@aeolus-fleet/trierarch 0.33.1 → 0.35.0

package/dist/adapters/container.js

@@ -1,11 +1,9 @@
-import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { idSchema } from '@aeolus-fleet/common';
-import { heldCommand } from './held-command.js';
+import { createHoldRuntime } from './hold-runtime.js';
 import { shipHome } from './paths.js';
 import { runCommand } from './run-command.js';
-import { stopTurn } from './stop-turn.js';
 const PREFIX = 'trierarch-';
 const OWNER_LABEL = 'aeolus.trierarch';
 const CONTAINER_OWNER = 'aeolus-trierarch';
@@ -15,30 +13,28 @@ export const MODEL_TOKEN_VARIABLE = 'CLAUDE_CODE_OAUTH_TOKEN';
 export const SESSION_HOME = '/home/ubuntu';
 /** The image's session user (ubuntu), whose subordinate ids the nested Podman maps. */
 const SESSION_USER = 'uid=1000,gid=1000';
-/** The tmux session inside each container: one per container, so one name serves. */
-const TMUX_TARGET = '=session:';
 /**
  * The most processes and threads a container may hold, a hard cap beside
  * memory and cpus (decision 0039): room for Claude Code, a test run with its
  * workers, a browser and a nested Postgres, and none for a runaway fork.
  */
 const PIDS_LIMIT = 4096;
-/** How many lines back a screen is read, as on the host. */
-const SCREEN_LINES = 200;
 /**
- * The container's command: tmux runs the session's command, keeping its pane
- * on exit, as on the host. Once the command ends, it prints the pane and ends,
- * so the container exits and the runtime's log keeps the last screen. The pane
- * starts with the shell and is respawned with the command once remain-on-exit
- * is set, so even a command that ends at once leaves its exit to see.
+ * Where a container reaches the host's loopback, and so the model proxy
+ * (headless H16): the host's address in Podman's slirp4netns network, which
+ * maps it to the host's loopback when the network allows that.
  */
-const SESSION_SCRIPT = `
-tmux new-session -d -s session -x 200 -y 50 || exit 1
-tmux set-option -w -t '${TMUX_TARGET}' remain-on-exit on
-tmux respawn-pane -k -t '${TMUX_TARGET}' -- "$@"
-while [ "$(tmux display-message -p -t '${TMUX_TARGET}' '#{pane_dead}' 2> /dev/null)" = 0 ]; do sleep 1; done
-tmux capture-pane -p -J -S -${String(SCREEN_LINES)} -t '${TMUX_TARGET}'
-`;
+export const MODEL_PROXY_HOST = '10.0.2.2';
+/** The network that lets a session on an API key reach the host's loopback, and nothing more of the host than the network gives any container. */
+const HOST_LOOPBACK_NETWORK = 'slirp4netns:allow_host_loopback=true';
+/** Where a session in a container reaches the model proxy the trierarch reaches at the url, on the host's loopback. */
+export function containerProxyUrl(url) {
+    const at = new URL(url);
+    at.hostname = MODEL_PROXY_HOST;
+    return at.origin;
+}
+/** The env file in the session's own folder, beside its hold's files. */
+const ENV_FILE = 'session.env';
 function containerName(shipId) {
     return `${PREFIX}${shipId}`;
 }
@@ -54,26 +50,32 @@ function envFileOf(env) {
         .join('');
 }
 /**
- * The container session runtime (decision 0039): one container per ship,
- * named after its ship id, with tmux inside, so a line sent is typed and the
- * events read are its screen, each an exec into it; a turn is stopped with
- * Escape, as a person does. Its sessions move to holds in S3 of the headless
- * design. Rootless only, with hard memory and cpu caps and no restart
- * policy: the trierarch starts a dead container again itself. The container
- * sees its folder, its ship's own home, as its home, and its ship's socket
- * folder, at its own path, and nothing else of the host, never the runtime's
- * socket. The home is made, for its owner
- * alone, when the ship has none yet.
+ * The container session runtime (decision 0039, headless H18): one container
+ * per ship, named after its ship id, run by the ship's hold on the host as
+ * `run --rm -i`, attached: the hold holds the harness's input and output
+ * through the runtime, so a line sent, an interrupt and the events are the
+ * hold's, as on the host, and the container lives as long as the hold, a
+ * signal to it reaching the harness through the image's tini. A container an
+ * older trierarch started detached is listed as of another version until its
+ * ship starts again (H19). Rootless only, with hard memory and cpu caps and no
+ * restart policy: the trierarch starts a dead session again itself. The
+ * container sees its folder, its ship's own home, as its home, and its ship's
+ * socket folder, at its own path, and nothing else of the host, never the
+ * runtime's socket. The home is made, for its owner alone, when the ship has
+ * none yet.
