@snappedly-tools/shipyard 0.4.4 → 0.5.0

package/dist/sandboxes/docker.js

@@ -1,6 +1,6 @@
-export { docker } from '../chunk-OCJKONZ7.js';
-export { defaultImageName } from '../chunk-2GT3OPO5.js';
+export { docker } from '../chunk-WAXEMZUV.js';
+export { defaultImageName } from '../chunk-FDYOTN55.js';
 import '../chunk-KMGNFXKN.js';
-import '../chunk-WA7QPAXO.js';
+import '../chunk-ACD46ZM4.js';
 //# sourceMappingURL=docker.js.map
 //# sourceMappingURL=docker.js.map

package/dist/sandboxes/no-sandbox.js

@@ -1,4 +1,4 @@
-export { noSandbox } from '../chunk-VW4MI5GJ.js';
-import '../chunk-WA7QPAXO.js';
+export { noSandbox } from '../chunk-SOJTAJTF.js';
+import '../chunk-ACD46ZM4.js';
 //# sourceMappingURL=no-sandbox.js.map
 //# sourceMappingURL=no-sandbox.js.map

package/dist/sandboxes/vercel.js

@@ -1,5 +1,5 @@
 import { createIsolatedSandboxProvider, shellQuote } from '../chunk-KMGNFXKN.js';
-import { MAX_TAIL_CHARS, OutputByteCounter, BoundedTail } from '../chunk-WA7QPAXO.js';
+import { MAX_TAIL_CHARS, StreamedProcessOutput } from '../chunk-ACD46ZM4.js';
 import { execFileSync } from 'child_process';
 import { mkdir, lstat, writeFile, chmod, mkdtemp, readFile, rm } from 'fs/promises';
 import { randomUUID } from 'crypto';
@@ -36,45 +36,29 @@ var vercel = (options) => createIsolatedSandboxProvider({
       worktreePath: VERCEL_REPO_PATH,
       exec: async (command, opts) => {
         if (opts?.onLine || opts?.maxOutputBytes !== void 0) {
-          const onLine = opts?.onLine ?? (() => {
+          const output = new StreamedProcessOutput({
+            ...opts,
+            maxOutputTailChars
           });
-          const outputLimit = opts?.maxOutputBytes === void 0 ? void 0 : new OutputByteCounter(opts.maxOutputBytes);
-          const tailChars = opts?.maxOutputBytes ?? maxOutputTailChars;
-          const stdoutTail = new BoundedTail(tailChars, "\n");
-          const stderrTail = new BoundedTail(tailChars, "");
-          let outputLimitError;
-          const checkOutputLimit = (chunk) => {
-            if (outputLimit === void 0 || outputLimitError !== void 0) {
-              return;
-            }
-            outputLimit.add(chunk);
-            if (outputLimit.exceeded) {
-              outputLimitError = new Error(
-                `Sandbox command output exceeded ${opts.maxOutputBytes} bytes`
-              );
-            }
-          };
           let partial = "";
           const stdoutWritable = new Writable({
             write(chunk, _encoding, callback) {
-              checkOutputLimit(chunk.toString());
-              if (outputLimitError !== void 0) {
-                callback(outputLimitError);
+              const error = output.checkLimit(chunk.toString());
+              if (error !== void 0) {
+                callback(error);
                 return;
               }
               const text = partial + chunk.toString();
               const lines = text.split("\n");
               partial = lines.pop() ?? "";
               for (const line of lines) {
-                stdoutTail.push(line);
-                onLine(line);
+                output.addStdoutLine(line);
               }
               callback();
             },
             final(callback) {
               if (partial) {
-                stdoutTail.push(partial);
-                onLine(partial);
+                output.addStdoutLine(partial);
                 partial = "";
               }
               callback();
@@ -82,12 +66,12 @@ var vercel = (options) => createIsolatedSandboxProvider({
           });
           const stderrWritable = new Writable({
             write(chunk, _encoding, callback) {
-              checkOutputLimit(chunk.toString());
-              if (outputLimitError !== void 0) {
-                callback(outputLimitError);
+              const error = output.checkLimit(chunk.toString());
+              if (error !== void 0) {
+                callback(error);
                 return;
               }
-              stderrTail.push(chunk.toString());
+              output.addStderr(chunk.toString());
               callback();
             }
           });
@@ -99,12 +83,8 @@ var vercel = (options) => createIsolatedSandboxProvider({
             stderr: stderrWritable,
             ...opts?.sudo ? { sudo: true } : {}
           });
-          if (outputLimitError !== void 0) throw outputLimitError;
-          return {
-            stdout: stdoutTail.toString(),
-            stderr: stderrTail.toString(),
-            exitCode: result2.exitCode
-          };
+          if (output.error !== void 0) throw output.error;
+          return output.result(result2.exitCode);
         }
         const result = await sandbox.runCommand({
           cmd: "sh",

