reeval 0.0.1

package/dist/server-Bi61uiY0.js

@@ -0,0 +1,350 @@
+import { i as redactSecrets } from "./redact-C4fL_bZP.js";
+import { a as parseDataPath, r as artifactType, t as RUN_ID } from "./paths-CBvm6pap.js";
+import { s as recordFileName } from "./ids-Bp6ut7ZD.js";
+import { l as parseDebugLog, u as parseNdjson } from "./debug-D24NOQH1.js";
+import { i as parseAttemptKey, t as attemptDebugDir } from "./files-BLlrhU4-.js";
+import { a as sortAnalyses } from "./analysis-CxSCt1YY.js";
+import { g as indexFiles } from "./model-CDL98xue.js";
+import { a as readableDebugRequest } from "./record-DQ8wzyco.js";
+import { c as readableLiveProgress, i as isFinished, n as LIVE_FILE } from "./live-Bs3LReMV.js";
+import { c as recordFile, f as scratchDir } from "./files-D2-qn_Dl.js";
+import { n as resolveFile, t as listHeaders } from "./source-Bsfa3LZH.js";
+import { createReadStream, existsSync } from "node:fs";
+import { hostname } from "node:os";
+import { extname, join, resolve, sep } from "node:path";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { Readable } from "node:stream";
+import { readFile, readdir, realpath, stat } from "node:fs/promises";
+import { Hono } from "hono";
+import { getCookie, setCookie } from "hono/cookie";
+import { streamSSE } from "hono/streaming";
+const stagingRoot = (root) => join(root, ".reeval", "staging");
+/** Whether the process that wrote `progress` is gone, when it ran on this host. */
+function exited(progress) {
+	if (progress.host !== hostname()) return false;
+	try {
+		process.kill(progress.pid, 0);
+		return false;
+	} catch (error) {
+		return error.code === "ESRCH";
+	}
+}
+async function readProgress(root, runId) {
+	const text = await readFile(join(stagingRoot(root), runId, LIVE_FILE), "utf8").catch(() => null);
+	if (text === null) return null;
+	try {
+		const progress = readableLiveProgress(JSON.parse(text));
+		return progress?.runId === runId ? progress : null;
+	} catch {
+		return null;
+	}
+}
+const landed = (source, runId) => [source.historyDir, scratchDir(source.root)].some((dir) => existsSync(recordFile(dir, runId)));
+/**
+* Every run in progress, newest first; one whose record has landed isn't, and one whose process
+* exited or went quiet is `stopped`. A progress file that can't be read is left out.
+*/
+async function listLive(source, options = {}) {
+	if (!source.scratch) return [];
+	const now = options.now ?? Date.now();
+	const staleMs = options.staleMs ?? 15e3;
+	const names = await readdir(stagingRoot(source.root)).catch(() => []);
+	const runs = [];
+	for (const runId of names.filter((n) => RUN_ID.test(n)).sort().reverse()) {
+		const progress = await readProgress(source.root, runId);
+		if (!progress || landed(source, runId)) continue;
+		const quiet = now - Date.parse(progress.heartbeatAt) > staleMs;
+		const { schemaVersion: _, pid: __, host: ___, heartbeatAt: ____, ...run } = progress;
+		runs.push({
+			...run,
+			state: quiet || exited(progress) ? "stopped" : progress.phase
+		});
+	}
+	return runs;
+}
+/**
+* A finished attempt's transcript, as `transcript.jsonl` has it, from the record its worker staged;
+* null for an attempt that isn't live and finished, or a file outside the run's staging directory.
