mkdir -p "$jcode_home" "$runtime_dir"

chmod 700 "$sandbox_root" "$jcode_home" "$runtime_dir"

: > "$marker_file"

chmod 600 "$marker_file"

ensure_dirs

(

cd "$repo_root"

# Strip any inherited self-dev markers so the sandbox behaves like a real

# first-run install. `--no-selfdev` only prevents *setting*

# JCODE_CLIENT_SELFDEV_MODE; it cannot unset one inherited from a parent

# self-dev shell, which would otherwise force every sandbox session canary

# (suppressing the new-session suggestion cards we are trying to verify).

env -u JCODE_CLIENT_SELFDEV_MODE -u JCODE_SELFDEV -u JCODE_CANARY \

JCODE_HOME="$jcode_home" \

JCODE_RUNTIME_DIR="$runtime_dir" \

"$@"

)

cat <<EOF

ensure_dirs

cat <<EOF

ensure_dirs

echo "Sandbox name: $sandbox_name"

echo "Sandbox root: $sandbox_root"

echo "JCODE_HOME: $jcode_home"

echo "RUNTIME_DIR: $runtime_dir"

echo

if [[ -d "$jcode_home" ]]; then

echo "Home contents:"

find "$jcode_home" -maxdepth 3 \( -type f -o -type d \) | sed "s#^$sandbox_root#.#" | sort

fi

if [[ -d "$jcode_home/external" ]]; then

echo

echo "WARNING: this sandbox contains copies of real credentials or transcripts."

echo "Remove them with: $(basename "$0") purge-external"

fi

if [[ ! -e "$sandbox_root" ]]; then

echo "Onboarding sandbox is already absent: $sandbox_root"

return

fi

case "$sandbox_root" in

""|/|"$HOME"|"$repo_root")

echo "Refusing to delete unsafe sandbox path: $sandbox_root" >&2

return 1

;;

esac

if [[ ! -f "$marker_file" && "$sandbox_root" != "$sandbox_root_default" ]]; then

echo "Refusing to delete unmarked custom sandbox: $sandbox_root" >&2

return 1

fi

rm -rf "$sandbox_root"

echo "Removed onboarding sandbox: $sandbox_root"

if [[ -d "$jcode_home/external" ]]; then

rm -rf "$jcode_home/external"

echo "Removed copied external credentials/transcripts: $jcode_home/external"

else

echo "No copied external credentials/transcripts found."

fi

ensure_dirs

echo "Opening sandbox shell"

echo " JCODE_HOME=$jcode_home"

echo " JCODE_RUNTIME_DIR=$runtime_dir"

env JCODE_HOME="$jcode_home" JCODE_RUNTIME_DIR="$runtime_dir" bash --noprofile --norc

# The sandbox should behave like a real standalone install, not a self-dev

# client. Because we launch from inside the repo, jcode would otherwise

# auto-detect the repository and join the shared self-dev server (remote

# mode), which both breaks isolation and skips local-only first-run behavior

# like the new-session model validation. `--no-selfdev` keeps it standalone,

# spawning its own server under the sandbox's JCODE_RUNTIME_DIR. Set

# JCODE_SANDBOX_SELFDEV=1 to opt back into the shared-server behavior.

local prefix=()

if [[ "${JCODE_SANDBOX_SELFDEV:-0}" != "1" ]]; then

prefix=(--no-selfdev)

fi

# Allow pointing the sandbox at an already-built binary (e.g. the selfdev

# profile output) without rebuilding the debug binary. Falls back to the

# debug binary, then to `cargo run`.

if [[ -n "${JCODE_SANDBOX_BIN:-}" ]]; then

if [[ -x "$JCODE_SANDBOX_BIN" ]]; then

run_in_sandbox "$JCODE_SANDBOX_BIN" "${prefix[@]}" "$@"

return

fi

echo "JCODE_SANDBOX_BIN=$JCODE_SANDBOX_BIN is not executable" >&2

return 1

fi

local binary_path="$repo_root/target/debug/jcode"

if [[ -x "$binary_path" ]]; then

run_in_sandbox "$binary_path" "${prefix[@]}" "$@"

else

run_in_sandbox cargo run --bin jcode -- "${prefix[@]}" "$@"

fi

JCODE_ONBOARDING_SANDBOX="$sandbox_name" \

JCODE_ONBOARDING_DIR="$sandbox_root" \

"$repo_root/scripts/auth_fixture.sh" "$@"

local rel=$1

local src="$HOME/$rel"

local dst="$jcode_home/external/$rel"

if [[ ! -e "$src" ]]; then

return 1

fi

mkdir -p "$(dirname "$dst")"

cp -a "$src" "$dst"

chmod -R go-rwx "$jcode_home/external" 2>/dev/null || true

return 0

local rel=$1

local src="$HOME/$rel"

local dst="$jcode_home/external/$rel"

if [[ ! -d "$src" ]]; then

return 1

fi

mkdir -p "$dst"

cp -a "$src/." "$dst/"

chmod -R go-rwx "$jcode_home/external" 2>/dev/null || true

return 0

ensure_dirs

local with_transcripts=0

for arg in "$@"; do

case "$arg" in

--with-transcripts) with_transcripts=1 ;;

--transcripts-only) with_transcripts=2 ;;

*) echo "Unknown seed-real-logins option: $arg" >&2; return 2 ;;

esac

done

# Auth/credential files the external-import detectors read, each relative to

# $HOME (mirrors crate::storage::user_home_path and the per-provider paths).

local auth_files=(

".codex/auth.json"

".claude/.credentials.json"

".claude.json"

".local/share/opencode/auth.json"

".pi/agent/auth.json"

".gemini/oauth_creds.json"

".config/github-copilot/hosts.json"

".config/github-copilot/apps.json"

".cursor/auth.json"

".config/cursor/auth.json"

".config/Cursor/User/globalStorage/state.vscdb"

".config/cursor/User/globalStorage/state.vscdb"

)

# Transcript stores the "continue where you left off" picker reads.

local transcript_dirs=(

".codex/sessions"

".claude/projects"

)

local seeded=()

local skipped=()

if [[ $with_transcripts -ne 2 ]]; then

for rel in "${auth_files[@]}"; do

if seed_one_file "$rel"; then

seeded+=("$rel")

else

skipped+=("$rel")

fi

done

fi

if [[ $with_transcripts -ge 1 ]]; then

for rel in "${transcript_dirs[@]}"; do

if seed_one_dir "$rel"; then

seeded+=("$rel/ (transcripts)")

else

skipped+=("$rel/ (transcripts)")

fi

done

fi

echo "Seeded real logins into sandbox external dir:"

echo " $jcode_home/external"

echo

if [[ ${#seeded[@]} -gt 0 ]]; then

echo "Copied:"

for rel in "${seeded[@]}"; do

echo " + $rel"

done

else

echo "Copied nothing (no matching real files found under \$HOME)."

fi

if [[ ${#skipped[@]} -gt 0 ]]; then

echo

echo "Not present (skipped):"

for rel in "${skipped[@]}"; do

echo " - $rel"

done

fi

echo

echo "These are copies; your real \$HOME files are untouched."

echo "They contain sensitive data and persist until reset or purge-external."

echo "Onboarding will now offer to import them. Start it with:"

echo " $(basename "$0") jcode"

if [[ $# -gt 0 ]]; then

printf '%s' "$1"

else

printf 'onboarding'

fi