@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/cli/completion.js

@@ -0,0 +1,14 @@
+import { dirname, join } from "node:path";
+import { atomicWriteJson } from "../storage.js";
+import { createReport } from "../report.js";
+import { withResultsLock } from "../results-lock.js";
+/** Latest means the last successfully retained CLI result, including dry/failing runs. */
+export async function retainCliResult(result, resultsRoot) {
+    return withResultsLock(resultsRoot, async () => {
+        const resultFile = join(dirname(result.evidencePath), "result.json");
+        await atomicWriteJson(resultFile, result);
+        await atomicWriteJson(join(resultsRoot, "latest.json"), result);
+        return { resultFile, report: await createReport([resultFile]) };
+    });
+}
+//# sourceMappingURL=completion.js.map

package/dist/src/cli/completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["completion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAC1C,OAAO,EAAE,eAAe,EAAE,sBAAmB;AAE7C,OAAO,EAAE,YAAY,EAAE,qBAAkB;AACzC,OAAO,EAAE,eAAe,EAAE,2BAAwB;AAElD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAiB,EAAE,WAAmB;IAC1E,OAAO,eAAe,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { dirname, join } from \"node:path\";\nimport { atomicWriteJson } from \"../storage\";\nimport type { CliResult } from \"../engine\";\nimport { createReport } from \"../report\";\nimport { withResultsLock } from \"../results-lock\";\n\n/** Latest means the last successfully retained CLI result, including dry/failing runs. */\nexport async function retainCliResult(result: CliResult, resultsRoot: string) {\n  return withResultsLock(resultsRoot, async () => {\n    const resultFile = join(dirname(result.evidencePath), \"result.json\");\n    await atomicWriteJson(resultFile, result);\n    await atomicWriteJson(join(resultsRoot, \"latest.json\"), result);\n    return { resultFile, report: await createReport([resultFile]) };\n  });\n}\n"]}

package/dist/src/cli/demo.js

@@ -0,0 +1,45 @@
+import { examplePath } from "../runner-paths.js";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { main } from "./command.js";
+import { InvocationError } from "./invocation.js";
+import { displayFailure } from "./presentation.js";
+/** Run the packaged deterministic case without inheriting a caller's project policy. */
+export async function demoCommand(argv) {
+    const json = argv.includes("--json");
+    if (argv.some((arg) => arg !== "--json")) {
+        displayFailure(new InvocationError("demo accepts only --json; run sevro demo --help"), json, 64, "invalid demo invocation", "demo");
+        return;
+    }
+    let projectRoot;
+    try {
+        projectRoot = await mkdtemp(join(tmpdir(), "sevro-demo-"));
+    }
+    catch (cause) {
+        displayFailure(new Error(`demo temporary project could not be created under ${tmpdir()}; set TMPDIR to a writable directory`, { cause }), json, 70, "demo preparation failed");
+        return;
+    }
+    await main([
+        "run",
+        ...(json ? ["--json"] : []),
+        "--case-file",
+        examplePath("basic", "graded.json"),
+        "--adapter-module",
+        examplePath("basic", "host.ts"),
+        "--project-root",
+        projectRoot,
+        "--results-root",
+        join(process.cwd(), ".sevro", "results"),
+    ], demoCleanup(projectRoot));
+}
+function demoCleanup(projectRoot) {
+    let attempted = false;
+    return async () => {
+        if (attempted)
+            return;
+        attempted = true;
+        await rm(projectRoot, { recursive: true, force: true });
+    };
+}
+//# sourceMappingURL=demo.js.map

package/dist/src/cli/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["demo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,2BAAwB;AAC9C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,yBAAyB;AAC/C,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,IAAI,EAAE,qBAAkB;AACjC,OAAO,EAAE,eAAe,EAAE,wBAAqB;AAC/C,OAAO,EAAE,cAAc,EAAE,0BAAuB;AAEhD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzC,cAAc,CACZ,IAAI,eAAe,CAAC,iDAAiD,CAAC,EACtE,IAAI,EACJ,EAAE,EACF,yBAAyB,EACzB,MAAM,CACP,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CACZ,IAAI,KAAK,CACP,qDAAqD,MAAM,EAAE,sCAAsC,EACnG,EAAE,KAAK,EAAE,CACV,EACD,IAAI,EACJ,EAAE,EACF,yBAAyB,CAC1B,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,CACR;QACE,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,aAAa;QACb,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC;QACnC,kBAAkB;QAClB,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;QAC/B,gBAAgB;QAChB,WAAW;QACX,gBAAgB;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC;KACzC,EACD,WAAW,CAAC,WAAW,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { examplePath } from \"../runner-paths\";\nimport { mkdtemp, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { main } from \"./command\";\nimport { InvocationError } from \"./invocation\";\nimport { displayFailure } from \"./presentation\";\n\n/** Run the packaged deterministic case without inheriting a caller's project policy. */\nexport async function demoCommand(argv: string[]): Promise<void> {\n  const json = argv.includes(\"--json\");\n  if (argv.some((arg) => arg !== \"--json\")) {\n    displayFailure(\n      new InvocationError(\"demo accepts only --json; run sevro demo --help\"),\n      json,\n      64,\n      \"invalid demo invocation\",\n      \"demo\",\n    );\n    return;\n  }\n  let projectRoot: string;\n  try {\n    projectRoot = await mkdtemp(join(tmpdir(), \"sevro-demo-\"));\n  } catch (cause) {\n    displayFailure(\n      new Error(\n        `demo temporary project could not be created under ${tmpdir()}; set TMPDIR to a writable directory`,\n        { cause },\n      ),\n      json,\n      70,\n      \"demo preparation failed\",\n    );\n    return;\n  }\n  await main(\n    [\n      \"run\",\n      ...(json ? [\"--json\"] : []),\n      \"--case-file\",\n      examplePath(\"basic\", \"graded.json\"),\n      \"--adapter-module\",\n      examplePath(\"basic\", \"host.ts\"),\n      \"--project-root\",\n      projectRoot,\n      \"--results-root\",\n      join(process.cwd(), \".sevro\", \"results\"),\n    ],\n    demoCleanup(projectRoot),\n  );\n}\n\nfunction demoCleanup(projectRoot: string): () => Promise<void> {\n  let attempted = false;\n  return async () => {\n    if (attempted) return;\n    attempted = true;\n    await rm(projectRoot, { recursive: true, force: true });\n  };\n}\n"]}

