@elie-laloum/outpost 4.2.0 → 6.0.1

package/dist/application/tool-execution.js

@@ -0,0 +1,211 @@
+import { OutpostError } from "../domain/errors.js";
+import { TOOL_PREVIEW_CHARACTERS, TOOL_RESULT_CHARACTERS, } from "../domain/harness.constants.js";
+import { afterTool, beforeTool } from "./harness-hooks.js";
+const toolEvents = new Set(["text", "warning", "raw"]);
+export async function executeToolCalls(runtime, calls, step, loaded) {
+    const tools = new Map(runtime.tools.map((tool) => [tool.name, tool]));
+    const owners = new Map(runtime.agent.harness.skills.flatMap((skill) => skill.tools.map((tool) => [tool.name, skill.name])));
+    const locked = (name) => {
+        const skill = owners.get(name);
+        return skill === undefined || loaded.has(skill) ? undefined : skill;
+    };
+    const prepared = [];
+    for (const call of calls)
+        prepared.push(await prepareCall(runtime, tools, call, step, locked));
+    const outcomes = new Map();
+    for (const batch of batches(prepared)) {
+        const pending = [...batch.calls];
+        const limit = batch.concurrent
+            ? runtime.agent.harness.toolExecution.concurrency
+            : 1;
+        await Promise.all(Array.from({ length: Math.min(limit, pending.length) }, async () => {
+            for (let next = pending.shift(); next; next = pending.shift())
+                outcomes.set(next.call.id, await executeCall(runtime, next));
+        }));
+    }
+    const results = [];
+    for (const { call, outcome } of prepared)
+        results.push(await finish(runtime, call, outcome ?? outcomes.get(call.id), step));
+    return results;
+}
+async function prepareCall(runtime, tools, call, step, locked) {
+    runtime.signal.throwIfAborted();
+    runtime.emit({
+        kind: "tool",
+        name: call.name,
+        input: call.input,
+        callId: call.id,
+    });
+    const tool = tools.get(call.name);
+    if (!tool)
+        return { call, outcome: failed(`Unknown tool: ${call.name}`) };
+    const validated = await validate(tool, call.input, "Invalid input");
+    if ("outcome" in validated)
+        return { call, outcome: validated.outcome };
+    const skill = locked(tool.name);
+    if (skill)
+        return denied(runtime, call, `Load the ${skill} skill with load_skill before using ${tool.name}`);
+    const permitted = permission(runtime, tool, validated.value);
+    if (permitted)
+        return denied(runtime, call, permitted);
+    const decision = await beforeTool(runtime, { ...call, input: validated.value }, step);
+    if ("deny" in decision)
+        return denied(runtime, call, decision.deny);
+    if (decision.input === validated.value)
+        return { call, tool, input: validated.value };
+    const revised = await validate(tool, decision.input, "Hook produced invalid input");
+    if ("outcome" in revised)
+        return { call, outcome: revised.outcome };
+    const revisedPermission = permission(runtime, tool, revised.value);
+    if (revisedPermission)
+        return denied(runtime, call, revisedPermission);
+    return { call, tool, input: revised.value };
+}
+async function validate(tool, input, label) {
+    const validation = await tool.validate(input);
+    if ("issues" in validation)
+        return {
+            outcome: failed(`${label} for ${tool.name}: ${validation.issues}`),
+        };
+    return { value: validation.value };
+}
+function permission(runtime, tool, input) {
+    const permissions = runtime.agent.harness.permissions;
+    if (!permissions)
+        return undefined;
+    const decision = permissions.evaluate(tool.name, tool.resources(input));
+    return decision.allowed ? undefined : decision.reason;
+}
+function denied(runtime, call, reason) {
+    runtime.emit({
+        kind: "tool-denied",
+        callId: call.id,
+        name: call.name,
+        reason,
+    });
+    return { call, outcome: failed(`Denied: ${reason}`) };
+}
+async function finish(runtime, call, outcome, step) {
+    const final = await afterTool(runtime, call, outcome, step, normalized);
+    const content = final.content.length > TOOL_RESULT_CHARACTERS
+        ? `${final.content.slice(0, TOOL_RESULT_CHARACTERS)}\n[truncated ${final.content.length - TOOL_RESULT_CHARACTERS} characters]`
+        : final.content;
+    runtime.emit({
+        kind: "tool-result",
+        callId: call.id,
+        name: call.name,
+        isError: final.isError,
+        preview: content.slice(0, TOOL_PREVIEW_CHARACTERS),
+        characters: final.content.length,
+    });
+    return {
+        type: "tool-result",
+        callId: call.id,
+        content,
+        ...(final.isError ? { isError: true } : {}),
+    };
+}
+function batches(calls) {
+    const grouped = [];
+    for (const prepared of calls) {
+        if (prepared.outcome)
+            continue;
+        const concurrent = prepared.tool.readOnly;
+        const last = grouped.at(-1);
+        if (last?.concurrent && concurrent) {
+            grouped[grouped.length - 1] = {
+                concurrent,
+                calls: [...last.calls, prepared],
+            };
+            continue;
+        }
+        grouped.push({ concurrent, calls: [prepared] });
+    }
+    return grouped;
+}
+async function executeCall(runtime, prepared) {
+    try {
+        return normalized(await runTool(runtime, prepared));
+    }
+    catch (error) {
+        runtime.signal.throwIfAborted();
+        if (runtime.agent.harness.toolExecution.onError === "fail")
+            throw error;
+        return failed(error instanceof Error ? error.message : String(error));
+    }
+}
+async function runTool(runtime, { call, tool, input }) {
+    const { deadlineMs } = runtime.agent.harness.toolExecution;
+    const controller = new AbortController();
+    const signal = AbortSignal.any([runtime.signal, controller.signal]);
+    const timer = setTimeout(() => controller.abort(new OutpostError("timeout", `Tool ${call.name} timed out after ${deadlineMs} ms`)), deadlineMs);
+    const release = runtime.hold();
+    const aborted = new Promise((_, reject) => {
+        const fail = () => reject(signal.reason);
+        if (signal.aborted)
+            fail();
+        signal.addEventListener("abort", fail, { once: true });
+    });
+    const execution = Promise.resolve().then(() => tool.execute(input, {
+        sandbox: scopedLease(runtime.sandbox, signal),
+        signal,
+        callId: call.id,
+        model: runtime.agent.model,
+        observe(event) {
+            signal.throwIfAborted();
+            if (!toolEvents.has(event?.kind))
+                throw new OutpostError("configuration", "Tools may only report text, warning or raw events");
+            runtime.emit(event);
+        },
+    }));
+    execution.catch(() => undefined);
+    aborted.catch(() => undefined);
+    try {
+        return await Promise.race([execution, aborted]);
+    }
+    finally {
+        clearTimeout(timer);
+        controller.abort(new OutpostError("aborted", "Tool call ended"));
+        release();
+    }
+}
+function scopedLease(lease, signal) {
+    const combine = (own) => own ? AbortSignal.any([own, signal]) : signal;
+    return {
+        root: lease.root,
+        home: lease.home,
+        invoke: (command) => {
+            signal.throwIfAborted();
+            return lease.invoke({ ...command, signal: combine(command.signal) });
+        },
+        upload: (source, destination, settings = {}) => {
+            signal.throwIfAborted();
+            return lease.upload(source, destination, {
+                ...settings,
+                signal: combine(settings.signal),
+            });
+        },
+        download: (source, destination, settings = {}) => {
+            signal.throwIfAborted();
+            return lease.download(source, destination, {
+                ...settings,
+                signal: combine(settings.signal),
+            });
+        },
+        release: () => lease.release(),
+    };
+}
+function normalized(output) {
+    if (typeof output === "string")
+        return { content: output, isError: false };
+    if (output === null ||
+        typeof output !== "object" ||
+        typeof output.content !== "string" ||
+        (output.isError !== undefined && typeof output.isError !== "boolean"))
+        throw new OutpostError("configuration", "Tools must return text or { content, isError }");
+    return { content: output.content, isError: output.isError ?? false };
+}
+function failed(message) {
+    return { content: message, isError: true };
+}
+//# sourceMappingURL=tool-execution.js.map

