@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/cli/scaffold-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-files.js","sourceRoot":"","sources":["../../src/cli/scaffold-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAoB,EACpB,UAAmB,EACnB,SAAuB;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,MAAM,KAAK,GAA2B;QACpC,CAAC,OAAO,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QACtC,UAAU,EACR,wNAAwN;QAC1N,cAAc,EACZ,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB;QAClE,YAAY,EACV,kGAAkG;KACrG,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAChD,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;IAE9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACvE,CAAC;QACF,KAAK,CAAC,cAAc,CAAC;YACnB,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,SAAS,EAAE,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzB,eAAe,EAAE;oBACf,sBAAsB,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;oBAC9C,GAAG,MAAM,CAAC,WAAW,CACnB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBACvC,IAAI;wBACJ,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC;qBAChC,CAAC,CACH;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { imageRecipe, providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\nimport { starter } from \"./starters.ts\";\n\nexport async function scaffoldFiles(\n  options: InitOptions,\n  hasPackage: boolean,\n  extension: \"ts\" | \"mts\",\n): Promise<Record<string, string>> {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  const files: Record<string, string> = {\n    [`run.${extension}`]: starter(options),\n    \"brief.md\":\n      \"Objective: {{OBJECTIVE}}\\n\\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\\n\",\n    \".env.example\":\n      agent === \"codex\" ? \"OPENAI_API_KEY=\\n\" : \"ANTHROPIC_API_KEY=\\n\",\n    \".gitignore\":\n      \"node_modules/\\n.env\\n.outpost/workspaces/\\n.outpost/locks/\\n.outpost/recovery/\\n.outpost/logs/\\n\",\n  };\n  if (provider === \"docker\" || provider === \"podman\")\n    files[provider === \"docker\" ? \"Dockerfile\" : \"Containerfile\"] = imageRecipe;\n\n  if (!hasPackage) {\n    const manifest = JSON.parse(\n      await readFile(new URL(\"../../package.json\", import.meta.url), \"utf8\"),\n    );\n    files[\"package.json\"] =\n      JSON.stringify(\n        {\n          private: true,\n          type: \"module\",\n          scripts: { start: `node run.${extension}` },\n          engines: { node: \">=24\" },\n          devDependencies: {\n            \"@elie-laloum/outpost\": `^${manifest.version}`,\n            ...Object.fromEntries(\n              providerPackages[provider].map((name) => [\n                name,\n                manifest.peerDependencies[name],\n              ]),\n            ),\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\";\n  }\n  return files;\n}\n"]}
+{"version":3,"file":"scaffold-files.js","sourceRoot":"","sources":["../../src/cli/scaffold-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAoB,EACpB,UAAmB,EACnB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC9C,MAAM,KAAK,GAA2B;QACpC,CAAC,OAAO,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QACtC,UAAU,EACR,wNAAwN;QAC1N,cAAc,EAAE,yBAAyB,CAAC,OAAO,CAAC;QAClD,YAAY,EACV,kGAAkG;KACrG,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAChD,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;IAE9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACvE,CAAC;QACF,KAAK,CAAC,cAAc,CAAC;YACnB,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,SAAS,EAAE,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzB,eAAe,EAAE;oBACf,sBAAsB,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;oBAC9C,GAAG,MAAM,CAAC,WAAW,CACnB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBACvC,IAAI;wBACJ,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC;qBAChC,CAAC,CACH;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { imageRecipe, providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\nimport { authenticationEnvironment } from \"./init-authentication.ts\";\nimport { starter } from \"./starters.ts\";\n\nexport async function scaffoldFiles(\n  options: InitOptions,\n  hasPackage: boolean,\n  extension: \"ts\" | \"mts\",\n): Promise<Record<string, string>> {\n  const provider = options.provider ?? \"docker\";\n  const files: Record<string, string> = {\n    [`run.${extension}`]: starter(options),\n    \"brief.md\":\n      \"Objective: {{OBJECTIVE}}\\n\\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\\n\",\n    \".env.example\": authenticationEnvironment(options),\n    \".gitignore\":\n      \"node_modules/\\n.env\\n.outpost/workspaces/\\n.outpost/locks/\\n.outpost/recovery/\\n.outpost/logs/\\n\",\n  };\n  if (provider === \"docker\" || provider === \"podman\")\n    files[provider === \"docker\" ? \"Dockerfile\" : \"Containerfile\"] = imageRecipe;\n\n  if (!hasPackage) {\n    const manifest = JSON.parse(\n      await readFile(new URL(\"../../package.json\", import.meta.url), \"utf8\"),\n    );\n    files[\"package.json\"] =\n      JSON.stringify(\n        {\n          private: true,\n          type: \"module\",\n          scripts: { start: `node run.${extension}` },\n          engines: { node: \">=24\" },\n          devDependencies: {\n            \"@elie-laloum/outpost\": `^${manifest.version}`,\n            ...Object.fromEntries(\n              providerPackages[provider].map((name) => [\n                name,\n                manifest.peerDependencies[name],\n              ]),\n            ),\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\";\n  }\n  return files;\n}\n"]}

package/dist/cli/scaffold-validation.js

@@ -1,8 +1,27 @@
+import { codex } from "../adapters/agents/codex-adapter.js";
 import { invariant } from "../domain/errors.js";
 import { supportedAgents, supportedProviders } from "./scaffold.constants.js";
 export function validateInitialization(options) {
     const agent = options.agent ?? "codex", provider = options.provider ?? "docker";
-    invariant(supportedAgents.includes(agent), "Choose codex or claude");
+    invariant(supportedAgents.includes(agent), "Choose codex, claude or gemini");
     invariant(supportedProviders.includes(provider), "Unknown sandbox provider");
+    invariant(!options.apiKeyEnvironment || options.baseUrl, "--api-key-env requires --base-url");
+    if (options.baseUrl) {
+        invariant(agent === "codex" &&
+            (!options.authentication || options.authentication === "api-key"), "Custom Responses providers require Codex and api-key authentication");
+        codex({
+            ...(options.model ? { model: options.model } : {}),
+            modelProvider: {
+                baseUrl: options.baseUrl,
+                ...(options.apiKeyEnvironment
+                    ? { apiKeyEnvironment: options.apiKeyEnvironment }
+                    : {}),
+            },
+        });
+    }
+    const authentication = options.authentication ?? "api-key";
+    invariant(authentication === "api-key" ||
+        (authentication === "oauth-token" && agent === "claude") ||
+        (authentication === "login" && agent === "codex"), "Authentication must be api-key, oauth-token for Claude, or login for Codex");
 }
 //# sourceMappingURL=scaffold-validation.js.map

package/dist/cli/scaffold-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-validation.js","sourceRoot":"","sources":["../../src/cli/scaffold-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG9E,MAAM,UAAU,sBAAsB,CAAC,OAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACrE,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { supportedAgents, supportedProviders } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport function validateInitialization(options: InitOptions): void {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  invariant(supportedAgents.includes(agent), \"Choose codex or claude\");\n  invariant(supportedProviders.includes(provider), \"Unknown sandbox provider\");\n}\n"]}
+{"version":3,"file":"scaffold-validation.js","sourceRoot":"","sources":["../../src/cli/scaffold-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG9E,MAAM,UAAU,sBAAsB,CAAC,OAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC7E,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7E,SAAS,CACP,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAC7C,mCAAmC,CACpC,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,SAAS,CACP,KAAK,KAAK,OAAO;YACf,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,EACnE,qEAAqE,CACtE,CAAC;QACF,KAAK,CAAC;YACJ,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,aAAa,EAAE;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,CAAC,OAAO,CAAC,iBAAiB;oBAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC;IAC3D,SAAS,CACP,cAAc,KAAK,SAAS;QAC1B,CAAC,cAAc,KAAK,aAAa,IAAI,KAAK,KAAK,QAAQ,CAAC;QACxD,CAAC,cAAc,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,EACnD,4EAA4E,CAC7E,CAAC;AACJ,CAAC","sourcesContent":["import { codex } from \"../adapters/agents/codex-adapter.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { supportedAgents, supportedProviders } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport function validateInitialization(options: InitOptions): void {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  invariant(supportedAgents.includes(agent), \"Choose codex, claude or gemini\");\n  invariant(supportedProviders.includes(provider), \"Unknown sandbox provider\");\n  invariant(\n    !options.apiKeyEnvironment || options.baseUrl,\n    \"--api-key-env requires --base-url\",\n  );\n  if (options.baseUrl) {\n    invariant(\n      agent === \"codex\" &&\n        (!options.authentication || options.authentication === \"api-key\"),\n      \"Custom Responses providers require Codex and api-key authentication\",\n    );\n    codex({\n      ...(options.model ? { model: options.model } : {}),\n      modelProvider: {\n        baseUrl: options.baseUrl,\n        ...(options.apiKeyEnvironment\n          ? { apiKeyEnvironment: options.apiKeyEnvironment }\n          : {}),\n      },\n    });\n  }\n  const authentication = options.authentication ?? \"api-key\";\n  invariant(\n    authentication === \"api-key\" ||\n      (authentication === \"oauth-token\" && agent === \"claude\") ||\n      (authentication === \"login\" && agent === \"codex\"),\n    \"Authentication must be api-key, oauth-token for Claude, or login for Codex\",\n  );\n}\n"]}

