@runcofactor/cli 0.16.0 → 0.18.0

package/dist/{product-BUJWPYKB.js → product-WGOLTBRI.js}

@@ -2,13 +2,13 @@ import { createRequire as __cr } from "module"; const require = __cr(import.meta
 import {
   apiRequest,
   fetchList
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-JWHYXEA2.js";
 import "./chunk-GZVCNYR4.js";
@@ -344,4 +344,4 @@ async function runProduct(argv) {
 export {
   runProduct
 };
-//# sourceMappingURL=product-BUJWPYKB.js.map
+//# sourceMappingURL=product-WGOLTBRI.js.map

package/dist/{property-4EXPWRNT.js → property-B7QMGLVW.js}

@@ -3,13 +3,13 @@ import {
   apiRequest,
   fetchProperties,
   getApplicationArg
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-JWHYXEA2.js";
 import "./chunk-GZVCNYR4.js";
@@ -770,4 +770,4 @@ async function runProperty(argv) {
 export {
   runProperty
 };
-//# sourceMappingURL=property-4EXPWRNT.js.map
+//# sourceMappingURL=property-B7QMGLVW.js.map

package/dist/{psql-XGLBI6T7.js → psql-4JHPJ2CO.js}

@@ -1,10 +1,10 @@
 import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
 import {
   fetchOrExit
-} from "./chunk-3CZU7XCS.js";
+} from "./chunk-PWZ4ULCB.js";
 import {
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-VKVL7WBN.js";
 
@@ -113,4 +113,4 @@ Time: ${json.durationMs}ms`);
 export {
   runPsql
 };
-//# sourceMappingURL=psql-XGLBI6T7.js.map
+//# sourceMappingURL=psql-4JHPJ2CO.js.map

package/dist/{record-HL4QA7OX.js → record-RWVGZZSW.js}

@@ -7,13 +7,13 @@ import {
   apiRequest,
   downloadStorageState,
   selectCredential
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import {
   getCanaryTmpDir
@@ -86,7 +86,7 @@ async function runRecord(argv) {
     );
   }
   console.log("Launching browser...");
-  const { PlaywrightClient, consoleLogger, captureElementAtPoint } = await import("./dist-QLTVBUMD.js");
+  const { PlaywrightClient, consoleLogger, captureElementAtPoint } = await import("./dist-4COOAKY3.js");
   const client = new PlaywrightClient({ logger: consoleLogger });
   await client.connect({
     browserMode: "headed",
@@ -229,4 +229,4 @@ Output directory: ${outDir}`);
 export {
   runRecord
 };
-//# sourceMappingURL=record-HL4QA7OX.js.map
+//# sourceMappingURL=record-RWVGZZSW.js.map

package/dist/{redis-VJGCUJPV.js → redis-N44ZZ6VB.js}

@@ -1,10 +1,10 @@
 import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
 import {
   fetchOrExit
-} from "./chunk-3CZU7XCS.js";
+} from "./chunk-PWZ4ULCB.js";
 import {
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-VKVL7WBN.js";
 
@@ -114,4 +114,4 @@ Time: ${json_response.durationMs}ms`);
 export {
   runRedis
 };
-//# sourceMappingURL=redis-VJGCUJPV.js.map
+//# sourceMappingURL=redis-N44ZZ6VB.js.map

package/dist/{release-2SMK5Y3V.js → release-R7GKLEAI.js}

@@ -1,13 +1,13 @@
 import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
 import {
   getApplicationIdArg
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-JWHYXEA2.js";
 import "./chunk-GZVCNYR4.js";
@@ -352,4 +352,4 @@ async function runRelease(argv) {
 export {
   runRelease
 };
-//# sourceMappingURL=release-2SMK5Y3V.js.map
+//# sourceMappingURL=release-R7GKLEAI.js.map

