@snappedly-tools/shipyard 0.7.0-staging.36082887921 → 0.7.0

package/README.md

@@ -23,71 +23,78 @@ a commit or pull request you can inspect.
 
 ## Try it on one task
 
-You need **Node.js 20.18.1+**, **Git**, **Docker running**, and **Codex or Claude Code**
-with a subscription login or API key.
+You need **Node.js 20.18.1+**, **Git**, **Docker running**, and **Codex or Claude
+Code** with a login or API key. Start with a clean Git repository you want
+Shipyard to change. If it is on GitHub, sign in with the
+[GitHub CLI](https://cli.github.com/) (`gh auth login`) before `init`; Shipyard
+creates its issue labels there.
 
 Run:
 
 ```sh
+git switch -c try-shipyard
 npx skills add snappedly/skills
-```
-
-Ask your coding agent to run `setup-snappedly-skills` in that repository.
-
-```sh
 npm install --save-dev @snappedly-tools/shipyard
 npx shipyard init
 ```
 
-During `shipyard init`, choose your agent, **Docker**, the template you want, and install the optional
-[repository runner](docs/content/docs/repository-runner.mdx). Follow
-the authentication prompts.
+Ask your coding agent to run `setup-snappedly-skills` in that repository. During
+`shipyard init`, choose your agent, **Docker**, and the **blank** template. Follow
+the authentication prompts. You can skip the optional repository runner for
+this first task.
 
-On a local Mac, the repository runner automatically wakes Shipyard when you label an issue.
-It runs as long as its terminal stays open.
+Open `.shipyard/prompt.md` and describe a small change. For example:
 
-See the [getting started guide](docs/content/docs/index.mdx) for authentication and
-branch options.
+```md
+# Task
 
-Fill in any credentials required in `.shipyard/.env`.
-`GH_TOKEN` in `.shipyard/.env` to a GH token with Contents, Issues, and Pull
-Requests read/write access and Metadata read access.
-Set `SHIPYARD_ROUTINE_MODEL` and `SHIPYARD_STRONG_MODEL` in `.shipyard/.env`
-for the roles your template uses. `simple-loop` uses routine for triage and
-implementation. `sequential-reviewer` also uses strong for issue reviews.
-Parallel planner templates use routine for ticket work and strong for planning,
-conflict resolution, and integration. The review-enabled planner also uses
-strong for ticket and final specification reviews. See
-[agent setup](docs/content/docs/agents.mdx).
-
-Commit the setup and prompt so the sandbox can read them. Make sure the Git ignore file keeps
-`.shipyard/.env` out of the commit.
+Document how to run this project locally using commands already in the repo.
+Run the relevant checks and commit the change.
 
-```sh
-npx shipyard run
+# Done
+
+Output <promise>COMPLETE</promise> when finished.
 ```
 
-Or for the automated runner:
+Fill in any credentials requested in `.shipyard/.env`. Commit the setup and
+prompt so the sandbox can read them. The generated Git ignore file keeps
+`.shipyard/.env` out of the commit.
 
 ```sh
-npx shipyard runner start
+git add .
+git commit -m "Set up Shipyard"
+npx shipyard run
+git show --stat HEAD
 ```
 
+Shipyard builds the Docker image, runs the agent, and returns its commit to your
+current branch. `git show` lets you inspect what changed. See the
+[getting started guide](docs/content/docs/index.mdx) for authentication and
+branch options.
+
 ## Turn GitHub issues into pull requests
 
-Then:
+For a repository you want to automate from GitHub Issues, choose
+**sequential-reviewer** instead of **blank** during `shipyard init`. Set
+`GH_TOKEN` in `.shipyard/.env` to a token with Contents, Issues, and Pull
+requests read/write access and Metadata read access. Then:
 
 1. Write an issue with a clear goal and add the `shipyard` and
    `ready-for-agent` labels.
-2. Make sure the runner is running, or start `npx shipyard run`. Shipyard checks the issue, implements it in Docker,
+2. Run `npx shipyard run`. Shipyard checks the issue, implements it in Docker,
    reviews the work, and opens a pull request.
 3. Inspect the pull request and merge it when you are happy with the result.
 
+On an Apple Silicon Mac, the optional [repository runner](docs/content/docs/repository-runner.mdx)
+can wake Shipyard when you label an issue. It runs while its terminal stays open.
+The guide covers installation, retries, and issue status labels.
+
 ## Choose a workflow
 
 | Template                       | What it does                                       |
 | ------------------------------ | -------------------------------------------------- |
-| `simple-loop`                  | Works through labeled issues one at a time.        |
+| `blank`                        | Runs your own task and prompt.                     |
+| `simple-loop`                  | Works through labelled issues one at a time.       |
 | `sequential-reviewer`          | Implements and reviews issues before PR handoff.   |
 | `parallel-planner`             | Plans and works on independent issues in parallel. |
 | `parallel-planner-with-review` | Adds review to the parallel workflow.              |

package/dist/MountConfig-bZoCs4Dd.d.ts

@@ -0,0 +1,26 @@
+/**
+ * User-facing mount configuration for bind-mount sandbox providers.
+ *
+ * Each entry describes a host directory to mount into the sandbox container.
+ */
+/** A single bind-mount descriptor for the Docker provider. */
+interface MountConfig {
+    /**
+     * Path on the host. Supports:
+     * - Absolute paths (`/data/cache`)
+     * - Tilde-expanded paths (`~/data` → `<home>/data`)
+     * - Relative paths (`data` or `./data`) — resolved from `process.cwd()`
+     */
+    readonly hostPath: string;
+    /**
+     * Path inside the sandbox container. Supports:
+     * - Absolute paths (`/mnt/data`)
+     * - Tilde-expanded paths (`~/.npm` → `/home/agent/.npm`) — expanded using the provider's sandbox home directory
+     * - Relative paths (`data` or `./data`) — resolved from the worktree directory (`/home/agent/workspace`)
+     */
+    readonly sandboxPath: string;
+    /** Mount as read-only. Defaults to `false`. */
+    readonly readonly?: boolean;
+}
+
+export type { MountConfig as M };

package/dist/SandboxProvider-XJQqEdSf.d.ts

@@ -0,0 +1,261 @@
+/**
+ * Sandbox provider types — the pluggable interface for sandbox runtimes.
+ *
+ * Provider authors implement a small Promise-based interface. Shipyard
+ * handles worktree creation, git mount resolution, and commit extraction.
+ */
+/** Result of executing a command inside a sandbox. */
+interface ExecResult {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+}
+/** Options for interactiveExec — the streams the provider should wire to the spawned process. */
+interface InteractiveExecOptions {
+    readonly stdin: NodeJS.ReadableStream;
+    readonly stdout: NodeJS.WritableStream;
+    readonly stderr: NodeJS.WritableStream;
+    readonly cwd?: string;
+    /** Terminate the interactive process when the caller cancels the session. */
+    readonly signal?: AbortSignal;
+}
+/** Handle to a running bind-mount sandbox. */
+interface BindMountSandboxHandle {
+    /** Absolute path to the worktree inside the sandbox. */
+    readonly worktreePath: string;
+    /**
+     * Execute a command in the sandbox.
+     *
+     * Implementations MUST support line-by-line streaming via `onLine`. This is
+     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
+     * without a streaming implementation, neither will work. A buffered/batch
+     * implementation that only calls `onLine` after the process exits does NOT
+     * satisfy this contract.
+     *
+     * When `stdin` is set, the implementation pipes the string to the child
+     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
+     */
+    exec(command: string, options?: {
+        onLine?: (line: string) => void;
+        cwd?: string;
+        sudo?: boolean;
+        stdin?: string;
+        /** Abort the command when the caller's operation is cancelled. */
+        signal?: AbortSignal;
+        /** Reject/terminate the command after this many combined output bytes. */
+        maxOutputBytes?: number;
+    }): Promise<ExecResult>;
+    /**
+     * Launch an interactive process inside the sandbox.
+     * Optional — providers that support interactive sessions implement this.
+     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
+     * allocates a pseudo-terminal accordingly.
+     * Implementations MUST terminate the underlying process when `signal` aborts.
+     */
+    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
+        exitCode: number;
+    }>;
+    /** Copy a single file from the host into the sandbox. */
+    copyFileIn(hostPath: string, sandboxPath: string): Promise<void>;
+    /** Copy a single file from the sandbox to the host. */
+    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
+    /** Tear down the sandbox. */
+    close(): Promise<void>;
+}
+/** Options passed to a bind-mount provider's `create` function. */
+interface BindMountCreateOptions {
+    /** Host-side path to the worktree directory. */
+    readonly worktreePath: string;
+    /** Host-side path to the original repo root. */
+    readonly hostRepoPath: string;
+    /** Volume mounts to apply (host:sandbox pairs). */
+    readonly mounts: Array<{
+        hostPath: string;
+        sandboxPath: string;
+        readonly?: boolean;
+    }>;
+    /** Environment variables to inject into the sandbox. */
+    readonly env: Record<string, string>;
+}
+/** Configuration for createBindMountSandboxProvider. */
+interface BindMountSandboxProviderConfig {
+    /** Human-readable name for this provider (e.g. "docker"). */
+    readonly name: string;
+    /** Environment variables injected by this provider. Merged at launch time. */
+    readonly env?: Record<string, string>;
+    /**
+     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
+     * Used to expand `~` in user-provided `sandboxPath` mount configs.
+     * Set to `undefined` for providers that do not have a fixed home directory.
+     */
+    readonly sandboxHomedir?: string;
+    /** Create a sandbox handle from the given options. */
+    readonly create: (options: BindMountCreateOptions) => Promise<BindMountSandboxHandle>;
+}
+/** Handle to a running isolated sandbox (extends bind-mount with file transfer). */
+interface IsolatedSandboxHandle {
+    /** Absolute path to the worktree inside the sandbox. */
+    readonly worktreePath: string;
+    /**
+     * Execute a command in the sandbox.
