@elie-laloum/outpost 4.1.0 → 5.0.0

package/dist/application/custom-turn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-turn.js","sourceRoot":"","sources":["../../src/application/custom-turn.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAEvF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAmB,EACnB,KAAkB,EAClB,MAAc,EACd,OAAiC,EACjC,IAAY,EACZ,OAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAC3D,EACH,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,UAAU,CACnD,CAAC;IACF,IAAI,KAAK,GAAU,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAI,SAAqB,EAAc,EAAE;QACrD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,KAAK,SAAS;aACX,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACxC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAE,EAAE;QACjC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAgB,EAAE;QACrD,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;QACnD,OAAO;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;YAC7D,GAAG,OAAO;YACV,MAAM;SACP,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAe,EAAE;QACnD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,SAAS,CACP,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EACzC,iCAAiC,CAClC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,IAAI;gBACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,SAAS,CAAC,CAAC,MAAM,CACpB,OAAqB;QAErB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,MAAmB,CAAC;QACxB,KAAK,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;oBACnD,CAAC,CAAC,KAAK,CAAC;YACZ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO;YACb,OAAO,KAAK,CACV,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAC,EAAE,CACL,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,OAAO,GAAiB;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CACV,KAAK,CAAC,MAAM,CAAC;gBACX,GAAG,OAAO;gBACV,OAAO,CAAC,OAAO,EAAE,KAAK;oBACpB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC3C,CAAC,CAAC,MAAM;aACX,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CACV,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;gBAChC,GAAG,QAAQ;gBACX,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACrB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC5C,CAAC,CAAC,MAAM;aACX,CAAC,CACH,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CACV,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBAClC,GAAG,QAAQ;gBACX,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACrB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC5C,CAAC,CAAC,MAAM;aACX,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,4CAA4C,CAC7C,CAAC;QACJ,CAAC;KACF,CAAC;IACF,IAAI,UAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,UAAU,GAAG,OAAO;YAClB,CAAC,CAAC,MAAM,cAAc,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBACvB,GAAG,CAAC,OAAO,CAAC,YAAY;oBACtB,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,UAAU;YAAE,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B;YACE,KAAK;YACL,KAAK,EAAE,OAAO,CAAC,MAAM;gBACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACrD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK;YACvB,aAAa;YACb,OAAO;YACP,MAAM;YACN,IAAI;YACJ,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;SAC5B,EACD,MAAM,EACN,cAAc,CAAC,UAAU,CAAC,CAC3B,CAAC;QACF,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI;YAClB,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,YAAY,IAAI,CAAC;SACxB;YACC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EACzC,qDAAqD,CACtD,CAAC;QACJ,SAAS,CACP,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EACvD,+CAA+C,CAChD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,IAAI;YACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACtB,IAAI,EAAE,UAAU;YAChB,IAAI;YACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;QAC1B,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACpE,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC","sourcesContent":["import type { AgentEvent, CustomAgent, Usage } from \"../domain/agent.types.ts\";\nimport type {\n  ModelProvider,\n  ModelRequest,\n  ModelResult,\n  ModelStreamEvent,\n} from \"../domain/model.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport { activityWatchdog } from \"./activity-watchdog.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions, Turn } from \"./execution.types.ts\";\nimport { openTranscript } from \"../infrastructure/conversations/harness-transcript.ts\";\nimport type { TranscriptHandle } from \"../infrastructure/conversations/harness-transcript.types.ts\";\nimport { storageFor } from \"./agent-storage.ts\";\nimport { harnessHistory } from \"./harness-history.ts\";\nimport { harnessLoop } from \"./harness-loop.ts\";\nimport type { CustomTurnContext } from \"./harness.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport async function customTurn(\n  lease: SandboxLease,\n  agent: CustomAgent,\n  prompt: string,\n  options: DispatchOptions<unknown>,\n  pass: number,\n  context: CustomTurnContext,\n): Promise<Turn> {\n  const start = Date.now();\n  const controller = new AbortController();\n  const signal = options.signal\n    ? AbortSignal.any([options.signal, controller.signal])\n    : controller.signal;\n  const watchdog = activityWatchdog(controller, options, pass);\n  const timer = setTimeout(\n    () =>\n      controller.abort(\n        new OutpostError(\"timeout\", \"Harness execution timed out\"),\n      ),\n    options.deadlineMs ?? executionDefaults.deadlineMs,\n  );\n  let usage: Usage = { input: 0, cached: 0, output: 0 };\n  const pending = new Set<Promise<unknown>>();\n  const track = <T>(operation: Promise<T>): Promise<T> => {\n    pending.add(operation);\n    void operation\n      .finally(() => pending.delete(operation))\n      .catch(() => undefined);\n    return operation;\n  };\n  const emit = (event: AgentEvent) => {\n    signal.throwIfAborted();\n    watchdog.refresh(false);\n    notify(options.observe, { ...event, pass, at: new Date().toISOString() });\n  };\n  const provider = agent.harness.modelProvider;\n  const scoped = (request: ModelRequest): ModelRequest => {\n    const { reasoning, maxOutputTokens } = agent.model;\n    return {\n      ...(reasoning === undefined ? {} : { reasoning }),\n      ...(maxOutputTokens === undefined ? {} : { maxOutputTokens }),\n      ...request,\n      signal,\n    };\n  };\n  const account = (result: ModelResult): ModelResult => {\n    signal.throwIfAborted();\n    invariant(\n      result && typeof result.text === \"string\",\n      \"Model provider must return text\",\n    );\n    if (result.usage) {\n      usage = addUsage(usage, result.usage);\n      notify(options.observe, {\n        kind: \"usage\",\n        tokens: result.usage,\n        pass,\n        at: new Date().toISOString(),\n      });\n    }\n    watchdog.refresh(false);\n    return result;\n  };\n  async function* stream(\n    request: ModelRequest,\n  ): AsyncGenerator<ModelStreamEvent> {\n    signal.throwIfAborted();\n    let finish!: () => void;\n    track(new Promise<void>((resolve) => (finish = resolve)));\n    try {\n      for await (const event of provider.stream!(scoped(request))) {\n        signal.throwIfAborted();\n        watchdog.refresh(false);\n        yield event.type === \"result\"\n          ? { type: \"result\", result: account(event.result) }\n          : event;\n      }\n    } finally {\n      finish();\n    }\n  }\n  const modelProvider: ModelProvider = {\n    name: provider.name,\n    ...(provider.stream ? { stream } : {}),\n    request(request) {\n      return track(\n        (async () => {\n          signal.throwIfAborted();\n          return account(await provider.request(scoped(request)));\n        })(),\n      );\n    },\n  };\n  const sandbox: SandboxLease = {\n    root: lease.root,\n    home: lease.home,\n    invoke: (command) => {\n      signal.throwIfAborted();\n      return track(\n        lease.invoke({\n          ...command,\n          observe(channel, chunk) {\n            watchdog.refresh(false);\n            notify((value) => command.observe?.(channel, value), chunk);\n          },\n          signal: command.signal\n            ? AbortSignal.any([command.signal, signal])\n            : signal,\n        }),\n      );\n    },\n    upload: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return track(\n        lease.upload(source, destination, {\n          ...settings,\n          signal: settings.signal\n            ? AbortSignal.any([settings.signal, signal])\n            : signal,\n        }),\n      );\n    },\n    download: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return track(\n        lease.download(source, destination, {\n          ...settings,\n          signal: settings.signal\n            ? AbortSignal.any([settings.signal, signal])\n            : signal,\n        }),\n      );\n    },\n    release: async () => {\n      throw new OutpostError(\n        \"configuration\",\n        \"The harness does not own its sandbox lease\",\n      );\n    },\n  };\n  let transcript: TranscriptHandle | undefined;\n  try {\n    signal.throwIfAborted();\n    watchdog.refresh(false);\n    const storage = storageFor(agent);\n    transcript = storage\n      ? await openTranscript({\n          repository: context.repository,\n          store: storage,\n          model: agent.model.name,\n          ...(context.continuation\n            ? { continuation: context.continuation }\n            : {}),\n        })\n      : undefined;\n    if (transcript) emit({ kind: \"conversation\", id: transcript.id });\n    const text = await harnessLoop(\n      {\n        agent,\n        tools: context.repair\n          ? agent.harness.tools.filter((tool) => tool.readOnly)\n          : agent.harness.tools,\n        modelProvider,\n        sandbox,\n        signal,\n        emit,\n        hold: () => watchdog.hold(),\n      },\n      prompt,\n      harnessHistory(transcript),\n    );\n    signal.throwIfAborted();\n    for (const value of [\n      usage.input,\n      usage.cached,\n      usage.output,\n      usage.cacheCreated ?? 0,\n    ])\n      invariant(\n        Number.isSafeInteger(value) && value >= 0,\n        \"Harness usage must contain nonnegative token counts\",\n      );\n    invariant(\n      usage.cached + (usage.cacheCreated ?? 0) <= usage.input,\n      \"Cached tokens must be included in input usage\",\n    );\n    notify(options.observe, {\n      kind: \"result\",\n      text,\n      pass,\n      at: new Date().toISOString(),\n    });\n    notify(options.observe, {\n      kind: \"finished\",\n      pass,\n      at: new Date().toISOString(),\n    });\n    return {\n      text,\n      usage,\n      status: 0,\n      durationMs: Date.now() - start,\n      ...(transcript ? { conversation: transcript.id } : {}),\n    };\n  } catch (error) {\n    signal.throwIfAborted();\n    throw error;\n  } finally {\n    await transcript?.close();\n    controller.abort(new OutpostError(\"aborted\", \"Harness turn ended\"));\n    clearTimeout(timer);\n    watchdog.close();\n    await Promise.allSettled([...pending]);\n  }\n}\n"]}

package/dist/application/dispatch-observation.d.ts

@@ -0,0 +1,3 @@
+import type { ObservedDispatchResult } from "./dispatch-observation.types.ts";
+import type { DispatchOptions } from "./execution.types.ts";
+export declare function observeDispatch<T, R extends ObservedDispatchResult>(options: DispatchOptions<T>, action: (options: DispatchOptions<T>) => Promise<R>): Promise<R>;

