self-bench 0.3.6 → 0.3.8

package/dist/site/generation-credentials.js

@@ -0,0 +1,101 @@
+import { isDeepStrictEqual } from "node:util";
+import { readAccount, secretPath } from "../evaluation/account.js";
+import { orgRecords } from "../evaluation/org-records.js";
+import { HARBOR_E2B_API_KEY, HARBOR_VERCEL_CREDENTIALS } from "../harbor-environment.js";
+import { executionBackendLabels, harborEnvironmentLabels, } from "../providers.js";
+import { generationSubscriptionAuth } from "./generation-subscription.js";
+const credentialLabels = { ...harborEnvironmentLabels, ...executionBackendLabels };
+const VERCEL_SANDBOX_CREDENTIALS = {
+    VERCEL_TOKEN: "VERCEL_TOKEN",
+    VERCEL_TEAM_ID: "VERCEL_TEAM_ID",
+    VERCEL_PROJECT_ID: "VERCEL_PROJECT_ID",
+};
+/** The generation sandbox credential plus, for hosted-only backends, the separate Harbor credential. */
+function sandboxCredentials(settings) {
+    const credentials = [
+        { role: "sandbox", id: settings.sandboxCredentialId, kind: settings.sandbox },
+    ];
+    if ((settings.sandbox === "e2b" || settings.sandbox === "vercel") && settings.harborEnvironment)
+        credentials.push({
+            role: "harbor",
+            id: settings.harborCredentialId,
+            kind: settings.harborEnvironment,
+        });
+    return credentials;
+}
+export function generationRecordPath(runId) {
+    if (!/^[a-z0-9][a-z0-9-]{2,62}$/.test(runId))
+        throw new Error("Invalid generation run ID");
+    return `generations/${runId}`;
+}
+export async function checkGenerationCredentials(records, ownerId, settings) {
+    const account = await readAccount(records, ownerId);
+    const model = account.credentials.find((item) => item.id === settings.modelCredentialId && !item.deleted);
+    if (model?.kind !== "openai" || !["api-key", "codex-login"].includes(model.auth))
+        throw new Error("Choose an OpenAI credential from your credentials.");
+    for (const { id, kind } of sandboxCredentials(settings)) {
+        const sandbox = account.credentials.find((item) => item.id === id && !item.deleted);
+        if (sandbox?.kind !== kind || sandbox.auth !== "api-key")
+            throw new Error(`Choose a ${credentialLabels[kind]} credential from your account.`);
+    }
+    return model;
+}
+export async function generationEnvironment(records, runId, reference, base) {
+    const saved = await records.read(generationRecordPath(runId));
+    if (!saved || !isDeepStrictEqual(saved.value, reference))
+        throw new Error("Generation does not match its saved configuration.");
+    records = orgRecords(records, reference.orgId);
+    const credential = await checkGenerationCredentials(records, reference.ownerId, reference.settings);
+    const model = await records.read(secretPath(reference.ownerId, reference.settings.modelCredentialId));
+    if (!model?.value.value)
+        throw new Error("Model credential is unavailable.");
+    const env = { ...base };
+    delete env.OPENAI_API_KEY;
+    delete env.SELFBENCH_PI_AUTH_JSON;
+    if (credential.auth === "codex-login")
+        env.SELFBENCH_PI_AUTH_JSON = generationSubscriptionAuth(model.value.value);
+    else
+        env.OPENAI_API_KEY = model.value.value;
+    for (const key of [
+        "MODAL_TOKEN_ID",
+        "MODAL_TOKEN_SECRET",
+        "E2B_API_KEY",
+        "E2B_DOMAIN",
+        "VERCEL_TOKEN",
+        "VERCEL_TEAM_ID",
+        "VERCEL_PROJECT_ID",
+        "VERCEL_OIDC_TOKEN",
+        "DAYTONA_API_KEY",
+        HARBOR_E2B_API_KEY,
+        ...Object.values(HARBOR_VERCEL_CREDENTIALS),
+    ])
+        delete env[key];
+    for (const { role, id, kind } of sandboxCredentials(reference.settings)) {
+        const sandbox = await records.read(secretPath(reference.ownerId, id ?? ""));
+        const secret = sandbox?.value;
+        if (!secret?.value)
+            throw new Error(`${credentialLabels[kind]} credential is unavailable.`);
+        if (kind === "modal") {
+            if (!secret.tokenId)
+                throw new Error("Modal credential is unavailable.");
+            env.MODAL_TOKEN_ID = secret.tokenId;
+            env.MODAL_TOKEN_SECRET = secret.value;
+        }
+        else if (kind === "e2b") {
+            env[role === "harbor" ? HARBOR_E2B_API_KEY : "E2B_API_KEY"] = secret.value;
+        }
+        else if (kind === "daytona") {
+            env.DAYTONA_API_KEY = secret.value;
+        }
+        else {
+            if (!secret.teamId || !secret.projectId)
+                throw new Error("Vercel credential is unavailable.");
+            const names = role === "harbor" ? HARBOR_VERCEL_CREDENTIALS : VERCEL_SANDBOX_CREDENTIALS;
+            env[names.VERCEL_TOKEN] = secret.value;
+            env[names.VERCEL_TEAM_ID] = secret.teamId;
+            env[names.VERCEL_PROJECT_ID] = secret.projectId;
+        }
+    }
+    return env;
+}
+//# sourceMappingURL=generation-credentials.js.map

