@atheory-ai/ce-plugin-sandbox 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,27 @@
+# @atheory-ai/ce-plugin-sandbox
+
+Local validation and fixture analysis for Context Engine plugin WASM artifacts.
+The sandbox delegates loading and extraction to the `ce` binary, exercising the
+same runtime contract used by Context Engine.
+
+## Install
+
+```bash
+pnpm add -D @atheory-ai/ce-plugin-sandbox
+```
+
+## Commands
+
+```bash
+ce-sandbox validate dist/my-plugin.wasm
+ce-sandbox run dist/my-plugin.wasm tests/fixtures/example.php
+ce-sandbox coverage dist/my-plugin.wasm --fixtures tests/fixtures
+ce-sandbox diff dist/previous.wasm dist/current.wasm --fixtures tests/fixtures
+```
+
+Use `--ce /path/to/ce` to select a binary and `--json` for machine-readable
+output.
+
+## License
+
+Apache-2.0

package/dist/index.js

@@ -0,0 +1,574 @@
+#!/usr/bin/env node
+
+// src/runner/loader.ts
+import { spawnSync } from "child_process";
+import { writeFileSync, unlinkSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+var PluginLoader = class {
+  constructor(ceBinary = "ce") {
+    this.ceBinary = ceBinary;
+    this.validateBinary();
+  }
+  validateBinary() {
+    const result = spawnSync(this.ceBinary, ["version"], { stdio: "pipe" });
+    if (result.error || result.status !== 0) {
+      throw new Error(
+        `CE binary not found: ${this.ceBinary}
+Install it or specify path with --ce flag.`
+      );
+    }
+  }
+  validate(wasmPath) {
+    const result = spawnSync(this.ceBinary, ["plugin", "validate", wasmPath, "--json"], {
+      encoding: "utf8"
+    });
+    if (result.status !== 0) {
+      return { passed: false, errors: [result.stderr || "validation failed"], output: result.stdout };
+    }
+    try {
+      const parsed = JSON.parse(result.stdout);
+      return { passed: true, errors: [], output: result.stdout, ...parsed };
+    } catch {
+      return { passed: true, errors: [], output: result.stdout };
+    }
+  }
+  extract(wasmPath, fixturePath, content) {
+    const tmpInput = join(tmpdir(), `ce-sandbox-${Date.now()}.json`);
+    writeFileSync(tmpInput, JSON.stringify({ filePath: fixturePath, content }), "utf8");
+    const result = spawnSync(
+      this.ceBinary,
+      ["plugin", "extract", wasmPath, "--input", tmpInput, "--json"],
+      { encoding: "utf8" }
+    );
+    try {
+      unlinkSync(tmpInput);
+    } catch {
+    }
+    if (result.status !== 0) {
+      throw new Error(`Extraction failed: ${result.stderr}`);
+    }
+    return JSON.parse(result.stdout);
+  }
+};
+
+// src/output/render.ts
+import chalk from "chalk";
+function renderReport(report) {
+  console.log();
+  console.log(chalk.bold(`${report.pluginName} v${report.pluginVersion}`));
+  console.log(chalk.dim(`wasm: ${report.wasmHash.slice(0, 12)}...`));
+  console.log();
+  if (report.fixtureResults.length > 0) {
+    console.log(chalk.bold("Coverage"));
+    console.log();
+    for (const f of report.fixtureResults) {
+      const pct = f.coveragePct === -1 ? "N/A" : `${f.coveragePct.toFixed(0)}%`;
+      const color = f.coveragePct >= 80 ? chalk.green : f.coveragePct >= 50 ? chalk.yellow : chalk.red;
+      const bar = coverageBar(f.coveragePct);
+      console.log(`  ${f.fixturePath}`);
+      console.log(`  ${color(pct.padStart(4))}  ${bar}  ${f.extractedNodes} nodes, ${f.extractedEdges} edges`);
+      if (f.missingSymbols.length > 0 && f.missingSymbols.length <= 5) {
+        console.log(chalk.dim(`         missing: ${f.missingSymbols.join(", ")}`));
+      } else if (f.missingSymbols.length > 5) {
+        console.log(chalk.dim(
+          `         missing: ${f.missingSymbols.slice(0, 5).join(", ")} +${f.missingSymbols.length - 5} more`
+        ));
+      }
+      console.log();
+    }
+    const aggPct = report.aggregate.coveragePct;
+    const aggColor = aggPct >= 80 ? chalk.green : aggPct >= 50 ? chalk.yellow : chalk.red;
+    const aggStr = aggPct < 0 ? "N/A" : `${aggPct.toFixed(1)}%`;
+    console.log(
+      `  ${chalk.bold("Total")}  ${aggColor(aggStr)}  (${report.aggregate.totalExtractedNodes}/${report.aggregate.totalExpectedSymbols} symbols)`
+    );
+    console.log();
+  }
+  if (report.diff) {
+    const delta = report.diff.coverageDelta;
+    const sign = delta > 0 ? "+" : "";
+    const color = delta > 0 ? chalk.green : delta < 0 ? chalk.red : chalk.dim;
+    console.log(chalk.bold("Changes from previous build"));
+    console.log(`  Coverage: ${color(`${sign}${delta.toFixed(1)}%`)}`);
+    for (const f of report.diff.fixtures) {
+      if (f.addedNodes.length > 0 || f.removedNodes.length > 0) {
+        console.log(`  ${f.fixture}`);
+        if (f.addedNodes.length > 0) {
+          console.log(chalk.green(`    + ${f.addedNodes.length} nodes: ${f.addedNodes.slice(0, 3).join(", ")}`));
+        }
+        if (f.removedNodes.length > 0) {
+          console.log(chalk.red(`    - ${f.removedNodes.length} nodes: ${f.removedNodes.slice(0, 3).join(", ")}`));
+        }
+      }
+    }
+    console.log();
+  }
+  if (report.validation.errors.length > 0) {
+    for (const err of report.validation.errors) {
+      console.log(chalk.red(`  \u2717 ${err}`));
+    }
+    console.log();
+  }
+  if (report.validation.warnings.length > 0) {
+    for (const warn of report.validation.warnings) {
+      console.log(chalk.yellow(`  \u26A0 ${warn}`));
+    }
+    console.log();
+  }
+  if (report.validation.passed && report.validation.warnings.length === 0) {
+    console.log(chalk.green("  \u2713 All checks passed"));
+    console.log();
+  }
+}
+function coverageBar(pct) {
+  if (pct < 0)
+    return chalk.dim("\u2591".repeat(10) + " N/A");
+  const filled = Math.round(pct / 10);
+  const empty = 10 - filled;
+  const color = pct >= 80 ? chalk.green : pct >= 50 ? chalk.yellow : chalk.red;
+  return color("\u2588".repeat(filled)) + chalk.dim("\u2591".repeat(empty));
+}
+
+// src/output/report.ts
+function addValidationInsights(report) {
+  const { aggregate, validation } = report;
+  if (aggregate.coveragePct >= 0 && aggregate.coveragePct < 80) {
+    validation.warnings.push(
+      `Coverage is ${aggregate.coveragePct.toFixed(1)}% \u2014 below the 80% recommended threshold. Review missing symbols and add extraction patterns for them.`
+    );
+  }
+  for (const f of report.fixtureResults) {
+    if (f.extractedNodes === 0 && f.astSymbols > 0) {
+      validation.errors.push(
+        `Fixture ${f.fixturePath}: plugin extracted 0 nodes from a file with ${f.astSymbols} expected symbols. Check that language.match() returns true for this file extension.`
+      );
+      validation.passed = false;
+    }
+  }
+  if (report.fixtureResults.length === 0) {
+    validation.warnings.push(
+      `No fixture files found. Add sample files to tests/fixtures/ to enable coverage analysis.`
+    );
+  }
+}
+function buildReport(params) {
+  const { pluginName, pluginVersion, wasmHash, fixtureResults, validationErrors } = params;
+  const totalExpected = fixtureResults.reduce((s, f) => s + f.astSymbols, 0);
+  const totalExtracted = fixtureResults.reduce((s, f) => s + f.extractedNodes, 0);
+  const totalEdges = fixtureResults.reduce((s, f) => s + f.extractedEdges, 0);
+  const knownFixtures = fixtureResults.filter((f) => f.coveragePct >= 0);
+  const coveragePct = knownFixtures.length > 0 ? knownFixtures.reduce((s, f) => s + f.coveragePct, 0) / knownFixtures.length : -1;
+  const report = {
+    schemaVersion: 1,
+    pluginName,
+    pluginVersion,
+    wasmHash,
+    builtAt: Date.now(),
+    fixtureResults,
+    aggregate: {
+      totalExpectedSymbols: totalExpected,
+      totalExtractedNodes: totalExtracted,
+      coveragePct,
+      totalEdges
+    },
+    validation: {
+      passed: validationErrors.length === 0,
+      errors: [...validationErrors],
+      warnings: []
+    }
+  };