package/dist/sandboxes/vercel.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/sandboxes/vercel.ts"],"names":["result"],"mappings":";;;;;;;;;AAoCA,IAAM,gBAAA,GAAmB,2BAAA;AA+GlB,IAAM,MAAA,GAAS,CAAC,OAAA,KACrB,6BAAA,CAA8B;AAAA,EAC5B,IAAA,EAAM,QAAA;AAAA,EACN,KAAK,OAAA,EAAS,GAAA;AAAA,EACd,MAAA,EAAQ,OAAO,aAAA,KAAkD;AAC/D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAElD,IAAA,MAAM,eAAwC,EAAC;AAG/C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AACnD,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,aAAA;AACX,MAAA,YAAA,CAAa,gBAAgB,OAAA,CAAQ,aAAA;AAEvC,IAAA,MAAM,eAAA,GAAkB,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,QAAA;AACrD,IAAA,IAAI,eAAA,eAA8B,OAAA,GAAU,eAAA;AAG5C,IAAA,MAAM,YAAA,GAAe,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,SAAA;AAClD,IAAA,IAAI,YAAA,KAAiB,MAAA,EAAW,YAAA,CAAa,OAAA,GAAU,YAAA;AAGvD,IAAA,YAAA,CAAa,MAAM,aAAA,CAAc,GAAA;AAGjC,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AAEnD,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA;AAAA,MAC5B;AAAA,KACF;AAGA,IAAA,MAAM,OAAA,CAAQ,MAAM,gBAAgB,CAAA;AAEpC,IAAA,MAAM,MAAA,GAAgC;AAAA,MACpC,YAAA,EAAc,gBAAA;AAAA,MAEd,IAAA,EAAM,OACJ,OAAA,EACA,IAAA,KAMwB;AACxB,QAAA,IAAI,IAAA,EAAM,MAAA,IAAU,IAAA,EAAM,cAAA,KAAmB,MAAA,EAAW;AACtD,UAAA,MAAM,MAAA,GAAS,IAAA,EAAM,MAAA,KAAW,MAAM;AAAA,UAAC,CAAA,CAAA;AACvC,UAAA,MAAM,WAAA,GACJ,MAAM,cAAA,KAAmB,MAAA,GACrB,SACA,IAAI,iBAAA,CAAkB,KAAK,cAAc,CAAA;AAC/C,UAAA,MAAM,SAAA,GAAY,MAAM,cAAA,IAAkB,kBAAA;AAC1C,UAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,IAAI,CAAA;AAClD,UAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,EAAE,CAAA;AAChD,UAAA,IAAI,gBAAA;AACJ,UAAA,MAAM,gBAAA,GAAmB,CAAC,KAAA,KAAwB;AAChD,YAAA,IAAI,WAAA,KAAgB,MAAA,IAAa,gBAAA,KAAqB,MAAA,EAAW;AAC/D,cAAA;AAAA,YACF;AACA,YAAA,WAAA,CAAY,IAAI,KAAK,CAAA;AACrB,YAAA,IAAI,YAAY,QAAA,EAAU;AACxB,cAAA,gBAAA,GAAmB,IAAI,KAAA;AAAA,gBACrB,CAAA,gCAAA,EAAmC,KAAK,cAAc,CAAA,MAAA;AAAA,eACxD;AAAA,YACF;AAAA,UACF,CAAA;AACA,UAAA,IAAI,OAAA,GAAU,EAAA;AAEd,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,gBAAA,CAAiB,KAAA,CAAM,UAAU,CAAA;AACjC,cAAA,IAAI,qBAAqB,MAAA,EAAW;AAClC,gBAAA,QAAA,CAAS,gBAAgB,CAAA;AACzB,gBAAA;AAAA,cACF;AACA,cAAA,MAAM,IAAA,GAAO,OAAA,GAAU,KAAA,CAAM,QAAA,EAAS;AACtC,cAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,cAAA,OAAA,GAAU,KAAA,CAAM,KAAI,IAAK,EAAA;AACzB,cAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,gBAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,gBAAA,MAAA,CAAO,IAAI,CAAA;AAAA,cACb;AACA,cAAA,QAAA,EAAS;AAAA,YACX,CAAA;AAAA,YACA,MAAM,QAAA,EAAU;AACd,cAAA,IAAI,OAAA,EAAS;AACX,gBAAA,UAAA,CAAW,KAAK,OAAO,CAAA;AACvB,gBAAA,MAAA,CAAO,OAAO,CAAA;AACd,gBAAA,OAAA,GAAU,EAAA;AAAA,cACZ;AACA,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,gBAAA,CAAiB,KAAA,CAAM,UAAU,CAAA;AACjC,cAAA,IAAI,qBAAqB,MAAA,EAAW;AAClC,gBAAA,QAAA,CAAS,gBAAgB,CAAA;AACzB,gBAAA;AAAA,cACF;AACA,cAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAChC,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAMA,OAAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,YACtC,GAAA,EAAK,IAAA;AAAA,YACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,YACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,YAClB,MAAA,EAAQ,cAAA;AAAA,YACR,MAAA,EAAQ,cAAA;AAAA,YACR,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,WACpC,CAAA;AAED,UAAA,IAAI,gBAAA,KAAqB,QAAW,MAAM,gBAAA;AAE1C,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,YAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,YAC5B,UAAUA,OAAAA,CAAO;AAAA,WACnB;AAAA,QACF;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,UACtC,GAAA,EAAK,IAAA;AAAA,UACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,UACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,UAClB,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,SACpC,CAAA;AAED,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AACnC,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AAEnC,QAAA,OAAO;AAAA,UACL,MAAA;AAAA,UACA,MAAA;AAAA,UACA,UAAU,MAAA,CAAO;AAAA,SACnB;AAAA,MACF,CAAA;AAAA,MAEA,MAAA,EAAQ,OACN,QAAA,EACA,WAAA,KACkB;AAClB,QAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,QAAQ,CAAA;AACjC,QAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,CAAE,CAAA;AAAA,QACjE;AACA,QAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,UAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,MAAA,EAAO,EAAG,kBAAkB,CAAC,CAAA;AAChE,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,EAAS,gBAAgB,CAAA;AAC9C,UAAA,IAAI;AACF,YAAA,YAAA,CAAa,OAAO,CAAC,MAAA,EAAQ,SAAS,IAAA,EAAM,QAAA,EAAU,GAAG,CAAC,CAAA;AAC1D,YAAA,MAAM,UAAA,GAAa,MAAM,QAAA,CAAS,OAAO,CAAA;AACzC,YAAA,MAAM,cAAA,GAAiB,CAAA,qBAAA,EAAwB,UAAA,EAAY,CAAA,OAAA,CAAA;AAC3D,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,UAAA;AAAW,aAC7C,CAAA;AACD,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,GAAA,EAAK,IAAA;AAAA,cACL,IAAA,EAAM;AAAA,gBACJ,IAAA;AAAA,gBACA,CAAA,SAAA,EAAY,UAAA,CAAW,WAAW,CAAC,gBAAgB,UAAA,CAAW,cAAc,CAAC,CAAA,IAAA,EAAO,WAAW,WAAW,CAAC,CAAA,UAAA,EAAa,UAAA,CAAW,cAAc,CAAC,CAAA;AAAA;AACpJ,aACD,CAAA;AAAA,UACH,CAAA,SAAE;AACA,YAAA,MAAM,EAAA,CAAG,SAAS,EAAE,SAAA,EAAW,MAAM,KAAA,EAAO,IAAA,EAAM,CAAA,CAAE,KAAA;AAAA,cAClD,MAAM;AAAA,cAAC;AAAA,aACT;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,UAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,EAAE,MAAM,WAAA,EAAa,OAAA,EAAS,CAAC,CAAA;AAAA,QAC3D;AAAA,MACF,CAAA;AAAA,MAEA,WAAA,EAAa,OACX,WAAA,EACA,QAAA,KACkB;AAClB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,gBAAA,CAAiB;AAAA,UAC5C,IAAA,EAAM;AAAA,SACP,CAAA;AACD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,WAAW,CAAA,CAAE,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,KAAA,CAAM,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,GAAA,EAAO,CAAA;AAC/D,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,MAAM,KAAA,CAAM,QAAQ,CAAA,EAAG,gBAAe,EAAG;AAC5C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,wCAAwC,QAAQ,CAAA;AAAA,aAClD;AAAA,UACF;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,QAChE;AACA,QAAA,MAAM,UAAU,QAAA,EAAU,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAO,CAAA;AACjD,QAAA,MAAM,KAAA,CAAM,UAAU,GAAK,CAAA;AAAA,MAC7B,CAAA;AAAA,MAEA,OAAO,YAA2B;AAChC,QAAA,MAAM,QAAQ,IAAA,EAAK;AAAA,MACrB;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAC","file":"vercel.js","sourcesContent":["/**\n * Vercel isolated sandbox provider — wraps `@vercel/sandbox` into a SandboxProvider.\n *\n * Usage:\n *   import { vercel } from \"@snappedly-tools/shipyard/sandboxes/vercel\";\n *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: vercel() });\n */\n\nimport { execFileSync } from \"node:child_process\";\nimport {\n  lstat,\n  chmod,\n  mkdir,\n  mkdtemp,\n  readFile,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { Writable } from \"node:stream\";\nimport {\n  createIsolatedSandboxProvider,\n  type ExecResult,\n  type IsolatedSandboxHandle,\n  type IsolatedSandboxProvider,\n} from \"../SandboxProvider.js\";\nimport {\n  BoundedTail,\n  MAX_TAIL_CHARS,\n  OutputByteCounter,\n} from \"../boundedTail.js\";\nimport { shellQuote } from \"../shellQuote.js\";\n\n/** Worktree path inside the Vercel sandbox. */\nconst VERCEL_REPO_PATH = \"/vercel/sandbox/workspace\";\n\n/**\n * Options for creating a Vercel sandbox provider.\n *\n * All `@vercel/sandbox` `Sandbox.create()` options are accepted as pass-through,\n * plus Shipyard-specific options for auth and branch strategy.\n */\nexport interface VercelOptions {\n  /**\n   * Vercel access token.\n   *\n   * Falls back to the SDK's default auth behavior, which reads\n   * `VERCEL_OIDC_TOKEN` (recommended for Vercel-hosted environments) or\n   * `VERCEL_TOKEN` from the environment.\n   */\n  readonly token?: string;\n\n  // ---- Pass-through @vercel/sandbox Sandbox.create() options ----\n\n  /**\n   * The source of the sandbox (git repo, tarball, or snapshot).\n   * Omit to start an empty sandbox.\n   */\n  readonly source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n        username?: string;\n        password?: string;\n      }\n    | {\n        type: \"tarball\";\n        url: string;\n      }\n    | {\n        type: \"snapshot\";\n        snapshotId: string;\n      };\n\n  /** Array of port numbers to expose from the sandbox (up to 4). */\n  readonly ports?: number[];\n\n  /** Timeout in milliseconds before the sandbox auto-terminates. */\n  readonly timeout?: number;\n\n  /**\n   * Resources to allocate to the sandbox.\n   * Each vCPU gets 2048 MB of memory.\n   */\n  readonly resources?: {\n    vcpus: number;\n  };\n\n  /**\n   * The runtime of the sandbox (e.g. `\"node24\"`, `\"node22\"`, `\"python3.13\"`).\n   * Defaults to `\"node24\"`.\n   */\n  readonly runtime?: string;\n\n  /**\n   * Network policy for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  readonly networkPolicy?: Record<string, unknown>;\n\n  /**\n   * Vercel project ID to associate sandbox operations with.\n   */\n  readonly projectId?: string;\n\n  /**\n   * Vercel team ID to associate sandbox operations with.\n   */\n  readonly teamId?: string;\n\n  /**\n   * Timeout in milliseconds (alias for `timeout`, kept for discoverability).\n   */\n  readonly timeoutMs?: number;\n\n  /**\n   * Sandbox template shorthand (e.g. `\"node-22\"`).\n   * Maps to the `runtime` option.\n   */\n  readonly template?: string;\n\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a Vercel isolated sandbox provider.\n *\n * The returned provider creates Vercel Firecracker microVM sandboxes via\n * the `@vercel/sandbox` SDK. Each sandbox is ephemeral — one sandbox per run.\n *\n * Requires `@vercel/sandbox` to be installed as a peer dependency.\n */\nexport const vercel = (options?: VercelOptions): IsolatedSandboxProvider =>\n  createIsolatedSandboxProvider({\n    name: \"vercel\",\n    env: options?.env,\n    create: async (createOptions): Promise<IsolatedSandboxHandle> => {\n      const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n      // Dynamic import so the peer dependency is only loaded at runtime\n      const { Sandbox } = await import(\"@vercel/sandbox\");\n\n      const createParams: Record<string, unknown> = {};\n\n      // Pass through SDK options\n      if (options?.source) createParams.source = options.source;\n      if (options?.ports) createParams.ports = options.ports;\n      if (options?.resources) createParams.resources = options.resources;\n      if (options?.networkPolicy)\n        createParams.networkPolicy = options.networkPolicy;\n      // runtime takes precedence over the template convenience alias\n      const resolvedRuntime = options?.runtime ?? options?.template;\n      if (resolvedRuntime) createParams.runtime = resolvedRuntime;\n\n      // Timeout: prefer explicit timeout, fall back to timeoutMs alias\n      const timeoutValue = options?.timeout ?? options?.timeoutMs;\n      if (timeoutValue !