@provos/ironcurtain 0.6.0 → 0.7.0

package/dist/docker/adapters/claude-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../../src/docker/adapters/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAE3D,SAAS,4BAA4B,CAAC,OAA2B;IAC/D,OAAO;;mBAEU,OAAO,CAAC,YAAY;;;;;;;;4BAQX,OAAO,CAAC,YAAY;;;SAGvC,OAAO,CAAC,YAAY;;oBAET,OAAO,CAAC,YAAY;;;;0BAId,OAAO,CAAC,YAAY;UACpC,OAAO,CAAC,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;CAyB7B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAiB;IAC7C,EAAE,EAAE,aAAwB;IAC5B,WAAW,EAAE,aAAa;IAE1B,iGAAiG;IACjG,KAAK,CAAC,QAAQ;QACZ,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACzE,8DAA8D;IAC9D,iBAAiB,CAAC,UAAkB;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,gBAAgB,UAAU,EAAE,CAAC;iBACvF;aACF;SACF,CAAC;QAEF,OAAO;YACL;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,WAAW,GAAG;;;;;;;;CAQvB,CAAC;QAEE,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,4DAA4D;QAC5D,mEAAmE;QACnE,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBxB,CAAC;QAEE,2EAA2E;QAC3E,MAAM,eAAe,GAAG;;;;;;;CAO3B,CAAC;QAEE,OAAO;YACL,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE;YAC9D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;YAC7D,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,OAAe,EAAE,YAAoB;QAChD,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,gCAAgC;YAChC,iBAAiB;YACjB,MAAM;YACN,cAAc;YACd,yCAAyC;YACzC,wBAAwB;YACxB,YAAY;YACZ,IAAI;YACJ,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,OAA2B;QAC3C,iFAAiF;QACjF,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAEzF,yEAAyE;QACzE,MAAM,YAAY,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAE3D,OAAO,GAAG,cAAc,KAAK,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,YAAY,CAAC,QAA6B;QACxC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,sBAAsB,EAAE,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,MAAyB,EAAE,QAAqC;QACvE,MAAM,GAAG,GAA2B;YAClC,gCAAgC,EAAE,GAAG;YACrC,uEAAuE;YACvE,mBAAmB,EAAE,qDAAqD;SAC3E,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC/G,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACxC,gEAAgE;YAChE,0EAA0E;YAC1E,GAAG,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,wEAAwE;YACxE,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC;QACpC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,MAAc;QAC9C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,0BAA0B,QAAQ,iBAAiB,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,eAAe,CACb,aAAqB,EACrB,WAA+B,EAC/B,OAA2B;QAE3B,gDAAgD;QAChD,MAAM,SAAS,GAAG,WAAW;YAC3B,CAAC,CAAC,eAAe,WAAW,OAAO,CAAC,YAAY;YAChD,CAAC,CAAC,cAAc,OAAO,YAAY,CAAC,CAAC,YAAY;QAEnD,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,oEAAoE,CAAC,CAAC;IACpG,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzE,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/C,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../../src/docker/adapters/claude-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAE3D,SAAS,4BAA4B,CAAC,OAA2B;IAC/D,OAAO;;mBAEU,OAAO,CAAC,YAAY;;;;;;;;4BAQX,OAAO,CAAC,YAAY;;;SAGvC,OAAO,CAAC,YAAY;;oBAET,OAAO,CAAC,YAAY;;;;0BAId,OAAO,CAAC,YAAY;UACpC,OAAO,CAAC,YAAY;;EAE5B,mBAAmB,CAAC,sCAAsC,CAAC;;;;;;;;;;;;EAY3D,kBAAkB,CAAC,kCAAkC,CAAC;;EAEtD,uBAAuB,EAAE;CAC1B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAiB;IAC7C,EAAE,EAAE,aAAwB;IAC5B,WAAW,EAAE,aAAa;IAE1B,iGAAiG;IACjG,KAAK,CAAC,QAAQ;QACZ,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACzE,8DAA8D;IAC9D,iBAAiB,CAAC,UAAkB;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,gBAAgB,UAAU,EAAE,CAAC;iBACvF;aACF;SACF,CAAC;QAEF,OAAO;YACL;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,WAAW,GAAG;;;;;;;;CAQvB,CAAC;QAEE,uFAAuF;QACvF,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE1D,OAAO;YACL,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE;YAC9D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;YAC7D,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,OAAe,EAAE,YAAoB;QAChD,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,gCAAgC;YAChC,iBAAiB;YACjB,MAAM;YACN,cAAc;YACd,yCAAyC;YACzC,wBAAwB;YACxB,YAAY;YACZ,IAAI;YACJ,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,OAA2B;QAC3C,iFAAiF;QACjF,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAEzF,yEAAyE;QACzE,MAAM,YAAY,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAE3D,OAAO,GAAG,cAAc,KAAK,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,YAAY,CAAC,QAA6B;QACxC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,sBAAsB,EAAE,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,MAAyB,EAAE,QAAqC;QACvE,MAAM,GAAG,GAA2B;YAClC,gCAAgC,EAAE,GAAG;YACrC,uEAAuE;YACvE,mBAAmB,EAAE,qDAAqD;SAC3E,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC/G,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACxC,gEAAgE;YAChE,0EAA0E;YAC1E,GAAG,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,wEAAwE;YACxE,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC;QACpC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,MAAc;QAC9C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,0BAA0B,QAAQ,iBAAiB,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,eAAe,CACb,aAAqB,EACrB,WAA+B,EAC/B,OAA2B;QAE3B,gDAAgD;QAChD,MAAM,SAAS,GAAG,WAAW;YAC3B,CAAC,CAAC,eAAe,WAAW,OAAO,CAAC,YAAY;YAChD,CAAC,CAAC,cAAc,OAAO,YAAY,CAAC,CAAC,YAAY;QAEnD,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,oEAAoE,CAAC,CAAC;IACpG,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzE,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/C,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACjC,CAAC"}

