@snappedly-tools/shipyard 0.5.0-staging.36072068333 → 0.6.0

package/dist/chunk-KMGNFXKN.js

@@ -0,0 +1,38 @@
+// src/SandboxProvider.ts
+var createBindMountSandboxProvider = (config) => ({
+  tag: "bind-mount",
+  name: config.name,
+  env: config.env ?? {},
+  sandboxHomedir: config.sandboxHomedir,
+  create: config.create
+});
+var createIsolatedSandboxProvider = (config) => ({
+  tag: "isolated",
+  name: config.name,
+  env: config.env ?? {},
+  create: config.create
+});
+var toSessionTransferHandle = (handle) => {
+  if (handle === void 0 || !("copyFileOut" in handle)) return void 0;
+  if ("copyFileIn" in handle) return handle;
+  return {
+    worktreePath: handle.worktreePath,
+    exec: (command, options) => handle.exec(command, options),
+    interactiveExec: handle.interactiveExec?.bind(handle),
+    copyFileIn: (source, destination) => handle.copyIn(source, destination),
+    copyFileOut: (source, destination) => handle.copyFileOut(source, destination),
+    close: () => handle.close()
+  };
+};
+
+// src/shellQuote.ts
+var shellQuote = (value) => {
+  if (value.includes("\0")) {
+    throw new Error("Cannot quote a string containing a NUL byte");
+  }
+  return `'${value.replaceAll("'", "'\\''")}'`;
+};
+
+export { createBindMountSandboxProvider, createIsolatedSandboxProvider, shellQuote, toSessionTransferHandle };
+//# sourceMappingURL=chunk-KMGNFXKN.js.map
+//# sourceMappingURL=chunk-KMGNFXKN.js.map

package/dist/chunk-KMGNFXKN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/SandboxProvider.ts","../src/shellQuote.ts"],"names":[],"mappings":";AAsUO,IAAM,8BAAA,GAAiC,CAC5C,MAAA,MAC8B;AAAA,EAC9B,GAAA,EAAK,YAAA;AAAA,EACL,MAAM,MAAA,CAAO,IAAA;AAAA,EACb,GAAA,EAAK,MAAA,CAAO,GAAA,IAAO,EAAC;AAAA,EACpB,gBAAgB,MAAA,CAAO,cAAA;AAAA,EACvB,QAAQ,MAAA,CAAO;AACjB,CAAA;AAMO,IAAM,6BAAA,GAAgC,CAC3C,MAAA,MAC6B;AAAA,EAC7B,GAAA,EAAK,UAAA;AAAA,EACL,MAAM,MAAA,CAAO,IAAA;AAAA,EACb,GAAA,EAAK,MAAA,CAAO,GAAA,IAAO,EAAC;AAAA,EACpB,QAAQ,MAAA,CAAO;AACjB,CAAA;AAGO,IAAM,uBAAA,GAA0B,CACrC,MAAA,KAKuC;AACvC,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,EAAE,aAAA,IAAiB,SAAS,OAAO,MAAA;AAC/D,EAAA,IAAI,YAAA,IAAgB,QAAQ,OAAO,MAAA;AACnC,EAAA,OAAO;AAAA,IACL,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,MAAM,CAAC,OAAA,EAAS,YAAY,MAAA,CAAO,IAAA,CAAK,SAAS,OAAO,CAAA;AAAA,IACxD,eAAA,EAAiB,MAAA,CAAO,eAAA,EAAiB,IAAA,CAAK,MAAM,CAAA;AAAA,IACpD,YAAY,CAAC,MAAA,EAAQ,gBAAgB,MAAA,CAAO,MAAA,CAAO,QAAQ,WAAW,CAAA;AAAA,IACtE,aAAa,CAAC,MAAA,EAAQ,gBACpB,MAAA,CAAO,WAAA,CAAY,QAAQ,WAAW,CAAA;AAAA,IACxC,KAAA,EAAO,MAAM,MAAA,CAAO,KAAA;AAAM,GAC5B;AACF;;;AC/WO,IAAM,UAAA,GAAa,CAAC,KAAA,KAA0B;AACnD,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EAC/D;AACA,EAAA,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,UAAA,CAAW,GAAA,EAAK,OAAO,CAAC,CAAA,CAAA,CAAA;AAC3C","file":"chunk-KMGNFXKN.js","sourcesContent":["/**\n * Sandbox provider types — the pluggable interface for sandbox runtimes.\n *\n * Provider authors implement a small Promise-based interface. Shipyard\n * handles worktree creation, git mount resolution, and commit extraction.\n */\n\n/** Result of executing a command inside a sandbox. */\nexport interface ExecResult {\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n}\n\n/** Options for interactiveExec — the streams the provider should wire to the spawned process. */\nexport interface InteractiveExecOptions {\n  readonly stdin: NodeJS.ReadableStream;\n  readonly stdout: NodeJS.WritableStream;\n  readonly stderr: NodeJS.WritableStream;\n  readonly cwd?: string;\n  /** Terminate the interactive process when the caller cancels the session. */\n  readonly signal?: AbortSignal;\n}\n\n/** Handle to a running bind-mount sandbox. */\nexport interface BindMountSandboxHandle {\n  /** Absolute path to the worktree inside the sandbox. */\n  readonly worktreePath: string;\n  /**\n   * Execute a command in the sandbox.\n   *\n   * Implementations MUST support line-by-line streaming via `onLine`. This is\n   * how Shipyard delivers live feedback to the user and enforces idle timeouts —\n   * without a streaming implementation, neither will work. A buffered/batch\n   * implementation that only calls `onLine` after the process exits does NOT\n   * satisfy this contract.\n   *\n   * When `stdin` is set, the implementation pipes the string to the child\n   * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.\n   */\n  exec(\n    command: string,\n    options?: {\n      onLine?: (line: string) => void;\n      cwd?: string;\n      sudo?: boolean;\n      stdin?: string;\n      /** Abort the command when the caller's operation is cancelled. */\n      signal?: AbortSignal;\n      /** Reject/terminate the command after this many combined output bytes. */\n      maxOutputBytes?: number;\n    },\n  ): Promise<ExecResult>;\n  /**\n   * Launch an interactive process inside the sandbox.\n   * Optional — providers that support interactive sessions implement this.\n   * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and\n   * allocates a pseudo-terminal accordingly.\n   * Implementations MUST terminate the underlying process when `signal` aborts.\n   */\n  interactiveExec?