@runcofactor/cli 0.57.0 → 0.58.0

package/dist/chunk-UPP4F2BE.js

@@ -0,0 +1,519 @@
+import { createRequire as __cr } from "module"; import { fileURLToPath as __fup } from "url"; import { dirname as __dn } from "path"; const require = __cr(import.meta.url); const __filename = __fup(import.meta.url); const __dirname = __dn(__filename);
+import {
+  request
+} from "./chunk-XD3PSGFG.js";
+import {
+  mcpHarnessNeedsClientEnvironment
+} from "./chunk-C6SNLHVE.js";
+
+// ../types/src/agent-eval-template.ts
+import { z } from "zod";
+var ClientRef = z.string().min(1).max(200);
+var ToolingSchema = z.strictObject({
+  mcp: z.strictObject({
+    port: z.string().min(1),
+    path: z.string().min(1).optional(),
+    auth: z.strictObject({ header: z.string().min(1), secret: z.string().min(1) }).optional()
+  }).optional(),
+  cli: z.strictObject({ install: z.string().min(1), env: z.record(z.string(), z.string()).optional() }).optional(),
+  skills: z.array(z.string().min(1)).optional(),
+  docs: z.array(z.string().min(1)).optional(),
+  prompt: z.string().optional()
+});
+var McpCheckSchema = z.discriminatedUnion("type", [
+  z.strictObject({ type: z.literal("artifact"), run: z.string().min(1) }),
+  z.strictObject({ type: z.literal("state"), run: z.string().min(1) })
+]);
+var McpJudgeSchema = z.strictObject({
+  rubric: z.string().min(20),
+  judge: z.strictObject({ provider: z.enum(["anthropic", "azure"]), model: z.string().min(1) })
+});
+var McpCaseExpectedSchema = z.strictObject({
+  prompt: z.string().min(1),
+  check: McpCheckSchema,
+  client: ClientRef,
+  judge: McpJudgeSchema.optional()
+});
+var McpCaseSchema = z.strictObject({
+  key: z.string().regex(/^[a-z0-9][a-z0-9-]{0,99}$/),
+  title: z.string().min(1).max(500),
+  prompt: z.string().min(1),
+  check: McpCheckSchema,
+  client: ClientRef.optional(),
+  judge: McpJudgeSchema.optional()
+});
+var McpAgentRef = z.string().regex(/^(claude-code|codex|opencode|openai-agents-sdk|claude-agent-sdk|google-adk)\/.+$/).superRefine((value, ctx) => {
+  try {
+    parseMcpAgentSelector(value);
+  } catch (error) {
+    ctx.addIssue({ code: "custom", message: error instanceof Error ? error.message : String(error) });
+  }
+});
+var McpAgentEvalDefinitionSchema = z.strictObject({
+  version: z.literal(1),
+  kind: z.literal("mcp"),
+  name: z.string().regex(/^[a-z0-9-]{2,40}$/).refine((name) => name !== "runs" && name !== "compare"),
+  description: z.string().min(1).max(500),
+  runbook: z.string().min(1),
+  application: z.strictObject({ id: z.string().min(1), commit: z.union([z.literal("head"), z.string().regex(/^[0-9a-f]{40}$/)]) }),
+  client: ClientRef,
+  tooling: ToolingSchema,
+  agents: z.array(McpAgentRef).min(1),
+  cases: z.array(McpCaseSchema).min(1),
+  mode: z.literal("single-turn").default("single-turn"),
+  traces: z.strictObject({ capture: z.enum(["full", "metadata"]).default("full") }).default(() => ({ capture: "full" })),
+  repeats: z.number().int().min(1).max(7).default(1),
+  passAtLeast: z.number().int().min(1).default(1),
+  passBar: z.number().min(0.1).max(1).default(0.5),
+  attemptSeconds: z.number().int().min(30).max(1700)
+}).superRefine((definition, ctx) => {
+  if (definition.agents.some((selector) => !mcpHarnessNeedsClientEnvironment(selector.split("/")[0] ?? "")) && !definition.tooling.mcp)
+    ctx.addIssue({ code: "custom", path: ["tooling", "mcp"], message: "MCP-only SDK agents require tooling.mcp" });
+  if (definition.passAtLeast > definition.repeats) ctx.addIssue({ code: "custom", path: ["passAtLeast"], message: "passAtLeast must not exceed repeats" });
+  const keys = /* @__PURE__ */ new Set();
+  definition.cases.forEach((item, index) => {
+    if (keys.has(item.key)) ctx.addIssue({ code: "custom", path: ["cases", index, "key"], message: "Case keys must be unique" });
+    keys.add(item.key);
+  });
+  const agents = /* @__PURE__ */ new Set();
+  definition.agents.forEach((agent, index) => {
+    if (agents.has(agent)) ctx.addIssue({ code: "custom", path: ["agents", index], message: "Agent harness/model pairs must be unique" });
+    agents.add(agent);
+  });
+});
+function parseMcpAgentSelector(selector) {
+  const [harness, ...parts] = selector.split("/");
+  if (harness !== "claude-code" && harness !== "codex" && harness !== "opencode" && harness !== "openai-agents-sdk" && harness !== "claude-agent-sdk" && harness !== "google-adk") {
+    throw new Error(`Unsupported MCP eval harness: ${harness ?? ""}`);
+  }
+  let provider;
+  if (harness === "claude-code" || harness === "claude-agent-sdk") provider = "anthropic";
+  else if (harness === "codex" || harness === "openai-agents-sdk") provider = "azure";
+  else if (harness === "google-adk") provider = "google";
+  else {
+    const [providerPart, ...modelParts] = parts;
+    if (providerPart !== "anthropic" && providerPart !== "azure") {
+      throw new Error("OpenCode selectors must use opencode/anthropic/<model> or opencode/azure/<model>.");
+    }
+    provider = providerPart;
+    parts.splice(0, parts.length, ...modelParts);
+  }
+  const model = parts.join("/");
+  if (!model) throw new Error(`MCP eval selector ${selector} is missing a model.`);
+  return { harness, provider, model };
+}
+var AGENT_EVAL_MAX_BUNDLE_BYTES = 512 * 1024 ** 2;
+var AGENT_EVAL_MAX_TOTAL_BUNDLE_BYTES = 2 * 1024 ** 3;
+var ModelSchema = z.strictObject({
+  provider: z.enum(["anthropic", "azure"]),
+  model: z.string().min(1)
+});
+var EnvName = z.string().regex(/^[A-Z_][A-Z0-9_]*$/, "Must be an upper-case environment variable name").refine((name) => !name.startsWith("EVAL_"), "EVAL_ names are reserved for the attempt environment");
+var ProviderEnvSchema = z.strictObject({
+  env: z.strictObject({
+    apiKey: EnvName,
+    // gets the attempt's scoped proxy token
+    baseUrl: EnvName,
+    // gets the proxy URL for the provider's wire
+    model: EnvName
+    // gets the model id
+  }).refine((env) => new Set(Object.values(env)).size === 3, "apiKey, baseUrl and model must be different names")
+});
+var ScriptGrader = z.strictObject({
+  id: z.string().regex(/^[a-z0-9-]+$/),
+  kind: z.literal("script"),
+  command: z.string().min(1)
+});
+var JudgeGrader = z.strictObject({
+  id: z.string().regex(/^[a-z0-9-]+$/),
+  kind: z.literal("ai-judge"),
+  rubric: z.string().min(20),
+  scale: z.enum(["binary", "1-5"]),
+  passAt: z.number().int().min(2).max(5).optional(),
+  // required when scale is '1-5'
+  judge: ModelSchema
+});
+var AgentEvalTemplateSchema = z.strictObject({
+  version: z.literal(1),
+  kind: z.literal("agent").default("agent"),
+  name: z.string().regex(/^[a-z0-9-]{2,40}$/).refine((n) => n !== "runs" && n !== "compare"),
+  // reserved route segments
+  description: z.string().min(1).max(500),
+  proves: z.strictObject({ capabilities: z.array(z.string().regex(/^CAP-/)).min(1) }),
+  // resolved within the application given at push
+  runbook: z.string().min(1),
+  // path relative to this file
+  mode: z.enum(["single-turn", "multi-turn"]).default("single-turn"),
+  traces: z.strictObject({ capture: z.enum(["full", "metadata"]).default("full") }).default(() => ({ capture: "full" })),
+  run: z.string().min(1),
+  // shell command, cwd = repo root of the commit; multi-turn: the agent process, JSONL on stdin/stdout
+  simulator: ModelSchema.optional(),
+  // required when mode is multi-turn: pins the simulated-user model
+  input: z.strictObject({
+    description: z.string().min(1),
+    require: z.array(z.string()).default([])
+  }),
+  agent: z.strictObject({
+    models: z.record(z.string().regex(/^[a-z0-9-]+$/), ModelSchema).refine((m) => Object.keys(m).length >= 1),
+    default: z.string(),
+    // must be a key of models
+    providers: z.strictObject({ anthropic: ProviderEnvSchema.optional(), azure: ProviderEnvSchema.optional() }).optional()
+    // absent, or an absent entry: the standard names; every entry's provider must be used by a model
+  }),
+  graders: z.array(z.discriminatedUnion("kind", [ScriptGrader, JudgeGrader])).min(1),
+  repeats: z.number().int().min(1).max(7).default(1),
