@nebutra/code-execution 0.1.0

package/README.md

@@ -0,0 +1,29 @@
+# @nebutra/code-execution
+
+Status: WIP — Not yet integrated into any production app.
+
+`@nebutra/code-execution` owns action/observation execution for shell, read,
+edit-by-diff, git, policy checks, replay, doctor output, and debug inspection.
+It routes process execution through sandbox contracts and returns structured
+observations with suggestions.
+
+It does not own Thread/Turn/Item state, prompt generation, model calls,
+sub-agent scheduling, or approval lifecycle. Approval requests are surfaced as
+observations for the runtime or UI to handle.
+
+## Commands
+
+```bash
+pnpm exec:doctor
+pnpm exec:debug <action_id>
+pnpm exec:replay <action_id>
+pnpm exec:policy
+```
+
+## Examples
+
+Executable examples live under `examples/`:
+
+- `edit-by-diff.ts`
+- `policy.ts`
+- `shell.ts`

package/dist/chunk-26GNZJ27.js

@@ -0,0 +1,300 @@
+// src/index.ts
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { dirname, join, normalize } from "path";
+import { CapabilityError } from "@nebutra/errors";
+import {
+  SandboxRuntime
+} from "@nebutra/sandbox-runtime";
+var DefaultPolicy = [
+  { match: /^rm\s+-rf\b/, requireApproval: "always", reason: "destructive recursive removal" },
+  {
+    match: /\b(format|mkfs)\b/,
+    requireApproval: "always",
+    reason: "destructive filesystem operation"
+  },
+  {
+    match: /\bDROP\s+(DATABASE|SCHEMA|TABLE)\b/i,
+    requireApproval: "always",
+    reason: "destructive database operation"
+  },
+  {
+    match: /\b(npm|pnpm|yarn)\s+publish\b/,
+    requireApproval: "always",
+    reason: "package publishing"
+  },
+  { match: /^git\s+push\b/, requireApproval: "once_per_session", reason: "remote git mutation" }
+];
+function debugPath(root = process.cwd()) {
+  return join(root, ".nebutra", "debug", "code-execution.jsonl");
+}
+async function appendDebug(root, entry) {
+  const path = debugPath(root);
+  await mkdir(dirname(path), { recursive: true });
+  await writeFile(path, `${JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), ...entry })}
+`, {
+    flag: "a"
+  });
+}
+async function readExecutionDebug(root = process.cwd(), limit = 20) {
+  try {
+    const raw = await readFile(debugPath(root), "utf8");
+    return raw.trim().split("\n").filter(Boolean).slice(-limit).map((line) => JSON.parse(line));
+  } catch {
+    return [];
+  }
+}
+function requireTenant(explicit, fallback) {
+  const tenantId = explicit ?? fallback;
+  if (!tenantId) {
+    throw new CapabilityError("code-execution", "Code execution requires tenant context", {
+      suggestion: "Pass tenantId on the action or construct CodeExecutor with a tenantId default.",
+      statusCode: 400
+    });
+  }
+  return tenantId;
+}
+function actionIdFrom(action) {
+  return action.actionId ?? `${action.type}_${Date.now().toString(36)}`;
+}
+function matchesRule(command, rule) {
+  return typeof rule.match === "string" ? command.startsWith(rule.match) : rule.match.test(command);
+}
+function safeWorkspacePath(root, path) {
+  const normalized = normalize(path);
+  if (normalized.startsWith("/") || normalized.includes("..")) {
+    throw new CapabilityError("code-execution", "Unsafe workspace path rejected", {
+      suggestion: "Use a path relative to the configured workspace root.",
+      metadata: { path },
+      statusCode: 400
+    });
+  }
+  return join(root, normalized);
+}
+var CodeExecutor = class {
+  #tenantId;
+  #workspaceRoot;
+  #debugRoot;
+  #sandboxRuntime;
+  #eventLog;
+  #policy;
+  constructor(options = {}) {
+    this.#tenantId = options.tenantId;
+    this.#workspaceRoot = options.workspaceRoot ?? process.cwd();
+    this.#debugRoot = options.debugRoot ?? process.cwd();
+    this.#sandboxRuntime = options.sandboxRuntime ?? SandboxRuntime.fromConfig();
+    this.#eventLog = options.eventLog;
+    this.#policy = options.policy ?? DefaultPolicy;
+  }
+  async run(action) {
+    const tenantId = requireTenant(action.tenantId, this.#tenantId);
+    const actionId = actionIdFrom(action);
+    const started = Date.now();
+    let observation;
+    try {
+      observation = await this.#runWithTenant({ ...action, tenantId }, actionId, started);
+    } catch (cause) {
+      observation = errorObservation(actionId, cause);
+    }
+    await appendDebug(this.#debugRoot, { type: "action", tenantId, action, observation });
+    return observation;
+  }
+  async doctor() {
+    const sandbox = await this.#sandboxRuntime.doctor();
+    await appendDebug(this.#debugRoot, { type: "doctor", sandbox });
+    return { capability: "code-execution", sandbox, policies: this.#policy.length };
+  }
+  policy() {
+    return this.#policy;
+  }
+  async #runWithTenant(action, actionId, started) {
+    switch (action.type) {
+      case "shell":
+        return this.#runShell(action, actionId, started);
+      case "read":
+        return this.#readFile(action, actionId);
+      case "edit":
+        return this.#editFile(action, actionId);
+      case "git":
+        return this.#runGit(action, actionId, started);
+      case "ipython":
+        return {
+          type: "error",
+          actionId,
+          kind: "AdapterUnavailable",
+          message: "IPython kernel execution is not configured",
+          suggestion: "Configure a notebook kernel sidecar and route it through sandbox-runtime."
+        };
+    }
+  }
+  async #runShell(action, actionId, started) {
+    const approval = this.#approvalRequired(action.cmd);
+    if (approval && !action.approved) {
+      return {
+        type: "error",
+        actionId,
+        kind: "ApprovalRequired",
+        message: `Command requires approval: ${approval.reason}`,
+        suggestion: "Ask the user for explicit approval, then retry the action with approved: true."
