D4: Add bounded production agent adapters

.github/workflows/agent-isolation.yml

@@ -0,0 +1,25 @@
+name: Agent isolation
+on:
+  push:
+    branches: ['codex/agent-isolation-d2']
+  pull_request:
+    paths:
+      - 'agents/**'
+      - 'git/clone.ts'
+      - 'test/agent-*.test.ts'
+      - '.github/workflows/agent-isolation.yml'
+permissions:
+  contents: read
+jobs:
+  real-docker:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '26.7.0'
+          cache: npm
+      - run: npm ci --ignore-scripts
+      - run: npm run typecheck
+      - run: npx vitest run --no-file-parallelism test/agent-contract.test.ts test/agent-clone.test.ts test/agent-container.test.ts test/agent-network.test.ts test/agent-policy.test.ts test/agent-adapter.test.ts test/agent-supervisor.test.ts

agents/adapters/claude.ts

@@ -0,0 +1,54 @@
+import type { InvocationHandle } from '../contract.ts';
+import { createContainerProfile, ProfileCreationCleanupError } from '../container/profile.ts';
+import { createVendorNetwork, removeVendorNetwork, VendorNetworkCreationCleanupError,
+  type VendorNetwork } from '../network/network.ts';
+import { createClaudeCommand, createPhasePolicy } from '../policy.ts';
+import { retainNetworkCleanup, retainSetupCleanup, startProfileInvocation } from './supervisor.ts';
+import { createAdapterInvocationBudget, type AgentAdapterOptions, type AgentAdapterRequest } from './types.ts';
+
+export function parseClaudeOutput(raw: Buffer): { text: string; providerFailed: boolean } {
+  const envelope = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(raw)) as
+    { result?: unknown; is_error?: unknown };
+  if (typeof envelope.result !== 'string' || typeof envelope.is_error !== 'boolean')
+    throw new Error('Claude returned a malformed output envelope.');
+  return Object.freeze({ text: envelope.result, providerFailed: envelope.is_error });
+}
+
+export function startClaudeInvocation(request: AgentAdapterRequest,
+  oauthToken: string, options: AgentAdapterOptions = {}): InvocationHandle {
+  if (!oauthToken || oauthToken.includes('\0')) throw new Error('Claude OAuth token is malformed.');
+  const policy = createPhasePolicy(request.invocation);
+  const remaining = createAdapterInvocationBudget(request.invocation, options.timeoutMs);
+  let network: VendorNetwork;
+  try { network = createVendorNetwork(request.invocation, request.imageId, Math.min(60_000, remaining())); }
+  catch (error) {
+    if (error instanceof VendorNetworkCreationCleanupError)
+      return retainSetupCleanup(request.invocation, error.retryCleanup, error.startupError, error,
+        'network creation cleanup');
+    throw error;
+  }
+  try {
+    const profile = createContainerProfile({ ...request, policy, network,
+      command: createClaudeCommand(policy, request.prompt), claudeToken: oauthToken,
+      timeoutMs: Math.min(60_000, remaining()) });
+    return startProfileInvocation(profile, { ...options, secrets: { CLAUDE_CODE_OAUTH_TOKEN: oauthToken },
+      invocationBudget: remaining,
+      decode: (_profile, raw) => parseClaudeOutput(raw) });
+  } catch (error) {
+    if (error instanceof ProfileCreationCleanupError) {
+      const retryCleanup = (networkTimeoutMs = 30_000) => {
+        const failures: unknown[] = [];
+        try { error.retryCleanup(); } catch (cleanupError) { failures.push(cleanupError); }
+        try { removeVendorNetwork(network, networkTimeoutMs); } catch (cleanupError) { failures.push(cleanupError); }
+        if (failures.length) throw new AggregateError(failures, 'Adapter setup cleanup did not settle.');
+      };
+      try { retryCleanup(Math.min(30_000, remaining())); }
+      catch (cleanupError) { return retainSetupCleanup(request.invocation, () => retryCleanup(),
+        error.startupError, cleanupError, 'profile and network cleanup'); }
+      throw error.startupError;
+    }
+    try { removeVendorNetwork(network, Math.min(30_000, remaining())); }
+    catch (cleanupError) { return retainNetworkCleanup(request.invocation, network, error, cleanupError); }
+    throw error;
+  }
+}

