@elie-laloum/outpost 2.0.0 → 4.0.0

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 4.0.0
+
+This major release extends public workflow status unions. Exhaustive consumers must handle task statuses `paused` and `rejected`, and workflow result status `paused`. Research features remain explicitly opt-in with their documented limitations.
+
+- Allocate isolated container workspaces under a writable private parent for rootless Podman, and publish file artifacts without recreating Windows drive roots. Document manual checkpoint lock recovery when process ownership cannot be verified.
+- Create missing Vercel workspace and transfer parent directories recursively before writing files.
+
+- Add cooperative storage reservations with workspace ownership, isolated restoration of retained previous/incoming transfer state, and local sandbox/resource activity inspection.
+- Batch and verify incremental file/symlink uploads; transfer verified Git history deltas while retaining complete recovery bundles. Directory copies keep their existing transfer behavior.
+- Persist workflow checkpoints with JSON outputs, explicit replay and cumulative usage. Add approval/pause gates and typed immutable artifacts with unsigned lineage.
+- Add SQLite durable task queues, authenticated HTTP transport and fenced workers. Replays can repeat side effects; terminal usage receipts prevent double accounting without guaranteeing real-time billing caps.
+- Extend task statuses with `paused` and `rejected`, and workflow result status with `paused`; exhaustive status consumers must handle these values. Add optional checkpoint flushing and usage-receipt methods to task contexts.
+- Support Daytona native PTY attachment with cancellation, resize and reuse; live account validation remains outstanding.
+- Add the Gemini CLI adapter, bootstrap, diagnostics and image installation pinned to 0.61.0. Gemini supports fresh sessions only, without native conversation capture, continuation or automatic response repairs.
+- Add opt-in research prototypes for isolated Docker/Podman Git checkouts, prepared-host Firecracker microVMs, container deny-all/Vercel egress policies, and bounded speculative candidates with explicit validation and no automatic integration.
+- Attribute cloud reports to source commit/runtime/time and retain successful image-attestation verification artifacts. Live cloud campaigns, signed publication and real Firecracker boot remain separately gated validation, not implied successes.
+- Synchronize the complete public API reference, bilingual guides and roadmap with implemented behavior and remaining prototype limits.
+
+## 3.0.0
+
+- Canonicalize temporary recovery verification directories across platforms and reuse existing Podman cache volumes without recreation.
+- Breaking: custom implementations of `Sandbox`, `TaskContext` and `WorkflowResult` must provide `diagnose`, `reportUsage` and `usage`, respectively; exhaustive workflow observers must handle the new `attempt` and `usage` events. Factory-created objects provide these members automatically.
+- Treat uncertain or legacy lock ownership conservatively; simultaneous writers to the same configured journal now conflict instead of sharing the file.
+- Add shared workflow attempt and observed usage budgets, including retries and agent repairs, with graceful admission draining and cooperative token-limit cancellation.
+- Add structured workflow usage/lifecycle events and an optional OpenTelemetry entry point with injected tracer/meter, fixed span names, counters and duration histograms without task contents or identifiers.
+- Diagnose caller-owned sandboxes through an exclusive operation, with optional binary transfer probes and cleanup; report observed capabilities separately from advertised contracts and bundled agent protocol fixture checks.
+- Add credential-free cloud contract fixtures and explicitly enabled scheduled Vercel/Daytona checks with sanitized reports, independent cleanup and optional live CLI syntax probes; authenticated model turns remain outside this suite.
+- Wait for Daytona command exit status after output closes, and register allocation cleanup before discovering the sandbox home.
+- Add explicit recovery retention plans, revalidated cleanup and quota admission; protect recovery artifacts, uncertain logs and workspaces containing ignored files.
+- Observe lock ownership using Linux host, boot, namespace and process-start identity; serialize stale-lock reclamation and refuse uncertain owners.
+- Verify retained Git bundles, objects and patch applicability in an isolated copy without inherited Git filters or changes to the source repository.
+- Add opt-in Docker/Podman dependency caches with explicit invalidation keys and repository, image and user scoping; add pinned agent-image build tooling and a gated publication workflow with signed provenance verification.
+- Download changed untracked files from Vercel/Daytona using SHA-256 manifests and bounded gzip batches; reuse verified unchanged files while retaining complete recovery payloads and protecting ignored host files.
+- Record atomic SHA-256 manifests for new remote transfer backups before host apply; add opt-in `recovery verify --checksums` with bounded streaming verification, explicit missing/mismatched results and preserved host state on capture failure.
+- Add read-only `recovery verify --directory` checks for retained transfer metadata and required backup files, with bounded state parsing and explicit separation from content integrity or restoration validation.
+- Add optional `recovery inspect --locks` with bounded lock metadata reads and local PID observations; report invalid or unverifiable records explicitly without claiming ownership or deleting locks.
+- Add optional `recovery inspect --git` workspace reports with branch/detached HEAD, clean/dirty status, Git locks and explicit unregistered/unavailable states, without refreshing indexes or pruning registrations.
+- Add read-only `outpost recovery inspect` reports for recovery files, logs, locks and managed workspaces, with metadata-only logical sizes, symlink protection and explicit partial results when traversal limits or filesystem errors prevent a complete inventory.
+- Check default agent start/resume/fork CLI help inside diagnostic images, verifying command usage and declared options instead of trusting a successful help exit; keep real execution and protocol compatibility explicitly unverified.
+- Extend `doctor --image` to check a local Docker/Podman image in a temporary sandbox, without image downloads or networking; report image agent versions and cleanup failures separately from host checks.
+- Add `outpost doctor` with bounded host prerequisite checks, Docker/Podman connectivity, host agent version comparison, explicit unchecked capabilities and JSON reports.
+
 ## 2.0.0
 
 - Normalize the workflow test directory before computing relative repository paths, fixing macOS CI with symlinked temporary directories.

package/README.md

@@ -2,7 +2,9 @@
 
 [Documentation](https://elie-laloum.github.io/outpost/) · [Français](https://elie-laloum.github.io/outpost/fr/) · [API](https://elie-laloum.github.io/outpost/reference/) · [Changelog](CHANGELOG.md)
 
-Outpost is a TypeScript library for running coding agents in reusable sandboxes, managing their Git workspaces and composing typed workflows. Claude Code and Codex adapters work with Docker, Podman, Vercel, Daytona or explicit host execution.
+Outpost is a TypeScript library for running coding agents in reusable sandboxes, managing their Git workspaces and composing typed workflows. Claude Code, Codex and Gemini CLI adapters work with Docker, Podman, Vercel, Daytona or explicit host execution. Gemini supports fresh sessions only; native conversation capture, resume and fork are available for Claude Code and Codex.
+
+Version 4.0.0 adds durable orchestration, recovery and transfer improvements, Gemini CLI and native Daytona terminals. Research prototypes remain opt-in; see the [changelog](CHANGELOG.md#400) for public contract changes and the [roadmap](https://elie-laloum.github.io/outpost/project/roadmap/) for capabilities, limits and remaining work.
 
