@bjoernrochel/sevro 0.1.0-rc.8 → 1.1.0

package/dist/src/case-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-validation.js","sourceRoot":"","sources":["case-validation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,gCAA6B;AAC/D,OAAO,EAAE,wBAAwB,EAAE,iCAA8B;AACjE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,0BAAuB;AAEpE,SAAS,uBAAuB,CAC9B,KAA8B;IAE9B,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;;YAC1D,wBAAwB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACjE,OAAO,YAAY,MAAM,mCAAmC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,OAAO,CACL,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAC7B,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA8B;IAE9B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1D,OAAO,yEAAyE,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAC7C,CAAC;IACF,OAAO,KAAK;QACV,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,6BAA6B;QACxE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAC1B,OAAO,qEAAqE,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC7E,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA8B;IACtD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,GAAG,KAAK,8BAA8B,CAAC;IAClD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC;QACjD,OAAO,kDAAkD,CAAC;IAC5D,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,QAAgB;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,QAAQ,sBAAsB,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAClC,OAAO,GAAG,QAAQ,IAAI,KAAK,qBAAqB,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;QAChC,OAAO,GAAG,QAAQ,oCAAoC,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,OAAO,4CAA4C,CAAC;IACtD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,KAAK,GAAG,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,OAAO,gDAAgD,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC7E,OAAO,KAAK,GAAG,CAAC;QACd,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,KAAK,sBAAsB,CAAC;AACtD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACxD,OAAO,CACL,gBAAgB,CAAC,KAAK,CAAC;QACvB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;QACzB,qBAAqB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAChD,CAAC","sourcesContent":["import { type ResolvedCase } from \"./engine\";\nimport { prepareGeneratedFixture } from \"./fixtures/generated\";\nimport { prepareRepositoryFixture } from \"./fixtures/repository\";\nimport { isOptionalNonblankString, isRecord } from \"./value-guards\";\n\nfunction fixtureDeclarationIssue(\n  value: Record<string, unknown>,\n): string | undefined {\n  try {\n    if (value.kind === \"generated\") prepareGeneratedFixture(value);\n    else prepareRepositoryFixture({ kind: \"repository\", ...value });\n    return undefined;\n  } catch (error) {\n    const detail =\n      error instanceof Error ? error.message : \"invalid declaration\";\n    return `fixture: ${detail}; correct the fixture declaration`;\n  }\n}\n\nexport function validInlineFixture(value: Record<string, unknown>): boolean {\n  return (\n    !Object.hasOwn(value, \"sourceRef\") &&\n    Object.hasOwn(value, \"files\") &&\n    isRecord(value.files) &&\n    Object.values(value.files).every((content) => typeof content === \"string\")\n  );\n}\n\nfunction inlineFixtureIssue(\n  value: Record<string, unknown>,\n): string | undefined {\n  if (!Object.hasOwn(value, \"files\") || !isRecord(value.files))\n    return \"fixture.files: expected an object mapping file paths to string contents\";\n  const entry = Object.entries(value.files).find(\n    ([, content]) => typeof content !== \"string\",\n  );\n  return entry\n    ? `fixture.files[${JSON.stringify(entry[0])}]: expected string contents`\n    : undefined;\n}\n\nfunction fixtureIssue(value: unknown): string | undefined {\n  if (!isRecord(value)) return \"fixture: expected an object\";\n  if (value.kind === \"generated\") return fixtureDeclarationIssue(value);\n  if (value.kind !== undefined)\n    return \"fixture.kind: omit for inline/repository fixtures, or use generated\";\n  if (Object.hasOwn(value, \"sourceRef\")) return fixtureDeclarationIssue(value);\n  return inlineFixtureIssue(value);\n}\n\nfunction nonemptyString(value: unknown): value is string {\n  return typeof value === \"string\" && value.length > 0;\n}\n\nfunction caseDetailsIssue(value: Record<string, unknown>): string | undefined {\n  for (const field of [\"id\", \"prompt\"])\n    if (!nonemptyString(value[field]))\n      return `${field}: expected a nonempty string`;\n  if (!isOptionalNonblankString(value.followUpPrompt))\n    return \"followUpPrompt: omit or supply a nonblank string\";\n  return fixtureIssue(value.fixture);\n}\n\nfunction checkIssue(value: unknown, location: string): string | undefined {\n  if (!isRecord(value)) return `${location}: expected an object`;\n  for (const field of [\"id\", \"grader\"])\n    if (typeof value[field] !== \"string\")\n      return `${location}.${field}: expected a string`;\n  if (!isRecord(value.configuration))\n    return `${location}.configuration: expected an object`;\n  return undefined;\n}\n\nfunction checksIssue(value: unknown): string | undefined {\n  if (!Array.isArray(value))\n    return \"checks: expected an array of check objects\";\n  for (const [index, check] of value.entries()) {\n    const issue = checkIssue(check, `checks[${index}]`);\n    if (issue) return issue;\n  }\n  return undefined;\n}\n\nfunction requiredEvidenceIssue(value: unknown): string | undefined {\n  if (!Array.isArray(value))\n    return \"requiredEvidence: expected an array of strings\";\n  const index = value.findIndex((entry: unknown) => typeof entry !== \"string\");\n  return index < 0\n    ? undefined\n    : `requiredEvidence[${index}]: expected a string`;\n}\n\n/** Explain the first invalid field using the same checks as the case type guard. */\nexport function resolvedCaseIssue(value: unknown): string | undefined {\n  if (!isRecord(value)) return \"case: expected an object\";\n  return (\n    caseDetailsIssue(value) ??\n    checksIssue(value.checks) ??\n    requiredEvidenceIssue(value.requiredEvidence)\n  );\n}\n\nexport function isResolvedCase(value: unknown): value is ResolvedCase {\n  return resolvedCaseIssue(value) === undefined;\n}\n"]}

package/dist/src/cli/cancellation.js

@@ -0,0 +1,21 @@
+export class CommandCancellation {
+    controller = new AbortController();
+    interrupt = () => {
+        this.controller.abort("SIGINT");
+    };
+    terminate = () => {
+        this.controller.abort("SIGTERM");
+    };
+    get signal() {
+        return this.controller.signal;
+    }
+    constructor() {
+        process.on("SIGINT", this.interrupt);
+        process.on("SIGTERM", this.terminate);
+    }
+    dispose() {
+        process.off("SIGINT", this.interrupt);
+        process.off("SIGTERM", this.terminate);
+    }
+}
+//# sourceMappingURL=cancellation.js.map

package/dist/src/cli/cancellation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancellation.js","sourceRoot":"","sources":["cancellation.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,mBAAmB;IACb,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,SAAS,GAAG,GAAG,EAAE;QAChC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;IACe,SAAS,GAAG,GAAG,EAAE;QAChC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAChC,CAAC;IACD;QACE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;CACF","sourcesContent":["export class CommandCancellation {\n  private readonly controller = new AbortController();\n  private readonly interrupt = () => {\n    this.controller.abort(\"SIGINT\");\n  };\n  private readonly terminate = () => {\n    this.controller.abort(\"SIGTERM\");\n  };\n  get signal(): AbortSignal {\n    return this.controller.signal;\n  }\n  constructor() {\n    process.on(\"SIGINT\", this.interrupt);\n    process.on(\"SIGTERM\", this.terminate);\n  }\n  dispose(): void {\n    process.off(\"SIGINT\", this.interrupt);\n    process.off(\"SIGTERM\", this.terminate);\n  }\n}\n"]}