package/dist/src/cli/evaluation.js

@@ -0,0 +1,40 @@
+import { runEvaluation } from "../engine.js";
+import { packageBuildDigest, projectIdentityDigest, projectProvenance, } from "../provenance.js";
+import { selectedCase } from "./extension.js";
+import { assessmentSettings, effectiveSettings } from "./settings.js";
+import { displayProgress } from "./progress.js";
+export async function evaluateInvocation(prepared, signal) {
+    const { invocation, preparationSources, host, semanticHost, advisoryHost } = prepared;
+    const { caseData, extension } = await selectedCase(prepared, signal);
+    return runEvaluation({
+        onProgress: displayProgress,
+        resolvedRunSettings: effectiveSettings(prepared),
+        assessmentSettings: assessmentSettings(prepared),
+        runtimePolicy: prepared.runtimePolicy,
+        projectRoot: invocation.projectRoot,
+        resultsRoot: invocation.resultsRoot,
+        runStateRoot: invocation.runStateRoot,
+        case: caseData,
+        extension,
+        preparationSources,
+        host,
+        semanticHost,
+        advisoryHost,
+        advisoryExcludedPaths: invocation.advisoryExcludedPaths,
+        shellIsolation: invocation.shellIsolation,
+        runnerBuildDigest: invocation.runnerBuildDigest ?? (await packageBuildDigest()),
+        runnerCheckoutRoot: invocation.runnerCheckoutRoot,
+        projectDigest: invocation.projectDigest ??
+            (await projectIdentityDigest(invocation.projectRoot, await projectProvenance(invocation.projectRoot, [
+                invocation.resultsRoot,
+                invocation.runStateRoot,
+            ]), [invocation.resultsRoot, invocation.runStateRoot])),
+        condition: invocation.condition,
+        trialCount: invocation.trialCount,
+        jobs: invocation.jobs,
+        passThreshold: invocation.passThreshold,
+        dry: invocation.dry,
+        signal,
+    });
+}
+//# sourceMappingURL=evaluation.js.map

package/dist/src/cli/evaluation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation.js","sourceRoot":"","sources":["evaluation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,qBAAkB;AAC1C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,yBAAsB;AACvB,OAAO,EAAE,YAAY,EAAE,uBAAoB;AAE3C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,sBAAmB;AACnE,OAAO,EAAE,eAAe,EAAE,sBAAmB;AAE7C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,MAAmB;IAEnB,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,GACxE,QAAQ,CAAC;IACX,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,aAAa,CAAC;QACnB,UAAU,EAAE,eAAe;QAC3B,mBAAmB,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAChD,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QAChD,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,IAAI,EAAE,QAAQ;QACd,SAAS;QACT,kBAAkB;QAClB,IAAI;QACJ,YAAY;QACZ,YAAY;QACZ,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,iBAAiB,EACf,UAAU,CAAC,iBAAiB,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC;QAC9D,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,aAAa,EACX,UAAU,CAAC,aAAa;YACxB,CAAC,MAAM,qBAAqB,CAC1B,UAAU,CAAC,WAAW,EACtB,MAAM,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE;gBAC9C,UAAU,CAAC,WAAW;gBACtB,UAAU,CAAC,YAAY;aACxB,CAAC,EACF,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC,CAClD,CAAC;QACJ,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,MAAM;KACP,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { runEvaluation } from \"../engine\";\nimport {\n  packageBuildDigest,\n  projectIdentityDigest,\n  projectProvenance,\n} from \"../provenance\";\nimport { selectedCase } from \"./extension\";\nimport type { PreparedInvocation } from \"./preparation\";\nimport { assessmentSettings, effectiveSettings } from \"./settings\";\nimport { displayProgress } from \"./progress\";\n\nexport async function evaluateInvocation(\n  prepared: PreparedInvocation,\n  signal: AbortSignal,\n) {\n  const { invocation, preparationSources, host, semanticHost, advisoryHost } =\n    prepared;\n  const { caseData, extension } = await selectedCase(prepared, signal);\n  return runEvaluation({\n    onProgress: displayProgress,\n    resolvedRunSettings: effectiveSettings(prepared),\n    assessmentSettings: assessmentSettings(prepared),\n    runtimePolicy: prepared.runtimePolicy,\n    projectRoot: invocation.projectRoot,\n    resultsRoot: invocation.resultsRoot,\n    runStateRoot: invocation.runStateRoot,\n    case: caseData,\n    extension,\n    preparationSources,\n    host,\n    semanticHost,\n    advisoryHost,\n    advisoryExcludedPaths: invocation.advisoryExcludedPaths,\n    shellIsolation: invocation.shellIsolation,\n    runnerBuildDigest:\n      invocation.runnerBuildDigest ?? (await packageBuildDigest()),\n    runnerCheckoutRoot: invocation.runnerCheckoutRoot,\n    projectDigest:\n      invocation.projectDigest ??\n      (await projectIdentityDigest(\n        invocation.projectRoot,\n        await projectProvenance(invocation.projectRoot, [\n          invocation.resultsRoot,\n          invocation.runStateRoot,\n        ]),\n        [invocation.resultsRoot, invocation.runStateRoot],\n      )),\n    condition: invocation.condition,\n    trialCount: invocation.trialCount,\n    jobs: invocation.jobs,\n    passThreshold: invocation.passThreshold,\n    dry: invocation.dry,\n    signal,\n  });\n}\n"]}

package/dist/src/cli/extension.js

@@ -0,0 +1,54 @@
+import { pathToFileURL } from "node:url";
+import { openExtensionSession } from "../extension-session.js";
+import { resolvedFixture } from "../resolved-case.js";
+import { InvocationError } from "./invocation.js";
+import { parseCase, loadExtensionOptions } from "./loading.js";
+function selectExtensionCase(cases, caseId) {
+    const resolvedCase = cases.find((item) => item.id === caseId);
+    if (!resolvedCase)
+        throw new InvocationError("extension did not resolve the selected case");
+    const caseData = parseCase({
+        ...resolvedCase,
+        fixture: resolvedFixture(resolvedCase.fixture),
+    });
+    return { caseData, resolvedCase };
+}
+async function resolveSelectedExtension(prepared, selected, signal) {
+    const { invocation, host } = prepared;
+    const options = await loadExtensionOptions(selected);
+    const hostCapabilities = [
+        ...(host.instrumentation ?? []).map((item) => item.id),
+        ...(host.hostCapabilities ?? []),
+    ];
+    const session = await openExtensionSession({
+        ...options,
+        sourceFiles: selected.sourceFiles,
+        engineCapabilities: [
+            "sevro.host.exec",
+            "sevro.fixture.setup",
+            "sevro.case.host-route",
+        ],
+        hostCapabilities,
+        taskVerdictPolicy: selected.taskVerdictPolicy,
+        replaceBuiltinGraders: selected.replaceBuiltinGraders,
+        signal,
+    });
+    const chosen = selectExtensionCase(await session.resolve(pathToFileURL(invocation.projectRoot).href, { caseIds: [selected.caseId] }, {
+        id: host.id,
+        model: host.model,
+        effort: host.effort,
+        capabilities: hostCapabilities,
+    }), selected.caseId);
+    return {
+        caseData: chosen.caseData,
+        extension: { session, resolvedCase: chosen.resolvedCase },
+    };
+}
+export async function selectedCase(prepared, signal) {
+    if (prepared.invocation.extension)
+        return resolveSelectedExtension(prepared, prepared.invocation.extension, signal);
+    if (!prepared.caseData)
+        throw new InvocationError("invalid resolved case file");
+    return { caseData: prepared.caseData, extension: undefined };
+}
+//# sourceMappingURL=extension.js.map

