@elie-laloum/outpost 4.2.0 → 6.0.1

package/dist/cli/main.constants.d.ts

@@ -9,7 +9,7 @@ export declare const cliOptions: {
     };
     readonly authentication: {
         readonly type: "string";
-        readonly description: "Authentication: api-key, oauth-token (Claude), login (Codex)";
+        readonly description: "Authentication: account, account-token (Claude, Copilot) or usage";
     };
     readonly help: {
         readonly type: "boolean";
@@ -71,9 +71,9 @@ export declare const cliOptions: {
     };
     readonly agent: {
         readonly type: "string";
-        readonly description: "Agent: codex, claude or gemini";
+        readonly description: "Agent: codex, claude, antigravity, copilot or kimi";
     };
-    readonly provider: {
+    readonly sandboxProvider: {
         readonly type: "string";
         readonly description: "Provider: docker, podman, local, vercel or daytona";
     };
@@ -125,11 +125,11 @@ export declare const cliOptions: {
 export declare const commandOptions: {
     readonly init: {
         readonly description: "Create a standalone workflow project";
-        readonly options: readonly ["yes", "agent", "provider", "manager", "authentication", "model", "base-url", "api-key-env", "install", "build", "image", "directory", "repository"];
+        readonly options: readonly ["yes", "agent", "sandboxProvider", "manager", "authentication", "model", "base-url", "api-key-env", "install", "build", "image", "directory", "repository"];
     };
     readonly doctor: {
         readonly description: "Diagnose host and sandbox prerequisites";
-        readonly options: readonly ["provider", "agent", "image", "json"];
+        readonly options: readonly ["sandboxProvider", "agent", "image", "json"];
     };
     readonly "image build": {
         readonly description: "Build a container image";
@@ -159,29 +159,66 @@ export declare const commandOptions: {
 export declare const initializationQuestions: readonly [{
     readonly key: "agent";
     readonly message: "Coding agent";
-    readonly choices: readonly ["codex", "claude", "gemini"];
+    readonly choices: readonly ["codex", "claude", "antigravity", "copilot", "kimi"];
 }, {
-    readonly key: "provider";
+    readonly key: "sandboxProvider";
     readonly message: "Sandbox provider";
     readonly choices: readonly ["docker", "podman", "vercel", "daytona", "local"];
 }];
 export declare const authenticationChoices: {
     readonly codex: readonly [{
-        readonly value: "api-key";
-        readonly label: "OpenAI API key (API billing)";
+        readonly value: "account";
+        readonly label: "ChatGPT account (codex login, file storage)";
+        readonly instructions: "Run codex login on the host with cli_auth_credentials_store = \"file\". Isolated sandboxes receive a private copy of auth.json; the local provider uses the host login. This uses your ChatGPT plan.";
     }, {
-        readonly value: "login";
-        readonly label: "Existing Codex account login";
+        readonly value: "usage";
+        readonly label: "OpenAI API key (API billing)";
+        readonly variable: "OPENAI_API_KEY";
+        readonly instructions: "Set OPENAI_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.";
     }];
     readonly claude: readonly [{
-        readonly value: "api-key";
-        readonly label: "Anthropic API key (API billing)";
+        readonly value: "account";
+        readonly label: "Claude subscription login (claude /login)";
+        readonly instructions: "Run claude and /login on the host. Isolated sandboxes receive only the subscription entry of .credentials.json. Logins stored in the macOS keychain are never read: choose account-token there.";
     }, {
-        readonly value: "oauth-token";
+        readonly value: "account-token";
         readonly label: "Claude subscription token (claude setup-token)";
+        readonly variable: "CLAUDE_CODE_OAUTH_TOKEN";
+        readonly instructions: "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Anthropic API key (API billing)";
+        readonly variable: "ANTHROPIC_API_KEY";
+        readonly instructions: "Set ANTHROPIC_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.";
     }];
-    readonly gemini: readonly [{
-        readonly value: "api-key";
-        readonly label: "Gemini API key";
+    readonly antigravity: readonly [{
+        readonly value: "account";
+        readonly label: "Google account login (agy)";
+        readonly instructions: "Run agy on the host and sign in with your Google account. Isolated sandboxes receive a private copy of the Antigravity OAuth token.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Gemini API key (API billing)";
+        readonly variable: "GEMINI_API_KEY";
+        readonly instructions: "Set GEMINI_API_KEY in the workflow .env or parent environment. Gemini API usage is billed separately from Google AI plans.";
+    }];
+    readonly copilot: readonly [{
+        readonly value: "account";
+        readonly label: "GitHub Copilot login (copilot login)";
+        readonly instructions: "Run copilot login on the host. Outpost passes the token stored in ~/.copilot/config.json as COPILOT_GITHUB_TOKEN; tokens kept in the system keychain are never read: choose account-token there.";
+    }, {
+        readonly value: "account-token";
+        readonly label: "GitHub token with Copilot access (COPILOT_GITHUB_TOKEN)";
+        readonly variable: "COPILOT_GITHUB_TOKEN";
+        readonly instructions: "Set COPILOT_GITHUB_TOKEN to a fine-grained token with the Copilot Requests permission in the workflow .env or parent environment. Classic ghp_ tokens are rejected. Requests count against your Copilot plan.";
+    }];
+    readonly kimi: readonly [{
+        readonly value: "account";
+        readonly label: "Kimi Code account login";
+        readonly instructions: "Sign in with the kimi CLI on the host. Isolated sandboxes receive a private copy of the ~/.kimi-code credentials and device identifier.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Kimi API key (API billing, requires --model)";
+        readonly variable: "KIMI_API_KEY";
+        readonly instructions: "Set KIMI_API_KEY in the workflow .env or parent environment. API usage is billed separately from Kimi Code plans.";
     }];
 };

package/dist/cli/main.constants.js

@@ -9,7 +9,7 @@ export const cliOptions = {
     },
     authentication: {
         type: "string",
-        description: "Authentication: api-key, oauth-token (Claude), login (Codex)",
+        description: "Authentication: account, account-token (Claude, Copilot) or usage",
     },
     help: { type: "boolean", short: "h", description: "Help" },
     yes: {
@@ -38,8 +38,11 @@ export const cliOptions = {
     checksums: { type: "boolean", description: "Verify retained file checksums" },
     "max-bytes": { type: "string", description: "Maximum bytes to inspect" },
     "max-entries": { type: "string", description: "Maximum inventory entries" },
-    agent: { type: "string", description: "Agent: codex, claude or gemini" },
-    provider: {
+    agent: {
+        type: "string",
+        description: "Agent: codex, claude, antigravity, copilot or kimi",
+    },
+    sandboxProvider: {
         type: "string",
         description: "Provider: docker, podman, local, vercel or daytona",
     },
@@ -67,7 +70,7 @@ export const commandOptions = {
         options: [
             "yes",
             "agent",
-            "provider",
+            "sandboxProvider",
             "manager",
             "authentication",
             "model",
@@ -82,7 +85,7 @@ export const commandOptions = {
     },
     doctor: {
         description: "Diagnose host and sandbox prerequisites",
-        options: ["provider", "agent", "image", "json"],
+        options: ["sandboxProvider", "agent", "image", "json"],
     },
     "image build": {
         description: "Build a container image",
@@ -128,26 +131,85 @@ export const initializationQuestions = [
     {
         key: "agent",
         message: "Coding agent",
-        choices: ["codex", "claude", "gemini"],
+        choices: ["codex", "claude", "antigravity", "copilot", "kimi"],
     },
     {
-        key: "provider",
+        key: "sandboxProvider",
         message: "Sandbox provider",
         choices: ["docker", "podman", "vercel", "daytona", "local"],
     },
 ];
 export const authenticationChoices = {
     codex: [
-        { value: "api-key", label: "OpenAI API key (API billing)" },
-        { value: "login", label: "Existing Codex account login" },
+        {
+            value: "account",
+            label: "ChatGPT account (codex login, file storage)",
+            instructions: 'Run codex login on the host with cli_auth_credentials_store = "file". Isolated sandboxes receive a private copy of auth.json; the local provider uses the host login. This uses your ChatGPT plan.',
+        },
+        {
+            value: "usage",
+            label: "OpenAI API key (API billing)",
+            variable: "OPENAI_API_KEY",
+            instructions: "Set OPENAI_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.",
+        },
     ],
     claude: [
-        { value: "api-key", label: "Anthropic API key (API billing)" },
         {
-            value: "oauth-token",
+            value: "account",
+            label: "Claude subscription login (claude /login)",
+            instructions: "Run claude and /login on the host. Isolated sandboxes receive only the subscription entry of .credentials.json. Logins stored in the macOS keychain are never read: choose account-token there.",
+        },
+        {
+            value: "account-token",
             label: "Claude subscription token (claude setup-token)",
+            variable: "CLAUDE_CODE_OAUTH_TOKEN",
+            instructions: "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.",
+        },
+        {
+            value: "usage",
+            label: "Anthropic API key (API billing)",
+            variable: "ANTHROPIC_API_KEY",
+            instructions: "Set ANTHROPIC_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.",
+        },
+    ],
+    antigravity: [
+        {
+            value: "account",
+            label: "Google account login (agy)",
+            instructions: "Run agy on the host and sign in with your Google account. Isolated sandboxes receive a private copy of the Antigravity OAuth token.",
+        },
+        {
+            value: "usage",
+            label: "Gemini API key (API billing)",
+            variable: "GEMINI_API_KEY",
+            instructions: "Set GEMINI_API_KEY in the workflow .env or parent environment. Gemini API usage is billed separately from Google AI plans.",
+        },
+    ],
+    copilot: [
+        {
+            value: "account",
+            label: "GitHub Copilot login (copilot login)",
+            instructions: "Run copilot login on the host. Outpost passes the token stored in ~/.copilot/config.json as COPILOT_GITHUB_TOKEN; tokens kept in the system keychain are never read: choose account-token there.",
+        },
+        {
+            value: "account-token",
+            label: "GitHub token with Copilot access (COPILOT_GITHUB_TOKEN)",
+            variable: "COPILOT_GITHUB_TOKEN",
+            instructions: "Set COPILOT_GITHUB_TOKEN to a fine-grained token with the Copilot Requests permission in the workflow .env or parent environment. Classic ghp_ tokens are rejected. Requests count against your Copilot plan.",
+        },
+    ],
+    kimi: [
+        {
+            value: "account",
+            label: "Kimi Code account login",
+            instructions: "Sign in with the kimi CLI on the host. Isolated sandboxes receive a private copy of the ~/.kimi-code credentials and device identifier.",
+        },
+        {
+            value: "usage",
+            label: "Kimi API key (API billing, requires --model)",
+            variable: "KIMI_API_KEY",
+            instructions: "Set KIMI_API_KEY in the workflow .env or parent environment. API usage is billed separately from Kimi Code plans.",
         },
     ],
-    gemini: [{ value: "api-key", label: "Gemini API key" }],
 };
 //# sourceMappingURL=main.constants.js.map