package/dist/cli/scaffold.constants.js

@@ -3,14 +3,14 @@ export const imageRecipe = `FROM node:24-bookworm-slim
 ARG AGENT_UID=1000
 ARG AGENT_GID=1000
 RUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*
-RUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude}
+RUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @google/gemini-cli@${agentVersions.gemini}
 RUN groupmod -o -g "$AGENT_GID" node && usermod -o -u "$AGENT_UID" -g "$AGENT_GID" node
 RUN mkdir -p /home/agent && chown "$AGENT_UID:$AGENT_GID" /home/agent && chmod 700 /home/agent
 ENV HOME=/home/agent
 USER $AGENT_UID:$AGENT_GID
 WORKDIR /workspace
 `;
-export const supportedAgents = ["codex", "claude"];
+export const supportedAgents = ["codex", "claude", "gemini"];
 export const supportedProviders = [
     "docker",
     "podman",

package/dist/cli/scaffold.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.constants.js","sourceRoot":"","sources":["../../src/cli/scaffold.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG;;;;6EAIkD,aAAa,CAAC,KAAK,8BAA8B,aAAa,CAAC,MAAM;;;;;;CAMjJ,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,WAAW,EAAE,MAAM,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,WAAW,EAAE,KAAK,CAAC;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE,CAAC,cAAc,CAAC;CACjB,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const imageRecipe = `FROM node:24-bookworm-slim\nARG AGENT_UID=1000\nARG AGENT_GID=1000\nRUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*\nRUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude}\nRUN groupmod -o -g \"$AGENT_GID\" node && usermod -o -u \"$AGENT_UID\" -g \"$AGENT_GID\" node\nRUN mkdir -p /home/agent && chown \"$AGENT_UID:$AGENT_GID\" /home/agent && chmod 700 /home/agent\nENV HOME=/home/agent\nUSER $AGENT_UID:$AGENT_GID\nWORKDIR /workspace\n`;\n\nexport const supportedAgents: readonly string[] = [\"codex\", \"claude\"];\nexport const supportedProviders: readonly string[] = [\n  \"docker\",\n  \"podman\",\n  \"vercel\",\n  \"daytona\",\n  \"local\",\n];\nexport const supportedManagers: readonly string[] = [\n  \"npm\",\n  \"pnpm\",\n  \"yarn\",\n  \"bun\",\n];\nexport const managerLocks = [\n  [\"pnpm-lock.yaml\", \"pnpm\"],\n  [\"yarn.lock\", \"yarn\"],\n  [\"bun.lock\", \"bun\"],\n  [\"bun.lockb\", \"bun\"],\n] as const;\nexport const providerPackages = {\n  docker: [],\n  podman: [],\n  local: [],\n  vercel: [\"@vercel/sandbox\"],\n  daytona: [\"@daytona/sdk\"],\n} as const;\n"]}
+{"version":3,"file":"scaffold.constants.js","sourceRoot":"","sources":["../../src/cli/scaffold.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG;;;;6EAIkD,aAAa,CAAC,KAAK,8BAA8B,aAAa,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM;;;;;;CAM5L,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,WAAW,EAAE,MAAM,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,WAAW,EAAE,KAAK,CAAC;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE,CAAC,cAAc,CAAC;CACjB,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const imageRecipe = `FROM node:24-bookworm-slim\nARG AGENT_UID=1000\nARG AGENT_GID=1000\nRUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*\nRUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @google/gemini-cli@${agentVersions.gemini}\nRUN groupmod -o -g \"$AGENT_GID\" node && usermod -o -u \"$AGENT_UID\" -g \"$AGENT_GID\" node\nRUN mkdir -p /home/agent && chown \"$AGENT_UID:$AGENT_GID\" /home/agent && chmod 700 /home/agent\nENV HOME=/home/agent\nUSER $AGENT_UID:$AGENT_GID\nWORKDIR /workspace\n`;\n\nexport const supportedAgents: readonly string[] = [\"codex\", \"claude\", \"gemini\"];\nexport const supportedProviders: readonly string[] = [\n  \"docker\",\n  \"podman\",\n  \"vercel\",\n  \"daytona\",\n  \"local\",\n];\nexport const supportedManagers: readonly string[] = [\n  \"npm\",\n  \"pnpm\",\n  \"yarn\",\n  \"bun\",\n];\nexport const managerLocks = [\n  [\"pnpm-lock.yaml\", \"pnpm\"],\n  [\"yarn.lock\", \"yarn\"],\n  [\"bun.lock\", \"bun\"],\n  [\"bun.lockb\", \"bun\"],\n] as const;\nexport const providerPackages = {\n  docker: [],\n  podman: [],\n  local: [],\n  vercel: [\"@vercel/sandbox\"],\n  daytona: [\"@daytona/sdk\"],\n} as const;\n"]}

package/dist/cli/scaffold.js

@@ -15,6 +15,19 @@ export async function initialize(options = {}, executor) {
     const provider = options.provider ?? "docker";
     validateInitialization(options);
     const { hasPackage, manager, extension } = await projectSettings(root, options);
+    if (options.install) {
+        try {
+            await requireSuccess(process.platform === "win32"
+                ? {
+                    executable: "cmd.exe",
+                    arguments: ["/d", "/c", `${manager} --version`],
+                }
+                : { executable: manager, arguments: ["--version"] }, executor);
+        }
+        catch {
+            throw new OutpostError("configuration", `Package manager ${manager} is unavailable. Install it or select an installed manager with --manager before using --install.`);
+        }
+    }
     const files = await scaffoldFiles({ ...options, image: options.image ?? imageName(root) }, hasPackage, extension);
     const existingIgnore = await readFile(join(root, ".gitignore"), "utf8").catch((error) => {
         if (error.code === "ENOENT")