package/dist/src/cli/command.js

@@ -0,0 +1,60 @@
+import { prepareRunInvocation } from "./preparation.js";
+import { evaluateInvocation } from "./evaluation.js";
+import { CommandCancellation } from "./cancellation.js";
+import { display, displayFailure, runnerFailureCategory } from "./presentation.js";
+import { displayEffectiveSettings } from "./settings.js";
+import { jsonOutputRequested } from "./run-options.js";
+import { retainCliResult } from "./completion.js";
+export async function main(argv, release) {
+    const json = jsonOutputRequested(argv);
+    let prepared;
+    try {
+        prepared = await prepareRunInvocation(argv);
+    }
+    catch (error) {
+        await releaseBeforeDisplay(release, 64);
+        displayFailure(error, json, 64, "invalid invocation", argv[0] === "run" ? "run" : "");
+        return;
+    }
+    const cancellation = new CommandCancellation();
+    try {
+        displayEffectiveSettings(prepared);
+        const { result } = await evaluateInvocation(prepared, cancellation.signal);
+        const completion = await retainCompletion(result, prepared.invocation.resultsRoot);
+        await releaseBeforeDisplay(release, result.exitCode);
+        display(result, prepared.invocation.json, completion);
+        process.exitCode = result.exitCode;
+    }
+    catch (error) {
+        await releaseBeforeDisplay(release, 70);
+        displayFailure(error, prepared.invocation.json, runnerFailureCategory(error), "runner failure");
+    }
+    finally {
+        cancellation.dispose();
+    }
+}
+async function retainCompletion(result, resultsRoot) {
+    try {
+        return await retainCliResult(result, resultsRoot);
+    }
+    catch (cause) {
+        if (result.exitCode === 0)
+            throw new Error("CLI result/latest could not be retained; check --results-root permissions", { cause });
+        process.stderr.write("sevro: CLI result/latest could not be retained; original run outcome preserved; inspect evidence directly\n");
+        return undefined;
+    }
+}
+async function releaseBeforeDisplay(release, exitCode) {
+    try {
+        await release?.();
+    }
+    catch (error) {
+        if (exitCode === 0)
+            throw error;
+        const detail = error instanceof Error
+            ? error.message
+            : "temporary project could not be removed";
+        process.stderr.write(`sevro: demo cleanup failed: ${detail}\n`);
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/src/cli/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA2B,yBAAsB;AAC9E,OAAO,EAAE,kBAAkB,EAAE,wBAAqB;AAClD,OAAO,EAAE,mBAAmB,EAAE,0BAAuB;AACrD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAAuB;AAChF,OAAO,EAAE,wBAAwB,EAAE,sBAAmB;AACtD,OAAO,EAAE,mBAAmB,EAAE,yBAAsB;AACpD,OAAO,EAAE,eAAe,EAAE,wBAAqB;AAI/C,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAc,EACd,OAA6B;IAE7B,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxC,cAAc,CACZ,KAAK,EACL,IAAI,EACJ,EAAE,EACF,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,MAAM,EACN,QAAQ,CAAC,UAAU,CAAC,WAAW,CAChC,CAAC;QACF,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxC,cAAc,CACZ,KAAK,EACL,QAAQ,CAAC,UAAU,CAAC,IAAI,EACxB,qBAAqB,CAAC,KAAK,CAAC,EAC5B,gBAAgB,CACjB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAA6C,EAC7C,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,2EAA2E,EAC3E,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6GAA6G,CAC9G,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAuB,EACvB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAChC,MAAM,MAAM,GACV,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,wCAAwC,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,MAAM,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC","sourcesContent":["import { prepareRunInvocation, type PreparedInvocation } from \"./preparation\";\nimport { evaluateInvocation } from \"./evaluation\";\nimport { CommandCancellation } from \"./cancellation\";\nimport { display, displayFailure, runnerFailureCategory } from \"./presentation\";\nimport { displayEffectiveSettings } from \"./settings\";\nimport { jsonOutputRequested } from \"./run-options\";\nimport { retainCliResult } from \"./completion\";\n\ntype CommandRelease = (() => Promise<void>) | undefined;\n\nexport async function main(\n  argv: string[],\n  release?: () => Promise<void>,\n): Promise<void> {\n  const json = jsonOutputRequested(argv);\n  let prepared: PreparedInvocation;\n  try {\n    prepared = await prepareRunInvocation(argv);\n  } catch (error) {\n    await releaseBeforeDisplay(release, 64);\n    displayFailure(\n      error,\n      json,\n      64,\n      \"invalid invocation\",\n      argv[0] === \"run\" ? \"run\" : \"\",\n    );\n    return;\n  }\n  const cancellation = new CommandCancellation();\n  try {\n    displayEffectiveSettings(prepared);\n    const { result } = await evaluateInvocation(prepared, cancellation.signal);\n    const completion = await retainCompletion(\n      result,\n      prepared.invocation.resultsRoot,\n    );\n    await releaseBeforeDisplay(release, result.exitCode);\n    display(result, prepared.invocation.json, completion);\n    process.exitCode = result.exitCode;\n  } catch (error) {\n    await releaseBeforeDisplay(release, 70);\n    displayFailure(\n      error,\n      prepared.invocation.json,\n      runnerFailureCategory(error),\n      \"runner failure\",\n    );\n  } finally {\n    cancellation.dispose();\n  }\n}\n\nasync function retainCompletion(\n  result: Parameters<typeof retainCliResult>[0],\n  resultsRoot: string,\n) {\n  try {\n    return await retainCliResult(result, resultsRoot);\n  } catch (cause) {\n    if (result.exitCode === 0)\n      throw new Error(\n        \"CLI result/latest could not be retained; check --results-root permissions\",\n        { cause },\n      );\n    process.stderr.write(\n      \"sevro: CLI result/latest could not be retained; original run outcome preserved; inspect evidence directly\\n\",\n    );\n    return undefined;\n  }\n}\n\nasync function releaseBeforeDisplay(\n  release: CommandRelease,\n  exitCode: number,\n): Promise<void> {\n  try {\n    await release?.();\n  } catch (error) {\n    if (exitCode === 0) throw error;\n    const detail =\n      error instanceof Error\n        ? error.message\n        : \"temporary project could not be removed\";\n    process.stderr.write(`sevro: demo cleanup failed: ${detail}\\n`);\n  }\n}\n"]}

package/dist/src/cli/completion.js

@@ -0,0 +1,14 @@
+import { dirname, join } from "node:path";
+import { atomicWriteJson } from "../storage.js";
+import { createReport } from "../report.js";
+import { withResultsLock } from "../results-lock.js";
+/** Latest means the last successfully retained CLI result, including dry/failing runs. */
+export async function retainCliResult(result, resultsRoot) {
+    return withResultsLock(resultsRoot, async () => {
+        const resultFile = join(dirname(result.evidencePath), "result.json");
+        await atomicWriteJson(resultFile, result);
+        await atomicWriteJson(join(resultsRoot, "latest.json"), result);
+        return { resultFile, report: await createReport([resultFile]) };
+    });
+}
+//# sourceMappingURL=completion.js.map