 ## Get started
 

package/SECURITY.md

@@ -2,10 +2,12 @@
 
 Outpost runs coding agents that execute arbitrary project commands. Use it with repositories and credentials appropriate for that task.
 
-Docker/Podman expose only the selected checkout, Git metadata and explicit volumes. The Docker socket is not mounted by default. Containers use a chosen UID/GID, dropped capabilities, no-new-privileges and a private home. Extra devices, writable mounts and elevated hooks expand the boundary deliberately.
+By default, Docker/Podman expose the selected checkout, Git metadata and explicit volumes. The Docker socket is not mounted by default. Containers use a chosen UID/GID, dropped capabilities, no-new-privileges and a private home. Extra devices, writable mounts and elevated hooks expand the boundary deliberately.
 
 Shared Git metadata is writable by the agent. A mounted sandbox is not an adversarial boundary protecting the host repository or its configuration. Outpost disables host Git hooks for its own Git commands, but a malicious repository can contain other executable configuration or project tooling. Do not run untrusted repositories with valuable host credentials. Host `local()` provides no isolation.
 
+The opt-in Docker/Podman `repositoryMode: "isolated"` prototype uses a private container checkout and Git directory, without mounting the host checkout or Git metadata. Bundle transfer and validated synchronization import changes into the host workspace; host hooks, configuration and unrelated refs are not copied back. Explicit mounts overlapping canonical host repository/workspace/Git paths or container workspace/control paths are rejected, including read-only mounts. Dependency caches remain separate engine-managed volumes. Trust the container image, engine and host mount configuration: custom devices, external mounts, credentials, network access and shared caches expand the boundary. This is not a certified hostile-agent sandbox or protection against container/kernel escapes, malicious host path replacement during allocation, or dangerous project code later executed on the host.
+
 Remote providers upload repository history and inputs to the selected cloud account. Explicit credentials and environment files are sent to that environment. Review the cloud provider's own storage/network policy. Concurrent host changes stop synchronization; recovery files preserve prior and incoming state when available.
 
 Prompt command expansion only recognizes commands present in the original prompt file. Substitution cannot introduce new expansion fragments. Values substituted inside an original shell command still have shell semantics and must be trusted or quoted by the prompt author.

package/dist/adapters/agents/claude-diagnostics.d.ts

@@ -0,0 +1 @@
+export declare function claudeDiagnostics(): readonly import("./cli-diagnostics.types.ts").AgentCliDiagnostic[];

package/dist/adapters/agents/claude-diagnostics.js

@@ -0,0 +1,7 @@
+import { claudeDiagnosticUsage } from "./cli-diagnostics.constants.js";
+import { cliDiagnostics } from "./cli-diagnostics.js";
+import { claudeRequest } from "./claude-request.js";
+export function claudeDiagnostics() {
+    return cliDiagnostics((input) => claudeRequest({}, input), claudeDiagnosticUsage);
+}
+//# sourceMappingURL=claude-diagnostics.js.map

package/dist/adapters/agents/claude-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-diagnostics.js","sourceRoot":"","sources":["../../../src/adapters/agents/claude-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CACnB,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,EACnC,qBAAqB,CACtB,CAAC;AACJ,CAAC","sourcesContent":["import { claudeDiagnosticUsage } from \"./cli-diagnostics.constants.ts\";\nimport { cliDiagnostics } from \"./cli-diagnostics.ts\";\nimport { claudeRequest } from \"./claude-request.ts\";\n\nexport function claudeDiagnostics() {\n  return cliDiagnostics(\n    (input) => claudeRequest({}, input),\n    claudeDiagnosticUsage,\n  );\n}\n"]}

package/dist/adapters/agents/cli-diagnostics.constants.d.ts

@@ -0,0 +1,12 @@
+import type { AgentCliScenario } from "./cli-diagnostics.types.ts";
+export declare const cliDiagnosticScenarios: readonly AgentCliScenario[];
+export declare const codexDiagnosticUsage: {
+    readonly start: "codex exec";
+    readonly resume: "codex exec resume";
+    readonly fork: "codex exec fork";
+};
+export declare const claudeDiagnosticUsage: {
+    readonly start: "claude";
+    readonly resume: "claude";
+    readonly fork: "claude";
+};

package/dist/adapters/agents/cli-diagnostics.constants.js

@@ -0,0 +1,24 @@
+export const cliDiagnosticScenarios = [
+    { mode: "start", input: {} },
+    {
+        mode: "resume",
+        input: { continuation: { id: "00000000-0000-0000-0000-000000000000" } },
+    },
+    {
+        mode: "fork",
+        input: {
+            continuation: { id: "00000000-0000-0000-0000-000000000000", fork: true },
+        },
+    },
+];
+export const codexDiagnosticUsage = {
+    start: "codex exec",
+    resume: "codex exec resume",
+    fork: "codex exec fork",
+};
+export const claudeDiagnosticUsage = {
+    start: "claude",
+    resume: "claude",
+    fork: "claude",
+};
+//# sourceMappingURL=cli-diagnostics.constants.js.map

