@elie-laloum/outpost 2.0.0 → 3.0.0

package/dist/application/doctor-protocol.js

@@ -0,0 +1,29 @@
+import { isDeepStrictEqual } from "node:util";
+import { claude } from "../adapters/agents/claude-adapter.js";
+import { codex } from "../adapters/agents/codex-adapter.js";
+import { protocolFixtures } from "../adapters/agents/protocol-fixtures.constants.js";
+import { agentVersions } from "../providers/versions.constants.js";
+export function diagnoseAgentProtocol(agent) {
+    const adapter = { claude, codex }[agent]();
+    const checks = protocolFixtures[agent].map((fixture) => {
+        const events = fixture.lines.flatMap((line) => adapter.events(line));
+        const passed = isDeepStrictEqual(events, fixture.expected);
+        return {
+            id: `protocol.fixture.${fixture.name}`,
+            status: passed ? "pass" : "fail",
+            message: passed
+                ? "Bundled synthetic events decode to the expected structural observations. No installed CLI or model was invoked."
+                : "Bundled synthetic events do not match the expected structural observations.",
+        };
+    });
+    return {
+        scope: "bundled-protocol-fixtures",
+        agent,
+        referenceVersion: agentVersions[agent],
+        installedCli: "unverified",
+        modelCompatibility: "unverified",
+        checks,
+        hasFailures: checks.some((check) => check.status === "fail"),
+    };
+}
+//# sourceMappingURL=doctor-protocol.js.map

package/dist/application/doctor-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-protocol.js","sourceRoot":"","sources":["../../src/application/doctor-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAInE,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAsB,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,iHAAiH;gBACnH,CAAC,CAAC,6EAA6E;SAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,2BAA2B;QAClC,KAAK;QACL,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;QACtC,YAAY,EAAE,YAAY;QAC1B,kBAAkB,EAAE,YAAY;QAChC,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { isDeepStrictEqual } from \"node:util\";\nimport { claude } from \"../adapters/agents/claude-adapter.ts\";\nimport { codex } from \"../adapters/agents/codex-adapter.ts\";\nimport { protocolFixtures } from \"../adapters/agents/protocol-fixtures.constants.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport type { AgentProtocolReport } from \"./doctor-protocol.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport function diagnoseAgentProtocol(agent: DoctorAgent): AgentProtocolReport {\n  const adapter = { claude, codex }[agent]();\n  const checks: DiagnosticCheck[] = protocolFixtures[agent].map((fixture) => {\n    const events = fixture.lines.flatMap((line) => adapter.events(line));\n    const passed = isDeepStrictEqual(events, fixture.expected);\n    return {\n      id: `protocol.fixture.${fixture.name}`,\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Bundled synthetic events decode to the expected structural observations. No installed CLI or model was invoked.\"\n        : \"Bundled synthetic events do not match the expected structural observations.\",\n    };\n  });\n  return {\n    scope: \"bundled-protocol-fixtures\",\n    agent,\n    referenceVersion: agentVersions[agent],\n    installedCli: \"unverified\",\n    modelCompatibility: \"unverified\",\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor-protocol.types.d.ts

@@ -0,0 +1,10 @@
+import type { DiagnosticCheck, DoctorAgent } from "./doctor.types.ts";
+export interface AgentProtocolReport {
+    readonly scope: "bundled-protocol-fixtures";
+    readonly agent: DoctorAgent;
+    readonly referenceVersion: string;
+    readonly installedCli: "unverified";
+    readonly modelCompatibility: "unverified";
+    readonly checks: readonly DiagnosticCheck[];
+    readonly hasFailures: boolean;
+}

package/dist/application/doctor-protocol.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor-protocol.types.js.map

package/dist/application/doctor-protocol.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-protocol.types.js","sourceRoot":"","sources":["../../src/application/doctor-protocol.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport interface AgentProtocolReport {\n  readonly scope: \"bundled-protocol-fixtures\";\n  readonly agent: DoctorAgent;\n  readonly referenceVersion: string;\n  readonly installedCli: \"unverified\";\n  readonly modelCompatibility: \"unverified\";\n  readonly checks: readonly DiagnosticCheck[];\n  readonly hasFailures: boolean;\n}\n"]}

package/dist/application/doctor-sandbox.constants.d.ts

@@ -0,0 +1,5 @@
+export declare const sandboxDiagnosticDefaults: Readonly<{
+    maximumDeadlineMs: 60000;
+    command: "process.stdout.write('outpost-stdout'); process.stderr.write('outpost-stderr'); process.exitCode = 7";
+    home: "const fs = require('node:fs'); fs.accessSync(process.argv[1], fs.constants.R_OK | fs.constants.W_OK); if (!fs.statSync(process.argv[1]).isDirectory()) process.exit(1)";
+}>;

package/dist/application/doctor-sandbox.constants.js

@@ -0,0 +1,6 @@
+export const sandboxDiagnosticDefaults = Object.freeze({
+    maximumDeadlineMs: 60_000,
+    command: "process.stdout.write('outpost-stdout'); process.stderr.write('outpost-stderr'); process.exitCode = 7",
+    home: "const fs = require('node:fs'); fs.accessSync(process.argv[1], fs.constants.R_OK | fs.constants.W_OK); if (!fs.statSync(process.argv[1]).isDirectory()) process.exit(1)",
+});
+//# sourceMappingURL=doctor-sandbox.constants.js.map