package/dist/site/generation-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-credentials.js","sourceRoot":"","sources":["../../src/site/generation-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EACL,sBAAsB,EAGtB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAM1E,MAAM,gBAAgB,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,sBAAsB,EAAE,CAAC;AACnF,MAAM,0BAA0B,GAAG;IACjC,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,iBAAiB,EAAE,mBAAmB;CAC9B,CAAC;AAEX,wGAAwG;AACxG,SAAS,kBAAkB,CAAC,QAA4B;IACtD,MAAM,WAAW,GAAyB;QACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,CAAC,mBAAmB,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE;KAC9E,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,QAAQ,CAAC,iBAAiB;QAC7F,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,QAAQ,CAAC,kBAAkB;YAC/B,IAAI,EAAE,QAAQ,CAAC,iBAAiB;SACjC,CAAC,CAAC;IACL,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3F,OAAO,eAAe,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA6B,EAC7B,OAAe,EACf,QAA4B;IAE5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,OAAO,CAClE,CAAC;IACF,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YACtD,MAAM,IAAI,KAAK,CAAC,YAAY,gBAAgB,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA6B,EAC7B,KAAa,EACb,SAA8B,EAC9B,IAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAsB,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,0BAA0B,CACjD,OAAO,EACP,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,QAAQ,CACnB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAC9B,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACpE,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,OAAO,GAAG,CAAC,cAAc,CAAC;IAC1B,OAAO,GAAG,CAAC,sBAAsB,CAAC;IAClC,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa;QACnC,GAAG,CAAC,sBAAsB,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;QACxE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI;QAChB,gBAAgB;QAChB,oBAAoB;QACpB,aAAa;QACb,YAAY;QACZ,cAAc;QACd,gBAAgB;QAChB,mBAAmB;QACnB,mBAAmB;QACnB,iBAAiB;QACjB,kBAAkB;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;KAC5C;QACC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAK/B,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,EAAE,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC5F,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACzE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAC7E,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC;YACzF,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/site/generation-run.d.ts