== undefined) createParams.timeout = timeoutValue;\n\n      // Merge provider env with Shipyard env\n      createParams.env = createOptions.env;\n\n      // Auth: pass token and team/project IDs if provided\n      if (options?.token) createParams.token = options.token;\n      if (options?.projectId) createParams.projectId = options.projectId;\n      if (options?.teamId) createParams.teamId = options.teamId;\n\n      const sandbox = await Sandbox.create(\n        createParams as Parameters<typeof Sandbox.create>[0],\n      );\n\n      // Ensure worktree directory exists\n      await sandbox.mkDir(VERCEL_REPO_PATH);\n\n      const handle: IsolatedSandboxHandle = {\n        worktreePath: VERCEL_REPO_PATH,\n\n        exec: async (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            maxOutputBytes?: number;\n          },\n        ): Promise<ExecResult> => {\n          if (opts?.onLine || opts?.maxOutputBytes !== undefined) {\n            const onLine = opts?.onLine ?? (() => {});\n            const outputLimit =\n              opts?.maxOutputBytes === undefined\n                ? undefined\n                : new OutputByteCounter(opts.maxOutputBytes);\n            const tailChars = opts?.maxOutputBytes ?? maxOutputTailChars;\n            const stdoutTail = new BoundedTail(tailChars, \"\\n\");\n            const stderrTail = new BoundedTail(tailChars, \"\");\n            let outputLimitError: Error | undefined;\n            const checkOutputLimit = (chunk: string): void => {\n              if (outputLimit === undefined || outputLimitError !== undefined) {\n                return;\n              }\n              outputLimit.add(chunk);\n              if (outputLimit.exceeded) {\n                outputLimitError = new Error(\n                  `Sandbox command output exceeded ${opts.maxOutputBytes} bytes`,\n                );\n              }\n            };\n            let partial = \"\";\n\n            const stdoutWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                checkOutputLimit(chunk.toString());\n                if (outputLimitError !== undefined) {\n                  callback(outputLimitError);\n                  return;\n                }\n                const text = partial + chunk.toString();\n                const lines = text.split(\"\\n\");\n                partial = lines.pop() ?? \"\";\n                for (const line of lines) {\n                  stdoutTail.push(line);\n                  onLine(line);\n                }\n                callback();\n              },\n              final(callback) {\n                if (partial) {\n                  stdoutTail.push(partial);\n                  onLine(partial);\n                  partial = \"\";\n                }\n                callback();\n              },\n            });\n\n            const stderrWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                checkOutputLimit(chunk.toString());\n                if (outputLimitError !== undefined) {\n                  callback(outputLimitError);\n                  return;\n                }\n                stderrTail.push(chunk.toString());\n                callback();\n              },\n            });\n\n            const result = await sandbox.runCommand({\n              cmd: \"sh\",\n              args: [\"-c\", command],\n              cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n              stdout: stdoutWritable,\n              stderr: stderrWritable,\n              ...(opts?.sudo ? { sudo: true } : {}),\n            });\n\n            if (outputLimitError !== undefined) throw outputLimitError;\n\n            return {\n              stdout: stdoutTail.toString(),\n              stderr: stderrTail.toString(),\n              exitCode: result.exitCode,\n            };\n          }\n\n          const result = await sandbox.runCommand({\n            cmd: \"sh\",\n            args: [\"-c\", command],\n            cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n            ...(opts?.sudo ? { sudo: true } : {}),\n          });\n\n          const stdout = await result.stdout();\n          const stderr = await result.stderr();\n\n          return {\n            stdout,\n            stderr,\n            exitCode: result.exitCode,\n          };\n        },\n\n        copyIn: async (\n          hostPath: string,\n          sandboxPath: string,\n        ): Promise<void> => {\n          const info = await lstat(hostPath);\n          if (info.isSymbolicLink()) {\n            throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);\n          }\n          if (info.isDirectory()) {\n            const tempDir = await mkdtemp(join(tmpdir(), \"shipyard-copyin-\"));\n            const tarPath = join(tempDir, \"archive.tar.gz\");\n            try {\n              execFileSync(\"tar\", [\"-czf\", tarPath, \"-C\", hostPath, \".