reeval 0.0.1

package/dist/egress-73SQfKdx.js

@@ -0,0 +1,619 @@
+import { t as UsageError } from "./errors-CSxfJ4qu.js";
+import { g as plannedSecrets } from "./environment-Mz7wvrtD.js";
+import { a as providerServedModel, i as providerModelResponses, n as providerEndpoints, r as providerHosts, s as resolveOpenCodeProvider } from "./opencode-providers-DZuD_oYt.js";
+import { t as InfraError } from "./types-C5vI3g1C.js";
+import { D as HARNESS_HOSTS, E as DOCKER_EGRESS, O as PACKAGE_HOSTS, et as run, tt as shellQuote } from "./src-DwwiVLqv.js";
+import { existsSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, win32 } from "node:path";
+import { randomUUID } from "node:crypto";
+import { spawn } from "node:child_process";
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+//#region src/harness/agents.ts
+const WEB_EVENTS = {
+	webSearch: "web-search",
+	webFetch: "web-fetch"
+};
+/** `harnessMetadata.cursorSdk.unreportedTools` as transcript event types. */
+function cursorUnreported(harnessMetadata) {
+	const tools = harnessMetadata?.cursorSdk?.unreportedTools;
+	return Array.isArray(tools) ? tools.flatMap((t) => WEB_EVENTS[t] ? [WEB_EVENTS[t]] : []) : [];
+}
+/** A Gemini API key's only request: `POST /v1beta/models/<model>:streamGenerateContent`. */
+const GEMINI_ENDPOINTS = [{
+	host: "generativelanguage.googleapis.com",
+	path: { regex: "^/v1beta/models/[^/]+:streamGenerateContent$" },
+	method: ["POST"]
+}];
+/** Goose's: the model call, and the model list it fetches with the key at the start of a turn. */
+const GOOSE_ENDPOINTS = [...GEMINI_ENDPOINTS, {
+	host: "generativelanguage.googleapis.com",
+	path: { regex: "^/v1beta/models$" },
+	method: ["GET"]
+}];
+/** The model a Gemini API request names in its URL. */
+const geminiServedModel = ({ host, path }) => host === "generativelanguage.googleapis.com" ? /^\/v1beta\/models\/([^/:]+):streamGenerateContent$/.exec(path)?.[1] : void 0;
+/** Cursor's key exchange: the only request the Cursor SDK sends the API key on. */
+const CURSOR_EXCHANGE = {
+	host: "api2.cursor.sh",
+	path: { exact: "/auth/exchange_user_api_key" },
+	method: ["POST"]
+};
+/** What Codex sends the key on: the Responses API. */
+const OPENAI_ENDPOINTS = [{
+	host: "api.openai.com",
+	path: { exact: "/v1/responses" },
+	method: ["POST"]
+}];
+/**
+* The model the Responses API says served a request, from its response: the dated snapshot, and
+* the reasoning effort Codex resolved for it, e.g. `gpt-5.4-mini-2026-03-17[effort=medium]`.
+*/
+const openaiServedModel = ({ host, path, responseModel, responseEffort }) => host === "api.openai.com" && path === "/v1/responses" && responseModel ? `${responseModel}${responseEffort ? `[effort=${responseEffort}]` : ""}` : void 0;
+/**
+* OpenCode on the model's provider (`anthropic/claude-haiku-4-5` is Anthropic's): its key, the
+* requests OpenCode sends it on, its hosts plus Exa's for web search, and the served model from
+* the URL (Gemini's API, Bedrock's) or the response body. Bedrock's hosts are its `AWS_REGION`'s.
+*/
+function opencodeForModel(model, env = process.env) {
+	const resolved = resolveOpenCodeProvider(model, env);
+	if ("error" in resolved) throw new InfraError(`opencode(): ${resolved.error}`);
+	const { provider } = resolved;
+	const modelResponses = providerModelResponses(provider);
+	return {
+		credential: provider.env,
+		endpoints: providerEndpoints(provider),
+		...modelResponses.length ? { modelResponses } : {},
+		servedModel: (request) => providerServedModel(provider, request),
+		hosts: [...providerHosts(provider), "mcp.exa.ai"]
+	};
+}
+/**
+* The variables besides its key that OpenCode's provider takes from the host, as they are:
+* Bedrock's `AWS_REGION` (default `us-east-1`); none for most providers.
+*/
+function opencodeVars(model, env = process.env) {
+	const resolved = resolveOpenCodeProvider(model, env);
+	if ("error" in resolved) throw new InfraError(`opencode(): ${resolved.error}`);
+	return resolved.vars;
+}
+/** Codex's `config.toml` `[mcp_servers]` shape. */
+function codexMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => {
+		if (s.transport === "sse") throw new InfraError(`Codex has no SSE MCP transport, so it can't use the ${name} server (mcp.sse): use mcp.http or mcp.stdio`);
+		return s.transport === "stdio" ? [name, {
+			command: s.command,
+			args: s.args,
+			env: s.env ?? {}
+		}] : [name, {
+			url: s.url,
+			http_headers: s.headers ?? {}
+		}];
+	}));
+}
+/** The `.mcp.json` shape. */
+function claudeMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => s.transport === "stdio" ? [name, {
+		type: "stdio",
+		command: s.command,
+		args: s.args,
+		env: s.env
+	}] : [name, {
+		type: s.transport,
+		url: s.url,
+		headers: s.headers
+	}]));
+}
+/** The Antigravity CLI's `mcp_config.json` shape: remote servers take `serverUrl`, not `url`. */
+function antigravityMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => s.transport === "stdio" ? [name, {
+		command: s.command,
+		args: s.args,
+		env: s.env
+	}] : [name, {
+		serverUrl: s.url,
+		headers: s.headers
+	}]));
+}
+/**
+* OpenCode's config shape (its `mcp.servers`), which the adapter sets `codemode: false` on;
+* 2.0.18 has no SSE transport.
