@snappedly-tools/shipyard 0.4.4 → 0.5.0

package/dist/chunk-ACD46ZM4.js

@@ -0,0 +1,136 @@
+import { createInterface } from 'readline';
+
+// src/boundedTail.ts
+var MAX_TAIL_CHARS = 64 * 1024;
+var OutputByteCounter = class {
+  constructor(maxBytes) {
+    this.maxBytes = maxBytes;
+  }
+  totalBytes = 0;
+  limitExceeded = false;
+  add(chunk) {
+    this.totalBytes += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.byteLength;
+    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;
+  }
+  get exceeded() {
+    return this.limitExceeded;
+  }
+};
+var BoundedTail = class {
+  items = [];
+  totalChars = 0;
+  maxChars;
+  separator;
+  /**
+   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.
+   * @param separator String placed between items by {@link toString}. Must match
+   *   how the caller would otherwise have joined the accumulated chunks (e.g.
+   *   `"\n"` for line streams, `""` for raw chunk streams).
+   */
+  constructor(maxChars = MAX_TAIL_CHARS, separator = "") {
+    this.maxChars = maxChars;
+    this.separator = separator;
+  }
+  /** Append one item to the tail, evicting oldest items to stay within budget. */
+  push(item) {
+    const bounded = item.length > this.maxChars ? item.slice(item.length - this.maxChars) : item;
+    this.totalChars += bounded.length + (this.items.length > 0 ? this.separator.length : 0);
+    this.items.push(bounded);
+    while (this.totalChars > this.maxChars && this.items.length > 1) {
+      const dropped = this.items.shift();
+      this.totalChars -= dropped.length + this.separator.length;
+    }
+  }
+  /** Join the retained tail into a single string (length ≤ `maxChars`). */
+  toString() {
+    return this.items.join(this.separator);
+  }
+};
+var StreamedProcessOutput = class {
+  maxOutputBytes;
+  byteCounter;
+  stdoutTail;
+  stderrTail;
+  onLine;
+  outputLimitError;
+  constructor(options) {
+    this.maxOutputBytes = options.maxOutputBytes;
+    this.byteCounter = options.maxOutputBytes === void 0 ? void 0 : new OutputByteCounter(options.maxOutputBytes);
+    const tailChars = options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;
+    this.stdoutTail = new BoundedTail(tailChars, "\n");
+    this.stderrTail = new BoundedTail(tailChars, "");
+    this.onLine = options.onLine ?? (() => {
+    });
+  }
+  checkLimit(chunk) {
+    if (this.byteCounter === void 0 || this.outputLimitError !== void 0) {
+      return this.outputLimitError;
+    }
+    this.byteCounter.add(chunk);
+    if (this.byteCounter.exceeded) {
+      this.outputLimitError = new Error(
+        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`
+      );
+    }
+    return this.outputLimitError;
+  }
+  addStdoutLine(line) {
+    this.stdoutTail.push(line);
+    this.onLine(line);
+  }
+  addStderr(chunk) {
+    this.stderrTail.push(chunk);
+  }
+  get error() {
+    return this.outputLimitError;
+  }
+  result(exitCode) {
+    return {
+      stdout: this.stdoutTail.toString(),
+      stderr: this.stderrTail.toString(),
+      exitCode
+    };
+  }
+};
+var collectProcessOutput = (process, options, resolve, reject) => {
+  if (options.onLine || options.maxOutputBytes !== void 0) {
+    const output = new StreamedProcessOutput(options);
+    const checkLimit = (chunk) => {
+      if (output.checkLimit(chunk) !== void 0) process.kill();
+    };
+    process.stdout.on("data", checkLimit);
+    process.stderr.on("data", checkLimit);
+    const lines = createInterface({ input: process.stdout });
+    lines.on("line", (line) => output.addStdoutLine(line));
+    process.stderr.on("data", (chunk) => {
