@agentv/core 4.10.0 → 4.11.2-next.1

package/dist/chunk-SDIANPEY.js

@@ -0,0 +1,181 @@
+// src/evaluation/workspace/docker-workspace.ts
+var DefaultCommandExecutor = class {
+  async exec(argv, options = {}) {
+    const { execFileWithStdin } = await import("./exec-AR6JUUN5.js");
+    return execFileWithStdin(argv, options.stdin ?? "", {
+      timeoutMs: options.timeoutMs
+    });
+  }
+};
+var DEFAULT_TIMEOUT_S = 1800;
+function buildGitCommand(target, args) {
+  if (!target?.path) {
+    return ["git", ...args];
+  }
+  return ["git", "-C", target.path, ...args];
+}
+var DockerWorkspaceProvider = class {
+  config;
+  executor;
+  timeoutMs;
+  constructor(config, executor) {
+    this.config = config;
+    this.executor = executor ?? new DefaultCommandExecutor();
+    this.timeoutMs = (config.timeout ?? DEFAULT_TIMEOUT_S) * 1e3;
+  }
+  /** Check whether the Docker CLI is available on the host. */
+  async isDockerAvailable() {
+    try {
+      const result = await this.executor.exec(
+        ["docker", "version", "--format", "{{.Server.Version}}"],
+        {
+          timeoutMs: 1e4
+        }
+      );
+      return result.exitCode === 0;
+    } catch {
+      return false;
+    }
+  }
+  /** Pull the configured Docker image. No-op if already cached locally. */
+  async pullImage() {
+    const inspectResult = await this.executor.exec(
+      ["docker", "image", "inspect", this.config.image],
+      {
+        timeoutMs: 1e4
+      }
+    );
+    if (inspectResult.exitCode === 0) {
+      return;
+    }
+    const result = await this.executor.exec(["docker", "pull", this.config.image], {
+      timeoutMs: this.timeoutMs
+    });
+    if (result.exitCode !== 0) {
+      throw new Error(`docker pull failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
+  }
+  /** Create a stopped container from the configured image with resource limits. Returns container ID. */
+  async createContainer() {
+    const argv = ["docker", "create"];
+    if (this.config.memory) {
+      argv.push(`--memory=${this.config.memory}`);
+    }
+    if (this.config.cpus !== void 0) {
+      argv.push(`--cpus=${this.config.cpus}`);
+    }
+    argv.push(this.config.image, "sleep", "infinity");
+    const result = await this.executor.exec(argv, { timeoutMs: 3e4 });
+    if (result.exitCode !== 0) {
+      throw new Error(`docker create failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
+    return result.stdout.trim();
+  }
+  /** Start a previously created container. */
+  async startContainer(containerId) {
+    const result = await this.executor.exec(["docker", "start", containerId], {
+      timeoutMs: 3e4
+    });
+    if (result.exitCode !== 0) {
+      throw new Error(`docker start failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
+  }
+  /**
+   * Reset the container checkout to the specified target refs, if any.
+   * This is used for SWE-bench images where the repo state must match the
+   * dataset's base snapshot before grading begins.
+   */
+  async resetContainerCheckout(containerId, repoCheckouts) {
+    if (!repoCheckouts || repoCheckouts.length === 0) {
+      return;
+    }
+    for (const target of repoCheckouts) {
+      const resetResult = await this.execInContainer({
+        containerId,
+        command: buildGitCommand(target, ["reset", "--hard", target.ref])
+      });
+      if (resetResult.exitCode !== 0) {
+        throw new Error(
+          `docker git reset failed (exit ${resetResult.exitCode}): ${resetResult.stderr.trim()}`
+        );
+      }
+      const verifyResult = await this.execInContainer({
+        containerId,
+        command: buildGitCommand(target, ["rev-parse", "HEAD"]),
+        timeoutMs: 3e4
+      });
+      if (verifyResult.exitCode !== 0) {
+        throw new Error(
+          `docker checkout verification failed (exit ${verifyResult.exitCode}): ${verifyResult.stderr.trim()}`
+        );
+      }
+      const head = verifyResult.stdout.trim();
+      if (head !== target.ref) {
+        throw new Error(
+          `docker checkout verification failed: expected ${target.ref} but found ${head || "<empty>"}`
+        );
+      }
+    }
+  }
+  /** Copy a local file or directory into a running container. */
+  async copyToContainer(containerId, localPath, containerPath) {
+    const result = await this.executor.exec(
+      ["docker", "cp", localPath, `${containerId}:${containerPath}`],
+      { timeoutMs: 6e4 }
+    );
+    if (result.exitCode !== 0) {
+      throw new Error(`docker cp failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
+  }
+  /**
+   * Execute a command inside a running container.