package/dist/src/cli/completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["completion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAC1C,OAAO,EAAE,eAAe,EAAE,sBAAmB;AAE7C,OAAO,EAAE,YAAY,EAAE,qBAAkB;AACzC,OAAO,EAAE,eAAe,EAAE,2BAAwB;AAElD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAiB,EAAE,WAAmB;IAC1E,OAAO,eAAe,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { dirname, join } from \"node:path\";\nimport { atomicWriteJson } from \"../storage\";\nimport type { CliResult } from \"../engine\";\nimport { createReport } from \"../report\";\nimport { withResultsLock } from \"../results-lock\";\n\n/** Latest means the last successfully retained CLI result, including dry/failing runs. */\nexport async function retainCliResult(result: CliResult, resultsRoot: string) {\n  return withResultsLock(resultsRoot, async () => {\n    const resultFile = join(dirname(result.evidencePath), \"result.json\");\n    await atomicWriteJson(resultFile, result);\n    await atomicWriteJson(join(resultsRoot, \"latest.json\"), result);\n    return { resultFile, report: await createReport([resultFile]) };\n  });\n}\n"]}

package/dist/src/cli/demo.js

@@ -0,0 +1,45 @@
+import { examplePath } from "../runner-paths.js";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { main } from "./command.js";
+import { InvocationError } from "./invocation.js";
+import { displayFailure } from "./presentation.js";
+/** Run the packaged deterministic case without inheriting a caller's project policy. */
+export async function demoCommand(argv) {
+    const json = argv.includes("--json");
+    if (argv.some((arg) => arg !== "--json")) {
+        displayFailure(new InvocationError("demo accepts only --json; run sevro demo --help"), json, 64, "invalid demo invocation", "demo");
+        return;
+    }
+    let projectRoot;
+    try {
+        projectRoot = await mkdtemp(join(tmpdir(), "sevro-demo-"));
+    }
+    catch (cause) {
+        displayFailure(new Error(`demo temporary project could not be created under ${tmpdir()}; set TMPDIR to a writable directory`, { cause }), json, 70, "demo preparation failed");
+        return;
+    }
+    await main([
+        "run",
+        ...(json ? ["--json"] : []),
+        "--case-file",
+        examplePath("basic", "graded.json"),
+        "--adapter-module",
+        examplePath("basic", "host.ts"),
+        "--project-root",
+        projectRoot,
+        "--results-root",
+        join(process.cwd(), ".sevro", "results"),
+    ], demoCleanup(projectRoot));
+}
+function demoCleanup(projectRoot) {
+    let attempted = false;
+    return async () => {
+        if (attempted)
+            return;
+        attempted = true;
+        await rm(projectRoot, { recursive: true, force: true });
+    };
+}
+//# sourceMappingURL=demo.js.map

package/dist/src/cli/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,2BAAwB;AAC9C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,yBAAyB;AAC/C,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,IAAI,EAAE,qBAAkB;AACjC,OAAO,EAAE,eAAe,EAAE,wBAAqB;AAC/C,OAAO,EAAE,cAAc,EAAE,0BAAuB;AAEhD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzC,cAAc,CACZ,IAAI,eAAe,CAAC,iDAAiD,CAAC,EACtE,IAAI,EACJ,EAAE,EACF,yBAAyB,EACzB,MAAM,CACP,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CACZ,IAAI,KAAK,CACP,qDAAqD,MAAM,EAAE,sCAAsC,EACnG,EAAE,KAAK,EAAE,CACV,EACD,IAAI,EACJ,EAAE,EACF,yBAAyB,CAC1B,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,CACR;QACE,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,aAAa;QACb,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC;QACnC,kBAAkB;QAClB,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;QAC/B,gBAAgB;QAChB,WAAW;QACX,gBAAgB;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC;KACzC,EACD,WAAW,CAAC,WAAW,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { examplePath } from \"../runner-paths\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { main } from \"./command\";\nimport { InvocationError } from \"./invocation\";\nimport { displayFailure } from \"./presentation\";\n\n/** Run the packaged deterministic case without inheriting a caller's project policy. */\nexport async function demoCommand(argv: string[]): Promise<void> {\n  const json = argv.includes(\"--json\");\n  if (argv.some((arg) => arg !== \"--json\")) {\n    displayFailure(\n      new InvocationError(\"demo accepts only --json; run sevro demo --help\"),\n      json,\n      64,\n      \"invalid demo invocation\",\n      \"demo\",\n    );\n    return;\n  }\n  let projectRoot: string;\n  try {\n    projectRoot = await mkdtemp(join(tmpdir(), \"sevro-demo-\"));\n  } catch (cause) {\n    displayFailure(\n      new Error(\n        `demo temporary project could not be created under ${tmpdir()}; set TMPDIR to a writable directory`,\n        { cause },\n      ),\n      json,\n      70,\n      \"demo preparation failed\",\n    );\n    return;\n  }\n  await main(\n    [\n      \"run\",\n      ...(json ? [\"--json\"] : []),\n      \"--case-file\",\n      examplePath(\"basic\", \"graded.json\"),\n      \"--adapter-module\",\n      examplePath(\"basic\", \"host.ts\"),\n      \"--project-root\",\n      projectRoot,\n      \"--results-root\",\n      join(process.cwd(), \".sevro\", \"results\"),\n    ],\n    demoCleanup(projectRoot),\n  );\n}\n\nfunction demoCleanup(projectRoot: string): () => Promise<void> {\n  let attempted = false;\n  return async () => {\n    if (attempted) return;\n    attempted = true;\n    await rm(projectRoot, { recursive: true, force: true });\n  };\n}\n"]}

package/dist/src/cli/evaluation.js

@@ -0,0 +1,40 @@
+import { runEvaluation } from "../engine.js";
+import { packageBuildDigest, projectIdentityDigest, projectProvenance, } from "../provenance.js";
+import { selectedCase } from "./extension.js";
+import { assessmentSettings, effectiveSettings } from "./settings.js";
+import { displayProgress } from "./progress.js";
+export async function evaluateInvocation(prepared, signal) {
+    const { invocation, preparationSources, host, semanticHost, advisoryHost } = prepared;
+    const { caseData, extension } = await selectedCase(prepared, signal);
+    return runEvaluation({
+        onProgress: displayProgress,
+        resolvedRunSettings: effectiveSettings(prepared),
+        assessmentSettings: assessmentSettings(prepared),
+        runtimePolicy: prepared.runtimePolicy,
+        projectRoot: invocation.projectRoot,
+        resultsRoot: invocation.resultsRoot,
+        runStateRoot: invocation.runStateRoot,
+        case: caseData,
+        extension,
+        preparationSources,
+        host,
+        semanticHost,
+        advisoryHost,
+        advisoryExcludedPaths: invocation.advisoryExcludedPaths,
+        shellIsolation: invocation.shellIsolation,
+        runnerBuildDigest: invocation.runnerBuildDigest ?? (await packageBuildDigest()),
+        runnerCheckoutRoot: invocation.runnerCheckoutRoot,
+        projectDigest: invocation.projectDigest ??
+            (await projectIdentityDigest(invocation.projectRoot, await projectProvenance(invocation.projectRoot, [
+                invocation.resultsRoot,
+                invocation.runStateRoot,
+            ]), [invocation.resultsRoot, invocation.runStateRoot])),
+        condition: invocation.condition,
+        trialCount: invocation.trialCount,
+        jobs: invocation.jobs,
+        passThreshold: invocation.passThreshold,
+        dry: invocation.dry,
+        signal,
+    });
+}
+//# sourceMappingURL=evaluation.js.map

