priiisk 0.1.2 → 0.1.4

package/dist/{chunk-EBRDSFGF.js → chunk-QX5EESCS.js}

@@ -3545,12 +3545,12 @@ var posixImpl = /* @__PURE__ */ Path.of({
   resolve,
   normalize(path) {
     if (path.length === 0) return ".";
-    const isAbsolute = path.charCodeAt(0) === 47;
+    const isAbsolute2 = path.charCodeAt(0) === 47;
     const trailingSeparator = path.charCodeAt(path.length - 1) === 47;
-    path = normalizeStringPosix(path, !isAbsolute);
-    if (path.length === 0 && !isAbsolute) path = ".";
+    path = normalizeStringPosix(path, !isAbsolute2);
+    if (path.length === 0 && !isAbsolute2) path = ".";
     if (path.length > 0 && trailingSeparator) path += "/";
-    if (isAbsolute) return "/" + path;
+    if (isAbsolute2) return "/" + path;
     return path;
   },
   isAbsolute(path) {
@@ -3770,9 +3770,9 @@ var posixImpl = /* @__PURE__ */ Path.of({
     };
     if (path.length === 0) return ret;
     let code = path.charCodeAt(0);
-    const isAbsolute = code === 47;
+    const isAbsolute2 = code === 47;
     let start3;
-    if (isAbsolute) {
+    if (isAbsolute2) {
       ret.root = "/";
       start3 = 1;
     } else {
@@ -3808,11 +3808,11 @@ var posixImpl = /* @__PURE__ */ Path.of({
     preDotState === 0 || // The (right-most) trimmed path component is exactly '..'
     preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {
       if (end !== -1) {
-        if (startPart === 0 && isAbsolute) ret.base = ret.name = path.slice(1, end);
+        if (startPart === 0 && isAbsolute2) ret.base = ret.name = path.slice(1, end);
         else ret.base = ret.name = path.slice(startPart, end);
       }
     } else {
-      if (startPart === 0 && isAbsolute) {
+      if (startPart === 0 && isAbsolute2) {
         ret.name = path.slice(1, startDot);
         ret.base = path.slice(1, end);
       } else {
@@ -3822,7 +3822,7 @@ var posixImpl = /* @__PURE__ */ Path.of({
       ret.ext = path.slice(startDot, end);
     }
     if (startPart > 0) ret.dir = path.slice(0, startPart - 1);
-    else if (isAbsolute) ret.dir = "/";
+    else if (isAbsolute2) ret.dir = "/";
     return ret;
   },
   sep: "/",
@@ -9008,10 +9008,10 @@ var CloseLatch = /* @__PURE__ */ Reference()("@effect/platform/WorkerRunner/Clos
 var PlatformRunner2 = PlatformRunner;
 var CloseLatch2 = CloseLatch;
 
-// packages/config/src/project/projectPaths.ts
+// packages/config/src/project/projectScope.ts
 import { createHash } from "node:crypto";
-import { tmpdir } from "node:os";
-import { join as join3, resolve as resolve4 } from "node:path";
+import { existsSync, realpathSync } from "node:fs";
+import { basename, dirname, join as join3, parse as parse3, resolve as resolve4 } from "node:path";
 
 // packages/config/src/loaders/storageRoots.ts
 import { homedir } from "node:os";
@@ -9027,78 +9027,22 @@ var resolveConfigRootSync = () => xdgRoot("XDG_CONFIG_HOME", join2(homedir(), ".
 var resolveStateRootSync = () => configuredRoot(PRIIISK_STATE_ROOT_ENV) ?? xdgRoot("XDG_STATE_HOME", join2(homedir(), ".local", "state"));
 var resolveCacheRootSync = () => configuredRoot(PRIIISK_CACHE_ROOT_ENV) ?? xdgRoot("XDG_CACHE_HOME", join2(homedir(), ".cache"));
 