+     *
+     * Implementations MUST support line-by-line streaming via `onLine`. This is
+     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
+     * without a streaming implementation, neither will work. A buffered/batch
+     * implementation that only calls `onLine` after the process exits does NOT
+     * satisfy this contract.
+     *
+     * When `stdin` is set, the implementation pipes the string to the child
+     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
+     */
+    exec(command: string, options?: {
+        onLine?: (line: string) => void;
+        cwd?: string;
+        sudo?: boolean;
+        stdin?: string;
+        /** Abort the command when the caller's operation is cancelled. */
+        signal?: AbortSignal;
+        /** Reject/terminate the command after this many combined output bytes. */
+        maxOutputBytes?: number;
+    }): Promise<ExecResult>;
+    /**
+     * Launch an interactive process inside the sandbox.
+     * Optional — providers that support interactive sessions implement this.
+     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
+     * allocates a pseudo-terminal accordingly.
+     * Implementations MUST terminate the underlying process when `signal` aborts.
+     */
+    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
+        exitCode: number;
+    }>;
+    /** Copy a file or directory from the host into the sandbox. */
+    copyIn(hostPath: string, sandboxPath: string): Promise<void>;
+    /** Copy a single file from the sandbox to the host. */
+    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
+    /** Tear down the sandbox. */
+    close(): Promise<void>;
+}
+/** Options passed to an isolated provider's `create` function. */
+interface IsolatedCreateOptions {
+    /** Original host repository path, used only for image naming; never mounted. */
+    readonly hostRepoPath?: string;
+    /** Environment variables to inject into the sandbox. */
+    readonly env: Record<string, string>;
+}
+/** Configuration for createIsolatedSandboxProvider. */
+interface IsolatedSandboxProviderConfig {
+    /** Human-readable name for this provider (e.g. "vercel"). */
+    readonly name: string;
+    /** Environment variables injected by this provider. Merged at launch time. */
+    readonly env?: Record<string, string>;
+    /** Create an isolated sandbox handle from the given options. */
+    readonly create: (options: IsolatedCreateOptions) => Promise<IsolatedSandboxHandle>;
+}
+/** A bind-mount sandbox provider. */
+interface BindMountSandboxProvider {
+    /** Human-readable provider name. */
+    readonly name: string;
+    /** Environment variables injected by this provider. */
+    readonly env: Record<string, string>;
+    /**
+     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
+     * `undefined` when the provider does not declare a sandbox home directory.
+     */
+    readonly sandboxHomedir: string | undefined;
+}
+/** An isolated sandbox provider. */
+interface IsolatedSandboxProvider {
+    /** Human-readable provider name. */
+    readonly name: string;
+    /** Environment variables injected by this provider. */
+    readonly env: Record<string, string>;
+}
+/** Handle to a no-sandbox session — runs commands directly on the host. */
+interface NoSandboxHandle {
+    /** Absolute path to the worktree on the host. */
+    readonly worktreePath: string;
+    /**
+     * Execute a command on the host.
+     *
+     * Implementations MUST support line-by-line streaming via `onLine`. This is
+     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
+     * without a streaming implementation, neither will work.
+     *
+     * When `stdin` is set, the implementation pipes the string to the child
+     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
+     */
+    exec(command: string, options?: {
+        onLine?: (line: string) => void;
+        cwd?: string;
+        sudo?: boolean;
+        stdin?: string;
+        /** Abort the command when the caller's operation is cancelled. */
+        signal?: AbortSignal;
+        /** Reject/terminate the command after this many combined output bytes. */
+        maxOutputBytes?: number;
+    }): Promise<ExecResult>;
+    /**
+     * Launch an interactive process on the host with inherited stdio.
+     */
+    interactiveExec(args: string[], options: InteractiveExecOptions): Promise<{
+        exitCode: number;
+    }>;
+    /** No-op — no container to tear down. */
+    close(): Promise<void>;
+}
+/** A no-sandbox provider — runs the agent directly on the host with no container isolation. */
+interface NoSandboxProvider {
+    /** Human-readable provider name. */
+    readonly name: string;
+    /** Environment variables injected by this provider. */
+    readonly env: Record<string, string>;
+}
+/** Head strategy: agent writes directly to host working directory. Bind-mount only. */
+interface HeadBranchStrategy {
+    readonly type: "head";
+}
+/** Merge-to-head strategy: temp branch, merge back to HEAD, delete temp branch. */
+interface MergeToHeadBranchStrategy {
+    readonly type: "merge-to-head";
+}
+/** Branch strategy: commits land on an explicit named branch. */
+interface NamedBranchStrategy {
+    readonly type: "branch";
+    readonly branch: string;
+    /**
+     * Git ref to use as the starting point when creating a new branch.
+     * Only used when the branch doesn't already exist — ignored otherwise.
+     * Callers are responsible for ensuring the ref is current (e.g. `git fetch`).
+     * Defaults to `HEAD` when omitted.
+     */
+    readonly baseBranch?: string;
+}
+/** Branch strategy for bind-mount providers (all three variants). */
+type BindMountBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
+/** Branch strategy for isolated providers (no head — can't write to host). */
+type IsolatedBranchStrategy = MergeToHeadBranchStrategy | NamedBranchStrategy;
+/** Branch strategy for no-sandbox providers (all three — same as bind-mount). */
+type NoSandboxBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
+/** Union of all branch strategy variants. */
+type BranchStrategy = BindMountBranchStrategy | IsolatedBranchStrategy | NoSandboxBranchStrategy;
+/**
+ * A sandbox provider — the pluggable unit that `run()`, `interactive()`, and
+ * `createSandbox()` accept. Tagged for internal dispatch: "bind-mount",
+ * "isolated", or "none". When `NoSandboxProvider` is used, the agent runs
+ * directly on the host with no container isolation — opt in at your own risk.
+ */
+type SandboxProvider = BindMountSandboxProvider | IsolatedSandboxProvider | NoSandboxProvider;
+/** @deprecated Use `SandboxProvider` — it now includes `NoSandboxProvider`. */
+type AnySandboxProvider = SandboxProvider;
+/**
+ * Create a bind-mount sandbox provider from a config object.
+ * The returned provider can be passed to `run()` or `createSandbox()`.
+ */
+declare const createBindMountSandboxProvider: (config: BindMountSandboxProviderConfig) => BindMountSandboxProvider;
+/**
+ * Create an isolated sandbox provider from a config object.
+ * The returned provider can be passed to `run()` or `createSandbox()`.
+ */
+declare const createIsolatedSandboxProvider: (config: IsolatedSandboxProviderConfig) => IsolatedSandboxProvider;
+
+export { type AnySandboxProvider as A, type BindMountSandboxHandle as B, type ExecResult as E, type HeadBranchStrategy as H, type IsolatedSandboxProvider as I, type MergeToHeadBranchStrategy as M, type NoSandboxProvider as N, type SandboxProvider as S, type BranchStrategy as a, type NamedBranchStrategy as b, type BindMountBranchStrategy as c, type BindMountCreateOptions as d, type BindMountSandboxProvider as e, type BindMountSandboxProviderConfig as f, type InteractiveExecOptions as g, type IsolatedBranchStrategy as h, type IsolatedCreateOptions as i, type IsolatedSandboxHandle as j, type IsolatedSandboxProviderConfig as k, type NoSandboxBranchStrategy as l, type NoSandboxHandle as m, createBindMountSandboxProvider as n, createIsolatedSandboxProvider as o };

