@provos/ironcurtain 0.11.0 → 0.12.0

package/dist/docker/container-lifecycle.d.ts

@@ -2,13 +2,13 @@
  * Shared container lifecycle helpers used by both DockerAgentSession and
  * runPtySession to avoid duplicating stop/remove/network-cleanup logic.
  */
-import type { DockerManager } from './types.js';
+import type { ContainerRuntime } from './types.js';
 /**
  * Stop and remove Docker containers and their per-session network in parallel.
  * Best-effort: individual failures are swallowed so one broken container
  * doesn't prevent cleanup of the others.
  */
-export declare function cleanupContainers(docker: DockerManager, opts: {
+export declare function cleanupContainers(docker: ContainerRuntime, opts: {
     containerId: string | null;
     sidecarContainerId: string | null;
     networkName: string | null;

package/dist/docker/container-lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-lifecycle.js","sourceRoot":"","sources":["../../src/docker/container-lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,IAIC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAC7B,QAAQ,CAAC,IAAI,CACX,MAAM;aACH,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACpC,QAAQ,CAAC,IAAI,CACX,MAAM;aACH,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE5B,qEAAqE;IACrE,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}
+{"version":3,"file":"container-lifecycle.js","sourceRoot":"","sources":["../../src/docker/container-lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAwB,EACxB,IAIC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAC7B,QAAQ,CAAC,IAAI,CACX,MAAM;aACH,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACpC,QAAQ,CAAC,IAAI,CACX,MAAM;aACH,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE5B,qEAAqE;IACrE,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/docker/container-runtime.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Container runtime selection seam.
+ *
+ * Agent-session infrastructure obtains its ContainerRuntime through this
+ * factory instead of constructing a specific implementation, so adding a
+ * runtime is a new case here rather than a change at every call site.
+ * Docker-specific host services (signal-cli container, daemon orphan
+ * sweeps) intentionally keep using `createDockerManager()` directly.
+ *
+ * See docs/designs/apple-container-runtime.md.
+ */
+import type { ContainerRuntime } from './types.js';
+import type { DockerAvailability } from './docker-probe.js';
+import type { ContainerRuntimeSetting } from '../config/user-config.js';
+export declare const CONTAINER_RUNTIME_KINDS: readonly ["docker", "apple-container"];
+export type ContainerRuntimeKind = (typeof CONTAINER_RUNTIME_KINDS)[number];
+/** Test hook: clears the memoized 'auto' probe result. */
+export declare function resetRuntimeKindResolutionForTests(): void;
+/**
+ * Resolves which runtime kind agent sessions should use.
+ *
+ * Precedence: `IRONCURTAIN_CONTAINER_RUNTIME` env override > the
+ * `containerRuntime` config field > 'auto'. 'auto' picks apple-container
+ * when its availability probe passes (Apple silicon, macOS 26+,
+ * container CLI >= 1.0 with services running) and Docker otherwise.
+ * See docs/designs/apple-container-runtime.md, design decision 6.
+ */
+export declare function resolveRuntimeKind(configured?: ContainerRuntimeSetting, env?: NodeJS.ProcessEnv, appleProbe?: () => Promise<DockerAvailability>): Promise<ContainerRuntimeKind>;
+export declare function createContainerRuntime(kind?: ContainerRuntimeKind): ContainerRuntime;

package/dist/docker/container-runtime.js

@@ -0,0 +1,76 @@
+/**
+ * Container runtime selection seam.
+ *
+ * Agent-session infrastructure obtains its ContainerRuntime through this
+ * factory instead of constructing a specific implementation, so adding a
+ * runtime is a new case here rather than a change at every call site.
+ * Docker-specific host services (signal-cli container, daemon orphan
+ * sweeps) intentionally keep using `createDockerManager()` directly.
+ *
+ * See docs/designs/apple-container-runtime.md.