package/dist/cli/main.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.constants.js","sourceRoot":"","sources":["../../src/cli/main.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8DAA8D;KAC5E;IACD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE;IAC1D,GAAG,EAAE;QACH,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,mCAAmC;KACjD;IACD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACzE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACpE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,sCAAsC;KACpD;IACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACpE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACvE,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qDAAqD;KACnE;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;IAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAChE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC7E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACxE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC3E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACxE,QAAQ,EAAE;QACR,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oDAAoD;KAClE;IACD,OAAO,EAAE;QACP,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC1D,SAAS,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACzE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;IAC5E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE;QACJ,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE;YACP,KAAK;YACL,OAAO;YACP,UAAU;YACV,SAAS;YACT,gBAAgB;YAChB,OAAO;YACP,UAAU;YACV,aAAa;YACb,SAAS;YACT,OAAO;YACP,OAAO;YACP,WAAW;YACX,YAAY;SACb;KACF;IACD,MAAM,EAAE;QACN,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KAChD;IACD,aAAa,EAAE;QACb,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;KAChE;IACD,cAAc,EAAE;QACd,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC1C;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5E;IACD,iBAAiB,EAAE;QACjB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE;YACP,WAAW;YACX,WAAW;YACX,WAAW;YACX,eAAe;YACf,YAAY;YACZ,MAAM;SACP;KACF;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE;YACP,WAAW;YACX,YAAY;YACZ,aAAa;YACb,MAAM;YACN,WAAW;YACX,OAAO;YACP,MAAM;SACP;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;KACnD;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;QACE,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACvC;IACD;QACE,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;KAC5D;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE;QACL,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,8BAA8B,EAAE;QAC3D,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE;KAC1D;IACD,MAAM,EAAE;QACN,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,EAAE;QAC9D;YACE,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,gDAAgD;SACxD;KACF;IACD,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC/C,CAAC","sourcesContent":["export const cliOptions = {\n  \"base-url\": {\n    type: \"string\",\n    description: \"Custom Codex Responses API base URL (requires --model)\",\n  },\n  \"api-key-env\": {\n    type: \"string\",\n    description: \"Custom provider API-key environment variable\",\n  },\n  authentication: {\n    type: \"string\",\n    description: \"Authentication: api-key, oauth-token (Claude), login (Codex)\",\n  },\n  help: { type: \"boolean\", short: \"h\", description: \"Help\" },\n  yes: {\n    type: \"boolean\",\n    short: \"y\",\n    description: \"Accept defaults without prompting\",\n  },\n  install: { type: \"boolean\", description: \"Install project dependencies\" },\n  build: { type: \"boolean\", description: \"Build the container image\" },\n  json: {\n    type: \"boolean\",\n    description: \"Write a machine-readable JSON report\",\n  },\n  git: { type: \"boolean\", description: \"Inspect workspace Git state\" },\n  locks: { type: \"boolean\", description: \"Inspect local lock ownership\" },\n  resources: {\n    type: \"boolean\",\n    description: \"Inspect recorded sandbox activity\",\n  },\n  restorability: {\n    type: \"boolean\",\n    description: \"Check whether the retained transfer can be restored\",\n  },\n  apply: { type: \"boolean\", description: \"Apply changes (default: preview)\" },\n  policy: { type: \"string\", description: \"Retention policy file\" },\n  checksums: { type: \"boolean\", description: \"Verify retained file checksums\" },\n  \"max-bytes\": { type: \"string\", description: \"Maximum bytes to inspect\" },\n  \"max-entries\": { type: \"string\", description: \"Maximum inventory entries\" },\n  agent: { type: \"string\", description: \"Agent: codex, claude or gemini\" },\n  provider: {\n    type: \"string\",\n    description: \"Provider: docker, podman, local, vercel or daytona\",\n  },\n  manager: {\n    type: \"string\",\n    description: \"Package manager: npm, pnpm, yarn or bun\",\n  },\n  model: { type: \"string\", description: \"Agent model name\" },\n  directory: {\n    type: \"string\",\n    description: \"Workflow or retained transfer directory\",\n  },\n  repository: { type: \"string\", description: \"Target Git repository\" },\n  destination: { type: \"string\", description: \"New restoration directory\" },\n  side: { type: \"string\", description: \"Transfer side: previous or incoming\" },\n  engine: { type: \"string\", description: \"Container engine: docker or podman\" },\n  file: { type: \"string\", description: \"Container recipe path\" },\n  image: { type: \"string\", description: \"Container image name\" },\n  uid: { type: \"string\", description: \"Container user ID\" },\n  gid: { type: \"string\", description: \"Container group ID\" },\n} as const;\n\nexport const commandOptions = {\n  init: {\n    description: \"Create a standalone workflow project\",\n    options: [\n      \"yes\",\n      \"agent\",\n      \"provider\",\n      \"manager\",\n      \"authentication\",\n      \"model\",\n      \"base-url\",\n      \"api-key-env\",\n      \"install\",\n      \"build\",\n      \"image\",\n      \"directory\",\n      \"repository\",\n    ],\n  },\n  doctor: {\n    description: \"Diagnose host and sandbox prerequisites\",\n    options: [\"provider\", \"agent\", \"image\", \"json\"],\n  },\n  \"image build\": {\n    description: \"Build a container image\",\n    options: [\"directory\", \"engine\", \"file\", \"image\", \"uid\", \"gid\"],\n  },\n  \"image remove\": {\n    description: \"Remove a container image\",\n    options: [\"directory\", \"engine\", \"image\"],\n  },\n  \"recovery inspect\": {\n    description: \"Inspect recovery inventory\",\n    options: [\"repository\", \"max-entries\", \"git\", \"locks\", \"resources\", \"json\"],\n  },\n  \"recovery verify\": {\n    description: \"Verify a retained transfer\",\n    options: [\n      \"directory\",\n      \"checksums\",\n      \"max-bytes\",\n      \"restorability\",\n      \"repository\",\n      \"json\",\n    ],\n  },\n  \"recovery restore\": {\n    description: \"Restore a retained transfer\",\n    options: [\n      \"directory\",\n      \"repository\",\n      \"destination\",\n      \"side\",\n      \"max-bytes\",\n      \"apply\",\n      \"json\",\n    ],\n  },\n  \"recovery prune\": {\n    description: \"Apply an explicit retention policy\",\n    options: [\"policy\", \"repository\", \"apply\", \"json\"],\n  },\n} as const;\n\nexport const initializationQuestions = [\n  {\n    key: \"agent\",\n    message: \"Coding agent\",\n    choices: [\"codex\", \"claude\", \"gemini\"],\n  },\n  {\n    key: \"provider\",\n    message: \"Sandbox provider\",\n    choices: [\"docker\", \"podman\", \"vercel\", \"daytona\", \"local\"],\n  },\n] as const;\n\nexport const authenticationChoices = {\n  codex: [\n    { value: \"api-key\", label: \"OpenAI API key (API billing)\" },\n    { value: \"login\", label: \"Existing Codex account login\" },\n  ],\n  claude: [\n    { value: \"api-key\", label: \"Anthropic API key (API billing)\" },\n    {\n      value: \"oauth-token\",\n      label: \"Claude subscription token (claude setup-token)\",\n    },\n  ],\n  gemini: [{ value: \"api-key\", label: \"Gemini API key\" }],\n} as const;\n"]}
+{"version":3,"file":"main.constants.js","sourceRoot":"","sources":["../../src/cli/main.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,mEAAmE;KACtE;IACD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE;IAC1D,GAAG,EAAE;QACH,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,mCAAmC;KACjD;IACD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACzE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACpE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,sCAAsC;KACpD;IACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACpE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACvE,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,qDAAqD;KACnE;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;IAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAChE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC7E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACxE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC3E,KAAK,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oDAAoD;KAClE;IACD,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oDAAoD;KAClE;IACD,OAAO,EAAE;QACP,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC1D,SAAS,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACzE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;IAC5E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;IAC7E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE;QACJ,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE;YACP,KAAK;YACL,OAAO;YACP,iBAAiB;YACjB,SAAS;YACT,gBAAgB;YAChB,OAAO;YACP,UAAU;YACV,aAAa;YACb,SAAS;YACT,OAAO;YACP,OAAO;YACP,WAAW;YACX,YAAY;SACb;KACF;IACD,MAAM,EAAE;QACN,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KACvD;IACD,aAAa,EAAE;QACb,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC;KAChE;IACD,cAAc,EAAE;QACd,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC1C;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5E;IACD,iBAAiB,EAAE;QACjB,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE;YACP,WAAW;YACX,WAAW;YACX,WAAW;YACX,eAAe;YACf,YAAY;YACZ,MAAM;SACP;KACF;IACD,kBAAkB,EAAE;QAClB,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE;YACP,WAAW;YACX,YAAY;YACZ,aAAa;YACb,MAAM;YACN,WAAW;YACX,OAAO;YACP,MAAM;SACP;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC;KACnD;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;QACE,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;KAC/D;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;KAC5D;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE;QACL;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,6CAA6C;YACpD,YAAY,EACV,oMAAoM;SACvM;QACD;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,8BAA8B;YACrC,QAAQ,EAAE,gBAAgB;YAC1B,YAAY,EACV,mHAAmH;SACtH;KACF;IACD,MAAM,EAAE;QACN;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,2CAA2C;YAClD,YAAY,EACV,iMAAiM;SACpM;QACD;YACE,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,gDAAgD;YACvD,QAAQ,EAAE,yBAAyB;YACnC,YAAY,EACV,sJAAsJ;SACzJ;QACD;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,iCAAiC;YACxC,QAAQ,EAAE,mBAAmB;YAC7B,YAAY,EACV,sHAAsH;SACzH;KACF;IACD,WAAW,EAAE;QACX;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,4BAA4B;YACnC,YAAY,EACV,qIAAqI;SACxI;QACD;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,8BAA8B;YACrC,QAAQ,EAAE,gBAAgB;YAC1B,YAAY,EACV,4HAA4H;SAC/H;KACF;IACD,OAAO,EAAE;QACP;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,sCAAsC;YAC7C,YAAY,EACV,kMAAkM;SACrM;QACD;YACE,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,yDAAyD;YAChE,QAAQ,EAAE,sBAAsB;YAChC,YAAY,EACV,+MAA+M;SAClN;KACF;IACD,IAAI,EAAE;QACJ;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,yBAAyB;YAChC,YAAY,EACV,yIAAyI;SAC5I;QACD;YACE,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,8CAA8C;YACrD,QAAQ,EAAE,cAAc;YACxB,YAAY,EACV,mHAAmH;SACtH;KACF;CACO,CAAC","sourcesContent":["export const cliOptions = {\n  \"base-url\": {\n    type: \"string\",\n    description: \"Custom Codex Responses API base URL (requires --model)\",\n  },\n  \"api-key-env\": {\n    type: \"string\",\n    description: \"Custom provider API-key environment variable\",\n  },\n  authentication: {\n    type: \"string\",\n    description:\n      \"Authentication: account, account-token (Claude, Copilot) or usage\",\n  },\n  help: { type: \"boolean\", short: \"h\", description: \"Help\" },\n  yes: {\n    type: \"boolean\",\n    short: \"y\",\n    description: \"Accept defaults without prompting\",\n  },\n  install: { type: \"boolean\", description: \"Install project dependencies\" },\n  build: { type: \"boolean\", description: \"Build the container image\" },\n  json: {\n    type: \"boolean\",\n    description: \"Write a machine-readable JSON report\",\n  },\n  git: { type: \"boolean\", description: \"Inspect workspace Git state\" },\n  locks: { type: \"boolean\", description: \"Inspect local lock ownership\" },\n  resources: {\n    type: \"boolean\",\n    description: \"Inspect recorded sandbox activity\",\n  },\n  restorability: {\n    type: \"boolean\",\n    description: \"Check whether the retained transfer can be restored\",\n  },\n  apply: { type: \"boolean\", description: \"Apply changes (default: preview)\" },\n  policy: { type: \"string\", description: \"Retention policy file\" },\n  checksums: { type: \"boolean\", description: \"Verify retained file checksums\" },\n  \"max-bytes\": { type: \"string\", description: \"Maximum bytes to inspect\" },\n  \"max-entries\": { type: \"string\", description: \"Maximum inventory entries\" },\n  agent: {\n    type: \"string\",\n    description: \"Agent: codex, claude, antigravity, copilot or kimi\",\n  },\n  sandboxProvider: {\n    type: \"string\",\n    description: \"Provider: docker, podman, local, vercel or daytona\",\n  },\n  manager: {\n    type: \"string\",\n    description: \"Package manager: npm, pnpm, yarn or bun\",\n  },\n  model: { type: \"string\", description: \"Agent model name\" },\n  directory: {\n    type: \"string\",\n    description: \"Workflow or retained transfer directory\",\n  },\n  repository: { type: \"string\", description: \"Target Git repository\" },\n  destination: { type: \"string\", description: \"New restoration directory\" },\n  side: { type: \"string\", description: \"Transfer side: previous or incoming\" },\n  engine: { type: \"string\", description: \"Container engine: docker or podman\" },\n  file: { type: \"string\", description: \"Container recipe path\" },\n  image: { type: \"string\", description: \"Container image name\" },\n  uid: { type: \"string\", description: \"Container user ID\" },\n  gid: { type: \"string\", description: \"Container group ID\" },\n} as const;\n\nexport const commandOptions = {\n  init: {\n    description: \"Create a standalone workflow project\",\n    options: [\n      \"yes\",\n      \"agent\",\n      \"sandboxProvider\",\n      \"manager\",\n      \"authentication\",\n      \"model\",\n      \"base-url\",\n      \"api-key-env\",\n      \"install\",\n      \"build\",\n      \"image\",\n      \"directory\",\n      \"repository\",\n    ],\n  },\n  doctor: {\n    description: \"Diagnose host and sandbox prerequisites\",\n    options: [\"sandboxProvider\", \"agent\", \"image\", \"json\"],\n  },\n  \"image build\": {\n    description: \"Build a container image\",\n    options: [\"directory\", \"engine\", \"file\", \"image\", \"uid\", \"gid\"],\n  },\n  \"image remove\": {\n    description: \"Remove a container image\",\n    options: [\"directory\", \"engine\", \"image\"],\n  },\n  \"recovery inspect\": {\n    description: \"Inspect recovery inventory\",\n    options: [\"repository\", \"max-entries\", \"git\", \"locks\", \"resources\", \"json\"],\n  },\n  \"recovery verify\": {\n    description: \"Verify a retained transfer\",\n    options: [\n      \"directory\",\n      \"checksums\",\n      \"max-bytes\",\n      \"restorability\",\n      \"repository\",\n      \"json\",\n    ],\n  },\n  \"recovery restore\": {\n    description: \"Restore a retained transfer\",\n    options: [\n      \"directory\",\n      \"repository\",\n      \"destination\",\n      \"side\",\n      \"max-bytes\",\n      \"apply\",\n      \"json\",\n    ],\n  },\n  \"recovery prune\": {\n    description: \"Apply an explicit retention policy\",\n    options: [\"policy\", \"repository\", \"apply\", \"json\"],\n  },\n} as const;\n\nexport const initializationQuestions = [\n  {\n    key: \"agent\",\n    message: \"Coding agent\",\n    choices: [\"codex\", \"claude\", \"antigravity\", \"copilot\", \"kimi\"],\n  },\n  {\n    key: \"sandboxProvider\",\n    message: \"Sandbox provider\",\n    choices: [\"docker\", \"podman\", \"vercel\", \"daytona\", \"local\"],\n  },\n] as const;\n\nexport const authenticationChoices = {\n  codex: [\n    {\n      value: \"account\",\n      label: \"ChatGPT account (codex login, file storage)\",\n      instructions:\n        'Run codex login on the host with cli_auth_credentials_store = \"file\". Isolated sandboxes receive a private copy of auth.json; the local provider uses the host login. This uses your ChatGPT plan.',\n    },\n    {\n      value: \"usage\",\n      label: \"OpenAI API key (API billing)\",\n      variable: \"OPENAI_API_KEY\",\n      instructions:\n        \"Set OPENAI_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.\",\n    },\n  ],\n  claude: [\n    {\n      value: \"account\",\n      label: \"Claude subscription login (claude /login)\",\n      instructions:\n        \"Run claude and /login on the host. Isolated sandboxes receive only the subscription entry of .credentials.json. Logins stored in the macOS keychain are never read: choose account-token there.\",\n    },\n    {\n      value: \"account-token\",\n      label: \"Claude subscription token (claude setup-token)\",\n      variable: \"CLAUDE_CODE_OAUTH_TOKEN\",\n      instructions:\n        \"Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.\",\n    },\n    {\n      value: \"usage\",\n      label: \"Anthropic API key (API billing)\",\n      variable: \"ANTHROPIC_API_KEY\",\n      instructions:\n        \"Set ANTHROPIC_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.\",\n    },\n  ],\n  antigravity: [\n    {\n      value: \"account\",\n      label: \"Google account login (agy)\",\n      instructions:\n        \"Run agy on the host and sign in with your Google account. Isolated sandboxes receive a private copy of the Antigravity OAuth token.\",\n    },\n    {\n      value: \"usage\",\n      label: \"Gemini API key (API billing)\",\n      variable: \"GEMINI_API_KEY\",\n      instructions:\n        \"Set GEMINI_API_KEY in the workflow .env or parent environment. Gemini API usage is billed separately from Google AI plans.\",\n    },\n  ],\n  copilot: [\n    {\n      value: \"account\",\n      label: \"GitHub Copilot login (copilot login)\",\n      instructions:\n        \"Run copilot login on the host. Outpost passes the token stored in ~/.copilot/config.json as COPILOT_GITHUB_TOKEN; tokens kept in the system keychain are never read: choose account-token there.\",\n    },\n    {\n      value: \"account-token\",\n      label: \"GitHub token with Copilot access (COPILOT_GITHUB_TOKEN)\",\n      variable: \"COPILOT_GITHUB_TOKEN\",\n      instructions:\n        \"Set COPILOT_GITHUB_TOKEN to a fine-grained token with the Copilot Requests permission in the workflow .env or parent environment. Classic ghp_ tokens are rejected. Requests count against your Copilot plan.\",\n    },\n  ],\n  kimi: [\n    {\n      value: \"account\",\n      label: \"Kimi Code account login\",\n      instructions:\n        \"Sign in with the kimi CLI on the host. Isolated sandboxes receive a private copy of the ~/.kimi-code credentials and device identifier.\",\n    },\n    {\n      value: \"usage\",\n      label: \"Kimi API key (API billing, requires --model)\",\n      variable: \"KIMI_API_KEY\",\n      instructions:\n        \"Set KIMI_API_KEY in the workflow .env or parent environment. API usage is billed separately from Kimi Code plans.\",\n    },\n  ],\n} as const;\n"]}

