priiisk 0.1.2 → 0.1.4

package/dist/{chunk-UDZECRNM.js → chunk-XI3HWC7Q.js}

@@ -20,7 +20,7 @@ import {
   layerNet,
   makeCampSurfaceName,
   resolveProjectScopeSync
-} from "./chunk-EBRDSFGF.js";
+} from "./chunk-QX5EESCS.js";
 import {
   Clock_exports,
   Config_exports,
@@ -111,7 +111,7 @@ var CliSurfaceSelectionError = class extends Data_exports.TaggedError("CliSurfac
 import { randomUUID } from "node:crypto";
 
 // packages/cli/src/domain/cliVersion.ts
-var PRIIISK_CLI_VERSION = "0.1.2";
+var PRIIISK_CLI_VERSION = "0.1.4";
 
 // packages/cli/src/client/campRpcConnection.ts
 var PRIIISK_CONTROLLER_ID_ENV = "PRIIISK_CONTROLLER_ID";

package/dist/priiisk-host.js

@@ -4,14 +4,14 @@ const require = __priiiskCreateRequire(import.meta.url);
 import {
   NodeContext_exports,
   NodeRuntime_exports
-} from "./chunk-42LW4XTH.js";
+} from "./chunk-GLWKYPVL.js";
 import {
   CampUiBackendError,
   CampUiHealthStatus,
   CampUiPlacement,
   CampUiRuntimeStatus,
   mountPiCampUi
-} from "./chunk-Z64QXV3O.js";
+} from "./chunk-62BTCFUO.js";
 import {
   PiTransport,
   makePiOperatorResources,
@@ -19,7 +19,7 @@ import {
   makePiTransportLayer,
   requirePiModelCatalog,
   require_undici
-} from "./chunk-FMIRO6TM.js";
+} from "./chunk-44I2RCT5.js";
 import {
   AgentRole,
   AgentRoleSchema,
@@ -66,11 +66,14 @@ import {
   campProjectPaths,
   campRecoveryDiagnosticFromCause,
   campRunPaths,
+  currentDirectToolSandbox,
   directToolName,
+  directToolSandboxCommand,
   findCampRecoveryHealthComponent,
   fromDuplex,
   fromWebSocket,
   hostStoppedCampManifest,
+  isDirectToolSandboxFailure,
   listWorkerModelCatalogEntries,
   loadCampManifest,
   loadReferencedMcpCredentials,
@@ -82,6 +85,7 @@ import {
   resolveCampMcpUnion,
   resolveDefaultPreset,
   resolveDirectTools,
+  resolveExecutablePath,
   resolveHirePreset,
   resolveMcpSecretEnv,
   resolveMcpServers,
@@ -96,7 +100,7 @@ import {
   runningCampManifest,
   saveCampHealth,
   saveCampManifest
-} from "./chunk-EBRDSFGF.js";
+} from "./chunk-QX5EESCS.js";
 import {
   CampAskRouter,
   CampCancellationCode,
@@ -22412,7 +22416,7 @@ var Client = class extends Protocol {
 };
 
 // packages/mcp-backend/src/connections/clientIdentity.ts
-var backendVersion = "0.1.2";
+var backendVersion = "0.1.4";
 
