@vibesdotdev/integrations-grok 0.0.0-stage → 1.0.0-rc.1

package/dist/ai/providers/grok/grok-build.transport.descriptor.js

@@ -0,0 +1,11 @@
+import { createAITransportDescriptor } from '@vibesdotdev/ai/transports/schemas/descriptor';
+export default createAITransportDescriptor({
+    id: 'grok-build',
+    name: 'Grok Build subscription',
+    description: 'Native Grok execution with isolated provider-managed login and verified subscription-only routing.',
+    scopes: ['consumer'],
+    bidirectional: false,
+    cancellable: true,
+    tags: ['grok', 'subscription', 'consumer-only']
+});
+//# sourceMappingURL=grok-build.transport.descriptor.js.map

package/dist/ai/providers/grok/grok-build.transport.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-build.transport.descriptor.js","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-build.transport.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAE5F,eAAe,2BAA2B,CAAC;IAC1C,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACV,oGAAoG;IACrG,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE,IAAI;IACjB,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC;CAC/C,CAAC,CAAC"}

package/dist/ai/providers/grok/grok-build.transport.impl.consumer.d.ts

@@ -0,0 +1,23 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { AITransportInterface, TransportCallOptions } from '@vibesdotdev/ai/transports/interfaces';
+import type { WireRequest, WireResponseChunk } from '@vibesdotdev/ai/specs/interfaces';
+export declare class GrokBuildTransport implements AITransportInterface {
+    private readonly runtime;
+    readonly descriptor: {
+        id: string;
+        kind: "ai/transport";
+        name: string;
+        description: string;
+        scopes: ("cloud" | "consumer")[];
+        bidirectional: boolean;
+        cancellable: boolean;
+        enabled: boolean;
+        tags?: string[] | undefined;
+    };
+    constructor(runtime: RuntimeRef);
+    send(request: WireRequest, options: TransportCallOptions): AsyncIterable<WireResponseChunk>;
+    /** One generation: its chunks, then the outcome that tells `send` whether it failed. */
+    private generate;
+    private run;
+}
+//# sourceMappingURL=grok-build.transport.impl.consumer.d.ts.map

package/dist/ai/providers/grok/grok-build.transport.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-build.transport.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-build.transport.impl.consumer.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EACX,oBAAoB,EACpB,oBAAoB,EACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAwCvF,qBAAa,kBAAmB,YAAW,oBAAoB;IAElD,OAAO,CAAC,QAAQ,CAAC,OAAO;IADpC,QAAQ,CAAC,UAAU;;;;;;;;;;MAAc;gBACJ,OAAO,EAAE,UAAU;IAEzC,IAAI,CACV,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,oBAAoB,GAC3B,aAAa,CAAC,iBAAiB,CAAC;IAQnC,wFAAwF;YACzE,QAAQ;YAUT,GAAG;CAkEjB"}

