@provos/ironcurtain 0.12.0 → 0.13.0

package/dist/docker/docker-agent-session.js

@@ -36,6 +36,7 @@ import { SessionNotReadyError, SessionClosedError } from '../types/errors.js';
 import { createEscalationWatcher, atomicWriteJsonSync } from '../escalation/escalation-watcher.js';
 import * as logger from '../logger.js';
 import { DEFAULT_EXEC_TIMEOUT_MS } from './docker-manager.js';
+import { getTokenStreamBus } from './token-stream-bus.js';
 export class DockerAgentSession {
     sessionId;
     agentConversationId;
@@ -61,6 +62,19 @@ export class DockerAgentSession {
     auditTailer = null;
     cumulativeActiveMs = 0;
     cumulativeCostUsd = 0;
+    /**
+     * Cumulative authoritative USD cost, summed from OpenRouter `usage.cost`
+     * values surfaced on the token-stream bus (`message_end` events) for this
+     * session id (§10, D6). This is ground truth for the Anthropic-skin path:
+     * Claude Code's own `total_cost_usd` self-report is wrong when routed to a
+     * non-Anthropic model. Preferred over the CLI self-report only when the
+     * active profile is openrouter-type AND this sum is > 0 (see
+     * `resolveCostUsd`). Populated by the token-stream subscription installed in
+     * `initialize()`.
+     */
+    authoritativeCostUsd = 0;
+    /** Unsubscribe handle for the token-stream cost subscription. */
+    unsubscribeCostStream = null;
     onEscalation;
     onEscalationExpired;
     onEscalationResolved;
@@ -126,6 +140,19 @@ export class DockerAgentSession {
         // an entry the proxy just wrote.
         this.auditTailer = new AuditLogTailer(this.infra.auditLogPath, (event) => this.emitDiagnostic(event));
         this.auditTailer.start();
+        // Authoritative-cost tap (§10, D6): sum OpenRouter `usage.cost` values
+        // surfaced on `message_end` events for this session id. The MITM proxy
+        // publishes on the module-scoped singleton bus keyed by its token-session
+        // id, which equals this session id in single-session mode (see
+        // docker-infrastructure.ts `routingId`). The subscription is unconditional
+        // and cheap — accumulation is a no-op for native providers (no `costUsd`
+        // field); whether the sum is *preferred* over the CLI self-report is gated
+        // in `resolveCostUsd`.
+        this.unsubscribeCostStream = getTokenStreamBus().subscribe(this.sessionId, (_sessionId, event) => {
+            if (event.kind === 'message_end' && typeof event.costUsd === 'number') {
+                this.authoritativeCostUsd += event.costUsd;
+            }
+        });
         // Trajectory capture is driven HERE only in standalone (owns-infra)
         // mode: the session owns the bundle and runs exactly one Claude session
         // through it, with no fsmState (not a workflow) and no persona, so
@@ -153,8 +180,15 @@ export class DockerAgentSession {
         };
     }
     async sendMessage(userMessage) {
-        const { text } = await this.sendMessageDetailed(userMessage);
-        return text;
+        const result = await this.sendMessageDetailed(userMessage);
+        // Non-workflow transports use the string-only Session API and cannot see
+        // the hardFailure flag. Rotate here so their next user turn never resumes
+        // a conversation whose failed CLI invocation produced no transcript.
+        // Workflow callers use sendMessageDetailed() and own their retry/rotation
+        // policy explicitly, so they do not pass through this branch.
+        if (result.hardFailure)
+            this.rotateAgentConversationId();
+        return result.text;
     }
     async sendMessageDetailed(userMessage) {
         if (this.status === 'closed')
@@ -200,9 +234,7 @@ export class DockerAgentSession {
             }
             this.cumulativeActiveMs += Date.now() - turnStartMs;
             const response = this.infra.adapter.extractResponse(exitCode, stdout, stderr);
-            if (response.costUsd !== undefined) {
-                this.cumulativeCostUsd = response.costUsd;
-            }
+            this.cumulativeCostUsd = this.resolveCostUsd(response.costUsd);
             const turn = {
                 turnNumber: this.turns.length + 1,
                 userMessage,
@@ -228,7 +260,7 @@ export class DockerAgentSession {
             // matches `extractResponse`'s hard-failure definition (stdout.trim()
             // empty); hard failures still route through rotateAgentConversationId()
             // at the orchestrator layer.
