Reproduce

reprotrail reproduce creates a fresh workspace from a v1 product provenance sidecar. It validates the product checksum, restores the recorded project_repo Git checkout, copies provenance artifacts, restores the Pixi lockfile, and rewrites recorded editable dependency paths into repos/<name> when editable-local provenance is present. Legacy records without project_repo fall back to the first software_repos entry as the project checkout.

For each recorded Git repository, the commit hash selects the source state; the recorded branch is not required to exist on the remote. Reprotrail clones without checking out a remote branch and fetches the exact commit when the clone does not already contain it. When a branch name was recorded, reproduction creates that branch locally at the recorded commit without an upstream. Records without a usable branch name are checked out with a detached HEAD.

Reproduction invokes the external pixi executable and may contact recorded Git remotes and package channels. Preparing a workspace does not execute the recorded command unless --execute is supplied. Inspect the restored sources, input mappings, warnings, and REPRODUCTION.md before executing provenance from an untrusted source.

An exact hash identifies a commit but does not archive it. Reproduction cannot restore a commit after the repository source has garbage-collected it or refuses to serve it. Legacy or incomplete records without a commit fall back to their recorded branch, or to the source’s default branch, and add a warning to the reproduction report. This warning causes --strict reproduction to fail.

reprotrail reproduce arguments

reprotrail reproduce \
  --provenance results/product/product.prov.json \
  --workspace /tmp/product-reproduction \
  --env dev

Use --execute to run the recorded command through Pixi after setup. Use --repo-source NAME=PATH_OR_URL when a recorded repository has no cloneable remote URL.

Syntax	Status	Behavior
--provenance PATH	Required	Reads the product provenance record at PATH.
--workspace PATH	Required	Creates the reproduction workspace at PATH.
--execute	Optional	Runs the recorded command after restoring the workspace and installing the locked Pixi environment. Without it, reprotrail prepares and validates the workspace but does not run the command.
--strict	Optional	Treats every reproduction warning as a failure.
--env ENV	Optional	Uses Pixi environment ENV instead of the environment recorded in provenance.
--project-repo NAME	Optional	Selects recorded repository NAME as the project checkout. This is useful for legacy or ambiguous provenance.
--repo-source NAME=SOURCE	Optional; repeatable	Uses local path or URL SOURCE for recorded repository NAME; repeat it for multiple repositories.
--input-map RECORDED=LOCAL	Optional; repeatable	Replaces exact recorded input path RECORDED with LOCAL in the reconstructed command and validation; repeat it for multiple inputs.
--resume	Optional	Reuses an existing workspace and continues restoration instead of rejecting it.
--force	Optional	Removes an existing workspace and recreates it from scratch. This takes precedence over resuming it.
--json	Optional	Prints the reproduction report as JSON instead of a human-readable summary.