package/dist/cli/recovery-command.js

@@ -68,7 +68,7 @@ export async function recoveryCommand({ values, positionals, }) {
             process.stdout.write(`Recorded sandbox activity: ${report.resources.complete ? "complete for listed records" : "partial"}\n`);
             for (const entry of report.resources.entries) {
                 const detail = entry.record
-                    ? `${JSON.stringify(entry.record.provider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(", ") || "idle"}`
+                    ? `${JSON.stringify(entry.record.sandboxProvider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(", ") || "idle"}`
                     : "unreadable";
                 process.stdout.write(`  ${JSON.stringify(entry.path)} | ${detail} | ownership ${entry.ownership.status}: ${entry.ownership.reason}\n`);
             }

package/dist/cli/recovery-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"recovery-command.js","sourceRoot":"","sources":["../../src/cli/recovery-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,EACN,WAAW,GACG;IACd,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS;QAC9B,OAAO,sBAAsB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAC5B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EACxD,qHAAqH,CACtH,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP;YACE,YAAY;YACZ,aAAa;YACb,KAAK;YACL,OAAO;YACP,WAAW;YACX,MAAM;SACP,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,kCAAkC,GAAG,EAAE,CACxC,CAAC;IACJ,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SACzE,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACvE,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAChE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,UAAU,IAAI,cAAc,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,CACpN,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACjG,CAAC;YACF,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC9C,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,KAAK,YAAY;oBAC9B,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC5L,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CAC3G,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5J,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACxG,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;oBACnL,CAAC,CAAC,YAAY,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,gBAAgB,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,CACjH,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yIAAyI,CAC1I,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,qBAAqB,CAC/I,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,2CAA2C,gEAAgE,CACzJ,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS;YAC5C,CAAC,CAAC,yGAAyG;YAC3G,CAAC,CAAC,8FAA8F,CACnG,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,KAAK;QAC9B,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,KAAK,KAAK;QAEpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import { recoveryRestoreCommand } from \"./recovery-restore-command.ts\";\nimport { recoveryPruneCommand } from \"./recovery-prune-command.ts\";\nimport { recoveryVerifyCommand } from \"./recovery-verify-command.ts\";\nimport { inspectRecovery } from \"../application/recovery-inspection.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nexport async function recoveryCommand({\n  values,\n  positionals,\n}: CliInvocation): Promise<void> {\n  if (positionals[1] === \"restore\")\n    return recoveryRestoreCommand({ values, positionals });\n  if (positionals[1] === \"prune\")\n    return recoveryPruneCommand({ values, positionals });\n  if (positionals[1] === \"verify\")\n    return recoveryVerifyCommand({ values, positionals });\n  invariant(\n    positionals.length === 2 && positionals[1] === \"inspect\",\n    \"Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--resources] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\n        \"repository\",\n        \"max-entries\",\n        \"git\",\n        \"locks\",\n        \"resources\",\n        \"json\",\n      ].includes(key),\n      `Unsupported recovery option: --${key}`,\n    );\n  const maxEntries =\n    values[\"max-entries\"] === undefined\n      ? undefined\n      : positive(Number(values[\"max-entries\"]), \"max-entries\");\n  const report = await inspectRecovery({\n    ...(values.repository !== undefined\n      ? { repository: values.repository }\n      : {}),\n    ...(maxEntries !== undefined ? { maxEntries } : {}),\n    ...(values.git ? { git: true } : {}),\n    ...(values.resources ? { resources: true } : {}),\n    ...(values.locks ? { locks: true } : {}),\n  });\n  if (values.json) process.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    process.stdout.write(\n      `Outpost recovery inspection — ${JSON.stringify(report.repository)}\\n`,\n    );\n    for (const category of report.categories) {\n      process.stdout.write(\n        `${category.name}: ${category.entries.length} listed entries\\n`,\n      );\n      for (const entry of category.entries)\n        process.stdout.write(\n          `  ${JSON.stringify(entry.name)} | ${entry.kind} | ${entry.bytes} bytes | ${entry.files} files | ${entry.symlinks} symlinks | ${entry.modifiedAt ?? \"unknown time\"} | ${entry.complete ? \"complete\" : \"partial\"}\\n`,\n        );\n    }\n    if (report.git) {\n      process.stdout.write(\n        `Workspace Git inspection: ${report.git.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const workspace of report.git.workspaces) {\n        const detail =\n          workspace.state === \"registered\"\n            ? `${workspace.branch === null ? \"detached HEAD\" : JSON.stringify(workspace.branch)} | ${workspace.dirty ? \"dirty\" : \"clean\"} | ${workspace.head}${workspace.locked ? \" | Git locked\" : \"\"}`\n            : workspace.state;\n        process.stdout.write(\n          `  ${JSON.stringify(workspace.name)} | ${detail}\\n`,\n        );\n      }\n      for (const issue of report.git.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Git status excludes ignored files. Clean does not mean safe to delete.\\n\",\n      );\n    }\n    if (report.locks) {\n      process.stdout.write(\n        `Lock PID inspection (local host): ${report.locks.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const lock of report.locks.entries) {\n        const pid = \"pid\" in lock ? ` | PID ${lock.pid}` : \"\";\n        const reason = \"reason\" in lock ? ` | ${lock.reason}` : \"\";\n        process.stdout.write(\n          `  ${JSON.stringify(lock.name)} | ${lock.state}${pid}${reason}${lock.ownership ? ` | ownership ${lock.ownership.status}: ${lock.ownership.reason}` : \"\"}\\n`,\n        );\n      }\n      for (const issue of report.locks.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"PID presence does not prove lock ownership; PID absence does not authorize deletion.\\n\",\n      );\n    }\n    if (report.resources) {\n      process.stdout.write(\n        `Recorded sandbox activity: ${report.resources.complete ? \"complete for listed records\" : \"partial\"}\\n`,\n      );\n      for (const entry of report.resources.entries) {\n        const detail = entry.record\n          ? `${JSON.stringify(entry.record.provider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(\", \") || \"idle\"}`\n          : \"unreadable\";\n        process.stdout.write(\n          `  ${JSON.stringify(entry.path)} | ${detail} | ownership ${entry.ownership.status}: ${entry.ownership.reason}\\n`,\n        );\n      }\n      for (const issue of report.resources.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Recorded activity is a snapshot; stale or unknown ownership does not authorize resource deletion. Provider resources are not queried.\\n\",\n      );\n    }\n    for (const issue of report.issues)\n      process.stdout.write(\n        `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n      );\n    process.stdout.write(\n      `Total observed: ${report.usage.bytes} bytes in ${report.usage.files} files; ${report.scannedEntries}/${report.maxEntries} entries scanned.\\n`,\n    );\n    process.stdout.write(\n      `${report.complete ? \"Inventory complete.\" : \"Inventory incomplete; totals are partial.\"} File sizes are logical bytes; symlink targets are excluded.\\n`,\n    );\n    process.stdout.write(\n      report.git || report.locks || report.resources\n        ? \"Activity and recovery integrity are unverified. No raw file contents were displayed or files removed.\\n\"\n        : \"Activity and recovery integrity are unverified. No files were read for content or removed.\\n\",\n    );\n  }\n  if (\n    !report.complete ||\n    report.git?.complete === false ||\n    report.locks?.complete === false ||\n    report.resources?.complete === false\n  )\n    process.exitCode = 1;\n}\n"]}
