@elie-laloum/outpost 7.0.0 → 9.0.0

package/dist/infrastructure/workflow-decision-signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-decision-signature.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-decision-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAU3C,SAAS,OAAO,CAAC,QAA0B;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACnB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,8BAA8B;QACnD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG;QACb,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,KAAK;QACd,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,MAAM;KAChB,CAAC;IACF,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,+BAA+B;QAC/B,GAAG,MAAM;QACT,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,SAAS;KAChB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAuC;IAEvC,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;QACrC,OAAO,CAAC,UAAU,CAAC,iBAAiB,KAAK,SAAS;QAElD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,MAAM,QAAQ,GAAqB;QACjC,GAAG,OAAO,CAAC,QAAQ;QACnB,KAAK,EAAE;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,EAAE;SACd;KACF,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,QAAQ;QACX,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,KAAM;YAClB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACvE,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAwC;IAExC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAqB;YACjC,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAM,CAAC;QAC9B,IACE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAEvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,GAAG;YACJ,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAC5B,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;YAC/B,GAAG,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS;YAC7C,CAAC,MAAM,CACL,IAAI,EACJ,KAAK,EACL,GAAG,CAAC,SAAS,EACb,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAC1C;YAED,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  workflowDecisionSignatureDomain,\n  workflowDecisionKeyIdMaxLength,\n  workflowDecisionSignaturePattern,\n  workflowDecisionActions,\n} from \"./workflow-decision-signature.constants.ts\";\nimport { sign, verify } from \"node:crypto\";\nimport type {\n  WorkflowDecision,\n  WorkflowDecisionVerifier,\n} from \"../domain/workflow/gates.types.ts\";\nimport type {\n  WorkflowDecisionSigningOptions,\n  WorkflowDecisionVerifierOptions,\n} from \"./workflow-decision-signature.types.ts\";\n\nfunction payload(decision: WorkflowDecision): Buffer {\n  const proof = decision.proof;\n  if (\n    !proof ||\n    typeof proof.keyId !== \"string\" ||\n    !proof.keyId.trim() ||\n    proof.keyId.length > workflowDecisionKeyIdMaxLength ||\n    typeof proof.expiresAt !== \"string\" ||\n    !Number.isFinite(Date.parse(proof.expiresAt))\n  )\n    throw new Error(\"Invalid workflow decision proof\");\n  const fields = [\n    decision.executionId,\n    decision.key,\n    decision.requestId,\n    decision.actor,\n    decision.reason,\n    decision.action,\n  ];\n  if (\n    fields.some((value) => typeof value !== \"string\" || !value.trim()) ||\n    !workflowDecisionActions.includes(decision.action)\n  )\n    throw new Error(\"Invalid signed workflow decision\");\n  return Buffer.from(\n    JSON.stringify([\n      workflowDecisionSignatureDomain,\n      ...fields,\n      proof.keyId,\n      proof.expiresAt,\n    ]),\n  );\n}\n\nexport function signWorkflowDecision(\n  options: WorkflowDecisionSigningOptions,\n): WorkflowDecision {\n  if (\n    options.privateKey.type !== \"private\" ||\n    options.privateKey.asymmetricKeyType !== \"ed25519\"\n  )\n    throw new Error(\n      \"Workflow decision signing requires an Ed25519 private key\",\n    );\n  const decision: WorkflowDecision = {\n    ...options.decision,\n    proof: {\n      keyId: options.keyId,\n      expiresAt: options.expiresAt,\n      signature: \"\",\n    },\n  };\n  const bytes = payload(decision);\n  if (Date.parse(options.expiresAt) <= Date.now())\n    throw new Error(\"Workflow decision proof expired\");\n  return Object.freeze({\n    ...decision,\n    proof: Object.freeze({\n      ...decision.proof!,\n      signature: sign(null, bytes, options.privateKey).toString(\"base64url\"),\n    }),\n  });\n}\n\nexport function ed25519DecisionVerifier(\n  options: WorkflowDecisionVerifierOptions,\n): WorkflowDecisionVerifier {\n  return async (input) => {\n    const decision: WorkflowDecision = {\n      ...input,\n      ...(input.proof ? { proof: { ...input.proof } } : {}),\n    };\n    const bytes = payload(decision);\n    const proof = decision.proof!;\n    if (\n      typeof proof.signature !== \"string\" ||\n      !workflowDecisionSignaturePattern.test(proof.signature)\n    )\n      throw new Error(\"Invalid workflow decision signature\");\n    const keys = await options.keys();\n    const matches = keys.filter((key) => key.keyId === proof.keyId);\n    const key = matches[0];\n    if (\n      matches.length !== 1 ||\n      !key ||\n      key.actor !== decision.actor ||\n      key.publicKey.type !== \"public\" ||\n      key.publicKey.asymmetricKeyType !== \"ed25519\" ||\n      !verify(\n        null,\n        bytes,\n        key.publicKey,\n        Buffer.from(proof.signature, \"base64url\"),\n      )\n    )\n      throw new Error(\"Invalid or revoked workflow approver key or signature\");\n    const now = Date.now();\n    if (Date.parse(proof.expiresAt) <= now)\n      throw new Error(\"Workflow decision proof expired\");\n    return Object.freeze({\n      keyId: key.keyId,\n      verifiedAt: new Date(now).toISOString(),\n    });\n  };\n}\n"]}
+{"version":3,"file":"workflow-decision-signature.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-decision-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAU3C,SAAS,OAAO,CAAC,QAA0B;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACnB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,8BAA8B;QACnD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG;QACb,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,KAAK;QACd,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,MAAM;KAChB,CAAC;IACF,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,+BAA+B;QAC/B,GAAG,MAAM;QACT,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,SAAS;KAChB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAuC;IAEvC,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;QACrC,OAAO,CAAC,UAAU,CAAC,iBAAiB,KAAK,SAAS;QAElD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,MAAM,QAAQ,GAAqB;QACjC,GAAG,OAAO,CAAC,QAAQ;QACnB,KAAK,EAAE;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,EAAE;SACd;KACF,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,QAAQ;QACX,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,QAAQ,CAAC,KAAM;YAClB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACvE,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAwC;IAExC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAqB;YACjC,GAAG,KAAK;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAM,CAAC;QAC9B,IACE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAEvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,GAAG;YACJ,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAC5B,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;YAC/B,GAAG,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS;YAC7C,CAAC,MAAM,CACL,IAAI,EACJ,KAAK,EACL,GAAG,CAAC,SAAS,EACb,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAC1C;YAED,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  workflowDecisionSignatureDomain,\n  workflowDecisionKeyIdMaxLength,\n  workflowDecisionSignaturePattern,\n  workflowDecisionActions,\n} from \"./workflow-decision-signature.constants.ts\";\nimport { sign, verify } from \"node:crypto\";\nimport type {\n  WorkflowDecision,\n  WorkflowDecisionVerifier,\n} from \"../domain/workflow/gates.types.ts\";\nimport type {\n  WorkflowDecisionSigningOptions,\n  WorkflowDecisionVerifierOptions,\n} from \"./workflow-decision-signature.types.ts\";\n\nfunction payload(decision: WorkflowDecision): Buffer {\n  const proof = decision.proof;\n  if (\n    !proof ||\n    typeof proof.keyId !== \"string\" ||\n    !proof.keyId.trim() ||\n    proof.keyId.length > workflowDecisionKeyIdMaxLength ||\n    typeof proof.expiresAt !== \"string\" ||\n    !Number.isFinite(Date.parse(proof.expiresAt))\n  )\n    throw new Error(\"Invalid workflow decision proof\");\n  const fields = [\n    decision.executionId,\n    decision.key,\n    decision.requestId,\n    decision.actor,\n    decision.reason,\n    decision.action,\n  ];\n  if (\n    fields.some((value) => typeof value !== \"string\" || !value.trim()) ||\n    !workflowDecisionActions.includes(decision.action)\n  )\n    throw new Error(\"Invalid signed workflow decision\");\n  return Buffer.from(\n    JSON.stringify([\n      workflowDecisionSignatureDomain,\n      ...fields,\n      proof.keyId,\n      proof.expiresAt,\n    ]),\n  );\n}\n\nexport function signWorkflowDecision(\n  options: WorkflowDecisionSigningOptions,\n): WorkflowDecision {\n  if (\n    options.privateKey.type !== \"private\" ||\n    options.privateKey.asymmetricKeyType !== \"ed25519\"\n  )\n    throw new Error(\n      \"Workflow decision signing requires an Ed25519 private key\",\n    );\n  const decision: WorkflowDecision = {\n    ...options.decision,\n    proof: {\n      keyId: options.keyId,\n      expiresAt: options.expiresAt,\n      signature: \"\",\n    },\n  };\n  const bytes = payload(decision);\n  if (Date.parse(options.expiresAt) <= Date.now())\n    throw new Error(\"Workflow decision proof expired\");\n  return Object.freeze({\n    ...decision,\n    proof: Object.freeze({\n      ...decision.proof!,\n      signature: sign(null, bytes, options.privateKey).toString(\"base64url\"),\n    }),\n  });\n}\n\nexport function createEd25519DecisionVerifier(\n  options: WorkflowDecisionVerifierOptions,\n): WorkflowDecisionVerifier {\n  return async (input) => {\n    const decision: WorkflowDecision = {\n      ...input,\n      ...(input.proof ? { proof: { ...input.proof } } : {}),\n    };\n    const bytes = payload(decision);\n    const proof = decision.proof!;\n    if (\n      typeof proof.signature !== \"string\" ||\n      !workflowDecisionSignaturePattern.test(proof.signature)\n    )\n      throw new Error(\"Invalid workflow decision signature\");\n    const keys = await options.keys();\n    const matches = keys.filter((key) => key.keyId === proof.keyId);\n    const key = matches[0];\n    if (\n      matches.length !== 1 ||\n      !key ||\n      key.actor !== decision.actor ||\n      key.publicKey.type !== \"public\" ||\n      key.publicKey.asymmetricKeyType !== \"ed25519\" ||\n      !verify(\n        null,\n        bytes,\n        key.publicKey,\n        Buffer.from(proof.signature, \"base64url\"),\n      )\n    )\n      throw new Error(\"Invalid or revoked workflow approver key or signature\");\n    const now = Date.now();\n    if (Date.parse(proof.expiresAt) <= now)\n      throw new Error(\"Workflow decision proof expired\");\n    return Object.freeze({\n      keyId: key.keyId,\n      verifiedAt: new Date(now).toISOString(),\n    });\n  };\n}\n"]}

