@sverka/arena 0.2.28 → 0.2.30

package/dist/bin.d.mts

@@ -40,4 +40,5 @@ export declare function publishRetryHint(opts: {
 /** Entry point — exported for tests; bin calls it with process.argv. */
 export declare function main(argv: readonly string[], io?: Io): Promise<number>;
 //#endregion
+export {};
 //# sourceMappingURL=bin.d.mts.map

package/dist/bin.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as writeAggregateReport, I as runArena, M as resolveAdapter, O as renderReport, _ as openRegistry, a as buildBoard, d as publishFile, f as publishResult, i as resolvePack, j as loadArenaConfig, k as ArenaError, n as lintPack, o as renderBoard, s as renderBoardHtml, t as initPack, x as reindexRegistry } from "./pack-DoL1QL1y.mjs";
+import { D as writeAggregateReport, I as runArena, M as resolveAdapter, O as renderReport, _ as openRegistry, a as buildBoard, d as publishFile, f as publishResult, i as resolvePack, j as loadArenaConfig, k as ArenaError, n as lintPack, o as renderBoard, s as renderBoardHtml, t as initPack, x as reindexRegistry } from "./pack-CwbTaqv1.mjs";
 import { readFile } from "node:fs/promises";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { delimiter, join, resolve } from "node:path";

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/adapters/devin.ts","../src/acp.ts","../src/runner.ts","../src/judge.ts","../src/config.ts","../src/report.ts","../src/trace-report.ts","../src/aggregate-report.ts","../src/registry.ts","../src/publish.ts","../src/board.ts","../src/pack.ts"],"mappings":";;;;;;;;;UACiB;EACf;EACA,MAAM,QAAQ,mBAAmB;;UAGlB;EACf,OAAO;EACP;EACA,SAAS;EACT;EACA,MAAM;;UAGS;EACf,IAAI,gBAAgB,oBAAoB,QAAQ;EAChD;;;UAIe;EACf;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;;EAEA;;EAEA;;;;;EAKA;;;;EAIA;;;EAGA,SAAS;;;UAIM;EACf;EACA;EACA;;;UAIe;EACf,OAAO;EACP,OAAO;EACP,QAAQ;EACR,SAAS;;EAET;EACA;EACA;;EAEA,QAAQ;;;;;EAKR;;;UAIe;;EAEf,OAAO;;EAEP,OAAO;;EAEP;;EAEA;;EAEA;;;UAIe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA,SAAS;EACT,OAAO;;EAEP;EACA;;EAEA,cAAc;EACd;;EAEA,UAAU;;;UAIK;EACf;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA,OAAO;EACP;IACE;IACA;IACA;IACA;;;;UAKa;EACf;EACA;EACA;EACA;EACA,YAAY;EACZ,eAAe;EACf;;;UAIe;EACf;EACA,WAAW;EACX;;EAEA;;;UAIe;EACf;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;;EAEA;;;UAIe;EACf;EACA;IACE;IACA;IACA;IACA;IACA;;EAEF,SAAS;EACT,YAAY;;EAEZ,UAAU;;;UAIK;EACf;EACA;EACA;;EAEA,aAAa;;EAEb;;;UAIe;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;;EAEA;;;;;UC/MQ;EACR;EACA;EACA;EACA;EACA;IACE;IACA;MACE;MACA;;;;;UAMI;EACR;EACA;EACA;EACA;;;UAIQ;EACR;EACA;EACA;IACE;IACA;IACA;;EAEF,eAAe;EACf,OAAO;;;wBAMO;;wBA+MA,cAAc,YAAY;;wBAmC1B,mBAAmB,OAAO;EACxC;EACA;EACA;EACA;;;;;;;;;;;wBA0DoB,eACpB,mBACA,SAAS,iBACR;;;;;;;;;;;;qBAsHU,wBAAwB;WAC1B;EAET,MAAM,QAAQ,mBAAmB;;;;;KCpevB,kBAAkB,QAC5B;EACE;;;KAIQ,wBAAwB,QAClC;EACE;;;;;;;;;;;;wBA2EY,YAAY,QAAQ,mBAAmB;;;;;;;;wBAgBvC,2BAA2B,IAAI,qBAC7C,IAAI,0BACJ,IAAI;;;;;;;;;;;;;;;wBAsFgB,cACpB,MAAM,cACN,mBACA,gBACA,mBACA,cAAc,QAAQ,iBAAiB,6BACvC,gBAAgB,QAAQ,uBAAuB,6BAC/C,aAAa,6BACZ,QAAQ;;;;;;;;;;;;;wBC3KK,mBAAmB,SAAS,iBAAiB;;;;;;;;;wBA0BvC,SAAS,QAAQ,cAAc,QAAQ;;;;;;;;wBA2mB7C,iBACd,SAAS,aACT,SAAS,GAAG,uBACZ,iBACC;;;;;;;;;;wBAoIa,gBACd,SAAS,aACT,OAAO,SACN;;;;qBC5yBU;;;;;;;;;wBAkBG,iBACd,MAAM,MACN,mBACA,QAAQ,aACR;;;;;;;;wBA0Cc,mBACd,kBACA,kBACA,KAAK,YACJ;;;;;wBAoDmB,SACpB,KAAK,WACL,MAAM,MACN,QAAQ,aACR,mBACC,QAAQ;;;;;;;wBAmCW,aACpB,SAAS,aACT,OAAO,QACP,QAAQ,cACP,QAAQ;;;;;;;;;;;;wBAoCK,cACd,UAAU,WACV,WAAW,YACV;;;KCnNS;qBAUC,mBAAmB;WAKnB,MAAM;WAJC;EAGhB,YAAA,iBACS,MAAM,gBACf;;wBAgBY,eAAe,eAAe;cA4CxC,kBAAgB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBpB,EAAA,KAAA;;KAGU,kBAAkB,EAAE,aAAa;;wBAG7B,aAAa,QAAQ,kBAAkB;;;;;wBAUjC,gBACpB,qBACC,QAAQ;;;;wBC1EK,aAAa,QAAQ;;;;KClChC;;UASY;EACf;EACA,MAAM;EACN;EACA;;EAEA;;EAEA;;;;;;;wBAuCc,eAAe,OAAO,YAAY;;;;;;;;wBA6FlC,iBACd,QAAQ,WACR;EAAS;EAAgB;IACxB;;;;;wBAgEa,WAAW,kBAAkB,eAAe;;wBAsB5C,iBACd,QAAQ,WACR,oBACA,UAAU;;;;wBC9OI,UAAU,QAAQ,WAAW;;;;;wBAiF7B,iBAAiB,QAAQ,cAAc;;;;;;;wBA4BvC,oBAAoB,QAAQ,cAAc;;wBA4E1C,qBACd,QAAQ,aACR,oBACA,UAAU;;;UCnLK;WACN;;WAEA;WACA;aAAkB;aAA0B;;WAC5C;aACE;aACA;aACA;aACA;;WAEF;;UAGM;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,gBAAgB;;qBAmBd,qBAAmB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;GAU9B,EAAA,KAAA;;wBAGc,mBAAmB,eAAe;;wBA6BlC,WAAW,KAAK,eAAe;;wBAiB/B,WAAW;;KAOf;EAAwB;EAAc;;UAEjC;;EAEf,kBAAkB;;EAElB;;UAGe;EACf;EACA;;EAEA;;UAGe;EACf,QAAQ,QAAQ,eAAe,OAAO,iBAAiB;EACvD,KAAK,QAAQ,YAAY,QAAQ;;UA+ElB;;EAEf;;EAEA;;EAEA;;EAEA;;wBA6Sc,kBAAkB,KAAK,oBAAoB;;UAU1C;EACf,UAAU;IACR;IACA;IACA,eAAe;MACb;EACJ,WAAW;IAAS;IAAgB;MAAgB;IAClD;;EAEF,eAAe;IACb;IACA;IACA;MACE;IACF;MAAa;;IACb;IACA;;;UAIa;EACf;;EAEA;;;EAGA,SAAS;;wBAgJK,iBAAiB,KAAK,mBAAmB;;wBAUzC,mBAAmB,cAAc;;;;;wBAuI3B,aACpB,UAAU,eACV;EAAiB,KAAK;EAAe,OAAO;KAC5C,kBACC;;;;;wBAoGmB,gBACpB,UAAU,gBACT;EAAU;;;;;;;;wBAsBG,aACd,aACA;EAAQ;EAAgB;EAAc,SAAS;IAC9C;;;;;;wBAkCmB,mBACpB,aACA;EAAQ;EAAgB;IACvB;;;UCz/Bc;;EAEf;;EAEA;;EAEA;;EAEA;;;EAGA,UAAU;;EAEV;;EAEA,SAAS;IAAQ;IAAe;KAAqB;;;wBAIvC;;;;;wBA2GA,cACd,QAAQ,aACR,KAAK,iBACJ;;;;;wBAsCmB,cACpB,QAAQ,aACR,UAAU,eACV,KAAK,iBACJ;;;;;;wBAkBmB,YACpB,cACA,UAAU,eACV,KAAK,iBACJ;;;UC3Mc;WACN;WACA;;WAEA;WACA;WACA;WACA;;WAEA;;UAGM;WACN;WACA;WACA;WACA;WACA,eAAe;;UAuBT;;EAEf;;EAEA,MAAM;;;;;;;wBAQQ,WACd,kBAAkB,iBAClB,OAAM,oBACL;;wBAiHa,UAAU;;wBA6BV,YAAY,kBAAkB;;;;;;wBA6D9B,gBACd,kBAAkB,eAClB;EAAQ;EAAgB;;;;UCjNT;WACN;WACA;WACA;;UAGM;WACN;WACA;WACA;;WAEA;WACA,gBAAgB;WAChB,UAAU;;UAGJ;WACN;WACA;;UAKD;;EAER;;;wBAoFoB,SACpB,aACA,OAAM,cACL,QAAQ;;;;;wBAkFW,SAAS,cAAc,QAAQ;;wBAwF/B,SAAS,aAAa,eAAe;UAkH1C,2BAA2B;;EAE1C;;EAEA;;;;;;;;wBASoB,YACpB,aACA,OAAM,qBACL,QAAQ"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/adapters/devin.ts","../src/acp.ts","../src/runner.ts","../src/judge.ts","../src/config.ts","../src/report.ts","../src/trace-report.ts","../src/aggregate-report.ts","../src/registry.ts","../src/publish.ts","../src/board.ts","../src/pack.ts"],"mappings":";;;;;;;;;UACiB;EACf;EACA,MAAM,QAAQ,mBAAmB;;UAGlB;EACf,OAAO;EACP;EACA,SAAS;EACT;EACA,MAAM;;UAGS;EACf,IAAI,gBAAgB,oBAAoB,QAAQ;EAChD;;;UAIe;EACf;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;;EAEA;;EAEA;;;;;EAKA;;;;EAIA;;;EAGA,SAAS;;;UAIM;EACf;EACA;EACA;;;UAIe;EACf,OAAO;EACP,OAAO;EACP,QAAQ;EACR,SAAS;;EAET;EACA;EACA;;EAEA,QAAQ;;;;;EAKR;;;UAIe;;EAEf,OAAO;;EAEP,OAAO;;EAEP;;EAEA;;EAEA;;;UAIe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA,SAAS;EACT,OAAO;;EAEP;EACA;;EAEA,cAAc;EACd;;EAEA,UAAU;;;UAIK;EACf;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf;EACA;EACA,OAAO;EACP;IACE;IACA;IACA;IACA;;;;UAKa;EACf;EACA;EACA;EACA;EACA,YAAY;EACZ,eAAe;EACf;;;UAIe;EACf;EACA,WAAW;EACX;;EAEA;;;UAIe;EACf;EACA;;;UAIe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;;EAEA;;EAEA;;;UAIe;EACf;EACA;IACE;IACA;IACA;IACA;IACA;;EAEF,SAAS;EACT,YAAY;;EAEZ,UAAU;;;UAIK;EACf;EACA;EACA;;EAEA,aAAa;;EAEb;;;UAIe;;EAEf;EACA;;EAEA;EACA;EACA;EACA;EACA;;EAEA;;;;;UC/MQ;EACR;EACA;EACA;EACA;EACA;IACE;IACA;MACE;MACA;;;;;UAMI;EACR;EACA;EACA;EACA;;;UAIQ;EACR;EACA;EACA;IACE;IACA;IACA;;EAEF,eAAe;EACf,OAAO;;;wBAMO;;wBA+MA,cAAc,YAAY;;wBAmC1B,mBAAmB,OAAO;EACxC;EACA;EACA;EACA;;;;;;;;;;;wBA0DoB,eACpB,mBACA,SAAS,iBACR;;;;;;;;;;;;qBAsHU,wBAAwB;WAC1B;EAET,MAAM,QAAQ,mBAAmB;;;;;KCpevB,kBAAkB,QAC5B;EACE;;;KAIQ,wBAAwB,QAClC;EACE;;;;;;;;;;;;wBA2EY,YAAY,QAAQ,mBAAmB;;;;;;;;wBAgBvC,2BAA2B,IAAI,qBAC7C,IAAI,0BACJ,IAAI;;;;;;;;;;;;;;;wBAsFgB,cACpB,MAAM,cACN,mBACA,gBACA,mBACA,cAAc,QAAQ,iBAAiB,6BACvC,gBAAgB,QAAQ,uBAAuB,6BAC/C,aAAa,6BACZ,QAAQ;;;;;;;;;;;;;wBC3KK,mBAAmB,SAAS,iBAAiB;;;;;;;;;wBA0BvC,SAAS,QAAQ,cAAc,QAAQ;;;;;;;;wBA2mB7C,iBACd,SAAS,aACT,SAAS,GAAG,uBACZ,iBACC;;;;;;;;;;wBAoIa,gBACd,SAAS,aACT,OAAO,SACN;;;;qBC5yBU;;;;;;;;;wBAkBG,iBACd,MAAM,MACN,mBACA,QAAQ,aACR;;;;;;;;wBA0Cc,mBACd,kBACA,kBACA,KAAK,YACJ;;;;;wBAoDmB,SACpB,KAAK,WACL,MAAM,MACN,QAAQ,aACR,mBACC,QAAQ;;;;;;;wBAmCW,aACpB,SAAS,aACT,OAAO,QACP,QAAQ,cACP,QAAQ;;;;;;;;;;;;wBAoCK,cACd,UAAU,WACV,WAAW,YACV;;;KCnNS;qBAUC,mBAAmB;WAKnB,MAAM;WAJC;EAGhB,YAAA,iBACS,MAAM,gBACf;;wBAgBY,eAAe,eAAe;cA4CxC,kBAAgB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkBpB,EAAA,KAAA;;KAGU,kBAAkB,EAAE,aAAa;;wBAG7B,aAAa,QAAQ,kBAAkB;;;;;wBAUjC,gBACpB,qBACC,QAAQ;;;;wBC1EK,aAAa,QAAQ;;;;KClChC;;UASY;EACf;EACA,MAAM;EACN;EACA;;EAEA;;EAEA;;;;;;;wBAuCc,eAAe,OAAO,YAAY;;;;;;;;wBA6FlC,iBACd,QAAQ,WACR;EAAS;EAAgB;IACxB;;;;;wBAgEa,WAAW,kBAAkB,eAAe;;wBAsB5C,iBACd,QAAQ,WACR,oBACA,UAAU;;;;wBC9OI,UAAU,QAAQ,WAAW;;;;;wBAiF7B,iBAAiB,QAAQ,cAAc;;;;;;;wBA4BvC,oBAAoB,QAAQ,cAAc;;wBA4E1C,qBACd,QAAQ,aACR,oBACA,UAAU;;;UCnLK;WACN;;WAEA;WACA;aAAkB;aAA0B;;WAC5C;aACE;aACA;aACA;aACA;;WAEF;;UAGM;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,gBAAgB;;qBAmBd,qBAAmB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;GAU9B,EAAA,KAAA;;wBAGc,mBAAmB,eAAe;;wBA6BlC,WAAW,KAAK,eAAe;;wBAiB/B,WAAW;;KAOf;EAAwB;EAAc;;UAEjC;;EAEf,kBAAkB;;EAElB;;UAGe;EACf;EACA;;EAEA;;UAGe;EACf,QAAQ,QAAQ,eAAe,OAAO,iBAAiB;EACvD,KAAK,QAAQ,YAAY,QAAQ;;UA+ElB;;EAEf;;EAEA;;EAEA;;EAEA;;wBAqTc,kBAAkB,KAAK,oBAAoB;;UAU1C;EACf,UAAU;IACR;IACA;IACA,eAAe;MACb;EACJ,WAAW;IAAS;IAAgB;MAAgB;IAClD;;EAEF,eAAe;IACb;IACA;IACA;MACE;IACF;MAAa;;IACb;IACA;;;UAIa;EACf;;EAEA;;;EAGA,SAAS;;wBAgJK,iBAAiB,KAAK,mBAAmB;;wBAUzC,mBAAmB,cAAc;;;;;wBAuI3B,aACpB,UAAU,eACV;EAAiB,KAAK;EAAe,OAAO;KAC5C,kBACC;;;;;wBAoGmB,gBACpB,UAAU,gBACT;EAAU;;;;;;;;wBAsBG,aACd,aACA;EAAQ;EAAgB;EAAc,SAAS;IAC9C;;;;;;wBAkCmB,mBACpB,aACA;EAAQ;EAAgB;IACvB;;;UCjgCc;;EAEf;;EAEA;;EAEA;;EAEA;;;EAGA,UAAU;;EAEV;;EAEA,SAAS;IAAQ;IAAe;KAAqB;;;wBAIvC;;;;;wBA2GA,cACd,QAAQ,aACR,KAAK,iBACJ;;;;;wBAsCmB,cACpB,QAAQ,aACR,UAAU,eACV,KAAK,iBACJ;;;;;;wBAkBmB,YACpB,cACA,UAAU,eACV,KAAK,iBACJ;;;UC3Mc;WACN;WACA;;WAEA;WACA;WACA;WACA;;WAEA;;UAGM;WACN;WACA;WACA;WACA;WACA,eAAe;;UAuBT;;EAEf;;EAEA,MAAM;;;;;;;wBAQQ,WACd,kBAAkB,iBAClB,OAAM,oBACL;;wBAiHa,UAAU;;wBA6BV,YAAY,kBAAkB;;;;;;wBA6D9B,gBACd,kBAAkB,eAClB;EAAQ;EAAgB;;;;UCjNT;WACN;WACA;WACA;;UAGM;WACN;WACA;WACA;;WAEA;WACA,gBAAgB;WAChB,UAAU;;UAGJ;WACN;WACA;;UAKD;;EAER;;;wBAoFoB,SACpB,aACA,OAAM,cACL,QAAQ;;;;;wBAkFW,SAAS,cAAc,QAAQ;;wBAwF/B,SAAS,aAAa,eAAe;UAkH1C,2BAA2B;;EAE1C;;EAEA;;;;;;;;wBASoB,YACpB,aACA,OAAM,qBACL,QAAQ"}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as