\"]);\n              const tarContent = await readFile(tarPath);\n              const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;\n              await sandbox.writeFiles([\n                { path: sandboxTarPath, content: tarContent },\n              ]);\n              await sandbox.runCommand({\n                cmd: \"sh\",\n                args: [\n                  \"-c\",\n                  `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`,\n                ],\n              });\n            } finally {\n              await rm(tempDir, { recursive: true, force: true }).catch(\n                () => {},\n              );\n            }\n          } else {\n            const content = await readFile(hostPath);\n            await sandbox.writeFiles([{ path: sandboxPath, content }]);\n          }\n        },\n\n        copyFileOut: async (\n          sandboxPath: string,\n          hostPath: string,\n        ): Promise<void> => {\n          const buffer = await sandbox.readFileToBuffer({\n            path: sandboxPath,\n          });\n          if (!buffer) {\n            throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);\n          }\n          await mkdir(dirname(hostPath), { recursive: true, mode: 0o700 });\n          try {\n            if ((await lstat(hostPath)).isSymbolicLink()) {\n              throw new Error(\n                `Refusing to overwrite symbolic link: ${hostPath}`,\n              );\n            }\n          } catch (error) {\n            if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n          }\n          await writeFile(hostPath, buffer, { mode: 0o600 });\n          await chmod(hostPath, 0o600);\n        },\n\n        close: async (): Promise<void> => {\n          await sandbox.stop();\n        },\n      };\n\n      return handle;\n    },\n  });\n"]}
+{"version":3,"sources":["../../src/sandboxes/vercel.ts"],"names":["result"],"mappings":";;;;;;;;;AAiCA,IAAM,gBAAA,GAAmB,2BAAA;AA+GlB,IAAM,MAAA,GAAS,CAAC,OAAA,KACrB,6BAAA,CAA8B;AAAA,EAC5B,IAAA,EAAM,QAAA;AAAA,EACN,KAAK,OAAA,EAAS,GAAA;AAAA,EACd,MAAA,EAAQ,OAAO,aAAA,KAAkD;AAC/D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAElD,IAAA,MAAM,eAAwC,EAAC;AAG/C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AACnD,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,aAAA;AACX,MAAA,YAAA,CAAa,gBAAgB,OAAA,CAAQ,aAAA;AAEvC,IAAA,MAAM,eAAA,GAAkB,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,QAAA;AACrD,IAAA,IAAI,eAAA,eAA8B,OAAA,GAAU,eAAA;AAG5C,IAAA,MAAM,YAAA,GAAe,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,SAAA;AAClD,IAAA,IAAI,YAAA,KAAiB,MAAA,EAAW,YAAA,CAAa,OAAA,GAAU,YAAA;AAGvD,IAAA,YAAA,CAAa,MAAM,aAAA,CAAc,GAAA;AAGjC,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AAEnD,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA;AAAA,MAC5B;AAAA,KACF;AAGA,IAAA,MAAM,OAAA,CAAQ,MAAM,gBAAgB,CAAA;AAEpC,IAAA,MAAM,MAAA,GAAgC;AAAA,MACpC,YAAA,EAAc,gBAAA;AAAA,MAEd,IAAA,EAAM,OACJ,OAAA,EACA,IAAA,KAMwB;AACxB,QAAA,IAAI,IAAA,EAAM,MAAA,IAAU,IAAA,EAAM,cAAA,KAAmB,MAAA,EAAW;AACtD,UAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,YACvC,GAAG,IAAA;AAAA,YACH;AAAA,WACD,CAAA;AACD,UAAA,IAAI,OAAA,GAAU,EAAA;AAEd,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAM,IAAA,GAAO,OAAA,GAAU,KAAA,CAAM,QAAA,EAAS;AACtC,cAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,cAAA,OAAA,GAAU,KAAA,CAAM,KAAI,IAAK,EAAA;AACzB,cAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,gBAAA,MAAA,CAAO,cAAc,IAAI,CAAA;AAAA,cAC3B;AACA,cAAA,QAAA,EAAS;AAAA,YACX,CAAA;AAAA,YACA,MAAM,QAAA,EAAU;AACd,cAAA,IAAI,OAAA,EAAS;AACX,gBAAA,MAAA,CAAO,cAAc,OAAO,CAAA;AAC5B,gBAAA,OAAA,GAAU,EAAA;AAAA,cACZ;AACA,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AACjC,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAMA,OAAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,YACtC,GAAA,EAAK,IAAA;AAAA,YACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,YACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,YAClB,MAAA,EAAQ,cAAA;AAAA,YACR,MAAA,EAAQ,cAAA;AAAA,YACR,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,WACpC,CAAA;AAED,UAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,EAAW,MAAM,MAAA,CAAO,KAAA;AAC7C,UAAA,OAAO,MAAA,CAAO,MAAA,CAAOA,OAAAA,CAAO,QAAQ,CAAA;AAAA,QACtC;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,UACtC,GAAA,EAAK,IAAA;AAAA,UACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,UACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,UAClB,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,SACpC,CAAA;AAED,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AACnC,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AAEnC,QAAA,OAAO;AAAA,UACL,MAAA;AAAA,UACA,MAAA;AAAA,UACA,UAAU,MAAA,CAAO;AAAA,SACnB;AAAA,MACF,CAAA;AAAA,MAEA,MAAA,EAAQ,OACN,QAAA,EACA,WAAA,KACkB;AAClB,QAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,QAAQ,CAAA;AACjC,QAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,CAAE,CAAA;AAAA,QACjE;AACA,QAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,UAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,MAAA,EAAO,EAAG,kBAAkB,CAAC,CAAA;AAChE,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,EAAS,gBAAgB,CAAA;AAC9C,UAAA,IAAI;AACF,YAAA,YAAA,CAAa,OAAO,CAAC,MAAA,EAAQ,SAAS,IAAA,EAAM,QAAA,EAAU,GAAG,CAAC,CAAA;AAC1D,YAAA,MAAM,UAAA,GAAa,MAAM,QAAA,CAAS,OAAO,CAAA;AACzC,YAAA,MAAM,cAAA,GAAiB,CAAA,qBAAA,EAAwB,UAAA,EAAY,CAAA,OAAA,CAAA;AAC3D,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,UAAA;AAAW,aAC7C,CAAA;AACD,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,GAAA,EAAK,IAAA;AAAA,cACL,IAAA,EAAM;AAAA,gBACJ,IAAA;AAAA,gBACA,CAAA,SAAA,EAAY,UAAA,CAAW,WAAW,CAAC,gBAAgB,UAAA,CAAW,cAAc,CAAC,CAAA,IAAA,EAAO,WAAW,WAAW,CAAC,CAAA,UAAA,EAAa,UAAA,CAAW,cAAc,CAAC,CAAA;AAAA;AACpJ,aACD,CAAA;AAAA,UACH,CAAA,SAAE;AACA,YAAA,MAAM,EAAA,CAAG,SAAS,EAAE,SAAA,EAAW,MAAM,KAAA,EAAO,IAAA,EAAM,CAAA,CAAE,KAAA;AAAA,cAClD,MAAM;AAAA,cAAC;AAAA,aACT;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,UAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,EAAE,MAAM,WAAA,EAAa,OAAA,EAAS,CAAC,CAAA;AAAA,QAC3D;AAAA,MACF,CAAA;AAAA,MAEA,WAAA,EAAa,OACX,WAAA,EACA,QAAA,KACkB;AAClB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,gBAAA,CAAiB;AAAA,UAC5C,IAAA,EAAM;AAAA,SACP,CAAA;AACD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,WAAW,CAAA,CAAE,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,KAAA,CAAM,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,GAAA,EAAO,CAAA;AAC/D,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,MAAM,KAAA,CAAM,QAAQ,CAAA,EAAG,gBAAe,EAAG;AAC5C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,wCAAwC,QAAQ,CAAA;AAAA,aAClD;AAAA,UACF;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,QAChE;AACA,QAAA,MAAM,UAAU,QAAA,EAAU,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAO,CAAA;AACjD,QAAA,MAAM,KAAA,CAAM,UAAU,GAAK,CAAA;AAAA,MAC7B,CAAA;AAAA,MAEA,OAAO,YAA2B;AAChC,QAAA,MAAM,QAAQ,IAAA,EAAK;AAAA,MACrB;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAC","file":"vercel.js","sourcesContent":["/**\n * Vercel isolated sandbox provider — wraps `@vercel/sandbox` into a SandboxProvider.\n *\n * Usage:\n *   import { vercel } from \"@snappedly-tools/shipyard/sandboxes/vercel\";\n *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: vercel() });\n */\n\nimport { execFileSync } from \"node:child_process\";\nimport {\n  lstat,\n  chmod,\n  mkdir,\n  mkdtemp,\n  readFile,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { Writable } from \"node:stream\";\nimport {\n  createIsolatedSandboxProvider,\n  type ExecResult,\n  type IsolatedSandboxHandle,\n  type IsolatedSandboxProvider,\n} from \"../SandboxProvider.js\";\nimport { MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { StreamedProcessOutput } from \"../processOutput.js\";\nimport { shellQuote } from \"../shellQuote.js\";\n\n/** Worktree path inside the Vercel sandbox. */\nconst VERCEL_REPO_PATH = \"/vercel/sandbox/workspace\";\n\n/**\n * Options for creating a Vercel sandbox provider.\n *\n * All `@vercel/sandbox` `Sandbox.create()` options are accepted as pass-through,\n * plus Shipyard-specific options for auth and branch strategy.\n */\nexport interface VercelOptions {\n  /**\n   * Vercel access token.\n   *\n   * Falls back to the SDK's default auth behavior, which reads\n   * `VERCEL_OIDC_TOKEN` (recommended for Vercel-hosted environments) or\n   * `VERCEL_TOKEN` from the environment.\n   */\n  readonly token?: string;\n\n  // ---- Pass-through @vercel/sandbox Sandbox.create() options ----\n\n  /**\n   * The source of the sandbox (git repo, tarball, or snapshot).\n   * Omit to start an empty sandbox.\n   */\n  readonly source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n        username?: string;\n        password?: string;\n      }\n    | {\n        type: \"tarball\";\n        url: string;\n      }\n    | {\n        type: \"snapshot\";\n        snapshotId: string;\n      };\n\n  /** Array of port numbers to expose from the sandbox (up to 4). */\n  readonly ports?: number[];\n\n  /** Timeout in milliseconds before the sandbox auto-terminates. */\n  readonly timeout?: number;\n\n  /**\n   * Resources to allocate to the sandbox.\n   * Each vCPU gets 2048 MB of memory.\n   */\n  readonly resources?: {\n    vcpus: number;\n  };\n\n  /**\n   * The runtime of the sandbox (e.g. `\"node24\"`, `\"node22\"`, `\"python3.13\"`).\n   * Defaults to `\"node24\"`.\n   */\n  readonly runtime?: string;\n\n  /**\n   * Network policy for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  readonly networkPolicy?: Record<string, unknown>;\n\n  /**\n   * Vercel project ID to associate sandbox operations with.\n   */\n  readonly projectId?: string;\n\n  /**\n   * Vercel team ID to associate sandbox operations with.\n   */\n  readonly teamId?: string;\n\n  /**\n   * Timeout in milliseconds (alias for `timeout`, kept for discoverability).\n   */\n  readonly timeoutMs?: number;\n\n  /**\n   * Sandbox template shorthand (e.g. `\"node-22\"`).\n   * Maps to the `runtime` option.\n   */\n  readonly template?: string;\n\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a Vercel isolated sandbox provider.\n *\n * The returned provider creates Vercel Firecracker microVM sandboxes via\n * the `@vercel/sandbox` SDK. Each sandbox is ephemeral — one sandbox per run.\n *\n * Requires `@vercel/sandbox` to be installed as a peer dependency.\n */\nexport const vercel = (options?: VercelOptions): IsolatedSandboxProvider =>\n  createIsolatedSandboxProvider({\n    name: \"vercel\",\n    env: options?.env,\n    create: async (createOptions): Promise<IsolatedSandboxHandle> => {\n      const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n      // Dynamic import so the peer dependency is only loaded at runtime\n      const { Sandbox } = await import(\"@vercel/sandbox\");\n\n      const createParams: Record<string, unknown> = {};\n\n      // Pass through SDK options\n      if (options?.source) createParams.source = options.source;\n      if (options?.ports) createParams.ports = options.ports;\n      if (options?.resources) createParams.resources = options.resources;\n      if (options?.networkPolicy)\n        createParams.networkPolicy = options.networkPolicy;\n      // runtime takes precedence over the template convenience alias\n      const resolvedRuntime = options?.runtime ?? options?.template;\n      if (resolvedRuntime) createParams.runtime = resolvedRuntime;\n\n      // Timeout: prefer explicit timeout, fall back to timeoutMs alias\n      const timeoutValue = options?.timeout ?? options?.timeoutMs;\n      if (timeoutValue !