package/dist/providers/agents.d.ts

@@ -1,10 +1,10 @@
 export { agentVersions } from "./versions.constants.ts";
-export { antigravityHarness } from "../adapters/agents/antigravity-adapter.ts";
-export { claudeHarness } from "../adapters/agents/claude-adapter.ts";
-export { codexHarness } from "../adapters/agents/codex-adapter.ts";
-export { copilotHarness } from "../adapters/agents/copilot-adapter.ts";
-export { kimiHarness } from "../adapters/agents/kimi-adapter.ts";
-export type { AntigravitySettings } from "../adapters/agents/antigravity.types.ts";
+export { createAntigravityHarness } from "../adapters/agents/antigravity/antigravity-adapter.ts";
+export { createClaudeHarness } from "../adapters/agents/claude/claude-adapter.ts";
+export { createCodexHarness } from "../adapters/agents/codex/codex-adapter.ts";
+export { createCopilotHarness } from "../adapters/agents/copilot/copilot-adapter.ts";
+export { createKimiHarness } from "../adapters/agents/kimi/kimi-adapter.ts";
+export type { AntigravitySettings } from "../adapters/agents/antigravity/antigravity.types.ts";
 export type { ClaudeSettings, CodexSettings, CodexModelProvider, } from "../adapters/agents/settings.types.ts";
-export type { CopilotSettings } from "../adapters/agents/copilot.types.ts";
-export type { KimiSettings } from "../adapters/agents/kimi.types.ts";
+export type { CopilotSettings } from "../adapters/agents/copilot/copilot.types.ts";
+export type { KimiSettings } from "../adapters/agents/kimi/kimi.types.ts";

package/dist/providers/agents.js

@@ -1,7 +1,7 @@
 export { agentVersions } from "./versions.constants.js";
-export { antigravityHarness } from "../adapters/agents/antigravity-adapter.js";
-export { claudeHarness } from "../adapters/agents/claude-adapter.js";
-export { codexHarness } from "../adapters/agents/codex-adapter.js";
-export { copilotHarness } from "../adapters/agents/copilot-adapter.js";
-export { kimiHarness } from "../adapters/agents/kimi-adapter.js";
+export { createAntigravityHarness } from "../adapters/agents/antigravity/antigravity-adapter.js";
+export { createClaudeHarness } from "../adapters/agents/claude/claude-adapter.js";
+export { createCodexHarness } from "../adapters/agents/codex/codex-adapter.js";
+export { createCopilotHarness } from "../adapters/agents/copilot/copilot-adapter.js";
+export { createKimiHarness } from "../adapters/agents/kimi/kimi-adapter.js";
 //# sourceMappingURL=agents.js.map

