self-bench 0.3.6 → 0.3.8

package/dist/site/batch-activity.js

@@ -0,0 +1,31 @@
+import { queryStatus } from "../api/status.js";
+/** Workflow stages describe intent; pending activities distinguish execution from queueing. */
+export async function liveBatchStatus(client, runId) {
+    const status = (await queryStatus(client.workflow.getHandle(runId)));
+    if (["complete", "failed", "blocked", "cancelled"].includes(status.phase))
+        return status;
+    const tasks = (status.tasks ?? []).filter((task) => ["authoring", "verifying", "reviewing"].includes(task.status));
+    const activity = {};
+    // Generation admits at most 100 candidate workflows concurrently; limit each refresh's reads.
+    for (let index = 0; index < Math.min(tasks.length, 100); index += 8) {
+        await Promise.all(tasks.slice(index, Math.min(index + 8, 100)).map(async (task) => {
+            try {
+                const description = await client.workflowService.describeWorkflowExecution({
+                    namespace: client.options.namespace,
+                    execution: { workflowId: `${runId}/candidate/${task.candidateId}` },
+                });
+                const pending = description.pendingActivities ?? [];
+                activity[task.candidateId] = pending.some((entry) => entry.state === 2)
+                    ? "running"
+                    : pending.some((entry) => entry.state === 1)
+                        ? "queued"
+                        : "unknown";
+            }
+            catch {
+                activity[task.candidateId] = "unknown";
+            }
+        }));
+    }
+    return { ...status, activity };
+}
+//# sourceMappingURL=batch-activity.js.map

package/dist/site/batch-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-activity.js","sourceRoot":"","sources":["../../src/site/batch-activity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAC;IACpF,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACzF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACjD,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAC9D,CAAC;IACF,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAC1D,8FAA8F;IAC9F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,yBAAyB,CAAC;oBACzE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;oBACnC,SAAS,EAAE,EAAE,UAAU,EAAE,GAAG,KAAK,cAAc,IAAI,CAAC,WAAW,EAAE,EAAE;iBACpE,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACpD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;oBACrE,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;wBAC1C,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,SAAS,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC;YACzC,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC"}

package/dist/site/batch-progress.d.ts

@@ -0,0 +1,16 @@
+import type { ArtifactStore } from "../artifacts.js";
+import type { RunPhase, RunStatus } from "../contracts.js";
+import type { ConnectedRepo } from "./repo-store.js";
+import type { TaskStore } from "./task-store.js";
+export type BatchStatus = Pick<RunStatus, "runId" | "phase"> & Partial<Omit<RunStatus, "runId" | "phase">> & {
+    activity?: Record<string, "running" | "queued" | "unknown">;
+};
+export declare const terminalBatch: (phase: RunPhase) => boolean;
+/** Import artifacts first, then overlay live stages without ever writing human review fields. */
+export declare function syncBatchProgress(options: {
+    repo: ConnectedRepo;
+    tasks: TaskStore;
+    artifacts: ArtifactStore;
+    status: BatchStatus;
+}): Promise<void>;
+//# sourceMappingURL=batch-progress.d.ts.map

package/dist/site/batch-progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-progress.d.ts","sourceRoot":"","sources":["../../src/site/batch-progress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,GAC1D,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC;CAC7D,CAAC;AACJ,eAAO,MAAM,aAAa,GAAI,OAAO,QAAQ,KAAG,OACgB,CAAC;AAEjE,iGAAiG;AACjG,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDhB"}