package/dist/application/tool-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-execution.js","sourceRoot":"","sources":["../../src/application/tool-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAWxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAS3D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,KAAoC,EACpC,IAAY,EACZ,MAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAU,CAAC,CAC5D,CACF,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU;YAC5B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW;YACjD,CAAC,CAAC,CAAC,CAAC;QACN,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjE,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE;gBAC3D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ;QACtC,OAAO,CAAC,IAAI,CACV,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,EAAE,IAAI,CAAC,CACrE,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,KAAuC,EACvC,IAAwB,EACxB,IAAY,EACZ,MAA4C;IAE5C,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACpE,IAAI,SAAS,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK;QACP,OAAO,MAAM,CACX,OAAO,EACP,IAAI,EACJ,YAAY,KAAK,uCAAuC,IAAI,CAAC,IAAI,EAAE,CACpE,CAAC;IACJ,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,OAAO,EACP,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EACnC,IAAI,CACL,CAAC;IACF,IAAI,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,IAAI,EACJ,QAAQ,CAAC,KAAK,EACd,6BAA6B,CAC9B,CAAC;IACF,IAAI,SAAS,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,iBAAiB;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAiB,EACjB,KAAc,EACd,KAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,UAAU;QACxB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CACjB,OAAuB,EACvB,IAAiB,EACjB,KAAc;IAEd,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;IACtD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CACb,OAAuB,EACvB,IAAwB,EACxB,MAAc;IAEd,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;KACP,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,MAAM,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,OAAuB,EACvB,IAAwB,EACxB,OAAoB,EACpB,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAC3C,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,gBAAgB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB,cAAc;QAC9H,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,OAAO;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAK,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,EAAE,UAAU,IAAI,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;gBAC5B,UAAU;gBACV,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC;YACF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,QAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM,KAAK,CAAC;QACxE,OAAO,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAuB,EACvB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAgB;IAEnC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CACd,SAAS,EACT,QAAQ,IAAI,CAAC,IAAI,oBAAoB,UAAU,KAAK,CACrD,CACF,EACH,UAAU,CACX,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;QAC3B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,IAAK,CAAC,OAAO,CAAC,KAAK,EAAE;QACnB,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QAC7C,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;QAC1B,OAAO,CAAC,KAAuB;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;gBAC9B,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,mDAAmD,CACpD,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;KACF,CAAC,CACH,CAAC;IACF,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAmB,EAAE,MAAmB;IAC3D,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAE,EAAE,CACpC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;gBACvC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBACzC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QAErE,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,gDAAgD,CACjD,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC","sourcesContent":["import { OutpostError } from \"../domain/errors.ts\";\nimport {\n  TOOL_PREVIEW_CHARACTERS,\n  TOOL_RESULT_CHARACTERS,\n} from \"../domain/harness.constants.ts\";\nimport type {\n  ModelToolCallBlock,\n  ModelToolResultBlock,\n} from \"../domain/model.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type {\n  HarnessTool,\n  HarnessToolEvent,\n  ToolOutput,\n} from \"../domain/tool.types.ts\";\nimport { afterTool, beforeTool } from \"./harness-hooks.ts\";\nimport type {\n  HarnessRuntime,\n  PreparedCall,\n  ToolCallBatch,\n  ToolOutcome,\n  ValidatedInput,\n} from \"./harness.types.ts\";\n\nconst toolEvents: ReadonlySet<string> = new Set([\"text\", \"warning\", \"raw\"]);\n\nexport async function executeToolCalls(\n  runtime: HarnessRuntime,\n  calls: readonly ModelToolCallBlock[],\n  step: number,\n  loaded: ReadonlySet<string>,\n): Promise<readonly ModelToolResultBlock[]> {\n  const tools = new Map(runtime.tools.map((tool) => [tool.name, tool]));\n  const owners = new Map(\n    runtime.agent.harness.skills.flatMap((skill) =>\n      skill.tools.map((tool) => [tool.name, skill.name] as const),\n    ),\n  );\n  const locked = (name: string) => {\n    const skill = owners.get(name);\n    return skill === undefined || loaded.has(skill) ? undefined : skill;\n  };\n  const prepared: PreparedCall[] = [];\n  for (const call of calls)\n    prepared.push(await prepareCall(runtime, tools, call, step, locked));\n  const outcomes = new Map<string, ToolOutcome>();\n  for (const batch of batches(prepared)) {\n    const pending = [...batch.calls];\n    const limit = batch.concurrent\n      ? runtime.agent.harness.toolExecution.concurrency\n      : 1;\n    await Promise.all(\n      Array.from({ length: Math.min(limit, pending.length) }, async () => {\n        for (let next = pending.shift(); next; next = pending.shift())\n          outcomes.set(next.call.id, await executeCall(runtime, next));\n      }),\n    );\n  }\n  const results: ModelToolResultBlock[] = [];\n  for (const { call, outcome } of prepared)\n    results.push(\n      await finish(runtime, call, outcome ?? outcomes.get(call.id)!, step),\n    );\n  return results;\n}\n\nasync function prepareCall(\n  runtime: HarnessRuntime,\n  tools: ReadonlyMap<string, HarnessTool>,\n  call: ModelToolCallBlock,\n  step: number,\n  locked: (name: string) => string | undefined,\n): Promise<PreparedCall> {\n  runtime.signal.throwIfAborted();\n  runtime.emit({\n    kind: \"tool\",\n    name: call.name,\n    input: call.input,\n    callId: call.id,\n  });\n  const tool = tools.get(call.name);\n  if (!tool) return { call, outcome: failed(`Unknown tool: ${call.name}`) };\n  const validated = await validate(tool, call.input, \"Invalid input\");\n  if (\"outcome\" in