+      output.addStderr(chunk.toString());
+    });
+    process.onClose((code) => {
+      if (output.error !== void 0) {
+        reject(output.error);
+        return;
+      }
+      resolve(output.result(code ?? 0));
+    });
+    return;
+  }
+  const stdoutChunks = [];
+  const stderrChunks = [];
+  process.stdout.on("data", (chunk) => {
+    stdoutChunks.push(chunk.toString());
+  });
+  process.stderr.on("data", (chunk) => {
+    stderrChunks.push(chunk.toString());
+  });
+  process.onClose((code) => {
+    resolve({
+      stdout: stdoutChunks.join(""),
+      stderr: stderrChunks.join(""),
+      exitCode: code ?? 0
+    });
+  });
+};
+
+export { MAX_TAIL_CHARS, StreamedProcessOutput, collectProcessOutput };
+//# sourceMappingURL=chunk-ACD46ZM4.js.map
+//# sourceMappingURL=chunk-ACD46ZM4.js.map

package/dist/chunk-ACD46ZM4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/boundedTail.ts","../src/processOutput.ts"],"names":[],"mappings":";;;AAmBO,IAAM,iBAAiB,EAAA,GAAK;AAQ5B,IAAM,oBAAN,MAAwB;AAAA,EAI7B,YAA6B,QAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAAA,EAAmB;AAAA,EAHxC,UAAA,GAAa,CAAA;AAAA,EACb,aAAA,GAAgB,KAAA;AAAA,EAIxB,IAAI,KAAA,EAAkC;AACpC,IAAA,IAAA,CAAK,UAAA,IACH,OAAO,KAAA,KAAU,QAAA,GAAW,OAAO,UAAA,CAAW,KAAK,IAAI,KAAA,CAAM,UAAA;AAC/D,IAAA,IAAI,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,QAAA,OAAe,aAAA,GAAgB,IAAA;AAAA,EAC5D;AAAA,EAEA,IAAI,QAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AACF,CAAA;AAaO,IAAM,cAAN,MAAkB;AAAA,EACN,QAAkB,EAAC;AAAA,EAC5B,UAAA,GAAa,CAAA;AAAA,EACJ,QAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjB,WAAA,CAAY,QAAA,GAAmB,cAAA,EAAgB,SAAA,GAAY,EAAA,EAAI;AAC7D,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA,EAGA,KAAK,IAAA,EAAoB;AACvB,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAA,GACf,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAQ,CAAA,GACtC,IAAA;AACN,IAAA,IAAA,CAAK,UAAA,IACH,QAAQ,MAAA,IAAU,IAAA,CAAK,MAAM,MAAA,GAAS,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,CAAA;AACpE,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,KAAK,UAAA,GAAa,IAAA,CAAK,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AAC/D,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AACjC,MAAA,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA;AAAA,IACrD;AAAA,EACF;AAAA;AAAA,EAGA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAAA,EACvC;AACF,CAAA;ACvEO,IAAM,wBAAN,MAA4B;AAAA,EAChB,cAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACT,gBAAA;AAAA,EAER,YAAY,OAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,iBAAiB,OAAA,CAAQ,cAAA;AAC9B,IAAA,IAAA,CAAK,WAAA,GACH,QAAQ,cAAA,KAAmB,MAAA,GACvB,SACA,IAAI,iBAAA,CAAkB,QAAQ,cAAc,CAAA;AAClD,IAAA,MAAM,SAAA,GACJ,OAAA,CAAQ,cAAA,IAAkB,OAAA,CAAQ,kBAAA,IAAsB,cAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,IAAI,CAAA;AACjD,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,MAAA,GAAS,OAAA,CAAQ,MAAA,KAAW,MAAM;AAAA,IAAC,CAAA,CAAA;AAAA,EAC1C;AAAA,EAEA,WAAW,KAAA,EAA+C;AACxD,IAAA,IAAI,IAAA,CAAK,WAAA,KAAgB,MAAA,IAAa,IAAA,CAAK,qBAAqB,MAAA,EAAW;AACzE,MAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,IAAI,KAAK,CAAA;AAC1B,IAAA,IAAI,IAAA,CAAK,YAAY,QAAA,EAAU;AAC7B,MAAA,IAAA,CAAK,mBAAmB,IAAI,KAAA;AAAA,QAC1B,CAAA,gCAAA,EAAmC,KAAK,cAAc,CAAA,MAAA;AAAA,OACxD;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,cAAc,IAAA,EAAoB;AAChC,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,IAAI,CAAA;AACzB,IAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAAA,EAClB;AAAA,EAEA,UAAU,KAAA,EAAqB;AAC7B,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,EAC5B;AAAA,EAEA,IAAI,KAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,OAAO,QAAA,EAAuC;AAC5C,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC;AAAA,KACF;AAAA,EACF;AACF;AAEO,IAAM,oBAAA,GAAuB,CAClC,OAAA,EAMA,OAAA,EACA,SACA,MAAA,KACS;AACT,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAU,OAAA,CAAQ,cAAA,KAAmB,MAAA,EAAW;AAC1D,IAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB,OAAO,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAAwB;AAC1C,MAAA,IAAI,OAAO,UAAA,CAAW,KAAK,CAAA,KAAM,MAAA,UAAmB,IAAA,EAAK;AAAA,IAC3D,CAAA;AACA,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,MAAM,QAAQ,eAAA,CAAgB,EAAE,KAAA,EAAO,OAAA,CAAQ,QAAQ,CAAA;AACvD,IAAA,KAAA,CAAM,GAAG,MAAA,EAAQ,CAAC,SAAS,MAAA,CAAO,aAAA,CAAc,IAAI,CAAC,CAAA;AACrD,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,MAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,IACnC,CAAC,CAAA;AACD,IAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,MAAA,IAAI,MAAA,CAAO,UAAU,MAAA,EAAW;AAC9B,QAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AACnB,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,IAAQ,CAAC,CAAC,CAAA;AAAA,IAClC,CAAC,CAAA;AACD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,IAAA,OAAA,CAAQ;AAAA,MACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,UAAU,IAAA,IAAQ;AAAA,KACnB,CAAA;AAAA,EACH,CAAC,CAAA;AACH","file":"chunk-ACD46ZM4.js","sourcesContent":["/**\n * A bounded, rolling tail of streamed output — a pure, provider-agnostic\n * utility shared by every sandbox provider that streams `exec` output.\n *\n * When a provider streams output line-by-line, it accumulates the stream only\n * to build the returned `ExecResult.stdout`/`stderr`. Consumers read just the\n * tail of that value (e.g. the last lines of an error, or a fallback for the\n * agent's final result), so retaining the whole stream is unnecessary — and,\n * once the accumulated string passes V8's ~512MB max string length, fatal: a\n * naive `chunks.join()` throws `RangeError: Invalid string length`, which on a\n * long agent run crashes the whole orchestration.\n */\n\n/**\n * Default maximum number of characters retained in a bounded output tail.\n *\n * 64KiB sits comfortably above any agent completion signal or structured-output\n * payload while staying far below V8's max string length.\n */\nexport const MAX_TAIL_CHARS = 64 * 1024;\n\n/**\n * Counts streamed output without retaining it. Providers use this when a\n * caller needs a hard byte ceiling for a one-shot command (for example prompt\n * expansion), so an untrusted command cannot exhaust memory before its output\n * is inspected.\n */\nexport class OutputByteCounter {\n  private totalBytes = 0;\n  private limitExceeded = false;\n\n  constructor(private readonly maxBytes: number) {}\n\n  add(chunk: string | Uint8Array): void {\n    this.totalBytes +=\n      typeof chunk === \"string\" ? Buffer.byteLength(chunk) : chunk.byteLength;\n    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;\n  }\n\n  get exceeded(): boolean {\n    return this.limitExceeded;\n  }\n}\n\n/**\n * A fixed-size rolling tail of strings, bounded by total character length.\n *\n * `push` appends to the tail; once the joined length would exceed `maxChars`,\n * the oldest items are dropped from the front. A single item longer than\n * `maxChars` is truncated to its own tail, so a newline-free blob can't\n * overflow on one push. `toString` joins the retained items, and its length is\n * always at most `maxChars`.\n *\n * The running length counter is encapsulated so callers can't desync it.