package/dist/docker/adapters/goose.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Goose agent adapter for Docker Agent Mode.
+ *
+ * Configures a Docker container running Goose (by Block) with:
+ * - MCP server discovery via config.yaml (YAML, Goose extensions format)
+ * - System prompt injection via --instructions file
+ * - Multi-provider support (Anthropic, OpenAI, Google)
+ * - GOOSE_MODE=auto to skip all permission prompts
+ *
+ * Key differences from Claude Code adapter:
+ * - Config format is YAML (not JSON)
+ * - System prompt is file-based (not inline CLI flag)
+ * - No session continuity in batch mode (each turn is independent)
+ * - Output is plain text (no --output-format json)
+ * - Provider-specific credential detection (not Anthropic-only)
+ */
+import type { AgentAdapter } from '../agent-adapter.js';
+import type { ProviderConfig } from '../provider-config.js';
+import type { ResolvedUserConfig, GooseProvider } from '../../config/user-config.js';
+/**
+ * Returns the provider config for the selected Goose provider.
+ */
+export declare function getProviderConfig(provider: GooseProvider): ProviderConfig;
+/**
+ * Strips ANSI escape codes from a string.
+ */
+export declare function stripAnsi(text: string): string;
+/**
+ * Extracts the final response from Goose's plain-text output.
+ *
+ * TODO: This heuristic needs validation against real Goose output from
+ * Prototype 1 (Section 12 of the design doc). The current implementation
+ * extracts the last contiguous block of non-empty lines, which is a
+ * reasonable starting point based on similar CLI agent output patterns.
+ *
+ * The parser should be refined once actual Goose headless output samples
+ * are captured. If the heuristic proves unreliable, the fallback is to
+ * return the full ANSI-stripped output (noisy but functional).
+ */
+export declare function extractFinalResponse(raw: string): string;
+/**
+ * Ensures a heredoc delimiter does not collide with the input content.
+ *
+ * If the default delimiter appears in the content, appends random hex
+ * suffixes until a unique delimiter is found. The content itself is
+ * never modified -- only the delimiter changes.
+ */
+export declare function escapeHeredoc(content: string): {
+    delimiter: string;
+};
+/**
+ * Creates a Goose agent adapter configured with the user's provider preferences.
+ *
+ * @param userConfig - Resolved user config. When undefined, uses defaults
+ *   (anthropic provider, default model). This enables --list-agents to work
+ *   without loading config.
+ */
+export declare function createGooseAdapter(userConfig?: ResolvedUserConfig): AgentAdapter;

