@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/cli/main.constants.d.ts

@@ -1,78 +1,187 @@
-export declare const help = "Outpost \u2014 sandboxed coding agents and workflows\n\noutpost init [--yes] [--agent codex|claude] [--provider docker|podman|vercel|daytona|local]\n             [--manager npm|pnpm|yarn|bun] [--model NAME] [--install] [--build] [--image NAME] [--directory PATH] [--repository PATH]\noutpost image build|remove [--engine docker|podman] [--file PATH] [--image NAME] [--uid ID] [--gid ID]\n\noutpost doctor [--provider docker|podman|local|vercel|daytona] [--agent codex|claude] [--image NAME] [--json]\n\noutpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--json]\noutpost recovery verify --directory TRANSFER_PATH [--checksums] [--max-bytes NUMBER] [--restorability --repository PATH] [--json]\noutpost recovery prune --policy FILE [--repository PATH] [--apply] [--json]\n\nNode.js 24+ and Git are required. Run generated scripts with Node.js.\nInitialization writes run.ts and project files directly into --directory (default: current directory).\n--repository selects the target Git repository; relative paths are resolved from the workflow directory.\n";
 export declare const cliOptions: {
+    readonly "base-url": {
+        readonly type: "string";
+        readonly description: "Custom Codex Responses API base URL (requires --model)";
+    };
+    readonly "api-key-env": {
+        readonly type: "string";
+        readonly description: "Custom provider API-key environment variable";
+    };
+    readonly authentication: {
+        readonly type: "string";
+        readonly description: "Authentication: api-key, oauth-token (Claude), login (Codex)";
+    };
     readonly help: {
         readonly type: "boolean";
         readonly short: "h";
+        readonly description: "Help";
     };
     readonly yes: {
         readonly type: "boolean";
         readonly short: "y";
+        readonly description: "Accept defaults without prompting";
     };
     readonly install: {
         readonly type: "boolean";
+        readonly description: "Install project dependencies";
     };
     readonly build: {
         readonly type: "boolean";
+        readonly description: "Build the container image";
     };
     readonly json: {
         readonly type: "boolean";
+        readonly description: "Write a machine-readable JSON report";
     };
     readonly git: {
         readonly type: "boolean";
+        readonly description: "Inspect workspace Git state";
     };
     readonly locks: {
         readonly type: "boolean";
+        readonly description: "Inspect local lock ownership";
+    };
+    readonly resources: {
+        readonly type: "boolean";
+        readonly description: "Inspect recorded sandbox activity";
     };
     readonly restorability: {
         readonly type: "boolean";
+        readonly description: "Check whether the retained transfer can be restored";
     };
     readonly apply: {
         readonly type: "boolean";
+        readonly description: "Apply changes (default: preview)";
     };
     readonly policy: {
         readonly type: "string";
+        readonly description: "Retention policy file";
     };
     readonly checksums: {
         readonly type: "boolean";
+        readonly description: "Verify retained file checksums";
     };
     readonly "max-bytes": {
         readonly type: "string";
+        readonly description: "Maximum bytes to inspect";
     };
     readonly "max-entries": {
         readonly type: "string";
+        readonly description: "Maximum inventory entries";
     };
     readonly agent: {
         readonly type: "string";
+        readonly description: "Agent: codex, claude or gemini";
     };
     readonly provider: {
         readonly type: "string";
+        readonly description: "Provider: docker, podman, local, vercel or daytona";
     };
     readonly manager: {
         readonly type: "string";
+        readonly description: "Package manager: npm, pnpm, yarn or bun";
     };
     readonly model: {
         readonly type: "string";
+        readonly description: "Agent model name";
     };
     readonly directory: {
         readonly type: "string";
+        readonly description: "Workflow or retained transfer directory";
     };
     readonly repository: {
         readonly type: "string";
+        readonly description: "Target Git repository";
+    };
+    readonly destination: {
+        readonly type: "string";
+        readonly description: "New restoration directory";
+    };
+    readonly side: {
+        readonly type: "string";
+        readonly description: "Transfer side: previous or incoming";
     };
     readonly engine: {
         readonly type: "string";
+        readonly description: "Container engine: docker or podman";
     };
     readonly file: {
         readonly type: "string";
+        readonly description: "Container recipe path";
     };
     readonly image: {
         readonly type: "string";
+        readonly description: "Container image name";
     };
     readonly uid: {
         readonly type: "string";
+        readonly description: "Container user ID";
     };
     readonly gid: {
         readonly type: "string";
+        readonly description: "Container group ID";
+    };
+};
+export declare const commandOptions: {
+    readonly init: {
+        readonly description: "Create a standalone workflow project";
+        readonly options: readonly ["yes", "agent", "provider", "manager", "authentication", "model", "base-url", "api-key-env", "install", "build", "image", "directory", "repository"];
+    };
+    readonly doctor: {
+        readonly description: "Diagnose host and sandbox prerequisites";
+        readonly options: readonly ["provider", "agent", "image", "json"];
+    };
+    readonly "image build": {
+        readonly description: "Build a container image";
+        readonly options: readonly ["directory", "engine", "file", "image", "uid", "gid"];
+    };
+    readonly "image remove": {
+        readonly description: "Remove a container image";
+        readonly options: readonly ["directory", "engine", "image"];
     };
+    readonly "recovery inspect": {
+        readonly description: "Inspect recovery inventory";
+        readonly options: readonly ["repository", "max-entries", "git", "locks", "resources", "json"];