package/dist/cli/scaffold.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,KAAK,EACL,KAAK,EACL,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAuB,EAAE,EACzB,QAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC9C,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAC9D,IAAI,EACJ,OAAO,CACR,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,EACvD,UAAU,EACV,SAAS,CACV,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAC3E,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAE,CAAC;IACpC,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,IACE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;YAEJ,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,kCAAkC,IAAI,EAAE,CACzC,CAAC;IACN,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM;aACrB,OAAO,EAAE;aACT,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1G,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACnD,KAAK,CAAC,YAAY,CAAC,GAAG,cAAc,GAAG,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,CAAC,sBAAsB,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,GACR,OAAO,KAAK,KAAK;YACf,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;YACxC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;QACpC,MAAM,cAAc,CAClB,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC;gBACE,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrD,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC7D,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACnE,MAAM,WAAW,CACf,OAAO,EACP;YACE,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,EACD,QAAQ,CACT,CAAC;IACJ,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,GAAG,EAAE,YAAY,SAAS,EAAE;KAC7B,CAAC;AACJ,CAAC","sourcesContent":["import {\n  appendFile,\n  lstat,\n  mkdir,\n  readFile,\n  writeFile,\n} from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { requireSuccess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { imageName } from \"../providers/container.ts\";\nimport { manageImage } from \"./image.ts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { scaffoldFiles } from \"./scaffold-files.ts\";\nimport { validateInitialization } from \"./scaffold-validation.ts\";\nimport { providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions, ScaffoldResult } from \"./scaffold.types.ts\";\n\nexport { manageImage } from \"./image.ts\";\nexport { imageRecipe } from \"./scaffold.constants.ts\";\nexport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initialize(\n  options: InitOptions = {},\n  executor?: Executor,\n): Promise<ScaffoldResult> {\n  const root = resolve(options.directory ?? process.cwd());\n  const provider = options.provider ?? \"docker\";\n  validateInitialization(options);\n  const { hasPackage, manager, extension } = await projectSettings(\n    root,\n    options,\n  );\n  const files = await scaffoldFiles(\n    { ...options, image: options.image ?? imageName(root) },\n    hasPackage,\n    extension,\n  );\n  const existingIgnore = await readFile(join(root, \".gitignore\"), \"utf8\").catch(\n    (error) => {\n      if (error.code === \"ENOENT\") return undefined;\n      throw error;\n    },\n  );\n  const ignore = files[\".gitignore\"]!;\n  if (existingIgnore !== undefined) delete files[\".gitignore\"];\n  for (const name of Object.keys(files))\n    if (\n      await lstat(join(root, name))\n        .then(() => true)\n        .catch((error) => {\n          if (error.code === \"ENOENT\") return false;\n          throw error;\n        })\n    )\n      throw new OutpostError(\n        \"configuration\",\n        `Initialization would overwrite ${name}`,\n      );\n  await mkdir(root, { recursive: true });\n  for (const [name, content] of Object.entries(files))\n    await writeFile(join(root, name), content, { flag: \"wx\" });\n  if (existingIgnore !== undefined) {\n    const rules = new Set(existingIgnore.split(/\\r?\\n/));\n    const additions = ignore\n      .trimEnd()\n      .split(\"\\n\")\n      .filter((rule) => !rules.has(rule));\n    if (additions.length) {\n      const suffix = `${existingIgnore && !existingIgnore.endsWith(\"\\n\") ? \"\\n\" : \"\"}${additions.join(\"\\n\")}\\n`;\n      await appendFile(join(root, \".gitignore\"), suffix);\n      files[\".gitignore\"] = existingIgnore + suffix;\n    }\n  }\n  if (options.install) {\n    const packages = [\"@elie-laloum/outpost\", ...providerPackages[provider]];\n    const args =\n      manager === \"npm\"\n        ? [\"install\", \"--save-dev\", ...packages]\n        : [\"add\", \"--dev\", ...packages];\n    await requireSuccess(\n      process.platform === \"win32\"\n        ? {\n            executable: \"cmd.exe\",\n            arguments: [\"/d\", \"/c\", [manager, ...args].join(\" \")],\n            directory: root,\n          }\n        : { executable: manager, arguments: args, directory: root },\n      executor,\n    );\n  }\n  if (options.build && (provider === \"docker\" || provider === \"podman\"))\n    await manageImage(\n      \"build\",\n      {\n        directory: root,\n        engine: provider,\n        ...(options.image ? { image: options.image } : {}),\n      },\n      executor,\n    );\n  return {\n    files: Object.keys(files).map((name) => join(root, name)),\n    run: `node run.${extension}`,\n  };\n}\n"]}
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../src/cli/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,KAAK,EACL,KAAK,EACL,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAuB,EAAE,EACzB,QAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC9C,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAC9D,IAAI,EACJ,OAAO,CACR,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,cAAc,CAClB,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC1B,CAAC,CAAC;oBACE,UAAU,EAAE,SAAS;oBACrB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,YAAY,CAAC;iBAChD;gBACH,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EACrD,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,mBAAmB,OAAO,mGAAmG,CAC9H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,EACvD,UAAU,EACV,SAAS,CACV,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAC3E,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAE,CAAC;IACpC,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACnC,IACE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;YAEJ,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,kCAAkC,IAAI,EAAE,CACzC,CAAC;IACN,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM;aACrB,OAAO,EAAE;aACT,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,GAAG,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1G,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;YACnD,KAAK,CAAC,YAAY,CAAC,GAAG,cAAc,GAAG,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,CAAC,sBAAsB,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,GACR,OAAO,KAAK,KAAK;YACf,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;YACxC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;QACpC,MAAM,cAAc,CAClB,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC;gBACE,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrD,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC7D,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC;QACnE,MAAM,WAAW,CACf,OAAO,EACP;YACE,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,EACD,QAAQ,CACT,CAAC;IACJ,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,GAAG,EAAE,YAAY,SAAS,EAAE;KAC7B,CAAC;AACJ,CAAC","sourcesContent":["import {\n  appendFile,\n  lstat,\n  mkdir,\n  readFile,\n  writeFile,\n} from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { requireSuccess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { imageName } from \"../providers/container.ts\";\nimport { manageImage } from \"./image.ts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { scaffoldFiles } from \"./scaffold-files.ts\";\nimport { validateInitialization } from \"./scaffold-validation.ts\";\nimport { providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions, ScaffoldResult } from \"./scaffold.types.ts\";\n\nexport { manageImage } from \"./image.ts\";\nexport { imageRecipe } from \"./scaffold.constants.ts\";\nexport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initialize(\n  options: InitOptions = {},\n  executor?: Executor,\n): Promise<ScaffoldResult> {\n  const root = resolve(options.directory ?? process.cwd());\n  const provider = options.provider ?? \"docker\";\n  validateInitialization(options);\n  const { hasPackage, manager, extension } = await projectSettings(\n    root,\n    options,\n  );\n  if (options.install) {\n    try {\n      await requireSuccess(\n        process.platform === \"win32\"\n          ? {\n              executable: \"cmd.exe\",\n              arguments: [\"/d\", \"/c\", `${manager} --version`],\n            }\n          : { executable: manager, arguments: [\"--version\"] },\n        executor,\n      );\n    } catch {\n      throw new OutpostError(\n        \"configuration\",\n        `Package manager ${manager} is unavailable. Install it or select an installed manager with --manager before using --install.`,\n      );\n    }\n  }\n  const files = await scaffoldFiles(\n    { ...options, image: options.image ?? imageName(root) },\n    hasPackage,\n    extension,\n  );\n  const existingIgnore = await readFile(join(root, \".gitignore\"), \"utf8\").catch(\n    (error) => {\n      if (error.code === \"ENOENT\") return undefined;\n      throw error;\n    },\n  );\n  const ignore = files[\".gitignore\"]!;\n  if (existingIgnore !== undefined) delete files[\".gitignore\"];\n  for (const name of Object.keys(files))\n    if (\n      await lstat(join(root, name))\n        .then(() => true)\n        .catch((error) => {\n          if (error.code === \"ENOENT\") return false;\n          throw error;\n        })\n    )\n      throw new OutpostError(\n        \"configuration\",\n        `Initialization would overwrite ${name}`,\n      );\n  await mkdir(root, { recursive: true });\n  for (const [name, content] of Object.entries(files))\n    await writeFile(join(root, name), content, { flag: \"wx\" });\n  if (existingIgnore !== undefined) {\n    const rules = new Set(existingIgnore.split(/\\r?\\n/));\n    const additions = ignore\n      .trimEnd()\n      .split(\"\\n\")\n      .filter((rule) => !rules.has(rule));\n    if (additions.length) {\n      const suffix = `${existingIgnore && !existingIgnore.endsWith(\"\\n\") ? \"\\n\" : \"\"}${additions.join(\"\\n\")}\\n`;\n      await appendFile(join(root, \".gitignore\"), suffix);\n      files[\".gitignore\"] = existingIgnore + suffix;\n    }\n  }\n  if (options.install) {\n    const packages = [\"@elie-laloum/outpost\", ...providerPackages[provider]];\n    const args =\n      manager === \"npm\"\n        ? [\"install\", \"--save-dev\", ...packages]\n        : [\"add\", \"--dev\", ...packages];\n    await requireSuccess(\n      process.platform === \"win32\"\n        ? {\n            executable: \"cmd.exe\",\n            arguments: [\"/d\", \"/c\", [manager, ...args].join(\" \")],\n            directory: root,\n          }\n        : { executable: manager, arguments: args, directory: root },\n      executor,\n    );\n  }\n  if (options.build && (provider === \"docker\" || provider === \"podman\"))\n    await manageImage(\n      \"build\",\n      {\n        directory: root,\n        engine: provider,\n        ...(options.image ? { image: options.image } : {}),\n      },\n      executor,\n    );\n  return {\n    files: Object.keys(files).map((name) => join(root, name)),\n    run: `node run.${extension}`,\n  };\n}\n"]}