package/dist/adapters/agents/cli-diagnostics.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-diagnostics.constants.js","sourceRoot":"","sources":["../../../src/adapters/agents/cli-diagnostics.constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAgC;IACjE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;IAC5B;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,sCAAsC,EAAE,EAAE;KACxE;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE;YACL,YAAY,EAAE,EAAE,EAAE,EAAE,sCAAsC,EAAE,IAAI,EAAE,IAAI,EAAE;SACzE;KACF;CACF,CAAC;AACF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,mBAAmB;IAC3B,IAAI,EAAE,iBAAiB;CACf,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,QAAQ;CACN,CAAC","sourcesContent":["import type { AgentCliScenario } from \"./cli-diagnostics.types.ts\";\n\nexport const cliDiagnosticScenarios: readonly AgentCliScenario[] = [\n  { mode: \"start\", input: {} },\n  {\n    mode: \"resume\",\n    input: { continuation: { id: \"00000000-0000-0000-0000-000000000000\" } },\n  },\n  {\n    mode: \"fork\",\n    input: {\n      continuation: { id: \"00000000-0000-0000-0000-000000000000\", fork: true },\n    },\n  },\n];\nexport const codexDiagnosticUsage = {\n  start: \"codex exec\",\n  resume: \"codex exec resume\",\n  fork: \"codex exec fork\",\n} as const;\nexport const claudeDiagnosticUsage = {\n  start: \"claude\",\n  resume: \"claude\",\n  fork: \"claude\",\n} as const;\n"]}

package/dist/adapters/agents/cli-diagnostics.d.ts

@@ -0,0 +1,4 @@
+import type { AgentInput } from "../../domain/agent.types.ts";
+import type { Command } from "../../domain/command.types.ts";
+import type { AgentCliDiagnostic, AgentCliMode } from "./cli-diagnostics.types.ts";
+export declare function cliDiagnostics(request: (input: AgentInput) => Command, usage: Readonly<Record<AgentCliMode, string>>): readonly AgentCliDiagnostic[];

package/dist/adapters/agents/cli-diagnostics.js

@@ -0,0 +1,14 @@
+import { cliDiagnosticScenarios } from "./cli-diagnostics.constants.js";
+export function cliDiagnostics(request, usage) {
+    return cliDiagnosticScenarios.map(({ mode, input }) => {
+        const command = request(input);
+        const args = command.arguments ?? [];
+        return {
+            mode,
+            usage: usage[mode],
+            options: args.filter((argument) => argument.startsWith("--")),
+            command: { ...command, arguments: [...args, "--help"] },
+        };
+    });
+}
+//# sourceMappingURL=cli-diagnostics.js.map

package/dist/adapters/agents/cli-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-diagnostics.js","sourceRoot":"","sources":["../../../src/adapters/agents/cli-diagnostics.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAMxE,MAAM,UAAU,cAAc,CAC5B,OAAuC,EACvC,KAA6C;IAE7C,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE;SACxD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { AgentInput } from \"../../domain/agent.types.ts\";\nimport type { Command } from \"../../domain/command.types.ts\";\nimport { cliDiagnosticScenarios } from \"./cli-diagnostics.constants.ts\";\nimport type {\n  AgentCliDiagnostic,\n  AgentCliMode,\n} from \"./cli-diagnostics.types.ts\";\n\nexport function cliDiagnostics(\n  request: (input: AgentInput) => Command,\n  usage: Readonly<Record<AgentCliMode, string>>,\n): readonly AgentCliDiagnostic[] {\n  return cliDiagnosticScenarios.map(({ mode, input }) => {\n    const command = request(input);\n    const args = command.arguments ?? [];\n    return {\n      mode,\n      usage: usage[mode],\n      options: args.filter((argument) => argument.startsWith(\"--\")),\n      command: { ...command, arguments: [...args, \"--help\"] },\n    };\n  });\n}\n"]}

package/dist/adapters/agents/cli-diagnostics.types.d.ts

@@ -0,0 +1,13 @@
+import type { AgentInput } from "../../domain/agent.types.ts";
+import type { Command } from "../../domain/command.types.ts";
+export type AgentCliMode = "start" | "resume" | "fork";
+export interface AgentCliScenario {
+    readonly mode: AgentCliMode;
+    readonly input: AgentInput;
+}
+export interface AgentCliDiagnostic {
+    readonly mode: AgentCliMode;
+    readonly command: Command;
+    readonly usage: string;
+    readonly options: readonly string[];
+}

package/dist/adapters/agents/cli-diagnostics.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli-diagnostics.types.js.map

package/dist/adapters/agents/cli-diagnostics.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-diagnostics.types.js","sourceRoot":"","sources":["../../../src/adapters/agents/cli-diagnostics.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentInput } from \"../../domain/agent.types.ts\";\nimport type { Command } from \"../../domain/command.types.ts\";\n\nexport type AgentCliMode = \"start\" | \"resume\" | \"fork\";\nexport interface AgentCliScenario {\n  readonly mode: AgentCliMode;\n  readonly input: AgentInput;\n}\nexport interface AgentCliDiagnostic {\n  readonly mode: AgentCliMode;\n  readonly command: Command;\n  readonly usage: string;\n  readonly options: readonly string[];\n}\n"]}

package/dist/adapters/agents/codex-diagnostics.d.ts

@@ -0,0 +1 @@
+export declare function codexDiagnostics(): readonly import("./cli-diagnostics.types.ts").AgentCliDiagnostic[];

package/dist/adapters/agents/codex-diagnostics.js

@@ -0,0 +1,7 @@
+import { codexDiagnosticUsage } from "./cli-diagnostics.constants.js";
+import { cliDiagnostics } from "./cli-diagnostics.js";
+import { codexRequest } from "./codex-request.js";
+export function codexDiagnostics() {
+    return cliDiagnostics((input) => codexRequest({}, input), codexDiagnosticUsage);
+}
+//# sourceMappingURL=codex-diagnostics.js.map

package/dist/adapters/agents/codex-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-diagnostics.js","sourceRoot":"","sources":["../../../src/adapters/agents/codex-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,cAAc,CACnB,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAClC,oBAAoB,CACrB,CAAC;AACJ,CAAC","sourcesContent":["import { codexDiagnosticUsage } from \"./cli-diagnostics.constants.ts\";\nimport { cliDiagnostics } from \"./cli-diagnostics.ts\";\nimport { codexRequest } from \"./codex-request.ts\";\n\nexport function codexDiagnostics() {\n  return cliDiagnostics(\n    (input) => codexRequest({}, input),\n    codexDiagnosticUsage,\n  );\n}\n"]}

package/dist/adapters/agents/gemini-adapter.d.ts

@@ -0,0 +1,3 @@
+import type { AgentAdapter } from "../../domain/agent.types.ts";
+import type { GeminiSettings } from "./gemini.types.ts";
+export declare function gemini(settings?: GeminiSettings): AgentAdapter;