  *
  * The model token and the session's environment reach the container through
- * an env file only its owner reads, removed once the container runs, never a
- * command line (#445). Under a systemd unit the run goes through a scope of its
- * own, so the container's monitor is not in the service's control group and a
- * restart or upgrade ends no session (#479, #537).
+ * an env file in the session's own folder, for its owner alone, never a
+ * command line (#445). A session on an API key gets no model token, the
+ * subscription's login: its proxy token, which its hold holds in the
+ * environment it runs the container with, is passed on by its variable's name
+ * alone, and the container reaches the host's loopback, where the model proxy
+ * listens (headless H16, api keys K7). It is kept while the session runs, since the hold runs
+ * the container again when it starts Claude Code again (H12), and goes with
+ * the session's folder when it stops.
  */
 export function createContainerRuntime(options) {
     const owner = options.owner ?? CONTAINER_OWNER;
-    const launch = options.launch ?? [];
     const run = options.run ?? runCommand;
     const runtime = async (args) => run(options.binary, { args });
     const must = async (args) => {
@@ -83,22 +85,8 @@ export function createContainerRuntime(options) {
         }
         return result.stdout;
     };
-    const stop = async (shipId) => {
-        // Kill, then remove: a remove alone waits out the stop timeout on podman.
-        await runtime(['kill', containerName(shipId)]);
-        await runtime(['rm', '--force', containerName(shipId)]);
-    };
-    const tmux = (shipId, args) => ['exec', containerName(shipId), 'tmux', ...args];
-    const screen = async (shipId) => {
-        const shown = await runtime(tmux(shipId, ['capture-pane', '-p', '-J', '-S', `-${String(SCREEN_LINES)}`, '-t', TMUX_TARGET]));
-        if (shown.status === 0) {
-            return shown.stdout;
-        }
-        // An exited container printed its last screen as it ended.
-        const logged = await runtime(['logs', containerName(shipId)]);
-        return logged.status === 0 ? logged.stdout : '';
-    };
-    return {
+    /** The ship's container: stopped before its hold, so the hold ends with it, and listed where no hold holds the ship. */
+    const containers = {
         list: async () => {
             const listed = await must(['ps', '--all', '--filter', `label=${OWNER_LABEL}=${owner}`, '--format', '{{.Names}} {{.State}}']);
             return listed.split('\n').flatMap((line) => {
@@ -107,25 +95,36 @@ export function createContainerRuntime(options) {
                 return name.startsWith(PREFIX) && shipId.success ? [{ shipId: shipId.data, status: state === 'running' ? 'running' : 'exited' }] : [];
             });
         },
-        stop,
-        start: async ({ shipId, folder, command, env = {}, readOnly = [] }) => {
-            const token = (await readFile(options.tokenFile, 'utf8')).trim();
-            const content = envFileOf({ ...env, [MODEL_TOKEN_VARIABLE]: token });
-            await stop(shipId);
+        stop: async (shipId) => {
+            // Kill, then remove: a remove alone waits out the stop timeout on podman.
+            await runtime(['kill', containerName(shipId)]);
+            await runtime(['rm', '--force', containerName(shipId)]);
+        },
+    };
+    const holds = createHoldRuntime({
+        sessions: options.sessions,
+        program: options.program,
+        version: options.version,
+        platform: options.platform,
+        launch: options.launch ?? [],
+        beside: containers,
+        heldAs: async ({ shipId, folder, command, env = {}, readOnly = [], proxyToken }, files) => {
+            const login = proxyToken === undefined ? { [MODEL_TOKEN_VARIABLE]: (await readFile(options.tokenFile, 'utf8')).trim() } : {};
+            const content = envFileOf({ ...env, ...login });
             const home = shipHome(options.homes, shipId);
             const shipSockets = join(options.sockets, shipId);
             // The runtime mounts only a folder that exists, and the ship's socket may not have made it yet.
             await mkdir(shipSockets, { recursive: true, mode: 0o700 });
             await mkdir(home, { recursive: true, mode: 0o700 });
-            const secrets = await mkdtemp(join(tmpdir(), 'aeolus-trierarch-env-'));
-            try {
-                const envFile = join(secrets, 'session.env');
-                await writeFile(envFile, content, { mode: 0o600 });
-                const [program = options.binary, ...args] = [
-                    ...launch,
+            await mkdir(files.folder, { recursive: true, mode: 0o700 });
+            const envFile = join(files.folder, ENV_FILE);
+            await writeFile(envFile, content, { mode: 0o600 });
+            return {
+                command: [
                     options.binary,
                     'run',
-                    '--detach',
+                    '--rm',
+                    '-i',
                     '--name',
                     containerName(shipId),
                     '--label',
@@ -159,42 +158,22 @@ export function createContainerRuntime(options) {
                     ...readOnly.flatMap((path) => ['--volume', `${path}:${path}:ro`]),
                     '--env',
                     `HOME=${SESSION_HOME}`,
+                    ...(proxyToken === undefined ? [] : ['--env', proxyToken.variable, '--network', HOST_LOOPBACK_NETWORK]),
                     '--workdir',
                     folder,
                     '--env-file',
                     envFile,
                     options.image,
-                    'sh',
-                    '-c',
-                    SESSION_SCRIPT,
-                    'sh',
-                    ...heldCommand(command),
-                ];
-                const started = await run(program, { args });
-                if (started.status !== 0) {
-                    throw new Error(`${options.binary} run failed: ${started.stderr.trim()}`);
-                }
-            }
-            finally {
-                await rm(secrets, { recursive: true, force: true });
-            }
-        },
-        // The line typed, then Enter, as a person types it in the session's terminal.
