@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/application/sandbox-activity.js

@@ -0,0 +1,25 @@
+export function trackedSandboxLease(lease, activity) {
+    const transfers = lease.fileTransfers;
+    const upload = transfers?.uploadBatch?.bind(transfers);
+    const uploadBatch = upload
+        ? (...args) => activity.run("upload-batch", () => upload(...args))
+        : undefined;
+    return {
+        ...lease,
+        invoke: (command) => activity.run("invoke", () => lease.invoke(command)),
+        upload: (source, destination, options) => activity.run("upload", () => lease.upload(source, destination, options)),
+        download: (source, destination, options) => activity.run("download", () => lease.download(source, destination, options)),
+        release: lease.release.bind(lease),
+        ...(transfers
+            ? {
+                fileTransfers: {
+                    ...transfers,
+                    ...(uploadBatch ? { uploadBatch } : {}),
+                    manifest: (source, paths, options) => activity.run("manifest", () => transfers.manifest(source, paths, options)),
+                    downloadBatch: (source, entries, destination, options) => activity.run("download-batch", () => transfers.downloadBatch(source, entries, destination, options)),
+                },
+            }
+            : {}),
+    };
+}
+//# sourceMappingURL=sandbox-activity.js.map

package/dist/application/sandbox-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-activity.js","sourceRoot":"","sources":["../../src/application/sandbox-activity.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CACjC,KAAmB,EACnB,QAA0B;IAE1B,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,WAAW,GAAiC,MAAM;QACtD,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CACvC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1E,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CACzC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAC5B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAC7C;QACH,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,GAAG,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,aAAa,EAAE;oBACb,GAAG,SAAS;oBACZ,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CACnC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAC5B,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAC3C;oBACH,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CACvD,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAClC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAC/D;iBACJ;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import type { FileTransfers, SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type { ResourceActivity } from \"../infrastructure/resource-activity.types.ts\";\n\nexport function trackedSandboxLease(\n  lease: SandboxLease,\n  activity: ResourceActivity,\n): SandboxLease {\n  const transfers = lease.fileTransfers;\n  const upload = transfers?.uploadBatch?.bind(transfers);\n  const uploadBatch: FileTransfers[\"uploadBatch\"] = upload\n    ? (...args) => activity.run(\"upload-batch\", () => upload(...args))\n    : undefined;\n  return {\n    ...lease,\n    invoke: (command) => activity.run(\"invoke\", () => lease.invoke(command)),\n    upload: (source, destination, options) =>\n      activity.run(\"upload\", () => lease.upload(source, destination, options)),\n    download: (source, destination, options) =>\n      activity.run(\"download\", () =>\n        lease.download(source, destination, options),\n      ),\n    release: lease.release.bind(lease),\n    ...(transfers\n      ? {\n          fileTransfers: {\n            ...transfers,\n            ...(uploadBatch ? { uploadBatch } : {}),\n            manifest: (source, paths, options) =>\n              activity.run(\"manifest\", () =>\n                transfers.manifest(source, paths, options),\n              ),\n            downloadBatch: (source, entries, destination, options) =>\n              activity.run(\"download-batch\", () =>\n                transfers.downloadBatch(source, entries, destination, options),\n              ),\n          },\n        }\n      : {}),\n  };\n}\n"]}

package/dist/application/sandbox-provision.js

@@ -1,13 +1,16 @@
-import { stat } from "node:fs/promises";
+import { lstat } from "node:fs/promises";
 import { join, posix } from "node:path";
 import { invariant } from "../domain/errors.js";
 import { git } from "../infrastructure/git/command.js";
 import { executeProcess } from "../infrastructure/process.js";
 import { resolveVariables } from "../infrastructure/settings.js";
+import { registerResourceActivity } from "../infrastructure/resource-activity.js";
+import { trackedSandboxLease } from "./sandbox-activity.js";
 import { boundedTransfers } from "../infrastructure/transfer.js";
 import { docker } from "../providers/docker.js";
 import { prepareAdapter } from "./agent-bootstrap.js";
 import { hooks } from "./lifecycle-hooks.js";
+import { uploadFiles } from "./remote-upload.js";
 import { seedRemote } from "./remote-workspace.js";
 import { startupFailure } from "./startup-recovery.js";
 import { workspaces } from "./workspace-registry.js";
@@ -18,7 +21,10 @@ export async function provisionSandbox(options) {
     if (provider.placement === "remote" && !options.workspace && !options.branch)
         options = { ...options, branch: { mode: "integrate" } };
     invariant(!options.workspace ||
-        (!options.repository && !options.branch && !options.copies), "A supplied workspace owns its repository, branch and copied inputs");
+        (!options.repository &&
+            !options.branch &&
+            !options.copies &&
+            !options.storageQuota), "A supplied workspace owns its repository, branch, copied inputs and storage quota");
     const owned = !options.workspace;
     invariant(provider.placement !== "remote" ||
         ((options.workspace?.policy ?? options.branch)?.mode !== "current" &&
@@ -33,9 +39,17 @@ export async function provisionSandbox(options) {
         ? AbortSignal.any([options.signal, stop.signal])
         : stop.signal;
     let lease, sync;
+    let activity;
+    let acquisitionStarted = false;
     const prepared = new Map();
     const staging = join(workspace.repository, ".outpost", "recovery", "conversations");
     try {
+        activity = await registerResourceActivity({
+            repository: workspace.repository,
+            workspace: workspace.directory,
+            provider: provider.name,
+            placement: provider.placement,
+        });
         const configured = await resolveVariables(workspace.repository, {}, provider.variables);
         const name = (await git(workspace.repository, ["config", "--get", "user.name"]).catch(() => "Outpost")).trim();
         const email = (await git(workspace.repository, ["config", "--get", "user.email"]).catch(() => "outpost@localhost")).trim();
@@ -46,13 +60,14 @@ export async function provisionSandbox(options) {
             GIT_COMMITTER_EMAIL: email,
             ...configured,
         };
-        lease = boundedTransfers(await provider.acquire({
+        acquisitionStarted = true;
+        lease = boundedTransfers(trackedSandboxLease(await provider.acquire({
             repository: workspace.repository,
             directory: workspace.directory,
             gitDirectories: workspace.gitDirectories,
             variables,
             signal: setupSignal,
-        }), {
+        }), activity), {
             ...(options.limits?.copyMs
                 ? { deadlineMs: options.limits.copyMs }
                 : {}),
@@ -63,13 +78,24 @@ export async function provisionSandbox(options) {
                 ...(options.limits ? { limits: options.limits } : {}),
                 signal: setupSignal,
             });
-            for (const path of options.copies ?? [])
-                if (await stat(join(workspace.directory, path)).catch((error) => {
+            const copiedFiles = [];
+            for (const path of options.copies ?? []) {
+                const info = await lstat(join(workspace.directory, path)).catch((error) => {
                     if (error.code === "ENOENT")
                         return undefined;
                     throw error;
-                }))
-                    await lease.upload(join(workspace.directory, path), posix.join(lease.root, path.replaceAll("\\", "/")));
+                });
+                if (!info)
+                    continue;
+                if (info.isFile() || info.isSymbolicLink()) {
+                    copiedFiles.push(path.replaceAll("\\", "/"));
+                    continue;
+                }
+                await lease.upload(join(workspace.directory, path), posix.join(lease.root, path.replaceAll("\\", "/")), { signal: setupSignal });
+            }
+            await uploadFiles(lease, workspace.directory, [...new Set(copiedFiles)], {
+                signal: setupSignal,
+            });
             if (options.bootstrap !== false && options.agent)
                 prepared.set(options.agent, await prepareAdapter(options.agent, lease, setupSignal));
         }
@@ -83,13 +109,31 @@ export async function provisionSandbox(options) {
         const failure = initialized.find((item) => item.status === "rejected");
         if (failure?.status === "rejected")
             throw failure.reason;
+        await activity.phase("ready");
     }
     catch (cause) {
         await startupFailure(workspace, cause, options);
-        await lease?.release().catch(() => undefined);
+        const allocationUncertain = acquisitionStarted && !lease;
+        let cleanupFailed = allocationUncertain;
+        await activity?.phase("closing").catch(() => {
+            cleanupFailed = true;
+        });
+        await lease?.release().catch(() => {
+            cleanupFailed = true;
+        });
+        if (activity && !(await activity.idle()))
+            cleanupFailed = true;
         state.active = false;
         if (owned)
-            await workspace.close();
+            await workspace.close({ preserve: cleanupFailed }).catch(() => {
+                cleanupFailed = true;
+            });
+        if (cleanupFailed)
+            await activity
+                ?.phase(allocationUncertain ? "allocation-uncertain" : "cleanup-failed")
+                .catch(() => undefined);
+        if (!cleanupFailed)
+            await activity?.remove().catch(() => undefined);
         throw cause;
     }
     return {
@@ -100,6 +144,7 @@ export async function provisionSandbox(options) {
         owned,
         stop,
         runtime: lease,
+        activity,
         sync,
         prepared,
         staging,