+   * If stdin is provided, it is piped via `docker exec -i`.
+   */
+  async execInContainer(options) {
+    const { containerId, command, timeoutMs, stdin } = options;
+    const argv = ["docker", "exec"];
+    if (stdin !== void 0) {
+      argv.push("-i");
+    }
+    argv.push(containerId, ...command);
+    return this.executor.exec(argv, {
+      timeoutMs: timeoutMs ?? this.timeoutMs,
+      stdin
+    });
+  }
+  /** Force-remove a container (always succeeds, even if container doesn't exist). */
+  async removeContainer(containerId) {
+    try {
+      await this.executor.exec(["docker", "rm", "-f", containerId], {
+        timeoutMs: 3e4
+      });
+    } catch {
+    }
+  }
+  /** Full lifecycle: create → start → exec → cleanup. Convenience for single-command grading. */
+  async runGraderInContainer(options) {
+    const containerId = await this.createContainer();
+    try {
+      await this.startContainer(containerId);
+      await this.resetContainerCheckout(containerId, options.repoCheckouts);
+      if (options.copyFiles) {
+        for (const file of options.copyFiles) {
+          await this.copyToContainer(containerId, file.localPath, file.containerPath);
+        }
+      }
+      return await this.execInContainer({
+        containerId,
+        command: options.command,
+        stdin: options.stdin
+      });
+    } finally {
+      await this.removeContainer(containerId);
+    }
+  }
+};
+
+export {
+  DefaultCommandExecutor,
+  DockerWorkspaceProvider
+};
+//# sourceMappingURL=chunk-SDIANPEY.js.map

package/dist/chunk-SDIANPEY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/evaluation/workspace/docker-workspace.ts"],"sourcesContent":["/**\n * Docker workspace provider — manages Docker container lifecycle for eval grading.\n *\n * Flow: pull image → create container → copy files in → exec grader → parse output → destroy container.\n * All Docker commands use `execFile` (no shell) for security.\n *\n * To add a new Docker command: add a method that calls `this.exec(...)` with the appropriate argv.\n *\n * Design decisions:\n * - CommandExecutor interface for testability (mock `execFile` in tests)\n * - Always `docker rm -f` in cleanup, even on errors (try/finally)\n * - Lazy-loaded: non-Docker evals never import this module\n */\n\nimport type { DockerWorkspaceConfig } from '../types.js';\nimport type { RepoCheckoutTarget } from './repo-checkout.js';\n\n/** Result of a command execution */\nexport interface ExecResult {\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n}\n\n/** Abstraction over process execution for testability */\nexport interface CommandExecutor {\n  exec(\n    argv: readonly string[],\n    options?: { timeoutMs?: number; stdin?: string },\n  ): Promise<ExecResult>;\n}\n\n/**\n * Default command executor using Bun.spawn / Node child_process.\n * Mirrors the pattern in runtime/exec.ts.