validated) return { call, outcome: validated.outcome };\n  const skill = locked(tool.name);\n  if (skill)\n    return denied(\n      runtime,\n      call,\n      `Load the ${skill} skill with load_skill before using ${tool.name}`,\n    );\n  const permitted = permission(runtime, tool, validated.value);\n  if (permitted) return denied(runtime, call, permitted);\n  const decision = await beforeTool(\n    runtime,\n    { ...call, input: validated.value },\n    step,\n  );\n  if (\"deny\" in decision) return denied(runtime, call, decision.deny);\n  if (decision.input === validated.value)\n    return { call, tool, input: validated.value };\n  const revised = await validate(\n    tool,\n    decision.input,\n    \"Hook produced invalid input\",\n  );\n  if (\"outcome\" in revised) return { call, outcome: revised.outcome };\n  const revisedPermission = permission(runtime, tool, revised.value);\n  if (revisedPermission) return denied(runtime, call, revisedPermission);\n  return { call, tool, input: revised.value };\n}\n\nasync function validate(\n  tool: HarnessTool,\n  input: unknown,\n  label: string,\n): Promise<ValidatedInput> {\n  const validation = await tool.validate(input);\n  if (\"issues\" in validation)\n    return {\n      outcome: failed(`${label} for ${tool.name}: ${validation.issues}`),\n    };\n  return { value: validation.value };\n}\n\nfunction permission(\n  runtime: HarnessRuntime,\n  tool: HarnessTool,\n  input: unknown,\n): string | undefined {\n  const permissions = runtime.agent.harness.permissions;\n  if (!permissions) return undefined;\n  const decision = permissions.evaluate(tool.name, tool.resources(input));\n  return decision.allowed ? undefined : decision.reason;\n}\n\nfunction denied(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  reason: string,\n): PreparedCall {\n  runtime.emit({\n    kind: \"tool-denied\",\n    callId: call.id,\n    name: call.name,\n    reason,\n  });\n  return { call, outcome: failed(`Denied: ${reason}`) };\n}\n\nasync function finish(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  outcome: ToolOutcome,\n  step: number,\n): Promise<ModelToolResultBlock> {\n  const final = await afterTool(runtime, call, outcome, step, normalized);\n  const content =\n    final.content.length > TOOL_RESULT_CHARACTERS\n      ? `${final.content.slice(0, TOOL_RESULT_CHARACTERS)}\\n[truncated ${final.content.length - TOOL_RESULT_CHARACTERS} characters]`\n      : final.content;\n  runtime.emit({\n    kind: \"tool-result\",\n    callId: call.id,\n    name: call.name,\n    isError: final.isError,\n    preview: content.slice(0, TOOL_PREVIEW_CHARACTERS),\n    characters: final.content.length,\n  });\n  return {\n    type: \"tool-result\",\n    callId: call.id,\n    content,\n    ...(final.isError ? { isError: true } : {}),\n  };\n}\n\nfunction batches(calls: readonly PreparedCall[]): readonly ToolCallBatch[] {\n  const grouped: ToolCallBatch[] = [];\n  for (const prepared of calls) {\n    if (prepared.outcome) continue;\n    const concurrent = prepared.tool!.readOnly;\n    const last = grouped.at(-1);\n    if (last?.concurrent && concurrent) {\n      grouped[grouped.length - 1] = {\n        concurrent,\n        calls: [...last.calls, prepared],\n      };\n      continue;\n    }\n    grouped.push({ concurrent, calls: [prepared] });\n  }\n  return grouped;\n}\n\nasync function executeCall(\n  runtime: HarnessRuntime,\n  prepared: PreparedCall,\n): Promise<ToolOutcome> {\n  try {\n    return normalized(await runTool(runtime, prepared));\n  } catch (error) {\n    runtime.signal.throwIfAborted();\n    if (runtime.agent.harness.toolExecution.onError === \"fail\") throw error;\n    return failed(error instanceof Error ? error.message : String(error));\n  }\n}\n\nasync function runTool(\n  runtime: HarnessRuntime,\n  { call, tool, input }: PreparedCall,\n): Promise<ToolOutput> {\n  const { deadlineMs } = runtime.agent.harness.toolExecution;\n  const controller = new AbortController();\n  const signal = AbortSignal.any([runtime.signal, controller.signal]);\n  const timer = setTimeout(\n    () =>\n      controller.abort(\n        new OutpostError(\n          \"timeout\",\n          `Tool ${call.name} timed out after ${deadlineMs} ms`,\n        ),\n      ),\n    deadlineMs,\n  );\n  const release = runtime.hold();\n  const aborted = new Promise<never>((_, reject) => {\n    const fail = () => reject(signal.reason);\n    if (signal.aborted) fail();\n    signal.addEventListener(\"abort\", fail, { once: true });\n  });\n  const execution = Promise.resolve().then(() =>\n    tool!.execute(input, {\n      sandbox: scopedLease(runtime.sandbox, signal),\n      signal,\n      callId: call.id,\n      model: runtime.agent.model,\n      observe(event: HarnessToolEvent) {\n        signal.throwIfAborted();\n        if (!toolEvents.has(event?.kind))\n          throw new OutpostError(\n            \"configuration\",\n            \"Tools may only report text, warning or raw events\",\n          );\n        runtime.emit(event);\n      },\n    }),\n  );\n  execution.catch(() => undefined);\n  aborted.catch(() => undefined);\n  try {\n    return await Promise.race([execution, aborted]);\n  } finally {\n    clearTimeout(timer);\n    controller.abort(new OutpostError(\"aborted\", \"Tool call ended\"));\n    release();\n  }\n}\n\nfunction scopedLease(lease: SandboxLease, signal: AbortSignal): SandboxLease {\n  const combine = (own?: AbortSignal) =>\n    own ? AbortSignal.any([own, signal]) : signal;\n  return {\n    root: lease.root,\n    home: lease.home,\n    invoke: (command) => {\n      signal.throwIfAborted();\n      return lease.invoke({ ...command, signal: combine(command.signal) });\n    },\n    upload: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.upload(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    download: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.download(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    release: () => lease.release(),\n  };\n}\n\nfunction normalized(output: ToolOutput): ToolOutcome {\n  if (typeof output === \"string\") return { content: output, isError: false };\n  if (\n    output === null ||\n    typeof output !== \"object\" ||\n    typeof output.content !== \"string\" ||\n    (output.isError !== undefined && typeof output.isError !== \"boolean\")\n  )\n    throw new OutpostError(\n      \"configuration\",\n      \"Tools must return text or { content, isError }\",\n    );\n  return { content: output.content, isError: output.isError ?? false };\n}\n\nfunction failed(message: string): ToolOutcome {\n  return { content: message, isError: true };\n}\n"]}