\n */\nexport class BoundedTail {\n  private readonly items: string[] = [];\n  private totalChars = 0;\n  private readonly maxChars: number;\n  private readonly separator: string;\n\n  /**\n   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.\n   * @param separator String placed between items by {@link toString}. Must match\n   *   how the caller would otherwise have joined the accumulated chunks (e.g.\n   *   `\"\\n\"` for line streams, `\"\"` for raw chunk streams).\n   */\n  constructor(maxChars: number = MAX_TAIL_CHARS, separator = \"\") {\n    this.maxChars = maxChars;\n    this.separator = separator;\n  }\n\n  /** Append one item to the tail, evicting oldest items to stay within budget. */\n  push(item: string): void {\n    const bounded =\n      item.length > this.maxChars\n        ? item.slice(item.length - this.maxChars)\n        : item;\n    this.totalChars +=\n      bounded.length + (this.items.length > 0 ? this.separator.length : 0);\n    this.items.push(bounded);\n    while (this.totalChars > this.maxChars && this.items.length > 1) {\n      const dropped = this.items.shift()!;\n      this.totalChars -= dropped.length + this.separator.length;\n    }\n  }\n\n  /** Join the retained tail into a single string (length ≤ `maxChars`). */\n  toString(): string {\n    return this.items.join(this.separator);\n  }\n}\n","import type { Readable } from \"node:stream\";\nimport { createInterface } from \"node:readline\";\nimport {\n  BoundedTail,\n  MAX_TAIL_CHARS,\n  OutputByteCounter,\n} from \"./boundedTail.js\";\n\nexport interface ProcessOutputResult {\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n}\n\nexport interface ProcessOutputOptions {\n  readonly onLine?: (line: string) => void;\n  readonly maxOutputBytes?: number;\n  readonly maxOutputTailChars?: number;\n}\n\nexport class StreamedProcessOutput {\n  private readonly maxOutputBytes: number | undefined;\n  private readonly byteCounter: OutputByteCounter | undefined;\n  private readonly stdoutTail: BoundedTail;\n  private readonly stderrTail: BoundedTail;\n  private readonly onLine: (line: string) => void;\n  private outputLimitError: Error | undefined;\n\n  constructor(options: ProcessOutputOptions) {\n    this.maxOutputBytes = options.maxOutputBytes;\n    this.byteCounter =\n      options.maxOutputBytes === undefined\n        ? undefined\n        : new OutputByteCounter(options.maxOutputBytes);\n    const tailChars =\n      options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;\n    this.stdoutTail = new BoundedTail(tailChars, \"\\n\");\n    this.stderrTail = new BoundedTail(tailChars, \"\");\n    this.onLine = options.onLine ?? (() => {});\n  }\n\n  checkLimit(chunk: string | Uint8Array): Error | undefined {\n    if (this.byteCounter === undefined || this.outputLimitError !== undefined) {\n      return this.outputLimitError;\n    }\n    this.byteCounter.add(chunk);\n    if (this.byteCounter.exceeded) {\n      this.outputLimitError = new Error(\n        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`,\n      );\n    }\n    return this.outputLimitError;\n  }\n\n  addStdoutLine(line: string): void {\n    this.stdoutTail.push(line);\n    this.onLine(line);\n  }\n\n  addStderr(chunk: string): void {\n    this.stderrTail.push(chunk);\n  }\n\n  get error(): Error | undefined {\n    return this.outputLimitError;\n  }\n\n  result(exitCode: number): ProcessOutputResult {\n    return {\n      stdout: this.stdoutTail.toString(),\n      stderr: this.stderrTail.toString(),\n      exitCode,\n    };\n  }\n}\n\nexport const collectProcessOutput = (\n  process: {\n    readonly stdout: Readable;\n    readonly stderr: Readable;\n    readonly kill: () => void;\n    readonly onClose: (listener: (code: number | null) => void) => void;\n  },\n  options: ProcessOutputOptions,\n  resolve: (result: ProcessOutputResult) => void,\n  reject: (error: Error) => void,\n): void => {\n  if (options.onLine || options.maxOutputBytes !