+      };
+    }
+    const result = await this.#sandboxRuntime.exec({
+      cmd: action.cmd,
+      tenantId: action.tenantId,
+      ...action.threadId ? { threadId: action.threadId } : {},
+      ...action.timeoutS !== void 0 ? { hints: { durationS: action.timeoutS } } : {}
+    });
+    await this.#eventLog?.commit({
+      traceId: action.threadId ?? actionId,
+      kind: "sandbox_exec",
+      affected: [],
+      parent: null
+    });
+    return {
+      type: "shell_output",
+      actionId,
+      stdout: result.aggregatedOutput,
+      stderr: "",
+      exitCode: result.exitCode,
+      durationMs: Date.now() - started,
+      executedOn: result.executedOn
+    };
+  }
+  async #runGit(action, actionId, started) {
+    const command = `git ${action.op}${action.args?.length ? ` ${action.args.join(" ")}` : ""}`;
+    return this.#runShell(
+      {
+        type: "shell",
+        cmd: command,
+        cwd: this.#workspaceRoot,
+        tenantId: action.tenantId,
+        ...action.threadId ? { threadId: action.threadId } : {},
+        ...action.approved !== void 0 ? { approved: action.approved } : {}
+      },
+      actionId,
+      started
+    );
+  }
+  async #readFile(action, actionId) {
+    try {
+      const content = await readFile(safeWorkspacePath(this.#workspaceRoot, action.path), "utf8");
+      const lines = content.split("\n");
+      const start = action.lineRange?.[0] ?? 1;
+      const end = action.lineRange?.[1] ?? lines.length;
+      return {
+        type: "file_content",
+        actionId,
+        path: action.path,
+        content: lines.slice(start - 1, end).join("\n"),
+        lines: [start, end]
+      };
+    } catch (cause) {
+      return errorObservation(actionId, cause, {
+        kind: "FileReadFailed",
+        suggestion: "Check the path with a read/list action before asking the executor to edit it."
+      });
+    }
+  }
+  async #editFile(action, actionId) {
+    const full = safeWorkspacePath(this.#workspaceRoot, action.path);
+    try {
+      const before = await readFile(full, "utf8");
+      const after = applyUnifiedDiff(before, action.diff);
+      await writeFile(full, after, "utf8");
+      await this.#eventLog?.commit({
+        traceId: action.threadId ?? actionId,
+        kind: "content_write",
+        affected: [action.path],
+        parent: null,
+        snapshot: { [action.path]: after }
+      });
+      return {
+        type: "edit_applied",
+        actionId,
+        path: action.path,
+        diff: action.diff,
+        conflicts: []
+      };
+    } catch (cause) {
+      return errorObservation(actionId, cause, {
+        kind: "EditFailed",
+        suggestion: "Refresh the file, regenerate a unified diff against the current contents, and retry without overwrite semantics."
+      });
+    }
+  }
+  #approvalRequired(command) {
+    return this.#policy.find((rule) => rule.requireApproval !== "never" && matchesRule(command, rule)) ?? null;
+  }
+};
+function errorObservation(actionId, cause, override = {}) {
+  const message = cause instanceof Error ? cause.message : String(cause);
+  return {
+    type: "error",
+    actionId,
+    kind: override.kind ?? (cause instanceof CapabilityError ? "CapabilityError" : "ExecutionError"),
+    message,
+    suggestion: override.suggestion ?? (cause instanceof CapabilityError && cause.suggestion ? cause.suggestion : "Inspect the action, sandbox route, and tenant context, then retry with a narrower command.")
+  };
+}
+function applyUnifiedDiff(original, diff) {
+  const originalHadTrailingNewline = original.endsWith("\n");
+  let lines = originalHadTrailingNewline ? original.slice(0, -1).split("\n") : original.split("\n");
+  if (original === "") lines = [];
+  const diffLines = diff.split("\n");
+  let index = 0;
+  while (index < diffLines.length) {
+    const line = diffLines[index] ?? "";
+    if (!line.startsWith("@@")) {
+      index += 1;
+      continue;
+    }
+    index += 1;
+    const oldLines = [];
+    const newLines = [];
+    while (index < diffLines.length && !(diffLines[index] ?? "").startsWith("@@")) {
+      const current = diffLines[index] ?? "";
+      if (current.startsWith("\\ No newline")) {
+        index += 1;
+        continue;
+      }
+      if (current.startsWith("-")) oldLines.push(current.slice(1));
+      else if (current.startsWith("+")) newLines.push(current.slice(1));
+      else if (current.startsWith(" ")) {
+        oldLines.push(current.slice(1));
+        newLines.push(current.slice(1));
+      }
+      index += 1;
+    }
+    const position = findSubsequence(lines, oldLines);
+    if (position < 0) {
+      throw new CapabilityError("code-execution", "Diff hunk does not match current file", {
+        suggestion: "Re-read the file and generate a fresh unified diff against the latest content.",
+        metadata: { oldLines },
+        statusCode: 409
+      });
+    }
+    lines.splice(position, oldLines.length, ...newLines);
+  }
+  return `${lines.join("\n")}${originalHadTrailingNewline ? "\n" : ""}`;
+}
+function findSubsequence(haystack, needle) {
+  if (needle.length === 0) return 0;
+  for (let start = 0; start <= haystack.length - needle.length; start += 1) {
+    let matched = true;
+    for (let offset = 0; offset < needle.length; offset += 1) {
+      if (haystack[start + offset] !== needle[offset]) {
+        matched = false;
+        break;
+      }
+    }
+    if (matched) return start;
+  }
+  return -1;
+}
+
+export {
+  DefaultPolicy,
+  readExecutionDebug,
+  CodeExecutor,
+  applyUnifiedDiff
+};
+//# sourceMappingURL=chunk-26GNZJ27.js.map