package/dist/docker/adapters/goose.js

@@ -0,0 +1,250 @@
+/**
+ * Goose agent adapter for Docker Agent Mode.
+ *
+ * Configures a Docker container running Goose (by Block) with:
+ * - MCP server discovery via config.yaml (YAML, Goose extensions format)
+ * - System prompt injection via --instructions file
+ * - Multi-provider support (Anthropic, OpenAI, Google)
+ * - GOOSE_MODE=auto to skip all permission prompts
+ *
+ * Key differences from Claude Code adapter:
+ * - Config format is YAML (not JSON)
+ * - System prompt is file-based (not inline CLI flag)
+ * - No session continuity in batch mode (each turn is independent)
+ * - Output is plain text (no --output-format json)
+ * - Provider-specific credential detection (not Anthropic-only)
+ */
+import { randomBytes } from 'node:crypto';
+import { anthropicProvider, openaiProvider, googleProvider } from '../provider-config.js';
+import { buildSystemPrompt } from '../../session/prompts.js';
+import { resolveApiKeyForProvider } from '../../config/model-provider.js';
+import { buildResizePtyScript, buildCheckPtySizeScript, buildNetworkSection, buildPolicySection, buildAttributionSection, } from './shared-scripts.js';
+const GOOSE_IMAGE = 'ironcurtain-goose:latest';
+/** Default heredoc delimiter for shell commands. */
+const DEFAULT_HEREDOC_DELIMITER = 'IRONCURTAIN_EOF';
+// ─── Provider Helpers ────────────────────────────────────────
+/**
+ * Returns the provider config for the selected Goose provider.
+ */
+export function getProviderConfig(provider) {
+    switch (provider) {
+        case 'anthropic':
+            return anthropicProvider;
+        case 'openai':
+            return openaiProvider;
+        case 'google':
+            return googleProvider;
+    }
+}
+// ─── Response Parsing ────────────────────────────────────────
+/**
+ * Strips ANSI escape codes from a string.
+ */
+export function stripAnsi(text) {
+    // Matches common ANSI escape sequences: CSI (ESC[), OSC (ESC]), and simple ESC sequences
+    // eslint-disable-next-line no-control-regex -- ANSI escape codes are control characters by definition
+    return text.replace(/\x1b\[[0-9;]*[a-zA-Z]|\x1b\][^\x07]*\x07|\x1b[()][AB012]/g, '');
+}
+/**
+ * Extracts the final response from Goose's plain-text output.
+ *
+ * TODO: This heuristic needs validation against real Goose output from
+ * Prototype 1 (Section 12 of the design doc). The current implementation
+ * extracts the last contiguous block of non-empty lines, which is a
+ * reasonable starting point based on similar CLI agent output patterns.
+ *
+ * The parser should be refined once actual Goose headless output samples
+ * are captured. If the heuristic proves unreliable, the fallback is to
+ * return the full ANSI-stripped output (noisy but functional).
+ */
+export function extractFinalResponse(raw) {
+    const lines = raw.split('\n');
+    // Walk backwards from the end, collecting lines until we hit
+    // a blank line preceded by content (end of final block).
+    const result = [];
+    let foundContent = false;
+    for (let i = lines.length - 1; i >= 0; i--) {
+        if (lines[i].trim() === '') {
+            if (foundContent)
+                break;
+            continue;
+        }
+        foundContent = true;
+        result.unshift(lines[i]);
+    }
+    return result.length > 0 ? result.join('\n') : raw.trim();
+}
+// ─── Heredoc Escaping ────────────────────────────────────────
+/**
+ * Ensures a heredoc delimiter does not collide with the input content.
+ *
+ * If the default delimiter appears in the content, appends random hex
+ * suffixes until a unique delimiter is found. The content itself is
+ * never modified -- only the delimiter changes.
