@snappedly-tools/shipyard 0.7.0 → 0.8.0

package/dist/templates/sequential-reviewer/main.mts

@@ -7,6 +7,55 @@ import { docker } from "@snappedly-tools/shipyard/sandboxes/docker";
 
 if (process.loadEnvFile && existsSync(".shipyard/.env"))
   process.loadEnvFile(".shipyard/.env");
+type ModelRole = "routine" | "strong";
+const CODEX_PROVIDER = true;
+const agentFactory = shipyard.codex;
+type AgentModel = Parameters<typeof agentFactory>[0];
+const readRoleModel = (role: ModelRole): string | undefined => {
+  const envName = `SHIPYARD_${role.toUpperCase()}_MODEL`;
+  const model = process.env[envName];
+  if (model !== undefined && model.trim().length === 0)
+    throw new Error(`${envName} must not be empty`);
+  return model;
+};
+const roleModels = {
+  routine: readRoleModel("routine"),
+  strong: readRoleModel("strong"),
+};
+const CODEX_REASONING_EFFORTS = shipyard.CODEX_REASONING_EFFORTS;
+type CodexReasoningEffort = shipyard.CodexReasoningEffort;
+const readCodexReasoningEffort = (
+  role: ModelRole,
+): CodexReasoningEffort | undefined => {
+  if (!CODEX_PROVIDER) return undefined;
+  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_REASONING_EFFORT`;
+  const effort = process.env[envName]?.trim();
+  if (!effort) return undefined;
+  if (!(CODEX_REASONING_EFFORTS as readonly string[]).includes(effort))
+    throw new Error(
+      `${envName} must be one of ${CODEX_REASONING_EFFORTS.join(", ")}; received "${effort}"`,
+    );
+  return effort as CodexReasoningEffort;
+};
+const roleEfforts = {
+  routine: readCodexReasoningEffort("routine"),
+  strong: readCodexReasoningEffort("strong"),
+};
+const readCodexRoleModel = (role: ModelRole, defaultModel: AgentModel) => {
+  if (!CODEX_PROVIDER || typeof defaultModel === "string") return defaultModel;
+  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_MODEL`;
+  const model = process.env[envName]?.trim();
+  return model ? { ...defaultModel, model } : defaultModel;
+};
+const roleAgent = (role: ModelRole, defaultModel: AgentModel) => {
+  const model = roleModels[role] ?? readCodexRoleModel(role, defaultModel);
+  const effort = roleEfforts[role];
+  if (typeof model !== "string")
+    return effort === undefined
+      ? agentFactory(model)
+      : agentFactory(model, { effort });
+  return agentFactory(model, { effort: effort ?? null });
+};
 const targetBranch = execFileSync("git", ["branch", "--show-current"], {
   encoding: "utf8",
 }).trim();
@@ -136,7 +185,7 @@ for (let iteration = 0; iteration < MAX_ITERATIONS; iteration++) {
         : [issue.id]) {
         await sandbox.run({
           name: `triage #${ticketId}`,
-          agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
+          agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
           maxIterations: 1,
           promptFile: "./.shipyard/triage-prompt.md",
           promptArgs: { TASK_ID: ticketId },
@@ -146,7 +195,7 @@ for (let iteration = 0; iteration < MAX_ITERATIONS; iteration++) {
       const implement = await sandbox.run({
         name: "implementer",
         maxIterations: 1,
-        agent: shipyard.codex(shipyard.CODEX_MODELS.routine),
+        agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
         promptFile: "./.shipyard/implement-prompt.md",
         promptArgs: {
           TASK_ID: issue.id,
@@ -165,7 +214,7 @@ for (let iteration = 0; iteration < MAX_ITERATIONS; iteration++) {
       const review = await sandbox.run({
         name: "reviewer",
         maxIterations: 1,
-        agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
+        agent: roleAgent("strong", shipyard.CODEX_MODELS.strong),
         promptFile: "./.shipyard/review-prompt.md",
         promptArgs: {
           BRANCH: issue.branch,

package/dist/templates/simple-loop/main.mts

@@ -7,6 +7,55 @@ import { docker } from "@snappedly-tools/shipyard/sandboxes/docker";
 
 if (process.loadEnvFile && existsSync(".shipyard/.env"))
   process.loadEnvFile(".shipyard/.env");
+type ModelRole = "routine" | "strong";
+const CODEX_PROVIDER = true;
+const agentFactory = shipyard.codex;
+type AgentModel = Parameters<typeof agentFactory>[0];
+const readRoleModel = (role: ModelRole): string | undefined => {
+  const envName = `SHIPYARD_${role.toUpperCase()}_MODEL`;
+  const model = process.env[envName];
+  if (model !== undefined && model.trim().length === 0)
+    throw new Error(`${envName} must not be empty`);
+  return model;
+};
+const roleModels = {
+  routine: readRoleModel("routine"),
+  strong: readRoleModel("strong"),
+};