package/dist/ai/providers/grok/grok-build.transport.impl.consumer.js

@@ -0,0 +1,115 @@
+import { StructuredRefusalSchema } from "../../../schemas/refusal.js";
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+import descriptor from "./grok-build.transport.descriptor.js";
+import { GrokBuildRequestSchema } from "./grok-build.request.js";
+import { withGrokPromptFile } from "./grok-prompt-file.js";
+import { describeGrokFailure, grokRefusal, peerTextCause } from "./grok-refusals.js";
+import { carriesSandboxRefusal } from "./grok-sandbox-signal.js";
+import { checkGrokSubscription, grokSubscriptionError, prepareGrokSubscription, runGrokSubscription } from "./grok-subscription.js";
+import { attempt } from "../../../outcome.js";
+/**
+ * Grok Build reports a refused request on its STRUCTURED channel:
+ * `--output-format json` prints `{"type":"error","message":"…"}` on stdout and
+ * exits non-zero. That message is the difference between "the subscription is
+ * broken" and "you asked for a model this subscription does not have" —
+ * measured 2026-09-06, a connection whose `defaultModel` was
+ * `grok-composer-2.5-fast` produced `Couldn't set model …: "unknown model id"`.
+ *
+ * Only this channel is read, and its text is the peer's: it is capped and
+ * stripped and rides only as the refusal's `cause`, never in its message.
+ * Raw stdout and stderr stay inside the owner, as every other subscription
+ * operation's does.
+ */
+function readStructuredRefusal(stdout) {
+    const trimmed = stdout.trim();
+    if (!trimmed.startsWith('{'))
+        return null;
+    const decoded = attempt(() => JSON.parse(trimmed));
+    // Output that opens like a refusal but is not JSON is not a structured one:
+    // the caller reports the generic failure instead.
+    if (!decoded.ok)
+        return null;
+    const refusal = StructuredRefusalSchema.safeParse(decoded.value);
+    return refusal.success ? refusal.data.message : null;
+}
+export class GrokBuildTransport {
+    runtime;
+    descriptor = descriptor;
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    async *send(request, options) {
+        const outcome = yield* this.generate(request, options);
+        // The owner reports what failed in its own words: a typed refusal as it is,
+        // anything else as the fixed unavailability sentence.
+        if (!outcome.ok)
+            yield { kind: 'error', error: describeGrokFailure(outcome) };
+        yield { kind: 'end' };
+    }
+    /** One generation: its chunks, then the outcome that tells `send` whether it failed. */
+    async *generate(request, options) {
+        const outcome = await this.run(request, options);
+        if (!outcome.ok)
+            return outcome;
+        yield { kind: 'bytes', data: new TextEncoder().encode(outcome.value) };
+        return { ok: true, value: undefined };
+    }
+    async run(request, options) {
+        try {
+            const body = GrokBuildRequestSchema.safeParse(request.body);
+            if (!body.success)
+                throw grokSubscriptionError('INVALID_REQUEST', 'Grok Build requires a text prompt and an optional model');
+            if (options.signal?.aborted)
+                throw grokSubscriptionError('AUTH_CANCELLED', 'Grok operation cancelled');
+            if (options.auth && options.auth.kind !== 'none')
+                throw grokRefusal('credentials-not-accepted');
+            const session = await prepareGrokSubscription(this.runtime);
+            if (!(await checkGrokSubscription(session, 5_000)))
+                throw grokSubscriptionError('SUBSCRIPTION_REQUIRED', 'Sign in to the Grok subscription connection on this device before generating');
+            const result = await withGrokPromptFile(session, body.data.prompt, (promptFile) => {
+                // The prompt is in the file: nothing the caller wrote is an argument.
+                const args = [
+                    '--prompt-file',
+                    promptFile,
+                    '--output-format',
+                    'json',
+                    '--no-alt-screen',
+                    '--no-plan',
+                    '--no-subagents',
+                    '--disable-web-search',
+                    '--max-turns',
+                    '1',
+                    '--verbatim',
+                    '--tools',
+                    '',
+                    '--deny',
+                    'MCPTool',
+                    '--permission-mode',
+                    'dontAsk',
+                    '--sandbox',
+                    'read-only'
+                ];
+                if (body.data.model)
+                    args.push('--model', body.data.model);
+                return runGrokSubscription(session, args, options.timeoutMs ?? 60_000, options.signal);
+            });
+            if (result.timedOut)
+                throw grokSubscriptionError('GENERATION_TIMEOUT', 'Grok subscription generation timed out');
+            if (result.exitCode !== 0) {
+                // Grok's own refusal to run unprotected, by its fixed marker: stderr's text is never kept.
+                if (carriesSandboxRefusal(result.stderr)) {
+                    throw grokRefusal('sandbox-unavailable', { details: { stage: 'run', exitCode: result.exitCode } });
+                }
+                const refusal = readStructuredRefusal(result.stdout);
+                if (refusal !== null)
+                    throw grokRefusal('grok-build-refused', { cause: peerTextCause(refusal) });
+                throw grokSubscriptionError('GENERATION_FAILED', 'Grok subscription generation failed; verify the subscription connection');
+            }
+            return { ok: true, value: result.stdout };
+        }
+        catch (cause) {
+            return { ok: false, cause: CaughtFailureSchema.parse(cause) };
+        }
+    }
+}
+//# sourceMappingURL=grok-build.transport.impl.consumer.js.map