\n */\nexport class DefaultCommandExecutor implements CommandExecutor {\n  async exec(\n    argv: readonly string[],\n    options: { timeoutMs?: number; stdin?: string } = {},\n  ): Promise<ExecResult> {\n    const { execFileWithStdin } = await import('../../runtime/exec.js');\n    return execFileWithStdin(argv, options.stdin ?? '', {\n      timeoutMs: options.timeoutMs,\n    });\n  }\n}\n\n/** Options for creating a Docker container */\nexport interface CreateContainerOptions {\n  readonly image: string;\n  readonly memory?: string;\n  readonly cpus?: number;\n}\n\n/** Options for executing a command inside a container */\nexport interface ExecInContainerOptions {\n  readonly containerId: string;\n  readonly command: readonly string[];\n  readonly timeoutMs?: number;\n  readonly stdin?: string;\n}\n\nconst DEFAULT_TIMEOUT_S = 1800;\n\nfunction buildGitCommand(\n  target: RepoCheckoutTarget | undefined,\n  args: readonly string[],\n): string[] {\n  if (!target?.path) {\n    return ['git', ...args];\n  }\n  return ['git', '-C', target.path, ...args];\n}\n\n/**\n * Manages Docker container lifecycle for workspace-based evaluations.\n *\n * Usage:\n *   const docker = new DockerWorkspaceProvider(config);\n *   await docker.pullImage();\n *   const containerId = await docker.createContainer();\n *   try {\n *     await docker.copyToContainer(containerId, localPath, containerPath);\n *     const output = await docker.execInContainer({ containerId, command: [...] });\n *     // parse output...\n *   } finally {\n *     await docker.removeContainer(containerId);\n *   }\n */\nexport class DockerWorkspaceProvider {\n  private readonly config: DockerWorkspaceConfig;\n  private readonly executor: CommandExecutor;\n  private readonly timeoutMs: number;\n\n  constructor(config: DockerWorkspaceConfig, executor?: CommandExecutor) {\n    this.config = config;\n    this.executor = executor ?? new DefaultCommandExecutor();\n    this.timeoutMs = (config.timeout ?? DEFAULT_TIMEOUT_S) * 1000;\n  }\n\n  /** Check whether the Docker CLI is available on the host. */\n  async isDockerAvailable(): Promise<boolean> {\n    try {\n      const result = await this.executor.exec(\n        ['docker', 'version', '--format', '{{.Server.Version}}'],\n        {\n          timeoutMs: 10_000,\n        },\n      );\n      return result.exitCode === 0;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Pull the configured Docker image. No-op if already cached locally. */\n  async pullImage(): Promise<void> {\n    // Skip pull if image already exists locally (e.g. locally-built images)\n    const inspectResult = await this.executor.exec(\n      ['docker', 'image', 'inspect', this.config.image],\n      {\n        timeoutMs: 10_000,\n      },\n    );\n    if (inspectResult.exitCode === 0) {\n      return; // Image exists locally, no pull needed\n    }\n\n    const result = await this.executor.exec(['docker', 'pull', this.config.image], {\n      timeoutMs: this.timeoutMs,\n    });\n    if (result.exitCode !== 0) {\n      throw new Error(`docker pull failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  /** Create a stopped container from the configured image with resource limits. Returns container ID. */\n  async createContainer(): Promise<string> {\n    const argv: string[] = ['docker', 'create'];\n\n    if (this.config.memory) {\n      argv.push(`--memory=${this.config.memory}`);\n    }\n    if (this.config.cpus !== undefined) {\n      argv.push(`--cpus=${this.config.cpus}`);\n    }\n\n    // Keep the container alive with a long sleep so we can exec into it\n    argv.push(this.config.image, 'sleep', 'infinity');\n\n    const result = await this.executor.exec(argv, { timeoutMs: 30_000 });\n    if (result.exitCode !