+  // attempts per case; a stochastic agent raises it together with passAtLeast
+  passAtLeast: z.number().int().min(1).default(1),
+  // <= repeats
+  passBar: z.number().min(0.1).max(1),
+  // minimum case pass rate for the eval to pass
+  attemptSeconds: z.number().int().min(30).max(1700)
+  // grader commands get a fixed 120 s
+}).superRefine((template, ctx) => {
+  if (!Object.hasOwn(template.agent.models, template.agent.default)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["agent", "default"],
+      message: "Default must name an agent model alias"
+    });
+  }
+  const used = new Set(Object.values(template.agent.models).map((m) => m.provider));
+  for (const [provider, entry] of Object.entries(template.agent.providers ?? {})) {
+    if (entry && !used.has(provider)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["agent", "providers", provider],
+        message: `No agent model uses provider ${provider}; remove this entry or add a model that uses it`
+      });
+    }
+  }
+  if (template.passAtLeast > template.repeats) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["passAtLeast"],
+      message: "passAtLeast must not exceed repeats"
+    });
+  }
+  const ids = /* @__PURE__ */ new Set();
+  template.graders.forEach((grader, index) => {
+    if (ids.has(grader.id)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["graders", index, "id"],
+        message: "Grader ids must be unique"
+      });
+    }
+    ids.add(grader.id);
+    if (grader.kind === "ai-judge" && grader.scale === "1-5" && grader.passAt === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["graders", index, "passAt"],
+        message: "A 1-5 judge requires passAt"
+      });
+    }
+  });
+  if (template.mode === "multi-turn" !== (template.simulator !== void 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["simulator"],
+      message: "A simulator is required exactly when mode is multi-turn"
+    });
+  }
+});
+var EvalConversationSchema = z.discriminatedUnion("kind", [
+  z.strictObject({ kind: z.literal("scripted"), turns: z.array(z.string().min(1)).min(1) }),
+  z.strictObject({
+    kind: z.literal("simulated"),
+    persona: z.string().min(1),
+    goal: z.string().min(1),
+    facts: z.array(z.string()),
+    stopWhen: z.string().min(1),
+    maxTurns: z.number().int().min(2).max(30)
+  })
+]);
+var AGENT_EVAL_MULTIPART_THRESHOLD = 32 * 1024 * 1024;
+var AGENT_EVAL_PART_BYTES = 8 * 1024 * 1024;
+
+// src/eval-bundle.ts
+import { createHash } from "crypto";
+import { request as httpRequest } from "http";
+import { request as httpsRequest } from "https";
+import { lstat, readdir, readFile } from "fs/promises";
+import { join } from "path";
+import { gunzipSync, gzipSync } from "zlib";
+var BLOCK = 512;
+var MAX_RAW_BYTES = AGENT_EVAL_MAX_BUNDLE_BYTES;
+var MAX_UNPACKED_BYTES = 4 * AGENT_EVAL_MAX_BUNDLE_BYTES;
+var sha256Hex = (data) => createHash("sha256").update(data).digest("hex");
+function octal(value, width) {
+  return `${value.toString(8).padStart(width - 1, "0")}\0`;
+}
+function splitName(path) {
+  if (Buffer.byteLength(path) <= 100) return { prefix: "", name: path };
+  for (let i = path.indexOf("/"); i !== -1; i = path.indexOf("/", i + 1)) {
+    const prefix = path.slice(0, i);
+    const name = path.slice(i + 1);
+    if (Buffer.byteLength(prefix) <= 155 && Buffer.byteLength(name) <= 100) return { prefix, name };
+  }
+  throw new Error(`Path is too long for a bundle (limit 255 bytes): ${path}`);
+}
+function header(path, size, type, mode) {
+  const { prefix, name } = splitName(path);
+  const block = Buffer.alloc(BLOCK);
+  block.write(name, 0, "utf8");
+  block.write(octal(mode, 8), 100, "ascii");
+  block.write(octal(0, 8), 108, "ascii");
+  block.write(octal(0, 8), 116, "ascii");
+  block.write(octal(size, 12), 124, "ascii");
+  block.write(octal(0, 12), 136, "ascii");
+  block.fill(32, 148, 156);
+  block.write(type, 156, "ascii");
+  block.write("ustar\0", 257, "ascii");
+  block.write("00", 263, "ascii");
+  block.write(prefix, 345, "utf8");
+  const checksum = block.reduce((sum, byte) => sum + byte, 0);
+  block.write(`${checksum.toString(8).padStart(6, "0")}\0 `, 148, "ascii");
+  return block;
+}
+async function walk(root, real = "", archive = "") {
+  const names = (await readdir(real ? join(root, real) : root)).map((name) => ({ real: name, archive: name.normalize("NFC") })).sort((a, b) => Buffer.compare(Buffer.from(a.archive), Buffer.from(b.archive)));
+  const entries = [];
+  for (const name of names) {
+    const realPath = real ? `${real}/${name.real}` : name.real;
+    const path = archive ? `${archive}/${name.archive}` : name.archive;
+    const absolute = join(root, realPath);
+    const stats = await lstat(absolute);
+    if (stats.isDirectory()) {
+      entries.push({ path, absolute, directory: true, mode: 493, size: 0 });
+      entries.push(...await walk(root, realPath, path));
+    } else if (stats.isFile()) {
+      entries.push({
+        path,
+        absolute,
+        directory: false,
+        mode: stats.mode & 73 ? 493 : 420,
+        size: stats.size
+      });
+    } else {
+      throw new Error(
+        `Cannot bundle ${path}: only regular files and directories are supported (no symlinks or devices).`
+      );
+    }
+  }
+  return entries;
+}
+async function tarDirectory(root) {
+  const entries = await walk(root);
+  const total = entries.reduce((sum, entry) => sum + entry.size, 0);
+  if (total > MAX_RAW_BYTES) {
+    throw new Error(
+      `The input directory holds ${total} bytes; the CLI bundles at most ${MAX_RAW_BYTES}. Prune it.`
+    );
+  }
+  const parts = [];
+  for (const entry of entries) {
+    if (entry.directory) {
+      parts.push(header(`${entry.path}/`, 0, "5", entry.mode));
+      continue;
+    }
+    const content = await readFile(entry.absolute);
+    parts.push(header(entry.path, content.length, "0", entry.mode), content);
+    const padding = (BLOCK - content.length % BLOCK) % BLOCK;
+    if (padding) parts.push(Buffer.alloc(padding));
+  }
+  parts.push(Buffer.alloc(BLOCK * 2));
+  return Buffer.concat(parts);
+}
+function readString(block, start, length) {
+  const slice = block.subarray(start, start + length);
+  const end = slice.indexOf(0);
+  return slice.subarray(0, end === -1 ? length : end).toString("utf8");
+}
+function normalize(path) {
+  return path.replace(/^(\.\/)+/, "").replace(/\/+$/, "");
+}
+function listTarEntries(tar) {
+  const entries = [];
+  let longName = null;
+  let offset = 0;
+  while (offset + BLOCK <= tar.length) {
+    const block = tar.subarray(offset, offset + BLOCK);
+    if (block.every((byte) => byte === 0)) break;
+    const stored = Number.parseInt(readString(block, 148, 8).trim(), 8);
+    const actual = block.reduce((sum, byte, i) => sum + (i >= 148 && i < 156 ? 32 : byte), 0);
+    if (stored !== actual) throw new Error("not a valid tar archive (bad header checksum)");
+    const size = Number.parseInt(readString(block, 124, 12).trim() || "0", 8);
+    const type = String.fromCharCode(block[156] || 48);
+    const body = tar.subarray(offset + BLOCK, offset + BLOCK + size);
+    offset += BLOCK + Math.ceil(size / BLOCK) * BLOCK;
+    if (type === "L") {
+      longName = readString(body, 0, body.length);
+      continue;
+    }
+    if (type === "x") {
+      const record = body.toString("utf8").match(/\d+ path=([^\n]*)\n/);
+      if (record?.[1]) longName = record[1];
+      continue;
+    }
+    if (type === "g") continue;
+    const prefix = readString(block, 345, 155);
+    if (["1", "2", "3", "4", "6"].includes(type))
+      throw new Error(
+        `the archive holds a link or device entry (${readString(block, 0, 100)}); only files and directories are supported`
+      );
+    const name = longName ?? (prefix ? `${prefix}/${readString(block, 0, 100)}` : readString(block, 0, 100));
+    longName = null;
+    entries.push(normalize(name));
+  }
+  return entries;
+}
+async function loadBundle(input) {
+  let stats;
+  try {
+    stats = await lstat(input);
+  } catch {
+    throw new Error(`--input ${input} does not exist.`);
+  }
+  let tar;