package/dist/src/cli/evaluation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation.js","sourceRoot":"","sources":["evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,qBAAkB;AAC1C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,yBAAsB;AACvB,OAAO,EAAE,YAAY,EAAE,uBAAoB;AAE3C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,sBAAmB;AACnE,OAAO,EAAE,eAAe,EAAE,sBAAmB;AAE7C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,MAAmB;IAEnB,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,GACxE,QAAQ,CAAC;IACX,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,aAAa,CAAC;QACnB,UAAU,EAAE,eAAe;QAC3B,mBAAmB,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAChD,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QAChD,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,IAAI,EAAE,QAAQ;QACd,SAAS;QACT,kBAAkB;QAClB,IAAI;QACJ,YAAY;QACZ,YAAY;QACZ,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,iBAAiB,EACf,UAAU,CAAC,iBAAiB,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC;QAC9D,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,aAAa,EACX,UAAU,CAAC,aAAa;YACxB,CAAC,MAAM,qBAAqB,CAC1B,UAAU,CAAC,WAAW,EACtB,MAAM,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE;gBAC9C,UAAU,CAAC,WAAW;gBACtB,UAAU,CAAC,YAAY;aACxB,CAAC,EACF,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,CAClD,CAAC;QACJ,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,MAAM;KACP,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { runEvaluation } from \"../engine\";\nimport {\n  packageBuildDigest,\n  projectIdentityDigest,\n  projectProvenance,\n} from \"../provenance\";\nimport { selectedCase } from \"./extension\";\nimport type { PreparedInvocation } from \"./preparation\";\nimport { assessmentSettings, effectiveSettings } from \"./settings\";\nimport { displayProgress } from \"./progress\";\n\nexport async function evaluateInvocation(\n  prepared: PreparedInvocation,\n  signal: AbortSignal,\n) {\n  const { invocation, preparationSources, host, semanticHost, advisoryHost } =\n    prepared;\n  const { caseData, extension } = await selectedCase(prepared, signal);\n  return runEvaluation({\n    onProgress: displayProgress,\n    resolvedRunSettings: effectiveSettings(prepared),\n    assessmentSettings: assessmentSettings(prepared),\n    runtimePolicy: prepared.runtimePolicy,\n    projectRoot: invocation.projectRoot,\n    resultsRoot: invocation.resultsRoot,\n    runStateRoot: invocation.runStateRoot,\n    case: caseData,\n    extension,\n    preparationSources,\n    host,\n    semanticHost,\n    advisoryHost,\n    advisoryExcludedPaths: invocation.advisoryExcludedPaths,\n    shellIsolation: invocation.shellIsolation,\n    runnerBuildDigest:\n      invocation.runnerBuildDigest ?? (await packageBuildDigest()),\n    runnerCheckoutRoot: invocation.runnerCheckoutRoot,\n    projectDigest:\n      invocation.projectDigest ??\n      (await projectIdentityDigest(\n        invocation.projectRoot,\n        await projectProvenance(invocation.projectRoot, [\n          invocation.resultsRoot,\n          invocation.runStateRoot,\n        ]),\n        [invocation.resultsRoot, invocation.runStateRoot],\n      )),\n    condition: invocation.condition,\n    trialCount: invocation.trialCount,\n    jobs: invocation.jobs,\n    passThreshold: invocation.passThreshold,\n    dry: invocation.dry,\n    signal,\n  });\n}\n"]}

package/dist/src/cli/extension.js

@@ -0,0 +1,54 @@
+import { pathToFileURL } from "node:url";
+import { openExtensionSession } from "../extension-session.js";
+import { resolvedFixture } from "../resolved-case.js";
+import { InvocationError } from "./invocation.js";
+import { parseCase, loadExtensionOptions } from "./loading.js";
+function selectExtensionCase(cases, caseId) {
+    const resolvedCase = cases.find((item) => item.id === caseId);
+    if (!resolvedCase)
+        throw new InvocationError("extension did not resolve the selected case");
+    const caseData = parseCase({
+        ...resolvedCase,
+        fixture: resolvedFixture(resolvedCase.fixture),
+    });
+    return { caseData, resolvedCase };
+}
+async function resolveSelectedExtension(prepared, selected, signal) {
+    const { invocation, host } = prepared;
+    const options = await loadExtensionOptions(selected);
+    const hostCapabilities = [
+        ...(host.instrumentation ?? []).map((item) => item.id),
+        ...(host.hostCapabilities ?? []),
+    ];
+    const session = await openExtensionSession({
+        ...options,
+        sourceFiles: selected.sourceFiles,
+        engineCapabilities: [
+            "sevro.host.exec",
+            "sevro.fixture.setup",
+            "sevro.case.host-route",
+        ],
+        hostCapabilities,
+        taskVerdictPolicy: selected.taskVerdictPolicy,
+        replaceBuiltinGraders: selected.replaceBuiltinGraders,
+        signal,
+    });
+    const chosen = selectExtensionCase(await session.resolve(pathToFileURL(invocation.projectRoot).href, { caseIds: [selected.caseId] }, {
+        id: host.id,
+        model: host.model,
+        effort: host.effort,
+        capabilities: hostCapabilities,
+    }), selected.caseId);
+    return {
+        caseData: chosen.caseData,
+        extension: { session, resolvedCase: chosen.resolvedCase },
+    };
+}
+export async function selectedCase(prepared, signal) {
+    if (prepared.invocation.extension)
+        return resolveSelectedExtension(prepared, prepared.invocation.extension, signal);
+    if (!prepared.caseData)
+        throw new InvocationError("invalid resolved case file");
+    return { caseData: prepared.caseData, extension: undefined };
+}
+//# sourceMappingURL=extension.js.map