-// packages/config/src/project/projectPaths.ts
-var PRIIISK_RUNTIME_DIR_ENV = "PRIIISK_RUNTIME_DIR";
-var PRIIISK_PI_AGENT_DIR_ENV = "PRIIISK_PI_AGENT_DIR";
-var campRunStorageKey = (runId) => createHash("sha256").update(runId).digest("hex").slice(0, 24);
-var campRunPaths = (paths, runId) => {
-  const runDir = join3(paths.runsDir, campRunStorageKey(runId));
-  const controllerDir = join3(runDir, "controller");
-  return {
-    runDir,
-    manifestPath: join3(runDir, "camp.json"),
-    sessionsDir: join3(runDir, "sessions"),
-    controllerDir,
-    eventsDir: join3(controllerDir, "events"),
-    consumersPath: join3(controllerDir, "consumers.json"),
-    receiptsPath: join3(controllerDir, "receipts.json")
-  };
-};
-var runtimeOwner = () => {
-  const uid = process.getuid?.();
-  return uid === void 0 ? "user" : String(uid);
-};
-var resolveRuntimeDirSync = () => {
-  const override = process.env[PRIIISK_RUNTIME_DIR_ENV]?.trim();
-  if (override !== void 0 && override !== "") return resolve4(override);
-  const platformRuntime = process.env.XDG_RUNTIME_DIR?.trim();
-  if (platformRuntime !== void 0 && platformRuntime !== "") {
-    return join3(resolve4(platformRuntime), "priiisk");
-  }
-  return join3(tmpdir(), `priiisk-${runtimeOwner()}`);
-};
-var campProjectPaths = (scope3) => {
-  const runtimeDir = resolveRuntimeDirSync();
-  const controllerDir = join3(scope3.stateDir, "controller");
-  return {
-    stateDir: scope3.stateDir,
-    runsDir: join3(scope3.stateDir, "runs"),
-    quarantineDir: join3(scope3.stateDir, "quarantine"),
-    sessionsDir: join3(scope3.stateDir, "sessions"),
-    controllerDir,
-    eventsDir: join3(controllerDir, "events"),
-    consumersPath: join3(controllerDir, "consumers.json"),
-    receiptsPath: join3(controllerDir, "receipts.json"),
-    agentDir: join3(scope3.stateDir, "pi-agent"),
-    logsDir: join3(scope3.stateDir, "logs"),
-    cacheDir: join3(resolveCacheRootSync(), "projects", scope3.hash),
-    runtimeDir,
-    socketPath: join3(runtimeDir, `${scope3.hash}.sock`),
-    lifecycleLockPath: join3(runtimeDir, `${scope3.hash}.lifecycle.lock`),
-    manifestPath: join3(scope3.stateDir, "camp.json"),
-    healthPath: join3(scope3.stateDir, "logs", "health.json")
-  };
-};
-
 // packages/config/src/project/projectScope.ts
-import { createHash as createHash2 } from "node:crypto";
-import { existsSync, realpathSync } from "node:fs";
-import { basename, dirname, join as join4, parse as parse3, resolve as resolve5 } from "node:path";
 var PRIIISK_PROJECT_CWD_ENV = "PRIIISK_PROJECT_CWD";
 var PROJECTS_DIR_NAME = "projects";
 var PROJECT_HASH_HEX_LENGTH = 12;
-var normalizeProjectCwd = (cwd) => realpathSync.native(resolve5(cwd));
+var normalizeProjectCwd = (cwd) => realpathSync.native(resolve4(cwd));
 var findProjectRootSync = (cwd) => {
   let current = normalizeProjectCwd(cwd);
   const filesystemRoot = parse3(current).root;
   while (current !== filesystemRoot) {
-    if (existsSync(join4(current, ".git"))) return current;
+    if (existsSync(join3(current, ".git"))) return current;
     current = dirname(current);
   }
-  return existsSync(join4(filesystemRoot, ".git")) ? filesystemRoot : normalizeProjectCwd(cwd);
+  return existsSync(join3(filesystemRoot, ".git")) ? filesystemRoot : normalizeProjectCwd(cwd);
 };
-var projectHashFromCwd = (cwd) => createHash2("sha256").update(normalizeProjectCwd(cwd)).digest("hex").slice(0, PROJECT_HASH_HEX_LENGTH);
-var projectStateDirFromHash = (hash) => join4(resolveStateRootSync(), PROJECTS_DIR_NAME, hash);
+var projectHashFromCwd = (cwd) => createHash("sha256").update(normalizeProjectCwd(cwd)).digest("hex").slice(0, PROJECT_HASH_HEX_LENGTH);
+var projectStateDirFromHash = (hash) => join3(resolveStateRootSync(), PROJECTS_DIR_NAME, hash);
 var projectScopeFromCwd = (cwd) => {
   const normalized = findProjectRootSync(cwd);
   const hash = projectHashFromCwd(normalized);
@@ -9119,6 +9063,62 @@ var resolveProjectScope = Effect_exports.gen(function* () {
   return projectScopeFromCwd(cwd);
 }).pipe(Effect_exports.catchAll(() => Effect_exports.succeed(resolveProjectScopeSync())));
 
