@snappedly-tools/shipyard 0.5.0 → 0.7.0-staging.36081473933

package/dist/templates/simple-loop/setup.sh

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ -n ${GH_REPO:-} ]]; then
+  [[ "$GH_REPO" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] || { echo "Invalid GH_REPO" >&2; exit 1; }
+  git remote set-url origin "https://github.com/$GH_REPO.git"
+fi
+
+# Install for this sandbox's checkout. Host node_modules can contain binaries
+# for a different OS and cannot cover dependencies added by the agent later.
+if [[ -f package.json ]]; then
+  manager=$(node -e 'try { const p = require("./package.json").packageManager; process.stdout.write(p ? p.split("@")[0] : "") } catch {}')
+  if [[ -z "$manager" ]]; then
+    if [[ -f bun.lock || -f bun.lockb ]]; then manager=bun
+    elif [[ -f pnpm-lock.yaml ]]; then manager=pnpm
+    elif [[ -f yarn.lock ]]; then manager=yarn
+    else manager=npm; fi
+  fi
+  case "$manager" in
+    npm) npm install ;;
+    pnpm) corepack pnpm install ;;
+    yarn) corepack yarn install ;;
+    bun)
+      if ! command -v bun >/dev/null; then curl -fsSL https://bun.com/install | bash; export PATH="$HOME/.bun/bin:$PATH"; fi
+      bun install ;;
+    *) echo "Unsupported package manager: $manager" >&2; exit 1 ;;
+  esac
+fi
+
+source_dir=$(mktemp -d)
+trap 'rm -rf "$source_dir"' EXIT
+if ! git clone --depth 1 https://github.com/snappedly/skills.git "$source_dir/repo"; then
+  echo "Could not install Snappedly skills; agent work has not started." >&2
+  exit 1
+fi
+
+mkdir -p "$HOME/.agents/skills" "$HOME/.claude/skills"
+while IFS= read -r -d '' skill_file; do
+  skill_dir=${skill_file%/SKILL.md}
+  skill_name=${skill_dir##*/}
+  rm -rf "$HOME/.agents/skills/$skill_name" "$HOME/.claude/skills/$skill_name"
+  cp -R "$skill_dir" "$HOME/.agents/skills/$skill_name"
+  ln -sfn "$HOME/.agents/skills/$skill_name" "$HOME/.claude/skills/$skill_name"
+done < <(find "$source_dir/repo/skills" -name SKILL.md -print0)
+
+for skill in triage implement implement-spec code-cleanup code-review tdd; do
+  if [[ ! -s "$HOME/.agents/skills/$skill/SKILL.md" || -z $(find "$source_dir/repo/skills" -path "*/$skill/SKILL.md" -print -quit) ]]; then
+    echo "Snappedly skill installation incomplete: $skill" >&2
+    exit 1
+  fi
+done

package/dist/templates/simple-loop/template.json

@@ -1,4 +1,4 @@
 {
   "name": "simple-loop",
-  "description": "Picks issues one by one and closes them"
+  "description": "Implements standalone issues or whole specs sequentially and opens review PRs"
 }

package/dist/templates/simple-loop/triage-prompt.md

@@ -0,0 +1,5 @@
+Triage GitHub issue #{{TASK_ID}} before Shipyard implementation.
+
+Follow `/triage` and the repository's `docs/agents/triage.md` label mapping. Read the full issue and comments, verify its claim against the codebase, then apply the appropriate category and state label and post the brief or triage notes required by the skill. The maintainer has authorized Shipyard to apply an evidence-based recommendation during this unattended intake. If a decision requires maintainer judgment, use `needs-triage` and record the question. Do not implement the issue or start a PR in this phase.
+
+Report the applied state and evidence. Shipyard will independently re-read GitHub labels and implement only an open issue carrying both `shipyard` and the sole triage state `ready-for-agent`.

