@nebutra/code-execution 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @nebutra/code-execution
 
+## 0.1.4
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @nebutra/capability-kit@2.0.0
+  - @nebutra/errors@2.0.0
+  - @nebutra/event-log@2.0.0
+  - @nebutra/execution-policy@2.0.0
+  - @nebutra/sandbox-runtime@2.0.0
+
 ## 0.1.2
 
 ### Patch Changes

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@nebutra/code-execution",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Action and observation execution layer backed by sandbox-runtime",
   "private": false,
   "license": "MIT",
   "type": "module",
   "nebutra": {
+    "graph": "labs",
     "status": "wip",
     "productionReady": false,
     "surface": "execution-capability",
@@ -22,17 +23,21 @@
     "category": "ai",
     "summary": "Shell, read, edit-by-diff, policy, replay, doctor, and debug tools"
   },
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
   },
   "dependencies": {
-    "@nebutra/capability-kit": "0.2.2",
-    "@nebutra/event-log": "0.1.2",
-    "@nebutra/execution-policy": "0.1.2",
-    "@nebutra/sandbox-runtime": "0.1.2",
-    "@nebutra/errors": "0.1.2"
+    "@nebutra/capability-kit": "2.0.0",
+    "@nebutra/errors": "2.0.0",
+    "@nebutra/event-log": "2.0.0",
+    "@nebutra/execution-policy": "2.0.0",
+    "@nebutra/sandbox-runtime": "2.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",
@@ -52,6 +57,12 @@
   "publishConfig": {
     "access": "public"
   },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
   "scripts": {
     "build": "tsup",
     "test": "vitest run",

package/.nebutra/debug/code-execution.jsonl

@@ -1,30 +0,0 @@
-{"at":"2026-05-17T18:26:14.046Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpa3w97h","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":0,"executedOn":"test_sandbox"}}
-{"at":"2026-05-17T18:26:14.048Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpa3w97j","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-17T18:26:14.049Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpa3w97k","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-17T18:30:10.786Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpa41bvm","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":0,"executedOn":"test_sandbox"}}
-{"at":"2026-05-17T18:30:10.788Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpa41bvo","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-17T18:30:10.789Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpa41bvp","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-17T18:36:14.801Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpa494r4","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-17T18:36:14.803Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpa494r7","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-17T18:36:14.805Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpa494r8","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-18T05:20:19.961Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpar9fjs","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-18T05:20:19.966Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpar9fjy","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-18T05:20:19.970Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpar9fk0","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-18T05:41:12.696Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpas0a5z","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-18T05:41:12.701Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpas0a64","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-18T05:41:12.704Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpas0a67","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-18T05:42:00.492Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpas1b1m","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-18T05:42:00.503Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpas1b1y","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-18T05:42:00.511Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpas1b26","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-19T05:21:57.551Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpc6rdim","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-19T05:21:57.554Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpc6rdiq","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-19T05:21:57.556Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpc6rdir","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-19T05:25:36.159Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpc6w271","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-19T05:25:36.163Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpc6w276","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-19T05:25:36.169Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpc6w27c","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-05-30T21:07:14.340Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mpsuddsz","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-05-30T21:07:14.344Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mpsuddt4","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-05-30T21:07:14.354Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mpsuddtc","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}
-{"at":"2026-07-01T01:40:40.888Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"pnpm test","cwd":"/workspace","timeoutS":60,"tenantId":"tenant_a"},"observation":{"type":"shell_output","actionId":"shell_mr1esfue","stdout":"ran pnpm test for tenant_a","stderr":"","exitCode":0,"durationMs":1,"executedOn":"test_sandbox"}}
-{"at":"2026-07-01T01:40:40.939Z","type":"action","tenantId":"tenant_a","action":{"type":"shell","cmd":"rm -rf build","cwd":"/workspace","tenantId":"tenant_a"},"observation":{"type":"error","actionId":"shell_mr1esfum","kind":"ApprovalRequired","message":"Command requires approval: destructive recursive removal","suggestion":"Ask the user for explicit approval, then retry the action with approved: true."}}
-{"at":"2026-07-01T01:40:40.955Z","type":"action","tenantId":"tenant_a","action":{"type":"edit","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","tenantId":"tenant_a"},"observation":{"type":"edit_applied","actionId":"edit_mr1esfw7","path":"main.ts","diff":"--- a/main.ts\n+++ b/main.ts\n@@ -1,2 +1,2 @@\n-const value = 1;\n+const value = 2;\n console.log(value);\n","conflicts":[]}}