defineConfig, B as judgeAllRuns, C as resultPath, D as writeAggregateReport, E as runStepId, F as pluginCombinations, G as extractUsageTokens, H as parseJudgeResponse, I as runArena, J as createPermissionHandler, K as installPlugins, L as DEFAULT_JUDGE_PROMPT, M as resolveAdapter, N as aggregateResults, O as renderReport, P as computeAnalysis, R as buildJudgePrompt, S as resolveRegistryDir, T as arenaResultToEvents, U as DevinAdapter, V as judgeRun, W as countLlmCalls, X as sanitizeEnv, Y as runAcpSession, _ as openRegistry, a as buildBoard, b as publishBatch, c as sparkline, d as publishFile, f as publishResult, g as createS3Registry, h as createGitRegistry, i as resolvePack, j as loadArenaConfig, k as ArenaError, l as explodeResult, m as createFileRegistry, n as lintPack, o as renderBoard, p as arenaResultV1Schema, q as transcriptDir, r as loadPack, s as renderBoardHtml, t as initPack, u as newRunId, v as parseArenaResultV1, w as arenaResultGraph, x as reindexRegistry, y as promptHash, z as compareCombos } from "./pack-DoL1QL1y.mjs";
+import { A as defineConfig, B as judgeAllRuns, C as resultPath, D as writeAggregateReport, E as runStepId, F as pluginCombinations, G as extractUsageTokens, H as parseJudgeResponse, I as runArena, J as createPermissionHandler, K as installPlugins, L as DEFAULT_JUDGE_PROMPT, M as resolveAdapter, N as aggregateResults, O as renderReport, P as computeAnalysis, R as buildJudgePrompt, S as resolveRegistryDir, T as arenaResultToEvents, U as DevinAdapter, V as judgeRun, W as countLlmCalls, X as sanitizeEnv, Y as runAcpSession, _ as openRegistry, a as buildBoard, b as publishBatch, c as sparkline, d as publishFile, f as publishResult, g as createS3Registry, h as createGitRegistry, i as resolvePack, j as loadArenaConfig, k as ArenaError, l as explodeResult, m as createFileRegistry, n as lintPack, o as renderBoard, p as arenaResultV1Schema, q as transcriptDir, r as loadPack, s as renderBoardHtml, t as initPack, u as newRunId, v as parseArenaResultV1, w as arenaResultGraph, x as reindexRegistry, y as promptHash, z as compareCombos } from "./pack-CwbTaqv1.mjs";
 import { createHtmlRenderer } from "@sverka/reporter";
 //#region src/trace-report.ts
 function weight(kind) {

package/dist/{pack-DoL1QL1y.mjs → pack-CwbTaqv1.mjs}

@@ -1902,15 +1902,38 @@ function writeAggregateReport(result, outputPath, context) {
 * deliberately not exported from the package index.