package/dist/cli/commands.js

@@ -28,7 +28,7 @@ export async function runCli(args = process.argv.slice(2)) {
         for (const key of definition.options) {
             const configuration = cliOptions[key];
             const short = "short" in configuration ? `-${configuration.short}, ` : "";
-            command.addOption(new Option(`${short}--${key}${configuration.type === "string" ? " <value>" : ""}`, configuration.description));
+            command.addOption(new Option(`${short}--${key === "sandboxProvider" ? "sandbox-provider" : key}${configuration.type === "string" ? " <value>" : ""}`, configuration.description));
         }
         if (name === "init")
             command.addOption(new Option("--no-build", "Skip automatic container image build").default(undefined));
@@ -38,7 +38,9 @@ export async function runCli(args = process.argv.slice(2)) {
             for (const option of command.options) {
                 const value = parsed[option.attributeName()];
                 if (typeof value === "string" || typeof value === "boolean")
-                    values[option.long.replace(/^--(?:no-)?/, "")] = value;
+                    values[option.long === "--sandbox-provider"
+                        ? "sandboxProvider"
+                        : option.long.replace(/^--(?:no-)?/, "")] = value;
             }
             await handlers[path[0]]({
                 values: values,

package/dist/cli/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,YAAY,EAAE;SACd,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAyC;QACrD,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,eAAe;KAC1B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;oBACrD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,GAAG,KAAK,KAAK,GAAG,GAAG,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EACtE,aAAa,CAAC,WAAW,CAC1B,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM;YACjB,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,YAAY,EACZ,sCAAsC,CACvC,CAAC,OAAO,CAAC,SAAS,CAAC,CACrB,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAA2B,CAAC;YACvD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;oBACzD,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;YAC5D,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAE,CAAC;gBACxB,MAAM,EAAE,MAAmB;gBAC3B,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC/B,EAAE,CAAC;QACF,OAAO,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;YAC7D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { Command, CommanderError, Option } from \"commander\";\nimport { recoveryCommand } from \"./recovery-command.ts\";\nimport { doctorCommand } from \"./doctor-command.ts\";\nimport { imageCommand } from \"./image-command.ts\";\nimport { initializeCommand } from \"./init-command.ts\";\nimport { cliOptions, commandOptions } from \"./main.constants.ts\";\nimport type { CliCommand, CliValues } from \"./main.types.ts\";\n\nexport async function runCli(\n  args: readonly string[] = process.argv.slice(2),\n): Promise<void> {\n  const program = new Command()\n    .name(\"outpost\")\n    .description(\"Outpost — sandboxed coding agents and workflows\")\n    .exitOverride()\n    .configureOutput({ writeErr: () => {} });\n  const handlers: Readonly<Record<string, CliCommand>> = {\n    init: initializeCommand,\n    doctor: doctorCommand,\n    image: imageCommand,\n    recovery: recoveryCommand,\n  };\n  for (const [name, definition] of Object.entries(commandOptions)) {\n    const path = name.split(\" \");\n    let command = program;\n    for (const part of path) {\n      command =\n        command.commands.find((item) => item.name() === part) ??\n        command.command(part);\n    }\n    command.description(definition.description);\n    for (const key of definition.options) {\n      const configuration = cliOptions[key];\n      const short = \"short\" in configuration ? `-${configuration.short}, ` : \"\";\n      command.addOption(\n        new Option(\n          `${short}--${key}${configuration.type === \"string\" ? \" <value>\" : \"\"}`,\n          configuration.description,\n        ),\n      );\n    }\n    if (name === \"init\")\n      command.addOption(\n        new Option(\n          \"--no-build\",\n          \"Skip automatic container image build\",\n        ).default(undefined),\n      );\n    command.action(async () => {\n      const values: Record<string, string | boolean> = {};\n      const parsed = command.opts<Record<string, unknown>>();\n      for (const option of command.options) {\n        const value = parsed[option.attributeName()];\n        if (typeof value === \"string\" || typeof value === \"boolean\")\n          values[option.long!.replace(/^--(?:no-)?/, \"\")] = value;\n      }\n      await handlers[path[0]!]!({\n        values: values as CliValues,\n        positionals: path,\n      });\n    });\n  }\n  for (const command of program.commands.filter(\n    (item) => item.commands.length,\n  )) {\n    command.allowExcessArguments().action(() => {\n      throw new Error(`Unknown command. Run outpost ${command.name()} --help.`);\n    });\n  }\n  try {\n    await program.parseAsync(args.length ? [...args] : [\"--help\"], {\n      from: \"user\",\n    });\n  } catch (error) {\n    if (error instanceof CommanderError && error.exitCode === 0) return;\n    throw error;\n  }\n}\n"]}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,SAAS,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,YAAY,EAAE;SACd,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAyC;QACrD,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,eAAe;KAC1B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;oBACrD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,GAAG,KAAK,KAAK,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,GAAG,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EACvH,aAAa,CAAC,WAAW,CAC1B,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM;YACjB,OAAO,CAAC,SAAS,CACf,IAAI,MAAM,CACR,YAAY,EACZ,sCAAsC,CACvC,CAAC,OAAO,CAAC,SAAS,CAAC,CACrB,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,MAAM,GAAqC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAA2B,CAAC;YACvD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;oBACzD,MAAM,CACJ,MAAM,CAAC,IAAI,KAAK,oBAAoB;wBAClC,CAAC,CAAC,iBAAiB;wBACnB,CAAC,CAAC,MAAM,CAAC,IAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAC5C,GAAG,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAE,CAAC;gBACxB,MAAM,EAAE,MAAmB;gBAC3B,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC/B,EAAE,CAAC;QACF,OAAO,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;YAC7D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { Command, CommanderError, Option } from \"commander\";\nimport { recoveryCommand } from \"./recovery-command.ts\";\nimport { doctorCommand } from \"./doctor-command.ts\";\nimport { imageCommand } from \"./image-command.ts\";\nimport { initializeCommand } from \"./init-command.ts\";\nimport { cliOptions, commandOptions } from \"./main.constants.ts\";\nimport type { CliCommand, CliValues } from \"./main.types.ts\";\n\nexport async function runCli(\n  args: readonly string[] = process.argv.slice(2),\n): Promise<void> {\n  const program = new Command()\n    .name(\"outpost\")\n    .description(\"Outpost — sandboxed coding agents and workflows\")\n    .exitOverride()\n    .configureOutput({ writeErr: () => {} });\n  const handlers: Readonly<Record<string, CliCommand>> = {\n    init: initializeCommand,\n    doctor: doctorCommand,\n    image: imageCommand,\n    recovery: recoveryCommand,\n  };\n  for (const [name, definition] of Object.entries(commandOptions)) {\n    const path = name.split(\" \");\n    let command = program;\n    for (const part of path) {\n      command =\n        command.commands.find((item) => item.name() === part) ??\n        command.command(part);\n    }\n    command.description(definition.description);\n    for (const key of definition.options) {\n      const configuration = cliOptions[key];\n      const short = \"short\" in configuration ? `-${configuration.short}, ` : \"\";\n      command.addOption(\n        new Option(\n          `${short}--${key === \"sandboxProvider\" ? \"sandbox-provider\" : key}${configuration.type === \"string\" ? \" <value>\" : \"\"}`,\n          configuration.description,\n        ),\n      );\n    }\n    if (name === \"init\")\n      command.addOption(\n        new Option(\n          \"--no-build\",\n          \"Skip automatic container image build\",\n        ).default(undefined),\n      );\n    command.action(async () => {\n      const values: Record<string, string | boolean> = {};\n      const parsed = command.opts<Record<string, unknown>>();\n      for (const option of command.options) {\n        const value = parsed[option.attributeName()];\n        if (typeof value === \"string\" || typeof value === \"boolean\")\n          values[\n            option.long === \"--sandbox-provider\"\n              ? \"sandboxProvider\"\n              : option.long!.replace(/^--(?:no-)?/, \"\")\n          ] = value;\n      }\n      await handlers[path[0]!]!({\n        values: values as CliValues,\n        positionals: path,\n      });\n    });\n  }\n  for (const command of program.commands.filter(\n    (item) => item.commands.length,\n  )) {\n    command.allowExcessArguments().action(() => {\n      throw new Error(`Unknown command. Run outpost ${command.name()} --help.`);\n    });\n  }\n  try {\n    await program.parseAsync(args.length ? [...args] : [\"--help\"], {\n      from: \"user\",\n    });\n  } catch (error) {\n    if (error instanceof CommanderError && error.exitCode === 0) return;\n    throw error;\n  }\n}\n"]}

package/dist/cli/doctor-command.js

@@ -1,28 +1,32 @@
+import { doctorAgents } from "../application/doctor-agent.constants.js";
 import { doctorDefaults, providerDiagnostics, } from "../application/doctor.constants.js";
 import { diagnose } from "../application/doctor.js";
 import { invariant } from "../domain/errors.js";
 function isProvider(value) {
     return Object.hasOwn(providerDiagnostics, value);
 }
+function isAgent(value) {
+    return Object.hasOwn(doctorAgents, value);
+}
 export async function doctorCommand({ values, positionals }, execute, write = (text) => {
     process.stdout.write(text);
 }) {
-    invariant(positionals.length === 1, "Usage: outpost doctor [--provider NAME] [--agent NAME] [--image NAME] [--json]");
+    invariant(positionals.length === 1, "Usage: outpost doctor [--sandbox-provider NAME] [--agent NAME] [--image NAME] [--json]");
     for (const key of Object.keys(values))
-        invariant(["provider", "agent", "image", "json"].includes(key), `Unsupported doctor option: --${key}`);
-    const provider = values.provider ?? doctorDefaults.provider;
+        invariant(["sandboxProvider", "agent", "image", "json"].includes(key), `Unsupported doctor option: --${key}`);
+    const sandboxProvider = values.sandboxProvider ?? doctorDefaults.sandboxProvider;
     const agent = values.agent ?? doctorDefaults.agent;
-    invariant(isProvider(provider), "Unknown provider. Choose docker, podman, local, vercel or daytona.");
-    invariant(agent === "codex" || agent === "claude" || agent === "gemini", "Unknown agent. Choose codex, claude or gemini.");
+    invariant(isProvider(sandboxProvider), "Unknown provider. Choose docker, podman, local, vercel or daytona.");
+    invariant(isAgent(agent), `Unknown agent. Choose ${Object.keys(doctorAgents).join(", ")}.`);
     const report = await diagnose({
-        provider,
+        sandboxProvider,
         agent,
         ...(values.image !== undefined ? { image: values.image } : {}),
     }, execute);
     if (values.json)
         write(`${JSON.stringify(report, null, 2)}\n`);
     else {
-        write(`Outpost doctor — ${report.scope === "host" ? "host checks" : "host and image checks"} (${provider}, ${agent})\n`);
+        write(`Outpost doctor — ${report.scope === "host" ? "host checks" : "host and image checks"} (${sandboxProvider}, ${agent})\n`);
         write(`Provider contract: ${report.placement}; interactive terminal: ${report.interactiveTerminal ? "supported" : "unsupported"}. Workflow execution is not tested.\n`);
         if (report.image)
             write(`Image: ${report.image}\n`);

