reeval 0.0.1

package/dist/record-DQ8wzyco.js

@@ -0,0 +1,99 @@
+//#region src/view/record.ts
+const READ_DEFAULTS = {
+	"run-record": [
+		{
+			path: "plan.sandboxWarnings",
+			empty: () => []
+		},
+		{
+			path: "stack.harnesses[].resolvedModels",
+			empty: () => []
+		},
+		{
+			path: "evals[].todo",
+			empty: () => false
+		}
+	],
+	"transcript-line": [],
+	analysis: [],
+	"debug-request": [],
+	"live-progress": [],
+	"cli-invocation": []
+};
+/**
+* Turns a file at schemaVersion `n` into one at `n + 1`, keyed by `n`. A change that can't be a new
+* optional field or a read default bumps the shape's schemaVersion and adds one here.
+*/
+const MIGRATIONS = {};
+/** The newest schemaVersion of each versioned shape this reeval reads. */
+const SCHEMA_VERSIONS = {
+	"run-record": 1,
+	analysis: 1
+};
+/** A file from a newer reeval, whose schemaVersion this reeval doesn't know. */
+var NewerSchemaError = class extends Error {
+	name = "NewerSchemaError";
+	/** The message without its subject: `written by a newer reeval (…). Upgrade reeval to read it.` */
+	reason;
+	constructor(what, version, newest) {
+		const reason = `written by a newer reeval (schemaVersion ${version}; this reeval reads up to ${newest}). Upgrade reeval to read it.`;
+		super(`${what} was ${reason}`);
+		this.reason = reason;
+	}
+};
+const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function fill(value, segments, empty) {
+	if (!isObject(value)) return;
+	const [head = "", ...rest] = segments;
+	const branch = /^<(\w+)=(.+)>$/.exec(head);
+	if (branch) {
+		if (String(value[branch[1]]) === branch[2]) fill(value, rest, empty);
+		return;
+	}
+	const [, key = head, walk] = /^(.+?)(\[\]|\{\})?$/.exec(head) ?? [];
+	if (!rest.length && !walk) {
+		if (value[key] === void 0) value[key] = empty();
+		return;
+	}
+	const child = value[key];
+	const children = walk === "[]" ? Array.isArray(child) ? child : [] : walk === "{}" ? isObject(child) ? Object.values(child) : [] : [child];
+	for (const c of children) fill(c, rest, empty);
+}
+/** Fills in each read default of `shape` that `value` is missing, in place. */
+function fillDefaults(shape, value) {
+	for (const d of READ_DEFAULTS[shape]) fill(value, d.path.split("."), d.empty);
+	return value;
+}
+function upgrade(shape, value, what) {
+	const newest = SCHEMA_VERSIONS[shape];
+	let version = value.schemaVersion;
+	if (typeof version !== "number") return value;
+	if (version > newest) throw new NewerSchemaError(what, version, newest);
+	let v = value;
+	for (; version < newest; version++) {
+		const migrate = MIGRATIONS[shape]?.[version];
+		if (!migrate) break;
+		v = migrate(v);
+	}
+	return v;
+}
+/**
+* A record as every reader sees it: migrated to this reeval's schemaVersion, with each field added
+* after it was written read as its default, so older runs keep loading in `reeval show`, `reeval query`,
+* compare, history and the studio. A record from a newer reeval throws a `NewerSchemaError`.
+*/
+function readableRecord(record, what = `Run ${record.runId}`) {
+	return fillDefaults("run-record", upgrade("run-record", record, what));
+}
+/** A transcript line as every reader sees it. */
+const readableTranscriptLine = (line) => fillDefaults("transcript-line", line);
+/** An analysis document as every reader sees it; one from a newer reeval throws. */
+const readableAnalysis = (doc, what = "This analysis") => fillDefaults("analysis", upgrade("analysis", doc, what));
+/** A gateway request line from `.reeval/debug` as the studio sees it. */
+const readableDebugRequest = (request) => fillDefaults("debug-request", request);
+/** A line of `.reeval/cli.jsonl` as `reeval report` sees it. */
+const readableCliInvocation = (entry) => fillDefaults("cli-invocation", entry);
+//#endregion
+export { readableDebugRequest as a, readableCliInvocation as i, fillDefaults as n, readableRecord as o, readableAnalysis as r, readableTranscriptLine as s, NewerSchemaError as t };
+
+//# sourceMappingURL=record-DQ8wzyco.js.map

package/dist/record-DQ8wzyco.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-DQ8wzyco.js","names":[],"sources":["../src/view/record.ts"],"mappings":";AA4BA,MAAa,gBAAkD;CAC7D,cAAc;EACZ;GAAE,MAAM;GAAwB,aAAa,CAAC;EAAE;EAChD;GAAE,MAAM;GAAoC,aAAa,CAAC;EAAE;EAC5D;GAAE,MAAM;GAAgB,aAAa;EAAM;CAC7C;CACA,mBAAmB,CAAC;CACpB,UAAU,CAAC;CACX,iBAAiB,CAAC;CAClB,iBAAiB,CAAC;CAClB,kBAAkB,CAAC;AACrB;;;;;AAMA,MAAa,aAAoF,CAAC;;AAGlG,MAAa,kBAAkB;CAAE,cAAA;CAA8B,UAAU;AAAE;;AAG3E,IAAa,mBAAb,cAAsC,MAAM;CAC1C,OAAgB;;CAEhB;CACA,YAAY,MAAc,SAAiB,QAAgB;EACzD,MAAM,SAAS,4CAA4C,QAAQ,4BAA4B,OAAO;EACtG,MAAM,GAAG,KAAK,OAAO,QAAQ;EAC7B,KAAK,SAAS;CAChB;AACF;AAGA,MAAM,YAAY,MAAyB,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAElG,SAAS,KAAK,OAAgB,UAAoB,OAA4B;CAC5E,IAAI,CAAC,SAAS,KAAK,GAAG;CACtB,MAAM,CAAC,OAAO,IAAI,GAAG,QAAQ;CAC7B,MAAM,SAAS,iBAAiB,KAAK,IAAI;CACzC,IAAI,QAAQ;EACV,IAAI,OAAO,MAAM,OAAO,GAAa,MAAM,OAAO,IAAI,KAAK,OAAO,MAAM,KAAK;EAC7E;CACF;CACA,MAAM,GAAG,MAAM,MAAM,QAAQ,sBAAsB,KAAK,IAAI,KAAK,CAAC;CAClE,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM;EACzB,IAAI,MAAM,SAAS,KAAA,GAAW,MAAM,OAAO,MAAM;EACjD;CACF;CACA,MAAM,QAAQ,MAAM;CACpB,MAAM,WACJ,SAAS,OACL,MAAM,QAAQ,KAAK,IACjB,QACA,CAAC,IACH,SAAS,OACP,SAAS,KAAK,IACZ,OAAO,OAAO,KAAK,IACnB,CAAC,IACH,CAAC,KAAK;CACd,KAAK,MAAM,KAAK,UAAU,KAAK,GAAG,MAAM,KAAK;AAC/C;;AAGA,SAAgB,aAAgB,OAAkB,OAAa;CAC7D,KAAK,MAAM,KAAK,cAAc,QAAQ,KAAK,OAAO,EAAE,KAAK,MAAM,GAAG,GAAG,EAAE,KAAK;CAC5E,OAAO;AACT;AAEA,SAAS,QAAW,OAAqC,OAAU,MAAiB;CAClF,MAAM,SAAS,gBAAgB;CAC/B,IAAI,UAAW,MAAc;CAC7B,IAAI,OAAO,YAAY,UAAU,OAAO;CACxC,IAAI,UAAU,QAAQ,MAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM;CACtE,IAAI,IAAa;CACjB,OAAO,UAAU,QAAQ,WAAW;EAClC,MAAM,UAAU,WAAW,MAAM,GAAG;EACpC,IAAI,CAAC,SAAS;EACd,IAAI,QAAQ,CAAU;CACxB;CACA,OAAO;AACT;;;;;;AAOA,SAAgB,eAAe,QAAmB,OAAO,OAAO,OAAO,SAAoB;CACzF,OAAO,aAAa,cAAc,QAAQ,cAAc,QAAQ,IAAI,CAAC;AACvE;;AAGA,MAAa,0BAA0B,SACrC,aAAa,mBAAmB,IAAI;;AAGtC,MAAa,oBAAoB,KAAkB,OAAO,oBACxD,aAAa,YAAY,QAAQ,YAAY,KAAK,IAAI,CAAC;;AAGzD,MAAa,wBAAwB,YACnC,aAAa,iBAAiB,OAAO;;AAGvC,MAAa,yBAAyB,UACpC,aAAa,kBAAkB,KAAK"}