package/dist/src/cli/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,iBAAiB;AAEzC,OAAO,EAAE,oBAAoB,EAAsB,gCAA6B;AAChF,OAAO,EAAE,eAAe,EAAE,4BAAyB;AACnD,OAAO,EAAE,eAAe,EAAmB,wBAAqB;AAChE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,qBAAkB;AAG5D,SAAS,mBAAmB,CAC1B,KAAsB,EACtB,MAAc;IAEd,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,YAAY;QACf,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC;QACzB,GAAG,YAAY;QACf,OAAO,EAAE,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAA4B,EAC5B,QAA8C,EAC9C,MAAmB;IAEnB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;KACjC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,GAAG,OAAO;QACV,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,kBAAkB,EAAE;YAClB,iBAAiB;YACjB,qBAAqB;YACrB,uBAAuB;SACxB;QACD,gBAAgB;QAChB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;QACrD,MAAM;KACP,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,mBAAmB,CAChC,MAAM,OAAO,CAAC,OAAO,CACnB,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,EAC1C,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAC9B;QACE,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,gBAAgB;KAC/B,CACF,EACD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA4B,EAC5B,MAAmB;IAEnB,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS;QAC/B,OAAO,wBAAwB,CAC7B,QAAQ,EACR,QAAQ,CAAC,UAAU,CAAC,SAAS,EAC7B,MAAM,CACP,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,QAAQ;QACpB,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { pathToFileURL } from \"node:url\";\nimport type { ResolvedCase } from \"../engine\";\nimport { openExtensionSession, type ExtensionCase } from \"../extension-session\";\nimport { resolvedFixture } from \"../resolved-case\";\nimport { InvocationError, type Invocation } from \"./invocation\";\nimport { parseCase, loadExtensionOptions } from \"./loading\";\nimport type { PreparedInvocation } from \"./preparation\";\n\nfunction selectExtensionCase(\n  cases: ExtensionCase[],\n  caseId: string,\n): { caseData: ResolvedCase; resolvedCase: ExtensionCase } {\n  const resolvedCase = cases.find((item) => item.id === caseId);\n  if (!resolvedCase)\n    throw new InvocationError(\"extension did not resolve the selected case\");\n  const caseData = parseCase({\n    ...resolvedCase,\n    fixture: resolvedFixture(resolvedCase.fixture),\n  });\n  return { caseData, resolvedCase };\n}\n\nasync function resolveSelectedExtension(\n  prepared: PreparedInvocation,\n  selected: NonNullable<Invocation[\"extension\"]>,\n  signal: AbortSignal,\n) {\n  const { invocation, host } = prepared;\n  const options = await loadExtensionOptions(selected);\n  const hostCapabilities = [\n    ...(host.instrumentation ?? []).map((item) => item.id),\n    ...(host.hostCapabilities ?? []),\n  ];\n  const session = await openExtensionSession({\n    ...options,\n    sourceFiles: selected.sourceFiles,\n    engineCapabilities: [\n      \"sevro.host.exec\",\n      \"sevro.fixture.setup\",\n      \"sevro.case.host-route\",\n    ],\n    hostCapabilities,\n    taskVerdictPolicy: selected.taskVerdictPolicy,\n    replaceBuiltinGraders: selected.replaceBuiltinGraders,\n    signal,\n  });\n  const chosen = selectExtensionCase(\n    await session.resolve(\n      pathToFileURL(invocation.projectRoot).href,\n      { caseIds: [selected.caseId] },\n      {\n        id: host.id,\n        model: host.model,\n        effort: host.effort,\n        capabilities: hostCapabilities,\n      },\n    ),\n    selected.caseId,\n  );\n  return {\n    caseData: chosen.caseData,\n    extension: { session, resolvedCase: chosen.resolvedCase },\n  };\n}\n\nexport async function selectedCase(\n  prepared: PreparedInvocation,\n  signal: AbortSignal,\n) {\n  if (prepared.invocation.extension)\n    return resolveSelectedExtension(\n      prepared,\n      prepared.invocation.extension,\n      signal,\n    );\n  if (!prepared.caseData)\n    throw new InvocationError(\"invalid resolved case file\");\n  return { caseData: prepared.caseData, extension: undefined };\n}\n"]}

package/dist/src/cli/help.js

@@ -0,0 +1,190 @@
+import { RUN_OPTIONS, optionsWith } from "./run-options.js";
+import packageJson from "../../../package.json" with { type: "json" };
+const { version } = packageJson;
+const TOP_LEVEL_HELP = `Usage: sevro <command> [options]
+
+Examples:
+  sevro demo
+  sevro init --template response --directory ./my-evaluation
+  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\
+    --project-root /absolute/project --results-root /absolute/results \\
+    --condition passive --trials 1 --threshold 1
+  sevro run --help
+  sevro report --result-file /absolute/results/run/result.json
+  sevro prune
+
+Commands:
+  demo      Run the packaged credential-free assessed example; use demo --help.
+  init      Create a new evaluation project; use init --help.
+  run       Evaluate one resolved case or extension case; use run --help.
+  report    Summarize retained results; use report --help.
+  prune     Remove retained results using a retention policy; use prune --help.
+
+Options:
+  -h, --help     Show help without preparing a run.
+  -v, --version  Print the installed Sevro package version.
+`;
+const RUN_HELP = `Usage: sevro run [options]
+
+Examples:
+  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\
+    --project-root /absolute/project --results-root /absolute/results \\
+    --condition passive --trials 1 --threshold 1
+  Add --dry to prepare without calling the candidate or graders.
+  Add --json to save a sevro.cli-result.v1 result from stdout.
+
+Required:
+${runOptionHelp("required")}
+
+Common options and defaults:
+${runOptionHelp("common")}
+  Precedence: built-in defaults, saved settings, then explicit CLI options.
+  Manifest paths use its own directory; CLI paths use the current directory.
+  --no-dry, --no-shell-isolation and other --no-<boolean> flags override saved true.
+  Relative run paths resolve from the current directory and are canonicalized before protection checks.
+
+Bundled hosts:
+${runOptionHelp("native")}
+  Native timeout defaults to 600000 ms; shell checks expect exit 0 within 30000 ms.
+
+Extension cases:
+${runOptionHelp("extension")}
+
+Optional grading routes (none selected by default):
+${runOptionHelp("grading")}
+
+Provenance overrides (normally derived automatically):
+${runOptionHelp("provenance")}
+
+Deprecated runtime options:
+${runOptionHelp("deprecated")}
+
+  -h, --help                 Show this help without preparing a run.
+Reference: docs/development-cli.md, docs/run-settings-v1.md and docs/results-v1.md in the installed package.
+`;
+function runOptionHelp(section) {
+    return optionsWith("section", section)
+        .map((name) => `  --${name} ${RUN_OPTIONS[name].help}`)
+        .join("\n");
+}
+const DEMO_HELP = `Usage: sevro demo [--json]
+
+Examples:
+  sevro demo
+  sevro demo --json
+
+Run the packaged deterministic fixture and adapter without model credentials.
+Shows an assessed verdict and retains evidence in .sevro/results beneath the current directory.
+Caller project files, sevro.json and native configuration are not loaded.
+
+Options:
+  --json       Emit one sevro.cli-result.v1 document on stdout.
+  -h, --help   Show this help without preparing a run.
+`;
+const REPORT_HELP = `Usage: sevro report [options]
+
+Examples:
+  sevro report --latest
+  sevro report --result-file /absolute/results/run/result.json
+  sevro report --result-file /absolute/results/first/result.json \\
+    --result-file /absolute/results/second/result.json --json
+
+Required:
+  --latest OR --result-file <path>  A retained result; repeat paths for distinct runs.
+                       Relative or absolute paths use the current directory.
+                       Keep each result's referenced evidence available and unchanged.
+
+Options and defaults:
+  --latest     Read the last retained CLI result, including dry or failed runs.
+  --results-root <path>  With --latest, override <cwd>/.sevro/results.
+  --json       Emit sevro.report.v1 JSON; Markdown by default.
+  -h, --help   Show this help without reading result files.
+`;
+const PRUNE_HELP = `Usage: sevro prune [options]
+
+Examples:
+  sevro prune
+  sevro prune --results-root ./other-results --keep 5
+  sevro prune --older-than 30d
+  sevro prune --latest
+  sevro prune --native-transcripts --older-than 30d
+
+Defaults: keep the newest 10 completed results under <cwd>/.sevro/results.
+Select at most one explicit retention policy:
+  --keep <positive-integer>  Keep this many newest results.
+  --latest                   Keep only the newest result (same as --keep 1).
+  --older-than <duration>    Remove results older than a positive integer plus ms, s, m, h, d or w.
+  --results-root <path>      Relative or absolute results root, resolved from cwd.
+  --native-transcripts       Remove only native transcript bundles; keep results and hashes.
+  -h, --help                 Show help without reading or deleting results.
+
+Age and ordering use result.json modification times; equal times sort by path.
+Each retained attempt counts separately, including dry, failed and interrupted runs.
+Active/unrecognized attempts and directories without result.json are preserved.
+Evidence is permanently deleted. Remaining results stay usable by sevro report;
+latest.json is updated, or removed when no completed results remain.
+With --native-transcripts, no policy removes bundles from all completed results;
+--keep/--latest preserve bundles for the newest results, and --older-than selects older results.
+Result/evidence files and latest.json stay unchanged. Reports label removed bundles as pruned.
+Missing or empty results roots are a successful no-op. Invalid or unreadable inputs exit 64.
+Reference: docs/reading-results.md in the installed package.
+`;
+const INIT_HELP = `Usage: sevro init [options]
+
+Examples:
+  sevro init --template response --directory ./my-evaluation
+  cd my-evaluation
+  sevro run --run-manifest-file run.json --dry
+  sevro run --run-manifest-file run.json
+  sevro report --latest
+
+Options and defaults:
+  --template <response|repository-skill|coding>  Default: response.
+  --directory <new-path>  Default: ./sevro-evaluation; refuses existing paths.
+  -h, --help  Show this help without creating files.
+
+Response and coding use deterministic adapters and real assertions, including negative controls.
+Coding checks need sandbox-exec (macOS) or bubblewrap/socat (Linux).
+Repository-skill uses native Codex and requires explicit --model, --effort and --codex-auth-file.
+Read the generated README.md for prerequisites and live commands; dry preparation is not an assessment.
+Reference: docs/evaluation-workflow.md in the installed package.
+`;
+const HELP_REQUESTS = {
+    "": TOP_LEVEL_HELP,
+    "--help": TOP_LEVEL_HELP,
+    "-h": TOP_LEVEL_HELP,
+    help: TOP_LEVEL_HELP,
+    "run --help": RUN_HELP,
+    "run -h": RUN_HELP,
+    "help run": RUN_HELP,
+    "demo --help": DEMO_HELP,
+    "demo -h": DEMO_HELP,
+    "help demo": DEMO_HELP,
+    "init --help": INIT_HELP,
+    "init -h": INIT_HELP,
+    "help init": INIT_HELP,
+    "report --help": REPORT_HELP,
+    "report -h": REPORT_HELP,
+    "help report": REPORT_HELP,
+    "prune --help": PRUNE_HELP,
+    "prune -h": PRUNE_HELP,
+    "help prune": PRUNE_HELP,
+};
+/** Handle informational commands before loading inputs or creating run state. */
+export function informationCommand(argv) {
+    const request = argv.slice(1).some((arg) => ["--help", "-h"].includes(arg))
+        ? [argv[0], "--help"].join(" ")
+        : argv.join(" ");
+    if (["--version", "-v"].includes(request)) {
+        process.stdout.write(`sevro ${version}\n`);
+        return true;
+    }
+    const help = Object.hasOwn(HELP_REQUESTS, request)
+        ? HELP_REQUESTS[request]
+        : undefined;
+    if (help === undefined)
+        return false;
+    process.stdout.write(help);
+    return true;
+}
+//# sourceMappingURL=help.js.map