+ */
+import { createDockerManager } from './docker-manager.js';
+import { createAppleContainerManager, checkAppleContainerAvailable } from './apple-container-manager.js';
+import * as logger from '../logger.js';
+export const CONTAINER_RUNTIME_KINDS = ['docker', 'apple-container'];
+function isContainerRuntimeKind(value) {
+    return CONTAINER_RUNTIME_KINDS.includes(value);
+}
+/**
+ * Parses the `IRONCURTAIN_CONTAINER_RUNTIME` env override. Returns
+ * undefined when unset; unknown values fail loudly rather than silently
+ * running a different sandbox than the operator asked for.
+ */
+function parseEnvOverride(env) {
+    const requested = env.IRONCURTAIN_CONTAINER_RUNTIME;
+    if (requested === undefined || requested === '')
+        return undefined;
+    if (!isContainerRuntimeKind(requested)) {
+        throw new Error(`Unknown IRONCURTAIN_CONTAINER_RUNTIME value "${requested}" (expected one of: ${CONTAINER_RUNTIME_KINDS.join(', ')})`);
+    }
+    return requested;
+}
+/**
+ * Memoized result of the 'auto' probe. One process serves one machine,
+ * so the answer cannot change mid-run, and memoizing keeps the three
+ * resolution sites (session preflight, infrastructure setup, image
+ * ensure) agreeing without re-probing the container apiserver.
+ */
+let autoResolution;
+/** Test hook: clears the memoized 'auto' probe result. */
+export function resetRuntimeKindResolutionForTests() {
+    autoResolution = undefined;
+}
+/**
+ * Resolves which runtime kind agent sessions should use.
+ *
+ * Precedence: `IRONCURTAIN_CONTAINER_RUNTIME` env override > the
+ * `containerRuntime` config field > 'auto'. 'auto' picks apple-container
+ * when its availability probe passes (Apple silicon, macOS 26+,
+ * container CLI >= 1.0 with services running) and Docker otherwise.
+ * See docs/designs/apple-container-runtime.md, design decision 6.
+ */
+export async function resolveRuntimeKind(configured = 'auto', env = process.env, appleProbe = checkAppleContainerAvailable) {
+    const override = parseEnvOverride(env);
+    if (override !== undefined)
+        return override;
+    if (configured !== 'auto')
+        return configured;
+    if (autoResolution === undefined) {
+        const apple = await appleProbe();
+        autoResolution = apple.available ? 'apple-container' : 'docker';
+        logger.info(apple.available
+            ? `containerRuntime=auto: using apple-container (probe passed)`
+            : `containerRuntime=auto: using docker (apple-container unavailable: ${apple.reason})`);
+    }
+    return autoResolution;
+}
+export function createContainerRuntime(kind = 'docker') {
+    switch (kind) {
+        case 'docker':
+            return createDockerManager();
+        case 'apple-container':
+            return createAppleContainerManager();
+    }
+}
+//# sourceMappingURL=container-runtime.js.map

package/dist/docker/container-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-runtime.js","sourceRoot":"","sources":["../../src/docker/container-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AACzG,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAU,CAAC;AAG9E,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAQ,uBAA6C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,6BAA6B,CAAC;IACpD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,uBAAuB,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,IAAI,cAAgD,CAAC;AAErD,0DAA0D;AAC1D,MAAM,UAAU,kCAAkC;IAChD,cAAc,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAsC,MAAM,EAC5C,MAAyB,OAAO,CAAC,GAAG,EACpC,aAAgD,4BAA4B;IAE5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAE7C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChE,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,SAAS;YACb,CAAC,CAAC,6DAA6D;YAC/D,CAAC,CAAC,qEAAqE,KAAK,CAAC,MAAM,GAAG,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAA6B,QAAQ;IAC1E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,mBAAmB,EAAE,CAAC;QAC/B,KAAK,iBAAiB;YACpB,OAAO,2BAA2B,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/docker/docker-agent-session.js

@@ -126,6 +126,22 @@ export class DockerAgentSession {
         // an entry the proxy just wrote.
         this.auditTailer = new AuditLogTailer(this.infra.auditLogPath, (event) => this.emitDiagnostic(event));
         this.auditTailer.start();
+        // Trajectory capture is driven HERE only in standalone (owns-infra)
+        // mode: the session owns the bundle and runs exactly one Claude session
+        // through it, with no fsmState (not a workflow) and no persona, so
+        // `{ sessionId }` alone is correct. In borrow mode (workflow shared
+        // container) the orchestrator drives the capture lifecycle and supplies
+        // the full `{ sessionId, persona, fsmState }`; the session must NOT also
+        // call begin/end here, or the orchestrator's richer call would be
+        // silently dropped by the dispatcher's first-wins idempotency, losing
+        // persona/fsmState on the `session-start` manifest entry.