package/dist/templates/simple-loop/verify-triage.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+issue=${1:?issue number required}
+repo=${2:?GitHub repository required}
+[[ "$issue" =~ ^[0-9]+$ ]] || { echo "Invalid issue number" >&2; exit 1; }
+[[ "$repo" =~ ^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$ ]] || { echo "Invalid GitHub repository" >&2; exit 1; }
+
+gh issue view "$issue" --repo "$repo" --json state,labels |
+  node -e '
+    const issue = JSON.parse(require("node:fs").readFileSync(0, "utf8"));
+    const labels = new Set(issue.labels.map((label) => label.name));
+    const states = ["needs-triage", "needs-info", "ready-for-agent", "ready-for-human", "wontfix"];
+    if (issue.state !== "OPEN" || !labels.has("shipyard") ||
+        states.filter((state) => labels.has(state)).join() !== "ready-for-agent") {
+      console.error("Issue cannot be implemented: requires an open issue with shipyard and only ready-for-agent as its triage state");
+      process.exit(1);
+    }
+  '

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snappedly-tools/shipyard",
-  "version": "0.5.0",
+  "version": "0.7.0-staging.36081473933",
   "description": "Run AI coding agents in isolated sandboxes",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,14 +13,6 @@
     "./sandboxes/docker": {
       "import": "./dist/sandboxes/docker.js",
       "types": "./dist/sandboxes/docker.d.ts"
-    },
-    "./sandboxes/vercel": {
-      "import": "./dist/sandboxes/vercel.js",
-      "types": "./dist/sandboxes/vercel.d.ts"
-    },
-    "./sandboxes/no-sandbox": {
-      "import": "./dist/sandboxes/no-sandbox.js",
-      "types": "./dist/sandboxes/no-sandbox.d.ts"
     }
   },
   "bin": {
@@ -90,14 +82,6 @@
     "tsx": "^4.23.13",
     "zod": "^4.6.5"
   },
-  "peerDependencies": {
-    "@vercel/sandbox": ">=1.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@vercel/sandbox": {
-      "optional": true
-    }
-  },
   "files": [
     "dist",
     "LICENSE",

package/dist/MountConfig-bZoCs4Dd.d.ts

@@ -1,26 +0,0 @@
-/**
- * User-facing mount configuration for bind-mount sandbox providers.
- *
- * Each entry describes a host directory to mount into the sandbox container.
- */
-/** A single bind-mount descriptor for the Docker provider. */
-interface MountConfig {
-    /**
-     * Path on the host. Supports:
-     * - Absolute paths (`/data/cache`)
-     * - Tilde-expanded paths (`~/data` → `<home>/data`)
-     * - Relative paths (`data` or `./data`) — resolved from `process.cwd()`
-     */
-    readonly hostPath: string;
-    /**
-     * Path inside the sandbox container. Supports:
-     * - Absolute paths (`/mnt/data`)
-     * - Tilde-expanded paths (`~/.npm` → `/home/agent/.npm`) — expanded using the provider's sandbox home directory
-     * - Relative paths (`data` or `./data`) — resolved from the worktree directory (`/home/agent/workspace`)
-     */
-    readonly sandboxPath: string;
-    /** Mount as read-only. Defaults to `false`. */
-    readonly readonly?: boolean;
-}
-
-export type { MountConfig as M };