package/dist/src/cli/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,iBAAiB;AAEzC,OAAO,EAAE,oBAAoB,EAAsB,gCAA6B;AAChF,OAAO,EAAE,eAAe,EAAE,4BAAyB;AACnD,OAAO,EAAE,eAAe,EAAmB,wBAAqB;AAChE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,qBAAkB;AAG5D,SAAS,mBAAmB,CAC1B,KAAsB,EACtB,MAAc;IAEd,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,YAAY;QACf,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC;QACzB,GAAG,YAAY;QACf,OAAO,EAAE,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAA4B,EAC5B,QAA8C,EAC9C,MAAmB;IAEnB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;KACjC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACzC,GAAG,OAAO;QACV,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,kBAAkB,EAAE;YAClB,iBAAiB;YACjB,qBAAqB;YACrB,uBAAuB;SACxB;QACD,gBAAgB;QAChB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;QACrD,MAAM;KACP,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,mBAAmB,CAChC,MAAM,OAAO,CAAC,OAAO,CACnB,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,EAC1C,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAC9B;QACE,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,gBAAgB;KAC/B,CACF,EACD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA4B,EAC5B,MAAmB;IAEnB,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS;QAC/B,OAAO,wBAAwB,CAC7B,QAAQ,EACR,QAAQ,CAAC,UAAU,CAAC,SAAS,EAC7B,MAAM,CACP,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,QAAQ;QACpB,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC","sourcesContent":["import { pathToFileURL } from \"node:url\";\nimport type { ResolvedCase } from \"../engine\";\nimport { openExtensionSession, type ExtensionCase } from \"../extension-session\";\nimport { resolvedFixture } from \"../resolved-case\";\nimport { InvocationError, type Invocation } from \"./invocation\";\nimport { parseCase, loadExtensionOptions } from \"./loading\";\nimport type { PreparedInvocation } from \"./preparation\";\n\nfunction selectExtensionCase(\n  cases: ExtensionCase[],\n  caseId: string,\n): { caseData: ResolvedCase; resolvedCase: ExtensionCase } {\n  const resolvedCase = cases.find((item) => item.id === caseId);\n  if (!resolvedCase)\n    throw new InvocationError(\"extension did not resolve the selected case\");\n  const caseData = parseCase({\n    ...resolvedCase,\n    fixture: resolvedFixture(resolvedCase.fixture),\n  });\n  return { caseData, resolvedCase };\n}\n\nasync function resolveSelectedExtension(\n  prepared: PreparedInvocation,\n  selected: NonNullable<Invocation[\"extension\"]>,\n  signal: AbortSignal,\n) {\n  const { invocation, host } = prepared;\n  const options = await loadExtensionOptions(selected);\n  const hostCapabilities = [\n    ...(host.instrumentation ?? []).map((item) => item.id),\n    ...(host.hostCapabilities ?? []),\n  ];\n  const session = await openExtensionSession({\n    ...options,\n    sourceFiles: selected.sourceFiles,\n    engineCapabilities: [\n      \"sevro.host.exec\",\n      \"sevro.fixture.setup\",\n      \"sevro.case.host-route\",\n    ],\n    hostCapabilities,\n    taskVerdictPolicy: selected.taskVerdictPolicy,\n    replaceBuiltinGraders: selected.replaceBuiltinGraders,\n    signal,\n  });\n  const chosen = selectExtensionCase(\n    await session.resolve(\n      pathToFileURL(invocation.projectRoot).href,\n      { caseIds: [selected.caseId] },\n      {\n        id: host.id,\n        model: host.model,\n        effort: host.effort,\n        capabilities: hostCapabilities,\n      },\n    ),\n    selected.caseId,\n  );\n  return {\n    caseData: chosen.caseData,\n    extension: { session, resolvedCase: chosen.resolvedCase },\n  };\n}\n\nexport async function selectedCase(\n  prepared: PreparedInvocation,\n  signal: AbortSignal,\n) {\n  if (prepared.invocation.extension)\n    return resolveSelectedExtension(\n      prepared,\n      prepared.invocation.extension,\n      signal,\n    );\n  if (!prepared.caseData)\n    throw new InvocationError(\"invalid resolved case file\");\n  return { caseData: prepared.caseData, extension: undefined };\n}\n"]}