package/dist/ai/providers/grok/grok-build.transport.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-build.transport.impl.consumer.js","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-build.transport.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAmB,MAAM,qBAAqB,CAAC;AAM3E,OAAO,UAAU,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAgB,MAAM,qBAAqB,CAAC;AAE5D;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,4EAA4E;IAC5E,kDAAkD;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAID,MAAM,OAAO,kBAAkB;IAED;IADpB,UAAU,GAAG,UAAU,CAAC;IACjC,YAA6B,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAEpD,KAAK,CAAC,CAAC,IAAI,CACV,OAAoB,EACpB,OAA6B;QAE7B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,4EAA4E;QAC5E,sDAAsD;QACtD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,wFAAwF;IAChF,KAAK,CAAC,CAAC,QAAQ,CACtB,OAAoB,EACpB,OAA6B;QAE7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,OAAoB,EAAE,OAA6B;QACpE,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,OAAO;gBAChB,MAAM,qBAAqB,CAC1B,iBAAiB,EACjB,yDAAyD,CACzD,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAC1B,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;gBAC/C,MAAM,WAAW,CAAC,0BAA0B,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACjD,MAAM,qBAAqB,CAC1B,uBAAuB,EACvB,8EAA8E,CAC9E,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE;gBACjF,sEAAsE;gBACtE,MAAM,IAAI,GAAG;oBACZ,eAAe;oBACf,UAAU;oBACV,iBAAiB;oBACjB,MAAM;oBACN,iBAAiB;oBACjB,WAAW;oBACX,gBAAgB;oBAChB,sBAAsB;oBACtB,aAAa;oBACb,GAAG;oBACH,YAAY;oBACZ,SAAS;oBACT,EAAE;oBACF,QAAQ;oBACR,SAAS;oBACT,mBAAmB;oBACnB,SAAS;oBACT,WAAW;oBACX,WAAW;iBACX,CAAC;gBACF,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ;gBAClB,MAAM,qBAAqB,CAC1B,oBAAoB,EACpB,wCAAwC,CACxC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC3B,2FAA2F;gBAC3F,IAAI,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1C,MAAM,WAAW,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACpG,CAAC;gBACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,OAAO,KAAK,IAAI;oBAAE,MAAM,WAAW,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjG,MAAM,qBAAqB,CAC1B,mBAAmB,EACnB,yEAAyE,CACzE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,CAAC;IACF,CAAC;CACD"}

package/dist/ai/providers/grok/grok-prompt-file.d.ts

@@ -0,0 +1,16 @@
+import { type GrokSubscriptionSession } from './grok-subscription.ts';
+/**
+ * Hand a prompt to Grok Build as a private file, never as an argument: argv is
+ * visible to every local user (`ps`), and a prompt that starts with `-` would
+ * be read as an option. The file is owner-only, lives in the dedicated profile,
+ * has a name nothing the caller supplied can influence, and is removed when
+ * `use` ends however it ends.
+ *
+ * A host whose file adapter cannot write an owner-only file fails closed
+ * (`prompt-file-unavailable`): the prompt is never put on the command line
+ * instead. A file that cannot be removed fails the call
+ * (`prompt-file-cleanup-failed`), because a prompt left on disk is the leak
+ * this exists to prevent.
+ */
+export declare function withGrokPromptFile<T>(session: GrokSubscriptionSession, prompt: string, use: (path: string) => Promise<T>): Promise<T>;
+//# sourceMappingURL=grok-prompt-file.d.ts.map

package/dist/ai/providers/grok/grok-prompt-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-prompt-file.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-prompt-file.ts"],"names":[],"mappings":"AAGA,OAAO,EAAyB,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAK7F;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACzC,OAAO,EAAE,uBAAuB,EAChC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC,CAmBZ"}