package/.turbo/turbo-build.log

@@ -1,22 +0,0 @@
-
-> @nebutra/code-execution@0.1.2 build /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/code-execution
-> tsup
-
-CLI Building entry: src/cli.ts, src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/code-execution/tsup.config.ts
-CLI Target: es2022
-CLI Cleaning output folder
-ESM Build start
-ESM dist/index.js              232.00 B
-ESM dist/cli.js                1.59 KB
-ESM dist/chunk-LLPO5OG2.js     9.10 KB
-ESM dist/index.js.map          71.00 B
-ESM dist/cli.js.map            2.87 KB
-ESM dist/chunk-LLPO5OG2.js.map 19.58 KB
-ESM ⚡️ Build success in 40ms
-DTS Build start
-DTS ⚡️ Build success in 2309ms
-DTS dist/cli.d.ts   13.00 B
-DTS dist/index.d.ts 3.79 KB

package/.turbo/turbo-test.log

@@ -1,14 +0,0 @@
-
-> @nebutra/code-execution@0.1.1 test /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/code-execution
-> vitest run
-
-
- RUN  v4.1.4 /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/code-execution
-
- ✓ src/index.test.ts (5 tests) 234ms
-
- Test Files  1 passed (1)
-      Tests  5 passed (5)
-   Start at  09:40:38
-   Duration  2.24s (transform 590ms, setup 0ms, import 734ms, tests 234ms, environment 0ms)
-

package/.turbo/turbo-typecheck.log

@@ -1,4 +0,0 @@
-
-> @nebutra/code-execution@0.1.2 typecheck /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/code-execution
-> tsc --noEmit
-

package/examples/edit-by-diff.ts

@@ -1,17 +0,0 @@
-import { CodeExecutor } from "@nebutra/code-execution";
-
-const exec = new CodeExecutor({ tenantId: "local", workspaceRoot: process.cwd() });
-const observation = await exec.run({
-  type: "edit",
-  tenantId: "local",
-  path: "scratch/example.txt",
-  diff: [
-    "--- a/scratch/example.txt",
-    "+++ b/scratch/example.txt",
-    "@@ -1 +1 @@",
-    "-old",
-    "+new",
-    "",
-  ].join("\n"),
-});
-process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/examples/policy.ts

@@ -1,10 +0,0 @@
-import { CodeExecutor } from "@nebutra/code-execution";
-
-const exec = new CodeExecutor({ tenantId: "local" });
-const observation = await exec.run({
-  type: "shell",
-  tenantId: "local",
-  cwd: process.cwd(),
-  cmd: "git push origin main",
-});
-process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/examples/shell.ts

@@ -1,11 +0,0 @@
-import { CodeExecutor } from "@nebutra/code-execution";
-
-const exec = new CodeExecutor({ tenantId: "local" });
-const observation = await exec.run({
-  type: "shell",
-  tenantId: "local",
-  cwd: process.cwd(),
-  cmd: "echo sandbox ok",
-  timeoutS: 5,
-});
-process.stdout.write(`${JSON.stringify(observation, null, 2)}\n`);

