@agentstep/agent-sdk 0.4.13 → 0.4.15

package/dist/{chunk-7BGILLYC.js → chunk-NIOWKTIF.js}

@@ -1,10 +1,10 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-KDAZ5TBL.js → chunk-NK2RCTFI.js}

@@ -1,22 +1,22 @@
 import {
-  prepareCodexOnSprite
-} from "./chunk-JZ5RFO77.js";
+  buildCodexAuthEnv,
+  validateCodexRuntime
+} from "./chunk-5XF65N7J.js";
+import {
+  prepareCodexOnSandbox
+} from "./chunk-7LQN7NVU.js";
 import {
   createCodexTranslator
 } from "./chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
-} from "./chunk-DFE7VZWD.js";
+} from "./chunk-RMEX55EU.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-DAT55TX2.js";
 import {
   buildCodexArgs
 } from "./chunk-NQX7WBA4.js";
-import {
-  buildCodexAuthEnv,
-  validateCodexRuntime
-} from "./chunk-V364DYC3.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";
@@ -41,7 +41,7 @@ var codexBackend = {
   wrapperPath: CODEX_WRAPPER_PATH,
   buildTurn,
   createTranslator: (opts) => createCodexTranslator(opts),
-  prepareOnSprite: (name, provider) => prepareCodexOnSprite(name, provider),
+  prepareOnSandbox: (name, provider) => prepareCodexOnSandbox(name, provider),
   validateRuntime: validateCodexRuntime
 };
 

package/dist/{chunk-OXREXXAQ.js → chunk-NUINUAXO.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs,

package/dist/{chunk-XTZ5RQDF.js → chunk-NUO56TF7.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-FDY5BA67.js";
+} from "./chunk-JDELTTHV.js";
 import {
   init_ids,
   newId
@@ -8,10 +8,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs,
@@ -83,7 +83,7 @@ function updateEnvironmentState(id, state, message) {
 }
 function updateEnvironmentCheckpoint(id, checkpointId, templateSprite) {
   const db = getDrizzle();
-  db.update(schema_exports.environments).set({ checkpoint_id: checkpointId, template_sprite: templateSprite }).where(eq(schema_exports.environments.id, id)).run();
+  db.update(schema_exports.environments).set({ checkpoint_id: checkpointId, template_sandbox: templateSprite }).where(eq(schema_exports.environments.id, id)).run();
 }
 function archiveEnvironment(id) {
   const db = getDrizzle();

package/dist/{chunk-ZIV74JWW.js → chunk-NXRJ7Z4G.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs,

package/dist/{chunk-AHHH4PYB.js → chunk-O45IQUWS.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs,
@@ -17,7 +17,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-DZDWNOEY.js";
+} from "./chunk-5GZEX4HV.js";
 
 // src/db/events.ts
 init_client();

package/dist/{chunk-UXZSRUXD.js → chunk-ORU5GQ4Z.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   listAudit
-} from "./chunk-RL6XEYOD.js";
+} from "./chunk-MHQXDTJB.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-2FWZ247V.js";
+} from "./chunk-6IWTDQJN.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-QYFD2OBI.js → chunk-OWTXN2FU.js}

@@ -173,7 +173,7 @@ var EnvironmentPackages = z.object({
   npm: z.array(z.string()).optional(),
   pip: z.array(z.string()).optional()
 }).openapi({
-  description: "Package lists installed into the sprite during environment setup. All are optional."
+  description: "Package lists installed into the sandbox during environment setup. All are optional."
 });
 var EnvironmentNetworking = z.union([
   z.object({ type: z.literal("unrestricted") }),

package/dist/{chunk-V4P46OHG.js → chunk-P7P2NWZD.js}

@@ -1,11 +1,11 @@
 import {
   installOpencodeWrapper
-} from "./chunk-7XFIUYFM.js";
+} from "./chunk-SWIP7JBQ.js";
 
