self-bench 0.3.6 → 0.3.8

package/compose.yaml

@@ -1,4 +1,27 @@
-name: selfbench
+# The project name, host ports, and image tags are per checkout when started through
+# `self-bench up` (see src/cli/stack-environment.ts), so several worktrees run side by side.
+# Plain `docker compose up` keeps the historical defaults below.
+name: ${COMPOSE_PROJECT_NAME:-selfbench}
+
+# Shared by the API and the worker. Provider control credentials and the GitHub OAuth secret
+# are deliberately not here: they go only to the service that needs them.
+x-selfbench-environment: &selfbench-environment
+  SELFBENCH_API_HOST: 0.0.0.0
+  SELFBENCH_API_TOKEN: ${SELFBENCH_API_TOKEN:-selfbench-local}
+  SELFBENCH_BUILD_COMMIT: ${SELFBENCH_BUILD_COMMIT:-}
+  SELFBENCH_TEMPORAL_ADDRESS: temporal:7233
+  SELFBENCH_ARTIFACT_BACKEND: local
+  SELFBENCH_ARTIFACT_DIR: /var/lib/selfbench/artifacts
+  SELFBENCH_EXECUTION_BACKEND: ${SELFBENCH_EXECUTION_BACKEND:-docker}
+  SELFBENCH_DOCKER_IMAGE: ${SELFBENCH_DOCKER_IMAGE:-selfbench-sandbox:local}
+  SELFBENCH_HARBOR_ENVIRONMENT: ${SELFBENCH_HARBOR_ENVIRONMENT:-}
+  SELFBENCH_VERCEL_IMAGE: ${SELFBENCH_VERCEL_IMAGE:-}
+  SELFBENCH_VERCEL_TIMEOUT_CAP: ${SELFBENCH_VERCEL_TIMEOUT_CAP:-}
+  SELFBENCH_E2B_TEMPLATE: ${SELFBENCH_E2B_TEMPLATE:-}
+  SELFBENCH_E2B_TIMEOUT_CAP: ${SELFBENCH_E2B_TIMEOUT_CAP:-}
+  # The site database: users, connected repos, and evaluation records. Migrations run at startup.
+  SELFBENCH_DATABASE_URL: postgres://selfbench:selfbench@site-postgres:5432/selfbench
+  SELFBENCH_EVAL_CREDENTIAL_KEY: ${SELFBENCH_EVAL_CREDENTIAL_KEY:-}
 
 services:
   postgres:
@@ -15,6 +38,20 @@ services:
       timeout: 5s
       retries: 20
 
+  site-postgres:
+    image: postgres:17.6-bookworm
+    environment:
+      POSTGRES_DB: selfbench
+      POSTGRES_USER: selfbench
+      POSTGRES_PASSWORD: selfbench
+    volumes:
+      - site-postgres:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U selfbench"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+
   temporal:
     image: temporalio/auto-setup:1.29.6
     depends_on:
@@ -27,44 +64,48 @@ services:
       POSTGRES_PWD: temporal
       POSTGRES_SEEDS: postgres
     ports:
-      - "127.0.0.1:7233:7233"
+      - "127.0.0.1:${SELFBENCH_TEMPORAL_PORT:-7233}:7233"
     restart: on-failure
 
