@elie-laloum/outpost 4.2.0 → 6.0.1

package/dist/adapters/tools/git-tools.js

@@ -0,0 +1,54 @@
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { commandOutput } from "./sandbox-files.js";
+import { GIT_BLOCKED_OPTIONS, GIT_READ_COMMANDS, TOOL_LIMITS, } from "./tools.constants.js";
+export function harnessGitTools() {
+    return defineHarnessToolset({
+        name: "git",
+        tools: [
+            defineHarnessTool({
+                name: "git",
+                description: "Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.",
+                readOnly: true,
+                input: {
+                    type: "object",
+                    properties: {
+                        command: { enum: [...GIT_READ_COMMANDS] },
+                        arguments: { type: "array", items: { type: "string" } },
+                    },
+                    required: ["command"],
+                    additionalProperties: false,
+                },
+                resources: (input) => ({
+                    command: ["git", input.command, ...(input.arguments ?? [])].join(" "),
+                }),
+                async execute(input, context) {
+                    const blocked = (input.arguments ?? []).find((argument) => GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)));
+                    if (blocked)
+                        return {
+                            content: `Unsupported Git option: ${blocked}`,
+                            isError: true,
+                        };
+                    const result = await context.sandbox.invoke({
+                        executable: "git",
+                        arguments: [
+                            "--no-pager",
+                            input.command,
+                            ...(input.command === "status"
+                                ? []
+                                : ["--no-ext-diff", "--no-textconv"]),
+                            ...(input.arguments ?? []),
+                        ],
+                        stdin: "",
+                        retain: TOOL_LIMITS.commandCharacters,
+                        signal: context.signal,
+                    });
+                    return {
+                        content: commandOutput(result),
+                        isError: result.status !== 0,
+                    };
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=git-tools.js.map

package/dist/adapters/tools/git-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/git-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,MAAM,UAAU,eAAe;IAC7B,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,WAAW,EACT,sIAAsI;gBACxI,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;wBACzC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACxD;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;oBAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACtE,CAAC;gBACF,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,OAAO;oBACpC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;oBACF,IAAI,OAAO;wBACT,OAAO;4BACL,OAAO,EAAE,2BAA2B,OAAO,EAAE;4BAC7C,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,YAAY;4BACZ,KAAK,CAAC,OAAO;4BACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gCAC5B,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;4BACvC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;yBAC3B;wBACD,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport {\n  GIT_BLOCKED_OPTIONS,\n  GIT_READ_COMMANDS,\n  TOOL_LIMITS,\n} from \"./tools.constants.ts\";\nimport type { GitInput } from \"./tools.types.ts\";\n\nexport function harnessGitTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"git\",\n    tools: [\n      defineHarnessTool({\n        name: \"git\",\n        description:\n          \"Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.\",\n        readOnly: true,\n        input: {\n          type: \"object\",\n          properties: {\n            command: { enum: [...GIT_READ_COMMANDS] },\n            arguments: { type: \"array\", items: { type: \"string\" } },\n          },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: GitInput) => ({\n          command: [\"git\", input.command, ...(input.arguments ?? [])].join(\" \"),\n        }),\n        async execute(input: GitInput, context) {\n          const blocked = (input.arguments ?? []).find((argument) =>\n            GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)),\n          );\n          if (blocked)\n            return {\n              content: `Unsupported Git option: ${blocked}`,\n              isError: true,\n            };\n          const result = await context.sandbox.invoke({\n            executable: \"git\",\n            arguments: [\n              \"--no-pager\",\n              input.command,\n              ...(input.command === \"status\"\n                ? []\n                : [\"--no-ext-diff\", \"--no-textconv\"]),\n              ...(input.arguments ?? []),\n            ],\n            stdin: \"\",\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}

package/dist/adapters/tools/sandbox-files.d.ts

@@ -0,0 +1,10 @@
+import type { CommandResult } from "../../domain/command.types.ts";
+import type { HarnessToolContext } from "../../domain/tool.types.ts";
+import type { SandboxFile } from "./tools.types.ts";
+export declare function repositoryPath(path: string): string;
+export declare function sandboxPath(context: HarnessToolContext, path: string): string;
+export declare function withStaging<T>(operation: (directory: string) => Promise<T>): Promise<T>;
+export declare function downloadFile(context: HarnessToolContext, path: string, staged: string): Promise<SandboxFile>;
+export declare function digest(bytes: Buffer): string;
+export declare function commandOutput(result: CommandResult): string;
+export declare function anywhere(pattern: string): string;

