@snappedly-tools/shipyard 0.7.0 → 0.8.0

package/dist/sandboxes/vercel.js

@@ -1,166 +0,0 @@
-import { createIsolatedSandboxProvider, shellQuote } from '../chunk-KMGNFXKN.js';
-import { MAX_TAIL_CHARS, StreamedProcessOutput } from '../chunk-ACD46ZM4.js';
-import { execFileSync } from 'child_process';
-import { mkdir, lstat, writeFile, chmod, mkdtemp, readFile, rm } from 'fs/promises';
-import { randomUUID } from 'crypto';
-import { tmpdir } from 'os';
-import { dirname, join } from 'path';
-import { Writable } from 'stream';
-
-var VERCEL_REPO_PATH = "/vercel/sandbox/workspace";
-var vercel = (options) => createIsolatedSandboxProvider({
-  name: "vercel",
-  env: options?.env,
-  create: async (createOptions) => {
-    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
-    const { Sandbox } = await import('@vercel/sandbox');
-    const createParams = {};
-    if (options?.source) createParams.source = options.source;
-    if (options?.ports) createParams.ports = options.ports;
-    if (options?.resources) createParams.resources = options.resources;
-    if (options?.networkPolicy)
-      createParams.networkPolicy = options.networkPolicy;
-    const resolvedRuntime = options?.runtime ?? options?.template;
-    if (resolvedRuntime) createParams.runtime = resolvedRuntime;
-    const timeoutValue = options?.timeout ?? options?.timeoutMs;
-    if (timeoutValue !== void 0) createParams.timeout = timeoutValue;
-    createParams.env = createOptions.env;
-    if (options?.token) createParams.token = options.token;
-    if (options?.projectId) createParams.projectId = options.projectId;
-    if (options?.teamId) createParams.teamId = options.teamId;
-    const sandbox = await Sandbox.create(
-      createParams
-    );
-    await sandbox.mkDir(VERCEL_REPO_PATH);
-    const handle = {
-      worktreePath: VERCEL_REPO_PATH,
-      exec: async (command, opts) => {
-        if (opts?.onLine || opts?.maxOutputBytes !== void 0) {
-          const output = new StreamedProcessOutput({
-            ...opts,
-            maxOutputTailChars
-          });
-          let partial = "";
-          const stdoutWritable = new Writable({
-            write(chunk, _encoding, callback) {
-              const error = output.checkLimit(chunk.toString());
-              if (error !== void 0) {
-                callback(error);
-                return;
-              }
-              const text = partial + chunk.toString();
-              const lines = text.split("\n");
-              partial = lines.pop() ?? "";
-              for (const line of lines) {
-                output.addStdoutLine(line);
-              }
-              callback();
-            },
-            final(callback) {
-              if (partial) {
-                output.addStdoutLine(partial);
-                partial = "";
-              }
-              callback();
-            }
-          });
-          const stderrWritable = new Writable({
-            write(chunk, _encoding, callback) {
-              const error = output.checkLimit(chunk.toString());
-              if (error !== void 0) {
-                callback(error);
-                return;
-              }
-              output.addStderr(chunk.toString());
-              callback();
-            }
-          });
-          const result2 = await sandbox.runCommand({
-            cmd: "sh",
-            args: ["-c", command],
-            cwd: opts?.cwd ?? VERCEL_REPO_PATH,
-            stdout: stdoutWritable,
-            stderr: stderrWritable,
-            ...opts?.sudo ? { sudo: true } : {}
-          });
-          if (output.error !== void 0) throw output.error;
-          return output.result(result2.exitCode);
-        }
-        const result = await sandbox.runCommand({
-          cmd: "sh",
-          args: ["-c", command],
-          cwd: opts?.cwd ?? VERCEL_REPO_PATH,
-          ...opts?.sudo ? { sudo: true } : {}