package/dist/{sandbox-ORAPKOH3.js → sandbox-6D54ZQCG.js}

@@ -2,21 +2,21 @@ import { createRequire as __cr } from "module"; const require = __cr(import.meta
 import {
   SANDBOX_GUIDE_SECTIONS,
   printGuide
-} from "./chunk-4NRDONSC.js";
+} from "./chunk-A6TH5VUI.js";
 import {
   apiRequest,
   selectProperty
-} from "./chunk-UAJUZLDE.js";
+} from "./chunk-PVWG3V62.js";
 import {
   apiFetch,
   exitOnFailure,
   isTerminalFailure
-} from "./chunk-3CZU7XCS.js";
+} from "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-JWHYXEA2.js";
 import {
@@ -2088,4 +2088,4 @@ export {
   parseDockerPs,
   runSandbox
 };
-//# sourceMappingURL=sandbox-ORAPKOH3.js.map
+//# sourceMappingURL=sandbox-6D54ZQCG.js.map

package/dist/{scenarios-DM5FDCAF.js → scenarios-WUUUKP2S.js}

@@ -1,13 +1,13 @@
 import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
 import {
   apiRequest
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import "./chunk-JWHYXEA2.js";
 import "./chunk-GZVCNYR4.js";
@@ -278,4 +278,4 @@ async function handleReject(argv, apiUrl, token) {
 export {
   runScenarios
 };
-//# sourceMappingURL=scenarios-DM5FDCAF.js.map
+//# sourceMappingURL=scenarios-WUUUKP2S.js.map

package/dist/{session-X6IYGWYG.js → session-GDCMTNB3.js}

@@ -7,12 +7,12 @@ import {
   downloadStorageState,
   selectCredential,
   uploadStorageState
-} from "./chunk-UAJUZLDE.js";
-import "./chunk-3CZU7XCS.js";
+} from "./chunk-PVWG3V62.js";
+import "./chunk-PWZ4ULCB.js";
 import {
   LocalBrowserHost,
   USER_PAUSED_ERROR
-} from "./chunk-RGDIVW3O.js";
+} from "./chunk-2R6544Z3.js";
 import {
   callTool,
   createSession,
@@ -30,7 +30,7 @@ import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IGHDIWZU.js";
+} from "./chunk-VYTIJ6HJ.js";
 import "./chunk-32P26BZT.js";
 import {
   BrowserToolExecutor,
@@ -39,7 +39,7 @@ import {
   consoleLogger,
   dispatchBrowserTool,
   dispatchBrowserToolWithTimeout
-} from "./chunk-AI3Y3AZH.js";
+} from "./chunk-7OO3RJYR.js";
 import "./chunk-JWHYXEA2.js";
 import "./chunk-GZVCNYR4.js";
 import "./chunk-6LEZCKKV.js";
@@ -2476,4 +2476,4 @@ export {
   buildToolArgs,
   runSession
 };
-//# sourceMappingURL=session-X6IYGWYG.js.map
+//# sourceMappingURL=session-GDCMTNB3.js.map

package/dist/{skill-ZU5V2EE5.js → skill-3SP7MAA4.js}

@@ -1460,6 +1460,156 @@ var debugRunTemplate = {
   previousVersions
 };
 