== 0) {\n      throw new Error(`docker create failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n    return result.stdout.trim();\n  }\n\n  /** Start a previously created container. */\n  async startContainer(containerId: string): Promise<void> {\n    const result = await this.executor.exec(['docker', 'start', containerId], {\n      timeoutMs: 30_000,\n    });\n    if (result.exitCode !== 0) {\n      throw new Error(`docker start failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  /**\n   * Reset the container checkout to the specified target refs, if any.\n   * This is used for SWE-bench images where the repo state must match the\n   * dataset's base snapshot before grading begins.\n   */\n  async resetContainerCheckout(\n    containerId: string,\n    repoCheckouts?: readonly RepoCheckoutTarget[],\n  ): Promise<void> {\n    if (!repoCheckouts || repoCheckouts.length === 0) {\n      return;\n    }\n\n    for (const target of repoCheckouts) {\n      const resetResult = await this.execInContainer({\n        containerId,\n        command: buildGitCommand(target, ['reset', '--hard', target.ref]),\n      });\n      if (resetResult.exitCode !== 0) {\n        throw new Error(\n          `docker git reset failed (exit ${resetResult.exitCode}): ${resetResult.stderr.trim()}`,\n        );\n      }\n\n      const verifyResult = await this.execInContainer({\n        containerId,\n        command: buildGitCommand(target, ['rev-parse', 'HEAD']),\n        timeoutMs: 30_000,\n      });\n      if (verifyResult.exitCode !== 0) {\n        throw new Error(\n          `docker checkout verification failed (exit ${verifyResult.exitCode}): ${verifyResult.stderr.trim()}`,\n        );\n      }\n\n      const head = verifyResult.stdout.trim();\n      if (head !== target.ref) {\n        throw new Error(\n          `docker checkout verification failed: expected ${target.ref} but found ${head || '<empty>'}`,\n        );\n      }\n    }\n  }\n\n  /** Copy a local file or directory into a running container. */\n  async copyToContainer(\n    containerId: string,\n    localPath: string,\n    containerPath: string,\n  ): Promise<void> {\n    const result = await this.executor.exec(\n      ['docker', 'cp', localPath, `${containerId}:${containerPath}`],\n      { timeoutMs: 60_000 },\n    );\n    if (result.exitCode !== 0) {\n      throw new Error(`docker cp failed (exit ${result.exitCode}): ${result.stderr.trim()}`);\n    }\n  }\n\n  /**\n   * Execute a command inside a running container.\n   * If stdin is provided, it is piped via `docker exec -i`.\n   */\n  async execInContainer(options: ExecInContainerOptions): Promise<ExecResult> {\n    const { containerId, command, timeoutMs, stdin } = options;\n    const argv: string[] = ['docker', 'exec'];\n\n    if (stdin !