package/dist/cli/scaffold.types.d.ts

@@ -1,10 +1,13 @@
 export interface InitOptions {
     readonly directory?: string;
     readonly repository?: string;
-    readonly agent?: "claude" | "codex";
+    readonly agent?: "claude" | "codex" | "gemini";
     readonly provider?: "docker" | "podman" | "vercel" | "daytona" | "local";
     readonly manager?: "npm" | "pnpm" | "yarn" | "bun";
     readonly model?: string;
+    readonly baseUrl?: string;
+    readonly apiKeyEnvironment?: string;
+    readonly authentication?: "api-key" | "oauth-token" | "login";
     readonly install?: boolean;
     readonly build?: boolean;
     readonly image?: string;

package/dist/cli/scaffold.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.types.js","sourceRoot":"","sources":["../../src/cli/scaffold.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface InitOptions {\n  readonly directory?: string;\n  readonly repository?: string;\n  readonly agent?: \"claude\" | \"codex\";\n  readonly provider?: \"docker\" | \"podman\" | \"vercel\" | \"daytona\" | \"local\";\n  readonly manager?: \"npm\" | \"pnpm\" | \"yarn\" | \"bun\";\n  readonly model?: string;\n  readonly install?: boolean;\n  readonly build?: boolean;\n  readonly image?: string;\n}\n\nexport interface PackageManifest {\n  readonly type?: string;\n  readonly packageManager?: string;\n}\nexport interface ProjectSettings {\n  readonly extension: \"ts\" | \"mts\";\n  readonly hasPackage: boolean;\n  readonly manager: string;\n}\nexport interface ScaffoldResult {\n  files: readonly string[];\n  run: string;\n}\n"]}
+{"version":3,"file":"scaffold.types.js","sourceRoot":"","sources":["../../src/cli/scaffold.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface InitOptions {\n  readonly directory?: string;\n  readonly repository?: string;\n  readonly agent?: \"claude\" | \"codex\" | \"gemini\";\n  readonly provider?: \"docker\" | \"podman\" | \"vercel\" | \"daytona\" | \"local\";\n  readonly manager?: \"npm\" | \"pnpm\" | \"yarn\" | \"bun\";\n  readonly model?: string;\n  readonly baseUrl?: string;\n  readonly apiKeyEnvironment?: string;\n  readonly authentication?: \"api-key\" | \"oauth-token\" | \"login\";\n  readonly install?: boolean;\n  readonly build?: boolean;\n  readonly image?: string;\n}\n\nexport interface PackageManifest {\n  readonly type?: string;\n  readonly packageManager?: string;\n}\nexport interface ProjectSettings {\n  readonly extension: \"ts\" | \"mts\";\n  readonly hasPackage: boolean;\n  readonly manager: string;\n}\nexport interface ScaffoldResult {\n  files: readonly string[];\n  run: string;\n}\n"]}

package/dist/cli/starters.js

@@ -1,11 +1,16 @@
+import { authenticationEnvironment, authenticationSource, } from "./init-authentication.js";
 export function starter(options) {
     const agent = options.agent ?? "codex", provider = options.provider ?? "docker";
     const model = options.model ? `model: ${JSON.stringify(options.model)}` : "";
+    const modelProvider = options.baseUrl
+        ? `, modelProvider: ${JSON.stringify({ baseUrl: options.baseUrl, ...(options.apiKeyEnvironment ? { apiKeyEnvironment: options.apiKeyEnvironment } : {}) })}`
+        : "";
     const image = options.image && (provider === "docker" || provider === "podman")
         ? `image: ${JSON.stringify(options.image)}, `
         : "";
     return `import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
+import { homedir } from "node:os";
 import { parseEnv } from "node:util";
 import { dispatch, ${agent}, OutpostError, reporter } from "@elie-laloum/outpost";
 import { ${provider} } from "@elie-laloum/outpost/providers/${provider}";
@@ -17,10 +22,11 @@ const environment = await readFile(new URL(".env", import.meta.url), "utf8").cat
   throw error;
 });
 const variables = Object.fromEntries(
-  Object.entries(parseEnv(environment)).map(([key, value]) => [key, value || process.env[key] || ""]),
+  Object.entries({ ...parseEnv(${JSON.stringify(authenticationEnvironment(options))}), ...parseEnv(environment) }).map(([key, value]) => [key, value || process.env[key] || ""]),
 );
+${authenticationSource(options)}
 const runtime = {
-  agent: ${agent}({ ${model} }),
+  agent: ${agent}({ ${model}${modelProvider} }),
   provider: ${provider}({ ${image}variables }),
 };
 const objective = process.argv.slice(2).join(" ") || "Inspect this repository and implement one useful improvement.";
@@ -29,6 +35,7 @@ console.error("[outpost] Preparing sandbox...");
 try {
   const result = await dispatch({
     ...runtime,
+    hooks: authentication,
     repository,
     branch: { mode: "integrate" },
     brief: { file: resolve(import.meta.dirname, "brief.md"), values: { OBJECTIVE: objective } },