+const CODEX_REASONING_EFFORTS = shipyard.CODEX_REASONING_EFFORTS;
+type CodexReasoningEffort = shipyard.CodexReasoningEffort;
+const readCodexReasoningEffort = (
+  role: ModelRole,
+): CodexReasoningEffort | undefined => {
+  if (!CODEX_PROVIDER) return undefined;
+  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_REASONING_EFFORT`;
+  const effort = process.env[envName]?.trim();
+  if (!effort) return undefined;
+  if (!(CODEX_REASONING_EFFORTS as readonly string[]).includes(effort))
+    throw new Error(
+      `${envName} must be one of ${CODEX_REASONING_EFFORTS.join(", ")}; received "${effort}"`,
+    );
+  return effort as CodexReasoningEffort;
+};
+const roleEfforts = {
+  routine: readCodexReasoningEffort("routine"),
+  strong: readCodexReasoningEffort("strong"),
+};
+const readCodexRoleModel = (role: ModelRole, defaultModel: AgentModel) => {
+  if (!CODEX_PROVIDER || typeof defaultModel === "string") return defaultModel;
+  const envName = `SHIPYARD_CODEX_${role.toUpperCase()}_MODEL`;
+  const model = process.env[envName]?.trim();
+  return model ? { ...defaultModel, model } : defaultModel;
+};
+const roleAgent = (role: ModelRole, defaultModel: AgentModel) => {
+  const model = roleModels[role] ?? readCodexRoleModel(role, defaultModel);
+  const effort = roleEfforts[role];
+  if (typeof model !== "string")
+    return effort === undefined
+      ? agentFactory(model)
+      : agentFactory(model, { effort });
+  return agentFactory(model, { effort: effort ?? null });
+};
 const targetBranch = execFileSync("git", ["branch", "--show-current"], {
   encoding: "utf8",
 }).trim();
@@ -133,7 +182,7 @@ for (let iteration = 0; iteration < 3; iteration++) {
         : [issue.id]) {
         await sandbox.run({
           name: `triage #${ticketId}`,
-          agent: shipyard.codex(shipyard.CODEX_MODELS.strong),
+          agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
           maxIterations: 1,
           promptFile: "./.shipyard/triage-prompt.md",
           promptArgs: { TASK_ID: ticketId },
@@ -142,7 +191,7 @@ for (let iteration = 0; iteration < 3; iteration++) {
       }
       const result = await sandbox.run({
         name: "implementer",
-        agent: shipyard.codex(shipyard.CODEX_MODELS.routine),
+        agent: roleAgent("routine", shipyard.CODEX_MODELS.routine),
         maxIterations: 1,
         promptFile: "./.shipyard/prompt.md",
         promptArgs: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snappedly-tools/shipyard",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Run AI coding agents in isolated sandboxes",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,14 +13,6 @@
     "./sandboxes/docker": {
       "import": "./dist/sandboxes/docker.js",
       "types": "./dist/sandboxes/docker.d.ts"
-    },
-    "./sandboxes/vercel": {
-      "import": "./dist/sandboxes/vercel.js",
-      "types": "./dist/sandboxes/vercel.d.ts"
-    },
-    "./sandboxes/no-sandbox": {
-      "import": "./dist/sandboxes/no-sandbox.js",
-      "types": "./dist/sandboxes/no-sandbox.d.ts"
     }
   },
   "bin": {
@@ -90,14 +82,6 @@
     "tsx": "^4.23.13",
     "zod": "^4.6.5"
   },
-  "peerDependencies": {
-    "@vercel/sandbox": ">=1.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@vercel/sandbox": {
-      "optional": true
-    }
-  },
   "files": [
     "dist",
     "LICENSE",

package/dist/MountConfig-bZoCs4Dd.d.ts

@@ -1,26 +0,0 @@
-/**
- * User-facing mount configuration for bind-mount sandbox providers.
- *
- * Each entry describes a host directory to mount into the sandbox container.
- */
-/** A single bind-mount descriptor for the Docker provider. */
-interface MountConfig {
-    /**
-     * Path on the host. Supports:
-     * - Absolute paths (`/data/cache`)
-     * - Tilde-expanded paths (`~/data` → `<home>/data`)
-     * - Relative paths (`data` or `./data`) — resolved from `process.cwd()`
-     */
-    readonly hostPath: string;
-    /**
-     * Path inside the sandbox container. Supports:
-     * - Absolute paths (`/mnt/data`)
-     * - Tilde-expanded paths (`~/.npm` → `/home/agent/.npm`) — expanded using the provider's sandbox home directory
-     * - Relative paths (`data` or `./data`) — resolved from the worktree directory (`/home/agent/workspace`)
-     */
-    readonly sandboxPath: string;
-    /** Mount as read-only. Defaults to `false`. */
-    readonly readonly?: boolean;
-}
-
-export type { MountConfig as M };

package/dist/SandboxProvider-XJQqEdSf.d.ts

@@ -1,261 +0,0 @@
-/**
- * Sandbox provider types — the pluggable interface for sandbox runtimes.
