reeval 0.0.1

package/dist/workspace-C2S0Z6gl.js

@@ -0,0 +1,327 @@
+import { y as workspaceLabel } from "./environment-Mz7wvrtD.js";
+import { a as registerSecret } from "./redact-C4fL_bZP.js";
+import { l as sha256 } from "./ids-Bp6ut7ZD.js";
+import { rt as RETRY_DELAYS } from "./src-DwwiVLqv.js";
+import { t as git } from "./git-D6hMeieS.js";
+import { t as PrepareError } from "./provider-CmAYTQQs.js";
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join, posix } from "node:path";
+import { randomBytes } from "node:crypto";
+//#region src/workspace.ts
+/** A workspace that couldn't be prepared; `usage` when fixing it means changing the eval. */
+var WorkspaceError = class extends Error {
+	name = "WorkspaceError";
+	usage;
+	constructor(message, usage) {
+		super(message);
+		this.usage = usage;
+	}
+};
+const workspaceKey = (w) => JSON.stringify([
+	w.url,
+	w.ref ?? null,
+	w.path ?? null
+]);
+const cacheDir = (root) => join(root, ".reeval", "cache", "git");
+const preparedFile = (root, runId) => join(root, ".reeval", "cache", "prepared", `${runId}.git.json`);
+const FULL_SHA = /^[0-9a-f]{40}$/;
+/** What git's stderr says went wrong. */
+function classifyGitError(stderr) {
+	if (/couldn't find remote ref|not our ref|unadvertised object|invalid refspec/i.test(stderr)) return "ref";
+	if (/Authentication failed|could not read (?:Username|Password)|terminal prompts disabled|Permission denied \(publickey|Host key verification failed|Access denied|returned error: 40[13]/i.test(stderr)) return "auth";
+	if (/Could not resolve host|Connection (?:timed out|refused|reset)|Operation timed out|early EOF|RPC failed|unexpected disconnect|remote end hung up|returned error: 5\d\d|\.lock'?: File exists|Unable to create .*\.lock|could not lock/i.test(stderr)) return "transient";
+	if (/Repository not found|does not appear to be a git repository|not a git repository|No such file or directory|Unable to find remote helper|protocol .* is not supported|returned error: 404|not found/i.test(stderr)) return "url";
+	return "other";
+}
+const firstLine = (stderr) => stderr.split("\n").map((l) => l.replace(/^(?:fatal|error): /, "").trim()).find(Boolean) ?? "git failed";
+const GIT_ENV = process.env.GIT_SSH_COMMAND ? {} : { GIT_SSH_COMMAND: "ssh -o BatchMode=yes" };
+async function gitIn(dir, args, input, env = {}) {
+	const r = await git(dir, args, {
+		env: {
+			...GIT_ENV,
+			...env
+		},
+		...input !== void 0 ? { input } : {}
+	});
+	return {
+		...r,
+		text: r.stdout.toString("utf8").trim()
+	};
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+* Fetches, resolves and exports one workspace. `what` names it in messages; `delays` are the
+* waits before each retry of a transient failure.