package/dist/{chunk-JI3HDDMS.js → chunk-56TDSWFU.js}

@@ -1,4 +1,4 @@
-import { CONFIG_DIR, ConfigDirError, assertNoSymlinkComponents, LOGS_DIR, Display } from './chunk-L6PX5QTU.js';
+import { CONFIG_DIR, ConfigDirError, assertNoSymlinkComponents, LOGS_DIR, Display } from './chunk-FDYOTN55.js';
 import { Effect } from 'effect';
 import { FileSystem } from '@effect/platform';
 import { join } from 'path';
@@ -251,5 +251,5 @@ var purgeRunLogs = async (options) => {
 };
 
 export { CODEX_MODELS, CODEX_REASONING_EFFORTS, DEFAULT_LOG_RETENTION_DAYS, buildLogDirectoryName, formatErrorMessage, purgeRunLogs, resolveEnv, withFriendlyErrors };
-//# sourceMappingURL=chunk-JI3HDDMS.js.map
-//# sourceMappingURL=chunk-JI3HDDMS.js.map
+//# sourceMappingURL=chunk-56TDSWFU.js.map
+//# sourceMappingURL=chunk-56TDSWFU.js.map

package/dist/{chunk-JI3HDDMS.js.map → chunk-56TDSWFU.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/ErrorHandler.ts","../src/modelConfig.ts","../src/EnvResolver.ts","../src/LogRetention.ts"],"names":["Effect","join"],"mappings":";;;;;;AAQO,IAAM,kBAAA,GAAqB,CAAC,KAAA,KAAgC;AACjE,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,GAAA,EAAM,MAAM,OAAO,CAAA,CAAA;AAAA,IACvE,KAAK,eAAA;AACH,MAAA,OAAO,CAAA,wBAAA,EAA2B,KAAA,CAAM,OAAO,CAAA,GAAA,EAAM,MAAM,OAAO,CAAA,CAAA;AAAA,IACpE,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,kBAAA,EAAqB,MAAM,OAAO,CAAA,CAAA;AAAA,IAC3C,KAAK,aAAA;AACH,MAAA,OAAO,CAAA,yBAAA,EAA4B,MAAM,OAAO,CAAA,oBAAA,CAAA;AAAA,IAClD,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,iBAAA,EAAoB,MAAM,OAAO,CAAA,CAAA;AAAA,IAC1C,KAAK,eAAA;AACH,MAAA,OAAO,CAAA,+BAAA,EAAkC,MAAM,OAAO,CAAA,CAAA;AAAA,IACxD,KAAK,aAAA;AACH,MAAA,OAAO,CAAA,0BAAA,EAA6B,MAAM,OAAO,CAAA,CAAA;AAAA,IACnD,KAAK,YAAA;AACH,MAAA,OAAO,CAAA,yBAAA,EAA4B,MAAM,OAAO,CAAA,CAAA;AAAA,IAClD,KAAK,gBAAA;AACH,MAAA,OAAO,CAAA,EAAG,MAAM,OAAO,CAAA,CAAA;AAAA,IACzB,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,EAAG,MAAM,OAAO,CAAA,CAAA;AAAA,IACzB,KAAK,uBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,oBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,UAAA;AACH,MAAA,OAAO,KAAA,CAAM,OAAA;AAAA;AAEnB;AAEA,IAAM,gBAAA,GAAmB,CAAC,KAAA,KACxB,MAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,IAAI,OAAO,OAAA;AACjB,EAAA,OAAO,CAAA,CAAE,MAAA,CAAO,kBAAA,CAAmB,KAAK,GAAG,OAAO,CAAA;AAClD,EAAA,OAAO,OAAO,MAAA,CAAO,IAAA,CAAK,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAU,CAAA;AAC1D,CAAC,CAAA;AAOI,IAAM,qBAAqB,CAChC,MAAA;AAAA;AAAA,EAGA,MAAA,CAAO,UAAU,MAAA,EAA6C;AAAA,IAC5D,SAAA,EAAW,gBAAA;AAAA,IACX,aAAA,EAAe,gBAAA;AAAA,IACf,SAAA,EAAW,gBAAA;AAAA,IACX,WAAA,EAAa,gBAAA;AAAA,IACb,SAAA,EAAW,gBAAA;AAAA,IACX,aAAA,EAAe,gBAAA;AAAA,IACf,WAAA,EAAa,gBAAA;AAAA,IACb,UAAA,EAAY,gBAAA;AAAA,IACZ,cAAA,EAAgB,gBAAA;AAAA,IAChB,SAAA,EAAW,gBAAA;AAAA,IACX,qBAAA,EAAuB,gBAAA;AAAA,IACvB,oBAAA,EAAsB,gBAAA;AAAA,IACtB,0BAAA,EAA4B,gBAAA;AAAA,IAC5B,0BAAA,EAA4B,gBAAA;AAAA,IAC5B,mBAAA,EAAqB,gBAAA;AAAA,IACrB,kBAAA,EAAoB,gBAAA;AAAA,IACpB,gBAAA,EAAkB,gBAAA;AAAA,IAClB,oBAAA,EAAsB,gBAAA;AAAA,IACtB,2BAAA,EAA6B,gBAAA;AAAA,IAC7B,4BAAA,EAA8B,gBAAA;AAAA,IAC9B,uBAAA,EAAyB,gBAAA;AAAA,IACzB,mBAAA,EAAqB,gBAAA;AAAA,IACrB,QAAA,EAAU;AAAA,GACX;AAAA;;;ACtFI,IAAM,uBAAA,GAA0B;AAAA,EACrC,KAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAsBA,IAAM,oBAAA,GAAuB;AAAA,EAC3B,OAAA,EAAS,EAAE,KAAA,EAAO,cAAA,EAAgB,QAAQ,KAAA,EAAM;AAAA,EAChD,MAAA,EAAQ,EAAE,KAAA,EAAO,aAAA,EAAe,QAAQ,KAAA;AAC1C,CAAA;AAEA,IAAM,SAAA,GAAY,CAAC,IAAA,KACjB,OAAA,CAAQ,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAA,EAAa,QAAQ,CAAA,EAAG,IAAA,EAAK,IAChE,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA;AAE7B,IAAM,UAAA,GAAa,CACjB,IAAA,KACyB;AACzB,EAAA,MAAM,OAAA,GAAU,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAA,EAAa,CAAA,iBAAA,CAAA;AACpD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,OAAO,GAAG,IAAA,EAAK;AACzC,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,oBAAA,CAAqB,IAAI,CAAA,CAAE,MAAA;AAC9C,EAAA,IAAK,uBAAA,CAA8C,QAAA,CAAS,KAAK,CAAA,EAAG;AAClE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,CAAA,EAAG,OAAO,CAAA,gBAAA,EAAmB,uBAAA,CAAwB,KAAK,IAAI,CAAC,eAAe,KAAK,CAAA,CAAA;AAAA,GACrF;AACF,CAAA;AAEO,IAAM,YAAA,GAAe;AAAA,EAC1B,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,UAAU,SAAS,CAAA;AAAA,IAC1B,MAAA,EAAQ,WAAW,SAAS;AAAA,GAC9B;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,UAAU,QAAQ,CAAA;AAAA,IACzB,MAAA,EAAQ,WAAW,QAAQ;AAAA;AAE/B;ACrDA,IAAM,YAAA,GAAe,CACnB,QAAA,KAEAA,MAAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,EAAA,GAAK,OAAO,UAAA,CAAW,UAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,OAAO,EAAA,CAAG,QAAA,CAAS,QAAQ,CAAA,CAAE,IAAA;AAAA,IAC3CA,MAAAA,CAAO,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,IACrBA,OAAO,QAAA,CAAS,MAAMA,MAAAA,CAAO,OAAA,CAAQ,KAAK,CAAC;AAAA,GAC7C;AAGA,EAAA,IAAI,OAAA,SAAgB,EAAC;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,EAAA,CACpB,cAAA,CAAe,QAAQ,CAAA,CACvB,IAAA,CAAKA,MAAAA,CAAO,QAAA,CAAS,MAAMA,MAAAA,CAAO,OAAA,CAAQ,IAAI,CAAC,CAAC,CAAA;AACnD,EAAA,IAAI,OAAA,KAAY,IAAA,EAAM,OAAO,EAAC;AAC9B,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,EAAG;AACtC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACnC,IAAA,IAAI,YAAY,EAAA,EAAI;AACpB,IAAA,MAAM,MAAM,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,OAAO,EAAE,IAAA,EAAK;AAC3C,IAAA,IAAI,QAAQ,OAAA,CAAQ,KAAA,CAAM,OAAA,GAAU,CAAC,EAAE,IAAA,EAAK;AAC5C,IAAA,MAAM,cAAA,GACJ,KAAA,CAAM,MAAA,IAAU,CAAA,IAChB,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,IACb,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,KAAM,GAAA;AAC9B,IAAA,MAAM,cAAA,GACJ,KAAA,CAAM,MAAA,IAAU,CAAA,IAChB,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,IACb,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,KAAM,GAAA;AAC9B,IAAA,IAAI,kBAAkB,cAAA,EAAgB;AACpC,MAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,cAAA,EAAgB,CAAC,GAAG,EAAA,KAAe;AACvD,QAAA,MAAM,OAAA,GAAkC;AAAA,UACtC,CAAA,EAAG,IAAA;AAAA,UACH,CAAA,EAAG,IAAA;AAAA,UACH,CAAA,EAAG,GAAA;AAAA,UACH,IAAA,EAAM;AAAA,SACR;AACA,QAAA,OAAO,OAAA,CAAQ,EAAE,CAAA,IAAK,EAAA;AAAA,MACxB,CAAC,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACd;AACA,EAAA,OAAO,IAAA;AACT,CAAC,CAAA;AASI,IAAM,UAAA,GAAa,CACxB,OAAA,KAMAA,MAAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,OAAA,EAAS,UAAU,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,MAAM,CAAA;AACtC,EAAA,OAAOA,OAAO,UAAA,CAAW;AAAA,IACvB,GAAA,EAAK,MACH,yBAAA,CAA0B,OAAA,EAAS,SAAS,kBAAkB,CAAA;AAAA,IAChE,KAAA,EAAO,CAAC,CAAA,KACN,IAAI,cAAA,CAAe;AAAA,MACjB,OAAA,EAAS,wCAAwC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,KAC5F;AAAA,GACJ,CAAA;AACD,EAAA,MAAM,WAAA,GAAc,OAAO,YAAA,CAAa,OAAO,CAAA;AAE/C,EAAA,MAAM,SAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG;AAK1C,IAAA,MAAM,QAAQ,WAAA,CAAY,GAAG,CAAA,IAAK,OAAA,CAAQ,IAAI,GAAG,CAAA;AACjD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,IAChB;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT,CAAC;AC9FI,IAAM,0BAAA,GAA6B;AAE1C,IAAM,qBAAA,GAAwB,2BAAA;AAGvB,IAAM,qBAAA,GAAwB,CAAC,IAAA,mBAAa,IAAI,MAAK,KAAc;AACxE,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,OAAA,EAAS,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,EAC3E;AACA,EAAA,MAAM,GAAA,GAAM,CAAC,KAAA,KAA0B,MAAA,CAAO,KAAK,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpE,EAAA,OAAO,GAAG,IAAA,CAAK,WAAA,EAAa,CAAA,CAAA,EAAI,IAAI,IAAA,CAAK,QAAA,EAAS,GAAI,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,CAAC,CAAA,CAAA;AACjF;AAEA,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAmC;AAChE,EAAA,MAAM,KAAA,GAAQ,qBAAA,CAAsB,IAAA,CAAK,IAAI,CAAA;AAC7C,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAEnB,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC3B,EAAA,MAAM,OAAO,IAAI,IAAA,CAAK,IAAA,EAAM,KAAA,GAAQ,GAAG,GAAG,CAAA;AAC1C,EAAA,OAAO,IAAA,CAAK,WAAA,EAAY,KAAM,IAAA,IAC5B,IAAA,CAAK,QAAA,EAAS,KAAM,KAAA,GAAQ,CAAA,IAC5B,IAAA,CAAK,OAAA,EAAQ,KAAM,MACjB,IAAA,GACA,MAAA;AACN,CAAA;AAEA,IAAM,qBAAA,GAAwB,CAAC,aAAA,KAAgC;AAC7D,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,aAAa,CAAA,IAAK,gBAAgB,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACF,CAAA;AAgCO,IAAM,YAAA,GAAe,OAC1B,OAAA,KACgC;AAChC,EAAA,