package/dist/chunk-26GNZJ27.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { dirname, join, normalize } from \"node:path\";\nimport { CapabilityError } from \"@nebutra/errors\";\nimport {\n  type ExecRequest,\n  type ExecResponse,\n  type SandboxHealth,\n  SandboxRuntime,\n} from \"@nebutra/sandbox-runtime\";\n\nexport type ApprovalMode = \"always\" | \"once_per_session\" | \"never\";\n\nexport interface PolicyRule {\n  readonly match: string | RegExp;\n  readonly requireApproval: ApprovalMode;\n  readonly reason: string;\n}\n\nexport const DefaultPolicy: readonly PolicyRule[] = [\n  { match: /^rm\\s+-rf\\b/, requireApproval: \"always\", reason: \"destructive recursive removal\" },\n  {\n    match: /\\b(format|mkfs)\\b/,\n    requireApproval: \"always\",\n    reason: \"destructive filesystem operation\",\n  },\n  {\n    match: /\\bDROP\\s+(DATABASE|SCHEMA|TABLE)\\b/i,\n    requireApproval: \"always\",\n    reason: \"destructive database operation\",\n  },\n  {\n    match: /\\b(npm|pnpm|yarn)\\s+publish\\b/,\n    requireApproval: \"always\",\n    reason: \"package publishing\",\n  },\n  { match: /^git\\s+push\\b/, requireApproval: \"once_per_session\", reason: \"remote git mutation\" },\n];\n\nexport interface BaseAction {\n  readonly tenantId?: string;\n  readonly threadId?: string;\n  readonly actionId?: string;\n  readonly approved?: boolean;\n}\n\nexport interface ShellAction extends BaseAction {\n  readonly type: \"shell\";\n  readonly cmd: string;\n  readonly cwd: string;\n  readonly timeoutS?: number;\n}\n\nexport interface ReadAction extends BaseAction {\n  readonly type: \"read\";\n  readonly path: string;\n  readonly lineRange?: readonly [number, number];\n}\n\nexport interface EditAction extends BaseAction {\n  readonly type: \"edit\";\n  readonly path: string;\n  readonly diff: string;\n  readonly lineRange?: readonly [number, number];\n}\n\nexport interface IPythonAction extends BaseAction {\n  readonly type: \"ipython\";\n  readonly code: string;\n  readonly kernelId: string;\n}\n\nexport interface GitAction extends BaseAction {\n  readonly type: \"git\";\n  readonly op: \"status\" | \"log\" | \"push\";\n  readonly args?: readonly string[];\n}\n\nexport type Action = ShellAction | ReadAction | EditAction | IPythonAction | GitAction;\n\nexport interface ShellOutputObservation {\n  readonly type: \"shell_output\";\n  readonly actionId: string;\n  readonly stdout: string;\n  readonly stderr: string;\n  readonly exitCode: number;\n  readonly durationMs: number;\n  readonly executedOn: string;\n}\n\nexport interface FileContentObservation {\n  readonly type: \"file_content\";\n  readonly actionId: string;\n  readonly path: string;\n  readonly content: string;\n  readonly lines: readonly [number, number];\n}\n\nexport interface EditAppliedObservation {\n  readonly type: \"edit_applied\";\n  readonly actionId: string;\n  readonly path: string;\n  readonly diff: string;\n  readonly conflicts: readonly string[];\n}\n\nexport interface ErrorObservation {\n  readonly type: \"error\";\n  readonly actionId: string;\n  readonly kind: string;\n  readonly message: string;\n  readonly suggestion: string;\n}\n\nexport type Observation =\n  | ShellOutputObservation\n  | FileContentObservation\n  | EditAppliedObservation\n  | ErrorObservation;\n\nexport interface SandboxRuntimeLike {\n  exec(request: ExecRequest): Promise<ExecResponse>;\n  doctor(): Promise<readonly SandboxHealth[]>;\n}\n\nexport interface EventLogLike {\n  commit(event: {\n    traceId: string;\n    kind: \"tool_call\" | \"content_write\" | \"sandbox_exec\";\n    affected: readonly string[];\n    parent: string | null;\n    snapshot?: Record<string, string>;\n  }): Promise<string>;\n}\n\nexport interface CodeExecutorOptions {\n  readonly tenantId?: string;\n  readonly workspaceRoot?: string;\n  readonly debugRoot?: string;\n  readonly sandboxRuntime?: SandboxRuntimeLike;\n  readonly eventLog?: EventLogLike;\n  readonly policy?: readonly PolicyRule[];\n}\n\nfunction debugPath(root = process.cwd()): string {\n  return join(root, \".nebutra\", \"debug\", \"code-execution.jsonl\");\n}\n\nasync function appendDebug(root: string, entry: Record<string, unknown>): Promise<void> {\n  const path = debugPath(root);\n  await mkdir(dirname(path), { recursive: true });\n  await writeFile(path, `${JSON.stringify({ at: new Date().toISOString(), ...entry })}\\n`, {\n    flag: \"a\",\n  });\n}\n\nexport async function readExecutionDebug(root = process.cwd(), limit = 20): Promise<unknown[]> {\n  try {\n    const raw = await readFile(debugPath(root), \"utf8\");\n    return raw\n      .trim()\n      .split(\"\\n\")\n      .filter(Boolean)\n      .slice(-limit)\n      .map((line) => JSON.parse(line) as unknown);\n  } catch {\n    return [];\n  }\n}\n\nfunction requireTenant(explicit: string | undefined, fallback: string | undefined): string {\n  const tenantId = explicit ?? fallback;\n  if (!tenantId) {\n    throw new CapabilityError(\"code-execution\", \"Code execution requires tenant context\", {\n      suggestion: \"Pass tenantId on the action or construct CodeExecutor with a tenantId default.\",\n      statusCode: 400,\n    });\n  }\n  return tenantId;\n}\n\nfunction actionIdFrom(action: Action): string {\n  return action.actionId ?? `${action.type}_${Date.now().toString(36)}`;\n}\n\nfunction matchesRule(command: string, rule: PolicyRule): boolean {\n  return typeof rule.match === \"string\" ? command.startsWith(rule.match) : rule.match.test(command);\n}\n\nfunction safeWorkspacePath(root: string, path: string): string {\n  const normalized = normalize(path);\n  if (normalized.startsWith(\"/\") || normalized.includes(\"..