package/dist/ai/providers/grok/grok-prompt-file.js

@@ -0,0 +1,43 @@
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { asError, settle } from "../../../outcome.js";
+import { grokRefusal } from "./grok-refusals.js";
+import { resolveHostFilesystem } from "./grok-subscription.js";
+/** The directory, inside the dedicated profile, that holds a prompt for the length of one run. */
+const PROMPT_DIRECTORY = 'prompts';
+/**
+ * Hand a prompt to Grok Build as a private file, never as an argument: argv is
+ * visible to every local user (`ps`), and a prompt that starts with `-` would
+ * be read as an option. The file is owner-only, lives in the dedicated profile,
+ * has a name nothing the caller supplied can influence, and is removed when
+ * `use` ends however it ends.
+ *
+ * A host whose file adapter cannot write an owner-only file fails closed
+ * (`prompt-file-unavailable`): the prompt is never put on the command line
+ * instead. A file that cannot be removed fails the call
+ * (`prompt-file-cleanup-failed`), because a prompt left on disk is the leak
+ * this exists to prevent.
+ */
+export async function withGrokPromptFile(session, prompt, use) {
+    const filesystem = await resolveHostFilesystem(session, 'write');
+    if (!filesystem?.writeFilePrivate)
+        throw grokRefusal('prompt-file-unavailable');
+    const writePrivate = filesystem.writeFilePrivate.bind(filesystem);
+    const paths = await getRuntimePath(session.runtime);
+    const directory = paths.join(session.home, PROMPT_DIRECTORY);
+    const path = paths.join(directory, `${crypto.randomUUID()}.txt`);
+    // Owner-only, like the file inside it.
+    await filesystem.mkdir(directory, { recursive: true, mode: 0o700 });
+    const written = await settle(() => writePrivate(path, prompt, 'utf8'));
+    // Nothing was published, so there is nothing to remove.
+    if (!written.ok)
+        throw asError(written.cause);
+    const used = await settle(() => use(path));
+    const removed = await settle(() => filesystem.remove(path));
+    if (!removed.ok) {
+        throw grokRefusal('prompt-file-cleanup-failed', { cause: !used.ok ? used.cause : removed.cause });
+    }
+    if (!used.ok)
+        throw asError(used.cause);
+    return used.value;
+}
+//# sourceMappingURL=grok-prompt-file.js.map

package/dist/ai/providers/grok/grok-prompt-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-prompt-file.js","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-prompt-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAgC,MAAM,wBAAwB,CAAC;AAE7F,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAgC,EAChC,MAAc,EACd,GAAiC;IAEjC,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,EAAE,gBAAgB;QAAE,MAAM,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,uCAAuC;IACvC,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,wDAAwD;IACxD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,WAAW,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC;AACnB,CAAC"}