+*/
+async function liveTranscript(source, runId, key) {
+	if (!source.scratch || !RUN_ID.test(runId)) return null;
+	const attempt = (await readProgress(source.root, runId))?.attempts.find((a) => a.key === key);
+	if (!attempt || !isFinished(attempt.status)) return null;
+	const base = join(stagingRoot(source.root), runId);
+	try {
+		const [realBase, real] = await Promise.all([realpath(base), realpath(join(base, "evals", recordFileName(key)))]);
+		if (!real.startsWith(realBase + sep)) return null;
+		const record = JSON.parse(await readFile(real, "utf8"));
+		const { transcriptLines } = await import("./assemble-CmRVDZ2Q.js");
+		return redactSecrets(transcriptLines(record));
+	} catch {
+		return null;
+	}
+}
+/** Calls `onChange` with the live runs whenever they change, checking every `pollMs`. */
+function watchLive(source, onChange, pollMs = 400) {
+	let signature = "";
+	let busy = false;
+	const check = async () => {
+		if (busy) return;
+		busy = true;
+		try {
+			const runs = await listLive(source);
+			const next = JSON.stringify(runs);
+			if (next !== signature) {
+				const first = signature === "";
+				signature = next;
+				if (!first) onChange(runs);
+			}
+		} finally {
+			busy = false;
+		}
+	};
+	check();
+	const poll = setInterval(() => void check(), pollMs);
+	poll.unref();
+	return () => clearInterval(poll);
+}
+//#endregion
+//#region src/studio/server.ts
+const COOKIE = "reeval_studio_token";
+const newToken = () => randomBytes(32).toString("base64url");
+/** Every name a browser may use to reach a server bound to `host:port`. */
+function allowedHosts(host, port) {
+	const names = /* @__PURE__ */ new Set([
+		"127.0.0.1",
+		"localhost",
+		"[::1]"
+	]);
+	names.add(host.includes(":") && !host.startsWith("[") ? `[${host}]` : host);
+	return [...names].map((name) => `${name}:${port}`);
+}
+const APP_TYPES = {
+	".html": "text/html; charset=utf-8",
+	".js": "text/javascript; charset=utf-8",
+	".css": "text/css; charset=utf-8",
+	".svg": "image/svg+xml",
+	".png": "image/png",
+	".ico": "image/x-icon",
+	".woff2": "font/woff2",
+	".json": "application/json; charset=utf-8"
+};
+const APP_CSP = [
+	"default-src 'self'",
+	"script-src 'self'",
+	"style-src 'self' 'unsafe-inline'",
+	"img-src 'self' data:",
+	"connect-src 'self'",
+	"font-src 'self'",
+	"object-src 'none'",
+	"base-uri 'none'",
+	"form-action 'none'",
+	"frame-ancestors 'none'"
+].join("; ");
+const sameToken = (a, b) => {
+	const x = Buffer.from(a);
+	const y = Buffer.from(b);
+	return x.length === y.length && timingSafeEqual(x, y);
+};
+/** The request path relative to the root, percent-decoded exactly once; null if malformed. */
+function requestPath(url) {
+	let path;
+	try {
+		path = decodeURIComponent(new URL(url).pathname);
+	} catch {
+		return null;
+	}
+	if (path.includes("\0") || path.includes("\\")) return null;
+	return path.replace(/^\/+/, "");
+}
+async function sendFile(c, file, headers) {
+	const info = await stat(file);
+	const etag = `W/"${info.size.toString(16)}-${Math.floor(info.mtimeMs).toString(16)}"`;
+	const common = {
+		...headers,
+		ETag: etag,
+		"Content-Length": String(info.size)
+	};
+	if (c.req.header("if-none-match") === etag) return c.body(null, 304, { ETag: etag });
+	if (c.req.method === "HEAD") return c.body(null, 200, common);