package/dist/site/batch-progress.js

@@ -0,0 +1,52 @@
+import { syncRun } from "./task-sync.js";
+export const terminalBatch = (phase) => ["complete", "failed", "blocked", "cancelled"].includes(phase);
+/** Import artifacts first, then overlay live stages without ever writing human review fields. */
+export async function syncBatchProgress(options) {
+    const { repo, tasks, artifacts, status } = options;
+    await syncRun({ repo, tasks, artifacts, runId: status.runId, preserveUnfinished: true });
+    const existing = await tasks.listForRepo(repo.id);
+    for (const progress of status.tasks ?? []) {
+        const previous = existing.find((row) => row.runId === status.runId && row.candidateId === progress.candidateId);
+        const { reason: _previousReason, ...metadata } = previous ?? {};
+        const settled = ["accepted", "rejected", "infrastructure_failed"].includes(progress.status);
+        const interrupted = !settled && terminalBatch(status.phase);
+        await tasks.upsertMany([
+            {
+                ...metadata,
+                repoId: repo.id,
+                runId: status.runId,
+                candidateId: progress.candidateId,
+                taskId: progress.taskId,
+                difficulty: progress.difficulty,
+                stage: progress.stage ?? progress.status,
+                ...(progress.round !== undefined ? { round: progress.round } : {}),
+                pipelineStatus: progress.status === "accepted"
+                    ? "accepted"
+                    : progress.status === "rejected"
+                        ? "rejected"
+                        : progress.status === "infrastructure_failed" || interrupted
+                            ? "infrastructure_failed"
+                            : "in_progress",
+                ...(progress.reason
+                    ? { reason: progress.reason }
+                    : interrupted
+                        ? { reason: `Batch ${status.phase}` }
+                        : {}),
+            },
+        ]);
+    }
+    // Query handlers may be unavailable after failure/cancellation; settle previously observed rows.
+    if (terminalBatch(status.phase)) {
+        for (const task of await tasks.listForRepo(repo.id)) {
+            if (task.runId !== status.runId || task.pipelineStatus !== "in_progress")
+                continue;
+            await tasks.progress(task.id, {
+                stage: task.stage,
+                ...(task.round !== undefined ? { round: task.round } : {}),
+                pipelineStatus: "infrastructure_failed",
+                reason: status.error ?? `Batch ${status.phase} without a task verdict`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=batch-progress.js.map

package/dist/site/batch-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-progress.js","sourceRoot":"","sources":["../../src/site/batch-progress.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAMzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAe,EAAW,EAAE,CACxD,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEjE,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAKvC;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnD,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAC5B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAChF,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,IAAI,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC,UAAU,CAAC;YACrB;gBACE,GAAG,QAAQ;gBACX,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM;gBACxC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,cAAc,EACZ,QAAQ,CAAC,MAAM,KAAK,UAAU;oBAC5B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;wBAC9B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,uBAAuB,IAAI,WAAW;4BAC1D,CAAC,CAAC,uBAAuB;4BACzB,CAAC,CAAC,aAAa;gBACvB,GAAG,CAAC,QAAQ,CAAC,MAAM;oBACjB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;oBAC7B,CAAC,CAAC,WAAW;wBACX,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,MAAM,CAAC,KAAK,EAAE,EAAE;wBACrC,CAAC,CAAC,EAAE,CAAC;aACV;SACF,CAAC,CAAC;IACL,CAAC;IACD,iGAAiG;IACjG,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,KAAK,aAAa;gBAAE,SAAS;YACnF,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,cAAc,EAAE,uBAAuB;gBACvC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC,KAAK,yBAAyB;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/site/batch-routes.d.ts

@@ -0,0 +1,30 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ArtifactStore } from "../artifacts.js";
+import type { AuthConfig } from "../auth/config.js";
+import type { User, UserStore } from "../auth/users.js";
+import type { SelfBenchConfig } from "../config.js";
+import type { EncryptedRecordStore } from "../evaluation/encrypted-records.js";
+import { type BatchStatus } from "./batch-progress.js";
+import { type BatchStarter } from "./batch-start.js";
+import type { RepoStore } from "./repo-store.js";
+import type { RunStore } from "./run-store.js";
+import type { TaskStore } from "./task-store.js";
+export interface BatchRoutesOptions {
+    config: SelfBenchConfig;
+    auth: Pick<AuthConfig, "githubApiUrl">;
+    users: UserStore;
+    repos: RepoStore;
+    runs: RunStore;
+    tasks: TaskStore;
+    artifacts: ArtifactStore;
+    start: BatchStarter;
+    status: (runId: string) => Promise<BatchStatus>;
+    cancel: (runId: string) => Promise<void>;
+    fetchImpl?: typeof fetch;
+    records?: EncryptedRecordStore;
+}
+export interface BatchRoutes {
+    handle(request: IncomingMessage, url: URL, response: ServerResponse, user: User): Promise<boolean>;
+}
+export declare function createBatchRoutes(options: BatchRoutesOptions): BatchRoutes;
+//# sourceMappingURL=batch-routes.d.ts.map