+    };
+    readonly "recovery verify": {
+        readonly description: "Verify a retained transfer";
+        readonly options: readonly ["directory", "checksums", "max-bytes", "restorability", "repository", "json"];
+    };
+    readonly "recovery restore": {
+        readonly description: "Restore a retained transfer";
+        readonly options: readonly ["directory", "repository", "destination", "side", "max-bytes", "apply", "json"];
+    };
+    readonly "recovery prune": {
+        readonly description: "Apply an explicit retention policy";
+        readonly options: readonly ["policy", "repository", "apply", "json"];
+    };
+};
+export declare const initializationQuestions: readonly [{
+    readonly key: "agent";
+    readonly message: "Coding agent";
+    readonly choices: readonly ["codex", "claude", "gemini"];
+}, {
+    readonly key: "provider";
+    readonly message: "Sandbox provider";
+    readonly choices: readonly ["docker", "podman", "vercel", "daytona", "local"];
+}];
+export declare const authenticationChoices: {
+    readonly codex: readonly [{
+        readonly value: "api-key";
+        readonly label: "OpenAI API key (API billing)";
+    }, {
+        readonly value: "login";
+        readonly label: "Existing Codex account login";
+    }];
+    readonly claude: readonly [{
+        readonly value: "api-key";
+        readonly label: "Anthropic API key (API billing)";
+    }, {
+        readonly value: "oauth-token";
+        readonly label: "Claude subscription token (claude setup-token)";
+    }];
+    readonly gemini: readonly [{
+        readonly value: "api-key";
+        readonly label: "Gemini API key";
+    }];
 };
-export declare const initializationQuestions: readonly [readonly ["agent", "Agent (codex/claude)", "codex"], readonly ["provider", "Sandbox (docker/podman/vercel/daytona/local)", "docker"]];

package/dist/cli/main.constants.js

@@ -1,47 +1,153 @@
-export const help = `Outpost — sandboxed coding agents and workflows
-
-outpost init [--yes] [--agent codex|claude] [--provider docker|podman|vercel|daytona|local]
-             [--manager npm|pnpm|yarn|bun] [--model NAME] [--install] [--build] [--image NAME] [--directory PATH] [--repository PATH]
-outpost image build|remove [--engine docker|podman] [--file PATH] [--image NAME] [--uid ID] [--gid ID]
-
-outpost doctor [--provider docker|podman|local|vercel|daytona] [--agent codex|claude] [--image NAME] [--json]
-
-outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--json]
-outpost recovery verify --directory TRANSFER_PATH [--checksums] [--max-bytes NUMBER] [--restorability --repository PATH] [--json]
-outpost recovery prune --policy FILE [--repository PATH] [--apply] [--json]
-
-Node.js 24+ and Git are required. Run generated scripts with Node.js.
-Initialization writes run.ts and project files directly into --directory (default: current directory).
---repository selects the target Git repository; relative paths are resolved from the workflow directory.
-`;
 export const cliOptions = {
-    help: { type: "boolean", short: "h" },
-    yes: { type: "boolean", short: "y" },
-    install: { type: "boolean" },
-    build: { type: "boolean" },
-    json: { type: "boolean" },
-    git: { type: "boolean" },
-    locks: { type: "boolean" },
-    restorability: { type: "boolean" },
-    apply: { type: "boolean" },
-    policy: { type: "string" },
-    checksums: { type: "boolean" },
-    "max-bytes": { type: "string" },
-    "max-entries": { type: "string" },
-    agent: { type: "string" },
-    provider: { type: "string" },
-    manager: { type: "string" },
-    model: { type: "string" },
-    directory: { type: "string" },
-    repository: { type: "string" },
-    engine: { type: "string" },
-    file: { type: "string" },
-    image: { type: "string" },
-    uid: { type: "string" },
-    gid: { type: "string" },
+    "base-url": {
+        type: "string",
+        description: "Custom Codex Responses API base URL (requires --model)",
+    },
+    "api-key-env": {
+        type: "string",
+        description: "Custom provider API-key environment variable",
+    },
+    authentication: {
+        type: "string",
+        description: "Authentication: api-key, oauth-token (Claude), login (Codex)",
+    },
+    help: { type: "boolean", short: "h", description: "Help" },
+    yes: {
+        type: "boolean",
+        short: "y",
+        description: "Accept defaults without prompting",
+    },
+    install: { type: "boolean", description: "Install project dependencies" },
+    build: { type: "boolean", description: "Build the container image" },
+    json: {
+        type: "boolean",
+        description: "Write a machine-readable JSON report",
+    },
+    git: { type: "boolean", description: "Inspect workspace Git state" },
+    locks: { type: "boolean", description: "Inspect local lock ownership" },
+    resources: {
+        type: "boolean",
+        description: "Inspect recorded sandbox activity",
+    },
+    restorability: {
+        type: "boolean",
+        description: "Check whether the retained transfer can be restored",
+    },
+    apply: { type: "boolean", description: "Apply changes (default: preview)" },
+    policy: { type: "string", description: "Retention policy file" },
+    checksums: { type: "boolean", description: "Verify retained file checksums" },
+    "max-bytes": { type: "string", description: "Maximum bytes to inspect" },
+    "max-entries": { type: "string", description: "Maximum inventory entries" },
+    agent: { type: "string", description: "Agent: codex, claude or gemini" },
+    provider: {
+        type: "string",
+        description: "Provider: docker, podman, local, vercel or daytona",
+    },
+    manager: {
+        type: "string",
+        description: "Package manager: npm, pnpm, yarn or bun",
+    },
+    model: { type: "string", description: "Agent model name" },
+    directory: {
+        type: "string",
+        description: "Workflow or retained transfer directory",
+    },
+    repository: { type: "string", description: "Target Git repository" },
+    destination: { type: "string", description: "New restoration directory" },
+    side: { type: "string", description: "Transfer side: previous or incoming" },
+    engine: { type: "string", description: "Container engine: docker or podman" },