+        // No-op when capture is disabled (writer absent). The `ownsInfra` gate
+        // is a real lifecycle decision (borrow mode lets the orchestrator drive
+        // begin/end); the method is always present.
+        // See docs/designs/mitm-token-trajectory-capture.md §11.
+        if (this.ownsInfra) {
+            this.infra.beginCaptureSession({ sessionId: this.sessionId });
+        }
         this.status = 'ready';
     }
     getInfo() {
@@ -183,7 +199,7 @@ export class DockerAgentSession {
                 logger.info(`[docker-agent] stderr: ${stderr.substring(0, 500)}`);
             }
             this.cumulativeActiveMs += Date.now() - turnStartMs;
-            const response = this.infra.adapter.extractResponse(exitCode, stdout);
+            const response = this.infra.adapter.extractResponse(exitCode, stdout, stderr);
             if (response.costUsd !== undefined) {
                 this.cumulativeCostUsd = response.costUsd;
             }
@@ -310,6 +326,19 @@ export class DockerAgentSession {
         this.status = 'closed';
         this.escalationWatcher?.stop();
         this.auditTailer?.stop();
+        // Trajectory capture: end the capture session BEFORE infrastructure
+        // teardown so the `session-end` manifest entry is durable. The
+        // infrastructure-teardown safety net inside destroyDockerInfrastructure
+        // would otherwise emit a synthetic poisoned end. Pre-empting it keeps
+        // the manifest clean for normal exits. Gated on `ownsInfra` to stay
+        // symmetric with the begin call above: in borrow mode the orchestrator
+        // owns begin/end, so the session calling end alone would terminate a
+        // capture session the orchestrator is still using.
+        if (this.ownsInfra) {
+            await this.infra.endCaptureSession(this.sessionId).catch((err) => {
+                logger.warn(`endCaptureSession failed: ${err instanceof Error ? err.message : String(err)}`);
+            });
+        }
         if (this.ownsInfra) {
             await destroyDockerInfrastructure(this.infra);
         }

package/dist/docker/docker-agent-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker-agent-session.js","sourceRoot":"","sources":["../../src/docker/docker-agent-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AA+D9D,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAY;IAC9B,mBAAmB,CAAsB;IAChC,MAAM,CAAoB;IAC1B,KAAK,CAAuB;IAC5B,SAAS,CAAU;IACnB,kBAAkB,CAAU;IAC5B,YAAY,CAAS;IAE9B,MAAM,GAAkB,cAAc,CAAC;IAC9B,SAAS,CAAS;IAEnC;;;;;;;OAOG;IACK,iBAAiB,GAAG,KAAK,CAAC;IAE1B,KAAK,GAAuB,EAAE,CAAC;IAC/B,aAAa,GAAsB,EAAE,CAAC;IACtC,iBAAiB,GAA6B,IAAI,CAAC;IAEnD,WAAW,GAA0B,IAAI,CAAC;IAC1C,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;IAEb,YAAY,CAAwC;IACpD,mBAAmB,CAAc;IACjC,oBAAoB,CAAmE;IACvF,YAAY,CAAoC;IAEjE,YAAY,IAA4B;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACzE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,gEAAgE;QAChE,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,8DAA8D;QAC9D,6CAA6C;QAC7C,IACE,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAC/B,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAChF,CAAC;YACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,0GAA0G;IAC1G,KAAK,CAAC,UAAU;QACd,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,sBAAsB;QACtB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;YACzE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;YACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE;YACvD,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAE/B,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC;YAC3E,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAEtD,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE;gBAClF,6DAA6D;gBAC7D,qEAAqE;gBACrE,sEAAsE;gBACtE,SAAS,EAAE,IAAI,CAAC,mBAAmB;gBACnC,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB;gBAClC,aAAa,EAAE,IAAI,CAAC,kBAAkB;aACvC,CAAC,CAAC;YACH,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,wBAAwB,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAChH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAChD,MAAM,YAAY,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