+{"version":3,"file":"recovery-command.js","sourceRoot":"","sources":["../../src/cli/recovery-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,EACN,WAAW,GACG;IACd,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS;QAC9B,OAAO,sBAAsB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAC5B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EACxD,qHAAqH,CACtH,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP;YACE,YAAY;YACZ,aAAa;YACb,KAAK;YACL,OAAO;YACP,WAAW;YACX,MAAM;SACP,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,kCAAkC,GAAG,EAAE,CACxC,CAAC;IACJ,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SACzE,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACvE,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,mBAAmB,CAChE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,UAAU,IAAI,cAAc,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,CACpN,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACjG,CAAC;YACF,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC9C,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,KAAK,YAAY;oBAC9B,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC5L,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI,CACpD,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CAC3G,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5J,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,SAAS,IAAI,CACxG,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;oBACzB,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;oBAC1L,CAAC,CAAC,YAAY,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,gBAAgB,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,CACjH,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM;gBACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yIAAyI,CAC1I,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAC3D,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,qBAAqB,CAC/I,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,2CAA2C,gEAAgE,CACzJ,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS;YAC5C,CAAC,CAAC,yGAAyG;YAC3G,CAAC,CAAC,8FAA8F,CACnG,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ;QAChB,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,KAAK;QAC9B,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK;QAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,KAAK,KAAK;QAEpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import { recoveryRestoreCommand } from \"./recovery-restore-command.ts\";\nimport { recoveryPruneCommand } from \"./recovery-prune-command.ts\";\nimport { recoveryVerifyCommand } from \"./recovery-verify-command.ts\";\nimport { inspectRecovery } from \"../application/recovery-inspection.ts\";\nimport { invariant, positive } from \"../domain/errors.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nexport async function recoveryCommand({\n  values,\n  positionals,\n}: CliInvocation): Promise<void> {\n  if (positionals[1] === \"restore\")\n    return recoveryRestoreCommand({ values, positionals });\n  if (positionals[1] === \"prune\")\n    return recoveryPruneCommand({ values, positionals });\n  if (positionals[1] === \"verify\")\n    return recoveryVerifyCommand({ values, positionals });\n  invariant(\n    positionals.length === 2 && positionals[1] === \"inspect\",\n    \"Usage: outpost recovery inspect [--repository PATH] [--max-entries NUMBER] [--git] [--locks] [--resources] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\n        \"repository\",\n        \"max-entries\",\n        \"git\",\n        \"locks\",\n        \"resources\",\n        \"json\",\n      ].includes(key),\n      `Unsupported recovery option: --${key}`,\n    );\n  const maxEntries =\n    values[\"max-entries\"] === undefined\n      ? undefined\n      : positive(Number(values[\"max-entries\"]), \"max-entries\");\n  const report = await inspectRecovery({\n    ...(values.repository !== undefined\n      ? { repository: values.repository }\n      : {}),\n    ...(maxEntries !== undefined ? { maxEntries } : {}),\n    ...(values.git ? { git: true } : {}),\n    ...(values.resources ? { resources: true } : {}),\n    ...(values.locks ? { locks: true } : {}),\n  });\n  if (values.json) process.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    process.stdout.write(\n      `Outpost recovery inspection — ${JSON.stringify(report.repository)}\\n`,\n    );\n    for (const category of report.categories) {\n      process.stdout.write(\n        `${category.name}: ${category.entries.length} listed entries\\n`,\n      );\n      for (const entry of category.entries)\n        process.stdout.write(\n          `  ${JSON.stringify(entry.name)} | ${entry.kind} | ${entry.bytes} bytes | ${entry.files} files | ${entry.symlinks} symlinks | ${entry.modifiedAt ?? \"unknown time\"} | ${entry.complete ? \"complete\" : \"partial\"}\\n`,\n        );\n    }\n    if (report.git) {\n      process.stdout.write(\n        `Workspace Git inspection: ${report.git.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const workspace of report.git.workspaces) {\n        const detail =\n          workspace.state === \"registered\"\n            ? `${workspace.branch === null ? \"detached HEAD\" : JSON.stringify(workspace.branch)} | ${workspace.dirty ? \"dirty\" : \"clean\"} | ${workspace.head}${workspace.locked ? \" | Git locked\" : \"\"}`\n            : workspace.state;\n        process.stdout.write(\n          `  ${JSON.stringify(workspace.name)} | ${detail}\\n`,\n        );\n      }\n      for (const issue of report.git.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Git status excludes ignored files. Clean does not mean safe to delete.\\n\",\n      );\n    }\n    if (report.locks) {\n      process.stdout.write(\n        `Lock PID inspection (local host): ${report.locks.complete ? \"complete for listed entries\" : \"partial\"}\\n`,\n      );\n      for (const lock of report.locks.entries) {\n        const pid = \"pid\" in lock ? ` | PID ${lock.pid}` : \"\";\n        const reason = \"reason\" in lock ? ` | ${lock.reason}` : \"\";\n        process.stdout.write(\n          `  ${JSON.stringify(lock.name)} | ${lock.state}${pid}${reason}${lock.ownership ? ` | ownership ${lock.ownership.status}: ${lock.ownership.reason}` : \"\"}\\n`,\n        );\n      }\n      for (const issue of report.locks.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"PID presence does not prove lock ownership; PID absence does not authorize deletion.\\n\",\n      );\n    }\n    if (report.resources) {\n      process.stdout.write(\n        `Recorded sandbox activity: ${report.resources.complete ? \"complete for listed records\" : \"partial\"}\\n`,\n      );\n      for (const entry of report.resources.entries) {\n        const detail = entry.record\n          ? `${JSON.stringify(entry.record.sandboxProvider)} | ${entry.record.phase} | ${entry.record.operations.map((operation) => `${operation.kind} (${operation.count})`).join(\", \") || \"idle\"}`\n          : \"unreadable\";\n        process.stdout.write(\n          `  ${JSON.stringify(entry.path)} | ${detail} | ownership ${entry.ownership.status}: ${entry.ownership.reason}\\n`,\n        );\n      }\n      for (const issue of report.resources.issues)\n        process.stdout.write(\n          `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n        );\n      process.stdout.write(\n        \"Recorded activity is a snapshot; stale or unknown ownership does not authorize resource deletion. Provider resources are not queried.\\n\",\n      );\n    }\n    for (const issue of report.issues)\n      process.stdout.write(\n        `[PARTIAL] ${issue.code}: ${JSON.stringify(issue.path)}\\n`,\n      );\n    process.stdout.write(\n      `Total observed: ${report.usage.bytes} bytes in ${report.usage.files} files; ${report.scannedEntries}/${report.maxEntries} entries scanned.\\n`,\n    );\n    process.stdout.write(\n      `${report.complete ? \"Inventory complete.\" : \"Inventory incomplete; totals are partial.\"} File sizes are logical bytes; symlink targets are excluded.\\n`,\n    );\n    process.stdout.write(\n      report.git || report.locks || report.resources\n        ? \"Activity and recovery integrity are unverified. No raw file contents were displayed or files removed.\\n\"\n        : \"Activity and recovery integrity are unverified. No files were read for content or removed.\\n\",\n    );\n  }\n  if (\n    !report.complete ||\n    report.git?.complete === false ||\n    report.locks?.complete === false ||\n    report.resources?.complete === false\n  )\n    process.exitCode = 1;\n}\n"]}