package/dist/providers/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/providers/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC","sourcesContent":["export { agentVersions } from \"./versions.constants.ts\";\nexport { antigravityHarness } from \"../adapters/agents/antigravity-adapter.ts\";\nexport { claudeHarness } from \"../adapters/agents/claude-adapter.ts\";\nexport { codexHarness } from \"../adapters/agents/codex-adapter.ts\";\nexport { copilotHarness } from \"../adapters/agents/copilot-adapter.ts\";\nexport { kimiHarness } from \"../adapters/agents/kimi-adapter.ts\";\nexport type { AntigravitySettings } from \"../adapters/agents/antigravity.types.ts\";\nexport type {\n  ClaudeSettings,\n  CodexSettings,\n  CodexModelProvider,\n} from \"../adapters/agents/settings.types.ts\";\nexport type { CopilotSettings } from \"../adapters/agents/copilot.types.ts\";\nexport type { KimiSettings } from \"../adapters/agents/kimi.types.ts\";\n"]}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/providers/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC","sourcesContent":["export { agentVersions } from \"./versions.constants.ts\";\nexport { createAntigravityHarness } from \"../adapters/agents/antigravity/antigravity-adapter.ts\";\nexport { createClaudeHarness } from \"../adapters/agents/claude/claude-adapter.ts\";\nexport { createCodexHarness } from \"../adapters/agents/codex/codex-adapter.ts\";\nexport { createCopilotHarness } from \"../adapters/agents/copilot/copilot-adapter.ts\";\nexport { createKimiHarness } from \"../adapters/agents/kimi/kimi-adapter.ts\";\nexport type { AntigravitySettings } from \"../adapters/agents/antigravity/antigravity.types.ts\";\nexport type {\n  ClaudeSettings,\n  CodexSettings,\n  CodexModelProvider,\n} from \"../adapters/agents/settings.types.ts\";\nexport type { CopilotSettings } from \"../adapters/agents/copilot/copilot.types.ts\";\nexport type { KimiSettings } from \"../adapters/agents/kimi/kimi.types.ts\";\n"]}

package/dist/providers/cloud-input.constants.d.ts

@@ -0,0 +1,2 @@
+/** Runs argv[2..] with stdin fed from base64 lines appended to argv[1]; an empty line ends stdin. */
+export declare const cloudInputScript = "const fs=require(\"node:fs\");\nconst {spawn}=require(\"node:child_process\");\nconst {constants}=require(\"node:os\");\nconst [file,program,...args]=process.argv.slice(1);\nconst child=spawn(program,args,{stdio:[\"pipe\",\"inherit\",\"inherit\"]});\nlet offset=0,pending=\"\",ended=false;\nchild.stdin.on(\"error\",()=>{});\nconst poll=()=>{\nif(ended)return;\nconst data=fs.readFileSync(file);\nif(data.length>offset){pending+=data.subarray(offset).toString(\"utf8\");offset=data.length}\nlet end;\nwhile((end=pending.indexOf(\"\\n\"))>=0){\nconst line=pending.slice(0,end);pending=pending.slice(end+1);\nif(!line){ended=true;child.stdin.end();return}\nchild.stdin.write(Buffer.from(line,\"base64\"));\n}\nsetTimeout(poll,50);\n};\npoll();\nchild.on(\"error\",error=>{process.stderr.write(error.message+\"\\n\");process.exit(error.code===\"ENOENT\"?127:126)});\nchild.on(\"close\",(code,signal)=>process.exit(code??(signal?128+(constants.signals[signal]??0):127)));";

package/dist/providers/cloud-input.constants.js

@@ -0,0 +1,24 @@
+/** Runs argv[2..] with stdin fed from base64 lines appended to argv[1]; an empty line ends stdin. */
+export const cloudInputScript = `const fs=require("node:fs");
+const {spawn}=require("node:child_process");
+const {constants}=require("node:os");
+const [file,program,...args]=process.argv.slice(1);
+const child=spawn(program,args,{stdio:["pipe","inherit","inherit"]});
+let offset=0,pending="",ended=false;
+child.stdin.on("error",()=>{});
+const poll=()=>{
+if(ended)return;
+const data=fs.readFileSync(file);
+if(data.length>offset){pending+=data.subarray(offset).toString("utf8");offset=data.length}
+let end;
+while((end=pending.indexOf("\\n"))>=0){
+const line=pending.slice(0,end);pending=pending.slice(end+1);
+if(!line){ended=true;child.stdin.end();return}
+child.stdin.write(Buffer.from(line,"base64"));
+}
+setTimeout(poll,50);
+};
+poll();
+child.on("error",error=>{process.stderr.write(error.message+"\\n");process.exit(error.code==="ENOENT"?127:126)});
+child.on("close",(code,signal)=>process.exit(code??(signal?128+(constants.signals[signal]??0):127)));`;
+//# sourceMappingURL=cloud-input.constants.js.map

package/dist/providers/cloud-input.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-input.constants.js","sourceRoot":"","sources":["../../src/providers/cloud-input.constants.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;sGAqBsE,CAAC","sourcesContent":["/** Runs argv[2..] with stdin fed from base64 lines appended to argv[1]; an empty line ends stdin. */\nexport const cloudInputScript = `const fs=require(\"node:fs\");\nconst {spawn}=require(\"node:child_process\");\nconst {constants}=require(\"node:os\");\nconst [file,program,...args]=process.argv.slice(1);\nconst child=spawn(program,args,{stdio:[\"pipe\",\"inherit\",\"inherit\"]});\nlet offset=0,pending=\"\",ended=false;\nchild.stdin.on(\"error\",()=>{});\nconst poll=()=>{\nif(ended)return;\nconst data=fs.readFileSync(file);\nif(data.length>offset){pending+=data.subarray(offset).toString(\"utf8\");offset=data.length}\nlet end;\nwhile((end=pending.indexOf(\"\\\\n\"))>=0){\nconst line=pending.slice(0,end);pending=pending.slice(end+1);\nif(!line){ended=true;child.stdin.end();return}\nchild.stdin.write(Buffer.from(line,\"base64\"));\n}\nsetTimeout(poll,50);\n};\npoll();\nchild.on(\"error\",error=>{process.stderr.write(error.message+\"\\\\n\");process.exit(error.code===\"ENOENT\"?127:126)});\nchild.on(\"close\",(code,signal)=>process.exit(code??(signal?128+(constants.signals[signal]??0):127)));`;\n"]}

package/dist/providers/cloud-input.d.ts

@@ -0,0 +1,8 @@
+import type { Readable } from "node:stream";
+import type { CloudInputFeed } from "./cloud-input.types.ts";
+/** Initial content of the input file: framed stdin, when present. */
+export declare function cloudInputFrames(stdin: string | undefined): string;
+/** Shell words that run a quoted program with stdin fed from the input file. */
+export declare function cloudInputProgram(file: string, program: string): string;
+/** Appends each live chunk, then the end frame, in order; the first failure stops the feed. */
+export declare function cloudInputFeed(input: Readable, append: (line: string) => Promise<void>, fail: (cause: unknown) => void): CloudInputFeed;