package/dist/application/sandbox-provision.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-provision.js","sourceRoot":"","sources":["../../src/application/sandbox-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAC1E,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IAC1D,SAAS,CACP,CAAC,OAAO,CAAC,SAAS;QAChB,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAC7D,oEAAoE,CACrE,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACjC,SAAS,CACP,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,SAAS;YAChE,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,EAC1C,2DAA2D,CAC5D,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,SAAS,CACP,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EACvC,6DAA6D,CAC9D,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,IAAI,KAA+B,EAAE,IAA4B,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,CAAC,UAAU,EACpB,UAAU,EACV,UAAU,EACV,eAAe,CAChB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,SAAS,CAAC,UAAU,EACpB,EAAE,EACF,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CACrE,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CACZ,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CACtE,GAAG,EAAE,CAAC,mBAAmB,CAC1B,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,KAAK;YAC1B,GAAG,UAAU;SACd,CAAC;QACF,KAAK,GAAG,gBAAgB,CACtB,MAAM,QAAQ,CAAC,OAAO,CAAC;YACrB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,SAAS;YACT,MAAM,EAAE,WAAW;SACpB,CAAC,EACF;YACE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;gBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE;gBACrC,IACE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC1D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAO,SAAS,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC;oBAEF,MAAM,KAAK,CAAC,MAAM,CAChB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACnD,CAAC;YACN,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK;gBAC9C,QAAQ,CAAC,GAAG,CACV,OAAO,CAAC,KAAK,EACb,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CACxD,CAAC;QACN,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C;YACE,KAAK,CACH,SAAS,EAAE,SAAS,IAAI,EAAE,EAC1B,SAAS,CAAC,SAAS,EACnB,cAAc,EACd,WAAW,CACZ;YACD,KAAK,CACH,SAAS,EAAE,YAAY,IAAI,EAAE,EAC7B,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACxB,WAAW,EACX,IAAI,CACL;SACF,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK;YAAE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,KAAK;QACL,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,KAAK;QACd,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { join, posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { resolveVariables } from \"../infrastructure/settings.ts\";\nimport { boundedTransfers } from \"../infrastructure/transfer.ts\";\nimport { docker } from \"../providers/docker.ts\";\nimport { prepareAdapter } from \"./agent-bootstrap.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { SandboxOptions } from \"./outpost.types.ts\";\nimport { seedRemote } from \"./remote-workspace.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\nimport type { ProvisionedSandbox } from \"./sandbox-session.types.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\nimport { openWorkspace } from \"./workspace.ts\";\n\nexport async function provisionSandbox(\n  options: SandboxOptions,\n): Promise<ProvisionedSandbox> {\n  options.signal?.throwIfAborted();\n  const provider = options.provider ?? docker();\n  if (provider.placement === \"remote\" && !options.workspace && !options.branch)\n    options = { ...options, branch: { mode: \"integrate\" } };\n  invariant(\n    !options.workspace ||\n      (!options.repository && !options.branch && !options.copies),\n    \"A supplied workspace owns its repository, branch and copied inputs\",\n  );\n  const owned = !options.workspace;\n  invariant(\n    provider.placement !== \"remote\" ||\n      ((options.workspace?.policy ?? options.branch)?.mode !== \"current\" &&\n        (options.workspace || options.branch)),\n    \"Remote providers require a named or integration workspace\",\n  );\n  const workspace = options.workspace ?? (await openWorkspace(options));\n  const state = workspaces.get(workspace);\n  invariant(\n    state && !state.closed && !state.active,\n    \"Workspace must be open and cannot belong to another sandbox\",\n  );\n  state.active = true;\n  const lifecycle = options.hooks ?? state.hooks;\n  const stop = new AbortController();\n  const setupSignal = options.signal\n    ? AbortSignal.any([options.signal, stop.signal])\n    : stop.signal;\n  let lease: SandboxLease | undefined, sync: RemoteSync | undefined;\n  const prepared = new Map<AgentAdapter, AgentAdapter>();\n  const staging = join(\n    workspace.repository,\n    \".outpost\",\n    \"recovery\",\n    \"conversations\",\n  );\n  try {\n    const configured = await resolveVariables(\n      workspace.repository,\n      {},\n      provider.variables,\n    );\n    const name = (\n      await git(workspace.repository, [\"config\", \"--get\", \"user.name\"]).catch(\n        () => \"Outpost\",\n      )\n    ).trim();\n    const email = (\n      await git(workspace.repository, [\"config\", \"--get\", \"user.email\"]).catch(\n        () => \"outpost@localhost\",\n      )\n    ).trim();\n    const variables = {\n      GIT_AUTHOR_NAME: name,\n      GIT_COMMITTER_NAME: name,\n      GIT_AUTHOR_EMAIL: email,\n      GIT_COMMITTER_EMAIL: email,\n      ...configured,\n    };\n    lease = boundedTransfers(\n      await provider.acquire({\n        repository: workspace.repository,\n        directory: workspace.directory,\n        gitDirectories: workspace.gitDirectories,\n        variables,\n        signal: setupSignal,\n      }),\n      {\n        ...(options.limits?.copyMs\n          ? { deadlineMs: options.limits.copyMs }\n          : {}),\n      },\n    );\n    if (provider.placement === \"remote\") {\n      sync = await seedRemote(workspace, lease, {\n        ...(options.includeUncommitted ? { includeUncommitted: true } : {}),\n        ...