== undefined) {\n      argv.push('-i');\n    }\n\n    argv.push(containerId, ...command);\n\n    return this.executor.exec(argv, {\n      timeoutMs: timeoutMs ?? this.timeoutMs,\n      stdin,\n    });\n  }\n\n  /** Force-remove a container (always succeeds, even if container doesn't exist). */\n  async removeContainer(containerId: string): Promise<void> {\n    try {\n      await this.executor.exec(['docker', 'rm', '-f', containerId], {\n        timeoutMs: 30_000,\n      });\n    } catch {\n      // Best-effort cleanup — don't throw on removal failure\n    }\n  }\n\n  /** Full lifecycle: create → start → exec → cleanup. Convenience for single-command grading. */\n  async runGraderInContainer(options: {\n    readonly command: readonly string[];\n    readonly stdin?: string;\n    readonly copyFiles?: ReadonlyArray<{ localPath: string; containerPath: string }>;\n    readonly repoCheckouts?: readonly RepoCheckoutTarget[];\n  }): Promise<ExecResult> {\n    const containerId = await this.createContainer();\n    try {\n      await this.startContainer(containerId);\n      await this.resetContainerCheckout(containerId, options.repoCheckouts);\n\n      if (options.copyFiles) {\n        for (const file of options.copyFiles) {\n          await this.copyToContainer(containerId, file.localPath, file.containerPath);\n        }\n      }\n\n      return await this.execInContainer({\n        containerId,\n        command: options.command,\n        stdin: options.stdin,\n      });\n    } finally {\n      await this.removeContainer(containerId);\n    }\n  }\n}\n"],"mappings":";AAoCO,IAAM,yBAAN,MAAwD;AAAA,EAC7D,MAAM,KACJ,MACA,UAAkD,CAAC,GAC9B;AACrB,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,oBAAuB;AAClE,WAAO,kBAAkB,MAAM,QAAQ,SAAS,IAAI;AAAA,MAClD,WAAW,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH;AACF;AAiBA,IAAM,oBAAoB;AAE1B,SAAS,gBACP,QACA,MACU;AACV,MAAI,CAAC,QAAQ,MAAM;AACjB,WAAO,CAAC,OAAO,GAAG,IAAI;AAAA,EACxB;AACA,SAAO,CAAC,OAAO,MAAM,OAAO,MAAM,GAAG,IAAI;AAC3C;AAiBO,IAAM,0BAAN,MAA8B;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAA+B,UAA4B;AACrE,SAAK,SAAS;AACd,SAAK,WAAW,YAAY,IAAI,uBAAuB;AACvD,SAAK,aAAa,OAAO,WAAW,qBAAqB;AAAA,EAC3D;AAAA;AAAA,EAGA,MAAM,oBAAsC;AAC1C,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,SAAS;AAAA,QACjC,CAAC,UAAU,WAAW,YAAY,qBAAqB;AAAA,QACvD;AAAA,UACE,WAAW;AAAA,QACb;AAAA,MACF;AACA,aAAO,OAAO,aAAa;AAAA,IAC7B,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,YAA2B;AAE/B,UAAM,gBAAgB,MAAM,KAAK,SAAS;AAAA,MACxC,CAAC,UAAU,SAAS,WAAW,KAAK,OAAO,KAAK;AAAA,MAChD;AAAA,QACE,WAAW;AAAA,MACb;AAAA,IACF;AACA,QAAI,cAAc,aAAa,GAAG;AAChC;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,KAAK,SAAS,KAAK,CAAC,UAAU,QAAQ,KAAK,OAAO,KAAK,GAAG;AAAA,MAC7E,WAAW,KAAK;AAAA,IAClB,CAAC;AACD,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,4BAA4B,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,CAAC,EAAE;AAAA,IACzF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,kBAAmC;AACvC,UAAM,OAAiB,CAAC,UAAU,QAAQ;AAE1C,QAAI,KAAK,OAAO,QAAQ;AACtB,WAAK,KAAK,YAAY,KAAK,OAAO,MAAM,EAAE;AAAA,IAC5C;AACA,QAAI,KAAK,OAAO,SAAS,QAAW;AAClC,WAAK,KAAK,UAAU,KAAK,OAAO,IAAI,EAAE;AAAA,IACxC;AAGA,SAAK,KAAK,KAAK,OAAO,OAAO,SAAS,UAAU;AAEhD,UAAM,SAAS,MAAM,KAAK,SAAS,KAAK,MAAM,EAAE,WAAW,IAAO,CAAC;AACnE,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,8BAA8B,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,CAAC,EAAE;AAAA,IAC3F;AACA,WAAO,OAAO,OAAO,KAAK;AAAA,EAC5B;AAAA;AAAA,EAGA,MAAM,eAAe,aAAoC;AACvD,UAAM,SAAS,MAAM,KAAK,SAAS,KAAK,CAAC,UAAU,SAAS,WAAW,GAAG;AAAA,MACxE,WAAW;AAAA,IACb,CAAC;AACD,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,6BAA6B,