@snappedly-tools/shipyard 0.7.0-staging.36082887921 → 0.7.0

package/dist/sandboxes/docker.d.ts

@@ -1,4 +1,5 @@
-import { M as MountConfig, I as IsolatedSandboxProvider } from '../MountConfig-BHnKnA4h.js';
+import { I as IsolatedSandboxProvider } from '../SandboxProvider-XJQqEdSf.js';
+import { M as MountConfig } from '../MountConfig-bZoCs4Dd.js';
 
 /**
  * Shared mount utilities for the Docker sandbox provider.
@@ -15,6 +16,7 @@ import { M as MountConfig, I as IsolatedSandboxProvider } from '../MountConfig-B
  * - `false` — disable labeling entirely.
  */
 type SelinuxLabel = "z" | "Z" | false;
+
 /**
  * Derive the default image name from the repo directory.
  * Returns `shipyard:<dir-name>` where dir-name is the last path segment,

package/dist/sandboxes/docker.js

@@ -1,4 +1,6 @@
-export { defaultImageName, docker } from '../chunk-44I2BL6E.js';
-import '../chunk-L6PX5QTU.js';
+export { docker } from '../chunk-WAXEMZUV.js';
+export { defaultImageName } from '../chunk-FDYOTN55.js';
+import '../chunk-KMGNFXKN.js';
+import '../chunk-ACD46ZM4.js';
 //# sourceMappingURL=docker.js.map
 //# sourceMappingURL=docker.js.map

package/dist/sandboxes/no-sandbox.d.ts

@@ -0,0 +1,37 @@
+import { N as NoSandboxProvider } from '../SandboxProvider-XJQqEdSf.js';
+
+/**
+ * No-sandbox provider — runs the agent directly on the host with no container isolation.
+ *
+ * Usage:
+ *   import { noSandbox } from "@snappedly-tools/shipyard/sandboxes/no-sandbox";
+ *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: noSandbox(), prompt: "..." });
+ *
+ * Accepted by `run()`, `interactive()`, and `createSandbox()`. It skips
+ * container isolation entirely and does not pass
+ * `--dangerously-skip-permissions` to the agent.
+ */
+
+interface NoSandboxOptions {
+    /** Environment variables injected by this provider. Merged at launch time. */
+    readonly env?: Record<string, string>;
+    /**
+     * Maximum number of characters of streamed `exec` output retained per stream
+     * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).
+     *
+     * Output is delivered live to `onLine` regardless; this only bounds the tail
+     * returned in `ExecResult`, preventing a long-running agent's output from
+     * overflowing V8's max string length and crashing the run.
+     */
+    readonly maxOutputTailChars?: number;
+}
+/**
+ * Create a no-sandbox provider.
+ *
+ * The returned provider runs the agent directly on the host. All three
+ * branch strategies are supported (head, merge-to-head, branch),
+ * defaulting to head.
+ */
+declare const noSandbox: (options?: NoSandboxOptions) => NoSandboxProvider;
+
+export { type NoSandboxOptions, noSandbox };

package/dist/sandboxes/no-sandbox.js

@@ -0,0 +1,4 @@
+export { noSandbox } from '../chunk-SOJTAJTF.js';
+import '../chunk-ACD46ZM4.js';
+//# sourceMappingURL=no-sandbox.js.map
+//# sourceMappingURL=no-sandbox.js.map

package/dist/sandboxes/no-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"no-sandbox.js"}