+*/
+function opencodeMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => {
+		if (s.transport === "sse") throw new InfraError(`OpenCode has no SSE MCP transport, so it can't use the ${name} server (mcp.sse): use mcp.http or mcp.stdio`);
+		return s.transport === "stdio" ? [name, {
+			type: "local",
+			command: [s.command, ...s.args],
+			environment: s.env ?? {}
+		}] : [name, {
+			type: "remote",
+			url: s.url,
+			headers: s.headers ?? {},
+			oauth: false
+		}];
+	}));
+}
+/** Goose's extension shape (its `config.yaml`); it has no SSE transport. */
+function gooseMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => {
+		if (s.transport === "sse") throw new InfraError(`Goose has no SSE MCP transport, so it can't use the ${name} server (mcp.sse): use mcp.http or mcp.stdio`);
+		return s.transport === "stdio" ? [name, {
+			type: "stdio",
+			cmd: s.command,
+			args: s.args,
+			envs: s.env ?? {}
+		}] : [name, {
+			type: "streamable_http",
+			uri: s.url,
+			headers: s.headers ?? {}
+		}];
+	}));
+}
+/** The Cursor SDK's `McpServerConfig` shape. */
+function cursorMcpServers(servers) {
+	return Object.fromEntries(Object.entries(servers).map(([name, s]) => s.transport === "stdio" ? [name, {
+		type: "stdio",
+		command: s.command,
+		args: s.args,
+		env: s.env
+	}] : [name, {
+		type: s.transport,
+		url: s.url,
+		headers: s.headers
+	}]));
+}
+/** Where each agent with an image reads rules and skills. */
+const LAYOUTS = {
+	cursor: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".cursor/skills",
+		harnessSkillDir: ".agents/skills"
+	},
+	"claude-code": {
+		rulesFile: "CLAUDE.md",
+		workspaceSkillDir: ".claude/skills",
+		harnessSkillDir: ".claude/skills"
+	},
+	antigravity: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".agents/skills",
+		harnessSkillDir: ".gemini/config/skills"
+	},
+	opencode: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".opencode/skills",
+		harnessSkillDir: ".config/opencode/skills"
+	},
+	goose: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".goose/skills",
+		harnessSkillDir: ".ai-sdk-harness/.harness-bootstrap/goose/implementation/home/.config/goose/skills"
+	},
+	pi: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".pi/skills",
+		harnessSkillDir: ".pi/agent/skills"
+	},
+	codex: {
+		rulesFile: "AGENTS.md",
+		workspaceSkillDir: ".agents/skills",
+		harnessSkillDir: ".agents/skills"
+	}
+};
+/** Every real agent reeval can drive, by harness kind. */
+const AGENTS = {
+	cursor: {
+		...LAYOUTS.cursor,
+		name: "Cursor",
+		factory: "cursor",
+		credential: "CURSOR_API_KEY",
+		endpoints: [CURSOR_EXCHANGE],
+		tokens: {
+			endpoint: CURSOR_EXCHANGE,
+			fields: ["accessToken", "refreshToken"],
+			hosts: ["cursor.sh", "*.cursor.sh"]
+		},
+		unreported: cursorUnreported,
+		mcpServers: cursorMcpServers,
+		adapter: async ({ auth, mcpServers, descriptor }) => (await import("./src-daS0wKH2.js")).createCursorSdk({
+			auth,
+			...mcpServers ? { mcpServers } : {},
+			...descriptor.kind === "cursor" && descriptor.params ? { modelParams: descriptor.params } : {},
+			requireCredentialBrokering: true
+		})
+	},
+	"claude-code": {
+		...LAYOUTS["claude-code"],
+		name: "Claude Code",
+		factory: "claudeCode",
+		credential: "ANTHROPIC_API_KEY",
+		endpoints: [
+			{
+				host: "api.anthropic.com",
+				path: { exact: "/v1/messages" },
+				method: ["POST"]
+			},
+			{
+				host: "api.anthropic.com",
+				path: { exact: "/v1/messages/count_tokens" },
+				method: ["POST"]
+			},
+			{
+				host: "api.anthropic.com",
+				path: { exact: "/api/claude_code/settings" },
+				method: ["GET"]
+			},
+			{
+				host: "api.anthropic.com",
+				path: { exact: "/api/claude_code/policy_limits" },
+				method: ["GET"]
+			}
+		],
+		mcpServers: claudeMcpServers,
+		adapter: async ({ auth, mcpServers }) => (await import("./dist-BZXYHN2X.js")).createClaudeCode({
+			auth,
+			...mcpServers ? { mcpServers } : {},
+			env: {
+				IS_SANDBOX: "1",
+				CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1"
+			}
+		})
+	},
+	antigravity: {
+		...LAYOUTS.antigravity,
+		name: "Antigravity",
+		factory: "antigravity",
+		credential: "GEMINI_API_KEY",
+		endpoints: GEMINI_ENDPOINTS,
+		expectedBlocked: {
+			hosts: ["play.googleapis.com", "antigravity-unleash.goog"],
+			why: "Antigravity's telemetry and feature flags, which its CLI sends even with telemetry off"
+		},
+		servedModel: geminiServedModel,
+		mcpServers: antigravityMcpServers,
+		adapter: async ({ auth, mcpServers }) => (await import("./src-W9g-y5X5.js")).createAntigravity({
+			auth,
+			...mcpServers ? { mcpServers } : {},
+			requireCredentialBrokering: true
+		})
+	},
+	opencode: {
+		...LAYOUTS.opencode,
+		name: "OpenCode",
+		factory: "opencode",
+		credential: "GOOGLE_GENERATIVE_AI_API_KEY",
+		endpoints: GEMINI_ENDPOINTS,
+		servedModel: geminiServedModel,
+		forModel: opencodeForModel,
+		mcpServers: opencodeMcpServers,
+		adapter: async ({ auth, mcpServers, descriptor }) => (await import("./src-DEgff9Z7.js")).createOpenCode({
+			auth,
+			model: descriptor.model,
+			vars: opencodeVars(descriptor.model),
+			...mcpServers ? { mcpServers } : {},
+			requireCredentialBrokering: true
+		})
+	},
+	goose: {
+		...LAYOUTS.goose,
+		name: "Goose",
+		factory: "goose",
+		credential: "GOOGLE_GENERATIVE_AI_API_KEY",
+		endpoints: GOOSE_ENDPOINTS,
+		servedModel: geminiServedModel,
+		mcpServers: gooseMcpServers,
+		adapter: async ({ auth, mcpServers, descriptor }) => (await import("./src-C-LHyTSV.js")).createGoose({
+			auth: { GOOGLE_API_KEY: auth.GOOGLE_GENERATIVE_AI_API_KEY ?? "" },
+			model: descriptor.model,
+			...mcpServers ? { mcpServers } : {},
+			requireCredentialBrokering: true
+		})
+	},
+	pi: {
+		...LAYOUTS.pi,
+		name: "pi",
+		factory: "pi",
+		credential: "GOOGLE_GENERATIVE_AI_API_KEY",
+		endpoints: GEMINI_ENDPOINTS,
+		servedModel: geminiServedModel,
+		mcpServers: (servers) => {
+			const names = Object.keys(servers);
+			throw new InfraError(`pi has no MCP client, so it can't use the ${names.join(", ")} MCP server${names.length === 1 ? "" : "s"}`);
+		},
+		adapter: async ({ auth }) => (await import("./src-BDwSuyIo.js")).createPi({
+			auth: { GEMINI_API_KEY: auth.GOOGLE_GENERATIVE_AI_API_KEY ?? "" },
+			requireCredentialBrokering: true
+		})
+	},
+	codex: {
+		...LAYOUTS.codex,
+		name: "Codex",
+		factory: "codex",
+		credential: "OPENAI_API_KEY",
+		endpoints: OPENAI_ENDPOINTS,
+		modelResponses: OPENAI_ENDPOINTS,
+		servedModel: openaiServedModel,
+		mcpServers: codexMcpServers,
+		adapter: async ({ auth, mcpServers }) => (await import("./src-55j1zNHH.js")).createCodex({
+			auth,
+			...mcpServers ? { mcpServers } : {},
+			requireCredentialBrokering: true
+		})
+	}
+};
+/** The harness of a config that names none: Cursor, on Cursor's own model. */
+const DEFAULT_HARNESS = {
+	kind: "cursor",
+	model: "composer-2.5"
+};
+/** A harness to name in messages that ask for one. */
+const HARNESS_EXAMPLE = "cursor({ model: 'composer-2.5' })";
+const isAgentKind = (kind) => typeof kind === "string" && Object.hasOwn(AGENTS, kind);
+/**
+* Why a harness's agent can't take the environment's MCP servers (pi takes none; Goose, OpenCode
+* and Codex no `mcp.sse`), in the agent's own words, so the plan refuses them before any attempt
+* starts; undefined when it can.
