@forwardimpact/libeval 0.1.58 → 0.1.60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forwardimpact/libeval",
-  "version": "0.1.58",
+  "version": "0.1.60",
   "description": "Agent evaluation framework — prove whether agent changes improved outcomes with reproducible evidence.",
   "keywords": [
     "eval",

package/src/commands/benchmark-run.js

@@ -58,9 +58,9 @@ function parseRunOptions(values) {
     family,
     runs,
     output: resolve(output),
-    agentModel: values["agent-model"] ?? BENCHMARK_AGENT_MODEL,
-    supervisorModel: values["lead-model"] ?? LEAD_MODEL,
-    judgeModel: values["judge-model"] ?? LEAD_MODEL,
+    agentModel: values["agent-model"] || BENCHMARK_AGENT_MODEL,
+    supervisorModel: values["lead-model"] || LEAD_MODEL,
+    judgeModel: values["judge-model"] || LEAD_MODEL,
     profiles: {
       agent: values["agent-profile"] ?? null,
       judge: values["judge-profile"] ?? null,

package/src/commands/discuss.js

@@ -53,8 +53,8 @@ export function parseDiscussOptions(values, runtime) {
     taskAmend,
     agentConfigs,
     leadProfile: values["lead-profile"] ?? undefined,
-    leadModel: values["lead-model"] ?? LEAD_MODEL,
-    agentModel: values["agent-model"] ?? AGENT_MODEL,
+    leadModel: values["lead-model"] || LEAD_MODEL,
+    agentModel: values["agent-model"] || AGENT_MODEL,
     maxTurns,
     maxLeadTurns,
     outputPath: values.output,

package/src/commands/facilitate.js

@@ -51,8 +51,8 @@ export function parseFacilitateOptions(values, runtime) {
     taskAmend,
     agentConfigs,
     facilitatorCwd: resolve(values["facilitator-cwd"] ?? "."),
-    agentModel: values["agent-model"] ?? AGENT_MODEL,
-    facilitatorModel: values["lead-model"] ?? LEAD_MODEL,
+    agentModel: values["agent-model"] || AGENT_MODEL,
+    facilitatorModel: values["lead-model"] || LEAD_MODEL,
     maxTurns,
     outputPath: values.output,
     facilitatorProfile: values["lead-profile"] ?? undefined,

package/src/commands/run.js

@@ -27,7 +27,7 @@ function parseRunOptions(values, runtime) {
     taskContent,
     taskAmend,
     cwd: resolve(values.cwd ?? "."),
-    agentModel: values["agent-model"] ?? AGENT_MODEL,
+    agentModel: values["agent-model"] || AGENT_MODEL,
     maxTurns: maxTurnsRaw === "0" ? 0 : parseInt(maxTurnsRaw, 10),
     outputPath: values.output,
     agentProfile: values["agent-profile"] ?? undefined,

package/src/commands/supervise.js

@@ -31,8 +31,8 @@ export async function parseSuperviseOptions(values, runtime) {
     taskAmend,
     supervisorCwd: resolve(values["supervisor-cwd"] ?? "."),
     agentCwd,
-    agentModel: values["agent-model"] ?? AGENT_MODEL,
-    supervisorModel: values["lead-model"] ?? LEAD_MODEL,
+    agentModel: values["agent-model"] || AGENT_MODEL,
+    supervisorModel: values["lead-model"] || LEAD_MODEL,
     maxTurns: (() => {
       const raw = values["max-turns"] ?? "200";
       return raw === "0" ? 0 : parseInt(raw, 10);

package/src/redaction.js

@@ -36,6 +36,16 @@ export const DEFAULT_PATTERNS = Object.freeze([
   { kind: "gh-installation", regex: /\bghs_[A-Za-z0-9]{36}\b/g },
   { kind: "gh-oauth", regex: /\bgho_[A-Za-z0-9]{36}\b/g },
   { kind: "gh-fine-grained", regex: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g },
+  // git persists HTTP basic-auth credentials base64-encoded in
+  // `http.<url>.extraheader` as `AUTHORIZATION: basic <b64>` where the
+  // plaintext is `x-access-token:<token>` (actions/checkout form) — a shape
+  // the raw-byte layers above cannot see. The plaintext prefix is 15 bytes
+  // — five whole base64 triplets — so every encoding starts with the same
+  // 20 chars no matter which token follows.
+  {
+    kind: "gh-b64-basic-credential",
+    regex: /\beC1hY2Nlc3MtdG9rZW46[A-Za-z0-9+/]{8,}={0,2}/g,
+  },
 ]);
 
 const ENV_PLACEHOLDER = (name) => `[REDACTED:env:${name}]`;