package/dist/src/cli/help.js

@@ -0,0 +1,190 @@
+import { RUN_OPTIONS, optionsWith } from "./run-options.js";
+import packageJson from "../../../package.json" with { type: "json" };
+const { version } = packageJson;
+const TOP_LEVEL_HELP = `Usage: sevro <command> [options]
+
+Examples:
+  sevro demo
+  sevro init --template response --directory ./my-evaluation
+  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\
+    --project-root /absolute/project --results-root /absolute/results \\
+    --condition passive --trials 1 --threshold 1
+  sevro run --help
+  sevro report --result-file /absolute/results/run/result.json
+  sevro prune
+
+Commands:
+  demo      Run the packaged credential-free assessed example; use demo --help.
+  init      Create a new evaluation project; use init --help.
+  run       Evaluate one resolved case or extension case; use run --help.
+  report    Summarize retained results; use report --help.
+  prune     Remove retained results using a retention policy; use prune --help.
+
+Options:
+  -h, --help     Show help without preparing a run.
+  -v, --version  Print the installed Sevro package version.
+`;
+const RUN_HELP = `Usage: sevro run [options]
+
+Examples:
+  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\
+    --project-root /absolute/project --results-root /absolute/results \\
+    --condition passive --trials 1 --threshold 1
+  Add --dry to prepare without calling the candidate or graders.
+  Add --json to save a sevro.cli-result.v1 result from stdout.
+
+Required:
+${runOptionHelp("required")}
+
+Common options and defaults:
+${runOptionHelp("common")}
+  Precedence: built-in defaults, saved settings, then explicit CLI options.
+  Manifest paths use its own directory; CLI paths use the current directory.
+  --no-dry, --no-shell-isolation and other --no-<boolean> flags override saved true.
+  Relative run paths resolve from the current directory and are canonicalized before protection checks.
+
+Bundled hosts:
+${runOptionHelp("native")}
+  Native timeout defaults to 600000 ms; shell checks expect exit 0 within 30000 ms.
+
+Extension cases:
+${runOptionHelp("extension")}
+
+Optional grading routes (none selected by default):
+${runOptionHelp("grading")}
+
+Provenance overrides (normally derived automatically):
+${runOptionHelp("provenance")}
+
+Deprecated runtime options:
+${runOptionHelp("deprecated")}
+
+  -h, --help                 Show this help without preparing a run.
+Reference: docs/development-cli.md, docs/run-settings-v1.md and docs/results-v1.md in the installed package.
+`;
+function runOptionHelp(section) {
+    return optionsWith("section", section)
+        .map((name) => `  --${name} ${RUN_OPTIONS[name].help}`)
+        .join("\n");
+}
+const DEMO_HELP = `Usage: sevro demo [--json]
+
+Examples:
+  sevro demo
+  sevro demo --json
+
+Run the packaged deterministic fixture and adapter without model credentials.
+Shows an assessed verdict and retains evidence in .sevro/results beneath the current directory.
+Caller project files, sevro.json and native configuration are not loaded.
+
+Options:
+  --json       Emit one sevro.cli-result.v1 document on stdout.
+  -h, --help   Show this help without preparing a run.
+`;
+const REPORT_HELP = `Usage: sevro report [options]
+
+Examples:
+  sevro report --latest
+  sevro report --result-file /absolute/results/run/result.json
+  sevro report --result-file /absolute/results/first/result.json \\
+    --result-file /absolute/results/second/result.json --json
+
+Required:
+  --latest OR --result-file <path>  A retained result; repeat paths for distinct runs.
+                       Relative or absolute paths use the current directory.
+                       Keep each result's referenced evidence available and unchanged.
+
+Options and defaults:
+  --latest     Read the last retained CLI result, including dry or failed runs.
+  --results-root <path>  With --latest, override <cwd>/.sevro/results.
+  --json       Emit sevro.report.v1 JSON; Markdown by default.
+  -h, --help   Show this help without reading result files.
+`;
+const PRUNE_HELP = `Usage: sevro prune [options]
+
+Examples:
+  sevro prune
+  sevro prune --results-root ./other-results --keep 5
+  sevro prune --older-than 30d
+  sevro prune --latest
+  sevro prune --native-transcripts --older-than 30d
+
+Defaults: keep the newest 10 completed results under <cwd>/.sevro/results.
+Select at most one explicit retention policy:
+  --keep <positive-integer>  Keep this many newest results.
+  --latest                   Keep only the newest result (same as --keep 1).
+  --older-than <duration>    Remove results older than a positive integer plus ms, s, m, h, d or w.
+  --results-root <path>      Relative or absolute results root, resolved from cwd.
+  --native-transcripts       Remove only native transcript bundles; keep results and hashes.
+  -h, --help                 Show help without reading or deleting results.
+
+Age and ordering use result.json modification times; equal times sort by path.
+Each retained attempt counts separately, including dry, failed and interrupted runs.
+Active/unrecognized attempts and directories without result.json are preserved.
+Evidence is permanently deleted. Remaining results stay usable by sevro report;
+latest.json is updated, or removed when no completed results remain.
+With --native-transcripts, no policy removes bundles from all completed results;
+--keep/--latest preserve bundles for the newest results, and --older-than selects older results.
+Result/evidence files and latest.json stay unchanged. Reports label removed bundles as pruned.
+Missing or empty results roots are a successful no-op. Invalid or unreadable inputs exit 64.
+Reference: docs/reading-results.md in the installed package.
+`;
+const INIT_HELP = `Usage: sevro init [options]
+
+Examples:
+  sevro init --template response --directory ./my-evaluation
+  cd my-evaluation
+  sevro run --run-manifest-file run.json --dry
+  sevro run --run-manifest-file run.json
+  sevro report --latest
+
+Options and defaults:
+  --template <response|repository-skill|coding>  Default: response.
+  --directory <new-path>  Default: ./sevro-evaluation; refuses existing paths.
+  -h, --help  Show this help without creating files.
+
+Response and coding use deterministic adapters and real assertions, including negative controls.
+Coding checks need sandbox-exec (macOS) or bubblewrap/socat (Linux).
+Repository-skill uses native Codex and requires explicit --model, --effort and --codex-auth-file.
+Read the generated README.md for prerequisites and live commands; dry preparation is not an assessment.
+Reference: docs/evaluation-workflow.md in the installed package.
+`;
+const HELP_REQUESTS = {
+    "": TOP_LEVEL_HELP,
+    "--help": TOP_LEVEL_HELP,
+    "-h": TOP_LEVEL_HELP,
+    help: TOP_LEVEL_HELP,
+    "run --help": RUN_HELP,
+    "run -h": RUN_HELP,
+    "help run": RUN_HELP,
+    "demo --help": DEMO_HELP,
+    "demo -h": DEMO_HELP,
+    "help demo": DEMO_HELP,
+    "init --help": INIT_HELP,
+    "init -h": INIT_HELP,
+    "help init": INIT_HELP,
+    "report --help": REPORT_HELP,
+    "report -h": REPORT_HELP,
+    "help report": REPORT_HELP,
+    "prune --help": PRUNE_HELP,
+    "prune -h": PRUNE_HELP,
+    "help prune": PRUNE_HELP,
+};
+/** Handle informational commands before loading inputs or creating run state. */
+export function informationCommand(argv) {
+    const request = argv.slice(1).some((arg) => ["--help", "-h"].includes(arg))
+        ? [argv[0], "--help"].join(" ")
+        : argv.join(" ");
+    if (["--version", "-v"].includes(request)) {
+        process.stdout.write(`sevro ${version}\n`);
+        return true;
+    }
+    const help = Object.hasOwn(HELP_REQUESTS, request)
+        ? HELP_REQUESTS[request]
+        : undefined;
+    if (help === undefined)
+        return false;
+    process.stdout.write(help);
+    return true;
+}
+//# sourceMappingURL=help.js.map