package/dist/SandboxProvider-XJQqEdSf.d.ts

@@ -1,261 +0,0 @@
-/**
- * Sandbox provider types — the pluggable interface for sandbox runtimes.
- *
- * Provider authors implement a small Promise-based interface. Shipyard
- * handles worktree creation, git mount resolution, and commit extraction.
- */
-/** Result of executing a command inside a sandbox. */
-interface ExecResult {
-    readonly stdout: string;
-    readonly stderr: string;
-    readonly exitCode: number;
-}
-/** Options for interactiveExec — the streams the provider should wire to the spawned process. */
-interface InteractiveExecOptions {
-    readonly stdin: NodeJS.ReadableStream;
-    readonly stdout: NodeJS.WritableStream;
-    readonly stderr: NodeJS.WritableStream;
-    readonly cwd?: string;
-    /** Terminate the interactive process when the caller cancels the session. */
-    readonly signal?: AbortSignal;
-}
-/** Handle to a running bind-mount sandbox. */
-interface BindMountSandboxHandle {
-    /** Absolute path to the worktree inside the sandbox. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command in the sandbox.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work. A buffered/batch
-     * implementation that only calls `onLine` after the process exits does NOT
-     * satisfy this contract.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process inside the sandbox.
-     * Optional — providers that support interactive sessions implement this.
-     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
-     * allocates a pseudo-terminal accordingly.
-     * Implementations MUST terminate the underlying process when `signal` aborts.
-     */
-    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** Copy a single file from the host into the sandbox. */
-    copyFileIn(hostPath: string, sandboxPath: string): Promise<void>;
-    /** Copy a single file from the sandbox to the host. */
-    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
-    /** Tear down the sandbox. */
-    close(): Promise<void>;
-}
-/** Options passed to a bind-mount provider's `create` function. */
-interface BindMountCreateOptions {
-    /** Host-side path to the worktree directory. */
-    readonly worktreePath: string;
-    /** Host-side path to the original repo root. */
-    readonly hostRepoPath: string;
-    /** Volume mounts to apply (host:sandbox pairs). */
-    readonly mounts: Array<{
-        hostPath: string;
-        sandboxPath: string;
-        readonly?: boolean;
-    }>;
-    /** Environment variables to inject into the sandbox. */
-    readonly env: Record<string, string>;
-}
-/** Configuration for createBindMountSandboxProvider. */
-interface BindMountSandboxProviderConfig {
-    /** Human-readable name for this provider (e.g. "docker"). */
-    readonly name: string;
-    /** Environment variables injected by this provider. Merged at launch time. */
-    readonly env?: Record<string, string>;
-    /**
-     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
-     * Used to expand `~` in user-provided `sandboxPath` mount configs.
-     * Set to `undefined` for providers that do not have a fixed home directory.
-     */
-    readonly sandboxHomedir?: string;
-    /** Create a sandbox handle from the given options. */
-    readonly create: (options: BindMountCreateOptions) => Promise<BindMountSandboxHandle>;
-}
-/** Handle to a running isolated sandbox (extends bind-mount with file transfer). */
-interface IsolatedSandboxHandle {
-    /** Absolute path to the worktree inside the sandbox. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command in the sandbox.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work. A buffered/batch
-     * implementation that only calls `onLine` after the process exits does NOT
-     * satisfy this contract.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process inside the sandbox.
-     * Optional — providers that support interactive sessions implement this.
-     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
-     * allocates a pseudo-terminal accordingly.
-     * Implementations MUST terminate the underlying process when `signal` aborts.
-     */
-    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** Copy a file or directory from the host into the sandbox. */
-    copyIn(hostPath: string, sandboxPath: string): Promise<void>;
-    /** Copy a single file from the sandbox to the host. */
-    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
-    /** Tear down the sandbox. */
-    close(): Promise<void>;
-}
-/** Options passed to an isolated provider's `create` function. */
-interface IsolatedCreateOptions {
-    /** Original host repository path, used only for image naming; never mounted. */
-    readonly hostRepoPath?: string;
-    /** Environment variables to inject into the sandbox. */