package/dist/redact-C4fL_bZP.js

@@ -0,0 +1,167 @@
+//#region src/redact.ts
+/** What a masked value reads as. */
+const REDACTED = "[REDACTED]";
+const SECRET_NAME = /KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL/i;
+/** Well-known credential shapes, masked even when they aren't in this process's environment. */
+const TOKEN_PATTERNS = [
+	/AIza[0-9A-Za-z_-]{35}/g,
+	/\bsk-(?:ant-|proj-)?[A-Za-z0-9_-]{20,}/g,
+	/\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}/g,
+	/\bgithub_pat_[A-Za-z0-9_]{22,}/g,
+	/\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+	/\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
+	/\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
+	/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+];
+/** Values declared with `secret()`, masked whatever their variable is called. */
+const declared = /* @__PURE__ */ new Set();
+function registerSecret(value) {
+	if (value && value.length >= 4) declared.add(value);
+}
+/** Encoded forms shorter than this aren't masked, so they can't eat ordinary text. */
+const MIN_ENCODED = 8;
+/**
+* The stretch of base64 that encodes `value` wherever it starts in a longer input: one per byte
+* offset (0, 1 or 2), without the characters shared with the bytes around it. Plus the URL-safe
+* alphabet of each.
+*/
+function base64Forms(value) {
+	const bytes = Buffer.from(value);
+	const out = [];
+	for (const offset of [
+		0,
+		1,
+		2
+	]) {
+		const padded = Buffer.concat([Buffer.alloc(offset), bytes]);
+		const encoded = padded.toString("base64").replace(/=+$/, "");
+		const skip = Math.ceil(offset * 8 / 6);
+		const tail = padded.length % 3;
+		const keep = Math.floor(padded.length / 3) * 4 + tail;
+		const form = encoded.slice(skip, keep);
+		out.push(form, form.replaceAll("+", "-").replaceAll("/", "_"));
+	}
+	return out;
+}
+/** How a value may appear once a client or a log has encoded it: JSON, URL and base64. */
+function encodedForms(value) {
+	const forms = [
+		jsonEscaped(value),
+		encodeURIComponent(value),
+		new URLSearchParams({ v: value }).toString().slice(2),
+		...base64Forms(value)
+	];
+	return [...new Set(forms)].filter((f) => f !== value && f.length >= MIN_ENCODED);
+}
+const jsonEscaped = (s) => JSON.stringify(s).slice(1, -1);
+const formsCache = /* @__PURE__ */ new Map();
+/**
+* The value and its encoded forms, each also as it reads inside a JSON string: redaction runs on
+* serialised records, where a JSON-escaped form the agent printed is escaped a second time.
+*/
+const formsOf = (value) => {
+	let forms = formsCache.get(value);
+	if (!forms) {
+		forms = [...new Set([value, ...encodedForms(value)].flatMap((f) => [f, jsonEscaped(f)]))];
+		formsCache.set(value, forms);
+	}
+	return forms;
+};
+/**
+* Whether a secret-named variable's value looks like a credential, so its fragments are masked
+* too. Paths, URLs and prose (`SSH_KEY_PATH=/home/me/.ssh/id_rsa`) would otherwise mask every
+* `/home/me` in the output. Declared secrets of 12 or more characters always count.
+*/
+const tokenLike = (value) => value.length >= 16 && /^[\w.~+/=:-]+$/.test(value) && !/^[/~.]/.test(value) && !value.includes("://") && /[A-Za-z]/.test(value) && /\d/.test(value);
+/** Windows that could be an ordinary word or number (`password`, `20260926`) aren't masked alone. */
+const WORDISH = /^(?:[a-z]+|[A-Z]+|\d+)$/;
+/**
+* Windows with quotes, backslashes, commas, brackets or whitespace aren't masked alone: they can
+* match the structure of serialised JSON (`","sha256":"`) and break the record around them.
+*/
+const STRUCTURAL = /["'\\,:{}[\]\s]/;
+const pairHash = (text, i) => (text.charCodeAt(i) * 31 ^ text.charCodeAt(i + 1)) & 65535;
+let cached;
+function envSecrets(env) {
+	const named = Object.entries(env).filter(([name, value]) => SECRET_NAME.test(name) && value && value.length >= 8).map(([, value]) => value);
+	const values = [.../* @__PURE__ */ new Set([...named, ...declared])];
+	const key = values.map((v) => `${declared.has(v) ? "d" : "n"}${v}`).join("\0");
+	if (cached?.key === key) return cached.secrets;
+	const forms = [...new Set(values.flatMap(formsOf))].sort((a, b) => b.length - a.length);
+	const windows = /* @__PURE__ */ new Set();
+	const starts = /* @__PURE__ */ new Uint8Array(65536);
+	for (const value of values) {
+		if (!(declared.has(value) ? value.length >= 12 : tokenLike(value))) continue;
+		for (let i = 0; i + 8 <= value.length; i++) {
+			const window = value.slice(i, i + 8);
+			if (WORDISH.test(window) || STRUCTURAL.test(window)) continue;
+			windows.add(window);
+			starts[pairHash(value, i)] = 1;
+		}
+	}
+	const secrets = {
+		forms,
+		windows,
+		starts
+	};
+	cached = {
+		key,
+		secrets
+	};
+	return secrets;
+}
+/** The `[start, end)` stretches of `text` made of some secret's fragments, merged. */
+function fragmentRanges(text, { windows, starts }) {
+	const ranges = [];
+	if (windows.size === 0) return ranges;
+	for (let i = 0; i + 8 <= text.length; i++) {
+		if (!starts[pairHash(text, i)] || !windows.has(text.slice(i, i + 8))) continue;
+		const last = ranges.at(-1);
+		if (last && i <= last[1]) last[1] = i + 8;
+		else ranges.push([i, i + 8]);
+	}
+	return ranges;
+}
+function maskFragments(text, secrets) {
+	const ranges = fragmentRanges(text, secrets);
+	if (ranges.length === 0) return text;
+	let out = "";
+	let at = 0;
+	for (const [start, end] of ranges) {
+		out += `${text.slice(at, start)}${REDACTED}`;
+		at = end;
+	}
+	return out + text.slice(at);
+}
+/**
+* Masks the values of secret-looking environment variables and declared secrets, raw or
+* JSON-, URL- or base64-encoded, any stretch of `MIN_FRAGMENT` or more of their characters, and
+* well-known token shapes, anywhere in `text`.
+*/
+function redactSecrets(text, env = process.env) {
+	const secrets = envSecrets(env);
+	let out = text;
+	for (const secret of secrets.forms) out = out.replaceAll(secret, REDACTED);
+	out = maskFragments(out, secrets);
+	for (const pattern of TOKEN_PATTERNS) out = out.replace(pattern, REDACTED);
+	return out;
+}
+/** Counts what `redactSecrets` would mask. Used as a last check before anything leaves the machine. */
+function countSecrets(text, env = process.env) {
+	const secrets = envSecrets(env);
+	let count = 0;
+	let rest = text;
+	for (const secret of secrets.forms) {
+		count += rest.split(secret).length - 1;
+		rest = rest.replaceAll(secret, "\0");
+	}
+	count += fragmentRanges(rest, secrets).length;
+	for (const pattern of TOKEN_PATTERNS) count += rest.match(pattern)?.length ?? 0;
+	return count;
+}
+/** Drops `user:password@` from a URL so it can be recorded or shown. */
+const stripCredentials = (url) => url.replace(/^([a-z][a-z0-9+.-]*:\/\/)[^@/]*@/i, "$1");
+//#endregion
+export { registerSecret as a, redactSecrets as i, SECRET_NAME as n, stripCredentials as o, countSecrets as r, REDACTED as t };
+
+//# sourceMappingURL=redact-C4fL_bZP.js.map

