@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/application/doctor-sandbox.js

@@ -0,0 +1,133 @@
+import { invariant } from "../domain/errors.js";
+import { agentVersions } from "../providers/versions.constants.js";
+import { diagnoseAgentCli } from "./doctor-agent.js";
+import { diagnosticProbe } from "./diagnostic-probe.js";
+import { doctorDefaults } from "./doctor.constants.js";
+import { diagnoseTransfers } from "./doctor-transfers.js";
+import { sandboxDiagnosticDefaults } from "./doctor-sandbox.constants.js";
+export async function diagnoseSandbox(target, options = {}) {
+    if ("diagnose" in target)
+        return target.diagnose(options);
+    const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;
+    invariant(Number.isInteger(deadlineMs) &&
+        deadlineMs > 0 &&
+        deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs, "Diagnostic deadlineMs must be an integer from 1 to 60000");
+    options.signal?.throwIfAborted();
+    const invoke = (command) => {
+        options.signal?.throwIfAborted();
+        return target.invoke({
+            ...command,
+            deadlineMs,
+            retain: command.retain ?? doctorDefaults.retain,
+            signal: options.signal
+                ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])
+                : AbortSignal.timeout(deadlineMs),
+        });
+    };
+    const checks = [];
+    for (const executable of ["node", "git"]) {
+        checks.push(await diagnosticProbe({
+            id: `sandbox.${executable}`,
+            command: { executable, arguments: ["--version"] },
+            readVersion: true,
+            failureStatus: "fail",
+            remedy: `Install ${executable} in this sandbox.`,
+        }, invoke));
+    }
+    try {
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", sandboxDiagnosticDefaults.command],
+        });
+        const passed = result.status === 7 &&
+            result.stdout === "outpost-stdout" &&
+            result.stderr === "outpost-stderr";
+        checks.push({
+            id: "sandbox.command",
+            status: passed ? "pass" : "fail",
+            message: passed
+                ? "Observed separate output streams and nonzero process exit status."
+                : "Command output or exit status did not match the diagnostic sentinel.",
+        });
+    }
+    catch {
+        checks.push({
+            id: "sandbox.command",
+            status: "fail",
+            message: "Bounded command probe failed or was interrupted.",
+        });
+    }
+    checks.push(await diagnosticProbe({
+        id: "sandbox.home",
+        command: {
+            executable: "node",
+            arguments: ["-e", sandboxDiagnosticDefaults.home, target.home],
+        },
+        failureStatus: "fail",
+        remedy: "Check the lease home directory and its permissions.",
+    }, invoke));
+    if (options.agent) {
+        const version = await diagnosticProbe({
+            id: "agent.sandbox",
+            command: { executable: options.agent, arguments: ["--version"] },
+            readVersion: true,
+            referenceVersion: agentVersions[options.agent],
+            failureStatus: "fail",
+            remedy: "Install the agent explicitly; diagnostics never bootstrap it.",
+        }, invoke);
+        checks.push(version);
+        if (version.status !== "fail")
+            checks.push(...(await diagnoseAgentCli(options.agent, invoke)));
+    }
+    if (options.transfers === true)
+        checks.push(...(await diagnoseTransfers(target, { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) }, invoke)));
+    checks.push({
+        id: "model",
+        status: "skipped",
+        message: "Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.",
+    });
+    const observed = (id) => {
+        const check = checks.find((check) => check.id === id);
+        if (!check)
+            return "unverified";
+        return check.status === "pass" ? "pass" : "fail";
+    };
+    return {
+        scope: "owned-sandbox",
+        ownership: "caller",
+        ...(options.provider
+            ? {
+                provider: {
+                    name: options.provider.name,
+                    placement: options.provider.placement,
+                },
+            }
+            : {}),
+        capabilities: [
+            {
+                id: "command",
+                advertised: true,
+                observed: observed("sandbox.command"),
+            },
+            {
+                id: "transfers",
+                advertised: true,
+                observed: observed("sandbox.transfers"),
+            },
+            {
+                id: "batchTransfers",
+                advertised: target.fileTransfers !== undefined,
+                observed: "unverified",
+            },
+            {
+                id: "interactiveTerminal",
+                advertised: "unknown",
+                observed: "unverified",
+            },
+        ],
+        checks,
+        modelCompatibility: "unverified",
+        hasFailures: checks.some((check) => check.status === "fail"),
+    };
+}
+//# sourceMappingURL=doctor-sandbox.js.map