package/dist/sandboxes/vercel.d.ts

@@ -0,0 +1,104 @@
+import { I as IsolatedSandboxProvider } from '../SandboxProvider-XJQqEdSf.js';
+
+/**
+ * Vercel isolated sandbox provider — wraps `@vercel/sandbox` into a SandboxProvider.
+ *
+ * Usage:
+ *   import { vercel } from "@snappedly-tools/shipyard/sandboxes/vercel";
+ *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: vercel() });
+ */
+
+/**
+ * Options for creating a Vercel sandbox provider.
+ *
+ * All `@vercel/sandbox` `Sandbox.create()` options are accepted as pass-through,
+ * plus Shipyard-specific options for auth and branch strategy.
+ */
+interface VercelOptions {
+    /**
+     * Vercel access token.
+     *
+     * Falls back to the SDK's default auth behavior, which reads
+     * `VERCEL_OIDC_TOKEN` (recommended for Vercel-hosted environments) or
+     * `VERCEL_TOKEN` from the environment.
+     */
+    readonly token?: string;
+    /**
+     * The source of the sandbox (git repo, tarball, or snapshot).
+     * Omit to start an empty sandbox.
+     */
+    readonly source?: {
+        type: "git";
+        url: string;
+        depth?: number;
+        revision?: string;
+        username?: string;
+        password?: string;
+    } | {
+        type: "tarball";
+        url: string;
+    } | {
+        type: "snapshot";
+        snapshotId: string;
+    };
+    /** Array of port numbers to expose from the sandbox (up to 4). */
+    readonly ports?: number[];
+    /** Timeout in milliseconds before the sandbox auto-terminates. */
+    readonly timeout?: number;
+    /**
+     * Resources to allocate to the sandbox.
+     * Each vCPU gets 2048 MB of memory.
+     */
+    readonly resources?: {
+        vcpus: number;
+    };
+    /**
+     * The runtime of the sandbox (e.g. `"node24"`, `"node22"`, `"python3.13"`).
+     * Defaults to `"node24"`.
+     */
+    readonly runtime?: string;
+    /**
+     * Network policy for the sandbox.
+     * Defaults to full internet access if not specified.
+     */
+    readonly networkPolicy?: Record<string, unknown>;
+    /**
+     * Vercel project ID to associate sandbox operations with.
+     */
+    readonly projectId?: string;
+    /**
+     * Vercel team ID to associate sandbox operations with.
+     */
+    readonly teamId?: string;
+    /**
+     * Timeout in milliseconds (alias for `timeout`, kept for discoverability).
+     */
+    readonly timeoutMs?: number;
+    /**
+     * Sandbox template shorthand (e.g. `"node-22"`).
+     * Maps to the `runtime` option.
+     */
+    readonly template?: string;
+    /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */
+    readonly env?: Record<string, string>;
+    /**
+     * Maximum number of characters of streamed `exec` output retained per stream
+     * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).
+     *
+     * Output is delivered live to `onLine` regardless; this only bounds the tail
+     * returned in `ExecResult`, preventing a long-running agent's output from
+     * overflowing V8's max string length and crashing the run.
+     */
+    readonly maxOutputTailChars?: number;
+}
+/**
+ * Create a Vercel isolated sandbox provider.
+ *
+ * The returned provider creates Vercel Firecracker microVM sandboxes via
+ * the `@vercel/sandbox` SDK. Each sandbox is ephemeral — one sandbox per run.
+ *
+ * Requires `@vercel/sandbox` to be installed as a peer dependency.
+ */
+declare const vercel: (options?: VercelOptions) => IsolatedSandboxProvider;
+
+export { type VercelOptions, vercel };