package/dist/application/doctor-sandbox.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-sandbox.constants.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,iBAAiB,EAAE,MAAM;IACzB,OAAO,EACL,sGAAsG;IACxG,IAAI,EAAE,wKAAwK;CAC/K,CAAC,CAAC","sourcesContent":["export const sandboxDiagnosticDefaults = Object.freeze({\n  maximumDeadlineMs: 60_000,\n  command:\n    \"process.stdout.write('outpost-stdout'); process.stderr.write('outpost-stderr'); process.exitCode = 7\",\n  home: \"const fs = require('node:fs'); fs.accessSync(process.argv[1], fs.constants.R_OK | fs.constants.W_OK); if (!fs.statSync(process.argv[1]).isDirectory()) process.exit(1)\",\n});\n"]}

package/dist/application/doctor-sandbox.d.ts

@@ -0,0 +1,4 @@
+import type { SandboxLease } from "../domain/sandbox.types.ts";
+import type { SandboxDiagnosticOptions, SandboxDiagnosticReport } from "./doctor-sandbox.types.ts";
+import type { Sandbox } from "./outpost.types.ts";
+export declare function diagnoseSandbox(target: Sandbox | SandboxLease, options?: SandboxDiagnosticOptions): Promise<SandboxDiagnosticReport>;

package/dist/application/doctor-sandbox.js

@@ -0,0 +1,133 @@
+import { invariant } from "../domain/errors.js";
+import { agentVersions } from "../providers/versions.constants.js";
+import { diagnoseAgentCli } from "./doctor-agent.js";
+import { diagnosticProbe } from "./diagnostic-probe.js";
+import { doctorDefaults } from "./doctor.constants.js";
+import { diagnoseTransfers } from "./doctor-transfers.js";
+import { sandboxDiagnosticDefaults } from "./doctor-sandbox.constants.js";
+export async function diagnoseSandbox(target, options = {}) {
+    if ("diagnose" in target)
+        return target.diagnose(options);
+    const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;
+    invariant(Number.isInteger(deadlineMs) &&
+        deadlineMs > 0 &&
+        deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs, "Diagnostic deadlineMs must be an integer from 1 to 60000");
+    options.signal?.throwIfAborted();
+    const invoke = (command) => {
+        options.signal?.throwIfAborted();
+        return target.invoke({
+            ...command,
+            deadlineMs,
+            retain: command.retain ?? doctorDefaults.retain,
+            signal: options.signal
+                ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])
+                : AbortSignal.timeout(deadlineMs),
+        });
+    };
+    const checks = [];
+    for (const executable of ["node", "git"]) {
+        checks.push(await diagnosticProbe({
+            id: `sandbox.${executable}`,
+            command: { executable, arguments: ["--version"] },
+            readVersion: true,
+            failureStatus: "fail",
+            remedy: `Install ${executable} in this sandbox.`,
+        }, invoke));
+    }
+    try {
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", sandboxDiagnosticDefaults.command],
+        });
+        const passed = result.status === 7 &&
+            result.stdout === "outpost-stdout" &&
+            result.stderr === "outpost-stderr";
+        checks.push({
+            id: "sandbox.command",
+            status: passed ? "pass" : "fail",
+            message: passed
+                ? "Observed separate output streams and nonzero process exit status."
+                : "Command output or exit status did not match the diagnostic sentinel.",
+        });
+    }
+    catch {
+        checks.push({
+            id: "sandbox.command",
+            status: "fail",
+            message: "Bounded command probe failed or was interrupted.",
+        });
+    }
+    checks.push(await diagnosticProbe({
+        id: "sandbox.home",
+        command: {
+            executable: "node",
+            arguments: ["-e", sandboxDiagnosticDefaults.home, target.home],
+        },
+        failureStatus: "fail",
+        remedy: "Check the lease home directory and its permissions.",
+    }, invoke));
+    if (options.agent) {
+        const version = await diagnosticProbe({
+            id: "agent.sandbox",
+            command: { executable: options.agent, arguments: ["--version"] },
+            readVersion: true,
+            referenceVersion: agentVersions[options.agent],
+            failureStatus: "fail",
+            remedy: "Install the agent explicitly; diagnostics never bootstrap it.",
+        }, invoke);
+        checks.push(version);
+        if (version.status !== "fail")
+            checks.push(...(await diagnoseAgentCli(options.agent, invoke)));
+    }
+    if (options.transfers === true)
+        checks.push(...(await diagnoseTransfers(target, { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) }, invoke)));
+    checks.push({
+        id: "model",
+        status: "skipped",
+        message: "Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.",
+    });
+    const observed = (id) => {
+        const check = checks.find((check) => check.id === id);
+        if (!check)
+            return "unverified";
+        return check.status === "pass" ? "pass" : "fail";
+    };
+    return {
+        scope: "owned-sandbox",
+        ownership: "caller",
+        ...(options.provider
+            ? {
+                provider: {
+                    name: options.provider.name,
+                    placement: options.provider.placement,
+                },
+            }
+            : {}),
+        capabilities: [
+            {
+                id: "command",
+                advertised: true,
+                observed: observed("sandbox.command"),
+            },
+            {
+                id: "transfers",
+                advertised: true,
+                observed: observed("sandbox.transfers"),
+            },
+            {
+                id: "batchTransfers",
+                advertised: target.fileTransfers !== undefined,
+                observed: "unverified",
+            },
+            {
+                id: "interactiveTerminal",
+                advertised: "unknown",
+                observed: "unverified",
+            },
+        ],
+        checks,
+        modelCompatibility: "unverified",
+        hasFailures: checks.some((check) => check.status === "fail"),
+    };
+}
+//# sourceMappingURL=doctor-sandbox.js.map