package/dist/redact-C4fL_bZP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-C4fL_bZP.js","names":[],"sources":["../src/redact.ts"],"mappings":";;AACA,MAAa,WAAW;AAExB,MAAa,cAAc;;AAG3B,MAAM,iBAA2B;CAC/B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,2BAAW,IAAI,IAAY;AAEjC,SAAgB,eAAe,OAAiC;CAC9D,IAAI,SAAS,MAAM,UAAU,GAAG,SAAS,IAAI,KAAK;AACpD;;AAGA,MAAM,cAAc;;;;;;AAOpB,SAAgB,YAAY,OAAyB;CACnD,MAAM,QAAQ,OAAO,KAAK,KAAK;CAC/B,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,UAAU;EAAC;EAAG;EAAG;CAAC,GAAG;EAC9B,MAAM,SAAS,OAAO,OAAO,CAAC,OAAO,MAAM,MAAM,GAAG,KAAK,CAAC;EAC1D,MAAM,UAAU,OAAO,SAAS,QAAQ,CAAC,CAAC,QAAQ,OAAO,EAAE;EAC3D,MAAM,OAAO,KAAK,KAAM,SAAS,IAAK,CAAC;EACvC,MAAM,OAAO,OAAO,SAAS;EAC7B,MAAM,OAAO,KAAK,MAAM,OAAO,SAAS,CAAC,IAAI,IAAI;EACjD,MAAM,OAAO,QAAQ,MAAM,MAAM,IAAI;EACrC,IAAI,KAAK,MAAM,KAAK,WAAW,KAAK,GAAG,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC;CAC/D;CACA,OAAO;AACT;;AAGA,SAAgB,aAAa,OAAyB;CACpD,MAAM,QAAQ;EACZ,YAAY,KAAK;EACjB,mBAAmB,KAAK;EACxB,IAAI,gBAAgB,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;EACpD,GAAG,YAAY,KAAK;CACtB;CACA,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,MAAM,MAAM,SAAS,EAAE,UAAU,WAAW;AACjF;AAEA,MAAM,eAAe,MAAc,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE;AAEhE,MAAM,6BAAa,IAAI,IAAsB;;;;;AAK7C,MAAM,WAAW,UAAkB;CACjC,IAAI,QAAQ,WAAW,IAAI,KAAK;CAChC,IAAI,CAAC,OAAO;EACV,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;EACxF,WAAW,IAAI,OAAO,KAAK;CAC7B;CACA,OAAO;AACT;;;;;;AAUA,MAAM,aAAa,UACjB,MAAM,UAAU,MAChB,iBAAiB,KAAK,KAAK,KAC3B,CAAC,SAAS,KAAK,KAAK,KACpB,CAAC,MAAM,SAAS,KAAK,KACrB,WAAW,KAAK,KAAK,KACrB,KAAK,KAAK,KAAK;;AAGjB,MAAM,UAAU;;;;;AAKhB,MAAM,aAAa;AAWnB,MAAM,YAAY,MAAc,OAC5B,KAAK,WAAW,CAAC,IAAI,KAAM,KAAK,WAAW,IAAI,CAAC,KAAK;AAEzD,IAAI;AAEJ,SAAS,WAAW,KAAiC;CACnD,MAAM,QAAQ,OAAO,QAAQ,GAAG,CAAC,CAC9B,QAAQ,CAAC,MAAM,WAAW,YAAY,KAAK,IAAI,KAAK,SAAS,MAAM,UAAU,CAAC,CAAC,CAC/E,KAAK,GAAG,WAAW,KAAe;CACrC,MAAM,SAAS,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC;CACnD,MAAM,MAAM,OAAO,KAAK,MAAM,GAAG,SAAS,IAAI,CAAC,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI;CAC7E,IAAI,QAAQ,QAAQ,KAAK,OAAO,OAAO;CACvC,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,OAAO,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM;CACtF,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,yBAAS,IAAI,WAAW,KAAO;CACrC,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,EAAE,SAAS,IAAI,KAAK,IAAI,MAAM,UAAU,KAAK,UAAU,KAAK,IAAI;EACpE,KAAK,IAAI,IAAI,GAAG,IAAA,KAAoB,MAAM,QAAQ,KAAK;GACrD,MAAM,SAAS,MAAM,MAAM,GAAG,IAAA,CAAgB;GAC9C,IAAI,QAAQ,KAAK,MAAM,KAAK,WAAW,KAAK,MAAM,GAAG;GACrD,QAAQ,IAAI,MAAM;GAClB,OAAO,SAAS,OAAO,CAAC,KAAK;EAC/B;CACF;CACA,MAAM,UAAU;EAAE;EAAO;EAAS;CAAO;CACzC,SAAS;EAAE;EAAK;CAAQ;CACxB,OAAO;AACT;;AAGA,SAAS,eAAe,MAAc,EAAE,SAAS,UAA4C;CAC3F,MAAM,SAAkC,CAAC;CACzC,IAAI,QAAQ,SAAS,GAAG,OAAO;CAC/B,KAAK,IAAI,IAAI,GAAG,IAAA,KAAoB,KAAK,QAAQ,KAAK;EACpD,IAAI,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,MAAM,GAAG,IAAA,CAAgB,CAAC,GAAG;EACjF,MAAM,OAAO,OAAO,GAAG,EAAE;EACzB,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAK,KAAK,IAAA;OAC/B,OAAO,KAAK,CAAC,GAAG,IAAA,CAAgB,CAAC;CACxC;CACA,OAAO;AACT;AAEA,SAAS,cAAc,MAAc,SAA0B;CAC7D,MAAM,SAAS,eAAe,MAAM,OAAO;CAC3C,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,IAAI,MAAM;CACV,IAAI,KAAK;CACT,KAAK,MAAM,CAAC,OAAO,QAAQ,QAAQ;EACjC,OAAO,GAAG,KAAK,MAAM,IAAI,KAAK,IAAI;EAClC,KAAK;CACP;CACA,OAAO,MAAM,KAAK,MAAM,EAAE;AAC5B;;;;;;AAOA,SAAgB,cAAc,MAAc,MAAyB,QAAQ,KAAa;CACxF,MAAM,UAAU,WAAW,GAAG;CAC9B,IAAI,MAAM;CACV,KAAK,MAAM,UAAU,QAAQ,OAAO,MAAM,IAAI,WAAW,QAAQ,QAAQ;CACzE,MAAM,cAAc,KAAK,OAAO;CAChC,KAAK,MAAM,WAAW,gBAAgB,MAAM,IAAI,QAAQ,SAAS,QAAQ;CACzE,OAAO;AACT;;AAGA,SAAgB,aAAa,MAAc,MAAyB,QAAQ,KAAa;CACvF,MAAM,UAAU,WAAW,GAAG;CAC9B,IAAI,QAAQ;CACZ,IAAI,OAAO;CACX,KAAK,MAAM,UAAU,QAAQ,OAAO;EAClC,SAAS,KAAK,MAAM,MAAM,CAAC,CAAC,SAAS;EACrC,OAAO,KAAK,WAAW,QAAQ,IAAI;CACrC;CACA,SAAS,eAAe,MAAM,OAAO,CAAC,CAAC;CACvC,KAAK,MAAM,WAAW,gBAAgB,SAAS,KAAK,MAAM,OAAO,CAAC,EAAE,UAAU;CAC9E,OAAO;AACT;;AAGA,MAAa,oBAAoB,QAC/B,IAAI,QAAQ,qCAAqC,IAAI"}