@@ -0,0 +1,6 @@
+import { type SelfBenchConfig } from "../config.js";
+import type { RunRequest } from "../contracts.js";
+import type { GenerationReference } from "./generation-settings.js";
+/** Shared configuration for single-PR and discovered batch candidates. */
+export declare function configureGenerationRun(run: RunRequest, generation: GenerationReference, config: SelfBenchConfig): void;
+//# sourceMappingURL=generation-run.d.ts.map

package/dist/site/generation-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-run.d.ts","sourceRoot":"","sources":["../../src/site/generation-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,0EAA0E;AAC1E,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,eAAe,QAuBxB"}

package/dist/site/generation-run.js

@@ -0,0 +1,22 @@
+import { loadConfig } from "../config.js";
+import { generationConfigEnvironment } from "./generation-config.js";
+/** Shared configuration for single-PR and discovered batch candidates. */
+export function configureGenerationRun(run, generation, config) {
+    run.generation = generation;
+    run.authoring = {
+        provider: "openai",
+        model: generation.settings.authorModel,
+        reasoningEffort: generation.settings.reasoning,
+    };
+    const settings = generation.settings;
+    const selected = loadConfig(generationConfigEnvironment(settings, process.env, settings.sandboxImage ??
+        (settings.sandbox === config.execution.kind ? config.execution.image : undefined)));
+    run.version.executionBackend = selected.execution.kind;
+    run.version.harborEnvironment = selected.harborEnvironment;
+    run.version.sandboxImage = selected.execution.image;
+    if ("timeoutCapMs" in selected.execution)
+        run.version.sandboxTimeoutCapMs = selected.execution.timeoutCapMs;
+    else
+        delete run.version.sandboxTimeoutCapMs;
+}
+//# sourceMappingURL=generation-run.js.map

package/dist/site/generation-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-run.js","sourceRoot":"","sources":["../../src/site/generation-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAwB,MAAM,cAAc,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAGrE,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CACpC,GAAe,EACf,UAA+B,EAC/B,MAAuB;IAEvB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAC5B,GAAG,CAAC,SAAS,GAAG;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW;QACtC,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS;KAC/C,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,CACzB,2BAA2B,CACzB,QAAQ,EACR,OAAO,CAAC,GAAG,EACX,QAAQ,CAAC,YAAY;QACnB,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CACpF,CACF,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,gBAAgB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;IACvD,GAAG,CAAC,OAAO,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IAC3D,GAAG,CAAC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;IACpD,IAAI,cAAc,IAAI,QAAQ,CAAC,SAAS;QACtC,GAAG,CAAC,OAAO,CAAC,mBAAmB,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC;;QAC/D,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC;AAC9C,CAAC"}

package/dist/site/generation-settings.d.ts

@@ -0,0 +1,80 @@
+import { z } from "zod";
+export declare const generationModels: readonly ["gpt-5.6-sol", "gpt-6-astra", "gpt-5.6-terra", "gpt-5.6-luna"];
+export declare const generationSandboxes: readonly ["modal", "vercel", "e2b"];
+export declare function generationSandboxLabel(sandbox: string): "Docker" | "Modal" | "Vercel" | "E2B";
+export declare const generationSettingsSchema: z.ZodObject<{
+    authorModel: z.ZodEnum<{
+        "gpt-5.6-sol": "gpt-5.6-sol";
+        "gpt-6-astra": "gpt-6-astra";
+        "gpt-5.6-terra": "gpt-5.6-terra";
+        "gpt-5.6-luna": "gpt-5.6-luna";
+    }>;
+    verifierModel: z.ZodEnum<{
+        "gpt-5.6-sol": "gpt-5.6-sol";
+        "gpt-6-astra": "gpt-6-astra";
+        "gpt-5.6-terra": "gpt-5.6-terra";
+        "gpt-5.6-luna": "gpt-5.6-luna";
+    }>;
+    reasoning: z.ZodEnum<{
+        medium: "medium";
+        low: "low";
+        high: "high";
+    }>;
+    sandbox: z.ZodEnum<{
+        modal: "modal";
+        vercel: "vercel";
+        e2b: "e2b";
+    }>;
+    modelCredentialId: z.ZodUUID;
+    sandboxCredentialId: z.ZodOptional<z.ZodUUID>;
+    sandboxImage: z.ZodOptional<z.ZodString>;
+    harborEnvironment: z.ZodOptional<z.ZodEnum<{
+        modal: "modal";
+        vercel: "vercel";
+        e2b: "e2b";
+        daytona: "daytona";
+    }>>;
+    harborCredentialId: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strict>;
+export type GenerationSettings = z.infer<typeof generationSettingsSchema>;
+export declare const generationReferenceSchema: z.ZodObject<{
+    ownerId: z.ZodNumber;
+    orgId: z.ZodOptional<z.ZodNumber>;
+    repoId: z.ZodNumber;
+    settings: z.ZodObject<{
+        authorModel: z.ZodEnum<{
+            "gpt-5.6-sol": "gpt-5.6-sol";
+            "gpt-6-astra": "gpt-6-astra";
+            "gpt-5.6-terra": "gpt-5.6-terra";
+            "gpt-5.6-luna": "gpt-5.6-luna";
+        }>;
+        verifierModel: z.ZodEnum<{
+            "gpt-5.6-sol": "gpt-5.6-sol";
+            "gpt-6-astra": "gpt-6-astra";
+            "gpt-5.6-terra": "gpt-5.6-terra";
+            "gpt-5.6-luna": "gpt-5.6-luna";
+        }>;
+        reasoning: z.ZodEnum<{
+            medium: "medium";
+            low: "low";
+            high: "high";
+        }>;
+        sandbox: z.ZodEnum<{
+            modal: "modal";
+            vercel: "vercel";
+            e2b: "e2b";
+        }>;
+        modelCredentialId: z.ZodUUID;
+        sandboxCredentialId: z.ZodOptional<z.ZodUUID>;
+        sandboxImage: z.ZodOptional<z.ZodString>;
+        harborEnvironment: z.ZodOptional<z.ZodEnum<{
+            modal: "modal";
+            vercel: "vercel";
+            e2b: "e2b";
+            daytona: "daytona";
+        }>>;
+        harborCredentialId: z.ZodOptional<z.ZodUUID>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type GenerationReference = z.infer<typeof generationReferenceSchema>;
+//# sourceMappingURL=generation-settings.d.ts.map