package/dist/sandboxes/vercel.js

@@ -0,0 +1,166 @@
+import { createIsolatedSandboxProvider, shellQuote } from '../chunk-KMGNFXKN.js';
+import { MAX_TAIL_CHARS, StreamedProcessOutput } from '../chunk-ACD46ZM4.js';
+import { execFileSync } from 'child_process';
+import { mkdir, lstat, writeFile, chmod, mkdtemp, readFile, rm } from 'fs/promises';
+import { randomUUID } from 'crypto';
+import { tmpdir } from 'os';
+import { dirname, join } from 'path';
+import { Writable } from 'stream';
+
+var VERCEL_REPO_PATH = "/vercel/sandbox/workspace";
+var vercel = (options) => createIsolatedSandboxProvider({
+  name: "vercel",
+  env: options?.env,
+  create: async (createOptions) => {
+    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
+    const { Sandbox } = await import('@vercel/sandbox');
+    const createParams = {};
+    if (options?.source) createParams.source = options.source;
+    if (options?.ports) createParams.ports = options.ports;
+    if (options?.resources) createParams.resources = options.resources;
+    if (options?.networkPolicy)
+      createParams.networkPolicy = options.networkPolicy;
+    const resolvedRuntime = options?.runtime ?? options?.template;
+    if (resolvedRuntime) createParams.runtime = resolvedRuntime;
+    const timeoutValue = options?.timeout ?? options?.timeoutMs;
+    if (timeoutValue !== void 0) createParams.timeout = timeoutValue;
+    createParams.env = createOptions.env;
+    if (options?.token) createParams.token = options.token;
+    if (options?.projectId) createParams.projectId = options.projectId;
+    if (options?.teamId) createParams.teamId = options.teamId;
+    const sandbox = await Sandbox.create(
+      createParams
+    );
+    await sandbox.mkDir(VERCEL_REPO_PATH);
+    const handle = {
+      worktreePath: VERCEL_REPO_PATH,
+      exec: async (command, opts) => {
+        if (opts?.onLine || opts?.maxOutputBytes !== void 0) {
+          const output = new StreamedProcessOutput({
+            ...opts,
+            maxOutputTailChars
+          });
+          let partial = "";
+          const stdoutWritable = new Writable({
+            write(chunk, _encoding, callback) {
+              const error = output.checkLimit(chunk.toString());
+              if (error !== void 0) {
+                callback(error);
+                return;
+              }
+              const text = partial + chunk.toString();
+              const lines = text.split("\n");
+              partial = lines.pop() ?? "";
+              for (const line of lines) {
+                output.addStdoutLine(line);
+              }
+              callback();
+            },
+            final(callback) {
+              if (partial) {
+                output.addStdoutLine(partial);
+                partial = "";
+              }
+              callback();
+            }
+          });
+          const stderrWritable = new Writable({
+            write(chunk, _encoding, callback) {
+              const error = output.checkLimit(chunk.toString());
+              if (error !== void 0) {
+                callback(error);
+                return;
+              }
+              output.addStderr(chunk.toString());
+              callback();
+            }
+          });
+          const result2 = await sandbox.runCommand({
+            cmd: "sh",
+            args: ["-c", command],
+            cwd: opts?.cwd ?? VERCEL_REPO_PATH,
+            stdout: stdoutWritable,
+            stderr: stderrWritable,
+            ...opts?.sudo ? { sudo: true } : {}
+          });
+          if (output.error !== void 0) throw output.error;
+          return output.result(result2.exitCode);
+        }
+        const result = await sandbox.runCommand({
+          cmd: "sh",
+          args: ["-c", command],
+          cwd: opts?.cwd ?? VERCEL_REPO_PATH,
+          ...opts?.sudo ? { sudo: true } : {}
+        });
+        const stdout = await result.stdout();
+        const stderr = await result.stderr();
+        return {
+          stdout,
+          stderr,
+          exitCode: result.exitCode
+        };
+      },
+      copyIn: async (hostPath, sandboxPath) => {
+        const info = await lstat(hostPath);
+        if (info.isSymbolicLink()) {
+          throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);
+        }
+        if (info.isDirectory()) {
+          const tempDir = await mkdtemp(join(tmpdir(), "shipyard-copyin-"));
+          const tarPath = join(tempDir, "archive.tar.gz");
+          try {
+            execFileSync("tar", ["-czf", tarPath, "-C", hostPath, "."]);
+            const tarContent = await readFile(tarPath);
+            const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;
+            await sandbox.writeFiles([
+              { path: sandboxTarPath, content: tarContent }
+            ]);
+            await sandbox.runCommand({
+              cmd: "sh",
+              args: [
+                "-c",
+                `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`
+              ]
+            });
+          } finally {
+            await rm(tempDir, { recursive: true, force: true }).catch(
+              () => {
+              }
+            );
+          }
+        } else {
+          const content = await readFile(hostPath);
+          await sandbox.writeFiles([{ path: sandboxPath, content }]);
+        }
+      },
+      copyFileOut: async (sandboxPath, hostPath) => {
+        const buffer = await sandbox.readFileToBuffer({
+          path: sandboxPath
+        });
+        if (!buffer) {
+          throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);
+        }
+        await mkdir(dirname(hostPath), { recursive: true, mode: 448 });
+        try {
+          if ((await lstat(hostPath)).isSymbolicLink()) {
+            throw new Error(
+              `Refusing to overwrite symbolic link: ${hostPath}`
+            );
+          }
+        } catch (error) {
+          if (error.code !== "ENOENT") throw error;
+        }
+        await writeFile(hostPath, buffer, { mode: 384 });
+        await chmod(hostPath, 384);
+      },
+      close: async () => {
+        await sandbox.stop();
+      }
+    };
+    return handle;
+  }
+});
+
+export { vercel };
+//# sourceMappingURL=vercel.js.map
+//# sourceMappingURL=vercel.js.map

