@nexus-ai-nexoralabs/cli 0.1.0

package/dist/orchestration/codingAgentService.js

@@ -0,0 +1,319 @@
+/**
+ * NEXUS AI — P6-D: Coding Agent Service
+ *
+ * Orchestrates the full coding-agent lifecycle:
+ *   Discovery -> Plan Synthesis -> Plan Validation -> Permission & Approval Evaluation
+ *   -> Execution -> Validation Commands -> Verification -> Bounded Repair Loop -> Completion.
+ *
+ * SECURITY INVARIANTS:
+ *  - Orchestrator ONLY. Does NOT bypass PlanValidator, PermissionEngine, ApprovalGate, or ToolExecutor.
+ *  - Non-repairable security errors (PERMISSION_DENIED, PATH_TRAVERSAL_DENIED, etc.) stop repair loops immediately.
+ *  - Strict repair attempt budget (default 3 retries max) prevents infinite loops.
+ *  - APPROVAL != PERMISSION: Human approval never grants permission if policy denies it.
+ */
+import { NON_REPAIRABLE_SECURITY_ERRORS } from './codingAgentTypes.js';
+import { CodingAgentDiscovery } from './codingAgentDiscovery.js';
+import { CodingAgentVerifier } from './codingAgentVerifier.js';
+import { CodingRepairService } from './codingRepairService.js';
+import { AgentStateMachine } from './agentStateMachine.js';
+import { Logger } from '../common/logger.js';
+export class CodingAgentService {
+    taskService;
+    toolGateway;
+    executionService;
+    planner;
+    planValidator;
+    discovery;
+    verifier;
+    repairService;
+    logger;
+    constructor(taskService, toolGateway, executionService, planner, planValidator, logLevel = 'info') {
+        this.taskService = taskService;
+        this.toolGateway = toolGateway;
+        this.executionService = executionService;
+        this.planner = planner;
+        this.planValidator = planValidator;
+        this.logger = new Logger('CodingAgentService', logLevel);
+        this.discovery = new CodingAgentDiscovery(toolGateway, logLevel);
+        this.verifier = new CodingAgentVerifier(toolGateway, logLevel);
+        if (planner && planValidator) {
+            this.repairService = new CodingRepairService(planner, planValidator, toolGateway, logLevel);
+        }
+    }
+    /**
+     * Run a full coding task with bounded discovery, planning, execution, validation, and repair loop.
+     *
+     * @param options Coding agent task configuration options.
+     * @returns Deterministic CodingAgentRunResult.
+     */
+    async runCodingTask(options) {
+        const { taskGoal, maxRepairAttempts = 3, validationCommands } = options;
+        const runId = `run-${Date.now()}-${Math.random().toString(36).substring(2, 7)}`;
+        const startTime = Date.now();
+        this.logger.info(`Starting coding task run`, { runId, goal: taskGoal, maxRepairAttempts });
+        // STEP 1: Task Creation
+        const task = this.taskService.createTask({
+            title: `Coding Task: ${taskGoal.slice(0, 50)}`,
+        });
+        const taskId = task.id;
+        const diffsCollected = [];
+        // STEP 2: Codebase Discovery
+        let evidence;
+        try {
+            evidence = await this.discovery.discoverCodebase(taskId, taskGoal);
+        }
+        catch (err) {
+            this.logger.warn(`Codebase discovery warning`, { taskId, error: String(err) });
+        }
+        // STEP 3: Initial Plan Synthesis & Validation
+        if (!this.planner || !this.planValidator || !this.executionService) {
+            this.logger.warn(`Execution subsystems uninitialized for task`, { taskId });
+            const failedTask = this.taskService.failTask(taskId, {
+                errorCategory: 'EXECUTOR_UNINITIALIZED',
+                currentStep: 'initialization',
+            });
+            return {
+                success: false,
+                taskId,
+                runId,
+                state: failedTask.state,
+                repairAttemptsCount: 0,
+                maxRepairAttempts,
+                evidence,
+                diffs: [],
+                errorCategory: 'EXECUTOR_UNINITIALIZED',
+                errorMessage: 'Planner, PlanValidator, or AgentExecutionService is uninitialized.',
+            };
+        }
+        const synthResult = await this.planner.synthesize(taskId, {
+            taskGoal,
+            temperature: 0.2,
+            maxSteps: 10,
+        });
+        if (!synthResult.success || !synthResult.plan) {
+            const failedTask = this.taskService.failTask(taskId, {
+                errorCategory: synthResult.errorCategory || 'PLAN_SYNTHESIS_FAILED',
+                currentStep: 'planning',
+            });
+            return {
+                success: false,
+                taskId,
+                runId,
+                state: failedTask.state,
+                repairAttemptsCount: 0,
+                maxRepairAttempts,
+                evidence,
+                diffs: [],
+                errorCategory: synthResult.errorCategory || 'PLAN_SYNTHESIS_FAILED',