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,CAAC,EAAE;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,uBACJ,aACA,eACe;AACf,QAAI,CAAC,iBAAiB,cAAc,WAAW,GAAG;AAChD;AAAA,IACF;AAEA,eAAW,UAAU,eAAe;AAClC,YAAM,cAAc,MAAM,KAAK,gBAAgB;AAAA,QAC7C;AAAA,QACA,SAAS,gBAAgB,QAAQ,CAAC,SAAS,UAAU,OAAO,GAAG,CAAC;AAAA,MAClE,CAAC;AACD,UAAI,YAAY,aAAa,GAAG;AAC9B,cAAM,IAAI;AAAA,UACR,iCAAiC,YAAY,QAAQ,MAAM,YAAY,OAAO,KAAK,CAAC;AAAA,QACtF;AAAA,MACF;AAEA,YAAM,eAAe,MAAM,KAAK,gBAAgB;AAAA,QAC9C;AAAA,QACA,SAAS,gBAAgB,QAAQ,CAAC,aAAa,MAAM,CAAC;AAAA,QACtD,WAAW;AAAA,MACb,CAAC;AACD,UAAI,aAAa,aAAa,GAAG;AAC/B,cAAM,IAAI;AAAA,UACR,6CAA6C,aAAa,QAAQ,MAAM,aAAa,OAAO,KAAK,CAAC;AAAA,QACpG;AAAA,MACF;AAEA,YAAM,OAAO,aAAa,OAAO,KAAK;AACtC,UAAI,SAAS,OAAO,KAAK;AACvB,cAAM,IAAI;AAAA,UACR,iDAAiD,OAAO,GAAG,cAAc,QAAQ,SAAS;AAAA,QAC5F;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,gBACJ,aACA,WACA,eACe;AACf,UAAM,SAAS,MAAM,KAAK,SAAS;AAAA,MACjC,CAAC,UAAU,MAAM,WAAW,GAAG,WAAW,IAAI,aAAa,EAAE;AAAA,MAC7D,EAAE,WAAW,IAAO;AAAA,IACtB;AACA,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,0BAA0B,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,CAAC,EAAE;AAAA,IACvF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,SAAsD;AAC1E,UAAM,EAAE,aAAa,SAAS,WAAW,MAAM,IAAI;AACnD,UAAM,OAAiB,CAAC,UAAU,MAAM;AAExC,QAAI,UAAU,QAAW;AACvB,WAAK,KAAK,IAAI;AAAA,IAChB;AAEA,SAAK,KAAK,aAAa,GAAG,OAAO;AAEjC,WAAO,KAAK,SAAS,KAAK,MAAM;AAAA,MAC9B,WAAW,aAAa,KAAK;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,gBAAgB,aAAoC;AACxD,QAAI;AACF,YAAM,KAAK,SAAS,KAAK,CAAC,UAAU,MAAM,MAAM,WAAW,GAAG;AAAA,QAC5D,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,qBAAqB,SAKH;AACtB,UAAM,cAAc,MAAM,KAAK,gBAAgB;AAC/C,QAAI;AACF,YAAM,KAAK,eAAe,WAAW;AACrC,YAAM,KAAK,uBAAuB,aAAa,QAAQ,aAAa;AAEpE,UAAI,QAAQ,WAAW;AACrB,mBAAW,QAAQ,QAAQ,WAAW;AACpC,gBAAM,KAAK,gBAAgB,aAAa,KAAK,WAAW,KAAK,aAAa;AAAA,QAC5E;AAAA,MACF;AAEA,aAAO,MAAM,KAAK,gBAAgB;AAAA,QAChC;AAAA,QACA,SAAS,QAAQ;AAAA,QACjB,OAAO,QAAQ;AAAA,MACjB,CAAC;AAAA,IACH,UAAE;AACA,YAAM,KAAK,gBAAgB,WAAW;AAAA,IACxC;AAAA,EACF;AACF;","names":[]}

package/dist/docker-workspace-RPPXBT27.js

@@ -0,0 +1,9 @@
+import {
+  DefaultCommandExecutor,
+  DockerWorkspaceProvider
+} from "./chunk-SDIANPEY.js";
+export {
+  DefaultCommandExecutor,
+  DockerWorkspaceProvider
+};
+//# sourceMappingURL=docker-workspace-RPPXBT27.js.map

package/dist/docker-workspace-RPPXBT27.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/evaluation/validation/index.cjs

@@ -568,12 +568,21 @@ function validateWorkspaceRepoConfig(workspace, filePath, errors) {
   const hooks = workspace.hooks;
   const afterEachHook = isObject(hooks) ? hooks.after_each : void 0;
   const isolation = workspace.isolation;
+  const docker = workspace.docker;
   if (Array.isArray(repos)) {
     for (const repo of repos) {
       if (!isObject(repo)) continue;
       const source = repo.source;
       const checkout = repo.checkout;
       const clone = repo.clone;
+      if (!isObject(source) && !isObject(docker)) {
+        errors.push({
+          severity: "error",
+          filePath,
+          location: `workspace.repos[path=${repo.path ?? "(none)"}]`,
+          message: "repos[].source is required for non-Docker workspaces. Source-less repos are only valid when workspace.docker is configured (repo exists inside the container)."