package/dist/results-CeXb8Wde.js

@@ -0,0 +1,37 @@
+import { a as renderSummary } from "./summary-D7Ttky0z.js";
+import { f as scratchDir, m as writeRun } from "./files-D2-qn_Dl.js";
+import { n as assembleRun } from "./assemble-B-nmz8oH.js";
+import { join } from "node:path";
+import { readdir, rm, stat } from "node:fs/promises";
+//#region src/results.ts
+const STALE_STAGING_MS = 864e5;
+/** Where workers write raw per-eval records before the run is assembled. */
+const stagingDir = (root, runId) => join(root, ".reeval", "staging", runId);
+/** Removes staging left behind by runs that were killed before they could clean up. */
+async function sweepStaging(root) {
+	const dir = join(root, ".reeval", "staging");
+	const entries = await readdir(dir).catch(() => []);
+	for (const name of entries) if (await stat(join(dir, name)).then((s) => Date.now() - s.mtimeMs, () => 0) > STALE_STAGING_MS) await rm(join(dir, name), {
+		recursive: true,
+		force: true
+	});
+}
+/** Assembles the run into `.reeval/runs/`, with every artifact and a summary.md. */
+async function writeScratchRun(input, landed) {
+	const { record, artifacts } = await assembleRun(input);
+	artifacts.set("summary.md", Buffer.from(renderSummary(record)));
+	const written = await writeRun(scratchDir(input.ctx.config.root), record, artifacts);
+	landed?.();
+	await rm(input.ctx.stagingDir, {
+		recursive: true,
+		force: true
+	});
+	return {
+		...written,
+		record
+	};
+}
+//#endregion
+export { stagingDir, sweepStaging, writeScratchRun };
+
+//# sourceMappingURL=results-CeXb8Wde.js.map

package/dist/results-CeXb8Wde.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results-CeXb8Wde.js","names":[],"sources":["../src/results.ts"],"mappings":";;;;;;AAOA,MAAM,mBAAmB;;AAGzB,MAAa,cAAc,MAAc,UAAkB,KAAK,MAAM,WAAW,WAAW,KAAK;;AAGjG,eAAsB,aAAa,MAA6B;CAC9D,MAAM,MAAM,KAAK,MAAM,WAAW,SAAS;CAC3C,MAAM,UAAU,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;CACjD,KAAK,MAAM,QAAQ,SAKjB,IAAI,MAJc,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MACrC,MAAM,KAAK,IAAI,IAAI,EAAE,eAChB,CACR,IACU,kBAAkB,MAAM,GAAG,KAAK,KAAK,IAAI,GAAG;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;AAE1F;;AAGA,eAAsB,gBACpB,OACA,QAC6C;CAC7C,MAAM,EAAE,QAAQ,cAAc,MAAM,YAAY,KAAK;CACrD,UAAU,IAAI,cAAc,OAAO,KAAK,cAAc,MAAM,CAAC,CAAC;CAC9D,MAAM,UAAU,MAAM,SAAS,WAAW,MAAM,IAAI,OAAO,IAAI,GAAG,QAAQ,SAAS;CACnF,SAAS;CACT,MAAM,GAAG,MAAM,IAAI,YAAY;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAC/D,OAAO;EAAE,GAAG;EAAS;CAAO;AAC9B"}