package/dist/ai/providers/grok/grok-refusals.d.ts

@@ -0,0 +1,149 @@
+/**
+ * Every typed refusal of the Grok agent, request and connection paths.
+ *
+ * One fixed message per reason. Text the child, the HTTP peer or the caller's
+ * request supplied never enters a message or `details`: it rides only in a
+ * bounded `cause`, which the logger scrubs and no projection prints.
+ */
+import { CapabilityError, type CapabilityErrorDetails, type CaughtFailure } from '@vibesdotdev/kernel';
+import type { Failure } from '../../../outcome.ts';
+declare const REFUSALS: {
+    readonly 'sign-in-required': {
+        readonly code: "AUTH_REQUIRED";
+        readonly retryable: false;
+        readonly message: "Sign in to the Grok subscription connection on this device. Run: vibes dev external grok login";
+    };
+    readonly 'agent-connect-failed': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: true;
+        readonly message: "The Grok agent session could not be started.";
+    };
+    readonly 'sandbox-unavailable': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "Grok refused to start because its read-only sandbox cannot be applied on this host; Grok never runs without it.";
+    };
+    readonly 'agent-request-failed': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent answered a request with an error.";
+    };
+    readonly 'agent-closed': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: true;
+        readonly message: "The Grok agent session ended before the turn finished.";
+    };
+    readonly 'agent-line-too-long': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent wrote a line longer than the declared maximum.";
+    };
+    readonly 'agent-record-invalid': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent sent output this integration cannot read.";
+    };
+    readonly 'agent-output-too-large': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent produced more output than the declared maximum.";
+    };
+    readonly 'agent-turn-timeout': {
+        readonly code: "TIMEOUT";
+        readonly retryable: true;
+        readonly message: "The Grok agent did not finish the turn within the declared deadline.";
+    };
+    readonly 'generation-cancelled': {
+        readonly code: "CANCELLED";
+        readonly retryable: false;
+        readonly message: "The Grok generation was cancelled by its caller.";
+    };
+    readonly 'agent-session-missing': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent did not open a session.";
+    };
+    readonly 'agent-session-failed': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The Grok agent session failed.";
+    };
+    readonly 'agent-permission-refused': {
+        readonly code: "PERMISSION_DENIED";
+        readonly retryable: false;
+        readonly message: "The Grok agent asked for a permission this integration does not grant, so the turn was stopped.";
+    };
+    readonly 'unsupported-content': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok text session cannot carry images, tool calls or tool results, so the request was refused instead of dropping them.";
+    };
+    readonly 'unsupported-modality': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok text session only encodes text requests.";
+    };
+    readonly 'invalid-request': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok text request is not a readable list of role and content messages.";
+    };
+    readonly 'request-too-large': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok text request is larger than the declared maximum.";
+    };
+    readonly 'credentials-not-accepted': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok subscription transport does not accept API credentials.";
+    };
+    readonly 'invalid-auth-method': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok connection authMethod must be grok-cli or api-key.";
+    };
+    readonly 'invalid-connection': {
+        readonly code: "INVALID_INPUT";
+        readonly retryable: false;
+        readonly message: "The Grok connection configuration is not valid.";
+    };
+    readonly 'grok-build-refused': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "Grok Build refused the request.";
+    };
+    readonly 'empty-assistant-content': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "Grok Build wrote no assistant content.";
+    };
+    readonly 'prompt-file-unavailable': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "No private file adapter on this host can hand the prompt to Grok Build, and the prompt is never placed on the command line.";
+    };
+    readonly 'prompt-file-cleanup-failed': {
+        readonly code: "UNAVAILABLE";
+        readonly retryable: false;
+        readonly message: "The prompt file handed to Grok Build could not be removed.";
+    };
+};
+export type GrokRefusalReason = keyof typeof REFUSALS;
+/** A typed refusal with its reason's fixed message; `details` are the caller's bounded facts and `cause` the underlying failure. */
+export declare function grokRefusal(reason: GrokRefusalReason, extra?: {
+    readonly details?: CapabilityErrorDetails;
+    readonly cause?: unknown;
+}): CapabilityError;
+/** Whether `failure` is one of this package's own refusals (its message is fixed and safe to report as it is). */
+export declare function isGrokRefusal(failure: CaughtFailure): failure is CapabilityError;
+/**
+ * The owner's report of a failed operation: its own refusal (a subscription
+ * refusal or a Grok one) as it is, anything else as the fixed unavailability
+ * sentence, because the underlying diagnostic can carry configuration values.
+ */
+export declare function describeGrokFailure(failure: Failure): CapabilityError;
+/** Text a peer wrote, reduced to a bounded, control-stripped excerpt, as a cause that carries nothing else. */
+export declare function peerTextCause(text: string): Error;
+export {};
+//# sourceMappingURL=grok-refusals.d.ts.map

package/dist/ai/providers/grok/grok-refusals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-refusals.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-refusals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,eAAe,EAGf,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyHoH,CAAC;AAEnI,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,QAAQ,CAAC;AAEtD,oIAAoI;AACpI,wBAAgB,WAAW,CAC1B,MAAM,EAAE,iBAAiB,EACzB,KAAK,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GACjF,eAAe,CAQjB;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,IAAI,eAAe,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,CAErE;AAED,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAEjD"}