package/dist/application/doctor-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-sandbox.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA8B,EAC9B,UAAoC,EAAE;IAEtC,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;IACnE,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1B,UAAU,GAAG,CAAC;QACd,UAAU,IAAI,yBAAyB,CAAC,iBAAiB,EAC3D,0DAA0D,CAC3D,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO;YACV,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,WAAW,UAAU,EAAE;YAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACjD,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,UAAU,mBAAmB;SACjD,EACD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAClC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,sEAAsE;SAC3E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;SAC/D;QACD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,qDAAqD;KAC9D,EACD,MAAM,CACP,CACF,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAChE,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,+DAA+D;SACxE,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAC5B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,iBAAiB,CACzB,MAAM,EACN,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrE,MAAM,CACP,CAAC,CACH,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,oHAAoH;KACvH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,YAAqB,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB,CAAC;IACzE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;iBACtC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;aACtC;YACD;gBACE,EAAE,EAAE,WAAW;gBACf,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,CAAC;aACxC;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC9C,QAAQ,EAAE,YAAY;aACvB;YACD;gBACE,EAAE,EAAE,qBAAqB;gBACzB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,YAAY;aACvB;SACF;QACD,MAAM;QACN,kBAAkB,EAAE,YAAY;QAChC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { diagnoseTransfers } from \"./doctor-transfers.ts\";\nimport { sandboxDiagnosticDefaults } from \"./doctor-sandbox.constants.ts\";\nimport type {\n  SandboxDiagnosticOptions,\n  SandboxDiagnosticReport,\n} from \"./doctor-sandbox.types.ts\";\nimport type { Sandbox } from \"./outpost.types.ts\";\n\nexport async function diagnoseSandbox(\n  target: Sandbox | SandboxLease,\n  options: SandboxDiagnosticOptions = {},\n): Promise<SandboxDiagnosticReport> {\n  if (\"diagnose\" in target) return target.diagnose(options);\n  const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;\n  invariant(\n    Number.isInteger(deadlineMs) &&\n      deadlineMs > 0 &&\n      deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs,\n    \"Diagnostic deadlineMs must be an integer from 1 to 60000\",\n  );\n  options.signal?.throwIfAborted();\n  const invoke: Executor = (command) => {\n    options.signal?.throwIfAborted();\n    return target.invoke({\n      ...command,\n      deadlineMs,\n      retain: command.retain ?? doctorDefaults.retain,\n      signal: options.signal\n        ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])\n        : AbortSignal.timeout(deadlineMs),\n    });\n  };\n  const checks: DiagnosticCheck[] = [];\n  for (const executable of [\"node\", \"git\"]) {\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: `sandbox.${executable}`,\n          command: { executable, arguments: [\"--version\"] },\n          readVersion: true,\n          failureStatus: \"fail\",\n          remedy: `Install ${executable} in this sandbox.`,\n        },\n        invoke,\n      ),\n    );\n  }\n  try {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", sandboxDiagnosticDefaults.command],\n    });\n    const passed =\n      result.status === 7 &&\n      result.stdout === \"outpost-stdout\" &&\n      result.stderr === \"outpost-stderr\";\n    checks.push({\n      id: \"sandbox.command\",\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Observed separate output streams and nonzero process exit status.\"\n        : \"Command output or exit status did not match the diagnostic sentinel.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.command\",\n      status: \"fail\",\n      message: \"Bounded command probe failed or was interrupted.\",\n    });\n  }\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"sandbox.home\",\n        command: {\n          executable: \"node\",\n          arguments: [\"-e\", sandboxDiagnosticDefaults.home, target.home],\n        },\n        failureStatus: \"fail\",\n        remedy: \"Check the lease home directory and its permissions.\",\n      },\n      invoke,\n    ),\n  );\n  if (options.agent) {\n    const version = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: options.agent, arguments: [\"--version\"] },\n        readVersion: true,\n        referenceVersion: agentVersions[options.agent],\n        failureStatus: \"fail\",\n        remedy: \"Install the agent explicitly; diagnostics never bootstrap it.\",\n      },\n      invoke,\n    );\n    checks.push(version);\n    if (version.status !== \"fail\")\n      checks.push(...(await diagnoseAgentCli(options.agent, invoke)));\n  }\n  if (options.transfers === true)\n    checks.push(\n      ...(await diagnoseTransfers(\n        target,\n        { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) },\n        invoke,\n      )),\n    );\n  checks.push({\n    id: \"model\",\n    status: \"skipped\",\n    message:\n      \"Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.\",\n  });\n  const observed = (id: string) => {\n    const check = checks.find((check) => check.id === id);\n    if (!check) return \"unverified\" as const;\n    return check.status === \"pass\" ? (\"pass\" as const) : (\"fail\" as const);\n  };\n  return {\n    scope: \"owned-sandbox\",\n    ownership: \"caller\",\n    ...(options.provider\n      ? {\n          provider: {\n            name: options.provider.name,\n            placement: options.provider.placement,\n          },\n        }\n      : {}),\n    capabilities: [\n      {\n        id: \"command\",\n        advertised: true,\n        observed: observed(\"sandbox.command\"),\n      },\n      {\n        id: \"transfers\",\n        advertised: true,\n        observed: observed(\"sandbox.transfers\"),\n      },\n      {\n        id: \"batchTransfers\",\n        advertised: target.fileTransfers !== undefined,\n        observed: \"unverified\",\n      },\n      {\n        id: \"interactiveTerminal\",\n        advertised: \"unknown\",\n        observed: \"unverified\",\n      },\n    ],\n    checks,\n    modelCompatibility: \"unverified\",\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor-sandbox.types.d.ts

@@ -0,0 +1,23 @@
+import type { SandboxProvider } from "../domain/sandbox.types.ts";
+import type { DiagnosticCheck, DoctorAgent } from "./doctor.types.ts";
+export interface SandboxDiagnosticOptions {
+    readonly agent?: DoctorAgent;
+    readonly deadlineMs?: number;
+    readonly signal?: AbortSignal;
+    readonly transfers?: boolean;
+    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+}
+export interface DiagnosticCapability {
+    readonly id: "command" | "transfers" | "batchTransfers" | "interactiveTerminal";
+    readonly advertised: boolean | "unknown";
+    readonly observed: "pass" | "fail" | "unverified";
+}
+export interface SandboxDiagnosticReport {
+    readonly scope: "owned-sandbox";
+    readonly ownership: "caller";
+    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+    readonly capabilities: readonly DiagnosticCapability[];
+    readonly checks: readonly DiagnosticCheck[];
+    readonly modelCompatibility: "unverified";
+    readonly hasFailures: boolean;
+}

package/dist/application/doctor-sandbox.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor-sandbox.types.js.map

package/dist/application/doctor-sandbox.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-sandbox.types.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport interface SandboxDiagnosticOptions {\n  readonly agent?: DoctorAgent;\n  readonly deadlineMs?: number;\n  readonly signal?: AbortSignal;\n  readonly transfers?: boolean;\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n}\n\nexport interface DiagnosticCapability {\n  readonly id:\n    \"command\" | \"transfers\" | \"batchTransfers\" | \"interactiveTerminal\";\n  readonly advertised: boolean | \"unknown\";\n  readonly observed: \"pass\" | \"fail\" | \"unverified\";\n}\n\nexport interface SandboxDiagnosticReport {\n  readonly scope: \"owned-sandbox\";\n  readonly ownership: \"caller\";\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n  readonly capabilities: readonly DiagnosticCapability[];\n  readonly checks: readonly DiagnosticCheck[];\n  readonly modelCompatibility: \"unverified\";\n  readonly hasFailures: boolean;\n}\n"]}

package/dist/application/doctor-transfers.constants.d.ts

@@ -0,0 +1,6 @@
+export declare const transferDiagnosticRecipe: Readonly<{
+    base64: "AAECA/7/AG91dHBvc3QK";
+    create: "require('node:fs').mkdirSync(process.argv[1])";
+    verify: "const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)";
+    cleanup: "require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })";
+}>;

