priiisk 0.1.3 → 0.1.4

package/dist/{chunk-GCJD6IMI.js → chunk-44I2RCT5.js}

@@ -3,7 +3,7 @@ const require = __priiiskCreateRequire(import.meta.url);
 import {
   FileSystem_exports,
   PRIIISK_PI_AGENT_DIR_ENV
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   CampDeliveryPort,
   CampFailureCode,

package/dist/{chunk-Z64QXV3O.js → chunk-62BTCFUO.js}

@@ -1067,7 +1067,7 @@ var makeCampUiComposerComponent = (context, tui) => {
 };
 
 // packages/host-ui/src/pi/blocks/campUiDetail.ts
-import { getSelectListTheme as getSelectListTheme7 } from "@earendil-works/pi-coding-agent";
+import { getSelectListTheme as getSelectListTheme8 } from "@earendil-works/pi-coding-agent";
 import { Key as Key2, matchesKey as matchesKey2 } from "@earendil-works/pi-tui";
 
 // packages/host-ui/src/pi/blocks/campUiEquipmentBlock.ts
@@ -1134,10 +1134,129 @@ var renderCampUiPanel = (label, body, width) => {
   ];
 };
 
+// packages/host-ui/src/pi/blocks/campUiExploredBlock.ts
+import { getSelectListTheme as getSelectListTheme6 } from "@earendil-works/pi-coding-agent";
+var CAMP_UI_EXPLORED_TOOL_NAMES = ["read"];
+var CAMP_UI_EXPLORED_COLLAPSED_PATHS = 8;
+var CampUiExploredStatus = {
+  running: "running",
+  completed: "completed",
+  failed: "failed"
+};
+var isCampUiExploredTool = (toolName) => CAMP_UI_EXPLORED_TOOL_NAMES.includes(toolName);
+var stringArgument = (parameters, name) => {
+  const value = parameters[name];
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+};
+var numberArgument = (parameters, name) => {
+  const value = parameters[name];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+};
+var campUiExploredReadPath = (parameters) => stringArgument(parameters, "path") ?? stringArgument(parameters, "file_path");
+var campUiExploredReadRange = (parameters) => {
+  const offset = numberArgument(parameters, "offset");
+  const limit = numberArgument(parameters, "limit");
+  if (offset === void 0 && limit === void 0) return void 0;
+  const start = offset ?? 1;
+  return limit === void 0 ? `from line ${String(start)}` : `lines ${String(start)}-${String(start + limit - 1)}`;
+};
+var statusRank = {
+  completed: 0,
+  running: 1,
+  failed: 2
+};
+var splitPath = (path) => {
+  const separator = path.lastIndexOf("/");
+  if (separator < 0) return { directory: ".", name: path };
+  if (separator === 0) return { directory: "/", name: path.slice(1) };
+  return { directory: path.slice(0, separator), name: path.slice(separator + 1) };
+};
+var collectNodes = (reads) => {
+  const byPath = /* @__PURE__ */ new Map();
+  for (const read of reads) {
+    const existing = byPath.get(read.path);
+    const node = existing ?? (() => {
+      const { directory, name } = splitPath(read.path);
+      const created = {
+        path: read.path,
+        directory,
+        name,
+        reads: 0,
+        status: CampUiExploredStatus.completed,
+        ranges: [],
+        errorMessage: void 0
+      };
+      byPath.set(read.path, created);
+      return created;
+    })();
+    node.reads += 1;
+    if (statusRank[read.status] > statusRank[node.status]) node.status = read.status;
+    if (read.range !== void 0 && !node.ranges.includes(read.range)) node.ranges.push(read.range);
+    if (read.errorMessage !== void 0 && node.errorMessage === void 0) {
+      node.errorMessage = read.errorMessage;
+    }
+  }
+  return [...byPath.values()];
+};
+var toneByStatus = {
+  completed: CampUiTone.success,
+  running: CampUiTone.active,
+  failed: CampUiTone.error
+};
+var firstLine = (message) => message.split("\n")[0] ?? message;
+var nodeLine = (node, expanded) => {
+  const theme = getSelectListTheme6();
+  const repeats = node.reads > 1 ? theme.description(` \xD7${String(node.reads)}`) : "";
+  const ranges = expanded && node.ranges.length > 0 ? theme.description(` \xB7 ${node.ranges.join(", ")}`) : "";
+  const error = node.errorMessage === void 0 ? "" : theme.noMatch(` \u2014 ${firstLine(node.errorMessage)}`);
+  return `  ${renderCampUiStatus(node.name, toneByStatus[node.status])}${repeats}${ranges}${error}`;
+};
+var selectVisibleNodes = (nodes, budget) => {
+  if (nodes.length <= budget) return nodes;
+  const attention = nodes.filter((node) => node.status !== CampUiExploredStatus.completed);
+  const remaining = Math.max(0, budget - attention.length);
+  const completed = nodes.filter((node) => node.status === CampUiExploredStatus.completed).slice(0, remaining);
+  const keep = /* @__PURE__ */ new Set([...attention, ...completed]);
+  return nodes.filter((node) => keep.has(node));
+};
+var renderCampUiExploredGroup = (reads, width, expanded) => {
+  const theme = getSelectListTheme6();
+  const nodes = collectNodes(reads);
+  const visible = expanded ? nodes : selectVisibleNodes(nodes, CAMP_UI_EXPLORED_COLLAPSED_PATHS);
+  const hidden = nodes.length - visible.length;
+  const running = nodes.filter((node) => node.status === CampUiExploredStatus.running).length;
+  const failed = nodes.filter((node) => node.status === CampUiExploredStatus.failed).length;
+  const label = [
+    `explored \xB7 ${String(nodes.length)} ${nodes.length === 1 ? "file" : "files"}`,
+    ...running === 0 ? [] : [`${String(running)} running`],
+    ...failed === 0 ? [] : [`${String(failed)} failed`]
+  ].join(" \xB7 ");
+  const innerWidth = Math.max(1, width - 2);
+  const body = [];
+  let directory;
+  for (const node of visible) {
+    if (node.directory !== directory) {
+      directory = node.directory;
+      body.push(theme.description(directory));
+    }
+    body.push(nodeLine(node, expanded));
+  }
+  body.push(
+    theme.description(
+      hidden > 0 ? `... ${String(hidden)} more paths \xB7 enter expand` : expanded ? "enter collapse" : "enter expand"
+    )
+  );
+  return renderCampUiPanel(
+    label,
+    body.map((line) => fitCampUiLine(line, innerWidth)),
+    width
+  );
+};
+
 // packages/host-ui/src/pi/blocks/campUiToolResult.ts
 import {
   getMarkdownTheme as getMarkdownTheme6,
-  getSelectListTheme as getSelectListTheme6,
+  getSelectListTheme as getSelectListTheme7,
   truncateToVisualLines
 } from "@earendil-works/pi-coding-agent";
 import { Markdown as Markdown3 } from "@earendil-works/pi-tui";
@@ -1174,7 +1293,7 @@ var renderCampUiToolResult = (result, width, expanded) => {
   const boundedWidth = Math.max(1, width);
   const plainText = toolResultPlainText(result);
   const preview = truncateToVisualLines(
-    getSelectListTheme6().description(plainText),
+    getSelectListTheme7().description(plainText),
     previewLinesByTool.get(result.toolName ?? "") ?? CAMP_UI_DEFAULT_TOOL_PREVIEW_LINES,
     boundedWidth
   );
@@ -1182,7 +1301,7 @@ var renderCampUiToolResult = (result, width, expanded) => {
     return [
       ...preview.visualLines,
       ...preview.skippedCount === 0 ? [] : [
-        getSelectListTheme6().description(
+        getSelectListTheme7().description(
           `... ${preview.skippedCount} more lines \xB7 enter expand`
         )
       ]
@@ -1192,18 +1311,24 @@ var renderCampUiToolResult = (result, width, expanded) => {
   const lines = content === "" ? [] : new Markdown3(content, 0, 0, getMarkdownTheme6()).render(boundedWidth);
   return [
     ...lines,
-    ...result.errorMessage === void 0 ? [] : [getSelectListTheme6().noMatch(`Error: ${result.errorMessage}`)],
+    ...result.errorMessage === void 0 ? [] : [getSelectListTheme7().noMatch(`Error: ${result.errorMessage}`)],
     ...result.toolResultDetails === void 0 ? [] : [
-      getSelectListTheme6().description("Details"),
+      getSelectListTheme7().description("Details"),
       ...new Markdown3(jsonText(result.toolResultDetails), 0, 0, getMarkdownTheme6()).render(
         boundedWidth
       )
     ],
-    ...preview.skippedCount === 0 ? [] : [getSelectListTheme6().description("enter collapse")]
+    ...preview.skippedCount === 0 ? [] : [getSelectListTheme7().description("enter collapse")]
   ];
 };
 