== undefined) {\n    const output = new StreamedProcessOutput(options);\n    const checkLimit = (chunk: Buffer): void => {\n      if (output.checkLimit(chunk) !== undefined) process.kill();\n    };\n    process.stdout.on(\"data\", checkLimit);\n    process.stderr.on(\"data\", checkLimit);\n    const lines = createInterface({ input: process.stdout });\n    lines.on(\"line\", (line) => output.addStdoutLine(line));\n    process.stderr.on(\"data\", (chunk: Buffer) => {\n      output.addStderr(chunk.toString());\n    });\n    process.onClose((code) => {\n      if (output.error !== undefined) {\n        reject(output.error);\n        return;\n      }\n      resolve(output.result(code ?? 0));\n    });\n    return;\n  }\n\n  const stdoutChunks: string[] = [];\n  const stderrChunks: string[] = [];\n  process.stdout.on(\"data\", (chunk: Buffer) => {\n    stdoutChunks.push(chunk.toString());\n  });\n  process.stderr.on(\"data\", (chunk: Buffer) => {\n    stderrChunks.push(chunk.toString());\n  });\n  process.onClose((code) => {\n    resolve({\n      stdout: stdoutChunks.join(\"\"),\n      stderr: stderrChunks.join(\"\"),\n      exitCode: code ?? 0,\n    });\n  });\n};\n"]}

package/dist/{chunk-2GT3OPO5.js → chunk-FDYOTN55.js}

@@ -1,5 +1,5 @@
 import { toSessionTransferHandle, shellQuote } from './chunk-KMGNFXKN.js';
-import { existsSync, constants, statSync } from 'fs';
+import { existsSync, constants, lstatSync, realpathSync, statSync } from 'fs';
 import { mkdtemp, writeFile, chmod, mkdir, stat, copyFile, rm, readdir, lstat, readFile, open } from 'fs/promises';
 import * as clack from '@clack/prompts';
 import { FileSystem } from '@effect/platform';
@@ -29,6 +29,15 @@ var SilentDisplay = {
       ]),
       () => effect
     ),
+    progress: (title, effect) => Effect.gen(function* () {
+      const updates = [];
+      const result = yield* effect((update) => updates.push(update));
+      yield* Ref.update(ref, (entries) => [
+        ...entries,
+        { _tag: "progress", title, updates: [...updates] }
+      ]);
+      return result;
+    }),
     summary: (title, rows) => Ref.update(ref, (entries) => [
       ...entries,
       { _tag: "summary", title, rows }
@@ -127,6 +136,20 @@ var FileDisplay = {
           yield* appendToLog(`${message} done (${elapsed}s)`);
           return result;
         }),
+        progress: (title, effect) => Effect.gen(function* () {
+          yield* appendToLog(`${title}...`);
+          const start = Date.now();
+          const updates = [];
+          const result = yield* effect((update) => updates.push(update));
+          for (const update of updates) {
+            yield* appendToLog(
+              `  ${update.message} (${update.current}/${update.total})`
+            );
+          }
+          const elapsed = ((Date.now() - start) / 1e3).toFixed(1);
+          yield* appendToLog(`${title} done (${elapsed}s)`);
+          return result;
+        }),
         summary: (title, rows) => {
           const lines = Object.entries(rows).map(([key, value]) => `  ${key}: ${value}`).join("\n");
           return appendToLog(`${title}
@@ -186,6 +209,34 @@ var ClackDisplay = {
         }
       })
     ),
+    progress: (title, effect) => Effect.acquireUseRelease(
+      Effect.sync(() => {
+        const progress2 = clack.progress({ max: 100 });