package/dist/site/generation-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-settings.d.ts","sourceRoot":"","sources":["../../src/site/generation-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,gBAAgB,0EAKnB,CAAC;AACX,eAAO,MAAM,mBAAmB,qCAA4B,CAAC;AAC7D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,yCAErD;AACD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DjC,CAAC;AACL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAO3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/site/generation-settings.js

@@ -0,0 +1,84 @@
+import { z } from "zod";
+import { isDigestPinnedOciImage } from "../config.js";
+import { executionBackendLabels, HOSTED_EXECUTION_BACKENDS, HOSTED_HARBOR_ENVIRONMENTS, harborEnvironmentLabels, } from "../providers.js";
+import { normalizeE2BTemplateReference } from "../setup/e2b/template.js";
+export const generationModels = [
+    "gpt-5.6-sol",
+    "gpt-6-astra",
+    "gpt-5.6-terra",
+    "gpt-5.6-luna",
+];
+export const generationSandboxes = HOSTED_EXECUTION_BACKENDS;
+export function generationSandboxLabel(sandbox) {
+    return executionBackendLabels[sandbox] ?? sandbox;
+}
+export const generationSettingsSchema = z
+    .object({
+    authorModel: z.enum(generationModels),
+    verifierModel: z.enum(generationModels),
+    reasoning: z.enum(["low", "medium", "high"]),
+    sandbox: z.enum(HOSTED_EXECUTION_BACKENDS),
+    modelCredentialId: z.uuid(),
+    sandboxCredentialId: z.uuid().optional(),
+    sandboxImage: z.string().trim().min(1).max(512).optional(),
+    harborEnvironment: z.enum(HOSTED_HARBOR_ENVIRONMENTS).optional(),
+    harborCredentialId: z.uuid().optional(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (!value.sandboxCredentialId)
+        context.addIssue({
+            code: "custom",
+            path: ["sandboxCredentialId"],
+            message: `Choose a ${executionBackendLabels[value.sandbox]} credential.`,
+        });
+    const hosted = value.sandbox === "e2b" || value.sandbox === "vercel";
+    if (!hosted) {
+        if (value.harborEnvironment || value.harborCredentialId || value.sandboxImage)
+            context.addIssue({
+                code: "custom",
+                message: "Separate verification and runtime settings are only supported for E2B and Vercel generation.",
+            });
+        return;
+    }
+    if (!value.harborEnvironment)
+        context.addIssue({
+            code: "custom",
+            path: ["harborEnvironment"],
+            message: "Choose a Harbor verification environment.",
+        });
+    else if (!value.harborCredentialId)
+        context.addIssue({
+            code: "custom",
+            path: ["harborCredentialId"],
+            message: `Choose a ${harborEnvironmentLabels[value.harborEnvironment]} credential for Harbor verification.`,
+        });
+    if (value.sandbox === "vercel" && !isDigestPinnedOciImage(value.sandboxImage ?? ""))
+        context.addIssue({
+            code: "custom",
+            path: ["sandboxImage"],
+            message: "Vercel requires a runtime image pinned by sha256 digest.",
+        });
+    if (value.sandbox === "e2b") {
+        try {
+            if (normalizeE2BTemplateReference(value.sandboxImage ?? "").split(":")[0] === "base")
+                throw new Error();
+        }
+        catch {
+            context.addIssue({
+                code: "custom",
+                path: ["sandboxImage"],
+                message: "E2B requires a prebuilt SelfBench template, not base.",
+            });
+        }
+    }
+});
+export const generationReferenceSchema = z
+    .object({
+    ownerId: z.number().int().positive(),
+    orgId: z.number().int().positive().optional(),
+    repoId: z.number().int().positive(),
+    settings: generationSettingsSchema,
+})
+    .strict();
+//# sourceMappingURL=generation-settings.js.map