 // packages/host-ui/src/pi/blocks/campUiTranscriptBlocks.ts
+var toolResultErrorText = (result) => {
+  for (const content of result.content) {
+    if (content.kind === "text" && content.text.trim() !== "") return content.text;
+  }
+  return void 0;
+};
 var contentMarkdown = (message, includeToolCalls) => message.content.flatMap((content) => {
   if (content.kind === "text") return [content.text];
   if (content.kind === "thinking") {
@@ -1290,6 +1415,17 @@ var renderUnmatchedToolResult = (message, width, expanded) => {
     width
   );
 };
+var exploredRead = (toolCall, path, result) => {
+  const range = campUiExploredReadRange(toolCall.arguments);
+  const errorMessage = result?.isError === true ? result.errorMessage ?? toolResultErrorText(result) ?? "read failed" : void 0;
+  return {
+    toolCallId: toolCall.toolCallId,
+    path,
+    status: result === void 0 ? CampUiExploredStatus.running : result.isError === true ? CampUiExploredStatus.failed : CampUiExploredStatus.completed,
+    ...range === void 0 ? {} : { range },
+    ...errorMessage === void 0 ? {} : { errorMessage }
+  };
+};
 var renderTranscript = (transcript, width, expandedDetailBlockIds) => {
   const results = /* @__PURE__ */ new Map();
   const callIds = /* @__PURE__ */ new Set();
@@ -1301,23 +1437,45 @@ var renderTranscript = (transcript, width, expandedDetailBlockIds) => {
       if (content.kind === "tool-call") callIds.add(content.toolCallId);
     }
   }
-  return transcript.flatMap((message, index) => {
+  const blocks = [];
+  let group = [];
+  const closeGroup = () => {
+    const first = group[0];
+    if (first === void 0) return;
+    const blockId = `explored:${first.toolCallId}`;
+    blocks.push({
+      id: blockId,
+      lines: renderCampUiExploredGroup(group, width, expandedDetailBlockIds.has(blockId)),
+      toggleable: true
+    });
+    group = [];
+  };
+  transcript.forEach((message, index) => {
     const messageId = message.id ?? String(index);
     if (message.role === "toolResult") {
+      if (message.toolCallId !== void 0 && callIds.has(message.toolCallId)) return;
+      closeGroup();
       const blockId = `tool-result:${messageId}`;
-      return message.toolCallId !== void 0 && callIds.has(message.toolCallId) ? [] : [
-        {
-          id: blockId,
-          lines: renderUnmatchedToolResult(message, width, expandedDetailBlockIds.has(blockId)),
-          toggleable: true
-        }
-      ];
+      blocks.push({
+        id: blockId,
+        lines: renderUnmatchedToolResult(message, width, expandedDetailBlockIds.has(blockId)),
+        toggleable: true
+      });
+      return;
     }
-    const blocks = [];
     const messageLines = renderMessage(message, width);
-    if (messageLines.length > 0) blocks.push({ id: `message:${messageId}`, lines: messageLines });
+    if (messageLines.length > 0) {
+      closeGroup();
+      blocks.push({ id: `message:${messageId}`, lines: messageLines });
+    }
     for (const content of message.content) {
       if (content.kind !== "tool-call") continue;
+      const path = isCampUiExploredTool(content.toolName) ? campUiExploredReadPath(content.arguments) : void 0;
+      if (path !== void 0) {
+        group.push(exploredRead(content, path, results.get(content.toolCallId)));
+        continue;
+      }
+      closeGroup();
       const blockId = `tool-call:${content.toolCallId}`;
       blocks.push({
         id: blockId,
@@ -1330,8 +1488,9 @@ var renderTranscript = (transcript, width, expandedDetailBlockIds) => {
         toggleable: results.has(content.toolCallId)
       });
     }
-    return blocks;
   });
+  closeGroup();
+  return blocks;
 };
 var campUiTranscriptBlockRenderer = {
   id: "transcript",
@@ -1361,7 +1520,7 @@ var makeCampUiDetailComponent = (context, registry = defaultCampUiDetailBlockRen
       renderedRanges = [];
       visibleRanges = [];
       const model = context.readModel();
-      const selectTheme = getSelectListTheme7();
+      const selectTheme = getSelectListTheme8();
       const workerId = model.state.selectedWorkerId;
       if (workerId === void 0) return [selectTheme.description("No worker selected")];
       const worker = findCampUiWorker(model.snapshot, workerId);
@@ -1464,11 +1623,11 @@ var makeCampUiDetailComponent = (context, registry = defaultCampUiDetailBlockRen
 };
 