package/dist/site/batch-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-routes.d.ts","sourceRoot":"","sources":["../../src/site/batch-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,OAAO,EAAE,KAAK,WAAW,EAAqB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAuC,MAAM,kBAAkB,CAAC;AAE1F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAKjD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACvC,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AACD,MAAM,WAAW,WAAW;IAC1B,MAAM,CACJ,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA4G1E"}

package/dist/site/batch-routes.js

@@ -0,0 +1,117 @@
+import { readBody, sendJson } from "../api/http.js";
+import { GitHubOAuthError } from "../auth/github.js";
+import { orgRecords } from "../evaluation/org-records.js";
+import { syncBatchProgress } from "./batch-progress.js";
+import { batchSubmissionSchema, prepareBatch } from "./batch-start.js";
+import { checkGenerationCredentials, generationRecordPath } from "./generation-credentials.js";
+import { tenantFor } from "./tenant.js";
+const route = /^\/api\/orgs\/([A-Za-z0-9_.-]+)\/repos\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/batches(?:\/(batch-[a-z0-9-]+)(?:\/(cancel))?)?$/;
+export function createBatchRoutes(options) {
+    const { users, repos, runs, tasks, artifacts } = options;
+    return {
+        async handle(request, url, response, user) {
+            const match = route.exec(url.pathname);
+            if (!match?.[1] || !match[2] || !match[3])
+                return false;
+            const tenant = await tenantFor(users, user, match[1]);
+            const repo = tenant ? await repos.find(tenant.id, `${match[2]}/${match[3]}`) : undefined;
+            if (!repo || !tenant) {
+                sendJson(response, 404, { error: "repository is not connected here" });
+                return true;
+            }
+            const runId = match[4];
+            if (!runId && request.method === "POST") {
+                let body;
+                try {
+                    body = JSON.parse((await readBody(request, 16 * 1024)).toString("utf8"));
+                }
+                catch {
+                    sendJson(response, 400, { error: "invalid batch request" });
+                    return true;
+                }
+                const parsed = batchSubmissionSchema.safeParse(body);
+                if (!parsed.success) {
+                    sendJson(response, 400, {
+                        error: parsed.error.issues.some((issue) => issue.path[0] === "generation")
+                            ? "Choose valid generation models, reasoning, sandbox, and credentials."
+                            : "Request 1–10000 candidates total using nonnegative whole counts for easy, medium and hard.",
+                    });
+                    return true;
+                }
+                const generation = parsed.data.generation
+                    ? {
+                        ownerId: tenant.id,
+                        orgId: tenant.id,
+                        repoId: repo.id,
+                        settings: parsed.data.generation,
+                    }
+                    : undefined;
+                if (generation) {
+                    if (!options.records) {
+                        sendJson(response, 503, { error: "Generation credential storage is not configured." });
+                        return true;
+                    }
+                    try {
+                        await checkGenerationCredentials(orgRecords(options.records, tenant.id), tenant.id, generation.settings);
+                    }
+                    catch (error) {
+                        sendJson(response, 400, {
+                            error: error instanceof Error ? error.message : "Credential unavailable",
+                        });
+                        return true;
+                    }
+                }
+                const token = await users.gitHubToken(user.githubId);
+                if (!token)
+                    throw new GitHubOAuthError("no GitHub token stored for this user", 401);
+                const input = await prepareBatch({
+                    ...options,
+                    candidateCounts: parsed.data.candidateCounts,
+                    ...(generation ? { generation } : {}),
+                    repo,
+                    token,
+                    githubApiUrl: options.auth.githubApiUrl,
+                });
+                // Persist ownership BEFORE starting paid work. A failed/ambiguous start remains visible
+                // and recoverable under this repo rather than leaving an unowned running workflow.
+                if (generation && options.records)
+                    await options.records.write(generationRecordPath(input.runId), generation, 0);
+                const run = await runs.attachRun(repo.id, input.runId, user.id);
+                try {
+                    await options.start(input);
+                }
+                catch {
+                    sendJson(response, 503, {
+                        runId: input.runId,
+                        error: "Batch start could not be confirmed. Check this batch before starting another.",
+                    });
+                    return true;
+                }
+                sendJson(response, 202, { run, runId: input.runId });
+                return true;
+            }
+            const attached = (await runs.runsFor(repo.id)).filter((run) => run.runId.startsWith("batch-"));
+            if (!runId && request.method === "GET") {
+                sendJson(response, 200, { batches: attached });
+                return true;
+            }
+            if (!runId || !attached.some((run) => run.runId === runId)) {
+                sendJson(response, 404, { error: "batch not found in this repository" });
+                return true;
+            }
+            if (match[5] === "cancel" && request.method === "POST") {
+                await options.cancel(runId);
+                sendJson(response, 202, { runId, cancellationRequested: true });
+                return true;
+            }
+            if (!match[5] && request.method === "GET") {
+                const status = await options.status(runId);
+                await syncBatchProgress({ repo, tasks, artifacts, status });
+                sendJson(response, 200, status);
+                return true;
+            }
+            return false;
+        },
+    };
+}
+//# sourceMappingURL=batch-routes.js.map