package/dist/application/doctor-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-sandbox.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA8B,EAC9B,UAAoC,EAAE;IAEtC,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;IACnE,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1B,UAAU,GAAG,CAAC;QACd,UAAU,IAAI,yBAAyB,CAAC,iBAAiB,EAC3D,0DAA0D,CAC3D,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO;YACV,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,WAAW,UAAU,EAAE;YAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACjD,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,UAAU,mBAAmB;SACjD,EACD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAClC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,sEAAsE;SAC3E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;SAC/D;QACD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,qDAAqD;KAC9D,EACD,MAAM,CACP,CACF,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAChE,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,+DAA+D;SACxE,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAC5B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,iBAAiB,CACzB,MAAM,EACN,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrE,MAAM,CACP,CAAC,CACH,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,oHAAoH;KACvH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,YAAqB,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB,CAAC;IACzE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;iBACtC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;aACtC;YACD;gBACE,EAAE,EAAE,WAAW;gBACf,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,CAAC;aACxC;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC9C,QAAQ,EAAE,YAAY;aACvB;YACD;gBACE,EAAE,EAAE,qBAAqB;gBACzB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,YAAY;aACvB;SACF;QACD,MAAM;QACN,kBAAkB,EAAE,YAAY;QAChC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { diagnoseTransfers } from \"./doctor-transfers.ts\";\nimport { sandboxDiagnosticDefaults } from \"./doctor-sandbox.constants.ts\";\nimport type {\n  SandboxDiagnosticOptions,\n  SandboxDiagnosticReport,\n} from \"./doctor-sandbox.types.ts\";\nimport type { Sandbox } from \"./outpost.types.ts\";\n\nexport async function diagnoseSandbox(\n  target: Sandbox | SandboxLease,\n  options: SandboxDiagnosticOptions = {},\n): Promise<SandboxDiagnosticReport> {\n  if (\"diagnose\" in target) return target.diagnose(options);\n  const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;\n  invariant(\n    Number.isInteger(deadlineMs) &&\n      deadlineMs > 0 &&\n      deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs,\n    \"Diagnostic deadlineMs must be an integer from 1 to 60000\",\n  );\n  options.signal?.throwIfAborted();\n  const invoke: Executor = (command) => {\n    options.signal?.throwIfAborted();\n    return target.invoke({\n      ...command,\n      deadlineMs,\n      retain: command.retain ?? doctorDefaults.retain,\n      signal: options.signal\n        ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])\n        : AbortSignal.timeout(deadlineMs),\n    });\n  };\n  const checks: DiagnosticCheck[] = [];\n  for (const executable of [\"node\", \"git\"]) {\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: `sandbox.${executable}`,\n          command: { executable, arguments: [\"--version\"] },\n          readVersion: true,\n          failureStatus: \"fail\",\n          remedy: `Install ${executable} in this sandbox.`,\n        },\n        invoke,\n      ),\n    );\n  }\n  try {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", sandboxDiagnosticDefaults.command],\n    });\n    const passed =\n      result.status === 7 &&\n      result.stdout === \"outpost-stdout\" &&\n      result.stderr === \"outpost-stderr\";\n    checks.push({\n      id: \"sandbox.command\",\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Observed separate output streams and nonzero process exit status.\"\n        : \"Command output or exit status did not match the diagnostic sentinel.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.command\",\n      status: \"fail\",\n      message: \"Bounded command probe failed or was interrupted.\",\n    });\n  }\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"sandbox.home\",\n        command: {\n          executable: \"node\",\n          arguments: [\"-e\", sandboxDiagnosticDefaults.home, target.home],\n        },\n        failureStatus: \"fail\",\n        remedy: \"Check the lease home directory and its permissions.\",\n      },\n      invoke,\n    ),\n  );\n  if (options.agent) {\n    const version = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: options.agent, arguments: [\"--version\"] },\n        readVersion: true,\n        referenceVersion: agentVersions[options.agent],\n        failureStatus: \"fail\",\n        remedy: \"Install the agent explicitly; diagnostics never bootstrap it.\",\n      },\n      invoke,\n    );\n    checks.push(version);\n    if (version.status !== \"fail\")\n      checks.push(...(await diagnoseAgentCli(options.agent, invoke)));\n  }\n  if (options.transfers === true)\n    checks.push(\n      ...(await diagnoseTransfers(\n        target,\n        { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) },\n        invoke,\n      )),\n    );\n  checks.push({\n    id: \"model\",\n    status: \"skipped\",\n    message:\n      \"Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.\",\n  });\n  const observed = (id: string) => {\n    const check = checks.find((check) => check.id === id);\n    if (!check) return \"unverified\" as const;\n    return check.status === \"pass\" ? (\"pass\" as const) : (\"fail\" as const);\n  };\n  return {\n    scope: \"owned-sandbox\",\n    ownership: \"caller\",\n    ...(options.provider\n      ? {\n          provider: {\n            name: options.provider.name,\n            placement: options.provider.placement,\n          },\n        }\n      : {}),\n    capabilities: [\n      {\n        id: \"command\",\n        advertised: true,\n        observed: observed(\"sandbox.command\"),\n      },\n      {\n        id: \"transfers\",\n        advertised: true,\n        observed: observed(\"sandbox.transfers\"),\n      },\n      {\n        id: \"batchTransfers\",\n        advertised: target.fileTransfers !== undefined,\n        observed: \"unverified\",\n      },\n      {\n        id: \"interactiveTerminal\",\n        advertised: \"unknown\",\n        observed: \"unverified\",\n      },\n    ],\n    checks,\n    modelCompatibility: \"unverified\",\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor-sandbox.types.d.ts