package/dist/cli/starters.js.map

@@ -1 +1 @@
-{"version":3,"file":"starters.js","sourceRoot":"","sources":["../../src/cli/starters.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,OAAO,CAAC,OAAoB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC;QAC/D,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;;;qBAGY,KAAK;WACf,QAAQ,2CAA2C,QAAQ;;;kDAGpB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;;;;;;;;;WAShF,KAAK,MAAM,KAAK;cACb,QAAQ,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;CAoBhC,CAAC;AACF,CAAC","sourcesContent":["import type { InitOptions } from \"./scaffold.types.ts\";\n\nexport function starter(options: InitOptions): string {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  const model = options.model ? `model: ${JSON.stringify(options.model)}` : \"\";\n  const image =\n    options.image && (provider === \"docker\" || provider === \"podman\")\n      ? `image: ${JSON.stringify(options.image)}, `\n      : \"\";\n  return `import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { parseEnv } from \"node:util\";\nimport { dispatch, ${agent}, OutpostError, reporter } from \"@elie-laloum/outpost\";\nimport { ${provider} } from \"@elie-laloum/outpost/providers/${provider}\";\n\n// Paths are relative to this workflow, regardless of where Node is launched.\nconst repository = resolve(import.meta.dirname, ${JSON.stringify(options.repository ?? \".\")});\nconst environment = await readFile(new URL(\".env\", import.meta.url), \"utf8\").catch((error) => {\n  if (error.code === \"ENOENT\") return \"\";\n  throw error;\n});\nconst variables = Object.fromEntries(\n  Object.entries(parseEnv(environment)).map(([key, value]) => [key, value || process.env[key] || \"\"]),\n);\nconst runtime = {\n  agent: ${agent}({ ${model} }),\n  provider: ${provider}({ ${image}variables }),\n};\nconst objective = process.argv.slice(2).join(\" \") || \"Inspect this repository and implement one useful improvement.\";\n\nconsole.error(\"[outpost] Preparing sandbox...\");\ntry {\n  const result = await dispatch({\n    ...runtime,\n    repository,\n    branch: { mode: \"integrate\" },\n    brief: { file: resolve(import.meta.dirname, \"brief.md\"), values: { OBJECTIVE: objective } },\n    observe: reporter(),\n    warn: (message) => console.error(message),\n  });\n  console.log({ branch: result.branch, commits: result.commits, conversation: result.conversation });\n} catch (error) {\n  if (!(error instanceof OutpostError) || error.code !== \"aborted\") throw error;\n  process.exitCode ||= 130;\n  console.error(\"[outpost] Cancelled. Recovery details:\", error.recovery);\n}\n`;\n}\n"]}
+{"version":3,"file":"starters.js","sourceRoot":"","sources":["../../src/cli/starters.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,UAAU,OAAO,CAAC,OAAoB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO;QACnC,CAAC,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;QAC5J,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC;QAC/D,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;;;;qBAIY,KAAK;WACf,QAAQ,2CAA2C,QAAQ;;;kDAGpB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;;;;;;iCAM1D,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;;EAEjF,oBAAoB,CAAC,OAAO,CAAC;;WAEpB,KAAK,MAAM,KAAK,GAAG,aAAa;cAC7B,QAAQ,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;CAqBhC,CAAC;AACF,CAAC","sourcesContent":["import {\n  authenticationEnvironment,\n  authenticationSource,\n} from \"./init-authentication.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport function starter(options: InitOptions): string {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  const model = options.model ? `model: ${JSON.stringify(options.model)}` : \"\";\n  const modelProvider = options.baseUrl\n    ? `, modelProvider: ${JSON.stringify({ baseUrl: options.baseUrl, ...(options.apiKeyEnvironment ? { apiKeyEnvironment: options.apiKeyEnvironment } : {}) })}`\n    : \"\";\n  const image =\n    options.image && (provider === \"docker\" || provider === \"podman\")\n      ? `image: ${JSON.stringify(options.image)}, `\n      : \"\";\n  return `import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport { parseEnv } from \"node:util\";\nimport { dispatch, ${agent}, OutpostError, reporter } from \"@elie-laloum/outpost\";\nimport { ${provider} } from \"@elie-laloum/outpost/providers/${provider}\";\n\n// Paths are relative to this workflow, regardless of where Node is launched.\nconst repository = resolve(import.meta.dirname, ${JSON.stringify(options.repository ?? \".\")});\nconst environment = await readFile(new URL(\".env\", import.meta.url), \"utf8\").catch((error) => {\n  if (error.code === \"ENOENT\") return \"\";\n  throw error;\n});\nconst variables = Object.fromEntries(\n  Object.entries({ ...parseEnv(${JSON.stringify(authenticationEnvironment(options))}), ...parseEnv(environment) }).map(([key, value]) => [key, value || process.env[key] || \"\"]),\n);\n${authenticationSource(options)}\nconst runtime = {\n  agent: ${agent}({ ${model}${modelProvider} }),\n  provider: ${provider}({ ${image}variables }),\n};\nconst objective = process.argv.slice(2).join(\" \") || \"Inspect this repository and implement one useful improvement.\";\n\nconsole.error(\"[outpost] Preparing sandbox...\");\ntry {\n  const result = await dispatch({\n    ...runtime,\n    hooks: authentication,\n    repository,\n    branch: { mode: \"integrate\" },\n    brief: { file: resolve(import.meta.dirname, \"brief.md\"), values: { OBJECTIVE: objective } },\n    observe: reporter(),\n    warn: (message) => console.error(message),\n  });\n  console.log({ branch: result.branch, commits: result.commits, conversation: result.conversation });\n} catch (error) {\n  if (!(error instanceof OutpostError) || error.code !== \"aborted\") throw error;\n  process.exitCode ||= 130;\n  console.error(\"[outpost] Cancelled. Recovery details:\", error.recovery);\n}\n`;\n}\n"]}

package/dist/domain/agent.types.d.ts

@@ -67,6 +67,8 @@ export interface AgentInput {
 }
 export interface AgentAdapter {
     readonly name: string;
+    readonly bootstrap?: string;
+    readonly requiresFinishedEvent?: boolean;
     readonly variables?: Variables;
     readonly conversations?: "claude" | "codex";
     readonly storage?: ConversationStore;

package/dist/domain/agent.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.types.js","sourceRoot":"","sources":["../../src/domain/agent.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, Variables } from \"./command.types.ts\";\nimport type { ConversationStore } from \"./conversation.types.ts\";\n\nexport interface Usage {\n  readonly input: number;\n  readonly cached: number;\n  readonly cacheCreated?: number;\n  readonly output: number;\n}\n\nexport type AgentEvent =\n  | {\n      readonly kind: \"phase\";\n      readonly name: string;\n      readonly agent?: string;\n      readonly branch?: string;\n      readonly directory?: string;\n    }\n  | {\n      readonly kind: \"summary\";\n      readonly durationMs: number;\n      readonly status: number;\n      readonly tokens: Usage;\n    }\n  | { readonly kind: \"warning\"; readonly message: string }\n  | { readonly kind: \"text\"; readonly text: string }\n  | { readonly kind: \"result\"; readonly text: string }\n  | { readonly kind: \"prompt\"; readonly text: string }\n  | { readonly kind: \"tool\"; readonly name: string; readonly input: unknown }\n  | { readonly kind: \"conversation\"; readonly id: string }\n  | { readonly kind: \"usage\"; readonly tokens: Usage }\n  | { readonly kind: \"failure\"; readonly message: string }\n  | { readonly kind: \"finished\" }\n  | { readonly kind: \"raw\"; readonly value: unknown };\n\nexport type AgentObservation = AgentEvent & {\n  readonly pass: number;\n  readonly at: string;\n};\n\nexport type AgentEventHandlers = {\n  readonly [Kind in AgentEvent[\"kind\"]]?: (\n    event: Extract<AgentEvent, { kind: Kind }>,\n  ) => void;\n};\n\nexport interface AgentInput {\n  readonly text?: string;\n  readonly interactive?: boolean;\n  readonly continuation?: { readonly id: string; readonly fork?: boolean };\n}\n\nexport interface AgentAdapter {\n  readonly name: string;\n  readonly variables?: Variables;\n  readonly conversations?: \"claude\" | \"codex\";\n  readonly storage?: ConversationStore;\n  readonly capture?: boolean;\n  readonly resumable?: boolean;\n  transcriptUsage?(text: string): Usage | undefined;\n  request(input: AgentInput): Command;\n  events(line: string): readonly AgentEvent[];\n}\n\nexport interface RequiredAgent {\n  readonly agent: AgentAdapter;\n}\n"]}
+{"version":3,"file":"agent.types.js","sourceRoot":"","sources":["../../src/domain/agent.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Command, Variables } from \"./command.types.ts\";\nimport type { ConversationStore } from \"./conversation.types.ts\";\n\nexport interface Usage {\n  readonly input: number;\n  readonly cached: number;\n  readonly cacheCreated?: number;\n  readonly output: number;\n}\n\nexport type AgentEvent =\n  | {\n      readonly kind: \"phase\";\n      readonly name: string;\n      readonly agent?: string;\n      readonly branch?: string;\n      readonly directory?: string;\n    }\n  | {\n      readonly kind: \"summary\";\n      readonly durationMs: number;\n      readonly status: number;\n      readonly tokens: Usage;\n    }\n  | { readonly kind: \"warning\"; readonly message: string }\n  | { readonly kind: \"text\"; readonly text: string }\n  | { readonly kind: \"result\"; readonly text: string }\n  | { readonly kind: \"prompt\"; readonly text: string }\n  | { readonly kind: \"tool\"; readonly name: string; readonly input: unknown }\n  | { readonly kind: \"conversation\"; readonly id: string }\n  | { readonly kind: \"usage\"; readonly tokens: Usage }\n  | { readonly kind: \"failure\"; readonly message: string }\n  | { readonly kind: \"finished\" }\n  | { readonly kind: \"raw\"; readonly value: unknown };\n\nexport type AgentObservation = AgentEvent & {\n  readonly pass: number;\n  readonly at: string;\n};\n\nexport type AgentEventHandlers = {\n  readonly [Kind in AgentEvent[\"kind\"]]?: (\n    event: Extract<AgentEvent, { kind: Kind }>,\n  ) => void;\n};\n\nexport interface AgentInput {\n  readonly text?: string;\n  readonly interactive?: boolean;\n  readonly continuation?: { readonly id: string; readonly fork?: boolean };\n}\n\nexport interface AgentAdapter {\n  readonly name: string;\n  readonly bootstrap?: string;\n  readonly requiresFinishedEvent?: boolean;\n  readonly variables?: Variables;\n  readonly conversations?: \"claude\" | \"codex\";\n  readonly storage?: ConversationStore;\n  readonly capture?: boolean;\n  readonly resumable?: boolean;\n  transcriptUsage?(text: string): Usage | undefined;\n  request(input: AgentInput): Command;\n  events(line: string): readonly AgentEvent[];\n}\n\nexport interface RequiredAgent {\n  readonly agent: AgentAdapter;\n}\n"]}