 // packages/mcp-backend/src/connections/mcpFailure.ts
 var McpFailure = class extends Data_exports.TaggedError("McpFailure") {
@@ -26419,39 +26423,42 @@ var truncate = (value, limit) => {
   return encoded.byteLength <= limit ? { text: value, truncated: false } : { text: encoded.subarray(0, limit).toString("utf8"), truncated: true };
 };
 var binaryCandidates = (bin) => bin === "fd" ? ["fd", "fdfind"] : [bin];
-var runBinary = (bin, args, options, signal) => new Promise((resolve, reject) => {
-  const child = execFile(
-    bin,
-    [...args],
-    {
-      cwd: options.cwd,
-      env: directToolEnvironment(options.environment ?? process.env),
-      timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
-      maxBuffer: MAX_BUFFER_BYTES,
-      ...signal === void 0 ? {} : { signal }
-    },
-    (error2, stdout, stderr) => {
-      const failure = error2;
-      if (failure !== null && failure.code === "ENOENT") {
-        reject(failure);
-        return;
+var runBinary = (executablePath, args, options, environment, signal) => {
+  const sandbox = options.sandbox ?? currentDirectToolSandbox();
+  const launch = directToolSandboxCommand(sandbox, executablePath, args, { cwd: options.cwd });
+  return new Promise((resolve) => {
+    const child = execFile(
+      launch.command,
+      [...launch.args],
+      {
+        cwd: options.cwd,
+        env: environment,
+        timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        maxBuffer: MAX_BUFFER_BYTES,
+        ...signal === void 0 ? {} : { signal }
+      },
+      (error2, stdout, stderr) => {
+        const failure = error2;
+        const sandboxed = launch.command !== executablePath;
+        resolve({
+          stdout,
+          stderr,
+          exitCode: typeof failure?.code === "number" ? failure.code : failure === null ? 0 : 1,
+          signal: child.signalCode ?? void 0,
+          timedOut: failure?.killed === true,
+          ...sandboxed && isDirectToolSandboxFailure(stderr) ? { sandboxFailed: true } : {},
+          ...typeof failure?.code === "string" && failure.code !== "" ? { launchError: `${failure.code}: ${failure.message}` } : {}
+        });
       }
-      resolve({
-        stdout,
-        stderr,
-        exitCode: typeof failure?.code === "number" ? failure.code : failure === null ? 0 : 1,
-        signal: child.signalCode ?? void 0,
-        timedOut: failure?.killed === true
-      });
-    }
-  );
-});
+    );
+  });
+};
 var runWithFallback = async (policy, args, options, signal) => {
+  const environment = directToolEnvironment(options.environment ?? process.env);
   for (const candidate of binaryCandidates(policy.bin)) {
-    try {
-      return await runBinary(candidate, args, options, signal);
-    } catch {
-    }
+    const executablePath = resolveExecutablePath(candidate, environment);
+    if (executablePath === void 0) continue;
+    return await runBinary(executablePath, args, options, environment, signal);
   }
   return void 0;
 };
@@ -26523,7 +26530,19 @@ var makeDirectTool = (declared, options) => ({
       return refusal(detail);
     }
     const run = await runWithFallback(policy, args, options, signal);
-    return run === void 0 ? refusal(`\`${policy.bin}\` is not available on this machine.`) : resultOf(policy, run, options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
+    if (run === void 0) {
+      return refusal(`\`${policy.bin}\` is not available on this machine.`);
+    }
+    if (run.sandboxFailed === true) {
+      return refusal(
+        `\`${policy.bin}\` was not run: the OS sandbox refused to start it.
+${run.stderr.trim()}`
+      );
+    }
+    if (run.launchError !== void 0) {
+      return refusal(`\`${policy.bin}\` could not be started: ${run.launchError}`);
+    }
+    return resultOf(policy, run, options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
   }
 });
 var makeDirectTools = (declared, options) => declared.map(
@@ -26645,7 +26664,7 @@ var acquireLiveCampHost = (options = {}) => Effect_exports.gen(function* () {
   if (options.manifestRunId !== void 0) {
     yield* prepareCampRunStorage(fs, paths, options.manifestRunId);
   }
-  const config2 = yield* loadWorkerConfig(fs);
+  const config2 = yield* loadWorkerConfig(fs, { projectCwd: project.cwd });
   const piResources = options.piResources ?? (yield* makePiOperatorResources(
     options.piAgentDir === void 0 ? {} : { agentDir: options.piAgentDir }
   ));