package/dist/sandboxes/vercel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sandboxes/vercel.ts"],"names":["result"],"mappings":";;;;;;;;;AAiCA,IAAM,gBAAA,GAAmB,2BAAA;AA+GlB,IAAM,MAAA,GAAS,CAAC,OAAA,KACrB,6BAAA,CAA8B;AAAA,EAC5B,IAAA,EAAM,QAAA;AAAA,EACN,KAAK,OAAA,EAAS,GAAA;AAAA,EACd,MAAA,EAAQ,OAAO,aAAA,KAAkD;AAC/D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAElD,IAAA,MAAM,eAAwC,EAAC;AAG/C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AACnD,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,aAAA;AACX,MAAA,YAAA,CAAa,gBAAgB,OAAA,CAAQ,aAAA;AAEvC,IAAA,MAAM,eAAA,GAAkB,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,QAAA;AACrD,IAAA,IAAI,eAAA,eAA8B,OAAA,GAAU,eAAA;AAG5C,IAAA,MAAM,YAAA,GAAe,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,SAAA;AAClD,IAAA,IAAI,YAAA,KAAiB,MAAA,EAAW,YAAA,CAAa,OAAA,GAAU,YAAA;AAGvD,IAAA,YAAA,CAAa,MAAM,aAAA,CAAc,GAAA;AAGjC,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AAEnD,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA;AAAA,MAC5B;AAAA,KACF;AAGA,IAAA,MAAM,OAAA,CAAQ,MAAM,gBAAgB,CAAA;AAEpC,IAAA,MAAM,MAAA,GAAgC;AAAA,MACpC,YAAA,EAAc,gBAAA;AAAA,MAEd,IAAA,EAAM,OACJ,OAAA,EACA,IAAA,KAMwB;AACxB,QAAA,IAAI,IAAA,EAAM,MAAA,IAAU,IAAA,EAAM,cAAA,KAAmB,MAAA,EAAW;AACtD,UAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,YACvC,GAAG,IAAA;AAAA,YACH;AAAA,WACD,CAAA;AACD,UAAA,IAAI,OAAA,GAAU,EAAA;AAEd,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAM,IAAA,GAAO,OAAA,GAAU,KAAA,CAAM,QAAA,EAAS;AACtC,cAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,cAAA,OAAA,GAAU,KAAA,CAAM,KAAI,IAAK,EAAA;AACzB,cAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,gBAAA,MAAA,CAAO,cAAc,IAAI,CAAA;AAAA,cAC3B;AACA,cAAA,QAAA,EAAS;AAAA,YACX,CAAA;AAAA,YACA,MAAM,QAAA,EAAU;AACd,cAAA,IAAI,OAAA,EAAS;AACX,gBAAA,MAAA,CAAO,cAAc,OAAO,CAAA;AAC5B,gBAAA,OAAA,GAAU,EAAA;AAAA,cACZ;AACA,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AACjC,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAMA,OAAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,YACtC,GAAA,EAAK,IAAA;AAAA,YACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,YACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,YAClB,MAAA,EAAQ,cAAA;AAAA,YACR,MAAA,EAAQ,cAAA;AAAA,YACR,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,WACpC,CAAA;AAED,UAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,EAAW,MAAM,MAAA,CAAO,KAAA;AAC7C,UAAA,OAAO,MAAA,CAAO,MAAA,CAAOA,OAAAA,CAAO,QAAQ,CAAA;AAAA,QACtC;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,UACtC,GAAA,EAAK,IAAA;AAAA,UACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,UACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,UAClB,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,SACpC,CAAA;AAED,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AACnC,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AAEnC,QAAA,OAAO;AAAA,UACL,MAAA;AAAA,UACA,MAAA;AAAA,UACA,UAAU,MAAA,CAAO;AAAA,SACnB;AAAA,MACF,CAAA;AAAA,MAEA,MAAA,EAAQ,OACN,QAAA,EACA,WAAA,KACkB;AAClB,QAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,QAAQ,CAAA;AACjC,QAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,CAAE,CAAA;AAAA,QACjE;AACA,QAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,UAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,MAAA,EAAO,EAAG,kBAAkB,CAAC,CAAA;AAChE,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,EAAS,gBAAgB,CAAA;AAC9C,UAAA,IAAI;AACF,YAAA,YAAA,CAAa,OAAO,CAAC,MAAA,EAAQ,SAAS,IAAA,EAAM,QAAA,EAAU,GAAG,CAAC,CAAA;AAC1D,YAAA,MAAM,UAAA,GAAa,MAAM,QAAA,CAAS,OAAO,CAAA;AACzC,YAAA,MAAM,cAAA,GAAiB,CAAA,qBAAA,EAAwB,UAAA,EAAY,CAAA,OAAA,CAAA;AAC3D,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,UAAA;AAAW,aAC7C,CAAA;AACD,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,GAAA,EAAK,IAAA;AAAA,cACL,IAAA,EAAM;AAAA,gBACJ,IAAA;AAAA,gBACA,CAAA,SAAA,EAAY,UAAA,CAAW,WAAW,CAAC,gBAAgB,UAAA,CAAW,cAAc,CAAC,CAAA,IAAA,EAAO,WAAW,WAAW,CAAC,CAAA,UAAA,EAAa,UAAA,CAAW,cAAc,CAAC,CAAA;AAAA;AACpJ,aACD,CAAA;AAAA,UACH,CAAA,SAAE;AACA,YAAA,MAAM,EAAA,CAAG,SAAS,EAAE,SAAA,EAAW,MAAM,KAAA,EAAO,IAAA,EAAM,CAAA,CAAE,KAAA;AAAA,cAClD,MAAM;AAAA,cAAC;AAAA,aACT;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,UAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,EAAE,MAAM,WAAA,EAAa,OAAA,EAAS,CAAC,CAAA;AAAA,QAC3D;AAAA,MACF,CAAA;AAAA,MAEA,WAAA,EAAa,OACX,WAAA,EACA,QAAA,KACkB;AAClB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,gBAAA,CAAiB;AAAA,UAC5C,IAAA,EAAM;AAAA,SACP,CAAA;AACD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,WAAW,CAAA,CAAE,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,KAAA,CAAM,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,GAAA,EAAO,CAAA;AAC/D,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,MAAM,KAAA,CAAM,QAAQ,CAAA,EAAG,gBAAe,EAAG;AAC5C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,wCAAwC,QAAQ,CAAA;AAAA,aAClD;AAAA,UACF;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,QAChE;AACA,QAAA,MAAM,UAAU,QAAA,EAAU,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAO,CAAA;AACjD,QAAA,MAAM,KAAA,CAAM,UAAU,GAAK,CAAA;AAAA,MAC7B,CAAA;AAAA,MAEA,OAAO,YAA2B;AAChC,QAAA,MAAM,QAAQ,IAAA,EAAK;AAAA,MACrB;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAC","file":"vercel.js","sourcesContent":["/**\n * Vercel isolated sandbox provider — wraps `@vercel/sandbox` into a SandboxProvider.