MAAM,gBAAgB,OAAA,CAAQ,aAAA;AAC9B,EAAA,IAAI,aAAA,KAAkB,MAAA,EAAW,qBAAA,CAAsB,aAAa,CAAA;AAEpE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,IAAI,kBAAkB,MAAA,IAAa,MAAA,CAAO,MAAM,GAAA,CAAI,OAAA,EAAS,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AACA,EAAA,MAAM,MAAA,GACJ,aAAA,KAAkB,MAAA,GACd,MAAA,GACA,IAAI,IAAA;AAAA,IACF,IAAI,WAAA,EAAY;AAAA,IAChB,IAAI,QAAA,EAAS;AAAA,IACb,GAAA,CAAI,SAAQ,GAAI;AAAA,GAClB;AACN,EAAA,MAAM,UAAA,GACJ,MAAA,KAAW,MAAA,GAAY,MAAA,GAAY,sBAAsB,MAAM,CAAA;AACjE,EAAA,MAAM,OAAA,GAAUC,IAAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,YAAY,QAAQ,CAAA;AAE1D,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,EAAS,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EAC1D,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,IAAS,MAAA,IAAU,KAAA,IAAS,KAAA,CAAM,SAAS,QAAA,EAAU;AACxE,MAAA,OAAO;AAAA,QACL,OAAA;AAAA,QACA,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAC,GAAI,EAAE,eAAe,UAAA,EAAW;AAAA,QACnE,kBAAA,EAAoB,CAAA;AAAA,QACpB,YAAA,EAAc,CAAA;AAAA,QACd,oBAAoB,EAAC;AAAA,QACrB,cAAc;AAAC,OACjB;AAAA,IACF;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AAEA,EAAA,MAAM,qBAA+B,EAAC;AACtC,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,IAAI,kBAAA,GAAqB,CAAA;AACzB,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,MAAM,SAAA,GAAYA,IAAAA,CAAK,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AAC1C,IAAA,IAAI,MAAM,MAAA,EAAO,IAAK,MAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,EAAG;AACjD,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,SAAS,CAAA;AAClC,MAAA,IAAI,KAAK,MAAA,EAAO,KAAM,WAAW,MAAA,IAAa,IAAA,CAAK,QAAQ,MAAA,CAAA,EAAS;AAClE,QAAA,MAAM,EAAA,CAAG,SAAA,EAAW,EAAE,KAAA,EAAO,MAAM,CAAA;AACnC,QAAA,YAAA,CAAa,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,MAC9B;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,KAAA,CAAM,WAAA,EAAY,EAAG;AAC1B,IAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,KAAA,CAAM,IAAI,CAAA;AACtD,IAAA,IAAI,kBAAkB,MAAA,EAAW;AACjC,IAAA,kBAAA,IAAsB,CAAA;AACtB,IAAA,IAAI,MAAA,KAAW,MAAA,IAAa,aAAA,IAAiB,MAAA,EAAQ;AAErD,IAAA,MAAM,GAAG,SAAA,EAAW,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACpD,IAAA,kBAAA,CAAmB,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACpC;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAC,GAAI,EAAE,eAAe,UAAA,EAAW;AAAA,IACnE,kBAAA;AAAA,IACA,YAAA,EAAc,kBAAA,CAAmB,MAAA,GAAS,YAAA,CAAa,MAAA;AAAA,IACvD,kBAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-JI3HDDMS.js","sourcesContent":["import { Effect } from \"effect\";\nimport { Display } from \"./Display.js\";\nimport type { SandboxError } from \"./errors.js\";\n\n/**\n * Formats a tagged SandboxError into a user-friendly message with\n * context-specific hints about what went wrong and how to recover.\n */\nexport const formatErrorMessage = (error: SandboxError): string => {\n  switch (error._tag) {\n    case \"ExecError\":\n      return `Command failed in sandbox (${error.command}): ${error.message}`;\n    case \"ExecHostError\":\n      return `Command failed on host (${error.command}): ${error.message}`;\n    case \"CopyError\":\n      return `File copy failed: ${error.message}`;\n    case \"DockerError\":\n      return `Docker operation failed: ${error.message}. Is Docker running?`;\n    case \"SyncError\":\n      return `Git sync failed: ${error.message}`;\n    case \"WorktreeError\":\n      return `Git worktree operation failed: ${error.message}`;\n    case \"PromptError\":\n      return `Failed to resolve prompt: ${error.message}`;\n    case \"AgentError\":\n      return `Agent invocation failed: ${error.message}`;\n    case \"ConfigDirError\":\n      return `${error.message}`;\n    case \"InitError\":\n      return `${error.message}`;\n    case \"AgentIdleTimeoutError\":\n    case \"WorktreeTimeoutError\":\n    case \"ContainerStartTimeoutError\":\n    case \"CopyToWorktreeTimeoutError\":\n    case \"CopyToWorktreeError\":\n    case \"SyncInTimeoutError\":\n    case \"HookTimeoutError\":\n    case \"GitSetupTimeoutError\":\n    case \"PromptExpansionTimeoutError\":\n    case \"CommitCollectionTimeoutError\":\n    case \"MergeToHostTimeoutError\":\n    case \"SessionCaptureError\":\n    case \"CwdError\":\n      return error.message;\n  }\n};\n\nconst showErrorAndExit = (error: SandboxError) =>\n  Effect.gen(function* () {\n    const d = yield* Display;\n    yield* d.status(formatErrorMessage(error), \"error\");\n    return yield* Effect.sync(() => process.exit(1) as never);\n  });\n\n/**\n * Wraps an effect so that any SandboxError is caught, displayed via the\n * Display service as an error-severity status message, then exits the process\n * with code 1. Non-SandboxError errors pass through unchanged.\n */\nexport const withFriendlyErrors = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, Exclude<E, SandboxError>, R | Display> =>\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  Effect.catchTags(effect as Effect.Effect<A, SandboxError, R>, {\n    ExecError: showErrorAndExit,\n    ExecHostError: showErrorAndExit,\n    CopyError: showErrorAndExit,\n    DockerError: showErrorAndExit,\n    SyncError: showErrorAndExit,\n    WorktreeError: showErrorAndExit,\n    PromptError: showErrorAndExit,\n    AgentError: showErrorAndExit,\n    ConfigDirError: showErrorAndExit,\n    InitError: showErrorAndExit,\n    AgentIdleTimeoutError: showErrorAndExit,\n    WorktreeTimeoutError: showErrorAndExit,\n    ContainerStartTimeoutError: showErrorAndExit,\n    CopyToWorktreeTimeoutError: showErrorAndExit,\n    CopyToWorktreeError: showErrorAndExit,\n    SyncInTimeoutError: showErrorAndExit,\n    HookTimeoutError: showErrorAndExit,\n    GitSetupTimeoutError: showErrorAndExit,\n    PromptExpansionTimeoutError: showErrorAndExit,\n    CommitCollectionTimeoutError: showErrorAndExit,\n    MergeToHostTimeoutError: showErrorAndExit,\n    SessionCaptureError: showErrorAndExit,\n    CwdError: showErrorAndExit,\n  }) as Effect.Effect<A, Exclude<E, SandboxError>, R | Display>;\n","/** Reasoning efforts accepted by the Codex CLI. */\nexport const CODEX_REASONING_EFFORTS = [\n  \"low\",\n  \"medium\",\n  \"high\",\n  \"xhigh\",\n  \"max\",\n] as const;\n\nexport type CodexReasoningEffort = (typeof CODEX_REASONING_EFFORTS)[number];\n\n/** A model identifier plus the reasoning policy used for that model role. */\nexport interface CodexModelConfig {\n  readonly model: string;\n  readonly effort: CodexReasoningEffort;\n}\n\n/**\n * Default values for Shipyard's built-in Codex roles.\n *\n * Runtime environment variables override these defaults:\n *   SHIPYARD_CODEX_ROUTINE_MODEL\n *   SHIPYARD_CODEX_ROUTINE_REASONING_EFFORT\n *   SHIPYARD_CODEX_STRONG_MODEL\n *   SHIPYARD_CODEX_STRONG_REASONING_EFFORT\n *\n * Keep the defaults here so runtime providers, generated templates, and the\n * repository workflows all use the same role definitions.\n */\nconst DEFAULT_CODEX_MODELS = {\n  routine: { model: \"gpt-5.6-luna\", effort: \"max\" },\n  strong: { model: \"gpt-5.6-sol\", effort: \"max\" },\n} as const satisfies Record<string, CodexModelConfig>;\n\nconst readModel = (role: keyof typeof DEFAULT_CODEX_MODELS): string =>\n  process.env[`SHIPYARD_CODEX_${role.toUpperCase()}_MODEL`]?.trim() ||\n  DEFAULT_CODEX_MODELS[role].model;\n\nconst readEffort = (\n  role: keyof typeof DEFAULT_CODEX_MODELS,\n): CodexReasoningEffort => {\n  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_REASONING_EFFORT`;\n  const value = process.env[envName]?.trim();\n  if (!value) return DEFAULT_CODEX_MODELS[role].effort;\n  if ((CODEX_REASONING_EFFORTS as readonly string[]).includes(value)) {\n    return value as CodexReasoningEffort;\n  }\n  throw new Error(\n    `${envName} must be one of ${CODEX_REASONING_EFFORTS.join(\", \")}; received \"${value}\"`,\n  );\n};\n\nexport const CODEX_MODELS = {\n  routine: {\n    model: readModel(\"routine\"),\n    effort: readEffort(\"routine\"),\n  },\n  strong: {\n    model: readModel(\"strong\"),\n    effort: readEffort(\"strong\"),\n  },\n} as const satisfies Record<string, CodexModelConfig>;\n","import { FileSystem } from \"@effect/platform\";\nimport { Effect } from \"effect\";\nimport { join } from \"node:path\";\n\nimport { ConfigDirError } from \"./errors.js\";\nimport { assertNoSymlinkComponents } from \"./pathSecurity.js\";\nimport { CONFIG_DIR } from \"./runtimeNames.js\";\n\nconst parseEnvFile = (\n  filePath: string,\n): Effect.Effect<Record<string, string>, never, FileSystem.FileSystem> =>\n  Effect.gen(function* () {\n    const fs = yield* FileSystem.FileSystem;\n    const symlink = yield* fs.readLink(filePath).pipe(\n      Effect.map(() => true),\n      Effect.catchAll(() => Effect.succeed(false)),\n    );\n    // A repository-controlled symlink could redirect this read to a host\n    // secret and then expose matching keys to the agent.