package/dist/application/doctor-transfers.constants.js

@@ -0,0 +1,7 @@
+export const transferDiagnosticRecipe = Object.freeze({
+    base64: "AAECA/7/AG91dHBvc3QK",
+    create: "require('node:fs').mkdirSync(process.argv[1])",
+    verify: "const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)",
+    cleanup: "require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })",
+});
+//# sourceMappingURL=doctor-transfers.constants.js.map

package/dist/application/doctor-transfers.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-transfers.constants.js","sourceRoot":"","sources":["../../src/application/doctor-transfers.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,+CAA+C;IACvD,MAAM,EACJ,6HAA6H;IAC/H,OAAO,EACL,8EAA8E;CACjF,CAAC,CAAC","sourcesContent":["export const transferDiagnosticRecipe = Object.freeze({\n  base64: \"AAECA/7/AG91dHBvc3QK\",\n  create: \"require('node:fs').mkdirSync(process.argv[1])\",\n  verify:\n    \"const fs = require('node:fs'); if (fs.readFileSync(process.argv[1]).toString('base64') !== process.argv[2]) process.exit(1)\",\n  cleanup:\n    \"require('node:fs').rmSync(process.argv[1], { recursive: true, force: true })\",\n});\n"]}

package/dist/application/doctor-transfers.d.ts

@@ -0,0 +1,4 @@
+import type { SandboxLease, TransferOptions } from "../domain/sandbox.types.ts";
+import type { Executor } from "../infrastructure/process.types.ts";
+import type { DiagnosticCheck } from "./doctor.types.ts";
+export declare function diagnoseTransfers(lease: SandboxLease, options: TransferOptions, invoke: Executor): Promise<DiagnosticCheck[]>;

package/dist/application/doctor-transfers.js

@@ -0,0 +1,88 @@
+import { randomUUID } from "node:crypto";
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { doctorDefaults } from "./doctor.constants.js";
+import { transferDiagnosticRecipe as recipe } from "./doctor-transfers.constants.js";
+export async function diagnoseTransfers(lease, options, invoke) {
+    const checks = [];
+    const directory = await mkdtemp(join(tmpdir(), "outpost-probe-"));
+    const remote = `${lease.root.replace(/[\\/]$/, "")}/.outpost-probe-${randomUUID()}`;
+    const source = join(directory, "source");
+    let cleanupNeeded = false;
+    try {
+        cleanupNeeded = true;
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", recipe.create, remote],
+        });
+        if (result.status !== 0) {
+            cleanupNeeded = false;
+            throw new Error("create");
+        }
+        const payload = Buffer.from(recipe.base64, "base64");
+        await writeFile(source, payload, { mode: 0o600 });
+        const bounded = () => ({
+            ...options,
+            signal: options.signal
+                ? AbortSignal.any([
+                    options.signal,
+                    AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+                ])
+                : AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+        });
+        await lease.upload(source, `${remote}/payload`, bounded());
+        const verified = await invoke({
+            executable: "node",
+            arguments: ["-e", recipe.verify, `${remote}/payload`, recipe.base64],
+        });
+        if (verified.status !== 0)
+            throw new Error("verify");
+        const destination = join(directory, "download");
+        await lease.download(`${remote}/payload`, destination, bounded());
+        if (!(await readFile(destination)).equals(payload))
+            throw new Error("download");
+        checks.push({
+            id: "sandbox.transfers",
+            status: "pass",
+            message: "Binary upload verified by a sandbox process; downloaded bytes match. Symlinks, permissions, directories and batch transfers remain unverified.",
+        });
+    }
+    catch {
+        checks.push({
+            id: "sandbox.transfers",
+            status: "fail",
+            message: "Bounded binary transfer probe failed or was interrupted.",
+        });
+    }
+    finally {
+        if (cleanupNeeded) {
+            try {
+                const result = await lease.invoke({
+                    executable: "node",
+                    arguments: ["-e", recipe.cleanup, remote],
+                    deadlineMs: options.deadlineMs ?? doctorDefaults.deadlineMs,
+                    signal: AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),
+                    retain: doctorDefaults.retain,
+                });
+                if (result.status !== 0)
+                    throw new Error("cleanup");
+                checks.push({
+                    id: "sandbox.transfers.cleanup",
+                    status: "pass",
+                    message: "Temporary sandbox probe directory removed.",
+                });
+            }
+            catch {
+                checks.push({
+                    id: "sandbox.transfers.cleanup",
+                    status: "fail",
+                    message: `Temporary probe cleanup could not be confirmed; inspect ${remote}. The caller still owns the sandbox.`,
+                });
+            }
+        }
+        await rm(directory, { recursive: true, force: true });
+    }
+    return checks;
+}
+//# sourceMappingURL=doctor-transfers.js.map