 // packages/host-ui/src/pi/layout/campUiChrome.ts
-import { getSelectListTheme as getSelectListTheme8 } from "@earendil-works/pi-coding-agent";
+import { getSelectListTheme as getSelectListTheme9 } from "@earendil-works/pi-coding-agent";
 var makeCampUiCampHeader = (context) => ({
   render: (viewport) => {
     const snapshot = context.readModel().snapshot;
-    const theme = getSelectListTheme8();
+    const theme = getSelectListTheme9();
     const mode = snapshot.placement === "external" ? "agentless" : "foreman";
     return [
       fitCampUiLine(theme.description(snapshot.displayName), viewport.width),
@@ -1482,7 +1641,7 @@ var makeCampUiCampHeader = (context) => ({
 var makeCampUiSeat = (context) => ({
   render: (viewport) => {
     const snapshot = context.readModel().snapshot;
-    const theme = getSelectListTheme8();
+    const theme = getSelectListTheme9();
     const external = snapshot.placement === "external";
     const controller = snapshot.controllerConnected ? renderCampUiStatus("live", CampUiTone.success, CampUiGlyph.live) : renderCampUiStatus("lost", CampUiTone.error);
     return [
@@ -1497,7 +1656,7 @@ var makeCampUiRoster = (context) => ({
   focusable: true,
   render: (viewport) => {
     const model = context.readModel();
-    const theme = getSelectListTheme8();
+    const theme = getSelectListTheme9();
     const focused = model.state.focusedSlotId === CampUiSlot.roster;
     if (model.snapshot.workers.length === 0) {
       return [theme.description("No workers")];
@@ -1538,7 +1697,7 @@ var makeCampUiRoster = (context) => ({
 var makeCampUiSessionHeader = (context) => ({
   render: (viewport) => {
     const model = context.readModel();
-    const theme = getSelectListTheme8();
+    const theme = getSelectListTheme9();
     const workerId = model.state.selectedWorkerId;
     if (workerId === void 0) {
       return [fitCampUiLine(theme.description("Select a worker"), viewport.width)];
@@ -1558,7 +1717,7 @@ var makeCampUiSessionHeader = (context) => ({
 });
 
 // packages/host-ui/src/pi/layout/campUiFooter.ts
-import { getMarkdownTheme as getMarkdownTheme8, getSelectListTheme as getSelectListTheme9 } from "@earendil-works/pi-coding-agent";
+import { getMarkdownTheme as getMarkdownTheme8, getSelectListTheme as getSelectListTheme10 } from "@earendil-works/pi-coding-agent";
 var aggregateCampUsage = (workers) => {
   const usages = workers.flatMap(
     (worker) => worker.snapshot.session?.usage === void 0 ? [] : [worker.snapshot.session.usage]
@@ -1591,7 +1750,7 @@ var diagnosticText = (value) => {
 var makeCampUiCampFooter = (context) => ({
   render: (viewport) => {
     const model = context.readModel();
-    const theme = getSelectListTheme9();
+    const theme = getSelectListTheme10();
     const health = model.snapshot.health;
     const usage = aggregateUsageText(aggregateCampUsage(model.snapshot.workers));
     const actionError = diagnosticText(model.state.lastActionError);
@@ -1610,7 +1769,7 @@ var makeCampUiCampFooter = (context) => ({
 var makeCampUiSessionFooter = (context) => ({
   render: (viewport) => {
     const model = context.readModel();
-    const theme = getSelectListTheme9();
+    const theme = getSelectListTheme10();
     const workerId = model.state.selectedWorkerId;
     const worker = workerId === void 0 ? void 0 : findCampUiWorker(model.snapshot, workerId);
     const usage = worker?.snapshot.session?.usage;
@@ -1635,9 +1794,9 @@ var makeCampUiSessionFooter = (context) => ({
 });
 
 // packages/host-ui/src/pi/layout/campUiResources.ts
-import { getSelectListTheme as getSelectListTheme10 } from "@earendil-works/pi-coding-agent";
+import { getSelectListTheme as getSelectListTheme11 } from "@earendil-works/pi-coding-agent";
 var renderResourceTree = (label, value, tone, width) => {
-  const theme = getSelectListTheme10();
+  const theme = getSelectListTheme11();
   const lines = [
     theme.description(label),
     `${theme.description("\u2514\u2500")} ${renderCampUiStatus(value, tone)}`
@@ -1752,11 +1911,11 @@ var makeDefaultCampUiContributions = (tui, detailBlocks) => [
 ];
 
 // packages/host-ui/src/pi/layout/campUiSection.ts
-import { getMarkdownTheme as getMarkdownTheme9, getSelectListTheme as getSelectListTheme11 } from "@earendil-works/pi-coding-agent";
+import { getMarkdownTheme as getMarkdownTheme9, getSelectListTheme as getSelectListTheme12 } from "@earendil-works/pi-coding-agent";
 import { visibleWidth as visibleWidth3 } from "@earendil-works/pi-tui";
 var renderHeader = (header, width) => {
   const theme = getMarkdownTheme9();
-  const selectTheme = getSelectListTheme11();
+  const selectTheme = getSelectListTheme12();
   const rule2 = header.focused === true ? selectTheme.selectedPrefix : theme.codeBlockBorder;
   const title = header.focused === true ? selectTheme.selectedText : theme.heading;
   const ruleCharacter = header.focused === true ? "\u2501" : "\u2500";
@@ -2366,7 +2525,7 @@ var mountPiCampUi = (options) => Effect_exports.gen(function* () {
 });
 
 // packages/host-ui/src/run-selector/campRunSelector.ts
-import { getMarkdownTheme as getMarkdownTheme11, getSelectListTheme as getSelectListTheme12, initTheme as initTheme2 } from "@earendil-works/pi-coding-agent";
+import { getMarkdownTheme as getMarkdownTheme11, getSelectListTheme as getSelectListTheme13, initTheme as initTheme2 } from "@earendil-works/pi-coding-agent";
 import {
   Key as Key4,
   matchesKey as matchesKey4,
@@ -2389,7 +2548,7 @@ var PiCampRunSelectorRoot = class {
     const height = Math.max(0, this.getHeight());
     const viewportWidth = Math.max(0, width - 1);
     const markdown = getMarkdownTheme11();
-    const selection = getSelectListTheme12();
+    const selection = getSelectListTheme13();
     const header = `${markdown.codeBlockBorder("\u2500\u2500")} ${markdown.heading("Resume camp")} ${markdown.codeBlockBorder("\u2500".repeat(Math.max(0, viewportWidth - 16)))}`;
     const available = Math.max(0, height - 2);
     const capacity = Math.max(1, Math.floor(available / 2));
@@ -2524,6 +2683,13 @@ export {
   makeCampUiComposerComponent,
   campUiEquipmentBlockRenderer,
   renderCampUiPanel,
+  CAMP_UI_EXPLORED_TOOL_NAMES,
+  CAMP_UI_EXPLORED_COLLAPSED_PATHS,
+  CampUiExploredStatus,
+  isCampUiExploredTool,
+  campUiExploredReadPath,
+  campUiExploredReadRange,
+  renderCampUiExploredGroup,
   CAMP_UI_DEFAULT_TOOL_PREVIEW_LINES,
   CAMP_UI_BASH_PREVIEW_LINES,
   renderCampUiToolResult,