(\n    args: string[],\n    options: InteractiveExecOptions,\n  ): Promise<{ exitCode: number }>;\n  /** Copy a single file from the host into the sandbox. */\n  copyFileIn(hostPath: string, sandboxPath: string): Promise<void>;\n  /** Copy a single file from the sandbox to the host. */\n  copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;\n  /** Tear down the sandbox. */\n  close(): Promise<void>;\n}\n\n/** Options passed to a bind-mount provider's `create` function. */\nexport interface BindMountCreateOptions {\n  /** Host-side path to the worktree directory. */\n  readonly worktreePath: string;\n  /** Host-side path to the original repo root. */\n  readonly hostRepoPath: string;\n  /** Volume mounts to apply (host:sandbox pairs). */\n  readonly mounts: Array<{\n    hostPath: string;\n    sandboxPath: string;\n    readonly?: boolean;\n  }>;\n  /** Environment variables to inject into the sandbox. */\n  readonly env: Record<string, string>;\n}\n\n/** Configuration for createBindMountSandboxProvider. */\nexport interface BindMountSandboxProviderConfig {\n  /** Human-readable name for this provider (e.g. \"docker\"). */\n  readonly name: string;\n  /** Environment variables injected by this provider. Merged at launch time. */\n  readonly env?: Record<string, string>;\n  /**\n   * Absolute path to the home directory inside the sandbox (e.g. `\"/home/agent\"`).\n   * Used to expand `~` in user-provided `sandboxPath` mount configs.\n   * Set to `undefined` for providers that do not have a fixed home directory.\n   */\n  readonly sandboxHomedir?: string;\n  /** Create a sandbox handle from the given options. */\n  readonly create: (\n    options: BindMountCreateOptions,\n  ) => Promise<BindMountSandboxHandle>;\n}\n\n/** Handle to a running isolated sandbox (extends bind-mount with file transfer). */\nexport interface IsolatedSandboxHandle {\n  /** Absolute path to the worktree inside the sandbox. */\n  readonly worktreePath: string;\n  /**\n   * Execute a command in the sandbox.\n   *\n   * Implementations MUST support line-by-line streaming via `onLine`. This is\n   * how Shipyard delivers live feedback to the user and enforces idle timeouts —\n   * without a streaming implementation, neither will work. A buffered/batch\n   * implementation that only calls `onLine` after the process exits does NOT\n   * satisfy this contract.\n   *\n   * When `stdin` is set, the implementation pipes the string to the child\n   * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.\n   */\n  exec(\n    command: string,\n    options?: {\n      onLine?: (line: string) => void;\n      cwd?: string;\n      sudo?: boolean;\n      stdin?: string;\n      /** Abort the command when the caller's operation is cancelled. */\n      signal?: AbortSignal;\n      /** Reject/terminate the command after this many combined output bytes. */\n      maxOutputBytes?: number;\n    },\n  ): Promise<ExecResult>;\n  /**\n   * Launch an interactive process inside the sandbox.\n   * Optional — providers that support interactive sessions implement this.\n   * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and\n   * allocates a pseudo-terminal accordingly.\n   * Implementations MUST terminate the underlying process when `signal` aborts.\n   */\n  interactiveExec?(\n    args: string[],\n    options: InteractiveExecOptions,\n  ): Promise<{ exitCode: number }>;\n  /** Copy a file or directory from the host into the sandbox. */\n  copyIn(hostPath: string, sandboxPath: string): Promise<void>;\n  /** Copy a single file from the sandbox to the host. */\n  copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;\n  /** Tear down the sandbox. */\n  close(): Promise<void>;\n}\n\n/** Options passed to an isolated provider's `create` function. */\nexport interface IsolatedCreateOptions {\n  /** Original host repository path, used only for image naming; never mounted. */\n  readonly hostRepoPath?: string;\n  /** Environment variables to inject into the sandbox. */\n  readonly env: Record<string, string>;\n}\n\n/** Configuration for createIsolatedSandboxProvider. */\nexport interface IsolatedSandboxProviderConfig {\n  /** Human-readable name for this provider (e.g. \"vercel\"). */\n  readonly name: string;\n  /** Environment variables injected by this provider. Merged at launch time. */\n  readonly env?: Record<string, string>;\n  /** Create an isolated sandbox handle from the given options. */\n  readonly create: (\n    options: IsolatedCreateOptions,\n  ) => Promise<IsolatedSandboxHandle>;\n}\n\n/** A bind-mount sandbox provider. */\nexport interface BindMountSandboxProvider {\n  /** @internal Discriminator for internal dispatch. */\n  readonly tag: \"bind-mount\";\n  /** Human-readable provider name. */\n  readonly name: string;\n  /** Environment variables injected by this provider. */\n  readonly env: Record<string, string>;\n  /**\n   * Absolute path to the home directory inside the sandbox (e.g. `\"/home/agent\"`).\n   * `undefined` when the provider does not declare a sandbox home directory.\n   */\n  readonly sandboxHomedir: string | undefined;\n  /** @internal Create a sandbox handle. */\n  readonly create: (\n    options: BindMountCreateOptions,\n  ) => Promise<BindMountSandboxHandle>;\n}\n\n/** An isolated sandbox provider. */\nexport interface IsolatedSandboxProvider {\n  /** @internal Discriminator for internal dispatch. */\n  readonly tag: \"isolated\";\n  /** Human-readable provider name. */\n  readonly name: string;\n  /** Environment variables injected by this provider. */\n  readonly env: Record<string, string>;\n  /** @internal Create an isolated sandbox handle. */\n  readonly create: (\n    options: IsolatedCreateOptions,\n  ) => Promise<IsolatedSandboxHandle>;\n}\n\n/** Handle to a no-sandbox session — runs commands directly on the host. */\nexport interface NoSandboxHandle {\n  /** Absolute path to the worktree on the host. */\n  readonly worktreePath: string;\n  /**\n   * Execute a command on the host.