+ */
+export function escapeHeredoc(content) {
+    let delimiter = DEFAULT_HEREDOC_DELIMITER;
+    while (content.includes(delimiter)) {
+        const suffix = randomBytes(4).toString('hex');
+        delimiter = `${DEFAULT_HEREDOC_DELIMITER}_${suffix}`;
+    }
+    return { delimiter };
+}
+// ─── System Prompt ───────────────────────────────────────────
+function buildGooseDockerEnvironmentPrompt(context) {
+    return `## Docker Environment
+
+### Workspace (\`${context.workspaceDir}\`)
+This is your workspace inside the container. You have full access here.
+For local file operations inside ${context.workspaceDir}, use your built-in tools.
+
+### External Operations (MCP tools)
+Use the IronCurtain MCP extension for operations that require external access:
+- Network requests (HTTP fetches, web searches, API calls)
+- Git remote operations (clone, push, pull, fetch)
+- Reading files outside ${context.workspaceDir}
+
+After cloning a repo or writing files via MCP tools, use your built-in
+tools for subsequent file operations.
+
+${buildNetworkSection('the IronCurtain MCP tools')}
+${buildPolicySection('MCP tool call')}
+${buildAttributionSection()}`;
+}
+// ─── Orientation Scripts ─────────────────────────────────────
+function buildStartScript() {
+    return `#!/bin/bash
+# Set initial terminal size from host env vars
+if [ -n "$IRONCURTAIN_INITIAL_COLS" ] && [ -n "$IRONCURTAIN_INITIAL_ROWS" ]; then
+  stty cols "$IRONCURTAIN_INITIAL_COLS" rows "$IRONCURTAIN_INITIAL_ROWS" 2>/dev/null
+fi
+# Write system prompt to temp file for --instructions
+PROMPT_FILE=$(mktemp /tmp/goose-prompt-XXXXXX.md)
+trap 'rm -f "$PROMPT_FILE"' EXIT
+printf '%s' "$IRONCURTAIN_SYSTEM_PROMPT" > "$PROMPT_FILE"
+exec goose run -s -i "$PROMPT_FILE"
+`;
+}
+// ─── Adapter Factory ─────────────────────────────────────────
+/**
+ * Creates a Goose agent adapter configured with the user's provider preferences.
+ *
+ * @param userConfig - Resolved user config. When undefined, uses defaults
+ *   (anthropic provider, default model). This enables --list-agents to work
+ *   without loading config.
+ */
+export function createGooseAdapter(userConfig) {
+    const gooseProvider = userConfig?.gooseProvider ?? 'anthropic';
+    const gooseModel = userConfig?.gooseModel ?? 'claude-sonnet-4-20250514';
+    const credentialHelpText = `No API key found for Goose provider "${gooseProvider}". ` +
+        'Set the appropriate API key in your environment ' +
+        '(ANTHROPIC_API_KEY, OPENAI_API_KEY, or GOOGLE_API_KEY) ' +
+        'or via `ironcurtain config`.';
+    const adapter = {
+        id: 'goose',
+        displayName: 'Goose',
+        credentialHelpText,
+        // eslint-disable-next-line @typescript-eslint/require-await -- interface requires Promise return
+        async getImage() {
+            return GOOSE_IMAGE;
+        },
+        generateMcpConfig(socketPath) {
+            const isTcp = socketPath.includes(':');
+            const connectTarget = isTcp ? `TCP:${socketPath}` : `UNIX-CONNECT:${socketPath}`;
+            const yaml = [
+                'GOOSE_TELEMETRY_ENABLED: false',
+                'extensions:',
+                '  ironcurtain:',
+                '    name: IronCurtain Sandbox',
+                '    type: stdio',
+                '    enabled: true',
+                '    cmd: socat',
+                '    args:',
+                '      - STDIO',
+                `      - ${connectTarget}`,
+                '    timeout: 600',
+                '',
+            ].join('\n');
+            return [{ path: 'goose-config.yaml', content: yaml }];
+        },
+        generateOrientationFiles() {
+            return [