-        send: async ({ shipId, line }) => {
-            await must(tmux(shipId, ['send-keys', '-t', TMUX_TARGET, '-l', line]));
-            await must(tmux(shipId, ['send-keys', '-t', TMUX_TARGET, 'Enter']));
-        },
-        interrupt: async (shipId) => {
-            await stopTurn({ escape: async () => {
-                    await must(tmux(shipId, ['send-keys', '-t', TMUX_TARGET, 'Escape']));
-                }, screen: () => screen(shipId) });
+                    ...command,
+                ],
+                // The session's environment reaches the container through the env file alone.
+                env: {},
+            };
         },
-        // The terminal's screen, one line each: it is all a session in a terminal shows of its events.
-        events: async (shipId) => {
-            const shown = await screen(shipId);
-            return shown === '' ? [] : shown.replace(/\n$/u, '').split('\n');
-        },
-        // The container's first process as the host sees it: every process of the session runs under it; 0 once it runs no more.
+    });
+    return {
+        ...holds,
+        // The container's first process as the host sees it: every process of the session runs under it; none once it runs no more.
         sessionRootOf: async (shipId) => {
             const inspected = await runtime(['inspect', '--format', '{{.State.Pid}}', containerName(shipId)]);
             const pid = Number(inspected.stdout.trim());

package/dist/adapters/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/adapters/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAe,MAAM,sBAAsB,CAAC;AAI7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAsB,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,MAAM,GAAG,YAAY,CAAC;AAC5B,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,uFAAuF;AACvF,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,qFAAqF;AACrF,MAAM,WAAW,GAAG,WAAW,CAAC;AAChC;;;;GAIG;AACH,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,4DAA4D;AAC5D,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,cAAc,GAAG;;yBAEE,WAAW;2BACT,WAAW;yCACG,WAAW;8BACtB,MAAM,CAAC,YAAY,CAAC,QAAQ,WAAW;CACpE,CAAC;AAwBF,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAqC;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,0DAA0D,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,GAAG,QAAQ,IAAI,KAAK,IAAI,CAAC;IAClC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,EAAE,IAAuB,EAA0B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,EAAE,IAAuB,EAAmB,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACnD,0EAA0E;QAC1E,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAuB,EAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9H,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAmB,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,WAAW,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAC7H,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAqB,EAAE;gBAC5D,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxI,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI;QACJ,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE,EAAE;YACpE,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,gGAAgG;YAChG,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAC7C,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG;oBAC1C,GAAG,MAAM;oBACT,OAAO,CAAC,MAAM;oBACd,KAAK;oBACL,UAAU;oBACV,QAAQ;oBACR,aAAa,CAAC,MAAM,CAAC;oBACrB,SAAS;oBACT,GAAG,WAAW,IAAI,KAAK,EAAE;oBACzB,sDAAsD;oBACtD,eAAe;oBACf,OAAO,CAAC,MAAM;oBACd,UAAU;oBACV,OAAO,CAAC,MAAM;oBACd,QAAQ;oBACR,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpB,cAAc;oBACd,MAAM,CAAC,UAAU,CAAC;oBAClB,oBAAoB,YAAY,EAAE;oBAClC,UAAU;oBACV,WAAW;oBACX,UAAU;oBACV,cAAc;oBACd,WAAW;oBACX,WAAW;oBACX,gBAAgB;oBAChB,YAAY;oBACZ,UAAU;oBACV,GAAG,MAAM,IAAI,MAAM,EAAE;oBACrB,UAAU;oBACV,GAAG,IAAI,IAAI,YAAY,EAAE;oBACzB,sFAAsF;oBACtF,UAAU;oBACV,GAAG,WAAW,IAAI,WAAW,EAAE;oBAC/B,yIAAyI;oBACzI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC;oBACjE,OAAO;oBACP,QAAQ,YAAY,EAAE;oBACtB,WAAW;oBACX,MAAM;oBACN,YAAY;oBACZ,OAAO;oBACP,OAAO,CAAC,KAAK;oBACb,IAAI;oBACJ,IAAI;oBACJ,cAAc;oBACd,IAAI;oBACJ,GAAG,WAAW,CAAC,OAAO,CAAC;iBACxB,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;oBAChC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACvE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,+FAA+F;QAC/F