(options.limits ? { limits: options.limits } : {}),\n        signal: setupSignal,\n      });\n      for (const path of options.copies ?? [])\n        if (\n          await stat(join(workspace.directory, path)).catch((error) => {\n            if ((error as NodeJS.ErrnoException).code === \"ENOENT\")\n              return undefined;\n            throw error;\n          })\n        )\n          await lease.upload(\n            join(workspace.directory, path),\n            posix.join(lease.root, path.replaceAll(\"\\\\\", \"/\")),\n          );\n      if (options.bootstrap !== false && options.agent)\n        prepared.set(\n          options.agent,\n          await prepareAdapter(options.agent, lease, setupSignal),\n        );\n    }\n    const initialized = await Promise.allSettled(\n      [\n        hooks(\n          lifecycle?.hostReady ?? [],\n          workspace.directory,\n          executeProcess,\n          setupSignal,\n        ),\n        hooks(\n          lifecycle?.sandboxReady ?? [],\n          lease.root,\n          lease.invoke.bind(lease),\n          setupSignal,\n          true,\n        ),\n      ].map((pending) =>\n        pending.catch((cause) => {\n          stop.abort(cause);\n          throw cause;\n        }),\n      ),\n    );\n    const failure = initialized.find((item) => item.status === \"rejected\");\n    if (failure?.status === \"rejected\") throw failure.reason;\n  } catch (cause) {\n    await startupFailure(workspace, cause, options);\n    await lease?.release().catch(() => undefined);\n    state.active = false;\n    if (owned) await workspace.close();\n    throw cause;\n  }\n\n  return {\n    options,\n    provider,\n    workspace,\n    state,\n    owned,\n    stop,\n    runtime: lease,\n    sync,\n    prepared,\n    staging,\n  };\n}\n"]}
+{"version":3,"file":"sandbox-provision.js","sourceRoot":"","sources":["../../src/application/sandbox-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB;IAEvB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;QAC1E,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IAC1D,SAAS,CACP,CAAC,OAAO,CAAC,SAAS;QAChB,CAAC,CAAC,OAAO,CAAC,UAAU;YAClB,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,MAAM;YACf,CAAC,OAAO,CAAC,YAAY,CAAC,EAC1B,mFAAmF,CACpF,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACjC,SAAS,CACP,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,SAAS;YAChE,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,EAC1C,2DAA2D,CAC5D,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,SAAS,CACP,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EACvC,6DAA6D,CAC9D,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,IAAI,KAA+B,EAAE,IAA4B,CAAC;IAClE,IAAI,QAAsC,CAAC;IAC3C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAClB,SAAS,CAAC,UAAU,EACpB,UAAU,EACV,UAAU,EACV,eAAe,CAChB,CAAC;IACF,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,wBAAwB,CAAC;YACxC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,SAAS,CAAC,UAAU,EACpB,EAAE,EACF,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CACrE,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CACZ,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CACtE,GAAG,EAAE,CAAC,mBAAmB,CAC1B,CACF,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,GAAG;YAChB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,KAAK;YACvB,mBAAmB,EAAE,KAAK;YAC1B,GAAG,UAAU;SACd,CAAC;QACF,kBAAkB,GAAG,IAAI,CAAC;QAC1B,KAAK,GAAG,gBAAgB,CACtB,mBAAmB,CACjB,MAAM,QAAQ,CAAC,OAAO,CAAC;YACrB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,SAAS;YACT,MAAM,EAAE,WAAW;SACpB,CAAC,EACF,QAAQ,CACT,EACD;YACE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;gBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CACF,CAAC;QACF,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAC7D,CAAC,KAAK,EAAE,EAAE;oBACR,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAO,SAAS,CAAC;oBACnB,MAAM,KAAK,CAAC;gBACd,CAAC,CACF,CAAC;gBACF,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC,MAAM,CAChB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAClD,EAAE,MAAM,EAAE,WAAW,EAAE,CACxB,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE;gBACvE,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK;gBAC9C,QAAQ,CAAC,GAAG,CACV,OAAO,CAAC,KAAK,EACb,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CACxD,CAAC;QACN,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAC1C;YACE,KAAK,CACH,SAAS,EAAE,SAAS,IAAI,EAAE,EAC1B,SAAS,CAAC,SAAS,EACnB,cAAc,EACd,WAAW,CACZ;YACD,KAAK,CACH,SAAS,EAAE,YAAY,IAAI,EAAE,EAC7B,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACxB,WAAW,EACX,IAAI,CACL;SACF,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC;QACzD,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC;QACzD,IAAI,aAAa,GAAG,mBAAmB,CAAC;QACxC,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1C,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAE,aAAa,GAAG,IAAI,CAAC;QAC/D,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK;YACP,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC5D,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,IAAI,aAAa;YACf,MAAM,QAAQ;gBACZ,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,CAAC;iBACvE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,CAAC,aAAa;YAAE,MAAM,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,KAAK;QACL,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { lstat } from \"node:fs/promises\";\nimport { join, posix } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { resolveVariables } from \"../infrastructure/settings.ts\";\nimport { registerResourceActivity } from \"../infrastructure/resource-activity.ts\";\nimport type { ResourceActivity } from \"../infrastructure/resource-activity.types.ts\";\nimport { trackedSandboxLease } from \"./sandbox-activity.ts\";\nimport { boundedTransfers } from \"../infrastructure/transfer.ts\";\nimport { docker } from \"../providers/docker.ts\";\nimport { prepareAdapter } from \"./agent-bootstrap.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { SandboxOptions } from \"./outpost.types.ts\";\nimport { uploadFiles } from \"./remote-upload.ts\";\nimport { seedRemote } from \"./remote-workspace.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\nimport type { ProvisionedSandbox } from \"./sandbox-session.types.