+  addValidationInsights(report);
+  return report;
+}
+
+// src/commands/validate.ts
+import { createHash } from "crypto";
+import { readFileSync } from "fs";
+async function runValidate(wasmPath, opts) {
+  const loader = new PluginLoader(opts.ce);
+  const wasmBytes = readFileSync(wasmPath);
+  const wasmHash = createHash("sha256").update(wasmBytes).digest("hex");
+  const result = loader.validate(wasmPath);
+  const report = buildReport({
+    pluginName: wasmPath,
+    pluginVersion: "unknown",
+    wasmHash,
+    fixtureResults: [],
+    validationErrors: result.errors
+  });
+  if (opts.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    renderReport(report);
+  }
+  if (!result.passed)
+    process.exit(1);
+}
+
+// src/runner/fixtures.ts
+import { readdirSync, readFileSync as readFileSync2, statSync } from "fs";
+import { join as join2 } from "path";
+function loadFixtures(fixturesDir) {
+  const fixtures2 = [];
+  try {
+    const entries = readdirSync(fixturesDir);
+    for (const entry of entries) {
+      const fullPath = join2(fixturesDir, entry);
+      const stat = statSync(fullPath);
+      if (stat.isFile()) {
+        const content = readFileSync2(fullPath, "utf8");
+        fixtures2.push({ path: entry, content });
+      }
+    }
+  } catch (err) {
+    const e = err;
+    if (e.code !== "ENOENT")
+      throw err;
+  }
+  return fixtures2;
+}
+
+// src/analysis/ast.ts
+var ENUMERATORS = {
+  ".go": (content) => {
+    const symbols = [];
+    const lines = content.split("\n");
+    lines.forEach((line, i) => {
+      const lineNum = i + 1;
+      const fnMatch = line.match(/^func\s+(?:\([^)]+\)\s+)?(\w+)\s*\(/);
+      if (fnMatch)
+        symbols.push({ name: fnMatch[1], type: "function", line: lineNum });
+      const typeMatch = line.match(/^type\s+(\w+)\s+(?:struct|interface|func|\w)/);
+      if (typeMatch)
+        symbols.push({ name: typeMatch[1], type: "type", line: lineNum });
+      const constMatch = line.match(/^\s{0,1}(\w+)\s*=/);
+      if (constMatch && line.includes("const")) {
+        symbols.push({ name: constMatch[1], type: "const", line: lineNum });
+      }
+    });
+    return symbols;
+  },
+  ".ts": (content) => {
+    const symbols = [];
+    const lines = content.split("\n");
+    lines.forEach((line, i) => {
+      const lineNum = i + 1;
+      const fnMatch = line.match(/^(?:export\s+)?(?:async\s+)?function\s+(\w+)/);
+      if (fnMatch)
+        symbols.push({ name: fnMatch[1], type: "function", line: lineNum });
+      const classMatch = line.match(/^(?:export\s+)?class\s+(\w+)/);
+      if (classMatch)
+        symbols.push({ name: classMatch[1], type: "class", line: lineNum });
+      const ifaceMatch = line.match(/^(?:export\s+)?interface\s+(\w+)/);
+      if (ifaceMatch)
+        symbols.push({ name: ifaceMatch[1], type: "interface", line: lineNum });
+      const typeMatch = line.match(/^(?:export\s+)?type\s+(\w+)\s*=/);
+      if (typeMatch)
+        symbols.push({ name: typeMatch[1], type: "type", line: lineNum });
+    });
+    return symbols;
+  },
+  ".py": (content) => {
+    const symbols = [];
+    const lines = content.split("\n");
+    lines.forEach((line, i) => {
+      const lineNum = i + 1;
+      const fnMatch = line.match(/^(?:async\s+)?def\s+(\w+)\s*\(/);
+      if (fnMatch)
+        symbols.push({ name: fnMatch[1], type: "function", line: lineNum });
+      const classMatch = line.match(/^class\s+(\w+)/);
+      if (classMatch)
+        symbols.push({ name: classMatch[1], type: "class", line: lineNum });
+    });
+    return symbols;
+  }
+};
+function enumerateExpectedSymbols(filePath, content) {
+  const ext = filePath.substring(filePath.lastIndexOf("."));
+  const enumerator = ENUMERATORS[ext];
+  if (!enumerator)
+    return null;
+  return enumerator(content);
+}
+
+// src/analysis/coverage.ts
+function computeCoverage(fixturePath, content, extraction) {
+  const expected = enumerateExpectedSymbols(fixturePath, content);
+  if (expected === null) {
+    return {
+      fixturePath,
+      expectedSymbols: [],
+      extractedNodes: extraction.nodes,
+      matchedSymbols: [],
+      missingSymbols: [],
+      extraNodes: extraction.nodes,
+      coveragePct: -1
+    };
+  }
+  if (expected.length === 0) {
+    return {
+      fixturePath,
+      expectedSymbols: [],
+      extractedNodes: extraction.nodes,
+      matchedSymbols: [],
+      missingSymbols: [],
+      extraNodes: extraction.nodes,
+      coveragePct: 0
+    };
+  }
+  const matched = [];
+  const missing = [];
+  for (const sym of expected) {
+    const covered = extraction.nodes.some(
+      (node) => node.label === sym.name || node.canonicalID.endsWith(`:${sym.name}`) || node.canonicalID.endsWith(`/${sym.name}`)
+    );
+    if (covered) {
+      matched.push(sym.name);
+    } else {
+      missing.push(sym.name);
+    }
+  }
+  const extra = extraction.nodes.filter(
+    (node) => !expected.some(
+      (sym) => node.label === sym.name || node.canonicalID.endsWith(`:${sym.name}`) || node.canonicalID.endsWith(`/${sym.name}`)
+    )
+  );
+  const coveragePct = expected.length > 0 ? matched.length / expected.length * 100 : 0;
+  return {
+    fixturePath,
+    expectedSymbols: expected,
+    extractedNodes: extraction.nodes,
+    matchedSymbols: matched,
+    missingSymbols: missing,
+    extraNodes: extra,
+    coveragePct
+  };
+}
+
+// src/commands/coverage.ts
+import { createHash as createHash2 } from "crypto";
+import { readFileSync as readFileSync3 } from "fs";
+async function runCoverage(wasmPath, opts) {
+  const loader = new PluginLoader(opts.ce);
+  const fixtures2 = loadFixtures(opts.fixtures);
+  const wasmBytes = readFileSync3(wasmPath);
+  const wasmHash = createHash2("sha256").update(wasmBytes).digest("hex");
+  const validation = loader.validate(wasmPath);
+  const fixtureResults = [];
+  for (const fixture of fixtures2) {
+    let extraction = { nodes: [], edges: [] };
+    if (validation.passed) {
+      try {
+        extraction = loader.extract(wasmPath, fixture.path, fixture.content);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        validation.errors.push(`Extraction failed for ${fixture.path}: ${msg}`);
+        validation.passed = false;
+      }
+    }
+    const cov = computeCoverage(fixture.path, fixture.content, extraction);
+    fixtureResults.push({
+      fixturePath: cov.fixturePath,
+      astSymbols: cov.expectedSymbols.length,
+      extractedNodes: cov.extractedNodes.length,
+      extractedEdges: extraction.edges.length,
+      coveragePct: cov.coveragePct,
+      missingSymbols: cov.missingSymbols,
+      extraNodes: cov.extraNodes.map((n) => n.canonicalID)
+    });
+  }
+  const report = buildReport({
+    pluginName: wasmPath,
+    pluginVersion: "unknown",
+    wasmHash,
+    fixtureResults,
+    validationErrors: validation.errors
+  });
+  if (opts.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    renderReport(report);
+  }
+  if (!report.validation.passed)
+    process.exit(1);
+}
+
+// src/analysis/diff.ts
+function diffExtractions(fixture, oldResult, newResult, oldCoverage, newCoverage) {
+  const oldNodeIDs = new Set(oldResult.nodes.map((n) => n.canonicalID));
+  const newNodeIDs = new Set(newResult.nodes.map((n) => n.canonicalID));
+  const oldEdgeIDs = new Set(oldResult.edges.map((e) => e.id));
+  const newEdgeIDs = new Set(newResult.edges.map((e) => e.id));
+  return {
+    fixture,
+    addedNodes: [...newNodeIDs].filter((id) => !oldNodeIDs.has(id)),
+    removedNodes: [...oldNodeIDs].filter((id) => !newNodeIDs.has(id)),
+    addedEdges: [...newEdgeIDs].filter((id) => !oldEdgeIDs.has(id)),
+    removedEdges: [...oldEdgeIDs].filter((id) => !newEdgeIDs.has(id)),
+    coverageDelta: newCoverage - oldCoverage
+  };
+}
+
+// src/commands/diff.ts