,uBAAuB,cAAc,CAAC;YACzG,MAAM,CAAC,IAAI,CACT,uBAAuB,QAAQ,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,IAAI;gBAClF,YAAY,cAAc,cAAc,YAAY,EAAE,CACzD,CAAC;YACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,UAAU,cAAc,IAAI,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEtE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACjC,WAAW;gBACX,iBAAiB,EAAE,QAAQ,CAAC,IAAI;gBAChC,KAAK,EAAE;oBACL,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;iBACpB;gBACD,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,wEAAwE;YACxE,6BAA6B;YAC7B,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,KAAK;gBAC1C,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,+DAA+D;YAC/D,oBAAoB;YACpB,IAAK,IAAI,CAAC,MAAwB,KAAK,QAAQ,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;QACvD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,mDAAmD,UAAU,OAAO,IAAI,CAAC,mBAAmB,GAAG;YAC7F,4CAA4C,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,aAAa;QACX,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,eAAe;QACb,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAEtD,OAAO;YACL,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,cAAc;YACd,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc;YAC7C,UAAU,EAAE;gBACV,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC5B,aAAa,EAAE,cAAc;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;aACzC;YACD,sBAAsB,EAAE,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,QAA+B,EAC/B,OAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QAEvB,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,8DAA8D;QAC9D,+DAA+D;QAC/D,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,0BAA0B;IAElB,cAAc,CAAC,KAAsB;QAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAC3E,mBAAmB,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,mBAA2B;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,mBAAmB,QAAQ,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,IAAuB;IAC5C,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"docker-agent-session.js","sourceRoot":"","sources":["../../src/docker/docker-agent-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AA+D9D,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAY;IAC9B,mBAAmB,CAAsB;IAChC,MAAM,CAAoB;IAC1B,KAAK,CAAuB;IAC5B,SAAS,CAAU;IACnB,kBAAkB,CAAU;IAC5B,YAAY,CAAS;IAE9B,MAAM,GAAkB,cAAc,CAAC;IAC9B,SAAS,CAAS;IAEnC;;;;;;;OAOG;IACK,iBAAiB,GAAG,KAAK,CAAC;IAE1B,KAAK,GAAuB,EAAE,CAAC;IAC/B,aAAa,GAAsB,EAAE,CAAC;IACtC,iBAAiB,GAA6B,IAAI,CAAC;IAEnD,WAAW,GAA0B,IAAI,CAAC;IAC1C,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;IAEb,YAAY,CAAwC;IACpD,mBAAmB,CAAc;IACjC,oBAAoB,CAAmE;IACvF,YAAY,CAAoC;IAEjE,YAAY,IAA4B;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACzE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,gEAAgE;QAChE,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,8DAA8D;QAC9D,6CAA6C;QAC7C,IACE,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAC/B,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAChF,CAAC;YACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,0GAA0G;IAC1G,KAAK,CAAC,UAAU;QACd,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,sBAAsB;QACtB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;YACzE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;YACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE;YACvD,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAE/B,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,0DAA0D;QAC1D,uEAAuE;QACvE,wEAAwE;QACxE,4CAA4C;QAC5C,yDAAyD;QACzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC;YAC3E,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAEtD,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE;gBAClF,6DAA6D;gBAC7D,qEAAqE;gBACrE,sEAAsE;gBACtE,SAAS,EAAE,IAAI,CAAC,mBAAmB;gBACnC,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB;gBAClC,aAAa,EAAE,IAAI,CAAC,kBAAkB;aACvC,CAAC,CAAC;YACH,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,wBAAwB,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAChH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAChD,MAAM,YAAY,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,uBAAuB,cAAc,CAAC;YACzG,MAAM,CAAC,IAAI,CACT,uBAAuB,QAAQ,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