@elie-laloum/outpost 5.0.0 → 7.0.0

package/dist/application/tool-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-execution.js","sourceRoot":"","sources":["../../src/application/tool-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAWxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAS3D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,KAAoC,EACpC,IAAY,EACZ,MAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAU,CAAC,CAC5D,CACF,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU;YAC5B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW;YACjD,CAAC,CAAC,CAAC,CAAC;QACN,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjE,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE;gBAC3D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ;QACtC,OAAO,CAAC,IAAI,CACV,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,EAAE,IAAI,CAAC,CACrE,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,KAAuC,EACvC,IAAwB,EACxB,IAAY,EACZ,MAA4C;IAE5C,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACpE,IAAI,SAAS,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK;QACP,OAAO,MAAM,CACX,OAAO,EACP,IAAI,EACJ,YAAY,KAAK,uCAAuC,IAAI,CAAC,IAAI,EAAE,CACpE,CAAC;IACJ,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,OAAO,EACP,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EACnC,IAAI,CACL,CAAC;IACF,IAAI,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,IAAI,EACJ,QAAQ,CAAC,KAAK,EACd,6BAA6B,CAC9B,CAAC;IACF,IAAI,SAAS,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,iBAAiB;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAiB,EACjB,KAAc,EACd,KAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,UAAU;QACxB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CACjB,OAAuB,EACvB,IAAiB,EACjB,KAAc;IAEd,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;IACtD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CACb,OAAuB,EACvB,IAAwB,EACxB,MAAc;IAEd,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;KACP,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,MAAM,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,OAAuB,EACvB,IAAwB,EACxB,OAAoB,EACpB,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAC3C,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,gBAAgB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB,cAAc;QAC9H,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,OAAO;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAK,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,EAAE,UAAU,IAAI,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;gBAC5B,UAAU;gBACV,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC;YACF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,QAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM,KAAK,CAAC;QACxE,OAAO,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAuB,EACvB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAgB;IAEnC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CACd,SAAS,EACT,QAAQ,IAAI,CAAC,IAAI,oBAAoB,UAAU,KAAK,CACrD,CACF,EACH,UAAU,CACX,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;QAC3B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,IAAK,CAAC,OAAO,CAAC,KAAK,EAAE;QACnB,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QAC7C,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;QAC1B,OAAO,CAAC,KAAuB;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;gBAC9B,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,mDAAmD,CACpD,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;KACF,CAAC,CACH,CAAC;IACF,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAmB,EAAE,MAAmB;IAC3D,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAE,EAAE,CACpC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;gBACvC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBACzC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QAErE,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,gDAAgD,CACjD,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC","sourcesContent":["import { OutpostError } from \"../domain/errors.ts\";\nimport {\n  TOOL_PREVIEW_CHARACTERS,\n  TOOL_RESULT_CHARACTERS,\n} from \"../domain/harness.constants.ts\";\nimport type {\n  ModelToolCallBlock,\n  ModelToolResultBlock,\n} from \"../domain/model.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type {\n  HarnessTool,\n  HarnessToolEvent,\n  ToolOutput,\n} from \"../domain/tool.types.ts\";\nimport { afterTool, beforeTool } from \"./harness-hooks.ts\";\nimport type {\n  HarnessRuntime,\n  PreparedCall,\n  ToolCallBatch,\n  ToolOutcome,\n  ValidatedInput,\n} from \"./harness.types.ts\";\n\nconst toolEvents: ReadonlySet<string> = new Set([\"text\", \"warning\", \"raw\"]);\n\nexport async function executeToolCalls(\n  runtime: HarnessRuntime,\n  calls: readonly ModelToolCallBlock[],\n  step: number,\n  loaded: ReadonlySet<string>,\n): Promise<readonly ModelToolResultBlock[]> {\n  const tools = new Map(runtime.tools.map((tool) => [tool.name, tool]));\n  const owners = new Map(\n    runtime.agent.harness.skills.flatMap((skill) =>\n      skill.tools.map((tool) => [tool.name, skill.name] as const),\n    ),\n  );\n  const locked = (name: string) => {\n    const skill = owners.get(name);\n    return skill === undefined || loaded.has(skill) ? undefined : skill;\n  };\n  const prepared: PreparedCall[] = [];\n  for (const call of calls)\n    prepared.push(await prepareCall(runtime, tools, call, step, locked));\n  const outcomes = new Map<string, ToolOutcome>();\n  for (const batch of batches(prepared)) {\n    const pending = [...batch.calls];\n    const limit = batch.concurrent\n      ? runtime.agent.harness.toolExecution.concurrency\n      : 1;\n    await Promise.all(\n      Array.from({ length: Math.min(limit, pending.length) }, async () => {\n        for (let next = pending.shift(); next; next = pending.shift())\n          outcomes.set(next.call.id, await executeCall(runtime, next));\n      }),\n    );\n  }\n  const results: ModelToolResultBlock[] = [];\n  for (const { call, outcome } of prepared)\n    results.push(\n      await finish(runtime, call, outcome ?? outcomes.get(call.id)!, step),\n    );\n  return results;\n}\n\nasync function prepareCall(\n  runtime: HarnessRuntime,\n  tools: ReadonlyMap<string, HarnessTool>,\n  call: ModelToolCallBlock,\n  step: number,\n  locked: (name: string) => string | undefined,\n): Promise<PreparedCall> {\n  runtime.signal.throwIfAborted();\n  runtime.emit({\n    kind: \"tool\",\n    name: call.name,\n    input: call.input,\n    callId: call.id,\n  });\n  const tool = tools.get(call.name);\n  if (!tool) return { call, outcome: failed(`Unknown tool: ${call.name}`) };\n  const validated = await validate(tool, call.input, \"Invalid input\");\n  if (\"outcome\" in validated) return { call, outcome: validated.outcome };\n  const skill = locked(tool.name);\n  if (skill)\n    return denied(\n      runtime,\n      call,\n      `Load the ${skill} skill with load_skill before using ${tool.name}`,\n    );\n  const permitted = permission(runtime, tool, validated.value);\n  if (permitted) return denied(runtime, call, permitted);\n  const decision = await beforeTool(\n    runtime,\n    { ...call, input: validated.value },\n    step,\n  );\n  if (\"deny\" in decision) return denied(runtime, call, decision.deny);\n  if (decision.input === validated.value)\n    return { call, tool, input: validated.value };\n  const revised = await validate(\n    tool,\n    decision.input,\n    \"Hook produced invalid input\",\n  );\n  if (\"outcome\" in revised) return { call, outcome: revised.outcome };\n  const revisedPermission = permission(runtime, tool, revised.value);\n  if (revisedPermission) return denied(runtime, call, revisedPermission);\n  return { call, tool, input: revised.value };\n}\n\nasync function validate(\n  tool: HarnessTool,\n  input: unknown,\n  label: string,\n): Promise<ValidatedInput> {\n  const validation = await tool.validate(input);\n  if (\"issues\" in validation)\n    return {\n      outcome: failed(`${label} for ${tool.name}: ${validation.issues}`),\n    };\n  return { value: validation.value };\n}\n\nfunction permission(\n  runtime: HarnessRuntime,\n  tool: HarnessTool,\n  input: unknown,\n): string | undefined {\n  const permissions = runtime.agent.harness.permissions;\n  if (!permissions) return undefined;\n  const decision = permissions.evaluate(tool.name, tool.resources(input));\n  return decision.allowed ? undefined : decision.reason;\n}\n\nfunction denied(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  reason: string,\n): PreparedCall {\n  runtime.emit({\n    kind: \"tool-denied\",\n    callId: call.id,\n    name: call.name,\n    reason,\n  });\n  return { call, outcome: failed(`Denied: ${reason}`) };\n}\n\nasync function finish(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  outcome: ToolOutcome,\n  step: number,\n): Promise<ModelToolResultBlock> {\n  const final = await afterTool(runtime, call, outcome, step, normalized);\n  const content =\n    final.content.length > TOOL_RESULT_CHARACTERS\n      ? `${final.content.slice(0, TOOL_RESULT_CHARACTERS)}\\n[truncated ${final.content.length - TOOL_RESULT_CHARACTERS} characters]`\n      : final.content;\n  runtime.emit({\n    kind: \"tool-result\",\n    callId: call.id,\n    name: call.name,\n    isError: final.isError,\n    preview: content.slice(0, TOOL_PREVIEW_CHARACTERS),\n    characters: final.content.length,\n  });\n  return {\n    type: \"tool-result\",\n    callId: call.id,\n    content,\n    ...