package/dist/site/generation-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-settings.js","sourceRoot":"","sources":["../../src/site/generation-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,aAAa;IACb,eAAe;IACf,cAAc;CACN,CAAC;AACX,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAC7D,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,sBAAsB,CAAC,OAA8C,CAAC,IAAI,OAAO,CAAC;AAC3F,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,CAAC,IAAI,EAAE;IAC3B,mBAAmB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1D,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IAChE,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,CAAC,KAAK,CAAC,mBAAmB;QAC5B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EAAE,YAAY,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc;SACzE,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;IACrE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY;YAC3E,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,8FAA8F;aACjG,CAAC,CAAC;QACL,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAC1B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,mBAAmB,CAAC;YAC3B,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;SACA,IAAI,CAAC,KAAK,CAAC,kBAAkB;QAChC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,oBAAoB,CAAC;YAC5B,OAAO,EAAE,YAAY,uBAAuB,CAAC,KAAK,CAAC,iBAAiB,CAAC,sCAAsC;SAC5G,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QACjF,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,6BAA6B,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;gBAClF,MAAM,IAAI,KAAK,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EAAE,uDAAuD;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,wBAAwB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/site/generation-subscription.d.ts

@@ -0,0 +1,3 @@
+/** Adapt the saved Codex login to the OAuth format consumed by Pi in generation sandboxes. */
+export declare function generationSubscriptionAuth(raw: string): string;
+//# sourceMappingURL=generation-subscription.d.ts.map

package/dist/site/generation-subscription.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-subscription.d.ts","sourceRoot":"","sources":["../../src/site/generation-subscription.ts"],"names":[],"mappings":"AAcA,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqB9D"}