+import { createHash as createHash3 } from "crypto";
+import { readFileSync as readFileSync4 } from "fs";
+async function runDiff(oldWasmPath, newWasmPath, opts) {
+  const loader = new PluginLoader(opts.ce);
+  const fixtures2 = loadFixtures(opts.fixtures);
+  const oldBytes = readFileSync4(oldWasmPath);
+  const newBytes = readFileSync4(newWasmPath);
+  const oldHash = createHash3("sha256").update(oldBytes).digest("hex");
+  const newHash = createHash3("sha256").update(newBytes).digest("hex");
+  const fixtureResults = [];
+  const diffs = [];
+  let oldTotalCoverage = 0;
+  let newTotalCoverage = 0;
+  let knownCount = 0;
+  for (const fixture of fixtures2) {
+    const oldExtraction = loader.extract(oldWasmPath, fixture.path, fixture.content);
+    const newExtraction = loader.extract(newWasmPath, fixture.path, fixture.content);
+    const oldCov = computeCoverage(fixture.path, fixture.content, oldExtraction);
+    const newCov = computeCoverage(fixture.path, fixture.content, newExtraction);
+    if (oldCov.coveragePct >= 0 && newCov.coveragePct >= 0) {
+      oldTotalCoverage += oldCov.coveragePct;
+      newTotalCoverage += newCov.coveragePct;
+      knownCount++;
+    }
+    const diff = diffExtractions(
+      fixture.path,
+      oldExtraction,
+      newExtraction,
+      oldCov.coveragePct,
+      newCov.coveragePct
+    );
+    diffs.push(diff);
+    fixtureResults.push({
+      fixturePath: newCov.fixturePath,
+      astSymbols: newCov.expectedSymbols.length,
+      extractedNodes: newCov.extractedNodes.length,
+      extractedEdges: newExtraction.edges.length,
+      coveragePct: newCov.coveragePct,
+      missingSymbols: newCov.missingSymbols,
+      extraNodes: newCov.extraNodes.map((n) => n.canonicalID)
+    });
+  }
+  const coverageDelta = knownCount > 0 ? (newTotalCoverage - oldTotalCoverage) / knownCount : 0;
+  const report = buildReport({
+    pluginName: newWasmPath,
+    pluginVersion: "unknown",
+    wasmHash: newHash,
+    fixtureResults,
+    validationErrors: []
+  });
+  report.diff = {
+    previousWasmHash: oldHash,
+    fixtures: diffs,
+    coverageDelta
+  };
+  if (opts.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    renderReport(report);
+  }
+}
+
+// src/commands/run.ts
+import { readFileSync as readFileSync5 } from "fs";
+import chalk2 from "chalk";
+async function runExtract(wasmPath, fixturePath, opts) {
+  const loader = new PluginLoader(opts.ce);
+  const content = readFileSync5(fixturePath, "utf8");
+  const result = loader.extract(wasmPath, fixturePath, content);
+  if (opts.json) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log();
+  console.log(chalk2.bold(`Extraction: ${fixturePath}`));
+  console.log();
+  console.log(chalk2.bold(`Nodes (${result.nodes.length})`));
+  for (const node of result.nodes) {
+    console.log(`  ${chalk2.cyan(node.type.padEnd(12))} ${node.label}`);
+    console.log(chalk2.dim(`               ${node.canonicalID}`));
+  }
+  console.log();
+  console.log(chalk2.bold(`Edges (${result.edges.length})`));
+  for (const edge of result.edges) {
+    console.log(`  ${chalk2.yellow(edge.type.padEnd(12))} ${edge.sourceID} \u2192 ${edge.targetID}`);
+  }
+  console.log();
+}
+
+// src/index.ts
+var args = process.argv.slice(2);
+function flag(name) {
+  return args.includes(`--${name}`);
+}
+function option(name, defaultVal) {
+  const idx = args.indexOf(`--${name}`);
+  return idx !== -1 && args[idx + 1] ? args[idx + 1] : defaultVal;
+}
+var json = flag("json");
+var fixtures = option("fixtures", "./tests/fixtures");
+var ce = option("ce", "ce");
+var [command, ...rest] = args.filter((a) => !a.startsWith("--"));
+switch (command) {
+  case "validate": {
+    const [wasmPath] = rest;
+    if (!wasmPath) {
+      console.error("Usage: ce-sandbox validate <file.wasm>");
+      process.exit(1);
+    }
+    runValidate(wasmPath, { json, ce }).catch(die);
+    break;
+  }
+  case "coverage": {
+    const [wasmPath] = rest;
+    if (!wasmPath) {
+      console.error("Usage: ce-sandbox coverage <file.wasm>");
+      process.exit(1);
+    }
+    runCoverage(wasmPath, { json, fixtures, ce }).catch(die);
+    break;
+  }
+  case "diff": {
+    const [oldWasm, newWasm] = rest;
+    if (!oldWasm || !newWasm) {
+      console.error("Usage: ce-sandbox diff <old.wasm> <new.wasm>");
+      process.exit(1);
+    }
+    runDiff(oldWasm, newWasm, { json, fixtures, ce }).catch(die);
+    break;
+  }
+  case "run": {
+    const [wasmPath, fixturePath] = rest;
+    if (!wasmPath || !fixturePath) {
+      console.error("Usage: ce-sandbox run <file.wasm> <fixture>");
+      process.exit(1);
+    }
+    runExtract(wasmPath, fixturePath, { json, ce }).catch(die);
+    break;
+  }
+  default:
+    console.log(`
+ce-sandbox \u2014 Context Engine Plugin Sandbox
+
+Commands:
+  validate <file.wasm>               Validate a plugin file
+  coverage <file.wasm>               Run coverage analysis against fixtures
+  diff <old.wasm> <new.wasm>         Show extraction changes between builds
+  run <file.wasm> <fixture>          Run extraction on a single file
+
+Flags:
+  --json        Output machine-readable JSON
+  --fixtures    Path to fixtures directory (default: ./tests/fixtures)
+  --ce          Path to ce binary (default: looks in PATH)
+`);
+    process.exit(0);
+}
+function die(err) {
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/runner/loader.ts", "../src/output/render.ts", "../src/output/report.ts", "../src/commands/validate.ts", "../src/runner/fixtures.ts", "../src/analysis/ast.ts", "../src/analysis/coverage.ts", "../src/commands/coverage.ts", "../src/analysis/diff.ts", "../src/commands/diff.ts", "../src/commands/run.ts", "../src/index.ts"],
+  "sourcesContent": ["import { spawnSync } from \"child_process\"\nimport { writeFileSync, unlinkSync } from \"fs\"\nimport { tmpdir } from \"os\"\nimport { join } from \"path\"\nimport type { ExtractionResult } from \"@atheory-ai/ce-plugin-sdk\"\n\nexport class PluginLoader {\n  private ceBinary: string\n\n  constructor(ceBinary = \"ce\") {\n    this.ceBinary = ceBinary\n    this.validateBinary()\n  }\n\n  private validateBinary(): void {\n    // No shell: run the binary directly with an argv array so a ceBinary value\n    // like \"foo; rm -rf ~\" can't be interpreted as a shell command.\n    const result = spawnSync(this.ceBinary, [\"version\"], { stdio: \"pipe\" })\n    if (result.error || result.status !== 0) {\n      throw new Error(\n        `CE binary not found: ${this.ceBinary}\\n` +\n        `Install it or specify path with --ce flag.`\n      )\n    }\n  }\n\n  validate(wasmPath: string): { passed: boolean; errors: string[]; output: string } {\n    const result = spawnSync(this.ceBinary, [\"plugin\", \"validate\", wasmPath, \"--json\"], {\n      encoding: \"utf8\",\n    })\n\n    if (result.status !== 0) {\n      return { passed: false, errors: [result.stderr || \"validation failed\"], output: result.stdout }\n    }\n\n    try {\n      const parsed = JSON.parse(result.stdout) as Record<string, unknown>\n      return { passed: true, errors: [], output: result.stdout, ...parsed }\n    } catch {\n      return { passed: true, errors: [], output: result.stdout }\n    }\n  }\n\n  extract(wasmPath: string, fixturePath: string, content: string): ExtractionResult {\n    const tmpInput = join(tmpdir(), `ce-sandbox-${Date.now()}.json`)\n    writeFileSync(tmpInput, JSON.stringify({ filePath: fixturePath, content }), \"utf8\")\n\n    const result = spawnSync(\n      this.ceBinary,\n      [\"plugin\", \"extract\", wasmPath, \"--input\", tmpInput, \"--json\"],\n      { encoding: \"utf8\" }\n    )\n\n    try { unlinkSync(tmpInput) } catch { /* ignore */ }\n\n    if (result.status !