package/dist/{chunk-C7GQZ3PV.js → chunk-GLWKYPVL.js}

@@ -28,7 +28,7 @@ import {
   makePlatform,
   makeRunMain,
   stdin
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   BaseProto,
   __export,

package/dist/{chunk-4IQLMJ25.js → chunk-GZTHKLSX.js}

@@ -8,20 +8,22 @@ import {
   makeDoctorReport,
   resolveCampSurface,
   withCampRpc
-} from "./chunk-VHGA3U67.js";
+} from "./chunk-XI3HWC7Q.js";
 import {
   PI_RUNTIME_VERSION,
   PiModelCatalogIssueCode,
   inspectPiModelCatalog,
   makePiOperatorResources
-} from "./chunk-GCJD6IMI.js";
+} from "./chunk-44I2RCT5.js";
 import {
   CampHealthComponentStatus,
   CampHealthOverallStatus,
+  CampHealthVersionError,
   CampHostReadiness,
   CampLifecycle,
   CampManifestInvalidError,
   CampManifestVersionError,
+  DirectToolSandboxKind,
   FileSystem_exports,
   PRIIISK_HOST_VERSION,
   PRIIISK_PROTOCOL_PACKAGE_VERSION,
@@ -32,6 +34,8 @@ import {
   campManifestHostGeneration,
   campProjectPaths,
   campRecoveryDiagnosticFromCause,
+  currentDirectToolSandbox,
+  describeDirectToolSandbox,
   describeProjectConfigOverrides,
   findCampControllerHealthFailure,
   findCampRecoveryHealthComponent,
@@ -44,7 +48,7 @@ import {
   resolveCredentialsPath,
   resolveProjectScope,
   resolveWorkerConfigPath
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   Clock_exports,
   Effect_exports,
@@ -74,6 +78,20 @@ var checkRuntime = () => {
     }
   );
 };
+var checkDirectToolSandbox = () => {
+  const sandbox = currentDirectToolSandbox();
+  const active = sandbox.kind !== DirectToolSandboxKind.none;
+  return doctorCheck(
+    "tools.sandbox",
+    active ? DoctorCheckStatus.pass : DoctorCheckStatus.warning,
+    describeDirectToolSandbox(sandbox),
+    {
+      mechanism: sandbox.kind,
+      ...sandbox.absence === void 0 ? {} : { absence: sandbox.absence },
+      ...sandbox.detail === void 0 ? {} : { detail: sandbox.detail }
+    }
+  );
+};
 var projectConfigDetails = (fs) => resolveProjectScope.pipe(
   Effect_exports.flatMap(
     (scope) => loadProjectWorkerConfig(fs, scope.cwd).pipe(
@@ -337,7 +355,25 @@ var durableHealthFallback = (fs, paths, project, manifest, expectedLive) => Effe
   ),
   Effect_exports.catchAll(
     (cause) => Effect_exports.succeed(
-      doctorCheck(
+      /*
+       * A file left by an earlier runtime version is outdated evidence, not a
+       * broken camp: the next `camp up` replaces it. Calling it invalid turned
+       * every upgrade into a red doctor report (priiisk-nss.6.18). Damage and a
+       * mismatch under the current version stay failures.
+       */
+      cause instanceof CampHealthVersionError ? doctorCheck(
+        "health.durable",
+        expectedLive ? DoctorCheckStatus.warning : DoctorCheckStatus.skipped,
+        "Durable health snapshot was written by an earlier runtime version",
+        {
+          path: paths.healthPath,
+          stale: true,
+          errorCode: "unsupported_version",
+          expectedVersion: cause.expectedVersion,
+          receivedVersion: cause.receivedVersion,
+          recoveryAction: "camp_up_fresh"
+        }
+      ) : doctorCheck(
         "health.durable",
         DoctorCheckStatus.failure,
         "Durable health snapshot is invalid",
@@ -574,6 +610,7 @@ var checkSurface = (manifest) => (manifest !== void 0 && manifest.lifecycle !==
 var runDoctor = Effect_exports.gen(function* () {
   const fs = yield* FileSystem_exports.FileSystem;
   const runtime = checkRuntime();
+  const sandbox = checkDirectToolSandbox();
   const config = yield* checkConfig(fs);
   const piModels = yield* checkPiModels(fs);
   const projectResult = yield* Effect_exports.either(resolveProjectScope);
@@ -595,6 +632,7 @@ var runDoctor = Effect_exports.gen(function* () {
         runtime,
         config,
         ...piModels,
+        sandbox,
         surface2,
         ...skipped
       ],
@@ -614,6 +652,7 @@ var runDoctor = Effect_exports.gen(function* () {
       runtime,
       config,
       ...piModels,
+      sandbox,
       storage,
       manifestResult.check,
       surface,

package/dist/{chunk-PIZUXHCN.js → chunk-JFAW425C.js}

@@ -3,6 +3,8 @@ const require = __priiiskCreateRequire(import.meta.url);
 import {
   CAMP_UI_BASH_PREVIEW_LINES,
   CAMP_UI_DEFAULT_TOOL_PREVIEW_LINES,
+  CAMP_UI_EXPLORED_COLLAPSED_PATHS,
+  CAMP_UI_EXPLORED_TOOL_NAMES,
   CAMP_UI_SUBSCRIPTION_BASE_DELAY_MS,
   CAMP_UI_SUBSCRIPTION_MAX_RETRIES,
   CampUiAssistantMessage,
@@ -11,6 +13,7 @@ import {
   CampUiCompositionError,
   CampUiContributionStrategy,
   CampUiControllerError,
+  CampUiExploredStatus,
   CampUiFocusDirection,
   CampUiGlyph,
   CampUiHealthStatus,
@@ -29,6 +32,8 @@ import {
   allocateCampUiSectionRows,
   campUiAskBlockId,
   campUiEquipmentBlockRenderer,
+  campUiExploredReadPath,
+  campUiExploredReadRange,
   campUiPendingAskBlockRenderer,
   campUiPendingAskTargets,
   campUiSubscriptionRetryDelay,
@@ -48,6 +53,7 @@ import {
   formatCampUiDuration,
   hasCampUiTextContent,
   hasPendingCampUiAsk,
+  isCampUiExploredTool,
   joinCampUiColumns,
   jsonText,
   makeCampUiComponentGroup,
@@ -66,6 +72,7 @@ import {
   renderCampUiDetailBlockLayout,
   renderCampUiDetailBlocks,
   renderCampUiDirectedBlock,
+  renderCampUiExploredGroup,
   renderCampUiPanel,
   renderCampUiState,
   renderCampUiStatus,
@@ -77,11 +84,13 @@ import {
   selectCampRun,
   styleCampUiTone,
   uniqueCampUiNames
-} from "./chunk-Z64QXV3O.js";
+} from "./chunk-62BTCFUO.js";
 import "./chunk-KFSFN6L5.js";
 export {
   CAMP_UI_BASH_PREVIEW_LINES,
   CAMP_UI_DEFAULT_TOOL_PREVIEW_LINES,
+  CAMP_UI_EXPLORED_COLLAPSED_PATHS,
+  CAMP_UI_EXPLORED_TOOL_NAMES,
   CAMP_UI_SUBSCRIPTION_BASE_DELAY_MS,
   CAMP_UI_SUBSCRIPTION_MAX_RETRIES,
   CampUiAssistantMessage,
@@ -90,6 +99,7 @@ export {
   CampUiCompositionError,
   CampUiContributionStrategy,
   CampUiControllerError,
+  CampUiExploredStatus,
   CampUiFocusDirection,
   CampUiGlyph,
   CampUiHealthStatus,
@@ -108,6 +118,8 @@ export {
   allocateCampUiSectionRows,
   campUiAskBlockId,
   campUiEquipmentBlockRenderer,
+  campUiExploredReadPath,
+  campUiExploredReadRange,
   campUiPendingAskBlockRenderer,
   campUiPendingAskTargets,
   campUiSubscriptionRetryDelay,
@@ -127,6 +139,7 @@ export {
   formatCampUiDuration,
   hasCampUiTextContent,
   hasPendingCampUiAsk,
+  isCampUiExploredTool,
   joinCampUiColumns,
   jsonText,
   makeCampUiComponentGroup,
@@ -145,6 +158,7 @@ export {
   renderCampUiDetailBlockLayout,
   renderCampUiDetailBlocks,
   renderCampUiDirectedBlock,
+  renderCampUiExploredGroup,
   renderCampUiPanel,
   renderCampUiState,
   renderCampUiStatus,