package/dist/site/batch-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-routes.js","sourceRoot":"","sources":["../../src/site/batch-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIrD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAoB,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAqB,qBAAqB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAI/F,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,KAAK,GACT,gIAAgI,CAAC;AAwBnI,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACzD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxC,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAC5D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACtB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;4BACxE,CAAC,CAAC,sEAAsE;4BACxE,CAAC,CAAC,4FAA4F;qBACjG,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;oBACvC,CAAC,CAAC;wBACE,OAAO,EAAE,MAAM,CAAC,EAAE;wBAClB,KAAK,EAAE,MAAM,CAAC,EAAE;wBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;qBACjC;oBACH,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACrB,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;wBACvF,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,0BAA0B,CAC9B,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,EACtC,MAAM,CAAC,EAAE,EACT,UAAU,CAAC,QAAQ,CACpB,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;4BACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;yBACzE,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBACpF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;oBAC/B,GAAG,OAAO;oBACV,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;oBAC5C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrC,IAAI;oBACJ,KAAK;oBACL,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;iBACxC,CAAC,CAAC;gBACH,wFAAwF;gBACxF,mFAAmF;gBACnF,IAAI,UAAU,IAAI,OAAO,CAAC,OAAO;oBAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAChF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,KAAK,EAAE,+EAA+E;qBACvF,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC/B,CAAC;YACF,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC3D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;gBACzE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvD,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3C,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/site/batch-start.d.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import type { ArtifactStore } from "../artifacts.js";
+import type { SelfBenchConfig } from "../config.js";
+import { type RunRequest } from "../contracts.js";
+import { type GenerationReference } from "./generation-settings.js";
+import type { ConnectedRepo } from "./repo-store.js";
+export declare const batchSubmissionSchema: z.ZodObject<{
+    candidateCounts: z.ZodObject<{
+        easy: z.ZodNumber;
+        medium: z.ZodNumber;
+        hard: z.ZodNumber;
+    }, z.core.$strip>;
+    generation: z.ZodOptional<z.ZodObject<{
+        authorModel: z.ZodEnum<{
+            "gpt-5.6-sol": "gpt-5.6-sol";
+            "gpt-6-astra": "gpt-6-astra";
+            "gpt-5.6-terra": "gpt-5.6-terra";
+            "gpt-5.6-luna": "gpt-5.6-luna";
+        }>;
+        verifierModel: z.ZodEnum<{
+            "gpt-5.6-sol": "gpt-5.6-sol";
+            "gpt-6-astra": "gpt-6-astra";
+            "gpt-5.6-terra": "gpt-5.6-terra";
+            "gpt-5.6-luna": "gpt-5.6-luna";
+        }>;
+        reasoning: z.ZodEnum<{
+            medium: "medium";
+            low: "low";
+            high: "high";
+        }>;
+        sandbox: z.ZodEnum<{
+            modal: "modal";
+            vercel: "vercel";
+            e2b: "e2b";
+        }>;
+        modelCredentialId: z.ZodUUID;
+        sandboxCredentialId: z.ZodOptional<z.ZodUUID>;
+        sandboxImage: z.ZodOptional<z.ZodString>;
+        harborEnvironment: z.ZodOptional<z.ZodEnum<{
+            modal: "modal";
+            vercel: "vercel";
+            e2b: "e2b";
+            daytona: "daytona";
+        }>>;
+        harborCredentialId: z.ZodOptional<z.ZodUUID>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BatchStarter = (input: RunRequest) => Promise<void>;
+/** Resolve an immutable repository revision; workers collect merged-PR provenance, not the browser. */
+export declare function prepareBatch(options: {
+    config: SelfBenchConfig;
+    artifacts: ArtifactStore;
+    repo: ConnectedRepo;
+    token: string;
+    githubApiUrl: string;
+    candidateCounts: RunRequest["candidateCounts"];
+    fetchImpl?: typeof fetch;
+    generation?: GenerationReference;
+}): Promise<RunRequest>;
+//# sourceMappingURL=batch-start.d.ts.map