,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,yHAAyH;QACzH,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/adapters/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAe,MAAM,sBAAsB,CAAC;AAI7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAsB,MAAM,kBAAkB,CAAC;AAElE,MAAM,MAAM,GAAG,YAAY,CAAC;AAC5B,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,uFAAuF;AACvF,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC;;;;GAIG;AACH,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC3C,kJAAkJ;AAClJ,MAAM,qBAAqB,GAAG,sCAAsC,CAAC;AAErE,uHAAuH;AACvH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,EAAE,CAAC,QAAQ,GAAG,gBAAgB,CAAC;IAC/B,OAAO,EAAE,CAAC,MAAM,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,MAAM,QAAQ,GAAG,aAAa,CAAC;AA8B/B,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAqC;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,0DAA0D,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,GAAG,QAAQ,IAAI,KAAK,IAAI,CAAC;IAClC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,EAAE,IAAuB,EAA0B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,EAAE,IAAuB,EAAmB,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC;IACF,wHAAwH;IACxH,MAAM,UAAU,GAA0C;QACxD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,WAAW,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAC7H,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAqB,EAAE;gBAC5D,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxI,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrB,0EAA0E;YAC1E,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;IAEF,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE;YACxF,MAAM,KAAK,GAA2B,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrJ,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,gGAAgG;YAChG,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,CAAC,MAAM;oBACd,KAAK;oBACL,MAAM;oBACN,IAAI;oBACJ,QAAQ;oBACR,aAAa,CAAC,MAAM,CAAC;oBACrB,SAAS;oBACT,GAAG,WAAW,IAAI,KAAK,EAAE;oBACzB,sDAAsD;oBACtD,eAAe;oBACf,OAAO,CAAC,MAAM;oBACd,UAAU;oBACV,OAAO,CAAC,MAAM;oBACd,QAAQ;oBACR,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpB,cAAc;oBACd,MAAM,CAAC,UAAU,CAAC;oBAClB,oBAAoB,YAAY,EAAE;oBAClC,UAAU;oBACV,WAAW;oBACX,UAAU;oBACV,cAAc;oBACd,WAAW;oBACX,WAAW;oBACX,gBAAgB;oBAChB,YAAY;oBACZ,UAAU;oBACV,GAAG,MAAM,IAAI,MAAM,EAAE;oBACrB,UAAU;oBACV,GAAG,IAAI,IAAI,YAAY,EAAE;oBACzB,sFAAsF;oBACtF,UAAU;oBACV,GAAG,WAAW,IAAI,WAAW,EAAE;oBAC/B,yIAAyI;oBACzI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC;oBACjE,OAAO;oBACP,QAAQ,YAAY,EAAE;oBACtB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;oBACvG,WAAW;oBACX,MAAM;oBACN,YAAY;oBACZ,OAAO;oBACP,OAAO,CAAC,KAAK;oBACb,GAAG,OAAO;iBACX;gBACD,8EAA8E;gBAC9E,GAAG,EAAE,EAAE;aACR,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,KAAK;QACR,4HAA4H;QAC5H,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/copilot-detector.d.ts

@@ -0,0 +1,13 @@
+import type { HarnessDetector } from '../core/ports.js';
+import type { CommandResult } from './run-command.js';
+export declare const AUTO_MODEL = "auto";
+export declare function createCopilotDetector(deps: {
+    run: (command: string, options: {
+        args: readonly string[];
+        timeoutMs?: number;
+    }) => Promise<CommandResult>;
+    /** Copilot's own settings, `settings.json` in COPILOT_HOME or `~/.copilot`; undefined when there are none. */
+    readSettings: () => Promise<string | undefined>;
+    /** The program to run; `copilot` unless a test runs another. */
+    program?: string;
+}): HarnessDetector;

package/dist/adapters/copilot-detector.js

@@ -0,0 +1,62 @@
+import { trierarchNameSchema } from '@aeolus-fleet/common';
+import { z } from 'zod';
+/**
+ * Detecting Copilot (docs/trierarch.md, "Detected options"): its version from
+ * `copilot --version`, and its models from the model setting `copilot help
+ * config` documents, offline, with `auto`, on which Copilot picks the model
+ * per request (CC9). No model is probed: every Copilot prompt costs a
+ * premium request, so none is confirmed, and a model this login may not use
+ * is refused in its session's launch window, as Copilot says it then. The
+ * default is the model Copilot's own settings name when it is declared, else
+ * `auto`, on which Copilot starts. Copilot has an effort flag, but its levels
+ * differ per model, so no effort is declared.