== 0) {\n      throw new Error(`Extraction failed: ${result.stderr}`)\n    }\n\n    return JSON.parse(result.stdout) as ExtractionResult\n  }\n}\n", "import chalk from \"chalk\"\nimport type { SandboxReport } from \"./schema.js\"\n\nexport function renderReport(report: SandboxReport): void {\n  console.log()\n  console.log(chalk.bold(`${report.pluginName} v${report.pluginVersion}`))\n  console.log(chalk.dim(`wasm: ${report.wasmHash.slice(0, 12)}...`))\n  console.log()\n\n  if (report.fixtureResults.length > 0) {\n    console.log(chalk.bold(\"Coverage\"))\n    console.log()\n\n    for (const f of report.fixtureResults) {\n      const pct   = f.coveragePct === -1 ? \"N/A\" : `${f.coveragePct.toFixed(0)}%`\n      const color = f.coveragePct >= 80 ? chalk.green\n                  : f.coveragePct >= 50 ? chalk.yellow\n                  : chalk.red\n      const bar   = coverageBar(f.coveragePct)\n\n      console.log(`  ${f.fixturePath}`)\n      console.log(`  ${color(pct.padStart(4))}  ${bar}  ${f.extractedNodes} nodes, ${f.extractedEdges} edges`)\n\n      if (f.missingSymbols.length > 0 && f.missingSymbols.length <= 5) {\n        console.log(chalk.dim(`         missing: ${f.missingSymbols.join(\", \")}`))\n      } else if (f.missingSymbols.length > 5) {\n        console.log(chalk.dim(\n          `         missing: ${f.missingSymbols.slice(0, 5).join(\", \")} +${f.missingSymbols.length - 5} more`\n        ))\n      }\n      console.log()\n    }\n\n    const aggPct   = report.aggregate.coveragePct\n    const aggColor = aggPct >= 80 ? chalk.green : aggPct >= 50 ? chalk.yellow : chalk.red\n    const aggStr   = aggPct < 0 ? \"N/A\" : `${aggPct.toFixed(1)}%`\n    console.log(\n      `  ${chalk.bold(\"Total\")}  ${aggColor(aggStr)}  ` +\n      `(${report.aggregate.totalExtractedNodes}/${report.aggregate.totalExpectedSymbols} symbols)`\n    )\n    console.log()\n  }\n\n  if (report.diff) {\n    const delta = report.diff.coverageDelta\n    const sign  = delta > 0 ? \"+\" : \"\"\n    const color = delta > 0 ? chalk.green : delta < 0 ? chalk.red : chalk.dim\n    console.log(chalk.bold(\"Changes from previous build\"))\n    console.log(`  Coverage: ${color(`${sign}${delta.toFixed(1)}%`)}`)\n\n    for (const f of report.diff.fixtures) {\n      if (f.addedNodes.length > 0 || f.removedNodes.length > 0) {\n        console.log(`  ${f.fixture}`)\n        if (f.addedNodes.length > 0) {\n          console.log(chalk.green(`    + ${f.addedNodes.length} nodes: ${f.addedNodes.slice(0, 3).join(\", \")}`))\n        }\n        if (f.removedNodes.length > 0) {\n          console.log(chalk.red(`    - ${f.removedNodes.length} nodes: ${f.removedNodes.slice(0, 3).join(\", \")}`))\n        }\n      }\n    }\n    console.log()\n  }\n\n  if (report.validation.errors.length > 0) {\n    for (const err of report.validation.errors) {\n      console.log(chalk.red(`  \\u2717 ${err}`))\n    }\n    console.log()\n  }\n\n  if (report.validation.warnings.length > 0) {\n    for (const warn of report.validation.warnings) {\n      console.log(chalk.yellow(`  \\u26A0 ${warn}`))\n    }\n    console.log()\n  }\n\n  if (report.validation.passed && report.validation.warnings.length === 0) {\n    console.log(chalk.green(\"  \\u2713 All checks passed\"))\n    console.log()\n  }\n}\n\nfunction coverageBar(pct: number): string {\n  if (pct < 0) return chalk.dim(\"\\u2591\".repeat(10) + \" N/A\")\n  const filled = Math.round(pct / 10)\n  const empty  = 10 - filled\n  const color  = pct >= 80 ? chalk.green : pct >= 50 ? chalk.yellow : chalk.red\n  return color(\"\\u2588\".repeat(filled)) + chalk.dim(\"\\u2591\".repeat(empty))\n}\n", "import type { SandboxReport } from \"./schema.js\"\n\nexport function addValidationInsights(report: SandboxReport): void {\n  const { aggregate, validation } = report\n\n  if (aggregate.coveragePct >= 0 && aggregate.coveragePct < 80) {\n    validation.warnings.push(\n      `Coverage is ${aggregate.coveragePct.toFixed(1)}% \u2014 below the 80% recommended threshold. ` +\n      `Review missing symbols and add extraction patterns for them.`\n    )\n  }\n\n  for (const f of report.fixtureResults) {\n    if (f.extractedNodes === 0 && f.astSymbols > 0) {\n      validation.errors.push(\n        `Fixture ${f.fixturePath}: plugin extracted 0 nodes from a file ` +\n        `with ${f.astSymbols} expected symbols. ` +\n        `Check that language.match() returns true for this file extension.`\n      )\n      validation.passed = false\n    }\n  }\n\n  if (report.fixtureResults.length === 0) {\n    validation.warnings.push(\n      `No fixture files found. Add sample files to tests/fixtures/ to enable coverage analysis.`\n    )\n  }\n}\n\nexport function buildReport(params: {\n  pluginName:     string\n  pluginVersion:  string\n  wasmHash:       string\n  fixtureResults: SandboxReport[\"fixtureResults\"]\n  validationErrors: string[]\n}): SandboxReport {\n  const { pluginName, pluginVersion, wasmHash, fixtureResults, validationErrors } = params\n\n  const totalExpected = fixtureResults.reduce((s, f) => s + f.astSymbols, 0)\n  const totalExtracted = fixtureResults.reduce((s, f) => s + f.extractedNodes, 0)\n  const totalEdges = fixtureResults.reduce((s, f) => s + f.extractedEdges, 0)\n\n  const knownFixtures = fixtureResults.filter(f => f.coveragePct >= 0)\n  const coveragePct = knownFixtures.length > 0\n    ? knownFixtures.reduce((s, f) => s + f.coveragePct, 0) / knownFixtures.length\n    : -1\n\n  const report: SandboxReport = {\n    schemaVersion: 1,\n    pluginName,\n    pluginVersion,\n    wasmHash,\n    builtAt: Date.now(),\n    fixtureResults,\n    aggregate: {\n      totalExpectedSymbols: totalExpected,\n      totalExtractedNodes:  totalExtracted,\n      coveragePct,\n      totalEdges,\n    },\n    validation: {\n      passed:   validationErrors.length === 0,\n      errors:   [...validationErrors],\n      warnings: [],\n    },\n  }\n\n  addValidationInsights(report)\n  return report\n}\n", "import { PluginLoader } from \"../runner/loader.js\"\nimport { renderReport } from \"../output/render.js\"\nimport { buildReport } from \"../output/report.js\"\nimport { createHash } from \"crypto\"\nimport { readFileSync } from \"fs\"\n\nexport interface ValidateOptions {\n  json:  boolean\n  ce:    string\n}\n\nexport async function runValidate(wasmPath: string, opts: ValidateOptions): Promise<void> {\n  const loader = new PluginLoader(opts.ce)\n\n  const wasmBytes = readFileSync(wasmPath)\n  const wasmHash  = createHash(\"sha256\").update(wasmBytes).digest(\"hex\")\n\n  const result = loader.validate(wasmPath)\n\n  const report = buildReport({\n    pluginName:       wasmPath,\n    pluginVersion:    \"unknown\",\n    wasmHash,\n    fixtureResults:   [],\n    validationErrors: result.errors,\n  })\n\n  if (opts.json) {\n    console.log(JSON.stringify(report, null, 2))\n  } else {\n    renderReport(report)\n  }\n\n  if (!result.passed) process.exit(1)\n}\n", "import { readdirSync, readFileSync, statSync } from \"fs\"\nimport { join } from \"path\"\n\nexport interface Fixture {\n  path:    string\n  content: string\n}\n\nexport function loadFixtures(fixturesDir: string): Fixture[] {\n  const fixtures: Fixture[] = []\n\n  try {\n    const entries = readdirSync(fixturesDir)\n    for (const entry of entries) {\n      const fullPath = join(fixturesDir, entry)\n      const stat = statSync(fullPath)\n      if (stat.isFile()) {\n        const content = readFileSync(fullPath, \"utf8\")\n        fixtures.push({ path: entry, content })\n      }\n    }\n  } catch (err) {\n    const e = err as NodeJS.ErrnoException\n    if (e.code !== \"ENOENT\") throw err\n    // fixtures dir doesn't exist \u2014 return empty\n  }\n\n  return fixtures\n}\n", "export interface ExpectedSymbol {\n  name: string\n  type: \"function\" | \"type\" | \"interface\" | \"method\" | \"const\" | \"var\" | \"class\" | \"other\"\n  line: number\n}\n\nconst ENUMERATORS: Record<string, (content: string) => ExpectedSymbol[]> = {\n\n  \".go\": (content: string): ExpectedSymbol[] => {\n    const symbols: ExpectedSymbol[] = []\n    const lines = content.split(\"\\n\")\n\n    lines.forEach((line, i) => {\n      const lineNum = i + 1\n      const fnMatch = line.match(/^func\\s+(?:\\([^)]+\\)\\s+)?