package/dist/providers/cloud-input.js

@@ -0,0 +1,42 @@
+import { quote } from "../infrastructure/process.js";
+import { cloudInputScript } from "./cloud-input.constants.js";
+const frame = (chunk) => `${Buffer.from(chunk).toString("base64")}\n`;
+/** Initial content of the input file: framed stdin, when present. */
+export function cloudInputFrames(stdin) {
+    return stdin ? frame(stdin) : "";
+}
+/** Shell words that run a quoted program with stdin fed from the input file. */
+export function cloudInputProgram(file, program) {
+    return `node -e ${quote(cloudInputScript)} -- ${quote(file)} ${program}`;
+}
+/** Appends each live chunk, then the end frame, in order; the first failure stops the feed. */
+export function cloudInputFeed(input, append, fail) {
+    let queue = Promise.resolve();
+    let failed = false;
+    const push = (line) => {
+        queue = queue.then(async () => {
+            if (failed)
+                return;
+            try {
+                await append(line);
+            }
+            catch (cause) {
+                failed = true;
+                fail(cause);
+            }
+        });
+    };
+    const data = (chunk) => push(frame(chunk));
+    const end = () => push("\n");
+    input.on("data", data);
+    input.once("end", end);
+    return {
+        async finish() {
+            input.off("data", data);
+            input.off("end", end);
+            failed = true;
+            await queue;
+        },
+    };
+}
+//# sourceMappingURL=cloud-input.js.map

package/dist/providers/cloud-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-input.js","sourceRoot":"","sources":["../../src/providers/cloud-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D,MAAM,KAAK,GAAG,CAAC,KAAsB,EAAE,EAAE,CACvC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AAE/C,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe;IAC7D,OAAO,WAAW,KAAK,CAAC,gBAAgB,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;AAC3E,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAC5B,KAAe,EACf,MAAuC,EACvC,IAA8B;IAE9B,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO;QACL,KAAK,CAAC,MAAM;YACV,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,KAAK,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Readable } from \"node:stream\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudInputScript } from \"./cloud-input.constants.ts\";\nimport type { CloudInputFeed } from \"./cloud-input.types.ts\";\n\nconst frame = (chunk: string | Buffer) =>\n  `${Buffer.from(chunk).toString(\"base64\")}\\n`;\n\n/** Initial content of the input file: framed stdin, when present. */\nexport function cloudInputFrames(stdin: string | undefined): string {\n  return stdin ? frame(stdin) : \"\";\n}\n\n/** Shell words that run a quoted program with stdin fed from the input file. */\nexport function cloudInputProgram(file: string, program: string): string {\n  return `node -e ${quote(cloudInputScript)} -- ${quote(file)} ${program}`;\n}\n\n/** Appends each live chunk, then the end frame, in order; the first failure stops the feed. */\nexport function cloudInputFeed(\n  input: Readable,\n  append: (line: string) => Promise<void>,\n  fail: (cause: unknown) => void,\n): CloudInputFeed {\n  let queue = Promise.resolve();\n  let failed = false;\n  const push = (line: string) => {\n    queue = queue.then(async () => {\n      if (failed) return;\n      try {\n        await append(line);\n      } catch (cause) {\n        failed = true;\n        fail(cause);\n      }\n    });\n  };\n  const data = (chunk: string | Buffer) => push(frame(chunk));\n  const end = () => push(\"\\n\");\n  input.on(\"data\", data);\n  input.once(\"end\", end);\n  return {\n    async finish() {\n      input.off(\"data\", data);\n      input.off(\"end\", end);\n      failed = true;\n      await queue;\n    },\n  };\n}\n"]}

package/dist/providers/cloud-input.types.d.ts

@@ -0,0 +1,4 @@
+export interface CloudInputFeed {
+    /** Stops forwarding and waits for appends already started. */
+    finish(): Promise<void>;
+}

package/dist/providers/cloud-input.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cloud-input.types.js.map

package/dist/providers/cloud-input.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-input.types.js","sourceRoot":"","sources":["../../src/providers/cloud-input.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface CloudInputFeed {\n  /** Stops forwarding and waits for appends already started. */\n  finish(): Promise<void>;\n}\n"]}

package/dist/providers/container.js

@@ -179,6 +179,7 @@ export function containerProvider(engine, options = {}, executor = executeProces
             return {
                 root,
                 home,
+                liveInput: true,
                 invoke: containerCommand({
                     engine,
                     config,