package/dist/cli/doctor-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-command.js","sourceRoot":"","sources":["../../src/cli/doctor-command.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAE,MAAM,EAAE,WAAW,EAAiB,EACtC,OAAkB,EAClB,QAAgC,CAAC,IAAI,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,EACxB,gFAAgF,CACjF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EACpD,gCAAgC,GAAG,EAAE,CACtC,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;IACnD,SAAS,CACP,UAAU,CAAC,QAAQ,CAAC,EACpB,oEAAoE,CACrE,CAAC;IACF,SAAS,CACP,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAC7D,gDAAgD,CACjD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B;QACE,QAAQ;QACR,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SAC1D,CAAC;QACJ,KAAK,CACH,oBAAoB,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,KAAK,QAAQ,KAAK,KAAK,KAAK,CAClH,CAAC;QACF,KAAK,CACH,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,uCAAuC,CACjK,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,KAAK,CACH,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,CACpL,CAAC;QACJ,KAAK,CACH,MAAM,CAAC,WAAW;YAChB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,4EAA4E,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import {\n  doctorDefaults,\n  providerDiagnostics,\n} from \"../application/doctor.constants.ts\";\nimport { diagnose } from \"../application/doctor.ts\";\nimport type { DoctorProvider } from \"../application/doctor.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nfunction isProvider(value: string): value is DoctorProvider {\n  return Object.hasOwn(providerDiagnostics, value);\n}\nexport async function doctorCommand(\n  { values, positionals }: CliInvocation,\n  execute?: Executor,\n  write: (text: string) => void = (text) => {\n    process.stdout.write(text);\n  },\n): Promise<void> {\n  invariant(\n    positionals.length === 1,\n    \"Usage: outpost doctor [--provider NAME] [--agent NAME] [--image NAME] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\"provider\", \"agent\", \"image\", \"json\"].includes(key),\n      `Unsupported doctor option: --${key}`,\n    );\n  const provider = values.provider ?? doctorDefaults.provider;\n  const agent = values.agent ?? doctorDefaults.agent;\n  invariant(\n    isProvider(provider),\n    \"Unknown provider. Choose docker, podman, local, vercel or daytona.\",\n  );\n  invariant(\n    agent === \"codex\" || agent === \"claude\" || agent === \"gemini\",\n    \"Unknown agent. Choose codex, claude or gemini.\",\n  );\n  const report = await diagnose(\n    {\n      provider,\n      agent,\n      ...(values.image !== undefined ? { image: values.image } : {}),\n    },\n    execute,\n  );\n  if (values.json) write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    write(\n      `Outpost doctor — ${report.scope === \"host\" ? \"host checks\" : \"host and image checks\"} (${provider}, ${agent})\\n`,\n    );\n    write(\n      `Provider contract: ${report.placement}; interactive terminal: ${report.interactiveTerminal ? \"supported\" : \"unsupported\"}. Workflow execution is not tested.\\n`,\n    );\n    if (report.image) write(`Image: ${report.image}\\n`);\n    for (const check of report.checks)\n      write(\n        `[${check.status.toUpperCase()}] ${check.id}${check.version ? ` ${check.version}` : \"\"}${check.referenceVersion ? ` (pinned: ${check.referenceVersion})` : \"\"}: ${check.message}\\n`,\n      );\n    write(\n      report.hasFailures\n        ? \"Diagnostic checks found failures.\\n\"\n        : \"No blocking check failed; warnings and skipped checks still need review.\\n\",\n    );\n  }\n  if (report.hasFailures) process.exitCode = 1;\n}\n"]}
+{"version":3,"file":"doctor-command.js","sourceRoot":"","sources":["../../src/cli/doctor-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAKpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AACD,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAE,MAAM,EAAE,WAAW,EAAiB,EACtC,OAAkB,EAClB,QAAgC,CAAC,IAAI,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,EACxB,wFAAwF,CACzF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC3D,gCAAgC,GAAG,EAAE,CACtC,CAAC;IACJ,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,eAAe,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;IACnD,SAAS,CACP,UAAU,CAAC,eAAe,CAAC,EAC3B,oEAAoE,CACrE,CAAC;IACF,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,EACd,yBAAyB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B;QACE,eAAe;QACf,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SAC1D,CAAC;QACJ,KAAK,CACH,oBAAoB,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,KAAK,eAAe,KAAK,KAAK,KAAK,CACzH,CAAC;QACF,KAAK,CACH,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,uCAAuC,CACjK,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,KAAK,CACH,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,CACpL,CAAC;QACJ,KAAK,CACH,MAAM,CAAC,WAAW;YAChB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,4EAA4E,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import { doctorAgents } from \"../application/doctor-agent.constants.ts\";\nimport {\n  doctorDefaults,\n  providerDiagnostics,\n} from \"../application/doctor.constants.ts\";\nimport { diagnose } from \"../application/doctor.ts\";\nimport type {\n  DoctorAgent,\n  DoctorProvider,\n} from \"../application/doctor.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nfunction isProvider(value: string): value is DoctorProvider {\n  return Object.hasOwn(providerDiagnostics, value);\n}\nfunction isAgent(value: string): value is DoctorAgent {\n  return Object.hasOwn(doctorAgents, value);\n}\nexport async function doctorCommand(\n  { values, positionals }: CliInvocation,\n  execute?: Executor,\n  write: (text: string) => void = (text) => {\n    process.stdout.write(text);\n  },\n): Promise<void> {\n  invariant(\n    positionals.length === 1,\n    \"Usage: outpost doctor [--sandbox-provider NAME] [--agent NAME] [--image NAME] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\"sandboxProvider\", \"agent\", \"image\", \"json\"].includes(key),\n      `Unsupported doctor option: --${key}`,\n    );\n  const sandboxProvider =\n    values.sandboxProvider ?? doctorDefaults.sandboxProvider;\n  const agent = values.agent ?? doctorDefaults.agent;\n  invariant(\n    isProvider(sandboxProvider),\n    \"Unknown provider. Choose docker, podman, local, vercel or daytona.\",\n  );\n  invariant(\n    isAgent(agent),\n    `Unknown agent. Choose ${Object.keys(doctorAgents).join(\", \")}.`,\n  );\n  const report = await diagnose(\n    {\n      sandboxProvider,\n      agent,\n      ...(values.image !== undefined ? { image: values.image } : {}),\n    },\n    execute,\n  );\n  if (values.json) write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    write(\n      `Outpost doctor — ${report.scope === \"host\" ? \"host checks\" : \"host and image checks\"} (${sandboxProvider}, ${agent})\\n`,\n    );\n    write(\n      `Provider contract: ${report.placement}; interactive terminal: ${report.interactiveTerminal ? \"supported\" : \"unsupported\"}. Workflow execution is not tested.\\n`,\n    );\n    if (report.image) write(`Image: ${report.image}\\n`);\n    for (const check of report.checks)\n      write(\n        `[${check.status.toUpperCase()}] ${check.id}${check.version ? ` ${check.version}` : \"\"}${check.referenceVersion ? ` (pinned: ${check.referenceVersion})` : \"\"}: ${check.message}\\n`,\n      );\n    write(\n      report.hasFailures\n        ? \"Diagnostic checks found failures.\\n\"\n        : \"No blocking check failed; warnings and skipped checks still need review.\\n\",\n    );\n  }\n  if (report.hasFailures) process.exitCode = 1;\n}\n"]}