package/src/cli.ts

@@ -1,44 +0,0 @@
-import { CodeExecutor, readExecutionDebug } from "./index";
-
-const command = process.argv[2] ?? "doctor";
-const exec = new CodeExecutor({ tenantId: process.env.NEBUTRA_TENANT_ID ?? "local" });
-
-if (command === "doctor") {
-  process.stdout.write(`${JSON.stringify(await exec.doctor(), null, 2)}\n`);
-} else if (command === "debug") {
-  process.stdout.write(
-    `${JSON.stringify({ capability: "code-execution", entries: await readExecutionDebug() }, null, 2)}\n`,
-  );
-} else if (command === "policy") {
-  const rules = exec.policy().map((rule) => ({
-    ...rule,
-    match: rule.match instanceof RegExp ? rule.match.source : rule.match,
-  }));
-  process.stdout.write(`${JSON.stringify({ capability: "code-execution", rules }, null, 2)}\n`);
-} else if (command === "replay") {
-  const actionId = process.argv[3];
-  const entries = await readExecutionDebug(process.cwd(), 100);
-  const entry = entries.find((item) => {
-    if (!item || typeof item !== "object") return false;
-    const value = item as { action?: { actionId?: string }; observation?: { actionId?: string } };
-    return value.action?.actionId === actionId || value.observation?.actionId === actionId;
-  });
-  process.stdout.write(
-    `${JSON.stringify(
-      {
-        capability: "code-execution",
-        actionId,
-        replayable: Boolean(entry),
-        entry,
-        suggestion: entry
-          ? "Use the stored action payload as the deterministic replay input."
-          : "Run `pnpm exec:debug` and choose an action id from the recent log.",
-      },
-      null,
-      2,
-    )}\n`,
-  );
-} else {
-  process.stderr.write(`Unknown code-execution command: ${command}\n`);
-  process.exitCode = 1;
-}

package/src/index.test.ts

@@ -1,110 +0,0 @@
-import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, it } from "vitest";
-import { CodeExecutor, DefaultPolicy, readExecutionDebug } from "./index";
-
-let root: string | undefined;
-
-afterEach(async () => {
-  if (root) await rm(root, { recursive: true, force: true });
-  root = undefined;
-});
-
-describe("CodeExecutor", () => {
-  it("runs shell actions through sandbox-runtime with tenant context", async () => {
-    const exec = new CodeExecutor({
-      tenantId: "tenant_a",
-      sandboxRuntime: {
-        async exec(request) {
-          return {
-            exitCode: 0,
-            aggregatedOutput: `ran ${request.cmd} for ${request.tenantId}`,
-            executedOn: "test_sandbox",
-          };
-        },
-        async doctor() {
-          return [{ provider: "test_sandbox", ok: true }];
-        },
-      },
-    });
-
-    await expect(
-      exec.run({
-        type: "shell",
-        cmd: "pnpm test",
-        cwd: "/workspace",
-        timeoutS: 60,
-        tenantId: "tenant_a",
-      }),
-    ).resolves.toMatchObject({
-      type: "shell_output",
-      stdout: "ran pnpm test for tenant_a",
-      exitCode: 0,
-      executedOn: "test_sandbox",
-    });
-  });
-
-  it("blocks destructive shell commands until approval is explicit", async () => {
-    const exec = new CodeExecutor({
-      tenantId: "tenant_a",
-      sandboxRuntime: {
-        async exec() {
-          throw new Error("should not run");
-        },
-        async doctor() {
-          return [];
-        },
-      },
-      policy: DefaultPolicy,
-    });
-
-    await expect(
-      exec.run({ type: "shell", cmd: "rm -rf build", cwd: "/workspace", tenantId: "tenant_a" }),
-    ).resolves.toMatchObject({
-      type: "error",
-      kind: "ApprovalRequired",
-      suggestion: expect.stringContaining("approval"),
-    });
-  });
-
-  it("applies edits by unified diff instead of overwrite", async () => {
-    root = await mkdtemp(join(tmpdir(), "code-execution-"));
-    await writeFile(join(root, "main.ts"), "const value = 1;\nconsole.log(value);\n", "utf8");
-    const exec = new CodeExecutor({ tenantId: "tenant_a", workspaceRoot: root });
-
-    await expect(
-      exec.run({
-        type: "edit",
-        path: "main.ts",
-        diff: [
-          "--- a/main.ts",
-          "+++ b/main.ts",
-          "@@ -1,2 +1,2 @@",
-          "-const value = 1;",
-          "+const value = 2;",
-          " console.log(value);",
-          "",
-        ].join("\n"),
-        tenantId: "tenant_a",
-      }),
-    ).resolves.toMatchObject({ type: "edit_applied", path: "main.ts" });
-
-    await expect(readFile(join(root, "main.ts"), "utf8")).resolves.toContain("value = 2");
-  });
-
-  it("requires tenant context for every action", async () => {
-    const exec = new CodeExecutor();
-    await expect(exec.run({ type: "read", path: "main.ts" })).rejects.toMatchObject({
-      capability: "code-execution",
-      suggestion: expect.stringContaining("tenantId"),
-    });
-  });
-
-  it("writes replayable debug entries", async () => {
-    root = await mkdtemp(join(tmpdir(), "code-execution-"));
-    const exec = new CodeExecutor({ tenantId: "tenant_a", debugRoot: root });
-    await exec.run({ type: "read", path: "missing.ts", tenantId: "tenant_a" });
-    expect(await readExecutionDebug(root)).toEqual(expect.any(Array));
-  });
-});