+    file: { type: "string", description: "Container recipe path" },
+    image: { type: "string", description: "Container image name" },
+    uid: { type: "string", description: "Container user ID" },
+    gid: { type: "string", description: "Container group ID" },
+};
+export const commandOptions = {
+    init: {
+        description: "Create a standalone workflow project",
+        options: [
+            "yes",
+            "agent",
+            "provider",
+            "manager",
+            "authentication",
+            "model",
+            "base-url",
+            "api-key-env",
+            "install",
+            "build",
+            "image",
+            "directory",
+            "repository",
+        ],
+    },
+    doctor: {
+        description: "Diagnose host and sandbox prerequisites",
+        options: ["provider", "agent", "image", "json"],
+    },
+    "image build": {
+        description: "Build a container image",
+        options: ["directory", "engine", "file", "image", "uid", "gid"],
+    },
+    "image remove": {
+        description: "Remove a container image",
+        options: ["directory", "engine", "image"],
+    },
+    "recovery inspect": {
+        description: "Inspect recovery inventory",
+        options: ["repository", "max-entries", "git", "locks", "resources", "json"],
+    },
+    "recovery verify": {
+        description: "Verify a retained transfer",
+        options: [
+            "directory",
+            "checksums",
+            "max-bytes",
+            "restorability",
+            "repository",
+            "json",
+        ],
+    },
+    "recovery restore": {
+        description: "Restore a retained transfer",
+        options: [
+            "directory",
+            "repository",
+            "destination",
+            "side",
+            "max-bytes",
+            "apply",
+            "json",
+        ],
+    },
+    "recovery prune": {
+        description: "Apply an explicit retention policy",
+        options: ["policy", "repository", "apply", "json"],
+    },
 };
 export const initializationQuestions = [
-    ["agent", "Agent (codex/claude)", "codex"],
-    ["provider", "Sandbox (docker/podman/vercel/daytona/local)", "docker"],
+    {
+        key: "agent",
+        message: "Coding agent",
+        choices: ["codex", "claude", "gemini"],
+    },
+    {
+        key: "provider",
+        message: "Sandbox provider",
+        choices: ["docker", "podman", "vercel", "daytona", "local"],
+    },
 ];
+export const authenticationChoices = {
+    codex: [
+        { value: "api-key", label: "OpenAI API key (API billing)" },
+        { value: "login", label: "Existing Codex account login" },
+    ],
+    claude: [
+        { value: "api-key", label: "Anthropic API key (API billing)" },
+        {
+            value: "oauth-token",
+            label: "Claude subscription token (claude setup-token)",
+        },
+    ],
+    gemini: [{ value: "api-key", label: "Gemini API key" }],
+};
 //# sourceMappingURL=main.constants.js.map

package/dist/cli/main.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.constants.js","sourceRoot":"","sources":["../../src/cli/main.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;CAenB,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;IACrC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;IACpC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACzB,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CACf,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC;IAC1C,CAAC,UAAU,EAAE,8CAA8C,EAAE,QAAQ,CAAC;CAC9D,CAAC","sourcesContent":["export const help = `Outpost — sandboxed coding agents and workflows\n\noutpost init [--yes] [--agent codex|claude] [--provider docker|podman|vercel|daytona|local]\n             [--manager npm|pnpm|yarn|bun] [--model NAME] [--install] [--build] [--image NAME] [--directory PATH] [--repository PATH]\noutpost image build|remove [--engine docker|podman] [--file PATH] [--image NAME] [--uid ID] [--gid ID]\n\noutpost doctor [--provider docker|podman|local|vercel|daytona] [--agent codex|claude] [--image NAME] [--json]\n\noutpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--json]\noutpost recovery verify --directory TRANSFER_PATH [--checksums] [--max-bytes NUMBER] [--restorability --repository PATH] [--json]\noutpost recovery prune --policy FILE [--repository PATH] [--apply] [--json]\n\nNode.js 24+ and Git are required. Run generated scripts with Node.js.\nInitialization writes run.ts and project files directly into --directory (default: current directory).\n--repository selects the target Git repository; relative paths are resolved from the workflow directory.\n`;\n\nexport const cliOptions = {\n  help: { type: \"boolean\", short: \"h\" },\n  yes: { type: \"boolean\", short: \"y\" },\n  install: { type: \"boolean\" },\n  build: { type: \"boolean\" },\n  json: { type: \"boolean\" },\n  git: { type: \"boolean\" },\n  locks: { type: \"boolean\" },\n  restorability: { type: \"boolean\" },\n  apply: { type: \"boolean\" },\n  policy: { type: \"string\" },\n  checksums: { type: \"boolean\" },\n  \"max-bytes\": { type: \"string\" },\n  \"max-entries\": { type: \"string\" },\n  agent: { type: \"string\" },\n  provider: { type: \"string\" },\n  manager: { type: \"string\" },\n  model: { type: \"string\" },\n  directory: { type: \"string\" },\n  repository: { type: \"string\" },\n  engine: { type: \"string\" },\n  file: { type: \"string\" },\n  image: { type: \"string\" },\n  uid: { type: \"string\" },\n  gid: { type: \"string\" },\n} as const;\n\nexport const initializationQuestions = [\n  [\"agent\", \"Agent (codex/claude)\", \"codex\"],\n  [\"provider\", \"Sandbox (docker/podman/vercel/daytona/local)\", \"docker\"],\n] as const;\n"]}