package/dist/adapters/agents/gemini-adapter.js

@@ -0,0 +1,15 @@
+import { geminiEvents } from "./gemini-events.js";
+import { geminiRequest } from "./gemini-request.js";
+export function gemini(settings = {}) {
+    return Object.freeze({
+        name: "gemini",
+        bootstrap: "gemini",
+        resumable: false,
+        capture: false,
+        requiresFinishedEvent: true,
+        variables: Object.freeze({ ...settings.variables }),
+        request: (input) => geminiRequest(settings, input),
+        events: geminiEvents,
+    });
+}
+//# sourceMappingURL=gemini-adapter.js.map

package/dist/adapters/agents/gemini-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-adapter.js","sourceRoot":"","sources":["../../../src/adapters/agents/gemini-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,MAAM,UAAU,MAAM,CAAC,WAA2B,EAAE;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;QAClD,MAAM,EAAE,YAAY;KACE,CAAC,CAAC;AAC5B,CAAC","sourcesContent":["import type { AgentAdapter } from \"../../domain/agent.types.ts\";\nimport { geminiEvents } from \"./gemini-events.ts\";\nimport { geminiRequest } from \"./gemini-request.ts\";\nimport type { GeminiSettings } from \"./gemini.types.ts\";\n\nexport function gemini(settings: GeminiSettings = {}): AgentAdapter {\n  return Object.freeze({\n    name: \"gemini\",\n    bootstrap: \"gemini\",\n    resumable: false,\n    capture: false,\n    requiresFinishedEvent: true,\n    variables: Object.freeze({ ...settings.variables }),\n    request: (input) => geminiRequest(settings, input),\n    events: geminiEvents,\n  } satisfies AgentAdapter);\n}\n"]}

package/dist/adapters/agents/gemini-diagnostics.d.ts

@@ -0,0 +1,2 @@
+import type { AgentCliDiagnostic } from "./cli-diagnostics.types.ts";
+export declare function geminiDiagnostics(): readonly AgentCliDiagnostic[];

package/dist/adapters/agents/gemini-diagnostics.js

@@ -0,0 +1,15 @@
+import { geminiRequest } from "./gemini-request.js";
+export function geminiDiagnostics() {
+    const command = geminiRequest({}, {});
+    const args = command.arguments ?? [];
+    return [
+        {
+            mode: "start",
+            usage: "gemini",
+            options: args.filter((argument) => argument.startsWith("--")),
+            // Gemini omits supplied options from its help output.
+            command: { ...command, arguments: ["--help"] },
+        },
+    ];
+}
+//# sourceMappingURL=gemini-diagnostics.js.map

package/dist/adapters/agents/gemini-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-diagnostics.js","sourceRoot":"","sources":["../../../src/adapters/agents/gemini-diagnostics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IACrC,OAAO;QACL;YACE,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7D,sDAAsD;YACtD,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE;SAC/C;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentCliDiagnostic } from \"./cli-diagnostics.types.ts\";\nimport { geminiRequest } from \"./gemini-request.ts\";\n\nexport function geminiDiagnostics(): readonly AgentCliDiagnostic[] {\n  const command = geminiRequest({}, {});\n  const args = command.arguments ?? [];\n  return [\n    {\n      mode: \"start\",\n      usage: \"gemini\",\n      options: args.filter((argument) => argument.startsWith(\"--\")),\n      // Gemini omits supplied options from its help output.\n      command: { ...command, arguments: [\"--help\"] },\n    },\n  ];\n}\n"]}

package/dist/adapters/agents/gemini-events.d.ts

@@ -0,0 +1,2 @@
+import type { AgentEvent } from "../../domain/agent.types.ts";
+export declare function geminiEvents(line: string): AgentEvent[];

package/dist/adapters/agents/gemini-events.js

@@ -0,0 +1,50 @@
+import { decodeLine } from "./event-decoder.js";
+import { asRecord, numberOrZero } from "./protocol.js";
+function message(event) {
+    if (event.role !== "assistant" || typeof event.content !== "string")
+        return [];
+    return [{ kind: "text", text: event.content }];
+}
+function result(event) {
+    const events = [];
+    if (event.stats) {
+        const stats = asRecord(event.stats);
+        events.push({
+            kind: "usage",
+            tokens: {
+                input: numberOrZero(stats.input_tokens),
+                cached: numberOrZero(stats.cached),
+                output: numberOrZero(stats.output_tokens),
+            },
+        });
+    }
+    if (event.status === "success")
+        events.push({ kind: "finished" });
+    if (event.status === "error")
+        events.push({
+            kind: "failure",
+            message: String(asRecord(event.error).message ?? "Gemini failed"),
+        });
+    return events;
+}
+export function geminiEvents(line) {
+    return decodeLine(line, {
+        init: (event) => typeof event.session_id === "string"
+            ? [{ kind: "conversation", id: event.session_id }]
+            : [],
+        message,
+        tool_use: (event) => typeof event.tool_name === "string"
+            ? [{ kind: "tool", name: event.tool_name, input: event.parameters }]
+            : [],
+        error: (event) => typeof event.message === "string"
+            ? [
+                {
+                    kind: event.severity === "warning" ? "warning" : "failure",
+                    message: event.message,
+                },
+            ]
+            : [],
+        result,
+    });
+}
+//# sourceMappingURL=gemini-events.js.map