package/dist/domain/artifact-reference.d.ts

@@ -0,0 +1,4 @@
+import type { ArtifactReference } from "./artifact.types.ts";
+export declare function artifactDigest(bytes: Uint8Array | string): string;
+export declare function artifactId(reference: Omit<ArtifactReference, "id">): string;
+export declare function validateArtifactReference(value: unknown): ArtifactReference;

package/dist/domain/artifact-reference.js

@@ -0,0 +1,90 @@
+import { artifactDigestPattern, artifactLabelMaxLength, } from "./artifact.constants.js";
+import { createHash } from "node:crypto";
+export function artifactDigest(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+export function artifactId(reference) {
+    return artifactDigest(JSON.stringify([
+        reference.format,
+        reference.digest,
+        reference.size,
+        reference.contract.name,
+        reference.contract.version,
+        reference.contract.encoding,
+        reference.producer.executionId,
+        reference.producer.taskKey,
+        reference.producer.attempt,
+        reference.parents,
+    ]));
+}
+export function validateArtifactReference(value) {
+    const invalid = () => new Error("Invalid artifact reference or lineage");
+    if (!value ||
+        typeof value !== "object" ||
+        !("format" in value) ||
+        value.format !== 1 ||
+        !("id" in value) ||
+        !digest(value.id) ||
+        !("digest" in value) ||
+        !digest(value.digest) ||
+        !("size" in value) ||
+        typeof value.size !== "number" ||
+        !Number.isSafeInteger(value.size) ||
+        value.size < 0 ||
+        !("contract" in value) ||
+        !value.contract ||
+        typeof value.contract !== "object" ||
+        !("producer" in value) ||
+        !value.producer ||
+        typeof value.producer !== "object" ||
+        !("parents" in value) ||
+        !Array.isArray(value.parents) ||
+        !value.parents.every(digest) ||
+        new Set(value.parents).size !== value.parents.length)
+        throw invalid();
+    const contract = value.contract, producer = value.producer;
+    if (!("name" in contract) ||
+        !label(contract.name) ||
+        !("version" in contract) ||
+        !label(contract.version) ||
+        !("encoding" in contract) ||
+        (contract.encoding !== "json" && contract.encoding !== "binary") ||
+        !("executionId" in producer) ||
+        !label(producer.executionId) ||
+        !("taskKey" in producer) ||
+        !label(producer.taskKey) ||
+        !("attempt" in producer) ||
+        typeof producer.attempt !== "number" ||
+        !Number.isSafeInteger(producer.attempt) ||
+        producer.attempt < 1)
+        throw invalid();
+    const reference = Object.freeze({
+        format: 1,
+        id: value.id,
+        digest: value.digest,
+        size: value.size,
+        contract: Object.freeze({
+            name: contract.name,
+            version: contract.version,
+            encoding: contract.encoding,
+        }),
+        producer: Object.freeze({
+            executionId: producer.executionId,
+            taskKey: producer.taskKey,
+            attempt: producer.attempt,
+        }),
+        parents: Object.freeze([...value.parents]),
+    });
+    if (artifactId(reference) !== reference.id)
+        throw invalid();
+    return reference;
+}
+function digest(value) {
+    return typeof value === "string" && artifactDigestPattern.test(value);
+}
+function label(value) {
+    return (typeof value === "string" &&
+        value.trim().length > 0 &&
+        value.length <= artifactLabelMaxLength);
+}
+//# sourceMappingURL=artifact-reference.js.map

package/dist/domain/artifact-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-reference.js","sourceRoot":"","sources":["../../src/domain/artifact-reference.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAwC;IACjE,OAAO,cAAc,CACnB,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,IAAI;QACd,SAAS,CAAC,QAAQ,CAAC,IAAI;QACvB,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,QAAQ,CAAC,QAAQ;QAC3B,SAAS,CAAC,QAAQ,CAAC,WAAW;QAC9B,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,QAAQ,CAAC,OAAO;QAC1B,SAAS,CAAC,OAAO;KAClB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjB,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,IAAI,GAAG,CAAC;QACd,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAEpD,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAC7B,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,IACE,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;QACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC;QACzB,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChE,CAAC,CAAC,aAAa,IAAI,QAAQ,CAAC;QAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACxB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAEpB,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,SAAS,GAAsB,MAAM,CAAC,MAAM,CAAC;QACjD,MAAM,EAAE,CAAC;QACT,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,IAAI,sBAAsB,CACvC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  artifactDigestPattern,\n  artifactLabelMaxLength,\n} from \"./artifact.constants.ts\";\nimport { createHash } from \"node:crypto\";\nimport type { ArtifactReference } from \"./artifact.types.ts\";\n\nexport function artifactDigest(bytes: Uint8Array | string): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\n\nexport function artifactId(reference: Omit<ArtifactReference, \"id\">): string {\n  return artifactDigest(\n    JSON.stringify([\n      reference.format,\n      reference.digest,\n      reference.size,\n      reference.contract.name,\n      reference.contract.version,\n      reference.contract.encoding,\n      reference.producer.executionId,\n      reference.producer.taskKey,\n      reference.producer.attempt,\n      reference.parents,\n    ]),\n  );\n}\n\nexport function validateArtifactReference(value: unknown): ArtifactReference {\n  const invalid = () => new Error(\"Invalid artifact reference or lineage\");\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"format\" in value) ||\n    value.format !== 1 ||\n    !(\"id\" in value) ||\n    !digest(value.id) ||\n    !(\"digest\" in value) ||\n    !digest(value.digest) ||\n    !(\"size\" in value) ||\n    typeof value.size !== \"number\" ||\n    !Number.isSafeInteger(value.size) ||\n    value.size < 0 ||\n    !(\"contract\" in value) ||\n    !value.contract ||\n    typeof value.contract !== \"object\" ||\n    !(\"producer\" in value) ||\n    !value.producer ||\n    typeof value.producer !== \"object\" ||\n    !(\"parents\" in value) ||\n    !Array.isArray(value.parents) ||\n    !value.parents.every(digest) ||\n    new Set(value.parents).size !== value.parents.length\n  )\n    throw invalid();\n  const contract = value.contract,\n    producer = value.producer;\n  if (\n    !(\"name\" in contract) ||\n    !label(contract.name) ||\n    !(\"version\" in contract) ||\n    !label(contract.version) ||\n    !(\"encoding\" in contract) ||\n    (contract.encoding !== \"json\" && contract.encoding !== \"binary\") ||\n    !(\"executionId\" in producer) ||\n    !label(producer.executionId) ||\n    !(\"taskKey\" in producer) ||\n    !label(producer.taskKey) ||\n    !(\"attempt\" in producer) ||\n    typeof producer.attempt !== \"number\" ||\n    !Number.isSafeInteger(producer.attempt) ||\n    producer.attempt < 1\n  )\n    throw invalid();\n  const reference: ArtifactReference = Object.freeze({\n    format: 1,\n    id: value.id,\n    digest: value.digest,\n    size: value.size,\n    contract: Object.freeze({\n      name: contract.name,\n      version: contract.version,\n      encoding: contract.encoding,\n    }),\n    producer: Object.freeze({\n      executionId: producer.executionId,\n      taskKey: producer.taskKey,\n      attempt: producer.attempt,\n    }),\n    parents: Object.freeze([...value.parents]),\n  });\n  if (artifactId(reference) !== reference.id) throw invalid();\n  return reference;\n}\n\nfunction digest(value: unknown): value is string {\n  return typeof value === \"string\" && artifactDigestPattern.test(value);\n}\n\nfunction label(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.trim().length > 0 &&\n    value.length <= artifactLabelMaxLength\n  );\n}\n"]}