+// packages/config/src/project/projectPaths.ts
+import { createHash as createHash2 } from "node:crypto";
+import { tmpdir } from "node:os";
+import { join as join4, resolve as resolve5 } from "node:path";
+var PRIIISK_RUNTIME_DIR_ENV = "PRIIISK_RUNTIME_DIR";
+var PRIIISK_PI_AGENT_DIR_ENV = "PRIIISK_PI_AGENT_DIR";
+var campRunStorageKey = (runId) => createHash2("sha256").update(runId).digest("hex").slice(0, 24);
+var campRunPaths = (paths, runId) => {
+  const runDir = join4(paths.runsDir, campRunStorageKey(runId));
+  const controllerDir = join4(runDir, "controller");
+  return {
+    runDir,
+    manifestPath: join4(runDir, "camp.json"),
+    sessionsDir: join4(runDir, "sessions"),
+    controllerDir,
+    eventsDir: join4(controllerDir, "events"),
+    consumersPath: join4(controllerDir, "consumers.json"),
+    receiptsPath: join4(controllerDir, "receipts.json")
+  };
+};
+var runtimeOwner = () => {
+  const uid = process.getuid?.();
+  return uid === void 0 ? "user" : String(uid);
+};
+var resolveRuntimeDirSync = () => {
+  const override = process.env[PRIIISK_RUNTIME_DIR_ENV]?.trim();
+  if (override !== void 0 && override !== "") return resolve5(override);
+  const platformRuntime = process.env.XDG_RUNTIME_DIR?.trim();
+  if (platformRuntime !== void 0 && platformRuntime !== "") {
+    return join4(resolve5(platformRuntime), "priiisk");
+  }
+  return join4(tmpdir(), `priiisk-${runtimeOwner()}`);
+};
+var campProjectPaths = (scope3) => {
+  const runtimeDir = resolveRuntimeDirSync();
+  const controllerDir = join4(scope3.stateDir, "controller");
+  return {
+    stateDir: scope3.stateDir,
+    runsDir: join4(scope3.stateDir, "runs"),
+    quarantineDir: join4(scope3.stateDir, "quarantine"),
+    sessionsDir: join4(scope3.stateDir, "sessions"),
+    controllerDir,
+    eventsDir: join4(controllerDir, "events"),
+    consumersPath: join4(controllerDir, "consumers.json"),
+    receiptsPath: join4(controllerDir, "receipts.json"),
+    agentDir: join4(scope3.stateDir, "pi-agent"),
+    logsDir: join4(scope3.stateDir, "logs"),
+    cacheDir: join4(resolveCacheRootSync(), "projects", scope3.hash),
+    runtimeDir,
+    socketPath: join4(runtimeDir, `${scope3.hash}.sock`),
+    lifecycleLockPath: join4(runtimeDir, `${scope3.hash}.lifecycle.lock`),
+    manifestPath: join4(scope3.stateDir, "camp.json"),
+    healthPath: join4(scope3.stateDir, "logs", "health.json")
+  };
+};
+
 // packages/config/src/domain/configErrors.ts
 var StateIoError = class extends Data_exports.TaggedError("StateIoError") {
 };
@@ -9194,8 +9194,8 @@ var loadReferencedMcpCredentials = (fs, names) => Effect_exports.gen(function* (
   );
 });
 
-// packages/config/src/loaders/userStoragePreparation.ts
-import { dirname as dirname2 } from "node:path";
+// packages/config/src/loaders/projectConfigLoader.ts
+import { join as join6 } from "node:path";
 
 // node_modules/.pnpm/smol-toml@1.7.0/node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE = /^(\d{4}-\d{2}-\d{2})?[T ]?(?:(\d{2}):\d{2}(?::\d{2}(?:\.\d+)?)?)?(Z|[-+]\d{2}:\d{2})?$/i;
@@ -9966,6 +9966,133 @@ var WorkerDefaultsSchema = Schema_exports.Struct({
   directTools: Schema_exports.optional(DirectToolsConfigSchema)
 });
 