+                { path: 'start-goose.sh', content: buildStartScript(), mode: 0o755 },
+                { path: 'resize-pty.sh', content: buildResizePtyScript('goose'), mode: 0o755 },
+                { path: 'check-pty-size.sh', content: buildCheckPtySizeScript('goose'), mode: 0o755 },
+            ];
+        },
+        buildCommand(message, systemPrompt) {
+            const instructions = `${systemPrompt}\n\n---\n\nUser request:\n${message}`;
+            const { delimiter } = escapeHeredoc(instructions);
+            return [
+                '/bin/sh',
+                '-c',
+                `PROMPT_FILE=$(mktemp /tmp/goose-prompt-XXXXXX.md) && ` +
+                    `trap 'rm -f "$PROMPT_FILE"' EXIT && ` +
+                    `cat > "$PROMPT_FILE" << '${delimiter}'\n${instructions}\n${delimiter}\n` +
+                    `goose run --no-session -i "$PROMPT_FILE"`,
+            ];
+        },
+        buildSystemPrompt(context) {
+            const codeModePrompt = buildSystemPrompt(context.serverListings, context.hostSandboxDir);
+            const dockerPrompt = buildGooseDockerEnvironmentPrompt(context);
+            return `${codeModePrompt}\n${dockerPrompt}`;
+        },
+        // eslint-disable-next-line @typescript-eslint/no-unused-vars -- interface requires authKind parameter
+        getProviders(_authKind) {
+            // Goose uses exactly one provider based on user config.
+            // The authKind parameter is ignored because Goose does not support OAuth.
+            return [getProviderConfig(gooseProvider)];
+        },
+        buildEnv(_config, fakeKeys) {
+            const env = {
+                GOOSE_PROVIDER: gooseProvider,
+                GOOSE_MODEL: gooseModel,
+                GOOSE_MODE: 'auto',
+                GOOSE_MAX_TURNS: '200',
+                // Defensive TLS cert env vars for Rust-based Goose.
+                // Covers native-tls and rustls-native-certs backends.
+                SSL_CERT_FILE: '/etc/ssl/certs/ca-certificates.crt',
+                SSL_CERT_DIR: '/etc/ssl/certs',
+            };
+            const providerHost = getProviderConfig(gooseProvider).host;
+            const fakeKey = fakeKeys.get(providerHost);
+            if (!fakeKey) {
+                throw new Error(`No fake key generated for ${providerHost}`);
+            }
+            switch (gooseProvider) {
+                case 'anthropic':
+                    env.ANTHROPIC_API_KEY = fakeKey;
+                    break;
+                case 'openai':
+                    env.OPENAI_API_KEY = fakeKey;
+                    break;
+                case 'google':
+                    env.GOOGLE_API_KEY = fakeKey;
+                    break;
+            }
+            return env;
+        },
+        extractResponse(exitCode, stdout) {
+            const clean = stripAnsi(stdout);
+            if (exitCode !== 0) {
+                return { text: `Goose exited with code ${exitCode}.\n\nOutput:\n${clean.trim()}` };
+            }
+            const text = extractFinalResponse(clean);
+            return { text };
+        },
+        buildPtyCommand(_systemPrompt, ptySockPath, ptyPort) {
+            const listenArg = ptySockPath ? `UNIX-LISTEN:${ptySockPath},fork` : `TCP-LISTEN:${ptyPort},reuseaddr`;
+            return ['socat', listenArg, 'EXEC:/etc/ironcurtain/start-goose.sh,pty,setsid,ctty,stderr,rawer'];
+        },
+        detectCredential(config) {
+            const key = resolveApiKeyForProvider(gooseProvider, config.userConfig);
+            if (key)
+                return { kind: 'apikey', key };
+            return { kind: 'none' };
+        },
+    };
+    return adapter;
+}
+//# sourceMappingURL=goose.js.map

