eval-quality 1.1.0 → 1.2.0

package/dist/adapters/command-line-adapter.d.ts

@@ -30,7 +30,19 @@ export type CommandMechanism = {
     readonly run: (request: CommandRunRequest, signal: AbortSignal) => Promise<CommandRunResult>;
     readonly readArtifact: (path: string, maxBytes: number) => Promise<ArtifactRead>;
 };
-/** Options first as `--{key}`, positionals after, both in the record's own key order. Exported for its own unit tests: this is the one place shell-injection safety is decided. */
+/**
+ * Options first as `--{key}`, positionals after, both in the record's own key
+ * order. Exported for its own unit tests: this is the one place
+ * shell-injection safety is decided.
+ *
+ * An array value is the repeatable spelling. A great many command-line tools
+ * accept an option more than once and collect the values (`--env-pass A
+ * --env-pass B`), and a channel record holds one value per key, so before this
+ * a caller could send exactly one. The single JSON token an array used to
+ * produce (`--env-pass ["A","B"]`) reaches no parser that understands it, so
+ * nothing can depend on the old spelling. An empty array emits nothing, the
+ * same as `false`: there is no value to pass.
+ */
 export declare function buildArgv(channels: CommandProbeRequest['channels']): string[];
 /**
  * The real mechanism: an actual child process, an actual file read. Exported,

package/dist/adapters/command-line-adapter.js

@@ -16,11 +16,13 @@
  * 2. `argument` and `option` build the argv the same way a well-behaved CLI
  *    parser reads one: options first as `--{key}` (a boolean `true` is a
  *    bare flag, `false` is omitted, anything else gets one value token),
- *    positionals after in the record's own key order. `environment` passes
- *    through as declared, plus the host's own `PATH` so a `target` naming a
- *    bare command still resolves; a declared `PATH` key wins over that
- *    default. `stdin` is written and the stream is closed; `absent` closes
- *    it with nothing written.
+ *    positionals after in the record's own key order. An array value is the
+ *    repeatable spelling: `--{key}` is emitted once per element, and an
+ *    array positional contributes one token per element. `environment`
+ *    passes through as declared, plus the host's own `PATH` so a `target`
+ *    naming a bare command still resolves; a declared `PATH` key wins over
+ *    that default. `stdin` is written and the stream is closed; `absent`
+ *    closes it with nothing written.
  * 3. `maxElapsedMs` and `maxOutputBytes` are enforced by this adapter, not
  *    borrowed from `AbortSignal`: exceeding either kills the process with
  *    `SIGKILL` and throws `budget-exhausted`, exactly as an HTTP cap does.
@@ -47,17 +49,37 @@ function stringifyScalar(value) {
         return String(value);
     return JSON.stringify(value);
 }
-/** Options first as `--{key}`, positionals after, both in the record's own key order. Exported for its own unit tests: this is the one place shell-injection safety is decided. */
+/**
+ * Options first as `--{key}`, positionals after, both in the record's own key
+ * order. Exported for its own unit tests: this is the one place
+ * shell-injection safety is decided.
+ *
+ * An array value is the repeatable spelling. A great many command-line tools
+ * accept an option more than once and collect the values (`--env-pass A
+ * --env-pass B`), and a channel record holds one value per key, so before this
+ * a caller could send exactly one. The single JSON token an array used to
+ * produce (`--env-pass ["A","B"]`) reaches no parser that understands it, so
+ * nothing can depend on the old spelling. An empty array emits nothing, the
+ * same as `false`: there is no value to pass.
+ */
 export function buildArgv(channels) {
     const optionTokens = [];
     for (const [key, value] of Object.entries(channels.option)) {
         if (value === false)
             continue;
+        if (Array.isArray(value)) {
+            for (const element of value) {
+                optionTokens.push(`--${key}`, stringifyScalar(element));
+            }
+            continue;
+        }
         optionTokens.push(`--${key}`);
         if (value !== true)
             optionTokens.push(stringifyScalar(value));
     }
-    const argumentTokens = Object.values(channels.argument).map(stringifyScalar);
+    const argumentTokens = Object.values(channels.argument).flatMap((value) => Array.isArray(value)
+        ? value.map(stringifyScalar)
+        : [stringifyScalar(value)]);
     return [...optionTokens, ...argumentTokens];
 }
 function buildEnv(declared) {

package/dist/index.d.ts

@@ -12,4 +12,4 @@ export type { ScoringPolicy } from './core/schemas/scoring-policy.ts';
 export type { SealedEvaluatorBrief } from './core/schemas/sealed-evaluator-brief.ts';
 export type { SealedRunRecord } from './core/schemas/sealed-run-record.ts';
 export type { FixtureReset, ManifestationWitness, SensitivityWitness, SensitivityWitnessLeg, WitnessChannel, WitnessInputs, } from './core/schemas/sensitivity-witness.ts';
-export declare const VERSION = "1.1.0";
+export declare const VERSION = "1.2.0";

package/dist/index.js

@@ -19,4 +19,4 @@
 // subpath, where AD-37 puts the conformance definition an adapter author
 // reads; the reference adapters stay at `eval-quality/adapters`.
 export * from './application/index.js';
-export const VERSION = '1.1.0';
+export const VERSION = '1.2.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eval-quality",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Compile disciplined Behavioral Evaluation Contracts and score their ability to catch known defects.",
   "author": "Murat Ozcan",
   "license": "Apache-2.0",