 // src/backends/opencode/setup.ts
 var SENTINEL_NAME = ".claude-agents-opencode-installed";
-async function prepareOpencodeOnSprite(spriteName, provider) {
-  await installOpencodeWrapper(spriteName, provider);
+async function prepareOpencodeOnSandbox(sandboxName, provider) {
+  await installOpencodeWrapper(sandboxName, provider);
   const script = [
     "set -euo pipefail",
     `SENTINEL="$HOME/${SENTINEL_NAME}"`,
@@ -19,7 +19,7 @@ async function prepareOpencodeOnSprite(spriteName, provider) {
     "/usr/local/bin/opencode --version || $PREFIX/bin/opencode --version",
     'touch "$SENTINEL"'
   ].join(" && ");
-  const result = await provider.exec(spriteName, ["bash", "-c", script], {
+  const result = await provider.exec(sandboxName, ["bash", "-c", script], {
     timeoutMs: 5 * 6e4
     // 5 minutes — cold install typically <30s but leave headroom
   });
@@ -31,5 +31,5 @@ async function prepareOpencodeOnSprite(spriteName, provider) {
 }
 
 export {
-  prepareOpencodeOnSprite
+  prepareOpencodeOnSandbox
 };

package/dist/{chunk-MAW3HLIO.js → chunk-PB7LR2AG.js}

@@ -1,11 +1,11 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-2FWZ247V.js";
+} from "./chunk-6IWTDQJN.js";
 import {
   readSetting,
   writeSetting
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-KEV4OMRF.js → chunk-PNYCULIF.js}

@@ -3,23 +3,23 @@ import {
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
-  reconcileDockerOrphans,
-  reconcileOrphans,
+  reconcileDockerOrphanSandboxes,
+  reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-4BYPJFC5.js";
+} from "./chunk-JOAEFGXZ.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-MXRGQRFX.js";
+} from "./chunk-BMPB7XJH.js";
 import {
   archiveSession,
   getSessionRow,
   listIdleSessions,
   updateSessionStatus
-} from "./chunk-MBLMAWSE.js";
+} from "./chunk-I5ZA45YL.js";
 import {
   getConfig
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 import {
   init_clock,
   nowMs
@@ -51,13 +51,13 @@ async function runSweep() {
     const cfg = getConfig();
     if (cfg.spriteToken) {
       try {
-        await reconcileOrphans();
+        await reconcileOrphanSandboxes();
       } catch (e) {
-        console.warn("[sweeper] reconcile sprites failed:", e);
+        console.warn("[sweeper] reconcile sandboxes failed:", e);
       }
     }
     try {
-      await reconcileDockerOrphans();
+      await reconcileDockerOrphanSandboxes();
     } catch (e) {
       if (!(e instanceof Error) || !e.message.includes("ENOENT")) {
         console.warn("[sweeper] reconcile docker failed:", e);

package/dist/{chunk-VVH5DQ2C.js → chunk-PWWRWR75.js}

@@ -1,7 +1,17 @@
+import {
+  forwardToAnthropic
+} from "./chunk-QLWA4MJ5.js";
+import {
+  isAnthropicApiKey,
+  isPassthroughAllowedPath
+} from "./chunk-W6WKXFHN.js";
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-IJEZAD5O.js";
+} from "./chunk-ADK2TYO4.js";
+import {
+  getConfig
+} from "./chunk-QH57EOKP.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";
@@ -19,6 +29,21 @@ async function authenticate(request) {
   const key = extractKey(request);
   if (!key) throw unauthorized();
   const row = findByRawKey(key);
+  if (isAnthropicApiKey(key)) {
+    if (!getConfig().anthropicPassthroughEnabled) throw unauthorized();
+    return {
+      keyId: "passthrough",
+      name: "anthropic-passthrough",
+      permissions: { admin: false, scope: null },
+      tenantId: null,
+      isGlobalAdmin: false,
+      budgetUsd: null,
+      rateLimitRpm: null,
+      spentUsd: 0,
+      mode: "passthrough",
+      passthroughKey: key
+    };
+  }
   if (!row) throw unauthorized();
   const permissions = hydratePermissions(row.permissions_json);
   return {
@@ -34,11 +59,25 @@ async function authenticate(request) {
     isGlobalAdmin: row.tenant_id === null && permissions.admin,
     budgetUsd: row.budget_usd ?? null,
     rateLimitRpm: row.rate_limit_rpm ?? null,
-    spentUsd: row.spent_usd ?? 0
+    spentUsd: row.spent_usd ?? 0,
+    mode: "gateway"
   };
 }
+async function authenticateAndIntercept(request) {
+  const auth = await authenticate(request);
+  if (auth.mode !== "passthrough") return { kind: "auth", auth };
+  const url = new URL(request.url);
+  if (!isPassthroughAllowedPath(url.pathname)) {
+    throw unauthorized();
+  }
+  const response = await forwardToAnthropic(request, url.pathname, {
+    apiKey: auth.passthroughKey
+  });
+  return { kind: "response", response };
+}
 