+{"version":3,"file":"main.constants.js","sourceRoot":"","sources":["../../src/cli/main.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8DAA8D;KAC5E;IACD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE;IAC1D,GAAG,EAAE;QACH,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,mCAAmC;KACjD;IACD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACzE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACpE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,sCAAsC;KACpD;IACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACpE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACvE,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qDAAqD;KACnE;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;IAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAChE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC7E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACxE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC3E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACxE,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oDAAoD;KAClE;IACD,OAAO,EAAE;QACP,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC1D,SAAS,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACzE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;IAC5E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE;QACJ,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE;YACP,KAAK;YACL,OAAO;YACP,UAAU;YACV,SAAS;YACT,gBAAgB;YAChB,OAAO;YACP,UAAU;YACV,aAAa;YACb,SAAS;YACT,OAAO;YACP,OAAO;YACP,WAAW;YACX,YAAY;SACb;KACF;IACD,MAAM,EAAE;QACN,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KAChD;IACD,aAAa,EAAE;QACb,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;KAChE;IACD,cAAc,EAAE;QACd,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC1C;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5E;IACD,iBAAiB,EAAE;QACjB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE;YACP,WAAW;YACX,WAAW;YACX,WAAW;YACX,eAAe;YACf,YAAY;YACZ,MAAM;SACP;KACF;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE;YACP,WAAW;YACX,YAAY;YACZ,aAAa;YACb,MAAM;YACN,WAAW;YACX,OAAO;YACP,MAAM;SACP;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;KACnD;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;QACE,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACvC;IACD;QACE,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;KAC5D;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE;QACL,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,8BAA8B,EAAE;QAC3D,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE;KAC1D;IACD,MAAM,EAAE;QACN,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,EAAE;QAC9D;YACE,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,gDAAgD;SACxD;KACF;IACD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC/C,CAAC","sourcesContent":["export const cliOptions = {\n  \"base-url\": {\n    type: \"string\",\n    description: \"Custom Codex Responses API base URL (requires --model)\",\n  },\n  \"api-key-env\": {\n    type: \"string\",\n    description: \"Custom provider API-key environment variable\",\n  },\n  authentication: {\n    type: \"string\",\n    description: \"Authentication: api-key, oauth-token (Claude), login (Codex)\",\n  },\n  help: { type: \"boolean\", short: \"h\", description: \"Help\" },\n  yes: {\n    type: \"boolean\",\n    short: \"y\",\n    description: \"Accept defaults without prompting\",\n  },\n  install: { type: \"boolean\", description: \"Install project dependencies\" },\n  build: { type: \"boolean\", description: \"Build the container image\" },\n  json: {\n    type: \"boolean\",\n    description: \"Write a machine-readable JSON report\",\n  },\n  git: { type: \"boolean\", description: \"Inspect workspace Git state\" },\n  locks: { type: \"boolean\", description: \"Inspect local lock ownership\" },\n  resources: {\n    type: \"boolean\",\n    description: \"Inspect recorded sandbox activity\",\n  },\n  restorability: {\n    type: \"boolean\",\n    description: \"Check whether the retained transfer can be restored\",\n  },\n  apply: { type: \"boolean\", description: \"Apply changes (default: preview)\" },\n  policy: { type: \"string\", description: \"Retention policy file\" },\n  checksums: { type: \"boolean\", description: \"Verify retained file checksums\" },\n  \"max-bytes\": { type: \"string\", description: \"Maximum bytes to inspect\" },\n  \"max-entries\": { type: \"string\", description: \"Maximum inventory entries\" },\n  agent: { type: \"string\", description: \"Agent: codex, claude or gemini\" },\n  provider: {\n    type: \"string\",\n    description: \"Provider: docker, podman, local, vercel or daytona\",\n  },\n  manager: {\n    type: \"string\",\n    description: \"Package manager: npm, pnpm, yarn or bun\",\n  },\n  model: { type: \"string\", description: \"Agent model name\" },\n  directory: {\n    type: \"string\",\n    description: \"Workflow or retained transfer directory\",\n  },\n  repository: { type: \"string\", description: \"Target Git repository\" },\n  destination: { type: \"string\", description: \"New restoration directory\" },\n  side: { type: \"string\", description: \"Transfer side: previous or incoming\" },\n  engine: { type: \"string\", description: \"Container engine: docker or podman\" },\n  file: { type: \"string\", description: \"Container recipe path\" },\n  image: { type: \"string\", description: \"Container image name\" },\n  uid: { type: \"string\", description: \"Container user ID\" },\n  gid: { type: \"string\", description: \"Container group ID\" },\n} as const;\n\nexport const commandOptions = {\n  init: {\n    description: \"Create a standalone workflow project\",\n    options: [\n      \"yes\",\n      \"agent\",\n      \"provider\",\n      \"manager\",\n      \"authentication\",\n      \"model\",\n      \"base-url\",\n      \"api-key-env\",\n      \"install\",\n      \"build\",\n      \"image\",\n      \"directory\",\n      \"repository\",\n    ],\n  },\n  doctor: {\n    description: \"Diagnose host and sandbox prerequisites\",\n    options: [\"provider\", \"agent\", \"image\", \"json\"],\n  },\n  \"image build\": {\n    description: \"Build a container image\",\n    options: [\"directory\", \"engine\", \"file\", \"image\", \"uid\", \"gid\"],\n  },\n  \"image remove\": {\n    description: \"Remove a container image\",\n    options: [\"directory\", \"engine\", \"image\"],\n  },\n  \"recovery inspect\": {\n    description: \"Inspect recovery inventory\",\n    options: [\"repository\", \"max-entries\", \"git\", \"locks\", \"resources\", \"json\"],\n  },\n  \"recovery verify\": {\n    description: \"Verify a retained transfer\",\n    options: [\n      \"directory\",\n      \"checksums\",\n      \"max-bytes\",\n      \"restorability\",\n      \"repository\",\n      \"json\",\n    ],\n  },\n  \"recovery restore\": {\n    description: \"Restore a retained transfer\",\n    options: [\n      \"directory\",\n      \"repository\",\n      \"destination\",\n      \"side\",\n      \"max-bytes\",\n      \"apply\",\n      \"json\",\n    ],\n  },\n  \"recovery prune\": {\n    description: \"Apply an explicit retention policy\",\n    options: [\"policy\", \"repository\", \"apply\", \"json\"],\n  },\n} as const;\n\nexport const initializationQuestions = [\n  {\n    key: \"agent\",\n    message: \"Coding agent\",\n    choices: [\"codex\", \"claude\", \"gemini\"],\n  },\n  {\n    key: \"provider\",\n    message: \"Sandbox provider\",\n    choices: [\"docker\", \"podman\", \"vercel\", \"daytona\", \"local\"],\n  },\n] as const;\n\nexport const authenticationChoices = {\n  codex: [\n    { value: \"api-key\", label: \"OpenAI API key (API billing)\" },\n    { value: \"login\", label: \"Existing Codex account login\" },\n  ],\n  claude: [\n    { value: \"api-key\", label: \"Anthropic API key (API billing)\" },\n    {\n      value: \"oauth-token\",\n      label: \"Claude subscription token (claude setup-token)\",\n    },\n  ],\n  gemini: [{ value: \"api-key\", label: \"Gemini API key\" }],\n} as const;\n"]}

package/dist/cli/recovery-command.js

@@ -1,15 +1,25 @@
+import { recoveryRestoreCommand } from "./recovery-restore-command.js";
 import { recoveryPruneCommand } from "./recovery-prune-command.js";
 import { recoveryVerifyCommand } from "./recovery-verify-command.js";
 import { inspectRecovery } from "../application/recovery-inspection.js";
 import { invariant, positive } from "../domain/errors.js";
 export async function recoveryCommand({ values, positionals, }) {
+    if (positionals[1] === "restore")
+        return recoveryRestoreCommand({ values, positionals });
     if (positionals[1] === "prune")
         return recoveryPruneCommand({ values, positionals });
     if (positionals[1] === "verify")
         return recoveryVerifyCommand({ values, positionals });
-    invariant(positionals.length === 2 && positionals[1] === "inspect", "Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--json]");
+    invariant(positionals.length === 2 && positionals[1] === "inspect", "Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--resources] [--json]");
     for (const key of Object.keys(values))
-        invariant(["repository", "max-entries", "git", "locks", "json"].includes(key), `Unsupported recovery option: --${key}`);
+        invariant([
+            "repository",
+            "max-entries",
+            "git",
+            "locks",
+            "resources",
+            "json",
+        ].includes(key), `Unsupported recovery option: --${key}`);
     const maxEntries = values["max-entries"] === undefined
         ? undefined
         : positive(Number(values["max-entries"]), "max-entries");
@@ -19,6 +29,7 @@ export async function recoveryCommand({ values, positionals, }) {
             : {}),
         ...(maxEntries !== undefined ? { maxEntries } : {}),
         ...(values.git ? { git: true } : {}),
+        ...(values.resources ? { resources: true } : {}),
         ...(values.locks ? { locks: true } : {}),
     });
     if (values.json)
@@ -53,17 +64,30 @@ export async function recoveryCommand({ values, positionals, }) {
                 process.stdout.write(`[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\n`);
             process.stdout.write("PID presence does not prove lock ownership; PID absence does not authorize deletion.\n");
         }
+        if (report.resources) {
+            process.stdout.write(`Recorded sandbox activity: ${report.resources.complete ? "complete for listed records" : "partial"}\n`);
+            for (const entry of report.resources.entries) {
+                const detail = entry.record
+                    ? `${JSON.stringify(entry.record.provider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(", ") || "idle"}`
+                    : "unreadable";
+                process.stdout.write(`  ${JSON.stringify(entry.path)} | ${detail} | ownership ${entry.ownership.status}: ${entry.ownership.reason}\n`);
+            }
+            for (const issue of report.resources.issues)
+                process.stdout.write(`[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\n`);
+            process.stdout.write("Recorded activity is a snapshot; stale or unknown ownership does not authorize resource deletion. Provider resources are not queried.\n");
+        }
         for (const issue of report.issues)
             process.stdout.write(`[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\n`);
         process.stdout.write(`Total observed: ${report.usage.bytes} bytes in ${report.usage.files} files; ${report.scannedEntries}/${report.maxEntries} entries scanned.\n`);
         process.stdout.write(`${report.complete ? "Inventory complete." : "Inventory incomplete; totals are partial."} File sizes are logical bytes; symlink targets are excluded.\n`);
-        process.stdout.write(report.git || report.locks
+        process.stdout.write(report.git || report.locks || report.resources
             ? "Activity and recovery integrity are unverified. No raw file contents were displayed or files removed.\n"
             : "Activity and recovery integrity are unverified. No files were read for content or removed.\n");
     }
     if (!report.complete ||
         report.git?.complete === false ||
-        report.locks?.complete === false)
+        report.locks?.complete === false ||
+        report.resources?.complete === false)
         process.exitCode = 1;
 }
 //# sourceMappingURL=recovery-command.js.map