package/dist/adapters/tools/sandbox-files.js

@@ -0,0 +1,60 @@
+import { createHash } from "node:crypto";
+import { lstat, mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, posix } from "node:path";
+import { normalizeResourcePath } from "../../domain/permissions.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function repositoryPath(path) {
+    const normalized = normalizeResourcePath(path);
+    if (normalized === undefined)
+        throw new Error(`Path must stay inside the repository: ${path}`);
+    return normalized;
+}
+export function sandboxPath(context, path) {
+    const normalized = repositoryPath(path);
+    return normalized
+        ? posix.join(context.sandbox.root, normalized)
+        : context.sandbox.root;
+}
+export async function withStaging(operation) {
+    const directory = await mkdtemp(join(tmpdir(), "outpost-tool-"));
+    try {
+        return await operation(directory);
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+}
+export async function downloadFile(context, path, staged) {
+    await context.sandbox.download(sandboxPath(context, path), staged, {
+        signal: context.signal,
+    });
+    const info = await lstat(staged);
+    if (info.isSymbolicLink())
+        throw new Error(`${path} is a symbolic link; links are not followed`);
+    if (!info.isFile())
+        throw new Error(`${path} is not a regular file`);
+    if (info.size > TOOL_LIMITS.fileBytes)
+        throw new Error(`${path} has ${info.size} bytes; the limit is ${TOOL_LIMITS.fileBytes}`);
+    const bytes = await readFile(staged);
+    if (bytes.subarray(0, TOOL_LIMITS.binaryProbeBytes).includes(0))
+        throw new Error(`${path} looks binary and cannot be read as text`);
+    return { staged, bytes };
+}
+export function digest(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+export function commandOutput(result) {
+    const note = (text) => text.length >= TOOL_LIMITS.commandCharacters
+        ? `[output truncated to the last ${TOOL_LIMITS.commandCharacters} characters]\n${text}`
+        : text;
+    return [
+        `exit status: ${result.status}`,
+        ...(result.stdout ? ["--- stdout ---", note(result.stdout)] : []),
+        ...(result.stderr ? ["--- stderr ---", note(result.stderr)] : []),
+    ].join("\n");
+}
+export function anywhere(pattern) {
+    return pattern.includes("/") ? pattern : `**/${pattern}`;
+}
+//# sourceMappingURL=sandbox-files.js.map

package/dist/adapters/tools/sandbox-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-files.js","sourceRoot":"","sources":["../../../src/adapters/tools/sandbox-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,SAAS;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,UAAU;QACf,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAA4C;IAE5C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA2B,EAC3B,IAAY,EACZ,MAAc;IAEd,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE;QACjE,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,cAAc,EAAE;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,SAAS;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,QAAQ,IAAI,CAAC,IAAI,wBAAwB,WAAW,CAAC,SAAS,EAAE,CACxE,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;IACrE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5B,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,iBAAiB;QAC1C,CAAC,CAAC,iCAAiC,WAAW,CAAC,iBAAiB,iBAAiB,IAAI,EAAE;QACvF,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,gBAAgB,MAAM,CAAC,MAAM,EAAE;QAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { lstat, mkdtemp, readFile, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join, posix } from \"node:path\";\nimport { normalizeResourcePath } from \"../../domain/permissions.ts\";\nimport type { CommandResult } from \"../../domain/command.types.ts\";\nimport type { HarnessToolContext } from \"../../domain/tool.types.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { SandboxFile } from \"./tools.types.ts\";\n\nexport function repositoryPath(path: string): string {\n  const normalized = normalizeResourcePath(path);\n  if (normalized === undefined)\n    throw new Error(`Path must stay inside the repository: ${path}`);\n  return normalized;\n}\n\nexport function sandboxPath(context: HarnessToolContext, path: string): string {\n  const normalized = repositoryPath(path);\n  return normalized\n    ? posix.join(context.sandbox.root, normalized)\n    : context.sandbox.root;\n}\n\nexport async function withStaging<T>(\n  operation: (directory: string) => Promise<T>,\n): Promise<T> {\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-tool-\"));\n  try {\n    return await operation(directory);\n  } finally {\n    await rm(directory, { recursive: true, force: true });\n  }\n}\n\nexport async function downloadFile(\n  context: HarnessToolContext,\n  path: string,\n  staged: string,\n): Promise<SandboxFile> {\n  await context.sandbox.download(sandboxPath(context, path), staged, {\n    signal: context.signal,\n  });\n  const info = await lstat(staged);\n  if (info.isSymbolicLink())\n    throw new Error(`${path} is a symbolic link; links are not followed`);\n  if (!info.isFile()) throw new Error(`${path} is not a regular file`);\n  if (info.size > TOOL_LIMITS.fileBytes)\n    throw new Error(\n      `${path} has ${info.size} bytes; the limit is ${TOOL_LIMITS.fileBytes}`,\n    );\n  const bytes = await readFile(staged);\n  if (bytes.subarray(0, TOOL_LIMITS.binaryProbeBytes).includes(0))\n    throw new Error(`${path} looks binary and cannot be read as text`);\n  return { staged, bytes };\n}\n\nexport function digest(bytes: Buffer): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\n\nexport function commandOutput(result: CommandResult): string {\n  const note = (text: string) =>\n    text.length >= TOOL_LIMITS.commandCharacters\n      ? `[output truncated to the last ${TOOL_LIMITS.commandCharacters} characters]\\n${text}`\n      : text;\n  return [\n    `exit status: ${result.status}`,\n    ...(result.stdout ? [\"--- stdout ---\", note(result.stdout)] : []),\n    ...(result.stderr ? [\"--- stderr ---\", note(result.stderr)] : []),\n  ].join(\"\\n\");\n}\n\nexport function anywhere(pattern: string): string {\n  return pattern.includes(\"/\") ? pattern : `**/${pattern}`;\n}\n"]}

package/dist/adapters/tools/search-tools.d.ts

@@ -0,0 +1,2 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+export declare function harnessSearchTools(): HarnessToolset;