(final.isError ? { isError: true } : {}),\n  };\n}\n\nfunction batches(calls: readonly PreparedCall[]): readonly ToolCallBatch[] {\n  const grouped: ToolCallBatch[] = [];\n  for (const prepared of calls) {\n    if (prepared.outcome) continue;\n    const concurrent = prepared.tool!.readOnly;\n    const last = grouped.at(-1);\n    if (last?.concurrent && concurrent) {\n      grouped[grouped.length - 1] = {\n        concurrent,\n        calls: [...last.calls, prepared],\n      };\n      continue;\n    }\n    grouped.push({ concurrent, calls: [prepared] });\n  }\n  return grouped;\n}\n\nasync function executeCall(\n  runtime: HarnessRuntime,\n  prepared: PreparedCall,\n): Promise<ToolOutcome> {\n  try {\n    return normalized(await runTool(runtime, prepared));\n  } catch (error) {\n    runtime.signal.throwIfAborted();\n    if (runtime.agent.harness.toolExecution.onError === \"fail\") throw error;\n    return failed(error instanceof Error ? error.message : String(error));\n  }\n}\n\nasync function runTool(\n  runtime: HarnessRuntime,\n  { call, tool, input }: PreparedCall,\n): Promise<ToolOutput> {\n  const { deadlineMs } = runtime.agent.harness.toolExecution;\n  const controller = new AbortController();\n  const signal = AbortSignal.any([runtime.signal, controller.signal]);\n  const timer = setTimeout(\n    () =>\n      controller.abort(\n        new OutpostError(\n          \"timeout\",\n          `Tool ${call.name} timed out after ${deadlineMs} ms`,\n        ),\n      ),\n    deadlineMs,\n  );\n  const release = runtime.hold();\n  const aborted = new Promise<never>((_, reject) => {\n    const fail = () => reject(signal.reason);\n    if (signal.aborted) fail();\n    signal.addEventListener(\"abort\", fail, { once: true });\n  });\n  const execution = Promise.resolve().then(() =>\n    tool!.execute(input, {\n      sandbox: scopedLease(runtime.sandbox, signal),\n      signal,\n      callId: call.id,\n      model: runtime.agent.model,\n      observe(event: HarnessToolEvent) {\n        signal.throwIfAborted();\n        if (!toolEvents.has(event?.kind))\n          throw new OutpostError(\n            \"configuration\",\n            \"Tools may only report text, warning or raw events\",\n          );\n        runtime.emit(event);\n      },\n    }),\n  );\n  execution.catch(() => undefined);\n  aborted.catch(() => undefined);\n  try {\n    return await Promise.race([execution, aborted]);\n  } finally {\n    clearTimeout(timer);\n    controller.abort(new OutpostError(\"aborted\", \"Tool call ended\"));\n    release();\n  }\n}\n\nfunction scopedLease(lease: SandboxLease, signal: AbortSignal): SandboxLease {\n  const combine = (own?: AbortSignal) =>\n    own ? AbortSignal.any([own, signal]) : signal;\n  return {\n    root: lease.root,\n    home: lease.home,\n    invoke: (command) => {\n      signal.throwIfAborted();\n      return lease.invoke({ ...command, signal: combine(command.signal) });\n    },\n    upload: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.upload(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    download: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.download(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    release: () => lease.release(),\n  };\n}\n\nfunction normalized(output: ToolOutput): ToolOutcome {\n  if (typeof output === \"string\") return { content: output, isError: false };\n  if (\n    output === null ||\n    typeof output !== \"object\" ||\n    typeof output.content !== \"string\" ||\n    (output.isError !== undefined && typeof output.isError !== \"boolean\")\n  )\n    throw new OutpostError(\n      \"configuration\",\n      \"Tools must return text or { content, isError }\",\n    );\n  return { content: output.content, isError: output.isError ?? false };\n}\n\nfunction failed(message: string): ToolOutcome {\n  return { content: message, isError: true };\n}\n"]}
+{"version":3,"file":"tool-execution.js","sourceRoot":"","sources":["../../src/application/tool-execution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAWxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAS3D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAuB,EACvB,KAAoC,EACpC,IAAY,EACZ,MAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAU,CAAC,CAC5D,CACF,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU;YAC5B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW;YACjD,CAAC,CAAC,CAAC,CAAC;QACN,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjE,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE;gBAC3D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ;QACtC,OAAO,CAAC,IAAI,CACV,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,EAAE,IAAI,CAAC,CACrE,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,KAAuC,EACvC,IAAwB,EACxB,IAAY,EACZ,MAA4C;IAE5C,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACpE,IAAI,SAAS,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK;QACP,OAAO,MAAM,CACX,OAAO,EACP,IAAI,EACJ,YAAY,KAAK,uCAAuC,IAAI,CAAC,IAAI,EAAE,CACpE,CAAC;IACJ,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,OAAO,EACP,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EACnC,IAAI,CACL,CAAC;IACF,IAAI,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,IAAI,EACJ,QAAQ,CAAC,KAAK,EACd,6BAA6B,CAC9B,CAAC;IACF,IAAI,SAAS,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACpE,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,iBAAiB;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAiB,EACjB,KAAc,EACd,KAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,IAAI,UAAU;QACxB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;SACnE,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CACjB,OAAuB,EACvB,IAAiB,EACjB,KAAc;IAEd,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CACb,OAAuB,EACvB,IAAwB,EACxB,MAAc;IAEd,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;KACP,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,MAAM,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,OAAuB,EACvB,IAAwB,EACxB,OAAoB,EACpB,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAC3C,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,gBAAgB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB,cAAc;QAC9H,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;QAClD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,OAAO;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAK,CAAC,QAAQ,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,EAAE,UAAU,IAAI,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;gBAC5B,UAAU;gBACV,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC;YACF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,QAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM,KAAK,CAAC;QACxE,OAAO,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAuB,EACvB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAgB;IAEnC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CACd,SAAS,EACT,QAAQ,IAAI,CAAC,IAAI,oBAAoB,UAAU,KAAK,CACrD,CACF,EACH,UAAU,CACX,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;QAC3B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAuB;YAClC,OAAO,EAAE,WAAW,CAClB,OAAO,CAAC,OAAO,EACf,MAAM,EACN,OAAO,EACP,iBAAiB,CAAC,IAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC/C;YACD,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;YAC1B,OAAO,CAAC,KAAuB;gBAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;oBAC9B,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,mDAAmD,CACpD,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;SACF,CAAC;QACF,OAAO,iBAAiB,CAAC,IAAK,CAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,IAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC,CAAC,IAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAAmB,EACnB,MAAmB,EACnB,OAAuB,EACvB,MAA0B;IAE1B,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAE,EAAE,CACpC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC;gBAClB,GAAG,OAAO;gBACV,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC/B,OAAO,CAAC,OAAO,EAAE,IAAI;oBACnB,KACE,IAAI,MAAM,GAAG,CAAC,EACd,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,EAC5C,MAAM,IAAI,mBAAmB,CAAC,gBAAgB;wBAE9C,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,aAAa;4BACnB,MAAM;4BACN,OAAO;4BACP,IAAI,EAAE,IAAI,CAAC,KAAK,CACd,MAAM,EACN,MAAM,GAAG,mBAAmB,CAAC,gBAAgB,CAC9C;yBACF,CAAC,CAAC;oBACL,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnC,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC7C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;gBACvC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,EAAE,EAAE,EAAE;YAC/C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBACzC,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QAErE,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,gDAAgD,CACjD,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC","sourcesContent":["import { isHarnessSubagent } from \"../domain/subagent.ts\";\nimport { runSubagent } from \"./harness-subagent.ts\";\nimport type { HarnessToolContext } from \"../domain/tool.types.ts\";\nimport { observationDefaults } from \"../domain/observation.constants.ts\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport {\n  TOOL_PREVIEW_CHARACTERS,\n  TOOL_RESULT_CHARACTERS,\n} from \"../domain/harness.constants.ts\";\nimport type {\n  ModelToolCallBlock,\n  ModelToolResultBlock,\n} from \"../domain/model.