agents/adapters/codex.ts

@@ -0,0 +1,57 @@
+import type { InvocationHandle } from '../contract.ts';
+import { createContainerProfile, ProfileCreationCleanupError } from '../container/profile.ts';
+import { createVendorNetwork, removeVendorNetwork, VendorNetworkCreationCleanupError,
+  type VendorNetwork } from '../network/network.ts';
+import { createCodexCommand, createPhasePolicy } from '../policy.ts';
+import { readBoundedContainerFile, retainNetworkCleanup, retainSetupCleanup,
+  startProfileInvocation } from './supervisor.ts';
+import { createAdapterInvocationBudget, type AgentAdapterOptions, type AgentAdapterRequest } from './types.ts';
+
+export const CODEX_OUTPUT_FILE = '/run/codeboost-output/final.txt';
+
+export async function readCodexOutput(container: string, maximumBytes: number, timeoutMs = 30_000,
+  signal?: AbortSignal) {
+  const output = await readBoundedContainerFile(container, CODEX_OUTPUT_FILE, maximumBytes, timeoutMs, signal);
+  const text = new TextDecoder('utf-8', { fatal: true }).decode(output);
+  return Object.freeze({ text, additionalBytes: output.length });
+}
+
+export function startCodexInvocation(request: AgentAdapterRequest,
+  authFile: string, options: AgentAdapterOptions = {}): InvocationHandle {
+  if (!authFile || authFile.includes('\0')) throw new Error('Codex auth path is malformed.');
+  const policy = createPhasePolicy(request.invocation);
+  const remaining = createAdapterInvocationBudget(request.invocation, options.timeoutMs);
+  let network: VendorNetwork;
+  try { network = createVendorNetwork(request.invocation, request.imageId, Math.min(60_000, remaining())); }
+  catch (error) {
+    if (error instanceof VendorNetworkCreationCleanupError)
+      return retainSetupCleanup(request.invocation, error.retryCleanup, error.startupError, error,
+        'network creation cleanup');
+    throw error;
+  }
+  try {
+    const profile = createContainerProfile({ ...request, policy, network,
+      command: createCodexCommand(policy, request.prompt), codexAuthFile: authFile, deferredOutput: true,
+      timeoutMs: Math.min(60_000, remaining()) });
+    return startProfileInvocation(profile, { ...options,
+      invocationBudget: remaining,
+      decode: (current, _raw, maximum, timeoutMs, signal) =>
+        readCodexOutput(current.name, maximum, timeoutMs, signal) });
+  } catch (error) {
+    if (error instanceof ProfileCreationCleanupError) {
+      const retryCleanup = (networkTimeoutMs = 30_000) => {
+        const failures: unknown[] = [];
+        try { error.retryCleanup(); } catch (cleanupError) { failures.push(cleanupError); }
+        try { removeVendorNetwork(network, networkTimeoutMs); } catch (cleanupError) { failures.push(cleanupError); }
+        if (failures.length) throw new AggregateError(failures, 'Adapter setup cleanup did not settle.');
+      };
+      try { retryCleanup(Math.min(30_000, remaining())); }
+      catch (cleanupError) { return retainSetupCleanup(request.invocation, () => retryCleanup(),
+        error.startupError, cleanupError, 'profile and network cleanup'); }
+      throw error.startupError;
+    }
+    try { removeVendorNetwork(network, Math.min(30_000, remaining())); }
+    catch (cleanupError) { return retainNetworkCleanup(request.invocation, network, error, cleanupError); }
+    throw error;
+  }
+}