,IAAI;gBAClF,YAAY,cAAc,cAAc,YAAY,EAAE,CACzD,CAAC;YACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,UAAU,cAAc,IAAI,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAE9E,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACjC,WAAW;gBACX,iBAAiB,EAAE,QAAQ,CAAC,IAAI;gBAChC,KAAK,EAAE;oBACL,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;iBACpB;gBACD,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,wEAAwE;YACxE,6BAA6B;YAC7B,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,KAAK;gBAC1C,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,+DAA+D;YAC/D,oBAAoB;YACpB,IAAK,IAAI,CAAC,MAAwB,KAAK,QAAQ,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;QACvD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,mDAAmD,UAAU,OAAO,IAAI,CAAC,mBAAmB,GAAG;YAC7F,4CAA4C,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,aAAa;QACX,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,eAAe;QACb,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAEtD,OAAO;YACL,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,cAAc;YACd,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc;YAC7C,UAAU,EAAE;gBACV,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC5B,aAAa,EAAE,cAAc;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;aACzC;YACD,sBAAsB,EAAE,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,QAA+B,EAC/B,OAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QAEvB,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAEzB,oEAAoE;QACpE,+DAA+D;QAC/D,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,mDAAmD;QACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxE,MAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,8DAA8D;QAC9D,+DAA+D;QAC/D,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,0BAA0B;IAElB,cAAc,CAAC,KAAsB;QAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAC3E,mBAAmB,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,mBAA2B;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,mBAAmB,QAAQ,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,IAAuB;IAC5C,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/docker/docker-infrastructure.d.ts

@@ -12,8 +12,11 @@ import { type AgentAdapter, type AgentId, type ConversationStateConfig } from '.
 import type { ResolvedUserConfig } from '../config/user-config.js';
 import type { DockerProxy } from './code-mode-proxy.js';
 import type { MitmProxy } from './mitm-proxy.js';
+import type { TrajectoryCaptureWriter } from './trajectory-capture.js';
 import type { CertificateAuthority } from './ca.js';
-import type { DockerManager } from './types.js';
+import type { ContainerRuntime } from './types.js';
+import type { ContainerRuntimeKind } from './container-runtime.js';
+import type { HostOnlyNetwork, NetworkTopology } from './network-topology.js';
 import { type ProviderConfig, type UpstreamTarget } from './provider-config.js';
 import type { ResolvedSkill } from '../skills/types.js';
 /**
@@ -105,14 +108,30 @@ export interface PreContainerInfrastructure {
     readonly auditLogPath: string;
     readonly proxy: DockerProxy;
     readonly mitmProxy: MitmProxy;
-    readonly docker: DockerManager;
+    readonly docker: ContainerRuntime;
     readonly adapter: AgentAdapter;
     readonly ca: CertificateAuthority;
     readonly fakeKeys: Map<string, string>;
     readonly orientationDir: string;
     readonly systemPrompt: string;
     readonly image: string;
+    /** Container runtime backend this bundle was built for. */
+    readonly runtimeKind: ContainerRuntimeKind;
+    /**
+     * Proxy-transport topology (see network-topology.ts). `useTcp` is the
+     * legacy projection `topology !== 'uds'`, kept for existing consumers.
+     */
+    readonly topology: NetworkTopology;
     readonly useTcp: boolean;
+    /**
+     * Per-bundle host-only network, present only on `tcp-hostonly`
+     * bundles. Created during the prepare phase (the gateway address is
+     * needed for orientation and container env before any container
+     * exists); `createSessionContainers` attaches the agent container to
+     * it and reports it as `internalNetwork` so the standard teardown
+     * paths remove it.