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\nimport { openWorkspace } from \"./workspace.ts\";\n\nexport async function provisionSandbox(\n  options: SandboxOptions,\n): Promise<ProvisionedSandbox> {\n  options.signal?.throwIfAborted();\n  const provider = options.provider ?? docker();\n  if (provider.placement === \"remote\" && !options.workspace && !options.branch)\n    options = { ...options, branch: { mode: \"integrate\" } };\n  invariant(\n    !options.workspace ||\n      (!options.repository &&\n        !options.branch &&\n        !options.copies &&\n        !options.storageQuota),\n    \"A supplied workspace owns its repository, branch, copied inputs and storage quota\",\n  );\n  const owned = !options.workspace;\n  invariant(\n    provider.placement !== \"remote\" ||\n      ((options.workspace?.policy ?? options.branch)?.mode !== \"current\" &&\n        (options.workspace || options.branch)),\n    \"Remote providers require a named or integration workspace\",\n  );\n  const workspace = options.workspace ?? (await openWorkspace(options));\n  const state = workspaces.get(workspace);\n  invariant(\n    state && !state.closed && !state.active,\n    \"Workspace must be open and cannot belong to another sandbox\",\n  );\n  state.active = true;\n  const lifecycle = options.hooks ?? state.hooks;\n  const stop = new AbortController();\n  const setupSignal = options.signal\n    ? AbortSignal.any([options.signal, stop.signal])\n    : stop.signal;\n  let lease: SandboxLease | undefined, sync: RemoteSync | undefined;\n  let activity: ResourceActivity | undefined;\n  let acquisitionStarted = false;\n  const prepared = new Map<AgentAdapter, AgentAdapter>();\n  const staging = join(\n    workspace.repository,\n    \".outpost\",\n    \"recovery\",\n    \"conversations\",\n  );\n  try {\n    activity = await registerResourceActivity({\n      repository: workspace.repository,\n      workspace: workspace.directory,\n      provider: provider.name,\n      placement: provider.placement,\n    });\n    const configured = await resolveVariables(\n      workspace.repository,\n      {},\n      provider.variables,\n    );\n    const name = (\n      await git(workspace.repository, [\"config\", \"--get\", \"user.name\"]).catch(\n        () => \"Outpost\",\n      )\n    ).trim();\n    const email = (\n      await git(workspace.repository, [\"config\", \"--get\", \"user.email\"]).catch(\n        () => \"outpost@localhost\",\n      )\n    ).trim();\n    const variables = {\n      GIT_AUTHOR_NAME: name,\n      GIT_COMMITTER_NAME: name,\n      GIT_AUTHOR_EMAIL: email,\n      GIT_COMMITTER_EMAIL: email,\n      ...configured,\n    };\n    acquisitionStarted = true;\n    lease = boundedTransfers(\n      trackedSandboxLease(\n        await provider.acquire({\n          repository: workspace.repository,\n          directory: workspace.directory,\n          gitDirectories: workspace.gitDirectories,\n          variables,\n          signal: setupSignal,\n        }),\n        activity,\n      ),\n      {\n        ...(options.limits?.copyMs\n          ? { deadlineMs: options.limits.copyMs }\n          : {}),\n      },\n    );\n    if (provider.placement === \"remote\") {\n      sync = await seedRemote(workspace, lease, {\n        ...(options.includeUncommitted ? { includeUncommitted: true } : {}),\n        ...(options.limits ? { limits: options.limits } : {}),\n        signal: setupSignal,\n      });\n      const copiedFiles: string[] = [];\n      for (const path of options.copies ?? []) {\n        const info = await lstat(join(workspace.directory, path)).catch(\n          (error) => {\n            if ((error as NodeJS.ErrnoException).code === \"ENOENT\")\n              return undefined;\n            throw error;\n          },\n        );\n        if (!info) continue;\n        if (info.isFile() || info.isSymbolicLink()) {\n          copiedFiles.push(path.replaceAll(\"\\\\\", \"/\"));\n          continue;\n        }\n        await lease.upload(\n          join(workspace.directory, path),\n          posix.join(lease.root, path.replaceAll(\"\\\\\", \"/\")),\n          { signal: setupSignal },\n        );\n      }\n      await uploadFiles(lease, workspace.directory, [...new Set(copiedFiles)], {\n        signal: setupSignal,\n      });\n      if (options.bootstrap !== false && options.agent)\n        prepared.set(\n          options.agent,\n          await prepareAdapter(options.agent, lease, setupSignal),\n        );\n    }\n    const initialized = await Promise.allSettled(\n      [\n        hooks(\n          lifecycle?.hostReady ?? [],\n          workspace.directory,\n          executeProcess,\n          setupSignal,\n        ),\n        hooks(\n          lifecycle?.sandboxReady ?? [],\n          lease.root,\n          lease.invoke.bind(lease),\n          setupSignal,\n          true,\n        ),\n      ].map((pending) =>\n        pending.catch((cause) => {\n          stop.abort(cause);\n          throw cause;\n        }),\n      ),\n    );\n    const failure = initialized.find((item) => item.status === \"rejected\");\n    if (failure?.status === \"rejected\") throw failure.reason;\n    await activity.phase(\"ready\");\n  } catch (cause) {\n    await startupFailure(workspace, cause, options);\n    const allocationUncertain = acquisitionStarted && !lease;\n    let cleanupFailed = allocationUncertain;\n    await activity?.phase(\"closing\").catch(() => {\n      cleanupFailed = true;\n    });\n    await lease?.release().catch(() => {\n      cleanupFailed = true;\n    });\n    if (activity && !(await activity.idle())) cleanupFailed = true;\n    state.active = false;\n    if (owned)\n      await workspace.close({ preserve: cleanupFailed }).catch(() => {\n        cleanupFailed = true;\n      });\n    if (cleanupFailed)\n      await activity\n        ?.phase(allocationUncertain ? \"allocation-uncertain\" : \"cleanup-failed\")\n        .catch(() => undefined);\n    if (!cleanupFailed) await activity?.remove().catch(() => undefined);\n    throw cause;\n  }\n\n  return {\n    options,\n    provider,\n    workspace,\n    state,\n    owned,\n    stop,\n    runtime: lease,\n    activity,\n    sync,\n    prepared,\n    staging,\n  };\n}\n"]}