package/dist/cli/scaffold-files.js

@@ -3,15 +3,16 @@ import { imageRecipe, providerPackages } from "./scaffold.constants.js";
 import { authenticationEnvironment } from "./init-authentication.js";
 import { starter } from "./starters.js";
 export async function scaffoldFiles(options, hasPackage, extension) {
-    const provider = options.provider ?? "docker";
+    const sandboxProvider = options.sandboxProvider ?? "docker";
     const files = {
         [`run.${extension}`]: starter(options),
         "brief.md": "Objective: {{OBJECTIVE}}\n\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\n",
         ".env.example": authenticationEnvironment(options),
-        ".gitignore": "node_modules/\n.env\n.outpost/workspaces/\n.outpost/locks/\n.outpost/recovery/\n.outpost/logs/\n",
+        ".gitignore": "node_modules/\n.env\n.outpost/workspaces/\n.outpost/locks/\n.outpost/recovery/\n.outpost/logs/\n.outpost/storage/\n",
     };
-    if (provider === "docker" || provider === "podman")
-        files[provider === "docker" ? "Dockerfile" : "Containerfile"] = imageRecipe;
+    if (sandboxProvider === "docker" || sandboxProvider === "podman")
+        files[sandboxProvider === "docker" ? "Dockerfile" : "Containerfile"] =
+            imageRecipe;
     if (!hasPackage) {
         const manifest = JSON.parse(await readFile(new URL("../../package.json", import.meta.url), "utf8"));
         files["package.json"] =
@@ -22,7 +23,7 @@ export async function scaffoldFiles(options, hasPackage, extension) {
                 engines: { node: ">=24" },
                 devDependencies: {
                     "@elie-laloum/outpost": `^${manifest.version}`,
-                    ...Object.fromEntries(providerPackages[provider].map((name) => [
+                    ...Object.fromEntries(providerPackages[sandboxProvider].map((name) => [
                         name,
                         manifest.peerDependencies[name],
                     ])),

package/dist/cli/scaffold-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-files.js","sourceRoot":"","sources":["../../src/cli/scaffold-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAoB,EACpB,UAAmB,EACnB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC9C,MAAM,KAAK,GAA2B;QACpC,CAAC,OAAO,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QACtC,UAAU,EACR,wNAAwN;QAC1N,cAAc,EAAE,yBAAyB,CAAC,OAAO,CAAC;QAClD,YAAY,EACV,kGAAkG;KACrG,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAChD,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;IAE9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACvE,CAAC;QACF,KAAK,CAAC,cAAc,CAAC;YACnB,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,SAAS,EAAE,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzB,eAAe,EAAE;oBACf,sBAAsB,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;oBAC9C,GAAG,MAAM,CAAC,WAAW,CACnB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBACvC,IAAI;wBACJ,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC;qBAChC,CAAC,CACH;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { imageRecipe, providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\nimport { authenticationEnvironment } from \"./init-authentication.ts\";\nimport { starter } from \"./starters.ts\";\n\nexport async function scaffoldFiles(\n  options: InitOptions,\n  hasPackage: boolean,\n  extension: \"ts\" | \"mts\",\n): Promise<Record<string, string>> {\n  const provider = options.provider ?? \"docker\";\n  const files: Record<string, string> = {\n    [`run.${extension}`]: starter(options),\n    \"brief.md\":\n      \"Objective: {{OBJECTIVE}}\\n\\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\\n\",\n    \".env.example\": authenticationEnvironment(options),\n    \".gitignore\":\n      \"node_modules/\\n.env\\n.outpost/workspaces/\\n.outpost/locks/\\n.outpost/recovery/\\n.outpost/logs/\\n\",\n  };\n  if (provider === \"docker\" || provider === \"podman\")\n    files[provider === \"docker\" ? \"Dockerfile\" : \"Containerfile\"] = imageRecipe;\n\n  if (!hasPackage) {\n    const manifest = JSON.parse(\n      await readFile(new URL(\"../../package.json\", import.meta.url), \"utf8\"),\n    );\n    files[\"package.json\"] =\n      JSON.stringify(\n        {\n          private: true,\n          type: \"module\",\n          scripts: { start: `node run.${extension}` },\n          engines: { node: \">=24\" },\n          devDependencies: {\n            \"@elie-laloum/outpost\": `^${manifest.version}`,\n            ...Object.fromEntries(\n              providerPackages[provider].map((name) => [\n                name,\n                manifest.peerDependencies[name],\n              ]),\n            ),\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\";\n  }\n  return files;\n}\n"]}
+{"version":3,"file":"scaffold-files.js","sourceRoot":"","sources":["../../src/cli/scaffold-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAoB,EACpB,UAAmB,EACnB,SAAuB;IAEvB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC;IAC5D,MAAM,KAAK,GAA2B;QACpC,CAAC,OAAO,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;QACtC,UAAU,EACR,wNAAwN;QAC1N,cAAc,EAAE,yBAAyB,CAAC,OAAO,CAAC;QAClD,YAAY,EACV,qHAAqH;KACxH,CAAC;IACF,IAAI,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ;QAC9D,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;YAClE,WAAW,CAAC;IAEhB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACvE,CAAC;QACF,KAAK,CAAC,cAAc,CAAC;YACnB,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,SAAS,EAAE,EAAE;gBAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzB,eAAe,EAAE;oBACf,sBAAsB,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE;oBAC9C,GAAG,MAAM,CAAC,WAAW,CACnB,gBAAgB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBAC9C,IAAI;wBACJ,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC;qBAChC,CAAC,CACH;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { imageRecipe, providerPackages } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\nimport { authenticationEnvironment } from \"./init-authentication.ts\";\nimport { starter } from \"./starters.ts\";\n\nexport async function scaffoldFiles(\n  options: InitOptions,\n  hasPackage: boolean,\n  extension: \"ts\" | \"mts\",\n): Promise<Record<string, string>> {\n  const sandboxProvider = options.sandboxProvider ?? \"docker\";\n  const files: Record<string, string> = {\n    [`run.${extension}`]: starter(options),\n    \"brief.md\":\n      \"Objective: {{OBJECTIVE}}\\n\\nWork on {{WORK_BRANCH}} from {{BASE_BRANCH}}. Inspect the repository, implement the objective, run relevant tests and commit your changes. When finished, write <outpost>done</outpost>.\\n\",\n    \".env.example\": authenticationEnvironment(options),\n    \".gitignore\":\n      \"node_modules/\\n.env\\n.outpost/workspaces/\\n.outpost/locks/\\n.outpost/recovery/\\n.outpost/logs/\\n.outpost/storage/\\n\",\n  };\n  if (sandboxProvider === \"docker\" || sandboxProvider === \"podman\")\n    files[sandboxProvider === \"docker\" ? \"Dockerfile\" : \"Containerfile\"] =\n      imageRecipe;\n\n  if (!hasPackage) {\n    const manifest = JSON.parse(\n      await readFile(new URL(\"../../package.json\", import.meta.url), \"utf8\"),\n    );\n    files[\"package.json\"] =\n      JSON.stringify(\n        {\n          private: true,\n          type: \"module\",\n          scripts: { start: `node run.${extension}` },\n          engines: { node: \">=24\" },\n          devDependencies: {\n            \"@elie-laloum/outpost\": `^${manifest.version}`,\n            ...Object.fromEntries(\n              providerPackages[sandboxProvider].map((name) => [\n                name,\n                manifest.peerDependencies[name],\n              ]),\n            ),\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\";\n  }\n  return files;\n}\n"]}