-        });
-        const stdout = await result.stdout();
-        const stderr = await result.stderr();
-        return {
-          stdout,
-          stderr,
-          exitCode: result.exitCode
-        };
-      },
-      copyIn: async (hostPath, sandboxPath) => {
-        const info = await lstat(hostPath);
-        if (info.isSymbolicLink()) {
-          throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);
-        }
-        if (info.isDirectory()) {
-          const tempDir = await mkdtemp(join(tmpdir(), "shipyard-copyin-"));
-          const tarPath = join(tempDir, "archive.tar.gz");
-          try {
-            execFileSync("tar", ["-czf", tarPath, "-C", hostPath, "."]);
-            const tarContent = await readFile(tarPath);
-            const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;
-            await sandbox.writeFiles([
-              { path: sandboxTarPath, content: tarContent }
-            ]);
-            await sandbox.runCommand({
-              cmd: "sh",
-              args: [
-                "-c",
-                `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`
-              ]
-            });
-          } finally {
-            await rm(tempDir, { recursive: true, force: true }).catch(
-              () => {
-              }
-            );
-          }
-        } else {
-          const content = await readFile(hostPath);
-          await sandbox.writeFiles([{ path: sandboxPath, content }]);
-        }
-      },
-      copyFileOut: async (sandboxPath, hostPath) => {
-        const buffer = await sandbox.readFileToBuffer({
-          path: sandboxPath
-        });
-        if (!buffer) {
-          throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);
-        }
-        await mkdir(dirname(hostPath), { recursive: true, mode: 448 });
-        try {
-          if ((await lstat(hostPath)).isSymbolicLink()) {
-            throw new Error(
-              `Refusing to overwrite symbolic link: ${hostPath}`
-            );
-          }
-        } catch (error) {
-          if (error.code !== "ENOENT") throw error;
-        }
-        await writeFile(hostPath, buffer, { mode: 384 });
-        await chmod(hostPath, 384);
-      },
-      close: async () => {
-        await sandbox.stop();
-      }
-    };
-    return handle;
-  }
-});
-
-export { vercel };
-//# sourceMappingURL=vercel.js.map
-//# sourceMappingURL=vercel.js.map

package/dist/sandboxes/vercel.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/sandboxes/vercel.ts"],"names":["result"],"mappings":";;;;;;;;;AAiCA,IAAM,gBAAA,GAAmB,2BAAA;AA+GlB,IAAM,MAAA,GAAS,CAAC,OAAA,KACrB,6BAAA,CAA8B;AAAA,EAC5B,IAAA,EAAM,QAAA;AAAA,EACN,KAAK,OAAA,EAAS,GAAA;AAAA,EACd,MAAA,EAAQ,OAAO,aAAA,KAAkD;AAC/D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,OAAO,iBAAiB,CAAA;AAElD,IAAA,MAAM,eAAwC,EAAC;AAG/C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AACnD,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,aAAA;AACX,MAAA,YAAA,CAAa,gBAAgB,OAAA,CAAQ,aAAA;AAEvC,IAAA,MAAM,eAAA,GAAkB,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,QAAA;AACrD,IAAA,IAAI,eAAA,eAA8B,OAAA,GAAU,eAAA;AAG5C,IAAA,MAAM,YAAA,GAAe,OAAA,EAAS,OAAA,IAAW,OAAA,EAAS,SAAA;AAClD,IAAA,IAAI,YAAA,KAAiB,MAAA,EAAW,YAAA,CAAa,OAAA,GAAU,YAAA;AAGvD,IAAA,YAAA,CAAa,MAAM,aAAA,CAAc,GAAA;AAGjC,IAAA,IAAI,OAAA,EAAS,KAAA,EAAO,YAAA,CAAa,KAAA,GAAQ,OAAA,CAAQ,KAAA;AACjD,IAAA,IAAI,OAAA,EAAS,SAAA,EAAW,YAAA,CAAa,SAAA,GAAY,OAAA,CAAQ,SAAA;AACzD,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,YAAA,CAAa,MAAA,GAAS,OAAA,CAAQ,MAAA;AAEnD,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA;AAAA,MAC5B;AAAA,KACF;AAGA,IAAA,MAAM,OAAA,CAAQ,MAAM,gBAAgB,CAAA;AAEpC,IAAA,MAAM,MAAA,GAAgC;AAAA,MACpC,YAAA,EAAc,gBAAA;AAAA,MAEd,IAAA,EAAM,OACJ,OAAA,EACA,IAAA,KAMwB;AACxB,QAAA,IAAI,IAAA,EAAM,MAAA,IAAU,IAAA,EAAM,cAAA,KAAmB,MAAA,EAAW;AACtD,UAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