@@ -0,0 +1,23 @@
+import type { SandboxProvider } from "../domain/sandbox.types.ts";
+import type { DiagnosticCheck, DoctorAgent } from "./doctor.types.ts";
+export interface SandboxDiagnosticOptions {
+    readonly agent?: DoctorAgent;
+    readonly deadlineMs?: number;
+    readonly signal?: AbortSignal;
+    readonly transfers?: boolean;
+    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+}
+export interface DiagnosticCapability {
+    readonly id: "command" | "transfers" | "batchTransfers" | "interactiveTerminal";
+    readonly advertised: boolean | "unknown";
+    readonly observed: "pass" | "fail" | "unverified";
+}
+export interface SandboxDiagnosticReport {
+    readonly scope: "owned-sandbox";
+    readonly ownership: "caller";
+    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+    readonly capabilities: readonly DiagnosticCapability[];
+    readonly checks: readonly DiagnosticCheck[];
+    readonly modelCompatibility: "unverified";
+    readonly hasFailures: boolean;
+}

package/dist/application/doctor-sandbox.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor-sandbox.types.js.map

package/dist/application/doctor-sandbox.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-sandbox.types.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport interface SandboxDiagnosticOptions {\n  readonly agent?: DoctorAgent;\n  readonly deadlineMs?: number;\n  readonly signal?: AbortSignal;\n  readonly transfers?: boolean;\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n}\n\nexport interface DiagnosticCapability {\n  readonly id:\n    \"command\" | \"transfers\" | \"batchTransfers\" | \"interactiveTerminal\";\n  readonly advertised: boolean | \"unknown\";\n  readonly observed: \"pass\" | \"fail\" | \"unverified\";\n}\n\nexport interface SandboxDiagnosticReport {\n  readonly scope: \"owned-sandbox\";\n  readonly ownership: \"caller\";\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n  readonly capabilities: readonly DiagnosticCapability[];\n  readonly checks: readonly DiagnosticCheck[];\n  readonly modelCompatibility: \"unverified\";\n  readonly hasFailures: boolean;\n}\n"]}

package/dist/application/doctor-transfers.constants.d.ts

@@ -0,0 +1,6 @@
+export declare const transferDiagnosticRecipe: Readonly<{
+    base64: "AAECA/7/AG91dHBvc3QK";
+    create: "require('node:fs').mkdirSync(process.argv[1])";
+    verify: "const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)";
+    cleanup: "require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })";
+}>;

package/dist/application/doctor-transfers.constants.js

@@ -0,0 +1,7 @@
+export const transferDiagnosticRecipe = Object.freeze({
+    base64: "AAECA/7/AG91dHBvc3QK",
+    create: "require('node:fs').mkdirSync(process.argv[1])",
+    verify: "const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)",
+    cleanup: "require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })",
+});
+//# sourceMappingURL=doctor-transfers.constants.js.map

package/dist/application/doctor-transfers.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-transfers.constants.js","sourceRoot":"","sources":["../../src/application/doctor-transfers.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,+CAA+C;IACvD,MAAM,EACJ,6HAA6H;IAC/H,OAAO,EACL,8EAA8E;CACjF,CAAC,CAAC","sourcesContent":["export const transferDiagnosticRecipe = Object.freeze({\n  base64: \"AAECA/7/AG91dHBvc3QK\",\n  create: \"require('node:fs').mkdirSync(process.argv[1])\",\n  verify:\n    \"const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)\",\n  cleanup:\n    \"require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })\",\n});\n"]}

package/dist/application/doctor-transfers.d.ts

@@ -0,0 +1,4 @@
+import type { SandboxLease, TransferOptions } from "../domain/sandbox.types.ts";
+import type { Executor } from "../infrastructure/process.types.ts";
+import type { DiagnosticCheck } from "./doctor.types.ts";
+export declare function diagnoseTransfers(lease: SandboxLease, options: TransferOptions, invoke: Executor): Promise<DiagnosticCheck[]>;