+	const body = Readable.toWeb(createReadStream(file));
+	return c.body(body, 200, common);
+}
+/** The studio's local HTTP app: read-only, GET only, behind a Host check and a session token. */
+function createStudioApp(options) {
+	const { source, token, hosts } = options;
+	const maxClients = options.maxEventClients ?? 16;
+	let clients = 0;
+	const app = new Hono();
+	app.use("*", async (c, next) => {
+		c.header("Referrer-Policy", "no-referrer");
+		c.header("X-Content-Type-Options", "nosniff");
+		c.header("Cross-Origin-Resource-Policy", "same-origin");
+		if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.text("Method not allowed", 405, { Allow: "GET, HEAD" });
+		const host = c.req.header("host") ?? "";
+		if (hosts.length && !hosts.includes(host)) return c.text("Unknown host", 403);
+		const origin = c.req.header("origin");
+		if (origin && hosts.length && !hosts.some((h) => origin === `http://${h}`)) return c.text("Cross-origin requests are not allowed", 403);
+		if (token === null) return next();
+		const url = new URL(c.req.url);
+		const offered = url.searchParams.get("token");
+		if (offered !== null) {
+			if (!sameToken(offered, token)) return c.text("Wrong studio token", 401);
+			setCookie(c, COOKIE, token, {
+				httpOnly: true,
+				sameSite: "Strict",
+				path: "/"
+			});
+			url.searchParams.delete("token");
+			return c.redirect(`${url.pathname}${url.search}${url.hash}`, 302);
+		}
+		const cookie = getCookie(c, COOKIE);
+		if (!cookie || !sameToken(cookie, token)) return c.text("This studio needs its session token. Open the full URL that reeval studio printed.", 401);
+		return next();
+	});
+	app.get("/api/events", (c) => {
+		if (!options.subscribe) return c.text("Live updates are off", 404);
+		if (clients >= maxClients) return c.text("Too many live clients", 503);
+		const subscribe = options.subscribe;
+		clients++;
+		return streamSSE(c, async (stream) => {
+			let id = 0;
+			const unsubscribe = subscribe((event) => {
+				const data = event.type === "run.progress" ? JSON.stringify({ runs: event.runs }) : "{}";
+				stream.writeSSE({
+					event: event.type,
+					data,
+					id: String(++id)
+				});
+			});
+			const closed = new Promise((resolve) => stream.onAbort(resolve));
+			await stream.writeSSE({
+				event: "ready",
+				data: "{}",
+				id: String(id)
+			});
+			const ping = setInterval(() => void stream.writeSSE({
+				event: "ping",
+				data: "{}"
+			}), 25e3);
+			await closed;
+			clearInterval(ping);
+			unsubscribe();
+			clients--;
+		});
+	});
+	app.get("/api/live", async (c) => {
+		const index = { runs: await listLive(source) };
+		return c.json(index, 200, { "Cache-Control": "no-cache" });
+	});
+	app.get("/api/live/:runId/transcript", async (c) => {
+		const text = await liveTranscript(source, c.req.param("runId"), c.req.query("attempt") ?? "");
+		if (text === null) return c.text("No transcript for this attempt yet", 404);
+		return c.body(text, 200, {
+			"Cache-Control": "no-cache",
+			"Content-Type": "text/plain; charset=utf-8",
+			"Content-Security-Policy": "sandbox"
+		});
+	});
+	const debugDir = (runId, key) => {
+		const attempt = key ? parseAttemptKey(key) : null;
+		if (!RUN_ID.test(runId) || !attempt) return null;
+		return attemptDebugDir(source.root, runId, attempt.evalId, attempt.cell, attempt.n);