package/dist/src/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAsB,yBAAsB;AAC7E,OAAO,WAAW,8BAA2B,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACnE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;AAEhC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBtB,CAAC;AAEF,MAAM,QAAQ,GAAG;;;;;;;;;;EAUf,aAAa,CAAC,UAAU,CAAC;;;EAGzB,aAAa,CAAC,QAAQ,CAAC;;;;;;;EAOvB,aAAa,CAAC,QAAQ,CAAC;;;;EAIvB,aAAa,CAAC,WAAW,CAAC;;;EAG1B,aAAa,CAAC,SAAS,CAAC;;;EAGxB,aAAa,CAAC,YAAY,CAAC;;;EAG3B,aAAa,CAAC,YAAY,CAAC;;;;CAI5B,CAAC;AAEF,SAAS,aAAa,CACpB,OAAuD;IAEvD,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,SAAS,GAAG;;;;;;;;;;;;;CAajB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;CAkBnB,CAAC;AAEF,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BlB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;CAmBjB,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE,WAAW;IAC5B,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,WAAW;IAC1B,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,UAAU;IACtB,YAAY,EAAE,UAAU;CACzB,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;QAChD,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { RUN_OPTIONS, optionsWith, type RunOptionName } from \"./run-options\";\nimport packageJson from \"../../package.json\" with { type: \"json\" };\nconst { version } = packageJson;\n\nconst TOP_LEVEL_HELP = `Usage: sevro <command> [options]\n\nExamples:\n  sevro demo\n  sevro init --template response --directory ./my-evaluation\n  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\\\\n    --project-root /absolute/project --results-root /absolute/results \\\\\n    --condition passive --trials 1 --threshold 1\n  sevro run --help\n  sevro report --result-file /absolute/results/run/result.json\n  sevro prune\n\nCommands:\n  demo      Run the packaged credential-free assessed example; use demo --help.\n  init      Create a new evaluation project; use init --help.\n  run       Evaluate one resolved case or extension case; use run --help.\n  report    Summarize retained results; use report --help.\n  prune     Remove retained results using a retention policy; use prune --help.\n\nOptions:\n  -h, --help     Show help without preparing a run.\n  -v, --version  Print the installed Sevro package version.\n`;\n\nconst RUN_HELP = `Usage: sevro run [options]\n\nExamples:\n  sevro run --case-file /absolute/case.json --adapter-module /absolute/adapter.js \\\\\n    --project-root /absolute/project --results-root /absolute/results \\\\\n    --condition passive --trials 1 --threshold 1\n  Add --dry to prepare without calling the candidate or graders.\n  Add --json to save a sevro.cli-result.v1 result from stdout.\n\nRequired:\n${runOptionHelp(\"required\")}\n\nCommon options and defaults:\n${runOptionHelp(\"common\")}\n  Precedence: built-in defaults, saved settings, then explicit CLI options.\n  Manifest paths use its own directory; CLI paths use the current directory.\n  --no-dry, --no-shell-isolation and other --no-<boolean> flags override saved true.\n  Relative run paths resolve from the current directory and are canonicalized before protection checks.\n\nBundled hosts:\n${runOptionHelp(\"native\")}\n  Native timeout defaults to 600000 ms; shell checks expect exit 0 within 30000 ms.\n\nExtension cases:\n${runOptionHelp(\"extension\")}\n\nOptional grading routes (none selected by default):\n${runOptionHelp(\"grading\")}\n\nProvenance overrides (normally derived automatically):\n${runOptionHelp(\"provenance\")}\n\nDeprecated runtime options:\n${runOptionHelp(\"deprecated\")}\n\n  -h, --help                 Show this help without preparing a run.\nReference: docs/development-cli.md, docs/run-settings-v1.md and docs/results-v1.md in the installed package.\n`;\n\nfunction runOptionHelp(\n  section: (typeof RUN_OPTIONS)[RunOptionName][\"section\"],\n): string {\n  return optionsWith(\"section\", section)\n    .map((name) => `  --${name} ${RUN_OPTIONS[name].help}`)\n    .join(\"\\n\");\n}\n\nconst DEMO_HELP = `Usage: sevro demo [--json]\n\nExamples:\n  sevro demo\n  sevro demo --json\n\nRun the packaged deterministic fixture and adapter without model credentials.\nShows an assessed verdict and retains evidence in .sevro/results beneath the current directory.\nCaller project files, sevro.json and native configuration are not loaded.\n\nOptions:\n  --json       Emit one sevro.cli-result.v1 document on stdout.\n  -h, --help   Show this help without preparing a run.\n`;\n\nconst REPORT_HELP = `Usage: sevro report [options]\n\nExamples:\n  sevro report --latest\n  sevro report --result-file /absolute/results/run/result.json\n  sevro report --result-file /absolute/results/first/result.json \\\\\n    --result-file /absolute/results/second/result.json --json\n\nRequired:\n  --latest OR --result-file <path>  A retained result; repeat paths for distinct runs.\n                       Relative or absolute paths use the current directory.\n                       Keep each result's referenced evidence available and unchanged.\n\nOptions and defaults:\n  --latest     Read the last retained CLI result, including dry or failed runs.\n  --results-root <path>  With --latest, override <cwd>/.sevro/results.\n  --json       Emit sevro.report.v1 JSON; Markdown by default.\n  -h, --help   Show this help without reading result files.\n`;\n\nconst PRUNE_HELP = `Usage: sevro prune [options]\n\nExamples:\n  sevro prune\n  sevro prune --results-root ./other-results --keep 5\n  sevro prune --older-than 30d\n  sevro prune --latest\n  sevro prune --native-transcripts --older-than 30d\n\nDefaults: keep the newest 10 completed results under <cwd>/.sevro/results.\nSelect at most one explicit retention policy:\n  --keep <positive-integer>  Keep this many newest results.\n  --latest                   Keep only the newest result (same as --keep 1).\n  --older-than <duration>    Remove results older than a positive integer plus ms, s, m, h, d or w.\n  --results-root <path>      Relative or absolute results root, resolved from cwd.\n  --native-transcripts       Remove only native transcript bundles; keep results and hashes.\n  -h, --help                 Show help without reading or deleting results.\n\nAge and ordering use result.json modification times; equal times sort by path.\nEach retained attempt counts separately, including dry, failed and interrupted runs.\nActive/unrecognized attempts and directories without result.json are preserved.\nEvidence is permanently deleted. Remaining results stay usable by sevro report;\nlatest.json is updated, or removed when no completed results remain.\nWith --native-transcripts, no policy removes bundles from all completed results;\n--keep/--latest preserve bundles for the newest results, and --older-than selects older results.\nResult/evidence files and latest.json stay unchanged. Reports label removed bundles as pruned.\nMissing or empty results roots are a successful no-op. Invalid or unreadable inputs exit 64.\nReference: docs/reading-results.md in the installed package.\n`;\n\nconst INIT_HELP = `Usage: sevro init [options]\n\nExamples:\n  sevro init --template response --directory ./my-evaluation\n  cd my-evaluation\n  sevro run --run-manifest-file run.json --dry\n  sevro run --run-manifest-file run.json\n  sevro report --latest\n\nOptions and defaults:\n  --template <response|repository-skill|coding>  Default: response.\n  --directory <new-path>  Default: ./sevro-evaluation; refuses existing paths.\n  -h, --help  Show this help without creating files.\n\nResponse and coding use deterministic adapters and real assertions, including negative controls.\nCoding checks need sandbox-exec (macOS) or bubblewrap/socat (Linux).\nRepository-skill uses native Codex and requires explicit --model, --effort and --codex-auth-file.\nRead the generated README.md for prerequisites and live commands; dry preparation is not an assessment.\nReference: docs/evaluation-workflow.md in the installed package.\n`;\n\nconst HELP_REQUESTS: Record<string, string> = {\n  \"\": TOP_LEVEL_HELP,\n  \"--help\": TOP_LEVEL_HELP,\n  \"-h\": TOP_LEVEL_HELP,\n  help: TOP_LEVEL_HELP,\n  \"run --help\": RUN_HELP,\n  \"run -h\": RUN_HELP,\n  \"help run\": RUN_HELP,\n  \"demo --help\": DEMO_HELP,\n  \"demo -h\": DEMO_HELP,\n  \"help demo\": DEMO_HELP,\n  \"init --help\": INIT_HELP,\n  \"init -h\": INIT_HELP,\n  \"help init\": INIT_HELP,\n  \"report --help\": REPORT_HELP,\n  \"report -h\": REPORT_HELP,\n  \"help report\": REPORT_HELP,\n  \"prune --help\": PRUNE_HELP,\n  \"prune -h\": PRUNE_HELP,\n  \"help prune\": PRUNE_HELP,\n};\n\n/** Handle informational commands before loading inputs or creating run state. */\nexport function informationCommand(argv: string[]): boolean {\n  const request = argv.slice(1).some((arg) => [\"--help\", \"-h\"].includes(arg))\n    ? [argv[0], \"--help\"].join(\" \")\n    : argv.join(\" \");\n  if ([\"--version\", \"-v\"].includes(request)) {\n    process.stdout.write(`sevro ${version}\\n`);\n    return true;\n  }\n  const help = Object.hasOwn(HELP_REQUESTS, request)\n    ? HELP_REQUESTS[request]\n    : undefined;\n  if (help === undefined) return false;\n  process.stdout.write(help);\n  return true;\n}\n"]}