package/dist/adapters/tools/search-tools.js

@@ -0,0 +1,65 @@
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { anywhere, repositoryPath } from "./sandbox-files.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function harnessSearchTools() {
+    return defineHarnessToolset({ name: "search", tools: [searchTool()] });
+}
+function searchTool() {
+    return defineHarnessTool({
+        name: "search",
+        description: "Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.",
+        readOnly: true,
+        input: {
+            type: "object",
+            properties: {
+                pattern: { type: "string", minLength: 1 },
+                path: { type: "string" },
+                glob: { type: "string", minLength: 1 },
+                ignore_case: { type: "boolean" },
+                max_results: {
+                    type: "integer",
+                    minimum: 1,
+                    maximum: TOOL_LIMITS.searchMatches,
+                },
+            },
+            required: ["pattern"],
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path ?? "."] }),
+        async execute(input, context) {
+            const scope = repositoryPath(input.path ?? ".") || ".";
+            const result = await context.sandbox.invoke({
+                executable: "git",
+                arguments: [
+                    "grep",
+                    "--untracked",
+                    "-n",
+                    "-I",
+                    "--no-color",
+                    "--full-name",
+                    "-E",
+                    ...(input.ignore_case ? ["-i"] : []),
+                    "-e",
+                    input.pattern,
+                    "--",
+                    input.glob
+                        ? `:(glob)${scope === "." ? "" : `${scope}/`}${anywhere(input.glob)}`
+                        : scope,
+                ],
+                retain: TOOL_LIMITS.commandCharacters,
+                signal: context.signal,
+            });
+            if (result.status === 1)
+                return "No matches.";
+            if (result.status !== 0)
+                return { content: result.stderr || "git grep failed", isError: true };
+            const limit = input.max_results ?? TOOL_LIMITS.searchMatches;
+            const matches = result.stdout.split("\n").filter(Boolean);
+            const shown = matches.slice(0, limit);
+            return shown.length < matches.length
+                ? `${shown.join("\n")}\n[${matches.length - shown.length} more matches; refine the search]`
+                : shown.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=search-tools.js.map

package/dist/adapters/tools/search-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/search-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,4LAA4L;QAC9L,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAChC,WAAW,EAAE;oBACX,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,WAAW,CAAC,aAAa;iBACnC;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAkB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,KAAkB,EAAE,OAAO;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE;oBACT,MAAM;oBACN,aAAa;oBACb,IAAI;oBACJ,IAAI;oBACJ,YAAY;oBACZ,aAAa;oBACb,IAAI;oBACJ,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,IAAI;oBACJ,KAAK,CAAC,OAAO;oBACb,IAAI;oBACJ,KAAK,CAAC,IAAI;wBACR,CAAC,CAAC,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK;iBACV;gBACD,MAAM,EAAE,WAAW,CAAC,iBAAiB;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;gBAClC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,mCAAmC;gBAC3F,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { anywhere, repositoryPath } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { SearchInput } from \"./tools.types.ts\";\n\nexport function harnessSearchTools(): HarnessToolset {\n  return defineHarnessToolset({ name: \"search\", tools: [searchTool()] });\n}\n\nfunction searchTool() {\n  return defineHarnessTool({\n    name: \"search\",\n    description:\n      \"Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        pattern: { type: \"string\", minLength: 1 },\n        path: { type: \"string\" },\n        glob: { type: \"string\", minLength: 1 },\n        ignore_case: { type: \"boolean\" },\n        max_results: {\n          type: \"integer\",\n          minimum: 1,\n          maximum: TOOL_LIMITS.searchMatches,\n        },\n      },\n      required: [\"pattern\"],\n      additionalProperties: false,\n    },\n    resources: (input: SearchInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: SearchInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const result = await context.sandbox.invoke({\n        executable: \"git\",\n        arguments: [\n          \"grep\",\n          \"--untracked\",\n          \"-n\",\n          \"-I\",\n          \"--no-color\",\n          \"--full-name\",\n          \"-E\",\n          ...(input.ignore_case ? [\"-i\"] : []),\n          \"-e\",\n          input.pattern,\n          \"--\",\n          input.glob\n            ? `:(glob)${scope === \".\" ? \"\" : `${scope}/`}${anywhere(input.glob)}`\n            : scope,\n        ],\n        retain: TOOL_LIMITS.commandCharacters,\n        signal: context.signal,\n      });\n      if (result.status === 1) return \"No matches.\";\n      if (result.status !== 0)\n        return { content: result.stderr || \"git grep failed\", isError: true };\n      const limit = input.max_results ?? TOOL_LIMITS.searchMatches;\n      const matches = result.stdout.split(\"\\n\").filter(Boolean);\n      const shown = matches.slice(0, limit);\n      return shown.length < matches.length\n        ? `${shown.join(\"\\n\")}\\n[${matches.length - shown.length} more matches; refine the search]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}

package/dist/adapters/tools/shell-tools.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+import type { ShellToolsOptions } from "./tools.types.ts";
+export declare function harnessShellTools(options?: ShellToolsOptions): HarnessToolset;

package/dist/adapters/tools/shell-tools.js

@@ -0,0 +1,38 @@
+import { positive } from "../../domain/errors.js";
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { commandOutput } from "./sandbox-files.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function harnessShellTools(options = {}) {
+    const deadlineMs = positive(options.deadlineMs ?? TOOL_LIMITS.shellDeadlineMs, "Shell deadlineMs");
+    return defineHarnessToolset({
+        name: "shell",
+        tools: [
+            defineHarnessTool({
+                name: "shell",
+                description: "Run a POSIX shell command in the repository root and return its exit status, stdout and stderr. Commands have a deadline and no interactive input.",
+                input: {
+                    type: "object",
+                    properties: { command: { type: "string", minLength: 1 } },
+                    required: ["command"],
+                    additionalProperties: false,
+                },
+                resources: (input) => ({ command: input.command }),
+                async execute(input, context) {
+                    const result = await context.sandbox.invoke({
+                        executable: "sh",
+                        arguments: ["-c", input.command],
+                        stdin: "",
+                        deadlineMs,
+                        retain: TOOL_LIMITS.commandCharacters,
+                        signal: context.signal,
+                    });
+                    return {
+                        content: commandOutput(result),
+                        isError: result.status !== 0,
+                    };
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=shell-tools.js.map