\n   *\n   * Implementations MUST support line-by-line streaming via `onLine`. This is\n   * how Shipyard delivers live feedback to the user and enforces idle timeouts —\n   * without a streaming implementation, neither will work.\n   *\n   * When `stdin` is set, the implementation pipes the string to the child\n   * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.\n   */\n  exec(\n    command: string,\n    options?: {\n      onLine?: (line: string) => void;\n      cwd?: string;\n      sudo?: boolean;\n      stdin?: string;\n      /** Abort the command when the caller's operation is cancelled. */\n      signal?: AbortSignal;\n      /** Reject/terminate the command after this many combined output bytes. */\n      maxOutputBytes?: number;\n    },\n  ): Promise<ExecResult>;\n  /**\n   * Launch an interactive process on the host with inherited stdio.\n   */\n  interactiveExec(\n    args: string[],\n    options: InteractiveExecOptions,\n  ): Promise<{ exitCode: number }>;\n  /** No-op — no container to tear down. */\n  close(): Promise<void>;\n}\n\n/** A no-sandbox provider — runs the agent directly on the host with no container isolation. */\nexport interface NoSandboxProvider {\n  /** @internal Discriminator for internal dispatch. */\n  readonly tag: \"none\";\n  /** Human-readable provider name. */\n  readonly name: string;\n  /** Environment variables injected by this provider. */\n  readonly env: Record<string, string>;\n  /** @internal Create a no-sandbox handle. */\n  readonly create: (options: {\n    readonly worktreePath: string;\n    readonly env: Record<string, string>;\n  }) => Promise<NoSandboxHandle>;\n}\n\n// ---------- Branch strategy types ----------\n\n/** Head strategy: agent writes directly to host working directory. Bind-mount only. */\nexport interface HeadBranchStrategy {\n  readonly type: \"head\";\n}\n\n/** Merge-to-head strategy: temp branch, merge back to HEAD, delete temp branch. */\nexport interface MergeToHeadBranchStrategy {\n  readonly type: \"merge-to-head\";\n}\n\n/** Branch strategy: commits land on an explicit named branch. */\nexport interface NamedBranchStrategy {\n  readonly type: \"branch\";\n  readonly branch: string;\n  /**\n   * Git ref to use as the starting point when creating a new branch.\n   * Only used when the branch doesn't already exist — ignored otherwise.\n   * Callers are responsible for ensuring the ref is current (e.g. `git fetch`).\n   * Defaults to `HEAD` when omitted.\n   */\n  readonly baseBranch?: string;\n}\n\n/** Branch strategy for bind-mount providers (all three variants). */\nexport type BindMountBranchStrategy =\n  | HeadBranchStrategy\n  | MergeToHeadBranchStrategy\n  | NamedBranchStrategy;\n\n/** Branch strategy for isolated providers (no head — can't write to host). */\nexport type IsolatedBranchStrategy =\n  | MergeToHeadBranchStrategy\n  | NamedBranchStrategy;\n\n/** Branch strategy for no-sandbox providers (all three — same as bind-mount). */\nexport type NoSandboxBranchStrategy =\n  | HeadBranchStrategy\n  | MergeToHeadBranchStrategy\n  | NamedBranchStrategy;\n\n/** Union of all branch strategy variants. */\nexport type BranchStrategy =\n  | BindMountBranchStrategy\n  | IsolatedBranchStrategy\n  | NoSandboxBranchStrategy;\n\n/**\n * A sandbox provider — the pluggable unit that `run()`, `interactive()`, and\n * `createSandbox()` accept. Tagged for internal dispatch: \"bind-mount\",\n * \"isolated\", or \"none\". When `NoSandboxProvider` is used, the agent runs\n * directly on the host with no container isolation — opt in at your own risk.\n */\nexport type SandboxProvider =\n  | BindMountSandboxProvider\n  | IsolatedSandboxProvider\n  | NoSandboxProvider;\n\n/** @deprecated Use `SandboxProvider` — it now includes `NoSandboxProvider`. */\nexport type AnySandboxProvider = SandboxProvider;\n\n/**\n * Create a bind-mount sandbox provider from a config object.\n * The returned provider can be passed to `run()` or `createSandbox()`.\n */\nexport const createBindMountSandboxProvider = (\n  config: BindMountSandboxProviderConfig,\n): BindMountSandboxProvider => ({\n  tag: \"bind-mount\",\n  name: config.name,\n  env: config.env ?? {},\n  sandboxHomedir: config.sandboxHomedir,\n  create: config.create,\n});\n\n/**\n * Create an isolated sandbox provider from a config object.\n * The returned provider can be passed to `run()` or `createSandbox()`.\n */\nexport const createIsolatedSandboxProvider = (\n  config: IsolatedSandboxProviderConfig,\n): IsolatedSandboxProvider => ({\n  tag: \"isolated\",\n  name: config.name,\n  env: config.env ?? {},\n  create: config.create,\n});\n\n/** @internal Adapt isolated file transfer to the existing agent-session boundary. */\nexport const toSessionTransferHandle = (\n  handle:\n    | BindMountSandboxHandle\n    | IsolatedSandboxHandle\n    | NoSandboxHandle\n    | undefined,\n): BindMountSandboxHandle | undefined => {\n  if (handle === undefined || !(\"copyFileOut\" in handle)) return undefined;\n  if (\"copyFileIn\" in handle) return handle;\n  return {\n    worktreePath: handle.worktreePath,\n    exec: (command, options) => handle.exec(command, options),\n    interactiveExec: handle.interactiveExec?.bind(handle),\n    copyFileIn: (source, destination) => handle.copyIn(source, destination),\n    copyFileOut: (source, destination) =>\n      handle.copyFileOut(source, destination),\n    close: () => handle.close(),\n  };\n};\n","/** Quote a value for use as one POSIX-shell argument. */\nexport const shellQuote = (value: string): string => {\n  if (value.includes(\"\\0\")) {\n    throw new Error(\"Cannot quote a string containing a NUL byte\");\n  }\n  return `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n};\n"]}