package/dist/application/dispatch-observation.js

@@ -0,0 +1,51 @@
+import { OutpostError } from "../domain/errors.js";
+import { addUsage } from "../domain/usage.js";
+import { notify } from "./observation.js";
+export function observeDispatch(options, action) {
+    if (!options.telemetry)
+        return action(options);
+    let session;
+    notify(() => {
+        session = options.telemetry?.startDispatch();
+    }, undefined);
+    const empty = () => ({ input: 0, cached: 0, output: 0 });
+    let previous = empty(), current = empty();
+    const { telemetry: _telemetry, ...settings } = options;
+    const observed = {
+        ...settings,
+        observe(event) {
+            if (event.kind === "phase" && event.name === "preparing prompt") {
+                previous = addUsage(previous, current);
+                current = empty();
+            }
+            if (event.kind === "usage")
+                current = addUsage(current, event.tokens);
+            if (event.kind === "summary")
+                current = event.tokens;
+            notify(options.observe, event);
+        },
+    };
+    return settle();
+    async function settle() {
+        try {
+            const result = await action(observed);
+            notify(() => session?.finish({
+                status: "done",
+                usage: result.usage,
+                completed: result.completed,
+            }), undefined);
+            return result;
+        }
+        catch (error) {
+            const cancelled = (options.signal?.aborted && error === options.signal.reason) ||
+                (error instanceof OutpostError && error.code === "aborted") ||
+                (error instanceof Error && error.name === "AbortError");
+            notify(() => session?.finish({
+                status: cancelled ? "cancelled" : "failed",
+                usage: addUsage(previous, current),
+            }), undefined);
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=dispatch-observation.js.map

package/dist/application/dispatch-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-observation.js","sourceRoot":"","sources":["../../src/application/dispatch-observation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,MAAmD;IAEnD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAA6C,CAAC;IAClD,MAAM,CAAC,GAAG,EAAE;QACV,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC/C,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,GAAU,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK,EAAE,EACpB,OAAO,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvD,MAAM,QAAQ,GAAuB;QACnC,GAAG,QAAQ;QACX,OAAO,CAAC,KAAK;YACX,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAChE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACvC,OAAO,GAAG,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IACF,OAAO,MAAM,EAAE,CAAC;IAEhB,KAAK,UAAU,MAAM;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,CACJ,GAAG,EAAE,CACH,OAAO,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,EACJ,SAAS,CACV,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC5D,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;gBAC3D,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YAC1D,MAAM,CACJ,GAAG,EAAE,CACH,OAAO,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAC1C,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;aACnC,CAAC,EACJ,SAAS,CACV,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type { Usage } from \"../domain/agent.types.ts\";\nimport type { DispatchTelemetrySession } from \"../domain/dispatch-telemetry.types.ts\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport type { ObservedDispatchResult } from \"./dispatch-observation.types.ts\";\nimport type { DispatchOptions } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport function observeDispatch<T, R extends ObservedDispatchResult>(\n  options: DispatchOptions<T>,\n  action: (options: DispatchOptions<T>) => Promise<R>,\n): Promise<R> {\n  if (!options.telemetry) return action(options);\n  let session: DispatchTelemetrySession | undefined;\n  notify(() => {\n    session = options.telemetry?.startDispatch();\n  }, undefined);\n  const empty = (): Usage => ({ input: 0, cached: 0, output: 0 });\n  let previous = empty(),\n    current = empty();\n  const { telemetry: _telemetry, ...settings } = options;\n  const observed: DispatchOptions<T> = {\n    ...settings,\n    observe(event) {\n      if (event.kind === \"phase\" && event.name === \"preparing prompt\") {\n        previous = addUsage(previous, current);\n        current = empty();\n      }\n      if (event.kind === \"usage\") current = addUsage(current, event.tokens);\n      if (event.kind === \"summary\") current = event.tokens;\n      notify(options.observe, event);\n    },\n  };\n  return settle();\n\n  async function settle(): Promise<R> {\n    try {\n      const result = await action(observed);\n      notify(\n        () =>\n          session?.finish({\n            status: \"done\",\n            usage: result.usage,\n            completed: result.completed,\n          }),\n        undefined,\n      );\n      return result;\n    } catch (error) {\n      const cancelled =\n        (options.signal?.aborted && error === options.signal.reason) ||\n        (error instanceof OutpostError && error.code === \"aborted\") ||\n        (error instanceof Error && error.name === \"AbortError\");\n      notify(\n        () =>\n          session?.finish({\n            status: cancelled ? \"cancelled\" : \"failed\",\n            usage: addUsage(previous, current),\n          }),\n        undefined,\n      );\n      throw error;\n    }\n  }\n}\n"]}

package/dist/application/dispatch-observation.types.d.ts

@@ -0,0 +1,5 @@
+import type { Usage } from "../domain/agent.types.ts";
+export interface ObservedDispatchResult {
+    readonly usage: Usage;
+    readonly completed: boolean;
+}

package/dist/application/dispatch-observation.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dispatch-observation.types.js.map

package/dist/application/dispatch-observation.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-observation.types.js","sourceRoot":"","sources":["../../src/application/dispatch-observation.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Usage } from \"../domain/agent.types.ts\";\n\nexport interface ObservedDispatchResult {\n  readonly usage: Usage;\n  readonly completed: boolean;\n}\n"]}

package/dist/application/dispatch-validation.d.ts

@@ -1,4 +1,4 @@
-import type { AgentAdapter } from "../domain/agent.types.ts";
+import type { Agent } from "../domain/agent.types.ts";
 import type { DispatchOptions } from "./execution.types.ts";
 export declare function validateDispatch(options: DispatchOptions<unknown>): void;
-export declare function preflightDispatch(options: DispatchOptions<unknown>, _repository: string, agent?: AgentAdapter): Promise<void>;
+export declare function preflightDispatch(options: DispatchOptions<unknown>, _repository: string, agent?: Agent): Promise<void>;

package/dist/application/dispatch-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch-validation.js","sourceRoot":"","sources":["../../src/application/dispatch-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGhF,MAAM,UAAU,gBAAgB,CAAC,OAAiC;IAChE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/D,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAChE,2BAA2B,CAC5B,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,iBAAiB;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY;QAC1C,SAAS,CACP,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAClD,yDAAyD,CAC1D,CAAC;IACJ,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAC5C,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EACjC,WAAmB,EACnB,KAAoB;IAEpB,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,OAAO,CAAC,YAAY;QACtB,SAAS,CACP,KAAK,EAAE,SAAS,KAAK,KAAK,EAC1B,GAAG,KAAK,EAAE,IAAI,mDAAmD,CAClE,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO;IAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC9B,SAAS,CACP,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,IAAI,KAAK,EAAE,OAAO,CAAC,EAC9D,gEAAgE,CACjE,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC3E,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACtE,CAAC;IACF,SAAS,CACP,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAC9C,kCAAkC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAC9D,CAAC;AACJ,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport type { AgentAdapter } from \"../domain/agent.types.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { validateBrief } from \"../domain/prompts.ts\";\nimport { dispatchDeadlines, executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions } from \"./execution.types.ts\";\n\nexport function validateDispatch(options: DispatchOptions<unknown>): void {\n  options.signal?.throwIfAborted();\n  validateBrief(options.brief);\n  positive(options.passes ?? executionDefaults.passes, \"passes\");\n  invariant(\n    Number.isSafeInteger(options.passes ?? executionDefaults.passes),\n    \"passes must be an integer\",\n  );\n  for (const key of dispatchDeadlines)\n    if (options[key] !== undefined) positive(options[key], key);\n  if (options.response || options.continuation)\n    invariant(\n      (options.passes ?? executionDefaults.passes) === 1,\n      \"Structured responses and continuations require one pass\",\n    );\n  const markers =\n    options.until === undefined\n      ? []\n      : typeof options.until === \"string\"\n        ? [options.until]\n        : options.until;\n  invariant(\n    markers.every((marker) => marker.length > 0),\n    \"Completion markers cannot be empty\",\n  );\n}\n\nexport async function preflightDispatch(\n  options: DispatchOptions<unknown>,\n  _repository: string,\n  agent?: AgentAdapter,\n): Promise<void> {\n  validateDispatch(options);\n  if (options.continuation)\n    invariant(\n      agent?.resumable !== false,\n      `${agent?.name} does not support continuation or fork in Outpost`,\n    );\n  if (!options.response) return;\n  if (options.response.repairs > 0)\n    invariant(\n      agent?.resumable ?? !!(agent?.conversations || agent?.storage),\n      \"Response repair requires an adapter that supports continuation\",\n    );\n  const brief = options.brief;\n  const text = brief.text ?? (await readFile(resolve(brief.file!), \"utf8\"));\n  const resolved = text.replace(/\\{\\{\\s*(\\w+)\\s*\\}\\}/g, (token, key: string) =>\n    brief.values?.[key] === undefined ? token : String(brief.values[key]),\n  );\n  invariant(\n    resolved.includes(`<${options.response.tag}>`),\n    `Brief must request an opening <${options.response.tag}> tag`,\n  );\n}\n"]}
+{"version":3,"file":"dispatch-validation.js","sourceRoot":"","sources":["../../src/application/dispatch-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGhF,MAAM,UAAU,gBAAgB,CAAC,OAAiC;IAChE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/D,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAChE,2BAA2B,CAC5B,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,iBAAiB;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY;QAC1C,SAAS,CACP,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAClD,yDAAyD,CAC1D,CAAC;IACJ,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAC5C,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EACjC,WAAmB,EACnB,KAAa;IAEb,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,OAAO,CAAC,YAAY;QACtB,SAAS,CACP,KAAK,EAAE,SAAS,KAAK,KAAK,EAC1B,GAAG,KAAK,EAAE,IAAI,mDAAmD,CAClE,CAAC;IACJ,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO;IAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC9B,SAAS,CACP,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,IAAI,KAAK,EAAE,OAAO,CAAC,EAC9D,gEAAgE,CACjE,CAAC;IACJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC3E,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACtE,CAAC;IACF,SAAS,CACP,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAC9C,kCAAkC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAC9D,CAAC;AACJ,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport type { Agent } from \"../domain/agent.types.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport { validateBrief } from \"../domain/prompts.ts\";\nimport { dispatchDeadlines, executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions } from \"./execution.types.ts\";\n\nexport function validateDispatch(options: DispatchOptions<unknown>): void {\n  options.signal?.throwIfAborted();\n  validateBrief(options.brief);\n  positive(options.passes ?? executionDefaults.passes, \"passes\");\n  invariant(\n    Number.isSafeInteger(options.passes ?? executionDefaults.passes),\n    \"passes must be an integer\",\n  );\n  for (const key of dispatchDeadlines)\n    if (options[key] !== undefined) positive(options[key], key);\n  if (options.response || options.continuation)\n    invariant(\n      (options.passes ?? executionDefaults.passes) === 1,\n      \"Structured responses and continuations require one pass\",\n    );\n  const markers =\n    options.until === undefined\n      ? []\n      : typeof options.until === \"string\"\n        ? [options.until]\n        : options.until;\n  invariant(\n    markers.every((marker) => marker.length > 0),\n    \"Completion markers cannot be empty\",\n  );\n}\n\nexport async function preflightDispatch(\n  options: DispatchOptions<unknown>,\n  _repository: string,\n  agent?: Agent,\n): Promise<void> {\n  validateDispatch(options);\n  if (options.continuation)\n    invariant(\n      agent?.resumable !== false,\n      `${agent?.name} does not support continuation or fork in Outpost`,\n    );\n  if (!options.response) return;\n  if (options.response.repairs > 0)\n    invariant(\n      agent?.resumable ?? !!(agent?.conversations || agent?.storage),\n      \"Response repair requires an adapter that supports continuation\",\n    );\n  const brief = options.brief;\n  const text = brief.text ?? (await readFile(resolve(brief.file!), \"utf8\"));\n  const resolved = text.replace(/\\{\\{\\s*(\\w+)\\s*\\}\\}/g, (token, key: string) =>\n    brief.values?.[key] === undefined ? token : String(brief.values[key]),\n  );\n  invariant(\n    resolved.includes(`<${options.response.tag}>`),\n    `Brief must request an opening <${options.response.tag}> tag`,\n  );\n}\n"]}