package/dist/src/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAsB,yBAAsB;AAC7E,OAAO,WAAW,8BAA2B,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACnE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;AAEhC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBtB,CAAC;AAEF,MAAM,QAAQ,GAAG;;;;;;;;;;EAUf,aAAa,CAAC,UAAU,CAAC;;;EAGzB,aAAa,CAAC,QAAQ,CAAC;;;;;;;EAOvB,aAAa,CAAC,QAAQ,CAAC;;;;EAIvB,aAAa,CAAC,WAAW,CAAC;;;EAG1B,aAAa,CAAC,SAAS,CAAC;;;EAGxB,aAAa,CAAC,YAAY,CAAC;;;EAG3B,aAAa,CAAC,YAAY,CAAC;;;;CAI5B,CAAC;AAEF,SAAS,aAAa,CACpB,OAAuD;IAEvD,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,SAAS,GAAG;;;;;;;;;;;;;CAajB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;CAkBnB,CAAC;AAEF,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BlB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;CAmBjB,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE,WAAW;IAC5B,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,WAAW;IAC1B,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,UAAU;IACtB,YAAY,EAAE,UAAU;CACzB,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;QAChD,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { RUN_OPTIONS, optionsWith, type RunOptionName } from \"./run-options\";\nimport packageJson from \"../../package.json\" with { type: \"json\" };\nconst { version } = packageJson;\n\nconst TOP_LEVEL_HELP = `Usage: sevro <command> [options]\n\nExamples:\n  sevro demo\n  sevro init --template response --directory ./my-evaluation\n  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\\\\n    --project-root /absolute/project --results-root /absolute/results \\\\\n    --condition passive --trials 1 --threshold 1\n  sevro run --help\n  sevro report --result-file /absolute/results/run/result.json\n  sevro prune\n\nCommands:\n  demo      Run the packaged credential-free assessed example; use demo --help.\n  init      Create a new evaluation project; use init --help.\n  run       Evaluate one resolved case or extension case; use run --help.\n  report    Summarize retained results; use report --help.\n  prune     Remove retained results using a retention policy; use prune --help.\n\nOptions:\n  -h, --help     Show help without preparing a run.\n  -v, --version  Print the installed Sevro package version.\n`;\n\nconst RUN_HELP = `Usage: sevro run [options]\n\nExamples:\n  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\\\\n    --project-root /absolute/project --results-root /absolute/results \\\\\n    --condition passive --trials 1 --threshold 1\n  Add --dry to prepare without calling the candidate or graders.\n  Add --json to save a sevro.cli-result.v1 result from stdout.\n\nRequired:\n${runOptionHelp(\"required\")}\n\nCommon options and defaults:\n${runOptionHelp(\"common\")}\n  Precedence: built-in defaults, saved settings, then explicit CLI options.\n  Manifest paths use its own directory; CLI paths use the current directory.\n  --no-dry, --no-shell-isolation and other --no-<boolean> flags override saved true.\n  Relative run paths resolve from the current directory and are canonicalized before protection checks.\n\nBundled hosts:\n${runOptionHelp(\"native\")}\n  Native timeout defaults to 600000 ms; shell checks expect exit 0 within 30000 ms.\n\nExtension cases:\n${runOptionHelp(\"extension\")}\n\nOptional grading routes (none selected by default):\n${runOptionHelp(\"grading\")}\n\nProvenance overrides (normally derived automatically):\n${runOptionHelp(\"provenance\")}\n\nDeprecated runtime options:\n${runOptionHelp(\"deprecated\")}\n\n  -h, --help                 Show this help without preparing a run.\nReference: docs/development-cli.md, docs/run-settings-v1.md and docs/results-v1.md in the installed package.\n`;\n\nfunction runOptionHelp(\n  section: (typeof RUN_OPTIONS)[RunOptionName][\"section\"],\n): string {\n  return optionsWith(\"section\", section)\n    .map((name) => `  --${name} ${RUN_OPTIONS[name].help}`)\n    .join(\"\\n\");\n}\n\nconst DEMO_HELP = `Usage: sevro demo [--json]\n\nExamples:\n  sevro demo\n  sevro demo --json\n\nRun the packaged deterministic fixture and adapter without model credentials.\nShows an assessed verdict and retains evidence in .sevro/results beneath the current directory.\nCaller project files, sevro.json and native configuration are not loaded.\n\nOptions:\n  --json       Emit one sevro.cli-result.v1 document on stdout.\n  -h, --help   Show this help without preparing a run.\n`;\n\nconst REPORT_HELP = `Usage: sevro report [options]\n\nExamples:\n  sevro report --latest\n  sevro report --result-file /absolute/results/run/result.json\n  sevro report --result-file /absolute/results/first/result.json \\\\\n    --result-file /absolute/results/second/result.json --json\n\nRequired:\n  --latest OR --result-file <path>  A retained result; repeat paths for distinct runs.\n                       Relative or absolute paths use the current directory.\n                       Keep each result's referenced evidence available and unchanged.\n\nOptions and defaults:\n  --latest     Read the last retained CLI result, including dry or failed runs.\n  --results-root <path>  With --latest, override <cwd>/.sevro/results.\n  --json       Emit sevro.report.v1 JSON; Markdown by default.\n  -h, --help   Show this help without reading result files.\n`;\n\nconst PRUNE_HELP = `Usage: sevro prune [options]\n\nExamples:\n  sevro prune\n  sevro prune --results-root ./other-results --keep 5\n  sevro prune --older-than 30d\n  sevro prune --latest\n  sevro prune --native-transcripts --older-than 30d\n\nDefaults: keep the newest 10 completed results under <cwd>/.sevro/results.\nSelect at most one explicit retention policy:\n  --keep <positive-integer>  Keep this many newest results.\n  --latest                   Keep only the newest result (same as --keep 1).\n  --older-than <duration>    Remove results older than a positive integer plus ms, s, m, h, d or w.\n  --results-root <path>      Relative or absolute results root, resolved from cwd.\n  --native-transcripts       Remove only native transcript bundles; keep results and hashes.\n  -h, --help                 Show help without reading or deleting results.\n\nAge and ordering use result.json modification times; equal times sort by path.\nEach retained attempt counts separately, including dry, failed and interrupted runs.\nActive/unrecognized attempts and directories without result.json are preserved.\nEvidence is permanently deleted. Remaining results stay usable by sevro report;\nlatest.json is updated, or removed when no completed results remain.\nWith --native-transcripts, no policy removes bundles from all completed results;\n--keep/--latest preserve bundles for the newest results, and --older-than selects older results.\nResult/evidence files and latest.json stay unchanged. Reports label removed bundles as pruned.\nMissing or empty results roots are a successful no-op. Invalid or unreadable inputs exit 64.\nReference: docs/reading-results.md in the installed package.\n`;\n\nconst INIT_HELP = `Usage: sevro init [options]\n\nExamples:\n  sevro init --template response --directory ./my-evaluation\n  cd my-evaluation\n  sevro run --run-manifest-file run.json --dry\n  sevro run --run-manifest-file run.json\n  sevro report --latest\n\nOptions and defaults:\n  --template <response|repository-skill|coding>  Default: response.\n  --directory <new-path>  Default: ./sevro-evaluation; refuses existing paths.\n  -h, --help  Show this help without creating files.\n\nResponse and coding use deterministic adapters and real assertions, including negative controls.\nCoding checks need sandbox-exec (macOS) or bubblewrap/socat (Linux).\nRepository-skill uses native Codex and requires explicit --model, --effort and --codex-auth-file.\nRead the generated README.md for prerequisites and live commands; dry preparation is not an assessment.\nReference: docs/evaluation-workflow.md in the installed package.\n`;\n\nconst HELP_REQUESTS: Record<string, string> = {\n  \"\": TOP_LEVEL_HELP,\n  \"--help\": TOP_LEVEL_HELP,\n  \"-h\": TOP_LEVEL_HELP,\n  help: TOP_LEVEL_HELP,\n  \"run --help\": RUN_HELP,\n  \"run -h\": RUN_HELP,\n  \"help run\": RUN_HELP,\n  \"demo --help\": DEMO_HELP,\n  \"demo -h\": DEMO_HELP,\n  \"help demo\": DEMO_HELP,\n  \"init --help\": INIT_HELP,\n  \"init -h\": INIT_HELP,\n  \"help init\": INIT_HELP,\n  \"report --help\": REPORT_HELP,\n  \"report -h\": REPORT_HELP,\n  \"help report\": REPORT_HELP,\n  \"prune --help\": PRUNE_HELP,\n  \"prune -h\": PRUNE_HELP,\n  \"help prune\": PRUNE_HELP,\n};\n\n/** Handle informational commands before loading inputs or creating run state. */\nexport function informationCommand(argv: string[]): boolean {\n  const request = argv.slice(1).some((arg) => [\"--help\", \"-h\"].includes(arg))\n    ? [argv[0], \"--help\"].join(\" \")\n    : argv.join(\" \");\n  if ([\"--version\", \"-v\"].includes(request)) {\n    process.stdout.write(`sevro ${version}\\n`);\n    return true;\n  }\n  const help = Object.hasOwn(HELP_REQUESTS, request)\n    ? HELP_REQUESTS[request]\n    : undefined;\n  if (help === undefined) return false;\n  process.stdout.write(help);\n  return true;\n}\n"]}