+                errorMessage: synthResult.errorMessage || 'Plan synthesis failed.',
+            };
+        }
+        const valResult = this.planValidator.validate(synthResult.plan, taskId, 10);
+        if (!valResult.valid) {
+            const failedTask = this.taskService.failTask(taskId, {
+                errorCategory: 'PLAN_VALIDATION_FAILED',
+                currentStep: 'planning',
+            });
+            return {
+                success: false,
+                taskId,
+                runId,
+                state: failedTask.state,
+                repairAttemptsCount: 0,
+                maxRepairAttempts,
+                evidence,
+                diffs: [],
+                errorCategory: 'PLAN_VALIDATION_FAILED',
+                errorMessage: `Initial plan validation failed: ${valResult.errors.map((e) => e.message).join('; ')}`,
+            };
+        }
+        // STEP 4: Initial Plan Execution
+        let currentTaskState = this.taskService.getTask(taskId);
+        currentTaskState = await this.executionService.runExecutionLoop(taskId, synthResult.plan.steps, {
+            maxSteps: 10,
+            stepTimeoutMs: options.stepTimeoutMs ?? 30_000,
+            autoComplete: false, // CodingAgentService controls task completion
+        });
+        if (currentTaskState.state === 'failed' || currentTaskState.state === 'cancelled') {
+            return {
+                success: false,
+                taskId,
+                runId,
+                state: currentTaskState.state,
+                repairAttemptsCount: 0,
+                maxRepairAttempts,
+                evidence,
+                diffs: diffsCollected,
+                errorCategory: currentTaskState.errorCategory || 'EXECUTION_FAILED',
+                errorMessage: `Initial plan execution ended in state '${currentTaskState.state}'.`,
+            };
+        }
+        // STEP 5: Initial Validation & Verification
+        let verificationRes = await this.verifier.verify(taskId, diffsCollected, validationCommands);
+        let repairAttemptsCount = 0;
+        // STEP 6: Bounded Repair Loop
+        while (!verificationRes.verified) {
+            repairAttemptsCount++;
+            const lastVal = verificationRes.validationResult;
+            const failureErrCategory = verificationRes.errorCategory || lastVal?.errorCategory;
+            this.logger.warn(`Verification failed on attempt ${repairAttemptsCount}/${maxRepairAttempts}`, {
+                taskId,
+                reason: verificationRes.reason,
+                errorCategory: failureErrCategory,
+            });
+            // 6a. Non-repairable security check
+            if (failureErrCategory && NON_REPAIRABLE_SECURITY_ERRORS.has(failureErrCategory)) {
+                this.logger.warn(`Halting repair loop: non-repairable security failure category '${failureErrCategory}'`, { taskId });
+                const failedTask = this.taskService.failTask(taskId, {
+                    errorCategory: failureErrCategory,
+                    currentStep: 'verification',
+                });
+                return {
+                    success: false,
+                    taskId,
+                    runId,
+                    state: failedTask.state,
+                    repairAttemptsCount,
+                    maxRepairAttempts,
+                    evidence,
+                    diffs: diffsCollected,
+                    validation: lastVal,
+                    verification: verificationRes,
+                    errorCategory: failureErrCategory,
+                    errorMessage: verificationRes.reason,
+                };
+            }
+            // 6b. Budget check
+            if (repairAttemptsCount > maxRepairAttempts) {
+                this.logger.warn(`Halting repair loop: repair retry budget exhausted (${maxRepairAttempts})`, { taskId });
+                const failedTask = this.taskService.failTask(taskId, {
+                    errorCategory: 'REPAIR_BUDGET_EXHAUSTED',
+                    currentStep: 'verification',
+                });
+                return {
+                    success: false,
+                    taskId,
+                    runId,
+                    state: failedTask.state,
+                    repairAttemptsCount: maxRepairAttempts,
+                    maxRepairAttempts,
+                    evidence,
+                    diffs: diffsCollected,
+                    validation: lastVal,
+                    verification: verificationRes,
+                    errorCategory: 'REPAIR_BUDGET_EXHAUSTED',
+                    errorMessage: `Repair retry budget (${maxRepairAttempts}) exhausted without passing validation.`,
+                };
+            }
+            // 6c. Check repair service availability
+            if (!this.repairService) {
+                const failedTask = this.taskService.failTask(taskId, {
+                    errorCategory: 'REPAIR_UNAVAILABLE',