\n *\n * Usage:\n *   import { vercel } from \"@snappedly-tools/shipyard/sandboxes/vercel\";\n *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: vercel() });\n */\n\nimport { execFileSync } from \"node:child_process\";\nimport {\n  lstat,\n  chmod,\n  mkdir,\n  mkdtemp,\n  readFile,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { Writable } from \"node:stream\";\nimport {\n  createIsolatedSandboxProvider,\n  type ExecResult,\n  type IsolatedSandboxHandle,\n  type IsolatedSandboxProvider,\n} from \"../SandboxProvider.js\";\nimport { MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { StreamedProcessOutput } from \"../processOutput.js\";\nimport { shellQuote } from \"../shellQuote.js\";\n\n/** Worktree path inside the Vercel sandbox. */\nconst VERCEL_REPO_PATH = \"/vercel/sandbox/workspace\";\n\n/**\n * Options for creating a Vercel sandbox provider.\n *\n * All `@vercel/sandbox` `Sandbox.create()` options are accepted as pass-through,\n * plus Shipyard-specific options for auth and branch strategy.\n */\nexport interface VercelOptions {\n  /**\n   * Vercel access token.\n   *\n   * Falls back to the SDK's default auth behavior, which reads\n   * `VERCEL_OIDC_TOKEN` (recommended for Vercel-hosted environments) or\n   * `VERCEL_TOKEN` from the environment.\n   */\n  readonly token?: string;\n\n  // ---- Pass-through @vercel/sandbox Sandbox.create() options ----\n\n  /**\n   * The source of the sandbox (git repo, tarball, or snapshot).\n   * Omit to start an empty sandbox.\n   */\n  readonly source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n        username?: string;\n        password?: string;\n      }\n    | {\n        type: \"tarball\";\n        url: string;\n      }\n    | {\n        type: \"snapshot\";\n        snapshotId: string;\n      };\n\n  /** Array of port numbers to expose from the sandbox (up to 4). */\n  readonly ports?: number[];\n\n  /** Timeout in milliseconds before the sandbox auto-terminates. */\n  readonly timeout?: number;\n\n  /**\n   * Resources to allocate to the sandbox.\n   * Each vCPU gets 2048 MB of memory.\n   */\n  readonly resources?: {\n    vcpus: number;\n  };\n\n  /**\n   * The runtime of the sandbox (e.g. `\"node24\"`, `\"node22\"`, `\"python3.13\"`).\n   * Defaults to `\"node24\"`.\n   */\n  readonly runtime?: string;\n\n  /**\n   * Network policy for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  readonly networkPolicy?: Record<string, unknown>;\n\n  /**\n   * Vercel project ID to associate sandbox operations with.\n   */\n  readonly projectId?: string;\n\n  /**\n   * Vercel team ID to associate sandbox operations with.\n   */\n  readonly teamId?: string;\n\n  /**\n   * Timeout in milliseconds (alias for `timeout`, kept for discoverability).\n   */\n  readonly timeoutMs?: number;\n\n  /**\n   * Sandbox template shorthand (e.g. `\"node-22\"`).\n   * Maps to the `runtime` option.\n   */\n  readonly template?: string;\n\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a Vercel isolated sandbox provider.\n *\n * The returned provider creates Vercel Firecracker microVM sandboxes via\n * the `@vercel/sandbox` SDK. Each sandbox is ephemeral — one sandbox per run.\n *\n * Requires `@vercel/sandbox` to be installed as a peer dependency.\n */\nexport const vercel = (options?: VercelOptions): IsolatedSandboxProvider =>\n  createIsolatedSandboxProvider({\n    name: \"vercel\",\n    env: options?.env,\n    create: async (createOptions): Promise<IsolatedSandboxHandle> => {\n      const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n      // Dynamic import so the peer dependency is only loaded at runtime\n      const { Sandbox } = await import(\"@vercel/sandbox\");\n\n      const createParams: Record<string, unknown> = {};\n\n      // Pass through SDK options\n      if (options?.source) createParams.source = options.source;\n      if (options?.ports) createParams.ports = options.ports;\n      if (options?.resources) createParams.resources = options.resources;\n      if (options?.networkPolicy)\n        createParams.networkPolicy = options.networkPolicy;\n      // runtime takes precedence over the template convenience alias\n      const resolvedRuntime = options?.runtime ?? options?.template;\n      if (resolvedRuntime) createParams.runtime = resolvedRuntime;\n\n      // Timeout: prefer explicit timeout, fall back to timeoutMs alias\n      const timeoutValue = options?.timeout ?? options?.timeoutMs;\n      if (timeoutValue !