package/dist/cli/recovery-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"recovery-command.js","sourceRoot":"","sources":["../../src/cli/recovery-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,EACN,WAAW,GACG;IACd,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAC5B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EACxD,uGAAuG,CACxG,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EACnE,kCAAkC,GAAG,EAAE,CACxC,CAAC;IACJ,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SACzE,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACvE,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAChE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,UAAU,IAAI,cAAc,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,CACpN,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACjG,CAAC;YACF,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC9C,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,KAAK,YAAY;oBAC9B,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC5L,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CAC3G,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5J,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,qBAAqB,CAC/I,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,2CAA2C,gEAAgE,CACzJ,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK;YACxB,CAAC,CAAC,yGAAyG;YAC3G,CAAC,CAAC,8FAA8F,CACnG,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,KAAK;QAC9B,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAEhC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import { recoveryPruneCommand } from \"./recovery-prune-command.ts\";\nimport { recoveryVerifyCommand } from \"./recovery-verify-command.ts\";\nimport { inspectRecovery } from \"../application/recovery-inspection.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nexport async function recoveryCommand({\n  values,\n  positionals,\n}: CliInvocation): Promise<void> {\n  if (positionals[1] === \"prune\")\n    return recoveryPruneCommand({ values, positionals });\n  if (positionals[1] === \"verify\")\n    return recoveryVerifyCommand({ values, positionals });\n  invariant(\n    positionals.length === 2 && positionals[1] === \"inspect\",\n    \"Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\"repository\", \"max-entries\", \"git\", \"locks\", \"json\"].includes(key),\n      `Unsupported recovery option: --${key}`,\n    );\n  const maxEntries =\n    values[\"max-entries\"] === undefined\n      ? undefined\n      : positive(Number(values[\"max-entries\"]), \"max-entries\");\n  const report = await inspectRecovery({\n    ...(values.repository !== undefined\n      ? { repository: values.repository }\n      : {}),\n    ...(maxEntries !== undefined ? { maxEntries } : {}),\n    ...(values.git ? { git: true } : {}),\n    ...(values.locks ? { locks: true } : {}),\n  });\n  if (values.json) process.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    process.stdout.write(\n      `Outpost recovery inspection — ${JSON.stringify(report.repository)}\\n`,\n    );\n    for (const category of report.categories) {\n      process.stdout.write(\n        `${category.name}: ${category.entries.length} listed entries\\n`,\n      );\n      for (const entry of category.entries)\n        process.stdout.write(\n          `  ${JSON.stringify(entry.name)} | ${entry.kind} | ${entry.bytes} bytes | ${entry.files} files | ${entry.symlinks} symlinks | ${entry.modifiedAt ?? \"unknown time\"} | ${entry.complete ? \"complete\" : \"partial\"}\\n`,\n        );\n    }\n    if (report.git) {\n      process.stdout.write(\n        `Workspace Git inspection: ${report.git.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const workspace of report.git.workspaces) {\n        const detail =\n          workspace.state === \"registered\"\n            ? `${workspace.branch === null ? \"detached HEAD\" : JSON.stringify(workspace.branch)} | ${workspace.dirty ? \"dirty\" : \"clean\"} | ${workspace.head}${workspace.locked ? \" | Git locked\" : \"\"}`\n            : workspace.state;\n        process.stdout.write(\n          `  ${JSON.stringify(workspace.name)} | ${detail}\\n`,\n        );\n      }\n      for (const issue of report.git.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Git status excludes ignored files. Clean does not mean safe to delete.\\n\",\n      );\n    }\n    if (report.locks) {\n      process.stdout.write(\n        `Lock PID inspection (local host): ${report.locks.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const lock of report.locks.entries) {\n        const pid = \"pid\" in lock ? ` | PID ${lock.pid}` : \"\";\n        const reason = \"reason\" in lock ? ` | ${lock.reason}` : \"\";\n        process.stdout.write(\n          `  ${JSON.stringify(lock.name)} | ${lock.state}${pid}${reason}${lock.ownership ? ` | ownership ${lock.ownership.status}: ${lock.ownership.reason}` : \"\"}\\n`,\n        );\n      }\n      for (const issue of report.locks.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"PID presence does not prove lock ownership; PID absence does not authorize deletion.\\n\",\n      );\n    }\n    for (const issue of report.issues)\n      process.stdout.write(\n        `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n      );\n    process.stdout.write(\n      `Total observed: ${report.usage.bytes} bytes in ${report.usage.files} files; ${report.scannedEntries}/${report.maxEntries} entries scanned.\\n`,\n    );\n    process.stdout.write(\n      `${report.complete ? \"Inventory complete.\" : \"Inventory incomplete; totals are partial.\"} File sizes are logical bytes; symlink targets are excluded.\\n`,\n    );\n    process.stdout.write(\n      report.git || report.locks\n        ? \"Activity and recovery integrity are unverified. No raw file contents were displayed or files removed.\\n\"\n        : \"Activity and recovery integrity are unverified. No files were read for content or removed.\\n\",\n    );\n  }\n  if (\n    !report.complete ||\n    report.git?.complete === false ||\n    report.locks?.complete === false\n  )\n    process.exitCode = 1;\n}\n"]}
+{"version":3,"file":"recovery-command.js","sourceRoot":"","sources":["../../src/cli/recovery-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,EACN,WAAW,GACG;IACd,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS;QAC9B,OAAO,sBAAsB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAC5B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EACxD,qHAAqH,CACtH,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP;YACE,YAAY;YACZ,aAAa;YACb,KAAK;YACL,OAAO;YACP,WAAW;YACX,MAAM;SACP,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,kCAAkC,GAAG,EAAE,CACxC,CAAC;IACJ,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SACzE,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACvE,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAChE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,UAAU,IAAI,cAAc,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,CACpN,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACjG,CAAC;YACF,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC9C,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