   api:
-    image: selfbench:local
+    image: ${SELFBENCH_IMAGE:-selfbench:local}
     build:
       context: .
       args:
         SELFBENCH_BUILD_COMMIT: ${SELFBENCH_BUILD_COMMIT:-}
     depends_on:
-      - temporal
-    environment: &selfbench-environment
-      SELFBENCH_API_HOST: 0.0.0.0
-      SELFBENCH_API_TOKEN: ${SELFBENCH_API_TOKEN:-selfbench-local}
-      SELFBENCH_BUILD_COMMIT: ${SELFBENCH_BUILD_COMMIT:-}
-      SELFBENCH_TEMPORAL_ADDRESS: temporal:7233
-      SELFBENCH_ARTIFACT_BACKEND: local
-      SELFBENCH_ARTIFACT_DIR: /var/lib/selfbench/artifacts
-      SELFBENCH_EXECUTION_BACKEND: ${SELFBENCH_EXECUTION_BACKEND:-docker}
-      SELFBENCH_DOCKER_IMAGE: selfbench-sandbox:local
-      SELFBENCH_HARBOR_ENVIRONMENT: ${SELFBENCH_HARBOR_ENVIRONMENT:-}
-      SELFBENCH_VERCEL_IMAGE: ${SELFBENCH_VERCEL_IMAGE:-}
-      SELFBENCH_VERCEL_TIMEOUT_CAP: ${SELFBENCH_VERCEL_TIMEOUT_CAP:-}
+      temporal:
+        condition: service_started
+      site-postgres:
+        condition: service_healthy
+    environment:
+      <<: *selfbench-environment
+      # selfbench.dev sign-in. Set the GitHub OAuth app in .env to serve the signed-in site;
+      # leave GITHUB_OAUTH_CLIENT_ID unset to keep the bearer-token Ledger.
+      GITHUB_OAUTH_CLIENT_ID: ${GITHUB_OAUTH_CLIENT_ID:-}
+      GITHUB_OAUTH_CLIENT_SECRET: ${GITHUB_OAUTH_CLIENT_SECRET:-}
+      SELFBENCH_SESSION_SECRET: ${SELFBENCH_SESSION_SECRET:-}
+      # The origin browsers use; it forms the OAuth callback URL, so it must match the OAuth app.
+      SELFBENCH_PUBLIC_URL: ${SELFBENCH_PUBLIC_URL:-http://127.0.0.1:8080}
     ports:
-      - "127.0.0.1:8080:8080"
+      # Bind 0.0.0.0 (SELFBENCH_SITE_BIND) to reach the site from other machines, e.g. a tailnet.
+      - "${SELFBENCH_SITE_BIND:-127.0.0.1}:${SELFBENCH_SITE_PORT:-8080}:8080"
     volumes:
       - artifacts:/var/lib/selfbench/artifacts
     restart: on-failure
 
   worker:
-    image: selfbench:local
+    image: ${SELFBENCH_IMAGE:-selfbench:local}
     build:
       context: .
       args:
         SELFBENCH_BUILD_COMMIT: ${SELFBENCH_BUILD_COMMIT:-}
     command: ["node", "dist/temporal/worker-main.js"]
     depends_on:
-      - temporal
+      temporal:
+        condition: service_started
+      site-postgres:
+        condition: service_healthy
     environment:
       <<: *selfbench-environment
       GH_TOKEN: ${GH_TOKEN:-}
@@ -74,9 +115,11 @@ services:
       VERCEL_TOKEN: ${VERCEL_TOKEN:-}
       VERCEL_TEAM_ID: ${VERCEL_TEAM_ID:-}
       VERCEL_PROJECT_ID: ${VERCEL_PROJECT_ID:-}
+      E2B_API_KEY: ${E2B_API_KEY:-}
+      E2B_DOMAIN: ${E2B_DOMAIN:-}
+      DAYTONA_API_KEY: ${DAYTONA_API_KEY:-}
       SELFBENCH_ACTIVITY_CONCURRENCY: ${SELFBENCH_ACTIVITY_CONCURRENCY:-}
       SELFBENCH_PI_AUTH_JSON: ${SELFBENCH_PI_AUTH_JSON:-}
-      SELFBENCH_CODEX_AUTH_JSON: ${SELFBENCH_CODEX_AUTH_JSON:-}
     user: root
     group_add:
       - ${DOCKER_GID:-0}
@@ -88,4 +131,5 @@ services:
 
 volumes:
   artifacts:
+  site-postgres:
   temporal-postgres:

package/dist/agent-feed.d.ts

@@ -0,0 +1,8 @@
+export interface AgentFeedEvent {
+    kind: "message" | "tool" | "result";
+    text: string;
+    timestamp?: string;
+}
+/** Public agent output only: never prompts, hidden reasoning, or provider metadata. */
+export declare function agentFeedEvents(jsonl: string, secrets?: readonly string[]): AgentFeedEvent[];
+//# sourceMappingURL=agent-feed.d.ts.map

package/dist/agent-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-feed.d.ts","sourceRoot":"","sources":["../src/agent-feed.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,cAAc,EAAE,CA8ChG"}