package/dist/chunk-SOJTAJTF.js

@@ -0,0 +1,78 @@
+import { MAX_TAIL_CHARS, collectProcessOutput } from './chunk-ACD46ZM4.js';
+import { spawn } from 'child_process';
+
+var noSandbox = (options) => ({
+  tag: "none",
+  name: "no-sandbox",
+  env: options?.env ?? {},
+  create: async (createOptions) => {
+    const worktreePath = createOptions.worktreePath;
+    const processEnv = { ...process.env, ...createOptions.env };
+    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
+    const handle = {
+      worktreePath,
+      exec: (command, opts) => {
+        const cwd = opts?.cwd ?? worktreePath;
+        const isWindows = process.platform === "win32";
+        const shellCmd = isWindows ? "cmd.exe" : "sh";
+        const shellArgs = isWindows ? ["/d", "/s", "/c", command] : ["-c", command];
+        return new Promise((resolve, reject) => {
+          const proc = spawn(shellCmd, shellArgs, {
+            cwd,
+            env: processEnv,
+            signal: opts?.signal,
+            stdio: [
+              opts?.stdin !== void 0 ? "pipe" : "ignore",
+              "pipe",
+              "pipe"
+            ],
+            windowsVerbatimArguments: isWindows
+          });
+          if (opts?.stdin !== void 0) {
+            proc.stdin.write(opts.stdin);
+            proc.stdin.end();
+          }
+          proc.on("error", (error) => {
+            reject(new Error(`exec failed: ${error.message}`));
+          });
+          collectProcessOutput(
+            {
+              stdout: proc.stdout,
+              stderr: proc.stderr,
+              kill: () => proc.kill("SIGKILL"),
+              onClose: (listener) => proc.on("close", listener)
+            },
+            { ...opts, maxOutputTailChars },
+            resolve,
+            reject
+          );
+        });
+      },
+      interactiveExec: (args, opts) => {
+        return new Promise((resolve, reject) => {
+          const [cmd, ...rest] = args;
+          const proc = spawn(cmd, rest, {
+            cwd: opts.cwd ?? worktreePath,
+            env: processEnv,
+            stdio: [opts.stdin, opts.stdout, opts.stderr],
+            shell: process.platform === "win32",
+            signal: opts.signal
+          });
+          proc.on("error", (error) => {
+            reject(new Error(`exec failed: ${error.message}`));
+          });
+          proc.on("close", (code) => {
+            resolve({ exitCode: code ?? 0 });
+          });
+        });
+      },
+      close: async () => {
+      }
+    };
+    return handle;
+  }
+});
+
+export { noSandbox };
+//# sourceMappingURL=chunk-SOJTAJTF.js.map
+//# sourceMappingURL=chunk-SOJTAJTF.js.map

package/dist/chunk-SOJTAJTF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandboxes/no-sandbox.ts"],"names":[],"mappings":";;;AA2CO,IAAM,SAAA,GAAY,CAAC,OAAA,MAAmD;AAAA,EAC3E,GAAA,EAAK,MAAA;AAAA,EACL,IAAA,EAAM,YAAA;AAAA,EACN,GAAA,EAAK,OAAA,EAAS,GAAA,IAAO,EAAC;AAAA,EACtB,MAAA,EAAQ,OAAO,aAAA,KAA4C;AACzD,IAAA,MAAM,eAAe,aAAA,CAAc,YAAA;AACnC,IAAA,MAAM,aAAa,EAAE,GAAG,QAAQ,GAAA,EAAK,GAAG,cAAc,GAAA,EAAI;AAC1D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,MAAA,GAA0B;AAAA,MAC9B,YAAA;AAAA,MAEA,IAAA,EAAM,CACJ,OAAA,EACA,IAAA,KAQwB;AAExB,QAAA,MAAM,GAAA,GAAM,MAAM,GAAA,IAAO,YAAA;AACzB,QAAA,MAAM,SAAA,GAAY,QAAQ,QAAA,KAAa,OAAA;AAKvC,QAAA,MAAM,QAAA,GAAW,YAAY,SAAA,GAAY,IAAA;AACzC,QAAA,MAAM,SAAA,GAAY,SAAA,GACd,CAAC,IAAA,EAAM,IAAA,EAAM,MAAM,OAAO,CAAA,GAC1B,CAAC,IAAA,EAAM,OAAO,CAAA;AAElB,QAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,UAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,SAAA,EAAW;AAAA,YACtC,GAAA;AAAA,YACA,GAAA,EAAK,UAAA;AAAA,YACL,QAAQ,IAAA,EAAM,MAAA;AAAA,YACd,KAAA,EAAO;AAAA,cACL,IAAA,EAAM,KAAA,KAAU,MAAA,GAAY,MAAA,GAAS,QAAA;AAAA,cACrC,MAAA;AAAA,cACA;AAAA,aACF;AAAA,YACA,wBAAA,EAA0B;AAAA,WAC3B,CAAA;AAED,UAAA,IAAI,IAAA,EAAM,UAAU,MAAA,EAAW;AAC7B,YAAA,IAAA,CAAK,KAAA,CAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAC5B,YAAA,IAAA,CAAK,MAAO,GAAA,EAAI;AAAA,UAClB;AAEA,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1B,YAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,UACnD,CAAC,CAAA;AAED,UAAA,oBAAA;AAAA,YACE;AAAA,cACE,QAAQ,IAAA,CAAK,MAAA;AAAA,cACb,QAAQ,IAAA,CAAK,MAAA;AAAA,cACb,IAAA,EAAM,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAAA,cAC/B,SAAS,CAAC,QAAA,KAAa,IAAA,CAAK,EAAA,CAAG,SAAS,QAAQ;AAAA,aAClD;AAAA,YACA,EAAE,GAAG,IAAA,EAAM,kBAAA,EAAmB;AAAA,YAC9B,OAAA;AAAA,YACA;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MAEA,eAAA,EAAiB,CACf,IAAA,EACA,IAAA,KACkC;AAClC,QAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,UAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,IAAA;AAIvB,UAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,EAAM,IAAA,EAAM;AAAA,YAC7B,GAAA,EAAK,KAAK,GAAA,IAAO,YAAA;AAAA,YACjB,GAAA,EAAK,UAAA;AAAA,YACL,OAAO,CAAC,IAAA,CAAK,OAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAM,CAAA;AAAA,YAC5C,KAAA,EAAO,QAAQ,QAAA,KAAa,OAAA;AAAA,YAC5B,QAAQ,IAAA,CAAK;AAAA,WACd,CAAA;AAED,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACjC,YAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,UACnD,CAAC,CAAA;AAED,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACxC,YAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,CAAA,EAAG,CAAA;AAAA,UACjC,CAAC,CAAA;AAAA,QACH,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MAEA,OAAO,YAA2B;AAAA,MAElC;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAA","file":"chunk-SOJTAJTF.js","sourcesContent":["/**\n * No-sandbox provider — runs the agent directly on the host with no container isolation.