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport type {\n  HarnessTool,\n  HarnessToolEvent,\n  ToolOutput,\n} from \"../domain/tool.types.ts\";\nimport { afterTool, beforeTool } from \"./harness-hooks.ts\";\nimport type {\n  HarnessRuntime,\n  PreparedCall,\n  ToolCallBatch,\n  ToolOutcome,\n  ValidatedInput,\n} from \"./harness.types.ts\";\n\nconst toolEvents: ReadonlySet<string> = new Set([\"text\", \"warning\", \"raw\"]);\n\nexport async function executeToolCalls(\n  runtime: HarnessRuntime,\n  calls: readonly ModelToolCallBlock[],\n  step: number,\n  loaded: ReadonlySet<string>,\n): Promise<readonly ModelToolResultBlock[]> {\n  const tools = new Map(runtime.tools.map((tool) => [tool.name, tool]));\n  const owners = new Map(\n    runtime.agent.harness.skills.flatMap((skill) =>\n      skill.tools.map((tool) => [tool.name, skill.name] as const),\n    ),\n  );\n  const locked = (name: string) => {\n    const skill = owners.get(name);\n    return skill === undefined || loaded.has(skill) ? undefined : skill;\n  };\n  const prepared: PreparedCall[] = [];\n  for (const call of calls)\n    prepared.push(await prepareCall(runtime, tools, call, step, locked));\n  const outcomes = new Map<string, ToolOutcome>();\n  for (const batch of batches(prepared)) {\n    const pending = [...batch.calls];\n    const limit = batch.concurrent\n      ? runtime.agent.harness.toolExecution.concurrency\n      : 1;\n    await Promise.all(\n      Array.from({ length: Math.min(limit, pending.length) }, async () => {\n        for (let next = pending.shift(); next; next = pending.shift())\n          outcomes.set(next.call.id, await executeCall(runtime, next));\n      }),\n    );\n  }\n  const results: ModelToolResultBlock[] = [];\n  for (const { call, outcome } of prepared)\n    results.push(\n      await finish(runtime, call, outcome ?? outcomes.get(call.id)!, step),\n    );\n  return results;\n}\n\nasync function prepareCall(\n  runtime: HarnessRuntime,\n  tools: ReadonlyMap<string, HarnessTool>,\n  call: ModelToolCallBlock,\n  step: number,\n  locked: (name: string) => string | undefined,\n): Promise<PreparedCall> {\n  runtime.signal.throwIfAborted();\n  runtime.emit({\n    kind: \"tool\",\n    name: call.name,\n    input: call.input,\n    callId: call.id,\n  });\n  const tool = tools.get(call.name);\n  if (!tool) return { call, outcome: failed(`Unknown tool: ${call.name}`) };\n  const validated = await validate(tool, call.input, \"Invalid input\");\n  if (\"outcome\" in validated) return { call, outcome: validated.outcome };\n  const skill = locked(tool.name);\n  if (skill)\n    return denied(\n      runtime,\n      call,\n      `Load the ${skill} skill with load_skill before using ${tool.name}`,\n    );\n  const permitted = permission(runtime, tool, validated.value);\n  if (permitted) return denied(runtime, call, permitted);\n  const decision = await beforeTool(\n    runtime,\n    { ...call, input: validated.value },\n    step,\n  );\n  if (\"deny\" in decision) return denied(runtime, call, decision.deny);\n  if (decision.input === validated.value)\n    return { call, tool, input: validated.value };\n  const revised = await validate(\n    tool,\n    decision.input,\n    \"Hook produced invalid input\",\n  );\n  if (\"outcome\" in revised) return { call, outcome: revised.outcome };\n  const revisedPermission = permission(runtime, tool, revised.value);\n  if (revisedPermission) return denied(runtime, call, revisedPermission);\n  return { call, tool, input: revised.value };\n}\n\nasync function validate(\n  tool: HarnessTool,\n  input: unknown,\n  label: string,\n): Promise<ValidatedInput> {\n  const validation = await tool.validate(input);\n  if (\"issues\" in validation)\n    return {\n      outcome: failed(`${label} for ${tool.name}: ${validation.issues}`),\n    };\n  return { value: validation.value };\n}\n\nfunction permission(\n  runtime: HarnessRuntime,\n  tool: HarnessTool,\n  input: unknown,\n): string | undefined {\n  for (const permissions of runtime.permissions) {\n    const decision = permissions.evaluate(tool.name, tool.resources(input));\n    if (!decision.allowed) return decision.reason;\n  }\n  return undefined;\n}\n\nfunction denied(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  reason: string,\n): PreparedCall {\n  runtime.emit({\n    kind: \"tool-denied\",\n    callId: call.id,\n    name: call.name,\n    reason,\n  });\n  return { call, outcome: failed(`Denied: ${reason}`) };\n}\n\nasync function finish(\n  runtime: HarnessRuntime,\n  call: ModelToolCallBlock,\n  outcome: ToolOutcome,\n  step: number,\n): Promise<ModelToolResultBlock> {\n  const final = await afterTool(runtime, call, outcome, step, normalized);\n  const content =\n    final.content.length > TOOL_RESULT_CHARACTERS\n      ? `${final.content.slice(0, TOOL_RESULT_CHARACTERS)}\\n[truncated ${final.content.length - TOOL_RESULT_CHARACTERS} characters]`\n      : final.content;\n  runtime.emit({\n    kind: \"tool-result\",\n    callId: call.id,\n    name: call.name,\n    isError: final.isError,\n    preview: content.slice(0, TOOL_PREVIEW_CHARACTERS),\n    characters: final.content.length,\n  });\n  return {\n    type: \"tool-result\",\n    callId: call.id,\n    content,\n    ...(final.isError ? { isError: true } : {}),\n  };\n}\n\nfunction batches(calls: readonly PreparedCall[]): readonly ToolCallBatch[] {\n  const grouped: ToolCallBatch[] = [];\n  for (const prepared of calls) {\n    if (prepared.outcome) continue;\n    const concurrent = prepared.tool!.readOnly;\n    const last = grouped.at(-1);\n    if (last?.concurrent && concurrent) {\n      grouped[grouped.length - 1] = {\n        concurrent,\n        calls: [...last.calls, prepared],\n      };\n      continue;\n    }\n    grouped.push({ concurrent, calls: [prepared] });\n  }\n  return grouped;\n}\n\nasync function executeCall(\n  runtime: HarnessRuntime,\n  prepared: PreparedCall,\n): Promise<ToolOutcome> {\n  try {\n    return normalized(await runTool(runtime, prepared));\n  } catch (error) {\n    runtime.signal.throwIfAborted();\n    runtime.budget.check();\n    if (runtime.agent.harness.toolExecution.onError === \"fail\") throw error;\n    return failed(error instanceof Error ? error.message : String(error));\n  }\n}\n\nasync function runTool(\n  runtime: HarnessRuntime,\n  { call, tool, input }: PreparedCall,\n): Promise<ToolOutput> {\n  const { deadlineMs } = runtime.agent.harness.toolExecution;\n  const controller = new AbortController();\n  const signal = AbortSignal.any([runtime.signal, controller.signal]);\n  const timer = setTimeout(\n    () =>\n      controller.abort(\n        new OutpostError(\n          \"timeout\",\n          `Tool ${call.name} timed out after ${deadlineMs} ms`,\n        ),\n      ),\n    deadlineMs,\n  );\n  const release = runtime.hold();\n  const aborted = new Promise<never>((_, reject) => {\n    const fail = () => reject(signal.reason);\n    if (signal.aborted) fail();\n    signal.addEventListener(\"abort\", fail, { once: true });\n  });\n  const execution = Promise.resolve().then(() => {\n    const context: HarnessToolContext = {\n      sandbox: scopedLease(\n        runtime.sandbox,\n        signal,\n        runtime,\n        isHarnessSubagent(tool!) ? undefined : call.id,\n      ),\n      signal,\n      callId: call.id,\n      model: runtime.agent.model,\n      observe(event: HarnessToolEvent) {\n        signal.throwIfAborted();\n        if (!toolEvents.has(event?.kind))\n          throw new OutpostError(\n            \"configuration\",\n            \"Tools may only report text, warning or raw events\",\n          );\n        runtime.emit(event);\n      },\n    };\n    return isHarnessSubagent(tool!)\n      ? runtime.modelScope.track(runSubagent(runtime, tool!, input, context))\n      : tool!.execute(input, context);\n  });\n  execution.catch(() => undefined);\n  aborted.catch(() => undefined);\n  try {\n    return await Promise.race([execution, aborted]);\n  } finally {\n    clearTimeout(timer);\n    controller.abort(new OutpostError(\"aborted\", \"Tool call ended\"));\n    release();\n  }\n}\n\nfunction scopedLease(\n  lease: SandboxLease,\n  signal: AbortSignal,\n  runtime: HarnessRuntime,\n  callId: string | undefined,\n): SandboxLease {\n  const combine = (own?: AbortSignal) =>\n    own ? AbortSignal.any([own, signal]) : signal;\n  return {\n    root: lease.root,\n    home: lease.home,\n    invoke: (command) => {\n      signal.throwIfAborted();\n      return lease.invoke({\n        ...command,\n        signal: combine(command.signal),\n        observe(channel, text) {\n          for (\n            let offset = 0;\n            callId !== undefined && offset < text.length;\n            offset += observationDefaults.outputCharacters\n          )\n            runtime.emit({\n              kind: \"tool-output\",\n              callId,\n              channel,\n              text: text.slice(\n                offset,\n                offset + observationDefaults.outputCharacters,\n              ),\n            });\n          command.observe?.(channel, text);\n        },\n      });\n    },\n    upload: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.upload(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    download: (source, destination, settings = {}) => {\n      signal.throwIfAborted();\n      return lease.download(source, destination, {\n        ...settings,\n        signal: combine(settings.signal),\n      });\n    },\n    release: () => lease.release(),\n  };\n}\n\nfunction normalized(output: ToolOutput): ToolOutcome {\n  if (typeof output === \"string\") return { content: output, isError: false };\n  if (\n    output === null ||\n    typeof output !== \"object\" ||\n    typeof output.content !== \"string\" ||\n    (output.isError !== undefined && typeof output.isError !== \"boolean\")\n  )\n    throw new OutpostError(\n      \"configuration\",\n      \"Tools must return text or { content, isError }\",\n    );\n  return { content: output.content, isError: output.isError ?? false };\n}\n\nfunction failed(message: string): ToolOutcome {\n  return { content: message, isError: true };\n}\n"]}