-            if (exitCode === 0 || stdout.trim().length > 0) {
+            if (stdout.trim().length > 0) {
                 this.firstTurnComplete = true;
             }
             return {
@@ -326,6 +358,8 @@ export class DockerAgentSession {
         this.status = 'closed';
         this.escalationWatcher?.stop();
         this.auditTailer?.stop();
+        this.unsubscribeCostStream?.();
+        this.unsubscribeCostStream = null;
         // Trajectory capture: end the capture session BEFORE infrastructure
         // teardown so the `session-end` manifest entry is durable. The
         // infrastructure-teardown safety net inside destroyDockerInfrastructure
@@ -352,6 +386,33 @@ export class DockerAgentSession {
         logger.teardown();
     }
     // --- Private helpers ---
+    /**
+     * Resolve the cumulative session cost, applying the D6 fallback order
+     * (§10): authoritative summed `usage.cost` → CLI self-reported `costUsd`
+     * → static estimate.
+     *
+     * The authoritative sum (from OpenRouter `usage.cost` on the token-stream
+     * bus) is ground truth and is preferred ONLY when the active profile is
+     * openrouter-type AND the sum is > 0 — Claude Code's `total_cost_usd` is
+     * wrong when routed to a non-Anthropic model. For native profiles, or when
+     * no authoritative cost was observed, the CLI self-report is used. When
+     * neither is available, the prior cumulative value is retained (the Docker
+     * session has no per-turn token counts to compute a fresh static estimate).
+     *
+     * Both the authoritative sum and the CLI `costUsd` are cumulative session
+     * totals, so this returns the value to *assign* (not add) to
+     * `cumulativeCostUsd`.
+     */
+    resolveCostUsd(cliCostUsd) {
+        const isOpenRouter = this.config.activeProviderProfile?.type === 'openrouter';
+        if (isOpenRouter && this.authoritativeCostUsd > 0) {
+            return this.authoritativeCostUsd;
+        }
+        if (cliCostUsd !== undefined) {
+            return cliCostUsd;
+        }
+        return this.cumulativeCostUsd;
+    }
     emitDiagnostic(event) {
         this.diagnosticLog.push(event);
         this.onDiagnostic?.(event);

package/dist/docker/docker-agent-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker-agent-session.js","sourceRoot":"","sources":["../../src/docker/docker-agent-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AA+D9D,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAY;IAC9B,mBAAmB,CAAsB;IAChC,MAAM,CAAoB;IAC1B,KAAK,CAAuB;IAC5B,SAAS,CAAU;IACnB,kBAAkB,CAAU;IAC5B,YAAY,CAAS;IAE9B,MAAM,GAAkB,cAAc,CAAC;IAC9B,SAAS,CAAS;IAEnC;;;;;;;OAOG;IACK,iBAAiB,GAAG,KAAK,CAAC;IAE1B,KAAK,GAAuB,EAAE,CAAC;IAC/B,aAAa,GAAsB,EAAE,CAAC;IACtC,iBAAiB,GAA6B,IAAI,CAAC;IAEnD,WAAW,GAA0B,IAAI,CAAC;IAC1C,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;IAEb,YAAY,CAAwC;IACpD,mBAAmB,CAAc;IACjC,oBAAoB,CAAmE;IACvF,YAAY,CAAoC;IAEjE,YAAY,IAA4B;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACzE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,gEAAgE;QAChE,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,8DAA8D;QAC9D,6CAA6C;QAC7C,IACE,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAC/B,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAChF,CAAC;YACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,0GAA0G;IAC1G,KAAK,CAAC,UAAU;QACd,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,sBAAsB;QACtB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;YACzE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;YACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE;YACvD,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAE/B,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,0DAA0D;QAC1D,uEAAuE;QACvE,wEAAwE;QACxE,4CAA4C;QAC5C,yDAAyD;QACzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC;YAC3E,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAEtD,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE;gBAClF,6DAA6D;gBAC7D,qEAAqE;gBACrE,sEAAsE;gBACtE,SAAS,EAAE,IAAI,CAAC,mBAAmB;gBACnC,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB;gBAClC,aAAa,EAAE,IAAI,CAAC,kBAAkB;aACvC,CAAC,CAAC;YACH,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,wBAAwB,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAChH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAChD,MAAM,YAAY,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,uBAAuB,cAAc,CAAC;YACzG,MAAM,CAAC,IAAI,CACT,uBAAuB,QAAQ,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,IAAI;gBAClF,YAAY,cAAc,cAAc,YAAY,EAAE,CACzD,CAAC;YACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,UAAU,cAAc,IAAI,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAE9E,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACjC,WAAW;gBACX,iBAAiB,EAAE,QAAQ,CAAC,IAAI;gBAChC,KAAK,EAAE;oBACL,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;iBACpB;gBACD,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,wEAAwE;YACxE,6BAA6B;YAC7B,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,KAAK;gBAC1C,