 export {
   extractKey,
-  authenticate
+  authenticate,
+  authenticateAndIntercept
 };

package/dist/{chunk-G5RQN53K.js → chunk-PZWVTEL2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-OGONPLTA.js → chunk-QFUJDBET.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-UVCPCX74.js";
+} from "./chunk-VS7AMAMU.js";
 import {
   opencodeBackend
-} from "./chunk-Q4XYK6FF.js";
+} from "./chunk-GJBKDPQD.js";
 import {
   geminiBackend
-} from "./chunk-XLVCC4IB.js";
+} from "./chunk-HWWCVD2R.js";
 import {
   codexBackend
-} from "./chunk-KDAZ5TBL.js";
+} from "./chunk-NK2RCTFI.js";
 import {
   factoryBackend
-} from "./chunk-3MNDEAPX.js";
+} from "./chunk-UJDAT42X.js";
 import {
   claudeBackend
-} from "./chunk-JFY6EH24.js";
+} from "./chunk-SIKTYKVO.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-Q5KHBU7P.js → chunk-QH57EOKP.js}

@@ -1,10 +1,10 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs
@@ -44,15 +44,23 @@ function loadConfig() {
     agentTimeoutMs: num(process.env.AGENT_TIMEOUT_MS, 6e5),
     spriteTimeoutMs: num(process.env.SPRITE_TIMEOUT_MS, 3e4),
     concurrency: num(process.env.CONCURRENCY, 4),
-    maxSpritesPerEnv: num(process.env.MAX_SPRITES_PER_ENV, 8),
+    maxSandboxesPerEnv: num(process.env.MAX_SANDBOXES_PER_ENV, 8),
     sessionMaxAgeMs: num(process.env.SESSION_MAX_AGE_MS, 7 * 24 * 3600 * 1e3),
     sweeperIntervalMs: num(process.env.SWEEPER_INTERVAL_MS, 6e4),
     otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTLP_ENDPOINT || readSetting("otlp_endpoint") || void 0,
     otlpAuthorization: process.env.OTEL_EXPORTER_OTLP_HEADERS_AUTHORIZATION || process.env.OTLP_AUTHORIZATION || readSetting("otlp_authorization") || void 0,
     redactEnvKeys: (process.env.OBS_REDACT_KEYS || readSetting("obs_redact_keys") || "").split(",").map((s) => s.trim()).filter(Boolean),
-    ollamaUrl: process.env.OLLAMA_URL || readSetting("ollama_url") || "http://localhost:11434"
+    ollamaUrl: process.env.OLLAMA_URL || readSetting("ollama_url") || "http://localhost:11434",
+    anthropicPassthroughEnabled: parseBool(
+      process.env.ANTHROPIC_PASSTHROUGH_ENABLED ?? readSetting("anthropic_passthrough_enabled")
+    )
   };
 }
+function parseBool(v) {
+  if (!v) return false;
+  const s = v.toLowerCase();
+  return s === "1" || s === "true" || s === "yes";
+}
 function getConfig() {
   const now = nowMs();
   if (g.__caConfigCache && now - g.__caConfigCache.at < CACHE_MS) {