- *
- * Provider authors implement a small Promise-based interface. Shipyard
- * handles worktree creation, git mount resolution, and commit extraction.
- */
-/** Result of executing a command inside a sandbox. */
-interface ExecResult {
-    readonly stdout: string;
-    readonly stderr: string;
-    readonly exitCode: number;
-}
-/** Options for interactiveExec — the streams the provider should wire to the spawned process. */
-interface InteractiveExecOptions {
-    readonly stdin: NodeJS.ReadableStream;
-    readonly stdout: NodeJS.WritableStream;
-    readonly stderr: NodeJS.WritableStream;
-    readonly cwd?: string;
-    /** Terminate the interactive process when the caller cancels the session. */
-    readonly signal?: AbortSignal;
-}
-/** Handle to a running bind-mount sandbox. */
-interface BindMountSandboxHandle {
-    /** Absolute path to the worktree inside the sandbox. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command in the sandbox.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work. A buffered/batch
-     * implementation that only calls `onLine` after the process exits does NOT
-     * satisfy this contract.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process inside the sandbox.
-     * Optional — providers that support interactive sessions implement this.
-     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
-     * allocates a pseudo-terminal accordingly.
-     * Implementations MUST terminate the underlying process when `signal` aborts.
-     */
-    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** Copy a single file from the host into the sandbox. */
-    copyFileIn(hostPath: string, sandboxPath: string): Promise<void>;
-    /** Copy a single file from the sandbox to the host. */
-    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
-    /** Tear down the sandbox. */
-    close(): Promise<void>;
-}
-/** Options passed to a bind-mount provider's `create` function. */
-interface BindMountCreateOptions {
-    /** Host-side path to the worktree directory. */
-    readonly worktreePath: string;
-    /** Host-side path to the original repo root. */
-    readonly hostRepoPath: string;
-    /** Volume mounts to apply (host:sandbox pairs). */
-    readonly mounts: Array<{
-        hostPath: string;
-        sandboxPath: string;
-        readonly?: boolean;
-    }>;
-    /** Environment variables to inject into the sandbox. */
-    readonly env: Record<string, string>;
-}
-/** Configuration for createBindMountSandboxProvider. */
-interface BindMountSandboxProviderConfig {
-    /** Human-readable name for this provider (e.g. "docker"). */
-    readonly name: string;
-    /** Environment variables injected by this provider. Merged at launch time. */
-    readonly env?: Record<string, string>;
-    /**
-     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
-     * Used to expand `~` in user-provided `sandboxPath` mount configs.
-     * Set to `undefined` for providers that do not have a fixed home directory.
-     */
-    readonly sandboxHomedir?: string;
-    /** Create a sandbox handle from the given options. */
-    readonly create: (options: BindMountCreateOptions) => Promise<BindMountSandboxHandle>;
-}
-/** Handle to a running isolated sandbox (extends bind-mount with file transfer). */
-interface IsolatedSandboxHandle {
-    /** Absolute path to the worktree inside the sandbox. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command in the sandbox.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work. A buffered/batch
-     * implementation that only calls `onLine` after the process exits does NOT
-     * satisfy this contract.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process inside the sandbox.
-     * Optional — providers that support interactive sessions implement this.
-     * The provider detects TTY mode from the streams (e.g. stdin.isTTY) and
-     * allocates a pseudo-terminal accordingly.
-     * Implementations MUST terminate the underlying process when `signal` aborts.
-     */
-    interactiveExec?(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** Copy a file or directory from the host into the sandbox. */
-    copyIn(hostPath: string, sandboxPath: string): Promise<void>;
-    /** Copy a single file from the sandbox to the host. */
-    copyFileOut(sandboxPath: string, hostPath: string): Promise<void>;
-    /** Tear down the sandbox. */
-    close(): Promise<void>;
-}
-/** Options passed to an isolated provider's `create` function. */
-interface IsolatedCreateOptions {
-    /** Original host repository path, used only for image naming; never mounted. */
-    readonly hostRepoPath?: string;
-    /** Environment variables to inject into the sandbox. */
-    readonly env: Record<string, string>;
-}
-/** Configuration for createIsolatedSandboxProvider. */
-interface IsolatedSandboxProviderConfig {
-    /** Human-readable name for this provider (e.g. "vercel"). */
-    readonly name: string;
-    /** Environment variables injected by this provider. Merged at launch time. */
-    readonly env?: Record<string, string>;
-    /** Create an isolated sandbox handle from the given options. */
-    readonly create: (options: IsolatedCreateOptions) => Promise<IsolatedSandboxHandle>;
-}
-/** A bind-mount sandbox provider. */
-interface BindMountSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-    /**
-     * Absolute path to the home directory inside the sandbox (e.g. `"/home/agent"`).
