lemans 1.0.0.pre.1 → 1.0.0.rc.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9696bf1ad08f76e0a6faafd5651d67e1a98ca6e36e189ab41f71bdcb5f5f173e
-  data.tar.gz: 02e255c8829342789f9a057c1234a3a45bb2ca366db832caedb43d42dd0d7c5b
+  metadata.gz: 811f501d983a415eea28f7e987bf9d30f79537bba9f5adae25902dd9d252d253
+  data.tar.gz: 256e0bc81791b6b8dc35401985662e6c2ae52749704a31391158ac4b62c7b05f
 SHA512:
-  metadata.gz: ccb12333aefc40203516d6e3cd98fdfadb2c96c6c159c4ea6acda851de502e5d9431ec8c69bd330e9b483a09bd6e5d93ef6d30e1dad23ba3f32485f1cf8a3283
-  data.tar.gz: 4548e86baeaefe091845ec3d16f91c8b08d54373c2d375f20e78b03e5a95c32f7506137dc02a0a218be02fd8fe8416e000566af91354cd7bf90301d248574c42
+  metadata.gz: 6babf67abbe45e381a40cf4df59b3b8287cb9e14356de332513fab807ae9e52e38df248905036af2257b7b9e8792b436ee6bd0ce16df4abacfb023d445ccfc2b
+  data.tar.gz: 28cf1ca435238966d829b6057867a32c3a2f23165f1341bd8499d3d393c82461c7116ea4f410e6252035e1e7f1a3194be50673a00e410207af452da2f3c73d42

data/CHANGELOG.md

@@ -1,9 +1,5 @@
 ## [Unreleased]
 
-## [0.2.0] - 2026-08-18
-
-- Conventional configuration, new flat results structure, `miniswen-installed` agent
-
-## [0.1.0] - 2026-08-11
+## [1.0.0] - 2026-08-21
 
 - Initial release

data/exe/lemans-remote

@@ -743,7 +743,7 @@ module LemansRemote # :nodoc: all
     option :concurrency, type: :numeric, default: 4, aliases: "-C",
                          desc: "Async mode: how many sandboxes to launch in parallel (1 to serialize)"
     def run_bench
-      bench = Lemans::Bench.load(options[:bench])
+      bench = Lemans::Config.load_file(options[:bench])
       tasks = options[:task] || []
       unknown = tasks - bench.tasks.map(&:name)
       raise Thor::Error, "lemans-remote: no such task(s): #{unknown.join(", ")}" if unknown.any?

data/lib/lemans/cli.rb

@@ -54,7 +54,7 @@ module Lemans
 
       tasks = filter_tasks(config.tasks, tags: options[:tag], name: options[:task])
 
-      store = Stores::FS.new(options[:runs_dir])
+      store = Stores::FS.new(options[:runs_dir], filterer: SecretsFilter.default)
 
       runner = Runner.new(config, tasks, store:, resume: options[:resume])
 

data/lib/lemans/secrets_filter.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module Lemans
+  # Redacts known secret values (API credentials) from everything the store persists.
+  class SecretsFilter
+    # Credentials follow the <PROVIDER>_<KIND> environment convention
+    # (DAYTONA_API_KEY, OPENROUTER_API_KEY, DAYTONA_TOKEN, ...).
+    def self.default = new(ENV.filter_map { |name, value| value if name.match?(/_(API_KEY|TOKEN|SECRET|JWT)\z/) })
+
+    def initialize(secrets, replacement: "<filtered>", min_length: 8)
+      @replacement = replacement
+
+      secrets = secrets.compact.uniq.select { it.length >= min_length }
+      # Match bytes, not characters, so artifacts with non-UTF-8 content
+      # (binary patch hunks) don't raise on scanning.
+      @pattern = Regexp.union(secrets.map(&:b)) unless secrets.empty?
+    end
+
+    def filter(text)
+      return text unless @pattern
+
+      text.b.gsub(@pattern, @replacement)
+    end
+  end
+end

data/lib/lemans/stores/fs.rb

@@ -11,11 +11,12 @@ module Lemans
     class FS < Store
       FILENAME = "result.json"
 
-      private attr_reader :root
+      private attr_reader :root, :filterer
 
-      def initialize(root)
+      def initialize(root, filterer: nil)
         super()
         @root = Pathname(root)
+        @filterer = filterer
       end
 
       def setup
@@ -62,7 +63,7 @@ module Lemans
       end
 
       def save(result)
-        atomic_write(result_dir(result).join(FILENAME), "#{JSON.pretty_generate(result.as_json)}\n")
+        atomic_write(result_dir(result).join(FILENAME), filtered("#{JSON.pretty_generate(result.as_json)}\n"))
       rescue SystemCallError, JSON::GeneratorError => e
         # runs_dir unwritable, disk full
         raise ConfigError, "cannot record trial #{result.id}: #{e.message}"
@@ -76,7 +77,7 @@ module Lemans
         end
 
         destination.dirname.mkpath
-        contents.is_a?(String) ? destination.write(contents) : IO.copy_stream(contents, destination)
+        contents.is_a?(String) ? destination.write(filtered(contents)) : copy_filtered(contents, destination)
         destination
       rescue SystemCallError => e
         warn "lemans: could not save artifact #{path} for #{result.id}: #{e.message}"
@@ -85,6 +86,18 @@ module Lemans
 
       private
 
+      def filtered(text) = filterer ? filterer.filter(text) : text
+
+      # Secrets never span lines, so filtering line by line keeps memory
+      # constant without a plain-text copy ever touching the disk.
+      def copy_filtered(contents, destination)
+        return IO.copy_stream(contents, destination) unless filterer
+
+        destination.open("wb") do |file|
+          contents.each_line { file.write(filterer.filter(it)) }
+        end
+      end
+
       def prune_empty_parents(dir)
         while dir != root && dir.children.empty?
           dir.rmdir

data/lib/lemans/trial/verifier/assets/eport-lemans.rb

@@ -22,12 +22,20 @@ end
 if defined?(Minitest)
   LemansReport.register
 else
+  module LemansReport # :nodoc:
+    class << self
+      attr_accessor :name_method
+    end
+
+    self.name_method = Module.instance_method(:name)
+  end
+
   # `-r` runs before bundler picks the app's minitest, so requiring minitest
   # here would activate the wrong version. Instead watch class definitions and
   # register the moment minitest's own module body closes; the probe disarms
   # itself and nothing foreign is patched.
   trace = TracePoint.new(:end) do |event|
-    next unless event.self.is_a?(Module) && event.self.name == "Minitest"
+    next unless event.self.is_a?(Module) && LemansReport.name_method.bind_call(event.self) == "Minitest"
 
     LemansReport.register
     trace.disable if LemansReport.registered?

data/lib/lemans/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Lemans
-  VERSION = "1.0.0.pre.1"
+  VERSION = "1.0.0.rc.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lemans
 version: !ruby/object:Gem::Version
-  version: 1.0.0.pre.1
+  version: 1.0.0.rc.1
 platform: ruby
 authors:
 - Svyatoslav Kryukov
@@ -186,6 +186,7 @@ files:
 - lib/lemans/runner.rb
 - lib/lemans/runner/executor.rb
 - lib/lemans/runner/task.rb
+- lib/lemans/secrets_filter.rb
 - lib/lemans/store.rb
 - lib/lemans/stores/fs.rb
 - lib/lemans/task_definition.rb