package/dist/adapters/agents/gemini-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-events.js","sourceRoot":"","sources":["../../../src/adapters/agents/gemini-events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGvD,SAAS,OAAO,CAAC,KAAqB;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjE,OAAO,EAAE,CAAC;IACZ,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,MAAM,CAAC,KAAqB;IACnC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC;gBACvC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC;aAC1C;SACF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC;SAClE,CAAC,CAAC;IACL,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,UAAU,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YAClC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YAClD,CAAC,CAAC,EAAE;QACR,OAAO;QACP,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACpE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAC/B,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;oBAC1D,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;aACF;YACH,CAAC,CAAC,EAAE;QACR,MAAM;KACP,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { AgentEvent } from \"../../domain/agent.types.ts\";\nimport { decodeLine } from \"./event-decoder.ts\";\nimport { asRecord, numberOrZero } from \"./protocol.ts\";\nimport type { ProtocolRecord } from \"./protocol.types.ts\";\n\nfunction message(event: ProtocolRecord): AgentEvent[] {\n  if (event.role !== \"assistant\" || typeof event.content !== \"string\")\n    return [];\n  return [{ kind: \"text\", text: event.content }];\n}\n\nfunction result(event: ProtocolRecord): AgentEvent[] {\n  const events: AgentEvent[] = [];\n  if (event.stats) {\n    const stats = asRecord(event.stats);\n    events.push({\n      kind: \"usage\",\n      tokens: {\n        input: numberOrZero(stats.input_tokens),\n        cached: numberOrZero(stats.cached),\n        output: numberOrZero(stats.output_tokens),\n      },\n    });\n  }\n  if (event.status === \"success\") events.push({ kind: \"finished\" });\n  if (event.status === \"error\")\n    events.push({\n      kind: \"failure\",\n      message: String(asRecord(event.error).message ?? \"Gemini failed\"),\n    });\n  return events;\n}\n\nexport function geminiEvents(line: string): AgentEvent[] {\n  return decodeLine(line, {\n    init: (event) =>\n      typeof event.session_id === \"string\"\n        ? [{ kind: \"conversation\", id: event.session_id }]\n        : [],\n    message,\n    tool_use: (event) =>\n      typeof event.tool_name === \"string\"\n        ? [{ kind: \"tool\", name: event.tool_name, input: event.parameters }]\n        : [],\n    error: (event) =>\n      typeof event.message === \"string\"\n        ? [\n            {\n              kind: event.severity === \"warning\" ? \"warning\" : \"failure\",\n              message: event.message,\n            },\n          ]\n        : [],\n    result,\n  });\n}\n"]}

package/dist/adapters/agents/gemini-request.d.ts

@@ -0,0 +1,4 @@
+import type { AgentInput } from "../../domain/agent.types.ts";
+import type { Command } from "../../domain/command.types.ts";
+import type { GeminiSettings } from "./gemini.types.ts";
+export declare function geminiRequest(settings: GeminiSettings, input: AgentInput): Command;

package/dist/adapters/agents/gemini-request.js

@@ -0,0 +1,21 @@
+import { invariant } from "../../domain/errors.js";
+export function geminiRequest(settings, input) {
+    invariant(!input.continuation, "Gemini does not support continuation or fork in Outpost");
+    const args = [];
+    if (settings.model)
+        args.push("--model", settings.model);
+    const approvalMode = settings.approvalMode ?? (input.interactive ? "default" : "yolo");
+    args.push("--approval-mode", approvalMode);
+    if (!input.interactive)
+        args.push("--output-format", "stream-json");
+    if (input.interactive && input.text !== undefined)
+        args.push("--prompt-interactive", input.text);
+    return {
+        executable: "gemini",
+        arguments: args,
+        ...(input.interactive
+            ? { interactive: true }
+            : { stdin: input.text ?? "" }),
+    };
+}
+//# sourceMappingURL=gemini-request.js.map

package/dist/adapters/agents/gemini-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-request.js","sourceRoot":"","sources":["../../../src/adapters/agents/gemini-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,MAAM,UAAU,aAAa,CAC3B,QAAwB,EACxB,KAAiB;IAEjB,SAAS,CACP,CAAC,KAAK,CAAC,YAAY,EACnB,yDAAyD,CAC1D,CAAC;IACF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,QAAQ,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,YAAY,GAChB,QAAQ,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAC/C,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO;QACL,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,IAAI;QACf,GAAG,CAAC,KAAK,CAAC,WAAW;YACnB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;YACvB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;KACjC,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentInput } from \"../../domain/agent.types.ts\";\nimport type { Command } from \"../../domain/command.types.ts\";\nimport { invariant } from \"../../domain/errors.ts\";\nimport type { GeminiSettings } from \"./gemini.types.ts\";\n\nexport function geminiRequest(\n  settings: GeminiSettings,\n  input: AgentInput,\n): Command {\n  invariant(\n    !input.continuation,\n    \"Gemini does not support continuation or fork in Outpost\",\n  );\n  const args: string[] = [];\n  if (settings.model) args.push(\"--model\", settings.model);\n  const approvalMode =\n    settings.approvalMode ?? (input.interactive ? \"default\" : \"yolo\");\n  args.push(\"--approval-mode\", approvalMode);\n  if (!input.interactive) args.push(\"--output-format\", \"stream-json\");\n  if (input.interactive && input.text !== undefined)\n    args.push(\"--prompt-interactive\", input.text);\n  return {\n    executable: \"gemini\",\n    arguments: args,\n    ...(input.interactive\n      ? { interactive: true }\n      : { stdin: input.text ?? \"\" }),\n  };\n}\n"]}

package/dist/adapters/agents/gemini.types.d.ts

@@ -0,0 +1,6 @@
+import type { Variables } from "../../domain/command.types.ts";
+export interface GeminiSettings {
+    readonly model?: string;
+    readonly variables?: Variables;
+    readonly approvalMode?: "default" | "auto_edit" | "yolo" | "plan";
+}

package/dist/adapters/agents/gemini.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gemini.types.js.map

package/dist/adapters/agents/gemini.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.types.js","sourceRoot":"","sources":["../../../src/adapters/agents/gemini.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Variables } from \"../../domain/command.types.ts\";\n\nexport interface GeminiSettings {\n  readonly model?: string;\n  readonly variables?: Variables;\n  readonly approvalMode?: \"default\" | \"auto_edit\" | \"yolo\" | \"plan\";\n}\n"]}

package/dist/adapters/agents/protocol-fixtures.constants.d.ts

@@ -0,0 +1,2 @@
+import type { AgentProtocolFixture } from "./protocol-fixtures.types.ts";
+export declare const protocolFixtures: Readonly<Record<"claude" | "codex" | "gemini", readonly AgentProtocolFixture[]>>;