package/dist/cli/init-authentication.d.ts

@@ -1,4 +1,7 @@
-import type { InitOptions } from "./scaffold.types.ts";
+import type { AgentAuthentication } from "../domain/agent.types.ts";
+import type { AuthenticationChoice, InitOptions } from "./scaffold.types.ts";
+export declare function authenticationChoice(options: InitOptions): AuthenticationChoice;
 export declare function authenticationEnvironment(options: InitOptions): string;
 export declare function authenticationInstructions(options: InitOptions): string;
+export declare function authenticationSetting(options: InitOptions): AgentAuthentication;
 export declare function authenticationSource(options: InitOptions): string;

package/dist/cli/init-authentication.js

@@ -1,43 +1,37 @@
-import { authenticationRecipes } from "./init-authentication.constants.js";
+import { invariant } from "../domain/errors.js";
+import { authenticationChoices } from "./main.constants.js";
+export function authenticationChoice(options) {
+    const agent = options.agent ?? "codex";
+    const value = options.authentication ?? (options.baseUrl ? "usage" : "account");
+    const choices = Object.hasOwn(authenticationChoices, agent)
+        ? authenticationChoices[agent]
+        : [];
+    const choice = choices.find((candidate) => candidate.value === value);
+    invariant(choice, `Authentication for ${agent} must be ${choices.map((candidate) => candidate.value).join(", ") || "one of its supported forms"}`);
+    return choice;
+}
 export function authenticationEnvironment(options) {
     if (options.baseUrl)
         return `${options.apiKeyEnvironment ?? "OPENAI_API_KEY"}=\n`;
-    if (options.authentication === "login")
-        return "";
-    if (options.authentication === "oauth-token")
-        return "CLAUDE_CODE_OAUTH_TOKEN=\n";
-    return authenticationRecipes[options.agent ?? "codex"].environment;
+    const { variable } = authenticationChoice(options);
+    return variable ? `${variable}=\n` : "";
 }
 export function authenticationInstructions(options) {
-    if (options.authentication === "login")
-        return "Run codex login on the host. For isolated providers, use file credential storage; the generated script copies auth.json into the private sandbox home.";
-    if (options.authentication === "oauth-token")
-        return "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.";
-    return ("Set " +
-        authenticationEnvironment(options).trim().replace("=", "") +
-        " in the workflow .env or parent environment. API usage is billed separately from subscriptions.");
+    if (options.baseUrl)
+        return `Set ${options.apiKeyEnvironment ?? "OPENAI_API_KEY"} in the workflow .env or parent environment for the custom Responses provider.`;
+    return authenticationChoice(options).instructions;
+}
+export function authenticationSetting(options) {
+    const { value, variable } = authenticationChoice(options);
+    if (value !== "account-token")
+        return value;
+    invariant(variable, "Account tokens require a declared variable");
+    return { account: { variable } };
 }
 export function authenticationSource(options) {
-    const agent = options.agent ?? "codex";
-    if (options.authentication === "login") {
-        if (options.provider === "local")
-            return "const authentication = {};";
-        return `const seed = await readFile(resolve(process.env.CODEX_HOME || resolve(homedir(), ".codex"), "auth.json"), "utf8");
-try { JSON.parse(seed); } catch { throw new Error("Invalid Codex authentication file. Run codex login again with file credential storage."); }
-const authentication = { sandboxReady: [{ executable: "node", arguments: ["-e", ${JSON.stringify(authenticationRecipes.codex.seed)}], stdin: seed }] };`;
-    }
-    const key = authenticationEnvironment(options).trim().replace("=", "");
-    const conflict = agent === "claude"
-        ? key === "ANTHROPIC_API_KEY"
-            ? "CLAUDE_CODE_OAUTH_TOKEN"
-            : "ANTHROPIC_API_KEY"
-        : undefined;
-    const check = `if (!variables[${JSON.stringify(key)}]) throw new Error(${JSON.stringify(`Missing ${key}. Configure the workflow .env or parent environment before starting a sandbox.`)});`;
-    const guard = conflict
-        ? `\nif (variables[${JSON.stringify(conflict)}]) throw new Error("Conflicting Claude authentication methods. Keep only the selected credential in the workflow environment.");`
-        : "";
-    if (agent !== "codex" || options.baseUrl)
-        return `${check}${guard}\nconst authentication = {};`;
-    return `${check}\nconst authentication = { sandboxReady: [{ executable: "node", arguments: ["-e", ${JSON.stringify(authenticationRecipes.codex.login)}], stdin: variables.OPENAI_API_KEY }] };`;
+    const setting = authenticationSetting(options);
+    if (typeof setting === "string")
+        return JSON.stringify(setting);
+    return `{ account: { variable: ${JSON.stringify(authenticationChoice(options).variable)} } }`;
 }
 //# sourceMappingURL=init-authentication.js.map