package/dist/site/generation-subscription.js

@@ -0,0 +1,38 @@
+import { z } from "zod";
+const authSchema = z.object({
+    tokens: z.object({
+        access_token: z.string().min(1),
+        refresh_token: z.string().min(1),
+        account_id: z.string().min(1).optional(),
+    }),
+});
+const claimsSchema = z.object({
+    exp: z.number().positive(),
+    "https://api.openai.com/auth": z.object({ chatgpt_account_id: z.string().min(1) }).optional(),
+});
+/** Adapt the saved Codex login to the OAuth format consumed by Pi in generation sandboxes. */
+export function generationSubscriptionAuth(raw) {
+    try {
+        const { tokens } = authSchema.parse(JSON.parse(raw));
+        const payload = tokens.access_token.split(".")[1];
+        if (!payload)
+            throw new Error();
+        const claims = claimsSchema.parse(JSON.parse(Buffer.from(payload, "base64url").toString()));
+        const accountId = tokens.account_id ?? claims["https://api.openai.com/auth"]?.chatgpt_account_id;
+        if (!accountId)
+            throw new Error();
+        return JSON.stringify({
+            "openai-codex": {
+                type: "oauth",
+                access: tokens.access_token,
+                refresh: tokens.refresh_token,
+                expires: claims.exp * 1000,
+                accountId,
+            },
+        });
+    }
+    catch {
+        throw new Error("ChatGPT sign-in is invalid. Reconnect it in Credentials.");
+    }
+}
+//# sourceMappingURL=generation-subscription.js.map

package/dist/site/generation-subscription.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-subscription.js","sourceRoot":"","sources":["../../src/site/generation-subscription.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;CACH,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,6BAA6B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9F,CAAC,CAAC;AAEH,8FAA8F;AAC9F,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5F,MAAM,SAAS,GACb,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,6BAA6B,CAAC,EAAE,kBAAkB,CAAC;QACjF,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,cAAc,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,OAAO,EAAE,MAAM,CAAC,aAAa;gBAC7B,OAAO,EAAE,MAAM,CAAC,GAAG,GAAG,IAAI;gBAC1B,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/site/github-repos.d.ts

@@ -0,0 +1,35 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { AuthConfig } from "../auth/config.js";
+import type { User, UserStore } from "../auth/users.js";
+/** One row in the picker; everything comes straight from GitHub's repository object. */
+export interface RepoSummary {
+    readonly githubId: number;
+    readonly fullName: string;
+    readonly name: string;
+    readonly private: boolean;
+    readonly archived: boolean;
+    readonly defaultBranch: string;
+    readonly language?: string;
+    readonly description?: string;
+    readonly pushedAt?: string;
+}
+/** What the picker shows once a repo is chosen: the repo itself plus the eligibility signal. */
+export interface RepoDetail {
+    readonly repo: RepoSummary;
+    readonly mergedPullRequests: number;
+    readonly since: string;
+}
+export interface GitHubRepoRoutesOptions {
+    readonly config: Pick<AuthConfig, "githubApiUrl">;
+    readonly users: UserStore;
+    readonly fetchImpl?: typeof fetch;
+    readonly now?: () => Date;
+}
+export interface GitHubRepoRoutes {
+    /** Answers the GitHub-backed repo listing and detail. True when the response has been sent. */
+    handle(request: IncomingMessage, url: URL, response: ServerResponse, user: User): Promise<boolean>;
+}
+export declare function createGitHubRepoRoutes(options: GitHubRepoRoutesOptions): GitHubRepoRoutes;
+/** One repository as the user's token sees it; undefined when GitHub answers 404. */
+export declare function lookupRepo(config: Pick<AuthConfig, "githubApiUrl">, token: string, fullName: string, fetchImpl: typeof fetch): Promise<RepoSummary | undefined>;
+//# sourceMappingURL=github-repos.d.ts.map

package/dist/site/github-repos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repos.d.ts","sourceRoot":"","sources":["../../src/site/github-repos.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGxD,wFAAwF;AACxF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,gGAAgG;AAChG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAOD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,+FAA+F;IAC/F,MAAM,CACJ,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAsEzF;AAED,qFAAqF;AACrF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,KAAK,GACtB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAQlC"}