package/dist/application/dispatch.js

@@ -5,19 +5,24 @@ import { continuationConfiguration } from "./continuation.js";
 import { preflightDispatch } from "./dispatch-validation.js";
 import { executionDefaults } from "./execution.constants.js";
 import { notify } from "./observation.js";
+import { observeDispatch } from "./dispatch-observation.js";
 import { createSandbox } from "./sandbox.js";
 export async function dispatch(options) {
+    const { telemetry: _telemetry, ...configuration } = options;
+    return observeDispatch(options, (observed) => dispatchOperation({ ...configuration, ...observed }, options));
+}
+async function dispatchOperation(options, original) {
     options.signal?.throwIfAborted();
     await preflightDispatch(options, options.workspace?.repository ?? options.repository ?? process.cwd(), options.agent);
     if ((options.passes ?? executionDefaults.passes) > 1) {
         const outputs = [];
         for (let index = 0; index < options.passes; index++) {
             options.signal?.throwIfAborted();
-            const output = await dispatch({
+            const output = await dispatchOperation({
                 ...options,
                 passes: 1,
                 observe: (event) => notify(options.observe, { ...event, pass: index + 1 }),
-            });
+            }, original);
             outputs.push(output);
             if (output.completed)
                 break;
@@ -41,7 +46,7 @@ export async function dispatch(options) {
         await storage.locate(options.continuation.id, options.workspace?.repository ?? options.repository ?? process.cwd(), options.conversationHome);
     }
     const sandbox = await createSandbox(options);
-    const { brief: _brief, response: _response, continuation: _continuation, passes: _passes, ...configuration } = options;
+    const { brief: _brief, response: _response, continuation: _continuation, passes: _passes, ...configuration } = original;
     let successful = false;
     try {
         const output = await sandbox.dispatch(options);

package/dist/application/dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/application/dispatch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAM1C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAA4D;IAE5D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,CACrB,OAAO,EACP,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EACpE,OAAO,CAAC,KAAK,CACd,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAO,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,GAAG,OAAO;gBACV,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM;QAC9B,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC7B,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrD,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YAChD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBAClE,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;aACD,CAAC;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,SAAS,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;QACzE,MAAM,OAAO,CAAC,MAAM,CAClB,OAAO,CAAC,YAAY,CAAC,EAAE,EACvB,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EACpE,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EACJ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,EACnB,YAAY,EAAE,aAAa,EAC3B,MAAM,EAAE,OAAO,EACf,GAAG,aAAa,EACjB,GAAG,OAAO,CAAC;IACZ,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACpC,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,OAAO;YACL,GAAG,MAAM;YACT,GAAG,QAAQ;YACX,MAAM,CAAI,IAA4B;gBACpC,SAAS,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;gBACvD,OAAO,QAAQ,CAAC;oBACd,GAAG,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC;oBACjD,GAAG,IAAI;oBACP,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAI,IAA4B;gBAClC,SAAS,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;gBACvD,OAAO,QAAQ,CAAC;oBACd,GAAG,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC;oBACjD,GAAG,IAAI;oBACP,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE;iBAC/C,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,EAAE;YACpB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;SACvC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC","sourcesContent":["import type { RequiredAgent, Usage } from \"../domain/agent.types.ts\";\nimport { invariant, recordRecovery } from \"../domain/errors.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport { storageFor } from \"./agent-storage.ts\";\nimport { continuationConfiguration } from \"./continuation.ts\";\nimport { preflightDispatch } from \"./dispatch-validation.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\nimport type {\n  ContinuationOptions,\n  DispatchResult,\n  SandboxOptions,\n} from \"./outpost.types.ts\";\nimport { createSandbox } from \"./sandbox.ts\";\n\nexport async function dispatch<T = undefined>(\n  options: SandboxOptions & DispatchOptions<T> & RequiredAgent,\n): Promise<DispatchResult<T>> {\n  options.signal?.throwIfAborted();\n  await preflightDispatch(\n    options,\n    options.workspace?.repository ?? options.repository ?? process.cwd(),\n    options.agent,\n  );\n  if ((options.passes ?? executionDefaults.passes) > 1) {\n    const outputs: DispatchResult<T>[] = [];\n    for (let index = 0; index < options.passes!; index++) {\n      options.signal?.throwIfAborted();\n      const output = await dispatch({\n        ...options,\n        passes: 1,\n        observe: (event) =>\n          notify(options.observe, { ...event, pass: index + 1 }),\n      });\n      outputs.push(output);\n      if (output.completed) break;\n    }\n    const last = outputs.at(-1)!;\n    return {\n      ...last,\n      text: outputs.map((output) => output.text).join(\"\\n\"),\n      turns: outputs.flatMap((output) => output.turns),\n      commits: outputs.flatMap((output) => output.commits),\n      usage: outputs.reduce((sum, output) => addUsage(sum, output.usage), {\n        input: 0,\n        cached: 0,\n        output: 0,\n      } as Usage),\n    };\n  }\n  if (options.continuation) {\n    const storage = storageFor(options.agent);\n    invariant(storage, \"This adapter does not support native conversations\");\n    await storage.locate(\n      options.continuation.id,\n      options.workspace?.repository ?? options.repository ?? process.cwd(),\n      options.conversationHome,\n    );\n  }\n  const sandbox = await createSandbox(options);\n  const {\n    brief: _brief,\n    response: _response,\n    continuation: _continuation,\n    passes: _passes,\n    ...configuration\n  } = options;\n  let successful = false;\n  try {\n    const output = await sandbox.dispatch(options);\n    await sandbox.workspace.integrate();\n    successful = true;\n    const disposed = await sandbox.close();\n    const continuation = output.conversation;\n    return {\n      ...output,\n      ...disposed,\n      resume<U>(next: ContinuationOptions<U>) {\n        invariant(continuation, \"No conversation was emitted\");\n        return dispatch({\n          ...continuationConfiguration(configuration, next),\n          ...next,\n          continuation: { id: continuation },\n        });\n      },\n      fork<U>(next: ContinuationOptions<U>) {\n        invariant(continuation, \"No conversation was emitted\");\n        return dispatch({\n          ...continuationConfiguration(configuration, next),\n          ...next,\n          continuation: { id: continuation, fork: true },\n        });\n      },\n    };\n  } catch (cause) {\n    recordRecovery(cause, {\n      branch: sandbox.workspace.branch,\n      directory: sandbox.workspace.directory,\n    });\n    throw cause;\n  } finally {\n    if (!successful) await sandbox.close({ preserve: true });\n  }\n}\n"]}
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/application/dispatch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAM1C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAA4D;IAE5D,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAC5D,OAAO,eAAe,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC3C,iBAAiB,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAA4D,EAC5D,QAA6D;IAE7D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,iBAAiB,CACrB,OAAO,EACP,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EACpE,OAAO,CAAC,KAAK,CACd,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAO,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC;gBACE,GAAG,OAAO;gBACV,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;aACzD,EACD,QAAQ,CACT,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM;QAC9B,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC7B,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrD,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YAChD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;YACpD,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBAClE,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;aACD,CAAC;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,SAAS,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;QACzE,MAAM,OAAO,CAAC,MAAM,CAClB,OAAO,CAAC,YAAY,CAAC,EAAE,EACvB,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,EACpE,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,EACJ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,EACnB,YAAY,EAAE,aAAa,EAC3B,MAAM,EAAE,OAAO,EACf,GAAG,aAAa,EACjB,GAAG,QAAQ,CAAC;IACb,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACpC,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,OAAO;YACL,GAAG,MAAM;YACT,GAAG,QAAQ;YACX,MAAM,CAAI,IAA4B;gBACpC,SAAS,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;gBACvD,OAAO,QAAQ,CAAC;oBACd,GAAG,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC;oBACjD,GAAG,IAAI;oBACP,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAI,IAA4B;gBAClC,SAAS,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;gBACvD,OAAO,QAAQ,CAAC;oBACd,GAAG,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC;oBACjD,GAAG,IAAI;oBACP,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE;iBAC/C,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,EAAE;YACpB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;SACvC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC","sourcesContent":["import type { RequiredAgent, Usage } from \"../domain/agent.types.ts\";\nimport { invariant, recordRecovery } from \"../domain/errors.ts\";\nimport { addUsage } from \"../domain/usage.ts\";\nimport { storageFor } from \"./agent-storage.ts\";\nimport { continuationConfiguration } from \"./continuation.ts\";\nimport { preflightDispatch } from \"./dispatch-validation.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { DispatchOptions } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\nimport type {\n  ContinuationOptions,\n  DispatchResult,\n  SandboxOptions,\n} from \"./outpost.types.ts\";\nimport { observeDispatch } from \"./dispatch-observation.ts\";\nimport { createSandbox } from \"./sandbox.ts\";\n\nexport async function dispatch<T = undefined>(\n  options: SandboxOptions & DispatchOptions<T> & RequiredAgent,\n): Promise<DispatchResult<T>> {\n  const { telemetry: _telemetry, ...configuration } = options;\n  return observeDispatch(options, (observed) =>\n    dispatchOperation({ ...configuration, ...observed }, options),\n  );\n}\n\nasync function dispatchOperation<T>(\n  options: SandboxOptions & DispatchOptions<T> & RequiredAgent,\n  original: SandboxOptions & DispatchOptions<T> & RequiredAgent,\n): Promise<DispatchResult<T>> {\n  options.signal?.throwIfAborted();\n  await preflightDispatch(\n    options,\n    options.workspace?.repository ?? options.repository ?? process.cwd(),\n    options.agent,\n  );\n  if ((options.passes ?? executionDefaults.passes) > 1) {\n    const outputs: DispatchResult<T>[] = [];\n    for (let index = 0; index < options.passes!; index++) {\n      options.signal?.throwIfAborted();\n      const output = await dispatchOperation(\n        {\n          ...options,\n          passes: 1,\n          observe: (event) =>\n            notify(options.observe, { ...event, pass: index + 1 }),\n        },\n        original,\n      );\n      outputs.push(output);\n      if (output.completed) break;\n    }\n    const last = outputs.at(-1)!;\n    return {\n      ...last,\n      text: outputs.map((output) => output.text).join(\"\\n\"),\n      turns: outputs.flatMap((output) => output.turns),\n      commits: outputs.flatMap((output) => output.commits),\n      usage: outputs.reduce((sum, output) => addUsage(sum, output.usage), {\n        input: 0,\n        cached: 0,\n        output: 0,\n      } as Usage),\n    };\n  }\n  if (options.continuation) {\n    const storage = storageFor(options.agent);\n    invariant(storage, \"This adapter does not support native conversations\");\n    await storage.locate(\n      options.continuation.id,\n      options.workspace?.repository ?? options.repository ?? process.cwd(),\n      options.conversationHome,\n    );\n  }\n  const sandbox = await createSandbox(options);\n  const {\n    brief: _brief,\n    response: _response,\n    continuation: _continuation,\n    passes: _passes,\n    ...configuration\n  } = original;\n  let successful = false;\n  try {\n    const output = await sandbox.dispatch(options);\n    await sandbox.workspace.integrate();\n    successful = true;\n    const disposed = await sandbox.close();\n    const continuation = output.conversation;\n    return {\n      ...output,\n      ...disposed,\n      resume<U>(next: ContinuationOptions<U>) {\n        invariant(continuation, \"No conversation was emitted\");\n        return dispatch({\n          ...continuationConfiguration(configuration, next),\n          ...next,\n          continuation: { id: continuation },\n        });\n      },\n      fork<U>(next: ContinuationOptions<U>) {\n        invariant(continuation, \"No conversation was emitted\");\n        return dispatch({\n          ...continuationConfiguration(configuration, next),\n          ...next,\n          continuation: { id: continuation, fork: true },\n        });\n      },\n    };\n  } catch (cause) {\n    recordRecovery(cause, {\n      branch: sandbox.workspace.branch,\n      directory: sandbox.workspace.directory,\n    });\n    throw cause;\n  } finally {\n    if (!successful) await sandbox.close({ preserve: true });\n  }\n}\n"]}