package/dist/domain/artifact.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const artifactLabelMaxLength = 1024;
+export declare const artifactDigestPattern: RegExp;

package/dist/domain/artifact.constants.js

@@ -0,0 +1,3 @@
+export const artifactLabelMaxLength = 1024;
+export const artifactDigestPattern = /^[a-f0-9]{64}$/;
+//# sourceMappingURL=artifact.constants.js.map

package/dist/domain/artifact.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.constants.js","sourceRoot":"","sources":["../../src/domain/artifact.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC","sourcesContent":["export const artifactLabelMaxLength = 1024;\nexport const artifactDigestPattern = /^[a-f0-9]{64}$/;\n"]}

package/dist/domain/artifact.d.ts

@@ -0,0 +1,7 @@
+import type { ArtifactContract, ArtifactContractOptions, ArtifactReference, ArtifactStore, JsonArtifactOptions, PublishArtifactOptions, ReadArtifactOptions } from "./artifact.types.ts";
+export declare const artifact: {
+    json<T>(options: JsonArtifactOptions<T>): ArtifactContract<T>;
+    binary(options: ArtifactContractOptions): ArtifactContract<Uint8Array>;
+};
+export declare function publishArtifact<T>(store: ArtifactStore, contract: ArtifactContract<T>, value: T, options: PublishArtifactOptions): Promise<ArtifactReference>;
+export declare function readStoredArtifact<T>(store: ArtifactStore, contract: ArtifactContract<T>, value: unknown, options?: ReadArtifactOptions): Promise<T>;

package/dist/domain/artifact.js

@@ -0,0 +1,104 @@
+import { artifactLabelMaxLength } from "./artifact.constants.js";
+import { artifactDigest, artifactId, validateArtifactReference, } from "./artifact-reference.js";
+import { checkpointValue } from "./workflow/checkpoint-value.js";
+function identity(options) {
+    if (!options.name.trim() ||
+        !options.version.trim() ||
+        options.name.length > artifactLabelMaxLength ||
+        options.version.length > artifactLabelMaxLength)
+        throw new Error(`Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`);
+    return { name: options.name, version: options.version };
+}
+export const artifact = {
+    json(options) {
+        const schema = options.schema;
+        async function validate(value) {
+            if (typeof schema === "function")
+                return schema(value);
+            const result = await schema["~standard"].validate(value);
+            if (result.issues)
+                throw new Error(`Artifact schema validation failed: ${JSON.stringify(result.issues)}`);
+            return result.value;
+        }
+        return Object.freeze({
+            ...identity(options),
+            encoding: "json",
+            async encode(value) {
+                const checked = checkpointValue(await validate(value));
+                if (checked.kind !== "json")
+                    throw new Error("Artifact payload must be JSON");
+                return Buffer.from(JSON.stringify(checked.value));
+            },
+            async decode(bytes) {
+                return validate(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)));
+            },
+        });
+    },
+    binary(options) {
+        return Object.freeze({
+            ...identity(options),
+            encoding: "binary",
+            async encode(value) {
+                if (!(value instanceof Uint8Array))
+                    throw new Error("Artifact payload must be Uint8Array");
+                return Uint8Array.from(value);
+            },
+            async decode(bytes) {
+                return Uint8Array.from(bytes);
+            },
+        });
+    },
+};
+export async function publishArtifact(store, contract, value, options) {
+    options.signal?.throwIfAborted();
+    const producer = { ...options.producer };
+    const parents = (options.parents ?? []).map((parent) => validateArtifactReference(parent).id);
+    const bytes = Uint8Array.from(await contract.encode(value));
+    options.signal?.throwIfAborted();
+    const metadata = {
+        format: 1,
+        digest: artifactDigest(bytes),
+        size: bytes.length,
+        contract: {
+            name: contract.name,
+            version: contract.version,
+            encoding: contract.encoding,
+        },
+        producer,
+        parents,
+    };
+    const reference = validateArtifactReference({
+        ...metadata,
+        id: artifactId(metadata),
+    });
+    await store.put(reference.id, bytes, options.signal);
+    options.signal?.throwIfAborted();
+    return reference;
+}
+export async function readStoredArtifact(store, contract, value, options = {}) {
+    options.signal?.throwIfAborted();
+    const reference = validateArtifactReference(value);
+    if (reference.contract.name !== contract.name ||
+        reference.contract.version !== contract.version ||
+        reference.contract.encoding !== contract.encoding)
+        throw new Error("Artifact contract mismatch");
+    const producer = options.producer;
+    if (producer &&
+        (reference.producer.executionId !== producer.executionId ||
+            reference.producer.taskKey !== producer.taskKey ||
+            reference.producer.attempt !== producer.attempt))
+        throw new Error("Artifact producer mismatch");
+    if (options.parents &&
+        JSON.stringify(reference.parents) !==
+            JSON.stringify(options.parents.map((parent) => validateArtifactReference(parent).id)))
+        throw new Error("Artifact lineage mismatch");
+    const bytes = await store.get(reference.id, options.signal);
+    options.signal?.throwIfAborted();
+    if (bytes.length !== reference.size ||
+        artifactDigest(bytes) !== reference.digest)
+        throw new Error("Artifact content integrity mismatch");
+    const result = await contract.decode(bytes);
+    options.signal?.throwIfAborted();
+    return result;
+}
+//# sourceMappingURL=artifact.js.map