\n *\n * Usage:\n *   import { noSandbox } from \"@snappedly-tools/shipyard/sandboxes/no-sandbox\";\n *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: noSandbox(), prompt: \"...\" });\n *\n * Accepted by `run()`, `interactive()`, and `createSandbox()`. It skips\n * container isolation entirely and does not pass\n * `--dangerously-skip-permissions` to the agent.\n */\n\nimport { spawn, type StdioOptions } from \"node:child_process\";\nimport type {\n  NoSandboxProvider,\n  NoSandboxHandle,\n  ExecResult,\n  InteractiveExecOptions,\n} from \"../SandboxProvider.js\";\nimport { MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { collectProcessOutput } from \"../processOutput.js\";\n\nexport interface NoSandboxOptions {\n  /** Environment variables injected by this provider. Merged at launch time. */\n  readonly env?: Record<string, string>;\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a no-sandbox provider.\n *\n * The returned provider runs the agent directly on the host. All three\n * branch strategies are supported (head, merge-to-head, branch),\n * defaulting to head.\n */\nexport const noSandbox = (options?: NoSandboxOptions): NoSandboxProvider => ({\n  tag: \"none\",\n  name: \"no-sandbox\",\n  env: options?.env ?? {},\n  create: async (createOptions): Promise<NoSandboxHandle> => {\n    const worktreePath = createOptions.worktreePath;\n    const processEnv = { ...process.env, ...createOptions.env };\n    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n\n    const handle: NoSandboxHandle = {\n      worktreePath,\n\n      exec: (\n        command: string,\n        opts?: {\n          onLine?: (line: string) => void;\n          cwd?: string;\n          sudo?: boolean;\n          stdin?: string;\n          signal?: AbortSignal;\n          maxOutputBytes?: number;\n        },\n      ): Promise<ExecResult> => {\n        // sudo is a no-op for no-sandbox — the user is already on the host\n        const cwd = opts?.cwd ?? worktreePath;\n        const isWindows = process.platform === \"win32\";\n        // PowerShell and cmd.exe don't ship `sh`, so on Windows route the\n        // command string through cmd.exe instead. `/d` skips AutoRun, `/s`\n        // preserves the quoted command verbatim, `/c` runs it and exits.\n        // `windowsVerbatimArguments` keeps Node from re-quoting our args.\n        const shellCmd = isWindows ? \"cmd.exe\" : \"sh\";\n        const shellArgs = isWindows\n          ? [\"/d\", \"/s\", \"/c\", command]\n          : [\"-c\", command];\n\n        return new Promise((resolve, reject) => {\n          const proc = spawn(shellCmd, shellArgs, {\n            cwd,\n            env: processEnv,\n            signal: opts?.signal,\n            stdio: [\n              opts?.stdin !== undefined ? \"pipe\" : \"ignore\",\n              \"pipe\",\n              \"pipe\",\n            ],\n            windowsVerbatimArguments: isWindows,\n          });\n\n          if (opts?.stdin !== undefined) {\n            proc.stdin!.write(opts.stdin);\n            proc.stdin!.end();\n          }\n\n          proc.on(\"error\", (error) => {\n            reject(new Error(`exec failed: ${error.message}`));\n          });\n\n          collectProcessOutput(\n            {\n              stdout: proc.stdout!,\n              stderr: proc.stderr!,\n              kill: () => proc.kill(\"SIGKILL\"),\n              onClose: (listener) => proc.on(\"close\", listener),\n            },\n            { ...opts, maxOutputTailChars },\n            resolve,\n            reject,\n          );\n        });\n      },\n\n      interactiveExec: (\n        args: string[],\n        opts: InteractiveExecOptions,\n      ): Promise<{ exitCode: number }> => {\n        return new Promise((resolve, reject) => {\n          const [cmd, ...rest] = args;\n          // Agent CLIs on Windows are typically installed as `.cmd`/`.ps1`\n          // npm wrappers; bare `spawn(\"claude\", …)` only resolves `.exe`\n          // without `shell: true`, so let cmd.exe handle PATHEXT lookup.\n          const proc = spawn(cmd!, rest, {\n            cwd: opts.cwd ?? worktreePath,\n            env: processEnv,\n            stdio: [opts.stdin, opts.stdout, opts.stderr] as StdioOptions,\n            shell: process.platform === \"win32\",\n            signal: opts.signal,\n          });\n\n          proc.on(\"error\", (error: Error) => {\n            reject(new Error(`exec failed: ${error.message}`));\n          });\n\n          proc.on(\"close\", (code: number | null) => {\n            resolve({ exitCode: code ?? 0 });\n          });\n        });\n      },\n\n      close: async (): Promise<void> => {\n        // No-op — no container to tear down\n      },\n    };\n\n    return handle;\n  },\n});\n"]}

package/dist/{chunk-44I2BL6E.js → chunk-WAXEMZUV.js}

@@ -1,12 +1,12 @@