package/dist/adapters/agents/protocol-fixtures.constants.js

@@ -0,0 +1,105 @@
+export const protocolFixtures = {
+    gemini: [
+        {
+            name: "turn",
+            lines: [
+                '{"type":"init","session_id":"fixture-conversation","model":"fixture-model"}',
+                '{"type":"tool_use","tool_name":"command","tool_id":"call-1","parameters":{"command":"fixture-command"}}',
+                '{"type":"message","role":"assistant","content":"fixture-result","delta":true}',
+                '{"type":"result","status":"success","stats":{"input_tokens":10,"cached":2,"output_tokens":3}}',
+            ],
+            expected: [
+                { kind: "conversation", id: "fixture-conversation" },
+                {
+                    kind: "tool",
+                    name: "command",
+                    input: { command: "fixture-command" },
+                },
+                { kind: "text", text: "fixture-result" },
+                { kind: "usage", tokens: { input: 10, cached: 2, output: 3 } },
+                { kind: "finished" },
+            ],
+        },
+        {
+            name: "failure",
+            lines: [
+                '{"type":"result","status":"error","error":{"message":"fixture-failure"}}',
+            ],
+            expected: [{ kind: "failure", message: "fixture-failure" }],
+        },
+        {
+            name: "unknown",
+            lines: ['{"type":"future.event"}', "invalid-json"],
+            expected: [
+                { kind: "raw", value: { type: "future.event" } },
+                { kind: "raw", value: "invalid-json" },
+            ],
+        },
+    ],
+    codex: [
+        {
+            name: "turn",
+            lines: [
+                '{"type":"thread.started","thread_id":"fixture-conversation"}',
+                '{"type":"item.started","item":{"type":"command_execution","command":"fixture-command"}}',
+                '{"type":"item.completed","item":{"type":"agent_message","text":"fixture-result"}}',
+                '{"type":"turn.completed","usage":{"input_tokens":10,"cached_input_tokens":2,"output_tokens":3}}',
+            ],
+            expected: [
+                { kind: "conversation", id: "fixture-conversation" },
+                { kind: "tool", name: "command", input: "fixture-command" },
+                { kind: "text", text: "fixture-result" },
+                { kind: "usage", tokens: { input: 10, cached: 2, output: 3 } },
+                { kind: "finished" },
+            ],
+        },
+        {
+            name: "failure",
+            lines: ['{"type":"turn.failed","error":{"message":"fixture-failure"}}'],
+            expected: [{ kind: "failure", message: "fixture-failure" }],
+        },
+        {
+            name: "unknown",
+            lines: ['{"type":"future.event"}', "invalid-json"],
+            expected: [
+                { kind: "raw", value: { type: "future.event" } },
+                { kind: "raw", value: "invalid-json" },
+            ],
+        },
+    ],
+    claude: [
+        {
+            name: "turn",
+            lines: [
+                '{"type":"system","session_id":"fixture-conversation"}',
+                '{"type":"assistant","message":{"content":[{"type":"tool_use","name":"command","input":"fixture-command"},{"type":"text","text":"fixture-result"}]}}',
+                '{"type":"result","result":"fixture-result","usage":{"input_tokens":10,"cache_creation_input_tokens":1,"cache_read_input_tokens":2,"output_tokens":3}}',
+            ],
+            expected: [
+                { kind: "conversation", id: "fixture-conversation" },
+                { kind: "tool", name: "command", input: "fixture-command" },
+                { kind: "text", text: "fixture-result" },
+                { kind: "result", text: "fixture-result" },
+                {
+                    kind: "usage",
+                    tokens: { input: 10, cached: 2, cacheCreated: 1, output: 3 },
+                },
+                { kind: "finished" },
+            ],
+        },
+        {
+            name: "failure",
+            lines: ['{"type":"result","is_error":true,"result":"fixture-failure"}'],
+            expected: [{ kind: "failure", message: "fixture-failure" }],
+        },
+        {
+            name: "unknown",
+            lines: ['{"type":"future.event"}', "invalid-json"],
+            expected: [
+                { kind: "raw", value: { type: "future.event" } },
+                { kind: "raw", value: "invalid-json" },
+            ],
+        },
+    ],
+};
+//# sourceMappingURL=protocol-fixtures.constants.js.map