package/dist/site/batch-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-start.d.ts","sourceRoot":"","sources":["../../src/site/batch-start.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAgB,KAAK,UAAU,EAAoB,MAAM,iBAAiB,CAAC;AAElF,OAAO,EAAE,KAAK,mBAAmB,EAA4B,MAAM,0BAA0B,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKvB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhE,uGAAuG;AACvG,wBAAsB,YAAY,CAAC,OAAO,EAAE;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC,GAAG,OAAO,CAAC,UAAU,CAAC,CA8BtB"}

package/dist/site/batch-start.js

@@ -0,0 +1,39 @@
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { buildRunRequest } from "../api/run-request.js";
+import { apiHeaders, GitHubOAuthError } from "../auth/github.js";
+import { buildCommit } from "../build-metadata.js";
+import { commitSchema, runRequestSchema } from "../contracts.js";
+import { configureGenerationRun } from "./generation-run.js";
+import { generationSettingsSchema } from "./generation-settings.js";
+export const batchSubmissionSchema = z
+    .object({
+    candidateCounts: runRequestSchema.shape.candidateCounts,
+    generation: generationSettingsSchema.optional(),
+})
+    .strict();
+/** Resolve an immutable repository revision; workers collect merged-PR provenance, not the browser. */
+export async function prepareBatch(options) {
+    const { repo, token, config, artifacts, candidateCounts } = options;
+    const response = await (options.fetchImpl ?? fetch)(`${options.githubApiUrl}/repos/${repo.fullName}/commits/${encodeURIComponent(repo.defaultBranch)}`, { headers: apiHeaders(token), signal: AbortSignal.timeout(15_000) });
+    if (!response.ok)
+        throw new GitHubOAuthError(`Cannot resolve repository revision (${response.status})`, response.status);
+    const commit = commitSchema.parse((await response.json()).sha);
+    const runId = `batch-${randomUUID()}`;
+    // A real, readable empty local-session input. collectRunProvenance augments this with
+    // merged GitHub PRs using the worker's credentials. OAuth secrets never enter history.
+    const provenance = await artifacts.put(`runs/${runId}/input/provenance.jsonl`, Buffer.alloc(0), "application/x-ndjson");
+    const run = buildRunRequest(config, {
+        runId,
+        repository: { url: `https://github.com/${repo.fullName}`, commit },
+        provenance,
+        candidateCounts,
+        selfbenchCommit: buildCommit,
+    });
+    if ("replay" in run)
+        throw new Error("unexpected replay request");
+    if (options.generation)
+        configureGenerationRun(run, options.generation, config);
+    return run;
+}
+//# sourceMappingURL=batch-start.js.map

package/dist/site/batch-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-start.js","sourceRoot":"","sources":["../../src/site/batch-start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAmB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAA4B,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAG9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC,eAAe;IACvD,UAAU,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OASlC;IACC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CACjD,GAAG,OAAO,CAAC,YAAY,UAAU,IAAI,CAAC,QAAQ,YAAY,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAClG,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACpE,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,gBAAgB,CACxB,uCAAuC,QAAQ,CAAC,MAAM,GAAG,EACzD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;IACtC,sFAAsF;IACtF,uFAAuF;IACvF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,CACpC,QAAQ,KAAK,yBAAyB,EACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,sBAAsB,CACvB,CAAC;IACF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE;QAClC,KAAK;QACL,UAAU,EAAE,EAAE,GAAG,EAAE,sBAAsB,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE;QAClE,UAAU;QACV,eAAe;QACf,eAAe,EAAE,WAAW;KAC7B,CAAC,CAAC;IACH,IAAI,QAAQ,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,UAAU;QAAE,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/site/connected-repos.d.ts