package/dist/ai/providers/grok/grok-refusals.js

@@ -0,0 +1,159 @@
+/**
+ * Every typed refusal of the Grok agent, request and connection paths.
+ *
+ * One fixed message per reason. Text the child, the HTTP peer or the caller's
+ * request supplied never enters a message or `details`: it rides only in a
+ * bounded `cause`, which the logger scrubs and no projection prints.
+ */
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { boundedExcerpt } from '@vibesdotdev/external/jsonrpc/errors';
+import { describeGrokSubscriptionFailure, GROK_SUBSCRIPTION_LOGIN_COMMAND } from "./grok-subscription.js";
+const REFUSALS = {
+    'sign-in-required': {
+        code: 'AUTH_REQUIRED',
+        retryable: false,
+        message: `Sign in to the Grok subscription connection on this device. Run: ${GROK_SUBSCRIPTION_LOGIN_COMMAND}`
+    },
+    'agent-connect-failed': {
+        code: 'UNAVAILABLE',
+        retryable: true,
+        message: 'The Grok agent session could not be started.'
+    },
+    'sandbox-unavailable': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'Grok refused to start because its read-only sandbox cannot be applied on this host; Grok never runs without it.'
+    },
+    'agent-request-failed': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent answered a request with an error.'
+    },
+    'agent-closed': {
+        code: 'UNAVAILABLE',
+        retryable: true,
+        message: 'The Grok agent session ended before the turn finished.'
+    },
+    'agent-line-too-long': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent wrote a line longer than the declared maximum.'
+    },
+    'agent-record-invalid': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent sent output this integration cannot read.'
+    },
+    'agent-output-too-large': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent produced more output than the declared maximum.'
+    },
+    'agent-turn-timeout': {
+        code: 'TIMEOUT',
+        retryable: true,
+        message: 'The Grok agent did not finish the turn within the declared deadline.'
+    },
+    'generation-cancelled': {
+        code: 'CANCELLED',
+        retryable: false,
+        message: 'The Grok generation was cancelled by its caller.'
+    },
+    'agent-session-missing': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent did not open a session.'
+    },
+    'agent-session-failed': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The Grok agent session failed.'
+    },
+    'agent-permission-refused': {
+        code: 'PERMISSION_DENIED',
+        retryable: false,
+        message: 'The Grok agent asked for a permission this integration does not grant, so the turn was stopped.'
+    },
+    'unsupported-content': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok text session cannot carry images, tool calls or tool results, so the request was refused instead of dropping them.'
+    },
+    'unsupported-modality': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok text session only encodes text requests.'
+    },
+    'invalid-request': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok text request is not a readable list of role and content messages.'
+    },
+    'request-too-large': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok text request is larger than the declared maximum.'
+    },
+    'credentials-not-accepted': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok subscription transport does not accept API credentials.'
+    },
+    'invalid-auth-method': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok connection authMethod must be grok-cli or api-key.'
+    },
+    'invalid-connection': {
+        code: 'INVALID_INPUT',
+        retryable: false,
+        message: 'The Grok connection configuration is not valid.'
+    },
+    'grok-build-refused': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'Grok Build refused the request.'
+    },
+    'empty-assistant-content': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'Grok Build wrote no assistant content.'
+    },
+    'prompt-file-unavailable': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'No private file adapter on this host can hand the prompt to Grok Build, and the prompt is never placed on the command line.'
+    },
+    'prompt-file-cleanup-failed': {
+        code: 'UNAVAILABLE',
+        retryable: false,
+        message: 'The prompt file handed to Grok Build could not be removed.'
+    }
+};
+/** A typed refusal with its reason's fixed message; `details` are the caller's bounded facts and `cause` the underlying failure. */
+export function grokRefusal(reason, extra = {}) {
+    const refusal = REFUSALS[reason];
+    return new CapabilityError(refusal.message, refusal.code, {
+        reason,
+        retryable: refusal.retryable,
+        details: extra.details,
+        cause: extra.cause
+    });
+}
+/** Whether `failure` is one of this package's own refusals (its message is fixed and safe to report as it is). */
+export function isGrokRefusal(failure) {
+    return isCapabilityError(failure) && Object.hasOwn(REFUSALS, failure.reason);
+}
+/**
+ * The owner's report of a failed operation: its own refusal (a subscription
+ * refusal or a Grok one) as it is, anything else as the fixed unavailability
+ * sentence, because the underlying diagnostic can carry configuration values.
+ */
+export function describeGrokFailure(failure) {
+    return isGrokRefusal(failure.cause) ? failure.cause : describeGrokSubscriptionFailure(failure).error;
+}
+/** Text a peer wrote, reduced to a bounded, control-stripped excerpt, as a cause that carries nothing else. */
+export function peerTextCause(text) {
+    return new Error(boundedExcerpt(text));
+}
+//# sourceMappingURL=grok-refusals.js.map