package/dist/application/doctor-transfers.js

@@ -0,0 +1,88 @@
+import { randomUUID } from "node:crypto";
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { doctorDefaults } from "./doctor.constants.js";
+import { transferDiagnosticRecipe as recipe } from "./doctor-transfers.constants.js";
+export async function diagnoseTransfers(lease, options, invoke) {
+    const checks = [];
+    const directory = await mkdtemp(join(tmpdir(), "outpost-probe-"));
+    const remote = `${lease.root.replace(/[\\/]$/, "")}/.outpost-probe-${randomUUID()}`;
+    const source = join(directory, "source");
+    let cleanupNeeded = false;
+    try {
+        cleanupNeeded = true;
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", recipe.create, remote],
+        });
+        if (result.status !== 0) {
+            cleanupNeeded = false;
+            throw new Error("create");
+        }
+        const payload = Buffer.from(recipe.base64, "base64");
+        await writeFile(source, payload, { mode: 0o600 });
+        const bounded = () => ({
+            ...options,
+            signal: options.signal
+                ? AbortSignal.any([
+                    options.signal,
+                    AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+                ])
+                : AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+        });
+        await lease.upload(source, `${remote}/payload`, bounded());
+        const verified = await invoke({
+            executable: "node",
+            arguments: ["-e", recipe.verify, `${remote}/payload`, recipe.base64],
+        });
+        if (verified.status !== 0)
+            throw new Error("verify");
+        const destination = join(directory, "download");
+        await lease.download(`${remote}/payload`, destination, bounded());
+        if (!(await readFile(destination)).equals(payload))
+            throw new Error("download");
+        checks.push({
+            id: "sandbox.transfers",
+            status: "pass",
+            message: "Binary upload verified by a sandbox process; downloaded bytes match. Symlinks, permissions, directories and batch transfers remain unverified.",
+        });
+    }
+    catch {
+        checks.push({
+            id: "sandbox.transfers",
+            status: "fail",
+            message: "Bounded binary transfer probe failed or was interrupted.",
+        });
+    }
+    finally {
+        if (cleanupNeeded) {
+            try {
+                const result = await lease.invoke({
+                    executable: "node",
+                    arguments: ["-e", recipe.cleanup, remote],
+                    deadlineMs: options.deadlineMs ?? doctorDefaults.deadlineMs,
+                    signal: AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+                    retain: doctorDefaults.retain,
+                });
+                if (result.status !== 0)
+                    throw new Error("cleanup");
+                checks.push({
+                    id: "sandbox.transfers.cleanup",
+                    status: "pass",
+                    message: "Temporary sandbox probe directory removed.",
+                });
+            }
+            catch {
+                checks.push({
+                    id: "sandbox.transfers.cleanup",
+                    status: "fail",
+                    message: `Temporary probe cleanup could not be confirmed; inspect ${remote}. The caller still owns the sandbox.`,
+                });
+            }
+        }
+        await rm(directory, { recursive: true, force: true });
+    }
+    return checks;
+}
+//# sourceMappingURL=doctor-transfers.js.map

package/dist/application/doctor-transfers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-transfers.js","sourceRoot":"","sources":["../../src/application/doctor-transfers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,IAAI,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EACnB,OAAwB,EACxB,MAAgB;IAEhB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,UAAU,EAAE,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,aAAa,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;YACrB,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;oBACd,OAAO,CAAC,MAAM;oBACd,WAAW,CAAC,OAAO,CACjB,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAChD;iBACF,CAAC;gBACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;YAC5B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,mBAAmB;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,gJAAgJ;SACnJ,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,mBAAmB;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;oBAChC,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;oBACzC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU;oBAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CACzB,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAChD;oBACD,MAAM,EAAE,cAAc,CAAC,MAAM;iBAC9B,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,2BAA2B;oBAC/B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,2BAA2B;oBAC/B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,2DAA2D,MAAM,sCAAsC;iBACjH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdtemp, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { SandboxLease, TransferOptions } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { transferDiagnosticRecipe as recipe } from \"./doctor-transfers.constants.ts\";\n\nexport async function diagnoseTransfers(\n  lease: SandboxLease,\n  options: TransferOptions,\n  invoke: Executor,\n): Promise<DiagnosticCheck[]> {\n  const checks: DiagnosticCheck[] = [];\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-probe-\"));\n  const remote = `${lease.root.replace(/[\\\\/]$/, \"\")}/.outpost-probe-${randomUUID()}`;\n  const source = join(directory, \"source\");\n  let cleanupNeeded = false;\n  try {\n    cleanupNeeded = true;\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", recipe.create, remote],\n    });\n    if (result.status !== 0) {\n      cleanupNeeded = false;\n      throw new Error(\"create\");\n    }\n    const payload = Buffer.from(recipe.base64, \"base64\");\n    await writeFile(source, payload, { mode: 0o600 });\n    const bounded = () => ({\n      ...options,\n      signal: options.signal\n        ? AbortSignal.any([\n            options.signal,\n            AbortSignal.timeout(\n              options.deadlineMs ?? doctorDefaults.deadlineMs,\n            ),\n          ])\n        : AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),\n    });\n    await lease.upload(source, `${remote}/payload`, bounded());\n    const verified = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", recipe.verify, `${remote}/payload`, recipe.base64],\n    });\n    if (verified.status !== 0) throw new Error(\"verify\");\n    const destination = join(directory, \"download\");\n    await lease.download(`${remote}/payload`, destination, bounded());\n    if (!(await readFile(destination)).equals(payload))\n      throw new Error(\"download\");\n    checks.push({\n      id: \"sandbox.transfers\",\n      status: \"pass\",\n      message:\n        \"Binary upload verified by a sandbox process; downloaded bytes match. Symlinks, permissions, directories and batch transfers remain unverified.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.transfers\",\n      status: \"fail\",\n      message: \"Bounded binary transfer probe failed or was interrupted.\",\n    });\n  } finally {\n    if (cleanupNeeded) {\n      try {\n        const result = await lease.invoke({\n          executable: \"node\",\n          arguments: [\"-e\", recipe.cleanup, remote],\n          deadlineMs: options.deadlineMs ?? doctorDefaults.deadlineMs,\n          signal: AbortSignal.timeout(\n            options.deadlineMs ?? doctorDefaults.deadlineMs,\n          ),\n          retain: doctorDefaults.retain,\n        });\n        if (result.status !== 0) throw new Error(\"cleanup\");\n        checks.push({\n          id: \"sandbox.transfers.cleanup\",\n          status: \"pass\",\n          message: \"Temporary sandbox probe directory removed.\",\n        });\n      } catch {\n        checks.push({\n          id: \"sandbox.transfers.cleanup\",\n          status: \"fail\",\n          message: `Temporary probe cleanup could not be confirmed; inspect ${remote}. The caller still owns the sandbox.`,\n        });\n      }\n    }\n    await rm(directory, { recursive: true, force: true });\n  }\n  return checks;\n}\n"]}