package/dist/adapters/tools/shell-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/shell-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,iBAAiB,CAC/B,UAA6B,EAAE;IAE/B,MAAM,UAAU,GAAG,QAAQ,CACzB,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,eAAe,EACjD,kBAAkB,CACnB,CAAC;IACF,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,oJAAoJ;gBACtJ,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;oBACzD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9D,KAAK,CAAC,OAAO,CAAC,KAAiB,EAAE,OAAO;oBACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,IAAI;wBAChB,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;wBAChC,KAAK,EAAE,EAAE;wBACT,UAAU;wBACV,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { positive } from \"../../domain/errors.ts\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { ShellInput, ShellToolsOptions } from \"./tools.types.ts\";\n\nexport function harnessShellTools(\n  options: ShellToolsOptions = {},\n): HarnessToolset {\n  const deadlineMs = positive(\n    options.deadlineMs ?? TOOL_LIMITS.shellDeadlineMs,\n    \"Shell deadlineMs\",\n  );\n  return defineHarnessToolset({\n    name: \"shell\",\n    tools: [\n      defineHarnessTool({\n        name: \"shell\",\n        description:\n          \"Run a POSIX shell command in the repository root and return its exit status, stdout and stderr. Commands have a deadline and no interactive input.\",\n        input: {\n          type: \"object\",\n          properties: { command: { type: \"string\", minLength: 1 } },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: ShellInput) => ({ command: input.command }),\n        async execute(input: ShellInput, context) {\n          const result = await context.sandbox.invoke({\n            executable: \"sh\",\n            arguments: [\"-c\", input.command],\n            stdin: \"\",\n            deadlineMs,\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}

package/dist/adapters/tools/tools.constants.d.ts

@@ -0,0 +1,11 @@
+export declare const TOOL_LIMITS: {
+    readonly readLines: 2000;
+    readonly fileBytes: number;
+    readonly binaryProbeBytes: 8000;
+    readonly listEntries: 1000;
+    readonly searchMatches: 200;
+    readonly commandCharacters: 200000;
+    readonly shellDeadlineMs: 120000;
+};
+export declare const GIT_READ_COMMANDS: readonly ["status", "diff", "log", "show"];
+export declare const GIT_BLOCKED_OPTIONS: string[];

package/dist/adapters/tools/tools.constants.js

@@ -0,0 +1,17 @@
+export const TOOL_LIMITS = {
+    readLines: 2_000,
+    fileBytes: 4 * 1024 * 1024,
+    binaryProbeBytes: 8_000,
+    listEntries: 1_000,
+    searchMatches: 200,
+    commandCharacters: 200_000,
+    shellDeadlineMs: 120_000,
+};
+export const GIT_READ_COMMANDS = ["status", "diff", "log", "show"];
+export const GIT_BLOCKED_OPTIONS = [
+    "--output",
+    "--ext-diff",
+    "--textconv",
+    "--open-files-in-pager",
+];
+//# sourceMappingURL=tools.constants.js.map

package/dist/adapters/tools/tools.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.constants.js","sourceRoot":"","sources":["../../../src/adapters/tools/tools.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC1B,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,OAAO;IAC1B,eAAe,EAAE,OAAO;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,uBAAuB;CACxB,CAAC","sourcesContent":["export const TOOL_LIMITS = {\n  readLines: 2_000,\n  fileBytes: 4 * 1024 * 1024,\n  binaryProbeBytes: 8_000,\n  listEntries: 1_000,\n  searchMatches: 200,\n  commandCharacters: 200_000,\n  shellDeadlineMs: 120_000,\n} as const;\n\nexport const GIT_READ_COMMANDS = [\"status\", \"diff\", \"log\", \"show\"] as const;\n\nexport const GIT_BLOCKED_OPTIONS = [\n  \"--output\",\n  \"--ext-diff\",\n  \"--textconv\",\n  \"--open-files-in-pager\",\n];\n"]}

package/dist/adapters/tools/tools.types.d.ts

@@ -0,0 +1,41 @@
+import type { GIT_READ_COMMANDS } from "./tools.constants.ts";
+export interface ReadFileInput {
+    readonly path: string;
+    readonly offset?: number;
+    readonly limit?: number;
+}
+export interface ListFilesInput {
+    readonly path?: string;
+    readonly pattern?: string;
+}
+export interface WriteFileInput {
+    readonly path: string;
+    readonly content: string;
+}
+export interface EditFileInput {
+    readonly path: string;
+    readonly old_text: string;
+    readonly new_text: string;
+    readonly replace_all?: boolean;
+}
+export interface SearchInput {
+    readonly pattern: string;
+    readonly path?: string;
+    readonly glob?: string;
+    readonly ignore_case?: boolean;
+    readonly max_results?: number;
+}
+export interface ShellInput {
+    readonly command: string;
+}
+export interface GitInput {
+    readonly command: (typeof GIT_READ_COMMANDS)[number];
+    readonly arguments?: readonly string[];
+}
+export interface ShellToolsOptions {
+    readonly deadlineMs?: number;
+}
+export interface SandboxFile {
+    readonly staged: string;
+    readonly bytes: Buffer;
+}