+  if (stats.isDirectory()) {
+    tar = await tarDirectory(input);
+  } else if (stats.isFile() && /\.(tar\.gz|tgz)$/.test(input)) {
+    if (stats.size > AGENT_EVAL_MAX_BUNDLE_BYTES)
+      throw new Error(
+        `${input} is ${stats.size} bytes; a bundle is limited to ${AGENT_EVAL_MAX_BUNDLE_BYTES}. Prune it.`
+      );
+    const gzip = await readFile(input);
+    try {
+      tar = gunzipSync(gzip, { maxOutputLength: MAX_UNPACKED_BYTES });
+    } catch {
+      throw new Error(
+        `--input ${input} is not a valid gzip file, or unpacks to more than ${MAX_UNPACKED_BYTES} bytes.`
+      );
+    }
+  } else {
+    throw new Error("--input must be a directory or a .tar.gz file.");
+  }
+  const archive = gzipSync(tar, { level: 9 });
+  let entries;
+  try {
+    entries = listTarEntries(tar);
+  } catch (error) {
+    throw new Error(`--input ${input}: ${error instanceof Error ? error.message : String(error)}.`);
+  }
+  return {
+    sha256: sha256Hex(tar),
+    gzipSha256: sha256Hex(archive),
+    bytes: archive.length,
+    archive,
+    entries
+  };
+}
+function missingRequiredPaths(entries, required) {
+  return required.filter((path) => {
+    const wanted = normalize(path);
+    return !entries.some((entry) => entry === wanted || entry.startsWith(`${wanted}/`));
+  });
+}
+var uploadBundle = (url, headers, archive) => new Promise((resolve, reject) => {
+  const target = new URL(url);
+  const request2 = target.protocol === "https:" ? httpsRequest : httpRequest;
+  const req = request2(
+    target,
+    { method: "PUT", headers: { ...headers, "content-length": String(archive.byteLength) } },
+    (response) => {
+      response.on("error", reject);
+      const status = response.statusCode;
+      if (status !== void 0 && status >= 200 && status < 300) {
+        response.on("end", resolve);
+        response.resume();
+      } else {
+        response.resume();
+        req.destroy();
+        reject(new Error(`Uploading the bundle failed (${String(status)}).`));
+      }
+    }
+  );
+  req.on("error", reject);
+  req.end(archive);
+});
+
+// src/eval-multipart.ts
+import { createHash as createHash2, randomUUID } from "crypto";
+import { mkdir, readFile as readFile2, writeFile, rm, rename } from "fs/promises";
+import { homedir } from "os";
+import { join as join2 } from "path";
+async function uploadMultipart(apiUrl, token, evalPath, bundle) {
+  const identity = createHash2("sha256").update(JSON.stringify([apiUrl, evalPath, bundle.gzipSha256])).digest("hex");
+  const dir = join2(homedir(), ".cofactor", "eval-uploads");
+  const checkpoint = join2(dir, `${identity}.json`);
+  await mkdir(dir, { recursive: true, mode: 448 });
+  let uploadId;
+  try {
+    const saved = JSON.parse(await readFile2(checkpoint, "utf8"));
+    if (typeof saved !== "object" || !saved || !("uploadId" in saved) || typeof saved.uploadId !== "string")
+      throw new Error("Invalid bundle upload checkpoint");
+    uploadId = saved.uploadId;
+  } catch (error) {
+    if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) throw error;
+  }
+  const checksums = [];
+  for (let offset = 0; offset < bundle.bytes; offset += AGENT_EVAL_PART_BYTES)
+    checksums.push(
+      createHash2("sha256").update(bundle.archive.subarray(offset, offset + AGENT_EVAL_PART_BYTES)).digest("hex")
+    );
+  const body = {
+    sha256: bundle.sha256,
+    gzipSha256: bundle.gzipSha256,
+    bytes: bundle.bytes,
+    checksums
+  };
+  const endpoint = `${evalPath}/uploads/multipart`;
+  const reply = await request(apiUrl, token, "POST", endpoint, {
+    ...body,
+    uploadId,
+    complete: false
+  });
+  if (reply.status === "multipart") {
+    const temporary = `${checkpoint}.${randomUUID()}.tmp`;
+    await writeFile(temporary, JSON.stringify({ uploadId: reply.uploadId }), { mode: 384 });
+    await rename(temporary, checkpoint);
+    for (const part of reply.parts) {
+      const offset = (part.number - 1) * AGENT_EVAL_PART_BYTES;
+      for (let attempt = 0; ; attempt++) {
+        try {
+          await uploadBundle(
+            part.url,
+            part.headers,
+            bundle.archive.subarray(offset, offset + AGENT_EVAL_PART_BYTES)
+          );
+          break;
+        } catch (error) {
+          if (!(error instanceof Error && "code" in error) || attempt === 2) throw error;
+          console.error(
+            `Retrying bundle part ${part.number} after a network failure (${attempt + 1}/2).`
+          );
+          await new Promise((resolve) => setTimeout(resolve, 250 * 2 ** attempt));
+        }
+      }
+    }
+    await request(apiUrl, token, "POST", endpoint, {
+      ...body,
+      uploadId: reply.uploadId,
+      complete: true
+    });
+  }
+  await rm(checkpoint, { force: true });
+}
+
+export {
+  McpAgentEvalDefinitionSchema,
+  AGENT_EVAL_MAX_BUNDLE_BYTES,
+  AgentEvalTemplateSchema,
+  EvalConversationSchema,
+  AGENT_EVAL_MULTIPART_THRESHOLD,
+  loadBundle,
+  missingRequiredPaths,
+  uploadBundle,
+  uploadMultipart
+};
+//# sourceMappingURL=chunk-UPP4F2BE.js.map

package/dist/chunk-UPP4F2BE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../types/src/agent-eval-template.ts","../src/eval-bundle.ts","../src/eval-multipart.ts"],"sourcesContent":["/**\n * Agent evaluation shared contracts.\n * @module agent-eval-template\n * @see docs/project/conventions.md\n */\nimport { z } from 'zod';\nimport { mcpHarnessNeedsClientEnvironment, type ToolingSpec } from './agent-eval.js';\n\nconst ClientRef = z.string().min(1).max(200);\nconst ToolingSchema = z.strictObject({\n  mcp: z.strictObject({\n    port: z.string().min(1),\n    path: z.string().min(1).optional(),\n    auth: z.strictObject({ header: z.string().min(1), secret: z.string().min(1) }).optional(),\n  }).optional(),\n  cli: z.strictObject({ install: z.string().min(1), env: z.record(z.string(), z.string()).optional() }).optional(),\n  skills: z.array(z.string().min(1)).optional(),\n  docs: z.array(z.string().min(1)).optional(),\n  prompt: z.string().optional(),\n});\nconst McpCheckSchema = z.discriminatedUnion('type', [\n  z.strictObject({ type: z.literal('artifact'), run: z.string().min(1) }),\n  z.strictObject({ type: z.literal('state'), run: z.string().min(1) }),\n]);\nconst McpJudgeSchema = z.strictObject({\n  rubric: z.string().min(20),\n  judge: z.strictObject({ provider: z.enum(['anthropic', 'azure']), model: z.string().min(1) }),\n});\nexport const McpCaseExpectedSchema = z.strictObject({\n  prompt: z.string().min(1),\n  check: McpCheckSchema,\n  client: ClientRef,\n  judge: McpJudgeSchema.optional(),\n});\n\nconst McpCaseSchema = z.strictObject({\n  key: z.string().regex(/^[a-z0-9][a-z0-9-]{0,99}$/),\n  title: z.string().min(1).max(500),\n  prompt: z.string().min(1),\n  check: McpCheckSchema,\n  client: ClientRef.optional(),\n  judge: McpJudgeSchema.optional(),\n});\n\nconst McpAgentRef = z.string().regex(/^(claude-code|codex|opencode|openai-agents-sdk|claude-agent-sdk|google-adk)\\/.+$/).superRefine((value, ctx) => {\n  try { parseMcpAgentSelector(value); }\n  catch (error) { ctx.addIssue({ code: 'custom', message: error instanceof Error ? error.message : String(error) }); }\n});\nexport const McpAgentEvalDefinitionSchema = z.strictObject({\n  version: z.literal(1),\n  kind: z.literal('mcp'),\n  name: z.string().regex(/^[a-z0-9-]{2,40}$/).refine((name) => name !== 'runs' && name !