+                    currentStep: 'verification',
+                });
+                return {
+                    success: false,
+                    taskId,
+                    runId,
+                    state: failedTask.state,
+                    repairAttemptsCount,
+                    maxRepairAttempts,
+                    evidence,
+                    diffs: diffsCollected,
+                    validation: lastVal,
+                    verification: verificationRes,
+                    errorCategory: 'REPAIR_UNAVAILABLE',
+                    errorMessage: 'CodingRepairService is uninitialized.',
+                };
+            }
+            // 6d. Synthesize Repair Plan
+            const repairContext = {
+                taskGoal,
+                previousPlan: synthResult.plan,
+                changedFiles: diffsCollected.map((d) => d.path),
+                diffs: diffsCollected,
+                failedValidationCommand: lastVal ? `${lastVal.command} ${lastVal.args.join(' ')}` : 'validation',
+                exitCode: lastVal?.exitCode ?? null,
+                stdout: lastVal?.stdout || '',
+                stderr: lastVal?.stderr || verificationRes.reason,
+                errorCategory: failureErrCategory,
+                repairAttempt: repairAttemptsCount,
+                maxRepairAttempts,
+            };
+            const repairSynthResult = await this.repairService.synthesizeRepairPlan(taskId, repairContext);
+            if (!repairSynthResult.repairable || !repairSynthResult.repairPlan) {
+                const failedTask = this.taskService.failTask(taskId, {
+                    errorCategory: repairSynthResult.errorCategory || 'REPAIR_PLAN_FAILED',
+                    currentStep: 'repair_planning',
+                });
+                return {
+                    success: false,
+                    taskId,
+                    runId,
+                    state: failedTask.state,
+                    repairAttemptsCount,
+                    maxRepairAttempts,
+                    evidence,
+                    diffs: diffsCollected,
+                    validation: lastVal,
+                    verification: verificationRes,
+                    errorCategory: repairSynthResult.errorCategory || 'REPAIR_PLAN_FAILED',
+                    errorMessage: repairSynthResult.reason,
+                };
+            }
+            // 6e. Transition task verifying -> planning for repair
+            currentTaskState = this.taskService.getTask(taskId);
+            if (currentTaskState.state === 'verifying') {
+                this.taskService.transitionTask(taskId, { targetState: 'planning', currentStep: `repair-attempt-${repairAttemptsCount}` });
+            }
+            // 6f. Execute Repair Plan
+            currentTaskState = await this.executionService.runExecutionLoop(taskId, repairSynthResult.repairPlan.steps, {
+                maxSteps: 5,
+                stepTimeoutMs: options.stepTimeoutMs ?? 30_000,
+                autoComplete: false, // CodingAgentService controls task completion
+            });
+            if (currentTaskState.state === 'failed' || currentTaskState.state === 'cancelled') {
+                return {
+                    success: false,
+                    taskId,
+                    runId,
+                    state: currentTaskState.state,
+                    repairAttemptsCount,
+                    maxRepairAttempts,
+                    evidence,
+                    diffs: diffsCollected,
+                    validation: lastVal,
+                    verification: verificationRes,
+                    errorCategory: currentTaskState.errorCategory || 'REPAIR_EXECUTION_FAILED',
+                    errorMessage: `Repair execution attempt ${repairAttemptsCount} ended in state '${currentTaskState.state}'.`,
+                };
+            }
+            // 6g. Re-verify
+            verificationRes = await this.verifier.verify(taskId, diffsCollected, validationCommands);
+        }
+        // STEP 7: Successful Completion
+        const completedTask = this.taskService.getTask(taskId);
+        if (!AgentStateMachine.isTerminal(completedTask.state)) {
+            this.taskService.completeTask(taskId);
+        }
+        this.logger.info(`Coding task completed successfully!`, {
+            taskId,
+            runId,
+            repairAttemptsCount,
+            durationMs: Date.now() - startTime,
+        });
+        return {
+            success: true,
+            taskId,
+            runId,
+            state: 'completed',
+            repairAttemptsCount,
+            maxRepairAttempts,
+            evidence,
+            diffs: diffsCollected,
+            validation: verificationRes.validationResult,
+            verification: verificationRes,
+        };
+    }
+}
+//# sourceMappingURL=codingAgentService.js.map