package/src/index.ts

@@ -1,436 +0,0 @@
-import { readFile, writeFile } from "node:fs/promises";
-import { join, normalize } from "node:path";
-import { requireCapabilityTenant } from "@nebutra/capability-kit";
-import { appendCapabilityDebug, readCapabilityDebug } from "@nebutra/capability-kit/debug";
-import { CapabilityError } from "@nebutra/errors";
-import {
-  DEFAULT_SHELL_APPROVAL_RULES,
-  type ShellApprovalMode,
-  type ShellApprovalRule,
-  shellApprovalRequired,
-} from "@nebutra/execution-policy";
-import {
-  type ExecRequest,
-  type ExecResponse,
-  type SandboxHealth,
-  SandboxRuntime,
-} from "@nebutra/sandbox-runtime";
-
-export type ApprovalMode = ShellApprovalMode;
-export type PolicyRule = ShellApprovalRule;
-export const DefaultPolicy = DEFAULT_SHELL_APPROVAL_RULES;
-
-export interface BaseAction {
-  readonly tenantId?: string;
-  readonly threadId?: string;
-  readonly actionId?: string;
-  readonly approved?: boolean;
-}
-
-export interface ShellAction extends BaseAction {
-  readonly type: "shell";
-  readonly cmd: string;
-  readonly cwd: string;
-  readonly timeoutS?: number;
-}
-
-export interface ReadAction extends BaseAction {
-  readonly type: "read";
-  readonly path: string;
-  readonly lineRange?: readonly [number, number];
-}
-
-export interface EditAction extends BaseAction {
-  readonly type: "edit";
-  readonly path: string;
-  readonly diff: string;
-  readonly lineRange?: readonly [number, number];
-}
-
-export interface IPythonAction extends BaseAction {
-  readonly type: "ipython";
-  readonly code: string;
-  readonly kernelId: string;
-}
-
-export interface GitAction extends BaseAction {
-  readonly type: "git";
-  readonly op: "status" | "log" | "push";
-  readonly args?: readonly string[];
-}
-
-export type Action = ShellAction | ReadAction | EditAction | IPythonAction | GitAction;
-
-export interface ShellOutputObservation {
-  readonly type: "shell_output";
-  readonly actionId: string;
-  readonly stdout: string;
-  readonly stderr: string;
-  readonly exitCode: number;
-  readonly durationMs: number;
-  readonly executedOn: string;
-}
-
-export interface FileContentObservation {
-  readonly type: "file_content";
-  readonly actionId: string;
-  readonly path: string;
-  readonly content: string;
-  readonly lines: readonly [number, number];
-}
-
-export interface EditAppliedObservation {
-  readonly type: "edit_applied";
-  readonly actionId: string;
-  readonly path: string;
-  readonly diff: string;
-  readonly conflicts: readonly string[];
-}
-
-export interface ErrorObservation {
-  readonly type: "error";
-  readonly actionId: string;
-  readonly kind: string;
-  readonly message: string;
-  readonly suggestion: string;
-}
-
-export type Observation =
-  | ShellOutputObservation
-  | FileContentObservation
-  | EditAppliedObservation
-  | ErrorObservation;
-
-export interface SandboxRuntimeLike {
-  exec(request: ExecRequest): Promise<ExecResponse>;
-  doctor(): Promise<readonly SandboxHealth[]>;
-}
-
-export interface EventLogLike {
-  commit(event: {
-    traceId: string;
-    kind: "tool_call" | "content_write" | "sandbox_exec";
-    affected: readonly string[];
-    parent: string | null;
-    snapshot?: Record<string, string>;
-  }): Promise<string>;
-}
-
-export interface CodeExecutorOptions {
-  readonly tenantId?: string;
-  readonly workspaceRoot?: string;
-  readonly debugRoot?: string;
-  readonly sandboxRuntime?: SandboxRuntimeLike;
-  readonly eventLog?: EventLogLike;
-  readonly policy?: readonly PolicyRule[];
-}
-
-export async function readExecutionDebug(root = process.cwd(), limit = 20): Promise<unknown[]> {