+*/
+function refusedMcp(harness, layers) {
+	if (!isAgentKind(harness.kind)) return void 0;
+	const servers = /* @__PURE__ */ new Map();
+	for (const { spec } of layers) for (const [name, server] of Object.entries(spec.mcp ?? {})) servers.set(name, server.transport === "stdio" ? {
+		...server,
+		env: {}
+	} : {
+		...server,
+		headers: {}
+	});
+	if (servers.size === 0) return void 0;
+	try {
+		AGENTS[harness.kind].mcpServers(Object.fromEntries(servers));
+		return;
+	} catch (error) {
+		if (error instanceof InfraError) return error.message;
+		throw error;
+	}
+}
+/** A real agent's catalog entry, with what its model's provider decides. */
+function agentFor(h) {
+	const agent = AGENTS[h.kind];
+	return agent.forModel ? {
+		...agent,
+		...agent.forModel(h.model)
+	} : agent;
+}
+/** The catalog entry for a harness's agent; undefined for the fake harness. */
+const agentOf = (h) => h.kind === "fake" ? void 0 : agentFor(h);
+/** The host variable a harness authenticates with; undefined for the fake harness. */
+const credentialOf = (h) => agentOf(h)?.credential;
+/** The fake agent's own layout. */
+const FAKE_LAYOUT = {
+	rulesFile: "AGENTS.md",
+	workspaceSkillDir: ".agents/skills",
+	harnessSkillDir: ".agents/skills"
+};
+/** Where a harness's agent reads rules and skills; a fake one with `layout` mimics that agent. */
+function layoutOf(descriptor) {
+	if (descriptor.kind !== "fake") return LAYOUTS[descriptor.kind];
+	return descriptor.layout ? LAYOUTS[descriptor.layout] : FAKE_LAYOUT;
+}
+/** The hosts a harness's agent is known to try; a fake agent with `layout` expects that agent's. */
+function expectedBlockedFor(descriptor) {
+	const kind = descriptor.kind === "fake" ? descriptor.layout : descriptor.kind;
+	return kind ? AGENTS[kind].expectedBlocked : void 0;
+}
+/**
+* How the APIs behind the harnesses say they refused a key: an HTTP 401, Anthropic's and OpenAI's
+* wording, Google's (which answers 400), and OpenCode's for any provider's 401 or 403. A bare 403 isn't here: the gateway and MCP servers send
+* those for reasons that have nothing to do with the harness's key.
+*/
+const REFUSED_KEY = /\bHTTP 401\b|\b401\b.{0,40}\bunauthori[sz]ed\b|\bunauthori[sz]ed\b.{0,40}\b401\b|\b(?:invalid|incorrect) (?:x-)?api[ _-]?key\b|\bapi key not valid\b|\bAPI_KEY_INVALID\b|\bauthentication_error\b|\bprovider authentication required\b/i;
+/** What to do when a harness error says its API refused the key, naming the variable; else undefined. */
+function authHint(agent, message) {
+	if (!REFUSED_KEY.test(message)) return void 0;
+	return `The API rejected ${agent.credential}: set a valid key in the environment or .env.local`;
+}
+/** The agent's credential from the host, as the adapter's explicit `auth`. Fails closed. */
+function agentAuth(agent, env = process.env) {
+	const value = env[agent.credential];
+	if (!value) throw new InfraError(`${agent.credential} isn't set, so the ${agent.name} harness can't authenticate. Set it in the environment or .env.local.`);
+	return { [agent.credential]: value };
+}
+function brokeringFor(h) {
+	const agent = agentOf(h);
+	if (!agent) return void 0;
+	const { credential, endpoints, tokens, servedModel, modelResponses } = agent;
+	return {
+		credential,
+		endpoints,
+		...tokens ? { tokens: {
+			name: credential,
+			...tokens
+		} } : {},
+		...servedModel ? { servedModel } : {},
+		...modelResponses ? { modelResponses } : {}
+	};
+}
+//#endregion
+//#region src/sandbox/fake.ts
+/** Commands run on the host's own network, so the fake sandbox can neither restrict nor see it. */
+const FAKE_EGRESS = {
+	enforce: "none",
+	record: false
+};
+/**
+* The POSIX shell commands run in: `sh`, which Windows lacks, so there the `sh.exe` on PATH or
+* Git for Windows'.
+*/
+function posixShell(platform = process.platform, env = process.env, exists = existsSync) {
+	if (platform !== "win32") return "sh";
+	const onPath = (env.PATH ?? env.Path ?? "").split(win32.delimiter).filter(Boolean);
+	const git = [
+		env.ProgramFiles,
+		env["ProgramFiles(x86)"],
+		env.LOCALAPPDATA && win32.join(env.LOCALAPPDATA, "Programs")
+	].filter((dir) => !!dir).map((dir) => win32.join(dir, "Git", "bin"));
+	const found = [...onPath, ...git].map((dir) => win32.join(dir, "sh.exe")).find(exists);
+	if (found) return found;
+	throw new UsageError("The fake sandbox runs commands with a POSIX sh, and there's none on this machine. Install Git for Windows (https://git-scm.com/download/win), which brings sh.exe, or run the evals in docker().");
+}
+const EXEC_TAG = "REEVAL_FAKE_EXEC";
+const KILL_TAGGED = `for pass in 1 2 3 4 5; do
+  found=
+  for f in $(grep -lzx "${EXEC_TAG}=$1" /proc/[0-9]*/environ 2>/dev/null); do
+    p=\${f#/proc/}; kill -9 "\${p%/environ}" 2>/dev/null; found=1
+  done
+  [ -n "$found" ] || break
+done`;
+/**
+* Stops a command's MSYS processes on Windows. `taskkill /t` doesn't reach them: Git's `sh.exe`
+* starts bash, whose fork and exec leave each new process's Windows parent gone, so a timed-out
+* `sleep 30` would run on, holding the command's pipes and working directory.