+     */
+    readonly hostOnlyNetwork?: HostOnlyNetwork;
     readonly socketsDir: string;
     /** MITM proxy listen address (port for TCP mode, socketPath for UDS mode). */
     readonly mitmAddr: {
@@ -138,6 +157,24 @@ export interface PreContainerInfrastructure {
         /** Container target path; copied verbatim from `adapter.skills.containerPath`. */
         readonly target: string;
     };
+    /** Host-side workflow scripts dir mounted read-only into the container. */
+    readonly scriptsMount?: {
+        readonly hostDir: string;
+        readonly target: string;
+    };
+    /** Host-side cached Python venv mounted at /opt/workflow-venv for workflow helpers. */
+    readonly workflowPythonVenvMount?: {
+        readonly hostDir: string;
+        readonly target: string;
+        readonly cacheKey: string;
+    };
+    /** Host-side cached node_modules mounted for workflow helper scripts. */
+    readonly workflowNodeModulesMount?: {
+        readonly hostDir: string;
+        readonly target: string;
+        readonly cacheKey: string;
+        readonly hasPackageLock: boolean;
+    };
     /**
      * Re-stages the bundle's skills with the given resolved set.
      * No-op when `skillsMount` is undefined or when the set is byte-identical
@@ -157,6 +194,48 @@ export interface PreContainerInfrastructure {
      * wrapper over `MitmProxy.setTokenSessionId()`.
      */
     setTokenSessionId(id: import('../session/types.js').SessionId | undefined): void;
+    /**
+     * Begin trajectory capture for a session. Atomically:
+     *   1. sets the proxy's captureSessionId (`MitmProxy.setCaptureSessionId`)
+     *   2. sets the proxy's capturePersona (`MitmProxy.setCapturePersona`)
+     *   3. opens the per-session trajectory file and appends a `session-start`
+     *      manifest entry (`TrajectoryCaptureWriter.beginSession`)
+     *
+     * No-op when capture is disabled (writer is undefined). MUST be called
+     * before the agent process is unblocked, so the first exchange the
+     * agent emits is already tagged with the right session. See
+     * docs/designs/mitm-token-trajectory-capture.md §11.
+     *
+     * Always present (never optional): the method is inert when the writer
+     * is undefined, so "always present, sometimes a no-op" is correct.
+     * Making it required turns "forgot to wire capture" into a compile
+     * error instead of a silent no-op.
+     */
+    beginCaptureSession: (opts: {
+        sessionId: import('../session/types.js').SessionId;
+        persona?: string;
+        fsmState?: string;
+    }) => void;
+    /**
+     * End trajectory capture for a session. Drives the dispatcher's two-phase
+     * endSession (§9: flip endRequested, drain in-flight reassembly, enqueue
+     * `session-end` with counter snapshot). MUST be awaited BEFORE
+     * `session.close()` so the manifest entry is durable even if `session.close()`
+     * throws.
+     *
+     * No-op when capture is disabled. Always present (never optional): the
+     * method is inert when the writer is undefined, so "always present,
+     * sometimes a no-op" is correct, and a consumer that forgets to wire
+     * capture now fails to compile rather than silently dropping it.
+     */
+    endCaptureSession: (sessionId: import('../session/types.js').SessionId) => Promise<void>;
+    /**
+     * Internal: trajectory-capture writer reference, exposed so
+     * `destroyDockerInfrastructure` / `destroyWorkflowInfrastructure` can
+     * call `writer.close()` as the infrastructure-teardown safety net
+     * (§9). Undefined when capture is disabled. Not for orchestrator use.
+     */
+    readonly captureWriter?: TrajectoryCaptureWriter;
 }
 /**
  * Full Docker session infrastructure, including a running main container.
@@ -193,9 +272,36 @@ export interface DockerInfrastructure extends PreContainerInfrastructure {
  * alongside the always-present `ironcurtain.bundle=<bundleId>`. When
  * unset, only `ironcurtain.bundle` is emitted (standalone CLI / PTY).
  */
+/**
+ * Optional trajectory-capture inputs threaded through to the MITM
+ * proxy. Carries the RAW CLI/RPC override — this function is the single
+ * place that resolves enablement against config (`override ?? config >
+ * false`), so consumers never duplicate the `?? userConfig.capture?.enabled`
+ * precedence. When this object is absent, or resolution yields false, no
+ * writer is constructed and no taps are installed — zero cost on the
+ * forwarding path. See docs/designs/mitm-token-trajectory-capture.md.