+ */
+/** The longest --version and the help may take: both are read offline. */
+const QUICK_TIMEOUT_MS = 10_000;
+const MODEL_FLAG = '--model';
+export const AUTO_MODEL = 'auto';
+/** The model setting's entry in `copilot help config`, up to the blank line that ends it. */
+const MODEL_SETTING = /^ {2}`model`:[^\n]*\n((?: {4}- "[^"]+"\n?)+)/m;
+const LISTED_MODEL = /- "([^"]+)"/g;
+const settingsSchema = z.object({ model: z.string() });
+/** The models the help lists for the model setting, in its order. */
+function listedModelsOf(result) {
+    const listed = result.status === 0 ? MODEL_SETTING.exec(result.stdout)?.[1] : undefined;
+    return [...(listed ?? '').matchAll(LISTED_MODEL)].flatMap((match) => (match[1] === undefined ? [] : [match[1]]));
+}
+/** The model Copilot's settings name, when they are JSON naming one. */
+function configuredModelOf(settings) {
+    try {
+        return settingsSchema.safeParse(JSON.parse(settings ?? '')).data?.model;
+    }
+    catch {
+        // Settings that are no JSON name no model.
+        return undefined;
+    }
+}
+export function createCopilotDetector(deps) {
+    const program = deps.program ?? 'copilot';
+    return {
+        version: async () => {
+            const result = await deps.run(program, { args: ['--version'], timeoutMs: QUICK_TIMEOUT_MS }).catch(() => undefined);
+            // "GitHub Copilot CLI 1.0.105." on its first line.
+            return result?.status === 0 ? /(\d+\.\d+\.\d+)/.exec(result.stdout.split('\n')[0] ?? '')?.[1] : undefined;
+        },
+        detect: async ({ version, now }) => {
+            const help = await deps.run(program, { args: ['help', 'config'], timeoutMs: QUICK_TIMEOUT_MS }).catch(() => ({ status: 1, stdout: '', stderr: '' }));
+            const listed = listedModelsOf(help).filter((model) => trierarchNameSchema.safeParse(model).success && model !== AUTO_MODEL);
+            const models = [...listed, AUTO_MODEL];
+            const configured = configuredModelOf(await deps.readSettings());
+            const defaultModel = configured !== undefined && models.includes(configured) ? configured : AUTO_MODEL;
+            const values = Object.fromEntries(models.map((model) => [model, [MODEL_FLAG, model]]));
+            return {
+                version,
+                detectedAt: now,
+                confirmedAt: null,
+                options: { model: { values, default: defaultModel } },
+                ...(listed.length === 0 && { problem: `Copilot ${version} names no model in copilot help config, so this machine declares auto only` }),
+            };
+        },
+    };
+}
+//# sourceMappingURL=copilot-detector.js.map

package/dist/adapters/copilot-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-detector.js","sourceRoot":"","sources":["../../src/adapters/copilot-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;;GAUG;AAEH,0EAA0E;AAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,aAAa,GAAG,+CAA+C,CAAC;AACtE,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvD,qEAAqE;AACrE,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnH,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,QAA4B;IACrD,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpH,mDAAmD;YACnD,OAAO,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAA4B,EAAE;YAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACrJ,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,KAAK,KAAK,UAAU,CAAC,CAAC;YAC5H,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;YACvG,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,OAAO;gBACL,OAAO;gBACP,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE;gBACrD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,OAAO,4EAA4E,EAAE,CAAC;aACxI,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/copilot.d.ts

@@ -0,0 +1,79 @@
+import type { TrierarchConfiguration } from '@aeolus-fleet/common';
+import type { AdapterFlag, HarnessPort, SessionRuntime } from '../core/ports.js';
+import { type CommandPart } from './command-line.js';
+import { type AeolusPlugin } from './plugin-identity.js';
+/**
+ * The GitHub Copilot CLI as a harness (docs/architecture.md, "First
+ * adapters"; design harnesses/cursor-copilot, CC3, CC4, CC6, CC10), headless:
+ * one `copilot -p` per turn in the folder, as Codex runs one `codex exec`, its
+ * output as JSON lines, every tool allowed and its question tool off, so a
+ * turn asks nothing. Every later turn resumes the session by the id the last
+ * turn's result named; a restart too, since `--continue` takes the latest
+ * session of the machine, whatever its folder (Copilot CLI 1.0.105). Between
+ * turns no Copilot process runs. Copilot signs in with the machine's own
+ * login, which the hold's clean environment leaves alone: no GitHub token
+ * reaches a session, and no API key (CC6). The identity and the turn marker
+ * go through the aeolus-fleet plugin Copilot installed, whose hooks run in
+ * `copilot -p` as in a terminal (S3).
+ *
+ * A failure before the model call (no login, a refused model, a session it
+ * cannot resume) fires no hook and writes no JSON line, only its error on
+ * stderr and exit status 1: the hold keeps Copilot's stderr lines among the
+ * events, wrapped as `aeolus.stderr`, and the launch window reads them as it
+ * reads `session.error`, which a failed model call writes.