-  return readCapabilityDebug("code-execution", { root, limit });
-}
-
-function actionIdFrom(action: Action): string {
-  return action.actionId ?? `${action.type}_${Date.now().toString(36)}`;
-}
-
-function safeWorkspacePath(root: string, path: string): string {
-  const normalized = normalize(path);
-  if (normalized.startsWith("/") || normalized.includes("..")) {
-    throw new CapabilityError("code-execution", "Unsafe workspace path rejected", {
-      suggestion: "Use a path relative to the configured workspace root.",
-      metadata: { path },
-      statusCode: 400,
-    });
-  }
-  return join(root, normalized);
-}
-
-export class CodeExecutor {
-  readonly #tenantId: string | undefined;
-  readonly #workspaceRoot: string;
-  readonly #debugRoot: string;
-  readonly #sandboxRuntime: SandboxRuntimeLike;
-  readonly #eventLog: EventLogLike | undefined;
-  readonly #policy: readonly PolicyRule[];
-
-  constructor(options: CodeExecutorOptions = {}) {
-    this.#tenantId = options.tenantId;
-    this.#workspaceRoot = options.workspaceRoot ?? process.cwd();
-    this.#debugRoot = options.debugRoot ?? process.cwd();
-    this.#sandboxRuntime = options.sandboxRuntime ?? SandboxRuntime.fromConfig();
-    this.#eventLog = options.eventLog;
-    this.#policy = options.policy ?? DefaultPolicy;
-  }
-
-  async run(action: Action): Promise<Observation> {
-    const tenantId = requireCapabilityTenant({
-      explicit: action.tenantId,
-      fallback: this.#tenantId,
-      onMissing: () =>
-        new CapabilityError("code-execution", "Code execution requires tenant context", {
-          suggestion:
-            "Pass tenantId on the action or construct CodeExecutor with a tenantId default.",
-          statusCode: 400,
-        }),
-    });
-    const actionId = actionIdFrom(action);
-    const started = Date.now();
-    let observation: Observation;
-
-    try {
-      observation = await this.#runWithTenant({ ...action, tenantId }, actionId, started);
-    } catch (cause) {
-      observation = errorObservation(actionId, cause);
-    }
-
-    await appendCapabilityDebug(
-      "code-execution",
-      { type: "action", tenantId, action, observation },
-      { root: this.#debugRoot },
-    );
-    return observation;
-  }
-
-  async doctor(): Promise<{
-    readonly capability: "code-execution";
-    readonly sandbox: readonly SandboxHealth[];
-    readonly policies: number;
-  }> {
-    const sandbox = await this.#sandboxRuntime.doctor();
-    await appendCapabilityDebug(
-      "code-execution",
-      { type: "doctor", sandbox },
-      { root: this.#debugRoot },
-    );
-    return { capability: "code-execution", sandbox, policies: this.#policy.length };
-  }
-
-  policy(): readonly PolicyRule[] {
-    return this.#policy;
-  }
-
-  async #runWithTenant(
-    action: Action & { readonly tenantId: string },
-    actionId: string,
-    started: number,
-  ): Promise<Observation> {
-    switch (action.type) {
-      case "shell":
-        return this.#runShell(action, actionId, started);
-      case "read":
-        return this.#readFile(action, actionId);
-      case "edit":
-        return this.#editFile(action, actionId);
-      case "git":
-        return this.#runGit(action, actionId, started);
-      case "ipython":
-        return {
-          type: "error",
-          actionId,
-          kind: "AdapterUnavailable",
-          message: "IPython kernel execution is not configured",
-          suggestion: "Configure a notebook kernel sidecar and route it through sandbox-runtime.",
-        };
-    }
-  }
-
-  async #runShell(