package/dist/application/doctor.constants.d.ts

@@ -0,0 +1,9 @@
+import type { DoctorProvider, DoctorReport } from "./doctor.types.ts";
+export declare const doctorDefaults: Readonly<{
+    readonly provider: "docker";
+    readonly agent: "codex";
+    readonly deadlineMs: 5000;
+    readonly retain: 4096;
+    readonly minimumNodeMajor: 24;
+}>;
+export declare const providerDiagnostics: Readonly<Record<DoctorProvider, Pick<DoctorReport, "placement" | "interactiveTerminal">>>;

package/dist/application/doctor.constants.js

@@ -0,0 +1,15 @@
+export const doctorDefaults = Object.freeze({
+    provider: "docker",
+    agent: "codex",
+    deadlineMs: 5_000,
+    retain: 4_096,
+    minimumNodeMajor: 24,
+});
+export const providerDiagnostics = {
+    docker: { placement: "mounted", interactiveTerminal: true },
+    podman: { placement: "mounted", interactiveTerminal: true },
+    local: { placement: "host", interactiveTerminal: true },
+    vercel: { placement: "remote", interactiveTerminal: false },
+    daytona: { placement: "remote", interactiveTerminal: false },
+};
+//# sourceMappingURL=doctor.constants.js.map

package/dist/application/doctor.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.constants.js","sourceRoot":"","sources":["../../src/application/doctor.constants.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,EAAE;CACZ,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAK5B;IACF,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE;IACvD,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE;IAC3D,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE;CAC7D,CAAC","sourcesContent":["import type { DoctorProvider, DoctorReport } from \"./doctor.types.ts\";\nexport const doctorDefaults = Object.freeze({\n  provider: \"docker\",\n  agent: \"codex\",\n  deadlineMs: 5_000,\n  retain: 4_096,\n  minimumNodeMajor: 24,\n} as const);\nexport const providerDiagnostics: Readonly<\n  Record<\n    DoctorProvider,\n    Pick<DoctorReport, \"placement\" | \"interactiveTerminal\">\n  >\n> = {\n  docker: { placement: \"mounted\", interactiveTerminal: true },\n  podman: { placement: \"mounted\", interactiveTerminal: true },\n  local: { placement: \"host\", interactiveTerminal: true },\n  vercel: { placement: \"remote\", interactiveTerminal: false },\n  daytona: { placement: \"remote\", interactiveTerminal: false },\n};\n"]}

package/dist/application/doctor.d.ts

@@ -0,0 +1,3 @@
+import type { Executor } from "../infrastructure/process.types.ts";
+import type { DoctorOptions, DoctorReport } from "./doctor.types.ts";
+export declare function diagnose(options: DoctorOptions, execute?: Executor): Promise<DoctorReport>;