package/dist/root-CFDjpWuc.js

@@ -0,0 +1,110 @@
+import { createRequire } from "node:module";
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, dirname, join, sep } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { createHash } from "node:crypto";
+//#region src/root.ts
+const HERE = import.meta.url;
+/**
+* Whether reeval runs as a single-file executable (`bun build --compile`, scripts/bun-compile.mjs).
+* Its own files are embedded in it, in a package's layout, at the root of Bun's virtual
+* filesystem, beside the bundled code.
+*/
+const COMPILED = /^file:\/\/\/(?:\$bunfs|[A-Za-z]:\/~BUN)\//.test(HERE);
+const PACKAGE_DIR = fileURLToPath(new URL(COMPILED ? "./" : "../", HERE));
+const DIST_DIR = join(PACKAGE_DIR, "dist");
+/** One of reeval's own files, by its path in the package (`docker`, `dist/studio-app`, …). */
+const ownFile = (path) => join(PACKAGE_DIR, path);
+/**
+* `ownFile` as a URL; a trailing `/` stays, so the URL resolves names inside the directory.
+* Compiled, a directory is `ownDir`'s copy on disk.
+*/
+function ownFileURL(path) {
+	const file = ownFile(path);
+	if (!COMPILED || !statSync(file, { throwIfNoEntry: false })?.isDirectory()) return pathToFileURL(file);
+	return pathToFileURL(ownDir(path) + (/[\\/]$/.test(path) ? sep : ""));
+}
+const extracted = /* @__PURE__ */ new Map();
+/**
+* One of reeval's own directories, as a real one on disk. Compiled, it's copied out of the
+* executable once, to a cache directory named for its contents: `docker build` and copying the
+* studio app need real files.
+*/
+function ownDir(path) {
+	const from = ownFile(path);
+	if (!COMPILED) return from;
+	const known = extracted.get(from);
+	if (known) return known;
+	const files = readdirSync(from, {
+		recursive: true,
+		encoding: "utf8"
+	}).filter((f) => statSync(join(from, f)).isFile()).sort();
+	const hash = createHash("sha256");
+	for (const f of files) hash.update(`${f.replaceAll(sep, "/")}\0`).update(readFileSync(join(from, f)));
+	const to = join(cacheDir(), `${basename(from)}-${hash.digest("hex").slice(0, 16)}`);
+	if (!existsSync(to)) {
+		const partial = `${to}.${process.pid}.partial`;
+		for (const f of files) {
+			mkdirSync(dirname(join(partial, f)), { recursive: true });
+			writeFileSync(join(partial, f), readFileSync(join(from, f)));
+		}
+		try {
+			renameSync(partial, to);
+		} catch (error) {
+			rmSync(partial, {
+				recursive: true,
+				force: true
+			});
+			if (!existsSync(to)) throw error;
+		}
+	}
+	extracted.set(from, to);
+	return to;
+}
+/** Where a compiled es keeps what it copies out of itself. */
+function cacheDir() {
+	const base = process.env.XDG_CACHE_HOME || (process.platform === "win32" ? process.env.LOCALAPPDATA || join(homedir(), "AppData", "Local") : process.platform === "darwin" ? join(homedir(), "Library", "Caches") : join(homedir(), ".cache"));
+	return join(base, "reeval");
+}
+/** `require` as seen from reeval's package: its dependencies and Node's built-ins. */
+const ownRequire = createRequire(ownFile("package.json"));
+let versions;
+/**
+* The version of one of reeval's dependencies, as installed; compiled, as bundled, from the
+* `versions.json` embedded beside its files. Throws for a package it doesn't have.
+*/
+function ownVersion(name) {
+	if (!COMPILED) return ownRequire(`${name}/package.json`).version;
+	versions ??= JSON.parse(readFileSync(ownFile("versions.json"), "utf8"));
+	const version = versions[name];
+	if (!version) throw new Error(`Cannot find module '${name}/package.json'`);
+	return version;
+}
+const manifest = JSON.parse(readFileSync(ownFile("package.json"), "utf8"));
+/** This reeval's package name and version, from its package.json. */
+const PACKAGE_NAME = manifest.name;
+const PACKAGE_VERSION = manifest.version;
+/** The names a project imports reeval by: the package's, and the monorepo's alias for it. */
+const PACKAGE_NAMES = [.../* @__PURE__ */ new Set([PACKAGE_NAME, "reeval"])];
+/**
+* This build of reeval: its version and its code's mtime. npm gives every installed file the same
+* mtime, so the version tells releases apart; a rebuild moves the mtime.
+*/
+const BUILD_ID = `${PACKAGE_VERSION}:${statSync(COMPILED ? process.execPath : fileURLToPath(HERE)).mtimeMs}`;
+/**
+* The command that runs the `reeval` at `cli` (a package's `dist/cli.js`) with `args`: Node with
+* `nodeArgs` and the file, or, compiled, this executable, which runs its own code.
+*/
+function esCommand(cli, args, nodeArgs = []) {
+	return COMPILED ? [process.execPath, ...args] : [
+		process.execPath,
+		...nodeArgs,
+		cli,
+		...args
+	];
+}
+//#endregion
+export { PACKAGE_NAMES as a, ownDir as c, ownVersion as d, PACKAGE_DIR as i, ownFileURL as l, COMPILED as n, PACKAGE_VERSION as o, DIST_DIR as r, esCommand as s, BUILD_ID as t, ownRequire as u };
+
+//# sourceMappingURL=root-CFDjpWuc.js.map