-import { RUNTIME_NAMESPACE, assertProtectedDirectoryIdentities, ACTIVATION_LABEL, CONFIG_DIR, RUNNER_DIR, createIsolatedSandboxProvider, registerShutdown, DockerError, repositoryRunnerEnvironment, SANDBOX_REPO_DIR } from './chunk-L6PX5QTU.js';
+import { assertProtectedDirectoryIdentities, ACTIVATION_LABEL, CONFIG_DIR, RUNNER_DIR, RUNNER_SANDBOX_MASK_DIR, resolveUserMounts, assertIsolatedWorkspaceMounts, processFileMountParents, defaultImageName, registerShutdown, DockerError, repositoryRunnerEnvironment, formatVolumeMount } from './chunk-FDYOTN55.js';
+import { createIsolatedSandboxProvider } from './chunk-KMGNFXKN.js';
+import { MAX_TAIL_CHARS, collectProcessOutput } from './chunk-ACD46ZM4.js';
 import { execFile, execFileSync, spawn } from 'child_process';
-import { resolve, join, posix, dirname, relative, isAbsolute } from 'path';
+import { resolve, join, posix } from 'path';
 import { promisify } from 'util';
 import { randomUUID } from 'crypto';
 import { Effect } from 'effect';
-import { constants, existsSync, statSync } from 'fs';
-import { homedir } from 'os';
-import { createInterface } from 'readline';
+import { constants } from 'fs';
 import { rm, lstat, realpath, mkdir, readFile, access } from 'fs/promises';
 
 var exec = promisify(execFile);
@@ -38,79 +38,6 @@ var copyIntoContainer = async (engine, container, owner, hostPath, sandboxPath)
     );
   }
 };
-var defaultImageName = (repoDir) => {
-  const dirName = repoDir.replace(/[\\/]+$/, "").split(/[\\/]/).pop() ?? "local";
-  const sanitized = dirName.toLowerCase().replace(/[^a-z0-9_.-]/g, "-");
-  return `${RUNTIME_NAMESPACE}:${sanitized || "local"}`;
-};
-var expandTilde = (p, homeDirPath) => {
-  const home = homeDirPath ?? homedir();
-  if (p === "~") return home;
-  if (p.startsWith("~/") || p.startsWith("~\\")) return home + "/" + p.slice(2);
-  return p;
-};
-var resolveHostPath = (hostPath) => {
-  const expanded = expandTilde(hostPath);
-  return isAbsolute(expanded) ? expanded : resolve(process.cwd(), expanded);
-};
-var resolveSandboxPath = (sandboxPath, sandboxHomedir) => {
-  const hasTilde = sandboxPath === "~" || sandboxPath.startsWith("~/") || sandboxPath.startsWith("~\\");
-  const expanded = hasTilde ? expandTilde(sandboxPath, sandboxHomedir) : sandboxPath;
-  return isAbsolute(expanded) ? resolve(expanded) : resolve(SANDBOX_REPO_DIR, expanded);
-};
-var resolveUserMounts = (mounts, sandboxHomedir) => mounts.map((m) => {
-  const resolvedHostPath = resolveHostPath(m.hostPath);
-  if (!existsSync(resolvedHostPath)) {
-    throw new Error(
-      `Mount hostPath does not exist: ${m.hostPath}` + (m.hostPath !== resolvedHostPath ? ` (resolved to ${resolvedHostPath})` : "")
-    );
-  }
-  return {
-    hostPath: resolvedHostPath,
-    sandboxPath: resolveSandboxPath(m.sandboxPath, sandboxHomedir),
-    ...m.readonly ? { readonly: true } : {}
-  };
-});
-var formatVolumeMount = (mount, selinuxLabel) => {
-  const base = `${mount.hostPath}:${mount.sandboxPath}`;
-  const options = [mount.readonly ? "ro" : void 0, selinuxLabel || void 0].filter((option) => option !== void 0).join(",");
-  return options ? `${base}:${options}` : base;
-};
-var processFileMountParents = (mounts, sandboxHomedir, statFn = statSync) => {
-  const parentDirs = /* @__PURE__ */ new Set();
-  for (const mount of mounts) {
-    let isFile;
-    try {
-      isFile = statFn(mount.hostPath).isFile();
-    } catch {
-      continue;
-    }
-    if (!isFile) continue;
-    const parentDir = resolve(dirname(mount.sandboxPath));
-    const homeDir = resolve(sandboxHomedir);
-    if (parentDir === homeDir) continue;
-    const fromHome = relative(homeDir, parentDir);
-    if (fromHome === ".." || fromHome.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(fromHome)) {
-      throw new Error(
-        `Cannot mount file to '${mount.sandboxPath}': parent directory '${parentDir}' is outside the sandbox home directory ('${homeDir}'). Mount the parent directory instead, or rebuild the image with '${parentDir}' pre-created.`
-      );
-    }
-    parentDirs.add(parentDir);
-  }
-  return [...parentDirs];
-};
-var assertIsolatedWorkspaceMounts = (mounts) => {
-  for (const mount of mounts) {
-    const path = posix.resolve(mount.sandboxPath);
-    if (path === "/" || path === SANDBOX_REPO_DIR || path.startsWith(`${SANDBOX_REPO_DIR}/`) || SANDBOX_REPO_DIR.startsWith(`${path}/`)) {
-      throw new Error(
-        `Mount overlaps the isolated workspace: ${mount.sandboxPath}. Mount outside ${SANDBOX_REPO_DIR} or use copyToWorktree.`
-      );
-    }
-  }
-};
-
-// src/DockerLifecycle.ts
 var dockerExec = (args) => Effect.async((resume) => {
   execFile(
     "docker",
@@ -221,137 +148,6 @@ var removeContainer = (containerName) => Effect.gen(function* () {
 var removeImage = (imageName) => Effect.gen(function* () {
   yield* dockerExec(["rmi", imageName]);
 });
-
-// src/boundedTail.ts
-var MAX_TAIL_CHARS = 64 * 1024;
-var OutputByteCounter = class {
-  constructor(maxBytes) {
-    this.maxBytes = maxBytes;
-  }
-  totalBytes = 0;
-  limitExceeded = false;
-  add(chunk) {
-    this.totalBytes += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.byteLength;
-    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;
-  }
-  get exceeded() {
-    return this.limitExceeded;
-  }
-};
-var BoundedTail = class {
-  items = [];
-  totalChars = 0;
-  maxChars;
-  separator;
-  /**
-   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.