+ */
+export interface CaptureSetupInput {
+    /**
+     * Raw CLI/RPC override (boolean | undefined); undefined falls through
+     * to `config.userConfig.capture?.enabled`, then to false. The single
+     * resolution point lives in `prepareDockerInfrastructure`.
+     */
+    readonly override?: boolean;
+    /**
+     * Absolute path where `{sessionId}.jsonl` and `manifest.jsonl` are
+     * written. A real per-path difference (session dir vs bundle dir), so
+     * the caller supplies it rather than the infra layer deriving it.
+     */
+    readonly capturesDir: string;
+    /** Human-readable agent name (e.g. `'claude-code'`). */
+    readonly recordedAgentName?: string;
+    /** Workflow run ID, when this bundle belongs to a workflow run. */
+    readonly workflowRunId?: WorkflowId;
+}
 export declare function prepareDockerInfrastructure(config: IronCurtainConfig, mode: SessionMode & {
     kind: 'docker';
-}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[]): Promise<PreContainerInfrastructure>;
+}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string): Promise<PreContainerInfrastructure>;
 /**
  * Creates the full Docker session infrastructure, including a running
  * `sleep infinity` agent container (and, on macOS TCP mode, the socat
@@ -207,7 +313,7 @@ export declare function prepareDockerInfrastructure(config: IronCurtainConfig, m
  */
 export declare function createDockerInfrastructure(config: IronCurtainConfig, mode: SessionMode & {
     kind: 'docker';
-}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[]): Promise<DockerInfrastructure>;
+}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string, options?: CreateDockerInfrastructureOptions): Promise<DockerInfrastructure>;
 /**
  * Tears down a fully-formed `DockerInfrastructure` bundle: main container,
  * TCP-mode sidecar and internal network (if present), MITM proxy, and Code
@@ -264,6 +370,14 @@ export interface ContainerResources {
     readonly sidecarContainerId?: string;
     readonly internalNetwork?: string;
 }
+export interface CreateDockerInfrastructureOptions {
+    /**
+     * Optional immutable image ref used only for the main container's
+     * `docker create`. The normal agent image is still ensured first so
+     * workflow dependency caches keep their base-image hash.
+     */
+    readonly baseImageOverride?: string;
+}
 /**
  * Creates and starts the main agent container (plus TCP-mode sidecar and
  * internal network on macOS). Cleans up any partially-created resources
@@ -271,17 +385,55 @@ export interface ContainerResources {
  *
  * Exported for testability: tests exercise the mount/env configuration and
  * the rollback-on-failure path by passing a mock `PreContainerInfrastructure`
- * with a scripted `DockerManager`.
+ * with a scripted `ContainerRuntime`.
  */
-export declare function createSessionContainers(core: PreContainerInfrastructure, config: IronCurtainConfig): Promise<ContainerResources>;
+export declare function createSessionContainers(core: PreContainerInfrastructure, config: IronCurtainConfig, options?: CreateDockerInfrastructureOptions): Promise<ContainerResources>;
+/**
+ * Writes /etc/apt/apt.conf.d/90-ironcurtain-proxy inside a running
+ * container via exec (as root). Used by the tcp-hostonly topology in
+ * both batch and PTY modes — Apple container's virtiofs shares
+ * directories only, so the single-file bind mount the Docker topologies
+ * use is rejected. The URL is built from our own gateway address and
+ * OS-assigned port — runtime-generated values, not untrusted input — so
+ * embedding it in the sh script is safe.
+ */
+export declare function writeHostOnlyAptProxyConfig(docker: ContainerRuntime, containerId: string, proxyUrl: string): Promise<void>;
+/**
+ * Fail-closed startup gate for the tcp-hostonly topology
+ * (docs/designs/apple-container-runtime.md, design decision 4). Asserts
+ * from inside the container that (a) the host-side proxies are reachable
+ * at the vmnet gateway and (b) internet egress is blocked by the
+ * host-only network. Either failure aborts session initialization —
+ * never a silent fallback to a weaker network configuration. Shared by
+ * batch (`createSessionContainers`) and PTY (`runPtySession`) modes.