package/dist/priiisk.js

@@ -5,7 +5,7 @@ import {
   fromReadable,
   layer,
   runMain
-} from "./chunk-42LW4XTH.js";
+} from "./chunk-GLWKYPVL.js";
 import {
   CliCampLifecycleError,
   CliEquipmentConflict,
@@ -23,7 +23,7 @@ import {
   resolveCampSurface,
   withCampRpc,
   withCampRpcSession
-} from "./chunk-UDZECRNM.js";
+} from "./chunk-XI3HWC7Q.js";
 import {
   CampCommandFailure,
   CampHostReadiness,
@@ -58,7 +58,7 @@ import {
   resolveProjectScopeSync,
   saveCampManifest,
   startingCampManifest
-} from "./chunk-EBRDSFGF.js";
+} from "./chunk-QX5EESCS.js";
 import {
   Cause_exports,
   CommitPrototype,
@@ -19903,7 +19903,7 @@ var campResumeListCommand = Command_exports.make(
   )
 ).pipe(Command_exports.withDescription("Lists saved runs of this project that resume can restore."));
 var runIdArgument = Args_exports.text({ name: "runId" }).pipe(Args_exports.optional);
-var selectCampRunOnDemand = (items) => Effect_exports.promise(() => import("./chunk-PIZUXHCN.js")).pipe(
+var selectCampRunOnDemand = (items) => Effect_exports.promise(() => import("./chunk-JFAW425C.js")).pipe(
   Effect_exports.flatMap((ui) => ui.selectCampRun({ items }))
 );
 var selectAndResume = (json) => {
@@ -19976,7 +19976,7 @@ var rootCommand = Command_exports.make(
 ).pipe(Command_exports.withDescription("Runs and observes a camp of collaborating workers."));
 
 // packages/cli/src/commands/doctorCommand.ts
-var runDoctorOnDemand = Effect_exports.promise(() => import("./chunk-AZ2OCIIG.js")).pipe(
+var runDoctorOnDemand = Effect_exports.promise(() => import("./chunk-GZTHKLSX.js")).pipe(
   Effect_exports.flatMap((doctor) => doctor.runDoctor)
 );
 var statusLabel = {
@@ -20672,7 +20672,7 @@ var command = rootCommand.pipe(
 );
 var cli = Command_exports.run(command, {
   name: "priiisk camp control",
-  version: "0.1.2"
+  version: "0.1.4"
 });
 var runCliCommand = (argumentsList) => cli(argumentsList).pipe(
   Effect_exports.matchEffect({

package/package.json

@@ -1,22 +1,22 @@
 {
   "name": "priiisk",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "CLI for running and observing a camp of collaborating agents",
   "type": "module",
   "bin": {
     "priiisk": "./dist/priiisk.js"
   },
   "files": [
-    "dist/chunk-42LW4XTH.js",
-    "dist/chunk-AZ2OCIIG.js",
-    "dist/chunk-EBRDSFGF.js",
-    "dist/chunk-EBRDSFGF.js.LEGAL.txt",
-    "dist/chunk-FMIRO6TM.js",
-    "dist/chunk-FMIRO6TM.js.LEGAL.txt",
+    "dist/chunk-44I2RCT5.js",
+    "dist/chunk-44I2RCT5.js.LEGAL.txt",
+    "dist/chunk-62BTCFUO.js",
+    "dist/chunk-GLWKYPVL.js",
+    "dist/chunk-GZTHKLSX.js",
+    "dist/chunk-JFAW425C.js",
     "dist/chunk-KFSFN6L5.js",
-    "dist/chunk-PIZUXHCN.js",
-    "dist/chunk-UDZECRNM.js",
-    "dist/chunk-Z64QXV3O.js",
+    "dist/chunk-QX5EESCS.js",
+    "dist/chunk-QX5EESCS.js.LEGAL.txt",
+    "dist/chunk-XI3HWC7Q.js",
     "dist/priiisk-host.js",
     "dist/priiisk.js",
     "profiles",