+*/
+async function prepareOne(root, w, what, delays, env) {
+	const dir = join(cacheDir(root), "repos", sha256(w.url).slice(0, 16));
+	mkdirSync(dir, { recursive: true });
+	const setup = async (args) => {
+		const r = await gitIn(dir, args);
+		if (r.code !== 0) throw new WorkspaceError(`${what}: couldn't set up its cache in ${dir}: ${firstLine(r.stderr)}`, false);
+	};
+	await setup([
+		"init",
+		"-q",
+		"--bare"
+	]);
+	await setup([
+		"config",
+		"remote.origin.url",
+		w.url
+	]);
+	await setup([
+		"config",
+		"remote.origin.promisor",
+		"true"
+	]);
+	const fetch = async (args, input, config = []) => {
+		for (let i = 0;; i++) {
+			const r = await gitIn(dir, [
+				...config,
+				"fetch",
+				"-q",
+				"--no-tags",
+				"--no-write-fetch-head",
+				...args
+			], input, env);
+			if (r.code === 0) return;
+			const failure = classifyGitError(r.stderr);
+			if (failure === "transient" && i < delays.length) {
+				await sleep(delays[i] ?? 0);
+				continue;
+			}
+			throw fetchError(failure, r.stderr, w, what);
+		}
+	};
+	let commit;
+	if (w.ref && FULL_SHA.test(w.ref)) {
+		const known = await gitIn(dir, [
+			"rev-parse",
+			"--verify",
+			"-q",
+			`${w.ref}^{commit}`
+		]);
+		if (known.code === 0) commit = known.text;
+	}
+	if (!commit) {
+		const temp = `refs/es/fetch/${process.pid}-${randomBytes(4).toString("hex")}`;
+		await fetch([
+			"--depth",
+			"1",
+			...w.path ? ["--filter=blob:none"] : [],
+			"origin",
+			`+${w.ref ?? "HEAD"}:${temp}`
+		]);
+		const resolved = await gitIn(dir, [
+			"rev-parse",
+			"--verify",
+			"-q",
+			`${temp}^{commit}`
+		]);
+		await gitIn(dir, [
+			"update-ref",
+			"-d",
+			temp
+		]);
+		if (resolved.code !== 0) throw new WorkspaceError(`${what}: ref "${w.ref}" isn't a commit (a branch, tag or commit SHA)`, true);
+		commit = resolved.text;
+	}
+	await gitIn(dir, [
+		"update-ref",
+		`refs/es/commits/${commit}`,
+		commit
+	]);
+	const tree = await treeAt(dir, commit, w, what);
+	const tar = join(cacheDir(root), "trees", `${tree}.tar`);
+	if (!existsSync(tar)) {
+		const oids = (await gitIn(dir, [
+			"rev-list",
+			"--objects",
+			"--missing=print",
+			tree
+		])).text.split("\n").filter((l) => l.startsWith("?")).map((l) => l.slice(1));
+		if (oids.length) await fetch([
+			"--filter=blob:none",
+			"--stdin",
+			"origin"
+		], `${oids.join("\n")}\n`, ["-c", "fetch.negotiationAlgorithm=noop"]);
+		const archived = await git(dir, [...[
+			"-c",
+			"filter.lfs.process=",
+			"-c",
+			"filter.lfs.smudge=cat"
+		], ...[
+			"-c",
+			"filter.lfs.required=false",
+			"archive",
+			"--format=tar",
+			tree
+		]], { env: GIT_ENV });
+		if (archived.code !== 0) throw new WorkspaceError(`${what}: couldn't export ${tree.slice(0, 12)}: ${firstLine(archived.stderr)}`, false);
+		mkdirSync(join(cacheDir(root), "trees"), { recursive: true });
+		const partial = `${tar}.${process.pid}-${randomBytes(4).toString("hex")}`;
+		writeFileSync(partial, archived.stdout);
+		renameSync(partial, tar);
+	}
+	return {
+		commit,
+		tree,
+		tar
+	};
+}
+/** The tree the workspace is: the commit's, or the directory `path` in it. */
+async function treeAt(dir, commit, w, what) {
+	const at = `${w.ref ? `at ${w.ref} ` : ""}(commit ${commit.slice(0, 7)})`;
+	if (!w.path) return (await gitIn(dir, ["rev-parse", `${commit}^{tree}`])).text;
+	const entry = await gitIn(dir, [
+		"ls-tree",
+		commit,
+		"--",
+		w.path
+	]);
+	const [meta = "", name] = entry.text.split("	");
+	const [, type, oid] = meta.split(" ");
+	if (entry.code === 0 && name === w.path && type === "tree" && oid) return oid;
+	if (entry.code === 0 && name === w.path) throw new WorkspaceError(`${what} ${at}: "${w.path}" is a file, not a directory`, true);
+	let parent = posix.dirname(w.path);
+	let list = await gitIn(dir, ["ls-tree", parent === "." ? commit : `${commit}:${parent}`]);
+	if (list.code !== 0) {
+		parent = ".";
+		list = await gitIn(dir, ["ls-tree", commit]);
+	}
+	const names = list.code === 0 ? list.text.split("\n").filter(Boolean).map((l) => {
+		const [m = "", n = ""] = l.split("	");
+		return m.split(" ")[1] === "tree" ? `${n}/` : n;
+	}) : [];
+	const shown = names.slice(0, 12).join(", ") + (names.length > 12 ? ", …" : "");
+	const where = parent === "." ? "its top level has" : `${parent}/ has`;
+	throw new WorkspaceError(`${what} ${at} has no directory "${w.path}"${names.length ? `; ${where}: ${shown}` : ""}`, true);
+}
+function fetchError(failure, stderr, w, what) {
+	const line = firstLine(stderr);
+	switch (failure) {
+		case "ref": {
+			const short = w.ref && /^[0-9a-f]{7,39}$/.test(w.ref) ? " Give a commit as its full 40-character SHA." : "";
+			return new WorkspaceError(`${what}: the repository has no ref "${w.ref ?? "HEAD"}" (a branch, tag or commit SHA).${short}`, true);
+		}
+		case "auth": return new WorkspaceError(`${what}: isn't readable with this machine's git credentials, or doesn't exist (${line}). reeval fetches the repository on the host, so set up access there (gh auth setup-git, a credential helper or an SSH key); the sandbox never gets the credentials.`, true);
+		case "url": return new WorkspaceError(`${what}: couldn't fetch it (${line}). Check the URL; a private repository also needs this machine's git credentials.`, true);
+		case "transient": return new WorkspaceError(`${what}: couldn't be fetched (${line})`, false);
+		default: return new WorkspaceError(`${what}: fetching it failed (${line})`, false);
+	}
+}
+/**
+* The token's header for git, in git's environment rather than its arguments, and only for the
+* repository's own origin. Appended to any `GIT_CONFIG_COUNT` entries already set.