+// src/skill-templates/sandbox.ts
+var sandboxTemplate = {
+  name: "sandbox",
+  description: "Orientation for Canary sandboxes \u2014 ephemeral app environments built from a verified template",
+  version: "1.0.0",
+  render: () => `---
+name: sandbox
+version: 1.0.0
+description: Orientation for Canary sandboxes \u2014 ephemeral, containerized app environments built from a verified template. Use whenever the user mentions a sandbox or sandboxes (especially Canary sandboxes), sandbox templates or instances, provisioning / building / verifying / terminating a sandbox, sandbox artifacts / checklist / actions, or running PR / release tests against an ephemeral environment. Anchors to \`canary sandbox guide\`.
+allowed-tools: Bash(canary sandbox:*), Bash(canary login:*), Read
+---
+
+# Canary Sandboxes
+
+A **sandbox** is an ephemeral, containerized deployment of an app, provisioned on
+demand from a verified **template**. Use it to stand up a real, browsable
+environment for PR / release testing and to run server-side **actions** inside
+workflow runs.
+
+> **Start with the guide.** The authoritative, always-current reference is the
+> built-in guide \u2014 read the relevant section before doing sandbox work:
+>
+> \`\`\`bash
+> canary sandbox guide [goal|research|artifacts|actions|verify|checklist]
+> canary sandbox --help
+> \`\`\`
+>
+> This skill is a thin map; the guide is the source of truth. Don't re-derive it
+> \u2014 hand off to it.
+
+## Prerequisites
+
+- \`canary\` CLI installed and authenticated (\`canary login\`).
+- Run \`canary sandbox --help\` for the full command surface.
+
+## Core concepts
+
+- **Template** \u2014 the reusable, verified blueprint: a git repo + branch, its
+  artifacts (Dockerfile, compose, scripts), a config schema, a setup checklist,
+  and optional sandbox actions. Lifecycle: \`draft \u2192 authoring \u2192 verified\`.
+- **Instance** \u2014 a running environment provisioned from a template, with a TTL
+  (default 8h) and a public URL. Lifecycle:
+  \`provisioning \u2192 running/healthy \u2192 terminated\` (or \`failed\`).
+
+Templates are durable; instances are disposable. You author against a template,
+then provision throwaway instances from it.
+
+## Lifecycle & key verbs
+
+\`\`\`
+create     Create a template + its first authoring instance (from a property/repo)
+            \u2193  research the app, set config, upload artifacts   (guide: research, artifacts)
+build      Build images, start containers, generate routing
+            \u2193  inspect with diagnostics / logs / run-command    (guide: verify)
+verify     Provision a fresh instance, probe it, flip template \u2192 verified
+            \u2193
+provision  Spin up fresh instances from the verified template (--ttl, --name)
+terminate  Destroy one instance        delete  Remove the template + all instances
+\`\`\`
+
+See \`canary sandbox guide goal\` for the full authoring loop and \`guide verify\`
+for the debugging playbook.
+
+## Features (each defers to the guide for detail)
+
+- **Checklist profiles** \u2014 \`minimal\` (code cloned), \`ci-ready\` (unit tests
+  runnable), \`full-stack\` (app fully running). Items form a dependency-ordered
+  list. \u2192 \`canary sandbox guide checklist\`
+- **Artifacts** \u2014 the typed files that define the sandbox: \`dockerfile\`,
+  \`docker-compose\`, \`setup-script\`, \`startup-script\`, \`seed-script\`, \`file\`.
+  Uploads are template-level \u2014 rebuild an instance to apply.
+  \u2192 \`canary sandbox guide artifacts\`
+- **Config** \u2014 required / optional / sensitive env vars + per-template defaults,
+  pushed to the instance as its \`.env\`. \u2192 \`canary sandbox config list|set\`
+- **Multi-repo** \u2014 link several repos to one template as distinct services.
+  \u2192 \`canary sandbox repo list|add\`
+- **Actions** \u2014 template-scoped, parameterized scripts run against an instance,
+  with typed input/output and optional credential output.
+  \u2192 \`canary sandbox guide actions\`
+- **AMIs** \u2014 per-template golden images for fast provisioning.
+  \u2192 \`canary sandbox ami list|rebake|use\`