+// packages/config/src/schema/projectConfig.ts
+var ProjectRolePresetSchema = RolePresetSchema.omit("readTools");
+var ProjectDefaultsSchema = Schema_exports.partial(WorkerDefaultsSchema.omit("readTools"));
+var ProjectWorkerConfigSchema = Schema_exports.Struct({
+  schemaVersion: Schema_exports.Literal(1),
+  models: Schema_exports.optional(Schema_exports.Record({ key: Schema_exports.String, value: ModelAliasSchema })),
+  roles: Schema_exports.optional(Schema_exports.Record({ key: Schema_exports.String, value: ProjectRolePresetSchema })),
+  hirePresets: Schema_exports.optional(Schema_exports.Record({ key: Schema_exports.String, value: HirePresetSchema })),
+  skillGroups: Schema_exports.optional(SkillGroupsSchema),
+  defaults: Schema_exports.optional(ProjectDefaultsSchema)
+});
+var executableReason = (what) => `${what} \u0437\u0430\u0434\u0430\u0435\u0442 \u0442\u043E, \u0447\u0442\u043E \u043B\u0430\u0433\u0435\u0440\u044C \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u0435\u0442, \u043F\u043E\u044D\u0442\u043E\u043C\u0443 \u043F\u0440\u0438\u043D\u0438\u043C\u0430\u0435\u0442\u0441\u044F \u0442\u043E\u043B\u044C\u043A\u043E \u0438\u0437 \u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u0435\u043B\u044C\u0441\u043A\u043E\u0433\u043E config`;
+var findProjectConfigForbiddenFields = (parsed) => {
+  if (typeof parsed !== "object" || parsed === null) return [];
+  const found = [];
+  if (Reflect.get(parsed, "mcpServers") !== void 0) {
+    found.push({ field: "mcpServers", reason: executableReason("\u043E\u043F\u0440\u0435\u0434\u0435\u043B\u0435\u043D\u0438\u0435 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430") });
+  }
+  const defaults = Reflect.get(parsed, "defaults");
+  if (typeof defaults === "object" && defaults !== null && Reflect.get(defaults, "readTools") !== void 0) {
+    found.push({ field: "defaults.readTools", reason: executableReason("\u043A\u0430\u0442\u0430\u043B\u043E\u0433 \u0431\u0438\u043D\u0430\u0440\u0435\u0439") });
+  }
+  const roles = Reflect.get(parsed, "roles");
+  if (typeof roles === "object" && roles !== null) {
+    for (const [role, entry] of Object.entries(roles)) {
+      if (typeof entry === "object" && entry !== null && Reflect.get(entry, "readTools") !== void 0) {
+        found.push({
+          field: `roles.${role}.readTools`,
+          reason: executableReason("\u043A\u0430\u0442\u0430\u043B\u043E\u0433 \u0431\u0438\u043D\u0430\u0440\u0435\u0439 \u0440\u043E\u043B\u0438")
+        });
+      }
+    }
+  }
+  return found;
+};
+
+// packages/config/src/loaders/projectConfigLoader.ts
+var PROJECT_CONFIG_DIRECTORY = ".priiisk";
+var PROJECT_CONFIG_FILE = "config.toml";
+var projectConfigPath = (projectCwd) => join6(projectCwd, PROJECT_CONFIG_DIRECTORY, PROJECT_CONFIG_FILE);
+var decodeProjectConfig = Schema_exports.decodeUnknown(ProjectWorkerConfigSchema, {
+  onExcessProperty: "error"
+});
+var loadProjectWorkerConfig = (fs, projectCwd) => Effect_exports.gen(function* () {
+  const path = projectConfigPath(projectCwd);
+  const raw3 = yield* fs.readFileString(path).pipe(
+    Effect_exports.map((content) => content),
+    Effect_exports.catchIf(
+      (error) => error._tag === "SystemError" && error.reason === "NotFound",
+      () => Effect_exports.succeed(void 0)
+    ),