\")) {\n    throw new CapabilityError(\"code-execution\", \"Unsafe workspace path rejected\", {\n      suggestion: \"Use a path relative to the configured workspace root.\",\n      metadata: { path },\n      statusCode: 400,\n    });\n  }\n  return join(root, normalized);\n}\n\nexport class CodeExecutor {\n  readonly #tenantId: string | undefined;\n  readonly #workspaceRoot: string;\n  readonly #debugRoot: string;\n  readonly #sandboxRuntime: SandboxRuntimeLike;\n  readonly #eventLog: EventLogLike | undefined;\n  readonly #policy: readonly PolicyRule[];\n\n  constructor(options: CodeExecutorOptions = {}) {\n    this.#tenantId = options.tenantId;\n    this.#workspaceRoot = options.workspaceRoot ?? process.cwd();\n    this.#debugRoot = options.debugRoot ?? process.cwd();\n    this.#sandboxRuntime = options.sandboxRuntime ?? SandboxRuntime.fromConfig();\n    this.#eventLog = options.eventLog;\n    this.#policy = options.policy ?? DefaultPolicy;\n  }\n\n  async run(action: Action): Promise<Observation> {\n    const tenantId = requireTenant(action.tenantId, this.#tenantId);\n    const actionId = actionIdFrom(action);\n    const started = Date.now();\n    let observation: Observation;\n\n    try {\n      observation = await this.#runWithTenant({ ...action, tenantId }, actionId, started);\n    } catch (cause) {\n      observation = errorObservation(actionId, cause);\n    }\n\n    await appendDebug(this.#debugRoot, { type: \"action\", tenantId, action, observation });\n    return observation;\n  }\n\n  async doctor(): Promise<{\n    readonly capability: \"code-execution\";\n    readonly sandbox: readonly SandboxHealth[];\n    readonly policies: number;\n  }> {\n    const sandbox = await this.#sandboxRuntime.doctor();\n    await appendDebug(this.#debugRoot, { type: \"doctor\", sandbox });\n    return { capability: \"code-execution\", sandbox, policies: this.#policy.length };\n  }\n\n  policy(): readonly PolicyRule[] {\n    return this.#policy;\n  }\n\n  async #runWithTenant(\n    action: Action & { readonly tenantId: string },\n    actionId: string,\n    started: number,\n  ): Promise<Observation> {\n    switch (action.type) {\n      case \"shell\":\n        return this.#runShell(action, actionId, started);\n      case \"read\":\n        return this.#readFile(action, actionId);\n      case \"edit\":\n        return this.#editFile(action, actionId);\n      case \"git\":\n        return this.#runGit(action, actionId, started);\n      case \"ipython\":\n        return {\n          type: \"error\",\n          actionId,\n          kind: \"AdapterUnavailable\",\n          message: \"IPython kernel execution is not configured\",\n          suggestion: \"Configure a notebook kernel sidecar and route it through sandbox-runtime.\",\n        };\n    }\n  }\n\n  async #runShell(\n    action: ShellAction & { readonly tenantId: string },\n    actionId: string,\n    started: number,\n  ): Promise<Observation> {\n    const approval = this.#approvalRequired(action.cmd);\n    if (approval && !action.approved) {\n      return {\n        type: \"error\",\n        actionId,\n        kind: \"ApprovalRequired\",\n        message: `Command requires approval: ${approval.reason}`,\n        suggestion:\n          \"Ask the user for explicit approval, then retry the action with approved: true.\",\n      };\n    }\n\n    const result = await this.#sandboxRuntime.exec({\n      cmd: action.cmd,\n      tenantId: action.tenantId,\n      ...(action.threadId ? { threadId: action.threadId } : {}),\n      ...(action.timeoutS !== undefined ? { hints: { durationS: action.timeoutS } } : {}),\n    });\n    await this.#eventLog?.commit({\n      traceId: action.threadId ?? actionId,\n      kind: \"sandbox_exec\",\n      affected: [],\n      parent: null,\n    });\n    return {\n      type: \"shell_output\",\n      actionId,\n      stdout: result.aggregatedOutput,\n      stderr: \"\",\n      exitCode: result.exitCode,\n      durationMs: Date.now() - started,\n      executedOn: result.executedOn,\n    };\n  }\n\n  async #runGit(\n    action: GitAction & { readonly tenantId: string },\n    actionId: string,\n    started: number,\n  ): Promise<Observation> {\n    const command = `git ${action.op}${action.args?.length ? ` ${action.args.join(\" \")}` : \"\"}`;\n    return this.#runShell(\n      {\n        type: \"shell\",\n        cmd: command,\n        cwd: this.#workspaceRoot,\n        tenantId: action.tenantId,\n        ...(action.threadId ? { threadId: action.threadId } : {}),\n        ...(action.approved !== undefined ? { approved: action.approved } : {}),\n      },\n      actionId,\n      started,\n    );\n  }\n\n  async #readFile(\n    action: ReadAction & { readonly tenantId: string },\n    actionId: string,\n  ): Promise<Observation> {\n    try {\n      const content = await readFile(safeWorkspacePath(this.#workspaceRoot, action.path), \"utf8\");\n      const lines = content.split(\"\\n\");\n      const start = action.lineRange?.[0] ?? 1;\n      const end = action.lineRange?.[1] ?? lines.length;\n      return {\n        type: \"file_content\",\n        actionId,\n        path: action.path,\n        content: lines.slice(start - 1, end).join(\"\\n\"),\n        lines: [start, end],\n      };\n    } catch (cause) {\n      return errorObservation(actionId, cause, {\n        kind: \"FileReadFailed\",\n        suggestion: \"Check the path with a read/list action before asking the executor to edit it.\",\n      });\n    }\n  }\n\n  async #editFile(\n    action: EditAction & { readonly tenantId: string },\n    actionId: string,\n  ): Promise<Observation> {\n    const full = safeWorkspacePath(this.#workspaceRoot, action.path);\n    try {\n      const before = await readFile(full, \"utf8\");\n      const after = applyUnifiedDiff(before, action.diff);\n      await writeFile(full, after, \"utf8\");\n      await this.