== 'compare'),\n  description: z.string().min(1).max(500),\n  runbook: z.string().min(1),\n  application: z.strictObject({ id: z.string().min(1), commit: z.union([z.literal('head'), z.string().regex(/^[0-9a-f]{40}$/)]) }),\n  client: ClientRef,\n  tooling: ToolingSchema,\n  agents: z.array(McpAgentRef).min(1),\n  cases: z.array(McpCaseSchema).min(1),\n  mode: z.literal('single-turn').default('single-turn'),\n  traces: z.strictObject({ capture: z.enum(['full', 'metadata']).default('full') }).default(() => ({ capture: 'full' as const })),\n  repeats: z.number().int().min(1).max(7).default(1),\n  passAtLeast: z.number().int().min(1).default(1),\n  passBar: z.number().min(0.1).max(1).default(0.5),\n  attemptSeconds: z.number().int().min(30).max(1700),\n})\n  .superRefine((definition, ctx) => {\n    if (definition.agents.some((selector) => !mcpHarnessNeedsClientEnvironment(selector.split('/')[0] ?? '')) && !definition.tooling.mcp)\n      ctx.addIssue({ code: 'custom', path: ['tooling', 'mcp'], message: 'MCP-only SDK agents require tooling.mcp' });\n    if (definition.passAtLeast > definition.repeats) ctx.addIssue({ code: 'custom', path: ['passAtLeast'], message: 'passAtLeast must not exceed repeats' });\n    const keys = new Set<string>();\n    definition.cases.forEach((item, index) => {\n      if (keys.has(item.key)) ctx.addIssue({ code: 'custom', path: ['cases', index, 'key'], message: 'Case keys must be unique' });\n      keys.add(item.key);\n    });\n    const agents = new Set<string>();\n    definition.agents.forEach((agent, index) => {\n      if (agents.has(agent)) ctx.addIssue({ code: 'custom', path: ['agents', index], message: 'Agent harness/model pairs must be unique' });\n      agents.add(agent);\n    });\n  });\n\nexport type McpAgentEvalDefinition = z.infer<typeof McpAgentEvalDefinitionSchema> & { tooling: ToolingSpec };\nexport type AgentEvalDefinition = AgentEvalTemplate | McpAgentEvalDefinition;\n\nexport function parseMcpAgentSelector(selector: string): {\n  harness: 'claude-code' | 'codex' | 'opencode' | 'openai-agents-sdk' | 'claude-agent-sdk' | 'google-adk';\n  provider: 'anthropic' | 'azure' | 'google';\n  model: string;\n} {\n  const [harness, ...parts] = selector.split('/');\n  if (\n    harness !== 'claude-code' && harness !== 'codex' && harness !== 'opencode' &&\n    harness !== 'openai-agents-sdk' && harness !== 'claude-agent-sdk' && harness !== 'google-adk'\n  ) {\n    throw new Error(`Unsupported MCP eval harness: ${harness ?? ''}`);\n  }\n  let provider: 'anthropic' | 'azure' | 'google';\n  if (harness === 'claude-code' || harness === 'claude-agent-sdk') provider = 'anthropic';\n  else if (harness === 'codex' || harness === 'openai-agents-sdk') provider = 'azure';\n  else if (harness === 'google-adk') provider = 'google';\n  else {\n    const [providerPart, ...modelParts] = parts;\n    if (providerPart !== 'anthropic' && providerPart !== 'azure') {\n      throw new Error('OpenCode selectors must use opencode/anthropic/<model> or opencode/azure/<model>.');\n    }\n    provider = providerPart;\n    parts.splice(0, parts.length, ...modelParts);\n  }\n  const model = parts.join('/');\n  if (!model) throw new Error(`MCP eval selector ${selector} is missing a model.`);\n  return { harness, provider, model };\n}\n\nexport const AGENT_EVAL_MAX_BUNDLE_BYTES = 512 * 1024 ** 2;\nexport const AGENT_EVAL_MAX_TOTAL_BUNDLE_BYTES = 2 * 1024 ** 3;\n\nconst ModelSchema = z.strictObject({\n  provider: z.enum(['anthropic', 'azure']),\n  model: z.string().min(1),\n});\n\n// Upper case like sandbox secret names; EVAL_* is the attempt's own contract and would be overwritten.\nconst EnvName = z\n  .string()\n  .regex(/^[A-Z_][A-Z0-9_]*$/, 'Must be an upper-case environment variable name')\n  .refine((name) => !name.startsWith('EVAL_'), 'EVAL_ names are reserved for the attempt environment');\n/**\n * Where an agent reads its model configuration: the env var names the attempt sets for one provider. An entry\n * replaces all of that provider's standard names (spec D8; azure's two key and two URL names become one each) and is\n * needed only when the agent reads other names.\n */\nconst ProviderEnvSchema = z.strictObject({\n  env: z\n    .strictObject({\n      apiKey: EnvName, // gets the attempt's scoped proxy token\n      baseUrl: EnvName, // gets the proxy URL for the provider's wire\n      model: EnvName, // gets the model id\n    })\n    .refine((env) => new Set(Object.values(env)).size === 3, 'apiKey, baseUrl and model must be different names'),\n});\n\nconst ScriptGrader = z.strictObject({\n  id: z.string().regex(/^[a-z0-9-]+$/),\n  kind: z.literal('script'),\n  command: z.string().min(1),\n});\nconst JudgeGrader = z.strictObject({\n  id: z.string().regex(/^[a-z0-9-]+$/),\n  kind: z.literal('ai-judge'),\n  rubric: z.string().min(20),\n  scale: z.enum(['binary', '1-5']),\n  passAt: z.number().int().min(2).max(5).optional(), // required when scale is '1-5'\n  judge: ModelSchema,\n});\n\nexport const AgentEvalTemplateSchema = z\n  .strictObject({\n    version: z.literal(1),\n    kind: z.literal('agent').default('agent'),\n    name: z\n      .string()\n      .regex(/^[a-z0-9-]{2,40}$/)\n      .refine((n) => n !== 'runs' && n !== 'compare'), // reserved route segments\n    description: z.string().min(1).max(500),\n    proves: z.strictObject({ capabilities: z.array(z.string().regex(/^CAP-/)).min(1) }), // resolved within the application given at push\n    runbook: z.string().min(1), // path relative to this file\n    mode: z.enum(['single-turn', 'multi-turn']).default('single-turn'),\n    traces: z.strictObject({ capture: z.enum(['full', 'metadata']).default('full') }).default(() => ({ capture: 'full' as const })),\n    run: z.string().min(1), // shell command, cwd = repo root of the commit; multi-turn: the agent process, JSONL on stdin/stdout\n    simulator: ModelSchema.optional(), // required when mode is multi-turn: pins the simulated-user model\n    input: z.strictObject({\n      description: z.string().min(1),\n      require: z.array(z.string()).default([]),\n    }),\n    agent: z.strictObject({\n      models: z\n        .record(z.string().regex(/^[a-z0-9-]+$/), ModelSchema)\n        .refine((m) => Object.keys(m).length >= 1),\n      default: z.string(), // must be a key of models\n      providers: z\n        .strictObject({ anthropic: ProviderEnvSchema.optional(), azure: ProviderEnvSchema.optional() })\n        .optional(), // absent, or an absent entry: the standard names; every entry's provider must be used by a model\n    }),\n    graders: z.array(z.discriminatedUnion('kind', [ScriptGrader, JudgeGrader])).min(1),\n    repeats: z.number().int().min(1).max(7).default(1), // attempts per case; a stochastic agent raises it together with passAtLeast\n    passAtLeast: z.number().int().min(1).default(1), // <= repeats\n    passBar: z.number().min(0.1).max(1), // minimum case pass rate for the eval to pass\n    attemptSeconds: z.number().int().min(30).max(1700), // grader commands get a fixed 120 s\n  })\n  .superRefine((template, ctx) => {\n    if (!Object.hasOwn(template.agent.models, template.agent.default)) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['agent', 'default'],\n        message: 'Default must name an agent model alias',\n      });\n    }\n    const used = new Set<string>(Object.values(template.agent.models).map((m) => m.provider));\n    for (const [provider, entry] of Object.entries(template.agent.providers ?? {})) {\n      if (entry && !used.has(provider)) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['agent', 'providers', provider],\n          message: `No agent model uses provider ${provider}; remove this entry or add a model that uses it`,\n        });\n      }\n    }\n    if (template.passAtLeast > template.repeats) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['passAtLeast'],\n        message: 'passAtLeast must not exceed repeats',\n      });\n    }\n    const ids = new Set<string>();\n    template.graders.forEach((grader, index) => {\n      if (ids.has(grader.id)) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['graders', index, 'id'],\n          message: 'Grader ids must be unique',\n        });\n      }\n      ids.add(grader.id);\n      if (grader.kind === 'ai-judge' && grader.scale === '1-5' && grader.passAt === undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['graders', index, 'passAt'],\n          message: 'A 1-5 judge requires passAt',\n        });\n      }\n    });\n    if ((template.mode === 'multi-turn') !== (template.simulator !