package/dist/application/workspace.js

@@ -1,3 +1,4 @@
+import { observedOperation } from "../domain/observed-operation.js";
 import { invariant } from "../domain/errors.js";
 import { allocateWorkspace } from "./workspace-allocation.js";
 import { executeProcess } from "../infrastructure/process.js";
@@ -9,12 +10,12 @@ import { startupFailure } from "./startup-recovery.js";
 import { workspaces } from "./workspace-registry.js";
 export async function openWorkspace(options = {}) {
     options.signal?.throwIfAborted();
-    const lease = await allocateWorkspace(options);
+    const lease = await observedOperation(options.observation, "git", "workspace.allocate", async () => allocateWorkspace(options));
     try {
-        await hooks(options.hooks?.workspaceReady ?? [], lease.directory, executeProcess, options.signal);
+        await observedOperation(options.observation, "hooks", "workspace.ready", async () => hooks(options.hooks?.workspaceReady ?? [], lease.directory, executeProcess, options.signal));
     }
     catch (cause) {
-        await startupFailure(lease, cause, options);
+        await observedOperation(options.observation, "recovery", "workspace.startup-failure", async () => startupFailure(lease, cause, options));
         await lease.dispose();
         throw cause;
     }
@@ -26,6 +27,7 @@ export async function openWorkspace(options = {}) {
     };
     const result = {
         ...lease,
+        integrate: () => observedOperation(options.observation, "git", "branch.integrate", () => lease.integrate()),
         dispatch(options) {
             return dispatch({ ...options, workspace: result });
         },
@@ -38,7 +40,7 @@ export async function openWorkspace(options = {}) {
         async close(settings = {}) {
             invariant(!state.active, "Close the sandbox before closing its workspace");
             state.closed = true;
-            return lease.dispose(settings.preserve);
+            return observedOperation(options.observation, "recovery", "workspace.cleanup", () => lease.dispose(settings.preserve));
         },
         async [Symbol.asyncDispose]() {
             await result.close();

package/dist/application/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/application/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA4B,EAAE;IAE9B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,CACT,OAAO,CAAC,KAAK,EAAE,cAAc,IAAI,EAAE,EACnC,KAAK,CAAC,SAAS,EACf,cAAc,EACd,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,KAAK;QACL,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,MAAM,GAAc;QACxB,GAAG,KAAK;QACR,QAAQ,CAAC,OAAO;YACd,OAAO,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,CAAC,OAAO,GAAG,EAAE;YAClB,OAAO,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,OAAO;YACZ,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE;YACvB,SAAS,CACP,CAAC,KAAK,CAAC,MAAM,EACb,gDAAgD,CACjD,CAAC;YACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { allocateWorkspace } from \"./workspace-allocation.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { attach } from \"./attach.ts\";\nimport { dispatch } from \"./dispatch.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { Workspace, WorkspaceOptions } from \"./outpost.types.ts\";\nimport { createSandbox } from \"./sandbox.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\n\nexport async function openWorkspace(\n  options: WorkspaceOptions = {},\n): Promise<Workspace> {\n  options.signal?.throwIfAborted();\n  const lease = await allocateWorkspace(options);\n  try {\n    await hooks(\n      options.hooks?.workspaceReady ?? [],\n      lease.directory,\n      executeProcess,\n      options.signal,\n    );\n  } catch (cause) {\n    await startupFailure(lease, cause, options);\n    await lease.dispose();\n    throw cause;\n  }\n  const state = {\n    lease,\n    active: false,\n    closed: false,\n    ...(options.hooks ? { hooks: options.hooks } : {}),\n  };\n  const result: Workspace = {\n    ...lease,\n    dispatch(options) {\n      return dispatch({ ...options, workspace: result });\n    },\n    sandbox(options = {}) {\n      return createSandbox({ ...options, workspace: result });\n    },\n    attach(options) {\n      return attach({ ...options, workspace: result });\n    },\n    async close(settings = {}) {\n      invariant(\n        !state.active,\n        \"Close the sandbox before closing its workspace\",\n      );\n      state.closed = true;\n      return lease.dispose(settings.preserve);\n    },\n    async [Symbol.asyncDispose]() {\n      await result.close();\n    },\n  };\n  workspaces.set(result, state);\n  return result;\n}\n"]}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/application/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA4B,EAAE;IAE9B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,OAAO,CAAC,WAAW,EACnB,KAAK,EACL,oBAAoB,EACpB,KAAK,IAAI,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CACvC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,iBAAiB,CACrB,OAAO,CAAC,WAAW,EACnB,OAAO,EACP,iBAAiB,EACjB,KAAK,IAAI,EAAE,CACT,KAAK,CACH,OAAO,CAAC,KAAK,EAAE,cAAc,IAAI,EAAE,EACnC,KAAK,CAAC,SAAS,EACf,cAAc,EACd,OAAO,CAAC,MAAM,CACf,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,iBAAiB,CACrB,OAAO,CAAC,WAAW,EACnB,UAAU,EACV,2BAA2B,EAC3B,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAClD,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,KAAK;QACL,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,MAAM,GAAc;QACxB,GAAG,KAAK;QACR,SAAS,EAAE,GAAG,EAAE,CACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CACrE,KAAK,CAAC,SAAS,EAAE,CAClB;QACH,QAAQ,CAAC,OAAO;YACd,OAAO,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,CAAC,OAAO,GAAG,EAAE;YAClB,OAAO,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,OAAO;YACZ,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE;YACvB,SAAS,CACP,CAAC,KAAK,CAAC,MAAM,EACb,gDAAgD,CACjD,CAAC;YACF,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,OAAO,iBAAiB,CACtB,OAAO,CAAC,WAAW,EACnB,UAAU,EACV,mBAAmB,EACnB,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACvC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { observedOperation } from \"../domain/observed-operation.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { allocateWorkspace } from \"./workspace-allocation.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { attach } from \"./attach.ts\";\nimport { dispatch } from \"./dispatch.ts\";\nimport { hooks } from \"./lifecycle-hooks.ts\";\nimport type { Workspace, WorkspaceOptions } from \"./outpost.types.ts\";\nimport { createSandbox } from \"./sandbox.ts\";\nimport { startupFailure } from \"./startup-recovery.ts\";\nimport { workspaces } from \"./workspace-registry.ts\";\n\nexport async function openWorkspace(\n  options: WorkspaceOptions = {},\n): Promise<Workspace> {\n  options.signal?.throwIfAborted();\n  const lease = await observedOperation(\n    options.observation,\n    \"git\",\n    \"workspace.allocate\",\n    async () => allocateWorkspace(options),\n  );\n  try {\n    await observedOperation(\n      options.observation,\n      \"hooks\",\n      \"workspace.ready\",\n      async () =>\n        hooks(\n          options.hooks?.workspaceReady ?? [],\n          lease.directory,\n          executeProcess,\n          options.signal,\n        ),\n    );\n  } catch (cause) {\n    await observedOperation(\n      options.observation,\n      \"recovery\",\n      \"workspace.startup-failure\",\n      async () => startupFailure(lease, cause, options),\n    );\n    await lease.dispose();\n    throw cause;\n  }\n  const state = {\n    lease,\n    active: false,\n    closed: false,\n    ...(options.hooks ? { hooks: options.hooks } : {}),\n  };\n  const result: Workspace = {\n    ...lease,\n    integrate: () =>\n      observedOperation(options.observation, \"git\", \"branch.integrate\", () =>\n        lease.integrate(),\n      ),\n    dispatch(options) {\n      return dispatch({ ...options, workspace: result });\n    },\n    sandbox(options = {}) {\n      return createSandbox({ ...options, workspace: result });\n    },\n    attach(options) {\n      return attach({ ...options, workspace: result });\n    },\n    async close(settings = {}) {\n      invariant(\n        !state.active,\n        \"Close the sandbox before closing its workspace\",\n      );\n      state.closed = true;\n      return observedOperation(\n        options.observation,\n        \"recovery\",\n        \"workspace.cleanup\",\n        () => lease.dispose(settings.preserve),\n      );\n    },\n    async [Symbol.asyncDispose]() {\n      await result.close();\n    },\n  };\n  workspaces.set(result, state);\n  return result;\n}\n"]}