== undefined) createParams.timeout = timeoutValue;\n\n      // Merge provider env with Shipyard env\n      createParams.env = createOptions.env;\n\n      // Auth: pass token and team/project IDs if provided\n      if (options?.token) createParams.token = options.token;\n      if (options?.projectId) createParams.projectId = options.projectId;\n      if (options?.teamId) createParams.teamId = options.teamId;\n\n      const sandbox = await Sandbox.create(\n        createParams as Parameters<typeof Sandbox.create>[0],\n      );\n\n      // Ensure worktree directory exists\n      await sandbox.mkDir(VERCEL_REPO_PATH);\n\n      const handle: IsolatedSandboxHandle = {\n        worktreePath: VERCEL_REPO_PATH,\n\n        exec: async (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            maxOutputBytes?: number;\n          },\n        ): Promise<ExecResult> => {\n          if (opts?.onLine || opts?.maxOutputBytes !== undefined) {\n            const output = new StreamedProcessOutput({\n              ...opts,\n              maxOutputTailChars,\n            });\n            let partial = \"\";\n\n            const stdoutWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                const text = partial + chunk.toString();\n                const lines = text.split(\"\\n\");\n                partial = lines.pop() ?? \"\";\n                for (const line of lines) {\n                  output.addStdoutLine(line);\n                }\n                callback();\n              },\n              final(callback) {\n                if (partial) {\n                  output.addStdoutLine(partial);\n                  partial = \"\";\n                }\n                callback();\n              },\n            });\n\n            const stderrWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                output.addStderr(chunk.toString());\n                callback();\n              },\n            });\n\n            const result = await sandbox.runCommand({\n              cmd: \"sh\",\n              args: [\"-c\", command],\n              cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n              stdout: stdoutWritable,\n              stderr: stderrWritable,\n              ...(opts?.sudo ? { sudo: true } : {}),\n            });\n\n            if (output.error !== undefined) throw output.error;\n            return output.result(result.exitCode);\n          }\n\n          const result = await sandbox.runCommand({\n            cmd: \"sh\",\n            args: [\"-c\", command],\n            cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n            ...(opts?.sudo ? { sudo: true } : {}),\n          });\n\n          const stdout = await result.stdout();\n          const stderr = await result.stderr();\n\n          return {\n            stdout,\n            stderr,\n            exitCode: result.exitCode,\n          };\n        },\n\n        copyIn: async (\n          hostPath: string,\n          sandboxPath: string,\n        ): Promise<void> => {\n          const info = await lstat(hostPath);\n          if (info.isSymbolicLink()) {\n            throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);\n          }\n          if (info.isDirectory()) {\n            const tempDir = await mkdtemp(join(tmpdir(), \"shipyard-copyin-\"));\n            const tarPath = join(tempDir, \"archive.tar.gz\");\n            try {\n              execFileSync(\"tar\", [\"-czf\", tarPath, \"-C\", hostPath, \".\"]);\n              const tarContent = await readFile(tarPath);\n              const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;\n              await sandbox.writeFiles([\n                { path: sandboxTarPath, content: tarContent },\n              ]);\n              await sandbox.runCommand({\n                cmd: \"sh\",\n                args: [\n                  \"-c\",\n                  `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`,\n                ],\n              });\n            } finally {\n              await rm(tempDir, { recursive: true, force: true }).catch(\n                () => {},\n              );\n            }\n          } else {\n            const content = await readFile(hostPath);\n            await sandbox.writeFiles([{ path: sandboxPath, content }]);\n          }\n        },\n\n        copyFileOut: async (\n          sandboxPath: string,\n          hostPath: string,\n        ): Promise<void> => {\n          const buffer = await sandbox.readFileToBuffer({\n            path: sandboxPath,\n          });\n          if (!buffer) {\n            throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);\n          }\n          await mkdir(dirname(hostPath), { recursive: true, mode: 0o700 });\n          try {\n            if ((await lstat(hostPath)).isSymbolicLink()) {\n              throw new Error(\n                `Refusing to overwrite symbolic link: ${hostPath}`,\n              );\n            }\n          } catch (error) {\n            if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n          }\n          await writeFile(hostPath, buffer, { mode: 0o600 });\n          await chmod(hostPath, 0o600);\n        },\n\n        close: async (): Promise<void> => {\n          await sandbox.stop();\n        },\n      };\n\n      return handle;\n    },\n  });\n"]}