package/dist/src/cli/hosts.js

@@ -0,0 +1,33 @@
+import { createClaudeHost } from "../hosts/claude.js";
+import { createCodexHost } from "../hosts/codex.js";
+import { codexAgentConcurrency } from "../hosts/codex-configuration.js";
+import { InvocationError, nativeRoutes } from "./invocation.js";
+import { loadHost } from "./loading.js";
+export async function selectedConcurrency(invocation, configRoot) {
+    return nativeRoutes({ ...invocation, claude: undefined }).length
+        ? codexAgentConcurrency(configRoot)
+        : null;
+}
+export async function candidateHost(invocation, agentConcurrencyLimit) {
+    if (invocation.codex)
+        return retainExecutable(createCodexHost({ ...invocation.codex, agentConcurrencyLimit }), invocation.codex.binary);
+    if (invocation.claude)
+        return retainExecutable(createClaudeHost(invocation.claude), invocation.claude.binary);
+    if (!invocation.adapterModule)
+        throw new InvocationError("missing --adapter-module or --host");
+    return loadHost(invocation.adapterModule);
+}
+export async function secondaryHost(module, codex, agentConcurrencyLimit) {
+    if (module)
+        return loadHost(module);
+    if (codex)
+        return retainExecutable(createCodexHost({ ...codex, agentConcurrencyLimit }), codex.binary);
+    return undefined;
+}
+function retainExecutable(host, binary) {
+    return {
+        ...host,
+        configuration: { ...host.configuration, "sevro.host.executable": binary },
+    };
+}
+//# sourceMappingURL=hosts.js.map

