dsh-eval-guard 0.3.1 → 0.3.2

package/lib/index.js

@@ -1968,6 +1968,36 @@ var TaskService = class {
 	definition(taskId) {
 		return TASK_DEFINITIONS[taskId];
 	}
+	/** Extract a setup task's workspace.zip into the workspace root. */
+	extractMaterial(workspacePath) {
+		const zip = path.join(workspacePath, "workspace.zip");
+		if (!fs.existsSync(zip)) throw new Error("workspace.zip is missing");
+		const temp = fs.mkdtempSync(path.join(guardRoot(), "extract-"));
+		try {
+			execFileSync("unzip", [
+				"-q",
+				zip,
+				"-d",
+				temp
+			], { stdio: "pipe" });
+			const inner = path.join(temp, "workspace");
+			const source = fs.existsSync(inner) ? inner : temp;
+			for (const entry of fs.readdirSync(source)) {
+				const destination = path.join(workspacePath, entry);
+				if (fs.existsSync(destination)) fs.rmSync(destination, {
+					recursive: true,
+					force: true
+				});
+				fs.renameSync(path.join(source, entry), destination);
+			}
+			fs.rmSync(zip, { force: true });
+		} finally {
+			fs.rmSync(temp, {
+				recursive: true,
+				force: true
+			});
+		}
+	}
 	/** Start a non-blocking install. The settings page polls the returned job. */
 	startInstall(workspaceId, taskId, options = {}) {
 		const definition = TASK_DEFINITIONS[taskId];
@@ -1990,6 +2020,7 @@ var TaskService = class {
 		};
 		try {
 			fs.copyFileSync(this.materialZip(taskId), path.join(checked.path, "workspace.zip"));
+			if (definition.needsSetup) this.extractMaterial(checked.path);
 		} catch (error) {
 			return {
 				ok: false,
@@ -2126,6 +2157,7 @@ var TaskService = class {
 		};
 		try {
 			fs.copyFileSync(this.materialZip(taskId), path.join(checked.path, "workspace.zip"));
+			if (definition.needsSetup) this.extractMaterial(checked.path);
 			if (definition.prepare !== void 0) definition.prepare(checked.path);
 		} catch (error) {
 			return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-eval-guard",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "type": "module",
   "description": "Evaluation guard for DSH: workspace-only filesystem, no network/subagents, wall-clock limits, and task installation for the meow-ai-arena tank task.",
   "license": "MIT",