package/dist/{chunk-T6NUWP6F.js → chunk-QX5EESCS.js}

@@ -3545,12 +3545,12 @@ var posixImpl = /* @__PURE__ */ Path.of({
   resolve,
   normalize(path) {
     if (path.length === 0) return ".";
-    const isAbsolute = path.charCodeAt(0) === 47;
+    const isAbsolute2 = path.charCodeAt(0) === 47;
     const trailingSeparator = path.charCodeAt(path.length - 1) === 47;
-    path = normalizeStringPosix(path, !isAbsolute);
-    if (path.length === 0 && !isAbsolute) path = ".";
+    path = normalizeStringPosix(path, !isAbsolute2);
+    if (path.length === 0 && !isAbsolute2) path = ".";
     if (path.length > 0 && trailingSeparator) path += "/";
-    if (isAbsolute) return "/" + path;
+    if (isAbsolute2) return "/" + path;
     return path;
   },
   isAbsolute(path) {
@@ -3770,9 +3770,9 @@ var posixImpl = /* @__PURE__ */ Path.of({
     };
     if (path.length === 0) return ret;
     let code = path.charCodeAt(0);
-    const isAbsolute = code === 47;
+    const isAbsolute2 = code === 47;
     let start3;
-    if (isAbsolute) {
+    if (isAbsolute2) {
       ret.root = "/";
       start3 = 1;
     } else {
@@ -3808,11 +3808,11 @@ var posixImpl = /* @__PURE__ */ Path.of({
     preDotState === 0 || // The (right-most) trimmed path component is exactly '..'
     preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {
       if (end !== -1) {
-        if (startPart === 0 && isAbsolute) ret.base = ret.name = path.slice(1, end);
+        if (startPart === 0 && isAbsolute2) ret.base = ret.name = path.slice(1, end);
         else ret.base = ret.name = path.slice(startPart, end);
       }
     } else {
-      if (startPart === 0 && isAbsolute) {
+      if (startPart === 0 && isAbsolute2) {
         ret.name = path.slice(1, startDot);
         ret.base = path.slice(1, end);
       } else {
@@ -3822,7 +3822,7 @@ var posixImpl = /* @__PURE__ */ Path.of({
       ret.ext = path.slice(startDot, end);
     }
     if (startPart > 0) ret.dir = path.slice(0, startPart - 1);
-    else if (isAbsolute) ret.dir = "/";
+    else if (isAbsolute2) ret.dir = "/";
     return ret;
   },
   sep: "/",
@@ -10163,8 +10163,8 @@ var findAssetRoot = (moduleUrl, directoryName) => {
 };
 var assetRoots = /* @__PURE__ */ new Map();
 var resolveRuntimeAssetRoot = (moduleUrl, directoryName) => {
-  const cached2 = assetRoots.get(directoryName);
-  if (cached2 !== void 0) return cached2;
+  const cached3 = assetRoots.get(directoryName);
+  if (cached3 !== void 0) return cached3;
   const resolved = findAssetRoot(moduleUrl, directoryName);
   assetRoots.set(directoryName, resolved);
   return resolved;
@@ -10551,9 +10551,108 @@ var listWorkerModelCatalogEntries = (config) => {
   })).sort((left, right) => left.alias.localeCompare(right.alias));
 };
 