package/dist/application/doctor.js

@@ -0,0 +1,106 @@
+import { invariant } from "../domain/errors.js";
+import { executeProcess } from "../infrastructure/process.js";
+import { agentVersions } from "../providers/versions.constants.js";
+import { diagnoseImage } from "./doctor-image.js";
+import { diagnosticProbe } from "./diagnostic-probe.js";
+import { doctorDefaults, providerDiagnostics } from "./doctor.constants.js";
+export async function diagnose(options, execute = executeProcess) {
+    const { provider, agent, image } = options;
+    if (image !== undefined) {
+        invariant(provider === "docker" || provider === "podman", "--image requires docker or podman.");
+        invariant(image.length > 0 &&
+            !image.startsWith("-") &&
+            !/[\x00-\x20\x7f]/.test(image), "Invalid diagnostic image name.");
+    }
+    const capabilities = providerDiagnostics[provider];
+    const checks = [
+        {
+            id: "host.node",
+            status: Number(process.versions.node.split(".")[0]) >=
+                doctorDefaults.minimumNodeMajor
+                ? "pass"
+                : "fail",
+            version: process.versions.node,
+            message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,
+        },
+    ];
+    checks.push(await diagnosticProbe({
+        id: "host.git",
+        command: { executable: "git", arguments: ["--version"] },
+        failureStatus: "fail",
+        remedy: "Install Git and make it available on PATH.",
+        readVersion: true,
+    }, execute));
+    if (capabilities.placement === "mounted") {
+        const engine = await diagnosticProbe({
+            id: "provider.cli",
+            command: { executable: provider, arguments: ["--version"] },
+            failureStatus: "fail",
+            remedy: `Install ${provider} and make it available on PATH.`,
+            readVersion: true,
+        }, execute);
+        checks.push(engine);
+        if (engine.status === "pass")
+            checks.push(await diagnosticProbe({
+                id: "provider.connection",
+                command: {
+                    executable: provider,
+                    arguments: ["info"],
+                },
+                failureStatus: "fail",
+                remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,
+            }, execute));
+        checks.push(await diagnosticProbe({
+            id: "host.tar",
+            command: { executable: "tar", arguments: ["--version"] },
+            failureStatus: "fail",
+            remedy: "Install GNU tar or bsdtar for container transfers.",
+        }, execute));
+    }
+    if (capabilities.placement === "remote")
+        checks.push({
+            id: "provider.cloud",
+            status: "skipped",
+            message: "Cloud SDK, credentials, account access and allocation are not checked.",
+        });
+    checks.push(await diagnosticProbe({
+        id: "agent.host",
+        command: { executable: agent, arguments: ["--version"] },
+        failureStatus: "warn",
+        remedy: "Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.",
+        readVersion: true,
+        referenceVersion: agentVersions[agent],
+    }, execute));
+    if (image !== undefined && (provider === "docker" || provider === "podman")) {
+        const connected = checks.some((check) => check.id === "provider.connection" && check.status === "pass");
+        if (connected)
+            checks.push(...(await diagnoseImage({ provider, agent, image }, execute)));
+        else
+            checks.push({
+                id: "image.runtime",
+                status: "skipped",
+                message: "Image checks require a reachable container engine.",
+            });
+    }
+    if (capabilities.placement !== "host" && image === undefined)
+        checks.push({
+            id: "agent.sandbox",
+            status: "skipped",
+            message: "Agent version inside the sandbox is not checked; the host version does not describe the sandbox.",
+        });
+    checks.push({
+        id: "execution",
+        status: "skipped",
+        message: image === undefined
+            ? "Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated."
+            : "Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.",
+    });
+    return {
+        ...options,
+        scope: image === undefined ? "host" : "host-and-image",
+        ...capabilities,
+        checks,
+        hasFailures: checks.some((check) => check.status === "fail"),
+    };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/application/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/application/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,UAAoB,cAAc;IAElC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,SAAS,CACP,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAC9C,oCAAoC,CACrC,CAAC;QACF,SAAS,CACP,KAAK,CAAC,MAAM,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAChC,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAsB;QAChC;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EACJ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,cAAc,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC9B,OAAO,EAAE,4BAA4B,cAAc,CAAC,gBAAgB,IAAI;SACzE;KACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,4CAA4C;QACpD,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,EAAE,EAAE,cAAc;YAClB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAC3D,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,QAAQ,iCAAiC;YAC5D,WAAW,EAAE,IAAI;SAClB,EACD,OAAO,CACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAC1B,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,qBAAqB;gBACzB,OAAO,EAAE;oBACP,UAAU,EAAE,QAAQ;oBACpB,SAAS,EAAE,CAAC,MAAM,CAAC;iBACpB;gBACD,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,SAAS,QAAQ,+EAA+E;aACzG,EACD,OAAO,CACR,CACF,CAAC;QACJ,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,oDAAoD;SAC7D,EACD,OAAO,CACR,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,QAAQ;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,gBAAgB;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,wEAAwE;SAC3E,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EACJ,gHAAgH;QAClH,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;KACvC,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CACzE,CAAC;QACF,IAAI,SAAS;YACX,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAC9D,CAAC;;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,mIAAmI;KAC1I,CAAC,CAAC;IACH,OAAO;QACL,GAAG,OAAO;QACV,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;QACtD,GAAG,YAAY;QACf,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseImage } from \"./doctor-image.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults, providerDiagnostics } from \"./doctor.constants.ts\";\nimport type {\n  DiagnosticCheck,\n  DoctorOptions,\n  DoctorReport,\n} from \"./doctor.types.ts\";\n\nexport async function diagnose(\n  options: DoctorOptions,\n  execute: Executor = executeProcess,\n): Promise<DoctorReport> {\n  const { provider, agent, image } = options;\n  if (image !== undefined) {\n    invariant(\n      provider === \"docker\" || provider === \"podman\",\n      \"--image requires docker or podman.\",\n    );\n    invariant(\n      image.length > 0 &&\n        !image.startsWith(\"-\") &&\n        !/[\\x00-\\x20\\x7f]/.test(image),\n      \"Invalid diagnostic image name.\",\n    );\n  }\n  const capabilities = providerDiagnostics[provider];\n  const checks: DiagnosticCheck[] = [\n    {\n      id: \"host.node\",\n      status:\n        Number(process.versions.node.split(\".\")[0]) >=\n        doctorDefaults.minimumNodeMajor\n          ? \"pass\"\n          : \"fail\",\n      version: process.versions.node,\n      message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,\n    },\n  ];\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"host.git\",\n        command: { executable: \"git\", arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: \"Install Git and make it available on PATH.\",\n        readVersion: true,\n      },\n      execute,\n    ),\n  );\n  if (capabilities.placement === \"mounted\") {\n    const engine = await diagnosticProbe(\n      {\n        id: \"provider.cli\",\n        command: { executable: provider, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: `Install ${provider} and make it available on PATH.`,\n        readVersion: true,\n      },\n      execute,\n    );\n    checks.push(engine);\n    if (engine.status === \"pass\")\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: \"provider.connection\",\n            command: {\n              executable: provider,\n              arguments: [\"info\"],\n            },\n            failureStatus: \"fail\",\n            remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,\n          },\n          execute,\n        ),\n      );\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"host.tar\",\n          command: { executable: \"tar\", arguments: [\"--version\"] },\n          failureStatus: \"fail\",\n          remedy: \"Install GNU tar or bsdtar for container transfers.\",\n        },\n        execute,\n      ),\n    );\n  }\n  if (capabilities.placement === \"remote\")\n    checks.push({\n      id: \"provider.cloud\",\n      status: \"skipped\",\n      message:\n        \"Cloud SDK, credentials, account access and allocation are not checked.\",\n    });\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"agent.host\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"warn\",\n        remedy:\n          \"Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n      },\n      execute,\n    ),\n  );\n  if (image !== undefined && (provider === \"docker\" || provider === \"podman\")) {\n    const connected = checks.some(\n      (check) => check.id === \"provider.connection\" && check.status === \"pass\",\n    );\n    if (connected)\n      checks.push(\n        ...(await diagnoseImage({ provider, agent, image }, execute)),\n      );\n    else\n      checks.push({\n        id: \"image.runtime\",\n        status: \"skipped\",\n        message: \"Image checks require a reachable container engine.\",\n      });\n  }\n  if (capabilities.placement !== \"host\" && image === undefined)\n    checks.push({\n      id: \"agent.sandbox\",\n      status: \"skipped\",\n      message:\n        \"Agent version inside the sandbox is not checked; the host version does not describe the sandbox.\",\n    });\n  checks.push({\n    id: \"execution\",\n    status: \"skipped\",\n    message:\n      image === undefined\n        ? \"Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated.\"\n        : \"Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.\",\n  });\n  return {\n    ...options,\n    scope: image === undefined ? \"host\" : \"host-and-image\",\n    ...capabilities,\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor.types.d.ts