package/dist/providers/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC;IACF,SAAS,CACP,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,MAAM,CAAC,cAAc,KAAK,UAAU,EACtC,4CAA4C,CAC7C,CAAC;IACF,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACtE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,CAAC,CAAC;gBACE,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,CACvC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC;aAClE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GACN,MAAM,CAAC,cAAc,KAAK,UAAU;gBAClC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAC5B,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,IAAI,CACL,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM;oBACxB,MAAM,IAAI,CACR;wBACE,QAAQ;wBACR,QAAQ;wBACR,GAAG,kBAAkB,CAAC,MAAM,CAAC;wBAC7B,SAAS;wBACT,GAAG,aAAa,CAAC,KAAK,OAAO;wBAC7B,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;oBACF,MAAM,IAAI,CACR,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;oBACtC,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe;qBAChI,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { recoverContainer } from \"./container-recovery.ts\";\nimport { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { containerNetworks } from \"./container-network.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cacheMounts, validateCaches } from \"./container-cache.ts\";\nimport {\n  cacheCreateOptions,\n  cacheDefaults,\n} from \"./container-cache.constants.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = {\n    ...options,\n    networks: containerNetworks(options),\n    caches: (options.caches ?? []).map((cache) => ({ ...cache })),\n  };\n  invariant(\n    config.repositoryMode === undefined ||\n      config.repositoryMode === \"mounted\" ||\n      config.repositoryMode === \"isolated\",\n    \"repositoryMode must be mounted or isolated\",\n  );\n  validateCaches(config);\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: config.repositoryMode === \"isolated\" ? \"remote\" : \"mounted\",\n    variables: { ...config.variables },\n    ...(config.repositoryMode !== \"isolated\"\n      ? {\n          recover: (resourceId, recoveryOptions) =>\n            recoverContainer(engine, executor, resourceId, recoveryOptions),\n        }\n      : {}),\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root =\n          config.repositoryMode === \"isolated\"\n            ? containerDefaults.isolatedRoot\n            : containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const caches = await cacheMounts(\n        config.caches ?? [],\n        context.repository,\n        image,\n        user,\n      );\n      for (const cache of caches)\n        volumes.push(\"--volume\", `${cache.volume}:${cache.target}:nocopy`);\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        for (const cache of caches)\n          await call(\n            [\n              \"volume\",\n              \"create\",\n              ...cacheCreateOptions[engine],\n              \"--label\",\n              `${cacheDefaults.label}=true`,\n              cache.volume,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await context.registerRecovery?.(name);\n        context.signal?.throwIfAborted();\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const cache of caches) {\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"chown\",\n              `${user.uid}:${user.gid}`,\n              cache.target,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n          await call(\n            [\"exec\", name, \"chmod\", \"700\", cache.target],\n            context.signal ? { signal: context.signal } : {},\n          );\n        }\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        if (config.repositoryMode === \"isolated\")\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC;IACF,SAAS,CACP,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,MAAM,CAAC,cAAc,KAAK,UAAU,EACtC,4CAA4C,CAC7C,CAAC;IACF,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACtE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,CAAC,CAAC;gBACE,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,CACvC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC;aAClE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GACN,MAAM,CAAC,cAAc,KAAK,UAAU;gBAClC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAC5B,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,IAAI,CACL,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM;oBACxB,MAAM,IAAI,CACR;wBACE,QAAQ;wBACR,QAAQ;wBACR,GAAG,kBAAkB,CAAC,MAAM,CAAC;wBAC7B,SAAS;wBACT,GAAG,aAAa,CAAC,KAAK,OAAO;wBAC7B,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;oBACF,MAAM,IAAI,CACR,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;oBACtC,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe;qBAChI,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { recoverContainer } from \"./container-recovery.ts\";\nimport { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { containerNetworks } from \"./container-network.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cacheMounts, validateCaches } from \"./container-cache.ts\";\nimport {\n  cacheCreateOptions,\n  cacheDefaults,\n} from \"./container-cache.constants.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = {\n    ...options,\n    networks: containerNetworks(options),\n    caches: (options.caches ?? []).map((cache) => ({ ...cache })),\n  };\n  invariant(\n    config.repositoryMode === undefined ||\n      config.repositoryMode === \"mounted\" ||\n      config.repositoryMode === \"isolated\",\n    \"repositoryMode must be mounted or isolated\",\n  );\n  validateCaches(config);\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: config.repositoryMode === \"isolated\" ? \"remote\" : \"mounted\",\n    variables: { ...config.variables },\n    ...(config.repositoryMode !== \"isolated\"\n      ? {\n          recover: (resourceId, recoveryOptions) =>\n            recoverContainer(engine, executor, resourceId, recoveryOptions),\n        }\n      : {}),\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root =\n          config.repositoryMode === \"isolated\"\n            ? containerDefaults.isolatedRoot\n            : containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const caches = await cacheMounts(\n        config.caches ?? [],\n        context.repository,\n        image,\n        user,\n      );\n      for (const cache of caches)\n        volumes.push(\"--volume\", `${cache.volume}:${cache.target}:nocopy`);\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        for (const cache of caches)\n          await call(\n            [\n              \"volume\",\n              \"create\",\n              ...cacheCreateOptions[engine],\n              \"--label\",\n              `${cacheDefaults.label}=true`,\n              cache.volume,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await context.registerRecovery?.(name);\n        context.signal?.throwIfAborted();\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const cache of caches) {\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"chown\",\n              `${user.uid}:${user.gid}`,\n              cache.target,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n          await call(\n            [\"exec\", name, \"chmod\", \"700\", cache.target],\n            context.signal ? { signal: context.signal } : {},\n          );\n        }\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        if (config.repositoryMode === \"isolated\")\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        liveInput: true,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}

package/dist/providers/daytona-command.js

@@ -4,6 +4,7 @@ import { OutpostError } from "../domain/errors.js";
 import { interruptible } from "../infrastructure/abort.js";
 import { quote } from "../infrastructure/process.js";
 import { cloudDefaults } from "./cloud.constants.js";
+import { cloudInputFeed, cloudInputFrames, cloudInputProgram, } from "./cloud-input.js";
 import { daytonaCommandScript } from "./daytona-command.constants.js";
 import { daytonaOutput } from "./daytona-output.js";
 import { daytonaTerminal } from "./daytona-terminal.js";
@@ -24,20 +25,27 @@ export function daytonaCommand(runtime) {
         const id = `outpost-${randomUUID()}`;
         const input = `/tmp/${id}.stdin`;
         const pid = `/tmp/${id}.pid`;
-        if (command.stdin !== undefined)
-            await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);
+        const live = command.input;
+        const staged = live ? cloudInputFrames(command.stdin) : command.stdin;
+        if (staged !== undefined)
+            await sandbox.fs.uploadFile(Buffer.from(staged), input);
+        const failure = new AbortController();
+        const stopped = AbortSignal.any([signal, failure.signal]);
         const variables = { ...context.variables, ...command.variables };
-        const program = [
+        const quoted = [
             ...(command.elevated ? ["sudo", "-n", "--"] : []),
             command.executable,
             ...(command.arguments ?? []),
         ]
             .map(quote)
             .join(" ");
+        const program = live ? cloudInputProgram(input, quoted) : quoted;
+        const redirect = !live && command.stdin !== undefined ? ` < ${quote(input)}` : "";
         const script = `cd ${quote(command.directory ?? root)} && env ${Object.entries(variables)
             .map(([key, value]) => quote(`${key}=${value}`))
-            .join(" ")} setsid --wait sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + ".cancel")} || exit 130; exec node -e ${quote(daytonaCommandScript)} -- ${program}${command.stdin === undefined ? "" : ` < ${quote(input)}`}`)}`;
+            .join(" ")} setsid --wait sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + ".cancel")} || exit 130; exec node -e ${quote(daytonaCommandScript)} -- ${program}${redirect}`)}`;
         const output = { stdout: "", stderr: "" };
+        let feed;
         let cancellation;
         const cancel = () => {
             cancellation ??= sandbox.process.executeCommand(`touch ${quote(pid + ".cancel")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`);
@@ -45,33 +53,42 @@ export function daytonaCommand(runtime) {
         };
         await sandbox.process.createSession(id);
         try {
-            signal.addEventListener("abort", cancel, { once: true });
-            if (signal.aborted)
+            stopped.addEventListener("abort", cancel, { once: true });
+            if (stopped.aborted)
                 cancel();
-            signal.throwIfAborted();
+            stopped.throwIfAborted();
             const response = await interruptible(sandbox.process.executeSessionCommand(id, {
                 command: script,
                 async: true,
-            }), signal);
+            }), stopped);
             if (!response.cmdId)
                 throw new OutpostError("provider", "Cloud provider returned no command identifier");
+            const commandId = response.cmdId;
+            if (live)
+                feed = cloudInputFeed(live, async (line) => {
+                    const appended = await sandbox.process.executeCommand(`printf '%s' ${quote(line)} >> ${quote(input)}`);
+                    if (appended.exitCode !== 0)
+                        throw new OutpostError("provider", "Cloud live input could not be appended");
+                }, (cause) => failure.abort(cause));
             const consume = (channel) => (chunk) => {
                 output[channel] = (output[channel] + chunk).slice(-(command.retain ?? options.retain ?? cloudDefaults.retainBytes));
                 command.observe?.(channel, chunk);
             };
             const stdout = daytonaOutput(consume("stdout"));
             const stderr = daytonaOutput(consume("stderr"));
-            await interruptible(sandbox.process.getSessionCommandLogs(id, response.cmdId, stdout.write, stderr.write), signal);
+            await interruptible(sandbox.process.getSessionCommandLogs(id, commandId, stdout.write, stderr.write), stopped);
             stdout.close();
             stderr.close();
             if (cancellation)
                 await cancellation;
-            signal.throwIfAborted();
+            stopped.throwIfAborted();
             while (true) {
-                const result = await interruptible(sandbox.process.getSessionCommand(id, response.cmdId), signal);
+                const result = await interruptible(sandbox.process.getSessionCommand(id, commandId), stopped);
                 if (result.exitCode !== undefined)
                     return { status: result.exitCode, ...output };
-                await setTimeout(cloudDefaults.pollMs, undefined, { signal });
+                await setTimeout(cloudDefaults.pollMs, undefined, {
+                    signal: stopped,
+                });
             }
         }
         catch (cause) {
@@ -85,7 +102,8 @@ export function daytonaCommand(runtime) {
             throw cause;
         }
         finally {
-            signal.removeEventListener("abort", cancel);
+            stopped.removeEventListener("abort", cancel);
+            await feed?.finish();
             await sandbox.process.deleteSession(id);
             await sandbox.process
                 .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)