+    Effect_exports.mapError((cause) => new WorkerConfigInvalidError({ path, message: String(cause) }))
+  );
+  if (raw3 === void 0) return void 0;
+  const parsed = yield* Effect_exports.try({
+    try: () => parse4(raw3),
+    catch: (cause) => new WorkerConfigInvalidError({ path, message: `\u043D\u0435\u0432\u0430\u043B\u0438\u0434\u043D\u044B\u0439 TOML: ${String(cause)}` })
+  });
+  const forbidden = findProjectConfigForbiddenFields(parsed);
+  if (forbidden.length > 0) {
+    return yield* Effect_exports.fail(
+      new WorkerConfigInvalidError({
+        path,
+        message: forbidden.map((entry) => `\u043F\u043E\u043B\u0435 ${entry.field} \u043D\u0435\u0434\u043E\u043F\u0443\u0441\u0442\u0438\u043C\u043E \u0432 project config: ${entry.reason}`).join("; ")
+      })
+    );
+  }
+  return yield* decodeProjectConfig(parsed).pipe(
+    Effect_exports.mapError(
+      (parseError) => new WorkerConfigInvalidError({
+        path,
+        message: `\u043D\u0435 \u043F\u0440\u043E\u0448\u0435\u043B \u0441\u0445\u0435\u043C\u0443: ${String(parseError)}`
+      })
+    )
+  );
+});
+var mergeRecords = (user, project, mergeEntry) => {
+  if (project === void 0) return user;
+  const merged = { ...user ?? {} };
+  for (const [key, entry] of Object.entries(project)) {
+    merged[key] = mergeEntry(user?.[key], entry);
+  }
+  return merged;
+};
+var mergeWorkerConfigs = (user, project) => {
+  if (project === void 0) return user;
+  const models = { ...user?.models ?? {}, ...project.models ?? {} };
+  const defaults = {
+    ...user?.defaults ?? {},
+    ...project.defaults ?? {},
+    ...user?.defaults?.readTools === void 0 ? {} : { readTools: user.defaults.readTools }
+  };
+  const roles = mergeRecords(user?.roles, project.roles, (userRole, projectRole) => ({
+    ...userRole,
+    ...projectRole,
+    ...userRole?.readTools === void 0 ? {} : { readTools: userRole.readTools }
+  }));
+  const hirePresets = mergeRecords(
+    user?.hirePresets,
+    project.hirePresets,
+    (userPreset, preset) => ({
+      ...userPreset,
+      ...preset
+    })
+  );
+  const skillGroups = mergeRecords(user?.skillGroups, project.skillGroups, (_, groups) => groups);
+  return {
+    schemaVersion: 1,
+    models,
+    defaults,
+    ...roles === void 0 ? {} : { roles },
+    ...hirePresets === void 0 ? {} : { hirePresets },
+    ...skillGroups === void 0 ? {} : { skillGroups },
+    ...user?.mcpServers === void 0 ? {} : { mcpServers: user.mcpServers }
+  };
+};
+var describeProjectConfigOverrides = (project) => [
+  ...project.defaults === void 0 ? [] : ["defaults"],
+  ...project.models === void 0 ? [] : Object.keys(project.models).map((n) => `models.${n}`),
+  ...project.roles === void 0 ? [] : Object.keys(project.roles).map((n) => `roles.${n}`),
+  ...project.hirePresets === void 0 ? [] : Object.keys(project.hirePresets).map((n) => `hirePresets.${n}`),
+  ...project.skillGroups === void 0 ? [] : Object.keys(project.skillGroups).map((n) => `skillGroups.${n}`)
+];
+
+// packages/config/src/loaders/userStoragePreparation.ts
+import { dirname as dirname2 } from "node:path";
+
 // packages/config/src/schema/workerConfig.ts
 var WorkerConfigSchema = Schema_exports.Struct({
   schemaVersion: Schema_exports.Literal(1),
@@ -9979,7 +10106,7 @@ var WorkerConfigSchema = Schema_exports.Struct({
 