-    readonly env: Record<string, string>;
-}
-/** Configuration for createIsolatedSandboxProvider. */
-interface IsolatedSandboxProviderConfig {
-    /** Human-readable name for this provider (e.g. "vercel"). */
-    readonly name: string;
-    /** Environment variables injected by this provider. Merged at launch time. */
-    readonly env?: Record<string, string>;
-    /** Create an isolated sandbox handle from the given options. */
-    readonly create: (options: IsolatedCreateOptions) => Promise<IsolatedSandboxHandle>;
-}
-/** A bind-mount sandbox provider. */
-interface BindMountSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-    /**
-     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
-     * `undefined` when the provider does not declare a sandbox home directory.
-     */
-    readonly sandboxHomedir: string | undefined;
-}
-/** An isolated sandbox provider. */
-interface IsolatedSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-}
-/** Handle to a no-sandbox session — runs commands directly on the host. */
-interface NoSandboxHandle {
-    /** Absolute path to the worktree on the host. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command on the host.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process on the host with inherited stdio.
-     */
-    interactiveExec(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** No-op — no container to tear down. */
-    close(): Promise<void>;
-}
-/** A no-sandbox provider — runs the agent directly on the host with no container isolation. */
-interface NoSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-}
-/** Head strategy: agent writes directly to host working directory. Bind-mount only. */
-interface HeadBranchStrategy {
-    readonly type: "head";
-}
-/** Merge-to-head strategy: temp branch, merge back to HEAD, delete temp branch. */
-interface MergeToHeadBranchStrategy {
-    readonly type: "merge-to-head";
-}
-/** Branch strategy: commits land on an explicit named branch. */
-interface NamedBranchStrategy {
-    readonly type: "branch";
-    readonly branch: string;
-    /**
-     * Git ref to use as the starting point when creating a new branch.
-     * Only used when the branch doesn't already exist — ignored otherwise.
-     * Callers are responsible for ensuring the ref is current (e.g. `git fetch`).
-     * Defaults to `HEAD` when omitted.
-     */
-    readonly baseBranch?: string;
-}
-/** Branch strategy for bind-mount providers (all three variants). */
-type BindMountBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Branch strategy for isolated providers (no head — can't write to host). */
-type IsolatedBranchStrategy = MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Branch strategy for no-sandbox providers (all three — same as bind-mount). */
-type NoSandboxBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Union of all branch strategy variants. */
-type BranchStrategy = BindMountBranchStrategy | IsolatedBranchStrategy | NoSandboxBranchStrategy;
-/**
- * A sandbox provider — the pluggable unit that `run()`, `interactive()`, and
- * `createSandbox()` accept. Tagged for internal dispatch: "bind-mount",
- * "isolated", or "none". When `NoSandboxProvider` is used, the agent runs
- * directly on the host with no container isolation — opt in at your own risk.
- */
-type SandboxProvider = BindMountSandboxProvider | IsolatedSandboxProvider | NoSandboxProvider;
-/** @deprecated Use `SandboxProvider` — it now includes `NoSandboxProvider`. */
-type AnySandboxProvider = SandboxProvider;
-/**
- * Create a bind-mount sandbox provider from a config object.
- * The returned provider can be passed to `run()` or `createSandbox()`.
- */
-declare const createBindMountSandboxProvider: (config: BindMountSandboxProviderConfig) => BindMountSandboxProvider;
-/**
- * Create an isolated sandbox provider from a config object.
- * The returned provider can be passed to `run()` or `createSandbox()`.
- */
-declare const createIsolatedSandboxProvider: (config: IsolatedSandboxProviderConfig) => IsolatedSandboxProvider;
-
-export { type AnySandboxProvider as A, type BindMountSandboxHandle as B, type ExecResult as E, type HeadBranchStrategy as H, type IsolatedSandboxProvider as I, type MergeToHeadBranchStrategy as M, type NoSandboxProvider as N, type SandboxProvider as S, type BranchStrategy as a, type NamedBranchStrategy as b, type BindMountBranchStrategy as c, type BindMountCreateOptions as d, type BindMountSandboxProvider as e, type BindMountSandboxProviderConfig as f, type InteractiveExecOptions as g, type IsolatedBranchStrategy as h, type IsolatedCreateOptions as i, type IsolatedSandboxHandle as j, type IsolatedSandboxProviderConfig as k, type NoSandboxBranchStrategy as l, type NoSandboxHandle as m, createBindMountSandboxProvider as n, createIsolatedSandboxProvider as o };