,YACvC,GAAG,IAAA;AAAA,YACH;AAAA,WACD,CAAA;AACD,UAAA,IAAI,OAAA,GAAU,EAAA;AAEd,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAM,IAAA,GAAO,OAAA,GAAU,KAAA,CAAM,QAAA,EAAS;AACtC,cAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,cAAA,OAAA,GAAU,KAAA,CAAM,KAAI,IAAK,EAAA;AACzB,cAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,gBAAA,MAAA,CAAO,cAAc,IAAI,CAAA;AAAA,cAC3B;AACA,cAAA,QAAA,EAAS;AAAA,YACX,CAAA;AAAA,YACA,MAAM,QAAA,EAAU;AACd,cAAA,IAAI,OAAA,EAAS;AACX,gBAAA,MAAA,CAAO,cAAc,OAAO,CAAA;AAC5B,gBAAA,OAAA,GAAU,EAAA;AAAA,cACZ;AACA,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAM,cAAA,GAAiB,IAAI,QAAA,CAAS;AAAA,YAClC,KAAA,CAAM,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAChC,cAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAChD,cAAA,IAAI,UAAU,MAAA,EAAW;AACvB,gBAAA,QAAA,CAAS,KAAK,CAAA;AACd,gBAAA;AAAA,cACF;AACA,cAAA,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,CAAA;AACjC,cAAA,QAAA,EAAS;AAAA,YACX;AAAA,WACD,CAAA;AAED,UAAA,MAAMA,OAAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,YACtC,GAAA,EAAK,IAAA;AAAA,YACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,YACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,YAClB,MAAA,EAAQ,cAAA;AAAA,YACR,MAAA,EAAQ,cAAA;AAAA,YACR,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,WACpC,CAAA;AAED,UAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,EAAW,MAAM,MAAA,CAAO,KAAA;AAC7C,UAAA,OAAO,MAAA,CAAO,MAAA,CAAOA,OAAAA,CAAO,QAAQ,CAAA;AAAA,QACtC;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,UAAA,CAAW;AAAA,UACtC,GAAA,EAAK,IAAA;AAAA,UACL,IAAA,EAAM,CAAC,IAAA,EAAM,OAAO,CAAA;AAAA,UACpB,GAAA,EAAK,MAAM,GAAA,IAAO,gBAAA;AAAA,UAClB,GAAI,IAAA,EAAM,IAAA,GAAO,EAAE,IAAA,EAAM,IAAA,KAAS;AAAC,SACpC,CAAA;AAED,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AACnC,QAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AAEnC,QAAA,OAAO;AAAA,UACL,MAAA;AAAA,UACA,MAAA;AAAA,UACA,UAAU,MAAA,CAAO;AAAA,SACnB;AAAA,MACF,CAAA;AAAA,MAEA,MAAA,EAAQ,OACN,QAAA,EACA,WAAA,KACkB;AAClB,QAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,QAAQ,CAAA;AACjC,QAAA,IAAI,IAAA,CAAK,gBAAe,EAAG;AACzB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,CAAE,CAAA;AAAA,QACjE;AACA,QAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,UAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,MAAA,EAAO,EAAG,kBAAkB,CAAC,CAAA;AAChE,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,EAAS,gBAAgB,CAAA;AAC9C,UAAA,IAAI;AACF,YAAA,YAAA,CAAa,OAAO,CAAC,MAAA,EAAQ,SAAS,IAAA,EAAM,QAAA,EAAU,GAAG,CAAC,CAAA;AAC1D,YAAA,MAAM,UAAA,GAAa,MAAM,QAAA,CAAS,OAAO,CAAA;AACzC,YAAA,MAAM,cAAA,GAAiB,CAAA,qBAAA,EAAwB,UAAA,EAAY,CAAA,OAAA,CAAA;AAC3D,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,EAAE,IAAA,EAAM,cAAA,EAAgB,OAAA,EAAS,UAAA;AAAW,aAC7C,CAAA;AACD,YAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,cACvB,GAAA,EAAK,IAAA;AAAA,cACL,IAAA,EAAM;AAAA,gBACJ,IAAA;AAAA,gBACA,CAAA,SAAA,EAAY,UAAA,CAAW,WAAW,CAAC,gBAAgB,UAAA,CAAW,cAAc,CAAC,CAAA,IAAA,EAAO,WAAW,WAAW,CAAC,CAAA,UAAA,EAAa,UAAA,CAAW,cAAc,CAAC,CAAA;AAAA;AACpJ,aACD,CAAA;AAAA,UACH,CAAA,SAAE;AACA,YAAA,MAAM,EAAA,CAAG,SAAS,EAAE,SAAA,EAAW,MAAM,KAAA,EAAO,IAAA,EAAM,CAAA,CAAE,KAAA;AAAA,cAClD,MAAM;AAAA,cAAC;AAAA,aACT;AAAA,UACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,QAAQ,CAAA;AACvC,UAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,EAAE,MAAM,WAAA,EAAa,OAAA,EAAS,CAAC,CAAA;AAAA,QAC3D;AAAA,MACF,CAAA;AAAA,MAEA,WAAA,EAAa,OACX,WAAA,EACA,QAAA,KACkB;AAClB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,gBAAA,CAAiB;AAAA,UAC5C,IAAA,EAAM;AAAA,SACP,CAAA;AACD,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,WAAW,CAAA,CAAE,CAAA;AAAA,QACpE;AACA,QAAA,MAAM,KAAA,CAAM,QAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,GAAA,EAAO,CAAA;AAC/D,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,MAAM,KAAA,CAAM,QAAQ,CAAA,EAAG,gBAAe,EAAG;AAC5C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,wCAAwC,QAAQ,CAAA;AAAA,aAClD;AAAA,UACF;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAAA,QAChE;AACA,QAAA,MAAM,UAAU,QAAA,EAAU,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAO,CAAA;AACjD,QAAA,MAAM,KAAA,CAAM,UAAU,GAAK,CAAA;AAAA,MAC7B,CAAA;AAAA,MAEA,OAAO,YAA2B;AAChC,QAAA,MAAM,QAAQ,IAAA,EAAK;AAAA,MACrB;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAC","file":"vercel.js","sourcesContent":["/**\n * Vercel isolated sandbox provider — wraps `@vercel/sandbox` into a SandboxProvider.