-     * `undefined` when the provider does not declare a sandbox home directory.
-     */
-    readonly sandboxHomedir: string | undefined;
-}
-/** An isolated sandbox provider. */
-interface IsolatedSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-}
-/** Handle to a no-sandbox session — runs commands directly on the host. */
-interface NoSandboxHandle {
-    /** Absolute path to the worktree on the host. */
-    readonly worktreePath: string;
-    /**
-     * Execute a command on the host.
-     *
-     * Implementations MUST support line-by-line streaming via `onLine`. This is
-     * how Shipyard delivers live feedback to the user and enforces idle timeouts —
-     * without a streaming implementation, neither will work.
-     *
-     * When `stdin` is set, the implementation pipes the string to the child
-     * process's stdin and closes it. This avoids the Linux 128 KB per-arg limit.
-     */
-    exec(command: string, options?: {
-        onLine?: (line: string) => void;
-        cwd?: string;
-        sudo?: boolean;
-        stdin?: string;
-        /** Abort the command when the caller's operation is cancelled. */
-        signal?: AbortSignal;
-        /** Reject/terminate the command after this many combined output bytes. */
-        maxOutputBytes?: number;
-    }): Promise<ExecResult>;
-    /**
-     * Launch an interactive process on the host with inherited stdio.
-     */
-    interactiveExec(args: string[], options: InteractiveExecOptions): Promise<{
-        exitCode: number;
-    }>;
-    /** No-op — no container to tear down. */
-    close(): Promise<void>;
-}
-/** A no-sandbox provider — runs the agent directly on the host with no container isolation. */
-interface NoSandboxProvider {
-    /** Human-readable provider name. */
-    readonly name: string;
-    /** Environment variables injected by this provider. */
-    readonly env: Record<string, string>;
-}
-/** Head strategy: agent writes directly to host working directory. Bind-mount only. */
-interface HeadBranchStrategy {
-    readonly type: "head";
-}
-/** Merge-to-head strategy: temp branch, merge back to HEAD, delete temp branch. */
-interface MergeToHeadBranchStrategy {
-    readonly type: "merge-to-head";
-}
-/** Branch strategy: commits land on an explicit named branch. */
-interface NamedBranchStrategy {
-    readonly type: "branch";
-    readonly branch: string;
-    /**
-     * Git ref to use as the starting point when creating a new branch.
-     * Only used when the branch doesn't already exist — ignored otherwise.
-     * Callers are responsible for ensuring the ref is current (e.g. `git fetch`).
-     * Defaults to `HEAD` when omitted.
-     */
-    readonly baseBranch?: string;
-}
-/** Branch strategy for bind-mount providers (all three variants). */
-type BindMountBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Branch strategy for isolated providers (no head — can't write to host). */
-type IsolatedBranchStrategy = MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Branch strategy for no-sandbox providers (all three — same as bind-mount). */
-type NoSandboxBranchStrategy = HeadBranchStrategy | MergeToHeadBranchStrategy | NamedBranchStrategy;
-/** Union of all branch strategy variants. */
-type BranchStrategy = BindMountBranchStrategy | IsolatedBranchStrategy | NoSandboxBranchStrategy;
-/**
- * A sandbox provider — the pluggable unit that `run()`, `interactive()`, and
- * `createSandbox()` accept. Tagged for internal dispatch: "bind-mount",
- * "isolated", or "none". When `NoSandboxProvider` is used, the agent runs
- * directly on the host with no container isolation — opt in at your own risk.
- */
-type SandboxProvider = BindMountSandboxProvider | IsolatedSandboxProvider | NoSandboxProvider;
-/** @deprecated Use `SandboxProvider` — it now includes `NoSandboxProvider`. */
-type AnySandboxProvider = SandboxProvider;
-/**
- * Create a bind-mount sandbox provider from a config object.
- * The returned provider can be passed to `run()` or `createSandbox()`.
- */
-declare const createBindMountSandboxProvider: (config: BindMountSandboxProviderConfig) => BindMountSandboxProvider;
-/**
- * Create an isolated sandbox provider from a config object.
- * The returned provider can be passed to `run()` or `createSandbox()`.