package/dist/adapters/tools/tools.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tools.types.js.map

package/dist/adapters/tools/tools.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.types.js","sourceRoot":"","sources":["../../../src/adapters/tools/tools.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { GIT_READ_COMMANDS } from \"./tools.constants.ts\";\n\nexport interface ReadFileInput {\n  readonly path: string;\n  readonly offset?: number;\n  readonly limit?: number;\n}\n\nexport interface ListFilesInput {\n  readonly path?: string;\n  readonly pattern?: string;\n}\n\nexport interface WriteFileInput {\n  readonly path: string;\n  readonly content: string;\n}\n\nexport interface EditFileInput {\n  readonly path: string;\n  readonly old_text: string;\n  readonly new_text: string;\n  readonly replace_all?: boolean;\n}\n\nexport interface SearchInput {\n  readonly pattern: string;\n  readonly path?: string;\n  readonly glob?: string;\n  readonly ignore_case?: boolean;\n  readonly max_results?: number;\n}\n\nexport interface ShellInput {\n  readonly command: string;\n}\n\nexport interface GitInput {\n  readonly command: (typeof GIT_READ_COMMANDS)[number];\n  readonly arguments?: readonly string[];\n}\n\nexport interface ShellToolsOptions {\n  readonly deadlineMs?: number;\n}\n\nexport interface SandboxFile {\n  readonly staged: string;\n  readonly bytes: Buffer;\n}\n"]}

package/dist/application/activity-watchdog.js

@@ -4,18 +4,19 @@ import { notify } from "./observation.js";
 export function activityWatchdog(controller, options, pass) {
     let idle, settle;
     let lastActivity = Date.now();
+    let holds = 0;
     const refresh = (completed) => {
         lastActivity = Date.now();
         clearTimeout(idle);
         clearTimeout(settle);
-        if (!completed)
+        if (!completed && holds === 0)
             idle = setTimeout(() => controller.abort(new OutpostError("timeout", "Agent produced no output before the idle deadline")), options.idleMs ?? executionDefaults.idleMs);
         if (completed)
             settle = setTimeout(() => controller.abort("completion"), options.settleMs ?? executionDefaults.settleMs);
     };
     const warningInterval = options.idleWarningMs ?? executionDefaults.idleWarningMs;
     const warnings = setInterval(() => {
-        if (Date.now() - lastActivity >= warningInterval) {
+        if (holds === 0 && Date.now() - lastActivity >= warningInterval) {
             const message = `Agent has been idle for ${Math.floor((Date.now() - lastActivity) / 1000)} seconds`;
             notify(options.warn, message);
             notify(options.observe, {
@@ -28,6 +29,18 @@ export function activityWatchdog(controller, options, pass) {
     }, warningInterval);
     return {
         refresh,
+        hold() {
+            holds++;
+            refresh(false);
+            let released = false;
+            return () => {
+                if (released)
+                    return;
+                released = true;
+                holds--;
+                refresh(false);
+            };
+        },
         close() {
             clearTimeout(idle);
             clearTimeout(settle);