package/dist/agent-feed.js

@@ -0,0 +1,56 @@
+import { redactSecrets } from "./provenance/redact.js";
+/** Public agent output only: never prompts, hidden reasoning, or provider metadata. */
+export function agentFeedEvents(jsonl, secrets = []) {
+    const events = [];
+    const secretValues = secrets.flatMap((secret) => {
+        try {
+            const strings = [];
+            JSON.parse(secret, (_key, value) => {
+                if (typeof value === "string")
+                    strings.push(value);
+                return value;
+            });
+            return strings;
+        }
+        catch {
+            return [secret];
+        }
+    });
+    const clean = (text) => {
+        let value = text;
+        for (const secret of secretValues)
+            if (secret.length >= 8)
+                value = value.split(secret).join("[REDACTED]");
+        return redactSecrets(value).slice(0, 8000);
+    };
+    for (const line of jsonl.split("\n")) {
+        try {
+            const entry = JSON.parse(line);
+            const message = entry.message;
+            if (!message || !["assistant", "toolResult"].includes(message.role))
+                continue;
+            const content = Array.isArray(message.content) ? message.content : [];
+            for (const block of content) {
+                if (block.type === "text" && typeof block.text === "string") {
+                    events.push({
+                        kind: message.role === "toolResult" ? "result" : "message",
+                        text: clean(block.text),
+                        ...(typeof entry.timestamp === "string" ? { timestamp: entry.timestamp } : {}),
+                    });
+                }
+                else if (message.role === "assistant" && block.type === "toolCall") {
+                    events.push({
+                        kind: "tool",
+                        text: clean(`${block.name}\n${JSON.stringify(block.arguments ?? {}, null, 2)}`),
+                        ...(typeof entry.timestamp === "string" ? { timestamp: entry.timestamp } : {}),
+                    });
+                }
+            }
+        }
+        catch {
+            // A bounded tail can start/end in the middle of a JSONL entry.
+        }
+    }
+    return events.slice(-60);
+}
+//# sourceMappingURL=agent-feed.js.map

package/dist/agent-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-feed.js","sourceRoot":"","sources":["../src/agent-feed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAQvD,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,UAA6B,EAAE;IAC5E,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,MAAM,MAAM,IAAI,YAAY;YAC/B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5D,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;wBAC1D,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;wBACvB,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/E,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;wBAC/E,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/api/http.d.ts

@@ -0,0 +1,18 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export declare function readBody(request: IncomingMessage, limit?: number): Promise<Buffer>;
+export declare function authorized(request: IncomingMessage, token: string | undefined): boolean;
+/** True only when a token is configured and the request presents exactly that token. */
+export declare function bearerMatches(request: IncomingMessage, token: string): boolean;
+export declare function sendReviewAsset(response: ServerResponse, pathname: string): Promise<void>;
+export declare function sendApiError(response: ServerResponse, error: unknown): void;
+export declare function sendJson(response: ServerResponse, status: number, value: unknown): void;
+/**
+ * Whether a state-changing request may proceed. Browser sessions are cookie-authenticated, so a
+ * cross-site page could trigger them: they must come from the site's own origin, and any body must
+ * be JSON (a plain form post cannot be). An API key cannot be attached by another site, so
+ * key-authenticated requests are trusted as they are.
+ */
+export declare function trustedMutation(request: IncomingMessage, publicUrl: string, user: {
+    readonly apiKey?: unknown;
+}): boolean;
+//# sourceMappingURL=http.d.ts.map

package/dist/api/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,eAAe,EACxB,KAAK,SAAmB,GACvB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEvF;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAS9E;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB/F;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAM3E;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAQvF;AAyBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAOT"}