+*/
+function killTagged(sh, tag) {
+	spawn(sh, [
+		"-c",
+		KILL_TAGGED,
+		"sh",
+		tag
+	], {
+		stdio: "ignore",
+		windowsHide: true
+	}).on("error", () => {});
+}
+/**
+* A temp directory on the host. Commands run unisolated on the host shell, so this is
+* only meant for tests and for the fake harness.
+*/
+async function createFakeSandbox(descriptor, env = {}) {
+	const sh = posixShell();
+	const parent = descriptor.dir ?? tmpdir();
+	await mkdir(parent, { recursive: true });
+	const base = await mkdtemp(join(parent, "reeval-sandbox-"));
+	const workdir = join(base, "work");
+	await mkdir(workdir);
+	let destroyed;
+	const resolve = (path) => path.startsWith("~/") ? join(base, path.slice(2)) : join(workdir, path);
+	return {
+		workdir,
+		exec: (command, { cwd, env: extra, signal } = {}) => {
+			const tag = process.platform === "win32" && signal ? randomUUID() : void 0;
+			const stop = () => killTagged(sh, tag);
+			if (tag) signal?.addEventListener("abort", stop, { once: true });
+			return run(sh, ["-c", cwd ? `cd ${shellQuote(cwd)} && ${command}` : command], {
+				cwd: workdir,
+				env: {
+					HOME: base,
+					...env,
+					...extra,
+					...tag ? { [EXEC_TAG]: tag } : {}
+				},
+				signal
+			}).finally(() => signal?.removeEventListener("abort", stop));
+		},
+		home: base,
+		readFile: (path) => readFile(resolve(path), "utf8").catch(() => null),
+		async writeFile(path, content) {
+			const target = resolve(path);
+			await mkdir(dirname(target), { recursive: true });
+			await writeFile(target, content);
+		},
+		destroy: () => {
+			destroyed ??= rm(base, {
+				recursive: true,
+				force: true
+			}).catch(() => {}).finally(() => {
+				destroyed = void 0;
+			});
+			return destroyed;
+		}
+	};
+}
+//#endregion
+//#region src/egress.ts
+/**
+* The package registries and GitHub, to spread into an allowlist that still installs:
+* `egress: { allow: [...DEFAULT_EGRESS_ALLOW, 'api.example.com'] }`.
+*/
+const DEFAULT_EGRESS_ALLOW = PACKAGE_HOSTS;
+/** What each sandbox kind can do about egress, as its provider declares it. */
+const SANDBOX_EGRESS = {
+	docker: DOCKER_EGRESS,
+	fake: FAKE_EGRESS
+};
+const isRestricted = (policy) => policy !== "allow-all";
+/**
+* The hosts the harness needs: a real agent's own API (its model's provider's, for OpenCode), or
+* a fake agent's with `layout` (it behaves like that agent). A plain fake agent talks to nothing.
+*/
+function harnessHosts(harness) {
+	if (harness.kind !== "fake" && isAgentKind(harness.kind)) return agentFor(harness).hosts ?? HARNESS_HOSTS[harness.kind];
+	return harness.kind === "fake" && harness.layout ? HARNESS_HOSTS[harness.layout] : [];
+}
+/** MCP `http`/`sse` servers' hosts: the agent connects to them from the sandbox. */
+function mcpServerHosts(layers) {
+	const urls = /* @__PURE__ */ new Map();
+	for (const { spec } of layers) for (const [name, server] of Object.entries(spec.mcp ?? {})) if (server.transport === "stdio") urls.delete(name);
+	else urls.set(name, server.url);
+	return [...urls.values()].flatMap((url) => URL.parse(url)?.hostname ?? []);
+}
+/**
+* The policy an attempt runs under, and the hosts a restricted one allows on its own: the
+* harness's, the brokered secrets' `hosts` and the MCP servers'. The cascade is config and
+* profile defaults (`inherited`), then the environment's layers, then groups and the eval (`own`).
+*/
+function plannedEgress(egress, harness, env, layers) {
+	const fromLayers = layers.findLast((l) => l.spec.egress !== void 0)?.spec.egress;
+	const policy = egress.own ?? fromLayers ?? egress.inherited ?? "allow-all";
+	if (!isRestricted(policy)) return {
+		policy,
+		auto: []
+	};
+	const own = policy === "deny-all" ? [] : policy.allow;
+	const auto = [
+		...harnessHosts(harness),
+		...plannedSecrets(env, layers).flatMap((s) => s.hosts ?? []),
+		...mcpServerHosts(layers)
+	];
+	return {
+		policy,
+		auto: [...new Set(auto)].filter((h) => !own.includes(h))
+	};
+}
+/** Every host a restricted policy lets through, or null under `allow-all`. */