+	};
+	const readText = (path) => readFile(path, "utf8").catch(() => null);
+	app.get("/api/debug/:runId", async (c) => {
+		const dir = debugDir(c.req.param("runId"), c.req.query("attempt"));
+		const log = dir && await readText(join(dir, "debug.log"));
+		if (!dir || log === null) return c.json(null, 200, { "Cache-Control": "no-cache" });
+		const view = {
+			lines: parseDebugLog(log),
+			requests: parseNdjson(await readText(join(dir, "requests.ndjson")) ?? "").map(readableDebugRequest),
+			trace: (await stat(join(dir, "trace.ndjson")).catch(() => null))?.isFile() ?? false
+		};
+		return c.json(view, 200, { "Cache-Control": "no-cache" });
+	});
+	app.get("/api/debug/:runId/trace", async (c) => {
+		const dir = debugDir(c.req.param("runId"), c.req.query("attempt"));
+		const file = dir && join(dir, "trace.ndjson");
+		if (!file || !(await stat(file).catch(() => null))?.isFile()) return c.text("No trace for this attempt", 404);
+		return sendFile(c, file, {
+			"Cache-Control": "no-cache",
+			"Content-Type": "text/plain; charset=utf-8",
+			"Content-Security-Policy": "sandbox"
+		});
+	});
+	app.get("*", async (c) => {
+		const path = requestPath(c.req.url);
+		if (path === null) return c.text("Bad path", 400);
+		const target = parseDataPath(path);
+		if (target) {
+			const noStore = { "Cache-Control": "no-cache" };
+			if (target.kind === "studio") {
+				const info = {
+					mode: "live",
+					es: options.es,
+					project: options.project,
+					generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+					features: {
+						live: !!options.subscribe,
+						scratch: source.scratch,
+						artifacts: true,
+						debug: true
+					}
+				};
+				return c.json(info, 200, noStore);
+			}
+			if (target.kind === "manifest" || target.kind === "shard") {
+				const body = indexFiles(await listHeaders(source)).get(path);
+				if (body === void 0) return c.json([], 200, noStore);
+				return c.json(body, 200, noStore);
+			}
+			if (target.kind === "analysis") {
+				const { listAnalyses } = await import("./files-Bd25OAQH.js");
+				const entries = await listAnalyses(source.root, [source.historyDir], target.runId, true);
+				const index = {
+					runId: target.runId,
+					entries: sortAnalyses(entries)
+				};
+				return c.json(index, 200, noStore);
+			}
+			const file = await resolveFile(source, target);
+			if (!file) return c.text("Not found", 404);
+			if (target.kind === "record") return sendFile(c, file, {
+				...noStore,
+				"Content-Type": APP_TYPES[".json"]
+			});
+			return sendFile(c, file, {
+				...noStore,
+				"Content-Type": artifactType(file),
+				"Content-Security-Policy": "sandbox"
+			});
+		}
+		if (path.startsWith("data/") || path.startsWith("api/")) return c.text("Not found", 404);
+		return serveApp(c, options.appDir, path);
+	});
+	return app;
+}
+const APP_FILE = /^(?:assets\/)?[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+async function serveApp(c, dir, path) {
+	const appDir = resolve(dir);
+	const name = path === "" ? "index.html" : path;
+	if (!APP_FILE.test(name) || name.includes("..")) return c.text("Not found", 404);
+	const file = join(appDir, ...name.split("/"));
+	if (!file.startsWith(appDir + sep)) return c.text("Not found", 404);
+	try {
+		if (!(await stat(file)).isFile()) return c.text("Not found", 404);