package/dist/application/doctor-transfers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-transfers.js","sourceRoot":"","sources":["../../src/application/doctor-transfers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,IAAI,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EACnB,OAAwB,EACxB,MAAgB;IAEhB,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,UAAU,EAAE,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,aAAa,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;YACrB,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;oBACd,OAAO,CAAC,MAAM;oBACd,WAAW,CAAC,OAAO,CACjB,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAChD;iBACF,CAAC;gBACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;YAC5B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,mBAAmB;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,gJAAgJ;SACnJ,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,mBAAmB;YACvB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;oBAChC,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;oBACzC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU;oBAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CACzB,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAChD;oBACD,MAAM,EAAE,cAAc,CAAC,MAAM;iBAC9B,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,2BAA2B;oBAC/B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,2BAA2B;oBAC/B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,2DAA2D,MAAM,sCAAsC;iBACjH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdtemp, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { SandboxLease, TransferOptions } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { transferDiagnosticRecipe as recipe } from \"./doctor-transfers.constants.ts\";\n\nexport async function diagnoseTransfers(\n  lease: SandboxLease,\n  options: TransferOptions,\n  invoke: Executor,\n): Promise<DiagnosticCheck[]> {\n  const checks: DiagnosticCheck[] = [];\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-probe-\"));\n  const remote = `${lease.root.replace(/[\\\\/]$/, \"\")}/.outpost-probe-${randomUUID()}`;\n  const source = join(directory, \"source\");\n  let cleanupNeeded = false;\n  try {\n    cleanupNeeded = true;\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", recipe.create, remote],\n    });\n    if (result.status !== 0) {\n      cleanupNeeded = false;\n      throw new Error(\"create\");\n    }\n    const payload = Buffer.from(recipe.base64, \"base64\");\n    await writeFile(source, payload, { mode: 0o600 });\n    const bounded = () => ({\n      ...options,\n      signal: options.signal\n        ? AbortSignal.any([\n            options.signal,\n            AbortSignal.timeout(\n              options.deadlineMs ?? doctorDefaults.deadlineMs,\n            ),\n          ])\n        : AbortSignal.timeout(options.deadlineMs ?? doctorDefaults.deadlineMs),\n    });\n    await lease.upload(source, `${remote}/payload`, bounded());\n    const verified = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", recipe.verify, `${remote}/payload`, recipe.base64],\n    });\n    if (verified.status !== 0) throw new Error(\"verify\");\n    const destination = join(directory, \"download\");\n    await lease.download(`${remote}/payload`, destination, bounded());\n    if (!(await readFile(destination)).equals(payload))\n      throw new Error(\"download\");\n    checks.push({\n      id: \"sandbox.transfers\",\n      status: \"pass\",\n      message:\n        \"Binary upload verified by a sandbox process; downloaded bytes match. Symlinks, permissions, directories and batch transfers remain unverified.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.transfers\",\n      status: \"fail\",\n      message: \"Bounded binary transfer probe failed or was interrupted.\",\n    });\n  } finally {\n    if (cleanupNeeded) {\n      try {\n        const result = await lease.invoke({\n          executable: \"node\",\n          arguments: [\"-e\", recipe.cleanup, remote],\n          deadlineMs: options.deadlineMs ?? doctorDefaults.deadlineMs,\n          signal: AbortSignal.timeout(\n            options.deadlineMs ?? doctorDefaults.deadlineMs,\n          ),\n          retain: doctorDefaults.retain,\n        });\n        if (result.status !== 0) throw new Error(\"cleanup\");\n        checks.push({\n          id: \"sandbox.transfers.cleanup\",\n          status: \"pass\",\n          message: \"Temporary sandbox probe directory removed.\",\n        });\n      } catch {\n        checks.push({\n          id: \"sandbox.transfers.cleanup\",\n          status: \"fail\",\n          message: `Temporary probe cleanup could not be confirmed; inspect ${remote}. The caller still owns the sandbox.`,\n        });\n      }\n    }\n    await rm(directory, { recursive: true, force: true });\n  }\n  return checks;\n}\n"]}

package/dist/application/doctor.constants.d.ts

@@ -0,0 +1,9 @@
+import type { DoctorProvider, DoctorReport } from "./doctor.types.ts";
+export declare const doctorDefaults: Readonly<{
+    readonly provider: "docker";
+    readonly agent: "codex";
+    readonly deadlineMs: 5000;
+    readonly retain: 4096;
+    readonly minimumNodeMajor: 24;
+}>;
+export declare const providerDiagnostics: Readonly<Record<DoctorProvider, Pick<DoctorReport, "placement" | "interactiveTerminal">>>;

package/dist/application/doctor.constants.js

@@ -0,0 +1,15 @@
+export const doctorDefaults = Object.freeze({
+    provider: "docker",
+    agent: "codex",
+    deadlineMs: 5_000,
+    retain: 4_096,
+    minimumNodeMajor: 24,
+});
+export const providerDiagnostics = {
+    docker: { placement: "mounted", interactiveTerminal: true },
+    podman: { placement: "mounted", interactiveTerminal: true },
+    local: { placement: "host", interactiveTerminal: true },
+    vercel: { placement: "remote", interactiveTerminal: false },
+    daytona: { placement: "remote", interactiveTerminal: true },
+};
+//# sourceMappingURL=doctor.constants.js.map

package/dist/application/doctor.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.constants.js","sourceRoot":"","sources":["../../src/application/doctor.constants.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,EAAE;CACZ,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAK5B;IACF,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE;IACvD,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE;IAC3D,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE;CAC5D,CAAC","sourcesContent":["import type { DoctorProvider, DoctorReport } from \"./doctor.types.ts\";\nexport const doctorDefaults = Object.freeze({\n  provider: \"docker\",\n  agent: \"codex\",\n  deadlineMs: 5_000,\n  retain: 4_096,\n  minimumNodeMajor: 24,\n} as const);\nexport const providerDiagnostics: Readonly<\n  Record<\n    DoctorProvider,\n    Pick<DoctorReport, \"placement\" | \"interactiveTerminal\">\n  >\n> = {\n  docker: { placement: \"mounted\", interactiveTerminal: true },\n  podman: { placement: \"mounted\", interactiveTerminal: true },\n  local: { placement: \"host\", interactiveTerminal: true },\n  vercel: { placement: \"remote\", interactiveTerminal: false },\n  daytona: { placement: \"remote\", interactiveTerminal: true },\n};\n"]}

package/dist/application/doctor.d.ts

@@ -0,0 +1,3 @@
+import type { Executor } from "../infrastructure/process.types.ts";
+import type { DoctorOptions, DoctorReport } from "./doctor.types.ts";
+export declare function diagnose(options: DoctorOptions, execute?: Executor): Promise<DoctorReport>;