+ */
+/** The Copilot CLI builds whose hook roles the aeolus-fleet plugin is proven on (design harnesses/cursor-copilot, S3). */
+export declare const COPILOT_PROVEN_VERSIONS: readonly string[];
+/** The prompt of a restarted session: Copilot has no wake command, so the start context and the crew-a-ship skill say the rest. */
+export declare const WAKE_PROMPT = "Aeolus started this session again: go on crewing this folder's Aeolus ship as the crew-a-ship skill says.";
+/** The line the hold writes for each line Copilot writes on stderr, so the launch window reads what Copilot says before any event. */
+export declare const STDERR_EVENT = "aeolus.stderr";
+export declare const COPILOT_ADAPTER_FLAGS: readonly AdapterFlag[];
+/** The flags of Copilot that are risky: beyond every tool, which every launch allows, they open every path and every URL (#326). */
+export declare const COPILOT_RISKY_FLAGS: readonly string[];
+/** `copilot`, the configured flags, JSON output, every tool allowed and no question tool, then the session to resume when there is one, and the prompt last as the value of --prompt, so it never reads as a flag. */
+export declare function copilotCommandLine(at: {
+    flags: readonly string[];
+    prompt: string;
+    sessionId?: string;
+    program?: string;
+}): CommandPart[];
+/** The command of a later turn (CC4): the session's start command, resuming the session by the id given, with the line as its prompt. */
+export declare function copilotTurnCommand(at: {
+    start: readonly string[];
+    sessionId: string;
+    line: string;
+}): string[];
+/** The line the hold keeps for a line Copilot wrote on stderr. */
+export declare function copilotStderrEvent(line: string): string;
+/** The session id a line of Copilot's output names: its result's; none for any other line. */
+export declare function copilotSessionIdOf(line: string): string | undefined;
+/**
+ * Why Copilot's start failed, from its last error (headless H13): the model it
+ * refused when that is the model it launched with (or any, when it launched
+ * with none), or else the error's message. Tested on output captured from
+ * Copilot CLI 1.0.105 (test/logs).
+ */
+export declare function copilotErrorIn(at: {
+    events: readonly string[];
+    model?: string;
+}): {
+    kind: 'refused';
+    model: string;
+} | {
+    kind: 'cause';
+    cause: string;
+} | undefined;
+export declare function createCopilotHarness(options: {
+    configuration: TrierarchConfiguration;
+    plugin: AeolusPlugin;
+    sessions: Pick<SessionRuntime, 'start' | 'send' | 'interrupt' | 'events'>;
+    /** Copilot's version as detection last found it, read each time: a build its plugin is not proven on is not offered (CC3). */
+    detectedVersion: () => string | undefined;
+    /** Whether sessions run in containers, where Copilot is not proven (CC10). */
+    isInContainer: boolean;
+    /** The trierarch's COPILOT_HOME, which its sessions get so they use the login and plugin it found; none when it has none. */
+    copilotHome?: string;
+    /** The program to run; `copilot` unless a test runs another. */
+    command?: string;
+}): HarnessPort;

package/dist/adapters/copilot.js

@@ -0,0 +1,187 @@
+import { z } from 'zod';
+import { effectiveFlags } from '../core/effective-flags.js';
+import { firstPromptOf, wakePromptOf } from '../core/no-terminal-questions.js';
+import { LAUNCH_VARIABLE } from './claude-code.js';
+import { partsWithWords, wordsOf } from './command-line.js';
+import { parsedLine } from './hold-protocol.js';
+import { createLaunchMarks } from './launch-marker.js';
+import { createPluginIdentity } from './plugin-identity.js';
+/**
+ * The GitHub Copilot CLI as a harness (docs/architecture.md, "First
+ * adapters"; design harnesses/cursor-copilot, CC3, CC4, CC6, CC10), headless:
+ * one `copilot -p` per turn in the folder, as Codex runs one `codex exec`, its
+ * output as JSON lines, every tool allowed and its question tool off, so a
+ * turn asks nothing. Every later turn resumes the session by the id the last
+ * turn's result named; a restart too, since `--continue` takes the latest
+ * session of the machine, whatever its folder (Copilot CLI 1.0.105). Between
+ * turns no Copilot process runs. Copilot signs in with the machine's own
+ * login, which the hold's clean environment leaves alone: no GitHub token
+ * reaches a session, and no API key (CC6). The identity and the turn marker
+ * go through the aeolus-fleet plugin Copilot installed, whose hooks run in
+ * `copilot -p` as in a terminal (S3).