-    action: ShellAction & { readonly tenantId: string },
-    actionId: string,
-    started: number,
-  ): Promise<Observation> {
-    const approval = this.#approvalRequired(action.cmd);
-    if (approval && !action.approved) {
-      return {
-        type: "error",
-        actionId,
-        kind: "ApprovalRequired",
-        message: `Command requires approval: ${approval.reason}`,
-        suggestion:
-          "Ask the user for explicit approval, then retry the action with approved: true.",
-      };
-    }
-
-    const result = await this.#sandboxRuntime.exec({
-      cmd: action.cmd,
-      tenantId: action.tenantId,
-      ...(action.threadId ? { threadId: action.threadId } : {}),
-      ...(action.timeoutS !== undefined ? { hints: { durationS: action.timeoutS } } : {}),
-    });
-    await this.#eventLog?.commit({
-      traceId: action.threadId ?? actionId,
-      kind: "sandbox_exec",
-      affected: [],
-      parent: null,
-    });
-    return {
-      type: "shell_output",
-      actionId,
-      stdout: result.aggregatedOutput,
-      stderr: "",
-      exitCode: result.exitCode,
-      durationMs: Date.now() - started,
-      executedOn: result.executedOn,
-    };
-  }
-
-  async #runGit(
-    action: GitAction & { readonly tenantId: string },
-    actionId: string,
-    started: number,
-  ): Promise<Observation> {
-    const command = `git ${action.op}${action.args?.length ? ` ${action.args.join(" ")}` : ""}`;
-    return this.#runShell(
-      {
-        type: "shell",
-        cmd: command,
-        cwd: this.#workspaceRoot,
-        tenantId: action.tenantId,
-        ...(action.threadId ? { threadId: action.threadId } : {}),
-        ...(action.approved !== undefined ? { approved: action.approved } : {}),
-      },
-      actionId,
-      started,
-    );
-  }
-
-  async #readFile(
-    action: ReadAction & { readonly tenantId: string },
-    actionId: string,
-  ): Promise<Observation> {
-    try {
-      const content = await readFile(safeWorkspacePath(this.#workspaceRoot, action.path), "utf8");
-      const lines = content.split("\n");
-      const start = action.lineRange?.[0] ?? 1;
-      const end = action.lineRange?.[1] ?? lines.length;
-      return {
-        type: "file_content",
-        actionId,
-        path: action.path,
-        content: lines.slice(start - 1, end).join("\n"),
-        lines: [start, end],
-      };
-    } catch (cause) {
-      return errorObservation(actionId, cause, {
-        kind: "FileReadFailed",
-        suggestion: "Check the path with a read/list action before asking the executor to edit it.",
-      });
-    }
-  }
-
-  async #editFile(
-    action: EditAction & { readonly tenantId: string },
-    actionId: string,
-  ): Promise<Observation> {
-    const full = safeWorkspacePath(this.#workspaceRoot, action.path);
-    try {
-      const before = await readFile(full, "utf8");
-      const after = applyUnifiedDiff(before, action.diff);
-      await writeFile(full, after, "utf8");
-      await this.#eventLog?.commit({
-        traceId: action.threadId ?? actionId,
-        kind: "content_write",
-        affected: [action.path],
-        parent: null,
-        snapshot: { [action.path]: after },
-      });
-      return {
-        type: "edit_applied",
-        actionId,
-        path: action.path,
-        diff: action.diff,
-        conflicts: [],
-      };
-    } catch (cause) {
-      return errorObservation(actionId, cause, {
-        kind: "EditFailed",
-        suggestion:
-          "Refresh the file, regenerate a unified diff against the current contents, and retry without overwrite semantics.",
-      });
-    }
-  }
-