+*/
+function tokenEnv(url, token) {
+	const n = Number(process.env.GIT_CONFIG_COUNT ?? 0) || 0;
+	const header = Buffer.from(`x-access-token:${token}`).toString("base64");
+	registerSecret(header);
+	return {
+		GIT_CONFIG_COUNT: String(n + 1),
+		[`GIT_CONFIG_KEY_${n}`]: `http.${new URL(url).origin}/.extraHeader`,
+		[`GIT_CONFIG_VALUE_${n}`]: `Authorization: Basic ${header}`
+	};
+}
+/**
+* Prepares every distinct workspace `uses` need, before any attempt, and writes the outcomes for
+* the run's workers. A workspace that fails fails only the attempts that use it.
+*/
+async function prepareWorkspaces(uses, options) {
+	const distinct = /* @__PURE__ */ new Map();
+	for (const u of uses) {
+		const key = workspaceKey(u.workspace);
+		const entry = distinct.get(key) ?? {
+			workspace: u.workspace,
+			setBy: []
+		};
+		const by = `environment ${u.environment}`;
+		if (!entry.setBy.includes(by)) entry.setBy.push(by);
+		distinct.set(key, entry);
+	}
+	const out = /* @__PURE__ */ new Map();
+	const byUrl = /* @__PURE__ */ new Map();
+	for (const u of distinct.values()) byUrl.set(u.workspace.url, [...byUrl.get(u.workspace.url) ?? [], u]);
+	await Promise.all([...byUrl.values()].map(async (list) => {
+		for (const { workspace, setBy } of list) {
+			const label = workspaceLabel(workspace);
+			const what = `Workspace git(${JSON.stringify(label)})`;
+			const key = workspaceKey(workspace);
+			try {
+				let env = {};
+				if (workspace.token) {
+					const value = process.env[workspace.token];
+					if (!value) throw new WorkspaceError(`${what}: its token variable ${workspace.token} isn't set. Set it in the environment or .env.local.`, true);
+					registerSecret(value);
+					env = tokenEnv(workspace.url, value);
+				}
+				const delays = options.delays ?? RETRY_DELAYS;
+				const prepared = await prepareOne(options.root, workspace, what, delays, env);
+				out.set(key, {
+					ok: true,
+					workspace,
+					prepared
+				});
+			} catch (error) {
+				if (!(error instanceof WorkspaceError)) throw error;
+				const failure = {
+					class: error.usage ? "config" : "transient",
+					stage: "workspace",
+					ref: label,
+					cause: null,
+					log: null,
+					message: error.message,
+					usage: error.usage,
+					setBy
+				};
+				out.set(key, {
+					ok: false,
+					workspace,
+					failure,
+					label,
+					setBy
+				});
+			}
+		}
+	}));
+	const outcomes = [...distinct.keys()].map((k) => out.get(k));
+	if (!outcomes.length) return outcomes;
+	const file = preparedFile(options.root, options.runId);
+	mkdirSync(join(file, ".."), { recursive: true });
+	const doc = Object.fromEntries(outcomes.map((o) => [workspaceKey(o.workspace), o.ok ? { prepared: o.prepared } : {
+		failure: o.failure,
+		label: o.label,
+		setBy: o.setBy
+	}]));
+	writeFileSync(file, JSON.stringify(doc));
+	return outcomes;
+}
+const removePreparedWorkspaces = (root, runId) => rmSync(preparedFile(root, runId), { force: true });
+const read = /* @__PURE__ */ new Map();
+/**
+* The workspace an attempt copies in, as the CLI prepared it for the run; undefined if it didn't.