+ */
+export declare function checkHostOnlyConnectivity(docker: ContainerRuntime, containerId: string, gateway: string, mcpPort: number): Promise<void>;
+/**
+ * Whether an OAuth credential set can be refreshed: true only when a
+ * non-empty refresh token is present. Externally-managed Codex tokens
+ * (`auth_mode: 'chatgptAuthTokens'`) carry an empty refresh token and must
+ * NOT be refreshed by IronCurtain. Pure helper, exported for testability.
+ */
+export declare function canRefreshOAuth(refreshToken: string): boolean;
+/**
+ * Resolves the real credential for a provider host.
+ *
+ * For Anthropic hosts in OAuth mode, uses the OAuth access token.
+ * For all other cases, falls back to the API key from config.
+ */
+export declare function resolveRealKey(host: string, config: IronCurtainConfig, oauthAccessToken: string | undefined): string;
 /**
  * Creates and seeds the conversation state directory for agents that
  * support session resume. Idempotent: skips seeding if the directory
  * already exists (resume case).
  *
- * As a defense-in-depth measure, always deletes `.credentials.json`
- * from the state directory — the MITM proxy handles auth independently,
- * so any credentials file left by the agent is stale.
+ * As a defense-in-depth measure, always deletes stale credential files
+ * (`.credentials.json` for Claude Code, `auth.json` for Codex) from the
+ * state directory — the MITM proxy handles auth independently, and each
+ * agent's entrypoint recreates its credential file from env on every
+ * start, so any credential file lingering across resumes is stale. The
+ * unlinks are no-ops for adapters whose state dir has neither file (e.g.
+ * Goose), since a missing file is swallowed.
  */
 export declare function prepareConversationStateDir(sessionDir: string, config: ConversationStateConfig): string;
 /**
@@ -297,6 +449,31 @@ export declare function prepareConversationStateDir(sessionDir: string, config:
  * cached, so a second call from the session-init path is a cheap no-op.
  */
 export declare function ensureDockerImage(agentId: AgentId, userConfig: ResolvedUserConfig): Promise<void>;
+export declare function ensureImage(image: string, docker: ContainerRuntime, ca: CertificateAuthority): Promise<string>;
+export declare function computeWorkflowDependencyHash(agentBuildHash: string, scriptsDir: string): string;
+/**
+ * Wraps an in-container command so the workflow dependency bins are prepended
+ * to the container's LIVE `$PATH` at exec time, rather than replacing the
+ * image's PATH at container-creation time.
+ *
+ * Why a runtime shell instead of an `-e PATH=...` env: Docker `-e` REPLACES the
+ * image PATH (it does not append), which would discard the base image's own
+ * PATH — including the NVM directory where `node`/`npm` live on the x86
+ * devcontainer base. Expanding `$PATH` inside the container at exec time is
+ * base-image-agnostic: it preserves whatever PATH the image ships and merely
+ * prepends the workflow venv bin (for bare `python`) and the installed Node
+ * package bins (`node_modules/.bin`).
+ *
+ * Returns the original command unchanged when neither dependency mount is
+ * present, so non-dependency workflows keep the plain exec path.
+ *
+ * Shell-safety: the only interpolated values are the hardcoded container
+ * constants `WORKFLOW_PYTHON_VENV_DIR` / `WORKFLOW_NODE_MODULES_DIR`. The
+ * caller's command and its arguments are passed verbatim as positional
+ * parameters consumed by `exec "$@"` — never string-interpolated — so no
+ * word-splitting or injection is possible.
+ */
+export declare function buildWorkflowExecCommand(bundle: Pick<DockerInfrastructure, 'workflowPythonVenvMount' | 'workflowNodeModulesMount'>, command: readonly string[]): readonly string[];
 /**
  * Applies upstream target overrides from environment variables to provider configs.
  *