 */
 const MAX_BUFFER = 8388608;
+/**
+* Env for a `git` child.
+*
+* Arena children have no answerable tty — a credential prompt is always a
+* hang, so prompting is disabled unconditionally (not overridable via
+* `opts.env`). `GIT_ASKPASS` must be the empty string, not unset: git
+* falls back to `core.askpass`/`SSH_ASKPASS` only when the var is absent.
+*
+* ssh has its own askpass helper and its own prompt path, which git's
+* settings do not cover — an ssh:// or scp-style remote would prompt for
+* a passphrase on the inherited tty. `BatchMode` makes ssh fail fast
+* instead; an explicit `GIT_SSH_COMMAND` wins, the caller knows what it
+* needs.
+*/
+function childEnv(opts) {
+	const env = {
+		...process.env,
+		...opts.env,
+		GIT_TERMINAL_PROMPT: "0",
+		GIT_ASKPASS: "",
+		SSH_ASKPASS: "",
+		SSH_ASKPASS_REQUIRE: "never"
+	};
+	if (env["GIT_SSH_COMMAND"] === void 0) env["GIT_SSH_COMMAND"] = "ssh -oBatchMode=yes";
+	return env;
+}
 /** Run `git <args>`; resolves with the exit code, never rejects on non-zero. */
 function git(args, opts = {}) {
 	return new Promise((resolve, reject) => {
 		execFile("git", [...args], {
 			cwd: opts.cwd,
-			env: {
-				...process.env,
-				...opts.env
-			},
+			env: childEnv(opts),
 			maxBuffer: MAX_BUFFER
 		}, (error, stdout, stderr) => {
 			if (error !== null && typeof error.code !== "number") {
@@ -1925,14 +1948,47 @@ function git(args, opts = {}) {
 		});
 	});
 }
+/**
+* Replace URL userinfo with `<redacted>` — `https://user:TOKEN@host`
+* leaks the token into argv and any stderr that echoes it (CWE-209).
+* scp-style `git@host:path` carries no credential and is left alone.
+*
+* A scan, not a regex: the obvious pattern (`scheme://[^/]*@`) backtracks
+* quadratically on a long run of `://` — CodeQL's js/polynomial-redos
+* flags it, and the input is attacker-influenced (a remote URL, a git
+* message).