package/dist/ai/providers/grok/grok-refusals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-refusals.js","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-refusals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,eAAe,EACf,iBAAiB,EAIjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAEtE,OAAO,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAE1G,MAAM,QAAQ,GAAG;IAChB,kBAAkB,EAAE;QACnB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,oEAAoE,+BAA+B,EAAE;KAC9G;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,8CAA8C;KACvD;IACD,qBAAqB,EAAE;QACtB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,iHAAiH;KAC1H;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,kDAAkD;KAC3D;IACD,cAAc,EAAE;QACf,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,wDAAwD;KACjE;IACD,qBAAqB,EAAE;QACtB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,+DAA+D;KACxE;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,0DAA0D;KACnE;IACD,wBAAwB,EAAE;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,gEAAgE;KACzE;IACD,oBAAoB,EAAE;QACrB,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,sEAAsE;KAC/E;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,kDAAkD;KAC3D;IACD,uBAAuB,EAAE;QACxB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,wCAAwC;KACjD;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,gCAAgC;KACzC;IACD,0BAA0B,EAAE;QAC3B,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,iGAAiG;KAC1G;IACD,qBAAqB,EAAE;QACtB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,6HAA6H;KACtI;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,mDAAmD;KAC5D;IACD,iBAAiB,EAAE;QAClB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,4EAA4E;KACrF;IACD,mBAAmB,EAAE;QACpB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,4DAA4D;KACrE;IACD,0BAA0B,EAAE;QAC3B,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,kEAAkE;KAC3E;IACD,qBAAqB,EAAE;QACtB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,6DAA6D;KACtE;IACD,oBAAoB,EAAE;QACrB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,iDAAiD;KAC1D;IACD,oBAAoB,EAAE;QACrB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,iCAAiC;KAC1C;IACD,yBAAyB,EAAE;QAC1B,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,wCAAwC;KACjD;IACD,yBAAyB,EAAE;QAC1B,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,6HAA6H;KACtI;IACD,4BAA4B,EAAE;QAC7B,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,4DAA4D;KACrE;CACgI,CAAC;AAInI,oIAAoI;AACpI,MAAM,UAAU,WAAW,CAC1B,MAAyB,EACzB,QAAiF,EAAE;IAEnF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACzD,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;KAClB,CAAC,CAAC;AACJ,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IACnD,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;AACtG,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/ai/providers/grok/grok-sandbox-signal.d.ts

@@ -0,0 +1,30 @@
+/**
+ * How Grok says it cannot apply the sandbox it was asked for. Measured on grok
+ * 1.0.47 for `agent stdio` and for `--prompt-file` runs, with a sandbox that
+ * cannot be applied (a symlinked `/var/run/docker.sock`) and with one that does
+ * not exist: exit code 1, nothing on stdout, and on stderr a `warning:` line with
+ * the cause followed by one fixed `error:` sentence ending in this marker. The
+ * marker is a constant of the binary; the cause line varies and is never read.
+ * Exit code 1 alone is not the signal (an unrelated failure also exits 1).
+ */
+export declare const GROK_SANDBOX_REFUSAL_MARKER = "Refusing to start with its protections missing.";
+/** Whether `text` (a run's captured stderr) carries Grok's sandbox refusal. */
+export declare function carriesSandboxRefusal(text: string): boolean;
+/** Latches once the marker has been seen in a stream, holding only a short tail so the marker is found across chunk boundaries. */
+export declare class SandboxMarkerWatch {
+    #private;
+    get seen(): boolean;
+    push(text: string): void;
+}
+/**
+ * Watch a child's stderr for the sandbox refusal without taking it from the
+ * client that drains it: the stream is teed, `forClient` goes on to the client and
+ * the other branch is read here, in constant memory. `done` settles when the
+ * watched branch ends or fails (a failed read just ends the watch).
+ */
+export interface TappedStderr {
+    readonly forClient: ReadableStream<Uint8Array> | null;
+    readonly done: Promise<void>;
+}
+export declare function tapSandboxMarker(stderr: ReadableStream<Uint8Array> | null, watch: SandboxMarkerWatch): TappedStderr;
+//# sourceMappingURL=grok-sandbox-signal.d.ts.map