package/dist/src/cli/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["hosts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,2BAAwB;AACnD,OAAO,EAAE,eAAe,EAAE,0BAAuB;AACjD,OAAO,EAAE,qBAAqB,EAAE,wCAAqC;AACrE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAmB,wBAAqB;AAC9E,OAAO,EAAE,QAAQ,EAAE,qBAAkB;AAErC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAsB,EACtB,UAAkB;IAElB,OAAO,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM;QAC9D,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAsB,EACtB,qBAAoC;IAEpC,IAAI,UAAU,CAAC,KAAK;QAClB,OAAO,gBAAgB,CACrB,eAAe,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAC/D,UAAU,CAAC,KAAK,CAAC,MAAM,CACxB,CAAC;IACJ,IAAI,UAAU,CAAC,MAAM;QACnB,OAAO,gBAAgB,CACrB,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EACnC,UAAU,CAAC,MAAM,CAAC,MAAM,CACzB,CAAC;IACJ,IAAI,CAAC,UAAU,CAAC,aAAa;QAC3B,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA0B,EAC1B,KAAkC,EAClC,qBAAoC;IAEpC,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK;QACP,OAAO,gBAAgB,CACrB,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,qBAAqB,EAAE,CAAC,EACpD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAiB,EAAE,MAAc;IACzD,OAAO;QACL,GAAG,IAAI;QACP,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,uBAAuB,EAAE,MAAM,EAAE;KAC1E,CAAC;AACJ,CAAC","sourcesContent":["import type { HostAdapter } from \"../engine\";\nimport { createClaudeHost } from \"../hosts/claude\";\nimport { createCodexHost } from \"../hosts/codex\";\nimport { codexAgentConcurrency } from \"../hosts/codex-configuration\";\nimport { InvocationError, nativeRoutes, type Invocation } from \"./invocation\";\nimport { loadHost } from \"./loading\";\n\nexport async function selectedConcurrency(\n  invocation: Invocation,\n  configRoot: string,\n): Promise<number | null> {\n  return nativeRoutes({ ...invocation, claude: undefined }).length\n    ? codexAgentConcurrency(configRoot)\n    : null;\n}\n\nexport async function candidateHost(\n  invocation: Invocation,\n  agentConcurrencyLimit: number | null,\n): Promise<HostAdapter> {\n  if (invocation.codex)\n    return retainExecutable(\n      createCodexHost({ ...invocation.codex, agentConcurrencyLimit }),\n      invocation.codex.binary,\n    );\n  if (invocation.claude)\n    return retainExecutable(\n      createClaudeHost(invocation.claude),\n      invocation.claude.binary,\n    );\n  if (!invocation.adapterModule)\n    throw new InvocationError(\"missing --adapter-module or --host\");\n  return loadHost(invocation.adapterModule);\n}\n\nexport async function secondaryHost(\n  module: string | undefined,\n  codex: Invocation[\"semanticCodex\"],\n  agentConcurrencyLimit: number | null,\n): Promise<HostAdapter | undefined> {\n  if (module) return loadHost(module);\n  if (codex)\n    return retainExecutable(\n      createCodexHost({ ...codex, agentConcurrencyLimit }),\n      codex.binary,\n    );\n  return undefined;\n}\n\nfunction retainExecutable(host: HostAdapter, binary: string): HostAdapter {\n  return {\n    ...host,\n    configuration: { ...host.configuration, \"sevro.host.executable\": binary },\n  };\n}\n"]}

package/dist/src/cli/init-settings.js

@@ -0,0 +1,29 @@
+import { join } from "node:path";
+import { runtimeModule } from "../runner-paths.js";
+export function templateSettings(template) {
+    if (template === "repository-skill")
+        return {
+            "project-root": ".",
+            "extension-command-file": "command.json",
+            "extension-source-file": [
+                "extension.ts",
+                "extension-data.ts",
+                ".agents/skills/startup-guide/SKILL.md",
+            ].map(runtimeModule),
+            "case-id": "repository-skill",
+            host: "codex",
+        };
+    return {
+        "case-file": "case.json",
+        "adapter-module": runtimeModule("adapter.ts"),
+        "project-root": ".",
+        ...(template === "coding" ? { "shell-isolation": true } : {}),
+    };
+}
+export function templateCommand(destination) {
+    return [process.execPath, join(destination, runtimeModule("extension.ts"))];
+}
+export function nativeReadme() {
+    return `# Repository skill evaluation\n\nThis template mounts the actual startup-guide skill and requires Codex's explicit invocation evidence plus assertions for the start command and port. Missing evidence remains not_assessed.\n\nPrerequisites: Node.js 24.13.0 or newer, or Bun 1.3.13, plus Git, Codex on PATH, supported native isolation (sandbox-exec on macOS or bubblewrap/socat on Linux), and a readable Codex authentication file. Choose the exact model and effort explicitly. Do not store credentials in run.json.\n\n\`\`\`sh\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json --dry\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json\nsevro report --latest\n\`\`\`\n\nDry preparation checks mounts and declarations without calling the model. No authenticated model execution or skill dispatch is established by dry preparation. Live execution may incur provider charges. To create a negative control, change the expected port in the extension data file to 9000 while leaving the fixture at 3000; rerun and inspect the failed port assertion. Model compliance and measurements are unknown until actually executed.\n\nEdit the copied skill and assertions, prepare again, then rerun the same model/effort/condition. Keep private .sevro evidence out of Git. command.json uses the initializer's absolute selected runtime and extension paths; regenerate it after moving this project.\n`;
+}
+//# sourceMappingURL=init-settings.js.map

package/dist/src/cli/init-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-settings.js","sourceRoot":"","sources":["init-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,aAAa,EAAE,2BAAwB;AAEhD,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,KAAK,kBAAkB;QACjC,OAAO;YACL,cAAc,EAAE,GAAG;YACnB,wBAAwB,EAAE,cAAc;YACxC,uBAAuB,EAAE;gBACvB,cAAc;gBACd,mBAAmB;gBACnB,uCAAuC;aACxC,CAAC,GAAG,CAAC,aAAa,CAAC;YACpB,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;QAC7C,cAAc,EAAE,GAAG;QACnB,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,y+CAAy+C,CAAC;AACn/C,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { runtimeModule } from \"../runner-paths\";\n\nexport function templateSettings(template: string) {\n  if (template === \"repository-skill\")\n    return {\n      \"project-root\": \".\",\n      \"extension-command-file\": \"command.json\",\n      \"extension-source-file\": [\n        \"extension.ts\",\n        \"extension-data.ts\",\n        \".agents/skills/startup-guide/SKILL.md\",\n      ].map(runtimeModule),\n      \"case-id\": \"repository-skill\",\n      host: \"codex\",\n    };\n  return {\n    \"case-file\": \"case.json\",\n    \"adapter-module\": runtimeModule(\"adapter.ts\"),\n    \"project-root\": \".\",\n    ...(template === \"coding\" ? { \"shell-isolation\": true } : {}),\n  };\n}\n\nexport function templateCommand(destination: string) {\n  return [process.execPath, join(destination, runtimeModule(\"extension.ts\"))];\n}\n\nexport function nativeReadme() {\n  return `# Repository skill evaluation\\n\\nThis template mounts the actual startup-guide skill and requires Codex's explicit invocation evidence plus assertions for the start command and port. Missing evidence remains not_assessed.\\n\\nPrerequisites: Node.js 24.13.0 or newer, or Bun 1.3.13, plus Git, Codex on PATH, supported native isolation (sandbox-exec on macOS or bubblewrap/socat on Linux), and a readable Codex authentication file. Choose the exact model and effort explicitly. Do not store credentials in run.json.\\n\\n\\`\\`\\`sh\\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json --dry\\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json\\nsevro report --latest\\n\\`\\`\\`\\n\\nDry preparation checks mounts and declarations without calling the model. No authenticated model execution or skill dispatch is established by dry preparation. Live execution may incur provider charges. To create a negative control, change the expected port in the extension data file to 9000 while leaving the fixture at 3000; rerun and inspect the failed port assertion. Model compliance and measurements are unknown until actually executed.\\n\\nEdit the copied skill and assertions, prepare again, then rerun the same model/effort/condition. Keep private .sevro evidence out of Git. command.json uses the initializer's absolute selected runtime and extension paths; regenerate it after moving this project.\\n`;\n}\n"]}