package/dist/adapters/agents/protocol-fixtures.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-fixtures.constants.js","sourceRoot":"","sources":["../../../src/adapters/agents/protocol-fixtures.constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAEzB;IACF,MAAM,EAAE;QACN;YACE,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,6EAA6E;gBAC7E,yGAAyG;gBACzG,+EAA+E;gBAC/E,+FAA+F;aAChG;YACD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,sBAAsB,EAAE;gBACpD;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;iBACtC;gBACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE;gBACxC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;gBAC9D,EAAE,IAAI,EAAE,UAAU,EAAE;aACrB;SACF;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE;gBACL,0EAA0E;aAC3E;YACD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;SAC5D;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,yBAAyB,EAAE,cAAc,CAAC;YAClD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;gBAChD,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE;aACvC;SACF;KACF;IACD,KAAK,EAAE;QACL;YACE,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,8DAA8D;gBAC9D,yFAAyF;gBACzF,mFAAmF;gBACnF,iGAAiG;aAClG;YACD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,sBAAsB,EAAE;gBACpD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE;gBACxC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;gBAC9D,EAAE,IAAI,EAAE,UAAU,EAAE;aACrB;SACF;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,8DAA8D,CAAC;YACvE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;SAC5D;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,yBAAyB,EAAE,cAAc,CAAC;YAClD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;gBAChD,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE;aACvC;SACF;KACF;IACD,MAAM,EAAE;QACN;YACE,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,uDAAuD;gBACvD,qJAAqJ;gBACrJ,uJAAuJ;aACxJ;YACD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,sBAAsB,EAAE;gBACpD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE;gBACxC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE;gBAC1C;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;iBAC7D;gBACD,EAAE,IAAI,EAAE,UAAU,EAAE;aACrB;SACF;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,8DAA8D,CAAC;YACvE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;SAC5D;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,yBAAyB,EAAE,cAAc,CAAC;YAClD,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;gBAChD,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE;aACvC;SACF;KACF;CACF,CAAC","sourcesContent":["import type { AgentProtocolFixture } from \"./protocol-fixtures.types.ts\";\n\nexport const protocolFixtures: Readonly<\n  Record<\"claude\" | \"codex\" | \"gemini\", readonly AgentProtocolFixture[]>\n> = {\n  gemini: [\n    {\n      name: \"turn\",\n      lines: [\n        '{\"type\":\"init\",\"session_id\":\"fixture-conversation\",\"model\":\"fixture-model\"}',\n        '{\"type\":\"tool_use\",\"tool_name\":\"command\",\"tool_id\":\"call-1\",\"parameters\":{\"command\":\"fixture-command\"}}',\n        '{\"type\":\"message\",\"role\":\"assistant\",\"content\":\"fixture-result\",\"delta\":true}',\n        '{\"type\":\"result\",\"status\":\"success\",\"stats\":{\"input_tokens\":10,\"cached\":2,\"output_tokens\":3}}',\n      ],\n      expected: [\n        { kind: \"conversation\", id: \"fixture-conversation\" },\n        {\n          kind: \"tool\",\n          name: \"command\",\n          input: { command: \"fixture-command\" },\n        },\n        { kind: \"text\", text: \"fixture-result\" },\n        { kind: \"usage\", tokens: { input: 10, cached: 2, output: 3 } },\n        { kind: \"finished\" },\n      ],\n    },\n    {\n      name: \"failure\",\n      lines: [\n        '{\"type\":\"result\",\"status\":\"error\",\"error\":{\"message\":\"fixture-failure\"}}',\n      ],\n      expected: [{ kind: \"failure\", message: \"fixture-failure\" }],\n    },\n    {\n      name: \"unknown\",\n      lines: ['{\"type\":\"future.event\"}', \"invalid-json\"],\n      expected: [\n        { kind: \"raw\", value: { type: \"future.event\" } },\n        { kind: \"raw\", value: \"invalid-json\" },\n      ],\n    },\n  ],\n  codex: [\n    {\n      name: \"turn\",\n      lines: [\n        '{\"type\":\"thread.started\",\"thread_id\":\"fixture-conversation\"}',\n        '{\"type\":\"item.started\",\"item\":{\"type\":\"command_execution\",\"command\":\"fixture-command\"}}',\n        '{\"type\":\"item.completed\",\"item\":{\"type\":\"agent_message\",\"text\":\"fixture-result\"}}',\n        '{\"type\":\"turn.completed\",\"usage\":{\"input_tokens\":10,\"cached_input_tokens\":2,\"output_tokens\":3}}',\n      ],\n      expected: [\n        { kind: \"conversation\", id: \"fixture-conversation\" },\n        { kind: \"tool\", name: \"command\", input: \"fixture-command\" },\n        { kind: \"text\", text: \"fixture-result\" },\n        { kind: \"usage\", tokens: { input: 10, cached: 2, output: 3 } },\n        { kind: \"finished\" },\n      ],\n    },\n    {\n      name: \"failure\",\n      lines: ['{\"type\":\"turn.failed\",\"error\":{\"message\":\"fixture-failure\"}}'],\n      expected: [{ kind: \"failure\", message: \"fixture-failure\" }],\n    },\n    {\n      name: \"unknown\",\n      lines: ['{\"type\":\"future.event\"}', \"invalid-json\"],\n      expected: [\n        { kind: \"raw\", value: { type: \"future.event\" } },\n        { kind: \"raw\", value: \"invalid-json\" },\n      ],\n    },\n  ],\n  claude: [\n    {\n      name: \"turn\",\n      lines: [\n        '{\"type\":\"system\",\"session_id\":\"fixture-conversation\"}',\n        '{\"type\":\"assistant\",\"message\":{\"content\":[{\"type\":\"tool_use\",\"name\":\"command\",\"input\":\"fixture-command\"},{\"type\":\"text\",\"text\":\"fixture-result\"}]}}',\n        '{\"type\":\"result\",\"result\":\"fixture-result\",\"usage\":{\"input_tokens\":10,\"cache_creation_input_tokens\":1,\"cache_read_input_tokens\":2,\"output_tokens\":3}}',\n      ],\n      expected: [\n        { kind: \"conversation\", id: \"fixture-conversation\" },\n        { kind: \"tool\", name: \"command\", input: \"fixture-command\" },\n        { kind: \"text\", text: \"fixture-result\" },\n        { kind: \"result\", text: \"fixture-result\" },\n        {\n          kind: \"usage\",\n          tokens: { input: 10, cached: 2, cacheCreated: 1, output: 3 },\n        },\n        { kind: \"finished\" },\n      ],\n    },\n    {\n      name: \"failure\",\n      lines: ['{\"type\":\"result\",\"is_error\":true,\"result\":\"fixture-failure\"}'],\n      expected: [{ kind: \"failure\", message: \"fixture-failure\" }],\n    },\n    {\n      name: \"unknown\",\n      lines: ['{\"type\":\"future.event\"}', \"invalid-json\"],\n      expected: [\n        { kind: \"raw\", value: { type: \"future.event\" } },\n        { kind: \"raw\", value: \"invalid-json\" },\n      ],\n    },\n  ],\n};\n"]}

package/dist/adapters/agents/protocol-fixtures.types.d.ts

@@ -0,0 +1,6 @@
+import type { AgentEvent } from "../../domain/agent.types.ts";
+export interface AgentProtocolFixture {
+    readonly name: string;
+    readonly lines: readonly string[];
+    readonly expected: readonly AgentEvent[];
+}

package/dist/adapters/agents/protocol-fixtures.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=protocol-fixtures.types.js.map

package/dist/adapters/agents/protocol-fixtures.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-fixtures.types.js","sourceRoot":"","sources":["../../../src/adapters/agents/protocol-fixtures.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentEvent } from \"../../domain/agent.types.ts\";\n\nexport interface AgentProtocolFixture {\n  readonly name: string;\n  readonly lines: readonly string[];\n  readonly expected: readonly AgentEvent[];\n}\n"]}

package/dist/application/agent-bootstrap.constants.d.ts

@@ -1,4 +1,5 @@
 export declare const agentPackages: Readonly<{
     claude: "@anthropic-ai/claude-code@2.1.280";
+    gemini: "@google/gemini-cli@0.61.0";
     codex: "@openai/codex@0.156.1";
 }>;

package/dist/application/agent-bootstrap.constants.js

@@ -1,6 +1,7 @@
 import { agentVersions } from "../providers/versions.js";
 export const agentPackages = Object.freeze({
     claude: `@anthropic-ai/claude-code@${agentVersions.claude}`,
+    gemini: `@google/gemini-cli@${agentVersions.gemini}`,
     codex: `@openai/codex@${agentVersions.codex}`,
 });
 //# sourceMappingURL=agent-bootstrap.constants.js.map

package/dist/application/agent-bootstrap.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-bootstrap.constants.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,6BAA6B,aAAa,CAAC,MAAM,EAAE;IAC3D,KAAK,EAAE,iBAAiB,aAAa,CAAC,KAAK,EAAE;CAC9C,CAAC,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const agentPackages = Object.freeze({\n  claude: `@anthropic-ai/claude-code@${agentVersions.claude}`,\n  codex: `@openai/codex@${agentVersions.codex}`,\n});\n"]}
+{"version":3,"file":"agent-bootstrap.constants.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,6BAA6B,aAAa,CAAC,MAAM,EAAE;IAC3D,MAAM,EAAE,sBAAsB,aAAa,CAAC,MAAM,EAAE;IACpD,KAAK,EAAE,iBAAiB,aAAa,CAAC,KAAK,EAAE;CAC9C,CAAC,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const agentPackages = Object.freeze({\n  claude: `@anthropic-ai/claude-code@${agentVersions.claude}`,\n  gemini: `@google/gemini-cli@${agentVersions.gemini}`,\n  codex: `@openai/codex@${agentVersions.codex}`,\n});\n"]}