package/dist/application/doctor.js

@@ -0,0 +1,106 @@
+import { invariant } from "../domain/errors.js";
+import { executeProcess } from "../infrastructure/process.js";
+import { agentVersions } from "../providers/versions.constants.js";
+import { diagnoseImage } from "./doctor-image.js";
+import { diagnosticProbe } from "./diagnostic-probe.js";
+import { doctorDefaults, providerDiagnostics } from "./doctor.constants.js";
+export async function diagnose(options, execute = executeProcess) {
+    const { provider, agent, image } = options;
+    if (image !== undefined) {
+        invariant(provider === "docker" || provider === "podman", "--image requires docker or podman.");
+        invariant(image.length > 0 &&
+            !image.startsWith("-") &&
+            !/[\x00-\x20\x7f]/.test(image), "Invalid diagnostic image name.");
+    }
+    const capabilities = providerDiagnostics[provider];
+    const checks = [
+        {
+            id: "host.node",
+            status: Number(process.versions.node.split(".")[0]) >=
+                doctorDefaults.minimumNodeMajor
+                ? "pass"
+                : "fail",
+            version: process.versions.node,
+            message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,
+        },
+    ];
+    checks.push(await diagnosticProbe({
+        id: "host.git",
+        command: { executable: "git", arguments: ["--version"] },
+        failureStatus: "fail",
+        remedy: "Install Git and make it available on PATH.",
+        readVersion: true,
+    }, execute));
+    if (capabilities.placement === "mounted") {
+        const engine = await diagnosticProbe({
+            id: "provider.cli",
+            command: { executable: provider, arguments: ["--version"] },
+            failureStatus: "fail",
+            remedy: `Install ${provider} and make it available on PATH.`,
+            readVersion: true,
+        }, execute);
+        checks.push(engine);
+        if (engine.status === "pass")
+            checks.push(await diagnosticProbe({
+                id: "provider.connection",
+                command: {
+                    executable: provider,
+                    arguments: ["info"],
+                },
+                failureStatus: "fail",
+                remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,
+            }, execute));
+        checks.push(await diagnosticProbe({
+            id: "host.tar",
+            command: { executable: "tar", arguments: ["--version"] },
+            failureStatus: "fail",
+            remedy: "Install GNU tar or bsdtar for container transfers.",
+        }, execute));
+    }
+    if (capabilities.placement === "remote")
+        checks.push({
+            id: "provider.cloud",
+            status: "skipped",
+            message: "Cloud SDK, credentials, account access and allocation are not checked.",
+        });
+    checks.push(await diagnosticProbe({
+        id: "agent.host",
+        command: { executable: agent, arguments: ["--version"] },
+        failureStatus: "warn",
+        remedy: "Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.",
+        readVersion: true,
+        referenceVersion: agentVersions[agent],
+    }, execute));
+    if (image !== undefined && (provider === "docker" || provider === "podman")) {
+        const connected = checks.some((check) => check.id === "provider.connection" && check.status === "pass");
+        if (connected)
+            checks.push(...(await diagnoseImage({ provider, agent, image }, execute)));
+        else
+            checks.push({
+                id: "image.runtime",
+                status: "skipped",
+                message: "Image checks require a reachable container engine.",
+            });
+    }
+    if (capabilities.placement !== "host" && image === undefined)
+        checks.push({
+            id: "agent.sandbox",
+            status: "skipped",
+            message: "Agent version inside the sandbox is not checked; the host version does not describe the sandbox.",
+        });
+    checks.push({
+        id: "execution",
+        status: "skipped",
+        message: image === undefined
+            ? "Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated."
+            : "Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.",
+    });
+    return {
+        ...options,
+        scope: image === undefined ? "host" : "host-and-image",
+        ...capabilities,
+        checks,
+        hasFailures: checks.some((check) => check.status === "fail"),
+    };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/application/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/application/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,UAAoB,cAAc;IAElC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,SAAS,CACP,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAC9C,oCAAoC,CACrC,CAAC;QACF,SAAS,CACP,KAAK,CAAC,MAAM,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAChC,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAsB;QAChC;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EACJ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,cAAc,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC9B,OAAO,EAAE,4BAA4B,cAAc,CAAC,gBAAgB,IAAI;SACzE;KACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,4CAA4C;QACpD,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,EAAE,EAAE,cAAc;YAClB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAC3D,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,QAAQ,iCAAiC;YAC5D,WAAW,EAAE,IAAI;SAClB,EACD,OAAO,CACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAC1B,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,qBAAqB;gBACzB,OAAO,EAAE;oBACP,UAAU,EAAE,QAAQ;oBACpB,SAAS,EAAE,CAAC,MAAM,CAAC;iBACpB;gBACD,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,SAAS,QAAQ,+EAA+E;aACzG,EACD,OAAO,CACR,CACF,CAAC;QACJ,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,oDAAoD;SAC7D,EACD,OAAO,CACR,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,QAAQ;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,gBAAgB;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,wEAAwE;SAC3E,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EACJ,gHAAgH;QAClH,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;KACvC,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CACzE,CAAC;QACF,IAAI,SAAS;YACX,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAC9D,CAAC;;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,mIAAmI;KAC1I,CAAC,CAAC;IACH,OAAO;QACL,GAAG,OAAO;QACV,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;QACtD,GAAG,YAAY;QACf,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseImage } from \"./doctor-image.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults, providerDiagnostics } from \"./doctor.constants.ts\";\nimport type {\n  DiagnosticCheck,\n  DoctorOptions,\n  DoctorReport,\n} from \"./doctor.types.ts\";\n\nexport async function diagnose(\n  options: DoctorOptions,\n  execute: Executor = executeProcess,\n): Promise<DoctorReport> {\n  const { provider, agent, image } = options;\n  if (image !== undefined) {\n    invariant(\n      provider === \"docker\" || provider === \"podman\",\n      \"--image requires docker or podman.\",\n    );\n    invariant(\n      image.length > 0 &&\n        !image.startsWith(\"-\") &&\n        !/[\\x00-\\x20\\x7f]/.test(image),\n      \"Invalid diagnostic image name.\",\n    );\n  }\n  const capabilities = providerDiagnostics[provider];\n  const checks: DiagnosticCheck[] = [\n    {\n      id: \"host.node\",\n      status:\n        Number(process.versions.node.split(\".\")[0]) >=\n        doctorDefaults.minimumNodeMajor\n          ? \"pass\"\n          : \"fail\",\n      version: process.versions.node,\n      message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,\n    },\n  ];\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"host.git\",\n        command: { executable: \"git\", arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: \"Install Git and make it available on PATH.\",\n        readVersion: true,\n      },\n      execute,\n    ),\n  );\n  if (capabilities.placement === \"mounted\") {\n    const engine = await diagnosticProbe(\n      {\n        id: \"provider.cli\",\n        command: { executable: provider, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: `Install ${provider} and make it available on PATH.`,\n        readVersion: true,\n      },\n      execute,\n    );\n    checks.push(engine);\n    if (engine.status === \"pass\")\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: \"provider.connection\",\n            command: {\n              executable: provider,\n              arguments: [\"info\"],\n            },\n            failureStatus: \"fail\",\n            remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,\n          },\n          execute,\n        ),\n      );\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"host.tar\",\n          command: { executable: \"tar\", arguments: [\"--version\"] },\n          failureStatus: \"fail\",\n          remedy: \"Install GNU tar or bsdtar for container transfers.\",\n        },\n        execute,\n      ),\n    );\n  }\n  if (capabilities.placement === \"remote\")\n    checks.push({\n      id: \"provider.cloud\",\n      status: \"skipped\",\n      message:\n        \"Cloud SDK, credentials, account access and allocation are not checked.\",\n    });\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"agent.host\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"warn\",\n        remedy:\n          \"Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n      },\n      execute,\n    ),\n  );\n  if (image !== undefined && (provider === \"docker\" || provider === \"podman\")) {\n    const connected = checks.some(\n      (check) => check.id === \"provider.connection\" && check.status === \"pass\",\n    );\n    if (connected)\n      checks.push(\n        ...(await diagnoseImage({ provider, agent, image }, execute)),\n      );\n    else\n      checks.push({\n        id: \"image.runtime\",\n        status: \"skipped\",\n        message: \"Image checks require a reachable container engine.\",\n      });\n  }\n  if (capabilities.placement !== \"host\" && image === undefined)\n    checks.push({\n      id: \"agent.sandbox\",\n      status: \"skipped\",\n      message:\n        \"Agent version inside the sandbox is not checked; the host version does not describe the sandbox.\",\n    });\n  checks.push({\n    id: \"execution\",\n    status: \"skipped\",\n    message:\n      image === undefined\n        ? \"Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated.\"\n        : \"Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.\",\n  });\n  return {\n    ...options,\n    scope: image === undefined ? \"host\" : \"host-and-image\",\n    ...capabilities,\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor.types.d.ts