package/dist/cli/doctor-command.js

@@ -1,9 +1,13 @@
+import { doctorAgents } from "../application/doctor-agent.constants.js";
 import { doctorDefaults, providerDiagnostics, } from "../application/doctor.constants.js";
 import { diagnose } from "../application/doctor.js";
 import { invariant } from "../domain/errors.js";
 function isProvider(value) {
     return Object.hasOwn(providerDiagnostics, value);
 }
+function isAgent(value) {
+    return Object.hasOwn(doctorAgents, value);
+}
 export async function doctorCommand({ values, positionals }, execute, write = (text) => {
     process.stdout.write(text);
 }) {
@@ -13,7 +17,7 @@ export async function doctorCommand({ values, positionals }, execute, write = (t
     const sandboxProvider = values.sandboxProvider ?? doctorDefaults.sandboxProvider;
     const agent = values.agent ?? doctorDefaults.agent;
     invariant(isProvider(sandboxProvider), "Unknown provider. Choose docker, podman, local, vercel or daytona.");
-    invariant(agent === "codex" || agent === "claude" || agent === "gemini", "Unknown agent. Choose codex, claude or gemini.");
+    invariant(isAgent(agent), `Unknown agent. Choose ${Object.keys(doctorAgents).join(", ")}.`);
     const report = await diagnose({
         sandboxProvider,
         agent,
@@ -32,7 +36,7 @@ export async function doctorCommand({ values, positionals }, execute, write = (t
             ? "Diagnostic checks found failures.\n"
             : "No blocking check failed; warnings and skipped checks still need review.\n");
     }
-    if (report.hasFailures)
+    if (report.hasFailures && !process.exitCode)
         process.exitCode = 1;
 }
 //# sourceMappingURL=doctor-command.js.map

package/dist/cli/doctor-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor-command.js","sourceRoot":"","sources":["../../src/cli/doctor-command.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAE,MAAM,EAAE,WAAW,EAAiB,EACtC,OAAkB,EAClB,QAAgC,CAAC,IAAI,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,EACxB,wFAAwF,CACzF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC3D,gCAAgC,GAAG,EAAE,CACtC,CAAC;IACJ,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,eAAe,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;IACnD,SAAS,CACP,UAAU,CAAC,eAAe,CAAC,EAC3B,oEAAoE,CACrE,CAAC;IACF,SAAS,CACP,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAC7D,gDAAgD,CACjD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B;QACE,eAAe;QACf,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SAC1D,CAAC;QACJ,KAAK,CACH,oBAAoB,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,KAAK,eAAe,KAAK,KAAK,KAAK,CACzH,CAAC;QACF,KAAK,CACH,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,uCAAuC,CACjK,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,KAAK,CACH,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,CACpL,CAAC;QACJ,KAAK,CACH,MAAM,CAAC,WAAW;YAChB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,4EAA4E,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import {\n  doctorDefaults,\n  providerDiagnostics,\n} from \"../application/doctor.constants.ts\";\nimport { diagnose } from \"../application/doctor.ts\";\nimport type { DoctorProvider } from \"../application/doctor.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nfunction isProvider(value: string): value is DoctorProvider {\n  return Object.hasOwn(providerDiagnostics, value);\n}\nexport async function doctorCommand(\n  { values, positionals }: CliInvocation,\n  execute?: Executor,\n  write: (text: string) => void = (text) => {\n    process.stdout.write(text);\n  },\n): Promise<void> {\n  invariant(\n    positionals.length === 1,\n    \"Usage: outpost doctor [--sandbox-provider NAME] [--agent NAME] [--image NAME] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\"sandboxProvider\", \"agent\", \"image\", \"json\"].includes(key),\n      `Unsupported doctor option: --${key}`,\n    );\n  const sandboxProvider =\n    values.sandboxProvider ?? doctorDefaults.sandboxProvider;\n  const agent = values.agent ?? doctorDefaults.agent;\n  invariant(\n    isProvider(sandboxProvider),\n    \"Unknown provider. Choose docker, podman, local, vercel or daytona.\",\n  );\n  invariant(\n    agent === \"codex\" || agent === \"claude\" || agent === \"gemini\",\n    \"Unknown agent. Choose codex, claude or gemini.\",\n  );\n  const report = await diagnose(\n    {\n      sandboxProvider,\n      agent,\n      ...(values.image !== undefined ? { image: values.image } : {}),\n    },\n    execute,\n  );\n  if (values.json) write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    write(\n      `Outpost doctor — ${report.scope === \"host\" ? \"host checks\" : \"host and image checks\"} (${sandboxProvider}, ${agent})\\n`,\n    );\n    write(\n      `Provider contract: ${report.placement}; interactive terminal: ${report.interactiveTerminal ? \"supported\" : \"unsupported\"}. Workflow execution is not tested.\\n`,\n    );\n    if (report.image) write(`Image: ${report.image}\\n`);\n    for (const check of report.checks)\n      write(\n        `[${check.status.toUpperCase()}] ${check.id}${check.version ? ` ${check.version}` : \"\"}${check.referenceVersion ? ` (pinned: ${check.referenceVersion})` : \"\"}: ${check.message}\\n`,\n      );\n    write(\n      report.hasFailures\n        ? \"Diagnostic checks found failures.\\n\"\n        : \"No blocking check failed; warnings and skipped checks still need review.\\n\",\n    );\n  }\n  if (report.hasFailures) process.exitCode = 1;\n}\n"]}
+{"version":3,"file":"doctor-command.js","sourceRoot":"","sources":["../../src/cli/doctor-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAKpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AACD,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAE,MAAM,EAAE,WAAW,EAAiB,EACtC,OAAkB,EAClB,QAAgC,CAAC,IAAI,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;IAED,SAAS,CACP,WAAW,CAAC,MAAM,KAAK,CAAC,EACxB,wFAAwF,CACzF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,SAAS,CACP,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC3D,gCAAgC,GAAG,EAAE,CACtC,CAAC;IACJ,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,eAAe,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;IACnD,SAAS,CACP,UAAU,CAAC,eAAe,CAAC,EAC3B,oEAAoE,CACrE,CAAC;IACF,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,EACd,yBAAyB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B;QACE,eAAe;QACf,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SAC1D,CAAC;QACJ,KAAK,CACH,oBAAoB,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,KAAK,eAAe,KAAK,KAAK,KAAK,CACzH,CAAC;QACF,KAAK,CACH,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,uCAAuC,CACjK,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAC/B,KAAK,CACH,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,CACpL,CAAC;QACJ,KAAK,CACH,MAAM,CAAC,WAAW;YAChB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,4EAA4E,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpE,CAAC","sourcesContent":["import { doctorAgents } from \"../application/doctor-agent.constants.ts\";\nimport {\n  doctorDefaults,\n  providerDiagnostics,\n} from \"../application/doctor.constants.ts\";\nimport { diagnose } from \"../application/doctor.ts\";\nimport type {\n  DoctorAgent,\n  DoctorProvider,\n} from \"../application/doctor.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\n\nfunction isProvider(value: string): value is DoctorProvider {\n  return Object.hasOwn(providerDiagnostics, value);\n}\nfunction isAgent(value: string): value is DoctorAgent {\n  return Object.hasOwn(doctorAgents, value);\n}\nexport async function doctorCommand(\n  { values, positionals }: CliInvocation,\n  execute?: Executor,\n  write: (text: string) => void = (text) => {\n    process.stdout.write(text);\n  },\n): Promise<void> {\n  invariant(\n    positionals.length === 1,\n    \"Usage: outpost doctor [--sandbox-provider NAME] [--agent NAME] [--image NAME] [--json]\",\n  );\n  for (const key of Object.keys(values))\n    invariant(\n      [\"sandboxProvider\", \"agent\", \"image\", \"json\"].includes(key),\n      `Unsupported doctor option: --${key}`,\n    );\n  const sandboxProvider =\n    values.sandboxProvider ?? doctorDefaults.sandboxProvider;\n  const agent = values.agent ?? doctorDefaults.agent;\n  invariant(\n    isProvider(sandboxProvider),\n    \"Unknown provider. Choose docker, podman, local, vercel or daytona.\",\n  );\n  invariant(\n    isAgent(agent),\n    `Unknown agent. Choose ${Object.keys(doctorAgents).join(\", \")}.`,\n  );\n  const report = await diagnose(\n    {\n      sandboxProvider,\n      agent,\n      ...(values.image !== undefined ? { image: values.image } : {}),\n    },\n    execute,\n  );\n  if (values.json) write(`${JSON.stringify(report, null, 2)}\\n`);\n  else {\n    write(\n      `Outpost doctor — ${report.scope === \"host\" ? \"host checks\" : \"host and image checks\"} (${sandboxProvider}, ${agent})\\n`,\n    );\n    write(\n      `Provider contract: ${report.placement}; interactive terminal: ${report.interactiveTerminal ? \"supported\" : \"unsupported\"}. Workflow execution is not tested.\\n`,\n    );\n    if (report.image) write(`Image: ${report.image}\\n`);\n    for (const check of report.checks)\n      write(\n        `[${check.status.toUpperCase()}] ${check.id}${check.version ? ` ${check.version}` : \"\"}${check.referenceVersion ? ` (pinned: ${check.referenceVersion})` : \"\"}: ${check.message}\\n`,\n      );\n    write(\n      report.hasFailures\n        ? \"Diagnostic checks found failures.\\n\"\n        : \"No blocking check failed; warnings and skipped checks still need review.\\n\",\n    );\n  }\n  if (report.hasFailures && !process.exitCode) process.exitCode = 1;\n}\n"]}