package/dist/root-CFDjpWuc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-CFDjpWuc.js","names":[],"sources":["../src/root.ts"],"mappings":";;;;;;;AAqBA,MAAM,OAAO,YAAY;;;;;;AAOzB,MAAa,WAAW,4CAA4C,KAAK,IAAI;AAE7E,MAAa,cAAc,cAAc,IAAI,IAAI,WAAW,OAAO,OAAO,IAAI,CAAC;AAC/E,MAAa,WAAW,KAAK,aAAa,MAAM;;AAGhD,MAAa,WAAW,SAAyB,KAAK,aAAa,IAAI;;;;;AAMvE,SAAgB,WAAW,MAAmB;CAC5C,MAAM,OAAO,QAAQ,IAAI;CACzB,IAAI,CAAC,YAAY,CAAC,SAAS,MAAM,EAAE,gBAAgB,MAAM,CAAC,CAAC,EAAE,YAAY,GACvE,OAAO,cAAc,IAAI;CAC3B,OAAO,cAAc,OAAO,IAAI,KAAK,SAAS,KAAK,IAAI,IAAI,MAAM,GAAG;AACtE;AAEA,MAAM,4BAAY,IAAI,IAAoB;;;;;;AAO1C,SAAgB,OAAO,MAAsB;CAC3C,MAAM,OAAO,QAAQ,IAAI;CACzB,IAAI,CAAC,UAAU,OAAO;CACtB,MAAM,QAAQ,UAAU,IAAI,IAAI;CAChC,IAAI,OAAO,OAAO;CAClB,MAAM,QAAQ,YAAY,MAAM;EAAE,WAAW;EAAM,UAAU;CAAO,CAAC,CAAC,CACnE,QAAQ,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAC/C,KAAK;CACR,MAAM,OAAO,WAAW,QAAQ;CAChC,KAAK,MAAM,KAAK,OACd,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC;CAC/E,MAAM,KAAK,KAAK,SAAS,GAAG,GAAG,SAAS,IAAI,EAAE,GAAG,KAAK,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG;CAClF,IAAI,CAAC,WAAW,EAAE,GAAG;EACnB,MAAM,UAAU,GAAG,GAAG,GAAG,QAAQ,IAAI;EACrC,KAAK,MAAM,KAAK,OAAO;GACrB,UAAU,QAAQ,KAAK,SAAS,CAAC,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;GACxD,cAAc,KAAK,SAAS,CAAC,GAAG,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC;EAC7D;EACA,IAAI;GACF,WAAW,SAAS,EAAE;EACxB,SAAS,OAAO;GACd,OAAO,SAAS;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAChD,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM;EAC7B;CACF;CACA,UAAU,IAAI,MAAM,EAAE;CACtB,OAAO;AACT;;AAGA,SAAS,WAAmB;CAC1B,MAAM,OACJ,QAAQ,IAAI,mBACX,QAAQ,aAAa,UAClB,QAAQ,IAAI,gBAAgB,KAAK,QAAQ,GAAG,WAAW,OAAO,IAC9D,QAAQ,aAAa,WACnB,KAAK,QAAQ,GAAG,WAAW,QAAQ,IACnC,KAAK,QAAQ,GAAG,QAAQ;CAChC,OAAO,KAAK,MAAM,QAAQ;AAC5B;;AAGA,MAAa,aAAa,cAAc,QAAQ,cAAc,CAAC;AAE/D,IAAI;;;;;AAMJ,SAAgB,WAAW,MAAsB;CAC/C,IAAI,CAAC,UAAU,OAAO,WAAW,GAAG,KAAK,cAAc,CAAC,CAAC;CACzD,aAAa,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,MAAM,CAAC;CACtE,MAAM,UAAU,SAAS;CACzB,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,uBAAuB,KAAK,eAAe;CACzE,OAAO;AACT;AAEA,MAAM,WAAW,KAAK,MAAM,aAAa,QAAQ,cAAc,GAAG,MAAM,CAAC;;AAGzE,MAAa,eAAuB,SAAS;AAC7C,MAAa,kBAA0B,SAAS;;AAGhD,MAAa,gBAAmC,CAAC,mBAAG,IAAI,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC;;;;;AAMrF,MAAa,WAAW,GAAG,gBAAgB,GAAG,SAAS,WAAW,QAAQ,WAAW,cAAc,IAAI,CAAC,CAAC,CAAC;;;;;AAM1G,SAAgB,UACd,KACA,MACA,WAA8B,CAAC,GACR;CACvB,OAAO,WAAW,CAAC,QAAQ,UAAU,GAAG,IAAI,IAAI;EAAC,QAAQ;EAAU,GAAG;EAAU;EAAK,GAAG;CAAI;AAC9F"}