+// packages/config/src/sandbox/directToolSandbox.ts
+import { execFileSync } from "node:child_process";
+import { accessSync, constants } from "node:fs";
+import { delimiter, isAbsolute, join as join8 } from "node:path";
+var DirectToolSandboxKind = {
+  bubblewrap: "bubblewrap",
+  none: "none"
+};
+var DirectToolSandboxAbsence = {
+  unsupportedPlatform: "unsupported_platform",
+  binaryMissing: "binary_missing",
+  probeFailed: "probe_failed",
+  disabled: "disabled"
+};
+var DIRECT_TOOL_SANDBOX_ENV = "PRIIISK_DIRECT_TOOL_SANDBOX";
+var resolveExecutablePath = (bin, environment = process.env) => {
+  const executable = (candidate) => {
+    try {
+      accessSync(candidate, constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  };
+  if (bin.includes("/")) return isAbsolute(bin) && executable(bin) ? bin : void 0;
+  for (const directory of (environment.PATH ?? "").split(delimiter)) {
+    if (directory === "") continue;
+    const candidate = join8(directory, bin);
+    if (executable(candidate)) return candidate;
+  }
+  return void 0;
+};
+var sandboxArguments = (cwd, writable) => [
+  "--unshare-all",
+  "--ro-bind",
+  "/",
+  "/",
+  "--dev",
+  "/dev",
+  "--proc",
+  "/proc",
+  "--tmpfs",
+  "/tmp",
+  ...writable ? ["--bind", cwd, cwd] : [],
+  "--chdir",
+  cwd,
+  "--die-with-parent",
+  "--new-session",
+  "--"
+];
+var probeBubblewrap = (command) => {
+  try {
+    execFileSync(command, [...sandboxArguments("/", false), "/bin/true"], {
+      stdio: "ignore",
+      timeout: 5e3
+    });
+    return void 0;
+  } catch (cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+  }
+};
+var cached2;
+var detectDirectToolSandbox = (environment = process.env, platform = process.platform) => {
+  if (environment[DIRECT_TOOL_SANDBOX_ENV] === "0") {
+    return { kind: DirectToolSandboxKind.none, absence: DirectToolSandboxAbsence.disabled };
+  }
+  if (platform !== "linux") {
+    return {
+      kind: DirectToolSandboxKind.none,
+      absence: DirectToolSandboxAbsence.unsupportedPlatform,
+      detail: platform
+    };
+  }
+  const command = resolveExecutablePath("bwrap", environment);
+  if (command === void 0) {
+    return {
+      kind: DirectToolSandboxKind.none,
+      absence: DirectToolSandboxAbsence.binaryMissing,
+      detail: "bwrap"
+    };
+  }
+  const failure = probeBubblewrap(command);
+  return failure === void 0 ? { kind: DirectToolSandboxKind.bubblewrap, command } : {
+    kind: DirectToolSandboxKind.none,
+    absence: DirectToolSandboxAbsence.probeFailed,
+    detail: failure
+  };
+};
+var currentDirectToolSandbox = () => {
+  cached2 ??= detectDirectToolSandbox();
+  return cached2;
+};
+var directToolSandboxCommand = (sandbox2, executablePath, args, options4) => sandbox2.kind === DirectToolSandboxKind.bubblewrap && sandbox2.command !== void 0 ? {
+  command: sandbox2.command,
+  args: [...sandboxArguments(options4.cwd, true), executablePath, ...args]
+} : { command: executablePath, args };
+var isDirectToolSandboxFailure = (stderr3) => stderr3.startsWith("bwrap:");
+var describeDirectToolSandbox = (sandbox2) => sandbox2.kind === DirectToolSandboxKind.bubblewrap ? "External binaries run in a bubblewrap sandbox: read-only filesystem, writable worker directory, no network" : sandbox2.absence === DirectToolSandboxAbsence.disabled ? `External binaries run without an OS sandbox: disabled by ${DIRECT_TOOL_SANDBOX_ENV}` : sandbox2.absence === DirectToolSandboxAbsence.unsupportedPlatform ? `External binaries run without an OS sandbox: no supported mechanism on ${sandbox2.detail ?? "this platform"}` : sandbox2.absence === DirectToolSandboxAbsence.binaryMissing ? "External binaries run without an OS sandbox: bubblewrap (bwrap) is not installed" : "External binaries run without an OS sandbox: bubblewrap is present but cannot start";
+
 // packages/protocol/src/domain/protocolVersion.ts
 var PRIIISK_PROTOCOL_VERSION = "11";
-var PRIIISK_PROTOCOL_PACKAGE_VERSION = "0.1.3";
+var PRIIISK_PROTOCOL_PACKAGE_VERSION = "0.1.4";
 var ProtocolVersionSchema = Schema_exports.String.pipe(Schema_exports.minLength(1));
 
 // packages/protocol/src/domain/protocolIdentifiers.ts
@@ -13428,7 +13527,7 @@ var CampProtocol = class extends RpcGroup_exports.make(
 };
 
 // packages/camp-state/src/bootstrap/campHostVersion.ts
-var PRIIISK_HOST_VERSION = "0.1.3";
+var PRIIISK_HOST_VERSION = "0.1.4";
 
 // packages/surface/src/domain/surfaceModel.ts
 var NonEmptyString7 = Schema_exports.String.pipe(Schema_exports.minLength(1));
@@ -14069,42 +14168,47 @@ var campHealthLiveness = (snapshot, now, staleAfterMs = CAMP_HEALTH_STALE_AFTER_
 import { randomUUID as randomUUID3 } from "node:crypto";
 var CampHealthPersistenceError = class extends Data_exports.TaggedError("CampHealthPersistenceError") {
 };
+var CampHealthVersionError = class extends Data_exports.TaggedError("CampHealthVersionError") {
+};
 var decodeHealth = Schema_exports.decodeUnknown(CampHealthSnapshotSchema, {
   onExcessProperty: "error"
 });
+var readError = (path, message, cause) => new CampHealthPersistenceError({ operation: "read", path, message, cause });
+var decodeCampHealth = (path, value) => {
+  if (typeof value === "object" && value !== null && "schemaVersion" in value && typeof value.schemaVersion === "number" && Number.isSafeInteger(value.schemaVersion) && value.schemaVersion !== CAMP_HEALTH_SCHEMA_VERSION) {
+    return Effect_exports.fail(
+      new CampHealthVersionError({
+        path,
+        expectedVersion: CAMP_HEALTH_SCHEMA_VERSION,
+        receivedVersion: value.schemaVersion,
+        message: `health snapshot schemaVersion ${String(value.schemaVersion)} was written by another runtime version; this runtime writes ${String(CAMP_HEALTH_SCHEMA_VERSION)}`
+      })
+    );
+  }
+  return decodeHealth(value).pipe(
+    Effect_exports.mapError(
+      (cause) => readError(path, `health snapshot does not match schema: ${String(cause)}`, cause)
+    )
+  );
+};
 var loadCampHealth = (fs, path) => fs.exists(path).pipe(
+  Effect_exports.mapError(
+    (cause) => readError(path, `health snapshot is unavailable: ${String(cause)}`, cause)
+  ),
   Effect_exports.flatMap(
     (exists) => exists ? fs.readFileString(path).pipe(
+      Effect_exports.mapError(
+        (cause) => readError(path, `health snapshot is unavailable: ${String(cause)}`, cause)
+      ),
       Effect_exports.flatMap(
         (contents) => Effect_exports.try({
           try: () => JSON.parse(contents),
-          catch: (cause) => new CampHealthPersistenceError({
-            operation: "read",
-            path,
-            message: `health snapshot contains invalid JSON: ${String(cause)}`,
-            cause
-          })
-        })
-      ),
-      Effect_exports.flatMap(decodeHealth),
-      Effect_exports.mapError(
-        (cause) => cause instanceof CampHealthPersistenceError ? cause : new CampHealthPersistenceError({
-          operation: "read",
-          path,
-          message: `health snapshot is unavailable: ${String(cause)}`,
-          cause
+          catch: (cause) => readError(path, `health snapshot contains invalid JSON: ${String(cause)}`, cause)
         })
       ),
+      Effect_exports.flatMap((value) => decodeCampHealth(path, value)),
       Effect_exports.map(Option_exports.some)
     ) : Effect_exports.succeed(Option_exports.none())
-  ),
-  Effect_exports.mapError(
-    (cause) => cause instanceof CampHealthPersistenceError ? cause : new CampHealthPersistenceError({
-      operation: "read",
-      path,
-      message: `health snapshot is unavailable: ${String(cause)}`,
-      cause
-    })
   )
 );
 var saveCampHealth = (fs, path, snapshot) => {
@@ -14224,7 +14328,7 @@ var launchCampPrepared = (surface, request, persistIntent, handshake, persist) =
 