+* A workspace that failed throws its failure as a {@link PrepareError}, as a sandbox's does.
+*/
+function preparedWorkspace(root, runId, w) {
+	const file = preparedFile(root, runId);
+	if (!read.has(file)) {
+		let doc = null;
+		try {
+			doc = JSON.parse(readFileSync(file, "utf8"));
+		} catch {}
+		read.set(file, doc);
+	}
+	const entry = read.get(file)?.[workspaceKey(w)];
+	if (!entry) return void 0;
+	if ("failure" in entry) throw new PrepareError({
+		...entry.failure,
+		message: `${entry.failure.message}\n(the workspace git(${JSON.stringify(entry.label)}), set by ${entry.setBy.join(", ")}, failed to prepare before the run started; every attempt that needs it fails with this)`
+	});
+	return entry.prepared;
+}
+//#endregion
+export { removePreparedWorkspaces as a, preparedWorkspace as i, classifyGitError as n, workspaceKey as o, prepareWorkspaces as r, WorkspaceError as t };
+
+//# sourceMappingURL=workspace-C2S0Z6gl.js.map

package/dist/workspace-C2S0Z6gl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-C2S0Z6gl.js","names":[],"sources":["../src/workspace.ts"],"mappings":";;;;;;;;;;;AAsBA,IAAa,iBAAb,cAAoC,MAAM;CACxC,OAAgB;CAChB;CACA,YAAY,SAAiB,OAAgB;EAC3C,MAAM,OAAO;EACb,KAAK,QAAQ;CACf;AACF;AAEA,MAAa,gBAAgB,MAC3B,KAAK,UAAU;CAAC,EAAE;CAAK,EAAE,OAAO;CAAM,EAAE,QAAQ;AAAI,CAAC;AAEvD,MAAM,YAAY,SAAiB,KAAK,MAAM,WAAW,SAAS,KAAK;AACvE,MAAM,gBAAgB,MAAc,UAClC,KAAK,MAAM,WAAW,SAAS,YAAY,GAAG,MAAM,UAAU;AAEhE,MAAM,WAAW;;AAKjB,SAAgB,iBAAiB,QAAyB;CACxD,IAAI,4EAA4E,KAAK,MAAM,GACzF,OAAO;CACT,IACE,wLAAwL,KACtL,MACF,GAEA,OAAO;CACT,IACE,wOAAwO,KACtO,MACF,GAEA,OAAO;CACT,IACE,sMAAsM,KACpM,MACF,GAEA,OAAO;CACT,OAAO;AACT;AAEA,MAAM,aAAa,WACjB,OACG,MAAM,IAAI,CAAC,CACX,KAAK,MAAM,EAAE,QAAQ,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACtD,KAAK,OAAO,KAAK;AAGtB,MAAM,UAA6B,QAAQ,IAAI,kBAC3C,CAAC,IACD,EAAE,iBAAiB,uBAAuB;AAE9C,eAAe,MAAM,KAAa,MAAgB,OAAgB,MAAyB,CAAC,GAAG;CAC7F,MAAM,IAAI,MAAM,IAAI,KAAK,MAAM;EAC7B,KAAK;GAAE,GAAG;GAAS,GAAG;EAAI;EAC1B,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;CACzC,CAAC;CACD,OAAO;EAAE,GAAG;EAAG,MAAM,EAAE,OAAO,SAAS,MAAM,CAAC,CAAC,KAAK;CAAE;AACxD;AAEA,MAAM,SAAS,OAAe,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;;;;;AAM9E,eAAe,WACb,MACA,GACA,MACA,QACA,KAC4B;CAC5B,MAAM,MAAM,KAAK,SAAS,IAAI,GAAG,SAAS,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CACpE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,MAAM,QAAQ,OAAO,SAAmB;EACtC,MAAM,IAAI,MAAM,MAAM,KAAK,IAAI;EAC/B,IAAI,EAAE,SAAS,GACb,MAAM,IAAI,eACR,GAAG,KAAK,iCAAiC,IAAI,IAAI,UAAU,EAAE,MAAM,KACnE,KACF;CAEJ;CACA,MAAM,MAAM;EAAC;EAAQ;EAAM;CAAQ,CAAC;CACpC,MAAM,MAAM;EAAC;EAAU;EAAqB,EAAE;CAAG,CAAC;CAClD,MAAM,MAAM;EAAC;EAAU;EAA0B;CAAM,CAAC;CAExD,MAAM,QAAQ,OAAO,MAAgB,OAAgB,SAAmB,CAAC,MAAM;EAC7E,KAAK,IAAI,IAAI,IAAK,KAAK;GACrB,MAAM,IAAI,MAAM,MACd,KACA;IAAC,GAAG;IAAQ;IAAS;IAAM;IAAa;IAAyB,GAAG;GAAI,GACxE,OACA,GACF;GACA,IAAI,EAAE,SAAS,GAAG;GAClB,MAAM,UAAU,iBAAiB,EAAE,MAAM;GACzC,IAAI,YAAY,eAAe,IAAI,OAAO,QAAQ;IAChD,MAAM,MAAM,OAAO,MAAM,CAAC;IAC1B;GACF;GACA,MAAM,WAAW,SAAS,EAAE,QAAQ,GAAG,IAAI;EAC7C;CACF;CAEA,IAAI;CACJ,IAAI,EAAE,OAAO,SAAS,KAAK,EAAE,GAAG,GAAG;EACjC,MAAM,QAAQ,MAAM,MAAM,KAAK;GAAC;GAAa;GAAY;GAAM,GAAG,EAAE,IAAI;EAAU,CAAC;EACnF,IAAI,MAAM,SAAS,GAAG,SAAS,MAAM;CACvC;CACA,IAAI,CAAC,QAAQ;EACX,MAAM,OAAO,iBAAiB,QAAQ,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK;EAE1E,MAAM,MAAM;GAAC;GAAW;GAAK,GADd,EAAE,OAAO,CAAC,oBAAoB,IAAI,CAAC;GACV;GAAU,IAAI,EAAE,OAAO,OAAO,GAAG;EAAM,CAAC;EAChF,MAAM,WAAW,MAAM,MAAM,KAAK;GAAC;GAAa;GAAY;GAAM,GAAG,KAAK;EAAU,CAAC;EACrF,MAAM,MAAM,KAAK;GAAC;GAAc;GAAM;EAAI,CAAC;EAC3C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eACR,GAAG,KAAK,SAAS,EAAE,IAAI,iDACvB,IACF;EAEF,SAAS,SAAS;CACpB;CAEA,MAAM,MAAM,KAAK;EAAC;EAAc,mBAAmB;EAAU;CAAM,CAAC;CAEpE,MAAM,OAAO,MAAM,OAAO,KAAK,QAAQ,GAAG,IAAI;CAC9C,MAAM,MAAM,KAAK,SAAS,IAAI,GAAG,SAAS,GAAG,KAAK,KAAK;CACvD,IAAI,CAAC,WAAW,GAAG,GAAG;EAEpB,MAAM,QAAO,MADS,MAAM,KAAK;GAAC;GAAY;GAAa;GAAmB;EAAI,CAAC,EAAA,CAC9D,KAClB,MAAM,IAAI,CAAC,CACX,QAAQ,MAAM,EAAE,WAAW,GAAG,CAAC,CAAC,CAChC,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC;EAExB,IAAI,KAAK,QACP,MAAM,MAAM;GAAC;GAAsB;GAAW;EAAQ,GAAG,GAAG,KAAK,KAAK,IAAI,EAAE,KAAK,CAC/E,MACA,iCACF,CAAC;EAGH,MAAM,WAAW,MAAM,IACrB,KACA,CACE,GAAG;GAAC;GAAM;GAAuB;GAAM;EAAuB,GAC9D,GAAG;GAAC;GAAM;GAA6B;GAAW;GAAgB;EAAI,CACxE,GACA,EAAE,KAAK,QAAQ,CACjB;EACA,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eACR,GAAG,KAAK,oBAAoB,KAAK,MAAM,GAAG,EAAE,EAAE,IAAI,UAAU,SAAS,MAAM,KAC3E,KACF;EAEF,UAAU,KAAK,SAAS,IAAI,GAAG,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;EAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,QAAQ,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,KAAK;EACtE,cAAc,SAAS,SAAS,MAAM;EACtC,WAAW,SAAS,GAAG;CACzB;CACA,OAAO;EAAE;EAAQ;EAAM;CAAI;AAC7B;;AAGA,eAAe,OAAO,KAAa,QAAgB,GAAiB,MAAc;CAChF,MAAM,KAAK,GAAG,EAAE,MAAM,MAAM,EAAE,IAAI,KAAK,GAAG,UAAU,OAAO,MAAM,GAAG,CAAC,EAAE;CACvE,IAAI,CAAC,EAAE,MAAM,QAAQ,MAAM,MAAM,KAAK,CAAC,aAAa,GAAG,OAAO,QAAQ,CAAC,EAAA,CAAG;CAC1E,MAAM,QAAQ,MAAM,MAAM,KAAK;EAAC;