package/dist/application/doctor-image.js

@@ -23,7 +23,7 @@ export async function diagnoseImage(options, execute = executeProcess) {
         unregister();
     }
 }
-async function inspectImage({ provider, agent, image }, execute, signal) {
+async function inspectImage({ sandboxProvider, agent, image }, execute, signal) {
     const directory = await mkdtemp(join(tmpdir(), "outpost-doctor-"));
     const checks = [];
     let lease;
@@ -37,7 +37,7 @@ async function inspectImage({ provider, agent, image }, execute, signal) {
         return execute(command);
     };
     try {
-        lease = await diagnosticContainer(provider, image, doctorDefaults.deadlineMs, tracked).acquire({
+        lease = await diagnosticContainer(sandboxProvider, image, doctorDefaults.deadlineMs, tracked).acquire({
             repository: directory,
             directory,
             gitDirectories: [],
@@ -113,7 +113,7 @@ async function inspectImage({ provider, agent, image }, execute, signal) {
             checks.push({
                 id: "image.cleanup",
                 status: "fail",
-                message: `Cleanup could not be confirmed. Inspect container ${container ?? "creation state"} with ${provider}; temporary workspace retained at ${directory}.`,
+                message: `Cleanup could not be confirmed. Inspect container ${container ?? "creation state"} with ${sandboxProvider}; temporary workspace retained at ${directory}.`,
             });
         if (!retained) {
             try {

package/dist/application/doctor-image.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-image.js","sourceRoot":"","sources":["../../src/application/doctor-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA2B,EAC3B,UAAoB,cAAc;IAElC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,IAAI,EAAE;QAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,UAAU,EAAE,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAsB,EAC9C,OAAiB,EACjB,MAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAA+B,CAAC;IACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAA6B,CAAC;IAClC,MAAM,OAAO,GAAa,CAAC,OAAO,EAAE,EAAE;QACpC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,mBAAmB,CAC/B,QAAQ,EACR,KAAK,EACL,cAAc,CAAC,UAAU,EACzB,OAAO,CACR,CAAC,OAAO,CAAC;YACR,UAAU,EAAE,SAAS;YACrB,SAAS;YACT,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,EAAE;YACb,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC;QACtB,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,SAAS,UAAU,EAAE;gBACzB,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;gBACjD,aAAa,EAAE,MAAM;gBACrB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,WAAW,UAAU,+BAA+B;aAC7D,EACD,MAAM,CACP,CACF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,YAAY;YAChB,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,CAAC,IAAI,EAAE,oCAAoC,CAAC;aACxD;YACD,aAAa,EAAE,MAAM;YACrB,MAAM,EACJ,iEAAiE;SACpE,EACD,MAAM,CACP,CACF,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,WAAW,KAAK,qEAAqE;SAC9F,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM;YAChC,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,WAAW;gBACf,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;;YACA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,GAAG,KAAK,YAAY,cAAc,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,kLAAkL;SACrL,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ;YACV,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,qDAAqD,SAAS,IAAI,gBAAgB,SAAS,QAAQ,qCAAqC,SAAS,GAAG;aAC9J,CAAC,CAAC;QACL,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,iBAAiB;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,wCAAwC,SAAS,GAAG;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { diagnosticContainer } from \"../providers/diagnostic-container.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck, DoctorImageOptions } from \"./doctor.types.ts\";\n\nexport async function diagnoseImage(\n  options: DoctorImageOptions,\n  execute: Executor = executeProcess,\n): Promise<readonly DiagnosticCheck[]> {\n  const stop = new AbortController();\n  const pending = inspectImage(options, execute, stop.signal);\n  const unregister = registerCleanup(async () => {\n    stop.abort(new OutpostError(\"aborted\", \"Image diagnostics interrupted\"));\n    await pending;\n  });\n  try {\n    return await pending;\n  } finally {\n    unregister();\n  }\n}\n\nasync function inspectImage(\n  { provider, agent, image }: DoctorImageOptions,\n  execute: Executor,\n  signal: AbortSignal,\n): Promise<readonly DiagnosticCheck[]> {\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-doctor-\"));\n  const checks: DiagnosticCheck[] = [];\n  let lease: SandboxLease | undefined;\n  let retained = false;\n  let container: string | undefined;\n  const tracked: Executor = (command) => {\n    if (command.arguments?.[0] === \"create\") {\n      const index = command.arguments.indexOf(\"--name\");\n      container = command.arguments[index + 1];\n    }\n    return execute(command);\n  };\n  try {\n    lease = await diagnosticContainer(\n      provider,\n      image,\n      doctorDefaults.deadlineMs,\n      tracked,\n    ).acquire({\n      repository: directory,\n      directory,\n      gitDirectories: [],\n      variables: {},\n      signal,\n    });\n    checks.push({\n      id: \"image.runtime\",\n      status: \"pass\",\n      message:\n        \"Temporary sandbox started with network disabled and an empty workspace.\",\n    });\n    const sandbox = lease;\n    const invoke: Executor = (command) =>\n      sandbox.invoke({ ...command, signal });\n    for (const executable of [\"node\", \"git\"]) {\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: `image.${executable}`,\n            command: { executable, arguments: [\"--version\"] },\n            failureStatus: \"fail\",\n            readVersion: true,\n            remedy: `Install ${executable} in the image and rebuild it.`,\n          },\n          invoke,\n        ),\n      );\n    }\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"image.home\",\n          command: {\n            executable: \"sh\",\n            arguments: [\"-c\", 'test -d \"$HOME\" && test -w \"$HOME\"'],\n          },\n          failureStatus: \"fail\",\n          remedy:\n            \"Check the image user and permissions of the private agent home.\",\n        },\n        invoke,\n      ),\n    );\n    const agentVersion = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n        remedy: `Install ${agent} in the image and rebuild it. This check does not bootstrap agents.`,\n      },\n      invoke,\n    );\n    checks.push(agentVersion);\n    if (agentVersion.status === \"fail\")\n      checks.push({\n        id: \"agent.cli\",\n        status: \"skipped\",\n        message: \"CLI help checks require a successful agent version probe.\",\n      });\n    else checks.push(...(await diagnoseAgentCli(agent, invoke)));\n  } catch (error) {\n    retained = error instanceof AggregateError;\n    checks.push({\n      id: \"image.runtime\",\n      status: \"fail\",\n      message:\n        \"Image diagnostics could not start. Check that the image exists locally, its UID matches the host, and sh, sleep, setsid, kill, tar and cp are installed. No image is downloaded.\",\n    });\n  } finally {\n    if (lease) {\n      try {\n        await lease.release();\n        checks.push({\n          id: \"image.cleanup\",\n          status: \"pass\",\n          message: \"Diagnostic container removed.\",\n        });\n      } catch {\n        retained = true;\n      }\n    }\n    if (retained)\n      checks.push({\n        id: \"image.cleanup\",\n        status: \"fail\",\n        message: `Cleanup could not be confirmed. Inspect container ${container ?? \"creation state\"} with ${provider}; temporary workspace retained at ${directory}.`,\n      });\n    if (!retained) {\n      try {\n        await rm(directory, { recursive: true, force: true });\n      } catch {\n        checks.push({\n          id: \"image.workspace\",\n          status: \"fail\",\n          message: `Could not remove temporary workspace ${directory}.`,\n        });\n      }\n    }\n  }\n  return checks;\n}\n"]}
+{"version":3,"file":"doctor-image.js","sourceRoot":"","sources":["../../src/application/doctor-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA2B,EAC3B,UAAoB,cAAc;IAElC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,IAAI,EAAE;QAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,UAAU,EAAE,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAsB,EACrD,OAAiB,EACjB,MAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAA+B,CAAC;IACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAA6B,CAAC;IAClC,MAAM,OAAO,GAAa,CAAC,OAAO,EAAE,EAAE;QACpC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,mBAAmB,CAC/B,eAAe,EACf,KAAK,EACL,cAAc,CAAC,UAAU,EACzB,OAAO,CACR,CAAC,OAAO,CAAC;YACR,UAAU,EAAE,SAAS;YACrB,SAAS;YACT,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,EAAE;YACb,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC;QACtB,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,SAAS,UAAU,EAAE;gBACzB,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;gBACjD,aAAa,EAAE,MAAM;gBACrB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,WAAW,UAAU,+BAA+B;aAC7D,EACD,MAAM,CACP,CACF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,YAAY;YAChB,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,CAAC,IAAI,EAAE,oCAAoC,CAAC;aACxD;YACD,aAAa,EAAE,MAAM;YACrB,MAAM,EACJ,iEAAiE;SACpE,EACD,MAAM,CACP,CACF,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,WAAW,KAAK,qEAAqE;SAC9F,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM;YAChC,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,WAAW;gBACf,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;;YACA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,GAAG,KAAK,YAAY,cAAc,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EACL,kLAAkL;SACrL,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,eAAe;oBACnB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,+BAA+B;iBACzC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ;YACV,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,qDAAqD,SAAS,IAAI,gBAAgB,SAAS,eAAe,qCAAqC,SAAS,GAAG;aACrK,CAAC,CAAC;QACL,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,iBAAiB;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,wCAAwC,SAAS,GAAG;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { diagnosticContainer } from \"../providers/diagnostic-container.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck, DoctorImageOptions } from \"./doctor.types.ts\";\n\nexport async function diagnoseImage(\n  options: DoctorImageOptions,\n  execute: Executor = executeProcess,\n): Promise<readonly DiagnosticCheck[]> {\n  const stop = new AbortController();\n  const pending = inspectImage(options, execute, stop.signal);\n  const unregister = registerCleanup(async () => {\n    stop.abort(new OutpostError(\"aborted\", \"Image diagnostics interrupted\"));\n    await pending;\n  });\n  try {\n    return await pending;\n  } finally {\n    unregister();\n  }\n}\n\nasync function inspectImage(\n  { sandboxProvider, agent, image }: DoctorImageOptions,\n  execute: Executor,\n  signal: AbortSignal,\n): Promise<readonly DiagnosticCheck[]> {\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-doctor-\"));\n  const checks: DiagnosticCheck[] = [];\n  let lease: SandboxLease | undefined;\n  let retained = false;\n  let container: string | undefined;\n  const tracked: Executor = (command) => {\n    if (command.arguments?.[0] === \"create\") {\n      const index = command.arguments.indexOf(\"--name\");\n      container = command.arguments[index + 1];\n    }\n    return execute(command);\n  };\n  try {\n    lease = await diagnosticContainer(\n      sandboxProvider,\n      image,\n      doctorDefaults.deadlineMs,\n      tracked,\n    ).acquire({\n      repository: directory,\n      directory,\n      gitDirectories: [],\n      variables: {},\n      signal,\n    });\n    checks.push({\n      id: \"image.runtime\",\n      status: \"pass\",\n      message:\n        \"Temporary sandbox started with network disabled and an empty workspace.\",\n    });\n    const sandbox = lease;\n    const invoke: Executor = (command) =>\n      sandbox.invoke({ ...command, signal });\n    for (const executable of [\"node\", \"git\"]) {\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: `image.${executable}`,\n            command: { executable, arguments: [\"--version\"] },\n            failureStatus: \"fail\",\n            readVersion: true,\n            remedy: `Install ${executable} in the image and rebuild it.`,\n          },\n          invoke,\n        ),\n      );\n    }\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"image.home\",\n          command: {\n            executable: \"sh\",\n            arguments: [\"-c\", 'test -d \"$HOME\" && test -w \"$HOME\"'],\n          },\n          failureStatus: \"fail\",\n          remedy:\n            \"Check the image user and permissions of the private agent home.\",\n        },\n        invoke,\n      ),\n    );\n    const agentVersion = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n        remedy: `Install ${agent} in the image and rebuild it. This check does not bootstrap agents.`,\n      },\n      invoke,\n    );\n    checks.push(agentVersion);\n    if (agentVersion.status === \"fail\")\n      checks.push({\n        id: \"agent.cli\",\n        status: \"skipped\",\n        message: \"CLI help checks require a successful agent version probe.\",\n      });\n    else checks.push(...(await diagnoseAgentCli(agent, invoke)));\n  } catch (error) {\n    retained = error instanceof AggregateError;\n    checks.push({\n      id: \"image.runtime\",\n      status: \"fail\",\n      message:\n        \"Image diagnostics could not start. Check that the image exists locally, its UID matches the host, and sh, sleep, setsid, kill, tar and cp are installed. No image is downloaded.\",\n    });\n  } finally {\n    if (lease) {\n      try {\n        await lease.release();\n        checks.push({\n          id: \"image.cleanup\",\n          status: \"pass\",\n          message: \"Diagnostic container removed.\",\n        });\n      } catch {\n        retained = true;\n      }\n    }\n    if (retained)\n      checks.push({\n        id: \"image.cleanup\",\n        status: \"fail\",\n        message: `Cleanup could not be confirmed. Inspect container ${container ?? \"creation state\"} with ${sandboxProvider}; temporary workspace retained at ${directory}.`,\n      });\n    if (!retained) {\n      try {\n        await rm(directory, { recursive: true, force: true });\n      } catch {\n        checks.push({\n          id: \"image.workspace\",\n          status: \"fail\",\n          message: `Could not remove temporary workspace ${directory}.`,\n        });\n      }\n    }\n  }\n  return checks;\n}\n"]}