package/dist/api/http.js

@@ -0,0 +1,111 @@
+import { timingSafeEqual } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { resolve, sep } from "node:path";
+import { z } from "zod";
+import { projectRoot } from "../project-paths.js";
+export async function readBody(request, limit = 10 * 1024 * 1024) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += value.byteLength;
+        if (size > limit)
+            throw new RequestBodyTooLargeError(limit);
+        chunks.push(value);
+    }
+    return Buffer.concat(chunks);
+}
+export function authorized(request, token) {
+    return !token || bearerMatches(request, token);
+}
+/** True only when a token is configured and the request presents exactly that token. */
+export function bearerMatches(request, token) {
+    const supplied = request.headers.authorization?.replace(/^Bearer\s+/i, "");
+    if (!supplied)
+        return false;
+    const expectedBuffer = Buffer.from(token);
+    const suppliedBuffer = Buffer.from(supplied);
+    return (expectedBuffer.length === suppliedBuffer.length &&
+        timingSafeEqual(expectedBuffer, suppliedBuffer));
+}
+export async function sendReviewAsset(response, pathname) {
+    const relativePath = pathname === "/" ? "index.html" : pathname.slice(1);
+    const root = resolve(projectRoot(import.meta.url), "dist/review");
+    const path = resolve(root, relativePath);
+    if (path !== root && !path.startsWith(`${root}${sep}`)) {
+        sendJson(response, 400, { error: "invalid asset path" });
+        return;
+    }
+    try {
+        const body = await readFile(path);
+        response.writeHead(200, {
+            "content-type": contentType(path),
+            "content-length": body.byteLength,
+            "cache-control": pathname === "/" ? "no-cache" : "public, max-age=31536000, immutable",
+            "x-content-type-options": "nosniff",
+        });
+        response.end(body);
+    }
+    catch {
+        sendJson(response, 404, { error: "asset not found" });
+    }
+}
+export function sendApiError(response, error) {
+    const status = apiErrorStatus(error);
+    if (status === 500)
+        console.error(error);
+    sendJson(response, status, {
+        error: status === 500 ? "internal server error" : errorMessage(error),
+    });
+}
+export function sendJson(response, status, value) {
+    const body = `${JSON.stringify(value, null, 2)}\n`;
+    response.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+        "content-length": Buffer.byteLength(body),
+        "x-content-type-options": "nosniff",
+    });
+    response.end(body);
+}
+class RequestBodyTooLargeError extends Error {
+    limit;
+    constructor(limit) {
+        super(`request body exceeds ${limit} bytes`);
+        this.limit = limit;
+    }
+}
+function apiErrorStatus(error) {
+    if (error instanceof RequestBodyTooLargeError)
+        return 413;
+    if (error instanceof z.ZodError || error instanceof SyntaxError)
+        return 400;
+    return 500;
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function contentType(path) {
+    if (path.endsWith(".html"))
+        return "text/html; charset=utf-8";
+    if (path.endsWith(".css"))
+        return "text/css; charset=utf-8";
+    if (path.endsWith(".js"))
+        return "text/javascript; charset=utf-8";
+    return "application/octet-stream";
+}
+/**
+ * Whether a state-changing request may proceed. Browser sessions are cookie-authenticated, so a
+ * cross-site page could trigger them: they must come from the site's own origin, and any body must
+ * be JSON (a plain form post cannot be). An API key cannot be attached by another site, so
+ * key-authenticated requests are trusted as they are.
+ */
+export function trustedMutation(request, publicUrl, user) {
+    if (user.apiKey)
+        return true;
+    if (request.headers.origin !== new URL(publicUrl).origin)
+        return false;
+    const hasBody = Number(request.headers["content-length"] ?? 0) > 0 ||
+        request.headers["transfer-encoding"] !== undefined;
+    return !hasBody || (request.headers["content-type"]?.startsWith("application/json") ?? false);
+}
+//# sourceMappingURL=http.js.map

package/dist/api/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IAExB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAwB,EAAE,KAAyB;IAC5E,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,KAAa;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC/C,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAwB,EAAE,QAAgB;IAC9E,MAAM,YAAY,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC;YACjC,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,eAAe,EAAE,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qCAAqC;YACtF,wBAAwB,EAAE,SAAS;SACpC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAwB,EAAE,KAAc;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;QACzB,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,KAAc;IAC/E,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,wBAAyB,SAAQ,KAAK;IACrB;IAArB,YAAqB,KAAa;QAChC,KAAK,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC;QAD1B,UAAK,GAAL,KAAK,CAAQ;IAElC,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,wBAAwB;QAAE,OAAO,GAAG,CAAC;IAC1D,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,GAAG,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,gCAAgC,CAAC;IAClE,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAwB,EACxB,SAAiB,EACjB,IAAmC;IAEnC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QAClD,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,SAAS,CAAC;IACrD,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,CAAC;AAChG,CAAC"}