package/dist/orchestration/codingAgentService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingAgentService.js","sourceRoot":"","sources":["../../src/orchestration/codingAgentService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAY,MAAM,qBAAqB,CAAC;AAEvD,MAAM,OAAO,kBAAkB;IAOnB;IACA;IACA;IACA;IACA;IAVF,SAAS,CAAuB;IAChC,QAAQ,CAAsB;IAC9B,aAAa,CAAuB;IACpC,MAAM,CAAS;IAEvB,YACU,WAA6B,EAC7B,WAAwB,EACxB,gBAAwC,EACxC,OAA8B,EAC9B,aAA6B,EACrC,WAAqB,MAAM;QALnB,gBAAW,GAAX,WAAW,CAAkB;QAC7B,gBAAW,GAAX,WAAW,CAAa;QACxB,qBAAgB,GAAhB,gBAAgB,CAAwB;QACxC,YAAO,GAAP,OAAO,CAAuB;QAC9B,kBAAa,GAAb,aAAa,CAAgB;QAGrC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE/D,IAAI,OAAO,IAAI,aAAa,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAA+B;QACjD,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,CAAC,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE3F,wBAAwB;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;YACvC,KAAK,EAAE,gBAAgB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC/C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,cAAc,GAAqB,EAAE,CAAC;QAE5C,6BAA6B;QAC7B,IAAI,QAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACnD,aAAa,EAAE,wBAAwB;gBACvC,WAAW,EAAE,gBAAgB;aAC9B,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,KAAK;gBACL,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB;gBACjB,QAAQ;gBACR,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,wBAAwB;gBACvC,YAAY,EAAE,oEAAoE;aACnF,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;YACxD,QAAQ;YACR,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACnD,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,uBAAuB;gBACnE,WAAW,EAAE,UAAU;aACxB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,KAAK;gBACL,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB;gBACjB,QAAQ;gBACR,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,uBAAuB;gBACnE,YAAY,EAAE,WAAW,CAAC,YAAY,IAAI,wBAAwB;aACnE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACnD,aAAa,EAAE,wBAAwB;gBACvC,WAAW,EAAE,UAAU;aACxB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,KAAK;gBACL,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB;gBACjB,QAAQ;gBACR,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,wBAAwB;gBACvC,YAAY,EAAE,mCAAmC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACrG,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE;YAC9F,QAAQ,EAAE,EAAE;YACZ,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;YAC9C,YAAY,EAAE,KAAK,EAAE,8CAA8C;SACpE,CAAC,CAAC;QAEH,IAAI,gBAAgB,CAAC,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,KAAK;gBACL,KAAK,EAAE,gBAAgB,CAAC,KAAK;gBAC7B,mBAAmB,EAAE,CAAC;gBACtB,iBAAiB;gBACjB,QAAQ;gBACR,KAAK,EAAE,cAAc;gBACrB,aAAa,EAAE,gBAAgB,CAAC,aAAa,IAAI,kBAAkB;gBACnE,YAAY,EAAE,0CAA0C,gBAAgB,CAAC,KAAK,IAAI;aACnF,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,IAAI,eAAe,GAA6B,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACvH,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,8BAA8B;QAC9B,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YACjC,mBAAmB,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,eAAe,CAAC,gBAAgB,CAAC;YACjD,MAAM,kBAAkB,GAAG,eAAe,CAAC,aAAa,IAAI,OAAO,EAAE,aAAa,CAAC;YAEnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,mBAAmB,IAAI,iBAAiB,EAAE,EAAE;gBAC7F,MAAM;gBACN,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,aAAa,EAAE,kBAAkB;aAClC,CAAC,CAAC;YAEH,oCAAoC;YACpC,IAAI,kBAAkB,IAAI,8BAA8B,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kEAAkE,kBAAkB,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtH,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACnD,aAAa,EAAE,kBAAkB;oBACjC,WAAW,EAAE,cAAc;iBAC5B,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK;oBACL,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,mBAAmB;oBACnB,iBAAiB;oBACjB,QAAQ;oBACR,KAAK,EAAE,cAAc;oBACrB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,eAAe;oBAC7B,aAAa,EAAE,kBAAkB;oBACjC,YAAY,EAAE,eAAe,CAAC,MAAM;iBACrC,CAAC;YACJ,CAAC;YAED,mBAAmB;YACnB,IAAI,mBAAmB,GAAG,iBAAiB,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,iBAAiB,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1G,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACnD,aAAa,EAAE,yBAAyB;oBACxC,WAAW,EAAE,cAAc;iBAC5B,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK;oBACL,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,mBAAmB,EAAE,iBAAiB;oBACtC,iBAAiB;oBACjB,QAAQ;oBACR,KAAK,EAAE,cAAc;oBACrB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,eAAe;oBAC7B,aAAa,EAAE,yBAAyB;oBACxC,YAAY,EAAE,wBAAwB,iBAAiB,yCAAyC;iBACjG,CAAC;YACJ,CAAC;YAED,wCAAwC;YACxC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACnD,aAAa,EAAE,oBAAoB;oBACnC,WAAW,EAAE,cAAc;iBAC5B,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK;oBACL,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,mBAAmB;oBACnB,iBAAiB;oBACjB,QAAQ;oBACR,KAAK,EAAE,cAAc;oBACrB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,eAAe;oBAC7B,aAAa,EAAE,oBAAoB;oBACnC,YAAY,EAAE,uCAAuC;iBACtD,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,MAAM,aAAa,GAAkB;gBACnC,QAAQ;gBACR,YAAY,EAAE,WAAW,CAAC,IAAI;gBAC9B,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC/C,KAAK,EAAE,cAAc;gBACrB,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;gBAChG,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI;gBACnC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE;gBAC7B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,eAAe,CAAC,MAAM;gBACjD,aAAa,EAAE,kBAAkB;gBACjC,aAAa,EAAE,mBAAmB;gBAClC,iBAAiB;aAClB,CAAC;YAEF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAC/F,IAAI,CAAC,iBAAiB,CAAC,UAAU,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;gBACnE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE;oBACnD,aAAa,EAAE,iBAAiB,CAAC,aAAa,IAAI,oBAAoB;oBACtE,WAAW,EAAE,iBAAiB;iBAC/B,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK;oBACL,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,mBAAmB;oBACnB,iBAAiB;oBACjB,QAAQ;oBACR,KAAK,EAAE,cAAc;oBACrB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,eAAe;oBAC7B,aAAa,EAAE,iBAAiB,CAAC,aAAa,IAAI,oBAAoB;oBACtE,YAAY,EAAE,iBAAiB,CAAC,MAAM;iBACvC,CAAC;YACJ,CAAC;YAED,uDAAuD;YACvD,gBAAgB,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,gBAAgB,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC3C,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAC7H,CAAC;YAED,0BAA0B;YAC1B,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,KAAK,EAAE;gBAC1G,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;gBAC9C,YAAY,EAAE,KAAK,EAAE,8CAA8C;aACpE,CAAC,CAAC;YAEH,IAAI,gBAAgB,CAAC,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAClF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK;oBACL,KAAK,EAAE,gBAAgB,CAAC,KAAK;oBAC7B,mBAAmB;oBACnB,iBAAiB;oBACjB,QAAQ;oBACR,KAAK,EAAE,cAAc;oBACrB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,eAAe;oBAC7B,aAAa,EAAE,gBAAgB,CAAC,aAAa,IAAI,yBAAyB;oBAC1E,YAAY,EAAE,4BAA4B,mBAAmB,oBAAoB,gBAAgB,CAAC,KAAK,IAAI;iBAC5G,CAAC;YACJ,CAAC;YAED,gBAAgB;YAChB,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC3F,CAAC;QAED,gCAAgC;QAChC,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YACtD,MAAM;YACN,KAAK;YACL,mBAAmB;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,KAAK;YACL,KAAK,EAAE,WAAW;YAClB,mBAAmB;YACnB,iBAAiB;YACjB,QAAQ;YACR,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,eAAe,CAAC,gBAAgB;YAC5C,YAAY,EAAE,eAAe;SAC9B,CAAC;IACJ,CAAC;CACF"}