package/dist/application/doctor-protocol.js

@@ -1,11 +1,16 @@
 import { isDeepStrictEqual } from "node:util";
-import { claude } from "../adapters/agents/claude-adapter.js";
-import { codex } from "../adapters/agents/codex-adapter.js";
-import { gemini } from "../adapters/agents/gemini-adapter.js";
+import { claudeHarness } from "../adapters/agents/claude-adapter.js";
+import { codexHarness } from "../adapters/agents/codex-adapter.js";
+import { geminiHarness } from "../adapters/agents/gemini-adapter.js";
 import { protocolFixtures } from "../adapters/agents/protocol-fixtures.constants.js";
 import { agentVersions } from "../providers/versions.constants.js";
 export function diagnoseAgentProtocol(agent) {
-    const adapter = { claude, codex, gemini }[agent]();
+    const adapter = {
+        claude: claudeHarness,
+        codex: codexHarness,
+        gemini: geminiHarness,
+    }[agent]()
+        .bind();
     const checks = protocolFixtures[agent].map((fixture) => {
         const events = fixture.lines.flatMap((line) => adapter.events(line));
         const passed = isDeepStrictEqual(events, fixture.expected);

package/dist/application/doctor-protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-protocol.js","sourceRoot":"","sources":["../../src/application/doctor-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAInE,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAsB,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,iHAAiH;gBACnH,CAAC,CAAC,6EAA6E;SAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,2BAA2B;QAClC,KAAK;QACL,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;QACtC,YAAY,EAAE,YAAY;QAC1B,kBAAkB,EAAE,YAAY;QAChC,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { isDeepStrictEqual } from \"node:util\";\nimport { claude } from \"../adapters/agents/claude-adapter.ts\";\nimport { codex } from \"../adapters/agents/codex-adapter.ts\";\nimport { gemini } from \"../adapters/agents/gemini-adapter.ts\";\nimport { protocolFixtures } from \"../adapters/agents/protocol-fixtures.constants.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport type { AgentProtocolReport } from \"./doctor-protocol.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport function diagnoseAgentProtocol(agent: DoctorAgent): AgentProtocolReport {\n  const adapter = { claude, codex, gemini }[agent]();\n  const checks: DiagnosticCheck[] = protocolFixtures[agent].map((fixture) => {\n    const events = fixture.lines.flatMap((line) => adapter.events(line));\n    const passed = isDeepStrictEqual(events, fixture.expected);\n    return {\n      id: `protocol.fixture.${fixture.name}`,\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Bundled synthetic events decode to the expected structural observations. No installed CLI or model was invoked.\"\n        : \"Bundled synthetic events do not match the expected structural observations.\",\n    };\n  });\n  return {\n    scope: \"bundled-protocol-fixtures\",\n    agent,\n    referenceVersion: agentVersions[agent],\n    installedCli: \"unverified\",\n    modelCompatibility: \"unverified\",\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}
+{"version":3,"file":"doctor-protocol.js","sourceRoot":"","sources":["../../src/application/doctor-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAInE,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,aAAa;KACtB,CACE,KAAK,CAAC,EAAE;SACR,IAAI,EAAE,CAAC;IACV,MAAM,MAAM,GAAsB,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,iHAAiH;gBACnH,CAAC,CAAC,6EAA6E;SAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,2BAA2B;QAClC,KAAK;QACL,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;QACtC,YAAY,EAAE,YAAY;QAC1B,kBAAkB,EAAE,YAAY;QAChC,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { isDeepStrictEqual } from \"node:util\";\nimport { claudeHarness } from \"../adapters/agents/claude-adapter.ts\";\nimport { codexHarness } from \"../adapters/agents/codex-adapter.ts\";\nimport { geminiHarness } from \"../adapters/agents/gemini-adapter.ts\";\nimport { protocolFixtures } from \"../adapters/agents/protocol-fixtures.constants.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport type { AgentProtocolReport } from \"./doctor-protocol.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport function diagnoseAgentProtocol(agent: DoctorAgent): AgentProtocolReport {\n  const adapter = {\n    claude: claudeHarness,\n    codex: codexHarness,\n    gemini: geminiHarness,\n  }\n    [agent]()\n    .bind();\n  const checks: DiagnosticCheck[] = protocolFixtures[agent].map((fixture) => {\n    const events = fixture.lines.flatMap((line) => adapter.events(line));\n    const passed = isDeepStrictEqual(events, fixture.expected);\n    return {\n      id: `protocol.fixture.${fixture.name}`,\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Bundled synthetic events decode to the expected structural observations. No installed CLI or model was invoked.\"\n        : \"Bundled synthetic events do not match the expected structural observations.\",\n    };\n  });\n  return {\n    scope: \"bundled-protocol-fixtures\",\n    agent,\n    referenceVersion: agentVersions[agent],\n    installedCli: \"unverified\",\n    modelCompatibility: \"unverified\",\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor-sandbox.js