package/dist/{chunk-6ZJ6X6H7.js → chunk-QLWA4MJ5.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";
@@ -34,16 +34,27 @@ async function forwardToAnthropic(request, path, opts) {
   if (idem) headers.set("idempotency-key", idem);
   const accept = request.headers.get("accept");
   if (accept) headers.set("accept", accept);
+  const isMultipart = (ct ?? "").toLowerCase().startsWith("multipart/");
   let body;
   if (request.method !== "GET" && request.method !== "HEAD") {
-    body = opts?.body ?? await request.text();
+    if (opts?.body !== void 0) {
+      body = opts.body;
+    } else if (isMultipart && request.body) {
+      body = request.body;
+    } else {
+      body = await request.text();
+    }
   }
-  const res = await fetch(url.toString(), {
+  const fetchInit = {
     method: request.method,
     headers,
     body,
     signal: request.signal
-  });
+  };
+  if (body && typeof body !== "string") {
+    fetchInit.duplex = "half";
+  }
+  const res = await fetch(url.toString(), fetchInit);
   const HOP_BY_HOP = /* @__PURE__ */ new Set([
     "connection",
     "keep-alive",

package/dist/{chunk-2QGVGXIT.js → chunk-QQDSHL27.js}

@@ -1,15 +1,15 @@
 // src/backends/factory/wrapper-script.ts
 var FACTORY_WRAPPER_PATH = "/tmp/.factory-wrapper";
-var SPRITE_WRAPPER_SCRIPT = [
+var SANDBOX_WRAPPER_SCRIPT = [
   "#!/bin/bash",
   "set -e",
   'while IFS= read -r line; do [ -z "$line" ] && break; export "$line"; done',
   "PROMPT=$(cat)",
   'exec droid "$@" "$PROMPT"'
 ].join("\n");
-async function installFactoryWrapper(spriteName, provider) {
-  const escaped = SPRITE_WRAPPER_SCRIPT.replace(/'/g, "'\\''");
-  await provider.exec(spriteName, [
+async function installFactoryWrapper(sandboxName, provider) {
+  const escaped = SANDBOX_WRAPPER_SCRIPT.replace(/'/g, "'\\''");
+  await provider.exec(sandboxName, [
     "bash",
     "-c",
     `printf '%s' '${escaped}' > ${FACTORY_WRAPPER_PATH} && chmod +x ${FACTORY_WRAPPER_PATH}`

package/dist/{chunk-J4NKW3L5.js → chunk-QYSDP6V5.js}

@@ -1,11 +1,11 @@
 import {
   installPiWrapper
-} from "./chunk-Y2SC7HU5.js";
+} from "./chunk-JDBXIJKG.js";
 
 // src/backends/pi/setup.ts
 var SENTINEL_NAME = ".claude-agents-pi-installed";
-async function preparePiOnSprite(spriteName, provider) {
-  await installPiWrapper(spriteName, provider);
+async function preparePiOnSandbox(sandboxName, provider) {
+  await installPiWrapper(sandboxName, provider);
   const script = [
     "set -euo pipefail",
     `SENTINEL="$HOME/${SENTINEL_NAME}"`,
@@ -16,7 +16,7 @@ async function preparePiOnSprite(spriteName, provider) {
     "/usr/local/bin/pi --version || $PREFIX/bin/pi --version",
     'touch "$SENTINEL"'
   ].join(" && ");
-  const result = await provider.exec(spriteName, ["bash", "-c", script], {
+  const result = await provider.exec(sandboxName, ["bash", "-c", script], {
     timeoutMs: 5 * 6e4
   });
   if (result.exit_code !== 0) {
@@ -27,5 +27,5 @@ async function preparePiOnSprite(spriteName, provider) {
 }
 
 export {
-  preparePiOnSprite
+  preparePiOnSandbox
 };

package/dist/{chunk-ETGRQMFJ.js → chunk-R45W644X.js}

@@ -4,7 +4,7 @@ import {
 import {
   getConfig,
   readSetting
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 import {
   __commonJS
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-LPWEFC55.js → chunk-R5OZHLAD.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 import {
   schema_exports
-} from "./chunk-N5CUDEUJ.js";
+} from "./chunk-LHHBOQUR.js";
 import {
   init_clock,
   nowMs,