== undefined)) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['simulator'],\n        message: 'A simulator is required exactly when mode is multi-turn',\n      });\n    }\n  });\nexport type AgentEvalTemplate = z.infer<typeof AgentEvalTemplateSchema>;\n\n/** A multi-turn case's conversation; null on a single-turn case. */\nexport const EvalConversationSchema = z.discriminatedUnion('kind', [\n  z.strictObject({ kind: z.literal('scripted'), turns: z.array(z.string().min(1)).min(1) }),\n  z.strictObject({\n    kind: z.literal('simulated'),\n    persona: z.string().min(1),\n    goal: z.string().min(1),\n    facts: z.array(z.string()),\n    stopWhen: z.string().min(1),\n    maxTurns: z.number().int().min(2).max(30),\n  }),\n]);\nexport type EvalConversation = z.infer<typeof EvalConversationSchema>;\n\n/** Large uploads use bounded parts so a dropped connection loses at most one part. */\nexport const AGENT_EVAL_MULTIPART_THRESHOLD = 32 * 1024 * 1024;\nexport const AGENT_EVAL_PART_BYTES = 8 * 1024 * 1024;\n","/**\n * Case bundles for `cofactor eval add-case`: a deterministic tar of a directory (gzipped for\n * upload), a reader for an existing .tar.gz, and the `input.require` check. The content address\n * `sha256` is the hash of the uncompressed tar, which this file fully specifies, so the same files\n * give the same sha256 on any runtime and identical bundles deduplicate across cases and evals\n * (spec D4, D11). Gzip is transport only: its bytes depend on the runtime's zlib, so they are\n * hashed separately as `gzipSha256` for the upload's integrity check.\n */\nimport { createHash } from 'node:crypto';\nimport { request as httpRequest } from 'node:http';\nimport { request as httpsRequest } from 'node:https';\nimport { lstat, readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { gunzipSync, gzipSync } from 'node:zlib';\nimport { AGENT_EVAL_MAX_BUNDLE_BYTES } from '@chatsdet/types/agent-eval-template';\n\nconst BLOCK = 512;\n// Memory guards for this process, not the server's limit (which is on the archive's bytes and is\n// enforced by the API): a directory's raw size, and what an archive may unpack to.\nconst MAX_RAW_BYTES = AGENT_EVAL_MAX_BUNDLE_BYTES;\nconst MAX_UNPACKED_BYTES = 4 * AGENT_EVAL_MAX_BUNDLE_BYTES;\n\n/** `sha256` addresses the uncompressed tar; `archive` is the gzip that gets uploaded, with its own hash and size. */\nexport type BundleSource = {\n  sha256: string;\n  gzipSha256: string;\n  bytes: number;\n  archive: Buffer;\n  entries: string[];\n};\n\nconst sha256Hex = (data: Buffer): string => createHash('sha256').update(data).digest('hex');\n\nfunction octal(value: number, width: number): string {\n  return `${value.toString(8).padStart(width - 1, '0')}\\0`;\n}\n\n/** Split a path into the ustar `prefix` and `name` fields, which hold 155 and 100 bytes. */\nfunction splitName(path: string): { prefix: string; name: string } {\n  if (Buffer.byteLength(path) <= 100) return { prefix: '', name: path };\n  for (let i = path.indexOf('/'); i !== -1; i = path.indexOf('/', i + 1)) {\n    const prefix = path.slice(0, i);\n    const name = path.slice(i + 1);\n    if (Buffer.byteLength(prefix) <= 155 && Buffer.byteLength(name) <= 100) return { prefix, name };\n  }\n  throw new Error(`Path is too long for a bundle (limit 255 bytes): ${path}`);\n}\n\nfunction header(path: string, size: number, type: '0' | '5', mode: number): Buffer {\n  const { prefix, name } = splitName(path);\n  const block = Buffer.alloc(BLOCK);\n  block.write(name, 0, 'utf8');\n  block.write(octal(mode, 8), 100, 'ascii');\n  block.write(octal(0, 8), 108, 'ascii'); // uid\n  block.write(octal(0, 8), 116, 'ascii'); // gid\n  block.write(octal(size, 12), 124, 'ascii');\n  block.write(octal(0, 12), 136, 'ascii'); // fixed mtime\n  block.fill(0x20, 148, 156); // checksum placeholder is spaces\n  block.write(type, 156, 'ascii');\n  block.write('ustar\\0', 257, 'ascii');\n  block.write('00', 263, 'ascii');\n  // uname and gname stay empty: no owner names in the archive.\n  block.write(prefix, 345, 'utf8');\n  const checksum = block.reduce((sum, byte) => sum + byte, 0);\n  block.write(`${checksum.toString(8).padStart(6, '0')}\\0 `, 148, 'ascii');\n  return block;\n}\n\ntype Entry = { path: string; absolute: string; directory: boolean; mode: number; size: number };\n\n/** Entries in byte order of their NFC-normalized names, so macOS (NFD) and Linux file systems agree. */\nasync function walk(root: string, real = '', archive = ''): Promise<Entry[]> {\n  const names = (await readdir(real ? join(root, real) : root))\n    .map((name) => ({ real: name, archive: name.normalize('NFC') }))\n    .sort((a, b) => Buffer.compare(Buffer.from(a.archive), Buffer.from(b.archive)));\n  const entries: Entry[] = [];\n  for (const name of names) {\n    const realPath = real ? `${real}/${name.real}` : name.real;\n    const path = archive ? `${archive}/${name.archive}` : name.archive;\n    const absolute = join(root, realPath);\n    const stats = await lstat(absolute);\n    if (stats.isDirectory()) {\n      entries.push({ path, absolute, directory: true, mode: 0o755, size: 0 });\n      entries.push(...(await walk(root, realPath, path)));\n    } else if (stats.isFile()) {\n      entries.push({\n        path,\n        absolute,\n        directory: false,\n        mode: stats.mode & 0o111 ? 0o755 : 0o644,\n        size: stats.size,\n      });\n    } else {\n      throw new Error(\n        `Cannot bundle ${path}: only regular files and directories are supported (no symlinks or devices).`\n      );\n    }\n  }\n  return entries;\n}\n\n/** Tar a directory deterministically: sorted entries, mtime 0, uid and gid 0, no owner names. */\nexport async function tarDirectory(root: string): Promise<Buffer> {\n  const entries = await walk(root);\n  const total = entries.reduce((sum, entry) => sum + entry.size, 0);\n  if (total > MAX_RAW_BYTES) {\n    throw new Error(\n      `The input directory holds ${total} bytes; the CLI bundles at most ${MAX_RAW_BYTES}. Prune it.`\n    );\n  }\n  const parts: Buffer[] = [];\n  for (const entry of entries) {\n    if (entry.directory) {\n      parts.push(header(`${entry.path}/`, 0, '5', entry.mode));\n      continue;\n    }\n    const content = await readFile(entry.absolute);\n    parts.push(header(entry.path, content.length, '0', entry.mode), content);\n    const padding = (BLOCK - (content.length % BLOCK)) % BLOCK;\n    if (padding) parts.push(Buffer.alloc(padding));\n  }\n  parts.push(Buffer.alloc(BLOCK * 2));\n  return Buffer.concat(parts);\n}\n\nfunction readString(block: Buffer, start: number, length: number): string {\n  const slice = block.subarray(start, start + length);\n  const end = slice.indexOf(0);\n  return slice.subarray(0, end === -1 ? length : end).toString('utf8');\n}\n\nfunction normalize(path: string): string {\n  return path.replace(/^(\\.\\/)+/, '').replace(/\\/+$/, '');\n}\n\n/** Entry paths of an uncompressed tar (ustar, GNU long names and pax `path` records). */\nexport function listTarEntries(tar: Buffer): string[] {\n  const entries: string[] = [];\n  let longName: string | null = null;\n  let offset = 0;\n  while (offset + BLOCK <= tar.length) {\n    const block = tar.subarray(offset, offset + BLOCK);\n    if (block.every((byte) => byte === 0)) break;\n    const stored = Number.parseInt(readString(block, 148, 8).trim(), 8);\n    const actual = block.reduce((sum, byte, i) => sum + (i >= 148 && i < 156 ? 0x20 : byte), 0);\n    if (stored !== actual) throw new Error('not a valid tar archive (bad header checksum)');\n    const size = Number.parseInt(readString(block, 124, 12).trim() || '0', 8);\n    const type = String.fromCharCode(block[156] || 0x30);\n    const body = tar.subarray(offset + BLOCK, offset + BLOCK + size);\n    offset += BLOCK + Math.ceil(size / BLOCK) * BLOCK;\n    if (type === 'L') {\n      longName = readString(body, 0, body.length);\n      continue;\n    }\n    if (type === 'x') {\n      const record = body.toString('utf8').match(/\\d+ path=([^\\n]*)\\n/);\n      if (record?.