package/dist/application/activity-watchdog.js.map

@@ -1 +1 @@
-{"version":3,"file":"activity-watchdog.js","sourceRoot":"","sources":["../../src/application/activity-watchdog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,UAAU,gBAAgB,CAC9B,UAA2B,EAC3B,OAAiC,EACjC,IAAY;IAEZ,IAAI,IAAgC,EAAE,MAAkC,CAAC;IACzE,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,SAAkB,EAAE,EAAE;QACrC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS;YACZ,IAAI,GAAG,UAAU,CACf,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CACd,SAAS,EACT,mDAAmD,CACpD,CACF,EACH,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAC3C,CAAC;QACJ,IAAI,SAAS;YACX,MAAM,GAAG,UAAU,CACjB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,EACpC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAC/C,CAAC;IACN,CAAC,CAAC;IAEF,MAAM,eAAe,GACnB,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC;IAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,IAAI,eAAe,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,2BAA2B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YACpG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;gBACtB,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,IAAI;gBACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpB,OAAO;QACL,OAAO;QACP,KAAK;YACH,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { OutpostError } from \"../domain/errors.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { ActivityWatchdog, DispatchOptions } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport function activityWatchdog(\n  controller: AbortController,\n  options: DispatchOptions<unknown>,\n  pass: number,\n): ActivityWatchdog {\n  let idle: NodeJS.Timeout | undefined, settle: NodeJS.Timeout | undefined;\n  let lastActivity = Date.now();\n  const refresh = (completed: boolean) => {\n    lastActivity = Date.now();\n    clearTimeout(idle);\n    clearTimeout(settle);\n    if (!completed)\n      idle = setTimeout(\n        () =>\n          controller.abort(\n            new OutpostError(\n              \"timeout\",\n              \"Agent produced no output before the idle deadline\",\n            ),\n          ),\n        options.idleMs ?? executionDefaults.idleMs,\n      );\n    if (completed)\n      settle = setTimeout(\n        () => controller.abort(\"completion\"),\n        options.settleMs ?? executionDefaults.settleMs,\n      );\n  };\n\n  const warningInterval =\n    options.idleWarningMs ?? executionDefaults.idleWarningMs;\n  const warnings = setInterval(() => {\n    if (Date.now() - lastActivity >= warningInterval) {\n      const message = `Agent has been idle for ${Math.floor((Date.now() - lastActivity) / 1000)} seconds`;\n      notify(options.warn, message);\n      notify(options.observe, {\n        kind: \"warning\",\n        message,\n        pass,\n        at: new Date().toISOString(),\n      });\n    }\n  }, warningInterval);\n\n  return {\n    refresh,\n    close() {\n      clearTimeout(idle);\n      clearTimeout(settle);\n      clearInterval(warnings);\n    },\n  };\n}\n"]}
+{"version":3,"file":"activity-watchdog.js","sourceRoot":"","sources":["../../src/application/activity-watchdog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,UAAU,gBAAgB,CAC9B,UAA2B,EAC3B,OAAiC,EACjC,IAAY;IAEZ,IAAI,IAAgC,EAAE,MAAkC,CAAC;IACzE,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CAAC,SAAkB,EAAE,EAAE;QACrC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,CAAC;YAC3B,IAAI,GAAG,UAAU,CACf,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CACd,SAAS,EACT,mDAAmD,CACpD,CACF,EACH,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAC3C,CAAC;QACJ,IAAI,SAAS;YACX,MAAM,GAAG,UAAU,CACjB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,EACpC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAC/C,CAAC;IACN,CAAC,CAAC;IAEF,MAAM,eAAe,GACnB,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC;IAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,IAAI,eAAe,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,2BAA2B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YACpG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;gBACtB,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,IAAI;gBACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpB,OAAO;QACL,OAAO;QACP,IAAI;YACF,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO,GAAG,EAAE;gBACV,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,EAAE,CAAC;gBACR,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;QACJ,CAAC;QACD,KAAK;YACH,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { OutpostError } from \"../domain/errors.ts\";\nimport { executionDefaults } from \"./execution.constants.ts\";\nimport type { ActivityWatchdog, DispatchOptions } from \"./execution.types.ts\";\nimport { notify } from \"./observation.ts\";\n\nexport function activityWatchdog(\n  controller: AbortController,\n  options: DispatchOptions<unknown>,\n  pass: number,\n): ActivityWatchdog {\n  let idle: NodeJS.Timeout | undefined, settle: NodeJS.Timeout | undefined;\n  let lastActivity = Date.now();\n  let holds = 0;\n  const refresh = (completed: boolean) => {\n    lastActivity = Date.now();\n    clearTimeout(idle);\n    clearTimeout(settle);\n    if (!completed && holds === 0)\n      idle = setTimeout(\n        () =>\n          controller.abort(\n            new OutpostError(\n              \"timeout\",\n              \"Agent produced no output before the idle deadline\",\n            ),\n          ),\n        options.idleMs ?? executionDefaults.idleMs,\n      );\n    if (completed)\n      settle = setTimeout(\n        () => controller.abort(\"completion\"),\n        options.settleMs ?? executionDefaults.settleMs,\n      );\n  };\n\n  const warningInterval =\n    options.idleWarningMs ?? executionDefaults.idleWarningMs;\n  const warnings = setInterval(() => {\n    if (holds === 0 && Date.now() - lastActivity >= warningInterval) {\n      const message = `Agent has been idle for ${Math.floor((Date.now() - lastActivity) / 1000)} seconds`;\n      notify(options.warn, message);\n      notify(options.observe, {\n        kind: \"warning\",\n        message,\n        pass,\n        at: new Date().toISOString(),\n      });\n    }\n  }, warningInterval);\n\n  return {\n    refresh,\n    hold() {\n      holds++;\n      refresh(false);\n      let released = false;\n      return () => {\n        if (released) return;\n        released = true;\n        holds--;\n        refresh(false);\n      };\n    },\n    close() {\n      clearTimeout(idle);\n      clearTimeout(settle);\n      clearInterval(warnings);\n    },\n  };\n}\n"]}

package/dist/application/agent-authentication.d.ts

@@ -0,0 +1,4 @@
+import type { AgentAdapter } from "../domain/agent.types.ts";
+import type { Variables } from "../domain/command.types.ts";
+import type { SandboxLease, SandboxProvider } from "../domain/sandbox.types.ts";
+export declare function authenticateAgent(adapter: AgentAdapter, variables: Variables, lease: SandboxLease, placement: SandboxProvider["placement"], signal: AbortSignal): Promise<Variables>;

package/dist/application/agent-authentication.js

@@ -0,0 +1,32 @@
+import { readHostCredential } from "../infrastructure/host-credentials.js";
+import { requireSuccess } from "../infrastructure/process.js";
+import { credentialInstaller } from "./credential-installer.constants.js";
+export async function authenticateAgent(adapter, variables, lease, placement, signal) {
+    const plan = adapter.credentials?.(variables);
+    if (!plan)
+        return {};
+    if (placement === "host")
+        return plan.variables;
+    const files = [...plan.files];
+    const derived = {};
+    for (const credential of plan.host) {
+        const content = await readHostCredential(credential);
+        if ("file" in credential.destination)
+            files.push({ path: credential.destination.file, content });
+        else
+            derived[credential.destination.variable] = content;
+    }
+    const invoke = lease.invoke.bind(lease);
+    if (files.length)
+        await requireSuccess({
+            executable: "node",
+            arguments: ["-e", credentialInstaller],
+            stdin: JSON.stringify({ home: lease.home, files }),
+            signal,
+        }, invoke);
+    const credentials = Object.freeze({ ...plan.variables, ...derived });
+    for (const command of plan.commands)
+        await requireSuccess({ ...command, variables: { ...variables, ...credentials }, signal }, invoke);
+    return credentials;
+}
+//# sourceMappingURL=agent-authentication.js.map