package/dist/domain/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/domain/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,UAAU,EACV,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAWjE,SAAS,QAAQ,CAAC,OAAgC;IAChD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QACpB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,sBAAsB;QAC5C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAE/C,MAAM,IAAI,KAAK,CACb,mEAAmE,sBAAsB,aAAa,CACvG,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,CAAI,OAA+B;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,KAAK,UAAU,QAAQ,CAAC,KAAc;YACpC,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,MAAM;gBACf,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACtE,CAAC;YACJ,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,MAAM;YAChB,KAAK,CAAC,MAAM,CAAC,KAAQ;gBACnB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CACR,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC7C,CACb,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,OAAgC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;oBAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACzD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,KAAiB;gBAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,QAA6B,EAC7B,KAAQ,EACR,OAA+B;IAE/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CACjD,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,CAAU;QAClB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B;QACD,QAAQ;QACR,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC1C,GAAG,QAAQ;QACX,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAoB,EACpB,QAA6B,EAC7B,KAAc,EACd,UAA+B,EAAE;IAEjC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnD,IACE,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QACzC,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC/C,SAAS,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAEjD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IACE,QAAQ;QACR,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YACtD,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC/C,SAAS,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,IACE,OAAO,CAAC,OAAO;QACf,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,SAAS,CACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CACtE;QAEH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IACE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI;QAC/B,cAAc,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,MAAM;QAE1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { artifactLabelMaxLength } from \"./artifact.constants.ts\";\nimport {\n  artifactDigest,\n  artifactId,\n  validateArtifactReference,\n} from \"./artifact-reference.ts\";\nimport { checkpointValue } from \"./workflow/checkpoint-value.ts\";\nimport type {\n  ArtifactContract,\n  ArtifactContractOptions,\n  ArtifactReference,\n  ArtifactStore,\n  JsonArtifactOptions,\n  PublishArtifactOptions,\n  ReadArtifactOptions,\n} from \"./artifact.types.ts\";\n\nfunction identity(options: ArtifactContractOptions): ArtifactContractOptions {\n  if (\n    !options.name.trim() ||\n    !options.version.trim() ||\n    options.name.length > artifactLabelMaxLength ||\n    options.version.length > artifactLabelMaxLength\n  )\n    throw new Error(\n      `Artifact contract name and version must be nonempty and at most ${artifactLabelMaxLength} characters`,\n    );\n  return { name: options.name, version: options.version };\n}\n\nexport const artifact = {\n  json<T>(options: JsonArtifactOptions<T>): ArtifactContract<T> {\n    const schema = options.schema;\n    async function validate(value: unknown): Promise<T> {\n      if (typeof schema === \"function\") return schema(value);\n      const result = await schema[\"~standard\"].validate(value);\n      if (result.issues)\n        throw new Error(\n          `Artifact schema validation failed: ${JSON.stringify(result.issues)}`,\n        );\n      return result.value;\n    }\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"json\",\n      async encode(value: T) {\n        const checked = checkpointValue(await validate(value));\n        if (checked.kind !== \"json\")\n          throw new Error(\"Artifact payload must be JSON\");\n        return Buffer.from(JSON.stringify(checked.value));\n      },\n      async decode(bytes: Uint8Array) {\n        return validate(\n          JSON.parse(\n            new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes),\n          ) as unknown,\n        );\n      },\n    });\n  },\n  binary(options: ArtifactContractOptions): ArtifactContract<Uint8Array> {\n    return Object.freeze({\n      ...identity(options),\n      encoding: \"binary\",\n      async encode(value: Uint8Array) {\n        if (!(value instanceof Uint8Array))\n          throw new Error(\"Artifact payload must be Uint8Array\");\n        return Uint8Array.from(value);\n      },\n      async decode(bytes: Uint8Array) {\n        return Uint8Array.from(bytes);\n      },\n    });\n  },\n};\n\nexport async function publishArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: T,\n  options: PublishArtifactOptions,\n): Promise<ArtifactReference> {\n  options.signal?.throwIfAborted();\n  const producer = { ...options.producer };\n  const parents = (options.parents ?? []).map(\n    (parent) => validateArtifactReference(parent).id,\n  );\n  const bytes = Uint8Array.from(await contract.encode(value));\n  options.signal?.throwIfAborted();\n  const metadata = {\n    format: 1 as const,\n    digest: artifactDigest(bytes),\n    size: bytes.length,\n    contract: {\n      name: contract.name,\n      version: contract.version,\n      encoding: contract.encoding,\n    },\n    producer,\n    parents,\n  };\n  const reference = validateArtifactReference({\n    ...metadata,\n    id: artifactId(metadata),\n  });\n  await store.put(reference.id, bytes, options.signal);\n  options.signal?.throwIfAborted();\n  return reference;\n}\n\nexport async function readStoredArtifact<T>(\n  store: ArtifactStore,\n  contract: ArtifactContract<T>,\n  value: unknown,\n  options: ReadArtifactOptions = {},\n): Promise<T> {\n  options.signal?.throwIfAborted();\n  const reference = validateArtifactReference(value);\n  if (\n    reference.contract.name !== contract.name ||\n    reference.contract.version !== contract.version ||\n    reference.contract.encoding !== contract.encoding\n  )\n    throw new Error(\"Artifact contract mismatch\");\n  const producer = options.producer;\n  if (\n    producer &&\n    (reference.producer.executionId !== producer.executionId ||\n      reference.producer.taskKey !== producer.taskKey ||\n      reference.producer.attempt !== producer.attempt)\n  )\n    throw new Error(\"Artifact producer mismatch\");\n  if (\n    options.parents &&\n    JSON.stringify(reference.parents) !==\n      JSON.stringify(\n        options.parents.map((parent) => validateArtifactReference(parent).id),\n      )\n  )\n    throw new Error(\"Artifact lineage mismatch\");\n  const bytes = await store.get(reference.id, options.signal);\n  options.signal?.throwIfAborted();\n  if (\n    bytes.length !== reference.size ||\n    artifactDigest(bytes) !== reference.digest\n  )\n    throw new Error(\"Artifact content integrity mismatch\");\n  const result = await contract.decode(bytes);\n  options.signal?.throwIfAborted();\n  return result;\n}\n"]}

package/dist/domain/artifact.types.d.ts

@@ -0,0 +1,44 @@
+import type { StandardValidator } from "./response.types.ts";
+export interface ArtifactIdentity {
+    readonly name: string;
+    readonly version: string;
+    readonly encoding: "json" | "binary";
+}
+export interface ArtifactProducer {
+    readonly executionId: string;
+    readonly taskKey: string;
+    readonly attempt: number;
+}
+export interface ArtifactReference {
+    readonly format: 1;
+    readonly id: string;
+    readonly digest: string;
+    readonly size: number;
+    readonly contract: ArtifactIdentity;
+    readonly producer: ArtifactProducer;
+    readonly parents: readonly string[];
+}
+export interface ArtifactContract<T> extends ArtifactIdentity {
+    encode(value: T): Promise<Uint8Array>;
+    decode(bytes: Uint8Array): Promise<T>;
+}
+export type ArtifactContractOptions = Pick<ArtifactIdentity, "name" | "version">;
+export type JsonArtifactOptions<T> = ArtifactContractOptions & {
+    readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);
+};
+export interface ArtifactStore {
+    /** Publish atomically; reject conflicting bytes for an existing ID. */
+    put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
+    /** Read bounded bytes or reject missing objects; callers verify integrity. */
+    get(id: string, signal?: AbortSignal): Promise<Uint8Array>;
+}
+export interface PublishArtifactOptions {
+    readonly producer: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}
+export interface ReadArtifactOptions {
+    readonly producer?: ArtifactProducer;
+    readonly parents?: readonly ArtifactReference[];
+    readonly signal?: AbortSignal;
+}

package/dist/domain/artifact.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifact.types.js.map

package/dist/domain/artifact.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.types.js","sourceRoot":"","sources":["../../src/domain/artifact.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { StandardValidator } from \"./response.types.ts\";\n\nexport interface ArtifactIdentity {\n  readonly name: string;\n  readonly version: string;\n  readonly encoding: \"json\" | \"binary\";\n}\n\nexport interface ArtifactProducer {\n  readonly executionId: string;\n  readonly taskKey: string;\n  readonly attempt: number;\n}\n\nexport interface ArtifactReference {\n  readonly format: 1;\n  readonly id: string;\n  readonly digest: string;\n  readonly size: number;\n  readonly contract: ArtifactIdentity;\n  readonly producer: ArtifactProducer;\n  readonly parents: readonly string[];\n}\n\nexport interface ArtifactContract<T> extends ArtifactIdentity {\n  encode(value: T): Promise<Uint8Array>;\n  decode(bytes: Uint8Array): Promise<T>;\n}\n\nexport type ArtifactContractOptions = Pick<\n  ArtifactIdentity,\n  \"name\" | \"version\"\n>;\nexport type JsonArtifactOptions<T> = ArtifactContractOptions & {\n  readonly schema: StandardValidator<T> | ((input: unknown) => T | Promise<T>);\n};\n\nexport interface ArtifactStore {\n  /** Publish atomically; reject conflicting bytes for an existing ID. */\n  put(id: string, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;\n  /** Read bounded bytes or reject missing objects; callers verify integrity. */\n  get(id: string, signal?: AbortSignal): Promise<Uint8Array>;\n}\n\nexport interface PublishArtifactOptions {\n  readonly producer: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n\nexport interface ReadArtifactOptions {\n  readonly producer?: ArtifactProducer;\n  readonly parents?: readonly ArtifactReference[];\n  readonly signal?: AbortSignal;\n}\n"]}

package/dist/domain/egress.constants.d.ts

@@ -0,0 +1 @@
+export declare const egressFields: readonly string[];

package/dist/domain/egress.constants.js

@@ -0,0 +1,7 @@
+export const egressFields = [
+    "mode",
+    "domains",
+    "allowCidrs",
+    "denyCidrs",
+];
+//# sourceMappingURL=egress.constants.js.map

package/dist/domain/egress.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.constants.js","sourceRoot":"","sources":["../../src/domain/egress.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,MAAM;IACN,SAAS;IACT,YAAY;IACZ,WAAW;CACZ,CAAC","sourcesContent":["export const egressFields: readonly string[] = [\n  \"mode\",\n  \"domains\",\n  \"allowCidrs\",\n  \"denyCidrs\",\n];\n"]}

package/dist/domain/egress.d.ts

@@ -0,0 +1,2 @@
+import type { EgressPolicy } from "./egress.types.ts";
+export declare function validateEgress(value: unknown): EgressPolicy | undefined;