\n    if (symlink) return {};\n    const content = yield* fs\n      .readFileString(filePath)\n      .pipe(Effect.catchAll(() => Effect.succeed(null)));\n    if (content === null) return {};\n    const vars: Record<string, string> = {};\n    for (const line of content.split(\"\\n\")) {\n      const trimmed = line.trim();\n      if (!trimmed || trimmed.startsWith(\"#\")) continue;\n      const eqIndex = trimmed.indexOf(\"=\");\n      if (eqIndex === -1) continue;\n      const key = trimmed.slice(0, eqIndex).trim();\n      let value = trimmed.slice(eqIndex + 1).trim();\n      const isDoubleQuoted =\n        value.length >= 2 &&\n        value[0] === '\"' &&\n        value[value.length - 1] === '\"';\n      const isSingleQuoted =\n        value.length >= 2 &&\n        value[0] === \"'\" &&\n        value[value.length - 1] === \"'\";\n      if (isDoubleQuoted || isSingleQuoted) {\n        value = value.slice(1, -1);\n      }\n      if (isDoubleQuoted) {\n        value = value.replace(/\\\\([nrt\\\\])/g, (_, ch: string) => {\n          const escapes: Record<string, string> = {\n            n: \"\\n\",\n            r: \"\\r\",\n            t: \"\\t\",\n            \"\\\\\": \"\\\\\",\n          };\n          return escapes[ch] ?? ch;\n        });\n      }\n      vars[key] = value;\n    }\n    return vars;\n  });\n\n/**\n * Resolve all env vars from .env files with process.env fallback.\n *\n * Precedence: .shipyard/.env > process.env\n * Only keys declared in .shipyard/.env are resolved from process.env.\n * Repo root .env is not part of the resolution chain.\n */\nexport const resolveEnv = (\n  repoDir: string,\n): Effect.Effect<\n  Record<string, string>,\n  ConfigDirError,\n  FileSystem.FileSystem\n> =>\n  Effect.gen(function* () {\n    const configDir = join(repoDir, CONFIG_DIR);\n    const envPath = join(configDir, \".env\");\n    yield* Effect.tryPromise({\n      try: () =>\n        assertNoSymlinkComponents(repoDir, envPath, \"environment file\"),\n      catch: (e) =>\n        new ConfigDirError({\n          message: `Refusing symlinked environment path: ${e instanceof Error ? e.message : String(e)}`,\n        }),\n    });\n    const shipyardEnv = yield* parseEnvFile(envPath);\n\n    const result: Record<string, string> = {};\n    for (const key of Object.keys(shipyardEnv)) {\n      // A blank placeholder falls back to process.env, so callers can source\n      // credentials from a host login for one invocation, e.g.\n      // `GH_TOKEN=\"$(gh auth token)\" npx shipyard run`. Only keys declared in\n      // .shipyard/.env are eligible for this fallback.\n      const value = shipyardEnv[key] || process.env[key];\n      if (value) {\n        result[key] = value;\n      }\n    }\n\n    return result;\n  });\n","import { lstat, readdir, rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { CONFIG_DIR, LOGS_DIR } from \"./runtimeNames.js\";\n\n/** The default age threshold for automatic run-log purges. */\nexport const DEFAULT_LOG_RETENTION_DAYS = 8;\n\nconst LOG_DIRECTORY_PATTERN = /^(\\d{4})-(\\d{2})-(\\d{2})$/;\n\n/** Build the local calendar date directory used for default run logs. */\nexport const buildLogDirectoryName = (date: Date = new Date()): string => {\n  if (Number.isNaN(date.getTime())) {\n    throw new Error(\"Cannot build a log directory name from an invalid date.\");\n  }\n  const pad = (value: number): string => String(value).padStart(2, \"0\");\n  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;\n};\n\nconst parseLogDirectoryDate = (name: string): Date | undefined => {\n  const match = LOG_DIRECTORY_PATTERN.exec(name);\n  if (!match) return undefined;\n\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const date = new Date(year, month - 1, day);\n  return date.getFullYear() === year &&\n    date.getMonth() === month - 1 &&\n    date.getDate() === day\n    ? date\n    : undefined;\n};\n\nconst validateRetentionDays = (retentionDays: number): void => {\n  if (!Number.isSafeInteger(retentionDays) || retentionDays < 0) {\n    throw new Error(\"Log retention days must be a non-negative integer.\");\n  }\n};\n\nexport interface PurgeRunLogsOptions {\n  /** Host repository containing `.shipyard/logs/`. */\n  readonly repoDir: string;\n  /** Remove run logs strictly older than this many calendar days. Omit to remove every default run log. */\n  readonly retentionDays?: number;\n  /** Local time used to calculate the cutoff. Primarily useful for tests. */\n  readonly now?: Date;\n}\n\nexport interface PurgeRunLogsResult {\n  readonly logsDir: string;\n  readonly retentionDays?: number;\n  /** Dated directories on or after this local date are retained when age-based purging is used. */\n  readonly cutoffDate?: string;\n  readonly scannedDirectories: number;\n  readonly removedCount: number;\n  /** Directory names removed from `logsDir`, without the parent path. */\n  readonly removedDirectories: readonly string[];\n  /** Root-level log filenames removed from `logsDir`. */\n  readonly removedFiles: readonly string[];\n}\n\n/**\n * Remove default run logs, either all of them or only those older than an\n * explicit retention threshold.\n *\n * Dated default run-log directories and regular root-level `.log` files inside\n * the managed logs directory are considered. Other files, malformed directory\n * names, and symlink entries are left alone.\n */\nexport const purgeRunLogs = async (\n  options: PurgeRunLogsOptions,\n): Promise<PurgeRunLogsResult> => {\n  const retentionDays = options.retentionDays;\n  if (retentionDays !== undefined) validateRetentionDays(retentionDays);\n\n  const now = options.now ?? new Date();\n  if (retentionDays !== undefined && Number.isNaN(now.getTime())) {\n    throw new Error(\"Cannot purge logs using an invalid date.\");\n  }\n  const cutoff =\n    retentionDays === undefined\n      ? undefined\n      : new Date(\n          now.getFullYear(),\n          now.getMonth(),\n          now.getDate() - retentionDays,\n        );\n  const cutoffDate =\n    cutoff === undefined ? undefined : buildLogDirectoryName(cutoff);\n  const logsDir = join(options.repoDir, CONFIG_DIR, LOGS_DIR);\n\n  let entries;\n  try {\n    entries = await readdir(logsDir, { withFileTypes: true });\n  } catch (error) {\n    if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") {\n      return {\n        logsDir,\n        ...(retentionDays === undefined ? {} : { retentionDays, cutoffDate }),\n        scannedDirectories: 0,\n        removedCount: 0,\n        removedDirectories: [],\n        removedFiles: [],\n      };\n    }\n    throw error;\n  }\n\n  const removedDirectories: string[] = [];\n  const removedFiles: string[] = [];\n  let scannedDirectories = 0;\n  for (const entry of entries) {\n    const entryPath = join(logsDir, entry.name);\n    if (entry.isFile() && entry.name.endsWith(\".log\")) {\n      const file = await lstat(entryPath);\n      if (file.isFile() && (cutoff === undefined || file.mtime < cutoff)) {\n        await rm(entryPath, { force: true });\n        removedFiles.push(entry.name);\n      }\n      continue;\n    }\n    if (!entry.isDirectory()) continue;\n    const directoryDate = parseLogDirectoryDate(entry.name);\n    if (directoryDate === undefined) continue;\n    scannedDirectories += 1;\n    if (cutoff !== undefined && directoryDate >= cutoff) continue;\n\n    await rm(entryPath, { recursive: true, force: true });\n    removedDirectories.push(entry.name);\n  }\n\n  return {\n    logsDir,\n    ...(retentionDays === undefined ? {} : { retentionDays, cutoffDate }),\n    scannedDirectories,\n    removedCount: removedDirectories.length + removedFiles.length,\n    removedDirectories,\n    removedFiles,\n  };\n};\n"]}