,KAAK,YAAY;oBAC9B,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC5L,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CAC3G,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5J,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACxG,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;oBACnL,CAAC,CAAC,YAAY,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,gBAAgB,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,CACjH,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yIAAyI,CAC1I,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,qBAAqB,CAC/I,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,2CAA2C,gEAAgE,CACzJ,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS;YAC5C,CAAC,CAAC,yGAAyG;YAC3G,CAAC,CAAC,8FAA8F,CACnG,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,KAAK;QAC9B,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,KAAK,KAAK;QAEpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import { recoveryRestoreCommand } from \"./recovery-restore-command.ts\";\nimport { recoveryPruneCommand } from \"./recovery-prune-command.ts\";\nimport { recoveryVerifyCommand } from \"./recovery-verify-command.ts\";\nimport { inspectRecovery } from \"../application/recovery-inspection.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nexport async function recoveryCommand({\n  values,\n  positionals,\n}: CliInvocation): Promise<void> {\n  if (positionals[1] === \"restore\")\n    return recoveryRestoreCommand({ values, positionals });\n  if (positionals[1] === \"prune\")\n    return recoveryPruneCommand({ values, positionals });\n  if (positionals[1] === \"verify\")\n    return recoveryVerifyCommand({ values, positionals });\n  invariant(\n    positionals.length === 2 && positionals[1] === \"inspect\",\n    \"Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--resources] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\n        \"repository\",\n        \"max-entries\",\n        \"git\",\n        \"locks\",\n        \"resources\",\n        \"json\",\n      ].includes(key),\n      `Unsupported recovery option: --${key}`,\n    );\n  const maxEntries =\n    values[\"max-entries\"] === undefined\n      ? undefined\n      : positive(Number(values[\"max-entries\"]), \"max-entries\");\n  const report = await inspectRecovery({\n    ...(values.repository !== undefined\n      ? { repository: values.repository }\n      : {}),\n    ...(maxEntries !== undefined ? { maxEntries } : {}),\n    ...(values.git ? { git: true } : {}),\n    ...(values.resources ? { resources: true } : {}),\n    ...(values.locks ? { locks: true } : {}),\n  });\n  if (values.json) process.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    process.stdout.write(\n      `Outpost recovery inspection — ${JSON.stringify(report.repository)}\\n`,\n    );\n    for (const category of report.categories) {\n      process.stdout.write(\n        `${category.name}: ${category.entries.length} listed entries\\n`,\n      );\n      for (const entry of category.entries)\n        process.stdout.write(\n          `  ${JSON.stringify(entry.name)} | ${entry.kind} | ${entry.bytes} bytes | ${entry.files} files | ${entry.symlinks} symlinks | ${entry.modifiedAt ?? \"unknown time\"} | ${entry.complete ? \"complete\" : \"partial\"}\\n`,\n        );\n    }\n    if (report.git) {\n      process.stdout.write(\n        `Workspace Git inspection: ${report.git.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const workspace of report.git.workspaces) {\n        const detail =\n          workspace.state === \"registered\"\n            ? `${workspace.branch === null ? \"detached HEAD\" : JSON.stringify(workspace.branch)} | ${workspace.dirty ? \"dirty\" : \"clean\"} | ${workspace.head}${workspace.locked ? \" | Git locked\" : \"\"}`\n            : workspace.state;\n        process.stdout.write(\n          `  ${JSON.stringify(workspace.name)} | ${detail}\\n`,\n        );\n      }\n      for (const issue of report.git.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Git status excludes ignored files. Clean does not mean safe to delete.\\n\",\n      );\n    }\n    if (report.locks) {\n      process.stdout.write(\n        `Lock PID inspection (local host): ${report.locks.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const lock of report.locks.entries) {\n        const pid = \"pid\" in lock ? ` | PID ${lock.pid}` : \"\";\n        const reason = \"reason\" in lock ? ` | ${lock.reason}` : \"\";\n        process.stdout.write(\n          `  ${JSON.stringify(lock.name)} | ${lock.state}${pid}${reason}${lock.ownership ? ` | ownership ${lock.ownership.status}: ${lock.ownership.reason}` : \"\"}\\n`,\n        );\n      }\n      for (const issue of report.locks.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"PID presence does not prove lock ownership; PID absence does not authorize deletion.\\n\",\n      );\n    }\n    if (report.resources) {\n      process.stdout.write(\n        `Recorded sandbox activity: ${report.resources.complete ? \"complete for listed records\" : \"partial\"}\\n`,\n      );\n      for (const entry of report.resources.entries) {\n        const detail = entry.record\n          ? `${JSON.stringify(entry.record.provider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(\", \") || \"idle\"}`\n          : \"unreadable\";\n        process.stdout.write(\n          `  ${JSON.stringify(entry.path)} | ${detail} | ownership ${entry.ownership.status}: ${entry.ownership.reason}\\n`,\n        );\n      }\n      for (const issue of report.resources.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Recorded activity is a snapshot; stale or unknown ownership does not authorize resource deletion. Provider resources are not queried.\\n\",\n      );\n    }\n    for (const issue of report.issues)\n      process.stdout.write(\n        `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n      );\n    process.stdout.write(\n      `Total observed: ${report.usage.bytes} bytes in ${report.usage.files} files; ${report.scannedEntries}/${report.maxEntries} entries scanned.\\n`,\n    );\n    process.stdout.write(\n      `${report.complete ? \"Inventory complete.\" : \"Inventory incomplete; totals are partial.\"} File sizes are logical bytes; symlink targets are excluded.\\n`,\n    );\n    process.stdout.write(\n      report.git || report.locks || report.resources\n        ? \"Activity and recovery integrity are unverified. No raw file contents were displayed or files removed.\\n\"\n        : \"Activity and recovery integrity are unverified. No files were read for content or removed.\\n\",\n    );\n  }\n  if (\n    !report.complete ||\n    report.git?.complete === false ||\n    report.locks?.complete === false ||\n    report.resources?.complete === false\n  )\n    process.exitCode = 1;\n}\n"]}