#eventLog?.commit({\n        traceId: action.threadId ?? actionId,\n        kind: \"content_write\",\n        affected: [action.path],\n        parent: null,\n        snapshot: { [action.path]: after },\n      });\n      return {\n        type: \"edit_applied\",\n        actionId,\n        path: action.path,\n        diff: action.diff,\n        conflicts: [],\n      };\n    } catch (cause) {\n      return errorObservation(actionId, cause, {\n        kind: \"EditFailed\",\n        suggestion:\n          \"Refresh the file, regenerate a unified diff against the current contents, and retry without overwrite semantics.\",\n      });\n    }\n  }\n\n  #approvalRequired(command: string): PolicyRule | null {\n    return (\n      this.#policy.find((rule) => rule.requireApproval !== \"never\" && matchesRule(command, rule)) ??\n      null\n    );\n  }\n}\n\nfunction errorObservation(\n  actionId: string,\n  cause: unknown,\n  override: { readonly kind?: string; readonly suggestion?: string } = {},\n): ErrorObservation {\n  const message = cause instanceof Error ? cause.message : String(cause);\n  return {\n    type: \"error\",\n    actionId,\n    kind:\n      override.kind ?? (cause instanceof CapabilityError ? \"CapabilityError\" : \"ExecutionError\"),\n    message,\n    suggestion:\n      override.suggestion ??\n      (cause instanceof CapabilityError && cause.suggestion\n        ? cause.suggestion\n        : \"Inspect the action, sandbox route, and tenant context, then retry with a narrower command.\"),\n  };\n}\n\nexport function applyUnifiedDiff(original: string, diff: string): string {\n  const originalHadTrailingNewline = original.endsWith(\"\\n\");\n  let lines = originalHadTrailingNewline ? original.slice(0, -1).split(\"\\n\") : original.split(\"\\n\");\n  if (original === \"\") lines = [];\n\n  const diffLines = diff.split(\"\\n\");\n  let index = 0;\n  while (index < diffLines.length) {\n    const line = diffLines[index] ?? \"\";\n    if (!line.startsWith(\"@@\")) {\n      index += 1;\n      continue;\n    }\n    index += 1;\n    const oldLines: string[] = [];\n    const newLines: string[] = [];\n    while (index < diffLines.length && !(diffLines[index] ?? \"\").startsWith(\"@@\")) {\n      const current = diffLines[index] ?? \"\";\n      if (current.startsWith(\"\\\\ No newline\")) {\n        index += 1;\n        continue;\n      }\n      if (current.startsWith(\"-\")) oldLines.push(current.slice(1));\n      else if (current.startsWith(\"+\")) newLines.push(current.slice(1));\n      else if (current.startsWith(\" \")) {\n        oldLines.push(current.slice(1));\n        newLines.push(current.slice(1));\n      }\n      index += 1;\n    }\n    const position = findSubsequence(lines, oldLines);\n    if (position < 0) {\n      throw new CapabilityError(\"code-execution\", \"Diff hunk does not match current file\", {\n        suggestion:\n          \"Re-read the file and generate a fresh unified diff against the latest content.\",\n        metadata: { oldLines },\n        statusCode: 409,\n      });\n    }\n    lines.splice(position, oldLines.length, ...newLines);\n  }\n\n  return `${lines.join(\"\\n\")}${originalHadTrailingNewline ? \"\\n\" : \"\"}`;\n}\n\nfunction findSubsequence(haystack: readonly string[], needle: readonly string[]): number {\n  if (needle.length === 0) return 0;\n  for (let start = 0; start <= haystack.length - needle.length; start += 1) {\n    let matched = true;\n    for (let offset = 0; offset < needle.length; offset += 1) {\n      if (haystack[start + offset] !== needle[offset]) {\n        matched = false;\n        break;\n      }\n    }\n    if (matched) return start;\n  }\n  return -1;\n}\n"],"mappings":";AAAA,SAAS,OAAO,UAAU,iBAAiB;AAC3C,SAAS,SAAS,MAAM,iBAAiB;AACzC,SAAS,uBAAuB;AAChC;AAAA,EAIE;AAAA,OACK;AAUA,IAAM,gBAAuC;AAAA,EAClD,EAAE,OAAO,eAAe,iBAAiB,UAAU,QAAQ,gCAAgC;AAAA,EAC3F;AAAA,IACE,OAAO;AAAA,IACP,iBAAiB;AAAA,IACjB,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,iBAAiB;AAAA,IACjB,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,iBAAiB;AAAA,IACjB,QAAQ;AAAA,EACV;AAAA,EACA,EAAE,OAAO,iBAAiB,iBAAiB,oBAAoB,QAAQ,sBAAsB;AAC/F;AA2GA,SAAS,UAAU,OAAO,QAAQ,IAAI,GAAW;AAC/C,SAAO,KAAK,MAAM,YAAY,SAAS,sBAAsB;AAC/D;AAEA,eAAe,YAAY,MAAc,OAA+C;AACtF,QAAM,OAAO,UAAU,IAAI;AAC3B,QAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,QAAM,UAAU,MAAM,GAAG,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,IACvF,MAAM;AAAA,EACR,CAAC;AACH;AAEA,eAAsB,mBAAmB,OAAO,QAAQ,IAAI,GAAG,QAAQ,IAAwB;AAC7F,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,UAAU,IAAI,GAAG,MAAM;AAClD,WAAO,IACJ,KAAK,EACL,MAAM,IAAI,EACV,OAAO,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,CAAY;AAAA,EAC9C,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,cAAc,UAA8B,UAAsC;AACzF,QAAM,WAAW,YAAY;AAC7B,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,gBAAgB,kBAAkB,0CAA0C;AAAA,MACpF,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAAwB;AAC5C,SAAO,OAAO,YAAY,GAAG,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AACrE;AAEA,SAAS,YAAY,SAAiB,MAA2B;AAC/D,SAAO,OAAO,KAAK,UAAU,WAAW,QAAQ,WAAW,KAAK,KAAK,IAAI,KAAK,MAAM,KAAK,OAAO;AAClG;AAEA,SAAS,kBAAkB,MAAc,MAAsB;AAC7D,QAAM,aAAa,UAAU,IAAI;AACjC,MAAI,WAAW,WAAW,GAAG,KAAK,WAAW,SAAS,IAAI,GAAG;AAC3D,UAAM,IAAI,gBAAgB,kBAAkB,kCAAkC;AAAA,MAC5E,YAAY;AAAA,MACZ,UAAU,EAAE,KAAK;AAAA,MACjB,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AACA,SAAO,KAAK,MAAM,UAAU;AAC9B;AAEO,IAAM,eAAN,MAAmB;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,UAA+B,CAAC,GAAG;AAC7C,SAAK,YAAY,QAAQ;AACzB,SAAK,iBAAiB,QAAQ,iBAAiB,QAAQ,IAAI;AAC3D,SAAK,aAAa,QAAQ,aAAa,QAAQ,IAAI;AACnD,SAAK,kBAAkB,QAAQ,kBAAkB,eAAe,WAAW;AAC3E,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,MAAM,IAAI,QAAsC;AAC9C,UAAM,WAAW,cAAc,OAAO,UAAU,KAAK,SAAS;AAC9D,UAAM,WAAW,aAAa,MAAM;AACpC,UAAM,UAAU,KAAK,IAAI;AACzB,QAAI;AAEJ,QAAI;AACF,oBAAc,MAAM,KAAK,eAAe,EAAE,GAAG,QAAQ,SAAS,GAAG,UAAU,OAAO;AAAA,IACpF,SAAS,OAAO;AACd,oBAAc,iBAAiB,UAAU,KAAK;AAAA,IAChD;AAEA,UAAM,YAAY,KAAK,YAAY,EAAE,MAAM,UAAU,UAAU,QAAQ,YAAY,CAAC;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAIH;AACD,UAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;AAClD,UAAM,YAAY,KAAK,YAAY,EAAE,MAAM,UAAU,QAAQ,CAAC;AAC9D,WAAO,EAAE,YAAY,kBAAkB,SAAS,UAAU,KAAK,QAAQ,OAAO;AAAA,EAChF;AAAA,EAEA,SAAgC;AAC9B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,eACJ,QACA,UACA,SACsB;AACtB,YAAQ,OAAO,MAAM;AAAA,MACnB,KAAK;AACH,eAAO,KAAK,UAAU,QAAQ,UAAU,OAAO;AAAA,MACjD,KAAK;AACH,eAAO,KAAK,UAAU,QAAQ,QAAQ;AAAA,MACxC,KAAK;AACH,eAAO,KAAK,UAAU,QAAQ,QAAQ;AAAA,MACxC,KAAK;AACH,eAAO,KAAK,QAAQ,QAAQ,UAAU,OAAO;AAAA,MAC/C,KAAK;AACH,eAAO;AAAA,UACL,MAAM;AAAA,UACN;AAAA,UACA,MAAM;AAAA,UACN,SAAS;AAAA,UACT,YAAY;AAAA,QACd;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,QACA,UACA,SACsB;AACtB,UAAM,WAAW,KAAK,kBAAkB,OAAO,GAAG;AAClD,QAAI,YAAY,CAAC,OAAO,UAAU;AAChC,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,QACA,MAAM;AAAA,QACN,SAAS,8BAA8B,SAAS,MAAM;AAAA,QACtD,YACE;AAAA,MACJ;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,KAAK,gBAAgB,KAAK;AAAA,MAC7C,KAAK,OAAO;AAAA,MACZ,UAAU,OAAO;AAAA,MACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,aAAa,SAAY,EAAE,OAAO,EAAE,WAAW,OAAO,SAAS,EAAE,IAAI,CAAC;AAAA,IACnF,CAAC;AACD,UAAM,KAAK,WAAW,OAAO;AAAA,MAC3B,SAAS,OAAO,YAAY;AAAA,MAC5B,MAAM;AAAA,MACN,UAAU,CAAC;AAAA,MACX,QAAQ;AAAA,IACV,CAAC;AACD,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,QAAQ,OAAO;AAAA,MACf,QAAQ;AAAA,MACR,UAAU,OAAO;AAAA,MACjB,YAAY,KAAK,IAAI,IAAI;AAAA,MACzB,YAAY,OAAO;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,QACA,UACA,SACsB;AACtB,UAAM,UAAU,OAAO,OAAO,EAAE,GAAG,OAAO,MAAM,SAAS,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE;AACzF,WAAO,KAAK;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,KAAK;AAAA,QACL,KAAK,KAAK;AAAA,QACV,UAAU,OAAO;AAAA,QACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,QACvD,GAAI,OAAO,aAAa,SAAY,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,QACA,UACsB;AACtB,QAAI;AACF,YAAM,UAAU,MAAM,SAAS,kBAAkB,KAAK,gBAAgB,OAAO,IAAI,GAAG,MAAM;AAC1F,YAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,YAAM,QAAQ,OAAO,YAAY,CAAC,KAAK;AACvC,YAAM,MAAM,OAAO,YAAY,CAAC,KAAK,MAAM;AAC3C,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,QACA,MAAM,OAAO;AAAA,QACb,SAAS,MAAM,MAAM,QAAQ,GAAG,GAAG,EAAE,KAAK,IAAI;AAAA,QAC9C,OAAO,CAAC,OAAO,GAAG;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AACd,aAAO,iBAAiB,UAAU,OAAO;AAAA,QACvC,MAAM;AAAA,QACN,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,QACA,UACsB;AACtB,UAAM,OAAO,kBAAkB,KAAK,gBAAgB,OAAO,IAAI;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,MAAM,MAAM;AAC1C,YAAM,QAAQ,iBAAiB,QAAQ,OAAO,IAAI;AAClD,YAAM,UAAU,MAAM,OAAO,MAAM;AACnC,YAAM,KAAK,WAAW,OAAO;AAAA,QAC3B,SAAS,OAAO,YAAY;AAAA,QAC5B,MAAM;AAAA,QACN,UAAU,CAAC,OAAO,IAAI;AAAA,QACtB,QAAQ;AAAA,QACR,UAAU,EAAE,CAAC,OAAO,IAAI,GAAG,MAAM;AAAA,MACnC,CAAC;AACD,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,QACA,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,WAAW,CAAC;AAAA,MACd;AAAA,IACF,SAAS,OAAO;AACd,aAAO,iBAAiB,UAAU,OAAO;AAAA,QACvC,MAAM;AAAA,QACN,YACE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,kBAAkB,SAAoC;AACpD,WACE,KAAK,QAAQ,KAAK,CAAC,SAAS,KAAK,oBAAoB,WAAW,YAAY,SAAS,IAAI,CAAC,KAC1F;AAAA,EAEJ;AACF;AAEA,SAAS,iBACP,UACA,OACA,WAAqE,CAAC,GACpD;AAClB,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,MACE,SAAS,SAAS,iBAAiB,kBAAkB,oBAAoB;AAAA,IAC3E;AAAA,IACA,YACE,SAAS,eACR,iBAAiB,mBAAmB,MAAM,aACvC,MAAM,aACN;AAAA,EACR;AACF;AAEO,SAAS,iBAAiB,UAAkB,MAAsB;AACvE,QAAM,6BAA6B,SAAS,SAAS,IAAI;AACzD,MAAI,QAAQ,6BAA6B,SAAS,MAAM,GAAG,EAAE,EAAE,MAAM,IAAI,IAAI,SAAS,MAAM,IAAI;AAChG,MAAI,aAAa,GAAI,SAAQ,CAAC;AAE9B,QAAM,YAAY,KAAK,MAAM,IAAI;AACjC,MAAI,QAAQ;AACZ,SAAO,QAAQ,UAAU,QAAQ;AAC/B,UAAM,OAAO,UAAU,KAAK,KAAK;AACjC,QAAI,CAAC,KAAK,WAAW,IAAI,GAAG;AAC1B,eAAS;AACT;AAAA,IACF;AACA,aAAS;AACT,UAAM,WAAqB,CAAC;AAC5B,UAAM,WAAqB,CAAC;AAC5B,WAAO,QAAQ,UAAU,UAAU,EAAE,UAAU,KAAK,KAAK,IAAI,WAAW,IAAI,GAAG;AAC7E,YAAM,UAAU,UAAU,KAAK,KAAK;AACpC,UAAI,QAAQ,WAAW,eAAe,GAAG;AACvC,iBAAS;AACT;AAAA,MACF;AACA,UAAI,QAAQ,WAAW,GAAG,EAAG,UAAS,KAAK,QAAQ,MAAM,CAAC,CAAC;AAAA,eAClD,QAAQ,WAAW,GAAG,EAAG,UAAS,KAAK,QAAQ,MAAM,CAAC,CAAC;AAAA,eACvD,QAAQ,WAAW,GAAG,GAAG;AAChC,iBAAS,KAAK,QAAQ,MAAM,CAAC,CAAC;AAC9B,iBAAS,KAAK,QAAQ,MAAM,CAAC,CAAC;AAAA,MAChC;AACA,eAAS;AAAA,IACX;AACA,UAAM,WAAW,gBAAgB,OAAO,QAAQ;AAChD,QAAI,WAAW,GAAG;AAChB,YAAM,IAAI,gBAAgB,kBAAkB,yCAAyC;AAAA,QACnF,YACE;AAAA,QACF,UAAU,EAAE,SAAS;AAAA,QACrB,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AACA,UAAM,OAAO,UAAU,SAAS,QAAQ,GAAG,QAAQ;AAAA,EACrD;AAEA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC,GAAG,6BAA6B,OAAO,EAAE;AACrE;AAEA,SAAS,gBAAgB,UAA6B,QAAmC;AACvF,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,WAAS,QAAQ,GAAG,SAAS,SAAS,SAAS,OAAO,QAAQ,SAAS,GAAG;AACxE,QAAI,UAAU;AACd,aAAS,SAAS,GAAG,SAAS,OAAO,QAAQ,UAAU,GAAG;AACxD,UAAI,SAAS,QAAQ,MAAM,MAAM,OAAO,MAAM,GAAG;AAC/C,kBAAU;AACV;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAS,QAAO;AAAA,EACtB;AACA,SAAO;AACT;","names":[]}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/cli.js

@@ -0,0 +1,51 @@
+import {
+  CodeExecutor,
+  readExecutionDebug
+} from "./chunk-26GNZJ27.js";
+
+// src/cli.ts
+var command = process.argv[2] ?? "doctor";
+var exec = new CodeExecutor({ tenantId: process.env.NEBUTRA_TENANT_ID ?? "local" });
+if (command === "doctor") {
+  process.stdout.write(`${JSON.stringify(await exec.doctor(), null, 2)}