+	} catch {
+		return c.text("Not found", 404);
+	}
+	const hashed = name.startsWith("assets/");
+	return sendFile(c, file, {
+		"Content-Type": APP_TYPES[extname(file)] ?? "application/octet-stream",
+		"Cache-Control": hashed ? "public, max-age=31536000, immutable" : "no-cache",
+		...name === "index.html" ? { "Content-Security-Policy": APP_CSP } : {}
+	});
+}
+//#endregion
+export { watchLive as a, newToken as i, allowedHosts as n, createStudioApp as r, COOKIE as t };
+
+//# sourceMappingURL=server-Bi61uiY0.js.map

package/dist/server-Bi61uiY0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-Bi61uiY0.js","names":[],"sources":["../src/studio/live.ts","../src/studio/server.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,eAAe,SAAiB,KAAK,MAAM,WAAW,SAAS;;AAK5E,SAAS,OAAO,UAAiC;CAC/C,IAAI,SAAS,SAAS,SAAS,GAAG,OAAO;CACzC,IAAI;EACF,QAAQ,KAAK,SAAS,KAAK,CAAC;EAC5B,OAAO;CACT,SAAS,OAAO;EACd,OAAQ,MAAgC,SAAS;CACnD;AACF;AAEA,eAAe,aAAa,MAAc,OAA6C;CACrF,MAAM,OAAO,MAAM,SAAS,KAAK,YAAY,IAAI,GAAG,OAAO,SAAS,GAAG,MAAM,CAAC,CAAC,YAAY,IAAI;CAC/F,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI;EACF,MAAM,WAAW,qBAAqB,KAAK,MAAM,IAAI,CAAC;EACtD,OAAO,UAAU,UAAU,QAAQ,WAAW;CAChD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,UAAU,QAAsB,UACpC,CAAC,OAAO,YAAY,WAAW,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,WAAW,WAAW,KAAK,KAAK,CAAC,CAAC;;;;;AAM/F,eAAsB,SACpB,QACA,UAAuB,CAAC,GACJ;CACpB,IAAI,CAAC,OAAO,SAAS,OAAO,CAAC;CAC7B,MAAM,MAAM,QAAQ,OAAO,KAAK,IAAI;CACpC,MAAM,UAAU,QAAQ,WAAA;CACxB,MAAM,QAAQ,MAAM,QAAQ,YAAY,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAa;CAChF,MAAM,OAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,MACjB,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,CAC7B,KAAK,CAAC,CACN,QAAQ,GAAG;EACZ,MAAM,WAAW,MAAM,aAAa,OAAO,MAAM,KAAK;EACtD,IAAI,CAAC,YAAY,OAAO,QAAQ,KAAK,GAAG;EACxC,MAAM,QAAQ,MAAM,KAAK,MAAM,SAAS,WAAW,IAAI;EACvD,MAAM,EAAE,eAAe,GAAG,KAAK,IAAI,MAAM,KAAK,aAAa,MAAM,GAAG,QAAQ;EAC5E,KAAK,KAAK;GAAE,GAAG;GAAK,OAAO,SAAS,OAAO,QAAQ,IAAI,YAAY,SAAS;EAAM,CAAC;CACrF;CACA,OAAO;AACT;;;;;AAMA,eAAsB,eACpB,QACA,OACA,KACwB;CACxB,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAAK,KAAK,GAAG,OAAO;CAEnD,MAAM,WAAU,MADO,aAAa,OAAO,MAAM,KAAK,EAAA,EAC5B,SAAS,MAAM,MAAM,EAAE,QAAQ,GAAG;CAC5D,IAAI,CAAC,WAAW,CAAC,WAAW,QAAQ,MAAM,GAAG,OAAO;CACpD,MAAM,OAAO,KAAK,YAAY,OAAO,IAAI,GAAG,KAAK;CACjD,IAAI;EACF,MAAM,CAAC,UAAU,QAAQ,MAAM,QAAQ,IAAI,CACzC,SAAS,IAAI,GACb,SAAS,KAAK,MAAM,SAAS,eAAe,GAAG,CAAC,CAAC,CACnD,CAAC;EACD,IAAI,CAAC,KAAK,WAAW,WAAW,GAAG,GAAG,OAAO;EAC7C,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;EACtD,MAAM,EAAE,oBAAoB,MAAM,OAAO;EACzC,OAAO,cAAc,gBAAgB,MAAM,CAAC;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,UAAU,QAAsB,UAAqC,SAAS,KAAK;CACjG,IAAI,YAAY;CAChB,IAAI,OAAO;CACX,MAAM,QAAQ,YAAY;EACxB,IAAI,MAAM;EACV,OAAO;EACP,IAAI;GACF,MAAM,OAAO,MAAM,SAAS,MAAM;GAClC,MAAM,OAAO,KAAK,UAAU,IAAI;GAChC,IAAI,SAAS,WAAW;IACtB,MAAM,QAAQ,cAAc;IAC5B,YAAY;IACZ,IAAI,CAAC,OAAO,SAAS,IAAI;GAC3B;EACF,UAAU;GACR,OAAO;EACT;CACF;CACA,MAAW;CACX,MAAM,OAAO,kBAAkB,KAAK,MAAM,GAAG,MAAM;CACnD,KAAK,MAAM;CACX,aAAa,cAAc,IAAI;AACjC;;;ACvGA,MAAa,SAAS;AAoBtB,MAAa,iBAAiB,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;;AAGlE,SAAgB,aAAa,MAAc,MAAwB;CACjE,MAAM,wBAAQ,IAAI,IAAI;EAAC;EAAa;EAAa;CAAO,CAAC;CACzD,MAAM,IAAI,KAAK,SAAS,GAAG,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,IAAI,KAAK,KAAK,IAAI;CAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,SAAS,GAAG,KAAK,GAAG,MAAM;AACnD;AAEA,MAAM,YAAoC;CACxC,SAAS;CACT,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,UAAU;CACV,SAAS;AACX;AAEA,MAAM,UAAU;CACd;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC,CAAC,KAAK,IAAI;AAEX,MAAM,aAAa,GAAW,MAAc;CAC1C,MAAM,IAAI,OAAO,KAAK,CAAC;CACvB,MAAM,IAAI,OAAO,KAAK,CAAC;CACvB,OAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,CAAC;AACtD;;AAGA,SAAS,YAAY,KAA4B;CAC/C,IAAI;CACJ,IAAI;EACF,OAAO,mBAAmB,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ;CACjD,QAAQ;EACN,OAAO;CACT;CACA,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,OAAO;CACvD,OAAO,KAAK,QAAQ,QAAQ,EAAE;AAChC;AAEA,eAAe,SACb,GACA,MACA,SACmB;CACnB,MAAM,OAAO,MAAM,KAAK,IAAI;CAC5B,MAAM,OAAO,MAAM,KAAK,KAAK,SAAS,EAAE,EAAE,GAAG,KAAK,MAAM,KAAK,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;CACnF,MAAM,SAAS;EAAE,GAAG;EAAS,MAAM;EAAM,kBAAkB,OAAO,KAAK,IAAI;CAAE;CAC7E,IAAI,EAAE,IAAI,OAAO,eAAe,MAAM,MAAM,OAAO,EAAE,KAAK,MAAM,KAAK,EAAE,MAAM,KAAK,CAAC;CACnF,IAAI,EAAE,IAAI,WAAW,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAK,MAAM;CAC5D,MAAM,OAAO,SAAS,MAAM,iBAAiB,IAAI,CAAC;CAClD,OAAO,EAAE,KAAK,MAAM,KAAK,MAAM;AACjC;;AAGA,SAAgB,gBAAgB,SAA8B;CAC5D,MAAM,EAAE,QAAQ,OAAO,UAAU;CACjC,MAAM,aAAa,QAAQ,mBAAmB;CAC9C,IAAI,UAAU;CACd,MAAM,MAAM,IAAI,KAAK;CAErB,IAAI,IAAI,KAAK,OAAO,GAAG,SAAS;EAC9B,EAAE,OAAO,mBAAmB,aAAa;EACzC,EAAE,OAAO,0BAA0B,SAAS;EAC5C,EAAE,OAAO,gCAAgC,aAAa;EACtD,IAAI,EAAE,IAAI,WAAW,SAAS,EAAE,IAAI,WAAW,QAC7C,OAAO,EAAE,KAAK,sBAAsB,KAAK,EAAE,OAAO,YAAY,CAAC;EAEjE,MAAM,OAAO,EAAE,IAAI,OAAO,MAAM,KAAK;EACrC,IAAI,MAAM,UAAU,CAAC,MAAM,SAAS,IAAI,GAAG,OAAO,EAAE,KAAK,gBAAgB,GAAG;EAC5E,MAAM,SAAS,EAAE,IAAI,OAAO,QAAQ;EACpC,IAAI,UAAU,MAAM,UAAU,CAAC,MAAM,MAAM,MAAM,WAAW,UAAU,GAAG,GACvE,OAAO,EAAE,KAAK,yCAAyC,GAAG;EAE5D,IAAI,UAAU,MAAM,OAAO,KAAK;EAChC,MAAM,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG;EAC7B,MAAM,UAAU,IAAI,aAAa,IAAI,OAAO;EAC5C,IAAI,YAAY,MAAM;GACpB,IAAI,CAAC,UAAU,SAAS,KAAK,GAAG,OAAO,EAAE,KAAK,sBAAsB,GAAG;GACvE,UAAU,GAAG,QAAQ,OAAO;IAAE,UAAU;IAAM,UAAU;IAAU,MAAM;GAAI,CAAC;GAC7E,IAAI,aAAa,OAAO,OAAO;GAC/B,OAAO,EAAE,SAAS,GAAG,IAAI,WAAW,IAAI,SAAS,IAAI,QAAQ,GAAG;EAClE;EACA,MAAM,SAAS,UAAU,GAAG,MAAM;EAClC,IAAI,CAAC,UAAU,CAAC,UAAU,QAAQ,KAAK,GACrC,OAAO,EAAE,KACP,sFACA,GACF;EAEF,OAAO,KAAK;CACd,CAAC;CAED,IAAI,IAAI,gBAAgB,MAAM;EAC5B,IAAI,CAAC,QAAQ,WAAW,OAAO,EAAE,KAAK,wBAAwB,GAAG;EACjE,IAAI,WAAW,YAAY,OAAO,EAAE,KAAK,yBAAyB,GAAG;EACrE,MAAM,YAAY,QAAQ;EAC1B;EACA,OAAO,UAAU,GAAG,OAAO,WAAW;GACpC,IAAI,KAAK;GACT,MAAM,cAAc,WAAW,UAAU;IACvC,MAAM,OAAO,MAAM,SAAS,iBAAiB,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,CAAC,IAAI;IACpF,OAAY,SAAS;KAAE,OAAO,MAAM;KAAM;KAAM,IAAI,OAAO,EAAE,EAAE;IAAE,CAAC;GACpE,CAAC;GACD,MAAM,SAAS,IAAI,SAAe,YAAY,OAAO,QAAQ,OAAO,CAAC;GACrE,MAAM,OAAO,SAAS;IAAE,OAAO;IAAS,MAAM;IAAM,IAAI,OAAO,EAAE;GAAE,CAAC;GACpE,MAAM,OAAO,kBAAkB,KAAK,OAAO,SAAS;IAAE,OAAO;IAAQ,MAAM;GAAK,CAAC,GAAG,IAAM;GAC1F,MAAM;GACN,cAAc,IAAI;GAClB,YAAY;GACZ;EACF,CAAC;CACH,CAAC;CAGD,IAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,QAAmB,EAAE,MAAM,MAAM,SAAS,MAAM,EAAE;EACxD,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,iBAAiB,WAAW,CAAC;CAC3D,CAAC;CACD,IAAI,IAAI,+BAA+B,OAAO,MAAM;EAClD,MAAM,OAAO,MAAM,eAAe,QAAQ,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE;EAC5F,IAAI,SAAS,MAAM,OAAO,EAAE,KAAK,sCAAsC,GAAG;EAC1E,OAAO,EAAE,KAAK,MAAM,KAAK;GACvB,iBAAiB;GACjB,gBAAgB;GAChB,2BAA2B;EAC7B,CAAC;CACH,CAAC;CAGD,MAAM,YAAY,OAAe,QAA4B;EAC3D,MAAM,UAAU,MAAM,gBAAgB,GAAG,IAAI;EAC7C,IAAI,CAAC,OAAO,KAAK,KAAK,KAAK,CAAC,SAAS,OAAO;EAC5C,OAAO,gBAAgB,OAAO,MAAM,OAAO,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,CAAC;CACpF;CACA,MAAM,YAAY,SAAiB,SAAS,MAAM,MAAM,CAAC,CAAC,YAAY,IAAI;CAC1E,IAAI,IAAI,qBAAqB,OAAO,MAAM;EACxC,MAAM,MAAM,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,MAAM,MAAM,OAAQ,MAAM,SAAS,KAAK,KAAA,WAAc,CAAC;EAEvD,IAAI,CAAC,OAAO,QAAQ,MAAM,OAAO,EAAE,KAAK,MAAM,KAAK,EAAE,iBAAiB,WAAW,CAAC;EAClF,MAAM,OAAkB;GACtB,OAAO,cAAc,GAAG;GACxB,UAAU,YAA2B,MAAM,SAAS,KAAK,KAAA,iBAAkB,CAAC,KAAM,EAAE,CAAC,CAAC,IACpF,oBACF;GACA,QAAQ,MAAM,KAAK,KAAK,KAAA,cAAe,CAAC,CAAC,CAAC,YAAY,IAAI,EAAA,EAAI,OAAO,KAAK;EAC5E;EACA,OAAO,EAAE,KAAK,MAAM,KAAK,EAAE,iBAAiB,WAAW,CAAC;CAC1D,CAAC;CACD,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,MAAM,SAAS,EAAE,IAAI,MAAM,OAAO,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC;EACjE,MAAM,OAAO,OAAO,KAAK,KAAA,cAAe;EACxC,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,EAAA,EAAI,OAAO,GACzD,OAAO,EAAE,KAAK,6BAA6B,GAAG;EAEhD,OAAO,SAAS,GAAG,MAAM;GACvB,iBAAiB;GACjB,gBAAgB;GAChB,2BAA2B;EAC7B,CAAC;CACH,CAAC;CAED,IAAI,IAAI,KAAK,OAAO,MAAM;EACxB,MAAM,OAAO,YAAY,EAAE,IAAI,GAAG;EAClC,IAAI,SAAS,MAAM,OAAO,EAAE,KAAK,YAAY,GAAG;EAChD,MAAM,SAAS,cAAc,IAAI;EACjC,IAAI,QAAQ;GACV,MAAM,UAAU,EAAE,iBAAiB,WAAW;GAC9C,IAAI,OAAO,SAAS,UAAU;IAC5B,MAAM,OAAmB;KACvB,MAAM;KACN,IAAI,QAAQ;KACZ,SAAS,QAAQ;KACjB,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;KACpC,UAAU;MACR,MAAM,CAAC,CAAC,QAAQ;MAChB,SAAS,OAAO;MAChB,WAAW;MACX,OAAO;KACT;IACF;IACA,OAAO,EAAE,KAAK,MAAM,KAAK,OAAO;GAClC;GACA,IAAI,OAAO,SAAS,cAAc,OAAO,SAAS,SAAS;IAEzD,MAAM,OADQ,WAAW,MAAM,YAAY,MAAM,CAChC,CAAC,CAAC,IAAI,IAAI;IAC3B,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,OAAO;IACtD,OAAO,EAAE,KAAK,MAAM,KAAK,OAAO;GAClC;GACA,IAAI,OAAO,SAAS,YAAY;IAC9B,MAAM,EAAE,iBAAiB,MAAM,OAAO;IACtC,MAAM,UAAU,MAAM,aAAa,OAAO,MAAM,CAAC,OAAO,UAAU,GAAG,OAAO,OAAO,IAAI;IACvF,MAAM,QAAuB;KAAE,OAAO,OAAO;KAAO,SAAS,aAAa,OAAO;IAAE;IACnF,OAAO,EAAE,KAAK,OAAO,KAAK,OAAO;GACnC;GACA,MAAM,OAAO,MAAM,YAAY,QAAQ,MAAM;GAC7C,IAAI,CAAC,MAAM,OAAO,EAAE,KAAK,aAAa,GAAG;GACzC,IAAI,OAAO,SAAS,UAClB,OAAO,SAAS,GAAG,MAAM;IAAE,GAAG;IAAS,gBAAgB,UAAU;GAAmB,CAAC;GAEvF,OAAO,SAAS,GAAG,MAAM;IACvB,GAAG;IACH,gBAAgB,aAAa,IAAI;IACjC,2BAA2B;GAC7B,CAAC;EACH;EACA,IAAI,KAAK,WAAW,OAAO,KAAK,KAAK,WAAW,MAAM,GAAG,OAAO,EAAE,KAAK,aAAa,GAAG;EACvF,OAAO,SAAS,GAAG,QAAQ,QAAQ,IAAI;CACzC,CAAC;CAED,OAAO;AACT;AAEA,MAAM,WAAW;AAEjB,eAAe,SAAS,GAAY,KAAa,MAAiC;CAChF,MAAM,SAAS,QAAQ,GAAG;CAC1B,MAAM,OAAO,SAAS,KAAK,eAAe;CAC1C,IAAI,CAAC,SAAS,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,OAAO,EAAE,KAAK,aAAa,GAAG;CAC/E,MAAM,OAAO,KAAK,QAAQ,GAAG,KAAK,MAAM,GAAG,CAAC;CAC5C,IAAI,CAAC,KAAK,WAAW,SAAS,GAAG,GAAG,OAAO,EAAE,KAAK,aAAa,GAAG;CAClE,IAAI;EACF,IAAI,EAAE,MAAM,KAAK,IAAI,EAAA,CAAG,OAAO,GAAG,OAAO,EAAE,KAAK,aAAa,GAAG;CAClE,QAAQ;EACN,OAAO,EAAE,KAAK,aAAa,GAAG;CAChC;CACA,MAAM,SAAS,KAAK,WAAW,SAAS;CACxC,OAAO,SAAS,GAAG,MAAM;EACvB,gBAAgB,UAAU,QAAQ,IAAI,MAAM;EAC5C,iBAAiB,SAAS,wCAAwC;EAClE,GAAI,SAAS,eAAe,EAAE,2BAA2B,QAAQ,IAAI,CAAC;CACxE,CAAC;AACH"}

package/dist/server-CsSBL8NC.js

@@ -0,0 +1,2 @@
+import { n as allowedHosts } from "./server-Bi61uiY0.js";
+export { allowedHosts };

package/dist/source-BXzrmof5.js

@@ -0,0 +1,2 @@