-   * @param separator String placed between items by {@link toString}. Must match
-   *   how the caller would otherwise have joined the accumulated chunks (e.g.
-   *   `"\n"` for line streams, `""` for raw chunk streams).
-   */
-  constructor(maxChars = MAX_TAIL_CHARS, separator = "") {
-    this.maxChars = maxChars;
-    this.separator = separator;
-  }
-  /** Append one item to the tail, evicting oldest items to stay within budget. */
-  push(item) {
-    const bounded = item.length > this.maxChars ? item.slice(item.length - this.maxChars) : item;
-    this.totalChars += bounded.length + (this.items.length > 0 ? this.separator.length : 0);
-    this.items.push(bounded);
-    while (this.totalChars > this.maxChars && this.items.length > 1) {
-      const dropped = this.items.shift();
-      this.totalChars -= dropped.length + this.separator.length;
-    }
-  }
-  /** Join the retained tail into a single string (length ≤ `maxChars`). */
-  toString() {
-    return this.items.join(this.separator);
-  }
-};
-var StreamedProcessOutput = class {
-  maxOutputBytes;
-  byteCounter;
-  stdoutTail;
-  stderrTail;
-  onLine;
-  outputLimitError;
-  constructor(options) {
-    this.maxOutputBytes = options.maxOutputBytes;
-    this.byteCounter = options.maxOutputBytes === void 0 ? void 0 : new OutputByteCounter(options.maxOutputBytes);
-    const tailChars = options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;
-    this.stdoutTail = new BoundedTail(tailChars, "\n");
-    this.stderrTail = new BoundedTail(tailChars, "");
-    this.onLine = options.onLine ?? (() => {
-    });
-  }
-  checkLimit(chunk) {
-    if (this.byteCounter === void 0 || this.outputLimitError !== void 0) {
-      return this.outputLimitError;
-    }
-    this.byteCounter.add(chunk);
-    if (this.byteCounter.exceeded) {
-      this.outputLimitError = new Error(
-        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`
-      );
-    }
-    return this.outputLimitError;
-  }
-  addStdoutLine(line) {
-    this.stdoutTail.push(line);
-    this.onLine(line);
-  }
-  addStderr(chunk) {
-    this.stderrTail.push(chunk);
-  }
-  get error() {
-    return this.outputLimitError;
-  }
-  result(exitCode) {
-    return {
-      stdout: this.stdoutTail.toString(),
-      stderr: this.stderrTail.toString(),
-      exitCode
-    };
-  }
-};
-var collectProcessOutput = (process2, options, resolve3, reject) => {
-  if (options.onLine || options.maxOutputBytes !== void 0) {
-    const output = new StreamedProcessOutput(options);
-    const checkLimit = (chunk) => {
-      if (output.checkLimit(chunk) !== void 0) process2.kill();
-    };
-    process2.stdout.on("data", checkLimit);
-    process2.stderr.on("data", checkLimit);
-    const lines = createInterface({ input: process2.stdout });
-    lines.on("line", (line) => output.addStdoutLine(line));
-    process2.stderr.on("data", (chunk) => {
-      output.addStderr(chunk.toString());
-    });
-    process2.onClose((code) => {
-      if (output.error !== void 0) {
-        reject(output.error);
-        return;
-      }
-      resolve3(output.result(code ?? 0));
-    });
-    return;
-  }
-  const stdoutChunks = [];
-  const stderrChunks = [];
-  process2.stdout.on("data", (chunk) => {
-    stdoutChunks.push(chunk.toString());
-  });
-  process2.stderr.on("data", (chunk) => {
-    stderrChunks.push(chunk.toString());
-  });
-  process2.onClose((code) => {
-    resolve3({
-      stdout: stdoutChunks.join(""),
-      stderr: stderrChunks.join(""),
-      exitCode: code ?? 0
-    });
-  });
-};
 var execFileAsync = promisify(execFile);
 var RUNNER_INSTALL_METADATA = ".shipyard-install.json";
 var RUNNER_CONTROLLER_LOCK = ".shipyard-controller.lock";
@@ -420,7 +216,7 @@ var defaultAdapters = {
     }
   },
   signalProcess: (pid, signal) => process.kill(pid, signal),
-  pause: (milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds))
+  pause: (milliseconds) => new Promise((resolve2) => setTimeout(resolve2, milliseconds))
 };
 var lockOwnsProcess = async (lock, adapters) => lock !== void 0 && Number.isInteger(lock.pid) && typeof lock.processStartedAt === "string" && lock.processStartedAt.length > 0 && adapters.isProcessRunning(lock.pid) && await adapters.processIdentity(lock.pid) === lock.processStartedAt;
 var lifecycleFailure = (purpose, error) => error instanceof RunnerLifecycleError ? error : new RunnerLifecycleError(
@@ -478,8 +274,12 @@ var listRemoteRunners = async (repository, repoDir, environment, adapters) => {
   return parseRemoteRunners(response.stdout);
 };
 var validateExistingRepositoryRunner = async (options, adapters = defaultAdapters) => {
+  if (!await adapters.exists(options.maskDir)) {
+    await adapters.makeDirectory(options.maskDir);
+  }
   await assertProtectedDirectoryIdentities(
     options.runnerDir,
+    options.maskDir,
     adapters.inspectDirectory
   ).catch((error) => {
     throw lifecycleFailure("Validating protected runner directories", error);
@@ -579,8 +379,12 @@ var recoverRepositoryRunner = async (options, adapters = defaultAdapters) => {
   if (lock) await adapters.remove(lockPath);
   const workDir = join(options.runnerDir, RUNNER_WORK_DIR);
   if (await adapters.exists(workDir)) await adapters.remove(workDir);
+  if (await adapters.exists(options.maskDir))
+    await adapters.remove(options.maskDir);
+  await adapters.makeDirectory(options.maskDir);
   await assertProtectedDirectoryIdentities(
     options.runnerDir,
+    options.maskDir,
     adapters.inspectDirectory
   ).catch((error) => {
     throw lifecycleFailure("Validating protected runner directories", error);
@@ -732,6 +536,7 @@ var unregisterRepositoryRunner = async (metadata, repoDir, runnerDir, environmen