package/dist/site/github-repos.js

@@ -0,0 +1,121 @@
+import { sendJson } from "../api/http.js";
+import { apiHeaders, GitHubOAuthError } from "../auth/github.js";
+import { tenantFor } from "./tenant.js";
+const PAGE_SIZE = 100;
+const MAX_PAGES = 3;
+const CACHE_TTL_MS = 5 * 60 * 1000;
+const REPO_NAME = /^[A-Za-z0-9_.-]+$/;
+export function createGitHubRepoRoutes(options) {
+    const { config, users } = options;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const now = options.now ?? (() => new Date());
+    const cache = new Map();
+    const listRepos = async (user, org) => {
+        const tenant = await tenantFor(users, user, org);
+        if (!tenant)
+            return undefined;
+        const key = `${user.id}:${tenant.login}`;
+        const cached = cache.get(key);
+        if (cached && now().getTime() - cached.at < CACHE_TTL_MS)
+            return cached.repos;
+        const token = await users.gitHubToken(user.githubId);
+        if (!token)
+            throw new GitHubOAuthError("no GitHub token stored for this user", 401);
+        const path = tenant.kind === "user"
+            ? "/user/repos?affiliation=owner,collaborator&sort=pushed"
+            : `/orgs/${encodeURIComponent(tenant.login)}/repos?type=all&sort=pushed`;
+        const repos = await fetchRepoPages(config, token, path, fetchImpl);
+        cache.set(key, { at: now().getTime(), repos });
+        return repos;
+    };
+    const repoDetail = async (user, fullName) => {
+        const token = await users.gitHubToken(user.githubId);
+        if (!token)
+            throw new GitHubOAuthError("no GitHub token stored for this user", 401);
+        const repo = await lookupRepo(config, token, fullName, fetchImpl);
+        if (!repo)
+            return undefined;
+        const since = new Date(now().getTime() - 365 * 24 * 60 * 60 * 1000).toISOString().slice(0, 10);
+        const query = `repo:${fullName} is:pr is:merged merged:>=${since}`;
+        const response = await fetchImpl(`${config.githubApiUrl}/search/issues?q=${encodeURIComponent(query)}&per_page=1`, { headers: apiHeaders(token) });
+        if (!response.ok)
+            throw new GitHubOAuthError(`GitHub search failed (${response.status})`, response.status);
+        const body = (await response.json());
+        return { repo, mergedPullRequests: body.total_count ?? 0, since };
+    };
+    return {
+        async handle(request, url, response, user) {
+            if (request.method !== "GET")
+                return false;
+            const listing = /^\/api\/orgs\/([^/]+)\/github-repos$/.exec(url.pathname);
+            if (listing?.[1]) {
+                const repos = await listRepos(user, listing[1]);
+                if (!repos) {
+                    sendJson(response, 404, { error: "unknown organization" });
+                    return true;
+                }
+                sendJson(response, 200, { repos });
+                return true;
+            }
+            const detail = /^\/api\/github-repos\/([^/]+)\/([^/]+)$/.exec(url.pathname);
+            if (detail?.[1] && detail[2]) {
+                if (!REPO_NAME.test(detail[1]) || !REPO_NAME.test(detail[2])) {
+                    sendJson(response, 400, { error: "invalid repository name" });
+                    return true;
+                }
+                const found = await repoDetail(user, `${detail[1]}/${detail[2]}`);
+                if (!found) {
+                    sendJson(response, 404, { error: "repository not found or not readable" });
+                    return true;
+                }
+                sendJson(response, 200, found);
+                return true;
+            }
+            return false;
+        },
+    };
+}
+/** One repository as the user's token sees it; undefined when GitHub answers 404. */
+export async function lookupRepo(config, token, fullName, fetchImpl) {
+    const response = await fetchImpl(`${config.githubApiUrl}/repos/${fullName}`, {
+        headers: apiHeaders(token),
+    });
+    if (response.status === 404)
+        return undefined;
+    if (!response.ok)
+        throw new GitHubOAuthError(`GitHub repo lookup failed (${response.status})`, response.status);
+    return summaryFrom((await response.json()));
+}
+function summaryFrom(row) {
+    if (typeof row.id !== "number" || !row.full_name || !row.name)
+        return undefined;
+    return {
+        githubId: row.id,
+        fullName: row.full_name,
+        name: row.name,
+        private: row.private === true,
+        archived: row.archived === true,
+        defaultBranch: row.default_branch ?? "main",
+        ...(row.language ? { language: row.language } : {}),
+        ...(row.description ? { description: row.description } : {}),
+        ...(row.pushed_at ? { pushedAt: row.pushed_at } : {}),
+    };
+}
+async function fetchRepoPages(config, token, path, fetchImpl) {
+    const repos = [];
+    for (let page = 1; page <= MAX_PAGES; page += 1) {
+        const response = await fetchImpl(`${config.githubApiUrl}${path}&per_page=${PAGE_SIZE}&page=${page}`, { headers: apiHeaders(token) });
+        if (!response.ok)
+            throw new GitHubOAuthError(`GitHub repos failed (${response.status})`, response.status);
+        const rows = (await response.json());
+        for (const row of rows) {
+            const summary = summaryFrom(row);
+            if (summary)
+                repos.push(summary);
+        }
+        if (rows.length < PAGE_SIZE)
+            break;
+    }
+    return repos;
+}
+//# sourceMappingURL=github-repos.js.map