package/dist/providers/daytona-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAC5E,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,wBAAwB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,8BAA8B,KAAK,CAAC,oBAAoB,CAAC,OAAO,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACpO,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,MAAM,CACP,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,CACb,EACD,MAAM,CACP,CAAC;YACF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACrD,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport { daytonaCommandScript } from \"./daytona-command.constants.ts\";\nimport { daytonaOutput } from \"./daytona-output.ts\";\nimport { daytonaTerminal } from \"./daytona-terminal.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    if (command.interactive) return daytonaTerminal(runtime, command, signal);\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    if (command.stdin !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);\n    const variables = { ...context.variables, ...command.variables };\n    const program = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const script = `cd ${quote(command.directory ?? root)} && env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid --wait sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec node -e ${quote(daytonaCommandScript)} -- ${program}${command.stdin === undefined ? \"\" : ` < ${quote(input)}`}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      signal.addEventListener(\"abort\", cancel, { once: true });\n      if (signal.aborted) cancel();\n      signal.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        signal,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      const stdout = daytonaOutput(consume(\"stdout\"));\n      const stderr = daytonaOutput(consume(\"stderr\"));\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          response.cmdId,\n          stdout.write,\n          stderr.write,\n        ),\n        signal,\n      );\n      stdout.close();\n      stderr.close();\n      if (cancellation) await cancellation;\n      signal.throwIfAborted();\n      while (true) {\n        const result = await interruptible(\n          sandbox.process.getSessionCommand(id, response.cmdId),\n          signal,\n        );\n        if (result.exitCode !== undefined)\n          return { status: result.exitCode, ...output };\n        await setTimeout(cloudDefaults.pollMs, undefined, { signal });\n      }\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      signal.removeEventListener(\"abort\", cancel);\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}
+{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,QAAQ,GACZ,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAC5E,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,wBAAwB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,8BAA8B,KAAK,CAAC,oBAAoB,CAAC,OAAO,OAAO,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC;QACrL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAgC,CAAC;QACrC,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,OAAO,CACR,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC;YACjC,IAAI,IAAI;gBACN,IAAI,GAAG,cAAc,CACnB,IAAI,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CACnD,eAAe,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAChD,CAAC;oBACF,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACzB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,wCAAwC,CACzC,CAAC;gBACN,CAAC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAChC,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChD,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,SAAS,EACT,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,CACb,EACD,OAAO,CACR,CAAC;YACF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,EAChD,OAAO,CACR,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE;oBAChD,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport {\n  cloudInputFeed,\n  cloudInputFrames,\n  cloudInputProgram,\n} from \"./cloud-input.ts\";\nimport type { CloudInputFeed } from \"./cloud-input.types.ts\";\nimport { daytonaCommandScript } from \"./daytona-command.constants.ts\";\nimport { daytonaOutput } from \"./daytona-output.ts\";\nimport { daytonaTerminal } from \"./daytona-terminal.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    if (command.interactive) return daytonaTerminal(runtime, command, signal);\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    const live = command.input;\n    const staged = live ? cloudInputFrames(command.stdin) : command.stdin;\n    if (staged !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(staged), input);\n    const failure = new AbortController();\n    const stopped = AbortSignal.any([signal, failure.signal]);\n    const variables = { ...context.variables, ...command.variables };\n    const quoted = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const program = live ? cloudInputProgram(input, quoted) : quoted;\n    const redirect =\n      !live && command.stdin !== undefined ? ` < ${quote(input)}` : \"\";\n    const script = `cd ${quote(command.directory ?? root)} && env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid --wait sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec node -e ${quote(daytonaCommandScript)} -- ${program}${redirect}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let feed: CloudInputFeed | undefined;\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      stopped.addEventListener(\"abort\", cancel, { once: true });\n      if (stopped.aborted) cancel();\n      stopped.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        stopped,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const commandId = response.cmdId;\n      if (live)\n        feed = cloudInputFeed(\n          live,\n          async (line) => {\n            const appended = await sandbox.process.executeCommand(\n              `printf '%s' ${quote(line)} >> ${quote(input)}`,\n            );\n            if (appended.exitCode !== 0)\n              throw new OutpostError(\n                \"provider\",\n                \"Cloud live input could not be appended\",\n              );\n          },\n          (cause) => failure.abort(cause),\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      const stdout = daytonaOutput(consume(\"stdout\"));\n      const stderr = daytonaOutput(consume(\"stderr\"));\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          commandId,\n          stdout.write,\n          stderr.write,\n        ),\n        stopped,\n      );\n      stdout.close();\n      stderr.close();\n      if (cancellation) await cancellation;\n      stopped.throwIfAborted();\n      while (true) {\n        const result = await interruptible(\n          sandbox.process.getSessionCommand(id, commandId),\n          stopped,\n        );\n        if (result.exitCode !== undefined)\n          return { status: result.exitCode, ...output };\n        await setTimeout(cloudDefaults.pollMs, undefined, {\n          signal: stopped,\n        });\n      }\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      stopped.removeEventListener(\"abort\", cancel);\n      await feed?.finish();\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/daytona.d.ts