@@ -0,0 +1,25 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { AuthConfig } from "../auth/config.js";
+import type { User, UserStore } from "../auth/users.js";
+import type { ConnectedRepo, RepoStore } from "./repo-store.js";
+export interface ConnectedRepoRoutesOptions {
+    readonly config: Pick<AuthConfig, "githubApiUrl">;
+    readonly users: UserStore;
+    readonly repos: RepoStore;
+    readonly fetchImpl?: typeof fetch;
+}
+export interface ConnectedRepoRoutes {
+    /** Answers /api/orgs/:org/repos for a signed-in user. True when the response has been sent. */
+    handle(request: IncomingMessage, url: URL, response: ServerResponse, user: User): Promise<boolean>;
+}
+export declare function createConnectedRepoRoutes(options: ConnectedRepoRoutesOptions): ConnectedRepoRoutes;
+/** The browser-facing shape of a connected repo. */
+export declare function publicRepo(repo: ConnectedRepo): {
+    fullName: string;
+    defaultBranch: string;
+    private: boolean;
+    continuous: boolean;
+    connectedBy: string;
+    connectedAt: string;
+};
+//# sourceMappingURL=connected-repos.d.ts.map

package/dist/site/connected-repos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected-repos.d.ts","sourceRoot":"","sources":["../../src/site/connected-repos.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAQhE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,MAAM,CACJ,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAkGrB;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB,CASA"}

package/dist/site/connected-repos.js

@@ -0,0 +1,109 @@
+import { readBody, sendJson } from "../api/http.js";
+import { GitHubOAuthError } from "../auth/github.js";
+import { lookupRepo } from "./github-repos.js";
+import { tenantFor } from "./tenant.js";
+const ORG = "([A-Za-z0-9_.-]+)";
+const REPO = "([A-Za-z0-9_.-]+)";
+const listRoute = new RegExp(`^/api/orgs/${ORG}/repos$`);
+const itemRoute = new RegExp(`^/api/orgs/${ORG}/repos/${REPO}/${REPO}$`);
+export function createConnectedRepoRoutes(options) {
+    const { config, users, repos } = options;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    return {
+        async handle(request, url, response, user) {
+            const list = listRoute.exec(url.pathname);
+            const item = itemRoute.exec(url.pathname);
+            const orgLogin = list?.[1] ?? item?.[1];
+            if (!orgLogin)
+                return false;
+            const tenant = await tenantFor(users, user, orgLogin);
+            if (!tenant) {
+                sendJson(response, 404, { error: "unknown organization" });
+                return true;
+            }
+            if (list && request.method === "GET") {
+                sendJson(response, 200, { repos: (await repos.list(tenant.id)).map(publicRepo) });
+                return true;
+            }
+            if (list && request.method === "POST") {
+                const body = JSON.parse((await readBody(request, 64 * 1024)).toString("utf8") || "{}");
+                const fullName = typeof body.fullName === "string" ? body.fullName.trim() : "";
+                if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(fullName)) {
+                    sendJson(response, 400, { error: "fullName must be owner/name" });
+                    return true;
+                }
+                const token = await users.gitHubToken(user.githubId);
+                if (!token)
+                    throw new GitHubOAuthError("no GitHub token stored for this user", 401);
+                const found = await lookupRepo(config, token, fullName, fetchImpl);
+                if (!found) {
+                    sendJson(response, 404, { error: "repository not found or not readable" });
+                    return true;
+                }
+                // An org may connect anything public, but only its own private repositories.
+                const owner = found.fullName.split("/")[0] ?? "";
+                if (tenant.kind === "org" &&
+                    found.private &&
+                    owner.toLowerCase() !== tenant.login.toLowerCase()) {
+                    sendJson(response, 400, {
+                        error: `private repository is not owned by ${tenant.login}`,
+                    });
+                    return true;
+                }
+                const existing = await repos.find(tenant.id, found.fullName);
+                const repo = existing ??
+                    (await repos.connect({
+                        orgId: tenant.id,
+                        githubId: found.githubId,
+                        fullName: found.fullName,
+                        defaultBranch: found.defaultBranch,
+                        private: found.private,
+                        connectedBy: user.id,
+                    }));
+                sendJson(response, existing ? 200 : 201, { repo: publicRepo(repo) });
+                return true;
+            }
+            if (item?.[2] && item[3] && request.method === "GET") {
+                const repo = await repos.find(tenant.id, `${item[2]}/${item[3]}`);
+                if (!repo) {
+                    sendJson(response, 404, { error: "not connected" });
+                    return true;
+                }
+                sendJson(response, 200, { repo: publicRepo(repo) });
+                return true;
+            }
+            if (item?.[2] && item[3] && request.method === "PATCH") {
+                const body = JSON.parse((await readBody(request, 64 * 1024)).toString("utf8") || "{}");
+                if (typeof body.continuous !== "boolean") {
+                    sendJson(response, 400, { error: "continuous must be a boolean" });
+                    return true;
+                }
+                const repo = await repos.setContinuous(tenant.id, `${item[2]}/${item[3]}`, body.continuous);
+                if (!repo) {
+                    sendJson(response, 404, { error: "not connected" });
+                    return true;
+                }
+                sendJson(response, 200, { repo: publicRepo(repo) });
+                return true;
+            }
+            if (item?.[2] && item[3] && request.method === "DELETE") {
+                const removed = await repos.disconnect(tenant.id, `${item[2]}/${item[3]}`);
+                sendJson(response, removed ? 200 : 404, removed ? { ok: true } : { error: "not connected" });
+                return true;
+            }
+            return false;
+        },
+    };
+}
+/** The browser-facing shape of a connected repo. */
+export function publicRepo(repo) {
+    return {
+        fullName: repo.fullName,
+        defaultBranch: repo.defaultBranch,
+        private: repo.private,
+        continuous: repo.continuous,
+        connectedBy: repo.connectedBy.login,
+        connectedAt: repo.connectedAt,
+    };
+}
+//# sourceMappingURL=connected-repos.js.map