@@ -0,0 +1,39 @@
+import type { Command } from "../domain/command.types.ts";
+export type DoctorProvider = "docker" | "podman" | "local" | "vercel" | "daytona";
+export type DoctorAgent = "codex" | "claude" | "gemini";
+export type DiagnosticStatus = "pass" | "warn" | "fail" | "skipped";
+export interface DiagnosticCheck {
+    readonly id: string;
+    readonly status: DiagnosticStatus;
+    readonly message: string;
+    readonly version?: string;
+    readonly referenceVersion?: string;
+}
+export interface DoctorOptions {
+    readonly image?: string;
+    readonly provider: DoctorProvider;
+    readonly agent: DoctorAgent;
+}
+export interface DoctorImageOptions {
+    readonly provider: "docker" | "podman";
+    readonly agent: DoctorAgent;
+    readonly image: string;
+}
+export interface DoctorReport {
+    readonly provider: DoctorProvider;
+    readonly agent: DoctorAgent;
+    readonly scope: "host" | "host-and-image";
+    readonly image?: string;
+    readonly placement: "mounted" | "host" | "remote";
+    readonly interactiveTerminal: boolean;
+    readonly checks: readonly DiagnosticCheck[];
+    readonly hasFailures: boolean;
+}
+export interface DiagnosticProbe {
+    readonly id: string;
+    readonly command: Command;
+    readonly failureStatus: "fail" | "warn";
+    readonly remedy: string;
+    readonly readVersion?: boolean;
+    readonly referenceVersion?: string;
+}

package/dist/application/doctor.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor.types.js.map

package/dist/application/doctor.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.types.js","sourceRoot":"","sources":["../../src/application/doctor.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command } from \"../domain/command.types.ts\";\nexport type DoctorProvider =\n  \"docker\" | \"podman\" | \"local\" | \"vercel\" | \"daytona\";\nexport type DoctorAgent = \"codex\" | \"claude\" | \"gemini\";\nexport type DiagnosticStatus = \"pass\" | \"warn\" | \"fail\" | \"skipped\";\nexport interface DiagnosticCheck {\n  readonly id: string;\n  readonly status: DiagnosticStatus;\n  readonly message: string;\n  readonly version?: string;\n  readonly referenceVersion?: string;\n}\nexport interface DoctorOptions {\n  readonly image?: string;\n  readonly provider: DoctorProvider;\n  readonly agent: DoctorAgent;\n}\nexport interface DoctorImageOptions {\n  readonly provider: \"docker\" | \"podman\";\n  readonly agent: DoctorAgent;\n  readonly image: string;\n}\nexport interface DoctorReport {\n  readonly provider: DoctorProvider;\n  readonly agent: DoctorAgent;\n  readonly scope: \"host\" | \"host-and-image\";\n  readonly image?: string;\n  readonly placement: \"mounted\" | \"host\" | \"remote\";\n  readonly interactiveTerminal: boolean;\n  readonly checks: readonly DiagnosticCheck[];\n  readonly hasFailures: boolean;\n}\nexport interface DiagnosticProbe {\n  readonly id: string;\n  readonly command: Command;\n  readonly failureStatus: \"fail\" | \"warn\";\n  readonly remedy: string;\n  readonly readVersion?: boolean;\n  readonly referenceVersion?: string;\n}\n"]}

package/dist/application/execution.js

@@ -23,6 +23,7 @@ export async function execute(workspace, lease, agent, host, options, afterTurn)
         ? 1 + options.response.repairs
         : (options.passes ?? executionDefaults.passes);
     for (let index = 0; index < attempts; index++) {
+        options.signal?.throwIfAborted();
         notify(options.observe, {
             kind: "phase",
             name: "preparing prompt",