+`);
+} else if (command === "debug") {
+  process.stdout.write(
+    `${JSON.stringify({ capability: "code-execution", entries: await readExecutionDebug() }, null, 2)}
+`
+  );
+} else if (command === "policy") {
+  const rules = exec.policy().map((rule) => ({
+    ...rule,
+    match: rule.match instanceof RegExp ? rule.match.source : rule.match
+  }));
+  process.stdout.write(`${JSON.stringify({ capability: "code-execution", rules }, null, 2)}
+`);
+} else if (command === "replay") {
+  const actionId = process.argv[3];
+  const entries = await readExecutionDebug(process.cwd(), 100);
+  const entry = entries.find((item) => {
+    if (!item || typeof item !== "object") return false;
+    const value = item;
+    return value.action?.actionId === actionId || value.observation?.actionId === actionId;
+  });
+  process.stdout.write(
+    `${JSON.stringify(
+      {
+        capability: "code-execution",
+        actionId,
+        replayable: Boolean(entry),
+        entry,
+        suggestion: entry ? "Use the stored action payload as the deterministic replay input." : "Run `pnpm exec:debug` and choose an action id from the recent log."
+      },
+      null,
+      2
+    )}
+`
+  );
+} else {
+  process.stderr.write(`Unknown code-execution command: ${command}
+`);
+  process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import { CodeExecutor, readExecutionDebug } from \"./index\";\n\nconst command = process.argv[2] ?? \"doctor\";\nconst exec = new CodeExecutor({ tenantId: process.env.NEBUTRA_TENANT_ID ?? \"local\" });\n\nif (command === \"doctor\") {\n  process.stdout.write(`${JSON.stringify(await exec.doctor(), null, 2)}\\n`);\n} else if (command === \"debug\") {\n  process.stdout.write(\n    `${JSON.stringify({ capability: \"code-execution\", entries: await readExecutionDebug() }, null, 2)}\\n`,\n  );\n} else if (command === \"policy\") {\n  const rules = exec.policy().map((rule) => ({\n    ...rule,\n    match: rule.match instanceof RegExp ? rule.match.source : rule.match,\n  }));\n  process.stdout.write(`${JSON.stringify({ capability: \"code-execution\", rules }, null, 2)}\\n`);\n} else if (command === \"replay\") {\n  const actionId = process.argv[3];\n  const entries = await readExecutionDebug(process.cwd(), 100);\n  const entry = entries.find((item) => {\n    if (!item || typeof item !== \"object\") return false;\n    const value = item as { action?: { actionId?: string }; observation?: { actionId?: string } };\n    return value.action?.actionId === actionId || value.observation?.actionId === actionId;\n  });\n  process.stdout.write(\n    `${JSON.stringify(\n      {\n        capability: \"code-execution\",\n        actionId,\n        replayable: Boolean(entry),\n        entry,\n        suggestion: entry\n          ? \"Use the stored action payload as the deterministic replay input.\"\n          : \"Run `pnpm exec:debug` and choose an action id from the recent log.\",\n      },\n      null,\n      2,\n    )}\\n`,\n  );\n} else {\n  process.stderr.write(`Unknown code-execution command: ${command}\\n`);\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;AAEA,IAAM,UAAU,QAAQ,KAAK,CAAC,KAAK;AACnC,IAAM,OAAO,IAAI,aAAa,EAAE,UAAU,QAAQ,IAAI,qBAAqB,QAAQ,CAAC;AAEpF,IAAI,YAAY,UAAU;AACxB,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,CAAC;AAAA,CAAI;AAC1E,WAAW,YAAY,SAAS;AAC9B,UAAQ,OAAO;AAAA,IACb,GAAG,KAAK,UAAU,EAAE,YAAY,kBAAkB,SAAS,MAAM,mBAAmB,EAAE,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,EACnG;AACF,WAAW,YAAY,UAAU;AAC/B,QAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,CAAC,UAAU;AAAA,IACzC,GAAG;AAAA,IACH,OAAO,KAAK,iBAAiB,SAAS,KAAK,MAAM,SAAS,KAAK;AAAA,EACjE,EAAE;AACF,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,YAAY,kBAAkB,MAAM,GAAG,MAAM,CAAC,CAAC;AAAA,CAAI;AAC9F,WAAW,YAAY,UAAU;AAC/B,QAAM,WAAW,QAAQ,KAAK,CAAC;AAC/B,QAAM,UAAU,MAAM,mBAAmB,QAAQ,IAAI,GAAG,GAAG;AAC3D,QAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS;AACnC,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,QAAQ;AACd,WAAO,MAAM,QAAQ,aAAa,YAAY,MAAM,aAAa,aAAa;AAAA,EAChF,CAAC;AACD,UAAQ,OAAO;AAAA,IACb,GAAG,KAAK;AAAA,MACN;AAAA,QACE,YAAY;AAAA,QACZ;AAAA,QACA,YAAY,QAAQ,KAAK;AAAA,QACzB;AAAA,QACA,YAAY,QACR,qEACA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA;AAAA,EACH;AACF,OAAO;AACL,UAAQ,OAAO,MAAM,mCAAmC,OAAO;AAAA,CAAI;AACnE,UAAQ,WAAW;AACrB;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,110 @@
+import { ExecRequest, ExecResponse, SandboxHealth } from '@nebutra/sandbox-runtime';
+
+type ApprovalMode = "always" | "once_per_session" | "never";
+interface PolicyRule {
+    readonly match: string | RegExp;
+    readonly requireApproval: ApprovalMode;
+    readonly reason: string;
+}
+declare const DefaultPolicy: readonly PolicyRule[];
+interface BaseAction {
+    readonly tenantId?: string;
+    readonly threadId?: string;
+    readonly actionId?: string;
+    readonly approved?: boolean;
+}
+interface ShellAction extends BaseAction {
+    readonly type: "shell";
+    readonly cmd: string;
+    readonly cwd: string;
+    readonly timeoutS?: number;
+}
+interface ReadAction extends BaseAction {
+    readonly type: "read";
+    readonly path: string;
+    readonly lineRange?: readonly [number, number];
+}
+interface EditAction extends BaseAction {
+    readonly type: "edit";
+    readonly path: string;
+    readonly diff: string;
+    readonly lineRange?: readonly [number, number];
+}
+interface IPythonAction extends BaseAction {
+    readonly type: "ipython";
+    readonly code: string;
+    readonly kernelId: string;
+}
+interface GitAction extends BaseAction {
+    readonly type: "git";
+    readonly op: "status" | "log" | "push";
+    readonly args?: readonly string[];
+}