\n *\n * Usage:\n *   import { vercel } from \"@snappedly-tools/shipyard/sandboxes/vercel\";\n *   await run({ agent: codex(CODEX_MODELS.routine), sandbox: vercel() });\n */\n\nimport { execFileSync } from \"node:child_process\";\nimport {\n  lstat,\n  chmod,\n  mkdir,\n  mkdtemp,\n  readFile,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { Writable } from \"node:stream\";\nimport {\n  createIsolatedSandboxProvider,\n  type ExecResult,\n  type IsolatedSandboxHandle,\n  type IsolatedSandboxProvider,\n} from \"../SandboxProvider.js\";\nimport { MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { StreamedProcessOutput } from \"../processOutput.js\";\nimport { shellQuote } from \"../shellQuote.js\";\n\n/** Worktree path inside the Vercel sandbox. */\nconst VERCEL_REPO_PATH = \"/vercel/sandbox/workspace\";\n\n/**\n * Options for creating a Vercel sandbox provider.\n *\n * All `@vercel/sandbox` `Sandbox.create()` options are accepted as pass-through,\n * plus Shipyard-specific options for auth and branch strategy.\n */\nexport interface VercelOptions {\n  /**\n   * Vercel access token.\n   *\n   * Falls back to the SDK's default auth behavior, which reads\n   * `VERCEL_OIDC_TOKEN` (recommended for Vercel-hosted environments) or\n   * `VERCEL_TOKEN` from the environment.\n   */\n  readonly token?: string;\n\n  // ---- Pass-through @vercel/sandbox Sandbox.create() options ----\n\n  /**\n   * The source of the sandbox (git repo, tarball, or snapshot).\n   * Omit to start an empty sandbox.\n   */\n  readonly source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n        username?: string;\n        password?: string;\n      }\n    | {\n        type: \"tarball\";\n        url: string;\n      }\n    | {\n        type: \"snapshot\";\n        snapshotId: string;\n      };\n\n  /** Array of port numbers to expose from the sandbox (up to 4). */\n  readonly ports?: number[];\n\n  /** Timeout in milliseconds before the sandbox auto-terminates. */\n  readonly timeout?: number;\n\n  /**\n   * Resources to allocate to the sandbox.\n   * Each vCPU gets 2048 MB of memory.\n   */\n  readonly resources?: {\n    vcpus: number;\n  };\n\n  /**\n   * The runtime of the sandbox (e.g. `\"node24\"`, `\"node22\"`, `\"python3.13\"`).\n   * Defaults to `\"node24\"`.\n   */\n  readonly runtime?: string;\n\n  /**\n   * Network policy for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  readonly networkPolicy?: Record<string, unknown>;\n\n  /**\n   * Vercel project ID to associate sandbox operations with.\n   */\n  readonly projectId?: string;\n\n  /**\n   * Vercel team ID to associate sandbox operations with.\n   */\n  readonly teamId?: string;\n\n  /**\n   * Timeout in milliseconds (alias for `timeout`, kept for discoverability).\n   */\n  readonly timeoutMs?: number;\n\n  /**\n   * Sandbox template shorthand (e.g. `\"node-22\"`).\n   * Maps to the `runtime` option.\n   */\n  readonly template?: string;\n\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a Vercel isolated sandbox provider.\n *\n * The returned provider creates Vercel Firecracker microVM sandboxes via\n * the `@vercel/sandbox` SDK. Each sandbox is ephemeral — one sandbox per run.\n *\n * Requires `@vercel/sandbox` to be installed as a peer dependency.