+        let percent = 0;
+        progress2.start(title);
+        const report = (update) => {
+          const total = Math.max(1, update.total);
+          const current = Math.min(total, Math.max(0, update.current));
+          const nextPercent = Math.round(current / total * 100);
+          const message = `${update.message} (${current}/${total})`;
+          if (nextPercent > percent) {
+            progress2.advance(nextPercent - percent, message);
+          } else {
+            progress2.message(message);
+          }
+          percent = nextPercent;
+        };
+        return { progress: progress2, report };
+      }),
+      ({ report }) => effect(report),
+      ({ progress: progress2 }, exit) => Effect.sync(() => {
+        if (exit._tag === "Success") {
+          progress2.stop(`${title} complete`);
+        } else {
+          progress2.error(`${title} failed`);
+        }
+      })
+    ),
     summary: (title, rows) => Effect.sync(() => {
       const lines = Object.entries(rows).map(([key, value]) => terminalStyle.summaryRow(key, value)).join("\n");
       clack.note(lines, terminalStyle.summaryTitle(title));
@@ -306,11 +357,14 @@ var SessionCaptureError = class extends Data.TaggedError(
 var PRODUCT_NAME = "Shipyard";
 var CLI_NAME = "shipyard";
 var RUNTIME_NAMESPACE = "shipyard";
+var ACTIVATION_LABEL = "shipyard";
 var CONFIG_DIR = ".shipyard";
 var LOGS_DIR = "logs";
 var WORKTREES_DIR = "worktrees";
 var PATCHES_DIR = "patches";
 var LOCKS_DIR = "locks";
+var RUNNER_DIR = "runner";
+var RUNNER_SANDBOX_MASK_DIR = "runner-sandbox-mask";
 var PARENT_GIT_SANDBOX_DIR = "/.shipyard-parent-git";
 var SYNC_BASE_REF = "refs/shipyard/sync-base";
 var CONTAINER_NAME_PREFIX = "shipyard-";
@@ -815,6 +869,79 @@ var pruneStale = (repoDir) => Effect.gen(function* () {
     })
   )
 );
+var PROTECTED_RUNNER_PATH = `${CONFIG_DIR}/${RUNNER_DIR}`;
+var pathKey = (value) => value.normalize("NFC").toLocaleLowerCase("en-US");
+var SAFE_RUNNER_ENV_KEYS = /* @__PURE__ */ new Set([
+  "HOME",
+  "LANG",
+  "LC_ALL",
+  "LOGNAME",
+  "PATH",
+  "SHELL",
+  "TEMP",
+  "TERM",
+  "TMP",
+  "TMPDIR",
+  "USER"
+]);
+var repositoryRunnerEnvironment = (source) => Object.fromEntries(
+  Object.entries(source).filter(
+    ([key, value]) => SAFE_RUNNER_ENV_KEYS.has(key) && value !== void 0
+  )
+);
+var assertExcludesRepositoryRunner = (relativePath) => {
+  const normalized = pathKey(
+    posix.normalize(relativePath.replace(/\\/g, "/")).replace(/^\.\//, "").replace(/\/$/, "")
+  );
+  const protectedPath = pathKey(PROTECTED_RUNNER_PATH);
+  if (normalized === "." || normalized === protectedPath || normalized.startsWith(`${protectedPath}/`) || protectedPath.startsWith(`${normalized}/`)) {
+    throw new Error(
+      `Copy path ${relativePath} would expose the protected repository runner to an agent sandbox.`
+    );
+  }
+};
+var assertSafeRepositoryRunnerDirectories = (repoDir) => {
+  const runnerDir = join(repoDir, CONFIG_DIR, RUNNER_DIR);
+  const maskDir = join(repoDir, CONFIG_DIR, RUNNER_SANDBOX_MASK_DIR);
+  for (const [name, path] of [
+    ["repository runner", runnerDir],
+    ["repository runner sandbox mask", maskDir]
+  ]) {
+    const stat2 = lstatSync(path);
+    if (stat2.isSymbolicLink() || !stat2.isDirectory()) {
+      throw new Error(
+        `The protected ${name} path must be a real directory: ${path}`
+      );
+    }
+  }
+  if (pathKey(realpathSync(runnerDir)) === pathKey(realpathSync(maskDir))) {
+    throw new Error(
+      "The protected repository runner and sandbox mask paths must be distinct directories."