+function allowedHosts({ policy, auto }) {
+	if (!isRestricted(policy)) return null;
+	return [.../* @__PURE__ */ new Set([...policy === "deny-all" ? [] : policy.allow, ...auto])];
+}
+/** What enforcing the policy takes: nothing, turning egress off, or a host allowlist. */
+function egressNeeds(planned) {
+	if (!isRestricted(planned.policy)) return "none";
+	return allowedHosts(planned)?.length ? "allowlist" : "all-or-nothing";
+}
+const LEVELS = [
+	"none",
+	"all-or-nothing",
+	"allowlist"
+];
+/** Why the sandbox can't enforce the attempt's policy, or undefined when it can. */
+function unenforceable(planned, sandbox, where) {
+	const needs = egressNeeds(planned);
+	const can = SANDBOX_EGRESS[sandbox.kind].enforce;
+	if (LEVELS.indexOf(can) >= LEVELS.indexOf(needs)) return void 0;
+	const hosts = allowedHosts(planned)?.join(", ");
+	const what = needs !== "allowlist" ? "turning egress off" : planned.policy === "deny-all" ? `a host allowlist for its automatic hosts (${hosts})` : `a host allowlist (${hosts})`;
+	const enforces = can === "none" ? "enforces no egress policy" : `only enforces ${can === "all-or-nothing" ? "'allow-all' or 'deny-all'" : can}`;
+	const hint = sandbox.kind === "fake" ? " (its commands run on the host). Run it in docker(), or set egress: 'allow-all'" : "";
+	return `${where} runs under egress ${describeEgress(planned.policy)}, which needs ${what}, but the ${sandbox.kind} sandbox ${enforces}${hint}.`;
+}
+const describeEgress = (policy) => typeof policy === "string" ? `'${policy}'` : `{ allow: [${policy.allow.map((h) => `'${h}'`).join(", ")}] }`;
+/** `deny-all + auto: api2.cursor.sh, …` for the plan; '' under `allow-all`. */
+function egressLabel({ policy, auto }) {
+	if (!isRestricted(policy)) return "";
+	const own = policy === "deny-all" ? "deny-all" : policy.allow.length ? `allow ${policy.allow.join(", ")}` : "allow none";
+	return auto.length ? `${own} + auto: ${auto.join(", ")}` : own;
+}
+//#endregion
+export { layoutOf as _, unenforceable as a, DEFAULT_HARNESS as c, agentFor as d, authHint as f, isAgentKind as g, expectedBlockedFor as h, plannedEgress as i, HARNESS_EXAMPLE as l, credentialOf as m, allowedHosts as n, createFakeSandbox as o, brokeringFor as p, egressLabel as r, AGENTS as s, DEFAULT_EGRESS_ALLOW as t, agentAuth as u, refusedMcp as v };
+
+//# sourceMappingURL=egress-73SQfKdx.js.map

package/dist/egress-73SQfKdx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress-73SQfKdx.js","names":["meta"],"sources":["../src/harness/agents.ts","../src/sandbox/fake.ts","../src/egress.ts"],"mappings":";;;;;;;;;;;;AAuGA,MAAM,aAA2C;CAAE,WAAW;CAAc,UAAU;AAAY;;AAGlG,SAAgB,iBAAiB,iBAA0C;CAEzE,MAAM,QAAQA,iBAAM,WAAW;CAC/B,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS,MAAO,WAAW,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAE,IAAI,CAAC;AAChG;;AAcA,MAAM,mBAAmB,CACvB;CACE,MAAM;CACN,MAAM,EAAE,OAAO,+CAA+C;CAC9D,QAAQ,CAAC,MAAM;AACjB,CACF;;AAGA,MAAM,kBAAkB,CACtB,GAAG,kBACH;CACE,MAAM;CACN,MAAM,EAAE,OAAO,mBAAmB;CAClC,QAAQ,CAAC,KAAK;AAChB,CACF;;AAGA,MAAM,qBAAkC,EAAE,MAAM,WAC9C,SAAS,sCACL,qDAAqD,KAAK,IAAI,CAAC,GAAG,KAClE,KAAA;;AAGN,MAAM,kBAAkB;CACtB,MAAM;CACN,MAAM,EAAE,OAAO,8BAA8B;CAC7C,QAAQ,CAAC,MAAM;AACjB;;AAGA,MAAM,mBAAmB,CACvB;CAAE,MAAM;CAAkB,MAAM,EAAE,OAAO,gBAAgB;CAAG,QAAQ,CAAC,MAAM;AAAE,CAC/E;;;;;AAMA,MAAM,qBAAkC,EAAE,MAAM,MAAM,eAAe,qBACnE,SAAS,oBAAoB,SAAS,mBAAmB,gBACrD,GAAG,gBAAgB,iBAAiB,WAAW,eAAe,KAAK,OACnE,KAAA;;;;;;AAON,SAAgB,iBACd,OACA,MAAyB,QAAQ,KAClB;CACf,MAAM,WAAW,wBAAwB,OAAO,GAAG;CACnD,IAAI,WAAW,UAAU,MAAM,IAAI,WAAW,eAAe,SAAS,OAAO;CAC7E,MAAM,EAAE,aAAa;CACrB,MAAM,iBAAiB,uBAAuB,QAAQ;CACtD,OAAO;EACL,YAAY,SAAS;EACrB,WAAW,kBAAkB,QAAQ;EACrC,GAAI,eAAe,SAAS,EAAE,eAAe,IAAI,CAAC;EAClD,cAAc,YAAY,oBAAoB,UAAU,OAAO;EAC/D,OAAO,CAAC,GAAG,cAAc,QAAQ,GAAG,YAAY;CAClD;AACF;;;;;AAMA,SAAgB,aAAa,OAAe,MAAyB,QAAQ,KAAK;CAChF,MAAM,WAAW,wBAAwB,OAAO,GAAG;CACnD,IAAI,WAAW,UAAU,MAAM,IAAI,WAAW,eAAe,SAAS,OAAO;CAC7E,OAAO,SAAS;AAClB;;AAGA,SAAgB,gBACd,SACyB;CACzB,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAAO;EACzC,IAAI,EAAE,cAAc,OAClB,MAAM,IAAI,WACR,uDAAuD,KAAK,6CAC9D;EAEF,OAAO,EAAE,cAAc,UACnB,CAAC,MAAM;GAAE,SAAS,EAAE;GAAS,MAAM,EAAE;GAAM,KAAK,EAAE,OAAO,CAAC;EAAE,CAAC,IAC7D,CAAC,MAAM;GAAE,KAAK,EAAE;GAAK,cAAc,EAAE,WAAW,CAAC;EAAE,CAAC;CAC1D,CAAC,CACH;AACF;;AAGA,SAAgB,iBACd,SACyB;CACzB,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAClC,EAAE,cAAc,UACZ,CAAC,MAAM;EAAE,MAAM;EAAS,SAAS,EAAE;EAAS,MAAM,EAAE;EAAM,KAAK,EAAE;CAAI,CAAC,IACtE,CAAC,MAAM;EAAE,MAAM,EAAE;EAAW,KAAK,EAAE;EAAK,SAAS,EAAE;CAAQ,CAAC,CAClE,CACF;AACF;;AAGA,SAAgB,sBACd,SACyB;CACzB,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAClC,EAAE,cAAc,UACZ,CAAC,MAAM;EAAE,SAAS,EAAE;EAAS,MAAM,EAAE;EAAM,KAAK,EAAE;CAAI,CAAC,IACvD,CAAC,MAAM;EAAE,WAAW,EAAE;EAAK,SAAS,EAAE;CAAQ,CAAC,CACrD,CACF;AACF;;;;;AAMA,SAAgB,mBACd,SACmC;CACnC,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAAoC;EACtE,IAAI,EAAE,cAAc,OAClB,MAAM,IAAI,WACR,0DAA0D,KAAK,6CACjE;EAEF,OAAO,EAAE,cAAc,UACnB,CAAC,MAAM;GAAE,MAAM;GAAS,SAAS,CAAC,EAAE,SAAS,GAAG,EAAE,IAAI;GAAG,aAAa,EAAE,OAAO,CAAC;EAAE,CAAC,IACnF,CAAC,MAAM;GAAE,MAAM;GAAU,KAAK,EAAE;GAAK,SAAS,EAAE,WAAW,CAAC;GAAG,OAAO;EAAM,CAAC;CACnF,CAAC,CACH;AACF;;AAGA,SAAgB,gBACd,SACyC;CACzC,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAAO;EACzC,IAAI,EAAE,cAAc,OAClB,MAAM,IAAI,WACR,uDAAuD,KAAK,6CAC9D;EAEF,OAAO,EAAE,cAAc,UACnB,CAAC,MAAM;GAAE,MAAM;GAAS,KAAK,EAAE;GAAS,MAAM,EAAE;GAAM,MAAM,EAAE,OAAO,CAAC;EAAE,CAAC,IACzE,CAAC,MAAM;GAAE,MAAM;GAAmB,KAAK,EAAE;GAAK,SAAS,EAAE,WAAW,CAAC;EAAE,CAAC;CAC9E,CAAC,CACH;AACF;;AAGA,SAAgB,iBACd,SACyB;CACzB,OAAO,OAAO,YACZ,OAAO,QAAQ,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,OAClC,EAAE,cAAc,UACZ,CAAC,MAAM;EAAE,MAAM;EAAS,SAAS,EAAE;EAAS,MAAM,EAAE;EAAM,KAAK,EAAE;CAAI,CAAC,IACtE,CAAC,MAAM;EAAE,MAAM,EAAE;EAAW,KAAK,EAAE;EAAK,SAAS,EAAE;CAAQ,CAAC,CAClE,CACF;AACF;;AAGA,MAAa,UAAwC;CAGnD,QAAQ;EACN,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;CACA,eAAe;EACb,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;CAGA,aAAa;EACX,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;CAGA,UAAU;EACR,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;CAGA,OAAO;EACL,WAAW;EACX,mBAAmB;EACnB,iBACE;CACJ;CAGA,IAAI;EACF,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;CAGA,OAAO;EACL,WAAW;EACX,mBAAmB;EACnB,iBAAiB;CACnB;AACF;;AAGA,MAAa,SAAmC;CAC9C,QAAQ;EACN,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EACT,YAAY;EAGZ,WAAW,CAAC,eAAe;EAC3B,QAAQ;GACN,UAAU;GACV,QAAQ,CAAC,eAAe,cAAc;GACtC,OAAO,CAAC,aAAa,aAAa;EACpC;EAIA,YAAY;EACZ,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,YAAY,kBACjC,MAAM,OAAO,qBAAA,CAA+B,gBAAgB;GAC3D;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GACnC,GAAI,WAAW,SAAS,YAAY,WAAW,SAC3C,EAAE,aAAa,WAAW,OAAO,IACjC,CAAC;GACL,4BAA4B;EAC9B,CAAC;CACL;CACA,eAAe;EACb,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EACT,YAAY;EAGZ,WAAW;GACT;IAAE,MAAM;IAAqB,MAAM,EAAE,OAAO,eAAe;IAAG,QAAQ,CAAC,MAAM;GAAE;GAC/E;IAAE,MAAM;IAAqB,MAAM,EAAE,OAAO,4BAA4B;IAAG,QAAQ,CAAC,MAAM;GAAE;GAC5F;IAAE,MAAM;IAAqB,MAAM,EAAE,OAAO,4BAA4B;IAAG,QAAQ,CAAC,KAAK;GAAE;GAC3F;IACE,MAAM;IACN,MAAM,EAAE,OAAO,iCAAiC;IAChD,QAAQ,CAAC,KAAK;GAChB;EACF;EACA,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,kBACrB,MAAM,OAAO,sBAAA,CAAgC,iBAAiB;GAC7D;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GACnC,KAAK;IAGH,YAAY;IAGZ,0CAA0C;GAC5C;EACF,CAAC;CACL;CACA,aAAa;EACX,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EAET,YAAY;EAEZ,WAAW;EAGX,iBAAiB;GACf,OAAO,CAAC,uBAAuB,0BAA0B;GACzD,KAAK;EACP;EAEA,aAAa;EACb,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,kBACrB,MAAM,OAAO,qBAAA,CAAgC,kBAAkB;GAC9D;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GAEnC,4BAA4B;EAC9B,CAAC;CACL;CACA,UAAU;EACR,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EAET,YAAY;EACZ,WAAW;EACX,aAAa;EAGb,UAAU;EACV,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,YAAY,kBACjC,MAAM,OAAO,qBAAA,CAA6B,eAAe;GACxD;GACA,OAAO,WAAW;GAClB,MAAM,aAAa,WAAW,KAAK;GACnC,GAAI,aAAa,EAAc,WAAgD,IAAI,CAAC;GACpF,4BAA4B;EAC9B,CAAC;CACL;CACA,OAAO;EACL,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EACT,YAAY;EAEZ,WAAW;EACX,aAAa;EACb,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,YAAY,kBACjC,MAAM,OAAO,qBAAA,CAA0B,YAAY;GAElD,MAAM,EAAE,gBAAgB,KAAK,gCAAgC,GAAG;GAChE,OAAO,WAAW;GAClB,GAAI,aACA,EAAc,WAAsD,IACpE,CAAC;GACL,4BAA4B;EAC9B,CAAC;CACL;CACA,IAAI;EACF,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EACT,YAAY;EAEZ,WAAW;EACX,aAAa;EACb,aAAa,YAAY;GACvB,MAAM,QAAQ,OAAO,KAAK,OAAO;GACjC,MAAM,IAAI,WACR,6CAA6C,MAAM,KAAK,IAAI,EAAE,aAAa,MAAM,WAAW,IAAI,KAAK,KACvG;EACF;EACA,SAAS,OAAO,EAAE,YACf,MAAM,OAAO,qBAAA,CAAuB,SAAS;GAE5C,MAAM,EAAE,gBAAgB,KAAK,gCAAgC,GAAG;GAChE,4BAA4B;EAC9B,CAAC;CACL;CACA,OAAO;EACL,GAAG,QAAQ;EACX,MAAM;EACN,SAAS;EACT,YAAY;EAGZ,WAAW;EACX,gBAAgB;EAChB,aAAa;EACb,YAAY;EACZ,SAAS,OAAO,EAAE,MAAM,kBACrB,MAAM,OAAO,qBAAA,CAA0B,YAAY;GAClD;GACA,GAAI,aACA,EAAc,WAAsD,IACpE,CAAC;GACL,4BAA4B;EAC9B,CAAC;CACL;AACF;;AAGA,MAAa,kBAA0C;CAAE,MAAM;CAAU,OAAO;AAAe;;AAE/F,MAAa,kBAAkB;AAE/B,MAAa,eAAe,SAC1B,OAAO,SAAS,YAAY,OAAO,OAAO,QAAQ,IAAI;;;;;;AAOxD,SAAgB,WACd,SACA,QACoB;CACpB,IAAI,CAAC,YAAY,QAAQ,IAAI,GAAG,OAAO,KAAA;CACvC,MAAM,0BAAU,IAAI,IAA+B;CACnD,KAAK,MAAM,EAAE,UAAU,QACrB,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,GACxD,QAAQ,IACN,MACA,OAAO,cAAc,UAAU;EAAE,GAAG;EAAQ,KAAK,CAAC;CAAE,IAAI;EAAE,GAAG;EAAQ,SAAS,CAAC;CAAE,CACnF;CAGJ,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAA;CAC/B,IAAI;EACF,OAAO,QAAQ,KAAK,CAAC,WAAW,OAAO,YAAY,OAAO,CAAC;EAC3D;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,YAAY,OAAO,MAAM;EAC9C,MAAM;CACR;AACF;;AAGA,SAAgB,SAAS,GAAkC;CACzD,MAAM,QAAQ,OAAO,EAAE;CACvB,OAAO,MAAM,WAAW;EAAE,GAAG;EAAO,GAAG,MAAM,SAAS,EAAE,KAAK;CAAE,IAAI;AACrE;;AAGA,MAAa,WAAW,MACtB,EAAE,SAAS,SAAS,KAAA,IAAY,SAAS,CAAC;;AAG5C,MAAa,gBAAgB,MAA6C,QAAQ,CAAC,CAAC,EAAE;;AAGtF,MAAM,cAAsB;CAC1B,WAAW;CACX,mBAAmB;CACnB,iBAAiB;AACnB;;AAGA,SAAgB,SAAS,YAAuC;CAC9D,IAAI,WAAW,SAAS,QAAQ,OAAO,QAAQ,WAAW;CAC1D,OAAO,WAAW,SAAS,QAAQ,WAAW,UAAU;AAC1D;;AAGA,SAAgB,mBAAmB,YAA4D;CAC7F,MAAM,OAAO,WAAW,SAAS,SAAS,WAAW,SAAS,WAAW;CACzE,OAAO,OAAO,OAAO,KAAK,CAAC,kBAAkB,KAAA;AAC/C;;;;;;AAOA,MAAM,cACJ;;AAGF,SAAgB,SAAS,OAAc,SAAqC;CAC1E,IAAI,CAAC,YAAY,KAAK,OAAO,GAAG,OAAO,KAAA;CACvC,OAAO,oBAAoB,MAAM,WAAW;AAC9C;;AAGA,SAAgB,UAAU,OAAc,MAAyB,QAAQ,KAAK;CAC5E,MAAM,QAAQ,IAAI,MAAM;CACxB,IAAI,CAAC,OACH,MAAM,IAAI,WACR,GAAG,MAAM,WAAW,qBAAqB,MAAM,KAAK,sEACtD;CAEF,OAAO,GAAG,MAAM,aAAa,MAAM;AACrC;AAcA,SAAgB,aAAa,GAA6C;CACxE,MAAM,QAAQ,QAAQ,CAAC;CACvB,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,MAAM,EAAE,YAAY,WAAW,QAAQ,aAAa,mBAAmB;CACvE,OAAO;EACL;EACA;EACA,GAAI,SAAS,EAAE,QAAQ;GAAE,MAAM;GAAY,GAAG;EAAO,EAAE,IAAI,CAAC;EAC5D,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;EACrC,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;CAC7C;AACF;;;;AChnBA,MAAa,cAAkC;CAAE,SAAS;CAAQ,QAAQ;AAAM;;;;;AAMhF,SAAgB,WACd,WAA4B,QAAQ,UACpC,MAAyB,QAAQ,KACjC,SAAoC,YAC5B;CACR,IAAI,aAAa,SAAS,OAAO;CACjC,MAAM,UAAU,IAAI,QAAQ,IAAI,QAAQ,GAAA,CAAI,MAAM,MAAM,SAAS,CAAC,CAAC,OAAO,OAAO;CACjF,MAAM,MAAM;EACV,IAAI;EACJ,IAAI;EACJ,IAAI,gBAAgB,MAAM,KAAK,IAAI,cAAc,UAAU;CAC7D,CAAC,CACE,QAAQ,QAAuB,CAAC,CAAC,GAAG,CAAC,CACrC,KAAK,QAAQ,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC;CAC7C,MAAM,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,KAAK,QAAQ,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM;CACrF,IAAI,OAAO,OAAO;CAClB,MAAM,IAAI,WACR,kMACF;AACF;AAEA,MAAM,WAAW;AAGjB,MAAM,cAAc;;0BAEM,SAAS;;;;;;;;;;AAWnC,SAAS,WAAW,IAAY,KAAa;CAC3C,MAAM,IAAI;EAAC;EAAM;EAAa;EAAM;CAAG,GAAG;EACxC,OAAO;EACP,aAAa;CACf,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;AACzB;;;;;AAMA,eAAsB,kBACpB,YACA,MAA8B,CAAC,GACb;CAClB,MAAM,KAAK,WAAW;CACtB,MAAM,SAAS,WAAW,OAAO,OAAO;CACxC,MAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;CACvC,MAAM,OAAO,MAAM,QAAQ,KAAK,QAAQ,iBAAiB,CAAC;CAC1D,MAAM,UAAU,KAAK,MAAM,MAAM;CACjC,MAAM,MAAM,OAAO;CACnB,IAAI;CACJ,MAAM,WAAW,SACf,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI;CAExE,OAAO;EACL;EAGA,OAAO,SAAS,EAAE,KAAK,KAAK,OAAO,WAAW,CAAC,MAAM;GACnD,MAAM,MAAM,QAAQ,aAAa,WAAW,SAAS,WAAW,IAAI,KAAA;GACpE,MAAM,aAAa,WAAW,IAAI,GAAa;GAC/C,IAAI,KAAK,QAAQ,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;GAC/D,OAAO,IAAI,IAAI,CAAC,MAAM,MAAM,MAAM,WAAW,GAAG,EAAE,MAAM,YAAY,OAAO,GAAG;IAC5E,KAAK;IACL,KAAK;KAAE,MAAM;KAAM,GAAG;KAAK,GAAG;KAAO,GAAI,MAAM,GAAG,WAAW,IAAI,IAAI,CAAC;IAAG;IACzE;GACF,CAAC,CAAC,CAAC,cAAc,QAAQ,oBAAoB,SAAS,IAAI,CAAC;EAC7D;EACA,MAAM;EACN,WAAW,SAAS,SAAS,QAAQ,IAAI,GAAG,MAAM,CAAC,CAAC,YAAY,IAAI;EACpE,MAAM,UAAU,MAAM,SAAS;GAC7B,MAAM,SAAS,QAAQ,IAAI;GAC3B,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;GAChD,MAAM,UAAU,QAAQ,OAAO;EACjC;EAGA,eAAe;GACb,cAAc,GAAG,MAAM;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC,CAAC,CACrD,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;IACb,YAAY,KAAA;GACd,CAAC;GACH,OAAO;EACT;CACF;AACF;;;;;;;ACzFA,MAAa,uBAA0C;;AAGvD,MAAa,iBAAwE;CACnF,QAAQ;CACR,MAAM;AACR;AAEA,MAAa,gBAAgB,WAAyB,WAAW;;;;;AAMjE,SAAS,aAAa,SAA+C;CACnE,IAAI,QAAQ,SAAS,UAAU,YAAY,QAAQ,IAAI,GACrD,OAAO,SAAS,OAAO,CAAC,CAAC,SAAS,cAAc,QAAQ;CAE1D,OAAO,QAAQ,SAAS,UAAU,QAAQ,SAAS,cAAc,QAAQ,UAAU,CAAC;AACtF;;AAGA,SAAS,eAAe,QAA+C;CACrE,MAAM,uBAAO,IAAI,IAAoB;CACrC,KAAK,MAAM,EAAE,UAAU,QACrB,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,GACxD,IAAI,OAAO,cAAc,SAAS,KAAK,OAAO,IAAI;MAC7C,KAAK,IAAI,MAAM,OAAO,GAAG;CAGlC,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;AAC3E;;;;;;AAOA,SAAgB,cACd,QACA,SACA,KACA,QACe;CACf,MAAM,aAAa,OAAO,UAAU,MAAM,EAAE,KAAK,WAAW,KAAA,CAAS,CAAC,EAAE,KAAK;CAC7E,MAAM,SAAS,OAAO,OAAO,cAAc,OAAO,aAAa;CAC/D,IAAI,CAAC,aAAa,MAAM,GAAG,OAAO;EAAE;EAAQ,MAAM,CAAC;CAAE;CACrD,MAAM,MAAM,WAAW,aAAa,CAAC,IAAI,OAAO;CAChD,MAAM,OAAO;EACX,GAAG,aAAa,OAAO;EACvB,GAAG,eAAe,KAAK,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,SAAS,CAAC,CAAC;EAC3D,GAAG,eAAe,MAAM;CAC1B;CACA,OAAO;EAAE;EAAQ,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;CAAE;AAC5E;;AAGA,SAAgB,aAAa,EAAE,QAAQ,QAAwC;CAC7E,IAAI,CAAC,aAAa,MAAM,GAAG,OAAO;CAClC,OAAO,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAI,WAAW,aAAa,CAAC,IAAI,OAAO,OAAQ,GAAG,IAAI,CAAC,CAAC;AAC/E;;AAGA,SAAgB,YAAY,SAAuD;CACjF,IAAI,CAAC,aAAa,QAAQ,MAAM,GAAG,OAAO;CAC1C,OAAO,aAAa,OAAO,CAAC,EAAE,SAAS,cAAc;AACvD;AAEA,MAAM,SAA0C;CAAC;CAAQ;CAAkB;AAAW;;AAGtF,SAAgB,cACd,SACA,SACA,OACoB;CACpB,MAAM,QAAQ,YAAY,OAAO;CACjC,MAAM,MAAM,eAAe,QAAQ,KAAK,CAAC;CACzC,IAAI,OAAO,QAAQ,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG,OAAO,KAAA;CACzD,MAAM,QAAQ,aAAa,OAAO,CAAC,EAAE,KAAK,IAAI;CAC9C,MAAM,OACJ,UAAU,cACN,uBACA,QAAQ,WAAW,aACjB,6CAA6C,MAAM,KACnD,qBAAqB,MAAM;CACnC,MAAM,WACJ,QAAQ,SACJ,8BACA,iBAAiB,QAAQ,mBAAmB,8BAA8B;CAChF,MAAM,OACJ,QAAQ,SAAS,SACb,oFACA;CACN,OAAO,GAAG,MAAM,qBAAqB,eAAe,QAAQ,MAAM,EAAE,gBAAgB,KAAK,YAAY,QAAQ,KAAK,WAAW,WAAW,KAAK;AAC/I;AAEA,MAAM,kBAAkB,WACtB,OAAO,WAAW,WACd,IAAI,OAAO,KACX,aAAa,OAAO,MAAM,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;;AAGhE,SAAgB,YAAY,EAAE,QAAQ,QAA+B;CACnE,IAAI,CAAC,aAAa,MAAM,GAAG,OAAO;CAClC,MAAM,MACJ,WAAW,aACP,aACA,OAAO,MAAM,SACX,SAAS,OAAO,MAAM,KAAK,IAAI,MAC/B;CACR,OAAO,KAAK,SAAS,GAAG,IAAI,WAAW,KAAK,KAAK,IAAI,MAAM;AAC7D"}

package/dist/env-BQqj93gu.js

@@ -0,0 +1,21 @@
+import { existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+//#region src/env.ts
+/**
+* Loads .env.local, then .env, from the config file's directory (the current one only without a
+* config), so `reeval run` from a subdirectory reads the project's. Neither overrides a variable
+* that's already set, so the environment wins over .env.local, which wins over .env.
+*/
+function loadEnvFiles(configPath) {
+	const dir = configPath ? dirname(configPath) : resolve(".");
+	for (const name of [".env.local", ".env"]) {
+		const path = join(dir, name);
+		if (existsSync(path)) process.loadEnvFile(path);
+	}
+}
+/** `CI` is set to anything but `false`: records by default, forbids `.only`, names CI authors. */
+const inCI = (env = process.env) => !!env.CI && env.CI !== "false";
+//#endregion
+export { loadEnvFiles as n, inCI as t };
+
+//# sourceMappingURL=env-BQqj93gu.js.map

package/dist/env-BQqj93gu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-BQqj93gu.js","names":[],"sources":["../src/env.ts"],"mappings":";;;;;;;;AAQA,SAAgB,aAAa,YAAsC;CACjE,MAAM,MAAM,aAAa,QAAQ,UAAU,IAAI,QAAQ,GAAG;CAC1D,KAAK,MAAM,QAAQ,CAAC,cAAc,MAAM,GAAG;EACzC,MAAM,OAAO,KAAK,KAAK,IAAI;EAC3B,IAAI,WAAW,IAAI,GAAG,QAAQ,YAAY,IAAI;CAChD;AACF;;AAGA,MAAa,QAAQ,MAAyB,QAAQ,QACpD,CAAC,CAAC,IAAI,MAAM,IAAI,OAAO"}