@@ -2,5 +2,5 @@ import type { Daytona, DaytonaConfig } from "@daytona/sdk";
 import type { SandboxProvider } from "../domain/sandbox.types.ts";
 import type { DaytonaOptions } from "./daytona.types.ts";
 export type { DaytonaOptions } from "./daytona.types.ts";
-export declare function daytonaSandboxProvider(options?: DaytonaOptions, connect?: (config?: DaytonaConfig) => Promise<Pick<Daytona, "create" | "delete">>): SandboxProvider;
+export declare function createDaytonaSandboxProvider(options?: DaytonaOptions, connect?: (config?: DaytonaConfig) => Promise<Pick<Daytona, "create" | "delete">>): SandboxProvider;
 export type { EgressPolicy } from "../domain/egress.types.ts";

package/dist/providers/daytona.js

@@ -5,7 +5,7 @@ import { cloudRoots } from "./cloud.constants.js";
 import { daytonaNetworkPolicy, confirmDaytonaNetworkPolicy, } from "./daytona-network.js";
 import { daytonaCommand } from "./daytona-command.js";
 import { daytonaFiles } from "./daytona-files.js";
-export function daytonaSandboxProvider(options = {}, connect = async (config) => new (await import("@daytona/sdk")).Daytona(config)) {
+export function createDaytonaSandboxProvider(options = {}, connect = async (config) => new (await import("@daytona/sdk")).Daytona(config)) {
     const networkPolicy = daytonaNetworkPolicy(options);
     const create = { ...options.create, ...networkPolicy };
     return {
@@ -63,7 +63,7 @@ export function daytonaSandboxProvider(options = {}, connect = async (config) =>
                 ...daytonaFiles(sandbox),
                 release,
             };
-            return { ...lease, fileTransfers: fileBatches(lease) };
+            return { ...lease, liveInput: true, fileTransfers: fileBatches(lease) };
         },
     };
 }

package/dist/providers/daytona.js.map

@@ -1 +1 @@
-{"version":3,"file":"daytona.js","sourceRoot":"","sources":["../../src/providers/daytona.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,MAAM,UAAU,sBAAsB,CACpC,UAA0B,EAAE,EAC5B,UAEmD,KAAK,EAAE,MAAM,EAAE,EAAE,CAClE,IAAI,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEpD,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YACnD,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,MAAM;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,EAAE;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,SAAS,GAAG,SAAS,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC,CAAC;YACR,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,2BAA2B,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;oBAC1D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACnC,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC;gBAClE,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACnD,MAAM,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,gCAAgC,CACjC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,cAAc,CAAC;oBACrB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,YAAY,CAAC,OAAO,CAAC;gBACxB,OAAO;aACR,CAAC;YACF,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Daytona, DaytonaConfig } from \"@daytona/sdk\";\nimport { posix } from \"node:path\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { fileBatches } from \"./file-batches.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport {\n  daytonaNetworkPolicy,\n  confirmDaytonaNetworkPolicy,\n} from \"./daytona-network.ts\";\nimport { daytonaCommand } from \"./daytona-command.ts\";\nimport { daytonaFiles } from \"./daytona-files.ts\";\nimport type { DaytonaOptions } from \"./daytona.types.ts\";\n\nexport type { DaytonaOptions } from \"./daytona.types.ts\";\n\nexport function daytonaSandboxProvider(\n  options: DaytonaOptions = {},\n  connect: (\n    config?: DaytonaConfig,\n  ) => Promise<Pick<Daytona, \"create\" | \"delete\">> = async (config) =>\n    new (await import(\"@daytona/sdk\")).Daytona(config),\n): SandboxProvider {\n  const networkPolicy = daytonaNetworkPolicy(options);\n  const create = { ...options.create, ...networkPolicy };\n  return {\n    name: \"daytona\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const client = await connect(options.connection);\n      const sandbox = await client.create({ ...create });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = () =>\n        (releasing ??= client\n          .delete(sandbox)\n          .then(() => {\n            closed = true;\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          }));\n      unregister = registerCleanup(release);\n      let home: string;\n      let root: string;\n      try {\n        context.signal?.throwIfAborted();\n        if (networkPolicy) {\n          await confirmDaytonaNetworkPolicy(sandbox, networkPolicy);\n          context.signal?.throwIfAborted();\n        }\n        home = (await sandbox.getUserHomeDir()) ?? cloudRoots.daytonaHome;\n        root = options.root ?? posix.join(home, \"outpost\");\n        await sandbox.fs.createFolder(root, \"755\");\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Cloud setup and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      const lease = {\n        root,\n        home,\n        invoke: daytonaCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...daytonaFiles(sandbox),\n        release,\n      };\n      return { ...lease, fileTransfers: fileBatches(lease) };\n    },\n  };\n}\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}
+{"version":3,"file":"daytona.js","sourceRoot":"","sources":["../../src/providers/daytona.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,MAAM,UAAU,4BAA4B,CAC1C,UAA0B,EAAE,EAC5B,UAEmD,KAAK,EAAE,MAAM,EAAE,EAAE,CAClE,IAAI,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEpD,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YACnD,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,MAAM;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,EAAE;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,SAAS,GAAG,SAAS,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC,CAAC;YACR,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,2BAA2B,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;oBAC1D,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACnC,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC;gBAClE,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACnD,MAAM,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,gCAAgC,CACjC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,cAAc,CAAC;oBACrB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,YAAY,CAAC,OAAO,CAAC;gBACxB,OAAO;aACR,CAAC;YACF,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Daytona, DaytonaConfig } from \"@daytona/sdk\";\nimport { posix } from \"node:path\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { fileBatches } from \"./file-batches.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport {\n  daytonaNetworkPolicy,\n  confirmDaytonaNetworkPolicy,\n} from \"./daytona-network.ts\";\nimport { daytonaCommand } from \"./daytona-command.ts\";\nimport { daytonaFiles } from \"./daytona-files.ts\";\nimport type { DaytonaOptions } from \"./daytona.types.ts\";\n\nexport type { DaytonaOptions } from \"./daytona.types.ts\";\n\nexport function createDaytonaSandboxProvider(\n  options: DaytonaOptions = {},\n  connect: (\n    config?: DaytonaConfig,\n  ) => Promise<Pick<Daytona, \"create\" | \"delete\">> = async (config) =>\n    new (await import(\"@daytona/sdk\")).Daytona(config),\n): SandboxProvider {\n  const networkPolicy = daytonaNetworkPolicy(options);\n  const create = { ...options.create, ...networkPolicy };\n  return {\n    name: \"daytona\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const client = await connect(options.connection);\n      const sandbox = await client.create({ ...create });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = () =>\n        (releasing ??= client\n          .delete(sandbox)\n          .then(() => {\n            closed = true;\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          }));\n      unregister = registerCleanup(release);\n      let home: string;\n      let root: string;\n      try {\n        context.signal?.throwIfAborted();\n        if (networkPolicy) {\n          await confirmDaytonaNetworkPolicy(sandbox, networkPolicy);\n          context.signal?.throwIfAborted();\n        }\n        home = (await sandbox.getUserHomeDir()) ?? cloudRoots.daytonaHome;\n        root = options.root ?? posix.join(home, \"outpost\");\n        await sandbox.fs.createFolder(root, \"755\");\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Cloud setup and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      const lease = {\n        root,\n        home,\n        invoke: daytonaCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...daytonaFiles(sandbox),\n        release,\n      };\n      return { ...lease, liveInput: true, fileTransfers: fileBatches(lease) };\n    },\n  };\n}\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}