EAAW;EAAQ;EAAM,EAAE;CAAI,CAAC;CAChE,MAAM,CAAC,OAAO,IAAI,QAAQ,MAAM,KAAK,MAAM,GAAI;CAC/C,MAAM,GAAG,MAAM,OAAO,KAAK,MAAM,GAAG;CACpC,IAAI,MAAM,SAAS,KAAK,SAAS,EAAE,QAAQ,SAAS,UAAU,KAAK,OAAO;CAC1E,IAAI,MAAM,SAAS,KAAK,SAAS,EAAE,MACjC,MAAM,IAAI,eAAe,GAAG,KAAK,GAAG,GAAG,KAAK,EAAE,KAAK,+BAA+B,IAAI;CAExF,IAAI,SAAS,MAAM,QAAQ,EAAE,IAAI;CACjC,IAAI,OAAO,MAAM,MAAM,KAAK,CAAC,WAAW,WAAW,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;CACxF,IAAI,KAAK,SAAS,GAAG;EACnB,SAAS;EACT,OAAO,MAAM,MAAM,KAAK,CAAC,WAAW,MAAM,CAAC;CAC7C;CACA,MAAM,QACJ,KAAK,SAAS,IACV,KAAK,KACF,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,KAAK,MAAM;EACV,MAAM,CAAC,IAAI,IAAI,IAAI,MAAM,EAAE,MAAM,GAAI;EACrC,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,SAAS,GAAG,EAAE,KAAK;CAChD,CAAC,IACH,CAAC;CACP,MAAM,QAAQ,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK,MAAM,SAAS,KAAK,QAAQ;CAC3E,MAAM,QAAQ,WAAW,MAAM,sBAAsB,GAAG,OAAO;CAC/D,MAAM,IAAI,eACR,GAAG,KAAK,GAAG,GAAG,qBAAqB,EAAE,KAAK,GAAG,MAAM,SAAS,KAAK,MAAM,IAAI,UAAU,MACrF,IACF;AACF;AAEA,SAAS,WAAW,SAAkB,QAAgB,GAAiB,MAAc;CACnF,MAAM,OAAO,UAAU,MAAM;CAC7B,QAAQ,SAAR;EACE,KAAK,OAAO;GACV,MAAM,QACJ,EAAE,OAAO,mBAAmB,KAAK,EAAE,GAAG,IAClC,iDACA;GACN,OAAO,IAAI,eACT,GAAG,KAAK,+BAA+B,EAAE,OAAO,OAAO,kCAAkC,SACzF,IACF;EACF;EACA,KAAK,QACH,OAAO,IAAI,eACT,GAAG,KAAK,0EAA0E,KAAK,uKACvF,IACF;EACF,KAAK,OACH,OAAO,IAAI,eACT,GAAG,KAAK,uBAAuB,KAAK,oFACpC,IACF;EACF,KAAK,aACH,OAAO,IAAI,eAAe,GAAG,KAAK,yBAAyB,KAAK,IAAI,KAAK;EAC3E,SACE,OAAO,IAAI,eAAe,GAAG,KAAK,wBAAwB,KAAK,IAAI,KAAK;CAC5E;AACF;;;;;AAWA,SAAS,SAAS,KAAa,OAAkC;CAC/D,MAAM,IAAI,OAAO,QAAQ,IAAI,oBAAoB,CAAC,KAAK;CACvD,MAAM,SAAS,OAAO,KAAK,kBAAkB,OAAO,CAAC,CAAC,SAAS,QAAQ;CACvE,eAAe,MAAM;CACrB,OAAO;EACL,kBAAkB,OAAO,IAAI,CAAC;GAC7B,kBAAkB,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO;GACpD,oBAAoB,MAAM,wBAAwB;CACrD;AACF;;;;;AAMA,eAAsB,kBACpB,MACA,SAC6B;CAC7B,MAAM,2BAAW,IAAI,IAA0D;CAC/E,KAAK,MAAM,KAAK,MAAM;EACpB,MAAM,MAAM,aAAa,EAAE,SAAS;EACpC,MAAM,QAAQ,SAAS,IAAI,GAAG,KAAK;GAAE,WAAW,EAAE;GAAW,OAAO,CAAC;EAAE;EACvE,MAAM,KAAK,eAAe,EAAE;EAC5B,IAAI,CAAC,MAAM,MAAM,SAAS,EAAE,GAAG,MAAM,MAAM,KAAK,EAAE;EAClD,SAAS,IAAI,KAAK,KAAK;CACzB;CACA,MAAM,sBAAM,IAAI,IAA8B;CAE9C,MAAM,wBAAQ,IAAI,IAAiE;CACnF,KAAK,MAAM,KAAK,SAAS,OAAO,GAC9B,MAAM,IAAI,EAAE,UAAU,KAAK,CAAC,GAAI,MAAM,IAAI,EAAE,UAAU,GAAG,KAAK,CAAC,GAAI,CAAC,CAAC;CAEvE,MAAM,QAAQ,IACZ,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,SAAS;EACtC,KAAK,MAAM,EAAE,WAAW,WAAW,MAAM;GACvC,MAAM,QAAQ,eAAe,SAAS;GACtC,MAAM,OAAO,iBAAiB,KAAK,UAAU,KAAK,EAAE;GACpD,MAAM,MAAM,