package/dist/chunk-ACD46ZM4.js

@@ -1,136 +0,0 @@
-import { createInterface } from 'readline';
-
-// src/boundedTail.ts
-var MAX_TAIL_CHARS = 64 * 1024;
-var OutputByteCounter = class {
-  constructor(maxBytes) {
-    this.maxBytes = maxBytes;
-  }
-  totalBytes = 0;
-  limitExceeded = false;
-  add(chunk) {
-    this.totalBytes += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.byteLength;
-    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;
-  }
-  get exceeded() {
-    return this.limitExceeded;
-  }
-};
-var BoundedTail = class {
-  items = [];
-  totalChars = 0;
-  maxChars;
-  separator;
-  /**
-   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.
-   * @param separator String placed between items by {@link toString}. Must match
-   *   how the caller would otherwise have joined the accumulated chunks (e.g.
-   *   `"\n"` for line streams, `""` for raw chunk streams).
-   */
-  constructor(maxChars = MAX_TAIL_CHARS, separator = "") {
-    this.maxChars = maxChars;
-    this.separator = separator;
-  }
-  /** Append one item to the tail, evicting oldest items to stay within budget. */
-  push(item) {
-    const bounded = item.length > this.maxChars ? item.slice(item.length - this.maxChars) : item;
-    this.totalChars += bounded.length + (this.items.length > 0 ? this.separator.length : 0);
-    this.items.push(bounded);
-    while (this.totalChars > this.maxChars && this.items.length > 1) {
-      const dropped = this.items.shift();
-      this.totalChars -= dropped.length + this.separator.length;
-    }
-  }
-  /** Join the retained tail into a single string (length ≤ `maxChars`). */
-  toString() {
-    return this.items.join(this.separator);
-  }
-};
-var StreamedProcessOutput = class {
-  maxOutputBytes;
-  byteCounter;
-  stdoutTail;
-  stderrTail;
-  onLine;
-  outputLimitError;
-  constructor(options) {
-    this.maxOutputBytes = options.maxOutputBytes;
-    this.byteCounter = options.maxOutputBytes === void 0 ? void 0 : new OutputByteCounter(options.maxOutputBytes);
-    const tailChars = options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;
-    this.stdoutTail = new BoundedTail(tailChars, "\n");
-    this.stderrTail = new BoundedTail(tailChars, "");
-    this.onLine = options.onLine ?? (() => {
-    });
-  }
-  checkLimit(chunk) {
-    if (this.byteCounter === void 0 || this.outputLimitError !== void 0) {
-      return this.outputLimitError;
-    }
-    this.byteCounter.add(chunk);
-    if (this.byteCounter.exceeded) {
-      this.outputLimitError = new Error(
-        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`
-      );
-    }
-    return this.outputLimitError;
-  }
-  addStdoutLine(line) {
-    this.stdoutTail.push(line);
-    this.onLine(line);
-  }
-  addStderr(chunk) {
-    this.stderrTail.push(chunk);
-  }
-  get error() {
-    return this.outputLimitError;
-  }
-  result(exitCode) {
-    return {
-      stdout: this.stdoutTail.toString(),
-      stderr: this.stderrTail.toString(),
-      exitCode
-    };
-  }
-};
-var collectProcessOutput = (process, options, resolve, reject) => {
-  if (options.onLine || options.maxOutputBytes !== void 0) {
-    const output = new StreamedProcessOutput(options);
-    const checkLimit = (chunk) => {
-      if (output.checkLimit(chunk) !== void 0) process.kill();
-    };
-    process.stdout.on("data", checkLimit);
-    process.stderr.on("data", checkLimit);
-    const lines = createInterface({ input: process.stdout });
-    lines.on("line", (line) => output.addStdoutLine(line));
-    process.stderr.on("data", (chunk) => {
-      output.addStderr(chunk.toString());
-    });
-    process.onClose((code) => {
-      if (output.error !== void 0) {
-        reject(output.error);
-        return;
-      }
-      resolve(output.result(code ?? 0));
-    });
-    return;
-  }
-  const stdoutChunks = [];
-  const stderrChunks = [];
-  process.stdout.on("data", (chunk) => {
-    stdoutChunks.push(chunk.toString());
-  });
-  process.stderr.on("data", (chunk) => {
-    stderrChunks.push(chunk.toString());
-  });
-  process.onClose((code) => {
-    resolve({
-      stdout: stdoutChunks.join(""),
-      stderr: stderrChunks.join(""),
-      exitCode: code ?? 0
-    });
-  });
-};
-
-export { MAX_TAIL_CHARS, StreamedProcessOutput, collectProcessOutput };
-//# sourceMappingURL=chunk-ACD46ZM4.js.map
-//# sourceMappingURL=chunk-ACD46ZM4.js.map