package/dist/orchestration/codingAgentTypes.d.ts

@@ -0,0 +1,111 @@
+/**
+ * NEXUS AI — P6-D: Coding Agent & Bounded Repair Loop Types
+ *
+ * Data contracts and types for the CodingAgentService, Discovery,
+ * Verification, and Repair Loop.
+ */
+import type { AgentTaskState } from '../storage/repositories/types.js';
+import type { AgentPlan } from './types.js';
+import type { FileChangeDiff } from '../tools/adapters/filesystemAdapter.js';
+export interface WorkspaceFileEvidence {
+    relativePath: string;
+    size?: number;
+    snippet?: string;
+    isSecret?: boolean;
+}
+export interface SearchMatchEvidence {
+    relativePath: string;
+    line: number;
+    match: string;
+    snippet: string;
+}
+export interface CodebaseEvidence {
+    workspaceRoot: string;
+    discoveredFiles: WorkspaceFileEvidence[];
+    searchResults: SearchMatchEvidence[];
+    treeEntriesCount: number;
+    packageInfo?: {
+        name?: string;
+        version?: string;
+        scripts?: Record<string, string>;
+    };
+    secretFilesExcluded: string[];
+}
+export interface CodingValidationResult {
+    passed: boolean;
+    command: string;
+    args: string[];
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    durationMs: number;
+    timedOut: boolean;
+    cancelled: boolean;
+    errorCategory?: string;
+    errorMessage?: string;
+}
+export interface CodingVerificationResult {
+    verified: boolean;
+    reason: string;
+    diffsApplied: FileChangeDiff[];
+    validationResult: CodingValidationResult | null;
+    errorCategory?: string;
+}
+export interface RepairContext {
+    taskGoal: string;
+    previousPlan: AgentPlan | null;
+    changedFiles: string[];
+    diffs: FileChangeDiff[];
+    failedValidationCommand: string;
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    errorCategory?: string;
+    repairAttempt: number;
+    maxRepairAttempts: number;
+}
+export interface RepairPlanResult {
+    repairable: boolean;
+    reason: string;
+    repairPlan?: AgentPlan;
+    errorCategory?: string;
+}
+export interface CodingAgentTaskOptions {
+    /** The goal/prompt submitted by the user. */
+    taskGoal: string;
+    /** Project/workspace directory root (default "." or configured workspace). */
+    workspaceRoot?: string;
+    /** Maximum repair retry budget (default: 3). */
+    maxRepairAttempts?: number;
+    /** Explicit list of validation commands to run (default: ["npm run typecheck", "npm run lint", "npm test", "npm run build"]). */
+    validationCommands?: Array<{
+        command: string;
+        args: string[];
+    }>;
+    /** Optional model ID override for plan synthesis. */
+    modelId?: string;
+    /** Timeout in ms per tool step. */
+    stepTimeoutMs?: number;
+}
+export interface CodingAgentRunResult {
+    success: boolean;
+    taskId: string;
+    runId: string;
+    state: AgentTaskState;
+    repairAttemptsCount: number;
+    maxRepairAttempts: number;
+    evidence?: CodebaseEvidence;
+    diffs: FileChangeDiff[];
+    validation?: CodingValidationResult | null;
+    verification?: CodingVerificationResult;
+    errorCategory?: string;
+    errorMessage?: string;
+}
+/**
+ * Failure categories that MUST IMMEDIATELY halt the repair loop.
+ * Attempting to "repair" these via code modifications is unsafe.
+ */
+export declare const NON_REPAIRABLE_SECURITY_ERRORS: ReadonlySet<string>;
+//# sourceMappingURL=codingAgentTypes.d.ts.map

package/dist/orchestration/codingAgentTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingAgentTypes.d.ts","sourceRoot":"","sources":["../../src/orchestration/codingAgentTypes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAM7E,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACzC,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAClC,CAAC;IACF,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAMD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,MAAM,WAAW,sBAAsB;IACrC,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iIAAiI;IACjI,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAChE,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,cAAc,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAiB7D,CAAC"}

package/dist/orchestration/codingAgentTypes.js

@@ -0,0 +1,32 @@
+/**
+ * NEXUS AI — P6-D: Coding Agent & Bounded Repair Loop Types
+ *
+ * Data contracts and types for the CodingAgentService, Discovery,
+ * Verification, and Repair Loop.
+ */
+// ---------------------------------------------------------------------------
+// Non-Repairable Security & Structural Errors
+// ---------------------------------------------------------------------------
+/**
+ * Failure categories that MUST IMMEDIATELY halt the repair loop.
+ * Attempting to "repair" these via code modifications is unsafe.
+ */
+export const NON_REPAIRABLE_SECURITY_ERRORS = new Set([
+    'PERMISSION_DENIED',
+    'PATH_TRAVERSAL_DENIED',
+    'COMMAND_NOT_ALLOWED',
+    'INVALID_COMMAND_POLICY',
+    'APPROVAL_REQUIRED',
+    'APPROVAL_REJECTED',
+    'APPROVAL_EXPIRED',
+    'DISABLED_TOOL',
+    'UNKNOWN_TOOL',
+    'UNKNOWN_CAPABILITY',
+    'EXCEEDS_POLICY_RISK',
+    'SECRET_FILE_PROTECTED',
+    'TASK_CANCELLED',
+    'STEP_LIMIT_EXCEEDED',
+    'REPAIR_BUDGET_EXHAUSTED',
+    'UNSUPPORTED_TOOL_OPERATION',
+]);
+//# sourceMappingURL=codingAgentTypes.js.map

package/dist/orchestration/codingAgentTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingAgentTypes.js","sourceRoot":"","sources":["../../src/orchestration/codingAgentTypes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4HH,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,qBAAqB;IACrB,yBAAyB;IACzB,4BAA4B;CAC7B,CAAC,CAAC"}