package/dist/cli/scaffold-validation.js

@@ -1,27 +1,37 @@
-import { codex } from "../adapters/agents/codex-adapter.js";
+import { agent as composeAgent } from "../domain/agent.js";
 import { invariant } from "../domain/errors.js";
-import { supportedAgents, supportedProviders } from "./scaffold.constants.js";
+import { antigravityHarness, claudeHarness, codexHarness, copilotHarness, kimiHarness, } from "../providers/agents.js";
+import { authenticationChoice, authenticationSetting, } from "./init-authentication.js";
+import { authenticationChoices } from "./main.constants.js";
+import { supportedProviders } from "./scaffold.constants.js";
+const harnesses = {
+    codex: codexHarness,
+    claude: claudeHarness,
+    antigravity: antigravityHarness,
+    copilot: copilotHarness,
+    kimi: kimiHarness,
+};
 export function validateInitialization(options) {
-    const agent = options.agent ?? "codex", provider = options.provider ?? "docker";
-    invariant(supportedAgents.includes(agent), "Choose codex, claude or gemini");
-    invariant(supportedProviders.includes(provider), "Unknown sandbox provider");
+    const agent = options.agent ?? "codex", sandboxProvider = options.sandboxProvider ?? "docker";
+    invariant(Object.hasOwn(authenticationChoices, agent), "Choose codex, claude, antigravity, copilot or kimi");
+    invariant(supportedProviders.includes(sandboxProvider), "Unknown sandbox provider");
     invariant(!options.apiKeyEnvironment || options.baseUrl, "--api-key-env requires --base-url");
-    if (options.baseUrl) {
-        invariant(agent === "codex" &&
-            (!options.authentication || options.authentication === "api-key"), "Custom Responses providers require Codex and api-key authentication");
-        codex({
-            ...(options.model ? { model: options.model } : {}),
+    invariant(!options.baseUrl ||
+        (agent === "codex" && authenticationChoice(options).value === "usage"), "Custom Responses providers require Codex and usage authentication");
+    const authentication = authenticationSetting(options);
+    const modelProvider = options.baseUrl
+        ? {
             modelProvider: {
                 baseUrl: options.baseUrl,
                 ...(options.apiKeyEnvironment
                     ? { apiKeyEnvironment: options.apiKeyEnvironment }
                     : {}),
             },
-        });
-    }
-    const authentication = options.authentication ?? "api-key";
-    invariant(authentication === "api-key" ||
-        (authentication === "oauth-token" && agent === "claude") ||
-        (authentication === "login" && agent === "codex"), "Authentication must be api-key, oauth-token for Claude, or login for Codex");
+        }
+        : {};
+    composeAgent({
+        harness: harnesses[agent]({ authentication, ...modelProvider }),
+        ...(options.model ? { model: options.model } : {}),
+    });
 }
 //# sourceMappingURL=scaffold-validation.js.map

package/dist/cli/scaffold-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-validation.js","sourceRoot":"","sources":["../../src/cli/scaffold-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG9E,MAAM,UAAU,sBAAsB,CAAC,OAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC1C,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC7E,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7E,SAAS,CACP,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAC7C,mCAAmC,CACpC,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,SAAS,CACP,KAAK,KAAK,OAAO;YACf,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,EACnE,qEAAqE,CACtE,CAAC;QACF,KAAK,CAAC;YACJ,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,aAAa,EAAE;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,CAAC,OAAO,CAAC,iBAAiB;oBAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC;IAC3D,SAAS,CACP,cAAc,KAAK,SAAS;QAC1B,CAAC,cAAc,KAAK,aAAa,IAAI,KAAK,KAAK,QAAQ,CAAC;QACxD,CAAC,cAAc,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC,EACnD,4EAA4E,CAC7E,CAAC;AACJ,CAAC","sourcesContent":["import { codex } from \"../adapters/agents/codex-adapter.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { supportedAgents, supportedProviders } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport function validateInitialization(options: InitOptions): void {\n  const agent = options.agent ?? \"codex\",\n    provider = options.provider ?? \"docker\";\n  invariant(supportedAgents.includes(agent), \"Choose codex, claude or gemini\");\n  invariant(supportedProviders.includes(provider), \"Unknown sandbox provider\");\n  invariant(\n    !options.apiKeyEnvironment || options.baseUrl,\n    \"--api-key-env requires --base-url\",\n  );\n  if (options.baseUrl) {\n    invariant(\n      agent === \"codex\" &&\n        (!options.authentication || options.authentication === \"api-key\"),\n      \"Custom Responses providers require Codex and api-key authentication\",\n    );\n    codex({\n      ...(options.model ? { model: options.model } : {}),\n      modelProvider: {\n        baseUrl: options.baseUrl,\n        ...(options.apiKeyEnvironment\n          ? { apiKeyEnvironment: options.apiKeyEnvironment }\n          : {}),\n      },\n    });\n  }\n  const authentication = options.authentication ?? \"api-key\";\n  invariant(\n    authentication === \"api-key\" ||\n      (authentication === \"oauth-token\" && agent === \"claude\") ||\n      (authentication === \"login\" && agent === \"codex\"),\n    \"Authentication must be api-key, oauth-token for Claude, or login for Codex\",\n  );\n}\n"]}
+{"version":3,"file":"scaffold-validation.js","sourceRoot":"","sources":["../../src/cli/scaffold-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,aAAa;IACrB,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,cAAc;IACvB,IAAI,EAAE,WAAW;CACT,CAAC;AAEX,MAAM,UAAU,sBAAsB,CAAC,OAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,EACpC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC;IACxD,SAAS,CACP,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAC3C,oDAAoD,CACrD,CAAC;IACF,SAAS,CACP,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAC5C,0BAA0B,CAC3B,CAAC;IACF,SAAS,CACP,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAC7C,mCAAmC,CACpC,CAAC;IACF,SAAS,CACP,CAAC,OAAO,CAAC,OAAO;QACd,CAAC,KAAK,KAAK,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EACxE,mEAAmE,CACpE,CAAC;IACF,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO;QACnC,CAAC,CAAC;YACE,aAAa,EAAE;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,CAAC,OAAO,CAAC,iBAAiB;oBAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACR;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,YAAY,CAAC;QACX,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { agent as composeAgent } from \"../domain/agent.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport {\n  antigravityHarness,\n  claudeHarness,\n  codexHarness,\n  copilotHarness,\n  kimiHarness,\n} from \"../providers/agents.ts\";\nimport {\n  authenticationChoice,\n  authenticationSetting,\n} from \"./init-authentication.ts\";\nimport { authenticationChoices } from \"./main.constants.ts\";\nimport { supportedProviders } from \"./scaffold.constants.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nconst harnesses = {\n  codex: codexHarness,\n  claude: claudeHarness,\n  antigravity: antigravityHarness,\n  copilot: copilotHarness,\n  kimi: kimiHarness,\n} as const;\n\nexport function validateInitialization(options: InitOptions): void {\n  const agent = options.agent ?? \"codex\",\n    sandboxProvider = options.sandboxProvider ?? \"docker\";\n  invariant(\n    Object.hasOwn(authenticationChoices, agent),\n    \"Choose codex, claude, antigravity, copilot or kimi\",\n  );\n  invariant(\n    supportedProviders.includes(sandboxProvider),\n    \"Unknown sandbox provider\",\n  );\n  invariant(\n    !options.apiKeyEnvironment || options.baseUrl,\n    \"--api-key-env requires --base-url\",\n  );\n  invariant(\n    !options.baseUrl ||\n      (agent === \"codex\" && authenticationChoice(options).value === \"usage\"),\n    \"Custom Responses providers require Codex and usage authentication\",\n  );\n  const authentication = authenticationSetting(options);\n  const modelProvider = options.baseUrl\n    ? {\n        modelProvider: {\n          baseUrl: options.baseUrl,\n          ...(options.apiKeyEnvironment\n            ? { apiKeyEnvironment: options.apiKeyEnvironment }\n            : {}),\n        },\n      }\n    : {};\n  composeAgent({\n    harness: harnesses[agent]({ authentication, ...modelProvider }),\n    ...(options.model ? { model: options.model } : {}),\n  });\n}\n"]}