package/dist/docker/adapters/goose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose.js","sourceRoot":"","sources":["../../../src/docker/adapters/goose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM1C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,oDAAoD;AACpD,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAEpD,gEAAgE;AAEhE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,iBAAiB,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,gEAAgE;AAEhE;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,yFAAyF;IACzF,sGAAsG;IACtG,OAAO,IAAI,CAAC,OAAO,CAAC,2DAA2D,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE9B,6DAA6D;IAC7D,yDAAyD;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3B,IAAI,YAAY;gBAAE,MAAM;YACxB,SAAS;QACX,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,gEAAgE;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,SAAS,GAAG,yBAAyB,CAAC;IAE1C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,SAAS,GAAG,GAAG,yBAAyB,IAAI,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,gEAAgE;AAEhE,SAAS,iCAAiC,CAAC,OAA2B;IACpE,OAAO;;mBAEU,OAAO,CAAC,YAAY;;mCAEJ,OAAO,CAAC,YAAY;;;;;;0BAM7B,OAAO,CAAC,YAAY;;;;;EAK5C,mBAAmB,CAAC,2BAA2B,CAAC;EAChD,kBAAkB,CAAC,eAAe,CAAC;EACnC,uBAAuB,EAAE,EAAE,CAAC;AAC9B,CAAC;AAED,gEAAgE;AAEhE,SAAS,gBAAgB;IACvB,OAAO;;;;;;;;;;CAUR,CAAC;AACF,CAAC;AAED,gEAAgE;AAEhE;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA+B;IAChE,MAAM,aAAa,GAAkB,UAAU,EAAE,aAAa,IAAI,WAAW,CAAC;IAC9E,MAAM,UAAU,GAAW,UAAU,EAAE,UAAU,IAAI,0BAA0B,CAAC;IAEhF,MAAM,kBAAkB,GACtB,wCAAwC,aAAa,KAAK;QAC1D,kDAAkD;QAClD,yDAAyD;QACzD,8BAA8B,CAAC;IAEjC,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,OAAkB;QACtB,WAAW,EAAE,OAAO;QACpB,kBAAkB;QAElB,iGAAiG;QACjG,KAAK,CAAC,QAAQ;YACZ,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,iBAAiB,CAAC,UAAkB;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,gBAAgB,UAAU,EAAE,CAAC;YAEjF,MAAM,IAAI,GAAG;gBACX,gCAAgC;gBAChC,aAAa;gBACb,gBAAgB;gBAChB,+BAA+B;gBAC/B,iBAAiB;gBACjB,mBAAmB;gBACnB,gBAAgB;gBAChB,WAAW;gBACX,eAAe;gBACf,WAAW,aAAa,EAAE;gBAC1B,kBAAkB;gBAClB,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEb,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,wBAAwB;YACtB,OAAO;gBACL,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACpE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;gBAC9E,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;aACtF,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,OAAe,EAAE,YAAoB;YAChD,MAAM,YAAY,GAAG,GAAG,YAAY,6BAA6B,OAAO,EAAE,CAAC;YAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;YAElD,OAAO;gBACL,SAAS;gBACT,IAAI;gBACJ,uDAAuD;oBACrD,sCAAsC;oBACtC,4BAA4B,SAAS,MAAM,YAAY,KAAK,SAAS,IAAI;oBACzE,0CAA0C;aAC7C,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,OAA2B;YAC3C,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACzF,MAAM,YAAY,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO,GAAG,cAAc,KAAK,YAAY,EAAE,CAAC;QAC9C,CAAC;QAED,sGAAsG;QACtG,YAAY,CAAC,SAA8B;YACzC,wDAAwD;YACxD,0EAA0E;YAC1E,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,CAAC,OAA0B,EAAE,QAAqC;YACxE,MAAM,GAAG,GAA2B;gBAClC,cAAc,EAAE,aAAa;gBAC7B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,MAAM;gBAClB,eAAe,EAAE,KAAK;gBACtB,oDAAoD;gBACpD,sDAAsD;gBACtD,aAAa,EAAE,oCAAoC;gBACnD,YAAY,EAAE,gBAAgB;aAC/B,CAAC;YAEF,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,QAAQ,aAAa,EAAE,CAAC;gBACtB,KAAK,WAAW;oBACd,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC;oBAChC,MAAM;gBACR,KAAK,QAAQ;oBACX,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC;oBAC7B,MAAM;gBACR,KAAK,QAAQ;oBACX,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC;oBAC7B,MAAM;YACV,CAAC;YAED,OAAO,GAAG,CAAC;QACb,CAAC;QAED,eAAe,CAAC,QAAgB,EAAE,MAAc;YAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAEhC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,EAAE,IAAI,EAAE,0BAA0B,QAAQ,iBAAiB,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACrF,CAAC;YAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,eAAe,CACb,aAAqB,EACrB,WAA+B,EAC/B,OAA2B;YAE3B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,eAAe,WAAW,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,YAAY,CAAC;YAEtG,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,mEAAmE,CAAC,CAAC;QACnG,CAAC;QAED,gBAAgB,CAAC,MAAyB;YACxC,MAAM,GAAG,GAAG,wBAAwB,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/docker/adapters/shared-scripts.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Shared shell script generators and prompt sections used by multiple agent adapters.
+ *
+ * These are extracted to avoid duplication between the Claude Code and Goose adapters.
+ */
+/**
+ * Generates a resize-pty.sh script parameterized by the agent's process name.
+ * Called from the host via: docker exec <cid> /etc/ironcurtain/resize-pty.sh <cols> <rows>
+ */
+export declare function buildResizePtyScript(processName: string): string;
+/**
+ * Generates a check-pty-size.sh script parameterized by the agent's process name.
+ * Returns "rows cols" of the container PTY.
+ */
+export declare function buildCheckPtySizeScript(processName: string): string;
+/**
+ * Network restriction section. `toolReference` describes how to access network
+ * (e.g. "the sandbox tools via `execute_code`" or "the IronCurtain MCP tools").
+ */
+export declare function buildNetworkSection(toolReference: string): string;
+/**
+ * Policy enforcement section. `callType` describes what is being evaluated
+ * (e.g. "tool call through `execute_code`" or "MCP tool call").
+ */
+export declare function buildPolicySection(callType: string): string;
+/**
+ * Attribution section (identical for all agents).
+ */
+export declare function buildAttributionSection(): string;