+        });
+      }
       if (isObject(source) && isObject(checkout)) {
         const sourceType = source.type;
         const resolve = checkout.resolve;
@@ -581,8 +590,8 @@ function validateWorkspaceRepoConfig(workspace, filePath, errors) {
           errors.push({
             severity: "warning",
             filePath,
-            location: `workspace.repos[path=${repo.path}]`,
-            message: "checkout.resolve has no effect for a local source. Use source.type to choose where the repo comes from; keep checkout.ref or checkout.ancestor only when pinning a local source."
+            location: `workspace.repos[path=${repo.path ?? "(none)"}]`,
+            message: "checkout.resolve has no effect for a local source. Use source.type to choose where the repo comes from; keep checkout.ref, checkout.base_commit, or checkout.ancestor only when pinning a local source."
           });
         }
       }
@@ -593,7 +602,7 @@ function validateWorkspaceRepoConfig(workspace, filePath, errors) {
           errors.push({
             severity: "warning",
             filePath,
-            location: `workspace.repos[path=${repo.path}]`,
+            location: `workspace.repos[path=${repo.path ?? "(none)"}]`,
             message: `clone.depth (${depth}) may be insufficient for checkout.ancestor (${ancestor}). Recommend depth >= ${ancestor + 1}.`
           });
         }
@@ -1567,11 +1576,69 @@ async function validateConfigFile(filePath) {
         });
       }
     }
+    const results = config.results;
+    if (results !== void 0) {
+      if (typeof results !== "object" || results === null || Array.isArray(results)) {
+        errors.push({
+          severity: "error",
+          filePath,
+          location: "results",
+          message: "Field 'results' must be an object"
+        });
+      } else {
+        const exportConfig = results.export;
+        if (exportConfig !== void 0) {
+          if (typeof exportConfig !== "object" || exportConfig === null || Array.isArray(exportConfig)) {
+            errors.push({
+              severity: "error",
+              filePath,
+              location: "results.export",
+              message: "Field 'results.export' must be an object"
+            });
+          } else {
+            const exportRecord = exportConfig;
+            if (typeof exportRecord.repo !== "string" || exportRecord.repo.trim().length === 0) {
+              errors.push({
+                severity: "error",
+                filePath,
+                location: "results.export.repo",
+                message: "Field 'results.export.repo' must be a non-empty string"
+              });
+            }
+            if (typeof exportRecord.path !== "string" || exportRecord.path.trim().length === 0) {
+              errors.push({
+                severity: "error",
+                filePath,
+                location: "results.export.path",
+                message: "Field 'results.export.path' must be a non-empty string"
+              });
+            }
+            if (exportRecord.auto_push !== void 0 && typeof exportRecord.auto_push !== "boolean") {
+              errors.push({
+                severity: "error",
+                filePath,
+                location: "results.export.auto_push",
+                message: "Field 'results.export.auto_push' must be a boolean"
+              });
+            }
+            if (exportRecord.branch_prefix !== void 0 && (typeof exportRecord.branch_prefix !== "string" || exportRecord.branch_prefix.trim().length === 0)) {
+              errors.push({
+                severity: "error",
+                filePath,
+                location: "results.export.branch_prefix",
+                message: "Field 'results.export.branch_prefix' must be a non-empty string"
+              });
+            }
+          }
+        }
+      }
+    }
     const allowedFields = /* @__PURE__ */ new Set([
       "$schema",
       "eval_patterns",
       "required_version",
       "execution",
+      "results",
       "studio"
     ]);
     const unexpectedFields = Object.keys(config).filter((key) => !allowedFields.has(key));