 // packages/config/src/loaders/workerConfigLoader.ts
 var decodeWorkerConfig = Schema_exports.decodeUnknown(WorkerConfigSchema, { onExcessProperty: "error" });
-var loadWorkerConfig = (fs) => Effect_exports.gen(function* () {
+var loadUserWorkerConfig = (fs) => Effect_exports.gen(function* () {
   const configPath = yield* resolveWorkerConfigPath;
   const raw3 = yield* fs.readFileString(configPath).pipe(
     Effect_exports.map((content) => content),
@@ -10010,19 +10137,25 @@ var loadWorkerConfig = (fs) => Effect_exports.gen(function* () {
     )
   );
 });
+var loadWorkerConfig = (fs, options4 = {}) => Effect_exports.gen(function* () {
+  const user = yield* loadUserWorkerConfig(fs);
+  const projectCwd = options4.projectCwd ?? (yield* resolveProjectScope.pipe(Effect_exports.map((scope3) => scope3.cwd)));
+  const project = yield* loadProjectWorkerConfig(fs, projectCwd);
+  return mergeWorkerConfigs(user, project);
+});
 
 // packages/config/src/project/roleProfile.ts
 import { tmpdir as tmpdir2 } from "node:os";
 
 // packages/config/src/project/runtimeAssets.ts
 import { existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname3, join as join6, parse as parse5 } from "node:path";
+import { dirname as dirname3, join as join7, parse as parse5 } from "node:path";
 import { fileURLToPath } from "node:url";
 var findAssetRoot = (moduleUrl, directoryName) => {
   const root = parse5(fileURLToPath(moduleUrl)).root;
   let current = dirname3(fileURLToPath(moduleUrl));
   for (; ; ) {
-    const candidate = join6(current, directoryName);
+    const candidate = join7(current, directoryName);
     if (existsSync2(candidate)) return candidate;
     if (current === root) return candidate;
     current = dirname3(current);
@@ -10030,8 +10163,8 @@ var findAssetRoot = (moduleUrl, directoryName) => {
 };
 var assetRoots = /* @__PURE__ */ new Map();
 var resolveRuntimeAssetRoot = (moduleUrl, directoryName) => {
-  const cached2 = assetRoots.get(directoryName);
-  if (cached2 !== void 0) return cached2;
+  const cached3 = assetRoots.get(directoryName);
+  if (cached3 !== void 0) return cached3;
   const resolved = findAssetRoot(moduleUrl, directoryName);
   assetRoots.set(directoryName, resolved);
   return resolved;
@@ -10418,9 +10551,108 @@ var listWorkerModelCatalogEntries = (config) => {
   })).sort((left, right) => left.alias.localeCompare(right.alias));
 };
 
+// packages/config/src/sandbox/directToolSandbox.ts
+import { execFileSync } from "node:child_process";
+import { accessSync, constants } from "node:fs";
+import { delimiter, isAbsolute, join as join8 } from "node:path";
+var DirectToolSandboxKind = {
+  bubblewrap: "bubblewrap",
+  none: "none"
+};
+var DirectToolSandboxAbsence = {
+  unsupportedPlatform: "unsupported_platform",
+  binaryMissing: "binary_missing",
+  probeFailed: "probe_failed",
+  disabled: "disabled"
+};
+var DIRECT_TOOL_SANDBOX_ENV = "PRIIISK_DIRECT_TOOL_SANDBOX";
+var resolveExecutablePath = (bin, environment = process.env) => {
+  const executable = (candidate) => {
+    try {
+      accessSync(candidate, constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  if (bin.includes("/")) return isAbsolute(bin) && executable(bin) ? bin : void 0;
+  for (const directory of (environment.PATH ?? "").split(delimiter)) {
+    if (directory === "") continue;
+    const candidate = join8(directory, bin);
+    if (executable(candidate)) return candidate;
+  }
+  return void 0;
+};
+var sandboxArguments = (cwd, writable) => [
+  "--unshare-all",
+  "--ro-bind",
+  "/",
+  "/",
+  "--dev",
+  "/dev",
+  "--proc",
+  "/proc",
+  "--tmpfs",
+  "/tmp",
+  ...writable ? ["--bind", cwd, cwd] : [],
+  "--chdir",
+  cwd,
+  "--die-with-parent",
+  "--new-session",
+  "--"
+];
+var probeBubblewrap = (command) => {
+  try {
+    execFileSync(command, [...sandboxArguments("/", false), "/bin/true"], {
+      stdio: "ignore",
+      timeout: 5e3
+    });
+    return void 0;
+  } catch (cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+  }
+};
+var cached2;
+var detectDirectToolSandbox = (environment = process.env, platform = process.platform) => {
+  if (environment[DIRECT_TOOL_SANDBOX_ENV] === "0") {
+    return { kind: DirectToolSandboxKind.none, absence: DirectToolSandboxAbsence.disabled };
+  }
+  if (platform !== "linux") {
+    return {
+      kind: DirectToolSandboxKind.none,
+      absence: DirectToolSandboxAbsence.unsupportedPlatform,
+      detail: platform
+    };
+  }
+  const command = resolveExecutablePath("bwrap", environment);
+  if (command === void 0) {
+    return {
+      kind: DirectToolSandboxKind.none,
+      absence: DirectToolSandboxAbsence.binaryMissing,
+      detail: "bwrap"
+    };
+  }
+  const failure = probeBubblewrap(command);
+  return failure === void 0 ? { kind: DirectToolSandboxKind.bubblewrap, command } : {
+    kind: DirectToolSandboxKind.none,
+    absence: DirectToolSandboxAbsence.probeFailed,
+    detail: failure
+  };
+};
+var currentDirectToolSandbox = () => {
+  cached2 ??= detectDirectToolSandbox();
+  return cached2;
+};
+var directToolSandboxCommand = (sandbox2, executablePath, args, options4) => sandbox2.kind === DirectToolSandboxKind.bubblewrap && sandbox2.command !== void 0 ? {
+  command: sandbox2.command,
+  args: [...sandboxArguments(options4.cwd, true), executablePath, ...args]
+} : { command: executablePath, args };
+var isDirectToolSandboxFailure = (stderr3) => stderr3.startsWith("bwrap:");
+var describeDirectToolSandbox = (sandbox2) => sandbox2.kind === DirectToolSandboxKind.bubblewrap ? "External binaries run in a bubblewrap sandbox: read-only filesystem, writable worker directory, no network" : sandbox2.absence === DirectToolSandboxAbsence.disabled ? `External binaries run without an OS sandbox: disabled by ${DIRECT_TOOL_SANDBOX_ENV}` : sandbox2.absence === DirectToolSandboxAbsence.unsupportedPlatform ? `External binaries run without an OS sandbox: no supported mechanism on ${sandbox2.detail ?? "this platform"}` : sandbox2.absence === DirectToolSandboxAbsence.binaryMissing ? "External binaries run without an OS sandbox: bubblewrap (bwrap) is not installed" : "External binaries run without an OS sandbox: bubblewrap is present but cannot start";
+
 // packages/protocol/src/domain/protocolVersion.ts
 var PRIIISK_PROTOCOL_VERSION = "11";
-var PRIIISK_PROTOCOL_PACKAGE_VERSION = "0.1.2";
+var PRIIISK_PROTOCOL_PACKAGE_VERSION = "0.1.4";
 var ProtocolVersionSchema = Schema_exports.String.pipe(Schema_exports.minLength(1));
 