package/dist/site/connected-repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected-repos.js","sourceRoot":"","sources":["../../src/site/connected-repos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAChC,MAAM,IAAI,GAAG,mBAAmB,CAAC;AACjC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;AACzD,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,cAAc,GAAG,UAAU,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;AAmBzE,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI;YACvC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAClF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAEpF,CAAC;gBACF,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;oBAClE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBACpF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,6EAA6E;gBAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,IACE,MAAM,CAAC,IAAI,KAAK,KAAK;oBACrB,KAAK,CAAC,OAAO;oBACb,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAClD,CAAC;oBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACtB,KAAK,EAAE,sCAAsC,MAAM,CAAC,KAAK,EAAE;qBAC5D,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7D,MAAM,IAAI,GACR,QAAQ;oBACR,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC;wBACnB,KAAK,EAAE,MAAM,CAAC,EAAE;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,WAAW,EAAE,IAAI,CAAC,EAAE;qBACrB,CAAC,CAAC,CAAC;gBACN,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;oBACpD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAEpF,CAAC;gBACF,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5F,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;oBACpD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3E,QAAQ,CACN,QAAQ,EACR,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACnB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CACpD,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,IAAmB;IAQ5C,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC"}

package/dist/site/evaluation-start.d.ts

@@ -0,0 +1,4 @@
+import type { Client } from "@temporalio/client";
+import type { EvaluationInput } from "../evaluation/types.js";
+export declare function evaluationStarter(client: Client, fallbackQueue: string, env?: NodeJS.ProcessEnv): (input: EvaluationInput) => Promise<void>;
+//# sourceMappingURL=evaluation-start.d.ts.map

package/dist/site/evaluation-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation-start.d.ts","sourceRoot":"","sources":["../../src/site/evaluation-start.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,IAEtB,OAAO,eAAe,KAAG,OAAO,CAAC,IAAI,CAAC,CAarD"}

package/dist/site/evaluation-start.js

@@ -0,0 +1,19 @@
+import { WorkflowExecutionAlreadyStartedError, WorkflowIdReusePolicy } from "@temporalio/common";
+export function evaluationStarter(client, fallbackQueue, env = process.env) {
+    return async (input) => {
+        try {
+            await client.workflow.start("selfBenchEvaluationWorkflow", {
+                workflowId: `evaluation/${input.repoId}/${input.id}`,
+                taskQueue: env.SELFBENCH_EVAL_TASK_QUEUE ?? fallbackQueue,
+                args: [input],
+                workflowExecutionTimeout: "73 hours",
+                workflowIdReusePolicy: WorkflowIdReusePolicy.REJECT_DUPLICATE,
+            });
+        }
+        catch (error) {
+            if (!(error instanceof WorkflowExecutionAlreadyStartedError))
+                throw error;
+        }
+    };
+}
+//# sourceMappingURL=evaluation-start.js.map