package/dist/site/github-repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repos.js","sourceRoot":"","sources":["../../src/site/github-repos.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAsBxC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAmBtC,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;IAEtE,MAAM,SAAS,GAAG,KAAK,EAAE,IAAU,EAAE,GAAW,EAAsC,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,YAAY;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,MAAM;YACpB,CAAC,CAAC,wDAAwD;YAC1D,CAAC,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC;QAC7E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAU,EAAE,QAAgB,EAAmC,EAAE;QACzF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,QAAQ,QAAQ,6BAA6B,KAAK,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,MAAM,CAAC,YAAY,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,aAAa,EAChF,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAC/B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YACd,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3C,MAAM,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1E,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBAC3D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBAC9D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAwC,EACxC,KAAa,EACb,QAAgB,EAChB,SAAuB;IAEvB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,YAAY,UAAU,QAAQ,EAAE,EAAE;QAC3E,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,WAAW,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC,CAAC;AACzD,CAAC;AAcD,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAChF,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,EAAE;QAChB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;QAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;QAC/B,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,MAAM;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAwC,EACxC,KAAa,EACb,IAAY,EACZ,SAAuB;IAEvB,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,MAAM,CAAC,YAAY,GAAG,IAAI,aAAa,SAAS,SAAS,IAAI,EAAE,EAClE,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAC/B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YACd,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/site/pr-candidate.d.ts

@@ -0,0 +1,26 @@
+import type { Candidate, Difficulty } from "../contracts.js";
+import type { ProvenanceMessage } from "../provenance/types.js";
+/** Everything the pipeline needs about a PR, before the provenance artifact exists. */
+export interface PullRequestCandidate {
+    readonly candidate: Omit<Candidate, "provenance">;
+    readonly message: ProvenanceMessage;
+    readonly title: string;
+    readonly changedLines: number;
+    readonly changedFiles: number;
+}
+export declare class PullRequestError extends Error {
+    readonly status: 400 | 404 | 422;
+    constructor(message: string, status: 400 | 404 | 422);
+}
+/** Parses "123", "#123", or a github.com pull URL into a PR number for the given repository. */
+export declare function parsePullRequestRef(text: string, fullName: string): number | undefined;
+/**
+ * The same thresholds discovery applies: easy from 20 changed lines in one path, medium from 50
+ * across two, hard from 100 across three. A PR gets the highest tier it clears.
+ */
+export declare function difficultyFor(changedLines: number, changedFiles: number): Difficulty | undefined;
+/** Reads one merged PR with the user's token and shapes it as a pipeline candidate. */
+export declare function candidateFromPullRequest(config: {
+    readonly githubApiUrl: string;
+}, token: string, fullName: string, number: number, fetchImpl?: typeof fetch): Promise<PullRequestCandidate>;
+//# sourceMappingURL=pr-candidate.d.ts.map

package/dist/site/pr-candidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-candidate.d.ts","sourceRoot":"","sources":["../../src/site/pr-candidate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,uFAAuF;AACvF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG;gBADhC,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG;CAInC;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQtF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAKhG;AAED,uFAAuF;AACvF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACzC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA6D/B"}