package/dist/cli/init-authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-authentication.js","sourceRoot":"","sources":["../../src/cli/init-authentication.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,MAAM,UAAU,yBAAyB,CAAC,OAAoB;IAC5D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,KAAK,CAAC;IAC/D,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAClD,IAAI,OAAO,CAAC,cAAc,KAAK,aAAa;QAC1C,OAAO,4BAA4B,CAAC;IACtC,OAAO,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAoB;IAC7D,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO;QACpC,OAAO,wJAAwJ,CAAC;IAClK,IAAI,OAAO,CAAC,cAAc,KAAK,aAAa;QAC1C,OAAO,sJAAsJ,CAAC;IAChK,OAAO,CACL,MAAM;QACN,yBAAyB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,iGAAiG,CAClG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,4BAA4B,CAAC;QACtE,OAAO;;kFAEuE,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC;IACvJ,CAAC;IACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GACZ,KAAK,KAAK,QAAQ;QAChB,CAAC,CAAC,GAAG,KAAK,mBAAmB;YAC3B,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,mBAAmB;QACvB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GAAG,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,gFAAgF,CAAC,IAAI,CAAC;IAC5L,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,kIAAkI;QAC/K,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO;QACtC,OAAO,GAAG,KAAK,GAAG,KAAK,8BAA8B,CAAC;IACxD,OAAO,GAAG,KAAK,qFAAqF,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC;AAClM,CAAC","sourcesContent":["import type { InitOptions } from \"./scaffold.types.ts\";\nimport { authenticationRecipes } from \"./init-authentication.constants.ts\";\n\nexport function authenticationEnvironment(options: InitOptions): string {\n  if (options.baseUrl)\n    return `${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"}=\\n`;\n  if (options.authentication === \"login\") return \"\";\n  if (options.authentication === \"oauth-token\")\n    return \"CLAUDE_CODE_OAUTH_TOKEN=\\n\";\n  return authenticationRecipes[options.agent ?? \"codex\"].environment;\n}\n\nexport function authenticationInstructions(options: InitOptions): string {\n  if (options.authentication === \"login\")\n    return \"Run codex login on the host. For isolated providers, use file credential storage; the generated script copies auth.json into the private sandbox home.\";\n  if (options.authentication === \"oauth-token\")\n    return \"Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.\";\n  return (\n    \"Set \" +\n    authenticationEnvironment(options).trim().replace(\"=\", \"\") +\n    \" in the workflow .env or parent environment. API usage is billed separately from subscriptions.\"\n  );\n}\n\nexport function authenticationSource(options: InitOptions): string {\n  const agent = options.agent ?? \"codex\";\n  if (options.authentication === \"login\") {\n    if (options.provider === \"local\") return \"const authentication = {};\";\n    return `const seed = await readFile(resolve(process.env.CODEX_HOME || resolve(homedir(), \".codex\"), \"auth.json\"), \"utf8\");\ntry { JSON.parse(seed); } catch { throw new Error(\"Invalid Codex authentication file. Run codex login again with file credential storage.\"); }\nconst authentication = { sandboxReady: [{ executable: \"node\", arguments: [\"-e\", ${JSON.stringify(authenticationRecipes.codex.seed)}], stdin: seed }] };`;\n  }\n  const key = authenticationEnvironment(options).trim().replace(\"=\", \"\");\n  const conflict =\n    agent === \"claude\"\n      ? key === \"ANTHROPIC_API_KEY\"\n        ? \"CLAUDE_CODE_OAUTH_TOKEN\"\n        : \"ANTHROPIC_API_KEY\"\n      : undefined;\n  const check = `if (!variables[${JSON.stringify(key)}]) throw new Error(${JSON.stringify(`Missing ${key}. Configure the workflow .env or parent environment before starting a sandbox.`)});`;\n  const guard = conflict\n    ? `\\nif (variables[${JSON.stringify(conflict)}]) throw new Error(\"Conflicting Claude authentication methods. Keep only the selected credential in the workflow environment.\");`\n    : \"\";\n  if (agent !== \"codex\" || options.baseUrl)\n    return `${check}${guard}\\nconst authentication = {};`;\n  return `${check}\\nconst authentication = { sandboxReady: [{ executable: \"node\", arguments: [\"-e\", ${JSON.stringify(authenticationRecipes.codex.login)}], stdin: variables.OPENAI_API_KEY }] };`;\n}\n"]}
+{"version":3,"file":"init-authentication.js","sourceRoot":"","sources":["../../src/cli/init-authentication.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,UAAU,oBAAoB,CAClC,OAAoB;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,KAAK,GACT,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,OAAO,GAAoC,MAAM,CAAC,MAAM,CAC5D,qBAAqB,EACrB,KAAK,CACN;QACC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACtE,SAAS,CACP,MAAM,EACN,sBAAsB,KAAK,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAChI,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAoB;IAC5D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,KAAK,CAAC;IAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAoB;IAC7D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,OAAO,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,gFAAgF,CAAC;IAC9I,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,4CAA4C,CAAC,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,0BAA0B,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAChG,CAAC","sourcesContent":["import type { AgentAuthentication } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { authenticationChoices } from \"./main.constants.ts\";\nimport type { AuthenticationChoice, InitOptions } from \"./scaffold.types.ts\";\n\nexport function authenticationChoice(\n  options: InitOptions,\n): AuthenticationChoice {\n  const agent = options.agent ?? \"codex\";\n  const value =\n    options.authentication ?? (options.baseUrl ? \"usage\" : \"account\");\n  const choices: readonly AuthenticationChoice[] = Object.hasOwn(\n    authenticationChoices,\n    agent,\n  )\n    ? authenticationChoices[agent]\n    : [];\n  const choice = choices.find((candidate) => candidate.value === value);\n  invariant(\n    choice,\n    `Authentication for ${agent} must be ${choices.map((candidate) => candidate.value).join(\", \") || \"one of its supported forms\"}`,\n  );\n  return choice;\n}\n\nexport function authenticationEnvironment(options: InitOptions): string {\n  if (options.baseUrl)\n    return `${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"}=\\n`;\n  const { variable } = authenticationChoice(options);\n  return variable ? `${variable}=\\n` : \"\";\n}\n\nexport function authenticationInstructions(options: InitOptions): string {\n  if (options.baseUrl)\n    return `Set ${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"} in the workflow .env or parent environment for the custom Responses provider.`;\n  return authenticationChoice(options).instructions;\n}\n\nexport function authenticationSetting(\n  options: InitOptions,\n): AgentAuthentication {\n  const { value, variable } = authenticationChoice(options);\n  if (value !== \"account-token\") return value;\n  invariant(variable, \"Account tokens require a declared variable\");\n  return { account: { variable } };\n}\n\nexport function authenticationSource(options: InitOptions): string {\n  const setting = authenticationSetting(options);\n  if (typeof setting === \"string\") return JSON.stringify(setting);\n  return `{ account: { variable: ${JSON.stringify(authenticationChoice(options).variable)} } }`;\n}\n"]}

package/dist/cli/init-command.js

@@ -16,8 +16,8 @@ export async function initializeCommand({ values, }) {
     delete options["api-key-env"];
     if (!values.yes &&
         !process.stdin.isTTY &&
-        (!values.agent || !values.provider))
-        throw new Error("Headless initialization requires --yes for defaults, or --agent and --provider.");
+        (!values.agent || !values.sandboxProvider))
+        throw new Error("Headless initialization requires --yes for defaults, or --agent and --sandbox-provider.");
     if (!values.yes && process.stdin.isTTY) {
         intro("Create an Outpost workflow");
         for (const question of initializationQuestions) {
@@ -36,7 +36,7 @@ export async function initializeCommand({ values, }) {
         }
         const settings = await projectSettings(resolve(values.directory ?? process.cwd()), options);
         const choices = Object.entries(authenticationChoices).find(([name]) => name === options.agent)?.[1];
-        invariant(choices, "Choose codex, claude or gemini");
+        invariant(choices, "Choose codex, claude, antigravity, copilot or kimi");
         const questions = [
             {
                 key: "manager",
@@ -47,8 +47,8 @@ export async function initializeCommand({ values, }) {
             {
                 key: "authentication",
                 message: "Agent authentication",
-                options: [...choices],
-                initialValue: "api-key",
+                options: choices.map(({ value, label }) => ({ value, label })),
+                initialValue: options.baseUrl === undefined ? "account" : "usage",
             },
         ];
         for (const question of questions) {
@@ -63,7 +63,7 @@ export async function initializeCommand({ values, }) {
             options[question.key] = value;
         }
     }
-    options.build ??= ["docker", "podman"].includes(String(options.provider ?? "docker"));
+    options.build ??= ["docker", "podman"].includes(String(options.sandboxProvider ?? "docker"));
     const progress = !values.yes && process.stdin.isTTY ? spinner() : undefined;
     progress?.start(options.build
         ? "Creating project and building its container image"