- */
-declare const createIsolatedSandboxProvider: (config: IsolatedSandboxProviderConfig) => IsolatedSandboxProvider;
-
-export { type AnySandboxProvider as A, type BindMountSandboxHandle as B, type ExecResult as E, type HeadBranchStrategy as H, type IsolatedSandboxProvider as I, type MergeToHeadBranchStrategy as M, type NoSandboxProvider as N, type SandboxProvider as S, type BranchStrategy as a, type NamedBranchStrategy as b, type BindMountBranchStrategy as c, type BindMountCreateOptions as d, type BindMountSandboxProvider as e, type BindMountSandboxProviderConfig as f, type InteractiveExecOptions as g, type IsolatedBranchStrategy as h, type IsolatedCreateOptions as i, type IsolatedSandboxHandle as j, type IsolatedSandboxProviderConfig as k, type NoSandboxBranchStrategy as l, type NoSandboxHandle as m, createBindMountSandboxProvider as n, createIsolatedSandboxProvider as o };

package/dist/chunk-ACD46ZM4.js

@@ -1,136 +0,0 @@
-import { createInterface } from 'readline';
-
-// src/boundedTail.ts
-var MAX_TAIL_CHARS = 64 * 1024;
-var OutputByteCounter = class {
-  constructor(maxBytes) {
-    this.maxBytes = maxBytes;
-  }
-  totalBytes = 0;
-  limitExceeded = false;
-  add(chunk) {
-    this.totalBytes += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.byteLength;
-    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;
-  }
-  get exceeded() {
-    return this.limitExceeded;
-  }
-};
-var BoundedTail = class {
-  items = [];
-  totalChars = 0;
-  maxChars;
-  separator;
-  /**
-   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.
-   * @param separator String placed between items by {@link toString}. Must match
-   *   how the caller would otherwise have joined the accumulated chunks (e.g.
-   *   `"\n"` for line streams, `""` for raw chunk streams).
-   */
-  constructor(maxChars = MAX_TAIL_CHARS, separator = "") {
-    this.maxChars = maxChars;
-    this.separator = separator;
-  }
-  /** Append one item to the tail, evicting oldest items to stay within budget. */
-  push(item) {
-    const bounded = item.length > this.maxChars ? item.slice(item.length - this.maxChars) : item;
-    this.totalChars += bounded.length + (this.items.length > 0 ? this.separator.length : 0);
-    this.items.push(bounded);
-    while (this.totalChars > this.maxChars && this.items.length > 1) {
-      const dropped = this.items.shift();
-      this.totalChars -= dropped.length + this.separator.length;
-    }
-  }
-  /** Join the retained tail into a single string (length ≤ `maxChars`). */
-  toString() {
-    return this.items.join(this.separator);
-  }
-};
-var StreamedProcessOutput = class {
-  maxOutputBytes;
-  byteCounter;
-  stdoutTail;
-  stderrTail;
-  onLine;
-  outputLimitError;
-  constructor(options) {
-    this.maxOutputBytes = options.maxOutputBytes;
-    this.byteCounter = options.maxOutputBytes === void 0 ? void 0 : new OutputByteCounter(options.maxOutputBytes);
-    const tailChars = options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;
-    this.stdoutTail = new BoundedTail(tailChars, "\n");
-    this.stderrTail = new BoundedTail(tailChars, "");
-    this.onLine = options.onLine ?? (() => {
-    });
-  }
-  checkLimit(chunk) {
-    if (this.byteCounter === void 0 || this.outputLimitError !== void 0) {
-      return this.outputLimitError;
-    }
-    this.byteCounter.add(chunk);
-    if (this.byteCounter.exceeded) {
-      this.outputLimitError = new Error(
-        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`
-      );
-    }
-    return this.outputLimitError;
-  }
-  addStdoutLine(line) {
-    this.stdoutTail.push(line);
-    this.onLine(line);
-  }
-  addStderr(chunk) {
-    this.stderrTail.push(chunk);
-  }
-  get error() {
-    return this.outputLimitError;
-  }
-  result(exitCode) {
-    return {
-      stdout: this.stdoutTail.toString(),
-      stderr: this.stderrTail.toString(),
-      exitCode
-    };
-  }
-};
-var collectProcessOutput = (process, options, resolve, reject) => {
-  if (options.onLine || options.maxOutputBytes !== void 0) {
-    const output = new StreamedProcessOutput(options);
-    const checkLimit = (chunk) => {
-      if (output.checkLimit(chunk) !== void 0) process.kill();
-    };
-    process.stdout.on("data", checkLimit);