+- **Sizing** \u2014 instance presets \`small \u2026 2xlarge\`. \u2192 \`canary sandbox set-size\`
+
+## Getting started \u2014 create a sandbox
+
+\`\`\`bash
+canary sandbox create <property>          # template + first authoring instance
+# read \`canary sandbox guide research\`, then:
+canary sandbox config set <template-id> <KEY> <VALUE>
+canary sandbox artifact create <template-id> <type> <local-file>
+canary sandbox build <instance-id>        # apply artifacts/config
+canary sandbox diagnostics <instance-id>  # + logs to confirm it's up
+canary sandbox checklist complete <template-id> <item-id> --status success --summary "..."
+canary sandbox verify <template-id>       # flip to verified
+\`\`\`
+
+Batch your artifact + config changes, then \`build\` **once**. Walk the guide
+sections in order (\`goal \u2192 research \u2192 artifacts \u2192 verify \u2192 checklist\`) \u2014 they
+contain the env-var classification, migration, and monorepo build-order details
+that make the build succeed.
+
+## Updating an existing sandbox
+
+- Edit an artifact: \`canary sandbox artifact get <template-id> <type>\` \u2192 change
+  it \u2192 \`canary sandbox artifact create <template-id> <type> <file>\` \u2192
+  \`canary sandbox build <instance-id>\` to apply (artifact uploads are
+  template-level; running instances need a rebuild).
+- Change config defaults: \`canary sandbox config set <template-id> <KEY> <VALUE>\`.
+- Re-run / update the checklist; \`canary sandbox ami rebake <template-id>\` for a
+  fresh golden image after artifact changes.
+
+## How sandboxes are used in Canary
+
+1. **PR / release testing.** A verified template provisions an *ephemeral
+   environment* that a test suite runs against. A spec/workflow binds to a
+   template (the spec's \`sandboxTemplate:\` frontmatter); the suite
+   auto-provisions one instance, shares it across the suite's runs, and tears it
+   down afterward. \u2192 \`canary sandbox guide goal\`
+
+2. **Actions inside workflows.** A sandbox action is a template-scoped script
+   that runs *server-side* inside the run's backing instance (referenced by
+   slug, so it's portable across environments). Its JSON output registers as
+   workflow variables (\`$var.<key>\`), and it can emit an ephemeral login
+   credential for downstream login steps. On a non-sandbox environment the step
+   skips with a warning. \u2192 \`canary sandbox guide actions\`
+
+## Cheat-sheet
+
+\`\`\`bash
+canary sandbox list                              # templates + instances
+canary sandbox template <template-id>            # template detail + config
+canary sandbox create <property>                 # new template + authoring instance
+canary sandbox provision <template-id> --ttl 4   # fresh instance from a verified template
+canary sandbox build <instance-id>               # build/start services
+canary sandbox diagnostics <instance-id>         # container health, URL, phase
+canary sandbox logs <instance-id> --service <name>
+canary sandbox run-command <instance-id> "<cmd>" # host VM (add --service <name> for a container)
+canary sandbox verify <template-id>              # provision + probe + mark verified
+canary sandbox action list|get|create|execute <template-id> ...
+canary sandbox checklist <template-id>           # setup progress
+canary sandbox terminate <instance-id>           # destroy one instance
+\`\`\`
+
+## More info
+
+- \`canary sandbox guide <section>\` and \`canary sandbox --help\` \u2014 the source of truth.
+- Authoring deeper actions / credentials: \`canary sandbox guide actions\`.
+`
+};
+
 // src/skill-templates/index.ts
 var SKILL_TEMPLATES = {
   "canary-basic": canaryBasicTemplate,
@@ -1467,7 +1617,8 @@ var SKILL_TEMPLATES = {
   "issue-log-xref": issueLogXrefTemplate,
   "browser-testing": browserTestingTemplate,
   "test-cases": testCasesTemplate,
-  "debug-run": debugRunTemplate
+  "debug-run": debugRunTemplate,
+  "sandbox": sandboxTemplate
 };
 
 // src/skill.ts
@@ -1996,4 +2147,4 @@ export {
   resolveInstallDir,
   runSkill
 };
-//# sourceMappingURL=skill-ZU5V2EE5.js.map
+//# sourceMappingURL=skill-3SP7MAA4.js.map