package/dist/application/agent-authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-authentication.js","sourceRoot":"","sources":["../../src/application/agent-authentication.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAqB,EACrB,SAAoB,EACpB,KAAmB,EACnB,SAAuC,EACvC,MAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAChD,MAAM,KAAK,GAA0B,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,UAAU,CAAC,WAAW;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;;YACxD,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM;QACd,MAAM,cAAc,CAClB;YACE,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC;YACtC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YAClD,MAAM;SACP,EACD,MAAM,CACP,CAAC;IACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QACjC,MAAM,cAAc,CAClB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,GAAG,WAAW,EAAE,EAAE,MAAM,EAAE,EACnE,MAAM,CACP,CAAC;IACJ,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type {\n  AgentAdapter,\n  GeneratedCredential,\n} from \"../domain/agent.types.ts\";\nimport type { Variables } from \"../domain/command.types.ts\";\nimport type { SandboxLease, SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { readHostCredential } from \"../infrastructure/host-credentials.ts\";\nimport { requireSuccess } from \"../infrastructure/process.ts\";\nimport { credentialInstaller } from \"./credential-installer.constants.ts\";\n\nexport async function authenticateAgent(\n  adapter: AgentAdapter,\n  variables: Variables,\n  lease: SandboxLease,\n  placement: SandboxProvider[\"placement\"],\n  signal: AbortSignal,\n): Promise<Variables> {\n  const plan = adapter.credentials?.(variables);\n  if (!plan) return {};\n  if (placement === \"host\") return plan.variables;\n  const files: GeneratedCredential[] = [...plan.files];\n  const derived: Record<string, string> = {};\n  for (const credential of plan.host) {\n    const content = await readHostCredential(credential);\n    if (\"file\" in credential.destination)\n      files.push({ path: credential.destination.file, content });\n    else derived[credential.destination.variable] = content;\n  }\n  const invoke = lease.invoke.bind(lease);\n  if (files.length)\n    await requireSuccess(\n      {\n        executable: \"node\",\n        arguments: [\"-e\", credentialInstaller],\n        stdin: JSON.stringify({ home: lease.home, files }),\n        signal,\n      },\n      invoke,\n    );\n  const credentials = Object.freeze({ ...plan.variables, ...derived });\n  for (const command of plan.commands)\n    await requireSuccess(\n      { ...command, variables: { ...variables, ...credentials }, signal },\n      invoke,\n    );\n  return credentials;\n}\n"]}

package/dist/application/agent-bootstrap.constants.d.ts

@@ -1,5 +1,2 @@
-export declare const agentPackages: Readonly<{
-    claude: "@anthropic-ai/claude-code@2.1.280";
-    gemini: "@google/gemini-cli@0.61.0";
-    codex: "@openai/codex@0.156.1";
-}>;
+import type { AgentInstaller } from "./agent-bootstrap.types.ts";
+export declare const agentInstallers: Readonly<Record<string, AgentInstaller>>;

package/dist/application/agent-bootstrap.constants.js

@@ -1,7 +1,32 @@
+import { antigravityInstaller } from "../providers/versions.constants.js";
 import { agentVersions } from "../providers/versions.js";
-export const agentPackages = Object.freeze({
-    claude: `@anthropic-ai/claude-code@${agentVersions.claude}`,
-    gemini: `@google/gemini-cli@${agentVersions.gemini}`,
-    codex: `@openai/codex@${agentVersions.codex}`,
+export const agentInstallers = Object.freeze({
+    claude: {
+        kind: "npm",
+        binary: "claude",
+        package: `@anthropic-ai/claude-code@${agentVersions.claude}`,
+        allowScripts: true,
+    },
+    codex: {
+        kind: "npm",
+        binary: "codex",
+        package: `@openai/codex@${agentVersions.codex}`,
+    },
+    copilot: {
+        kind: "npm",
+        binary: "copilot",
+        package: `@github/copilot@${agentVersions.copilot}`,
+    },
+    kimi: {
+        kind: "npm",
+        binary: "kimi",
+        package: `@moonshot-ai/kimi-code@${agentVersions.kimi}`,
+    },
+    antigravity: {
+        kind: "script",
+        binary: "agy",
+        url: antigravityInstaller,
+        installed: ".local/bin/agy",
+    },
 });
 //# sourceMappingURL=agent-bootstrap.constants.js.map

