor`);
+    }
+    return Object.freeze({
+        ...(fragment === undefined ? {} : { dockerfileFragment: fragment }),
+        ...(exclusions === undefined
+            ? {}
+            : { dotfilesExclusions: Object.freeze([...exclusions]) })
+    });
+}
 function freezeRecoveryProbe(id, checkId, value) {
     if (!value
         || typeof value.script !== 'string'
@@ -153,8 +190,8 @@ function defineAgentClientAdapter(candidate) {
     }
     const evidence = candidate.delegationEvidence;
     if (!evidence
-        || !['host-event', 'unavailable'].includes(evidence.actualModel)
-        || !['host-event', 'spawn-ack', 'unavailable'].includes(evidence.actualReasoningEffort)) {
+        || !['host-event', 'app-server', 'unavailable'].includes(evidence.actualModel)
+        || !['host-event', 'app-server', 'spawn-ack', 'unavailable'].includes(evidence.actualReasoningEffort)) {
         throw new Error(`Agent Client '${candidate.id}' has invalid delegation evidence`);
     }
     if (typeof candidate.project !== 'object'
@@ -236,9 +273,55 @@ function defineAgentClientAdapter(candidate) {
             target: seed.target
         });
     });
+    let customCommand;
+    if (candidate.project.customCommand !== undefined) {
+        const descriptor = candidate.project.customCommand;
+        const placeholders = typeof descriptor?.target === 'string'
+            ? [...descriptor.target.matchAll(/\$\{([^}]+)\}/g)].map((match) => match[1])
+            : [];
+        const targetProbe = typeof descriptor?.target === 'string'
+            ? descriptor.target.replaceAll('${skillName}', 'skill')
+            : '';
+        const frontmatter = descriptor?.frontmatter;
+        if (!descriptor
+            || typeof descriptor !== 'object'
+            || placeholders.length !== 1
+            || placeholders[0] !== 'skillName'
+            || targetProbe.includes('${')
+            || !isProjectRelativeLiteral(targetProbe)
+            || !paths.some((prefix) => targetProbe.startsWith(prefix))
+            || !frontmatter
+            || typeof frontmatter !== 'object'
+            || Array.isArray(frontmatter)
+            || Object.values(frontmatter).some((value) => typeof value !== 'string' && typeof value !== 'boolean')
+            || (descriptor.argumentsToken !== undefined
+                && (typeof descriptor.argumentsToken !== 'string'
+                    || descriptor.argumentsToken === ''
+                    || /[\r\n]/.test(descriptor.argumentsToken)))
+            || (descriptor.includeUsage !== undefined
+                && typeof descriptor.includeUsage !== 'boolean')
+            || (descriptor.inheritDisableModelInvocation !== undefined
+                && typeof descriptor.inheritDisableModelInvocation !== 'boolean')) {
+            throw new Error(`Agent Client '${candidate.id}' has an invalid custom command`);
+        }
+        customCommand = Object.freeze({
+            target: descriptor.target,
+            frontmatter: Object.freeze({ ...frontmatter }),
+            ...(descriptor.argumentsToken === undefined
+                ? {}
+                : { argumentsToken: descriptor.argumentsToken }),
+            ...(descriptor.includeUsage === undefined
+                ? {}
+                : { includeUsage: descriptor.includeUsage }),
+            ...(descriptor.inheritDisableModelInvocation === undefined
+                ? {}
+                : { inheritDisableModelInvocation: descriptor.inheritDisableModelInvocation })
+        });
+    }
     if (!candidate.sandbox || typeof candidate.sandbox.createTool !== 'function') {
         throw new Error(`Agent Client '${candidate.id}' requires a sandbox descriptor`);
     }
+    const image = freezeSandboxImageDescriptor(candidate.id, candidate.sandbox.image);
     const hookIds = new Set();
     const hooks = Object.freeze(candidate.sandbox.hooks.map((hook) => {
         if (!hook.id
@@ -328,9 +411,16 @@ function defineAgentClientAdapter(candidate) {
         project: Object.freeze({
             ownedPathPrefixes: Object.freeze(paths),
             ...projectAssets,
-            seedCommands: Object.freeze(seedCommands)
+            seedCommands: Object.freeze(seedCommands),
+            ...(customCommand === undefined ? {} : { customCommand })
         }),
-        sandbox: Object.freeze({ createTool, aliases, hooks, recoveryChecks })
+        sandbox: Object.freeze({
+            createTool,
+            aliases,
+            hooks,
+            recoveryChecks,
+            ...(image === undefined ? {} : { image })
+        })
     });
 }
 export { defineAgentClientAdapter };

package/dist/lib/{sandbox/credentials.js → agent-clients/adapters/claude-code-credentials.js}