package/dist/cli/recovery-restore-command.d.ts

@@ -0,0 +1,2 @@
+import type { CliInvocation } from "./main.types.ts";
+export declare function recoveryRestoreCommand({ values, positionals, }: CliInvocation): Promise<void>;

package/dist/cli/recovery-restore-command.js

@@ -0,0 +1,34 @@
+import { planRecoveryRestore, restoreRecoveryTransfer, } from "../application/recovery-restore.js";
+import { invariant, positive } from "../domain/errors.js";
+export async function recoveryRestoreCommand({ values, positionals, }) {
+    invariant(positionals.length === 2 &&
+        !!values.directory &&
+        !!values.repository &&
+        !!values.destination &&
+        (values.side === "previous" || values.side === "incoming"), "Usage: outpost recovery restore --directory TRANSFER_PATH --repository PATH --destination NEW_PATH --side previous|incoming [--max-bytes NUMBER] [--apply] [--json]");
+    for (const key of Object.keys(values))
+        invariant([
+            "directory",
+            "repository",
+            "destination",
+            "side",
+            "max-bytes",
+            "apply",
+            "json",
+        ].includes(key), `Unsupported recovery restore option: --${key}`);
+    const plan = await planRecoveryRestore({
+        directory: values.directory,
+        repository: values.repository,
+        destination: values.destination,
+        side: values.side,
+        ...(values["max-bytes"] === undefined
+            ? {}
+            : { maxBytes: positive(Number(values["max-bytes"]), "max-bytes") }),
+    });
+    const result = values.apply ? await restoreRecoveryTransfer(plan) : plan;
+    if (values.json)
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+    else
+        process.stdout.write(`${values.apply ? "Restored" : "Planned"} ${plan.side} recovery at ${JSON.stringify(plan.destination)}\nCommit: ${plan.commit}; staging: ${plan.staging}. Source retained.\n${values.apply ? "Review the detached checkout before explicitly integrating it.\n" : "No destination created. Use --apply to restore into this new directory.\n"}`);
+}
+//# sourceMappingURL=recovery-restore-command.js.map

package/dist/cli/recovery-restore-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-restore-command.js","sourceRoot":"","sources":["../../src/cli/recovery-restore-command.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,MAAM,EACN,WAAW,GACG;IACd,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,MAAM,CAAC,WAAW;QACpB,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAC5D,qKAAqK,CACtK,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP;YACE,WAAW;YACX,YAAY;YACZ,aAAa;YACb,MAAM;YACN,WAAW;YACX,OAAO;YACP,MAAM;SACP,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,0CAA0C,GAAG,EAAE,CAChD,CAAC;IACJ,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;;QAE5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,CAAC,MAAM,cAAc,IAAI,CAAC,OAAO,uBAAuB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC,2EAA2E,EAAE,CAChV,CAAC;AACN,CAAC","sourcesContent":["import {\n  planRecoveryRestore,\n  restoreRecoveryTransfer,\n} from \"../application/recovery-restore.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nexport async function recoveryRestoreCommand({\n  values,\n  positionals,\n}: CliInvocation): Promise<void> {\n  invariant(\n    positionals.length === 2 &&\n      !!values.directory &&\n      !!values.repository &&\n      !!values.destination &&\n      (values.side === \"previous\" || values.side === \"incoming\"),\n    \"Usage: outpost recovery restore --directory TRANSFER_PATH --repository PATH --destination NEW_PATH --side previous|incoming [--max-bytes NUMBER] [--apply] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\n        \"directory\",\n        \"repository\",\n        \"destination\",\n        \"side\",\n        \"max-bytes\",\n        \"apply\",\n        \"json\",\n      ].includes(key),\n      `Unsupported recovery restore option: --${key}`,\n    );\n  const plan = await planRecoveryRestore({\n    directory: values.directory,\n    repository: values.repository,\n    destination: values.destination,\n    side: values.side,\n    ...(values[\"max-bytes\"] === undefined\n      ? {}\n      : { maxBytes: positive(Number(values[\"max-bytes\"]), \"max-bytes\") }),\n  });\n  const result = values.apply ? await restoreRecoveryTransfer(plan) : plan;\n  if (values.json) process.stdout.write(`${JSON.stringify(result, null, 2)}\\n`);\n  else\n    process.stdout.write(\n      `${values.apply ? \"Restored\" : \"Planned\"} ${plan.side} recovery at ${JSON.stringify(plan.destination)}\\nCommit: ${plan.commit}; staging: ${plan.staging}. Source retained.\\n${values.apply ? \"Review the detached checkout before explicitly integrating it.\\n\" : \"No destination created. Use --apply to restore into this new directory.\\n\"}`,\n    );\n}\n"]}

package/dist/cli/scaffold-files.js

@@ -1,12 +1,13 @@
 import { readFile } from "node:fs/promises";
 import { imageRecipe, providerPackages } from "./scaffold.constants.js";
+import { authenticationEnvironment } from "./init-authentication.js";
 import { starter } from "./starters.js";
 export async function scaffoldFiles(options, hasPackage, extension) {
-    const agent = options.agent ?? "codex", provider = options.provider ?? "docker";
+    const provider = options.provider ?? "docker";
     const files = {
         [`run.${extension}`]: starter(options),
         "brief.md": "Objective: {{OBJECTIVE}}\n\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\n",
-        ".env.example": agent === "codex" ? "OPENAI_API_KEY=\n" : "ANTHROPIC_API_KEY=\n",
+        ".env.example": authenticationEnvironment(options),
         ".gitignore": "node_modules/\n.env\n.outpost/workspaces/\n.outpost/locks/\n.outpost/recovery/\n.outpost/logs/\n",
     };
     if (provider === "docker" || provider === "podman")