+    );
+  }
+};
+var assertProtectedDirectoryIdentities = async (runnerDir, maskDir, inspect) => {
+  if (!inspect) return;
+  const runner = await inspect(runnerDir);
+  const mask = await inspect(maskDir);
+  if (!runner.directory || runner.symbolicLink) {
+    throw new Error(
+      `The protected repository runner path must be a real directory: ${runnerDir}`
+    );
+  }
+  if (!mask.directory || mask.symbolicLink) {
+    throw new Error(
+      `The protected repository runner sandbox mask path must be a real directory: ${maskDir}`
+    );
+  }
+  if (pathKey(runner.realPath) === pathKey(mask.realPath)) {
+    throw new Error(
+      "The protected repository runner and sandbox mask paths must be distinct directories."
+    );
+  }
+};
+
+// src/CopyToWorktree.ts
 var COPY_TO_WORKTREE_TIMEOUT_MS = 6e4;
 var getCopyOnWriteFlags = (platform) => platform === "darwin" ? ["-cR"] : ["-R", "--reflink=auto"];
 var copyToWorktree = (paths, hostRepoDir, worktreePath, timeoutMs) => {
@@ -825,6 +952,7 @@ var copyToWorktree = (paths, hostRepoDir, worktreePath, timeoutMs) => {
       let src;
       let dest;
       try {
+        assertExcludesRepositoryRunner(relativePath);
         src = resolveSafeRelativePath(hostRepoDir, relativePath, "copy path");
         dest = resolveSafeRelativePath(worktreePath, relativePath, "copy path");
       } catch (error) {
@@ -1109,7 +1237,35 @@ var syncOut = (hostRepoDir, handle) => Effect.gen(function* () {
   const hasUntracked = lsFilesResult.stdout.length > 0;
   const untrackedFiles = hasUntracked ? lsFilesResult.stdout.split("\0").filter((f) => f.length > 0) : [];
   yield* Effect.try({
-    try: () => untrackedFiles.forEach(assertSafeGitWorktreePath),
+    try: () => untrackedFiles.forEach((path) => {
+      assertSafeGitWorktreePath(path);
+      assertExcludesRepositoryRunner(path);
+    }),
+    catch: (error) => new SyncError({ message: String(error) })
+  });
+  const changedPaths = [];
+  if (hasCommits) {
+    const committedNames = yield* execOk(
+      handle,
+      `git diff --name-only -z ${shellQuote(`${base}..HEAD`)}`,
+      { cwd: worktreePath }
+    );
+    changedPaths.push(
+      ...committedNames.stdout.split("\0").filter((path) => path.length > 0)
+    );
+  }
+  if (hasDiff) {
+    const uncommittedNames = yield* execOk(
+      handle,
+      "git diff --name-only -z HEAD",
+      { cwd: worktreePath }
+    );
+    changedPaths.push(
+      ...uncommittedNames.stdout.split("\0").filter((path) => path.length > 0)
+    );
+  }
+  yield* Effect.try({
+    try: () => changedPaths.forEach(assertExcludesRepositoryRunner),
     catch: (error) => new SyncError({ message: String(error) })
   });
   if (!hasCommits && !hasDiff && !hasUntracked) {
@@ -1727,6 +1883,18 @@ ${result.stderr}`
   )
 );
 var syncIn = (hostRepoDir, handle) => Effect.gen(function* () {
+  const protectedRunnerPath = `${CONFIG_DIR}/${RUNNER_DIR}`;
+  const runnerObjects = yield* execHostGit3(
+    ["rev-list", "--objects", "--all", "--", protectedRunnerPath],
+    hostRepoDir
+  );
+  if (runnerObjects.trim().length > 0) {
+    return yield* Effect.fail(
+      new SyncError({
+        message: `Refusing to copy repository history into the sandbox because it contains protected repository runner files under ${protectedRunnerPath}. Remove those files from all refs before retrying.`
+      })
+    );
+  }
   const branch = (yield* execHostGit3(