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,+DAA+D;YAC/D,oBAAoB;YACpB,IAAK,IAAI,CAAC,MAAwB,KAAK,QAAQ,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;QACvD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,mDAAmD,UAAU,OAAO,IAAI,CAAC,mBAAmB,GAAG;YAC7F,4CAA4C,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,aAAa;QACX,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,eAAe;QACb,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAEtD,OAAO;YACL,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,cAAc;YACd,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc;YAC7C,UAAU,EAAE;gBACV,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC5B,aAAa,EAAE,cAAc;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;aACzC;YACD,sBAAsB,EAAE,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,QAA+B,EAC/B,OAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QAEvB,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAEzB,oEAAoE;QACpE,+DAA+D;QAC/D,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,mDAAmD;QACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxE,MAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,8DAA8D;QAC9D,+DAA+D;QAC/D,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,0BAA0B;IAElB,cAAc,CAAC,KAAsB;QAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAC3E,mBAAmB,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,mBAA2B;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,mBAAmB,QAAQ,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,IAAuB;IAC5C,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"docker-agent-session.js","sourceRoot":"","sources":["../../src/docker/docker-agent-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAEnG,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA+D1D,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAAY;IAC9B,mBAAmB,CAAsB;IAChC,MAAM,CAAoB;IAC1B,KAAK,CAAuB;IAC5B,SAAS,CAAU;IACnB,kBAAkB,CAAU;IAC5B,YAAY,CAAS;IAE9B,MAAM,GAAkB,cAAc,CAAC;IAC9B,SAAS,CAAS;IAEnC;;;;;;;OAOG;IACK,iBAAiB,GAAG,KAAK,CAAC;IAE1B,KAAK,GAAuB,EAAE,CAAC;IAC/B,aAAa,GAAsB,EAAE,CAAC;IACtC,iBAAiB,GAA6B,IAAI,CAAC;IAEnD,WAAW,GAA0B,IAAI,CAAC;IAC1C,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;IAE9B;;;;;;;;;OASG;IACK,oBAAoB,GAAG,CAAC,CAAC;IAEjC,iEAAiE;IACzD,qBAAqB,GAAwB,IAAI,CAAC;IAEzC,YAAY,CAAwC;IACpD,mBAAmB,CAAc;IACjC,oBAAoB,CAAmE;IACvF,YAAY,CAAoC;IAEjE,YAAY,IAA4B;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACzE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1C,gEAAgE;QAChE,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,8DAA8D;QAC9D,6CAA6C;QAC7C,IACE,IAAI,CAAC,KAAK,CAAC,oBAAoB;YAC/B,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAChF,CAAC;YACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,0GAA0G;IAC1G,KAAK,CAAC,UAAU;QACd,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,sBAAsB;QACtB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;YACzE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;YACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE;YACvD,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAE/B,qEAAqE;QACrE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,+DAA+D;QAC/D,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,uBAAuB;QACvB,IAAI,CAAC,qBAAqB,GAAG,iBAAiB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;YAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtE,IAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC,OAAO,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,0DAA0D;QAC1D,uEAAuE;QACvE,wEAAwE;QACxE,4CAA4C;QAC5C,yDAAyD;QACzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,OAAO;QACL,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC3D,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;QACrE,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,MAAM,CAAC,WAAW;YAAE,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;QAC3B,IAAI,CAAC;YACH,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC;YAC3E,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAEtD,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEnC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE;gBAClF,6DAA6D;gBAC7D,qEAAqE;gBACrE,sEAAsE;gBACtE,SAAS,EAAE,IAAI,CAAC,mBAAmB;gBACnC,SAAS,EAAE,CAAC,IAAI,CAAC,iBAAiB;gBAClC,aAAa,EAAE,IAAI,CAAC,kBAAkB;aACvC,CAAC,CAAC;YACH,kEAAkE;YAClE,oDAAoD;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,wBAAwB,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAChH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAChD,MAAM,YAAY,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,uBAAuB,cAAc,CAAC;YACzG,MAAM,CAAC,IAAI,CACT,uBAAuB,QAAQ,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,IAAI;gBAClF,YAAY,cAAc,cAAc,YAAY,EAAE,CACzD,CAAC;YACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,qCAAqC,QAAQ,UAAU,cAAc,IAAI,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;YAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAE9E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE/D,MAAM,IAAI,GAAqB;gBAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACjC,WAAW;gBACX,iBAAiB,EAAE,QAAQ,CAAC,IAAI;gBAChC,KAAK,EAAE;oBACL