package/dist/cli/scaffold.constants.d.ts

@@ -1,5 +1,4 @@
 export declare const imageRecipe: string;
-export declare const supportedAgents: readonly string[];
 export declare const supportedProviders: readonly string[];
 export declare const supportedManagers: readonly string[];
 export declare const managerLocks: readonly [readonly ["pnpm-lock.yaml", "pnpm"], readonly ["yarn.lock", "yarn"], readonly ["bun.lock", "bun"], readonly ["bun.lockb", "bun"]];

package/dist/cli/scaffold.constants.js

@@ -1,16 +1,19 @@
+import { antigravityInstaller } from "../providers/versions.constants.js";
 import { agentVersions } from "../providers/versions.js";
 export const imageRecipe = `FROM node:24-bookworm-slim
 ARG AGENT_UID=1000
 ARG AGENT_GID=1000
 RUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*
-RUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @google/gemini-cli@${agentVersions.gemini}
+RUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @github/copilot@${agentVersions.copilot} @moonshot-ai/kimi-code@${agentVersions.kimi}
+RUN mkdir -p /tmp/agy && curl -fsSL ${antigravityInstaller} | HOME=/tmp/agy bash && install -m 0755 /tmp/agy/.local/bin/agy /usr/local/bin/agy && rm -rf /tmp/agy
 RUN groupmod -o -g "$AGENT_GID" node && usermod -o -u "$AGENT_UID" -g "$AGENT_GID" node
 RUN mkdir -p /home/agent && chown "$AGENT_UID:$AGENT_GID" /home/agent && chmod 700 /home/agent
 ENV HOME=/home/agent
+# The private home is a noexec tmpfs; Copilot extracts native addons into its cache.
+ENV XDG_CACHE_HOME=/tmp/.cache
 USER $AGENT_UID:$AGENT_GID
 WORKDIR /workspace
 `;
-export const supportedAgents = ["codex", "claude", "gemini"];
 export const supportedProviders = [
     "docker",
     "podman",

package/dist/cli/scaffold.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.constants.js","sourceRoot":"","sources":["../../src/cli/scaffold.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG;;;;6EAIkD,aAAa,CAAC,KAAK,8BAA8B,aAAa,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM;;;;;;CAM5L,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,WAAW,EAAE,MAAM,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,WAAW,EAAE,KAAK,CAAC;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE,CAAC,cAAc,CAAC;CACjB,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const imageRecipe = `FROM node:24-bookworm-slim\nARG AGENT_UID=1000\nARG AGENT_GID=1000\nRUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*\nRUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @google/gemini-cli@${agentVersions.gemini}\nRUN groupmod -o -g \"$AGENT_GID\" node && usermod -o -u \"$AGENT_UID\" -g \"$AGENT_GID\" node\nRUN mkdir -p /home/agent && chown \"$AGENT_UID:$AGENT_GID\" /home/agent && chmod 700 /home/agent\nENV HOME=/home/agent\nUSER $AGENT_UID:$AGENT_GID\nWORKDIR /workspace\n`;\n\nexport const supportedAgents: readonly string[] = [\"codex\", \"claude\", \"gemini\"];\nexport const supportedProviders: readonly string[] = [\n  \"docker\",\n  \"podman\",\n  \"vercel\",\n  \"daytona\",\n  \"local\",\n];\nexport const supportedManagers: readonly string[] = [\n  \"npm\",\n  \"pnpm\",\n  \"yarn\",\n  \"bun\",\n];\nexport const managerLocks = [\n  [\"pnpm-lock.yaml\", \"pnpm\"],\n  [\"yarn.lock\", \"yarn\"],\n  [\"bun.lock\", \"bun\"],\n  [\"bun.lockb\", \"bun\"],\n] as const;\nexport const providerPackages = {\n  docker: [],\n  podman: [],\n  local: [],\n  vercel: [\"@vercel/sandbox\"],\n  daytona: [\"@daytona/sdk\"],\n} as const;\n"]}
+{"version":3,"file":"scaffold.constants.js","sourceRoot":"","sources":["../../src/cli/scaffold.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG;;;;6EAIkD,aAAa,CAAC,KAAK,8BAA8B,aAAa,CAAC,MAAM,oBAAoB,aAAa,CAAC,OAAO,2BAA2B,aAAa,CAAC,IAAI;sCAClM,oBAAoB;;;;;;;;CAQzD,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AACF,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAC1B,CAAC,WAAW,EAAE,MAAM,CAAC;IACrB,CAAC,UAAU,EAAE,KAAK,CAAC;IACnB,CAAC,WAAW,EAAE,KAAK,CAAC;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,OAAO,EAAE,CAAC,cAAc,CAAC;CACjB,CAAC","sourcesContent":["import { antigravityInstaller } from \"../providers/versions.constants.ts\";\nimport { agentVersions } from \"../providers/versions.ts\";\n\nexport const imageRecipe = `FROM node:24-bookworm-slim\nARG AGENT_UID=1000\nARG AGENT_GID=1000\nRUN apt-get update && apt-get install -y --no-install-recommends git openssh-client ca-certificates curl procps util-linux python3 && rm -rf /var/lib/apt/lists/*\nRUN npm install -g --allow-scripts=@anthropic-ai/claude-code @openai/codex@${agentVersions.codex} @anthropic-ai/claude-code@${agentVersions.claude} @github/copilot@${agentVersions.copilot} @moonshot-ai/kimi-code@${agentVersions.kimi}\nRUN mkdir -p /tmp/agy && curl -fsSL ${antigravityInstaller} | HOME=/tmp/agy bash && install -m 0755 /tmp/agy/.local/bin/agy /usr/local/bin/agy && rm -rf /tmp/agy\nRUN groupmod -o -g \"$AGENT_GID\" node && usermod -o -u \"$AGENT_UID\" -g \"$AGENT_GID\" node\nRUN mkdir -p /home/agent && chown \"$AGENT_UID:$AGENT_GID\" /home/agent && chmod 700 /home/agent\nENV HOME=/home/agent\n# The private home is a noexec tmpfs; Copilot extracts native addons into its cache.\nENV XDG_CACHE_HOME=/tmp/.cache\nUSER $AGENT_UID:$AGENT_GID\nWORKDIR /workspace\n`;\n\nexport const supportedProviders: readonly string[] = [\n  \"docker\",\n  \"podman\",\n  \"vercel\",\n  \"daytona\",\n  \"local\",\n];\nexport const supportedManagers: readonly string[] = [\n  \"npm\",\n  \"pnpm\",\n  \"yarn\",\n  \"bun\",\n];\nexport const managerLocks = [\n  [\"pnpm-lock.yaml\", \"pnpm\"],\n  [\"yarn.lock\", \"yarn\"],\n  [\"bun.lock\", \"bun\"],\n  [\"bun.lockb\", \"bun\"],\n] as const;\nexport const providerPackages = {\n  docker: [],\n  podman: [],\n  local: [],\n  vercel: [\"@vercel/sandbox\"],\n  daytona: [\"@daytona/sdk\"],\n} as const;\n"]}

package/dist/cli/scaffold.js

@@ -12,7 +12,7 @@ export { manageImage } from "./image.js";
 export { imageRecipe } from "./scaffold.constants.js";
 export async function initialize(options = {}, executor) {
     const root = resolve(options.directory ?? process.cwd());
-    const provider = options.provider ?? "docker";
+    const sandboxProvider = options.sandboxProvider ?? "docker";
     validateInitialization(options);
     const { hasPackage, manager, extension } = await projectSettings(root, options);
     if (options.install) {
@@ -62,7 +62,10 @@ export async function initialize(options = {}, executor) {
         }
     }
     if (options.install) {
-        const packages = ["@elie-laloum/outpost", ...providerPackages[provider]];
+        const packages = [
+            "@elie-laloum/outpost",
+            ...providerPackages[sandboxProvider],
+        ];
         const args = manager === "npm"
             ? ["install", "--save-dev", ...packages]
             : ["add", "--dev", ...packages];
@@ -74,10 +77,11 @@ export async function initialize(options = {}, executor) {
             }
             : { executable: manager, arguments: args, directory: root }, executor);
     }
-    if (options.build && (provider === "docker" || provider === "podman"))
+    if (options.build &&
+        (sandboxProvider === "docker" || sandboxProvider === "podman"))
         await manageImage("build", {
             directory: root,
-            engine: provider,
+            engine: sandboxProvider,
             ...(options.image ? { image: options.image } : {}),
         }, executor);
     return {