package/dist/docker/adapters/shared-scripts.js

@@ -0,0 +1,80 @@
+/**
+ * Shared shell script generators and prompt sections used by multiple agent adapters.
+ *
+ * These are extracted to avoid duplication between the Claude Code and Goose adapters.
+ */
+// ─── PTY Shell Scripts ──────────────────────────────────────
+/**
+ * Generates a resize-pty.sh script parameterized by the agent's process name.
+ * Called from the host via: docker exec <cid> /etc/ironcurtain/resize-pty.sh <cols> <rows>
+ */
+export function buildResizePtyScript(processName) {
+    const varPrefix = processName.toUpperCase().replace(/-/g, '_');
+    return `#!/bin/bash
+# Called from the host via: docker exec <cid> /etc/ironcurtain/resize-pty.sh <cols> <rows>
+COLS=$1
+ROWS=$2
+
+${varPrefix}_PID=$(pgrep -x ${processName} | head -1)
+if [ -z "$${varPrefix}_PID" ]; then
+  echo "no-${processName}" >&2
+  exit 0
+fi
+
+PTS=$(readlink /proc/$${varPrefix}_PID/fd/0 2>/dev/null)
+if [ -z "$PTS" ] || ! [ -e "$PTS" ]; then
+  echo "no-pty pid=$${varPrefix}_PID pts=$PTS" >&2
+  exit 0
+fi
+
+stty -F "$PTS" cols "$COLS" rows "$ROWS" 2>/dev/null
+RC=$?
+kill -WINCH "$${varPrefix}_PID" 2>/dev/null
+echo "ok pid=$${varPrefix}_PID pts=$PTS stty=$RC \${COLS}x\${ROWS}" >&2
+`;
+}
+/**
+ * Generates a check-pty-size.sh script parameterized by the agent's process name.
+ * Returns "rows cols" of the container PTY.
+ */
+export function buildCheckPtySizeScript(processName) {
+    const varPrefix = processName.toUpperCase().replace(/-/g, '_');
+    return `#!/bin/bash
+# Returns "rows cols" of the container PTY
+${varPrefix}_PID=$(pgrep -x ${processName} | head -1)
+if [ -z "$${varPrefix}_PID" ]; then echo "0 0"; exit 0; fi
+PTS=$(readlink /proc/$${varPrefix}_PID/fd/0 2>/dev/null)
+if [ -z "$PTS" ] || ! [ -e "$PTS" ]; then echo "0 0"; exit 0; fi
+stty -F "$PTS" size 2>/dev/null || echo "0 0"
+`;
+}
+// ─── Shared Docker Environment Prompt Sections ──────────────
+/**
+ * Network restriction section. `toolReference` describes how to access network
+ * (e.g. "the sandbox tools via `execute_code`" or "the IronCurtain MCP tools").
+ */
+export function buildNetworkSection(toolReference) {
+    return `### Network
+The container has NO direct internet access. All HTTP requests and
+git operations MUST go through ${toolReference}.`;
+}
+/**
+ * Policy enforcement section. `callType` describes what is being evaluated
+ * (e.g. "tool call through `execute_code`" or "MCP tool call").
+ */
+export function buildPolicySection(callType) {
+    return `### Policy Enforcement
+Every ${callType} is evaluated against security policy rules:
+- **Allowed**: proceeds automatically
+- **Denied**: blocked -- do NOT retry denied operations
+- **Escalated**: requires human approval -- you will receive the result once approved`;
+}
+/**
+ * Attribution section (identical for all agents).
+ */
+export function buildAttributionSection() {
+    return `### Attribution
+When adding attribution lines (e.g. Co-Authored-By, "Generated with"), include
+"running under IronCurtain" alongside the tool name.`;
+}
+//# sourceMappingURL=shared-scripts.js.map

package/dist/docker/adapters/shared-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-scripts.js","sourceRoot":"","sources":["../../../src/docker/adapters/shared-scripts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO;;;;;EAKP,SAAS,mBAAmB,WAAW;YAC7B,SAAS;aACR,WAAW;;;;wBAIA,SAAS;;sBAEX,SAAS;;;;;;gBAMf,SAAS;gBACT,SAAS;CACxB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO;;EAEP,SAAS,mBAAmB,WAAW;YAC7B,SAAS;wBACG,SAAS;;;CAGhC,CAAC;AACF,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,OAAO;;iCAEwB,aAAa,GAAG,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO;QACD,QAAQ;;;sFAGsE,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;;qDAE4C,CAAC;AACtD,CAAC"}

package/dist/docker/agent-adapter.d.ts

@@ -8,6 +8,7 @@
 import type { IronCurtainConfig } from '../config/types.js';
 import type { ProviderConfig } from './provider-config.js';
 import type { ServerListing } from '../session/prompts.js';
+import type { AuthMethod } from './oauth-credentials.js';
 /**
  * The workspace directory inside Docker containers. The host sandbox
  * directory is bind-mounted at this path. Used for path rewriting
@@ -134,4 +135,15 @@ export interface AgentAdapter {
      * @param ptyPort - the TCP port for the PTY listener (macOS), or undefined for UDS mode
      */
     buildPtyCommand?(systemPrompt: string, ptySockPath: string | undefined, ptyPort: number | undefined): readonly string[];
+    /**
+     * Detects available credentials for this agent.
+     * When not implemented, prepareDockerInfrastructure() falls back to
+     * detectAuthMethod() (Anthropic OAuth + API key detection).
+     */
+    detectCredential?(config: IronCurtainConfig): AuthMethod;
+    /**
+     * Error message to show when no credentials are detected.
+     * When not set, the default Anthropic-oriented message is used.
+     */
+    readonly credentialHelpText?: string;
 }