+import { t as listHeaders } from "./source-Bsfa3LZH.js";
+export { listHeaders };

package/dist/source-Bsfa3LZH.js

@@ -0,0 +1,40 @@
+import { c as recordFile, d as runDir, f as scratchDir, i as listRuns } from "./files-D2-qn_Dl.js";
+import { join, sep } from "node:path";
+import { realpath, stat } from "node:fs/promises";
+//#region src/studio/source.ts
+/** Recorded runs, plus scratch runs that weren't recorded when enabled; oldest first. */
+async function listHeaders(source) {
+	const kept = await listRuns(source.root, source.historyDir, true);
+	if (!source.scratch) return kept;
+	const ids = new Set(kept.map((e) => e.runId));
+	const scratch = await listRuns(source.root, scratchDir(source.root), false);
+	return [...kept, ...scratch.filter((e) => !ids.has(e.runId))].sort((a, b) => a.runId < b.runId ? -1 : 1);
+}
+const dirsOf = (source) => source.scratch ? [source.historyDir, scratchDir(source.root)] : [source.historyDir];
+async function inside(base, path) {
+	try {
+		const [realBase, real] = await Promise.all([realpath(base), realpath(path)]);
+		if (!real.startsWith(realBase + sep)) return null;
+		return (await stat(real)).isFile() ? real : null;
+	} catch {
+		return null;
+	}
+}
+/**
+* The file a record or artifact path names, or null. A run resolves to the history folder first,
+* then `.reeval/runs/`; the real path must stay inside that run's directory, so symlinks can't escape.
+*/
+async function resolveFile(source, target) {
+	for (const dir of dirsOf(source)) {
+		const record = await inside(dir, recordFile(dir, target.runId));
+		if (!record) continue;
+		if (target.kind === "record") return record;
+		const artifacts = runDir(dir, target.runId);
+		return inside(artifacts, join(artifacts, ...target.segments));
+	}
+	return null;
+}
+//#endregion
+export { resolveFile as n, listHeaders as t };
+
+//# sourceMappingURL=source-Bsfa3LZH.js.map

package/dist/source-Bsfa3LZH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-Bsfa3LZH.js","names":[],"sources":["../src/studio/source.ts"],"mappings":";;;;;AAcA,eAAsB,YAAY,QAA+C;CAC/E,MAAM,OAAO,MAAM,SAAS,OAAO,MAAM,OAAO,YAAY,IAAI;CAChE,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,MAAM,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,KAAK,CAAC;CAC5C,MAAM,UAAU,MAAM,SAAS,OAAO,MAAM,WAAW,OAAO,IAAI,GAAG,KAAK;CAC1E,OAAO,CAAC,GAAG,MAAM,GAAG,QAAQ,QAAQ,MAAM,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MACrE,EAAE,QAAQ,EAAE,QAAQ,KAAK,CAC3B;AACF;AAEA,MAAM,UAAU,WACd,OAAO,UAAU,CAAC,OAAO,YAAY,WAAW,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,UAAU;AAEpF,eAAe,OAAO,MAAc,MAAsC;CACxE,IAAI;EACF,MAAM,CAAC,UAAU,QAAQ,MAAM,QAAQ,IAAI,CAAC,SAAS,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC;EAC3E,IAAI,CAAC,KAAK,WAAW,WAAW,GAAG,GAAG,OAAO;EAC7C,QAAQ,MAAM,KAAK,IAAI,EAAA,CAAG,OAAO,IAAI,OAAO;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;;;;;AAMA,eAAsB,YACpB,QACA,QACwB;CACxB,KAAK,MAAM,OAAO,OAAO,MAAM,GAAG;EAChC,MAAM,SAAS,MAAM,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,CAAC;EAC9D,IAAI,CAAC,QAAQ;EACb,IAAI,OAAO,SAAS,UAAU,OAAO;EACrC,MAAM,YAAY,OAAO,KAAK,OAAO,KAAK;EAC1C,OAAO,OAAO,WAAW,KAAK,WAAW,GAAG,OAAO,QAAQ,CAAC;CAC9D;CACA,OAAO;AACT"}

package/dist/src-55j1zNHH.js

@@ -0,0 +1,3 @@
+import "./state-DZ7eqb1F.js";
+import { d as createCodex } from "./src-AEwxd1UP.js";
+export { createCodex };