package/dist/orchestration/codingAgentVerifier.d.ts

@@ -0,0 +1,34 @@
+/**
+ * NEXUS AI — P6-D: Coding Agent Verifier
+ *
+ * Deterministic validation runner and verifier.
+ *
+ * SECURITY INVARIANTS:
+ *  - Executes validation commands ONLY via terminal_execute through ToolGateway.
+ *  - Uses strict TerminalCommandPolicy — no shell interpreters, no arbitrary strings.
+ *  - Verification requires explicit zero exit code and zero security errors.
+ *  - Does NOT assume success merely because an edit completed.
+ */
+import type { ToolGateway } from '../tools/index.js';
+import type { FileChangeDiff } from '../tools/adapters/filesystemAdapter.js';
+import type { CodingVerificationResult } from './codingAgentTypes.js';
+import { LogLevel } from '../common/logger.js';
+export interface ValidationCommandSpec {
+    command: string;
+    args: string[];
+}
+export declare class CodingAgentVerifier {
+    private toolGateway;
+    private logger;
+    constructor(toolGateway: ToolGateway, logLevel?: LogLevel);
+    /**
+     * Run validation commands and verify the state of the workspace after edits.
+     *
+     * @param taskId Agent task ID.
+     * @param diffs List of file change diffs applied.
+     * @param customCommands Optional validation command specs to execute.
+     * @returns Deterministic CodingVerificationResult.
+     */
+    verify(taskId: string, diffs?: FileChangeDiff[], customCommands?: ValidationCommandSpec[]): Promise<CodingVerificationResult>;
+}
+//# sourceMappingURL=codingAgentVerifier.d.ts.map

package/dist/orchestration/codingAgentVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingAgentVerifier.d.ts","sourceRoot":"","sources":["../../src/orchestration/codingAgentVerifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAA0B,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAU,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,qBAAa,mBAAmB;IAI5B,OAAO,CAAC,WAAW;IAHrB,OAAO,CAAC,MAAM,CAAS;gBAGb,WAAW,EAAE,WAAW,EAChC,QAAQ,GAAE,QAAiB;IAK7B;;;;;;;OAOG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,cAAc,EAAO,EAC5B,cAAc,CAAC,EAAE,qBAAqB,EAAE,GACvC,OAAO,CAAC,wBAAwB,CAAC;CAuGrC"}

package/dist/orchestration/codingAgentVerifier.js

@@ -0,0 +1,109 @@
+/**
+ * NEXUS AI — P6-D: Coding Agent Verifier
+ *
+ * Deterministic validation runner and verifier.
+ *
+ * SECURITY INVARIANTS:
+ *  - Executes validation commands ONLY via terminal_execute through ToolGateway.
+ *  - Uses strict TerminalCommandPolicy — no shell interpreters, no arbitrary strings.
+ *  - Verification requires explicit zero exit code and zero security errors.
+ *  - Does NOT assume success merely because an edit completed.
+ */
+import { Logger } from '../common/logger.js';
+export class CodingAgentVerifier {
+    toolGateway;
+    logger;
+    constructor(toolGateway, logLevel = 'info') {
+        this.toolGateway = toolGateway;
+        this.logger = new Logger('CodingAgentVerifier', logLevel);
+    }
+    /**
+     * Run validation commands and verify the state of the workspace after edits.
+     *
+     * @param taskId Agent task ID.
+     * @param diffs List of file change diffs applied.
+     * @param customCommands Optional validation command specs to execute.
+     * @returns Deterministic CodingVerificationResult.
+     */
+    async verify(taskId, diffs = [], customCommands) {
+        this.logger.info(`Starting code verification`, { taskId, diffCount: diffs.length });
+        // Determine commands to run
+        const commandsToRun = customCommands && customCommands.length > 0
+            ? customCommands
+            : [
+                { command: 'npm', args: ['run', 'typecheck'] },
+                { command: 'npm', args: ['test'] },
+            ];
+        let lastValidationResult = null;
+        let allPassed = true;
+        let failureReason = '';
+        let failureErrorCategory = undefined;
+        for (let i = 0; i < commandsToRun.length; i++) {
+            const spec = commandsToRun[i];
+            const requestId = `req-val-${taskId}-${i + 1}`;
+            this.logger.info(`Running validation command ${i + 1}/${commandsToRun.length}`, {
+                taskId,
+                command: spec.command,
+                args: spec.args,
+            });
+            const execRes = this.toolGateway.executeTool({
+                requestId,
+                taskId,
+                toolId: 'terminal_execute',
+                requestedCapabilities: ['terminal.execute'],
+                params: {
+                    command: spec.command,
+                    args: spec.args,
+                    timeoutMs: 30_000,
+                },
+            });
+            const resolved = execRes instanceof Promise ? await execRes : execRes;
+            const out = resolved.output;
+            const validation = {
+                passed: resolved.success && out?.exitCode === 0,
+                command: spec.command,
+                args: spec.args,
+                exitCode: out?.exitCode ?? null,
+                stdout: out?.stdout || '',
+                stderr: out?.stderr || resolved.errorMessage || '',
+                stdoutTruncated: out?.stdoutTruncated ?? false,
+                stderrTruncated: out?.stderrTruncated ?? false,
+                durationMs: out?.durationMs ?? 0,
+                timedOut: out?.timedOut ?? false,
+                cancelled: out?.cancelled ?? false,
+                errorCategory: resolved.errorCategory,
+                errorMessage: resolved.errorMessage,
+            };
+            lastValidationResult = validation;
+            if (!validation.passed) {
+                allPassed = false;
+                failureErrorCategory = resolved.errorCategory || 'VALIDATION_FAILED';
+                failureReason = validation.errorMessage || `Validation command '${spec.command} ${spec.args.join(' ')}' failed with exit code ${validation.exitCode}.`;
+                this.logger.warn(`Validation command failed`, {
+                    taskId,
+                    command: spec.command,
+                    exitCode: validation.exitCode,
+                    errorCategory: failureErrorCategory,
+                });
+                break; // Stop on first failing validation command
+            }
+        }
+        if (allPassed) {
+            this.logger.info(`All validation checks passed successfully`, { taskId });
+            return {
+                verified: true,
+                reason: 'All validation checks passed with zero exit code and no errors.',
+                diffsApplied: [...diffs],
+                validationResult: lastValidationResult,
+            };
+        }
+        return {
+            verified: false,
+            reason: failureReason,
+            diffsApplied: [...diffs],
+            validationResult: lastValidationResult,
+            errorCategory: failureErrorCategory,
+        };
+    }
+}
+//# sourceMappingURL=codingAgentVerifier.js.map