@@ -95,11 +95,11 @@ export async function diagnoseSandbox(target, options = {}) {
     return {
         scope: "owned-sandbox",
         ownership: "caller",
-        ...(options.provider
+        ...(options.sandboxProvider
             ? {
-                provider: {
-                    name: options.provider.name,
-                    placement: options.provider.placement,
+                sandboxProvider: {
+                    name: options.sandboxProvider.name,
+                    placement: options.sandboxProvider.placement,
                 },
             }
             : {}),

package/dist/application/doctor-sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-sandbox.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA8B,EAC9B,UAAoC,EAAE;IAEtC,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;IACnE,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1B,UAAU,GAAG,CAAC;QACd,UAAU,IAAI,yBAAyB,CAAC,iBAAiB,EAC3D,0DAA0D,CAC3D,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO;YACV,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,WAAW,UAAU,EAAE;YAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACjD,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,UAAU,mBAAmB;SACjD,EACD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAClC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,sEAAsE;SAC3E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;SAC/D;QACD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,qDAAqD;KAC9D,EACD,MAAM,CACP,CACF,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAChE,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,+DAA+D;SACxE,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAC5B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,iBAAiB,CACzB,MAAM,EACN,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrE,MAAM,CACP,CAAC,CACH,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,oHAAoH;KACvH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,YAAqB,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB,CAAC;IACzE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;iBACtC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;aACtC;YACD;gBACE,EAAE,EAAE,WAAW;gBACf,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,CAAC;aACxC;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC9C,QAAQ,EAAE,YAAY;aACvB;YACD;gBACE,EAAE,EAAE,qBAAqB;gBACzB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,YAAY;aACvB;SACF;QACD,MAAM;QACN,kBAAkB,EAAE,YAAY;QAChC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { diagnoseTransfers } from \"./doctor-transfers.ts\";\nimport { sandboxDiagnosticDefaults } from \"./doctor-sandbox.constants.ts\";\nimport type {\n  SandboxDiagnosticOptions,\n  SandboxDiagnosticReport,\n} from \"./doctor-sandbox.types.ts\";\nimport type { Sandbox } from \"./outpost.types.ts\";\n\nexport async function diagnoseSandbox(\n  target: Sandbox | SandboxLease,\n  options: SandboxDiagnosticOptions = {},\n): Promise<SandboxDiagnosticReport> {\n  if (\"diagnose\" in target) return target.diagnose(options);\n  const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;\n  invariant(\n    Number.isInteger(deadlineMs) &&\n      deadlineMs > 0 &&\n      deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs,\n    \"Diagnostic deadlineMs must be an integer from 1 to 60000\",\n  );\n  options.signal?.throwIfAborted();\n  const invoke: Executor = (command) => {\n    options.signal?.throwIfAborted();\n    return target.invoke({\n      ...command,\n      deadlineMs,\n      retain: command.retain ?? doctorDefaults.retain,\n      signal: options.signal\n        ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])\n        : AbortSignal.timeout(deadlineMs),\n    });\n  };\n  const checks: DiagnosticCheck[] = [];\n  for (const executable of [\"node\", \"git\"]) {\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: `sandbox.${executable}`,\n          command: { executable, arguments: [\"--version\"] },\n          readVersion: true,\n          failureStatus: \"fail\",\n          remedy: `Install ${executable} in this sandbox.`,\n        },\n        invoke,\n      ),\n    );\n  }\n  try {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", sandboxDiagnosticDefaults.command],\n    });\n    const passed =\n      result.status === 7 &&\n      result.stdout === \"outpost-stdout\" &&\n      result.stderr === \"outpost-stderr\";\n    checks.push({\n      id: \"sandbox.command\",\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Observed separate output streams and nonzero process exit status.\"\n        : \"Command output or exit status did not match the diagnostic sentinel.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.command\",\n      status: \"fail\",\n      message: \"Bounded command probe failed or was interrupted.\",\n    });\n  }\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"sandbox.home\",\n        command: {\n          executable: \"node\",\n          arguments: [\"-e\", sandboxDiagnosticDefaults.home, target.home],\n        },\n        failureStatus: \"fail\",\n        remedy: \"Check the lease home directory and its permissions.\",\n      },\n      invoke,\n    ),\n  );\n  if (options.agent) {\n    const version = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: options.agent, arguments: [\"--version\"] },\n        readVersion: true,\n        referenceVersion: agentVersions[options.agent],\n        failureStatus: \"fail\",\n        remedy: \"Install the agent explicitly; diagnostics never bootstrap it.\",\n      },\n      invoke,\n    );\n    checks.push(version);\n    if (version.status !== \"fail\")\n      checks.push(...(await diagnoseAgentCli(options.agent, invoke)));\n  }\n  if (options.transfers === true)\n    checks.push(\n      ...(await diagnoseTransfers(\n        target,\n        { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) },\n        invoke,\n      )),\n    );\n  checks.push({\n    id: \"model\",\n    status: \"skipped\",\n    message:\n      \"Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.\",\n  });\n  const observed = (id: string) => {\n    const check = checks.find((check) => check.id === id);\n    if (!check) return \"unverified\" as const;\n    return check.status === \"pass\" ? (\"pass\" as const) : (\"fail\" as const);\n  };\n  return {\n    scope: \"owned-sandbox\",\n    ownership: \"caller\",\n    ...(options.provider\n      ? {\n          provider: {\n            name: options.provider.name,\n            placement: options.provider.placement,\n          },\n        }\n      : {}),\n    capabilities: [\n      {\n        id: \"command\",\n        advertised: true,\n        observed: observed(\"sandbox.command\"),\n      },\n      {\n        id: \"transfers\",\n        advertised: true,\n        observed: observed(\"sandbox.transfers\"),\n      },\n      {\n        id: \"batchTransfers\",\n        advertised: target.fileTransfers !== undefined,\n        observed: \"unverified\",\n      },\n      {\n        id: \"interactiveTerminal\",\n        advertised: \"unknown\",\n        observed: \"unverified\",\n      },\n    ],\n    checks,\n    modelCompatibility: \"unverified\",\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}
+{"version":3,"file":"doctor-sandbox.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA8B,EAC9B,UAAoC,EAAE;IAEtC,IAAI,UAAU,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC;IACnE,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1B,UAAU,GAAG,CAAC;QACd,UAAU,IAAI,yBAAyB,CAAC,iBAAiB,EAC3D,0DAA0D,CAC3D,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,OAAO;YACV,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,WAAW,UAAU,EAAE;YAC3B,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACjD,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,UAAU,mBAAmB;SACjD,EACD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAClC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,mEAAmE;gBACrE,CAAC,CAAC,sEAAsE;SAC3E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;SAC/D;QACD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,qDAAqD;KAC9D,EACD,MAAM,CACP,CACF,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAChE,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,+DAA+D;SACxE,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAC5B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,iBAAiB,CACzB,MAAM,EACN,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrE,MAAM,CACP,CAAC,CACH,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,oHAAoH;KACvH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,YAAqB,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,MAAgB,CAAC;IACzE,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC;gBACE,eAAe,EAAE;oBACf,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI;oBAClC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,SAAS;iBAC7C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;aACtC;YACD;gBACE,EAAE,EAAE,WAAW;gBACf,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,CAAC;aACxC;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC9C,QAAQ,EAAE,YAAY;aACvB;YACD;gBACE,EAAE,EAAE,qBAAqB;gBACzB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,YAAY;aACvB;SACF;QACD,MAAM;QACN,kBAAkB,EAAE,YAAY;QAChC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseAgentCli } from \"./doctor-agent.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults } from \"./doctor.constants.ts\";\nimport type { DiagnosticCheck } from \"./doctor.types.ts\";\nimport { diagnoseTransfers } from \"./doctor-transfers.ts\";\nimport { sandboxDiagnosticDefaults } from \"./doctor-sandbox.constants.ts\";\nimport type {\n  SandboxDiagnosticOptions,\n  SandboxDiagnosticReport,\n} from \"./doctor-sandbox.types.ts\";\nimport type { Sandbox } from \"./outpost.types.ts\";\n\nexport async function diagnoseSandbox(\n  target: Sandbox | SandboxLease,\n  options: SandboxDiagnosticOptions = {},\n): Promise<SandboxDiagnosticReport> {\n  if (\"diagnose\" in target) return target.diagnose(options);\n  const deadlineMs = options.deadlineMs ?? doctorDefaults.deadlineMs;\n  invariant(\n    Number.isInteger(deadlineMs) &&\n      deadlineMs > 0 &&\n      deadlineMs <= sandboxDiagnosticDefaults.maximumDeadlineMs,\n    \"Diagnostic deadlineMs must be an integer from 1 to 60000\",\n  );\n  options.signal?.throwIfAborted();\n  const invoke: Executor = (command) => {\n    options.signal?.throwIfAborted();\n    return target.invoke({\n      ...command,\n      deadlineMs,\n      retain: command.retain ?? doctorDefaults.retain,\n      signal: options.signal\n        ? AbortSignal.any([options.signal, AbortSignal.timeout(deadlineMs)])\n        : AbortSignal.timeout(deadlineMs),\n    });\n  };\n  const checks: DiagnosticCheck[] = [];\n  for (const executable of [\"node\", \"git\"]) {\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: `sandbox.${executable}`,\n          command: { executable, arguments: [\"--version\"] },\n          readVersion: true,\n          failureStatus: \"fail\",\n          remedy: `Install ${executable} in this sandbox.`,\n        },\n        invoke,\n      ),\n    );\n  }\n  try {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", sandboxDiagnosticDefaults.command],\n    });\n    const passed =\n      result.status === 7 &&\n      result.stdout === \"outpost-stdout\" &&\n      result.stderr === \"outpost-stderr\";\n    checks.push({\n      id: \"sandbox.command\",\n      status: passed ? \"pass\" : \"fail\",\n      message: passed\n        ? \"Observed separate output streams and nonzero process exit status.\"\n        : \"Command output or exit status did not match the diagnostic sentinel.\",\n    });\n  } catch {\n    checks.push({\n      id: \"sandbox.command\",\n      status: \"fail\",\n      message: \"Bounded command probe failed or was interrupted.\",\n    });\n  }\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"sandbox.home\",\n        command: {\n          executable: \"node\",\n          arguments: [\"-e\", sandboxDiagnosticDefaults.home, target.home],\n        },\n        failureStatus: \"fail\",\n        remedy: \"Check the lease home directory and its permissions.\",\n      },\n      invoke,\n    ),\n  );\n  if (options.agent) {\n    const version = await diagnosticProbe(\n      {\n        id: \"agent.sandbox\",\n        command: { executable: options.agent, arguments: [\"--version\"] },\n        readVersion: true,\n        referenceVersion: agentVersions[options.agent],\n        failureStatus: \"fail\",\n        remedy: \"Install the agent explicitly; diagnostics never bootstrap it.\",\n      },\n      invoke,\n    );\n    checks.push(version);\n    if (version.status !== \"fail\")\n      checks.push(...(await diagnoseAgentCli(options.agent, invoke)));\n  }\n  if (options.transfers === true)\n    checks.push(\n      ...(await diagnoseTransfers(\n        target,\n        { deadlineMs, ...(options.signal ? { signal: options.signal } : {}) },\n        invoke,\n      )),\n    );\n  checks.push({\n    id: \"model\",\n    status: \"skipped\",\n    message:\n      \"Authentication, model access and installed agent protocol compatibility are unverified. No model request was made.\",\n  });\n  const observed = (id: string) => {\n    const check = checks.find((check) => check.id === id);\n    if (!check) return \"unverified\" as const;\n    return check.status === \"pass\" ? (\"pass\" as const) : (\"fail\" as const);\n  };\n  return {\n    scope: \"owned-sandbox\",\n    ownership: \"caller\",\n    ...(options.sandboxProvider\n      ? {\n          sandboxProvider: {\n            name: options.sandboxProvider.name,\n            placement: options.sandboxProvider.placement,\n          },\n        }\n      : {}),\n    capabilities: [\n      {\n        id: \"command\",\n        advertised: true,\n        observed: observed(\"sandbox.command\"),\n      },\n      {\n        id: \"transfers\",\n        advertised: true,\n        observed: observed(\"sandbox.transfers\"),\n      },\n      {\n        id: \"batchTransfers\",\n        advertised: target.fileTransfers !== undefined,\n        observed: \"unverified\",\n      },\n      {\n        id: \"interactiveTerminal\",\n        advertised: \"unknown\",\n        observed: \"unverified\",\n      },\n    ],\n    checks,\n    modelCompatibility: \"unverified\",\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}