+type Action = ShellAction | ReadAction | EditAction | IPythonAction | GitAction;
+interface ShellOutputObservation {
+    readonly type: "shell_output";
+    readonly actionId: string;
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+    readonly durationMs: number;
+    readonly executedOn: string;
+}
+interface FileContentObservation {
+    readonly type: "file_content";
+    readonly actionId: string;
+    readonly path: string;
+    readonly content: string;
+    readonly lines: readonly [number, number];
+}
+interface EditAppliedObservation {
+    readonly type: "edit_applied";
+    readonly actionId: string;
+    readonly path: string;
+    readonly diff: string;
+    readonly conflicts: readonly string[];
+}
+interface ErrorObservation {
+    readonly type: "error";
+    readonly actionId: string;
+    readonly kind: string;
+    readonly message: string;
+    readonly suggestion: string;
+}
+type Observation = ShellOutputObservation | FileContentObservation | EditAppliedObservation | ErrorObservation;
+interface SandboxRuntimeLike {
+    exec(request: ExecRequest): Promise<ExecResponse>;
+    doctor(): Promise<readonly SandboxHealth[]>;
+}
+interface EventLogLike {
+    commit(event: {
+        traceId: string;
+        kind: "tool_call" | "content_write" | "sandbox_exec";
+        affected: readonly string[];
+        parent: string | null;
+        snapshot?: Record<string, string>;
+    }): Promise<string>;
+}
+interface CodeExecutorOptions {
+    readonly tenantId?: string;
+    readonly workspaceRoot?: string;
+    readonly debugRoot?: string;
+    readonly sandboxRuntime?: SandboxRuntimeLike;
+    readonly eventLog?: EventLogLike;
+    readonly policy?: readonly PolicyRule[];
+}
+declare function readExecutionDebug(root?: string, limit?: number): Promise<unknown[]>;
+declare class CodeExecutor {
+    #private;
+    constructor(options?: CodeExecutorOptions);
+    run(action: Action): Promise<Observation>;
+    doctor(): Promise<{
+        readonly capability: "code-execution";
+        readonly sandbox: readonly SandboxHealth[];
+        readonly policies: number;
+    }>;
+    policy(): readonly PolicyRule[];
+}
+declare function applyUnifiedDiff(original: string, diff: string): string;
+
+export { type Action, type ApprovalMode, type BaseAction, CodeExecutor, type CodeExecutorOptions, DefaultPolicy, type EditAction, type EditAppliedObservation, type ErrorObservation, type EventLogLike, type FileContentObservation, type GitAction, type IPythonAction, type Observation, type PolicyRule, type ReadAction, type SandboxRuntimeLike, type ShellAction, type ShellOutputObservation, applyUnifiedDiff, readExecutionDebug };

package/dist/index.js

@@ -0,0 +1,13 @@
+import {
+  CodeExecutor,
+  DefaultPolicy,
+  applyUnifiedDiff,
+  readExecutionDebug
+} from "./chunk-26GNZJ27.js";
+export {
+  CodeExecutor,
+  DefaultPolicy,
+  applyUnifiedDiff,
+  readExecutionDebug
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/examples/edit-by-diff.ts

@@ -0,0 +1,17 @@
+import { CodeExecutor } from "@nebutra/code-execution";
+
+const exec = new CodeExecutor({ tenantId: "local", workspaceRoot: process.cwd() });
+const observation = await exec.run({
+  type: "edit",
+  tenantId: "local",
+  path: "scratch/example.txt",
+  diff: [
+    "--- a/scratch/example.txt",
+    "+++ b/scratch/example.txt",
+    "@@ -1 +1 @@",
+    "-old",
+    "+new",
+    "",
+  ].join("\n"),
+});
+process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/examples/policy.ts

@@ -0,0 +1,10 @@
+import { CodeExecutor } from "@nebutra/code-execution";
+
+const exec = new CodeExecutor({ tenantId: "local" });
+const observation = await exec.run({
+  type: "shell",
+  tenantId: "local",
+  cwd: process.cwd(),
+  cmd: "git push origin main",
+});
+process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/examples/shell.ts

@@ -0,0 +1,11 @@
+import { CodeExecutor } from "@nebutra/code-execution";
+
+const exec = new CodeExecutor({ tenantId: "local" });
+const observation = await exec.run({
+  type: "shell",
+  tenantId: "local",
+  cwd: process.cwd(),
+  cmd: "echo sandbox ok",
+  timeoutS: 5,
+});
+process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@nebutra/code-execution",
+  "version": "0.1.0",
+  "description": "Action and observation execution layer backed by sandbox-runtime",
+  "private": false,
+  "license": "MIT",
+  "type": "module",
+  "nebutra": {
+    "status": "wip",
+    "productionReady": false,
+    "surface": "execution-capability",
+    "requires": [
+      "@nebutra/sandbox-runtime for shell and git execution",
+      "@nebutra/event-log for standalone action audit"
+    ],
+    "gaps": [
+      "Notebook kernel execution is adapter-gated",
+      "Remote workspace providers depend on sandbox-runtime configuration",
+      "Approval UI is surfaced as observations; GUI handoff is not wired here"
+    ],
+    "featureId": "code-execution",
+    "category": "ai",
+    "summary": "Shell, read, edit-by-diff, policy, replay, doctor, and debug tools"
+  },
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "dependencies": {
+    "@nebutra/errors": "0.1.0",
+    "@nebutra/event-log": "0.1.0",
+    "@nebutra/sandbox-runtime": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.15",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.4"
+  },
+  "homepage": "https://github.com/Nebutra/Nebutra-Sailor/tree/main/packages/ai/code-execution#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Nebutra/Nebutra-Sailor.git",
+    "directory": "packages/ai/code-execution"
+  },
+  "bugs": {
+    "url": "https://github.com/Nebutra/Nebutra-Sailor/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}