+{"version":3,"sources":["../src/ErrorHandler.ts","../src/modelConfig.ts","../src/EnvResolver.ts","../src/LogRetention.ts"],"names":["Effect","join"],"mappings":";;;;;;AAQO,IAAM,kBAAA,GAAqB,CAAC,KAAA,KAAgC;AACjE,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAO,CAAA,GAAA,EAAM,MAAM,OAAO,CAAA,CAAA;AAAA,IACvE,KAAK,eAAA;AACH,MAAA,OAAO,CAAA,wBAAA,EAA2B,KAAA,CAAM,OAAO,CAAA,GAAA,EAAM,MAAM,OAAO,CAAA,CAAA;AAAA,IACpE,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,kBAAA,EAAqB,MAAM,OAAO,CAAA,CAAA;AAAA,IAC3C,KAAK,aAAA;AACH,MAAA,OAAO,CAAA,yBAAA,EAA4B,MAAM,OAAO,CAAA,oBAAA,CAAA;AAAA,IAClD,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,iBAAA,EAAoB,MAAM,OAAO,CAAA,CAAA;AAAA,IAC1C,KAAK,eAAA;AACH,MAAA,OAAO,CAAA,+BAAA,EAAkC,MAAM,OAAO,CAAA,CAAA;AAAA,IACxD,KAAK,aAAA;AACH,MAAA,OAAO,CAAA,0BAAA,EAA6B,MAAM,OAAO,CAAA,CAAA;AAAA,IACnD,KAAK,YAAA;AACH,MAAA,OAAO,CAAA,yBAAA,EAA4B,MAAM,OAAO,CAAA,CAAA;AAAA,IAClD,KAAK,gBAAA;AACH,MAAA,OAAO,CAAA,EAAG,MAAM,OAAO,CAAA,CAAA;AAAA,IACzB,KAAK,WAAA;AACH,MAAA,OAAO,CAAA,EAAG,MAAM,OAAO,CAAA,CAAA;AAAA,IACzB,KAAK,uBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,oBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,UAAA;AACH,MAAA,OAAO,KAAA,CAAM,OAAA;AAAA;AAEnB;AAEA,IAAM,gBAAA,GAAmB,CAAC,KAAA,KACxB,MAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,IAAI,OAAO,OAAA;AACjB,EAAA,OAAO,CAAA,CAAE,MAAA,CAAO,kBAAA,CAAmB,KAAK,GAAG,OAAO,CAAA;AAClD,EAAA,OAAO,OAAO,MAAA,CAAO,IAAA,CAAK,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAU,CAAA;AAC1D,CAAC,CAAA;AAOI,IAAM,qBAAqB,CAChC,MAAA;AAAA;AAAA,EAGA,MAAA,CAAO,UAAU,MAAA,EAA6C;AAAA,IAC5D,SAAA,EAAW,gBAAA;AAAA,IACX,aAAA,EAAe,gBAAA;AAAA,IACf,SAAA,EAAW,gBAAA;AAAA,IACX,WAAA,EAAa,gBAAA;AAAA,IACb,SAAA,EAAW,gBAAA;AAAA,IACX,aAAA,EAAe,gBAAA;AAAA,IACf,WAAA,EAAa,gBAAA;AAAA,IACb,UAAA,EAAY,gBAAA;AAAA,IACZ,cAAA,EAAgB,gBAAA;AAAA,IAChB,SAAA,EAAW,gBAAA;AAAA,IACX,qBAAA,EAAuB,gBAAA;AAAA,IACvB,oBAAA,EAAsB,gBAAA;AAAA,IACtB,0BAAA,EAA4B,gBAAA;AAAA,IAC5B,0BAAA,EAA4B,gBAAA;AAAA,IAC5B,mBAAA,EAAqB,gBAAA;AAAA,IACrB,kBAAA,EAAoB,gBAAA;AAAA,IACpB,gBAAA,EAAkB,gBAAA;AAAA,IAClB,oBAAA,EAAsB,gBAAA;AAAA,IACtB,2BAAA,EAA6B,gBAAA;AAAA,IAC7B,4BAAA,EAA8B,gBAAA;AAAA,IAC9B,uBAAA,EAAyB,gBAAA;AAAA,IACzB,mBAAA,EAAqB,gBAAA;AAAA,IACrB,QAAA,EAAU;AAAA,GACX;AAAA;;;ACtFI,IAAM,uBAAA,GAA0B;AAAA,EACrC,KAAA;AAAA,EACA,QAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAsBA,IAAM,oBAAA,GAAuB;AAAA,EAC3B,OAAA,EAAS,EAAE,KAAA,EAAO,cAAA,EAAgB,QAAQ,KAAA,EAAM;AAAA,EAChD,MAAA,EAAQ,EAAE,KAAA,EAAO,aAAA,EAAe,QAAQ,KAAA;AAC1C,CAAA;AAEA,IAAM,SAAA,GAAY,CAAC,IAAA,KACjB,OAAA,CAAQ,IAAI,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAA,EAAa,QAAQ,CAAA,EAAG,IAAA,EAAK,IAChE,oBAAA,CAAqB,IAAI,CAAA,CAAE,KAAA;AAE7B,IAAM,UAAA,GAAa,CACjB,IAAA,KACyB;AACzB,EAAA,MAAM,OAAA,GAAU,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAA,EAAa,CAAA,iBAAA,CAAA;AACpD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,OAAO,GAAG,IAAA,EAAK;AACzC,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,oBAAA,CAAqB,IAAI,CAAA,CAAE,MAAA;AAC9C,EAAA,IAAK,uBAAA,CAA8C,QAAA,CAAS,KAAK,CAAA,EAAG;AAClE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,CAAA,EAAG,OAAO,CAAA,gBAAA,EAAmB,uBAAA,CAAwB,KAAK,IAAI,CAAC,eAAe,KAAK,CAAA,CAAA;AAAA,GACrF;AACF,CAAA;AAEO,IAAM,YAAA,GAAe;AAAA,EAC1B,OAAA,EAAS;AAAA,IACP,KAAA,EAAO,UAAU,SAAS,CAAA;AAAA,IAC1B,MAAA,EAAQ,WAAW,SAAS;AAAA,GAC9B;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,KAAA,EAAO,UAAU,QAAQ,CAAA;AAAA,IACzB,MAAA,EAAQ,WAAW,QAAQ;AAAA;AAE/B;ACrDA,IAAM,YAAA,GAAe,CACnB,QAAA,KAEAA,MAAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,EAAA,GAAK,OAAO,UAAA,CAAW,UAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,OAAO,EAAA,CAAG,QAAA,CAAS,QAAQ,CAAA,CAAE,IAAA;AAAA,IAC3CA,MAAAA,CAAO,GAAA,CAAI,MAAM,IAAI,CAAA;AAAA,IACrBA,OAAO,QAAA,CAAS,MAAMA,MAAAA,CAAO,OAAA,CAAQ,KAAK,CAAC;AAAA,GAC7C;AAGA,EAAA,IAAI,OAAA,SAAgB,EAAC;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,EAAA,CACpB,cAAA,CAAe,QAAQ,CAAA,CACvB,IAAA,CAAKA,MAAAA,CAAO,QAAA,CAAS,MAAMA,MAAAA,CAAO,OAAA,CAAQ,IAAI,CAAC,CAAC,CAAA;AACnD,EAAA,IAAI,OAAA,KAAY,IAAA,EAAM,OAAO,EAAC;AAC9B,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,EAAG;AACtC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACzC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACnC,IAAA,IAAI,YAAY,EAAA,EAAI;AACpB,IAAA,MAAM,MAAM,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,OAAO,EAAE,IAAA,EAAK;AAC3C,IAAA,IAAI,QAAQ,OAAA,CAAQ,KAAA,CAAM,OAAA,GAAU,CAAC,EAAE,IAAA,EAAK;AAC5C,IAAA,MAAM,cAAA,GACJ,KAAA,CAAM,MAAA,IAAU,CAAA,IAChB,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,IACb,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,KAAM,GAAA;AAC9B,IAAA,MAAM,cAAA,GACJ,KAAA,CAAM,MAAA,IAAU,CAAA,IAChB,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,IACb,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,KAAM,GAAA;AAC9B,IAAA,IAAI,kBAAkB,cAAA,EAAgB;AACpC,MAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,cAAA,EAAgB,CAAC,GAAG,EAAA,KAAe;AACvD,QAAA,MAAM,OAAA,GAAkC;AAAA,UACtC,CAAA,EAAG,IAAA;AAAA,UACH,CAAA,EAAG,IAAA;AAAA,UACH,CAAA,EAAG,GAAA;AAAA,UACH,IAAA,EAAM;AAAA,SACR;AACA,QAAA,OAAO,OAAA,CAAQ,EAAE,CAAA,IAAK,EAAA;AAAA,MACxB,CAAC,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACd;AACA,EAAA,OAAO,IAAA;AACT,CAAC,CAAA;AASI,IAAM,UAAA,GAAa,CACxB,OAAA,KAMAA,MAAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,OAAA,EAAS,UAAU,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,EAAW,MAAM,CAAA;AACtC,EAAA,OAAOA,OAAO,UAAA,CAAW;AAAA,IACvB,GAAA,EAAK,MACH,yBAAA,CAA0B,OAAA,EAAS,SAAS,kBAAkB,CAAA;AAAA,IAChE,KAAA,EAAO,CAAC,CAAA,KACN,IAAI,cAAA,CAAe;AAAA,MACjB,OAAA,EAAS,wCAAwC,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,KAC5F;AAAA,GACJ,CAAA;AACD,EAAA,MAAM,WAAA,GAAc,OAAO,YAAA,CAAa,OAAO,CAAA;AAE/C,EAAA,MAAM,SAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG;AAK1C,IAAA,MAAM,QAAQ,WAAA,CAAY,GAAG,CAAA,IAAK,OAAA,CAAQ,IAAI,GAAG,CAAA;AACjD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,IAChB;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT,CAAC;AC9FI,IAAM,0BAAA,GAA6B;AAE1C,IAAM,qBAAA,GAAwB,2BAAA;AAGvB,IAAM,qBAAA,GAAwB,CAAC,IAAA,mBAAa,IAAI,MAAK,KAAc;AACxE,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,OAAA,EAAS,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,EAC3E;AACA,EAAA,MAAM,GAAA,GAAM,CAAC,KAAA,KAA0B,MAAA,CAAO,KAAK,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpE,EAAA,OAAO,GAAG,IAAA,CAAK,WAAA,EAAa,CAAA,CAAA,EAAI,IAAI,IAAA,CAAK,QAAA,EAAS,GAAI,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,CAAC,CAAA,CAAA;AACjF;AAEA,IAAM,qBAAA,GAAwB,CAAC,IAAA,KAAmC;AAChE,EAAA,MAAM,KAAA,GAAQ,qBAAA,CAAsB,IAAA,CAAK,IAAI,CAAA;AAC7C,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAEnB,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC5B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC3B,EAAA,MAAM,OAAO,IAAI,IAAA,CAAK,IAAA,EAAM,KAAA,GAAQ,GAAG,GAAG,CAAA;AAC1C,EAAA,OAAO,IAAA,CAAK,WAAA,EAAY,KAAM,IAAA,IAC5B,IAAA,CAAK,QAAA,EAAS,KAAM,KAAA,GAAQ,CAAA,IAC5B,IAAA,CAAK,OAAA,EAAQ,KAAM,MACjB,IAAA,GACA,MAAA;AACN,CAAA;AAEA,IAAM,qBAAA,GAAwB,CAAC,aAAA,KAAgC;AAC7D,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,aAAa,CAAA,IAAK,gBAAgB,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACF,CAAA;AAgCO,IAAM,YAAA,GAAe,OAC1B,OAAA,KACgC;AAChC,EAAA,MAAM,gBAAgB,OAAA,CAAQ,aAAA;AAC9B,EAAA,IAAI,aAAA,KAAkB,MAAA,EAAW,qBAAA,CAAsB,aAAa,CAAA;AAEpE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,IAAI,kBAAkB,MAAA,IAAa,MAAA,CAAO,MAAM,GAAA,CAAI,OAAA,EAAS,CAAA,EAAG;AAC9D,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AACA,EAAA,MAAM,MAAA,GACJ,aAAA,KAAkB,MAAA,GACd,MAAA,GACA,IAAI,IAAA;AAAA,IACF,IAAI,WAAA,EAAY;AAAA,IAChB,IAAI,QAAA,EAAS;AAAA,IACb,GAAA,CAAI,SAAQ,GAAI;AAAA,GAClB;AACN,EAAA,MAAM,UAAA,GACJ,MAAA,KAAW,MAAA,GAAY,MAAA,GAAY,sBAAsB,MAAM,CAAA;AACjE,EAAA,MAAM,OAAA,GAAUC,IAAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,YAAY,QAAQ,CAAA;AAE1D,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,EAAS,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EAC1D,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,iBAAiB,KAAA,IAAS,MAAA,IAAU,KAAA,IAAS,KAAA,CAAM,SAAS,QAAA,EAAU;AACxE,MAAA,OAAO;AAAA,QACL,OAAA;AAAA,QACA,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAC,GAAI,EAAE,eAAe,UAAA,EAAW;AAAA,QACnE,kBAAA,EAAoB,CAAA;AAAA,QACpB,YAAA,EAAc,CAAA;AAAA,QACd,oBAAoB,EAAC;AAAA,QACrB,cAAc;AAAC,OACjB;AAAA,IACF;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AAEA,EAAA,MAAM,qBAA+B,EAAC;AACtC,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,IAAI,kBAAA,GAAqB,CAAA;AACzB,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,MAAM,SAAA,GAAYA,IAAAA,CAAK,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AAC1C,IAAA,IAAI,MAAM,MAAA,EAAO,IAAK,MAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,EAAG;AACjD,MAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,SAAS,CAAA;AAClC,MAAA,IAAI,KAAK,MAAA,EAAO,KAAM,WAAW,MAAA,IAAa,IAAA,CAAK,QAAQ,MAAA,CAAA,EAAS;AAClE,QAAA,MAAM,EAAA,CAAG,SAAA,EAAW,EAAE,KAAA,EAAO,MAAM,CAAA;AACnC,QAAA,YAAA,CAAa,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,MAC9B;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,KAAA,CAAM,WAAA,EAAY,EAAG;AAC1B,IAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,KAAA,CAAM,IAAI,CAAA;AACtD,IAAA,IAAI,kBAAkB,MAAA,EAAW;AACjC,IAAA,kBAAA,IAAsB,CAAA;AACtB,IAAA,IAAI,MAAA,KAAW,MAAA,IAAa,aAAA,IAAiB,MAAA,EAAQ;AAErD,IAAA,MAAM,GAAG,SAAA,EAAW,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACpD,IAAA,kBAAA,CAAmB,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACpC;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAC,GAAI,EAAE,eAAe,UAAA,EAAW;AAAA,IACnE,kBAAA;AAAA,IACA,YAAA,EAAc,kBAAA,CAAmB,MAAA,GAAS,YAAA,CAAa,MAAA;AAAA,IACvD,kBAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-56TDSWFU.js","sourcesContent":["import { Effect } from \"effect\";\nimport { Display } from \"./Display.js\";\nimport type { SandboxError } from \"./errors.js\";\n\n/**\n * Formats a tagged SandboxError into a user-friendly message with\n * context-specific hints about what went wrong and how to recover.\n */\nexport const formatErrorMessage = (error: SandboxError): string => {\n  switch (error._tag) {\n    case \"ExecError\":\n      return `Command failed in sandbox (${error.command}): ${error.message}`;\n    case \"ExecHostError\":\n      return `Command failed on host (${error.command}): ${error.message}`;\n    case \"CopyError\":\n      return `File copy failed: ${error.message}`;\n    case \"DockerError\":\n      return `Docker operation failed: ${error.message}. Is Docker running?`;\n    case \"SyncError\":\n      return `Git sync failed: ${error.message}`;\n    case \"WorktreeError\":\n      return `Git worktree operation failed: ${error.message}`;\n    case \"PromptError\":\n      return `Failed to resolve prompt: ${error.message}`;\n    case \"AgentError\":\n      return `Agent invocation failed: ${error.message}`;\n    case \"ConfigDirError\":\n      return `${error.message}`;\n    case \"InitError\":\n      return `${error.message}`;\n    case \"AgentIdleTimeoutError\":\n    case \"WorktreeTimeoutError\":\n    case \"ContainerStartTimeoutError\":\n    case \"CopyToWorktreeTimeoutError\":\n    case \"CopyToWorktreeError\":\n    case \"SyncInTimeoutError\":\n    case \"HookTimeoutError\":\n    case \"GitSetupTimeoutError\":\n    case \"PromptExpansionTimeoutError\":\n    case \"CommitCollectionTimeoutError\":\n    case \"MergeToHostTimeoutError\":\n    case \"SessionCaptureError\":\n    case \"CwdError\":\n      return error.message;\n  }\n};\n\nconst showErrorAndExit = (error: SandboxError) =>\n  Effect.gen(function* () {\n    const d = yield* Display;\n    yield* d.status(formatErrorMessage(error), \"error\");\n    return yield* Effect.sync(() => process.exit(1) as never);\n  });\n\n/**\n * Wraps an effect so that any SandboxError is caught, displayed via the\n * Display service as an error-severity status message, then exits the process\n * with code 1. Non-SandboxError errors pass through unchanged.\n */\nexport const withFriendlyErrors = <A, E, R>(\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, Exclude<E, SandboxError>, R | Display> =>\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  Effect.catchTags(effect as Effect.Effect<A, SandboxError, R>, {\n    ExecError: showErrorAndExit,\n    ExecHostError: showErrorAndExit,\n    CopyError: showErrorAndExit,\n    DockerError: showErrorAndExit,\n    SyncError: showErrorAndExit,\n    WorktreeError: showErrorAndExit,\n    PromptError: showErrorAndExit,\n    AgentError: showErrorAndExit,\n    ConfigDirError: showErrorAndExit,\n    InitError: showErrorAndExit,\n    AgentIdleTimeoutError: showErrorAndExit,\n    WorktreeTimeoutError: showErrorAndExit,\n    ContainerStartTimeoutError: showErrorAndExit,\n    CopyToWorktreeTimeoutError: showErrorAndExit,\n    CopyToWorktreeError: showErrorAndExit,\n    SyncInTimeoutError: showErrorAndExit,\n    HookTimeoutError: showErrorAndExit,\n    GitSetupTimeoutError: showErrorAndExit,\n    PromptExpansionTimeoutError: showErrorAndExit,\n    CommitCollectionTimeoutError: showErrorAndExit,\n    MergeToHostTimeoutError: showErrorAndExit,\n    SessionCaptureError: showErrorAndExit,\n    CwdError: showErrorAndExit,\n  }) as Effect.Effect<A, Exclude<E, SandboxError>, R | Display>;\n","/** Reasoning efforts accepted by the Codex CLI. */\nexport const CODEX_REASONING_EFFORTS = [\n  \"low\",\n  \"medium\",\n  \"high\",\n  \"xhigh\",\n  \"max\",\n] as const;\n\nexport type CodexReasoningEffort = (typeof CODEX_REASONING_EFFORTS)[number];\n\n/** A model identifier plus the reasoning policy used for that model role. */\nexport interface CodexModelConfig {\n  readonly model: string;\n  readonly effort: CodexReasoningEffort;\n}\n\n/**\n * Default values for Shipyard's built-in Codex roles.\n *\n * Runtime environment variables override these defaults:\n *   SHIPYARD_CODEX_ROUTINE_MODEL\n *   SHIPYARD_CODEX_ROUTINE_REASONING_EFFORT\n *   SHIPYARD_CODEX_STRONG_MODEL\n *   SHIPYARD_CODEX_STRONG_REASONING_EFFORT\n *\n * Keep the defaults here so runtime providers, generated templates, and the\n * repository workflows all use the same role definitions.\n */\nconst DEFAULT_CODEX_MODELS = {\n  routine: { model: \"gpt-5.6-luna\", effort: \"max\" },\n  strong: { model: \"gpt-5.6-sol\", effort: \"max\" },\n} as const satisfies Record<string, CodexModelConfig>;\n\nconst readModel = (role: keyof typeof DEFAULT_CODEX_MODELS): string =>\n  process.env[`SHIPYARD_CODEX_${role.toUpperCase()}_MODEL`]?.trim() ||\n  DEFAULT_CODEX_MODELS[role].model;\n\nconst readEffort = (\n  role: keyof typeof DEFAULT_CODEX_MODELS,\n): CodexReasoningEffort => {\n  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_REASONING_EFFORT`;\n  const value = process.env[envName]?.trim();\n  if (!value) return DEFAULT_CODEX_MODELS[role].effort;\n  if ((CODEX_REASONING_EFFORTS as readonly string[]).includes(value)) {\n    return value as CodexReasoningEffort;\n  }\n  throw new Error(\n    `${envName} must be one of ${CODEX_REASONING_EFFORTS.join(\", \")}; received \"${value}\"`,\n  );\n};\n\nexport const CODEX_MODELS = {\n  routine: {\n    model: readModel(\"routine\"),\n    effort: readEffort(\"routine\"),\n  },\n  strong: {\n    model: readModel(\"strong\"),\n    effort: readEffort(\"strong\"),\n  },\n} as const satisfies Record<string, CodexModelConfig>;\n","import { FileSystem } from \"@effect/platform\";\nimport { Effect } from \"effect\";\nimport { join } from \"node:path\";\n\nimport { ConfigDirError } from \"./errors.js\";\nimport { assertNoSymlinkComponents } from \"./pathSecurity.js\";\nimport { CONFIG_DIR } from \"./runtimeNames.js\";\n\nconst parseEnvFile = (\n  filePath: string,\n): Effect.Effect<Record<string, string>, never, FileSystem.FileSystem> =>\n  Effect.gen(function* () {\n    const fs = yield* FileSystem.FileSystem;\n    const symlink = yield* fs.readLink(filePath).pipe(\n      Effect.map(() => true),\n      Effect.catchAll(() => Effect.succeed(false)),\n    );\n    // A repository-controlled symlink could redirect this read to a host\n    // secret and then expose matching keys to the agent.