-  #approvalRequired(command: string): PolicyRule | null {
-    return shellApprovalRequired(command, this.#policy);
-  }
-}
-
-function errorObservation(
-  actionId: string,
-  cause: unknown,
-  override: { readonly kind?: string; readonly suggestion?: string } = {},
-): ErrorObservation {
-  const message = cause instanceof Error ? cause.message : String(cause);
-  return {
-    type: "error",
-    actionId,
-    kind:
-      override.kind ?? (cause instanceof CapabilityError ? "CapabilityError" : "ExecutionError"),
-    message,
-    suggestion:
-      override.suggestion ??
-      (cause instanceof CapabilityError && cause.suggestion
-        ? cause.suggestion
-        : "Inspect the action, sandbox route, and tenant context, then retry with a narrower command."),
-  };
-}
-
-export function applyUnifiedDiff(original: string, diff: string): string {
-  const originalHadTrailingNewline = original.endsWith("\n");
-  let lines = originalHadTrailingNewline ? original.slice(0, -1).split("\n") : original.split("\n");
-  if (original === "") lines = [];
-
-  const diffLines = diff.split("\n");
-  let index = 0;
-  while (index < diffLines.length) {
-    const line = diffLines[index] ?? "";
-    if (!line.startsWith("@@")) {
-      index += 1;
-      continue;
-    }
-    index += 1;
-    const oldLines: string[] = [];
-    const newLines: string[] = [];
-    while (index < diffLines.length && !(diffLines[index] ?? "").startsWith("@@")) {
-      const current = diffLines[index] ?? "";
-      if (current.startsWith("\\ No newline")) {
-        index += 1;
-        continue;
-      }
-      if (current.startsWith("-")) oldLines.push(current.slice(1));
-      else if (current.startsWith("+")) newLines.push(current.slice(1));
-      else if (current.startsWith(" ")) {
-        oldLines.push(current.slice(1));
-        newLines.push(current.slice(1));
-      }
-      index += 1;
-    }
-    const position = findSubsequence(lines, oldLines);
-    if (position < 0) {
-      throw new CapabilityError("code-execution", "Diff hunk does not match current file", {
-        suggestion:
-          "Re-read the file and generate a fresh unified diff against the latest content.",
-        metadata: { oldLines },
-        statusCode: 409,
-      });
-    }
-    lines.splice(position, oldLines.length, ...newLines);
-  }
-
-  return `${lines.join("\n")}${originalHadTrailingNewline ? "\n" : ""}`;
-}
-
-function findSubsequence(haystack: readonly string[], needle: readonly string[]): number {
-  if (needle.length === 0) return 0;
-  for (let start = 0; start <= haystack.length - needle.length; start += 1) {
-    let matched = true;
-    for (let offset = 0; offset < needle.length; offset += 1) {
-      if (haystack[start + offset] !== needle[offset]) {
-        matched = false;
-        break;
-      }
-    }
-    if (matched) return start;
-  }
-  return -1;
-}

package/tsconfig.json

@@ -1,12 +0,0 @@
-{
-  "extends": "../../../tsconfig.base.json",
-  "compilerOptions": {
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "target": "esnext",
-    "types": ["node"],
-    "incremental": false
-  },
-  "include": ["src", "examples"],
-  "exclude": ["node_modules", "dist"]
-}

package/tsup.config.ts

@@ -1,17 +0,0 @@
-import { defineConfig } from "tsup";
-
-export default defineConfig({
-  entry: ["src/index.ts", "src/cli.ts"],
-  format: ["esm"],
-  dts: true,
-  sourcemap: true,
-  clean: true,
-  target: "es2022",
-  external: [
-    "@nebutra/capability-kit/debug",
-    "@nebutra/errors",
-    "@nebutra/event-log",
-    "@nebutra/execution-policy",
-    "@nebutra/sandbox-runtime",
-  ],
-});