,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;iBACpB;gBACD,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtB,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,wEAAwE;YACxE,6BAA6B;YAC7B,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,KAAK;gBAC1C,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,gEAAgE;YAChE,8DAA8D;YAC9D,+DAA+D;YAC/D,oBAAoB;YACpB,IAAK,IAAI,CAAC,MAAwB,KAAK,QAAQ,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;QACvD,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,mDAAmD,UAAU,OAAO,IAAI,CAAC,mBAAmB,GAAG;YAC7F,4CAA4C,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,aAAa;QACX,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,eAAe;QACb,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAEtD,OAAO;YACL,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,cAAc;YACd,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc;YAC7C,UAAU,EAAE;gBACV,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAC5B,aAAa,EAAE,cAAc;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;aACzC;YACD,sBAAsB,EAAE,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,QAA+B,EAC/B,OAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QAEvB,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAElC,oEAAoE;QACpE,+DAA+D;QAC/D,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,mDAAmD;QACnD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACxE,MAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,8DAA8D;QAC9D,+DAA+D;QAC/D,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,0BAA0B;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACK,cAAc,CAAC,UAA8B;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,KAAK,YAAY,CAAC;QAC9E,IAAI,YAAY,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,cAAc,CAAC,KAAsB;QAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAC3E,mBAAmB,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,mBAA2B;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,mBAAmB,QAAQ,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,IAAuB;IAC5C,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/docker/docker-infrastructure.d.ts

@@ -18,7 +18,9 @@ import type { ContainerRuntime } from './types.js';
 import type { ContainerRuntimeKind } from './container-runtime.js';
 import type { HostOnlyNetwork, NetworkTopology } from './network-topology.js';
 import { type ProviderConfig, type UpstreamTarget } from './provider-config.js';
+import { InternalNetworkConnectivityError } from './docker-resource-lifecycle.js';
 import type { ResolvedSkill } from '../skills/types.js';
+export { InternalNetworkConnectivityError };
 /**
  * Create a bundle-owned directory and enforce 0o700 permissions even if
  * it already exists. `mkdirSync`'s `mode` only applies on creation, so a
@@ -301,7 +303,7 @@ export interface CaptureSetupInput {
 }
 export declare function prepareDockerInfrastructure(config: IronCurtainConfig, mode: SessionMode & {
     kind: 'docker';
-}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string): Promise<PreContainerInfrastructure>;
+}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string, providerProfileName?: string): Promise<PreContainerInfrastructure>;
 /**
  * Creates the full Docker session infrastructure, including a running
  * `sleep infinity` agent container (and, on macOS TCP mode, the socat
@@ -313,7 +315,7 @@ export declare function prepareDockerInfrastructure(config: IronCurtainConfig, m
  */
 export declare function createDockerInfrastructure(config: IronCurtainConfig, mode: SessionMode & {
     kind: 'docker';
-}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string, options?: CreateDockerInfrastructureOptions): Promise<DockerInfrastructure>;
+}, bundleDir: string, workspaceDir: string, escalationDir: string, bundleId: BundleId, workflowId?: WorkflowId, scope?: string, resolvedSkills?: readonly ResolvedSkill[], captureInput?: CaptureSetupInput, scriptsDir?: string, options?: CreateDockerInfrastructureOptions, providerProfileName?: string): Promise<DockerInfrastructure>;
 /**
  * Tears down a fully-formed `DockerInfrastructure` bundle: main container,
  * TCP-mode sidecar and internal network (if present), MITM proxy, and Code
@@ -337,10 +339,11 @@ export declare function destroyDockerInfrastructure(infra: DockerInfrastructure)
  *
  * See `docs/designs/workflow-session-identity.md` §7.
  */
-export declare function buildBundleLabels(core: Pick<PreContainerInfrastructure, 'bundleId' | 'workflowId' | 'scope'>): {
+export declare function buildBundleLabels(core: Pick<PreContainerInfrastructure, 'bundleId' | 'workflowId' | 'scope' | 'runtimeKind'>): {
     bundleLabel: string;
     workflowLabel?: string;
     scopeLabel?: string;
+    labels?: Readonly<Record<string, string>>;
 };
 /**
  * Returns the `user` override and env vars needed for runtime UID
@@ -352,17 +355,38 @@ export declare function buildBundleLabels(core: Pick<PreContainerInfrastructure,
  * so the entrypoint (running as root) can renumber the codespace
  * account before dropping privileges via `runuser`.