aAAa,SAAS;GAClC,IAAI;IACF,IAAI,MAAyB,CAAC;IAC9B,IAAI,UAAU,OAAO;KACnB,MAAM,QAAQ,QAAQ,IAAI,UAAU;KACpC,IAAI,CAAC,OACH,MAAM,IAAI,eACR,GAAG,KAAK,uBAAuB,UAAU,MAAM,uDAC/C,IACF;KAEF,eAAe,KAAK;KACpB,MAAM,SAAS,UAAU,KAAK,KAAK;IACrC;IACA,MAAM,SAAS,QAAQ,UAAU;IACjC,MAAM,WAAW,MAAM,WAAW,QAAQ,MAAM,WAAW,MAAM,QAAQ,GAAG;IAC5E,IAAI,IAAI,KAAK;KAAE,IAAI;KAAM;KAAW;IAAS,CAAC;GAChD,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,iBAAiB,MAAM;IAC9C,MAAM,UAA0B;KAC9B,OAAO,MAAM,QAAQ,WAAW;KAChC,OAAO;KACP,KAAK;KACL,OAAO;KACP,KAAK;KACL,SAAS,MAAM;KACf,OAAO,MAAM;KACb;IACF;IACA,IAAI,IAAI,KAAK;KAAE,IAAI;KAAO;KAAW;KAAS;KAAO;IAAM,CAAC;GAC9D;EACF;CACF,CAAC,CACH;CACA,MAAM,WAAW,CAAC,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAqB;CAC/E,IAAI,CAAC,SAAS,QAAQ,OAAO;CAC7B,MAAM,OAAO,aAAa,QAAQ,MAAM,QAAQ,KAAK;CACrD,UAAU,KAAK,MAAM,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC/C,MAAM,MAAM,OAAO,YACjB,SAAS,KAAK,MAAM,CAClB,aAAa,EAAE,SAAS,GACxB,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,IAAI;EAAE,SAAS,EAAE;EAAS,OAAO,EAAE;EAAO,OAAO,EAAE;CAAM,CACzF,CAAC,CACH;CACA,cAAc,MAAM,KAAK,UAAU,GAAG,CAAC;CACvC,OAAO;AACT;AAEA,MAAa,4BAA4B,MAAc,UACrD,OAAO,aAAa,MAAM,KAAK,GAAG,EAAE,OAAO,KAAK,CAAC;AAMnD,MAAM,uBAAO,IAAI,IAA0C;;;;;AAM3D,SAAgB,kBACd,MACA,OACA,GAC+B;CAC/B,MAAM,OAAO,aAAa,MAAM,KAAK;CACrC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG;EACnB,IAAI,MAAoC;EACxC,IAAI;GACF,MAAM,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;EAC7C,QAAQ,CAAC;EACT,KAAK,IAAI,MAAM,GAAG;CACpB;CACA,MAAM,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,aAAa,CAAC;CAC7C,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,aAAa,OACf,MAAM,IAAI,aAAa;EACrB,GAAG,MAAM;EACT,SAAS,GAAG,MAAM,QAAQ,QAAQ,uBAAuB,KAAK,UAAU,MAAM,KAAK,EAAE,YAAY,MAAM,MAAM,KAAK,IAAI,EAAE;CAC1H,CAAC;CAEH,OAAO,MAAM;AACf"}

package/dist/workspace-CyoXG6CY.js

@@ -0,0 +1,2 @@
+import { a as removePreparedWorkspaces, o as workspaceKey, r as prepareWorkspaces } from "./workspace-C2S0Z6gl.js";
+export { prepareWorkspaces, removePreparedWorkspaces, workspaceKey };

package/docker/Dockerfile

@@ -0,0 +1,19 @@
+# Base image for reeval sandboxes. `reeval image build` builds this, bakes the Cursor harness
+# bootstrap into it and commits the result as the image evals run in.
+FROM node:22-bookworm-slim
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends bash ca-certificates curl git procps \
+  && rm -rf /var/lib/apt/lists/*
+
+# npm before 11.6 (node:22 ships 10.9) can crash resolving circular peer sets ("reading