[1]) longName = record[1];\n      continue;\n    }\n    if (type === 'g') continue;\n    const prefix = readString(block, 345, 155);\n    if (['1', '2', '3', '4', '6'].includes(type))\n      throw new Error(\n        `the archive holds a link or device entry (${readString(block, 0, 100)}); only files and directories are supported`\n      );\n    const name =\n      longName ?? (prefix ? `${prefix}/${readString(block, 0, 100)}` : readString(block, 0, 100));\n    longName = null;\n    entries.push(normalize(name));\n  }\n  return entries;\n}\n\n/** Load an input (a directory or a .tar.gz) as a bundle, with its entry list, the tar's sha256 and the gzip's size and hash. */\nexport async function loadBundle(input: string): Promise<BundleSource> {\n  let stats;\n  try {\n    stats = await lstat(input);\n  } catch {\n    throw new Error(`--input ${input} does not exist.`);\n  }\n  let tar: Buffer;\n  if (stats.isDirectory()) {\n    tar = await tarDirectory(input);\n  } else if (stats.isFile() && /\\.(tar\\.gz|tgz)$/.test(input)) {\n    if (stats.size > AGENT_EVAL_MAX_BUNDLE_BYTES)\n      throw new Error(\n        `${input} is ${stats.size} bytes; a bundle is limited to ${AGENT_EVAL_MAX_BUNDLE_BYTES}. Prune it.`\n      );\n    const gzip = await readFile(input);\n    try {\n      tar = gunzipSync(gzip, { maxOutputLength: MAX_UNPACKED_BYTES });\n    } catch {\n      throw new Error(\n        `--input ${input} is not a valid gzip file, or unpacks to more than ${MAX_UNPACKED_BYTES} bytes.`\n      );\n    }\n  } else {\n    throw new Error('--input must be a directory or a .tar.gz file.');\n  }\n  // Always re-gzipped here, even for a .tar.gz input: the upload is then a single-member gzip from\n  // this CLI, whatever the input held. Gzip is transport only; the content address is the tar's hash.\n  const archive = gzipSync(tar, { level: 9 });\n  let entries: string[];\n  try {\n    entries = listTarEntries(tar);\n  } catch (error) {\n    throw new Error(`--input ${input}: ${error instanceof Error ? error.message : String(error)}.`);\n  }\n  return {\n    sha256: sha256Hex(tar),\n    gzipSha256: sha256Hex(archive),\n    bytes: archive.length,\n    archive,\n    entries,\n  };\n}\n\n/** The `input.require` paths the bundle does not contain (a path may name a file or a directory). */\nexport function missingRequiredPaths(entries: string[], required: string[]): string[] {\n  return required.filter((path) => {\n    const wanted = normalize(path);\n    return !entries.some((entry) => entry === wanted || entry.startsWith(`${wanted}/`));\n  });\n}\n\n/**\n * Native HTTP keeps sending large bundles without fetch's fixed response-header deadline.\n * Observed: a 244 MB diagnostic capture failed with UND_ERR_HEADERS_TIMEOUT at 301 seconds.\n * S3 still checks the signed content length and checksum; no upload retry is implicit here.\n */\nexport const uploadBundle = (\n  url: string,\n  headers: Record<string, string>,\n  archive: Buffer\n): Promise<void> =>\n  new Promise((resolve, reject) => {\n    const target = new URL(url);\n    const request = target.protocol === 'https:' ? httpsRequest : httpRequest;\n    const req = request(\n      target,\n      { method: 'PUT', headers: { ...headers, 'content-length': String(archive.byteLength) } },\n      (response) => {\n        response.on('error', reject);\n        const status = response.statusCode;\n        if (status !== undefined && status >= 200 && status < 300) {\n          response.on('end', resolve);\n          response.resume();\n        } else {\n          response.resume();\n          req.destroy();\n          reject(new Error(`Uploading the bundle failed (${String(status)}).`));\n        }\n      }\n    );\n    req.on('error', reject);\n    req.end(archive);\n  });\n","/** Sequential bundle parts with disk checkpoints across CLI invocations. @module cli/eval-multipart */\nimport { createHash, randomUUID } from 'node:crypto';\nimport { mkdir, readFile, writeFile, rm, rename } from 'node:fs/promises';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { AGENT_EVAL_PART_BYTES } from '@chatsdet/types/agent-eval-template';\nimport { type BundleSource, uploadBundle } from './eval-bundle.js';\nimport { request } from './eval-api.js';\n\ntype Reply =\n  | { status: 'exists' | 'complete' }\n  | {\n      status: 'multipart';\n      uploadId: string;\n      parts: { number: number; url: string; headers: Record<string, string> }[];\n    };\n\nexport async function uploadMultipart(\n  apiUrl: string,\n  token: string,\n  evalPath: string,\n  bundle: BundleSource\n): Promise<void> {\n  const identity = createHash('sha256')\n    .update(JSON.stringify([apiUrl, evalPath, bundle.gzipSha256]))\n    .digest('hex');\n  const dir = join(homedir(), '.cofactor', 'eval-uploads');\n  const checkpoint = join(dir, `${identity}.json`);\n  await mkdir(dir, { recursive: true, mode: 0o700 });\n  let uploadId: string | undefined;\n  try {\n    const saved: unknown = JSON.parse(await readFile(checkpoint, 'utf8'));\n    if (\n      typeof saved !== 'object' ||\n      !saved ||\n      !('uploadId' in saved) ||\n      typeof saved.uploadId !== 'string'\n    )\n      throw new Error('Invalid bundle upload checkpoint');\n    uploadId = saved.uploadId;\n  } catch (error) {\n    if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT')) throw error;\n  }\n  const checksums: string[] = [];\n  for (let offset = 0; offset < bundle.bytes; offset += AGENT_EVAL_PART_BYTES)\n    checksums.push(\n      createHash('sha256')\n        .update(bundle.archive.subarray(offset, offset + AGENT_EVAL_PART_BYTES))\n        .digest('hex')\n    );\n  const body = {\n    sha256: bundle.sha256,\n    gzipSha256: bundle.gzipSha256,\n    bytes: bundle.bytes,\n    checksums,\n  };\n  const endpoint = `${evalPath}/uploads/multipart`;\n  const reply = await request<Reply>(apiUrl, token, 'POST', endpoint, {\n    ...body,\n    uploadId,\n    complete: false,\n  });\n  if (reply.status === 'multipart') {\n    const temporary = `${checkpoint}.${randomUUID()}.tmp`;\n    await writeFile(temporary, JSON.stringify({ uploadId: reply.uploadId }), { mode: 0o600 });\n    await rename(temporary, checkpoint);\n    for (const part of reply.parts) {\n      const offset = (part.number - 1) * AGENT_EVAL_PART_BYTES;\n      // Observed 2026-11-12: a 435 MB bundle failed three times with \"fetch failed\" on a weak link.\n      // Retry only transport failures; S3 HTTP/checksum rejections must surface immediately.\n      for (let attempt = 0; ; attempt++) {\n        try {\n          await uploadBundle(\n            part.url,\n            part.headers,\n            bundle.archive.subarray(offset, offset + AGENT_EVAL_PART_BYTES)\n          );\n          break;\n        } catch (error) {\n          if (!(error instanceof Error && 'code' in error) || attempt === 2) throw error;\n          console.error(\n            `Retrying bundle part ${part.number} after a network failure (${attempt + 1}/2).`\n          );\n          await new Promise((resolve) => setTimeout(resolve, 250 * 2 ** attempt));\n        }\n      }\n    }\n    await request(apiUrl, token, 'POST', endpoint, {\n      ...body,\n      uploadId: reply.uploadId,\n      complete: true,\n    });\n  }\n  await rm(checkpoint, { force: true });\n}\n"],"mappings":";;;;;;;;;AAKA,SAAS,SAAS;AAGlB,IAAM,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC3C,IAAM,gBAAgB,EAAE,aAAa;AAAA,EACnC,KAAK,EAAE,aAAa;AAAA,IAClB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACtB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACjC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS;AAAA,EAC1F,CAAC,EAAE,SAAS;AAAA,EACZ,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS;AAAA,EAC/G,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAAA,EAC5C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC;AACD,IAAM,iBAAiB,EAAE,mBAAmB,QAAQ;AAAA,EAClD,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,UAAU,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACtE,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AACD,IAAM,iBAAiB,EAAE,aAAa;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACzB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,OAAO,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9F,CAAC;AACM,IAAM,wBAAwB,EAAE,aAAa;AAAA,EAClD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO,eAAe,SAAS;AACjC,CAAC;AAED,IAAM,gBAAgB,EAAE,aAAa;AAAA,EACnC,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B;AAAA,EACjD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,OAAO;AAAA,EACP,QAAQ,UAAU,SAAS;AAAA,EAC3B,OAAO,eAAe,SAAS;AACjC,CAAC;AAED,IAAM,cAAc,EAAE,OAAO,EAAE,MAAM,kFAAkF,EAAE,YAAY,CAAC,OAAO,QAAQ;AACnJ,MAAI;AAAE,0BAAsB,KAAK;AAAA,EAAG,SAC7B,OAAO;AAAE,QAAI,SAAS,EAAE,MAAM,UAAU,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,EAAG;AACrH,CAAC;AACM,IAAM,+BAA+B,EAAE,aAAa;AAAA,EACzD,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,MAAM,EAAE,QAAQ,KAAK;AAAA,EACrB,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,EAAE,OAAO,CAAC,SAAS,SAAS,UAAU,SAAS,SAAS;AAAA,EAClG,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC;AAAA,EAC/H,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ,EAAE,MAAM,WAAW,EAAE,IAAI,CAAC;AAAA,EAClC,OAAO,EAAE,MAAM,aAAa,EAAE,IAAI,CAAC;AAAA,EACnC,MAAM,EAAE,QAAQ,aAAa,EAAE,QAAQ,aAAa;AAAA,EACpD,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,QAAQ,MAAM,EAAE,CAAC,EAAE,QAAQ,OAAO,EAAE,SAAS,OAAgB,EAAE;AAAA,EAC9H,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA,EAC/C,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;AACnD,CAAC,EACE,YAAY,CAAC,YAAY,QAAQ;AAChC,MAAI,WAAW,OAAO,KAAK,CAAC,aAAa,CAAC,iCAAiC,SAAS,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,QAAQ;AAC/H,QAAI,SAAS,EAAE,MAAM,UAAU,MAAM,CAAC,WAAW,KAAK,GAAG,SAAS,0CAA0C,CAAC;AAC/G,MAAI,WAAW,cAAc,WAAW,QAAS,KAAI,SAAS,EAAE,MAAM,UAAU,MAAM,CAAC,aAAa,GAAG,SAAS,sCAAsC,CAAC;AACvJ,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,MAAM,QAAQ,CAAC,MAAM,UAAU;AACxC,QAAI,KAAK,IAAI,KAAK,GAAG,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,MAAM,CAAC,SAAS,OAAO,KAAK,GAAG,SAAS,2BAA2B,CAAC;AAC3H,SAAK,IAAI,KAAK,GAAG;AAAA,EACnB,CAAC;AACD,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,OAAO,QAAQ,CAAC,OAAO,UAAU;AAC1C,QAAI,OAAO,IAAI,KAAK,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,MAAM,CAAC,UAAU,KAAK,GAAG,SAAS,2CAA2C,CAAC;AACpI,WAAO,IAAI,KAAK;AAAA,EAClB,CAAC;AACH,CAAC;AAKI,SAAS,sBAAsB,UAIpC;AACA,QAAM,CAAC,SAAS,GAAG,KAAK,IAAI,SAAS,MAAM,GAAG;AAC9C,MACE,YAAY,iBAAiB,YAAY,WAAW,YAAY,cAChE,YAAY,uBAAuB,YAAY,sBAAsB,YAAY,cACjF;AACA,UAAM,IAAI,MAAM,iCAAiC,WAAW,EAAE,EAAE;AAAA,EAClE;AACA,MAAI;AACJ,MAAI,YAAY,iBAAiB,YAAY,mBAAoB,YAAW;AAAA,WACnE,YAAY,WAAW,YAAY,oBAAqB,YAAW;AAAA,WACnE,YAAY,aAAc,YAAW;AAAA,OACzC;AACH,UAAM,CAAC,cAAc,GAAG,UAAU,IAAI;AACtC,QAAI,iBAAiB,eAAe,iBAAiB,SAAS;AAC5D,YAAM,IAAI,MAAM,mFAAmF;AAAA,IACrG;AACA,eAAW;AACX,UAAM,OAAO,GAAG,MAAM,QAAQ,GAAG,UAAU;AAAA,EAC7C;AACA,QAAM,QAAQ,MAAM,KAAK,GAAG;AAC5B,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,QAAQ,sBAAsB;AAC/E,SAAO,EAAE,SAAS,UAAU,MAAM;AACpC;AAEO,IAAM,8BAA8B,MAAM,QAAQ;AAClD,IAAM,oCAAoC,IAAI,QAAQ;AAE7D,IAAM,cAAc,EAAE,aAAa;AAAA,EACjC,UAAU,EAAE,KAAK,CAAC,aAAa,OAAO,CAAC;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACzB,CAAC;AAGD,IAAM,UAAU,EACb,OAAO,EACP,MAAM,sBAAsB,iDAAiD,EAC7E,OAAO,CAAC,SAAS,CAAC,KAAK,WAAW,OAAO,GAAG,sDAAsD;AAMrG,IAAM,oBAAoB,EAAE,aAAa;AAAA,EACvC,KAAK,EACF,aAAa;AAAA,IACZ,QAAQ;AAAA;AAAA,IACR,SAAS;AAAA;AAAA,IACT,OAAO;AAAA;AAAA,EACT,CAAC,EACA,OAAO,CAAC,QAAQ,IAAI,IAAI,OAAO,OAAO,GAAG,CAAC,EAAE,SAAS,GAAG,mDAAmD;AAChH,CAAC;AAED,IAAM,eAAe,EAAE,aAAa;AAAA,EAClC,IAAI,EAAE,OAAO,EAAE,MAAM,cAAc;AAAA,EACnC,MAAM,EAAE,QAAQ,QAAQ;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AACD,IAAM,cAAc,EAAE,aAAa;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,MAAM,cAAc;AAAA,EACnC,MAAM,EAAE,QAAQ,UAAU;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACzB,OAAO,EAAE,KAAK,CAAC,UAAU,KAAK,CAAC;AAAA,EAC/B,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAChD,OAAO;AACT,CAAC;AAEM,IAAM,0BAA0B,EACpC,aAAa;AAAA,EACZ,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,MAAM,EAAE,QAAQ,OAAO,EAAE,QAAQ,OAAO;AAAA,EACxC,MAAM,EACH,OAAO,EACP,MAAM,mBAAmB,EACzB,OAAO,CAAC,MAAM,MAAM,UAAU,MAAM,SAAS;AAAA;AAAA,EAChD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA;AAAA,EAClF,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EACzB,MAAM,EAAE,KAAK,CAAC,eAAe,YAAY,CAAC,EAAE,QAAQ,aAAa;AAAA,EACjE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC,EAAE,QAAQ,MAAM,EAAE,CAAC,EAAE,QAAQ,OAAO,EAAE,SAAS,OAAgB,EAAE;AAAA,EAC9H,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EACrB,WAAW,YAAY,SAAS;AAAA;AAAA,EAChC,OAAO,EAAE,aAAa;AAAA,IACpB,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAC7B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,CAAC;AAAA,EACD,OAAO,EAAE,aAAa;AAAA,IACpB,QAAQ,EACL,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,GAAG,WAAW,EACpD,OAAO,CAAC,MAAM,OAAO,KAAK,CAAC,EAAE,UAAU,CAAC;AAAA,IAC3C,SAAS,EAAE,OAAO;AAAA;AAAA,IAClB,WAAW,EACR,aAAa,EAAE,WAAW,kBAAkB,SAAS,GAAG,OAAO,kBAAkB,SAAS,EAAE,CAAC,EAC7F,SAAS;AAAA;AAAA,EACd,CAAC;AAAA,EACD,SAAS,EAAE,MAAM,EAAE,mBAAmB,QAAQ,CAAC,cAAc,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,EACjF,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,IAAI,CAAC;AAAA;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA;AACnD,CAAC,EACA,YAAY,CAAC,UAAU,QAAQ;AAC9B,MAAI,CAAC,OAAO,OAAO,SAAS,MAAM,QAAQ,SAAS,MAAM,OAAO,GAAG;AACjE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,SAAS,SAAS;AAAA,MACzB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,QAAM,OAAO,IAAI,IAAY,OAAO,OAAO,SAAS,MAAM,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;AACxF,aAAW,CAAC,UAAU,KAAK,KAAK,OAAO,QAAQ,SAAS,MAAM,aAAa,CAAC,CAAC,GAAG;AAC9E,QAAI,SAAS,CAAC,KAAK,IAAI,QAAQ,GAAG;AAChC,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,SAAS,aAAa,QAAQ;AAAA,QACrC,SAAS,gCAAgC,QAAQ;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,SAAS,cAAc,SAAS,SAAS;AAC3C,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,aAAa;AAAA,MACpB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,QAAM,MAAM,oBAAI,IAAY;AAC5B,WAAS,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AAC1C,QAAI,IAAI,IAAI,OAAO,EAAE,GAAG;AACtB,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,WAAW,OAAO,IAAI;AAAA,QAC7B,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,IAAI,OAAO,EAAE;AACjB,QAAI,OAAO,SAAS,cAAc,OAAO,UAAU,SAAS,OAAO,WAAW,QAAW;AACvF,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,WAAW,OAAO,QAAQ;AAAA,QACjC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,MAAK,SAAS,SAAS,kBAAmB,SAAS,cAAc,SAAY;AAC3E,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAII,IAAM,yBAAyB,EAAE,mBAAmB,QAAQ;AAAA,EACjE,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,UAAU,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACxF,EAAE,aAAa;AAAA,IACb,MAAM,EAAE,QAAQ,WAAW;AAAA,IAC3B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACzB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACtB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACzB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAC1B,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC1C,CAAC;AACH,CAAC;AAIM,IAAM,iCAAiC,KAAK,OAAO;AACnD,IAAM,wBAAwB,IAAI,OAAO;;;AC3PhD,SAAS,kBAAkB;AAC3B,SAAS,WAAW,mBAAmB;AACvC,SAAS,WAAW,oBAAoB;AACxC,SAAS,OAAO,SAAS,gBAAgB;AACzC,SAAS,YAAY;AACrB,SAAS,YAAY,gBAAgB;AAGrC,IAAM,QAAQ;AAGd,IAAM,gBAAgB;AACtB,IAAM,qBAAqB,IAAI;AAW/B,IAAM,YAAY,CAAC,SAAyB,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAE1F,SAAS,MAAM,OAAe,OAAuB;AACnD,SAAO,GAAG,MAAM,SAAS,CAAC,EAAE,SAAS,QAAQ,GAAG,GAAG,CAAC;AACtD;AAGA,SAAS,UAAU,MAAgD;AACjE,MAAI,OAAO,WAAW,IAAI,KAAK,IAAK,QAAO,EAAE,QAAQ,IAAI,MAAM,KAAK;AACpE,WAAS,IAAI,KAAK,QAAQ,GAAG,GAAG,MAAM,IAAI,IAAI,KAAK,QAAQ,KAAK,IAAI,CAAC,GAAG;AACtE,UAAM,SAAS,KAAK,MAAM,GAAG,CAAC;AAC9B,UAAM,OAAO,KAAK,MAAM,IAAI,CAAC;AAC7B,QAAI,OAAO,WAAW,MAAM,KAAK,OAAO,OAAO,WAAW,IAAI,KAAK,IAAK,QAAO,EAAE,QAAQ,KAAK;AAAA,EAChG;AACA,QAAM,IAAI,MAAM,oDAAoD,IAAI,EAAE;AAC5E;AAEA,SAAS,OAAO,MAAc,MAAc,MAAiB,MAAsB;AACjF,QAAM,EAAE,QAAQ,KAAK,IAAI,UAAU,IAAI;AACvC,QAAM,QAAQ,OAAO,MAAM,KAAK;AAChC,QAAM,MAAM,MAAM,GAAG,MAAM;AAC3B,QAAM,MAAM,MAAM,MAAM,CAAC,GAAG,KAAK,OAAO;AACxC,QAAM,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,OAAO;AACrC,QAAM,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,OAAO;AACrC,QAAM,MAAM,MAAM,MAAM,EAAE,GAAG,KAAK,OAAO;AACzC,QAAM,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,OAAO;AACtC,QAAM,KAAK,IAAM,KAAK,GAAG;AACzB,QAAM,MAAM,MAAM,KAAK,OAAO;AAC9B,QAAM,MAAM,WAAW,KAAK,OAAO;AACnC,QAAM,MAAM,MAAM,KAAK,OAAO;AAE9B,QAAM,MAAM,QAAQ,KAAK,MAAM;AAC/B,QAAM,WAAW,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,MAAM,CAAC;AAC1D,QAAM,MAAM,GAAG,SAAS,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO;AACvE,SAAO;AACT;AAKA,eAAe,KAAK,MAAc,OAAO,IAAI,UAAU,IAAsB;AAC3E,QAAM,SAAS,MAAM,QAAQ,OAAO,KAAK,MAAM,IAAI,IAAI,IAAI,GACxD,IAAI,CAAC,UAAU,EAAE,MAAM,MAAM,SAAS,KAAK,UAAU,KAAK,EAAE,EAAE,EAC9D,KAAK,CAAC,GAAG,MAAM,OAAO,QAAQ,OAAO,KAAK,EAAE,OAAO,GAAG,OAAO,KAAK,EAAE,OAAO,CAAC,CAAC;AAChF,QAAM,UAAmB,CAAC;AAC1B,aAAW,QAAQ,OAAO;AACxB,UAAM,WAAW,OAAO,GAAG,IAAI,IAAI,KAAK,IAAI,KAAK,KAAK;AACtD,UAAM,OAAO,UAAU,GAAG,OAAO,IAAI,KAAK,OAAO,KAAK,KAAK;AAC3D,UAAM,WAAW,KAAK,MAAM,QAAQ;AACpC,UAAM,QAAQ,MAAM,MAAM,QAAQ;AAClC,QAAI,MAAM,YAAY,GAAG;AACvB,cAAQ,KAAK,EAAE,MAAM,UAAU,WAAW,MAAM,MAAM,KAAO,MAAM,EAAE,CAAC;AACtE,cAAQ,KAAK,GAAI,MAAM,KAAK,MAAM,UAAU,IAAI,CAAE;AAAA,IACpD,WAAW,MAAM,OAAO,GAAG;AACzB,cAAQ,KAAK;AAAA,QACX;AAAA,QACA;AAAA,QACA,WAAW;AAAA,QACX,MAAM,MAAM,OAAO,KAAQ,MAAQ;AAAA,QACnC,MAAM,MAAM;AAAA,MACd,CAAC;AAAA,IACH,OAAO;AACL,YAAM,IAAI;AAAA,QACR,iBAAiB,IAAI;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,eAAsB,aAAa,MAA+B;AAChE,QAAM,UAAU,MAAM,KAAK,IAAI;AAC/B,QAAM,QAAQ,QAAQ,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,MAAM,CAAC;AAChE,MAAI,QAAQ,eAAe;AACzB,UAAM,IAAI;AAAA,MACR,6BAA6B,KAAK,mCAAmC,aAAa;AAAA,IACpF;AAAA,EACF;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW;AACnB,YAAM,KAAK,OAAO,GAAG,MAAM,IAAI,KAAK,GAAG,KAAK,MAAM,IAAI,CAAC;AACvD;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;AAC7C,UAAM,KAAK,OAAO,MAAM,MAAM,QAAQ,QAAQ,KAAK,MAAM,IAAI,GAAG,OAAO;AACvE,UAAM,WAAW,QAAS,QAAQ,SAAS,SAAU;AACrD,QAAI,QAAS,OAAM,KAAK,OAAO,MAAM,OAAO,CAAC;AAAA,EAC/C;AACA,QAAM,KAAK,OAAO,MAAM,QAAQ,CAAC,CAAC;AAClC,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,WAAW,OAAe,OAAe,QAAwB;AACxE,QAAM,QAAQ,MAAM,SAAS,OAAO,QAAQ,MAAM;AAClD,QAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,SAAO,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,GAAG,EAAE,SAAS,MAAM;AACrE;AAEA,SAAS,UAAU,MAAsB;AACvC,SAAO,KAAK,QAAQ,YAAY,EAAE,EAAE,QAAQ,QAAQ,EAAE;AACxD;AAGO,SAAS,eAAe,KAAuB;AACpD,QAAM,UAAoB,CAAC;AAC3B,MAAI,WAA0B;AAC9B,MAAI,SAAS;AACb,SAAO,SAAS,SAAS,IAAI,QAAQ;AACnC,UAAM,QAAQ,IAAI,SAAS,QAAQ,SAAS,KAAK;AACjD,QAAI,MAAM,MAAM,CAAC,SAAS,SAAS,CAAC,EAAG;AACvC,UAAM,SAAS,OAAO,SAAS,WAAW,OAAO,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC;AAClE,UAAM,SAAS,MAAM,OAAO,CAAC,KAAK,MAAM,MAAM,OAAO,KAAK,OAAO,IAAI,MAAM,KAAO,OAAO,CAAC;AAC1F,QAAI,WAAW,OAAQ,OAAM,IAAI,MAAM,+CAA+C;AACtF,UAAM,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,EAAE,EAAE,KAAK,KAAK,KAAK,CAAC;AACxE,UAAM,OAAO,OAAO,aAAa,MAAM,GAAG,KAAK,EAAI;AACnD,UAAM,OAAO,IAAI,SAAS,SAAS,OAAO,SAAS,QAAQ,IAAI;AAC/D,cAAU,QAAQ,KAAK,KAAK,OAAO,KAAK,IAAI;AAC5C,QAAI,SAAS,KAAK;AAChB,iBAAW,WAAW,MAAM,GAAG,KAAK,MAAM;AAC1C;AAAA,IACF;AACA,QAAI,SAAS,KAAK;AAChB,YAAM,SAAS,KAAK,SAAS,MAAM,EAAE,MAAM,qBAAqB;AAChE,UAAI,SAAS,CAAC,EAAG,YAAW,OAAO,CAAC;AACpC;AAAA,IACF;AACA,QAAI,SAAS,IAAK;AAClB,UAAM,SAAS,WAAW,OAAO,KAAK,GAAG;AACzC,QAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,EAAE,SAAS,IAAI;AACzC,YAAM,IAAI;AAAA,QACR,6CAA6C,WAAW,OAAO,GAAG,GAAG,CAAC;AAAA,MACxE;AACF,UAAM,OACJ,aAAa,SAAS,GAAG,MAAM,IAAI,WAAW,OAAO,GAAG,GAAG,CAAC,KAAK,WAAW,OAAO,GAAG,GAAG;AAC3F,eAAW;AACX,YAAQ,KAAK,UAAU,IAAI,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAGA,eAAsB,WAAW,OAAsC;AACrE,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,MAAM,KAAK;AAAA,EAC3B,QAAQ;AACN,UAAM,IAAI,MAAM,WAAW,KAAK,kBAAkB;AAAA,EACpD;AACA,MAAI;AACJ,MAAI,MAAM,YAAY,GAAG;AACvB,UAAM,MAAM,aAAa,KAAK;AAAA,EAChC,WAAW,MAAM,OAAO,KAAK,mBAAmB,KAAK,KAAK,GAAG;AAC3D,QAAI,MAAM,OAAO;AACf,YAAM,IAAI;AAAA,QACR,GAAG,KAAK,OAAO,MAAM,IAAI,kCAAkC,2BAA2B;AAAA,MACxF;AACF,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI;AACF,YAAM,WAAW,MAAM,EAAE,iBAAiB,mBAAmB,CAAC;AAAA,IAChE,QAAQ;AACN,YAAM,IAAI;AAAA,QACR,WAAW,KAAK,sDAAsD,kBAAkB;AAAA,MAC1F;AAAA,IACF;AAAA,EACF,OAAO;AACL,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AAGA,QAAM,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC;AAC1C,MAAI;AACJ,MAAI;AACF,cAAU,eAAe,GAAG;AAAA,EAC9B,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,WAAW,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,GAAG;AAAA,EAChG;AACA,SAAO;AAAA,IACL,QAAQ,UAAU,GAAG;AAAA,IACrB,YAAY,UAAU,OAAO;AAAA,IAC7B,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACF;AAGO,SAAS,qBAAqB,SAAmB,UAA8B;AACpF,SAAO,SAAS,OAAO,CAAC,SAAS;AAC/B,UAAM,SAAS,UAAU,IAAI;AAC7B,WAAO,CAAC,QAAQ,KAAK,CAAC,UAAU,UAAU,UAAU,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC;AAAA,EACpF,CAAC;AACH;AAOO,IAAM,eAAe,CAC1B,KACA,SACA,YAEA,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC/B,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAMA,WAAU,OAAO,aAAa,WAAW,eAAe;AAC9D,QAAM,MAAMA;AAAA,IACV;AAAA,IACA,EAAE,QAAQ,OAAO,SAAS,EAAE,GAAG,SAAS,kBAAkB,OAAO,QAAQ,UAAU,EAAE,EAAE;AAAA,IACvF,CAAC,aAAa;AACZ,eAAS,GAAG,SAAS,MAAM;AAC3B,YAAM,SAAS,SAAS;AACxB,UAAI,WAAW,UAAa,UAAU,OAAO,SAAS,KAAK;AACzD,iBAAS,GAAG,OAAO,OAAO;AAC1B,iBAAS,OAAO;AAAA,MAClB,OAAO;AACL,iBAAS,OAAO;AAChB,YAAI,QAAQ;AACZ,eAAO,IAAI,MAAM,gCAAgC,OAAO,MAAM,CAAC,IAAI,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACA,MAAI,GAAG,SAAS,MAAM;AACtB,MAAI,IAAI,OAAO;AACjB,CAAC;;;AChQH,SAAS,cAAAC,aAAY,kBAAkB;AACvC,SAAS,OAAO,YAAAC,WAAU,WAAW,IAAI,cAAc;AACvD,SAAS,eAAe;AACxB,SAAS,QAAAC,aAAY;AAarB,eAAsB,gBACpB,QACA,OACA,UACA,QACe;AACf,QAAM,WAAWC,YAAW,QAAQ,EACjC,OAAO,KAAK,UAAU,CAAC,QAAQ,UAAU,OAAO,UAAU,CAAC,CAAC,EAC5D,OAAO,KAAK;AACf,QAAM,MAAMC,MAAK,QAAQ,GAAG,aAAa,cAAc;AACvD,QAAM,aAAaA,MAAK,KAAK,GAAG,QAAQ,OAAO;AAC/C,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjD,MAAI;AACJ,MAAI;AACF,UAAM,QAAiB,KAAK,MAAM,MAAMC,UAAS,YAAY,MAAM,CAAC;AACpE,QACE,OAAO,UAAU,YACjB,CAAC,SACD,EAAE,cAAc,UAChB,OAAO,MAAM,aAAa;AAE1B,YAAM,IAAI,MAAM,kCAAkC;AACpD,eAAW,MAAM;AAAA,EACnB,SAAS,OAAO;AACd,QAAI,EAAE,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAAW,OAAM;AAAA,EACrF;AACA,QAAM,YAAsB,CAAC;AAC7B,WAAS,SAAS,GAAG,SAAS,OAAO,OAAO,UAAU;AACpD,cAAU;AAAA,MACRF,YAAW,QAAQ,EAChB,OAAO,OAAO,QAAQ,SAAS,QAAQ,SAAS,qBAAqB,CAAC,EACtE,OAAO,KAAK;AAAA,IACjB;AACF,QAAM,OAAO;AAAA,IACX,QAAQ,OAAO;AAAA,IACf,YAAY,OAAO;AAAA,IACnB,OAAO,OAAO;AAAA,IACd;AAAA,EACF;AACA,QAAM,WAAW,GAAG,QAAQ;AAC5B,QAAM,QAAQ,MAAM,QAAe,QAAQ,OAAO,QAAQ,UAAU;AAAA,IAClE,GAAG;AAAA,IACH;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,MAAI,MAAM,WAAW,aAAa;AAChC,UAAM,YAAY,GAAG,UAAU,IAAI,WAAW,CAAC;AAC/C,UAAM,UAAU,WAAW,KAAK,UAAU,EAAE,UAAU,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACxF,UAAM,OAAO,WAAW,UAAU;AAClC,eAAW,QAAQ,MAAM,OAAO;AAC9B,YAAM,UAAU,KAAK,SAAS,KAAK;AAGnC,eAAS,UAAU,KAAK,WAAW;AACjC,YAAI;AACF,gBAAM;AAAA,YACJ,KAAK;AAAA,YACL,KAAK;AAAA,YACL,OAAO,QAAQ,SAAS,QAAQ,SAAS,qBAAqB;AAAA,UAChE;AACA;AAAA,QACF,SAAS,OAAO;AACd,cAAI,EAAE,iBAAiB,SAAS,UAAU,UAAU,YAAY,EAAG,OAAM;AACzE,kBAAQ;AAAA,YACN,wBAAwB,KAAK,MAAM,6BAA6B,UAAU,CAAC;AAAA,UAC7E;AACA,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,MAAM,KAAK,OAAO,CAAC;AAAA,QACxE;AAAA,MACF;AAAA,IACF;AACA,UAAM,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAAA,MAC7C,GAAG;AAAA,MACH,UAAU,MAAM;AAAA,MAChB,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,GAAG,YAAY,EAAE,OAAO,KAAK,CAAC;AACtC;","names":["request","createHash","readFile","join","createHash","join","readFile"]}

package/dist/{chunk-KD7VGZX7.js → chunk-UZZ5OHXT.js}

@@ -1,27 +1,27 @@
 import { createRequire as __cr } from "module"; import { fileURLToPath as __fup } from "url"; import { dirname as __dn } from "path"; const require = __cr(import.meta.url); const __filename = __fup(import.meta.url); const __dirname = __dn(__filename);
 import {
   resolveApplicationId
-} from "./chunk-YFXTMFYB.js";
+} from "./chunk-V6OC2WQL.js";
 import {
   printServedGuide
-} from "./chunk-YV4RASGX.js";
+} from "./chunk-W43YGZOP.js";
 import {
   apiRequest,
   getArgValues,
   readStdin,
   readTextOrFile
-} from "./chunk-72Y65NWI.js";
+} from "./chunk-WY4R4IL5.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-IIDQM4MY.js";
+} from "./chunk-BMFD4OPC.js";
 import {
   writeRawOutput
-} from "./chunk-T6ZNIMI4.js";
+} from "./chunk-LRIP5IQD.js";
 import {
   formatProofNone
-} from "./chunk-EYHJ5FIA.js";
+} from "./chunk-C6SNLHVE.js";
 
 // src/proofs.ts
 import process from "process";
@@ -420,4 +420,4 @@ export {
   resolveRepo,
   parseRepository
 };
-//# sourceMappingURL=chunk-KD7VGZX7.js.map
+//# sourceMappingURL=chunk-UZZ5OHXT.js.map