  *
- * On macOS (`useTcp === true`), Docker Desktop's VirtioFS handles UID
- * translation transparently and `--user 0:0` would defeat it; this
- * function returns an empty mapping there, leaving the container to
- * run as the baked `codespace` user from the Dockerfile.
+ * When `skipRemap` is true this returns an empty mapping so the
+ * container runs as the baked `codespace` user from the Dockerfile.
+ * Skipped on macOS Docker Desktop (VirtioFS handles UID translation
+ * transparently and `--user 0:0` would defeat it) AND on apple-container
+ * (virtiofs presents host files as root; the existing sessions work
+ * without the Linux renumber-and-drop dance) — i.e., remap is Linux
+ * Docker only. Callers pass `runtimeKind === 'apple-container' || useTcp`
+ * so apple-container's `uds` topology does not accidentally trip the
+ * Linux-only remap.
  *
  * Exported for testability.
  */
-export declare function buildAgentUidRemap(useTcp: boolean): {
+export declare function buildAgentUidRemap(skipRemap: boolean): {
     readonly user: string | undefined;
     readonly env: Record<string, string>;
 };
+/** In-container mount root for the UDS proxies (both runtimes). */
+export declare const CONTAINER_SOCKETS_DIR = "/run/ironcurtain";
+/**
+ * Returns the `uds`-topology socket mounts for a given runtime. Linux
+ * Docker bind-mounts the whole `sockets/` directory (the sockets are
+ * shared kernel objects). Apple `container` mounts each socket FILE via
+ * `-v` so the runtime creates a per-socket vsock relay — a virtiofs
+ * directory share does not carry sockets (verified: `connect()` on a
+ * socket inside a shared dir fails ENOTSUP on 1.1.0). Shared by batch
+ * (`createSessionContainers`) and PTY (`runPtySession`).
+ */
+export declare function buildUdsSocketMounts(runtimeKind: ContainerRuntimeKind, socketsDir: string): {
+    source: string;
+    target: string;
+    readonly: boolean;
+}[];
 /** Container-level resources layered on top of the pre-container bundle. */
 export interface ContainerResources {
     readonly containerId: string;
@@ -388,16 +412,32 @@ export interface CreateDockerInfrastructureOptions {
  * with a scripted `ContainerRuntime`.
  */
 export declare function createSessionContainers(core: PreContainerInfrastructure, config: IronCurtainConfig, options?: CreateDockerInfrastructureOptions): Promise<ContainerResources>;
+/**
+ * Probes whether the container can reach host-side proxies via the socat
+ * sidecar on the internal Docker network. Throws a descriptive error if not.
+ */
+export declare function checkInternalNetworkConnectivity(docker: ContainerRuntime, containerId: string, mcpPort: number, mitmPort: number): Promise<void>;
+/**
+ * Verifies that Docker's writable layer has space before an agent starts.
+ * Docker Desktop can keep creating/starting containers after its VM disk is
+ * full, while writes inside the container fail with ENOSPC. Claude Code then
+ * exits 0 with no output after its initialization timeout, which otherwise
+ * looks like a networking failure.
+ */
+export declare function checkDockerContainerWritableStorage(docker: ContainerRuntime, containerId: string): Promise<void>;
 /**
  * Writes /etc/apt/apt.conf.d/90-ironcurtain-proxy inside a running
- * container via exec (as root). Used by the tcp-hostonly topology in
- * both batch and PTY modes — Apple container's virtiofs shares
- * directories only, so the single-file bind mount the Docker topologies
- * use is rejected. The URL is built from our own gateway address and
- * OS-assigned port — runtime-generated values, not untrusted input — so
- * embedding it in the sh script is safe.
+ * container via exec (as root). Used by apple-container in both batch
+ * and PTY modes — the single-file bind mount the Docker topologies use
+ * is unworkable there: on `tcp-hostonly` (pre-1.1.0) `--mount` rejected
+ * non-directory sources, and on `uds` (1.1.0+) a `-v <dir>/file` mount
+ * whose source nests under the already-shared orientation dir silently
+ * drops that dir share. The URL is built from IronCurtain's own
+ * gateway/loopback address and OS-assigned port — runtime-generated
+ * values, not untrusted input — so embedding it in the sh script is
+ * safe.
  */
-export declare function writeHostOnlyAptProxyConfig(docker: ContainerRuntime, containerId: string, proxyUrl: string): Promise<void>;
+export declare function writeAptProxyConfigViaExec(docker: ContainerRuntime, containerId: string, proxyUrl: string): Promise<void>;
 /**
  * Fail-closed startup gate for the tcp-hostonly topology
  * (docs/designs/apple-container-runtime.md, design decision 4). Asserts