package/dist/ai/providers/grok/grok-sandbox-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-sandbox-signal.d.ts","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-sandbox-signal.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,oDAAoD,CAAC;AAE7F,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,mIAAmI;AACnI,qBAAa,kBAAkB;;IAI9B,IAAI,IAAI,IAAI,OAAO,CAElB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAKxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,kBAAkB,GAAG,YAAY,CAInH"}

package/dist/ai/providers/grok/grok-sandbox-signal.js

@@ -0,0 +1,46 @@
+import { settle } from "../../../outcome.js";
+/**
+ * How Grok says it cannot apply the sandbox it was asked for. Measured on grok
+ * 1.0.47 for `agent stdio` and for `--prompt-file` runs, with a sandbox that
+ * cannot be applied (a symlinked `/var/run/docker.sock`) and with one that does
+ * not exist: exit code 1, nothing on stdout, and on stderr a `warning:` line with
+ * the cause followed by one fixed `error:` sentence ending in this marker. The
+ * marker is a constant of the binary; the cause line varies and is never read.
+ * Exit code 1 alone is not the signal (an unrelated failure also exits 1).
+ */
+export const GROK_SANDBOX_REFUSAL_MARKER = 'Refusing to start with its protections missing.';
+/** Whether `text` (a run's captured stderr) carries Grok's sandbox refusal. */
+export function carriesSandboxRefusal(text) {
+    return text.includes(GROK_SANDBOX_REFUSAL_MARKER);
+}
+/** Latches once the marker has been seen in a stream, holding only a short tail so the marker is found across chunk boundaries. */
+export class SandboxMarkerWatch {
+    #tail = '';
+    #seen = false;
+    get seen() {
+        return this.#seen;
+    }
+    push(text) {
+        if (this.#seen)
+            return;
+        this.#tail = (this.#tail + text).slice(-2 * GROK_SANDBOX_REFUSAL_MARKER.length);
+        this.#seen = carriesSandboxRefusal(this.#tail);
+    }
+}
+export function tapSandboxMarker(stderr, watch) {
+    if (!stderr)
+        return { forClient: null, done: Promise.resolve() };
+    const [forClient, forWatch] = stderr.tee();
+    return { forClient, done: scan(forWatch, watch) };
+}
+async function scan(stream, watch) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    for (;;) {
+        const read = await settle(() => reader.read());
+        if (!read.ok || read.value.done)
+            return;
+        watch.push(decoder.decode(read.value.value, { stream: true }));
+    }
+}
+//# sourceMappingURL=grok-sandbox-signal.js.map

package/dist/ai/providers/grok/grok-sandbox-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-sandbox-signal.js","sourceRoot":"","sources":["../../../../src/ai/providers/grok/grok-sandbox-signal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,iDAAiD,CAAC;AAE7F,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;AACnD,CAAC;AAED,mIAAmI;AACnI,MAAM,OAAO,kBAAkB;IAC9B,KAAK,GAAG,EAAE,CAAC;IACX,KAAK,GAAG,KAAK,CAAC;IAEd,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,IAAY;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;CACD;AAaD,MAAM,UAAU,gBAAgB,CAAC,MAAyC,EAAE,KAAyB;IACpG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACjE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAkC,EAAE,KAAyB;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,SAAS,CAAC;QACT,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO;QACxC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;AACF,CAAC"}