(\\w+)\\s*\\(/)\n      if (fnMatch) symbols.push({ name: fnMatch[1], type: \"function\", line: lineNum })\n\n      const typeMatch = line.match(/^type\\s+(\\w+)\\s+(?:struct|interface|func|\\w)/)\n      if (typeMatch) symbols.push({ name: typeMatch[1], type: \"type\", line: lineNum })\n\n      const constMatch = line.match(/^\\s{0,1}(\\w+)\\s*=/)\n      if (constMatch && line.includes(\"const\")) {\n        symbols.push({ name: constMatch[1], type: \"const\", line: lineNum })\n      }\n    })\n\n    return symbols\n  },\n\n  \".ts\": (content: string): ExpectedSymbol[] => {\n    const symbols: ExpectedSymbol[] = []\n    const lines = content.split(\"\\n\")\n\n    lines.forEach((line, i) => {\n      const lineNum = i + 1\n      const fnMatch = line.match(/^(?:export\\s+)?(?:async\\s+)?function\\s+(\\w+)/)\n      if (fnMatch) symbols.push({ name: fnMatch[1], type: \"function\", line: lineNum })\n\n      const classMatch = line.match(/^(?:export\\s+)?class\\s+(\\w+)/)\n      if (classMatch) symbols.push({ name: classMatch[1], type: \"class\", line: lineNum })\n\n      const ifaceMatch = line.match(/^(?:export\\s+)?interface\\s+(\\w+)/)\n      if (ifaceMatch) symbols.push({ name: ifaceMatch[1], type: \"interface\", line: lineNum })\n\n      const typeMatch = line.match(/^(?:export\\s+)?type\\s+(\\w+)\\s*=/)\n      if (typeMatch) symbols.push({ name: typeMatch[1], type: \"type\", line: lineNum })\n    })\n\n    return symbols\n  },\n\n  \".py\": (content: string): ExpectedSymbol[] => {\n    const symbols: ExpectedSymbol[] = []\n    const lines = content.split(\"\\n\")\n\n    lines.forEach((line, i) => {\n      const lineNum = i + 1\n      const fnMatch = line.match(/^(?:async\\s+)?def\\s+(\\w+)\\s*\\(/)\n      if (fnMatch) symbols.push({ name: fnMatch[1], type: \"function\", line: lineNum })\n\n      const classMatch = line.match(/^class\\s+(\\w+)/)\n      if (classMatch) symbols.push({ name: classMatch[1], type: \"class\", line: lineNum })\n    })\n\n    return symbols\n  },\n}\n\nexport function enumerateExpectedSymbols(\n  filePath: string,\n  content: string,\n): ExpectedSymbol[] | null {\n  const ext = filePath.substring(filePath.lastIndexOf(\".\"))\n  const enumerator = ENUMERATORS[ext]\n  if (!enumerator) return null\n  return enumerator(content)\n}\n", "import type { ExtractionResult, Node } from \"@atheory-ai/ce-plugin-sdk\"\nimport { enumerateExpectedSymbols, type ExpectedSymbol } from \"./ast.js\"\n\nexport interface FileCoverageResult {\n  fixturePath:     string\n  expectedSymbols: ExpectedSymbol[]\n  extractedNodes:  Node[]\n  matchedSymbols:  string[]\n  missingSymbols:  string[]\n  extraNodes:      Node[]\n  coveragePct:     number\n}\n\nexport function computeCoverage(\n  fixturePath: string,\n  content:     string,\n  extraction:  ExtractionResult,\n): FileCoverageResult {\n  const expected = enumerateExpectedSymbols(fixturePath, content)\n\n  // null means unsupported file type \u2014 coverage is not applicable\n  if (expected === null) {\n    return {\n      fixturePath,\n      expectedSymbols: [],\n      extractedNodes:  extraction.nodes,\n      matchedSymbols:  [],\n      missingSymbols:  [],\n      extraNodes:      extraction.nodes,\n      coveragePct:     -1,\n    }\n  }\n\n  // known file type but no expected symbols (e.g. empty file)\n  if (expected.length === 0) {\n    return {\n      fixturePath,\n      expectedSymbols: [],\n      extractedNodes:  extraction.nodes,\n      matchedSymbols:  [],\n      missingSymbols:  [],\n      extraNodes:      extraction.nodes,\n      coveragePct:     0,\n    }\n  }\n\n  const matched: string[] = []\n  const missing: string[] = []\n\n  for (const sym of expected) {\n    const covered = extraction.nodes.some(\n      node =>\n        node.label === sym.name ||\n        node.canonicalID.endsWith(`:${sym.name}`) ||\n        node.canonicalID.endsWith(`/${sym.name}`)\n    )\n    if (covered) {\n      matched.push(sym.name)\n    } else {\n      missing.push(sym.name)\n    }\n  }\n\n  const extra = extraction.nodes.filter(\n    node => !expected.some(\n      sym =>\n        node.label === sym.name ||\n        node.canonicalID.endsWith(`:${sym.name}`) ||\n        node.canonicalID.endsWith(`/${sym.name}`)\n    )\n  )\n\n  const coveragePct = expected.length > 0\n    ? (matched.length / expected.length) * 100\n    : 0\n\n  return {\n    fixturePath,\n    expectedSymbols: expected,\n    extractedNodes:  extraction.nodes,\n    matchedSymbols:  matched,\n    missingSymbols:  missing,\n    extraNodes:      extra,\n    coveragePct,\n  }\n}\n", "import { PluginLoader } from \"../runner/loader.js\"\nimport { loadFixtures } from \"../runner/fixtures.js\"\nimport { computeCoverage } from \"../analysis/coverage.js\"\nimport { buildReport } from \"../output/report.js\"\nimport { renderReport } from \"../output/render.js\"\nimport { createHash } from \"crypto\"\nimport { readFileSync } from \"fs\"\nimport type { FixtureResult } from \"../output/schema.js\"\n\nexport interface CoverageOptions {\n  json:     boolean\n  fixtures: string\n  ce:       string\n}\n\nexport async function runCoverage(wasmPath: string, opts: CoverageOptions): Promise<void> {\n  const loader   = new PluginLoader(opts.ce)\n  const fixtures = loadFixtures(opts.fixtures)\n\n  const wasmBytes = readFileSync(wasmPath)\n  const wasmHash  = createHash(\"sha256\").update(wasmBytes).digest(\"hex\")\n\n  // Validate first\n  const validation = loader.validate(wasmPath)\n\n  const fixtureResults: FixtureResult[] = []\n\n  for (const fixture of fixtures) {\n    let extraction = { nodes: [], edges: [] }\n\n    if (validation.passed) {\n      try {\n        extraction = loader.extract(wasmPath, fixture.path, fixture.content)\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err)\n        validation.errors.push(`Extraction failed for ${fixture.path}: ${msg}`)\n        validation.passed = false\n      }\n    }\n\n    const cov = computeCoverage(fixture.path, fixture.content, extraction)\n\n    fixtureResults.push({\n      fixturePath:    cov.fixturePath,\n      astSymbols:     cov.expectedSymbols.length,\n      extractedNodes: cov.extractedNodes.length,\n      extractedEdges: extraction.edges.length,\n      coveragePct:    cov.coveragePct,\n      missingSymbols: cov.missingSymbols,\n      extraNodes:     cov.extraNodes.map(n => n.canonicalID),\n    })\n  }\n\n  const report = buildReport({\n    pluginName:       wasmPath,\n    pluginVersion:    \"unknown\",\n    wasmHash,\n    fixtureResults,\n    validationErrors: validation.errors,\n  })\n\n  if (opts.json) {\n    console.log(JSON.stringify(report, null, 2))\n  } else {\n    renderReport(report)\n  }\n\n  if (!report.validation.passed) process.exit(1)\n}\n", "import type { ExtractionResult } from \"@atheory-ai/ce-plugin-sdk\"\n\nexport interface ExtractionDiff {\n  fixture:       string\n  addedNodes:    string[]\n  removedNodes:  string[]\n  addedEdges:    string[]\n  removedEdges:  string[]\n  coverageDelta: number\n}\n\nexport function diffExtractions(\n  fixture:     string,\n  oldResult:   ExtractionResult,\n  newResult:   ExtractionResult,\n  oldCoverage: number,\n  newCoverage: number,\n): ExtractionDiff {\n  const oldNodeIDs = new Set(oldResult.nodes.map(n => n.canonicalID))\n  const newNodeIDs = new Set(newResult.nodes.map(n => n.canonicalID))\n\n  const oldEdgeIDs = new Set(oldResult.edges.map(e => e.id))\n  const newEdgeIDs = new Set(newResult.edges.map(e => e.id))\n\n  return {\n    fixture,\n    addedNodes:   [...newNodeIDs].filter(id => !oldNodeIDs.has(id)),\n    removedNodes: [...oldNodeIDs].filter(id => !newNodeIDs.has(id)),\n    addedEdges:   [...newEdgeIDs].filter(id => !oldEdgeIDs.has(id)),\n    removedEdges: [...oldEdgeIDs].filter(id => !newEdgeIDs.has(id)),\n    coverageDelta: newCoverage - oldCoverage,\n  }\n}\n", "import { PluginLoader } from \"../runner/loader.js\"\nimport { loadFixtures } from \"../runner/fixtures.js\"\nimport { computeCoverage } from \"../analysis/coverage.js\"\nimport { diffExtractions } from \"../analysis/diff.js\"\nimport { renderReport } from \"../output/render.js\"\nimport { buildReport } from \"../output/report.js\"\nimport { createHash } from \"crypto\"\nimport { readFileSync } from \"fs\"\nimport type { ExtractionDiff } from \"../analysis/diff.js\"\nimport type { FixtureResult } from \"../output/schema.js\"\n\nexport interface DiffOptions {\n  json:     boolean\n  fixtures: string\n  ce:       string\n}\n\nexport async function runDiff(\n  oldWasmPath: string,\n  newWasmPath: string,\n  opts: DiffOptions,\n): Promise<void> {\n  const loader   = new PluginLoader(opts.ce)\n  const fixtures = loadFixtures(opts.fixtures)\n\n  const oldBytes = readFileSync(oldWasmPath)\n  const newBytes = readFileSync(newWasmPath)\n  const oldHash  = createHash(\"sha256\").update(oldBytes).digest(\"hex\")\n  const newHash  = createHash(\"sha256\").update(newBytes).digest(\"hex\")\n\n  const fixtureResults: FixtureResult[] = []\n  const diffs: ExtractionDiff[] = []\n  let oldTotalCoverage = 0\n  let newTotalCoverage = 0\n  let knownCount = 0\n\n  for (const fixture of fixtures) {\n    const oldExtraction = loader.extract(oldWasmPath, fixture.path, fixture.content)\n    const newExtraction = loader.extract(newWasmPath, fixture.path, fixture.content)\n\n    const oldCov = computeCoverage(fixture.path, fixture.content, oldExtraction)\n    const newCov = computeCoverage(fixture.path, fixture.content, newExtraction)\n\n    if (oldCov.coveragePct >= 0 && newCov.coveragePct >= 0) {\n      oldTotalCoverage += oldCov.coveragePct\n      newTotalCoverage += newCov.coveragePct\n      knownCount++\n    }\n\n    const diff = diffExtractions(\n      fixture.path,\n      oldExtraction,\n      newExtraction,\n      oldCov.coveragePct,\n      newCov.coveragePct,\n    )\n    diffs.push(diff)\n\n    fixtureResults.push({\n      fixturePath:    newCov.fixturePath,\n      astSymbols:     newCov.expectedSymbols.length,\n      extractedNodes: newCov.extractedNodes.length,\n      extractedEdges: newExtraction.edges.length,\n      coveragePct:    newCov.coveragePct,\n      missingSymbols: newCov.missingSymbols,\n      extraNodes:     newCov.extraNodes.map(n => n.canonicalID),\n    })\n  }\n\n  const coverageDelta = knownCount > 0\n    ? (newTotalCoverage - oldTotalCoverage) / knownCount\n    : 0\n\n  const report = buildReport({\n    pluginName:       newWasmPath,\n    pluginVersion:    \"unknown\",\n    wasmHash:         newHash,\n    fixtureResults,\n    validationErrors: [],\n  })\n\n  report.diff = {\n    previousWasmHash: oldHash,\n    fixtures:         diffs,\n    coverageDelta,\n  }\n\n  if (opts.json) {\n    console.log(JSON.stringify(report, null, 2))\n  } else {\n    renderReport(report)\n  }\n}\n", "import { PluginLoader } from \"../runner/loader.js\"\nimport { readFileSync } from \"fs\"\nimport chalk from \"chalk\"\n\nexport interface RunOptions {\n  json: boolean\n  ce:   string\n}\n\nexport async function runExtract(\n  wasmPath:    string,\n  fixturePath: string,\n  opts:        RunOptions,\n): Promise<void> {\n  const loader  = new PluginLoader(opts.ce)\n  const content = readFileSync(fixturePath, \"utf8\")\n\n  const result = loader.extract(wasmPath, fixturePath, content)\n\n  if (opts.json) {\n    console.log(JSON.stringify(result, null, 2))\n    return\n  }\n\n  console.log()\n  console.log(chalk.bold(`Extraction: ${fixturePath}`))\n  console.log()\n  console.log(chalk.bold(`Nodes (${result.nodes.length})`))\n  for (const node of result.nodes) {\n    console.log(`  ${chalk.cyan(node.type.padEnd(12))} ${node.label}`)\n    console.log(chalk.dim(`               ${node.canonicalID}`))\n  }\n\n  console.log()\n  console.log(chalk.bold(`Edges (${result.edges.length})`))\n  for (const edge of result.edges) {\n    console.log(`  ${chalk.yellow(edge.type.padEnd(12))} ${edge.sourceID} \u2192 ${edge.targetID}`)\n  }\n  console.log()\n}\n", "import { runValidate } from \"./commands/validate.js\"\nimport { runCoverage } from \"./commands/coverage.js\"\nimport { runDiff }     from \"./commands/diff.js\"\nimport { runExtract }  from \"./commands/run.js\"\n\nconst args = process.argv.slice(2)\n\nfunction flag(name: string): boolean {\n  return args.includes(`--${name}`)\n}\n\nfunction option(name: string, defaultVal: string): string {\n  const idx = args.indexOf(`--${name}`)\n  return idx !== -1 && args[idx + 1] ? args[idx + 1] : defaultVal\n}\n\nconst json     = flag(\"json\")\nconst fixtures = option(\"fixtures\", \"./tests/fixtures\")\nconst ce       = option(\"ce\", \"ce\")\n\nconst [command, ...rest] = args.filter(a => !a.startsWith(\"--\"))\n\nswitch (command) {\n  case \"validate\": {\n    const [wasmPath] = rest\n    if (!wasmPath) { console.error(\"Usage: ce-sandbox validate <file.wasm>\"); process.exit(1) }\n    runValidate(wasmPath, { json, ce }).catch(die)\n    break\n  }\n  case \"coverage\": {\n    const [wasmPath] = rest\n    if (!wasmPath) { console.error(\"Usage: ce-sandbox coverage <file.wasm>\"); process.exit(1) }\n    runCoverage(wasmPath, { json, fixtures, ce }).catch(die)\n    break\n  }\n  case \"diff\": {\n    const [oldWasm, newWasm] = rest\n    if (!oldWasm || !newWasm) {\n      console.error(\"Usage: ce-sandbox diff <old.wasm> <new.wasm>\")\n      process.exit(1)\n    }\n    runDiff(oldWasm, newWasm, { json, fixtures, ce }).catch(die)\n    break\n  }\n  case \"run\": {\n    const [wasmPath, fixturePath] = rest\n    if (!wasmPath || !fixturePath) {\n      console.error(\"Usage: ce-sandbox run <file.wasm> <fixture>\")\n      process.exit(1)\n    }\n    runExtract(wasmPath, fixturePath, { json, ce }).catch(die)\n    break\n  }\n  default:\n    console.log(`\nce-sandbox \u2014 Context Engine Plugin Sandbox\n\nCommands:\n  validate <file.wasm>               Validate a plugin file\n  coverage <file.wasm>               Run coverage analysis against fixtures\n  diff <old.wasm> <new.wasm>         Show extraction changes between builds\n  run <file.wasm> <fixture>          Run extraction on a single file\n\nFlags:\n  --json        Output machine-readable JSON\n  --fixtures    Path to fixtures directory (default: ./tests/fixtures)\n  --ce          Path to ce binary (default: looks in PATH)\n`)\n    process.exit(0)\n}\n\nfunction die(err: unknown): never {\n  console.error(err instanceof Error ? err.message : String(err))\n  process.exit(1)\n}\n"],