     ["rev-parse", "--abbrev-ref", "HEAD"],
     hostRepoDir
@@ -1823,12 +1991,33 @@ var startNoSandbox = (options) => Effect.tryPromise({
 );
 var startBindMountSandbox = (options) => Effect.tryPromise({
   try: () => {
+    const usesRunnerMask = options.worktreeOrRepoPath === options.hostRepoDir && existsSync(join(options.hostRepoDir, CONFIG_DIR, RUNNER_DIR)) && existsSync(
+      join(options.hostRepoDir, CONFIG_DIR, RUNNER_SANDBOX_MASK_DIR)
+    );
+    if (usesRunnerMask) {
+      assertSafeRepositoryRunnerDirectories(options.hostRepoDir);
+    }
     const rawMounts = [
       {
         hostPath: options.worktreeOrRepoPath,
         sandboxPath: options.repoDir
       },
-      ...options.gitMounts
+      ...options.gitMounts,
+      ...usesRunnerMask ? [
+        {
+          hostPath: join(
+            options.hostRepoDir,
+            CONFIG_DIR,
+            RUNNER_SANDBOX_MASK_DIR
+          ),
+          sandboxPath: posix.join(
+            options.repoDir,
+            CONFIG_DIR,
+            RUNNER_DIR
+          ),
+          readonly: true
+        }
+      ] : []
     ];
     const mounts = normalizeMounts(
       rawMounts,
@@ -1895,6 +2084,7 @@ var startIsolatedSandbox = (options) => Effect.gen(function* () {
           let hostPath;
           let sandboxPath;
           try {
+            assertExcludesRepositoryRunner(relativePath);
             hostPath = resolveSafeRelativePath(
               options.sourceRepoDir ?? options.hostRepoDir,
               relativePath,
@@ -2615,6 +2805,6 @@ var registerShutdown = (teardown) => {
   };
 };
 
-export { AgentError, AgentIdleTimeoutError, CLI_NAME, CONFIG_DIR, ClackDisplay, ConfigDirError, CwdError, Display, DockerError, ExecHostError, FileDisplay, InitError, LOCKS_DIR, LOGS_DIR, PRODUCT_NAME, PromptError, PromptExpansionTimeoutError, SANDBOX_REPO_DIR, SandboxConfig, SandboxFactory, SessionCaptureError, SilentDisplay, WorktreeDockerSandboxFactory, assertIsolatedWorkspaceMounts, assertNoSymlinkComponents, copyToWorktree, create, defaultImageName, formatVolumeMount, generateTempBranchName, getCurrentBranch, hasUncommittedChanges, makeSandboxFromHandle, patchGitMountsForWindows, processFileMountParents, pruneStale, registerShutdown, remove, resolveCwd, resolveGitMounts, resolveUserMounts, runHostHooks, startSandbox, syncOut, withSandboxLifecycle };
-//# sourceMappingURL=chunk-2GT3OPO5.js.map
-//# sourceMappingURL=chunk-2GT3OPO5.js.map
+export { ACTIVATION_LABEL, AgentError, AgentIdleTimeoutError, CLI_NAME, CONFIG_DIR, ClackDisplay, ConfigDirError, CwdError, Display, DockerError, ExecHostError, FileDisplay, InitError, LOCKS_DIR, LOGS_DIR, PRODUCT_NAME, PromptError, PromptExpansionTimeoutError, RUNNER_DIR, RUNNER_SANDBOX_MASK_DIR, SANDBOX_REPO_DIR, SandboxConfig, SandboxFactory, SessionCaptureError, SilentDisplay, WorktreeDockerSandboxFactory, assertIsolatedWorkspaceMounts, assertNoSymlinkComponents, assertProtectedDirectoryIdentities, copyToWorktree, create, defaultImageName, formatVolumeMount, generateTempBranchName, getCurrentBranch, hasUncommittedChanges, makeSandboxFromHandle, patchGitMountsForWindows, processFileMountParents, pruneStale, registerShutdown, remove, repositoryRunnerEnvironment, resolveCwd, resolveGitMounts, resolveUserMounts, runHostHooks, startSandbox, syncOut, withSandboxLifecycle };
+//# sourceMappingURL=chunk-FDYOTN55.js.map
+//# sourceMappingURL=chunk-FDYOTN55.js.map