 var removeRepositoryRunner = async (options, adapters = defaultAdapters) => {
   const configDir = join(options.repoDir, CONFIG_DIR);
   const runnerDir = join(configDir, RUNNER_DIR);
+  const maskDir = join(configDir, RUNNER_SANDBOX_MASK_DIR);
   if (!await adapters.exists(runnerDir)) {
     throw new RunnerLifecycleError(
       `No repository runner is installed at ${runnerDir}.`
@@ -743,6 +548,7 @@ var removeRepositoryRunner = async (options, adapters = defaultAdapters) => {
   } catch (error) {
     if (!options.force) throw error;
     await adapters.remove(runnerDir);
+    if (await adapters.exists(maskDir)) await adapters.remove(maskDir);
     return {
       removed: true,
       forced: true,
@@ -772,12 +578,14 @@ var removeRepositoryRunner = async (options, adapters = defaultAdapters) => {
       );
     }
     await adapters.remove(runnerDir);
+    if (await adapters.exists(maskDir)) await adapters.remove(maskDir);
     return {
       removed: true,
       forced: true,
       manualCleanup: `Remove runner ${metadata.name} from ${metadata.repository} in GitHub Settings > Actions > Runners.`
     };
   }
+  if (await adapters.exists(maskDir)) await adapters.remove(maskDir);
   await adapters.remove(runnerDir);
   return { removed: true, forced: false };
 };
@@ -834,7 +642,7 @@ var docker = (options) => {
         )
       );
       for (const dir of parentDirsToCreate) {
-        await new Promise((resolve3, reject) => {
+        await new Promise((resolve2, reject) => {
           execFile(
             "docker",
             [
@@ -857,7 +665,7 @@ var docker = (options) => {
                   )
                 );
               } else {
-                resolve3();
+                resolve2();
               }
             }
           );
@@ -880,7 +688,7 @@ var docker = (options) => {
           if (opts?.stdin !== void 0) args.push("-i");
           if (opts?.cwd) args.push("-w", opts.cwd);
           args.push(containerName, "sh", "-c", effectiveCommand);
-          return new Promise((resolve3, reject) => {
+          return new Promise((resolve2, reject) => {
             const proc = spawn("docker", args, {
               signal: opts?.signal,
               stdio: [
@@ -904,13 +712,13 @@ var docker = (options) => {
                 onClose: (listener) => proc.on("close", listener)
               },
               { ...opts, maxOutputTailChars },
-              resolve3,
+              resolve2,
               reject
             );
           });
         },
         interactiveExec: (args, opts) => {
-          return new Promise((resolve3, reject) => {
+          return new Promise((resolve2, reject) => {
             opts.signal?.throwIfAborted();
             const executionId = randomUUID();
             const pidFile = `/tmp/shipyard-interactive-${executionId}.pid`;
@@ -942,7 +750,7 @@ var docker = (options) => {
               settled = true;
               opts.signal?.removeEventListener("abort", onAbort);
               if ("error" in result) reject(result.error);
-              else resolve3(result);
+              else resolve2(result);
             };
             const onAbort = () => {
               if (cancelling || settled) return;
@@ -1005,7 +813,7 @@ var docker = (options) => {
           hostPath,
           sandboxPath
         ),
-        copyFileOut: (sandboxPath, hostPath) => new Promise((resolve3, reject) => {
+        copyFileOut: (sandboxPath, hostPath) => new Promise((resolve2, reject) => {
           execFile(
             "docker",
             ["cp", `${containerName}:${sandboxPath}`, hostPath],
@@ -1013,7 +821,7 @@ var docker = (options) => {
               if (error) {
                 reject(new Error(`docker cp (out) failed: ${error.message}`));
               } else {
-                resolve3();
+                resolve2();
               }
             }
           );
@@ -1027,7 +835,7 @@ var docker = (options) => {
     }
   });
 };
-var checkImageUid = (imageName, expectedUid) => new Promise((resolve3, reject) => {
+var checkImageUid = (imageName, expectedUid) => new Promise((resolve2, reject) => {
   execFile(
     "docker",
     ["image", "inspect", imageName, "--format", "{{.Config.User}}"],
@@ -1042,13 +850,13 @@ var checkImageUid = (imageName, expectedUid) => new Promise((resolve3, reject) =
       }
       const imageUser = (stdout ?? "").toString().trim();
       if (!imageUser) {
-        resolve3();
+        resolve2();
         return;
       }
       const uidPart = imageUser.split(":")[0];
       const imageUid = parseInt(uidPart, 10);
       if (isNaN(imageUid)) {
-        resolve3();
+        resolve2();
         return;
       }
       if (imageUid !== expectedUid) {
@@ -1058,12 +866,12 @@ var checkImageUid = (imageName, expectedUid) => new Promise((resolve3, reject) =
           )
         );
       } else {
-        resolve3();
+        resolve2();
       }
     }
   );
 });
 
-export { REPOSITORY_RUNNER_OWNER_ENV, RUNNER_CONTROLLER_LOCK, RUNNER_INSTALL_METADATA, RUNNER_WORK_DIR, RunnerLifecycleError, buildImage, defaultImageName, docker, recoverRepositoryRunner, removeImage, removeOwnedRepositoryRunnerContainers, removeRepositoryRunner, validateExistingRepositoryRunner };
-//# sourceMappingURL=chunk-44I2BL6E.js.map
-//# sourceMappingURL=chunk-44I2BL6E.js.map
+export { REPOSITORY_RUNNER_OWNER_ENV, RUNNER_CONTROLLER_LOCK, RUNNER_INSTALL_METADATA, RUNNER_WORK_DIR, RunnerLifecycleError, buildImage, docker, recoverRepositoryRunner, removeImage, removeOwnedRepositoryRunnerContainers, removeRepositoryRunner, validateExistingRepositoryRunner };
+//# sourceMappingURL=chunk-WAXEMZUV.js.map
+//# sourceMappingURL=chunk-WAXEMZUV.js.map