package/dist/site/evaluation-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation-start.js","sourceRoot":"","sources":["../../src/site/evaluation-start.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oCAAoC,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGjG,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,aAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,KAAK,EAAE,KAAsB,EAAiB,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBACzD,UAAU,EAAE,cAAc,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,EAAE;gBACpD,SAAS,EAAE,GAAG,CAAC,yBAAyB,IAAI,aAAa;gBACzD,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,wBAAwB,EAAE,UAAU;gBACpC,qBAAqB,EAAE,qBAAqB,CAAC,gBAAgB;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,oCAAoC,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/site/generation-config.d.ts

@@ -0,0 +1,4 @@
+import type { GenerationSettings } from "./generation-settings.js";
+/** Generation agents and Harbor verification have independent provider contracts. */
+export declare function generationConfigEnvironment(settings: GenerationSettings, base: NodeJS.ProcessEnv, image?: string | undefined): NodeJS.ProcessEnv;
+//# sourceMappingURL=generation-config.d.ts.map

package/dist/site/generation-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-config.d.ts","sourceRoot":"","sources":["../../src/site/generation-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAQnE,qFAAqF;AACrF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,KAAK,qBAAwB,GAC5B,MAAM,CAAC,UAAU,CAQnB"}

package/dist/site/generation-config.js

@@ -0,0 +1,16 @@
+import { matchingHarborEnvironment } from "../providers.js";
+const imageVariables = {
+    modal: "SELFBENCH_MODAL_IMAGE",
+    vercel: "SELFBENCH_VERCEL_IMAGE",
+    e2b: "SELFBENCH_E2B_TEMPLATE",
+};
+/** Generation agents and Harbor verification have independent provider contracts. */
+export function generationConfigEnvironment(settings, base, image = settings.sandboxImage) {
+    return {
+        ...base,
+        SELFBENCH_EXECUTION_BACKEND: settings.sandbox,
+        SELFBENCH_HARBOR_ENVIRONMENT: settings.harborEnvironment ?? matchingHarborEnvironment(settings.sandbox),
+        ...(image ? { [imageVariables[settings.sandbox]]: image } : {}),
+    };
+}
+//# sourceMappingURL=generation-config.js.map

package/dist/site/generation-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-config.js","sourceRoot":"","sources":["../../src/site/generation-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAG5D,MAAM,cAAc,GAAG;IACrB,KAAK,EAAE,uBAAuB;IAC9B,MAAM,EAAE,wBAAwB;IAChC,GAAG,EAAE,wBAAwB;CACrB,CAAC;AAEX,qFAAqF;AACrF,MAAM,UAAU,2BAA2B,CACzC,QAA4B,EAC5B,IAAuB,EACvB,KAAK,GAAG,QAAQ,CAAC,YAAY;IAE7B,OAAO;QACL,GAAG,IAAI;QACP,2BAA2B,EAAE,QAAQ,CAAC,OAAO;QAC7C,4BAA4B,EAC1B,QAAQ,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/site/generation-credentials.d.ts

@@ -0,0 +1,6 @@
+import type { EncryptedRecordStore } from "../evaluation/encrypted-records.js";
+import type { GenerationReference, GenerationSettings } from "./generation-settings.js";
+export declare function generationRecordPath(runId: string): string;
+export declare function checkGenerationCredentials(records: EncryptedRecordStore, ownerId: number, settings: GenerationSettings): Promise<import("../evaluation/account.js").CredentialInfo>;
+export declare function generationEnvironment(records: EncryptedRecordStore, runId: string, reference: GenerationReference, base: NodeJS.ProcessEnv): Promise<NodeJS.ProcessEnv>;
+//# sourceMappingURL=generation-credentials.d.ts.map

package/dist/site/generation-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-credentials.d.ts","sourceRoot":"","sources":["../../src/site/generation-credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAS/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA4BxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,UAGjD;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,8DAc7B;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,MAAM,CAAC,UAAU,8BA6DxB"}