== undefined) createParams.timeout = timeoutValue;\n\n      // Merge provider env with Shipyard env\n      createParams.env = createOptions.env;\n\n      // Auth: pass token and team/project IDs if provided\n      if (options?.token) createParams.token = options.token;\n      if (options?.projectId) createParams.projectId = options.projectId;\n      if (options?.teamId) createParams.teamId = options.teamId;\n\n      const sandbox = await Sandbox.create(\n        createParams as Parameters<typeof Sandbox.create>[0],\n      );\n\n      // Ensure worktree directory exists\n      await sandbox.mkDir(VERCEL_REPO_PATH);\n\n      const handle: IsolatedSandboxHandle = {\n        worktreePath: VERCEL_REPO_PATH,\n\n        exec: async (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            maxOutputBytes?: number;\n          },\n        ): Promise<ExecResult> => {\n          if (opts?.onLine || opts?.maxOutputBytes !== undefined) {\n            const output = new StreamedProcessOutput({\n              ...opts,\n              maxOutputTailChars,\n            });\n            let partial = \"\";\n\n            const stdoutWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                const text = partial + chunk.toString();\n                const lines = text.split(\"\\n\");\n                partial = lines.pop() ?? \"\";\n                for (const line of lines) {\n                  output.addStdoutLine(line);\n                }\n                callback();\n              },\n              final(callback) {\n                if (partial) {\n                  output.addStdoutLine(partial);\n                  partial = \"\";\n                }\n                callback();\n              },\n            });\n\n            const stderrWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                output.addStderr(chunk.toString());\n                callback();\n              },\n            });\n\n            const result = await sandbox.runCommand({\n              cmd: \"sh\",\n              args: [\"-c\", command],\n              cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n              stdout: stdoutWritable,\n              stderr: stderrWritable,\n              ...(opts?.sudo ? { sudo: true } : {}),\n            });\n\n            if (output.error !== undefined) throw output.error;\n            return output.result(result.exitCode);\n          }\n\n          const result = await sandbox.runCommand({\n            cmd: \"sh\",\n            args: [\"-c\", command],\n            cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n            ...(opts?.sudo ? { sudo: true } : {}),\n          });\n\n          const stdout = await result.stdout();\n          const stderr = await result.stderr();\n\n          return {\n            stdout,\n            stderr,\n            exitCode: result.exitCode,\n          };\n        },\n\n        copyIn: async (\n          hostPath: string,\n          sandboxPath: string,\n        ): Promise<void> => {\n          const info = await lstat(hostPath);\n          if (info.isSymbolicLink()) {\n            throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);\n          }\n          if (info.isDirectory()) {\n            const tempDir = await mkdtemp(join(tmpdir(), \"shipyard-copyin-\"));\n            const tarPath = join(tempDir, \"archive.tar.gz\");\n            try {\n              execFileSync(\"tar\", [\"-czf\", tarPath, \"-C\", hostPath, \".\"]);\n              const tarContent = await readFile(tarPath);\n              const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;\n              await sandbox.writeFiles([\n                { path: sandboxTarPath, content: tarContent },\n              ]);\n              await sandbox.runCommand({\n                cmd: \"sh\",\n                args: [\n                  \"-c\",\n                  `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`,\n                ],\n              });\n            } finally {\n              await rm(tempDir, { recursive: true, force: true }).catch(\n                () => {},\n              );\n            }\n          } else {\n            const content = await readFile(hostPath);\n            await sandbox.writeFiles([{ path: sandboxPath, content }]);\n          }\n        },\n\n        copyFileOut: async (\n          sandboxPath: string,\n          hostPath: string,\n        ): Promise<void> => {\n          const buffer = await sandbox.readFileToBuffer({\n            path: sandboxPath,\n          });\n          if (!buffer) {\n            throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);\n          }\n          await mkdir(dirname(hostPath), { recursive: true, mode: 0o700 });\n          try {\n            if ((await lstat(hostPath)).isSymbolicLink()) {\n              throw new Error(\n                `Refusing to overwrite symbolic link: ${hostPath}`,\n              );\n            }\n          } catch (error) {\n            if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n          }\n          await writeFile(hostPath, buffer, { mode: 0o600 });\n          await chmod(hostPath, 0o600);\n        },\n\n        close: async (): Promise<void> => {\n          await sandbox.stop();\n        },\n      };\n\n      return handle;\n    },\n  });\n"]}