package/dist/api/run-request.d.ts

@@ -0,0 +1,37 @@
+import { z } from "zod";
+import type { SelfBenchConfig } from "../config.js";
+import { type ReplayRunRequest, type RunRequest } from "../contracts.js";
+declare const submissionSchema: z.ZodObject<{
+    repository: z.ZodObject<{
+        url: z.ZodString;
+        commit: z.ZodString;
+    }, z.core.$strict>;
+    provenance: z.ZodObject<{
+        uri: z.ZodString;
+        sha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        contentType: z.ZodString;
+    }, z.core.$strip>;
+    candidateCounts: z.ZodObject<{
+        easy: z.ZodNumber;
+        medium: z.ZodNumber;
+        hard: z.ZodNumber;
+    }, z.core.$strip>;
+    excludeRuns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runId: z.ZodString;
+    authoringModel: z.ZodDefault<z.ZodString>;
+    selfbenchCommit: z.ZodString;
+}, z.core.$strip>;
+declare const replaySubmissionSchema: z.ZodObject<{
+    replay: z.ZodObject<{
+        sourceRunId: z.ZodString;
+        candidateIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    runId: z.ZodString;
+    authoringModel: z.ZodDefault<z.ZodString>;
+    selfbenchCommit: z.ZodString;
+}, z.core.$strip>;
+export type RunSubmission = z.input<typeof submissionSchema> | z.input<typeof replaySubmissionSchema>;
+export declare function buildRunRequest(config: SelfBenchConfig, submission: RunSubmission): RunRequest | ReplayRunRequest;
+export {};
+//# sourceMappingURL=run-request.d.ts.map

package/dist/api/run-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-request.d.ts","sourceRoot":"","sources":["../../src/api/run-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,UAAU,EAKhB,MAAM,iBAAiB,CAAC;AASzB,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;iBAUpB,CAAC;AAEH,QAAA,MAAM,sBAAsB;;;;;;;;iBAAsD,CAAC;AAEnF,MAAM,MAAM,aAAa,GACrB,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,GAChC,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3C,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,aAAa,GACxB,UAAU,GAAG,gBAAgB,CAsB/B"}

package/dist/api/run-request.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { artifactRefSchema, excludeRunsSchema, MAX_CANDIDATES_PER_RUN, replayRunRequestSchema, replaySchema, repositoryRefSchema, runRequestSchema, } from "../contracts.js";
+const runIdSchema = z.string().regex(/^[a-z0-9][a-z0-9-]{2,62}$/);
+const commonSchema = {
+    runId: runIdSchema,
+    authoringModel: z.string().min(1).default("gpt-5.6-sol"),
+    selfbenchCommit: z.string().regex(/^[0-9a-f]{40}$/i),
+};
+const submissionSchema = z.object({
+    ...commonSchema,
+    repository: repositoryRefSchema,
+    provenance: artifactRefSchema,
+    candidateCounts: z.object({
+        easy: z.number().int().min(0).max(MAX_CANDIDATES_PER_RUN),
+        medium: z.number().int().min(0).max(MAX_CANDIDATES_PER_RUN),
+        hard: z.number().int().min(0).max(MAX_CANDIDATES_PER_RUN),
+    }),
+    excludeRuns: excludeRunsSchema.optional(),
+});
+const replaySubmissionSchema = z.object({ ...commonSchema, replay: replaySchema });
+export function buildRunRequest(config, submission) {
+    if ("replay" in submission) {
+        const parsed = replaySubmissionSchema.parse(submission);
+        return replayRunRequestSchema.parse({
+            runId: parsed.runId,
+            replay: parsed.replay,
+            authoring: authoring(parsed.authoringModel),
+            version: version(config, parsed.selfbenchCommit),
+        });
+    }
+    const parsed = submissionSchema.parse(submission);
+    return runRequestSchema.parse({
+        runId: parsed.runId,
+        repository: parsed.repository,
+        provenance: parsed.provenance,
+        candidateCounts: parsed.candidateCounts,
+        ...(parsed.excludeRuns && parsed.excludeRuns.length > 0
+            ? { excludeRuns: parsed.excludeRuns }
+            : {}),
+        authoring: authoring(parsed.authoringModel),
+        version: version(config, parsed.selfbenchCommit),
+    });
+}
+function authoring(model) {
+    return { provider: "openai-codex", model, reasoningEffort: "high" };
+}
+function version(config, selfbenchCommit) {
+    return {
+        selfbenchCommit: config.buildCommit ?? selfbenchCommit,
+        executionBackend: config.execution.kind,
+        harborEnvironment: config.harborEnvironment,
+        sandboxImage: config.execution.image,
+        ...(config.execution.kind === "vercel" || config.execution.kind === "e2b"
+            ? { sandboxTimeoutCapMs: config.execution.timeoutCapMs }
+            : {}),
+        schema: 2,
+    };
+}
+//# sourceMappingURL=run-request.js.map