+  "mappings": ";;;AAAA,SAAS,iBAAiB;AAC1B,SAAS,eAAe,kBAAkB;AAC1C,SAAS,cAAc;AACvB,SAAS,YAAY;AAGd,IAAM,eAAN,MAAmB;AAAA,EAGxB,YAAY,WAAW,MAAM;AAC3B,SAAK,WAAW;AAChB,SAAK,eAAe;AAAA,EACtB;AAAA,EAEQ,iBAAuB;AAG7B,UAAM,SAAS,UAAU,KAAK,UAAU,CAAC,SAAS,GAAG,EAAE,OAAO,OAAO,CAAC;AACtE,QAAI,OAAO,SAAS,OAAO,WAAW,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,wBAAwB,KAAK,QAAQ;AAAA;AAAA,MAEvC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,SAAS,UAAyE;AAChF,UAAM,SAAS,UAAU,KAAK,UAAU,CAAC,UAAU,YAAY,UAAU,QAAQ,GAAG;AAAA,MAClF,UAAU;AAAA,IACZ,CAAC;AAED,QAAI,OAAO,WAAW,GAAG;AACvB,aAAO,EAAE,QAAQ,OAAO,QAAQ,CAAC,OAAO,UAAU,mBAAmB,GAAG,QAAQ,OAAO,OAAO;AAAA,IAChG;AAEA,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,OAAO,MAAM;AACvC,aAAO,EAAE,QAAQ,MAAM,QAAQ,CAAC,GAAG,QAAQ,OAAO,QAAQ,GAAG,OAAO;AAAA,IACtE,QAAQ;AACN,aAAO,EAAE,QAAQ,MAAM,QAAQ,CAAC,GAAG,QAAQ,OAAO,OAAO;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,QAAQ,UAAkB,aAAqB,SAAmC;AAChF,UAAM,WAAW,KAAK,OAAO,GAAG,cAAc,KAAK,IAAI,CAAC,OAAO;AAC/D,kBAAc,UAAU,KAAK,UAAU,EAAE,UAAU,aAAa,QAAQ,CAAC,GAAG,MAAM;AAElF,UAAM,SAAS;AAAA,MACb,KAAK;AAAA,MACL,CAAC,UAAU,WAAW,UAAU,WAAW,UAAU,QAAQ;AAAA,MAC7D,EAAE,UAAU,OAAO;AAAA,IACrB;AAEA,QAAI;AAAE,iBAAW,QAAQ;AAAA,IAAE,QAAQ;AAAA,IAAe;AAElD,QAAI,OAAO,WAAW,GAAG;AACvB,YAAM,IAAI,MAAM,sBAAsB,OAAO,MAAM,EAAE;AAAA,IACvD;AAEA,WAAO,KAAK,MAAM,OAAO,MAAM;AAAA,EACjC;AACF;;;AC7DA,OAAO,WAAW;AAGX,SAAS,aAAa,QAA6B;AACxD,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,OAAO,aAAa,EAAE,CAAC;AACvE,UAAQ,IAAI,MAAM,IAAI,SAAS,OAAO,SAAS,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC;AACjE,UAAQ,IAAI;AAEZ,MAAI,OAAO,eAAe,SAAS,GAAG;AACpC,YAAQ,IAAI,MAAM,KAAK,UAAU,CAAC;AAClC,YAAQ,IAAI;AAEZ,eAAW,KAAK,OAAO,gBAAgB;AACrC,YAAM,MAAQ,EAAE,gBAAgB,KAAK,QAAQ,GAAG,EAAE,YAAY,QAAQ,CAAC,CAAC;AACxE,YAAM,QAAQ,EAAE,eAAe,KAAK,MAAM,QAC5B,EAAE,eAAe,KAAK,MAAM,SAC5B,MAAM;AACpB,YAAM,MAAQ,YAAY,EAAE,WAAW;AAEvC,cAAQ,IAAI,KAAK,EAAE,WAAW,EAAE;AAChC,cAAQ,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,EAAE,cAAc,WAAW,EAAE,cAAc,QAAQ;AAEvG,UAAI,EAAE,eAAe,SAAS,KAAK,EAAE,eAAe,UAAU,GAAG;AAC/D,gBAAQ,IAAI,MAAM,IAAI,qBAAqB,EAAE,eAAe,KAAK,IAAI,CAAC,EAAE,CAAC;AAAA,MAC3E,WAAW,EAAE,eAAe,SAAS,GAAG;AACtC,gBAAQ,IAAI,MAAM;AAAA,UAChB,qBAAqB,EAAE,eAAe,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE,eAAe,SAAS,CAAC;AAAA,QAC9F,CAAC;AAAA,MACH;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,SAAW,OAAO,UAAU;AAClC,UAAM,WAAW,UAAU,KAAK,MAAM,QAAQ,UAAU,KAAK,MAAM,SAAS,MAAM;AAClF,UAAM,SAAW,SAAS,IAAI,QAAQ,GAAG,OAAO,QAAQ,CAAC,CAAC;AAC1D,YAAQ;AAAA,MACN,KAAK,MAAM,KAAK,OAAO,CAAC,KAAK,SAAS,MAAM,CAAC,MACzC,OAAO,UAAU,mBAAmB,IAAI,OAAO,UAAU,oBAAoB;AAAA,IACnF;AACA,YAAQ,IAAI;AAAA,EACd;AAEA,MAAI,OAAO,MAAM;AACf,UAAM,QAAQ,OAAO,KAAK;AAC1B,UAAM,OAAQ,QAAQ,IAAI,MAAM;AAChC,UAAM,QAAQ,QAAQ,IAAI,MAAM,QAAQ,QAAQ,IAAI,MAAM,MAAM,MAAM;AACtE,YAAQ,IAAI,MAAM,KAAK,6BAA6B,CAAC;AACrD,YAAQ,IAAI,eAAe,MAAM,GAAG,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE;AAEjE,eAAW,KAAK,OAAO,KAAK,UAAU;AACpC,UAAI,EAAE,WAAW,SAAS,KAAK,EAAE,aAAa,SAAS,GAAG;AACxD,gBAAQ,IAAI,KAAK,EAAE,OAAO,EAAE;AAC5B,YAAI,EAAE,WAAW,SAAS,GAAG;AAC3B,kBAAQ,IAAI,MAAM,MAAM,SAAS,EAAE,WAAW,MAAM,WAAW,EAAE,WAAW,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;AAAA,QACvG;AACA,YAAI,EAAE,aAAa,SAAS,GAAG;AAC7B,kBAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,aAAa,MAAM,WAAW,EAAE,aAAa,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;AAAA,QACzG;AAAA,MACF;AAAA,IACF;AACA,YAAQ,IAAI;AAAA,EACd;AAEA,MAAI,OAAO,WAAW,OAAO,SAAS,GAAG;AACvC,eAAW,OAAO,OAAO,WAAW,QAAQ;AAC1C,cAAQ,IAAI,MAAM,IAAI,YAAY,GAAG,EAAE,CAAC;AAAA,IAC1C;AACA,YAAQ,IAAI;AAAA,EACd;AAEA,MAAI,OAAO,WAAW,SAAS,SAAS,GAAG;AACzC,eAAW,QAAQ,OAAO,WAAW,UAAU;AAC7C,cAAQ,IAAI,MAAM,OAAO,YAAY,IAAI,EAAE,CAAC;AAAA,IAC9C;AACA,YAAQ,IAAI;AAAA,EACd;AAEA,MAAI,OAAO,WAAW,UAAU,OAAO,WAAW,SAAS,WAAW,GAAG;AACvE,YAAQ,IAAI,MAAM,MAAM,4BAA4B,CAAC;AACrD,YAAQ,IAAI;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAqB;AACxC,MAAI,MAAM;AAAG,WAAO,MAAM,IAAI,SAAS,OAAO,EAAE,IAAI,MAAM;AAC1D,QAAM,SAAS,KAAK,MAAM,MAAM,EAAE;AAClC,QAAM,QAAS,KAAK;AACpB,QAAM,QAAS,OAAO,KAAK,MAAM,QAAQ,OAAO,KAAK,MAAM,SAAS,MAAM;AAC1E,SAAO,MAAM,SAAS,OAAO,MAAM,CAAC,IAAI,MAAM,IAAI,SAAS,OAAO,KAAK,CAAC;AAC1E;;;ACxFO,SAAS,sBAAsB,QAA6B;AACjE,QAAM,EAAE,WAAW,WAAW,IAAI;AAElC,MAAI,UAAU,eAAe,KAAK,UAAU,cAAc,IAAI;AAC5D,eAAW,SAAS;AAAA,MAClB,eAAe,UAAU,YAAY,QAAQ,CAAC,CAAC;AAAA,IAEjD;AAAA,EACF;AAEA,aAAW,KAAK,OAAO,gBAAgB;AACrC,QAAI,EAAE,mBAAmB,KAAK,EAAE,aAAa,GAAG;AAC9C,iBAAW,OAAO;AAAA,QAChB,WAAW,EAAE,WAAW,+CAChB,EAAE,UAAU;AAAA,MAEtB;AACA,iBAAW,SAAS;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,OAAO,eAAe,WAAW,GAAG;AACtC,eAAW,SAAS;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,YAAY,QAMV;AAChB,QAAM,EAAE,YAAY,eAAe,UAAU,gBAAgB,iBAAiB,IAAI;AAElF,QAAM,gBAAgB,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,YAAY,CAAC;AACzE,QAAM,iBAAiB,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,gBAAgB,CAAC;AAC9E,QAAM,aAAa,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,gBAAgB,CAAC;AAE1E,QAAM,gBAAgB,eAAe,OAAO,OAAK,EAAE,eAAe,CAAC;AACnE,QAAM,cAAc,cAAc,SAAS,IACvC,cAAc,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,aAAa,CAAC,IAAI,cAAc,SACrE;AAEJ,QAAM,SAAwB;AAAA,IAC5B,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,KAAK,IAAI;AAAA,IAClB;AAAA,IACA,WAAW;AAAA,MACT,sBAAsB;AAAA,MACtB,qBAAsB;AAAA,MACtB;AAAA,MACA;AAAA,IACF;AAAA,IACA,YAAY;AAAA,MACV,QAAU,iBAAiB,WAAW;AAAA,MACtC,QAAU,CAAC,GAAG,gBAAgB;AAAA,MAC9B,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,wBAAsB,MAAM;AAC5B,SAAO;AACT;;;ACnEA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAO7B,eAAsB,YAAY,UAAkB,MAAsC;AACxF,QAAM,SAAS,IAAI,aAAa,KAAK,EAAE;AAEvC,QAAM,YAAY,aAAa,QAAQ;AACvC,QAAM,WAAY,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAErE,QAAM,SAAS,OAAO,SAAS,QAAQ;AAEvC,QAAM,SAAS,YAAY;AAAA,IACzB,YAAkB;AAAA,IAClB,eAAkB;AAAA,IAClB;AAAA,IACA,gBAAkB,CAAC;AAAA,IACnB,kBAAkB,OAAO;AAAA,EAC3B,CAAC;AAED,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC7C,OAAO;AACL,iBAAa,MAAM;AAAA,EACrB;AAEA,MAAI,CAAC,OAAO;AAAQ,YAAQ,KAAK,CAAC;AACpC;;;AClCA,SAAS,aAAa,gBAAAA,eAAc,gBAAgB;AACpD,SAAS,QAAAC,aAAY;AAOd,SAAS,aAAa,aAAgC;AAC3D,QAAMC,YAAsB,CAAC;AAE7B,MAAI;AACF,UAAM,UAAU,YAAY,WAAW;AACvC,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAWD,MAAK,aAAa,KAAK;AACxC,YAAM,OAAO,SAAS,QAAQ;AAC9B,UAAI,KAAK,OAAO,GAAG;AACjB,cAAM,UAAUD,cAAa,UAAU,MAAM;AAC7C,QAAAE,UAAS,KAAK,EAAE,MAAM,OAAO,QAAQ,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,QAAI,EAAE,SAAS;AAAU,YAAM;AAAA,EAEjC;AAEA,SAAOA;AACT;;;ACtBA,IAAM,cAAqE;AAAA,EAEzE,OAAO,CAAC,YAAsC;AAC5C,UAAM,UAA4B,CAAC;AACnC,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,UAAM,QAAQ,CAAC,MAAM,MAAM;AACzB,YAAM,UAAU,IAAI;AACpB,YAAM,UAAU,KAAK,MAAM,qCAAqC;AAChE,UAAI;AAAS,gBAAQ,KAAK,EAAE,MAAM,QAAQ,CAAC,GAAG,MAAM,YAAY,MAAM,QAAQ,CAAC;AAE/E,YAAM,YAAY,KAAK,MAAM,8CAA8C;AAC3E,UAAI;AAAW,gBAAQ,KAAK,EAAE,MAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAE/E,YAAM,aAAa,KAAK,MAAM,mBAAmB;AACjD,UAAI,cAAc,KAAK,SAAS,OAAO,GAAG;AACxC,gBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC,GAAG,MAAM,SAAS,MAAM,QAAQ,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,CAAC,YAAsC;AAC5C,UAAM,UAA4B,CAAC;AACnC,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,UAAM,QAAQ,CAAC,MAAM,MAAM;AACzB,YAAM,UAAU,IAAI;AACpB,YAAM,UAAU,KAAK,MAAM,8CAA8C;AACzE,UAAI;AAAS,gBAAQ,KAAK,EAAE,MAAM,QAAQ,CAAC,GAAG,MAAM,YAAY,MAAM,QAAQ,CAAC;AAE/E,YAAM,aAAa,KAAK,MAAM,8BAA8B;AAC5D,UAAI;AAAY,gBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC,GAAG,MAAM,SAAS,MAAM,QAAQ,CAAC;AAElF,YAAM,aAAa,KAAK,MAAM,kCAAkC;AAChE,UAAI;AAAY,gBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC,GAAG,MAAM,aAAa,MAAM,QAAQ,CAAC;AAEtF,YAAM,YAAY,KAAK,MAAM,iCAAiC;AAC9D,UAAI;AAAW,gBAAQ,KAAK,EAAE,MAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,IACjF,CAAC;AAED,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,CAAC,YAAsC;AAC5C,UAAM,UAA4B,CAAC;AACnC,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,UAAM,QAAQ,CAAC,MAAM,MAAM;AACzB,YAAM,UAAU,IAAI;AACpB,YAAM,UAAU,KAAK,MAAM,gCAAgC;AAC3D,UAAI;AAAS,gBAAQ,KAAK,EAAE,MAAM,QAAQ,CAAC,GAAG,MAAM,YAAY,MAAM,QAAQ,CAAC;AAE/E,YAAM,aAAa,KAAK,MAAM,gBAAgB;AAC9C,UAAI;AAAY,gBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC,GAAG,MAAM,SAAS,MAAM,QAAQ,CAAC;AAAA,IACpF,CAAC;AAED,WAAO;AAAA,EACT;AACF;AAEO,SAAS,yBACd,UACA,SACyB;AACzB,QAAM,MAAM,SAAS,UAAU,SAAS,YAAY,GAAG,CAAC;AACxD,QAAM,aAAa,YAAY,GAAG;AAClC,MAAI,CAAC;AAAY,WAAO;AACxB,SAAO,WAAW,OAAO;AAC3B;;;AC/DO,SAAS,gBACd,aACA,SACA,YACoB;AACpB,QAAM,WAAW,yBAAyB,aAAa,OAAO;AAG9D,MAAI,aAAa,MAAM;AACrB,WAAO;AAAA,MACL;AAAA,MACA,iBAAiB,CAAC;AAAA,MAClB,gBAAiB,WAAW;AAAA,MAC5B,gBAAiB,CAAC;AAAA,MAClB,gBAAiB,CAAC;AAAA,MAClB,YAAiB,WAAW;AAAA,MAC5B,aAAiB;AAAA,IACnB;AAAA,EACF;AAGA,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,MACL;AAAA,MACA,iBAAiB,CAAC;AAAA,MAClB,gBAAiB,WAAW;AAAA,MAC5B,gBAAiB,CAAC;AAAA,MAClB,gBAAiB,CAAC;AAAA,MAClB,YAAiB,WAAW;AAAA,MAC5B,aAAiB;AAAA,IACnB;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAE3B,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,WAAW,MAAM;AAAA,MAC/B,UACE,KAAK,UAAU,IAAI,QACnB,KAAK,YAAY,SAAS,IAAI,IAAI,IAAI,EAAE,KACxC,KAAK,YAAY,SAAS,IAAI,IAAI,IAAI,EAAE;AAAA,IAC5C;AACA,QAAI,SAAS;AACX,cAAQ,KAAK,IAAI,IAAI;AAAA,IACvB,OAAO;AACL,cAAQ,KAAK,IAAI,IAAI;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,QAAQ,WAAW,MAAM;AAAA,IAC7B,UAAQ,CAAC,SAAS;AAAA,MAChB,SACE,KAAK,UAAU,IAAI,QACnB,KAAK,YAAY,SAAS,IAAI,IAAI,IAAI,EAAE,KACxC,KAAK,YAAY,SAAS,IAAI,IAAI,IAAI,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,QAAM,cAAc,SAAS,SAAS,IACjC,QAAQ,SAAS,SAAS,SAAU,MACrC;AAEJ,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB;AAAA,IACjB,gBAAiB,WAAW;AAAA,IAC5B,gBAAiB;AAAA,IACjB,gBAAiB;AAAA,IACjB,YAAiB;AAAA,IACjB;AAAA,EACF;AACF;;;AChFA,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,gBAAAC,qBAAoB;AAS7B,eAAsB,YAAY,UAAkB,MAAsC;AACxF,QAAM,SAAW,IAAI,aAAa,KAAK,EAAE;AACzC,QAAMC,YAAW,aAAa,KAAK,QAAQ;AAE3C,QAAM,YAAYD,cAAa,QAAQ;AACvC,QAAM,WAAYD,YAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAGrE,QAAM,aAAa,OAAO,SAAS,QAAQ;AAE3C,QAAM,iBAAkC,CAAC;AAEzC,aAAW,WAAWE,WAAU;AAC9B,QAAI,aAAa,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE;AAExC,QAAI,WAAW,QAAQ;AACrB,UAAI;AACF,qBAAa,OAAO,QAAQ,UAAU,QAAQ,MAAM,QAAQ,OAAO;AAAA,MACrE,SAAS,KAAK;AACZ,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,mBAAW,OAAO,KAAK,yBAAyB,QAAQ,IAAI,KAAK,GAAG,EAAE;AACtE,mBAAW,SAAS;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,MAAM,gBAAgB,QAAQ,MAAM,QAAQ,SAAS,UAAU;AAErE,mBAAe,KAAK;AAAA,MAClB,aAAgB,IAAI;AAAA,MACpB,YAAgB,IAAI,gBAAgB;AAAA,MACpC,gBAAgB,IAAI,eAAe;AAAA,MACnC,gBAAgB,WAAW,MAAM;AAAA,MACjC,aAAgB,IAAI;AAAA,MACpB,gBAAgB,IAAI;AAAA,MACpB,YAAgB,IAAI,WAAW,IAAI,OAAK,EAAE,WAAW;AAAA,IACvD,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,YAAY;AAAA,IACzB,YAAkB;AAAA,IAClB,eAAkB;AAAA,IAClB;AAAA,IACA;AAAA,IACA,kBAAkB,WAAW;AAAA,EAC/B,CAAC;AAED,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC7C,OAAO;AACL,iBAAa,MAAM;AAAA,EACrB;AAEA,MAAI,CAAC,OAAO,WAAW;AAAQ,YAAQ,KAAK,CAAC;AAC/C;;;ACzDO,SAAS,gBACd,SACA,WACA,WACA,aACA,aACgB;AAChB,QAAM,aAAa,IAAI,IAAI,UAAU,MAAM,IAAI,OAAK,EAAE,WAAW,CAAC;AAClE,QAAM,aAAa,IAAI,IAAI,UAAU,MAAM,IAAI,OAAK,EAAE,WAAW,CAAC;AAElE,QAAM,aAAa,IAAI,IAAI,UAAU,MAAM,IAAI,OAAK,EAAE,EAAE,CAAC;AACzD,QAAM,aAAa,IAAI,IAAI,UAAU,MAAM,IAAI,OAAK,EAAE,EAAE,CAAC;AAEzD,SAAO;AAAA,IACL;AAAA,IACA,YAAc,CAAC,GAAG,UAAU,EAAE,OAAO,QAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AAAA,IAC9D,cAAc,CAAC,GAAG,UAAU,EAAE,OAAO,QAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AAAA,IAC9D,YAAc,CAAC,GAAG,UAAU,EAAE,OAAO,QAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AAAA,IAC9D,cAAc,CAAC,GAAG,UAAU,EAAE,OAAO,QAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AAAA,IAC9D,eAAe,cAAc;AAAA,EAC/B;AACF;;;AC1BA,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,gBAAAC,qBAAoB;AAU7B,eAAsB,QACpB,aACA,aACA,MACe;AACf,QAAM,SAAW,IAAI,aAAa,KAAK,EAAE;AACzC,QAAMC,YAAW,aAAa,KAAK,QAAQ;AAE3C,QAAM,WAAWD,cAAa,WAAW;AACzC,QAAM,WAAWA,cAAa,WAAW;AACzC,QAAM,UAAWD,YAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACnE,QAAM,UAAWA,YAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AAEnE,QAAM,iBAAkC,CAAC;AACzC,QAAM,QAA0B,CAAC;AACjC,MAAI,mBAAmB;AACvB,MAAI,mBAAmB;AACvB,MAAI,aAAa;AAEjB,aAAW,WAAWE,WAAU;AAC9B,UAAM,gBAAgB,OAAO,QAAQ,aAAa,QAAQ,MAAM,QAAQ,OAAO;AAC/E,UAAM,gBAAgB,OAAO,QAAQ,aAAa,QAAQ,MAAM,QAAQ,OAAO;AAE/E,UAAM,SAAS,gBAAgB,QAAQ,MAAM,QAAQ,SAAS,aAAa;AAC3E,UAAM,SAAS,gBAAgB,QAAQ,MAAM,QAAQ,SAAS,aAAa;AAE3E,QAAI,OAAO,eAAe,KAAK,OAAO,eAAe,GAAG;AACtD,0BAAoB,OAAO;AAC3B,0BAAoB,OAAO;AAC3B;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AACA,UAAM,KAAK,IAAI;AAEf,mBAAe,KAAK;AAAA,MAClB,aAAgB,OAAO;AAAA,MACvB,YAAgB,OAAO,gBAAgB;AAAA,MACvC,gBAAgB,OAAO,eAAe;AAAA,MACtC,gBAAgB,cAAc,MAAM;AAAA,MACpC,aAAgB,OAAO;AAAA,MACvB,gBAAgB,OAAO;AAAA,MACvB,YAAgB,OAAO,WAAW,IAAI,OAAK,EAAE,WAAW;AAAA,IAC1D,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB,aAAa,KAC9B,mBAAmB,oBAAoB,aACxC;AAEJ,QAAM,SAAS,YAAY;AAAA,IACzB,YAAkB;AAAA,IAClB,eAAkB;AAAA,IAClB,UAAkB;AAAA,IAClB;AAAA,IACA,kBAAkB,CAAC;AAAA,EACrB,CAAC;AAED,SAAO,OAAO;AAAA,IACZ,kBAAkB;AAAA,IAClB,UAAkB;AAAA,IAClB;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC7C,OAAO;AACL,iBAAa,MAAM;AAAA,EACrB;AACF;;;AC3FA,SAAS,gBAAAC,qBAAoB;AAC7B,OAAOC,YAAW;AAOlB,eAAsB,WACpB,UACA,aACA,MACe;AACf,QAAM,SAAU,IAAI,aAAa,KAAK,EAAE;AACxC,QAAM,UAAUD,cAAa,aAAa,MAAM;AAEhD,QAAM,SAAS,OAAO,QAAQ,UAAU,aAAa,OAAO;AAE5D,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C;AAAA,EACF;AAEA,UAAQ,IAAI;AACZ,UAAQ,IAAIC,OAAM,KAAK,eAAe,WAAW,EAAE,CAAC;AACpD,UAAQ,IAAI;AACZ,UAAQ,IAAIA,OAAM,KAAK,UAAU,OAAO,MAAM,MAAM,GAAG,CAAC;AACxD,aAAW,QAAQ,OAAO,OAAO;AAC/B,YAAQ,IAAI,KAAKA,OAAM,KAAK,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE;AACjE,YAAQ,IAAIA,OAAM,IAAI,kBAAkB,KAAK,WAAW,EAAE,CAAC;AAAA,EAC7D;AAEA,UAAQ,IAAI;AACZ,UAAQ,IAAIA,OAAM,KAAK,UAAU,OAAO,MAAM,MAAM,GAAG,CAAC;AACxD,aAAW,QAAQ,OAAO,OAAO;AAC/B,YAAQ,IAAI,KAAKA,OAAM,OAAO,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,WAAM,KAAK,QAAQ,EAAE;AAAA,EAC3F;AACA,UAAQ,IAAI;AACd;;;AClCA,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAEjC,SAAS,KAAK,MAAuB;AACnC,SAAO,KAAK,SAAS,KAAK,IAAI,EAAE;AAClC;AAEA,SAAS,OAAO,MAAc,YAA4B;AACxD,QAAM,MAAM,KAAK,QAAQ,KAAK,IAAI,EAAE;AACpC,SAAO,QAAQ,MAAM,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;AACvD;AAEA,IAAM,OAAW,KAAK,MAAM;AAC5B,IAAM,WAAW,OAAO,YAAY,kBAAkB;AACtD,IAAM,KAAW,OAAO,MAAM,IAAI;AAElC,IAAM,CAAC,SAAS,GAAG,IAAI,IAAI,KAAK,OAAO,OAAK,CAAC,EAAE,WAAW,IAAI,CAAC;AAE/D,QAAQ,SAAS;AAAA,EACf,KAAK,YAAY;AACf,UAAM,CAAC,QAAQ,IAAI;AACnB,QAAI,CAAC,UAAU;AAAE,cAAQ,MAAM,wCAAwC;AAAG,cAAQ,KAAK,CAAC;AAAA,IAAE;AAC1F,gBAAY,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG;AAC7C;AAAA,EACF;AAAA,EACA,KAAK,YAAY;AACf,UAAM,CAAC,QAAQ,IAAI;AACnB,QAAI,CAAC,UAAU;AAAE,cAAQ,MAAM,wCAAwC;AAAG,cAAQ,KAAK,CAAC;AAAA,IAAE;AAC1F,gBAAY,UAAU,EAAE,MAAM,UAAU,GAAG,CAAC,EAAE,MAAM,GAAG;AACvD;AAAA,EACF;AAAA,EACA,KAAK,QAAQ;AACX,UAAM,CAAC,SAAS,OAAO,IAAI;AAC3B,QAAI,CAAC,WAAW,CAAC,SAAS;AACxB,cAAQ,MAAM,8CAA8C;AAC5D,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,YAAQ,SAAS,SAAS,EAAE,MAAM,UAAU,GAAG,CAAC,EAAE,MAAM,GAAG;AAC3D;AAAA,EACF;AAAA,EACA,KAAK,OAAO;AACV,UAAM,CAAC,UAAU,WAAW,IAAI;AAChC,QAAI,CAAC,YAAY,CAAC,aAAa;AAC7B,cAAQ,MAAM,6CAA6C;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,eAAW,UAAU,aAAa,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG;AACzD;AAAA,EACF;AAAA,EACA;AACE,YAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAaf;AACG,YAAQ,KAAK,CAAC;AAClB;AAEA,SAAS,IAAI,KAAqB;AAChC,UAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,UAAQ,KAAK,CAAC;AAChB;",
+  "names": ["readFileSync", "join", "fixtures", "createHash", "readFileSync", "fixtures", "createHash", "readFileSync", "fixtures", "readFileSync", "chalk"]
+}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@atheory-ai/ce-plugin-sandbox",
+  "version": "0.1.0",
+  "description": "Local sandbox CLI for validating Context Engine plugins.",
+  "type": "module",
+  "bin": {
+    "ce-sandbox": "./dist/index.js"
+  },
+  "dependencies": {
+    "chalk": "^5.x",
+    "@atheory-ai/ce-plugin-sdk": "^0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "*",
+    "esbuild": "*",
+    "vitest": "*",
+    "@types/node": "^20.x"
+  },
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=20"
+  },
+  "homepage": "https://github.com/atheory-ai/context-engine/tree/main/sdk#readme",
+  "bugs": {
+    "url": "https://github.com/atheory-ai/context-engine/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/atheory-ai/context-engine.git",
+    "directory": "sdk/packages/plugin-sandbox"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "context-engine",
+    "plugin",
+    "wasm",
+    "validation",
+    "cli"
+  ],
+  "scripts": {
+    "build": "node build.mjs && chmod +x dist/index.js",
+    "test": "vitest run",
+    "lint": "eslint src tests build.mjs --ext .ts,.js,.mjs",
+    "clean": "rm -rf dist"
+  }
+}