package/dist/cli/init-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-command.js","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,KAAK,EACL,MAAM,EACN,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,GACQ;IACd,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACrC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,GAAG;QACX,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAEnC,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,EAC1C,OAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CACnC,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,SAAS,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG;YAChB;gBACE,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;gBACrB,YAAY,EAAE,SAAS;aACxB;SACF,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC7C,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CACrC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,QAAQ,EAAE,KAAK,CACb,OAAO,CAAC,KAAK;QACX,CAAC,CAAC,mDAAmD;QACrD,CAAC,CAAC,kBAAkB,CACvB,CAAC;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,OAAsB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mFAAmF,CAAC;IACxF,MAAM,OAAO,GAAG,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,0BAA0B,CAAC,OAAsB,CAAC,KAAK,YAAY,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC;IACvM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { resolve } from \"node:path\";\nimport {\n  cancel,\n  intro,\n  isCancel,\n  outro,\n  select,\n  spinner,\n} from \"@clack/prompts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { authenticationInstructions } from \"./init-authentication.ts\";\nimport { supportedManagers } from \"./scaffold.constants.ts\";\nimport {\n  initializationQuestions,\n  authenticationChoices,\n} from \"./main.constants.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\nimport { initialize } from \"./scaffold.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initializeCommand({\n  values,\n}: CliInvocation): Promise<void> {\n  const options: Record<string, unknown> = Object.fromEntries(\n    Object.entries(values).filter(([key]) => ![\"help\", \"yes\"].includes(key)),\n  );\n  if (values[\"base-url\"] !== undefined) options.baseUrl = values[\"base-url\"];\n  if (values[\"api-key-env\"] !== undefined)\n    options.apiKeyEnvironment = values[\"api-key-env\"];\n  delete options[\"base-url\"];\n  delete options[\"api-key-env\"];\n  if (\n    !values.yes &&\n    !process.stdin.isTTY &&\n    (!values.agent || !values.provider)\n  )\n    throw new Error(\n      \"Headless initialization requires --yes for defaults, or --agent and --provider.\",\n    );\n  if (!values.yes && process.stdin.isTTY) {\n    intro(\"Create an Outpost workflow\");\n    for (const question of initializationQuestions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select({\n        message: question.message,\n        options: question.choices.map((value) => ({ value, label: value })),\n      });\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n    const settings = await projectSettings(\n      resolve(values.directory ?? process.cwd()),\n      options as InitOptions,\n    );\n    const choices = Object.entries(authenticationChoices).find(\n      ([name]) => name === options.agent,\n    )?.[1];\n    invariant(choices, \"Choose codex, claude or gemini\");\n    const questions = [\n      {\n        key: \"manager\",\n        message: \"Package manager\",\n        options: supportedManagers.map((value) => ({ value, label: value })),\n        initialValue: settings.manager,\n      },\n      {\n        key: \"authentication\",\n        message: \"Agent authentication\",\n        options: [...choices],\n        initialValue: \"api-key\",\n      },\n    ];\n    for (const question of questions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select(question);\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n  }\n  options.build ??= [\"docker\", \"podman\"].includes(\n    String(options.provider ?? \"docker\"),\n  );\n  const progress = !values.yes && process.stdin.isTTY ? spinner() : undefined;\n  progress?.start(\n    options.build\n      ? \"Creating project and building its container image\"\n      : \"Creating project\",\n  );\n  let result;\n  try {\n    result = await initialize(options as InitOptions);\n  } catch (error) {\n    progress?.stop(\"Initialization failed\");\n    throw error;\n  }\n  progress?.stop(\"Project ready\");\n  const installation = options.install\n    ? \"\"\n    : \"Install project dependencies with your selected package manager before running.\\n\";\n  const message = `Initialized ${result.files.length} files in ${resolve(values.directory ?? process.cwd())}.\\n${authenticationInstructions(options as InitOptions)}\\n${installation}Run: ${result.run}`;\n  if (!values.yes && process.stdin.isTTY) outro(message);\n  else process.stdout.write(`${message}\\n`);\n}\n"]}
+{"version":3,"file":"init-command.js","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,KAAK,EACL,MAAM,EACN,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,GACQ;IACd,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACrC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,GAAG;QACX,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAE1C,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,EAC1C,OAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CACnC,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,SAAS,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG;YAChB;gBACE,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,YAAY,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;aAClE;SACF,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC7C,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,CAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,QAAQ,EAAE,KAAK,CACb,OAAO,CAAC,KAAK;QACX,CAAC,CAAC,mDAAmD;QACrD,CAAC,CAAC,kBAAkB,CACvB,CAAC;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,OAAsB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mFAAmF,CAAC;IACxF,MAAM,OAAO,GAAG,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,0BAA0B,CAAC,OAAsB,CAAC,KAAK,YAAY,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC;IACvM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { resolve } from \"node:path\";\nimport {\n  cancel,\n  intro,\n  isCancel,\n  outro,\n  select,\n  spinner,\n} from \"@clack/prompts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { authenticationInstructions } from \"./init-authentication.ts\";\nimport { supportedManagers } from \"./scaffold.constants.ts\";\nimport {\n  initializationQuestions,\n  authenticationChoices,\n} from \"./main.constants.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\nimport { initialize } from \"./scaffold.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initializeCommand({\n  values,\n}: CliInvocation): Promise<void> {\n  const options: Record<string, unknown> = Object.fromEntries(\n    Object.entries(values).filter(([key]) => ![\"help\", \"yes\"].includes(key)),\n  );\n  if (values[\"base-url\"] !== undefined) options.baseUrl = values[\"base-url\"];\n  if (values[\"api-key-env\"] !== undefined)\n    options.apiKeyEnvironment = values[\"api-key-env\"];\n  delete options[\"base-url\"];\n  delete options[\"api-key-env\"];\n  if (\n    !values.yes &&\n    !process.stdin.isTTY &&\n    (!values.agent || !values.sandboxProvider)\n  )\n    throw new Error(\n      \"Headless initialization requires --yes for defaults, or --agent and --sandbox-provider.\",\n    );\n  if (!values.yes && process.stdin.isTTY) {\n    intro(\"Create an Outpost workflow\");\n    for (const question of initializationQuestions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select({\n        message: question.message,\n        options: question.choices.map((value) => ({ value, label: value })),\n      });\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n    const settings = await projectSettings(\n      resolve(values.directory ?? process.cwd()),\n      options as InitOptions,\n    );\n    const choices = Object.entries(authenticationChoices).find(\n      ([name]) => name === options.agent,\n    )?.[1];\n    invariant(choices, \"Choose codex, claude, antigravity, copilot or kimi\");\n    const questions = [\n      {\n        key: \"manager\",\n        message: \"Package manager\",\n        options: supportedManagers.map((value) => ({ value, label: value })),\n        initialValue: settings.manager,\n      },\n      {\n        key: \"authentication\",\n        message: \"Agent authentication\",\n        options: choices.map(({ value, label }) => ({ value, label })),\n        initialValue: options.baseUrl === undefined ? \"account\" : \"usage\",\n      },\n    ];\n    for (const question of questions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select(question);\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n  }\n  options.build ??= [\"docker\", \"podman\"].includes(\n    String(options.sandboxProvider ?? \"docker\"),\n  );\n  const progress = !values.yes && process.stdin.isTTY ? spinner() : undefined;\n  progress?.start(\n    options.build\n      ? \"Creating project and building its container image\"\n      : \"Creating project\",\n  );\n  let result;\n  try {\n    result = await initialize(options as InitOptions);\n  } catch (error) {\n    progress?.stop(\"Initialization failed\");\n    throw error;\n  }\n  progress?.stop(\"Project ready\");\n  const installation = options.install\n    ? \"\"\n    : \"Install project dependencies with your selected package manager before running.\\n\";\n  const message = `Initialized ${result.files.length} files in ${resolve(values.directory ?? process.cwd())}.\\n${authenticationInstructions(options as InitOptions)}\\n${installation}Run: ${result.run}`;\n  if (!values.yes && process.stdin.isTTY) outro(message);\n  else process.stdout.write(`${message}\\n`);\n}\n"]}