package/dist/application/execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/application/execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,SAA0B,EAC1B,KAAmB,EACnB,KAAmB,EACnB,IAAa,EACb,OAA2B,EAC3B,SAAyC;IAEzC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAChC,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,KAAK,GAAM,SAAc,EAC3B,SAAS,GAAG,KAAK,EACjB,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACtC,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO;QAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM;YACN,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM;YAC7B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAC5C,kCAAkC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAC9D,CAAC;QACJ,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,KAAK,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,YAAY,EACZ,OAAO,EACP,KAAK,GAAG,CAAC,CACV,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,KAAK;YACrB,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACnD,KAAK,CAAC,QAAQ,GAAG;oBACf,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,KAAK;iBACN,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBAAE,MAAM,KAAK,CAAC;gBAChE,YAAY,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,GAAG;oBACP,gCAAgC,OAAO,CAAC,QAAQ,CAAC,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;oBACvF,uBAAuB,KAAK,CAAC,OAAO,EAAE;oBACtC,qBAAqB,KAAK,CAAC,GAAG,IAAI,2CAA2C,EAAE;oBAC/E,UAAU,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,EAAE;oBAC/G,2CAA2C,QAAQ,GAAG,KAAK,GAAG,CAAC,GAAG;oBAClE,iGAAiG;iBAClG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS;YAAE,MAAM;IAC5C,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/C,KAAK;QACL,KAAK;QACL,SAAS;QACT,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YAC5D,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;SACD,CAAC;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentAdapter, Usage } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { ResponseError } from \"../domain/response.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport type { WorkspaceRecord } from \"../domain/workspace.types.ts\";\nimport { turn } from \"./agent-turn.ts\";\nimport { renderBrief } from \"./brief-renderer.ts\";\nimport { validateDispatch } from \"./dispatch-validation.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions, Execution, Turn } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport { renderBrief } from \"./brief-renderer.ts\";\nexport { preflightDispatch, validateDispatch } from \"./dispatch-validation.ts\";\nexport type { DispatchOptions, Execution, Turn } from \"./execution.types.ts\";\nexport { notify } from \"./observation.ts\";\n\nexport async function execute<T>(\n  workspace: WorkspaceRecord,\n  lease: SandboxLease,\n  agent: AgentAdapter,\n  host: boolean,\n  options: DispatchOptions<T>,\n  afterTurn?: (turn: Turn) => Promise<Turn>,\n): Promise<Execution<T>> {\n  validateDispatch(options);\n  const markers =\n    options.until === undefined\n      ? [executionDefaults.completion]\n      : typeof options.until === \"string\"\n        ? [options.until]\n        : options.until;\n  const turns: Turn[] = [];\n  let value: T = undefined as T,\n    completed = false,\n    continuation = options.continuation;\n  let repair: string | undefined;\n  const attempts = options.response\n    ? 1 + options.response.repairs\n    : (options.passes ?? executionDefaults.passes);\n  for (let index = 0; index < attempts; index++) {\n    notify(options.observe, {\n      kind: \"phase\",\n      name: \"preparing prompt\",\n      agent: agent.name,\n      branch: workspace.branch,\n      directory: workspace.directory,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    const prompt =\n      repair ??\n      (await renderBrief(options.brief, workspace, lease, host, options));\n    if (options.response && !repair)\n      invariant(\n        prompt.includes(`<${options.response.tag}>`),\n        `Brief must request an opening <${options.response.tag}> tag`,\n      );\n    notify(options.observe, {\n      kind: \"prompt\",\n      text: prompt,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    notify(options.observe, {\n      kind: \"phase\",\n      name: \"running\",\n      agent: agent.name,\n      branch: workspace.branch,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    const finished = await turn(\n      lease,\n      agent,\n      prompt,\n      options,\n      continuation,\n      markers,\n      index + 1,\n    );\n    const current = afterTurn ? await afterTurn(finished) : finished;\n    turns.push(current);\n    notify(options.observe, {\n      kind: \"summary\",\n      durationMs: current.durationMs,\n      status: current.status,\n      tokens: current.usage,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    completed = markers.some((marker) => current.text.includes(marker));\n    if (options.response) {\n      try {\n        value = await options.response.read(current.text);\n        completed = true;\n        break;\n      } catch (error) {\n        if (!(error instanceof ResponseError)) throw error;\n        error.recovery = {\n          conversation: current.conversation,\n          branch: workspace.branch,\n          directory: workspace.directory,\n          turns,\n        };\n        if (index + 1 >= attempts || !current.conversation) throw error;\n        continuation = { id: current.conversation };\n        repair = [\n          `Correct the response inside <${options.response.tag}> and </${options.response.tag}>.`,\n          `Validation failure: ${error.message}`,\n          `Previous content: ${error.raw ?? \"No complete tagged response was returned.\"}`,\n          `Cause: ${error.cause instanceof Error ? error.cause.message : (JSON.stringify(error.cause) ?? \"unspecified\")}`,\n          `Further repair attempts after this one: ${attempts - index - 2}.`,\n          \"Do not edit files, run commands or continue implementation. Only return the corrected response.\",\n        ].join(\"\\n\");\n      }\n    }\n    if (!options.response && completed) break;\n  }\n  const conversation = turns.at(-1)?.conversation;\n  const completion = markers.find((marker) =>\n    turns.at(-1)?.text.includes(marker),\n  );\n  return {\n    text: turns.map((item) => item.text).join(\"\\n\"),\n    turns,\n    value,\n    completed,\n    ...(completion ? { completion } : {}),\n    ...(conversation ? { conversation } : {}),\n    usage: turns.reduce((sum, item) => addUsage(sum, item.usage), {\n      input: 0,\n      cached: 0,\n      output: 0,\n    } as Usage),\n  };\n}\n"]}
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/application/execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,SAA0B,EAC1B,KAAmB,EACnB,KAAmB,EACnB,IAAa,EACb,OAA2B,EAC3B,SAAyC;IAEzC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAChC,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,KAAK,GAAM,SAAc,EAC3B,SAAS,GAAG,KAAK,EACjB,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACtC,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO;QAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM;YACN,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM;YAC7B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAC5C,kCAAkC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAC9D,CAAC;QACJ,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CACzB,KAAK,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,YAAY,EACZ,OAAO,EACP,KAAK,GAAG,CAAC,CACV,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,KAAK;YACrB,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACnD,KAAK,CAAC,QAAQ,GAAG;oBACf,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,KAAK;iBACN,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBAAE,MAAM,KAAK,CAAC;gBAChE,YAAY,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,GAAG;oBACP,gCAAgC,OAAO,CAAC,QAAQ,CAAC,GAAG,WAAW,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;oBACvF,uBAAuB,KAAK,CAAC,OAAO,EAAE;oBACtC,qBAAqB,KAAK,CAAC,GAAG,IAAI,2CAA2C,EAAE;oBAC/E,UAAU,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,EAAE;oBAC/G,2CAA2C,QAAQ,GAAG,KAAK,GAAG,CAAC,GAAG;oBAClE,iGAAiG;iBAClG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS;YAAE,MAAM;IAC5C,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACpC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/C,KAAK;QACL,KAAK;QACL,SAAS;QACT,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YAC5D,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;SACD,CAAC;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentAdapter, Usage } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { ResponseError } from \"../domain/response.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport type { WorkspaceRecord } from \"../domain/workspace.types.ts\";\nimport { turn } from \"./agent-turn.ts\";\nimport { renderBrief } from \"./brief-renderer.ts\";\nimport { validateDispatch } from \"./dispatch-validation.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions, Execution, Turn } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport { renderBrief } from \"./brief-renderer.ts\";\nexport { preflightDispatch, validateDispatch } from \"./dispatch-validation.ts\";\nexport type { DispatchOptions, Execution, Turn } from \"./execution.types.ts\";\nexport { notify } from \"./observation.ts\";\n\nexport async function execute<T>(\n  workspace: WorkspaceRecord,\n  lease: SandboxLease,\n  agent: AgentAdapter,\n  host: boolean,\n  options: DispatchOptions<T>,\n  afterTurn?: (turn: Turn) => Promise<Turn>,\n): Promise<Execution<T>> {\n  validateDispatch(options);\n  const markers =\n    options.until === undefined\n      ? [executionDefaults.completion]\n      : typeof options.until === \"string\"\n        ? [options.until]\n        : options.until;\n  const turns: Turn[] = [];\n  let value: T = undefined as T,\n    completed = false,\n    continuation = options.continuation;\n  let repair: string | undefined;\n  const attempts = options.response\n    ? 1 + options.response.repairs\n    : (options.passes ?? executionDefaults.passes);\n  for (let index = 0; index < attempts; index++) {\n    options.signal?.throwIfAborted();\n    notify(options.observe, {\n      kind: \"phase\",\n      name: \"preparing prompt\",\n      agent: agent.name,\n      branch: workspace.branch,\n      directory: workspace.directory,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    const prompt =\n      repair ??\n      (await renderBrief(options.brief, workspace, lease, host, options));\n    if (options.response && !repair)\n      invariant(\n        prompt.includes(`<${options.response.tag}>`),\n        `Brief must request an opening <${options.response.tag}> tag`,\n      );\n    notify(options.observe, {\n      kind: \"prompt\",\n      text: prompt,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    notify(options.observe, {\n      kind: \"phase\",\n      name: \"running\",\n      agent: agent.name,\n      branch: workspace.branch,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    const finished = await turn(\n      lease,\n      agent,\n      prompt,\n      options,\n      continuation,\n      markers,\n      index + 1,\n    );\n    const current = afterTurn ? await afterTurn(finished) : finished;\n    turns.push(current);\n    notify(options.observe, {\n      kind: \"summary\",\n      durationMs: current.durationMs,\n      status: current.status,\n      tokens: current.usage,\n      pass: index + 1,\n      at: new Date().toISOString(),\n    });\n    completed = markers.some((marker) => current.text.includes(marker));\n    if (options.response) {\n      try {\n        value = await options.response.read(current.text);\n        completed = true;\n        break;\n      } catch (error) {\n        if (!(error instanceof ResponseError)) throw error;\n        error.recovery = {\n          conversation: current.conversation,\n          branch: workspace.branch,\n          directory: workspace.directory,\n          turns,\n        };\n        if (index + 1 >= attempts || !current.conversation) throw error;\n        continuation = { id: current.conversation };\n        repair = [\n          `Correct the response inside <${options.response.tag}> and </${options.response.tag}>.`,\n          `Validation failure: ${error.message}`,\n          `Previous content: ${error.raw ?? \"No complete tagged response was returned.\"}`,\n          `Cause: ${error.cause instanceof Error ? error.cause.message : (JSON.stringify(error.cause) ?? \"unspecified\")}`,\n          `Further repair attempts after this one: ${attempts - index - 2}.`,\n          \"Do not edit files, run commands or continue implementation. Only return the corrected response.\",\n        ].join(\"\\n\");\n      }\n    }\n    if (!options.response && completed) break;\n  }\n  const conversation = turns.at(-1)?.conversation;\n  const completion = markers.find((marker) =>\n    turns.at(-1)?.text.includes(marker),\n  );\n  return {\n    text: turns.map((item) => item.text).join(\"\\n\"),\n    turns,\n    value,\n    completed,\n    ...(completion ? { completion } : {}),\n    ...(conversation ? { conversation } : {}),\n    usage: turns.reduce((sum, item) => addUsage(sum, item.usage), {\n      input: 0,\n      cached: 0,\n      output: 0,\n    } as Usage),\n  };\n}\n"]}