 // packages/protocol/src/domain/protocolIdentifiers.ts
@@ -13295,7 +13527,7 @@ var CampProtocol = class extends RpcGroup_exports.make(
 };
 
 // packages/camp-state/src/bootstrap/campHostVersion.ts
-var PRIIISK_HOST_VERSION = "0.1.2";
+var PRIIISK_HOST_VERSION = "0.1.4";
 
 // packages/surface/src/domain/surfaceModel.ts
 var NonEmptyString7 = Schema_exports.String.pipe(Schema_exports.minLength(1));
@@ -13936,42 +14168,47 @@ var campHealthLiveness = (snapshot, now, staleAfterMs = CAMP_HEALTH_STALE_AFTER_
 import { randomUUID as randomUUID3 } from "node:crypto";
 var CampHealthPersistenceError = class extends Data_exports.TaggedError("CampHealthPersistenceError") {
 };
+var CampHealthVersionError = class extends Data_exports.TaggedError("CampHealthVersionError") {
+};
 var decodeHealth = Schema_exports.decodeUnknown(CampHealthSnapshotSchema, {
   onExcessProperty: "error"
 });
+var readError = (path, message, cause) => new CampHealthPersistenceError({ operation: "read", path, message, cause });
+var decodeCampHealth = (path, value) => {
+  if (typeof value === "object" && value !== null && "schemaVersion" in value && typeof value.schemaVersion === "number" && Number.isSafeInteger(value.schemaVersion) && value.schemaVersion !== CAMP_HEALTH_SCHEMA_VERSION) {
+    return Effect_exports.fail(
+      new CampHealthVersionError({
+        path,
+        expectedVersion: CAMP_HEALTH_SCHEMA_VERSION,
+        receivedVersion: value.schemaVersion,
+        message: `health snapshot schemaVersion ${String(value.schemaVersion)} was written by another runtime version; this runtime writes ${String(CAMP_HEALTH_SCHEMA_VERSION)}`
+      })
+    );
+  }
+  return decodeHealth(value).pipe(
+    Effect_exports.mapError(
+      (cause) => readError(path, `health snapshot does not match schema: ${String(cause)}`, cause)
+    )
+  );
+};
 var loadCampHealth = (fs, path) => fs.exists(path).pipe(
+  Effect_exports.mapError(
+    (cause) => readError(path, `health snapshot is unavailable: ${String(cause)}`, cause)
+  ),
   Effect_exports.flatMap(
     (exists) => exists ? fs.readFileString(path).pipe(
+      Effect_exports.mapError(
+        (cause) => readError(path, `health snapshot is unavailable: ${String(cause)}`, cause)
+      ),
       Effect_exports.flatMap(
         (contents) => Effect_exports.try({
           try: () => JSON.parse(contents),
-          catch: (cause) => new CampHealthPersistenceError({
-            operation: "read",
-            path,
-            message: `health snapshot contains invalid JSON: ${String(cause)}`,
-            cause
-          })
-        })
-      ),
-      Effect_exports.flatMap(decodeHealth),
-      Effect_exports.mapError(
-        (cause) => cause instanceof CampHealthPersistenceError ? cause : new CampHealthPersistenceError({
-          operation: "read",
-          path,
-          message: `health snapshot is unavailable: ${String(cause)}`,
-          cause
+          catch: (cause) => readError(path, `health snapshot contains invalid JSON: ${String(cause)}`, cause)
         })
       ),
+      Effect_exports.flatMap((value) => decodeCampHealth(path, value)),
       Effect_exports.map(Option_exports.some)
     ) : Effect_exports.succeed(Option_exports.none())
-  ),
-  Effect_exports.mapError(
-    (cause) => cause instanceof CampHealthPersistenceError ? cause : new CampHealthPersistenceError({
-      operation: "read",
-      path,
-      message: `health snapshot is unavailable: ${String(cause)}`,
-      cause
-    })
   )
 );
 var saveCampHealth = (fs, path, snapshot) => {
@@ -14091,7 +14328,7 @@ var launchCampPrepared = (surface, request, persistIntent, handshake, persist) =
 