package/dist/src/cli/hosts.js

@@ -0,0 +1,33 @@
+import { createClaudeHost } from "../hosts/claude.js";
+import { createCodexHost } from "../hosts/codex.js";
+import { codexAgentConcurrency } from "../hosts/codex-configuration.js";
+import { InvocationError, nativeRoutes } from "./invocation.js";
+import { loadHost } from "./loading.js";
+export async function selectedConcurrency(invocation, configRoot) {
+    return nativeRoutes({ ...invocation, claude: undefined }).length
+        ? codexAgentConcurrency(configRoot)
+        : null;
+}
+export async function candidateHost(invocation, agentConcurrencyLimit) {
+    if (invocation.codex)
+        return retainExecutable(createCodexHost({ ...invocation.codex, agentConcurrencyLimit }), invocation.codex.binary);
+    if (invocation.claude)
+        return retainExecutable(createClaudeHost(invocation.claude), invocation.claude.binary);
+    if (!invocation.adapterModule)
+        throw new InvocationError("missing --adapter-module or --host");
+    return loadHost(invocation.adapterModule);
+}
+export async function secondaryHost(module, codex, agentConcurrencyLimit) {
+    if (module)
+        return loadHost(module);
+    if (codex)
+        return retainExecutable(createCodexHost({ ...codex, agentConcurrencyLimit }), codex.binary);
+    return undefined;
+}
+function retainExecutable(host, binary) {
+    return {
+        ...host,
+        configuration: { ...host.configuration, "sevro.host.executable": binary },
+    };
+}
+//# sourceMappingURL=hosts.js.map

package/dist/src/cli/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["hosts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,2BAAwB;AACnD,OAAO,EAAE,eAAe,EAAE,0BAAuB;AACjD,OAAO,EAAE,qBAAqB,EAAE,wCAAqC;AACrE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAmB,wBAAqB;AAC9E,OAAO,EAAE,QAAQ,EAAE,qBAAkB;AAErC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAsB,EACtB,UAAkB;IAElB,OAAO,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM;QAC9D,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAsB,EACtB,qBAAoC;IAEpC,IAAI,UAAU,CAAC,KAAK;QAClB,OAAO,gBAAgB,CACrB,eAAe,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAC/D,UAAU,CAAC,KAAK,CAAC,MAAM,CACxB,CAAC;IACJ,IAAI,UAAU,CAAC,MAAM;QACnB,OAAO,gBAAgB,CACrB,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EACnC,UAAU,CAAC,MAAM,CAAC,MAAM,CACzB,CAAC;IACJ,IAAI,CAAC,UAAU,CAAC,aAAa;QAC3B,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA0B,EAC1B,KAAkC,EAClC,qBAAoC;IAEpC,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK;QACP,OAAO,gBAAgB,CACrB,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,qBAAqB,EAAE,CAAC,EACpD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAiB,EAAE,MAAc;IACzD,OAAO;QACL,GAAG,IAAI;QACP,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,uBAAuB,EAAE,MAAM,EAAE;KAC1E,CAAC;AACJ,CAAC","sourcesContent":["import type { HostAdapter } from \"../engine\";\nimport { createClaudeHost } from \"../hosts/claude\";\nimport { createCodexHost } from \"../hosts/codex\";\nimport { codexAgentConcurrency } from \"../hosts/codex-configuration\";\nimport { InvocationError, nativeRoutes, type Invocation } from \"./invocation\";\nimport { loadHost } from \"./loading\";\n\nexport async function selectedConcurrency(\n  invocation: Invocation,\n  configRoot: string,\n): Promise<number | null> {\n  return nativeRoutes({ ...invocation, claude: undefined }).length\n    ? codexAgentConcurrency(configRoot)\n    : null;\n}\n\nexport async function candidateHost(\n  invocation: Invocation,\n  agentConcurrencyLimit: number | null,\n): Promise<HostAdapter> {\n  if (invocation.codex)\n    return retainExecutable(\n      createCodexHost({ ...invocation.codex, agentConcurrencyLimit }),\n      invocation.codex.binary,\n    );\n  if (invocation.claude)\n    return retainExecutable(\n      createClaudeHost(invocation.claude),\n      invocation.claude.binary,\n    );\n  if (!invocation.adapterModule)\n    throw new InvocationError(\"missing --adapter-module or --host\");\n  return loadHost(invocation.adapterModule);\n}\n\nexport async function secondaryHost(\n  module: string | undefined,\n  codex: Invocation[\"semanticCodex\"],\n  agentConcurrencyLimit: number | null,\n): Promise<HostAdapter | undefined> {\n  if (module) return loadHost(module);\n  if (codex)\n    return retainExecutable(\n      createCodexHost({ ...codex, agentConcurrencyLimit }),\n      codex.binary,\n    );\n  return undefined;\n}\n\nfunction retainExecutable(host: HostAdapter, binary: string): HostAdapter {\n  return {\n    ...host,\n    configuration: { ...host.configuration, \"sevro.host.executable\": binary },\n  };\n}\n"]}

package/dist/src/cli/init-settings.js

@@ -0,0 +1,29 @@
+import { join } from "node:path";
+import { runtimeModule } from "../runner-paths.js";
+export function templateSettings(template) {
+    if (template === "repository-skill")
+        return {
+            "project-root": ".",
+            "extension-command-file": "command.json",
+            "extension-source-file": [
+                "extension.ts",
+                "extension-data.ts",
+                ".agents/skills/startup-guide/SKILL.md",
+            ].map(runtimeModule),
+            "case-id": "repository-skill",
+            host: "codex",
+        };
+    return {
+        "case-file": "case.json",
+        "adapter-module": runtimeModule("adapter.ts"),
+        "project-root": ".",
+        ...(template === "coding" ? { "shell-isolation": true } : {}),
+    };
+}
+export function templateCommand(destination) {
+    return [process.execPath, join(destination, runtimeModule("extension.ts"))];
+}
+export function nativeReadme() {
+    return `# Repository skill evaluation\n\nThis template mounts the actual startup-guide skill and requires Codex's explicit invocation evidence plus assertions for the start command and port. Missing evidence remains not_assessed.\n\nPrerequisites: Node.js 24.13.0 or newer, or Bun 1.3.13, plus Git, Codex on PATH, supported native isolation (sandbox-exec on macOS or bubblewrap/socat on Linux), and a readable Codex authentication file. Choose the exact model and effort explicitly. Do not store credentials in run.json.\n\n\`\`\`sh\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json --dry\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json\nsevro report --latest\n\`\`\`\n\nDry preparation checks mounts and declarations without calling the model. No authenticated model execution or skill dispatch is established by dry preparation. Live execution may incur provider charges. To create a negative control, change the expected port in the extension data file to 9000 while leaving the fixture at 3000; rerun and inspect the failed port assertion. Model compliance and measurements are unknown until actually executed.\n\nEdit the copied skill and assertions, prepare again, then rerun the same model/effort/condition. Keep private .sevro evidence out of Git. command.json uses the initializer's absolute selected runtime and extension paths; regenerate it after moving this project.\n`;
+}
+//# sourceMappingURL=init-settings.js.map