package/dist/application/doctor-sandbox.types.d.ts

@@ -5,7 +5,7 @@ export interface SandboxDiagnosticOptions {
     readonly deadlineMs?: number;
     readonly signal?: AbortSignal;
     readonly transfers?: boolean;
-    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+    readonly sandboxProvider?: Pick<SandboxProvider, "name" | "placement">;
 }
 export interface DiagnosticCapability {
     readonly id: "command" | "transfers" | "batchTransfers" | "interactiveTerminal";
@@ -15,7 +15,7 @@ export interface DiagnosticCapability {
 export interface SandboxDiagnosticReport {
     readonly scope: "owned-sandbox";
     readonly ownership: "caller";
-    readonly provider?: Pick<SandboxProvider, "name" | "placement">;
+    readonly sandboxProvider?: Pick<SandboxProvider, "name" | "placement">;
     readonly capabilities: readonly DiagnosticCapability[];
     readonly checks: readonly DiagnosticCheck[];
     readonly modelCompatibility: "unverified";

package/dist/application/doctor-sandbox.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-sandbox.types.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport interface SandboxDiagnosticOptions {\n  readonly agent?: DoctorAgent;\n  readonly deadlineMs?: number;\n  readonly signal?: AbortSignal;\n  readonly transfers?: boolean;\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n}\n\nexport interface DiagnosticCapability {\n  readonly id:\n    \"command\" | \"transfers\" | \"batchTransfers\" | \"interactiveTerminal\";\n  readonly advertised: boolean | \"unknown\";\n  readonly observed: \"pass\" | \"fail\" | \"unverified\";\n}\n\nexport interface SandboxDiagnosticReport {\n  readonly scope: \"owned-sandbox\";\n  readonly ownership: \"caller\";\n  readonly provider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n  readonly capabilities: readonly DiagnosticCapability[];\n  readonly checks: readonly DiagnosticCheck[];\n  readonly modelCompatibility: \"unverified\";\n  readonly hasFailures: boolean;\n}\n"]}
+{"version":3,"file":"doctor-sandbox.types.js","sourceRoot":"","sources":["../../src/application/doctor-sandbox.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { DiagnosticCheck, DoctorAgent } from \"./doctor.types.ts\";\n\nexport interface SandboxDiagnosticOptions {\n  readonly agent?: DoctorAgent;\n  readonly deadlineMs?: number;\n  readonly signal?: AbortSignal;\n  readonly transfers?: boolean;\n  readonly sandboxProvider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n}\n\nexport interface DiagnosticCapability {\n  readonly id:\n    \"command\" | \"transfers\" | \"batchTransfers\" | \"interactiveTerminal\";\n  readonly advertised: boolean | \"unknown\";\n  readonly observed: \"pass\" | \"fail\" | \"unverified\";\n}\n\nexport interface SandboxDiagnosticReport {\n  readonly scope: \"owned-sandbox\";\n  readonly ownership: \"caller\";\n  readonly sandboxProvider?: Pick<SandboxProvider, \"name\" | \"placement\">;\n  readonly capabilities: readonly DiagnosticCapability[];\n  readonly checks: readonly DiagnosticCheck[];\n  readonly modelCompatibility: \"unverified\";\n  readonly hasFailures: boolean;\n}\n"]}

package/dist/application/doctor.constants.d.ts

@@ -1,6 +1,6 @@
 import type { DoctorProvider, DoctorReport } from "./doctor.types.ts";
 export declare const doctorDefaults: Readonly<{
-    readonly provider: "docker";
+    readonly sandboxProvider: "docker";
     readonly agent: "codex";
     readonly deadlineMs: 5000;
     readonly retain: 4096;

package/dist/application/doctor.constants.js

@@ -1,5 +1,5 @@
 export const doctorDefaults = Object.freeze({
-    provider: "docker",
+    sandboxProvider: "docker",
     agent: "codex",
     deadlineMs: 5_000,
     retain: 4_096,

package/dist/application/doctor.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.constants.js","sourceRoot":"","sources":["../../src/application/doctor.constants.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,QAAQ;IAClB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,EAAE;CACZ,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAK5B;IACF,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE;IACvD,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE;IAC3D,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE;CAC5D,CAAC","sourcesContent":["import type { DoctorProvider, DoctorReport } from \"./doctor.types.ts\";\nexport const doctorDefaults = Object.freeze({\n  provider: \"docker\",\n  agent: \"codex\",\n  deadlineMs: 5_000,\n  retain: 4_096,\n  minimumNodeMajor: 24,\n} as const);\nexport const providerDiagnostics: Readonly<\n  Record<\n    DoctorProvider,\n    Pick<DoctorReport, \"placement\" | \"interactiveTerminal\">\n  >\n> = {\n  docker: { placement: \"mounted\", interactiveTerminal: true },\n  podman: { placement: \"mounted\", interactiveTerminal: true },\n  local: { placement: \"host\", interactiveTerminal: true },\n  vercel: { placement: \"remote\", interactiveTerminal: false },\n  daytona: { placement: \"remote\", interactiveTerminal: true },\n};\n"]}
+{"version":3,"file":"doctor.constants.js","sourceRoot":"","sources":["../../src/application/doctor.constants.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,eAAe,EAAE,QAAQ;IACzB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,EAAE;CACZ,CAAC,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAK5B;IACF,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,EAAE;IAC3D,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE;IACvD,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE;IAC3D,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE;CAC5D,CAAC","sourcesContent":["import type { DoctorProvider, DoctorReport } from \"./doctor.types.ts\";\nexport const doctorDefaults = Object.freeze({\n  sandboxProvider: \"docker\",\n  agent: \"codex\",\n  deadlineMs: 5_000,\n  retain: 4_096,\n  minimumNodeMajor: 24,\n} as const);\nexport const providerDiagnostics: Readonly<\n  Record<\n    DoctorProvider,\n    Pick<DoctorReport, \"placement\" | \"interactiveTerminal\">\n  >\n> = {\n  docker: { placement: \"mounted\", interactiveTerminal: true },\n  podman: { placement: \"mounted\", interactiveTerminal: true },\n  local: { placement: \"host\", interactiveTerminal: true },\n  vercel: { placement: \"remote\", interactiveTerminal: false },\n  daytona: { placement: \"remote\", interactiveTerminal: true },\n};\n"]}

package/dist/application/doctor.js

@@ -5,14 +5,14 @@ import { diagnoseImage } from "./doctor-image.js";
 import { diagnosticProbe } from "./diagnostic-probe.js";
 import { doctorDefaults, providerDiagnostics } from "./doctor.constants.js";
 export async function diagnose(options, execute = executeProcess) {
-    const { provider, agent, image } = options;
+    const { sandboxProvider, agent, image } = options;
     if (image !== undefined) {
-        invariant(provider === "docker" || provider === "podman", "--image requires docker or podman.");
+        invariant(sandboxProvider === "docker" || sandboxProvider === "podman", "--image requires docker or podman.");
         invariant(image.length > 0 &&
             !image.startsWith("-") &&
             !/[\x00-\x20\x7f]/.test(image), "Invalid diagnostic image name.");
     }
-    const capabilities = providerDiagnostics[provider];
+    const capabilities = providerDiagnostics[sandboxProvider];
     const checks = [
         {
             id: "host.node",
@@ -34,9 +34,9 @@ export async function diagnose(options, execute = executeProcess) {
     if (capabilities.placement === "mounted") {
         const engine = await diagnosticProbe({
             id: "provider.cli",
-            command: { executable: provider, arguments: ["--version"] },
+            command: { executable: sandboxProvider, arguments: ["--version"] },
             failureStatus: "fail",
-            remedy: `Install ${provider} and make it available on PATH.`,
+            remedy: `Install ${sandboxProvider} and make it available on PATH.`,
             readVersion: true,
         }, execute);
         checks.push(engine);
@@ -44,11 +44,11 @@ export async function diagnose(options, execute = executeProcess) {
             checks.push(await diagnosticProbe({
                 id: "provider.connection",
                 command: {
-                    executable: provider,
+                    executable: sandboxProvider,
                     arguments: ["info"],
                 },
                 failureStatus: "fail",
-                remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,
+                remedy: `Check ${sandboxProvider} is running and accessible to this user; on macOS, start its virtual machine.`,
             }, execute));
         checks.push(await diagnosticProbe({
             id: "host.tar",
@@ -71,10 +71,11 @@ export async function diagnose(options, execute = executeProcess) {
         readVersion: true,
         referenceVersion: agentVersions[agent],
     }, execute));
-    if (image !== undefined && (provider === "docker" || provider === "podman")) {
+    if (image !== undefined &&
+        (sandboxProvider === "docker" || sandboxProvider === "podman")) {
         const connected = checks.some((check) => check.id === "provider.connection" && check.status === "pass");
         if (connected)
-            checks.push(...(await diagnoseImage({ provider, agent, image }, execute)));
+            checks.push(...(await diagnoseImage({ sandboxProvider, agent, image }, execute)));
         else
             checks.push({
                 id: "image.runtime",