package/dist/application/sandbox-session.types.d.ts

@@ -1,3 +1,4 @@
+import type { ResourceActivity } from "../infrastructure/resource-activity.types.ts";
 import type { AgentAdapter } from "../domain/agent.types.ts";
 import type { SandboxLease, SandboxProvider } from "../domain/sandbox.types.ts";
 import type { LifecycleHooks } from "../domain/workspace.types.ts";
@@ -18,6 +19,7 @@ export interface ProvisionedSandbox {
     readonly owned: boolean;
     readonly stop: AbortController;
     readonly runtime: SandboxLease;
+    readonly activity: ResourceActivity;
     readonly sync: RemoteSync | undefined;
     readonly prepared: Map<AgentAdapter, AgentAdapter>;
     readonly staging: string;

package/dist/application/sandbox-session.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-session.types.js","sourceRoot":"","sources":["../../src/application/sandbox-session.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport type { SandboxLease, SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { LifecycleHooks } from \"../domain/workspace.types.ts\";\nimport type { WorkspaceLease } from \"../infrastructure/git/workspace.types.ts\";\nimport type { SandboxOptions, Workspace } from \"./outpost.types.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\n\nexport interface WorkspaceState {\n  lease: WorkspaceLease;\n  active: boolean;\n  closed: boolean;\n  hooks?: LifecycleHooks;\n}\n\nexport interface ProvisionedSandbox {\n  readonly options: SandboxOptions;\n  readonly provider: SandboxProvider;\n  readonly workspace: Workspace;\n  readonly state: WorkspaceState;\n  readonly owned: boolean;\n  readonly stop: AbortController;\n  readonly runtime: SandboxLease;\n  readonly sync: RemoteSync | undefined;\n  readonly prepared: Map<AgentAdapter, AgentAdapter>;\n  readonly staging: string;\n}\n\nexport interface SelectedAgent {\n  readonly selected: AgentAdapter;\n  readonly adapter: AgentAdapter;\n  readonly executionLease: SandboxLease;\n}\n\nexport interface SandboxAgents {\n  selectAgent(\n    agent: AgentAdapter | undefined,\n    signal: AbortSignal,\n  ): Promise<SelectedAgent>;\n  restore(id: string, agent: AgentAdapter): Promise<void>;\n  remember(agent: AgentAdapter, id: string): void;\n}\n\nexport interface OperationGate {\n  run<T>(action: () => Promise<T>): Promise<T>;\n  close(): Promise<void>;\n}\n"]}
+{"version":3,"file":"sandbox-session.types.js","sourceRoot":"","sources":["../../src/application/sandbox-session.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ResourceActivity } from \"../infrastructure/resource-activity.types.ts\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport type { SandboxLease, SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { LifecycleHooks } from \"../domain/workspace.types.ts\";\nimport type { WorkspaceLease } from \"../infrastructure/git/workspace.types.ts\";\nimport type { SandboxOptions, Workspace } from \"./outpost.types.ts\";\nimport type { RemoteSync } from \"./remote-workspace.types.ts\";\n\nexport interface WorkspaceState {\n  lease: WorkspaceLease;\n  active: boolean;\n  closed: boolean;\n  hooks?: LifecycleHooks;\n}\n\nexport interface ProvisionedSandbox {\n  readonly options: SandboxOptions;\n  readonly provider: SandboxProvider;\n  readonly workspace: Workspace;\n  readonly state: WorkspaceState;\n  readonly owned: boolean;\n  readonly stop: AbortController;\n  readonly runtime: SandboxLease;\n  readonly activity: ResourceActivity;\n  readonly sync: RemoteSync | undefined;\n  readonly prepared: Map<AgentAdapter, AgentAdapter>;\n  readonly staging: string;\n}\n\nexport interface SelectedAgent {\n  readonly selected: AgentAdapter;\n  readonly adapter: AgentAdapter;\n  readonly executionLease: SandboxLease;\n}\n\nexport interface SandboxAgents {\n  selectAgent(\n    agent: AgentAdapter | undefined,\n    signal: AbortSignal,\n  ): Promise<SelectedAgent>;\n  restore(id: string, agent: AgentAdapter): Promise<void>;\n  remember(agent: AgentAdapter, id: string): void;\n}\n\nexport interface OperationGate {\n  run<T>(action: () => Promise<T>): Promise<T>;\n  close(): Promise<void>;\n}\n"]}

package/dist/application/sandbox.js

@@ -2,6 +2,7 @@ import { OutpostError } from "../domain/errors.js";
 import { validateBrief } from "../domain/prompts.js";
 import { registerCleanup } from "../infrastructure/shutdown.js";
 import { validateDispatch } from "./dispatch-validation.js";
+import { diagnoseSandbox } from "./doctor-sandbox.js";
 import { operationGate } from "./operation-gate.js";
 import { sandboxAgents } from "./sandbox-agents.js";
 import { attachInSandbox } from "./sandbox-attach.js";
@@ -12,14 +13,14 @@ export async function createSandbox(options = {}) {
     const { workspace, runtime, sync, stop, state, owned } = context;
     const agents = sandboxAgents(context);
     const gate = operationGate();
-    const exclusive = gate.run;
+    const exclusive = (kind, action) => gate.run(() => context.activity.run(kind, action));
     let closing;
     const result = {
         workspace,
         root: runtime.root,
         dispatch(settings) {
             validateDispatch(settings);
-            return exclusive(() => dispatchInSandbox(context, agents, result, settings));
+            return exclusive("dispatch", () => dispatchInSandbox(context, agents, result, settings));
         },
         resume(id, settings) {
             return result.dispatch({ ...settings, continuation: { id } });
@@ -30,11 +31,21 @@ export async function createSandbox(options = {}) {
         attach(settings = {}) {
             settings.signal?.throwIfAborted();
             validateBrief(settings.brief, true);
-            return exclusive(() => attachInSandbox(context, agents, settings));
+            return exclusive("attach", () => attachInSandbox(context, agents, settings));
+        },
+        diagnose(settings = {}) {
+            settings.signal?.throwIfAborted();
+            return exclusive("diagnose", () => diagnoseSandbox(runtime, {
+                ...settings,
+                provider: context.provider,
+                signal: settings.signal
+                    ? AbortSignal.any([settings.signal, stop.signal])
+                    : stop.signal,
+            }));
         },
         command(command) {
             command.signal?.throwIfAborted();
-            return exclusive(async () => {
+            return exclusive("command", async () => {
                 try {
                     return await runtime.invoke({
                         ...command,
@@ -55,21 +66,33 @@ export async function createSandbox(options = {}) {
                 stop.abort(new OutpostError("aborted", "Sandbox closed"));
                 await gate.close();
                 let failure;
+                await context.activity.phase("closing").catch(() => undefined);
                 try {
                     await runtime.release();
                     await sync?.close();
+                    if (!(await context.activity.idle()))
+                        throw new OutpostError("provider", "Sandbox operations remain unsettled after release");
                 }
                 catch (cause) {
                     failure = cause;
                 }
                 state.active = false;
                 unregister();
-                const disposal = owned
-                    ? await workspace.close({ preserve: settings.preserve || !!failure })
-                    : {};
-                if (failure)
-                    throw failure;
-                return disposal;
+                let disposal = {};
+                try {
+                    if (owned)
+                        disposal = await workspace.close({
+                            preserve: settings.preserve || !!failure,
+                        });
+                    if (failure)
+                        throw failure;
+                    await context.activity.remove();
+                    return disposal;
+                }
+                catch (cause) {
+                    await context.activity.phase("cleanup-failed").catch(() => undefined);
+                    throw cause;
+                }
             })();
             return closing;
         },