package/dist/src/cli/init-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-settings.js","sourceRoot":"","sources":["init-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,kBAAkB;AACjC,OAAO,EAAE,aAAa,EAAE,2BAAwB;AAEhD,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,KAAK,kBAAkB;QACjC,OAAO;YACL,cAAc,EAAE,GAAG;YACnB,wBAAwB,EAAE,cAAc;YACxC,uBAAuB,EAAE;gBACvB,cAAc;gBACd,mBAAmB;gBACnB,uCAAuC;aACxC,CAAC,GAAG,CAAC,aAAa,CAAC;YACpB,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;QAC7C,cAAc,EAAE,GAAG;QACnB,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,y+CAAy+C,CAAC;AACn/C,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { runtimeModule } from \"../runner-paths\";\n\nexport function templateSettings(template: string) {\n  if (template === \"repository-skill\")\n    return {\n      \"project-root\": \".\",\n      \"extension-command-file\": \"command.json\",\n      \"extension-source-file\": [\n        \"extension.ts\",\n        \"extension-data.ts\",\n        \".agents/skills/startup-guide/SKILL.md\",\n      ].map(runtimeModule),\n      \"case-id\": \"repository-skill\",\n      host: \"codex\",\n    };\n  return {\n    \"case-file\": \"case.json\",\n    \"adapter-module\": runtimeModule(\"adapter.ts\"),\n    \"project-root\": \".\",\n    ...(template === \"coding\" ? { \"shell-isolation\": true } : {}),\n  };\n}\n\nexport function templateCommand(destination: string) {\n  return [process.execPath, join(destination, runtimeModule(\"extension.ts\"))];\n}\n\nexport function nativeReadme() {\n  return `# Repository skill evaluation\\n\\nThis template mounts the actual startup-guide skill and requires Codex's explicit invocation evidence plus assertions for the start command and port. Missing evidence remains not_assessed.\\n\\nPrerequisites: Node.js 24.13.0 or newer, or Bun 1.3.13, plus Git, Codex on PATH, supported native isolation (sandbox-exec on macOS or bubblewrap/socat on Linux), and a readable Codex authentication file. Choose the exact model and effort explicitly. Do not store credentials in run.json.\\n\\n\\`\\`\\`sh\\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json --dry\\nsevro run --run-manifest-file run.json --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json\\nsevro report --latest\\n\\`\\`\\`\\n\\nDry preparation checks mounts and declarations without calling the model. No authenticated model execution or skill dispatch is established by dry preparation. Live execution may incur provider charges. To create a negative control, change the expected port in the extension data file to 9000 while leaving the fixture at 3000; rerun and inspect the failed port assertion. Model compliance and measurements are unknown until actually executed.\\n\\nEdit the copied skill and assertions, prepare again, then rerun the same model/effort/condition. Keep private .sevro evidence out of Git. command.json uses the initializer's absolute selected runtime and extension paths; regenerate it after moving this project.\\n`;\n}\n"]}