package/dist/cli/init-authentication.d.ts

@@ -1,4 +1,7 @@
-import type { InitOptions } from "./scaffold.types.ts";
+import type { AgentAuthentication } from "../domain/agent.types.ts";
+import type { AuthenticationChoice, InitOptions } from "./scaffold.types.ts";
+export declare function authenticationChoice(options: InitOptions): AuthenticationChoice;
 export declare function authenticationEnvironment(options: InitOptions): string;
 export declare function authenticationInstructions(options: InitOptions): string;
+export declare function authenticationSetting(options: InitOptions): AgentAuthentication;
 export declare function authenticationSource(options: InitOptions): string;

package/dist/cli/init-authentication.js

@@ -1,42 +1,37 @@
-import { authenticationRecipes } from "../adapters/agents/authentication.constants.js";
+import { invariant } from "../domain/errors.js";
+import { authenticationChoices } from "./main.constants.js";
+export function authenticationChoice(options) {
+    const agent = options.agent ?? "codex";
+    const value = options.authentication ?? (options.baseUrl ? "usage" : "account");
+    const choices = Object.hasOwn(authenticationChoices, agent)
+        ? authenticationChoices[agent]
+        : [];
+    const choice = choices.find((candidate) => candidate.value === value);
+    invariant(choice, `Authentication for ${agent} must be ${choices.map((candidate) => candidate.value).join(", ") || "one of its supported forms"}`);
+    return choice;
+}
 export function authenticationEnvironment(options) {
     if (options.baseUrl)
         return `${options.apiKeyEnvironment ?? "OPENAI_API_KEY"}=\n`;
-    if (options.authentication === "login")
-        return "";
-    if (options.authentication === "oauth-token")
-        return "CLAUDE_CODE_OAUTH_TOKEN=\n";
-    return authenticationRecipes[options.agent ?? "codex"].environment;
+    const { variable } = authenticationChoice(options);
+    return variable ? `${variable}=\n` : "";
 }
 export function authenticationInstructions(options) {
-    if (options.authentication === "login")
-        return "Run codex login on the host. For isolated providers, use file credential storage; the generated script copies auth.json into the private sandbox home.";
-    if (options.authentication === "oauth-token")
-        return "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.";
-    return ("Set " +
-        authenticationEnvironment(options).trim().replace("=", "") +
-        " in the workflow .env or parent environment. API usage is billed separately from subscriptions.");
+    if (options.baseUrl)
+        return `Set ${options.apiKeyEnvironment ?? "OPENAI_API_KEY"} in the workflow .env or parent environment for the custom Responses provider.`;
+    return authenticationChoice(options).instructions;
+}
+export function authenticationSetting(options) {
+    const { value, variable } = authenticationChoice(options);
+    if (value !== "account-token")
+        return value;
+    invariant(variable, "Account tokens require a declared variable");
+    return { account: { variable } };
 }
 export function authenticationSource(options) {
-    const agent = options.agent ?? "codex";
-    if (options.authentication === "login") {
-        if (options.sandboxProvider === "local")
-            return 'const authentication = { mode: "login" as const };';
-        return `const seed = await readFile(resolve(process.env.CODEX_HOME || resolve(homedir(), ".codex"), "auth.json"), "utf8");
-try { JSON.parse(seed); } catch { throw new Error("Invalid Codex authentication file. Run codex login again with file credential storage."); }
-const authentication = { mode: "login" as const, credentials: seed };`;
-    }
-    const key = authenticationEnvironment(options).trim().replace("=", "");
-    const conflict = agent === "claude"
-        ? key === "ANTHROPIC_API_KEY"
-            ? "CLAUDE_CODE_OAUTH_TOKEN"
-            : "ANTHROPIC_API_KEY"
-        : undefined;
-    const check = `if (!variables[${JSON.stringify(key)}]) throw new Error(${JSON.stringify(`Missing ${key}. Configure the workflow .env or parent environment before starting a sandbox.`)});`;
-    const guard = conflict
-        ? `\nif (variables[${JSON.stringify(conflict)}]) throw new Error("Conflicting Claude authentication methods. Keep only the selected credential in the workflow environment.");`
-        : "";
-    const mode = options.authentication === "oauth-token" ? "oauth-token" : "api-key";
-    return `${check}${guard}\nconst authentication = { mode: ${JSON.stringify(mode)} as const${mode === "api-key" ? `, environment: ${JSON.stringify(key)}` : ""} };`;
+    const setting = authenticationSetting(options);
+    if (typeof setting === "string")
+        return JSON.stringify(setting);
+    return `{ account: { variable: ${JSON.stringify(authenticationChoice(options).variable)} } }`;
 }
 //# sourceMappingURL=init-authentication.js.map

package/dist/cli/init-authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-authentication.js","sourceRoot":"","sources":["../../src/cli/init-authentication.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AAEvF,MAAM,UAAU,yBAAyB,CAAC,OAAoB;IAC5D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,KAAK,CAAC;IAC/D,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAClD,IAAI,OAAO,CAAC,cAAc,KAAK,aAAa;QAC1C,OAAO,4BAA4B,CAAC;IACtC,OAAO,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAoB;IAC7D,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO;QACpC,OAAO,wJAAwJ,CAAC;IAClK,IAAI,OAAO,CAAC,cAAc,KAAK,aAAa;QAC1C,OAAO,sJAAsJ,CAAC;IAChK,OAAO,CACL,MAAM;QACN,yBAAyB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,iGAAiG,CAClG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,eAAe,KAAK,OAAO;YACrC,OAAO,oDAAoD,CAAC;QAC9D,OAAO;;sEAE2D,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GACZ,KAAK,KAAK,QAAQ;QAChB,CAAC,CAAC,GAAG,KAAK,mBAAmB;YAC3B,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,mBAAmB;QACvB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GAAG,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,gFAAgF,CAAC,IAAI,CAAC;IAC5L,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,kIAAkI;QAC/K,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GACR,OAAO,CAAC,cAAc,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,OAAO,GAAG,KAAK,GAAG,KAAK,oCAAoC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;AACpK,CAAC","sourcesContent":["import type { InitOptions } from \"./scaffold.types.ts\";\nimport { authenticationRecipes } from \"../adapters/agents/authentication.constants.ts\";\n\nexport function authenticationEnvironment(options: InitOptions): string {\n  if (options.baseUrl)\n    return `${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"}=\\n`;\n  if (options.authentication === \"login\") return \"\";\n  if (options.authentication === \"oauth-token\")\n    return \"CLAUDE_CODE_OAUTH_TOKEN=\\n\";\n  return authenticationRecipes[options.agent ?? \"codex\"].environment;\n}\n\nexport function authenticationInstructions(options: InitOptions): string {\n  if (options.authentication === \"login\")\n    return \"Run codex login on the host. For isolated providers, use file credential storage; the generated script copies auth.json into the private sandbox home.\";\n  if (options.authentication === \"oauth-token\")\n    return \"Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.\";\n  return (\n    \"Set \" +\n    authenticationEnvironment(options).trim().replace(\"=\", \"\") +\n    \" in the workflow .env or parent environment. API usage is billed separately from subscriptions.\"\n  );\n}\n\nexport function authenticationSource(options: InitOptions): string {\n  const agent = options.agent ?? \"codex\";\n  if (options.authentication === \"login\") {\n    if (options.sandboxProvider === \"local\")\n      return 'const authentication = { mode: \"login\" as const };';\n    return `const seed = await readFile(resolve(process.env.CODEX_HOME || resolve(homedir(), \".codex\"), \"auth.json\"), \"utf8\");\ntry { JSON.parse(seed); } catch { throw new Error(\"Invalid Codex authentication file. Run codex login again with file credential storage.\"); }\nconst authentication = { mode: \"login\" as const, credentials: seed };`;\n  }\n  const key = authenticationEnvironment(options).trim().replace(\"=\", \"\");\n  const conflict =\n    agent === \"claude\"\n      ? key === \"ANTHROPIC_API_KEY\"\n        ? \"CLAUDE_CODE_OAUTH_TOKEN\"\n        : \"ANTHROPIC_API_KEY\"\n      : undefined;\n  const check = `if (!variables[${JSON.stringify(key)}]) throw new Error(${JSON.stringify(`Missing ${key}. Configure the workflow .env or parent environment before starting a sandbox.`)});`;\n  const guard = conflict\n    ? `\\nif (variables[${JSON.stringify(conflict)}]) throw new Error(\"Conflicting Claude authentication methods. Keep only the selected credential in the workflow environment.\");`\n    : \"\";\n  const mode =\n    options.authentication === \"oauth-token\" ? \"oauth-token\" : \"api-key\";\n  return `${check}${guard}\\nconst authentication = { mode: ${JSON.stringify(mode)} as const${mode === \"api-key\" ? `, environment: ${JSON.stringify(key)}` : \"\"} };`;\n}\n"]}
+{"version":3,"file":"init-authentication.js","sourceRoot":"","sources":["../../src/cli/init-authentication.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,UAAU,oBAAoB,CAClC,OAAoB;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,KAAK,GACT,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,OAAO,GAAoC,MAAM,CAAC,MAAM,CAC5D,qBAAqB,EACrB,KAAK,CACN;QACC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACtE,SAAS,CACP,MAAM,EACN,sBAAsB,KAAK,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAChI,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAoB;IAC5D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,KAAK,CAAC;IAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAoB;IAC7D,IAAI,OAAO,CAAC,OAAO;QACjB,OAAO,OAAO,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,gFAAgF,CAAC;IAC9I,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,4CAA4C,CAAC,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,0BAA0B,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAChG,CAAC","sourcesContent":["import type { AgentAuthentication } from \"../domain/agent.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { authenticationChoices } from \"./main.constants.ts\";\nimport type { AuthenticationChoice, InitOptions } from \"./scaffold.types.ts\";\n\nexport function authenticationChoice(\n  options: InitOptions,\n): AuthenticationChoice {\n  const agent = options.agent ?? \"codex\";\n  const value =\n    options.authentication ?? (options.baseUrl ? \"usage\" : \"account\");\n  const choices: readonly AuthenticationChoice[] = Object.hasOwn(\n    authenticationChoices,\n    agent,\n  )\n    ? authenticationChoices[agent]\n    : [];\n  const choice = choices.find((candidate) => candidate.value === value);\n  invariant(\n    choice,\n    `Authentication for ${agent} must be ${choices.map((candidate) => candidate.value).join(\", \") || \"one of its supported forms\"}`,\n  );\n  return choice;\n}\n\nexport function authenticationEnvironment(options: InitOptions): string {\n  if (options.baseUrl)\n    return `${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"}=\\n`;\n  const { variable } = authenticationChoice(options);\n  return variable ? `${variable}=\\n` : \"\";\n}\n\nexport function authenticationInstructions(options: InitOptions): string {\n  if (options.baseUrl)\n    return `Set ${options.apiKeyEnvironment ?? \"OPENAI_API_KEY\"} in the workflow .env or parent environment for the custom Responses provider.`;\n  return authenticationChoice(options).instructions;\n}\n\nexport function authenticationSetting(\n  options: InitOptions,\n): AgentAuthentication {\n  const { value, variable } = authenticationChoice(options);\n  if (value !== \"account-token\") return value;\n  invariant(variable, \"Account tokens require a declared variable\");\n  return { account: { variable } };\n}\n\nexport function authenticationSource(options: InitOptions): string {\n  const setting = authenticationSetting(options);\n  if (typeof setting === \"string\") return JSON.stringify(setting);\n  return `{ account: { variable: ${JSON.stringify(authenticationChoice(options).variable)} } }`;\n}\n"]}