package/dist/templates/parallel-planner/main.mts

@@ -6,7 +6,8 @@
 //                      with their target branch names.
 //   Phase 2 (Execute): N routine Codex agents run in parallel via Promise.allSettled,
 //                      each working a single issue on its own branch.
-//   Phase 3 (Merge):   A strong Codex agent merges all branches that produced commits.
+//   Phase 3 (Merge):   A strong Codex agent merges all branches whose agents
+//                      completed, including branches with work from an earlier run.
 //
 // The outer loop repeats up to MAX_ITERATIONS times so that newly unblocked
 // issues are picked up after each round of merges.
@@ -141,8 +142,9 @@ for (let iteration = 1; iteration <= MAX_ITERATIONS; iteration++) {
     }
   }
 
-  // Only pass branches that actually produced commits to the merge phase.
-  // An agent that ran successfully but made no commits has nothing to merge.
+  // A run's commits are limited to changes made during that run. A deterministic
+  // branch can already contain the implementation from an earlier run, so an
+  // explicit completion signal must also make the branch eligible for merge.
   const completedIssues = settled
     .map((outcome, i) => ({ outcome, issue: issues[i]! }))
     .filter(
@@ -155,23 +157,24 @@ for (let iteration = 1; iteration <= MAX_ITERATIONS; iteration++) {
         issue: (typeof issues)[number];
       } =>
         entry.outcome.status === "fulfilled" &&
-        entry.outcome.value.commits.length > 0,
+        (entry.outcome.value.commits.length > 0 ||
+          entry.outcome.value.completionSignal !== undefined),
     )
     .map((entry) => entry.issue);
 
   const completedBranches = completedIssues.map((i) => i.branch);
 
   console.log(
-    `\nExecution complete. ${completedBranches.length} branch(es) with commits:`,
+    `\nExecution complete. ${completedBranches.length} completed branch(es):`,
   );
   for (const branch of completedBranches) {
     console.log(`  ${branch}`);
   }
 
   if (completedBranches.length === 0) {
-    // All agents ran but none made commits — nothing to merge this cycle.
-    console.log("No commits produced. Nothing to merge.");
-    continue;
+    // No agent completed and retrying the same plan would repeat unchanged work.
+    console.log("No implementations completed. Stopping.");
+    break;
   }
 
   // -------------------------------------------------------------------------

package/dist/templates/parallel-planner-with-review/main.mts

@@ -6,10 +6,12 @@
 //                               listing unblocked issues with branch names.
 //   Phase 2 (Execute + Review): For each issue, a sandbox is created via
 //                               createSandbox(). The implementer runs first
-//                               (100 iterations). If it produces commits, a
-//                               reviewer runs in the same sandbox on the same
-//                               branch (1 iteration). All issue pipelines run
-//                               concurrently via Promise.allSettled().
+//                               (100 iterations). If it completes, a reviewer
+//                               runs in the same sandbox on the same branch
+//                               (1 iteration). All issue pipelines run
+//                               concurrently via Promise.allSettled(). A completion
+//                               signal also qualifies a branch whose work predates
+//                               the current run.
 //   Phase 3 (Merge):            A strong Codex agent merges all completed
 //                               branches into the current branch.
 //
@@ -135,8 +137,12 @@ for (let iteration = 1; iteration <= MAX_ITERATIONS; iteration++) {
           },
         });
 
-        // Only review if the implementer produced commits
-        if (implement.commits.length > 0) {
+        // Review new work and deterministic branches that completed with work
+        // from an earlier run but produced no new commit this time.
+        if (
+          implement.commits.length > 0 ||
+          implement.completionSignal !== undefined
+        ) {
           const review = await sandbox.run({
             name: "reviewer",
             maxIterations: 1,
@@ -152,6 +158,8 @@ for (let iteration = 1; iteration <= MAX_ITERATIONS; iteration++) {
           return {
             ...review,
             commits: [...implement.commits, ...review.commits],
+            completionSignal:
+              review.completionSignal ?? implement.completionSignal,
           };
         }
 
@@ -171,30 +179,32 @@ for (let iteration = 1; iteration <= MAX_ITERATIONS; iteration++) {
     }
   }
 
-  // Only pass branches that actually produced commits to the merge phase.
-  // An agent that ran successfully but made no commits has nothing to merge.
+  // A run's commits are limited to changes made during that run. A deterministic
+  // branch can already contain the implementation from an earlier run, so an
+  // explicit completion signal must also make the branch eligible for merge.
   const completedIssues = settled
     .map((outcome, i) => ({ outcome, issue: issues[i]! }))
     .filter(
       (entry) =>
         entry.outcome.status === "fulfilled" &&
-        entry.outcome.value.commits.length > 0,
+        (entry.outcome.value.commits.length > 0 ||
+          entry.outcome.value.completionSignal !== undefined),
     )
     .map((entry) => entry.issue);
 
   const completedBranches = completedIssues.map((i) => i.branch);
 
   console.log(
-    `\nExecution complete. ${completedBranches.length} branch(es) with commits:`,
+    `\nExecution complete. ${completedBranches.length} completed branch(es):`,
   );
   for (const branch of completedBranches) {
     console.log(`  ${branch}`);
   }
 
   if (completedBranches.length === 0) {
-    // All agents ran but none made commits — nothing to merge this cycle.
-    console.log("No commits produced. Nothing to merge.");
-    continue;
+    // No agent completed and retrying the same plan would repeat unchanged work.
+    console.log("No implementations completed. Stopping.");
+    break;
   }
 
   // -------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snappedly-tools/shipyard",
-  "version": "0.4.4",
+  "version": "0.5.0",
   "description": "Run AI coding agents in isolated sandboxes",
   "type": "module",
   "main": "./dist/index.js",
@@ -76,7 +76,8 @@
     "prettier": "~3.8.1",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
-    "vitest": "^5.0.1"
+    "vitest": "^5.0.1",
+    "yaml": "^2.9.1"
   },
   "dependencies": {
     "@clack/prompts": "^1.8.1",