package/dist/application/agent-bootstrap.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-bootstrap.constants.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,6BAA6B,aAAa,CAAC,MAAM,EAAE;IAC3D,MAAM,EAAE,sBAAsB,aAAa,CAAC,MAAM,EAAE;IACpD,KAAK,EAAE,iBAAiB,aAAa,CAAC,KAAK,EAAE;CAC9C,CAAC,CAAC","sourcesContent":["import { agentVersions } from \"../providers/versions.ts\";\n\nexport const agentPackages = Object.freeze({\n  claude: `@anthropic-ai/claude-code@${agentVersions.claude}`,\n  gemini: `@google/gemini-cli@${agentVersions.gemini}`,\n  codex: `@openai/codex@${agentVersions.codex}`,\n});\n"]}
+{"version":3,"file":"agent-bootstrap.constants.js","sourceRoot":"","sources":["../../src/application/agent-bootstrap.constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,MAAM,CAAC,MAAM,eAAe,GAC1B,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,EAAE;QACN,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,6BAA6B,aAAa,CAAC,MAAM,EAAE;QAC5D,YAAY,EAAE,IAAI;KACnB;IACD,KAAK,EAAE;QACL,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,iBAAiB,aAAa,CAAC,KAAK,EAAE;KAChD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,mBAAmB,aAAa,CAAC,OAAO,EAAE;KACpD;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,0BAA0B,aAAa,CAAC,IAAI,EAAE;KACxD;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,oBAAoB;QACzB,SAAS,EAAE,gBAAgB;KAC5B;CACF,CAAC,CAAC","sourcesContent":["import { antigravityInstaller } from \"../providers/versions.constants.ts\";\nimport { agentVersions } from \"../providers/versions.ts\";\nimport type { AgentInstaller } from \"./agent-bootstrap.types.ts\";\n\nexport const agentInstallers: Readonly<Record<string, AgentInstaller>> =\n  Object.freeze({\n    claude: {\n      kind: \"npm\",\n      binary: \"claude\",\n      package: `@anthropic-ai/claude-code@${agentVersions.claude}`,\n      allowScripts: true,\n    },\n    codex: {\n      kind: \"npm\",\n      binary: \"codex\",\n      package: `@openai/codex@${agentVersions.codex}`,\n    },\n    copilot: {\n      kind: \"npm\",\n      binary: \"copilot\",\n      package: `@github/copilot@${agentVersions.copilot}`,\n    },\n    kimi: {\n      kind: \"npm\",\n      binary: \"kimi\",\n      package: `@moonshot-ai/kimi-code@${agentVersions.kimi}`,\n    },\n    antigravity: {\n      kind: \"script\",\n      binary: \"agy\",\n      url: antigravityInstaller,\n      installed: \".local/bin/agy\",\n    },\n  });\n"]}

package/dist/application/agent-bootstrap.d.ts

@@ -1,3 +1,3 @@
-import type { AgentAdapter } from "../domain/agent.types.ts";
+import type { Agent } from "../domain/agent.types.ts";
 import type { SandboxLease } from "../domain/sandbox.types.ts";
-export declare function prepareAdapter(agent: AgentAdapter, runtime: SandboxLease, signal: AbortSignal): Promise<AgentAdapter>;
+export declare function prepareAdapter(agent: Agent, runtime: SandboxLease, signal: AbortSignal): Promise<Agent>;

package/dist/application/agent-bootstrap.js

@@ -1,31 +1,54 @@
 import { posix } from "node:path";
 import { invariant } from "../domain/errors.js";
 import { quote, requireSuccess } from "../infrastructure/process.js";
-import { agentPackages } from "./agent-bootstrap.constants.js";
-function isBootstrapAgent(name) {
-    return Object.hasOwn(agentPackages, name);
+import { agentInstallers } from "./agent-bootstrap.constants.js";
+const installations = {
+    npm: (installer, home) => {
+        const prefix = posix.join(home, ".outpost-tools");
+        const scripts = installer.allowScripts
+            ? ` --allow-scripts=${installer.package.replace(/@[^@/]+$/, "")}`
+            : "";
+        return {
+            target: posix.join(prefix, "bin", installer.binary),
+            install: `npm install --global${scripts} --prefix ${quote(prefix)} ${installer.package}`,
+        };
+    },
+    script: (installer, home) => ({
+        target: posix.join(home, installer.installed),
+        install: `curl -fsSL ${quote(installer.url)} | bash`,
+    }),
+};
+function installation(installer, home) {
+    return installer.kind === "npm"
+        ? installations.npm(installer, home)
+        : installations.script(installer, home);
 }
 export async function prepareAdapter(agent, runtime, signal) {
-    const executable = agent.bootstrap ?? agent.conversations;
-    if (!executable)
+    if (agent.kind !== "cli")
         return agent;
-    invariant(isBootstrapAgent(executable), `Unknown agent bootstrap: ${executable}`);
-    const cli = agentPackages[executable];
-    const prefix = posix.join(runtime.home, ".outpost-tools"), target = posix.join(prefix, "bin", executable);
+    const name = agent.bootstrap ?? agent.conversations;
+    if (!name)
+        return agent;
+    const installer = Object.hasOwn(agentInstallers, name)
+        ? agentInstallers[name]
+        : undefined;
+    invariant(installer, `Unknown agent bootstrap: ${name}`);
+    const { binary } = installer;
+    const { target, install } = installation(installer, runtime.home);
     const installed = await requireSuccess({
         executable: "sh",
         arguments: [
             "-c",
-            `if command -v ${executable} >/dev/null 2>&1; then command -v ${executable}; elif test -x ${quote(target)}; then printf '%s\\n' ${quote(target)}; else npm install --global --allow-scripts=@anthropic-ai/claude-code --prefix ${quote(prefix)} ${cli} >&2 && printf '%s\\n' ${quote(target)}; fi`,
+            `if command -v ${binary} >/dev/null 2>&1; then command -v ${binary}; elif test -x ${quote(target)}; then printf '%s\\n' ${quote(target)}; else ${install} >&2 && test -x ${quote(target)} && printf '%s\\n' ${quote(target)}; fi`,
         ],
         signal,
     }, runtime.invoke.bind(runtime));
-    const binary = installed.stdout.trim();
-    invariant(binary.startsWith("/") && !binary.includes("\n"), "Agent bootstrap returned an invalid executable path");
+    const path = installed.stdout.trim();
+    invariant(path.startsWith("/") && !path.includes("\n"), "Agent bootstrap returned an invalid executable path");
     return {
         ...agent,
         request(input) {
-            return { ...agent.request(input), executable: binary };
+            return { ...agent.request(input), executable: path };
         },
     };
 }