package/dist/orchestration/codingAgentVerifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingAgentVerifier.js","sourceRoot":"","sources":["../../src/orchestration/codingAgentVerifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAE,MAAM,EAAY,MAAM,qBAAqB,CAAC;AAOvD,MAAM,OAAO,mBAAmB;IAIpB;IAHF,MAAM,CAAS;IAEvB,YACU,WAAwB,EAChC,WAAqB,MAAM;QADnB,gBAAW,GAAX,WAAW,CAAa;QAGhC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,MAAc,EACd,QAA0B,EAAE,EAC5B,cAAwC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAEpF,4BAA4B;QAC5B,MAAM,aAAa,GAA4B,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;YACxF,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE;gBAC9C,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;aACnC,CAAC;QAEN,IAAI,oBAAoB,GAAkC,IAAI,CAAC;QAC/D,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,oBAAoB,GAAuB,SAAS,CAAC;QAEzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE;gBAC9E,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;gBAC3C,SAAS;gBACT,MAAM;gBACN,MAAM,EAAE,kBAAkB;gBAC1B,qBAAqB,EAAE,CAAC,kBAAkB,CAAC;gBAC3C,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,MAAM;iBAClB;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAEtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAWR,CAAC;YAEd,MAAM,UAAU,GAA2B;gBACzC,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,QAAQ,KAAK,CAAC;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;gBAC/B,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,EAAE;gBACzB,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE;gBAClD,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,KAAK;gBAC9C,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,KAAK;gBAC9C,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC;gBAChC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,KAAK;gBAChC,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,KAAK;gBAClC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;YAEF,oBAAoB,GAAG,UAAU,CAAC;YAElC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,SAAS,GAAG,KAAK,CAAC;gBAClB,oBAAoB,GAAG,QAAQ,CAAC,aAAa,IAAI,mBAAmB,CAAC;gBACrE,aAAa,GAAG,UAAU,CAAC,YAAY,IAAI,uBAAuB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,UAAU,CAAC,QAAQ,GAAG,CAAC;gBACvJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBAC5C,MAAM;oBACN,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,aAAa,EAAE,oBAAoB;iBACpC,CAAC,CAAC;gBACH,MAAM,CAAC,2CAA2C;YACpD,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,iEAAiE;gBACzE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC;gBACxB,gBAAgB,EAAE,oBAAoB;aACvC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC;YACxB,gBAAgB,EAAE,oBAAoB;YACtC,aAAa,EAAE,oBAAoB;SACpC,CAAC;IACJ,CAAC;CACF"}