package/dist/application/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/application/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;IAC3B,IAAI,OAAsC,CAAC;IAC3C,MAAM,MAAM,GAAY;QACtB,SAAS;QACT,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,CAAC,QAAQ;YACf,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC,GAAG,EAAE,CACpB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,QAAQ;YACjB,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,QAAQ;YACf,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,EAAE;YAClB,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAClC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,CAAC,OAAO;YACb,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC;wBAC1B,GAAG,OAAO;wBACV,MAAM,EAAE,OAAO,CAAC,MAAM;4BACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;4BAChD,CAAC,CAAC,IAAI,CAAC,MAAM;qBAChB,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBACxB,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAErB,UAAU,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,KAAK;oBACpB,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACrE,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC;gBAC3B,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { OutpostError } from \"../domain/errors.ts\";\nimport { validateBrief } from \"../domain/prompts.ts\";\nimport type { Disposal } from \"../domain/workspace.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { validateDispatch } from \"./dispatch-validation.ts\";\nimport { operationGate } from \"./operation-gate.ts\";\nimport type { Sandbox, SandboxOptions } from \"./outpost.types.ts\";\nimport { sandboxAgents } from \"./sandbox-agents.ts\";\nimport { attachInSandbox } from \"./sandbox-attach.ts\";\nimport { dispatchInSandbox } from \"./sandbox-dispatch.ts\";\nimport { provisionSandbox } from \"./sandbox-provision.ts\";\n\nexport async function createSandbox(\n  options: SandboxOptions = {},\n): Promise<Sandbox> {\n  const context = await provisionSandbox(options);\n  const { workspace, runtime, sync, stop, state, owned } = context;\n  const agents = sandboxAgents(context);\n  const gate = operationGate();\n  const exclusive = gate.run;\n  let closing: Promise<Disposal> | undefined;\n  const result: Sandbox = {\n    workspace,\n    root: runtime.root,\n    dispatch(settings) {\n      validateDispatch(settings);\n      return exclusive(() =>\n        dispatchInSandbox(context, agents, result, settings),\n      );\n    },\n    resume(id, settings) {\n      return result.dispatch({ ...settings, continuation: { id } });\n    },\n    fork(id, settings) {\n      return result.dispatch({ ...settings, continuation: { id, fork: true } });\n    },\n    attach(settings = {}) {\n      settings.signal?.throwIfAborted();\n      validateBrief(settings.brief, true);\n      return exclusive(() => attachInSandbox(context, agents, settings));\n    },\n    command(command) {\n      command.signal?.throwIfAborted();\n      return exclusive(async () => {\n        try {\n          return await runtime.invoke({\n            ...command,\n            signal: command.signal\n              ? AbortSignal.any([command.signal, stop.signal])\n              : stop.signal,\n          });\n        } finally {\n          await sync?.pull();\n        }\n      });\n    },\n    close(settings = {}) {\n      if (closing) return closing;\n      closing = (async () => {\n        stop.abort(new OutpostError(\"aborted\", \"Sandbox closed\"));\n        await gate.close();\n        let failure: unknown;\n        try {\n          await runtime.release();\n          await sync?.close();\n        } catch (cause) {\n          failure = cause;\n        }\n        state.active = false;\n\n        unregister();\n        const disposal = owned\n          ? await workspace.close({ preserve: settings.preserve || !!failure })\n          : {};\n        if (failure) throw failure;\n        return disposal;\n      })();\n      return closing;\n    },\n    async [Symbol.asyncDispose]() {\n      await result.close();\n    },\n  };\n  const unregister = registerCleanup(() => result.close({ preserve: true }));\n  return result;\n}\n"]}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/application/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,CAChB,IAA2B,EAC3B,MAAwB,EACxB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,OAAsC,CAAC;IAC3C,MAAM,MAAM,GAAY;QACtB,SAAS;QACT,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,CAAC,QAAQ;YACf,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,CAChC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,QAAQ;YACjB,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,EAAE,EAAE,QAAQ;YACf,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,EAAE;YAClB,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAClC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC9B,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAC3C,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,QAAQ,GAAG,EAAE;YACpB,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,CAChC,eAAe,CAAC,OAAO,EAAE;gBACvB,GAAG,QAAQ;gBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACrB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACjD,CAAC,CAAC,IAAI,CAAC,MAAM;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,OAAO;YACb,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;gBACrC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC;wBAC1B,GAAG,OAAO;wBACV,MAAM,EAAE,OAAO,CAAC,MAAM;4BACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;4BAChD,CAAC,CAAC,IAAI,CAAC,MAAM;qBAChB,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,OAAgB,CAAC;gBACrB,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBACxB,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;oBACpB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAClC,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,mDAAmD,CACpD,CAAC;gBACN,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAErB,UAAU,EAAE,CAAC;gBACb,IAAI,QAAQ,GAAa,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,IAAI,KAAK;wBACP,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC;4BAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO;yBACzC,CAAC,CAAC;oBACL,IAAI,OAAO;wBAAE,MAAM,OAAO,CAAC;oBAC3B,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAChC,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACtE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { ResourceOperationKind } from \"../infrastructure/resource-activity.types.ts\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { validateBrief } from \"../domain/prompts.ts\";\nimport type { Disposal } from \"../domain/workspace.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { validateDispatch } from \"./dispatch-validation.ts\";\nimport { diagnoseSandbox } from \"./doctor-sandbox.ts\";\nimport { operationGate } from \"./operation-gate.ts\";\nimport type { Sandbox, SandboxOptions } from \"./outpost.types.ts\";\nimport { sandboxAgents } from \"./sandbox-agents.ts\";\nimport { attachInSandbox } from \"./sandbox-attach.ts\";\nimport { dispatchInSandbox } from \"./sandbox-dispatch.ts\";\nimport { provisionSandbox } from \"./sandbox-provision.ts\";\n\nexport async function createSandbox(\n  options: SandboxOptions = {},\n): Promise<Sandbox> {\n  const context = await provisionSandbox(options);\n  const { workspace, runtime, sync, stop, state, owned } = context;\n  const agents = sandboxAgents(context);\n  const gate = operationGate();\n  const exclusive = <T>(\n    kind: ResourceOperationKind,\n    action: () => Promise<T>,\n  ) => gate.run(() => context.activity.run(kind, action));\n  let closing: Promise<Disposal> | undefined;\n  const result: Sandbox = {\n    workspace,\n    root: runtime.root,\n    dispatch(settings) {\n      validateDispatch(settings);\n      return exclusive(\"dispatch\", () =>\n        dispatchInSandbox(context, agents, result, settings),\n      );\n    },\n    resume(id, settings) {\n      return result.dispatch({ ...settings, continuation: { id } });\n    },\n    fork(id, settings) {\n      return result.dispatch({ ...settings, continuation: { id, fork: true } });\n    },\n    attach(settings = {}) {\n      settings.signal?.throwIfAborted();\n      validateBrief(settings.brief, true);\n      return exclusive(\"attach\", () =>\n        attachInSandbox(context, agents, settings),\n      );\n    },\n    diagnose(settings = {}) {\n      settings.signal?.throwIfAborted();\n      return exclusive(\"diagnose\", () =>\n        diagnoseSandbox(runtime, {\n          ...settings,\n          provider: context.provider,\n          signal: settings.signal\n            ? AbortSignal.any([settings.signal, stop.signal])\n            : stop.signal,\n        }),\n      );\n    },\n    command(command) {\n      command.signal?.throwIfAborted();\n      return exclusive(\"command\", async () => {\n        try {\n          return await runtime.invoke({\n            ...command,\n            signal: command.signal\n              ? AbortSignal.any([command.signal, stop.signal])\n              : stop.signal,\n          });\n        } finally {\n          await sync?.pull();\n        }\n      });\n    },\n    close(settings = {}) {\n      if (closing) return closing;\n      closing = (async () => {\n        stop.abort(new OutpostError(\"aborted\", \"Sandbox closed\"));\n        await gate.close();\n        let failure: unknown;\n        await context.activity.phase(\"closing\").catch(() => undefined);\n        try {\n          await runtime.release();\n          await sync?.close();\n          if (!(await context.activity.idle()))\n            throw new OutpostError(\n              \"provider\",\n              \"Sandbox operations remain unsettled after release\",\n            );\n        } catch (cause) {\n          failure = cause;\n        }\n        state.active = false;\n\n        unregister();\n        let disposal: Disposal = {};\n        try {\n          if (owned)\n            disposal = await workspace.close({\n              preserve: settings.preserve || !!failure,\n            });\n          if (failure) throw failure;\n          await context.activity.remove();\n          return disposal;\n        } catch (cause) {\n          await context.activity.phase(\"cleanup-failed\").catch(() => undefined);\n          throw cause;\n        }\n      })();\n      return closing;\n    },\n    async [Symbol.asyncDispose]() {\n      await result.close();\n    },\n  };\n  const unregister = registerCleanup(() => result.close({ preserve: true }));\n  return result;\n}\n"]}