package/dist/cli/init-command.js

@@ -36,7 +36,7 @@ export async function initializeCommand({ values, }) {
         }
         const settings = await projectSettings(resolve(values.directory ?? process.cwd()), options);
         const choices = Object.entries(authenticationChoices).find(([name]) => name === options.agent)?.[1];
-        invariant(choices, "Choose codex, claude or gemini");
+        invariant(choices, "Choose codex, claude, antigravity, copilot or kimi");
         const questions = [
             {
                 key: "manager",
@@ -47,8 +47,8 @@ export async function initializeCommand({ values, }) {
             {
                 key: "authentication",
                 message: "Agent authentication",
-                options: [...choices],
-                initialValue: "api-key",
+                options: choices.map(({ value, label }) => ({ value, label })),
+                initialValue: options.baseUrl === undefined ? "account" : "usage",
             },
         ];
         for (const question of questions) {

package/dist/cli/init-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-command.js","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,KAAK,EACL,MAAM,EACN,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,GACQ;IACd,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACrC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,GAAG;QACX,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAE1C,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,EAC1C,OAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CACnC,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,SAAS,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG;YAChB;gBACE,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;gBACrB,YAAY,EAAE,SAAS;aACxB;SACF,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC7C,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,CAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,QAAQ,EAAE,KAAK,CACb,OAAO,CAAC,KAAK;QACX,CAAC,CAAC,mDAAmD;QACrD,CAAC,CAAC,kBAAkB,CACvB,CAAC;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,OAAsB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mFAAmF,CAAC;IACxF,MAAM,OAAO,GAAG,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,0BAA0B,CAAC,OAAsB,CAAC,KAAK,YAAY,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC;IACvM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { resolve } from \"node:path\";\nimport {\n  cancel,\n  intro,\n  isCancel,\n  outro,\n  select,\n  spinner,\n} from \"@clack/prompts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { authenticationInstructions } from \"./init-authentication.ts\";\nimport { supportedManagers } from \"./scaffold.constants.ts\";\nimport {\n  initializationQuestions,\n  authenticationChoices,\n} from \"./main.constants.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\nimport { initialize } from \"./scaffold.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initializeCommand({\n  values,\n}: CliInvocation): Promise<void> {\n  const options: Record<string, unknown> = Object.fromEntries(\n    Object.entries(values).filter(([key]) => ![\"help\", \"yes\"].includes(key)),\n  );\n  if (values[\"base-url\"] !== undefined) options.baseUrl = values[\"base-url\"];\n  if (values[\"api-key-env\"] !== undefined)\n    options.apiKeyEnvironment = values[\"api-key-env\"];\n  delete options[\"base-url\"];\n  delete options[\"api-key-env\"];\n  if (\n    !values.yes &&\n    !process.stdin.isTTY &&\n    (!values.agent || !values.sandboxProvider)\n  )\n    throw new Error(\n      \"Headless initialization requires --yes for defaults, or --agent and --sandbox-provider.\",\n    );\n  if (!values.yes && process.stdin.isTTY) {\n    intro(\"Create an Outpost workflow\");\n    for (const question of initializationQuestions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select({\n        message: question.message,\n        options: question.choices.map((value) => ({ value, label: value })),\n      });\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n    const settings = await projectSettings(\n      resolve(values.directory ?? process.cwd()),\n      options as InitOptions,\n    );\n    const choices = Object.entries(authenticationChoices).find(\n      ([name]) => name === options.agent,\n    )?.[1];\n    invariant(choices, \"Choose codex, claude or gemini\");\n    const questions = [\n      {\n        key: \"manager\",\n        message: \"Package manager\",\n        options: supportedManagers.map((value) => ({ value, label: value })),\n        initialValue: settings.manager,\n      },\n      {\n        key: \"authentication\",\n        message: \"Agent authentication\",\n        options: [...choices],\n        initialValue: \"api-key\",\n      },\n    ];\n    for (const question of questions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select(question);\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n  }\n  options.build ??= [\"docker\", \"podman\"].includes(\n    String(options.sandboxProvider ?? \"docker\"),\n  );\n  const progress = !values.yes && process.stdin.isTTY ? spinner() : undefined;\n  progress?.start(\n    options.build\n      ? \"Creating project and building its container image\"\n      : \"Creating project\",\n  );\n  let result;\n  try {\n    result = await initialize(options as InitOptions);\n  } catch (error) {\n    progress?.stop(\"Initialization failed\");\n    throw error;\n  }\n  progress?.stop(\"Project ready\");\n  const installation = options.install\n    ? \"\"\n    : \"Install project dependencies with your selected package manager before running.\\n\";\n  const message = `Initialized ${result.files.length} files in ${resolve(values.directory ?? process.cwd())}.\\n${authenticationInstructions(options as InitOptions)}\\n${installation}Run: ${result.run}`;\n  if (!values.yes && process.stdin.isTTY) outro(message);\n  else process.stdout.write(`${message}\\n`);\n}\n"]}
+{"version":3,"file":"init-command.js","sourceRoot":"","sources":["../../src/cli/init-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,KAAK,EACL,MAAM,EACN,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,GACQ;IACd,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS;QACrC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,GAAG;QACX,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QACpB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAE1C,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,KAAK,MAAM,QAAQ,IAAI,uBAAuB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;aACpE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,EAC1C,OAAsB,CACvB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACxD,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CACnC,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,SAAS,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG;YAChB;gBACE,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,sBAAsB;gBAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,YAAY,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;aAClE;SACF,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,2BAA2B,CAAC,CAAC;gBACpC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC7C,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,CAC5C,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,QAAQ,EAAE,KAAK,CACb,OAAO,CAAC,KAAK;QACX,CAAC,CAAC,mDAAmD;QACrD,CAAC,CAAC,kBAAkB,CACvB,CAAC;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,OAAsB,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,mFAAmF,CAAC;IACxF,MAAM,OAAO,GAAG,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,0BAA0B,CAAC,OAAsB,CAAC,KAAK,YAAY,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC;IACvM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport { resolve } from \"node:path\";\nimport {\n  cancel,\n  intro,\n  isCancel,\n  outro,\n  select,\n  spinner,\n} from \"@clack/prompts\";\nimport { projectSettings } from \"./project-settings.ts\";\nimport { authenticationInstructions } from \"./init-authentication.ts\";\nimport { supportedManagers } from \"./scaffold.constants.ts\";\nimport {\n  initializationQuestions,\n  authenticationChoices,\n} from \"./main.constants.ts\";\nimport type { CliInvocation } from \"./main.types.ts\";\nimport { initialize } from \"./scaffold.ts\";\nimport type { InitOptions } from \"./scaffold.types.ts\";\n\nexport async function initializeCommand({\n  values,\n}: CliInvocation): Promise<void> {\n  const options: Record<string, unknown> = Object.fromEntries(\n    Object.entries(values).filter(([key]) => ![\"help\", \"yes\"].includes(key)),\n  );\n  if (values[\"base-url\"] !== undefined) options.baseUrl = values[\"base-url\"];\n  if (values[\"api-key-env\"] !== undefined)\n    options.apiKeyEnvironment = values[\"api-key-env\"];\n  delete options[\"base-url\"];\n  delete options[\"api-key-env\"];\n  if (\n    !values.yes &&\n    !process.stdin.isTTY &&\n    (!values.agent || !values.sandboxProvider)\n  )\n    throw new Error(\n      \"Headless initialization requires --yes for defaults, or --agent and --sandbox-provider.\",\n    );\n  if (!values.yes && process.stdin.isTTY) {\n    intro(\"Create an Outpost workflow\");\n    for (const question of initializationQuestions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select({\n        message: question.message,\n        options: question.choices.map((value) => ({ value, label: value })),\n      });\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n    const settings = await projectSettings(\n      resolve(values.directory ?? process.cwd()),\n      options as InitOptions,\n    );\n    const choices = Object.entries(authenticationChoices).find(\n      ([name]) => name === options.agent,\n    )?.[1];\n    invariant(choices, \"Choose codex, claude, antigravity, copilot or kimi\");\n    const questions = [\n      {\n        key: \"manager\",\n        message: \"Package manager\",\n        options: supportedManagers.map((value) => ({ value, label: value })),\n        initialValue: settings.manager,\n      },\n      {\n        key: \"authentication\",\n        message: \"Agent authentication\",\n        options: choices.map(({ value, label }) => ({ value, label })),\n        initialValue: options.baseUrl === undefined ? \"account\" : \"usage\",\n      },\n    ];\n    for (const question of questions) {\n      if (options[question.key] !== undefined) continue;\n      const value = await select(question);\n      if (isCancel(value)) {\n        cancel(\"Initialization cancelled.\");\n        process.exitCode = 130;\n        return;\n      }\n      options[question.key] = value;\n    }\n  }\n  options.build ??= [\"docker\", \"podman\"].includes(\n    String(options.sandboxProvider ?? \"docker\"),\n  );\n  const progress = !values.yes && process.stdin.isTTY ? spinner() : undefined;\n  progress?.start(\n    options.build\n      ? \"Creating project and building its container image\"\n      : \"Creating project\",\n  );\n  let result;\n  try {\n    result = await initialize(options as InitOptions);\n  } catch (error) {\n    progress?.stop(\"Initialization failed\");\n    throw error;\n  }\n  progress?.stop(\"Project ready\");\n  const installation = options.install\n    ? \"\"\n    : \"Install project dependencies with your selected package manager before running.\\n\";\n  const message = `Initialized ${result.files.length} files in ${resolve(values.directory ?? process.cwd())}.\\n${authenticationInstructions(options as InitOptions)}\\n${installation}Run: ${result.run}`;\n  if (!values.yes && process.stdin.isTTY) outro(message);\n  else process.stdout.write(`${message}\\n`);\n}\n"]}