 // packages/camp-state/src/history/campLegacyState.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var LEGACY_CAMP_MANIFEST_VERSION = 1;
 var CampLegacyStateErrorCode = {
   invalidManifest: "legacy_manifest_invalid",
@@ -14289,7 +14393,7 @@ var moveStateFile = (fs, source, destination, message) => fs.rename(source, dest
 );
 var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
   const timestamp = yield* Clock_exports.currentTimeMillis;
-  const directory = join8(
+  const directory = join9(
     paths.quarantineDir,
     `legacy-v${String(LEGACY_CAMP_MANIFEST_VERSION)}-${String(timestamp)}-${randomUUID4()}`
   );
@@ -14303,8 +14407,8 @@ var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
       )
     )
   );
-  const manifestPath = join8(directory, "camp.json");
-  const healthPath = join8(directory, "health.json");
+  const manifestPath = join9(directory, "camp.json");
+  const healthPath = join9(directory, "health.json");
   const hasHealth = yield* fs.exists(paths.healthPath).pipe(
     Effect_exports.mapError(
       (cause) => legacyError(
@@ -14357,7 +14461,7 @@ var quarantineLegacyCampState = (fs, paths) => Effect_exports.gen(function* () {
 });
 
 // packages/camp-state/src/history/campRunCatalog.ts
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 
 // packages/camp-state/src/history/campRunCatalogModel.ts
 var CampRunCatalogErrorCode = {
@@ -14447,7 +14551,7 @@ var listCampRuns = (fs, project, paths) => Effect_exports.gen(function* () {
   );
   const historical = yield* Effect_exports.forEach(
     entries,
-    (entry) => loadCampManifest(fs, join9(paths.runsDir, entry, "camp.json")).pipe(
+    (entry) => loadCampManifest(fs, join10(paths.runsDir, entry, "camp.json")).pipe(
       Effect_exports.mapError(
         (cause) => catalogError(
           "list",
@@ -14459,7 +14563,7 @@ var listCampRuns = (fs, project, paths) => Effect_exports.gen(function* () {
       Effect_exports.flatMap(
         Option_exports.match({
           onNone: () => Effect_exports.succeed(void 0),
-          onSome: (manifest) => campRunPaths(paths, manifest.runId).manifestPath !== join9(paths.runsDir, entry, "camp.json") ? Effect_exports.fail(
+          onSome: (manifest) => campRunPaths(paths, manifest.runId).manifestPath !== join10(paths.runsDir, entry, "camp.json") ? Effect_exports.fail(
             catalogError(
               "list",
               CampRunCatalogErrorCode.nonCanonicalRun,
@@ -14801,6 +14905,12 @@ export {
   resolveRolePreset,
   resolveHirePreset,
   listWorkerModelCatalogEntries,
+  DirectToolSandboxKind,
+  resolveExecutablePath,
+  currentDirectToolSandbox,
+  directToolSandboxCommand,
+  isDirectToolSandboxFailure,
+  describeDirectToolSandbox,
   NetSocket,
   fromDuplex,
   layerNet,
@@ -14839,6 +14949,7 @@ export {
   findCampRecoveryHealthComponent,
   CAMP_HEALTH_HEARTBEAT_PERSIST_INTERVAL_MS,
   campHealthLiveness,
+  CampHealthVersionError,
   loadCampHealth,
   saveCampHealth,
   LEGACY_CAMP_MANIFEST_VERSION,

package/dist/{chunk-VHGA3U67.js → chunk-XI3HWC7Q.js}

@@ -20,7 +20,7 @@ import {
   layerNet,
   makeCampSurfaceName,
   resolveProjectScopeSync
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   Clock_exports,
   Config_exports,
@@ -111,7 +111,7 @@ var CliSurfaceSelectionError = class extends Data_exports.TaggedError("CliSurfac
 import { randomUUID } from "node:crypto";
 
 // packages/cli/src/domain/cliVersion.ts
-var PRIIISK_CLI_VERSION = "0.1.3";
+var PRIIISK_CLI_VERSION = "0.1.4";
 
 // packages/cli/src/client/campRpcConnection.ts
 var PRIIISK_CONTROLLER_ID_ENV = "PRIIISK_CONTROLLER_ID";

package/dist/priiisk-host.js

@@ -4,14 +4,14 @@ const require = __priiiskCreateRequire(import.meta.url);
 import {
   NodeContext_exports,
   NodeRuntime_exports
-} from "./chunk-C7GQZ3PV.js";
+} from "./chunk-GLWKYPVL.js";
 import {
   CampUiBackendError,
   CampUiHealthStatus,
   CampUiPlacement,
   CampUiRuntimeStatus,
   mountPiCampUi
-} from "./chunk-Z64QXV3O.js";
+} from "./chunk-62BTCFUO.js";
 import {
   PiTransport,
   makePiOperatorResources,
@@ -19,7 +19,7 @@ import {
   makePiTransportLayer,
   requirePiModelCatalog,
   require_undici
-} from "./chunk-GCJD6IMI.js";
+} from "./chunk-44I2RCT5.js";
 import {
   AgentRole,
   AgentRoleSchema,
@@ -66,11 +66,14 @@ import {
   campProjectPaths,
   campRecoveryDiagnosticFromCause,
   campRunPaths,
+  currentDirectToolSandbox,
   directToolName,
+  directToolSandboxCommand,
   findCampRecoveryHealthComponent,
   fromDuplex,
   fromWebSocket,
   hostStoppedCampManifest,
+  isDirectToolSandboxFailure,
   listWorkerModelCatalogEntries,
   loadCampManifest,
   loadReferencedMcpCredentials,
@@ -82,6 +85,7 @@ import {
   resolveCampMcpUnion,
   resolveDefaultPreset,
   resolveDirectTools,
+  resolveExecutablePath,
   resolveHirePreset,
   resolveMcpSecretEnv,
   resolveMcpServers,
@@ -96,7 +100,7 @@ import {
   runningCampManifest,
   saveCampHealth,
   saveCampManifest
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   CampAskRouter,
   CampCancellationCode,
@@ -22412,7 +22416,7 @@ var Client = class extends Protocol {
 };
 
 // packages/mcp-backend/src/connections/clientIdentity.ts
-var backendVersion = "0.1.3";
+var backendVersion = "0.1.4";
 