package/dist/application/speculation-host.d.ts

@@ -0,0 +1,2 @@
+import type { SpeculativeHostSnapshot } from "./speculation.types.ts";
+export declare function speculativeHostSnapshot(repository: string): Promise<SpeculativeHostSnapshot>;

package/dist/application/speculation-host.js

@@ -0,0 +1,30 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { git } from "../infrastructure/git/command.js";
+import { digest } from "./workspace-fingerprint.js";
+export async function speculativeHostSnapshot(repository) {
+    const temporary = await mkdtemp(join(tmpdir(), "outpost-speculation-"));
+    try {
+        const head = (await git(repository, ["rev-parse", "--verify", "HEAD^{commit}"])).trim();
+        const branch = (await git(repository, ["rev-parse", "--abbrev-ref", "HEAD"])).trim();
+        const status = await git(repository, [
+            "status",
+            "--porcelain",
+            "--untracked-files=all",
+            "--",
+            ".",
+            ":(exclude).outpost",
+        ]);
+        return {
+            head,
+            branch,
+            dirty: !!status.trim(),
+            fingerprint: await digest(repository, temporary),
+        };
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=speculation-host.js.map

package/dist/application/speculation-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"speculation-host.js","sourceRoot":"","sources":["../../src/application/speculation-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGpD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CACX,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAClE,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,CACb,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAC7D,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;YACnC,QAAQ;YACR,aAAa;YACb,uBAAuB;YACvB,IAAI;YACJ,GAAG;YACH,oBAAoB;SACrB,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,MAAM;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YACtB,WAAW,EAAE,MAAM,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC;SACjD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC","sourcesContent":["import { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { git } from \"../infrastructure/git/command.ts\";\nimport { digest } from \"./workspace-fingerprint.ts\";\nimport type { SpeculativeHostSnapshot } from \"./speculation.types.ts\";\n\nexport async function speculativeHostSnapshot(\n  repository: string,\n): Promise<SpeculativeHostSnapshot> {\n  const temporary = await mkdtemp(join(tmpdir(), \"outpost-speculation-\"));\n  try {\n    const head = (\n      await git(repository, [\"rev-parse\", \"--verify\", \"HEAD^{commit}\"])\n    ).trim();\n    const branch = (\n      await git(repository, [\"rev-parse\", \"--abbrev-ref\", \"HEAD\"])\n    ).trim();\n    const status = await git(repository, [\n      \"status\",\n      \"--porcelain\",\n      \"--untracked-files=all\",\n      \"--\",\n      \".\",\n      \":(exclude).outpost\",\n    ]);\n    return {\n      head,\n      branch,\n      dirty: !!status.trim(),\n      fingerprint: await digest(repository, temporary),\n    };\n  } finally {\n    await rm(temporary, { recursive: true, force: true });\n  }\n}\n"]}

package/dist/application/speculation.constants.d.ts

@@ -0,0 +1,4 @@
+export declare const speculationLimits: {
+    readonly candidates: 8;
+    readonly concurrency: 2;
+};