package/dist/cli/main.constants.d.ts

@@ -9,7 +9,7 @@ export declare const cliOptions: {
     };
     readonly authentication: {
         readonly type: "string";
-        readonly description: "Authentication: api-key, oauth-token (Claude), login (Codex)";
+        readonly description: "Authentication: account, account-token (Claude, Copilot) or usage";
     };
     readonly help: {
         readonly type: "boolean";
@@ -71,7 +71,7 @@ export declare const cliOptions: {
     };
     readonly agent: {
         readonly type: "string";
-        readonly description: "Agent: codex, claude or gemini";
+        readonly description: "Agent: codex, claude, antigravity, copilot or kimi";
     };
     readonly sandboxProvider: {
         readonly type: "string";
@@ -159,7 +159,7 @@ export declare const commandOptions: {
 export declare const initializationQuestions: readonly [{
     readonly key: "agent";
     readonly message: "Coding agent";
-    readonly choices: readonly ["codex", "claude", "gemini"];
+    readonly choices: readonly ["codex", "claude", "antigravity", "copilot", "kimi"];
 }, {
     readonly key: "sandboxProvider";
     readonly message: "Sandbox provider";
@@ -167,21 +167,58 @@ export declare const initializationQuestions: readonly [{
 }];
 export declare const authenticationChoices: {
     readonly codex: readonly [{
-        readonly value: "api-key";
-        readonly label: "OpenAI API key (API billing)";
+        readonly value: "account";
+        readonly label: "ChatGPT account (codex login, file storage)";
+        readonly instructions: "Run codex login on the host with cli_auth_credentials_store = \"file\". Isolated sandboxes receive a private copy of auth.json; the local provider uses the host login. This uses your ChatGPT plan.";
     }, {
-        readonly value: "login";
-        readonly label: "Existing Codex account login";
+        readonly value: "usage";
+        readonly label: "OpenAI API key (API billing)";
+        readonly variable: "OPENAI_API_KEY";
+        readonly instructions: "Set OPENAI_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.";
     }];
     readonly claude: readonly [{
-        readonly value: "api-key";
-        readonly label: "Anthropic API key (API billing)";
+        readonly value: "account";
+        readonly label: "Claude subscription login (claude /login)";
+        readonly instructions: "Run claude and /login on the host. Isolated sandboxes receive only the subscription entry of .credentials.json. Logins stored in the macOS keychain are never read: choose account-token there.";
     }, {
-        readonly value: "oauth-token";
+        readonly value: "account-token";
         readonly label: "Claude subscription token (claude setup-token)";
+        readonly variable: "CLAUDE_CODE_OAUTH_TOKEN";
+        readonly instructions: "Run claude setup-token on the host, then set CLAUDE_CODE_OAUTH_TOKEN in the workflow .env or parent environment. This uses your Claude subscription.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Anthropic API key (API billing)";
+        readonly variable: "ANTHROPIC_API_KEY";
+        readonly instructions: "Set ANTHROPIC_API_KEY in the workflow .env or parent environment. API usage is billed separately from subscriptions.";
     }];
-    readonly gemini: readonly [{
-        readonly value: "api-key";
-        readonly label: "Gemini API key";
+    readonly antigravity: readonly [{
+        readonly value: "account";
+        readonly label: "Google account login (agy)";
+        readonly instructions: "Run agy on the host and sign in with your Google account. Isolated sandboxes receive a private copy of the Antigravity OAuth token.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Gemini API key (API billing)";
+        readonly variable: "GEMINI_API_KEY";
+        readonly instructions: "Set GEMINI_API_KEY in the workflow .env or parent environment. Gemini API usage is billed separately from Google AI plans.";
+    }];
+    readonly copilot: readonly [{
+        readonly value: "account";
+        readonly label: "GitHub Copilot login (copilot login)";
+        readonly instructions: "Run copilot login on the host. Outpost passes the token stored in ~/.copilot/config.json as COPILOT_GITHUB_TOKEN; tokens kept in the system keychain are never read: choose account-token there.";
+    }, {
+        readonly value: "account-token";
+        readonly label: "GitHub token with Copilot access (COPILOT_GITHUB_TOKEN)";
+        readonly variable: "COPILOT_GITHUB_TOKEN";
+        readonly instructions: "Set COPILOT_GITHUB_TOKEN to a fine-grained token with the Copilot Requests permission in the workflow .env or parent environment. Classic ghp_ tokens are rejected. Requests count against your Copilot plan.";
+    }];
+    readonly kimi: readonly [{
+        readonly value: "account";
+        readonly label: "Kimi Code account login";
+        readonly instructions: "Sign in with the kimi CLI on the host. Isolated sandboxes receive a private copy of the ~/.kimi-code credentials and device identifier.";
+    }, {
+        readonly value: "usage";
+        readonly label: "Kimi API key (API billing, requires --model)";
+        readonly variable: "KIMI_API_KEY";
+        readonly instructions: "Set KIMI_API_KEY in the workflow .env or parent environment. API usage is billed separately from Kimi Code plans.";
     }];
 };