 // packages/mcp-backend/src/connections/mcpFailure.ts
 var McpFailure = class extends Data_exports.TaggedError("McpFailure") {
@@ -26419,39 +26423,42 @@ var truncate = (value, limit) => {
   return encoded.byteLength <= limit ? { text: value, truncated: false } : { text: encoded.subarray(0, limit).toString("utf8"), truncated: true };
 };
 var binaryCandidates = (bin) => bin === "fd" ? ["fd", "fdfind"] : [bin];
-var runBinary = (bin, args, options, signal) => new Promise((resolve, reject) => {
-  const child = execFile(
-    bin,
-    [...args],
-    {
-      cwd: options.cwd,
-      env: directToolEnvironment(options.environment ?? process.env),
-      timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
-      maxBuffer: MAX_BUFFER_BYTES,
-      ...signal === void 0 ? {} : { signal }
-    },
-    (error2, stdout, stderr) => {
-      const failure = error2;
-      if (failure !== null && failure.code === "ENOENT") {
-        reject(failure);
-        return;
+var runBinary = (executablePath, args, options, environment, signal) => {
+  const sandbox = options.sandbox ?? currentDirectToolSandbox();
+  const launch = directToolSandboxCommand(sandbox, executablePath, args, { cwd: options.cwd });
+  return new Promise((resolve) => {
+    const child = execFile(
+      launch.command,
+      [...launch.args],
+      {
+        cwd: options.cwd,
+        env: environment,
+        timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        maxBuffer: MAX_BUFFER_BYTES,
+        ...signal === void 0 ? {} : { signal }
+      },
+      (error2, stdout, stderr) => {
+        const failure = error2;
+        const sandboxed = launch.command !== executablePath;
+        resolve({
+          stdout,
+          stderr,
+          exitCode: typeof failure?.code === "number" ? failure.code : failure === null ? 0 : 1,
+          signal: child.signalCode ?? void 0,
+          timedOut: failure?.killed === true,
+          ...sandboxed && isDirectToolSandboxFailure(stderr) ? { sandboxFailed: true } : {},
+          ...typeof failure?.code === "string" && failure.code !== "" ? { launchError: `${failure.code}: ${failure.message}` } : {}
+        });
       }
-      resolve({
-        stdout,
-        stderr,
-        exitCode: typeof failure?.code === "number" ? failure.code : failure === null ? 0 : 1,
-        signal: child.signalCode ?? void 0,
-        timedOut: failure?.killed === true
-      });
-    }
-  );
-});
+    );
+  });
+};
 var runWithFallback = async (policy, args, options, signal) => {
+  const environment = directToolEnvironment(options.environment ?? process.env);
   for (const candidate of binaryCandidates(policy.bin)) {
-    try {
-      return await runBinary(candidate, args, options, signal);
-    } catch {
-    }
+    const executablePath = resolveExecutablePath(candidate, environment);
+    if (executablePath === void 0) continue;
+    return await runBinary(executablePath, args, options, environment, signal);
   }
   return void 0;
 };
@@ -26523,7 +26530,19 @@ var makeDirectTool = (declared, options) => ({
       return refusal(detail);
     }
     const run = await runWithFallback(policy, args, options, signal);
-    return run === void 0 ? refusal(`\`${policy.bin}\` is not available on this machine.`) : resultOf(policy, run, options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
+    if (run === void 0) {
+      return refusal(`\`${policy.bin}\` is not available on this machine.`);
+    }
+    if (run.sandboxFailed === true) {
+      return refusal(
+        `\`${policy.bin}\` was not run: the OS sandbox refused to start it.
+${run.stderr.trim()}`
+      );
+    }
+    if (run.launchError !== void 0) {
+      return refusal(`\`${policy.bin}\` could not be started: ${run.launchError}`);
+    }
+    return resultOf(policy, run, options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES);
   }
 });
 var makeDirectTools = (declared, options) => declared.map(

package/dist/priiisk.js

@@ -5,7 +5,7 @@ import {
   fromReadable,
   layer,
   runMain
-} from "./chunk-C7GQZ3PV.js";
+} from "./chunk-GLWKYPVL.js";
 import {
   CliCampLifecycleError,
   CliEquipmentConflict,
@@ -23,7 +23,7 @@ import {
   resolveCampSurface,
   withCampRpc,
   withCampRpcSession
-} from "./chunk-VHGA3U67.js";
+} from "./chunk-XI3HWC7Q.js";
 import {
   CampCommandFailure,
   CampHostReadiness,
@@ -58,7 +58,7 @@ import {
   resolveProjectScopeSync,
   saveCampManifest,
   startingCampManifest
-} from "./chunk-T6NUWP6F.js";
+} from "./chunk-QX5EESCS.js";
 import {
   Cause_exports,
   CommitPrototype,
@@ -19903,7 +19903,7 @@ var campResumeListCommand = Command_exports.make(
   )
 ).pipe(Command_exports.withDescription("Lists saved runs of this project that resume can restore."));
 var runIdArgument = Args_exports.text({ name: "runId" }).pipe(Args_exports.optional);
-var selectCampRunOnDemand = (items) => Effect_exports.promise(() => import("./chunk-PIZUXHCN.js")).pipe(
+var selectCampRunOnDemand = (items) => Effect_exports.promise(() => import("./chunk-JFAW425C.js")).pipe(
   Effect_exports.flatMap((ui) => ui.selectCampRun({ items }))
 );
 var selectAndResume = (json) => {
@@ -19976,7 +19976,7 @@ var rootCommand = Command_exports.make(
 ).pipe(Command_exports.withDescription("Runs and observes a camp of collaborating workers."));
 
 // packages/cli/src/commands/doctorCommand.ts
-var runDoctorOnDemand = Effect_exports.promise(() => import("./chunk-4IQLMJ25.js")).pipe(
+var runDoctorOnDemand = Effect_exports.promise(() => import("./chunk-GZTHKLSX.js")).pipe(
   Effect_exports.flatMap((doctor) => doctor.runDoctor)
 );
 var statusLabel = {
@@ -20672,7 +20672,7 @@ var command = rootCommand.pipe(
 );
 var cli = Command_exports.run(command, {
   name: "priiisk camp control",
-  version: "0.1.3"
+  version: "0.1.4"
 });
 var runCliCommand = (argumentsList) => cli(argumentsList).pipe(
   Effect_exports.matchEffect({

package/package.json

@@ -1,22 +1,22 @@
 {
   "name": "priiisk",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "CLI for running and observing a camp of collaborating agents",
   "type": "module",
   "bin": {
     "priiisk": "./dist/priiisk.js"
   },
   "files": [
-    "dist/chunk-4IQLMJ25.js",
-    "dist/chunk-C7GQZ3PV.js",
-    "dist/chunk-GCJD6IMI.js",
-    "dist/chunk-GCJD6IMI.js.LEGAL.txt",
+    "dist/chunk-44I2RCT5.js",
+    "dist/chunk-44I2RCT5.js.LEGAL.txt",
+    "dist/chunk-62BTCFUO.js",
+    "dist/chunk-GLWKYPVL.js",
+    "dist/chunk-GZTHKLSX.js",
+    "dist/chunk-JFAW425C.js",
     "dist/chunk-KFSFN6L5.js",
-    "dist/chunk-PIZUXHCN.js",
-    "dist/chunk-T6NUWP6F.js",
-    "dist/chunk-T6NUWP6F.js.LEGAL.txt",
-    "dist/chunk-VHGA3U67.js",
-    "dist/chunk-Z64QXV3O.js",
+    "dist/chunk-QX5EESCS.js",
+    "dist/chunk-QX5EESCS.js.LEGAL.txt",
+    "dist/chunk-XI3HWC7Q.js",
     "dist/priiisk-host.js",
     "dist/priiisk.js",
     "profiles",