@@ -2,15 +2,10 @@ import { execFileSync } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
-import { hostJoin } from './engines/wsl2-paths.js';
+import { hostJoin } from '../../sandbox/engines/wsl2-paths.js';
+import { redactCommandError } from '../../sandbox/redaction.js';
 const LOCKED_PATTERN = /errSecInteractionNotAllowed|User interaction is not allowed/i;
 const NOT_FOUND_PATTERN = /errSecItemNotFound|specified item could not be found/i;
-const REDACTION_PATTERNS = [
-    { pattern: /\{[^{}]*"claudeAiOauth"[\s\S]*?\}\s*\}/g, replacement: '[REDACTED credentials blob]' },
-    { pattern: /sk-ant-[A-Za-z0-9_-]{20,}/g, replacement: '[REDACTED claude token]' },
-    { pattern: /gh[psoru]_[A-Za-z0-9]{30,}/g, replacement: '[REDACTED github token]' },
-    { pattern: /Bearer\s+[A-Za-z0-9._~+/=-]{20,}/gi, replacement: 'Bearer [REDACTED]' }
-];
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -20,13 +15,8 @@ function hasNonEmptyString(value) {
 function errorMessage(error) {
     return error instanceof Error ? error.message : 'unknown error';
 }
-export function redactCommandError(text) {
-    if (!text || typeof text !== 'string') {
-        return '';
-    }
-    return REDACTION_PATTERNS.reduce((result, { pattern, replacement }) => result.replace(pattern, replacement), text);
-}
 export const redactSecurityOutput = redactCommandError;
+export { redactCommandError };
 function extractStderrSafely(error) {
     const stderr = typeof error === 'object' && error !== null && 'stderr' in error
         ? error.stderr
@@ -492,4 +482,4 @@ export function prepareClaudeCredentials(home, project, resolvedTools, extractFn
     writeFn(home, project, blob);
     return { status: 'OK' };
 }
-//# sourceMappingURL=credentials.js.map
+//# sourceMappingURL=claude-code-credentials.js.map

package/dist/lib/agent-clients/adapters/claude-code-refresh.js

@@ -0,0 +1,85 @@
+import { homedir } from 'node:os';
+import { parseArgs } from 'node:util';
+import { buildLockedGuidance, discoverProjects, formatCredentialWarnings, formatRemaining, reconcileClaudeCredentials, redactCommandError, validateClaudeCredentialsEnvOverride } from './claude-code-credentials.js';
+import { runProbe } from '../../sandbox/shell.js';
+const USAGE = 'Usage: ai sandbox refresh';
+export function probeClaudeStatus(spawnFn = runProbe) {
+    const result = spawnFn('claude', ['/status'], {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 30_000
+    });
+    return {
+        ok: result.status === 0,
+        stderr: result.stderr?.toString() ?? '',
+        error: result.error?.message ?? null
+    };
+}
+export async function runClaudeCodeRefresh(args, deps = {}) {
+    const { spawnFn = runProbe, execFn, readFn, existsFn, writeFn, writeHostFn, discoverFn = discoverProjects, writeStdout = (chunk) => process.stdout.write(chunk), writeStderr = (chunk) => process.stderr.write(chunk) } = deps;
+    if (args[0] === '--help' || args[0] === '-h' || args[0] === 'help') {
+        writeStdout(`${USAGE}\n`);
+        return 0;
+    }
+    const { positionals } = parseArgs({ args, allowPositionals: true, strict: true });
+    if (positionals.length > 0) {
+        throw new Error(USAGE);
+    }
+    validateClaudeCredentialsEnvOverride();
+    const home = homedir();
+    if (!home) {
+        throw new Error('sandbox: home directory is required');
+    }
+    const projects = discoverFn(home);
+    if (projects.length === 0) {
+        writeStdout('No project credentials to refresh.\n');
+        return 0;
+    }
+    const reconcileOptions = { execFn, readFn, existsFn, writeFn, writeHostFn, projects };
+    let result = reconcileClaudeCredentials(home, reconcileOptions);
+    if (result.status === 'STALE_ACCESS' && result.authoritative === null) {
+        writeStdout('Host credentials appear stale; probing claude /status to trigger refresh...\n');
+        const probe = probeClaudeStatus(spawnFn);
+        if (!probe.ok) {
+            writeStderr(`Probe failed: ${redactCommandError(probe.stderr || probe.error || 'unknown error')}\n`);
+            writeStderr('Run "claude /login" on the host to renew credentials.\n');
+            return 1;
+        }
+        writeStdout('Probe succeeded; re-inspecting host credentials.\n');
+        result = reconcileClaudeCredentials(home, reconcileOptions);
+    }
+    if (result.status === 'MISSING') {
+        writeStderr('No Claude Code credentials found on host.\n');
+        writeStderr('Run "claude /login" on the host to authenticate.\n');
+        return 1;
+    }
+    if (result.status === 'KEYCHAIN_LOCKED') {
+        writeStderr(`${buildLockedGuidance()}\n`);
+        return 1;
+    }
+    if (result.status === 'KEYCHAIN_ERROR') {
+        writeStderr(`Host keychain error: ${redactCommandError(result.detail || 'unknown error')}\n`);
+        writeStderr(`${buildLockedGuidance()}\n`);
+        return 1;
+    }
+    if (result.status === 'KEYCHAIN_WRITE_FAILED') {
+        writeStderr(`[host] keychain write failed: ${formatCredentialWarnings(result.warnings) || 'unknown error'}\n`);
+        return 1;
+    }
+    if (result.status !== 'OK') {
+        writeStderr('Host credentials still invalid after probe; run "claude /login".\n');
+        return 1;
+    }
+    if (result.authoritative && result.authoritative !== 'host' && result.hostWritten) {
+        writeStdout(`[host] reconciled from ${result.authoritative}\n`);
+    }
+    for (const project of projects) {
+        const action = result.filesWritten.includes(project) ? 'updated' : 'unchanged';
+        writeStdout(`[${project}] ${action}; expires in ${formatRemaining(result.expiresAt)}\n`);
+    }
+    for (const failure of result.fileErrors) {
+        writeStderr(`[${failure.project}] sync failed: ${failure.error}\n`);
+    }
+    return result.fileErrors.length > 0 ? 1 : 0;
+}
+//# sourceMappingURL=claude-code-refresh.js.map