package/dist/api/run-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-request.js","sourceRoot":"","sources":["../../src/api/run-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EAGtB,sBAAsB,EACtB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,WAAW;IAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACrD,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,YAAY;IACf,UAAU,EAAE,mBAAmB;IAC/B,UAAU,EAAE,iBAAiB;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;KAC1D,CAAC;IACF,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAMnF,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,UAAyB;IAEzB,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO,sBAAsB,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;YAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,gBAAgB,CAAC,KAAK,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;YACrC,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB,EAAE,eAAuB;IAC/D,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe;QACtD,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;QACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK;QACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK;YACvE,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;KACV,CAAC;AACJ,CAAC"}

package/dist/api/status.d.ts

@@ -0,0 +1,4 @@
+import type { Client } from "@temporalio/client";
+import type { RunStatus } from "../contracts.js";
+export declare function queryStatus(handle: ReturnType<Client["workflow"]["getHandle"]>): Promise<RunStatus | object>;
+//# sourceMappingURL=status.d.ts.map

package/dist/api/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/api/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG3D,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC,GAClD,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,CAgB7B"}

package/dist/api/status.js

@@ -0,0 +1,36 @@
+import { statusQuery } from "../temporal/workflow.js";
+export async function queryStatus(handle) {
+    try {
+        const [status, description] = await Promise.all([handle.query(statusQuery), handle.describe()]);
+        if (description.status.name === "RUNNING" || terminalRunPhase(status.phase))
+            return status;
+        const phase = executionPhase(description.status.name);
+        return {
+            ...status,
+            phase,
+            ...(phase === "failed" && !status.error
+                ? { error: `Temporal workflow ${description.status.name.toLowerCase()}` }
+                : {}),
+        };
+    }
+    catch {
+        const description = await handle.describe();
+        return { runId: description.workflowId, phase: executionPhase(description.status.name) };
+    }
+}
+function terminalRunPhase(phase) {
+    return ["complete", "blocked", "failed", "cancelled"].includes(phase);
+}
+function executionPhase(status) {
+    switch (status) {
+        case "COMPLETED":
+            return "complete";
+        case "CANCELED":
+            return "cancelled";
+        case "RUNNING":
+            return "queued";
+        default:
+            return "failed";
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/api/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/api/status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAC3F,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO;YACL,GAAG,MAAM;YACT,KAAK;YACL,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK;gBACrC,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE;gBACzE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/api/viewer-routes.d.ts

@@ -0,0 +1,9 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ArtifactStore } from "../artifacts.js";
+import type { RunStatus } from "../contracts.js";
+export interface ViewerRouteContext {
+    readonly store: ArtifactStore;
+    readonly statusFor: (runId: string) => Promise<RunStatus | object>;
+}
+export declare function handleViewerRoute(request: IncomingMessage, url: URL, response: ServerResponse, context: ViewerRouteContext): Promise<boolean>;
+//# sourceMappingURL=viewer-routes.d.ts.map

package/dist/api/viewer-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer-routes.d.ts","sourceRoot":"","sources":["../../src/api/viewer-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAgB,MAAM,iBAAiB,CAAC;AAe/D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;CACpE;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAmElB"}