package/dist/providers/docker.d.ts

@@ -1,5 +1,5 @@
 import type { ContainerOptions } from "./container.types.ts";
 export type { ContainerOptions } from "./container.ts";
-export declare const dockerSandboxProvider: (options?: ContainerOptions) => import("../index.ts").SandboxProvider;
+export declare const createDockerSandboxProvider: (options?: ContainerOptions) => import("../index.ts").SandboxProvider;
 export type { DependencyCache } from "./container-cache.types.ts";
 export type { EgressPolicy } from "../domain/egress.types.ts";

package/dist/providers/docker.js

@@ -1,3 +1,3 @@
 import { containerProvider } from "./container.js";
-export const dockerSandboxProvider = (options = {}) => containerProvider("docker", options);
+export const createDockerSandboxProvider = (options = {}) => containerProvider("docker", options);
 //# sourceMappingURL=docker.js.map

package/dist/providers/docker.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/providers/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,UAA4B,EAAE,EAAE,EAAE,CACtE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC","sourcesContent":["import { containerProvider } from \"./container.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.ts\";\n\nexport const dockerSandboxProvider = (options: ContainerOptions = {}) =>\n  containerProvider(\"docker\", options);\n\nexport type { DependencyCache } from \"./container-cache.types.ts\";\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/providers/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAKnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAA4B,EAAE,EAAE,EAAE,CAC5E,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC","sourcesContent":["import { containerProvider } from \"./container.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.ts\";\n\nexport const createDockerSandboxProvider = (options: ContainerOptions = {}) =>\n  containerProvider(\"docker\", options);\n\nexport type { DependencyCache } from \"./container-cache.types.ts\";\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}

package/dist/providers/factories.d.ts

@@ -1,4 +1,4 @@
 import type { SandboxProvider } from "../domain/sandbox.types.ts";
 import type { ProviderDefinition } from "./factories.types.ts";
-export declare const mountedSandboxProvider: (definition: ProviderDefinition) => SandboxProvider;
-export declare const remoteSandboxProvider: (definition: ProviderDefinition) => SandboxProvider;
+export declare const createMountedSandboxProvider: (definition: ProviderDefinition) => SandboxProvider;
+export declare const createRemoteSandboxProvider: (definition: ProviderDefinition) => SandboxProvider;

package/dist/providers/factories.js

@@ -7,6 +7,6 @@ function sandboxProvider(placement, definition) {
         variables: Object.freeze({ ...definition.variables }),
     });
 }
-export const mountedSandboxProvider = (definition) => sandboxProvider("mounted", definition);
-export const remoteSandboxProvider = (definition) => sandboxProvider("remote", definition);
+export const createMountedSandboxProvider = (definition) => sandboxProvider("mounted", definition);
+export const createRemoteSandboxProvider = (definition) => sandboxProvider("remote", definition);
 //# sourceMappingURL=factories.js.map

package/dist/providers/factories.js.map

@@ -1 +1 @@
-{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../src/providers/factories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,eAAe,CACtB,SAA+B,EAC/B,UAA8B;IAE9B,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,UAA8B,EACb,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,UAA8B,EACb,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { ProviderDefinition } from \"./factories.types.ts\";\n\nfunction sandboxProvider(\n  placement: \"mounted\" | \"remote\",\n  definition: ProviderDefinition,\n): SandboxProvider {\n  invariant(definition.name.trim(), \"A provider needs a name\");\n  return Object.freeze({\n    ...definition,\n    placement,\n    variables: Object.freeze({ ...definition.variables }),\n  });\n}\n\nexport const mountedSandboxProvider = (\n  definition: ProviderDefinition,\n): SandboxProvider => sandboxProvider(\"mounted\", definition);\n\nexport const remoteSandboxProvider = (\n  definition: ProviderDefinition,\n): SandboxProvider => sandboxProvider(\"remote\", definition);\n"]}
+{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../src/providers/factories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhD,SAAS,eAAe,CACtB,SAA+B,EAC/B,UAA8B;IAE9B,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAA8B,EACb,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,UAA8B,EACb,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport type { ProviderDefinition } from \"./factories.types.ts\";\n\nfunction sandboxProvider(\n  placement: \"mounted\" | \"remote\",\n  definition: ProviderDefinition,\n): SandboxProvider {\n  invariant(definition.name.trim(), \"A provider needs a name\");\n  return Object.freeze({\n    ...definition,\n    placement,\n    variables: Object.freeze({ ...definition.variables }),\n  });\n}\n\nexport const createMountedSandboxProvider = (\n  definition: ProviderDefinition,\n): SandboxProvider => sandboxProvider(\"mounted\", definition);\n\nexport const createRemoteSandboxProvider = (\n  definition: ProviderDefinition,\n): SandboxProvider => sandboxProvider(\"remote\", definition);\n"]}

package/dist/providers/firecracker.d.ts

@@ -1,4 +1,4 @@
 import type { SandboxProvider } from "../domain/sandbox.types.ts";
 import type { FirecrackerOptions } from "./firecracker.types.ts";
 export type { FirecrackerOptions } from "./firecracker.types.ts";
-export declare function firecrackerSandboxProvider(options: FirecrackerOptions): SandboxProvider;
+export declare function createFirecrackerSandboxProvider(options: FirecrackerOptions): SandboxProvider;

package/dist/providers/firecracker.js

@@ -5,7 +5,7 @@ import { firecrackerCommand, firecrackerSsh } from "./firecracker-command.js";
 import { firecrackerDefaults } from "./firecracker.constants.js";
 import { firecrackerFiles } from "./firecracker-files.js";
 import { firecrackerMachine, validateFirecracker, } from "./firecracker-machine.js";
-export function firecrackerSandboxProvider(options) {
+export function createFirecrackerSandboxProvider(options) {
     validateFirecracker(options);
     let allocated = false;
     return {
@@ -92,6 +92,7 @@ export function firecrackerSandboxProvider(options) {
             return {
                 root,
                 home: options.home,
+                liveInput: true,
                 invoke: (command) => track((signal) => invoke({ ...command, signal }), command.signal),
                 upload: (source, destination, options = {}) => track((signal) => files.upload(source, destination, { ...options, signal }), options.signal),
                 download: (source, destination, options = {}) => track((signal) => files.download(source, destination, { ...options, signal }), options.signal),