+*/
+function redactUrl(value) {
+	const SEP = "://";
+	let out = "";
+	let i = 0;
+	while (i < value.length) {
+		const sep = value.indexOf(SEP, i);
+		if (sep === -1) {
+			out += value.slice(i);
+			break;
+		}
+		const userinfoStart = sep + 3;
+		const at = value.indexOf("@", userinfoStart);
+		const slash = value.indexOf("/", userinfoStart);
+		if (at === -1 || slash !== -1 && slash < at) {
+			out += value.slice(i, userinfoStart);
+			i = userinfoStart;
+			continue;
+		}
+		out += value.slice(i, userinfoStart) + "<redacted>@";
+		i = at + 1;
+	}
+	return out;
+}
 /** Args carrying credentials must never reach an error message (CWE-209). */
 function redactArgs(args) {
-	return args.map((a) => /authorization|bearer|credential|token=/i.test(a) ? "<redacted>" : a).join(" ");
+	return args.map((a) => /authorization|bearer|credential|token=/i.test(a) ? "<redacted>" : redactUrl(a)).join(" ");
 }
 /** Run `git <args>`; throws a plain Error with stderr context on non-zero. */
 async function gitOrThrow(args, opts = {}) {
 	const res = await git(args, opts);
-	if (res.code !== 0) throw new Error(`git ${redactArgs(args)} failed (exit ${res.code}): ${res.stderr.trim()}`);
+	if (res.code !== 0) throw new Error(`git ${redactArgs(args)} failed (exit ${res.code}): ${redactUrl(res.stderr.trim())}`);
 	return res;
 }
 //#endregion
@@ -2064,7 +2120,7 @@ function gitAuthEnv(cfg) {
 		GIT_CONFIG_VALUE_0: `AUTHORIZATION: bearer ${cfg.token}`
 	} : {};
 }
-const gitUnavailable = (cfg, dir) => (what, cause) => new ArenaError(`registry unavailable — ${what} (${cfg.url} → ${dir})`, "REGISTRY_UNAVAILABLE", cause);
+const gitUnavailable = (cfg, dir) => (what, cause) => new ArenaError(`registry unavailable — ${what} (${redactUrl(cfg.url)} → ${dir})`, "REGISTRY_UNAVAILABLE", cause);
 const checkouts = /* @__PURE__ */ new Map();
 /**
 * Clone-or-refresh a git registry checkout (memoized per dir). Soft on
@@ -2244,7 +2300,7 @@ function createGitTree(cfg) {
 			branch
 		], { env: auth });
 		if (res.code === 0) return;
-		if (!rebaseInProgress()) throw unavailable(`git pull --rebase failed`, res.stderr.trim());
+		if (!rebaseInProgress()) throw unavailable(`git pull --rebase failed`, redactUrl(res.stderr.trim()));
 		if (!await resolveRebaseConflicts().catch(() => false)) {
 			await git([
 				"-C",
@@ -2252,7 +2308,7 @@ function createGitTree(cfg) {
 				"rebase",
 				"--abort"
 			], { env: auth });
-			throw unavailable(`git pull --rebase failed`, res.stderr.trim());
+			throw unavailable(`git pull --rebase failed`, redactUrl(res.stderr.trim()));
 		}
 	}
 	async function push() {
@@ -2315,7 +2371,7 @@ function createGitTree(cfg) {
 				if (res.code !== 0) {
 					await pullRebase();
 					res = await push();
-					if (res.code !== 0) throw new ArenaError(`publish rejected — git push to '${cfg.url}' failed after rebase retry; results are preserved in the local checkout at ${dir}`, "PUBLISH_CONFLICT", res.stderr.trim());
+					if (res.code !== 0) throw new ArenaError(`publish rejected — git push to '${redactUrl(cfg.url)}' failed after rebase retry; results are preserved in the local checkout at ${dir}`, "PUBLISH_CONFLICT", redactUrl(res.stderr.trim()));
 				}
 			});
 		}
@@ -3330,4 +3386,4 @@ async function resolvePack(ref, opts = {}) {
 //#endregion
 export { defineConfig as A, judgeAllRuns as B, resultPath as C, writeAggregateReport as D, runStepId as E, pluginCombinations as F, extractUsageTokens as G, parseJudgeResponse as H, runArena as I, createPermissionHandler as J, installPlugins as K, DEFAULT_JUDGE_PROMPT as L, resolveAdapter as M, aggregateResults as N, renderReport as O, computeAnalysis as P, buildJudgePrompt as R, resolveRegistryDir as S, arenaResultToEvents as T, DevinAdapter as U, judgeRun as V, countLlmCalls as W, sanitizeEnv as X, runAcpSession as Y, openRegistry as _, buildBoard as a, publishBatch as b, sparkline as c, publishFile as d, publishResult as f, createS3Registry as g, createGitRegistry as h, resolvePack as i, loadArenaConfig as j, ArenaError as k, explodeResult as l, createFileRegistry as m, lintPack as n, renderBoard as o, arenaResultV1Schema as p, transcriptDir as q, loadPack as r, renderBoardHtml as s, initPack as t, newRunId as u, parseArenaResultV1 as v, arenaResultGraph as w, reindexRegistry as x, promptHash as y, compareCombos as z };
 
-//# sourceMappingURL=pack-DoL1QL1y.mjs.map
+//# sourceMappingURL=pack-CwbTaqv1.mjs.map