package/dist/chunk-ACD46ZM4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/boundedTail.ts","../src/processOutput.ts"],"names":[],"mappings":";;;AAmBO,IAAM,iBAAiB,EAAA,GAAK;AAQ5B,IAAM,oBAAN,MAAwB;AAAA,EAI7B,YAA6B,QAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAAA,EAAmB;AAAA,EAHxC,UAAA,GAAa,CAAA;AAAA,EACb,aAAA,GAAgB,KAAA;AAAA,EAIxB,IAAI,KAAA,EAAkC;AACpC,IAAA,IAAA,CAAK,UAAA,IACH,OAAO,KAAA,KAAU,QAAA,GAAW,OAAO,UAAA,CAAW,KAAK,IAAI,KAAA,CAAM,UAAA;AAC/D,IAAA,IAAI,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,QAAA,OAAe,aAAA,GAAgB,IAAA;AAAA,EAC5D;AAAA,EAEA,IAAI,QAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AACF,CAAA;AAaO,IAAM,cAAN,MAAkB;AAAA,EACN,QAAkB,EAAC;AAAA,EAC5B,UAAA,GAAa,CAAA;AAAA,EACJ,QAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjB,WAAA,CAAY,QAAA,GAAmB,cAAA,EAAgB,SAAA,GAAY,EAAA,EAAI;AAC7D,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA,EAGA,KAAK,IAAA,EAAoB;AACvB,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAA,GACf,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAQ,CAAA,GACtC,IAAA;AACN,IAAA,IAAA,CAAK,UAAA,IACH,QAAQ,MAAA,IAAU,IAAA,CAAK,MAAM,MAAA,GAAS,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,CAAA;AACpE,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,KAAK,UAAA,GAAa,IAAA,CAAK,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AAC/D,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AACjC,MAAA,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA;AAAA,IACrD;AAAA,EACF;AAAA;AAAA,EAGA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAAA,EACvC;AACF,CAAA;ACvEO,IAAM,wBAAN,MAA4B;AAAA,EAChB,cAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACT,gBAAA;AAAA,EAER,YAAY,OAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,iBAAiB,OAAA,CAAQ,cAAA;AAC9B,IAAA,IAAA,CAAK,WAAA,GACH,QAAQ,cAAA,KAAmB,MAAA,GACvB,SACA,IAAI,iBAAA,CAAkB,QAAQ,cAAc,CAAA;AAClD,IAAA,MAAM,SAAA,GACJ,OAAA,CAAQ,cAAA,IAAkB,OAAA,CAAQ,kBAAA,IAAsB,cAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,IAAI,CAAA;AACjD,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,MAAA,GAAS,OAAA,CAAQ,MAAA,KAAW,MAAM;AAAA,IAAC,CAAA,CAAA;AAAA,EAC1C;AAAA,EAEA,WAAW,KAAA,EAA+C;AACxD,IAAA,IAAI,IAAA,CAAK,WAAA,KAAgB,MAAA,IAAa,IAAA,CAAK,qBAAqB,MAAA,EAAW;AACzE,MAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,IAAI,KAAK,CAAA;AAC1B,IAAA,IAAI,IAAA,CAAK,YAAY,QAAA,EAAU;AAC7B,MAAA,IAAA,CAAK,mBAAmB,IAAI,KAAA;AAAA,QAC1B,CAAA,gCAAA,EAAmC,KAAK,cAAc,CAAA,MAAA;AAAA,OACxD;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,cAAc,IAAA,EAAoB;AAChC,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,IAAI,CAAA;AACzB,IAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAAA,EAClB;AAAA,EAEA,UAAU,KAAA,EAAqB;AAC7B,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,EAC5B;AAAA,EAEA,IAAI,KAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,OAAO,QAAA,EAAuC;AAC5C,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC;AAAA,KACF;AAAA,EACF;AACF;AAEO,IAAM,oBAAA,GAAuB,CAClC,OAAA,EAMA,OAAA,EACA,SACA,MAAA,KACS;AACT,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAU,OAAA,CAAQ,cAAA,KAAmB,MAAA,EAAW;AAC1D,IAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB,OAAO,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAAwB;AAC1C,MAAA,IAAI,OAAO,UAAA,CAAW,KAAK,CAAA,KAAM,MAAA,UAAmB,IAAA,EAAK;AAAA,IAC3D,CAAA;AACA,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,MAAM,QAAQ,eAAA,CAAgB,EAAE,KAAA,EAAO,OAAA,CAAQ,QAAQ,CAAA;AACvD,IAAA,KAAA,CAAM,GAAG,MAAA,EAAQ,CAAC,SAAS,MAAA,CAAO,aAAA,CAAc,IAAI,CAAC,CAAA;AACrD,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,MAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,IACnC,CAAC,CAAA;AACD,IAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,MAAA,IAAI,MAAA,CAAO,UAAU,MAAA,EAAW;AAC9B,QAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AACnB,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,IAAQ,CAAC,CAAC,CAAA;AAAA,IAClC,CAAC,CAAA;AACD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,IAAA,OAAA,CAAQ;AAAA,MACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,UAAU,IAAA,IAAQ;AAAA,KACnB,CAAA;AAAA,EACH,CAAC,CAAA;AACH","file":"chunk-ACD46ZM4.js","sourcesContent":["/**\n * A bounded, rolling tail of streamed output — a pure, provider-agnostic\n * utility shared by every sandbox provider that streams `exec` output.