-    process.stderr.on("data", checkLimit);
-    const lines = createInterface({ input: process.stdout });
-    lines.on("line", (line) => output.addStdoutLine(line));
-    process.stderr.on("data", (chunk) => {
-      output.addStderr(chunk.toString());
-    });
-    process.onClose((code) => {
-      if (output.error !== void 0) {
-        reject(output.error);
-        return;
-      }
-      resolve(output.result(code ?? 0));
-    });
-    return;
-  }
-  const stdoutChunks = [];
-  const stderrChunks = [];
-  process.stdout.on("data", (chunk) => {
-    stdoutChunks.push(chunk.toString());
-  });
-  process.stderr.on("data", (chunk) => {
-    stderrChunks.push(chunk.toString());
-  });
-  process.onClose((code) => {
-    resolve({
-      stdout: stdoutChunks.join(""),
-      stderr: stderrChunks.join(""),
-      exitCode: code ?? 0
-    });
-  });
-};
-
-export { MAX_TAIL_CHARS, StreamedProcessOutput, collectProcessOutput };
-//# sourceMappingURL=chunk-ACD46ZM4.js.map
-//# sourceMappingURL=chunk-ACD46ZM4.js.map

package/dist/chunk-ACD46ZM4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/boundedTail.ts","../src/processOutput.ts"],"names":[],"mappings":";;;AAmBO,IAAM,iBAAiB,EAAA,GAAK;AAQ5B,IAAM,oBAAN,MAAwB;AAAA,EAI7B,YAA6B,QAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AAAA,EAAmB;AAAA,EAHxC,UAAA,GAAa,CAAA;AAAA,EACb,aAAA,GAAgB,KAAA;AAAA,EAIxB,IAAI,KAAA,EAAkC;AACpC,IAAA,IAAA,CAAK,UAAA,IACH,OAAO,KAAA,KAAU,QAAA,GAAW,OAAO,UAAA,CAAW,KAAK,IAAI,KAAA,CAAM,UAAA;AAC/D,IAAA,IAAI,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,QAAA,OAAe,aAAA,GAAgB,IAAA;AAAA,EAC5D;AAAA,EAEA,IAAI,QAAA,GAAoB;AACtB,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AACF,CAAA;AAaO,IAAM,cAAN,MAAkB;AAAA,EACN,QAAkB,EAAC;AAAA,EAC5B,UAAA,GAAa,CAAA;AAAA,EACJ,QAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjB,WAAA,CAAY,QAAA,GAAmB,cAAA,EAAgB,SAAA,GAAY,EAAA,EAAI;AAC7D,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA,EAGA,KAAK,IAAA,EAAoB;AACvB,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAA,GACf,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAQ,CAAA,GACtC,IAAA;AACN,IAAA,IAAA,CAAK,UAAA,IACH,QAAQ,MAAA,IAAU,IAAA,CAAK,MAAM,MAAA,GAAS,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,CAAA;AACpE,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,KAAK,UAAA,GAAa,IAAA,CAAK,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AAC/D,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AACjC,MAAA,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA;AAAA,IACrD;AAAA,EACF;AAAA;AAAA,EAGA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAAA,EACvC;AACF,CAAA;ACvEO,IAAM,wBAAN,MAA4B;AAAA,EAChB,cAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACT,gBAAA;AAAA,EAER,YAAY,OAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,iBAAiB,OAAA,CAAQ,cAAA;AAC9B,IAAA,IAAA,CAAK,WAAA,GACH,QAAQ,cAAA,KAAmB,MAAA,GACvB,SACA,IAAI,iBAAA,CAAkB,QAAQ,cAAc,CAAA;AAClD,IAAA,MAAM,SAAA,GACJ,OAAA,CAAQ,cAAA,IAAkB,OAAA,CAAQ,kBAAA,IAAsB,cAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,IAAI,CAAA;AACjD,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,WAAA,CAAY,SAAA,EAAW,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,MAAA,GAAS,OAAA,CAAQ,MAAA,KAAW,MAAM;AAAA,IAAC,CAAA,CAAA;AAAA,EAC1C;AAAA,EAEA,WAAW,KAAA,EAA+C;AACxD,IAAA,IAAI,IAAA,CAAK,WAAA,KAAgB,MAAA,IAAa,IAAA,CAAK,qBAAqB,MAAA,EAAW;AACzE,MAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,IAAI,KAAK,CAAA;AAC1B,IAAA,IAAI,IAAA,CAAK,YAAY,QAAA,EAAU;AAC7B,MAAA,IAAA,CAAK,mBAAmB,IAAI,KAAA;AAAA,QAC1B,CAAA,gCAAA,EAAmC,KAAK,cAAc,CAAA,MAAA;AAAA,OACxD;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,cAAc,IAAA,EAAoB;AAChC,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,IAAI,CAAA;AACzB,IAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAAA,EAClB;AAAA,EAEA,UAAU,KAAA,EAAqB;AAC7B,IAAA,IAAA,CAAK,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,EAC5B;AAAA,EAEA,IAAI,KAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,OAAO,QAAA,EAAuC;AAC5C,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC,MAAA,EAAQ,IAAA,CAAK,UAAA,CAAW,QAAA,EAAS;AAAA,MACjC;AAAA,KACF;AAAA,EACF;AACF;AAEO,IAAM,oBAAA,GAAuB,CAClC,OAAA,EAMA,OAAA,EACA,SACA,MAAA,KACS;AACT,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAU,OAAA,CAAQ,cAAA,KAAmB,MAAA,EAAW;AAC1D,IAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB,OAAO,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAAwB;AAC1C,MAAA,IAAI,OAAO,UAAA,CAAW,KAAK,CAAA,KAAM,MAAA,UAAmB,IAAA,EAAK;AAAA,IAC3D,CAAA;AACA,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,UAAU,CAAA;AACpC,IAAA,MAAM,QAAQ,eAAA,CAAgB,EAAE,KAAA,EAAO,OAAA,CAAQ,QAAQ,CAAA;AACvD,IAAA,KAAA,CAAM,GAAG,MAAA,EAAQ,CAAC,SAAS,MAAA,CAAO,aAAA,CAAc,IAAI,CAAC,CAAA;AACrD,IAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,MAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,IACnC,CAAC,CAAA;AACD,IAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,MAAA,IAAI,MAAA,CAAO,UAAU,MAAA,EAAW;AAC9B,QAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AACnB,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,IAAQ,CAAC,CAAC,CAAA;AAAA,IAClC,CAAC,CAAA;AACD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAC3C,IAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,EACpC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,IAAA,KAAS;AACxB,IAAA,OAAA,CAAQ;AAAA,MACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,UAAU,IAAA,IAAQ;AAAA,KACnB,CAAA;AAAA,EACH,CAAC,CAAA;AACH","file":"chunk-ACD46ZM4.js","sourcesContent":["/**\n * A bounded, rolling tail of streamed output — a pure, provider-agnostic\n * utility shared by every sandbox provider that streams `exec` output.\n *\n * When a provider streams output line-by-line, it accumulates the stream only\n * to build the returned `ExecResult.stdout`/`stderr`. Consumers read just the\n * tail of that value (e.g. the last lines of an error, or a fallback for the\n * agent's final result), so retaining the whole stream is unnecessary — and,\n * once the accumulated string passes V8's ~512MB max string length, fatal: a\n * naive `chunks.join()` throws `RangeError: Invalid string length`, which on a\n * long agent run crashes the whole orchestration.\n */\n\n/**\n * Default maximum number of characters retained in a bounded output tail.\n *\n * 64KiB sits comfortably above any agent completion signal or structured-output\n * payload while staying far below V8's max string length.\n */\nexport const MAX_TAIL_CHARS = 64 * 1024;\n\n/**\n * Counts streamed output without retaining it. Providers use this when a\n * caller needs a hard byte ceiling for a one-shot command (for example prompt\n * expansion), so an untrusted command cannot exhaust memory before its output\n * is inspected.\n */\nexport class OutputByteCounter {\n  private totalBytes = 0;\n  private limitExceeded = false;\n\n  constructor(private readonly maxBytes: number) {}\n\n  add(chunk: string | Uint8Array): void {\n    this.totalBytes +=\n      typeof chunk === \"string\" ? Buffer.byteLength(chunk) : chunk.byteLength;\n    if (this.totalBytes > this.maxBytes) this.limitExceeded = true;\n  }\n\n  get exceeded(): boolean {\n    return this.limitExceeded;\n  }\n}\n\n/**\n * A fixed-size rolling tail of strings, bounded by total character length.\n *\n * `push` appends to the tail; once the joined length would exceed `maxChars`,\n * the oldest items are dropped from the front. A single item longer than\n * `maxChars` is truncated to its own tail, so a newline-free blob can't\n * overflow on one push. `toString` joins the retained items, and its length is\n * always at most `maxChars`.\n *\n * The running length counter is encapsulated so callers can't desync it.\n */\nexport class BoundedTail {\n  private readonly items: string[] = [];\n  private totalChars = 0;\n  private readonly maxChars: number;\n  private readonly separator: string;\n\n  /**\n   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.\n   * @param separator String placed between items by {@link toString}. Must match\n   *   how the caller would otherwise have joined the accumulated chunks (e.g.\n   *   `\"\\n\"` for line streams, `\"\"` for raw chunk streams).