+ *
+ * A failure before the model call (no login, a refused model, a session it
+ * cannot resume) fires no hook and writes no JSON line, only its error on
+ * stderr and exit status 1: the hold keeps Copilot's stderr lines among the
+ * events, wrapped as `aeolus.stderr`, and the launch window reads them as it
+ * reads `session.error`, which a failed model call writes.
+ */
+/** The Copilot CLI builds whose hook roles the aeolus-fleet plugin is proven on (design harnesses/cursor-copilot, S3). */
+export const COPILOT_PROVEN_VERSIONS = ['1.0.105'];
+/** The prompt of a restarted session: Copilot has no wake command, so the start context and the crew-a-ship skill say the rest. */
+export const WAKE_PROMPT = "Aeolus started this session again: go on crewing this folder's Aeolus ship as the crew-a-ship skill says.";
+/** Added to every launch, as mechanism: the turn's events as JSON lines, which the hold keeps (headless H13). */
+const JSON_OUTPUT = '--output-format=json';
+/** Added to every launch: `copilot -p` runs no tool without it. Running every tool without asking is the mode a session the trierarch runs is in (decision 0016). */
+const ALLOW_ALL_TOOLS = '--allow-all-tools';
+/** Added to every launch: Copilot's question tool waits for an answer nobody gives; the session asks over the fleet instead (#460). */
+const NO_ASK_USER = '--no-ask-user';
+const PROMPT = '--prompt=';
+const RESUME = '--resume=';
+/** The variable Copilot reads its configuration folder from, which the trierarch found its plugin in. */
+const COPILOT_HOME_VARIABLE = 'COPILOT_HOME';
+/** The line the hold writes for each line Copilot writes on stderr, so the launch window reads what Copilot says before any event. */
+export const STDERR_EVENT = 'aeolus.stderr';
+export const COPILOT_ADAPTER_FLAGS = [
+    { flag: JSON_OUTPUT, when: 'always' },
+    { flag: ALLOW_ALL_TOOLS, when: 'always' },
+    { flag: NO_ASK_USER, when: 'always' },
+];
+/** The flags of Copilot that are risky: beyond every tool, which every launch allows, they open every path and every URL (#326). */
+export const COPILOT_RISKY_FLAGS = ['--allow-all', '--yolo', '--allow-all-paths', '--allow-all-urls'];
+/** `copilot`, the configured flags, JSON output, every tool allowed and no question tool, then the session to resume when there is one, and the prompt last as the value of --prompt, so it never reads as a flag. */
+export function copilotCommandLine(at) {
+    return partsWithWords([
+        { words: [at.program ?? 'copilot'] },
+        { words: at.flags, source: 'configuration' },
+        { words: [JSON_OUTPUT], source: 'adapter' },
+        { words: [ALLOW_ALL_TOOLS], source: 'adapter' },
+        { words: [NO_ASK_USER], source: 'adapter' },
+        { words: [...(at.sessionId === undefined ? [] : [`${RESUME}${at.sessionId}`]), `${PROMPT}${at.prompt}`] },
+    ]);
+}
+/** The command of a later turn (CC4): the session's start command, resuming the session by the id given, with the line as its prompt. */
+export function copilotTurnCommand(at) {
+    const words = at.start.filter((word) => !word.startsWith(RESUME) && !word.startsWith(PROMPT));
+    return [...words, `${RESUME}${at.sessionId}`, `${PROMPT}${at.line}`];
+}
+/** The line the hold keeps for a line Copilot wrote on stderr. */
+export function copilotStderrEvent(line) {
+    return JSON.stringify({ type: STDERR_EVENT, line });
+}
+/** The result that ends each `copilot -p`, the only event naming the session. */
+const resultSchema = z.object({ type: z.literal('result'), sessionId: z.string().min(1) });
+/** The session id a line of Copilot's output names: its result's; none for any other line. */
+export function copilotSessionIdOf(line) {
+    return resultSchema.safeParse(parsedLine(line)).data?.sessionId;
+}
+const sessionErrorSchema = z.object({ type: z.literal('session.error'), data: z.object({ message: z.string() }) });
+const stderrSchema = z.object({ type: z.literal(STDERR_EVENT), line: z.string() });
+/** How Copilot CLI 1.0.105 refuses a model this login may not use, before any turn. */
+const REFUSED_MODEL = /^Model "([^"]+)" from --model flag is not available\.$/u;
+/** How Copilot starts the error it writes on stderr. */
+const ERROR_PREFIX = 'Error: ';
+/** The last error in Copilot's events: a session error, or the error it wrote on stderr; none without one. */
+function lastErrorIn(events) {
+    for (const line of [...events].reverse()) {
+        const event = parsedLine(line);
+        const sessionError = sessionErrorSchema.safeParse(event);
+        if (sessionError.success) {
+            return sessionError.data.data.message;
+        }
+        const stderr = stderrSchema.safeParse(event).data?.line;
+        if (stderr?.startsWith(ERROR_PREFIX) === true) {
+            return stderr.slice(ERROR_PREFIX.length);
+        }
+    }
+    return undefined;
+}
+/**
+ * Why Copilot's start failed, from its last error (headless H13): the model it
+ * refused when that is the model it launched with (or any, when it launched
+ * with none), or else the error's message. Tested on output captured from
+ * Copilot CLI 1.0.105 (test/logs).