\n *\n * When a provider streams output line-by-line, it accumulates the stream only\n * to build the returned `ExecResult.stdout`/`stderr`. Consumers read just the\n * tail of that value (e.g. the last lines of an error, or a fallback for the\n * agent's final result), so retaining the whole stream is unnecessary — and,\n * once the accumulated string passes V8's ~512MB max string length, fatal: a\n * naive `chunks.join()` throws `RangeError: Invalid string length`, which on a\n * long agent run crashes the whole orchestration.\n */\n\n/**\n * Default maximum number of characters retained in a bounded output tail.\n *\n * 64KiB sits comfortably above any agent completion signal or structured-output\n * payload while staying far below V8's max string length.\n */\nexport const MAX_TAIL_CHARS = 64 * 1024;\n\n/**\n * Counts streamed output without retaining it. Providers use this when a\n * caller needs a hard byte ceiling for a one-shot command (for example prompt\n * expansion), so an untrusted command cannot exhaust memory before its output\n * is inspected.\n */\nexport class OutputByteCounter {\n  private totalBytes = 0;\n  private limitExceeded = false;\n\n  constructor(private readonly maxBytes: number) {}\n\n  add(chunk: string | Uint8Array): void {\n    this.totalBytes +=\n      typeof chunk === \"string\" ? Buffer.byteLength(chunk) : chunk.byteLength;\n    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;\n  }\n\n  get exceeded(): boolean {\n    return this.limitExceeded;\n  }\n}\n\n/**\n * A fixed-size rolling tail of strings, bounded by total character length.\n *\n * `push` appends to the tail; once the joined length would exceed `maxChars`,\n * the oldest items are dropped from the front. A single item longer than\n * `maxChars` is truncated to its own tail, so a newline-free blob can't\n * overflow on one push. `toString` joins the retained items, and its length is\n * always at most `maxChars`.\n *\n * The running length counter is encapsulated so callers can't desync it.\n */\nexport class BoundedTail {\n  private readonly items: string[] = [];\n  private totalChars = 0;\n  private readonly maxChars: number;\n  private readonly separator: string;\n\n  /**\n   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.\n   * @param separator String placed between items by {@link toString}. Must match\n   *   how the caller would otherwise have joined the accumulated chunks (e.g.\n   *   `\"\\n\"` for line streams, `\"\"` for raw chunk streams).\n   */\n  constructor(maxChars: number = MAX_TAIL_CHARS, separator = \"\") {\n    this.maxChars = maxChars;\n    this.separator = separator;\n  }\n\n  /** Append one item to the tail, evicting oldest items to stay within budget. */\n  push(item: string): void {\n    const bounded =\n      item.length > this.maxChars\n        ? item.slice(item.length - this.maxChars)\n        : item;\n    this.totalChars +=\n      bounded.length + (this.items.length > 0 ? this.separator.length : 0);\n    this.items.push(bounded);\n    while (this.totalChars > this.maxChars && this.items.length > 1) {\n      const dropped = this.items.shift()!;\n      this.totalChars -= dropped.length + this.separator.length;\n    }\n  }\n\n  /** Join the retained tail into a single string (length ≤ `maxChars`). */\n  toString(): string {\n    return this.items.join(this.separator);\n  }\n}\n","import type { Readable } from \"node:stream\";\nimport { createInterface } from \"node:readline\";\nimport {\n  BoundedTail,\n  MAX_TAIL_CHARS,\n  OutputByteCounter,\n} from \"./boundedTail.js\";\n\nexport interface ProcessOutputResult {\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n}\n\nexport interface ProcessOutputOptions {\n  readonly onLine?: (line: string) => void;\n  readonly maxOutputBytes?: number;\n  readonly maxOutputTailChars?: number;\n}\n\nexport class StreamedProcessOutput {\n  private readonly maxOutputBytes: number | undefined;\n  private readonly byteCounter: OutputByteCounter | undefined;\n  private readonly stdoutTail: BoundedTail;\n  private readonly stderrTail: BoundedTail;\n  private readonly onLine: (line: string) => void;\n  private outputLimitError: Error | undefined;\n\n  constructor(options: ProcessOutputOptions) {\n    this.maxOutputBytes = options.maxOutputBytes;\n    this.byteCounter =\n      options.maxOutputBytes === undefined\n        ? undefined\n        : new OutputByteCounter(options.maxOutputBytes);\n    const tailChars =\n      options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;\n    this.stdoutTail = new BoundedTail(tailChars, \"\\n\");\n    this.stderrTail = new BoundedTail(tailChars, \"\");\n    this.onLine = options.onLine ?? (() => {});\n  }\n\n  checkLimit(chunk: string | Uint8Array): Error | undefined {\n    if (this.byteCounter === undefined || this.outputLimitError !== undefined) {\n      return this.outputLimitError;\n    }\n    this.byteCounter.add(chunk);\n    if (this.byteCounter.exceeded) {\n      this.outputLimitError = new Error(\n        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`,\n      );\n    }\n    return this.outputLimitError;\n  }\n\n  addStdoutLine(line: string): void {\n    this.stdoutTail.push(line);\n    this.onLine(line);\n  }\n\n  addStderr(chunk: string): void {\n    this.stderrTail.push(chunk);\n  }\n\n  get error(): Error | undefined {\n    return this.outputLimitError;\n  }\n\n  result(exitCode: number): ProcessOutputResult {\n    return {\n      stdout: this.stdoutTail.toString(),\n      stderr: this.stderrTail.toString(),\n      exitCode,\n    };\n  }\n}\n\nexport const collectProcessOutput = (\n  process: {\n    readonly stdout: Readable;\n    readonly stderr: Readable;\n    readonly kill: () => void;\n    readonly onClose: (listener: (code: number | null) => void) => void;\n  },\n  options: ProcessOutputOptions,\n  resolve: (result: ProcessOutputResult) => void,\n  reject: (error: Error) => void,\n): void => {\n  if (options.onLine || options.maxOutputBytes !== undefined) {\n    const output = new StreamedProcessOutput(options);\n    const checkLimit = (chunk: Buffer): void => {\n      if (output.checkLimit(chunk) !== undefined) process.kill();\n    };\n    process.stdout.on(\"data\", checkLimit);\n    process.stderr.on(\"data\", checkLimit);\n    const lines = createInterface({ input: process.stdout });\n    lines.on(\"line\", (line) => output.addStdoutLine(line));\n    process.stderr.on(\"data\", (chunk: Buffer) => {\n      output.addStderr(chunk.toString());\n    });\n    process.onClose((code) => {\n      if (output.error !== undefined) {\n        reject(output.error);\n        return;\n      }\n      resolve(output.result(code ?? 0));\n    });\n    return;\n  }\n\n  const stdoutChunks: string[] = [];\n  const stderrChunks: string[] = [];\n  process.stdout.on(\"data\", (chunk: Buffer) => {\n    stdoutChunks.push(chunk.toString());\n  });\n  process.stderr.on(\"data\", (chunk: Buffer) => {\n    stderrChunks.push(chunk.toString());\n  });\n  process.onClose((code) => {\n    resolve({\n      stdout: stdoutChunks.join(\"\"),\n      stderr: stderrChunks.join(\"\"),\n      exitCode: code ?? 0,\n    });\n  });\n};\n"]}