package/dist/templates/blank/main.mts

@@ -0,0 +1,13 @@
+import { CODEX_MODELS, run, codex } from "@snappedly-tools/shipyard";
+import { docker } from "@snappedly-tools/shipyard/sandboxes/docker";
+
+// Blank template: customize this to build your own orchestration.
+// Generated entrypoint: .shipyard/main.mts
+// Run this with: npx shipyard run
+// Or add to package.json scripts: "shipyard": "shipyard run"
+
+await run({
+  agent: codex(CODEX_MODELS.routine),
+  sandbox: docker(),
+  promptFile: "./.shipyard/prompt.md",
+});

package/dist/templates/blank/prompt.md

@@ -0,0 +1,12 @@
+# Context
+
+<!-- Use !`command` to pull in dynamic context. Commands run inside the sandbox. -->
+<!-- Example: !`git log --oneline -10` or !`{{LIST_TASKS_COMMAND}}` -->
+
+# Task
+
+<!-- Describe what the agent should do. -->
+
+# Done
+
+<!-- When the task is complete, output <promise>COMPLETE</promise> to signal early termination. -->

package/dist/templates/blank/template.json

@@ -0,0 +1,4 @@
+{
+  "name": "blank",
+  "description": "Bare scaffold — write your own prompt and orchestration"
+}

package/dist/templates/parallel-planner/main.mts

@@ -5,59 +5,9 @@ import { existsSync } from "node:fs";
 import * as shipyard from "@snappedly-tools/shipyard";
 import { docker } from "@snappedly-tools/shipyard/sandboxes/docker";
 import { z } from "zod";
-import { resolvePlannerBranch } from "./planner-branch.mjs";
 