\n */\nexport const vercel = (options?: VercelOptions): IsolatedSandboxProvider =>\n  createIsolatedSandboxProvider({\n    name: \"vercel\",\n    env: options?.env,\n    create: async (createOptions): Promise<IsolatedSandboxHandle> => {\n      const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n      // Dynamic import so the peer dependency is only loaded at runtime\n      const { Sandbox } = await import(\"@vercel/sandbox\");\n\n      const createParams: Record<string, unknown> = {};\n\n      // Pass through SDK options\n      if (options?.source) createParams.source = options.source;\n      if (options?.ports) createParams.ports = options.ports;\n      if (options?.resources) createParams.resources = options.resources;\n      if (options?.networkPolicy)\n        createParams.networkPolicy = options.networkPolicy;\n      // runtime takes precedence over the template convenience alias\n      const resolvedRuntime = options?.runtime ?? options?.template;\n      if (resolvedRuntime) createParams.runtime = resolvedRuntime;\n\n      // Timeout: prefer explicit timeout, fall back to timeoutMs alias\n      const timeoutValue = options?.timeout ?? options?.timeoutMs;\n      if (timeoutValue !== undefined) createParams.timeout = timeoutValue;\n\n      // Merge provider env with Shipyard env\n      createParams.env = createOptions.env;\n\n      // Auth: pass token and team/project IDs if provided\n      if (options?.token) createParams.token = options.token;\n      if (options?.projectId) createParams.projectId = options.projectId;\n      if (options?.teamId) createParams.teamId = options.teamId;\n\n      const sandbox = await Sandbox.create(\n        createParams as Parameters<typeof Sandbox.create>[0],\n      );\n\n      // Ensure worktree directory exists\n      await sandbox.mkDir(VERCEL_REPO_PATH);\n\n      const handle: IsolatedSandboxHandle = {\n        worktreePath: VERCEL_REPO_PATH,\n\n        exec: async (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            maxOutputBytes?: number;\n          },\n        ): Promise<ExecResult> => {\n          if (opts?.onLine || opts?.maxOutputBytes !== undefined) {\n            const output = new StreamedProcessOutput({\n              ...opts,\n              maxOutputTailChars,\n            });\n            let partial = \"\";\n\n            const stdoutWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                const text = partial + chunk.toString();\n                const lines = text.split(\"\\n\");\n                partial = lines.pop() ?? \"\";\n                for (const line of lines) {\n                  output.addStdoutLine(line);\n                }\n                callback();\n              },\n              final(callback) {\n                if (partial) {\n                  output.addStdoutLine(partial);\n                  partial = \"\";\n                }\n                callback();\n              },\n            });\n\n            const stderrWritable = new Writable({\n              write(chunk, _encoding, callback) {\n                const error = output.checkLimit(chunk.toString());\n                if (error !== undefined) {\n                  callback(error);\n                  return;\n                }\n                output.addStderr(chunk.toString());\n                callback();\n              },\n            });\n\n            const result = await sandbox.runCommand({\n              cmd: \"sh\",\n              args: [\"-c\", command],\n              cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n              stdout: stdoutWritable,\n              stderr: stderrWritable,\n              ...(opts?.sudo ? { sudo: true } : {}),\n            });\n\n            if (output.error !== undefined) throw output.error;\n            return output.result(result.exitCode);\n          }\n\n          const result = await sandbox.runCommand({\n            cmd: \"sh\",\n            args: [\"-c\", command],\n            cwd: opts?.cwd ?? VERCEL_REPO_PATH,\n            ...