Add Harbor eval environment for deterministic-forecast skill

- Add Dockerfile with uv + Python 3.13 + eccodes
- Add bootstrap.sh for pre_agent_setup with uv sync
- Add config.yml with Harbor execution policy

Author: NickGeneva

skills/earth2studio-deterministic-forecast/evals/config.yml

@@ -0,0 +1,36 @@
+# Harbor execution policy for earth2studio-deterministic-forecast live evals.
+#
+# Default (no --copy-repo): ACES stages the skill under /workspace/skills/ and
+# copies only repo files explicitly linked from SKILL.md outside the skill tree.
+# Agents typically deliver under /workspace/output/. Grading is trajectory +
+# LLM-as-judge (accuracy, behavior_check) — no live pytest against the repo.
+#
+# Optional --copy-repo: also copies the full git tree to /workspace/repo so
+# bootstrap can uv sync and agents can run pytest/make lint in a real checkout.
+# Use this when validating end-to-end dev workflow, not for routine pass/fail.
+#
+# Local run:
+#   nv-base agent-eval skills/earth2studio-deterministic-forecast \
+#     -a claude-code,codex -o ./eval-results/
+#
+# Validate before committing:
+#   astra-skill-eval validate ./skills/earth2studio-deterministic-forecast
+
+schema_version: 1
+
+harbor:
+  custom_dockerfile_mode: preserve
+  base_image_mode: disabled
+  n_attempts: 2
+  pass_threshold: 0.60
+  stop_on_pass: false
+  n_concurrent: 4
+  timeout_multiplier: 4.0
+  pre_agent_setup:
+    - /usr/local/bin/e2s-eval-bootstrap
+
+skill_workspace:
+  mode: isolated
+
+grading:
+  mode: aces_default

skills/earth2studio-deterministic-forecast/evals/environment/Dockerfile

@@ -0,0 +1,32 @@
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
+
+# Lightweight Earth2Studio dev sandbox for Harbor skill evals (Python 3.13 + uv).
+RUN apt-get -o Acquire::Retries=3 update && \
+    apt-get -o Acquire::Retries=3 install -y --no-install-recommends \
+    bash \
+    build-essential \
+    ca-certificates \
+    curl \
+    git \
+    jq \
+    make \
+    ripgrep
+
+# Install eccodes
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    libeccodes-tools \
+    libeccodes-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+ENV UV_LINK_MODE=copy
+ENV UV_PYTHON=3.13
+# NV-ACES default repo location
+ENV EARTH2STUDIO_ROOT=/workspace/repo
+
+RUN mkdir -p /workspace/skills /workspace/input /workspace/output \
+    /logs/verifier /logs/agent
+
+WORKDIR /workspace/repo
+
+COPY setup/bootstrap.sh /usr/local/bin/e2s-eval-bootstrap
+RUN chmod +x /usr/local/bin/e2s-eval-bootstrap

skills/earth2studio-deterministic-forecast/evals/environment/setup/bootstrap.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: Copyright (c) 2024-2026 NVIDIA CORPORATION & AFFILIATES.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Harbor pre_agent_setup / healthcheck: uv sync when a repo checkout is present.
+# Default ACES runs stage only the skill; pass --copy-repo to populate /workspace/repo.
+
+set -euo pipefail
+
+REPO_ROOT="${EARTH2STUDIO_ROOT:-/workspace/repo}"
+
+if [[ ! -f "${REPO_ROOT}/pyproject.toml" ]]; then
+    echo "e2s-eval-bootstrap: no repo at ${REPO_ROOT}; skipping uv sync (skill-only eval mode)" >&2
+    exit 0
+fi
+
+cd "${REPO_ROOT}"
+
+export UV_LINK_MODE=copy
+export UV_PYTHON=3.13
+
+uv venv --python 3.13
+uv sync --group dev --extra data
+uv run pre-commit install --install-hooks
+
+cat >/etc/profile.d/e2s-eval.sh <<EOF
+export EARTH2STUDIO_ROOT=${REPO_ROOT}
+export PATH="${REPO_ROOT}/.venv/bin:\${PATH}"
+cd ${REPO_ROOT}
+EOF
+
+echo "e2s-eval-bootstrap: ready at ${REPO_ROOT} ($(uv run python --version))"