 if (process.loadEnvFile && existsSync(".shipyard/.env"))
   process.loadEnvFile(".shipyard/.env");
-type ModelRole = "routine" | "strong";
-const CODEX_PROVIDER = true;
-const agentFactory = shipyard.codex;
-type AgentModel = Parameters<typeof agentFactory>[0];
-const readRoleModel = (role: ModelRole): string | undefined => {
-  const envName = `SHIPYARD_${role.toUpperCase()}_MODEL`;
-  const model = process.env[envName];
-  if (model !== undefined && model.trim().length === 0)
-    throw new Error(`${envName} must not be empty`);
-  return model;
-};
-const roleModels = {
-  routine: readRoleModel("routine"),
-  strong: readRoleModel("strong"),
-};
-const CODEX_REASONING_EFFORTS = shipyard.CODEX_REASONING_EFFORTS;
-type CodexReasoningEffort = shipyard.CodexReasoningEffort;
-const readCodexReasoningEffort = (
-  role: ModelRole,
-): CodexReasoningEffort | undefined => {
-  if (!CODEX_PROVIDER) return undefined;
-  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_REASONING_EFFORT`;
-  const effort = process.env[envName]?.trim();
-  if (!effort) return undefined;
-  if (!(CODEX_REASONING_EFFORTS as readonly string[]).includes(effort))
-    throw new Error(
-      `${envName} must be one of ${CODEX_REASONING_EFFORTS.join(", ")}; received "${effort}"`,
-    );
-  return effort as CodexReasoningEffort;
-};
-const roleEfforts = {
-  routine: readCodexReasoningEffort("routine"),
-  strong: readCodexReasoningEffort("strong"),
-};
-const readCodexRoleModel = (role: ModelRole, defaultModel: AgentModel) => {
-  if (!CODEX_PROVIDER || typeof defaultModel === "string") return defaultModel;
-  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_MODEL`;
-  const model = process.env[envName]?.trim();
-  return model ? { ...defaultModel, model } : defaultModel;
-};
-const roleAgent = (role: ModelRole, defaultModel: AgentModel) => {
-  const model = roleModels[role] ?? readCodexRoleModel(role, defaultModel);
-  const effort = roleEfforts[role];
-  if (typeof model !== "string")
-    return effort === undefined
-      ? agentFactory(model)
-      : agentFactory(model, { effort });
-  return agentFactory(model, { effort: effort ?? null });
-};
 const targetBranch = execFileSync("git", ["branch", "--show-current"], {
   encoding: "utf8",
 }).trim();
@@ -164,7 +114,7 @@ const runWorker = async (scope: Scope, ticket: Ticket) => {
     await sandbox.run({
       name: `triage #${ticket.id}`,
       maxIterations: 1,
-      agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
+      agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
       promptFile: "./.shipyard/triage-prompt.md",
       promptArgs: { TASK_ID: ticket.id },
     });
@@ -172,7 +122,7 @@ const runWorker = async (scope: Scope, ticket: Ticket) => {
     const implementation = await sandbox.run({
       name: "implementer",
       maxIterations: 100,
-      agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
+      agent: shipyard.codex(shipyard.CODEX_MODELS.routine),
       promptFile: "./.shipyard/implement-prompt.md",
       promptArgs: {
         TASK_ID: ticket.id,
@@ -193,21 +143,13 @@ for (let iteration = 0; iteration < 10; iteration++) {
     execFileSync("node", [".shipyard/select-issues.mjs"], { encoding: "utf8" }),
   ) as Scope[];
   if (!scopes.length) break;
-  const localBranches = execFileSync(
-    "git",
-    ["for-each-ref", "--format=%(refname:short)", "refs/heads"],
-    { encoding: "utf8" },
-  )
-    .split(/\r?\n/)
-    .filter(Boolean);
-  const plannerBranch = await resolvePlannerBranch(localBranches);
   const plan = await shipyard.run({
     hooks,
     sandbox: docker(),
     name: "planner",
-    branchStrategy: { type: "branch", branch: plannerBranch },
+    branchStrategy: { type: "branch", branch: "shipyard/planner" },
     maxIterations: 1,
-    agent: roleAgent("strong", shipyard.CODEX_MODELS.strong),
+    agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
     promptFile: "./.shipyard/plan-prompt.md",
     output: shipyard.Output.object({ tag: "plan", schema: planSchema }),
   });
@@ -335,7 +277,7 @@ for (let iteration = 0; iteration < 10; iteration++) {
                     const resolution = await wave.run({
                       name: "conflict-resolver",
                       maxIterations: 10,
-                      agent: roleAgent("strong", shipyard.CODEX_MODELS.strong),
+                      agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
                       promptFile: "./.shipyard/conflict-prompt.md",
                       promptArgs: {
                         TASK_ID: ready[index]!.id,
@@ -389,7 +331,7 @@ for (let iteration = 0; iteration < 10; iteration++) {
               const integrated = await wave.run({
                 name: "spec-integrator",
                 maxIterations: 10,
-                agent: roleAgent("strong", shipyard.CODEX_MODELS.strong),
+                agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
                 promptFile: "./.shipyard/spec-wave-prompt.md",
                 promptArgs: {
                   TASK_ID: id,
@@ -429,7 +371,7 @@ for (let iteration = 0; iteration < 10; iteration++) {
             await integration.run({
               name: `triage #${id}`,
               maxIterations: 1,
-              agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
+              agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
               promptFile: "./.shipyard/triage-prompt.md",
               promptArgs: { TASK_ID: id },
             });
@@ -437,7 +379,7 @@ for (let iteration = 0; iteration < 10; iteration++) {
             const standalone = await integration.run({
               name: "implementer",
               maxIterations: 100,
-              agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
+              agent: shipyard.codex(shipyard.CODEX_MODELS.routine),
               promptFile: "./.shipyard/implement-prompt.md",
               promptArgs: {
                 TASK_ID: id,
@@ -451,7 +393,7 @@ for (let iteration = 0; iteration < 10; iteration++) {
           const final = await integration.run({
             name: "merger",
             maxIterations: 1,
-            agent: roleAgent("strong", shipyard.CODEX_MODELS.strong),
+            agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
             promptFile: "./.shipyard/merge-prompt.md",
             promptArgs: {
               TASK_ID: id,