+ */
+export function copilotErrorIn(at) {
+    const error = lastErrorIn(at.events);
+    if (error === undefined) {
+        return undefined;
+    }
+    const refused = REFUSED_MODEL.exec(error)?.[1];
+    return refused !== undefined && (at.model === undefined || refused === at.model) ? { kind: 'refused', model: refused } : { kind: 'cause', cause: error };
+}
+/** The session the last turn in the events named, which a restart resumes; none when no turn named one. */
+function lastSessionIn(events) {
+    return [...events].reverse().map(copilotSessionIdOf).find((id) => id !== undefined);
+}
+export function createCopilotHarness(options) {
+    const { configuration, plugin, sessions } = options;
+    const marks = createLaunchMarks(plugin);
+    const { handOverLine, forceOverLine, ...identity } = createPluginIdentity(plugin);
+    const proven = COPILOT_PROVEN_VERSIONS.map((version) => `Copilot CLI ${version}`).join(', ');
+    return {
+        ...identity,
+        launch: async ({ shipId, folder, harness, options: picked, isFirstStart, launchId, login, firstPrompt }) => {
+            const settings = configuration.harnesses[harness];
+            if (settings === undefined) {
+                throw new Error(`The configuration has no harness ${harness}`);
+            }
+            if (login !== 'subscription') {
+                throw new Error("Copilot signs in with this computer's own login (copilot login): it runs on no API key");
+            }
+            const prompt = isFirstStart && firstPrompt !== undefined ? firstPromptOf(firstPrompt) : wakePromptOf(WAKE_PROMPT);
+            // Read before the start, which clears the session's events.
+            const sessionId = isFirstStart ? undefined : lastSessionIn(await sessions.events(shipId));
+            const command = copilotCommandLine({ flags: effectiveFlags(settings, picked), prompt, ...(sessionId !== undefined && { sessionId }), ...(options.command !== undefined && { program: options.command }) });
+            await marks.clear(folder);
+            const env = { [LAUNCH_VARIABLE]: launchId, ...(options.copilotHome !== undefined && { [COPILOT_HOME_VARIABLE]: options.copilotHome }) };
+            await sessions.start({ shipId, folder, command: wordsOf(command), harness, env });
+        },
+        handOver: async (session) => {
+            const line = await handOverLine(session);
+            if (line === undefined) {
+                return 'nothing';
+            }
+            await sessions.send({ shipId: session.shipId, line: wakePromptOf(line) });
+            return 'handed';
+        },
+        forceOver: async ({ shipId, folder, isTurnBusy }) => {
+            const line = await forceOverLine({ shipId, folder });
+            if (line === undefined) {
+                return 'nothing';
+            }
+            if (isTurnBusy) {
+                await sessions.interrupt(shipId);
+            }
+            await sessions.send({ shipId, line: wakePromptOf(line) });
+            return 'handed';
+        },
+        marksLaunches: () => marks.isMarking(),
+        notOfferedReason: async () => {
+            // The trierarch's upgrade installs no Copilot plugin: the reason says Copilot's own command.
+            if ((await plugin.root().catch(() => undefined)) === undefined) {
+                return 'its aeolus-fleet plugin is not installed for Copilot: copilot plugin install aeolus-fleet@aeolus-fleet';
+            }
+            if (options.isInContainer) {
+                return 'Copilot is not proven in a container: the container runtime runs claude-code only';
+            }
+            const version = options.detectedVersion();
+            if (version === undefined) {
+                return `its Copilot CLI version is not detected yet: the hooks of its aeolus-fleet plugin are proven on ${proven}`;
+            }
+            return COPILOT_PROVEN_VERSIONS.includes(version) ? undefined : `Copilot CLI ${version} is not proven: the hooks of its aeolus-fleet plugin are proven on ${proven}`;
+        },
+        // The marker says what the session did (#490); what Copilot says before any hook runs, a refused model or login, is read from its output (headless H13).
+        launchSeen: async ({ shipId, folder, launchId, model }) => {
+            const error = copilotErrorIn({ events: await sessions.events(shipId), ...(model !== undefined && { model }) });
+            if (error?.kind === 'refused') {
+                return { kind: 'refused', model: error.model };
+            }
+            if ((await marks.read({ folder, launchId }))?.isActive === true) {
+                return { kind: 'active' };
+            }
+            return { kind: 'none', ...(error !== undefined && { cause: error.cause }) };
+        },
+    };
+}
+//# sourceMappingURL=copilot.js.map