package/dist/sandbox-By2gkdkC.js

@@ -0,0 +1,133 @@
+import { t as UsageError } from "./errors-CSxfJ4qu.js";
+import { r as callerDir, x as parseDuration } from "./environment-Mz7wvrtD.js";
+import { existsSync, statSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/sandbox.ts
+const DOCKER_KEYS = [
+	"id",
+	"image",
+	"from",
+	"dockerfile",
+	"install",
+	"maxConcurrent",
+	"root",
+	"capabilities",
+	"memory",
+	"cpus",
+	"pids"
+];
+const DOCKER_HINTS = {
+	steps: "install",
+	run: "install",
+	setup: "install",
+	image_steps: "install",
+	file: "dockerfile",
+	build: "dockerfile",
+	base: "from",
+	user: "root",
+	privileged: "root",
+	capAdd: "capabilities",
+	caps: "capabilities",
+	mem: "memory",
+	memoryLimit: "memory",
+	cpu: "cpus",
+	pidsLimit: "pids"
+};
+/** Docker's memory size: bytes, or a number with `b`, `k`, `m` or `g`. */
+const MEMORY = /^\d+(\.\d+)?[bkmg]?$/i;
+function checkConfinement(options) {
+	const { root, capabilities, memory, cpus, pids } = options;
+	if (root !== void 0 && typeof root !== "boolean") throw new UsageError(`docker({ root }) is true or false (got ${JSON.stringify(root)})`);
+	if (capabilities !== void 0 && (!Array.isArray(capabilities) || !capabilities.every((c) => typeof c === "string" && /^(CAP_)?[A-Z_]+$/.test(c)))) throw new UsageError(`docker({ capabilities }) takes Linux capability names, e.g. capabilities: ['NET_RAW'] (got ${JSON.stringify(capabilities)})`);
+	if (memory !== void 0 && !(typeof memory === "number" ? Number.isInteger(memory) && memory > 0 : MEMORY.test(memory))) throw new UsageError(`docker({ memory }) takes a size such as '4g' or '512m', or bytes (got ${JSON.stringify(memory)})`);
+	if (cpus !== void 0 && !(typeof cpus === "number" && cpus > 0 && Number.isFinite(cpus))) throw new UsageError(`docker({ cpus }) takes a number of CPUs above zero, e.g. 1.5 (got ${JSON.stringify(cpus)})`);
+	if (pids !== void 0 && !(Number.isInteger(pids) && pids > 0)) throw new UsageError(`docker({ pids }) takes a whole number of processes above zero (got ${JSON.stringify(pids)})`);
+}
+function checkInstall(install) {
+	if (!Array.isArray(install) || install.length === 0) throw new UsageError(`docker({ install }) takes a non-empty list of shell commands, e.g. install: ['apt-get update && apt-get install -y jq'] (got ${JSON.stringify(install)})`);
+	for (const step of install) {
+		const run = typeof step === "string" ? step : step?.run;
+		const timeout = typeof step === "string" ? void 0 : step.timeout;
+		if (typeof run !== "string" || !run.trim()) throw new UsageError(`docker({ install }) commands are strings or { run, timeout? } objects (got ${JSON.stringify(step)})`);
+		if (timeout === void 0) continue;
+		try {
+			parseDuration(timeout);
+		} catch (error) {
+			throw new UsageError(`docker({ install }) command "${run}": ${error.message}`);
+		}
+	}
+	return structuredClone(install);
+}
+/**
+* One local Docker container per attempt. By default it's the image `reeval image build` makes. One
+* base at most:
+*
+* - `image`: another image that already has the harness baked in, used as is.
+* - `from`: a Debian or Ubuntu based toolchain image (e.g. `python:3.12-slim`); reeval bakes Node and
+*   the harness on top on first use.
+* - `dockerfile`: your Dockerfile, built with `docker build` from its directory. Start it
+*   `ARG REEVAL_BASE` / `FROM ${REEVAL_BASE}` to layer on reeval's sandbox image; from any other Debian or
+*   Ubuntu base, reeval bakes Node and the harness on top, as for `from`.
+*
+* `install` bakes shell commands onto the base in one cached layer (not with `dockerfile`: put
+* them in it). They run as root from `/`, in order, and never see secrets or the workspace; what
+* needs either belongs in the environment's `setup`.
+*
+* At run time the agent, setup steps and checks run as the unprivileged `es` user with every
+* capability dropped, `no-new-privileges`, and `memory`, `cpus` and `pids` limits. `root: true`
+* opts an eval into root; `capabilities` adds specific ones back.
+*/
+function docker(options = {}) {
+	if (typeof options !== "object" || options === null || Array.isArray(options)) throw new UsageError(`docker() takes an options object (got ${JSON.stringify(options)})`);
+	for (const key of Object.keys(options)) {
+		if (DOCKER_KEYS.includes(key)) continue;
+		if (key === "environment" || key === "env") throw new UsageError(`Unknown docker() option "${key}". The sandbox is what's baked into the image; variables and secrets belong in defineEnvironment({ env }).`);
+		const hint = DOCKER_HINTS[key] ? ` Did you mean "${DOCKER_HINTS[key]}"?` : "";
+		throw new UsageError(`Unknown docker() option "${key}".${hint}`);
+	}
+	const bases = [
+		"image",
+		"from",
+		"dockerfile"
+	].filter((k) => options[k] !== void 0);
+	if (bases.length > 1) throw new UsageError(`docker() takes one base image, but got ${bases.join(" and ")}. Use image (has the harness), from (a toolchain image reeval bakes the harness onto) or dockerfile.`);
+	for (const key of [
+		"id",
+		"image",
+		"from"
+	]) {
+		const value = options[key];
+		if (value !== void 0 && (typeof value !== "string" || !value.trim())) throw new UsageError(`docker({ ${key} }) must be a non-empty string (got ${JSON.stringify(value)})`);
+	}
+	checkConfinement(options);
+	const { dockerfile, install, ...rest } = options;
+	const descriptor = {
+		kind: "docker",
+		...rest
+	};
+	if (rest.capabilities) descriptor.capabilities = [...rest.capabilities];
+	if (dockerfile !== void 0) {
+		if (install !== void 0) throw new UsageError("docker() takes dockerfile or install, not both: put the install commands in the Dockerfile as RUN lines, so there's one recipe for the image.");
+		if (!(dockerfile instanceof URL) && (typeof dockerfile !== "string" || !dockerfile.trim())) throw new UsageError(`docker({ dockerfile }) takes a path, e.g. dockerfile: './Dockerfile' (got ${JSON.stringify(dockerfile)})`);
+		const path = dockerfile instanceof URL ? fileURLToPath(dockerfile) : dockerfile;
+		const full = isAbsolute(path) ? path : resolve(callerDir() ?? process.cwd(), path);
+		if (!existsSync(full) || !statSync(full).isFile()) throw new UsageError(`docker({ dockerfile: ${JSON.stringify(path)} }): ${full} doesn't exist. Paths are relative to the file that calls docker().`);
+		descriptor.dockerfile = full;
+	}
+	if (install !== void 0) descriptor.install = checkInstall(install);
+	return descriptor;
+}
+/**
+* A temp directory on the host with no isolation. For tests and the fake harness only. `dir` may
+* be a `file:` URL, such as `new URL('./sandboxes', import.meta.url)`.
+*/
+const fakeSandbox = ({ dir, ...options } = {}) => ({
+	kind: "fake",
+	...options,
+	...dir !== void 0 && { dir: dir instanceof URL ? fileURLToPath(dir) : dir }
+});
+//#endregion
+export { fakeSandbox as n, docker as t };
+
+//# sourceMappingURL=sandbox-By2gkdkC.js.map