package/dist/api/viewer-routes.js

@@ -0,0 +1,98 @@
+import { pipeline } from "node:stream/promises";
+import { archivedCandidates } from "../viewer/archived.js";
+import { artifactContentType, candidateArtifacts, isRunArtifactKey } from "../viewer/artifacts.js";
+import { BundleNotFoundError, expandBundle } from "../viewer/bundle.js";
+import { listCandidates } from "../viewer/candidates.js";
+import { sendJson } from "./http.js";
+const RUN_ID = "([a-z0-9][a-z0-9-]{2,62})";
+const TASK_ID = "([A-Za-z0-9][A-Za-z0-9._-]*)";
+const candidatesRoute = new RegExp(`^/v1/runs/${RUN_ID}/candidates$`);
+const candidateArtifactsRoute = new RegExp(`^/v1/runs/${RUN_ID}/candidates/${TASK_ID}/artifacts$`);
+const artifactRoute = new RegExp(`^/v1/runs/${RUN_ID}/artifacts$`);
+const bundleRoute = new RegExp(`^/v1/runs/${RUN_ID}/bundle$`);
+export async function handleViewerRoute(request, url, response, context) {
+    if (request.method !== "GET")
+        return false;
+    if (url.pathname === "/v1/viewer") {
+        sendJson(response, 200, { modes: ["runs"] });
+        return true;
+    }
+    const candidates = candidatesRoute.exec(url.pathname);
+    if (candidates?.[1]) {
+        sendJson(response, 200, await resolveCandidates(context, candidates[1]));
+        return true;
+    }
+    const artifacts = candidateArtifactsRoute.exec(url.pathname);
+    if (artifacts?.[1] && artifacts[2]) {
+        const list = await resolveCandidates(context, artifacts[1]);
+        const task = findTask(list, artifacts[2]);
+        if (!task) {
+            sendJson(response, 404, { error: "candidate not found" });
+            return true;
+        }
+        sendJson(response, 200, await candidateArtifacts(context.store, artifacts[1], task));
+        return true;
+    }
+    const bundle = bundleRoute.exec(url.pathname);
+    if (bundle?.[1]) {
+        const key = url.searchParams.get("key") ?? "";
+        if (!isRunArtifactKey(bundle[1], key) || !key.endsWith(".tar.gz")) {
+            sendJson(response, 400, { error: "invalid bundle key" });
+            return true;
+        }
+        try {
+            sendJson(response, 200, await expandBundle(context.store, key));
+        }
+        catch (error) {
+            if (error instanceof BundleNotFoundError) {
+                sendJson(response, 404, { error: error.message });
+                return true;
+            }
+            throw error;
+        }
+        return true;
+    }
+    const artifact = artifactRoute.exec(url.pathname);
+    if (artifact?.[1]) {
+        const key = url.searchParams.get("key") ?? "";
+        if (!isRunArtifactKey(artifact[1], key)) {
+            sendJson(response, 400, { error: "invalid artifact key" });
+            return true;
+        }
+        const startText = url.searchParams.get("start");
+        const start = startText === null ? 0 : Number(startText);
+        if (!Number.isInteger(start) || start < 0) {
+            sendJson(response, 400, { error: "invalid start offset" });
+            return true;
+        }
+        const body = await context.store.openReadByKey(key, start > 0 ? { start } : {});
+        if (!body) {
+            sendJson(response, 404, { error: "artifact not found" });
+            return true;
+        }
+        response.writeHead(start > 0 ? 206 : 200, {
+            "content-type": artifactContentType(key),
+            "x-content-type-options": "nosniff",
+            "cache-control": "private, max-age=300",
+        });
+        await pipeline(body, response);
+        return true;
+    }
+    return false;
+}
+/**
+ * Live runs come from the Temporal status query. Once Temporal's retention drops a
+ * workflow, or while it has no task list yet, fall back to what the artifact store holds.
+ */
+async function resolveCandidates(context, runId) {
+    const status = await context.statusFor(runId).catch(() => undefined);
+    if (status && "tasks" in status && Array.isArray(status.tasks) && status.tasks.length > 0) {
+        return listCandidates(context.store, status);
+    }
+    return archivedCandidates(context.store, runId);
+}
+function findTask(list, taskId) {
+    return (list.candidates.find((task) => task.taskId === taskId) ??
+        list.candidates.find((task) => task.candidateId === taskId));
+}
+//# sourceMappingURL=viewer-routes.js.map

package/dist/api/viewer-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer-routes.js","sourceRoot":"","sources":["../../src/api/viewer-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAC3C,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,aAAa,MAAM,cAAc,CAAC,CAAC;AACtE,MAAM,uBAAuB,GAAG,IAAI,MAAM,CAAC,aAAa,MAAM,eAAe,OAAO,aAAa,CAAC,CAAC;AACnG,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,aAAa,MAAM,aAAa,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,aAAa,MAAM,UAAU,CAAC,CAAC;AAO9D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwB,EACxB,GAAQ,EACR,QAAwB,EACxB,OAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAuB,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACxC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC;YACxC,wBAAwB,EAAE,SAAS;YACnC,eAAe,EAAE,sBAAsB;SACxC,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAA2B,EAC3B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAmB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CACf,IAAmB,EACnB,MAAc;IAEd,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,CAC5D,CAAC;AACJ,CAAC"}