\n   */\n  constructor(maxChars: number = MAX_TAIL_CHARS, separator = \"\") {\n    this.maxChars = maxChars;\n    this.separator = separator;\n  }\n\n  /** Append one item to the tail, evicting oldest items to stay within budget. */\n  push(item: string): void {\n    const bounded =\n      item.length > this.maxChars\n        ? item.slice(item.length - this.maxChars)\n        : item;\n    this.totalChars +=\n      bounded.length + (this.items.length > 0 ? this.separator.length : 0);\n    this.items.push(bounded);\n    while (this.totalChars > this.maxChars && this.items.length > 1) {\n      const dropped = this.items.shift()!;\n      this.totalChars -= dropped.length + this.separator.length;\n    }\n  }\n\n  /** Join the retained tail into a single string (length ≤ `maxChars`). */\n  toString(): string {\n    return this.items.join(this.separator);\n  }\n}\n","import type { Readable } from \"node:stream\";\nimport { createInterface } from \"node:readline\";\nimport {\n  BoundedTail,\n  MAX_TAIL_CHARS,\n  OutputByteCounter,\n} from \"./boundedTail.js\";\n\nexport interface ProcessOutputResult {\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n}\n\nexport interface ProcessOutputOptions {\n  readonly onLine?: (line: string) => void;\n  readonly maxOutputBytes?: number;\n  readonly maxOutputTailChars?: number;\n}\n\nexport class StreamedProcessOutput {\n  private readonly maxOutputBytes: number | undefined;\n  private readonly byteCounter: OutputByteCounter | undefined;\n  private readonly stdoutTail: BoundedTail;\n  private readonly stderrTail: BoundedTail;\n  private readonly onLine: (line: string) => void;\n  private outputLimitError: Error | undefined;\n\n  constructor(options: ProcessOutputOptions) {\n    this.maxOutputBytes = options.maxOutputBytes;\n    this.byteCounter =\n      options.maxOutputBytes === undefined\n        ? undefined\n        : new OutputByteCounter(options.maxOutputBytes);\n    const tailChars =\n      options.maxOutputBytes ?? options.maxOutputTailChars ?? MAX_TAIL_CHARS;\n    this.stdoutTail = new BoundedTail(tailChars, \"\\n\");\n    this.stderrTail = new BoundedTail(tailChars, \"\");\n    this.onLine = options.onLine ?? (() => {});\n  }\n\n  checkLimit(chunk: string | Uint8Array): Error | undefined {\n    if (this.byteCounter === undefined || this.outputLimitError !== undefined) {\n      return this.outputLimitError;\n    }\n    this.byteCounter.add(chunk);\n    if (this.byteCounter.exceeded) {\n      this.outputLimitError = new Error(\n        `Sandbox command output exceeded ${this.maxOutputBytes} bytes`,\n      );\n    }\n    return this.outputLimitError;\n  }\n\n  addStdoutLine(line: string): void {\n    this.stdoutTail.push(line);\n    this.onLine(line);\n  }\n\n  addStderr(chunk: string): void {\n    this.stderrTail.push(chunk);\n  }\n\n  get error(): Error | undefined {\n    return this.outputLimitError;\n  }\n\n  result(exitCode: number): ProcessOutputResult {\n    return {\n      stdout: this.stdoutTail.toString(),\n      stderr: this.stderrTail.toString(),\n      exitCode,\n    };\n  }\n}\n\nexport const collectProcessOutput = (\n  process: {\n    readonly stdout: Readable;\n    readonly stderr: Readable;\n    readonly kill: () => void;\n    readonly onClose: (listener: (code: number | null) => void) => void;\n  },\n  options: ProcessOutputOptions,\n  resolve: (result: ProcessOutputResult) => void,\n  reject: (error: Error) => void,\n): void => {\n  if (options.onLine || options.maxOutputBytes !== undefined) {\n    const output = new StreamedProcessOutput(options);\n    const checkLimit = (chunk: Buffer): void => {\n      if (output.checkLimit(chunk) !== undefined) process.kill();\n    };\n    process.stdout.on(\"data\", checkLimit);\n    process.stderr.on(\"data\", checkLimit);\n    const lines = createInterface({ input: process.stdout });\n    lines.on(\"line\", (line) => output.addStdoutLine(line));\n    process.stderr.on(\"data\", (chunk: Buffer) => {\n      output.addStderr(chunk.toString());\n    });\n    process.onClose((code) => {\n      if (output.error !== undefined) {\n        reject(output.error);\n        return;\n      }\n      resolve(output.result(code ?? 0));\n    });\n    return;\n  }\n\n  const stdoutChunks: string[] = [];\n  const stderrChunks: string[] = [];\n  process.stdout.on(\"data\", (chunk: Buffer) => {\n    stdoutChunks.push(chunk.toString());\n  });\n  process.stderr.on(\"data\", (chunk: Buffer) => {\n    stderrChunks.push(chunk.toString());\n  });\n  process.onClose((code) => {\n    resolve({\n      stdout: stdoutChunks.join(\"\"),\n      stderr: stderrChunks.join(\"\"),\n      exitCode: code ?? 0,\n    });\n  });\n};\n"]}