 // packages/camp-state/src/history/campLegacyState.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join9 } from "node:path";
 var LEGACY_CAMP_MANIFEST_VERSION = 1;
 var CampLegacyStateErrorCode = {
   invalidManifest: "legacy_manifest_invalid",
@@ -14156,7 +14393,7 @@ var moveStateFile = (fs, source, destination, message) => fs.rename(source, dest
 );
 var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
   const timestamp = yield* Clock_exports.currentTimeMillis;
-  const directory = join7(
+  const directory = join9(
     paths.quarantineDir,
     `legacy-v${String(LEGACY_CAMP_MANIFEST_VERSION)}-${String(timestamp)}-${randomUUID4()}`
   );
@@ -14170,8 +14407,8 @@ var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
       )
     )
   );
-  const manifestPath = join7(directory, "camp.json");
-  const healthPath = join7(directory, "health.json");
+  const manifestPath = join9(directory, "camp.json");
+  const healthPath = join9(directory, "health.json");
   const hasHealth = yield* fs.exists(paths.healthPath).pipe(
     Effect_exports.mapError(
       (cause) => legacyError(
@@ -14224,7 +14461,7 @@ var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
 });
 
 // packages/camp-state/src/history/campRunCatalog.ts
-import { join as join8 } from "node:path";
+import { join as join10 } from "node:path";
 
 // packages/camp-state/src/history/campRunCatalogModel.ts
 var CampRunCatalogErrorCode = {
@@ -14314,7 +14551,7 @@ var listCampRuns = (fs, project, paths) => Effect_exports.gen(function* () {
   );
   const historical = yield* Effect_exports.forEach(
     entries,
-    (entry) => loadCampManifest(fs, join8(paths.runsDir, entry, "camp.json")).pipe(
+    (entry) => loadCampManifest(fs, join10(paths.runsDir, entry, "camp.json")).pipe(
       Effect_exports.mapError(
         (cause) => catalogError(
           "list",
@@ -14326,7 +14563,7 @@ var listCampRuns = (fs, project, paths) => Effect_exports.gen(function* () {
       Effect_exports.flatMap(
         Option_exports.match({
           onNone: () => Effect_exports.succeed(void 0),
-          onSome: (manifest) => campRunPaths(paths, manifest.runId).manifestPath !== join8(paths.runsDir, entry, "camp.json") ? Effect_exports.fail(
+          onSome: (manifest) => campRunPaths(paths, manifest.runId).manifestPath !== join10(paths.runsDir, entry, "camp.json") ? Effect_exports.fail(
             catalogError(
               "list",
               CampRunCatalogErrorCode.nonCanonicalRun,
@@ -14638,13 +14875,16 @@ export {
   AgentRoleSchema,
   PiThinkingLevel,
   PiThinkingLevelSchema,
+  projectConfigPath,
+  loadProjectWorkerConfig,
+  describeProjectConfigOverrides,
+  projectScopeFromCwd,
+  resolveProjectScopeSync,
+  resolveProjectScope,
   loadWorkerConfig,
   PRIIISK_PI_AGENT_DIR_ENV,
   campRunPaths,
   campProjectPaths,
-  projectScopeFromCwd,
-  resolveProjectScopeSync,
-  resolveProjectScope,
   resolveRoleProfilePath,
   prepareCampStorage,
   prepareCampRunStorage,
@@ -14665,6 +14905,12 @@ export {
   resolveRolePreset,
   resolveHirePreset,
   listWorkerModelCatalogEntries,
+  DirectToolSandboxKind,
+  resolveExecutablePath,
+  currentDirectToolSandbox,
+  directToolSandboxCommand,
+  isDirectToolSandboxFailure,
+  describeDirectToolSandbox,
   NetSocket,
   fromDuplex,
   layerNet,
@@ -14703,6 +14949,7 @@ export {
   findCampRecoveryHealthComponent,
   CAMP_HEALTH_HEARTBEAT_PERSIST_INTERVAL_MS,
   campHealthLiveness,
+  CampHealthVersionError,
   loadCampHealth,
   saveCampHealth,
   LEGACY_CAMP_MANIFEST_VERSION,