+# 'edgesOut'", npm/cli#8261), so evals' installs get a fixed npm. Keep in step with NPM_VERSION
+# in src/build-image.ts. The harness bridge installs its dependencies with pnpm.
+RUN npm install --global npm@11.20.0 && npm install --global pnpm@10.33.3
+
+# The agent, setup steps and checks run as `reeval` (SANDBOX_USER in src/image.ts); image builds stay
+# root. Keep in step with toolchainDockerfile in src/build-image.ts.
+RUN useradd --create-home --shell /bin/bash --uid 10001 --user-group reeval \
+  && mkdir -p /reeval/workspace && chown -R reeval:reeval /reeval
+ENV PATH=/home/reeval/.local/bin:$PATH
+WORKDIR /reeval/workspace

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "reeval",
+  "version": "0.0.1",
+  "description": "reeval: an eval runner for coding agents",
+  "license": "Apache-2.0",
+  "author": "Invertase <oss@invertase.io>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/invertase/reeval.git",
+    "directory": "packages/reeval"
+  },
+  "homepage": "https://github.com/invertase/reeval/tree/main/packages/reeval#readme",
+  "bugs": {
+    "url": "https://github.com/invertase/reeval/issues"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22.13"
+  },
+  "bin": {
+    "reeval": "./dist/cli.js",
+    "re": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./harness": {
+      "types": "./dist/harness.d.ts",
+      "default": "./dist/harness.js"
+    },
+    "./sandbox": {
+      "types": "./dist/sandbox.d.ts",
+      "default": "./dist/sandbox.js"
+    },
+    "./judge": {
+      "types": "./dist/judge.d.ts",
+      "default": "./dist/judge.js"
+    },
+    "./view": {
+      "types": "./dist/view/index.d.ts",
+      "default": "./dist/view/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "docker",
+    "assets",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "preferUnplugged": true,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "@ai-sdk/google": "4.0.79",
+    "@ai-sdk/harness": "1.0.124",
+    "@ai-sdk/harness-acp": "1.0.62",
+    "@ai-sdk/provider-utils": "5.0.47",
+    "@ai-sdk/typesafe-ai": "3.0.6",
+    "@hono/node-server": "2.1.1",
+    "@modelcontextprotocol/server": "2.1.0",
+    "@vitest/expect": "5.0.2",
+    "@vitest/utils": "5.0.2",
+    "ai": "7.0.114",
+    "commander": "15.0.0",
+    "get-tsconfig": "4.14.3",
+    "hono": "4.13.9",
+    "jiti": "2.7.0",
+    "std-env": "4.2.0",
+    "tinyglobby": "0.2.17",
+    "ws": "8.21.0",
+    "yaml": "2.9.1",
+    "zod": "4.6.5"
+  }
+}