package/dist/{chunk-DFE7VZWD.js → chunk-RMEX55EU.js}

@@ -1,13 +1,13 @@
 // src/backends/codex/wrapper-script.ts
 var CODEX_WRAPPER_PATH = "/tmp/.codex-wrapper";
-var SPRITE_WRAPPER_SCRIPT = [
+var SANDBOX_WRAPPER_SCRIPT = [
   "#!/bin/bash",
   'while IFS= read -r line; do [ -z "$line" ] && break; export "$line"; done',
   'exec codex "$@"'
 ].join("\n");
-async function installCodexWrapper(spriteName, provider) {
-  const escaped = SPRITE_WRAPPER_SCRIPT.replace(/'/g, "'\\''");
-  await provider.exec(spriteName, [
+async function installCodexWrapper(sandboxName, provider) {
+  const escaped = SANDBOX_WRAPPER_SCRIPT.replace(/'/g, "'\\''");
+  await provider.exec(sandboxName, [
     "bash",
     "-c",
     `printf '%s' '${escaped}' > ${CODEX_WRAPPER_PATH} && chmod +x ${CODEX_WRAPPER_PATH}`

package/dist/{chunk-TY7XTT5N.js → chunk-RZXRMPF4.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-Q5KHBU7P.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {

package/dist/{chunk-D5XOXR3A.js → chunk-S3SKODVV.js}

@@ -1,20 +1,20 @@
 import {
   createSession
-} from "./chunk-MBLMAWSE.js";
+} from "./chunk-I5ZA45YL.js";
 import {
   createEnvironment,
   deleteEnvironment,
   getEnvironment
-} from "./chunk-XTZ5RQDF.js";
+} from "./chunk-NUO56TF7.js";
 import {
   archiveAgent,
   createAgent,
   getAgent
-} from "./chunk-BAH4JSTO.js";
+} from "./chunk-JEI7I3EH.js";
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-XNK2KUTI.js";
+} from "./chunk-SXE7H3VK.js";
 
 // src/db/batch.ts
 init_drizzle();

package/dist/{chunk-CU5GUNFW.js → chunk-S6AM7WVH.js}

@@ -1,11 +1,11 @@
 import {
   markStopping
-} from "./chunk-KEV4OMRF.js";
+} from "./chunk-PNYCULIF.js";
 import {
   closeDb,
   init_client,
   syncDb
-} from "./chunk-DZDWNOEY.js";
+} from "./chunk-5GZEX4HV.js";
 import {
   getRuntime
 } from "./chunk-UYTSKFGK.js";

package/dist/{chunk-YOFB6CO5.js → chunk-SDLNBA53.js}

@@ -1,13 +1,13 @@
 import {
   resolveContainerProvider
-} from "./chunk-5A6E4F5D.js";
+} from "./chunk-JSLEB2ED.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-XTZ5RQDF.js";
+} from "./chunk-NUO56TF7.js";
 import {
   installClaudeWrapper
-} from "./chunk-X7W6S3TE.js";
+} from "./chunk-IU457W7Q.js";
 import {
   init_ids,
   newId
@@ -47,14 +47,14 @@ function buildInstallCommands(packages) {
 function shellEscape(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
-async function prepareSprite(spriteName, packages, provider) {
+async function prepareSprite(sandboxName, packages, provider) {
   const p = provider ?? await resolveContainerProvider();
-  await installClaudeWrapper(spriteName, p);
+  await installClaudeWrapper(sandboxName, p);
   const hash = hashPackages(packages);
   const sentinel = `${SENTINEL_DIR}/.claude-agents-setup-${hash}`;
   const installCmds = buildInstallCommands(packages);
   if (installCmds.length === 0) {
-    await p.exec(spriteName, ["bash", "-c", `touch ${sentinel}`]);
+    await p.exec(sandboxName, ["bash", "-c", `touch ${sentinel}`]);
     return;
   }
   const script = [
@@ -63,7 +63,7 @@ async function prepareSprite(spriteName, packages, provider) {
     ...installCmds,
     `touch ${sentinel}`
   ].join(" && ");
-  const result = await p.exec(spriteName, ["bash", "-c", script], {
+  const result = await p.exec(sandboxName, ["bash", "-c", script], {
     timeoutMs: 30 * 6e4
   });
   if (result.exit_code !== 0) {