(opts?.sudo ? { sudo: true } : {}),\n          });\n\n          const stdout = await result.stdout();\n          const stderr = await result.stderr();\n\n          return {\n            stdout,\n            stderr,\n            exitCode: result.exitCode,\n          };\n        },\n\n        copyIn: async (\n          hostPath: string,\n          sandboxPath: string,\n        ): Promise<void> => {\n          const info = await lstat(hostPath);\n          if (info.isSymbolicLink()) {\n            throw new Error(`Refusing to copy a symbolic link: ${hostPath}`);\n          }\n          if (info.isDirectory()) {\n            const tempDir = await mkdtemp(join(tmpdir(), \"shipyard-copyin-\"));\n            const tarPath = join(tempDir, \"archive.tar.gz\");\n            try {\n              execFileSync(\"tar\", [\"-czf\", tarPath, \"-C\", hostPath, \".\"]);\n              const tarContent = await readFile(tarPath);\n              const sandboxTarPath = `/tmp/shipyard-copyin-${randomUUID()}.tar.gz`;\n              await sandbox.writeFiles([\n                { path: sandboxTarPath, content: tarContent },\n              ]);\n              await sandbox.runCommand({\n                cmd: \"sh\",\n                args: [\n                  \"-c\",\n                  `mkdir -p ${shellQuote(sandboxPath)} && tar -xzf ${shellQuote(sandboxTarPath)} -C ${shellQuote(sandboxPath)} && rm -f ${shellQuote(sandboxTarPath)}`,\n                ],\n              });\n            } finally {\n              await rm(tempDir, { recursive: true, force: true }).catch(\n                () => {},\n              );\n            }\n          } else {\n            const content = await readFile(hostPath);\n            await sandbox.writeFiles([{ path: sandboxPath, content }]);\n          }\n        },\n\n        copyFileOut: async (\n          sandboxPath: string,\n          hostPath: string,\n        ): Promise<void> => {\n          const buffer = await sandbox.readFileToBuffer({\n            path: sandboxPath,\n          });\n          if (!buffer) {\n            throw new Error(`File not found in Vercel sandbox: ${sandboxPath}`);\n          }\n          await mkdir(dirname(hostPath), { recursive: true, mode: 0o700 });\n          try {\n            if ((await lstat(hostPath)).isSymbolicLink()) {\n              throw new Error(\n                `Refusing to overwrite symbolic link: ${hostPath}`,\n              );\n            }\n          } catch (error) {\n            if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n          }\n          await writeFile(hostPath, buffer, { mode: 0o600 });\n          await chmod(hostPath, 0o600);\n        },\n\n        close: async (): Promise<void> => {\n          await sandbox.stop();\n        },\n      };\n\n      return handle;\n    },\n  });\n"]}

package/dist/templates/blank/main.mts

@@ -1,13 +0,0 @@
-import { CODEX_MODELS, run, codex } from "@snappedly-tools/shipyard";
-import { docker } from "@snappedly-tools/shipyard/sandboxes/docker";
-
-// Blank template: customize this to build your own orchestration.
-// Generated entrypoint: .shipyard/main.mts
-// Run this with: npx shipyard run
-// Or add to package.json scripts: "shipyard": "shipyard run"
-
-await run({
-  agent: codex(CODEX_MODELS.routine),
-  sandbox: docker(),
-  promptFile: "./.shipyard/prompt.md",
-});

package/dist/templates/blank/prompt.md

@@ -1,12 +0,0 @@
-# Context
-
-<!-- Use !`command` to pull in dynamic context. Commands run inside the sandbox. -->
-<!-- Example: !`git log --oneline -10` or !`{{LIST_TASKS_COMMAND}}` -->
-
-# Task
-
-<!-- Describe what the agent should do. -->
-
-# Done
-
-<!-- When the task is complete, output <promise>COMPLETE</promise> to signal early termination. -->

package/dist/templates/blank/template.json

@@ -1,4 +0,0 @@
-{
-  "name": "blank",
-  "description": "Bare scaffold — write your own prompt and orchestration"
-}