package/dist/application/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/application/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,UAAoB,cAAc;IAElC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,SAAS,CACP,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAC9C,oCAAoC,CACrC,CAAC;QACF,SAAS,CACP,KAAK,CAAC,MAAM,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAChC,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAsB;QAChC;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EACJ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,cAAc,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC9B,OAAO,EAAE,4BAA4B,cAAc,CAAC,gBAAgB,IAAI;SACzE;KACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,4CAA4C;QACpD,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,EAAE,EAAE,cAAc;YAClB,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAC3D,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,QAAQ,iCAAiC;YAC5D,WAAW,EAAE,IAAI;SAClB,EACD,OAAO,CACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAC1B,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,qBAAqB;gBACzB,OAAO,EAAE;oBACP,UAAU,EAAE,QAAQ;oBACpB,SAAS,EAAE,CAAC,MAAM,CAAC;iBACpB;gBACD,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,SAAS,QAAQ,+EAA+E;aACzG,EACD,OAAO,CACR,CACF,CAAC;QACJ,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,oDAAoD;SAC7D,EACD,OAAO,CACR,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,QAAQ;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,gBAAgB;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,wEAAwE;SAC3E,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EACJ,gHAAgH;QAClH,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;KACvC,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CACzE,CAAC;QACF,IAAI,SAAS;YACX,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAC9D,CAAC;;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,mIAAmI;KAC1I,CAAC,CAAC;IACH,OAAO;QACL,GAAG,OAAO;QACV,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;QACtD,GAAG,YAAY;QACf,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseImage } from \"./doctor-image.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults, providerDiagnostics } from \"./doctor.constants.ts\";\nimport type {\n  DiagnosticCheck,\n  DoctorOptions,\n  DoctorReport,\n} from \"./doctor.types.ts\";\n\nexport async function diagnose(\n  options: DoctorOptions,\n  execute: Executor = executeProcess,\n): Promise<DoctorReport> {\n  const { provider, agent, image } = options;\n  if (image !== undefined) {\n    invariant(\n      provider === \"docker\" || provider === \"podman\",\n      \"--image requires docker or podman.\",\n    );\n    invariant(\n      image.length > 0 &&\n        !image.startsWith(\"-\") &&\n        !/[\\x00-\\x20\\x7f]/.test(image),\n      \"Invalid diagnostic image name.\",\n    );\n  }\n  const capabilities = providerDiagnostics[provider];\n  const checks: DiagnosticCheck[] = [\n    {\n      id: \"host.node\",\n      status:\n        Number(process.versions.node.split(\".\")[0]) >=\n        doctorDefaults.minimumNodeMajor\n          ? \"pass\"\n          : \"fail\",\n      version: process.versions.node,\n      message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,\n    },\n  ];\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"host.git\",\n        command: { executable: \"git\", arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: \"Install Git and make it available on PATH.\",\n        readVersion: true,\n      },\n      execute,\n    ),\n  );\n  if (capabilities.placement === \"mounted\") {\n    const engine = await diagnosticProbe(\n      {\n        id: \"provider.cli\",\n        command: { executable: provider, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: `Install ${provider} and make it available on PATH.`,\n        readVersion: true,\n      },\n      execute,\n    );\n    checks.push(engine);\n    if (engine.status === \"pass\")\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: \"provider.connection\",\n            command: {\n              executable: provider,\n              arguments: [\"info\"],\n            },\n            failureStatus: \"fail\",\n            remedy: `Check ${provider} is running and accessible to this user; on macOS, start its virtual machine.`,\n          },\n          execute,\n        ),\n      );\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"host.tar\",\n          command: { executable: \"tar\", arguments: [\"--version\"] },\n          failureStatus: \"fail\",\n          remedy: \"Install GNU tar or bsdtar for container transfers.\",\n        },\n        execute,\n      ),\n    );\n  }\n  if (capabilities.placement === \"remote\")\n    checks.push({\n      id: \"provider.cloud\",\n      status: \"skipped\",\n      message:\n        \"Cloud SDK, credentials, account access and allocation are not checked.\",\n    });\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"agent.host\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"warn\",\n        remedy:\n          \"Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n      },\n      execute,\n    ),\n  );\n  if (image !== undefined && (provider === \"docker\" || provider === \"podman\")) {\n    const connected = checks.some(\n      (check) => check.id === \"provider.connection\" && check.status === \"pass\",\n    );\n    if (connected)\n      checks.push(\n        ...(await diagnoseImage({ provider, agent, image }, execute)),\n      );\n    else\n      checks.push({\n        id: \"image.runtime\",\n        status: \"skipped\",\n        message: \"Image checks require a reachable container engine.\",\n      });\n  }\n  if (capabilities.placement !== \"host\" && image === undefined)\n    checks.push({\n      id: \"agent.sandbox\",\n      status: \"skipped\",\n      message:\n        \"Agent version inside the sandbox is not checked; the host version does not describe the sandbox.\",\n    });\n  checks.push({\n    id: \"execution\",\n    status: \"skipped\",\n    message:\n      image === undefined\n        ? \"Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated.\"\n        : \"Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.\",\n  });\n  return {\n    ...options,\n    scope: image === undefined ? \"host\" : \"host-and-image\",\n    ...capabilities,\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/application/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAO5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,UAAoB,cAAc;IAElC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,SAAS,CACP,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ,EAC5D,oCAAoC,CACrC,CAAC;QACF,SAAS,CACP,KAAK,CAAC,MAAM,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACtB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAChC,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAsB;QAChC;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EACJ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,cAAc,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC9B,OAAO,EAAE,4BAA4B,cAAc,CAAC,gBAAgB,IAAI;SACzE;KACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,4CAA4C;QACpD,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CACR,CACF,CAAC;IACF,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,EAAE,EAAE,cAAc;YAClB,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YAClE,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,WAAW,eAAe,iCAAiC;YACnE,WAAW,EAAE,IAAI;SAClB,EACD,OAAO,CACR,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAC1B,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;gBACE,EAAE,EAAE,qBAAqB;gBACzB,OAAO,EAAE;oBACP,UAAU,EAAE,eAAe;oBAC3B,SAAS,EAAE,CAAC,MAAM,CAAC;iBACpB;gBACD,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,SAAS,eAAe,+EAA+E;aAChH,EACD,OAAO,CACR,CACF,CAAC;QACJ,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;YACE,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;YACxD,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,oDAAoD;SAC7D,EACD,OAAO,CACR,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,QAAQ;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,gBAAgB;YACpB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,wEAAwE;SAC3E,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CACT,MAAM,eAAe,CACnB;QACE,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QACxD,aAAa,EAAE,MAAM;QACrB,MAAM,EACJ,gHAAgH;QAClH,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC;KACvC,EACD,OAAO,CACR,CACF,CAAC;IACF,IACE,KAAK,KAAK,SAAS;QACnB,CAAC,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ,CAAC,EAC9D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CACzE,CAAC;QACF,IAAI,SAAS;YACX,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,aAAa,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CACrE,CAAC;;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;IACP,CAAC;IACD,IAAI,YAAY,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,eAAe;YACnB,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EACL,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,mIAAmI;KAC1I,CAAC,CAAC;IACH,OAAO;QACL,GAAG,OAAO;QACV,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;QACtD,GAAG,YAAY;QACf,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KAC7D,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { agentVersions } from \"../providers/versions.constants.ts\";\nimport { diagnoseImage } from \"./doctor-image.ts\";\nimport { diagnosticProbe } from \"./diagnostic-probe.ts\";\nimport { doctorDefaults, providerDiagnostics } from \"./doctor.constants.ts\";\nimport type {\n  DiagnosticCheck,\n  DoctorOptions,\n  DoctorReport,\n} from \"./doctor.types.ts\";\n\nexport async function diagnose(\n  options: DoctorOptions,\n  execute: Executor = executeProcess,\n): Promise<DoctorReport> {\n  const { sandboxProvider, agent, image } = options;\n  if (image !== undefined) {\n    invariant(\n      sandboxProvider === \"docker\" || sandboxProvider === \"podman\",\n      \"--image requires docker or podman.\",\n    );\n    invariant(\n      image.length > 0 &&\n        !image.startsWith(\"-\") &&\n        !/[\\x00-\\x20\\x7f]/.test(image),\n      \"Invalid diagnostic image name.\",\n    );\n  }\n  const capabilities = providerDiagnostics[sandboxProvider];\n  const checks: DiagnosticCheck[] = [\n    {\n      id: \"host.node\",\n      status:\n        Number(process.versions.node.split(\".\")[0]) >=\n        doctorDefaults.minimumNodeMajor\n          ? \"pass\"\n          : \"fail\",\n      version: process.versions.node,\n      message: `Outpost requires Node.js ${doctorDefaults.minimumNodeMajor}+.`,\n    },\n  ];\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"host.git\",\n        command: { executable: \"git\", arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: \"Install Git and make it available on PATH.\",\n        readVersion: true,\n      },\n      execute,\n    ),\n  );\n  if (capabilities.placement === \"mounted\") {\n    const engine = await diagnosticProbe(\n      {\n        id: \"provider.cli\",\n        command: { executable: sandboxProvider, arguments: [\"--version\"] },\n        failureStatus: \"fail\",\n        remedy: `Install ${sandboxProvider} and make it available on PATH.`,\n        readVersion: true,\n      },\n      execute,\n    );\n    checks.push(engine);\n    if (engine.status === \"pass\")\n      checks.push(\n        await diagnosticProbe(\n          {\n            id: \"provider.connection\",\n            command: {\n              executable: sandboxProvider,\n              arguments: [\"info\"],\n            },\n            failureStatus: \"fail\",\n            remedy: `Check ${sandboxProvider} is running and accessible to this user; on macOS, start its virtual machine.`,\n          },\n          execute,\n        ),\n      );\n    checks.push(\n      await diagnosticProbe(\n        {\n          id: \"host.tar\",\n          command: { executable: \"tar\", arguments: [\"--version\"] },\n          failureStatus: \"fail\",\n          remedy: \"Install GNU tar or bsdtar for container transfers.\",\n        },\n        execute,\n      ),\n    );\n  }\n  if (capabilities.placement === \"remote\")\n    checks.push({\n      id: \"provider.cloud\",\n      status: \"skipped\",\n      message:\n        \"Cloud SDK, credentials, account access and allocation are not checked.\",\n    });\n  checks.push(\n    await diagnosticProbe(\n      {\n        id: \"agent.host\",\n        command: { executable: agent, arguments: [\"--version\"] },\n        failureStatus: \"warn\",\n        remedy:\n          \"Host CLI is unavailable or unverified. A sandbox may have its own CLI; dispatch can bootstrap a missing agent.\",\n        readVersion: true,\n        referenceVersion: agentVersions[agent],\n      },\n      execute,\n    ),\n  );\n  if (\n    image !== undefined &&\n    (sandboxProvider === \"docker\" || sandboxProvider === \"podman\")\n  ) {\n    const connected = checks.some(\n      (check) => check.id === \"provider.connection\" && check.status === \"pass\",\n    );\n    if (connected)\n      checks.push(\n        ...(await diagnoseImage({ sandboxProvider, agent, image }, execute)),\n      );\n    else\n      checks.push({\n        id: \"image.runtime\",\n        status: \"skipped\",\n        message: \"Image checks require a reachable container engine.\",\n      });\n  }\n  if (capabilities.placement !== \"host\" && image === undefined)\n    checks.push({\n      id: \"agent.sandbox\",\n      status: \"skipped\",\n      message:\n        \"Agent version inside the sandbox is not checked; the host version does not describe the sandbox.\",\n    });\n  checks.push({\n    id: \"execution\",\n    status: \"skipped\",\n    message:\n      image === undefined\n        ? \"Images, mounts, repository state, authentication and model access are not tested. No sandbox is allocated.\"\n        : \"Workflow mounts, repository state, authentication and model access are not tested. Image checks use a separate temporary sandbox.\",\n  });\n  return {\n    ...options,\n    scope: image === undefined ? \"host\" : \"host-and-image\",\n    ...capabilities,\n    checks,\n    hasFailures: checks.some((check) => check.status === \"fail\"),\n  };\n}\n"]}