package/dist/sandbox-By2gkdkC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-By2gkdkC.js","names":[],"sources":["../src/sandbox.ts"],"mappings":";;;;;;AAmBA,MAAM,cAAc;CAClB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,eAAuC;CAC3C,OAAO;CACP,KAAK;CACL,OAAO;CACP,aAAa;CACb,MAAM;CACN,OAAO;CACP,MAAM;CACN,MAAM;CACN,YAAY;CACZ,QAAQ;CACR,MAAM;CACN,KAAK;CACL,aAAa;CACb,KAAK;CACL,WAAW;AACb;;AAGA,MAAM,SAAS;AAEf,SAAS,iBAAiB,SAA8B;CACtD,MAAM,EAAE,MAAM,cAAc,QAAQ,MAAM,SAAS;CACnD,IAAI,SAAS,KAAA,KAAa,OAAO,SAAS,WACxC,MAAM,IAAI,WAAW,0CAA0C,KAAK,UAAU,IAAI,EAAE,EAAE;CAExF,IACE,iBAAiB,KAAA,MAChB,CAAC,MAAM,QAAQ,YAAY,KAC1B,CAAC,aAAa,OAAO,MAAM,OAAO,MAAM,YAAY,mBAAmB,KAAK,CAAC,CAAC,IAEhF,MAAM,IAAI,WACR,8FAA8F,KAAK,UAAU,YAAY,EAAE,EAC7H;CAEF,IACE,WAAW,KAAA,KACX,EAAE,OAAO,WAAW,WAAW,OAAO,UAAU,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,IAE1F,MAAM,IAAI,WACR,yEAAyE,KAAK,UAAU,MAAM,EAAE,EAClG;CAEF,IAAI,SAAS,KAAA,KAAa,EAAE,OAAO,SAAS,YAAY,OAAO,KAAK,OAAO,SAAS,IAAI,IACtF,MAAM,IAAI,WACR,qEAAqE,KAAK,UAAU,IAAI,EAAE,EAC5F;CAEF,IAAI,SAAS,KAAA,KAAa,EAAE,OAAO,UAAU,IAAI,KAAM,OAAkB,IACvE,MAAM,IAAI,WACR,sEAAsE,KAAK,UAAU,IAAI,EAAE,EAC7F;AAEJ;AAEA,SAAS,aAAa,SAAiC;CACrD,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAChD,MAAM,IAAI,WACR,gIAAgI,KAAK,UAAU,OAAO,EAAE,EAC1J;CAEF,KAAK,MAAM,QAAQ,SAAS;EAC1B,MAAM,MAAM,OAAO,SAAS,WAAW,OAAQ,MAA4B;EAC3E,MAAM,UAAU,OAAO,SAAS,WAAW,KAAA,IAAa,KAA+B;EACvF,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,GACvC,MAAM,IAAI,WACR,8EAA8E,KAAK,UAAU,IAAI,EAAE,EACrG;EAEF,IAAI,YAAY,KAAA,GAAW;EAC3B,IAAI;GACF,cAAc,OAAmB;EACnC,SAAS,OAAO;GACd,MAAM,IAAI,WAAW,gCAAgC,IAAI,KAAM,MAAgB,SAAS;EAC1F;CACF;CACA,OAAO,gBAAgB,OAAO;AAChC;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,OAAO,UAAyB,CAAC,GAA4B;CAC3E,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,QAAQ,OAAO,GAC1E,MAAM,IAAI,WAAW,yCAAyC,KAAK,UAAU,OAAO,EAAE,EAAE;CAE1F,KAAK,MAAM,OAAO,OAAO,KAAK,OAAO,GAAG;EACtC,IAAI,YAAY,SAAS,GAAG,GAAG;EAC/B,IAAI,QAAQ,iBAAiB,QAAQ,OACnC,MAAM,IAAI,WACR,4BAA4B,IAAI,2GAClC;EAEF,MAAM,OAAO,aAAa,OAAO,kBAAkB,aAAa,KAAK,MAAM;EAC3E,MAAM,IAAI,WAAW,4BAA4B,IAAI,IAAI,MAAM;CACjE;CACA,MAAM,QAAS;EAAC;EAAS;EAAQ;CAAY,CAAC,CAAW,QAAQ,MAAM,QAAQ,OAAO,KAAA,CAAS;CAC/F,IAAI,MAAM,SAAS,GACjB,MAAM,IAAI,WACR,0CAA0C,MAAM,KAAK,OAAO,EAAE,qGAChE;CAEF,KAAK,MAAM,OAAO;EAAC;EAAM;EAAS;CAAM,GAAY;EAClD,MAAM,QAAQ,QAAQ;EACtB,IAAI,UAAU,KAAA,MAAc,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,IACnE,MAAM,IAAI,WACR,YAAY,IAAI,sCAAsC,KAAK,UAAU,KAAK,EAAE,EAC9E;CAEJ;CACA,iBAAiB,OAAO;CACxB,MAAM,EAAE,YAAY,SAAS,GAAG,SAAS;CACzC,MAAM,aAAsC;EAAE,MAAM;EAAU,GAAG;CAAK;CACtE,IAAI,KAAK,cAAc,WAAW,eAAe,CAAC,GAAG,KAAK,YAAY;CACtE,IAAI,eAAe,KAAA,GAAW;EAC5B,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,WACR,+IACF;EAEF,IAAI,EAAE,sBAAsB,SAAS,OAAO,eAAe,YAAY,CAAC,WAAW,KAAK,IACtF,MAAM,IAAI,WACR,6EAA6E,KAAK,UAAU,UAAU,EAAE,EAC1G;EAEF,MAAM,OAAO,sBAAsB,MAAM,cAAc,UAAU,IAAI;EACrE,MAAM,OAAO,WAAW,IAAI,IAAI,OAAO,QAAQ,UAAU,KAAK,QAAQ,IAAI,GAAG,IAAI;EACjF,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,GAC9C,MAAM,IAAI,WACR,wBAAwB,KAAK,UAAU,IAAI,EAAE,OAAO,KAAK,oEAC3D;EAEF,WAAW,aAAa;CAC1B;CACA,IAAI,YAAY,KAAA,GAAW,WAAW,UAAU,aAAa,OAAO;CACpE,OAAO;AACT;;;;;AAMA,MAAa,eAAe,EAC1B,KACA,GAAG,YACqE,CAAC,OACxE;CACC,MAAM;CACN,GAAG;CACH,GAAI,QAAQ,KAAA,KAAa,EAAE,KAAK,eAAe,MAAM,cAAc,GAAG,IAAI,IAAI;AAChF"}

package/dist/sandbox.d.ts

@@ -0,0 +1,41 @@
+import { Q as SandboxDescriptor, j as FakeSandboxDescriptor, m as DockerSandboxDescriptor } from "./types-DLec-6Cx.js";
+//#region src/sandbox.d.ts
+export type DockerOptions = Omit<DockerSandboxDescriptor, 'kind' | 'dockerfile'> & {
+  /** Relative to the file that calls `docker()`, or an absolute path or `URL`. */
+  dockerfile?: string | URL;
+};
+/**
+ * One local Docker container per attempt. By default it's the image `reeval image build` makes. One
+ * base at most:
+ *
+ * - `image`: another image that already has the harness baked in, used as is.
+ * - `from`: a Debian or Ubuntu based toolchain image (e.g. `python:3.12-slim`); reeval bakes Node and
+ *   the harness on top on first use.
+ * - `dockerfile`: your Dockerfile, built with `docker build` from its directory. Start it
+ *   `ARG REEVAL_BASE` / `FROM ${REEVAL_BASE}` to layer on reeval's sandbox image; from any other Debian or
+ *   Ubuntu base, reeval bakes Node and the harness on top, as for `from`.
+ *
+ * `install` bakes shell commands onto the base in one cached layer (not with `dockerfile`: put
+ * them in it). They run as root from `/`, in order, and never see secrets or the workspace; what
+ * needs either belongs in the environment's `setup`.
+ *
+ * At run time the agent, setup steps and checks run as the unprivileged `es` user with every
+ * capability dropped, `no-new-privileges`, and `memory`, `cpus` and `pids` limits. `root: true`
+ * opts an eval into root; `capabilities` adds specific ones back.
+ */
+export declare function docker(options?: DockerOptions): DockerSandboxDescriptor;
+/**
+ * A temp directory on the host with no isolation. For tests and the fake harness only. `dir` may
+ * be a `file:` URL, such as `new URL('./sandboxes', import.meta.url)`.
+ */
+export declare const fakeSandbox: ({ dir, ...options }?: Omit<FakeSandboxDescriptor, 'kind' | 'dir'> & {
+  dir?: string | URL;
+}) => {
+  id?: string;
+  maxConcurrent?: number;
+  kind: "fake";
+  dir?: string | undefined;
+};
+//#endregion
+export type { DockerSandboxDescriptor, FakeSandboxDescriptor, SandboxDescriptor };
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.js

@@ -0,0 +1,2 @@
+import { n as fakeSandbox, t as docker } from "./sandbox-By2gkdkC.js";
+export { docker, fakeSandbox };