package/dist/application/outpost.types.d.ts

@@ -3,10 +3,13 @@ import type { Command, CommandResult } from "../domain/command.types.ts";
 import type { Brief } from "../domain/prompts.types.ts";
 import type { SandboxProvider } from "../domain/sandbox.types.ts";
 import type { BranchPolicy, Commit, Disposal, LifecycleHooks, StageLimits, WorkspaceRecord } from "../domain/workspace.types.ts";
+import type { StorageReservationOptions } from "../infrastructure/storage-reservations.types.ts";
 import type { Logging } from "../infrastructure/journal.types.ts";
+import type { SandboxDiagnosticOptions, SandboxDiagnosticReport } from "./doctor-sandbox.types.ts";
 import type { DispatchOptions, Execution } from "./execution.types.ts";
 import type { VariableQuestion } from "./interactive-brief.types.ts";
 export interface WorkspaceOptions {
+    readonly storageQuota?: Omit<StorageReservationOptions, "signal">;
     readonly signal?: AbortSignal;
     readonly repository?: string;
     readonly branch?: BranchPolicy;
@@ -72,6 +75,7 @@ export interface WarmDispatchResult<T> extends Omit<DispatchResult<T>, "resume"
     fork<U = undefined>(options: DispatchOptions<U>): Promise<WarmDispatchResult<U>>;
 }
 export interface Sandbox {
+    diagnose(options?: SandboxDiagnosticOptions): Promise<SandboxDiagnosticReport>;
     readonly workspace: Workspace;
     readonly root: string;
     dispatch<T = undefined>(options: DispatchOptions<T>): Promise<WarmDispatchResult<T>>;