package/dist/src/cli/init.js

@@ -0,0 +1,82 @@
+import { examplePath, sourceRuntime } from "../runner-paths.js";
+import { cp, mkdir, rm, writeFile } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { nativeReadme, templateCommand, templateSettings, } from "./init-settings.js";
+function initOptions(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        strict: true,
+        allowPositionals: true,
+        options: {
+            template: { type: "string", default: "response" },
+            directory: { type: "string", default: "sevro-evaluation" },
+        },
+    });
+    if (positionals.length ||
+        !["response", "coding", "repository-skill"].includes(values.template))
+        throw new Error("use --template response, coding or repository-skill; run sevro init --help");
+    if (!values.directory.trim())
+        throw new Error("--directory must name a new directory");
+    return { template: values.template, destination: resolve(values.directory) };
+}
+async function reserveDirectory(destination) {
+    await mkdir(dirname(destination), { recursive: true });
+    try {
+        await mkdir(destination);
+    }
+    catch (cause) {
+        throw new Error(`init destination already exists or cannot be created: ${destination}; choose a new --directory`, { cause });
+    }
+}
+function starterReadme(template) {
+    if (template === "repository-skill")
+        return nativeReadme();
+    const assertion = template === "coding"
+        ? "positive, negative and zero addition assertions against edited add.sh"
+        : "an exact response assertion";
+    const prerequisites = template === "coding"
+        ? "Node.js 24.13.0 or newer, or Bun 1.3.13, plus sandbox-exec on macOS or bubblewrap/socat on Linux"
+        : "Node.js 24.13.0 or newer, or Bun 1.3.13";
+    return `# ${template} evaluation\n\nThis deterministic adapter exercises ${assertion}, without model credentials. Prerequisites: ${prerequisites}.\n\n\`\`\`sh\nsevro run --run-manifest-file run.json --dry\nsevro run --run-manifest-file run.json\nsevro report --latest\nSEVRO_TEMPLATE_FAIL=1 sevro run --run-manifest-file run.json\n\`\`\`\n\nThe negative control must report task=failed and exit 1. Dry preparation is not an assessment.\nEdit case.json and ${sourceRuntime ? "adapter.ts" : "adapter.js"}, prepare, then run again. Keep private .sevro evidence out of Git.\nFor a native model, replace the adapter route explicitly with --host, --model and --effort; Codex also requires --codex-auth-file. No model execution or native skill dispatch is established by this adapter.\n`;
+}
+async function initialize(template, destination) {
+    await reserveDirectory(destination);
+    try {
+        await cp(examplePath("templates", template), destination, {
+            recursive: true,
+            errorOnExist: true,
+            force: false,
+        });
+        await writeFile(join(destination, "run.json"), JSON.stringify({ format: "sevro.run.v1", settings: templateSettings(template) }, null, 2) + "\n", { flag: "wx" });
+        if (template === "repository-skill")
+            await writeFile(join(destination, "command.json"), JSON.stringify(templateCommand(destination)) + "\n", { flag: "wx" });
+        await writeFile(join(destination, ".gitignore"), ".sevro/\n", {
+            flag: "wx",
+        });
+        await writeFile(join(destination, "README.md"), starterReadme(template), {
+            flag: "wx",
+        });
+    }
+    catch (cause) {
+        await rm(destination, { recursive: true, force: true });
+        throw cause;
+    }
+}
+export async function initCommand(argv) {
+    try {
+        const { template, destination } = initOptions(argv);
+        await initialize(template, destination);
+        const quoted = `'${destination.replaceAll("'", "'\\''")}'`;
+        const native = template === "repository-skill"
+            ? " --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json"
+            : "";
+        process.stdout.write(`Created ${template} evaluation at ${destination}\nOpen README.md, then:\n  cd ${quoted}\n  sevro run --run-manifest-file run.json${native} --dry\n  sevro run --run-manifest-file run.json${native}\n`);
+        return 0;
+    }
+    catch (error) {
+        process.stderr.write(`sevro: ${error instanceof Error ? error.message : "initialization failed"}\n`);
+        return 64;
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/src/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,2BAAwB;AAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,yBAAyB;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB;AACnD,OAAO,EAAE,SAAS,EAAE,kBAAkB;AACtC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,2BAAwB;AAEzB,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;YACjD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;SAC3D;KACF,CAAC,CAAC;IACH,IACE,WAAW,CAAC,MAAM;QAClB,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAErE,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yDAAyD,WAAW,4BAA4B,EAChG,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,QAAQ,KAAK,kBAAkB;QAAE,OAAO,YAAY,EAAE,CAAC;IAC3D,MAAM,SAAS,GACb,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,uEAAuE;QACzE,CAAC,CAAC,6BAA6B,CAAC;IACpC,MAAM,aAAa,GACjB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,kGAAkG;QACpG,CAAC,CAAC,yCAAyC,CAAC;IAChD,OAAO,KAAK,QAAQ,uDAAuD,SAAS,+CAA+C,aAAa,0TAA0T,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,uRAAuR,CAAC;AAC/wB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,WAAmB;IAC7D,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE;YACxD,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,MAAM,SAAS,CACb,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAChE,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACF,IAAI,QAAQ,KAAK,kBAAkB;YACjC,MAAM,SAAS,CACb,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EACjC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,EACnD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACJ,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE;YAC5D,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE;YACvE,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;QAC3D,MAAM,MAAM,GACV,QAAQ,KAAK,kBAAkB;YAC7B,CAAC,CAAC,gFAAgF;YAClF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,QAAQ,kBAAkB,WAAW,iCAAiC,MAAM,6CAA6C,MAAM,mDAAmD,MAAM,IAAI,CACxM,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAC/E,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { examplePath, sourceRuntime } from \"../runner-paths\";\nimport { cp, mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { parseArgs } from \"node:util\";\nimport {\n  nativeReadme,\n  templateCommand,\n  templateSettings,\n} from \"./init-settings\";\n\nfunction initOptions(argv: string[]) {\n  const { values, positionals } = parseArgs({\n    args: argv,\n    strict: true,\n    allowPositionals: true,\n    options: {\n      template: { type: \"string\", default: \"response\" },\n      directory: { type: \"string\", default: \"sevro-evaluation\" },\n    },\n  });\n  if (\n    positionals.length ||\n    ![\"response\", \"coding\", \"repository-skill\"].includes(values.template)\n  )\n    throw new Error(\n      \"use --template response, coding or repository-skill; run sevro init --help\",\n    );\n  if (!values.directory.trim())\n    throw new Error(\"--directory must name a new directory\");\n  return { template: values.template, destination: resolve(values.directory) };\n}\n\nasync function reserveDirectory(destination: string): Promise<void> {\n  await mkdir(dirname(destination), { recursive: true });\n  try {\n    await mkdir(destination);\n  } catch (cause) {\n    throw new Error(\n      `init destination already exists or cannot be created: ${destination}; choose a new --directory`,\n      { cause },\n    );\n  }\n}\n\nfunction starterReadme(template: string) {\n  if (template === \"repository-skill\") return nativeReadme();\n  const assertion =\n    template === \"coding\"\n      ? \"positive, negative and zero addition assertions against edited add.sh\"\n      : \"an exact response assertion\";\n  const prerequisites =\n    template === \"coding\"\n      ? \"Node.js 24.13.0 or newer, or Bun 1.3.13, plus sandbox-exec on macOS or bubblewrap/socat on Linux\"\n      : \"Node.js 24.13.0 or newer, or Bun 1.3.13\";\n  return `# ${template} evaluation\\n\\nThis deterministic adapter exercises ${assertion}, without model credentials. Prerequisites: ${prerequisites}.\\n\\n\\`\\`\\`sh\\nsevro run --run-manifest-file run.json --dry\\nsevro run --run-manifest-file run.json\\nsevro report --latest\\nSEVRO_TEMPLATE_FAIL=1 sevro run --run-manifest-file run.json\\n\\`\\`\\`\\n\\nThe negative control must report task=failed and exit 1. Dry preparation is not an assessment.\\nEdit case.json and ${sourceRuntime ? \"adapter.ts\" : \"adapter.js\"}, prepare, then run again. Keep private .sevro evidence out of Git.\\nFor a native model, replace the adapter route explicitly with --host, --model and --effort; Codex also requires --codex-auth-file. No model execution or native skill dispatch is established by this adapter.\\n`;\n}\n\nasync function initialize(template: string, destination: string) {\n  await reserveDirectory(destination);\n  try {\n    await cp(examplePath(\"templates\", template), destination, {\n      recursive: true,\n      errorOnExist: true,\n      force: false,\n    });\n    await writeFile(\n      join(destination, \"run.json\"),\n      JSON.stringify(\n        { format: \"sevro.run.v1\", settings: templateSettings(template) },\n        null,\n        2,\n      ) + \"\\n\",\n      { flag: \"wx\" },\n    );\n    if (template === \"repository-skill\")\n      await writeFile(\n        join(destination, \"command.json\"),\n        JSON.stringify(templateCommand(destination)) + \"\\n\",\n        { flag: \"wx\" },\n      );\n    await writeFile(join(destination, \".gitignore\"), \".sevro/\\n\", {\n      flag: \"wx\",\n    });\n    await writeFile(join(destination, \"README.md\"), starterReadme(template), {\n      flag: \"wx\",\n    });\n  } catch (cause) {\n    await rm(destination, { recursive: true, force: true });\n    throw cause;\n  }\n}\n\nexport async function initCommand(argv: string[]): Promise<number> {\n  try {\n    const { template, destination } = initOptions(argv);\n    await initialize(template, destination);\n    const quoted = `'${destination.replaceAll(\"'\", \"'\\\\''\")}'`;\n    const native =\n      template === \"repository-skill\"\n        ? \" --model YOUR_MODEL --effort YOUR_EFFORT --codex-auth-file /absolute/auth.json\"\n        : \"\";\n    process.stdout.write(\n      `Created ${template} evaluation at ${destination}\\nOpen README.md, then:\\n  cd ${quoted}\\n  sevro run --run-manifest-file run.json${native} --dry\\n  sevro run --run-manifest-file run.json${native}\\n`,\n    );\n    return 0;\n  } catch (error) {\n    process.stderr.write(\n      `sevro: ${error instanceof Error ? error.message : \"initialization failed\"}\\n`,\n    );\n    return 64;\n  }\n}\n"]}