package/dist/docker/agent-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-adapter.js","sourceRoot":"","sources":["../../src/docker/agent-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC"}
+{"version":3,"file":"agent-adapter.js","sourceRoot":"","sources":["../../src/docker/agent-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC"}

package/dist/docker/agent-registry.d.ts

@@ -5,11 +5,16 @@
  * The registry is a simple Map -- no dynamic loading or plugin system.
  */
 import type { AgentAdapter, AgentId } from './agent-adapter.js';
+import type { ResolvedUserConfig } from '../config/user-config.js';
 export declare function registerAgent(adapter: AgentAdapter): void;
 export declare function getAgent(id: AgentId): AgentAdapter;
 export declare function listAgents(): readonly AgentAdapter[];
 /**
  * Ensures all built-in agent adapters are registered. Safe to call
  * multiple times -- skips adapters that are already registered.
+ *
+ * @param userConfig - Resolved user config. When provided, the Goose adapter
+ *   uses it for provider selection. When undefined, defaults apply (anthropic
+ *   provider, default model). This allows --list-agents to work without config.
  */
-export declare function registerBuiltinAdapters(): Promise<void>;
+export declare function registerBuiltinAdapters(userConfig?: ResolvedUserConfig): Promise<void>;

package/dist/docker/agent-registry.js

@@ -25,11 +25,20 @@ export function listAgents() {
 /**
  * Ensures all built-in agent adapters are registered. Safe to call
  * multiple times -- skips adapters that are already registered.
+ *
+ * @param userConfig - Resolved user config. When provided, the Goose adapter
+ *   uses it for provider selection. When undefined, defaults apply (anthropic
+ *   provider, default model). This allows --list-agents to work without config.
  */
-export async function registerBuiltinAdapters() {
+export async function registerBuiltinAdapters(userConfig) {
     const { claudeCodeAdapter } = await import('./adapters/claude-code.js');
     if (!registry.has(claudeCodeAdapter.id)) {
         registry.set(claudeCodeAdapter.id, claudeCodeAdapter);
     }
+    if (!registry.has('goose')) {
+        const { createGooseAdapter } = await import('./adapters/goose.js');
+        const gooseAdapter = createGooseAdapter(userConfig);
+        registry.set(gooseAdapter.id, gooseAdapter);
+    }
 }
 //# sourceMappingURL=agent-registry.js.map

package/dist/docker/agent-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-registry.js","sourceRoot":"","sources":["../../src/docker/agent-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,MAAM,UAAU,aAAa,CAAC,OAAqB;IACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAW;IAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}
+{"version":3,"file":"agent-registry.js","sourceRoot":"","sources":["../../src/docker/agent-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,MAAM,UAAU,aAAa,CAAC,OAAqB;IACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAW;IAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAA+B;IAC3E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAkB,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/docker/docker-agent-session.d.ts

@@ -35,6 +35,7 @@ export interface DockerAgentSessionDeps {
     readonly useTcp?: boolean;
     readonly onEscalation?: (request: EscalationRequest) => void;
     readonly onEscalationExpired?: () => void;
+    readonly onEscalationResolved?: (escalationId: string, decision: 'approved' | 'denied') => void;
     readonly onDiagnostic?: (event: DiagnosticEvent) => void;
     /**
      * When set, proxies are already started, orientation is built, and
@@ -78,6 +79,7 @@ export declare class DockerAgentSession implements Session {
     private cumulativeCostUsd;
     private readonly onEscalation?;
     private readonly onEscalationExpired?;
+    private readonly onEscalationResolved?;
     private readonly onDiagnostic?;
     private readonly preBuiltInfrastructure?;
     constructor(deps: DockerAgentSessionDeps);
@@ -109,29 +111,4 @@ export declare class DockerAgentSession implements Session {
      */
     private checkInternalNetworkConnectivity;
     private writeUserContext;
-    /**
-     * Ensures the Docker image exists and is up-to-date, building it
-     * (and the base image) if needed.
-     *
-     * Staleness detection uses a content hash of all build inputs
-     * (Dockerfiles, entrypoint scripts, CA certificate) stored as
-     * Docker image labels.
-     */
-    private ensureImage;
-    /**
-     * Ensures the base image exists and is up-to-date.
-     * Returns true if the base image was (re)built.
-     */
-    private ensureBaseImage;
-    /**
-     * Checks if an image needs (re)building by comparing the stored
-     * build hash label against the expected hash.
-     */
-    private isImageStale;
-    /**
-     * Computes a SHA-256 content hash of all files in the docker directory
-     * plus the CA certificate. This captures changes to Dockerfiles,
-     * entrypoint scripts, and the CA cert.
-     */
-    private computeBuildHash;
 }