package/dist/application/speculation.constants.js

@@ -0,0 +1,2 @@
+export const speculationLimits = { candidates: 8, concurrency: 2 };
+//# sourceMappingURL=speculation.constants.js.map

package/dist/application/speculation.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"speculation.constants.js","sourceRoot":"","sources":["../../src/application/speculation.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAW,CAAC","sourcesContent":["export const speculationLimits = { candidates: 8, concurrency: 2 } as const;\n"]}

package/dist/application/speculation.d.ts

@@ -0,0 +1,2 @@
+import type { SpeculationOptions, SpeculationResult } from "./speculation.types.ts";
+export declare function speculate<T = undefined>(options: SpeculationOptions<T>): Promise<SpeculationResult<T>>;

package/dist/application/speculation.js

@@ -0,0 +1,166 @@
+import { randomUUID } from "node:crypto";
+import { invariant, recoveryDetails } from "../domain/errors.js";
+import { workflowAccounting } from "../domain/workflow/budget.js";
+import { speculativeHostSnapshot } from "./speculation-host.js";
+import { createSandbox } from "./sandbox.js";
+import { speculationLimits } from "./speculation.constants.js";
+import { taskUsage } from "./task-usage.js";
+export async function speculate(options) {
+    const { candidates } = options;
+    invariant(candidates.length > 0 && candidates.length <= speculationLimits.candidates, `Speculation requires 1 to ${speculationLimits.candidates} candidates`);
+    invariant(new Set(candidates.map((candidate) => candidate.key)).size ===
+        candidates.length &&
+        candidates.every((candidate) => /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(candidate.key)), "Speculative candidate keys must be unique simple names of 1 to 64 characters");
+    const concurrency = options.concurrency ?? speculationLimits.concurrency;
+    invariant(Number.isSafeInteger(concurrency) &&
+        concurrency > 0 &&
+        concurrency <= speculationLimits.candidates, `Speculation concurrency must be 1 to ${speculationLimits.candidates}`);
+    const stop = new AbortController();
+    const signal = options.signal
+        ? AbortSignal.any([options.signal, stop.signal])
+        : stop.signal;
+    let budgetError;
+    const accounting = workflowAccounting(options.budget, (error) => {
+        budgetError = error;
+        // Attempt limits stop admissions; already admitted candidates may finish.
+        if (error.dimension !== "attempts")
+            stop.abort(error);
+    });
+    const before = await speculativeHostSnapshot(options.repository);
+    const baseline = before.head;
+    const id = randomUUID();
+    const records = candidates.map((candidate) => ({
+        key: candidate.key,
+        branch: `outpost/speculation/${id}/${candidate.key}`,
+        status: "skipped",
+    }));
+    let winner;
+    let next = 0;
+    async function worker() {
+        while (!signal.aborted && !winner && !accounting.exhausted) {
+            const index = next++;
+            const candidate = candidates[index];
+            if (!candidate)
+                return;
+            try {
+                accounting.admit();
+            }
+            catch {
+                return;
+            }
+            const initial = records[index];
+            let sandbox;
+            let result;
+            let error;
+            let accepted = false;
+            let cleanupFailed = false;
+            let retainedDirectory;
+            const usage = taskUsage({ reportUsage: (value) => accounting.report(value) }, candidate.request.observe);
+            try {
+                sandbox = await createSandbox({
+                    ...options.sandbox,
+                    repository: options.repository,
+                    provider: options.provider,
+                    branch: { mode: "named", name: initial.branch, from: baseline },
+                    agent: candidate.agent,
+                    signal,
+                });
+                signal.throwIfAborted();
+                invariant(sandbox.workspace.baseline === baseline, "Speculative workspace does not match the pinned baseline");
+                const { resume: _resume, fork: _fork, ...output } = await sandbox.dispatch({
+                    ...candidate.request,
+                    signal,
+                    observe: usage.observe,
+                });
+                result = output;
+                usage.reconcile(output.usage);
+                signal.throwIfAborted();
+                accepted = await options.validate({
+                    key: candidate.key,
+                    result,
+                    sandbox,
+                    signal,
+                });
+                signal.throwIfAborted();
+            }
+            catch (cause) {
+                error = cause;
+            }
+            if (sandbox) {
+                try {
+                    const disposal = await sandbox.close({
+                        preserve: error !== undefined,
+                    });
+                    retainedDirectory = disposal.retainedDirectory;
+                }
+                catch (cause) {
+                    cleanupFailed = true;
+                    error =
+                        error === undefined
+                            ? cause
+                            : new AggregateError([error, cause], "Speculative execution and cleanup failed");
+                    retainedDirectory = sandbox.workspace.directory;
+                }
+            }
+            const recovery = recoveryDetails(error);
+            const recoveredDirectory = typeof recovery?.directory === "string"
+                ? recovery.directory
+                : undefined;
+            const directory = sandbox?.workspace.directory ?? recoveredDirectory;
+            retainedDirectory ??= recoveredDirectory;
+            function candidateStatus() {
+                if (cleanupFailed)
+                    return "failed";
+                if (signal.aborted)
+                    return "cancelled";
+                if (error !== undefined)
+                    return "failed";
+                if (accepted && !winner)
+                    return "winner";
+                return "rejected";
+            }
+            const status = candidateStatus();
+            const record = {
+                ...initial,
+                status,
+                ...(directory ? { directory } : {}),
+                ...(retainedDirectory ? { retainedDirectory } : {}),
+                ...(result ? { result } : {}),
+                ...(error !== undefined ? { error } : {}),
+            };
+            records[index] = record;
+            if (status === "winner") {
+                winner = record;
+                stop.abort(new Error(`Speculative candidate ${candidate.key} selected`));
+            }
+        }
+    }
+    await Promise.all(Array.from({ length: Math.min(concurrency, candidates.length) }, worker));
+    function outcome() {
+        if (winner)
+            return "winner";
+        if (options.signal?.aborted)
+            return "aborted";
+        if (budgetError !== undefined)
+            return "budget-exhausted";
+        return "no-winner";
+    }
+    const status = outcome();
+    const host = await speculativeHostSnapshot(options.repository).then((after) => ({
+        before,
+        after,
+        changed: before.fingerprint !== after.fingerprint ||
+            before.branch !== after.branch,
+    }), (error) => ({ before, changed: true, error }));
+    return {
+        id,
+        baseline,
+        host,
+        status,
+        candidates: records,
+        usage: accounting.snapshot(),
+        ...(winner ? { winner } : {}),
+        ...(budgetError !== undefined ? { error: budgetError } : {}),
+    };
+}
+//# sourceMappingURL=speculation.js.map