@@ -0,0 +1,39 @@
+import type { Command } from "../domain/command.types.ts";
+export type DoctorProvider = "docker" | "podman" | "local" | "vercel" | "daytona";
+export type DoctorAgent = "codex" | "claude";
+export type DiagnosticStatus = "pass" | "warn" | "fail" | "skipped";
+export interface DiagnosticCheck {
+    readonly id: string;
+    readonly status: DiagnosticStatus;
+    readonly message: string;
+    readonly version?: string;
+    readonly referenceVersion?: string;
+}
+export interface DoctorOptions {
+    readonly image?: string;
+    readonly provider: DoctorProvider;
+    readonly agent: DoctorAgent;
+}
+export interface DoctorImageOptions {
+    readonly provider: "docker" | "podman";
+    readonly agent: DoctorAgent;
+    readonly image: string;
+}
+export interface DoctorReport {
+    readonly provider: DoctorProvider;
+    readonly agent: DoctorAgent;
+    readonly scope: "host" | "host-and-image";
+    readonly image?: string;
+    readonly placement: "mounted" | "host" | "remote";
+    readonly interactiveTerminal: boolean;
+    readonly checks: readonly DiagnosticCheck[];
+    readonly hasFailures: boolean;
+}
+export interface DiagnosticProbe {
+    readonly id: string;
+    readonly command: Command;
+    readonly failureStatus: "fail" | "warn";
+    readonly remedy: string;
+    readonly readVersion?: boolean;
+    readonly referenceVersion?: string;
+}

package/dist/application/doctor.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor.types.js.map

package/dist/application/doctor.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.types.js","sourceRoot":"","sources":["../../src/application/doctor.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command } from \"../domain/command.types.ts\";\nexport type DoctorProvider =\n  \"docker\" | \"podman\" | \"local\" | \"vercel\" | \"daytona\";\nexport type DoctorAgent = \"codex\" | \"claude\";\nexport type DiagnosticStatus = \"pass\" | \"warn\" | \"fail\" | \"skipped\";\nexport interface DiagnosticCheck {\n  readonly id: string;\n  readonly status: DiagnosticStatus;\n  readonly message: string;\n  readonly version?: string;\n  readonly referenceVersion?: string;\n}\nexport interface DoctorOptions {\n  readonly image?: string;\n  readonly provider: DoctorProvider;\n  readonly agent: DoctorAgent;\n}\nexport interface DoctorImageOptions {\n  readonly provider: \"docker\" | \"podman\";\n  readonly agent: DoctorAgent;\n  readonly image: string;\n}\nexport interface DoctorReport {\n  readonly provider: DoctorProvider;\n  readonly agent: DoctorAgent;\n  readonly scope: \"host\" | \"host-and-image\";\n  readonly image?: string;\n  readonly placement: \"mounted\" | \"host\" | \"remote\";\n  readonly interactiveTerminal: boolean;\n  readonly checks: readonly DiagnosticCheck[];\n  readonly hasFailures: boolean;\n}\nexport interface DiagnosticProbe {\n  readonly id: string;\n  readonly command: Command;\n  readonly failureStatus: \"fail\" | \"warn\";\n  readonly remedy: string;\n  readonly readVersion?: boolean;\n  readonly referenceVersion?: string;\n}\n"]}