\n    if (symlink) return {};\n    const content = yield* fs\n      .readFileString(filePath)\n      .pipe(Effect.catchAll(() => Effect.succeed(null)));\n    if (content === null) return {};\n    const vars: Record<string, string> = {};\n    for (const line of content.split(\"\\n\")) {\n      const trimmed = line.trim();\n      if (!trimmed || trimmed.startsWith(\"#\")) continue;\n      const eqIndex = trimmed.indexOf(\"=\");\n      if (eqIndex === -1) continue;\n      const key = trimmed.slice(0, eqIndex).trim();\n      let value = trimmed.slice(eqIndex + 1).trim();\n      const isDoubleQuoted =\n        value.length >= 2 &&\n        value[0] === '\"' &&\n        value[value.length - 1] === '\"';\n      const isSingleQuoted =\n        value.length >= 2 &&\n        value[0] === \"'\" &&\n        value[value.length - 1] === \"'\";\n      if (isDoubleQuoted || isSingleQuoted) {\n        value = value.slice(1, -1);\n      }\n      if (isDoubleQuoted) {\n        value = value.replace(/\\\\([nrt\\\\])/g, (_, ch: string) => {\n          const escapes: Record<string, string> = {\n            n: \"\\n\",\n            r: \"\\r\",\n            t: \"\\t\",\n            \"\\\\\": \"\\\\\",\n          };\n          return escapes[ch] ?? ch;\n        });\n      }\n      vars[key] = value;\n    }\n    return vars;\n  });\n\n/**\n * Resolve all env vars from .env files with process.env fallback.\n *\n * Precedence: .shipyard/.env > process.env\n * Only keys declared in .shipyard/.env are resolved from process.env.\n * Repo root .env is not part of the resolution chain.\n */\nexport const resolveEnv = (\n  repoDir: string,\n): Effect.Effect<\n  Record<string, string>,\n  ConfigDirError,\n  FileSystem.FileSystem\n> =>\n  Effect.gen(function* () {\n    const configDir = join(repoDir, CONFIG_DIR);\n    const envPath = join(configDir, \".env\");\n    yield* Effect.tryPromise({\n      try: () =>\n        assertNoSymlinkComponents(repoDir, envPath, \"environment file\"),\n      catch: (e) =>\n        new ConfigDirError({\n          message: `Refusing symlinked environment path: ${e instanceof Error ? e.message : String(e)}`,\n        }),\n    });\n    const shipyardEnv = yield* parseEnvFile(envPath);\n\n    const result: Record<string, string> = {};\n    for (const key of Object.keys(shipyardEnv)) {\n      // A blank placeholder falls back to process.env, so callers can source\n      // credentials from a host login for one invocation, e.g.\n      // `GH_TOKEN=\"$(gh auth token)\" npx shipyard run`. Only keys declared in\n      // .shipyard/.env are eligible for this fallback.\n      const value = shipyardEnv[key] || process.env[key];\n      if (value) {\n        result[key] = value;\n      }\n    }\n\n    return result;\n  });\n","import { lstat, readdir, rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { CONFIG_DIR, LOGS_DIR } from \"./runtimeNames.js\";\n\n/** The default age threshold for automatic run-log purges. */\nexport const DEFAULT_LOG_RETENTION_DAYS = 8;\n\nconst LOG_DIRECTORY_PATTERN = /^(\\d{4})-(\\d{2})-(\\d{2})$/;\n\n/** Build the local calendar date directory used for default run logs. */\nexport const buildLogDirectoryName = (date: Date = new Date()): string => {\n  if (Number.isNaN(date.getTime())) {\n    throw new Error(\"Cannot build a log directory name from an invalid date.\");\n  }\n  const pad = (value: number): string => String(value).padStart(2, \"0\");\n  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}`;\n};\n\nconst parseLogDirectoryDate = (name: string): Date | undefined => {\n  const match = LOG_DIRECTORY_PATTERN.exec(name);\n  if (!match) return undefined;\n\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const date = new Date(year, month - 1, day);\n  return date.getFullYear() === year &&\n    date.getMonth() === month - 1 &&\n    date.getDate() === day\n    ? date\n    : undefined;\n};\n\nconst validateRetentionDays = (retentionDays: number): void => {\n  if (!Number.isSafeInteger(retentionDays) || retentionDays < 0) {\n    throw new Error(\"Log retention days must be a non-negative integer.\");\n  }\n};\n\nexport interface PurgeRunLogsOptions {\n  /** Host repository containing `.shipyard/logs/`. */\n  readonly repoDir: string;\n  /** Remove run logs strictly older than this many calendar days. Omit to remove every default run log. */\n  readonly retentionDays?: number;\n  /** Local time used to calculate the cutoff. Primarily useful for tests. */\n  readonly now?: Date;\n}\n\nexport interface PurgeRunLogsResult {\n  readonly logsDir: string;\n  readonly retentionDays?: number;\n  /** Dated directories on or after this local date are retained when age-based purging is used. */\n  readonly cutoffDate?: string;\n  readonly scannedDirectories: number;\n  readonly removedCount: number;\n  /** Directory names removed from `logsDir`, without the parent path. */\n  readonly removedDirectories: readonly string[];\n  /** Root-level log filenames removed from `logsDir`. */\n  readonly removedFiles: readonly string[];\n}\n\n/**\n * Remove default run logs, either all of them or only those older than an\n * explicit retention threshold.\n *\n * Dated default run-log directories and regular root-level `.log` files inside\n * the managed logs directory are considered. Other files, malformed directory\n * names, and symlink entries are left alone.\n */\nexport const purgeRunLogs = async (\n  options: PurgeRunLogsOptions,\n): Promise<PurgeRunLogsResult> => {\n  const retentionDays = options.retentionDays;\n  if (retentionDays !== undefined) validateRetentionDays(retentionDays);\n\n  const now = options.now ?? new Date();\n  if (retentionDays !== undefined && Number.isNaN(now.getTime())) {\n    throw new Error(\"Cannot purge logs using an invalid date.\");\n  }\n  const cutoff =\n    retentionDays === undefined\n      ? undefined\n      : new Date(\n          now.getFullYear(),\n          now.getMonth(),\n          now.getDate() - retentionDays,\n        );\n  const cutoffDate =\n    cutoff === undefined ? undefined : buildLogDirectoryName(cutoff);\n  const logsDir = join(options.repoDir, CONFIG_DIR, LOGS_DIR);\n\n  let entries;\n  try {\n    entries = await readdir(logsDir, { withFileTypes: true });\n  } catch (error) {\n    if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") {\n      return {\n        logsDir,\n        ...(retentionDays === undefined ? {} : { retentionDays, cutoffDate }),\n        scannedDirectories: 0,\n        removedCount: 0,\n        removedDirectories: [],\n        removedFiles: [],\n      };\n    }\n    throw error;\n  }\n\n  const removedDirectories: string[] = [];\n  const removedFiles: string[] = [];\n  let scannedDirectories = 0;\n  for (const entry of entries) {\n    const entryPath = join(logsDir, entry.name);\n    if (entry.isFile() && entry.name.endsWith(\".log\")) {\n      const file = await lstat(entryPath);\n      if (file.isFile() && (cutoff === undefined || file.mtime < cutoff)) {\n        await rm(entryPath, { force: true });\n        removedFiles.push(entry.name);\n      }\n      continue;\n    }\n    if (!entry.isDirectory()) continue;\n    const directoryDate = parseLogDirectoryDate(entry.name);\n    if (directoryDate === undefined) continue;\n    scannedDirectories += 1;\n    if (cutoff !== undefined && directoryDate >= cutoff) continue;\n\n    await rm(entryPath, { recursive: true, force: true });\n    removedDirectories.push(entry.name);\n  }\n\n  return {\n    logsDir,\n    ...(retentionDays === undefined ? {} : { retentionDays, cutoffDate }),\n    scannedDirectories,\n    removedCount: removedDirectories.length + removedFiles.length,\n    removedDirectories,\n    removedFiles,\n  };\n};\n"]}