package/dist/application/agent-bootstrap.js

@@ -2,10 +2,14 @@ import { posix } from "node:path";
 import { invariant } from "../domain/errors.js";
 import { quote, requireSuccess } from "../infrastructure/process.js";
 import { agentPackages } from "./agent-bootstrap.constants.js";
+function isBootstrapAgent(name) {
+    return Object.hasOwn(agentPackages, name);
+}
 export async function prepareAdapter(agent, runtime, signal) {
-    if (!agent.conversations)
+    const executable = agent.bootstrap ?? agent.conversations;
+    if (!executable)
         return agent;
-    const executable = agent.conversations;
+    invariant(isBootstrapAgent(executable), `Unknown agent bootstrap: ${executable}`);
     const cli = agentPackages[executable];
     const prefix = posix.join(runtime.home, ".outpost-tools"), target = posix.join(prefix, "bin", executable);
     const installed = await requireSuccess({

package/dist/application/agent-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-bootstrap.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAmB,EACnB,OAAqB,EACrB,MAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC;IACvC,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACvD,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC;QACE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE;YACT,IAAI;YACJ,iBAAiB,UAAU,qCAAqC,UAAU,kBAAkB,KAAK,CAAC,MAAM,CAAC,yBAAyB,KAAK,CAAC,MAAM,CAAC,kFAAkF,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,0BAA0B,KAAK,CAAC,MAAM,CAAC,MAAM;SACnS;QACD,MAAM;KACP,EACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChD,qDAAqD,CACtD,CAAC;IACF,OAAO;QACL,GAAG,KAAK;QACR,OAAO,CAAC,KAAK;YACX,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { quote, requireSuccess } from \"../infrastructure/process.ts\";\nimport { agentPackages } from \"./agent-bootstrap.constants.ts\";\n\nexport async function prepareAdapter(\n  agent: AgentAdapter,\n  runtime: SandboxLease,\n  signal: AbortSignal,\n): Promise<AgentAdapter> {\n  if (!agent.conversations) return agent;\n  const executable = agent.conversations;\n  const cli = agentPackages[executable];\n  const prefix = posix.join(runtime.home, \".outpost-tools\"),\n    target = posix.join(prefix, \"bin\", executable);\n  const installed = await requireSuccess(\n    {\n      executable: \"sh\",\n      arguments: [\n        \"-c\",\n        `if command -v ${executable} >/dev/null 2>&1; then command -v ${executable}; elif test -x ${quote(target)}; then printf '%s\\\\n' ${quote(target)}; else npm install --global --allow-scripts=@anthropic-ai/claude-code --prefix ${quote(prefix)} ${cli} >&2 && printf '%s\\\\n' ${quote(target)}; fi`,\n      ],\n      signal,\n    },\n    runtime.invoke.bind(runtime),\n  );\n  const binary = installed.stdout.trim();\n  invariant(\n    binary.startsWith(\"/\") && !binary.includes(\"\\n\"),\n    \"Agent bootstrap returned an invalid executable path\",\n  );\n  return {\n    ...agent,\n    request(input) {\n      return { ...agent.request(input), executable: binary };\n    },\n  };\n}\n"]}
+{"version":3,"file":"agent-bootstrap.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAmB,EACnB,OAAqB,EACrB,MAAmB;IAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,CAAC;IAC1D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,SAAS,CACP,gBAAgB,CAAC,UAAU,CAAC,EAC5B,4BAA4B,UAAU,EAAE,CACzC,CAAC;IACF,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACvD,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC;QACE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE;YACT,IAAI;YACJ,iBAAiB,UAAU,qCAAqC,UAAU,kBAAkB,KAAK,CAAC,MAAM,CAAC,yBAAyB,KAAK,CAAC,MAAM,CAAC,kFAAkF,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,0BAA0B,KAAK,CAAC,MAAM,CAAC,MAAM;SACnS;QACD,MAAM;KACP,EACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,SAAS,CACP,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChD,qDAAqD,CACtD,CAAC;IACF,OAAO;QACL,GAAG,KAAK;QACR,OAAO,CAAC,KAAK;YACX,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { quote, requireSuccess } from \"../infrastructure/process.ts\";\nimport { agentPackages } from \"./agent-bootstrap.constants.ts\";\n\nfunction isBootstrapAgent(name: string): name is keyof typeof agentPackages {\n  return Object.hasOwn(agentPackages, name);\n}\n\nexport async function prepareAdapter(\n  agent: AgentAdapter,\n  runtime: SandboxLease,\n  signal: AbortSignal,\n): Promise<AgentAdapter> {\n  const executable = agent.bootstrap ?? agent.conversations;\n  if (!executable) return agent;\n  invariant(\n    isBootstrapAgent(executable),\n    `Unknown agent bootstrap: ${executable}`,\n  );\n  const cli = agentPackages[executable];\n  const prefix = posix.join(runtime.home, \".outpost-tools\"),\n    target = posix.join(prefix, \"bin\", executable);\n  const installed = await requireSuccess(\n    {\n      executable: \"sh\",\n      arguments: [\n        \"-c\",\n        `if command -v ${executable} >/dev/null 2>&1; then command -v ${executable}; elif test -x ${quote(target)}; then printf '%s\\\\n' ${quote(target)}; else npm install --global --allow-scripts=@anthropic-ai/claude-code --prefix ${quote(prefix)} ${cli} >&2 && printf '%s\\\\n' ${quote(target)}; fi`,\n      ],\n      signal,\n    },\n    runtime.invoke.bind(runtime),\n  );\n  const binary = installed.stdout.trim();\n  invariant(\n    binary.startsWith(\"/\") && !binary.includes(\"\\n\"),\n    \"Agent bootstrap returned an invalid executable path\",\n  );\n  return {\n    ...agent,\n    request(input) {\n      return { ...agent.request(input), executable: binary };\n    },\n  };\n}\n"]}