@timmeck/brain-core 2.36.43 → 2.36.45

package/dist/sandbox/code-sandbox.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Code Sandbox — Isolated Code Execution (AutoGen-inspired)
+ *
+ * Führt generierten Code in isolierten Prozessen aus.
+ * Unterstützt TypeScript, Python und Shell.
+ * Timeout und Ressourcenlimits. Ergebnis-Capture (stdout/stderr/exitCode).
+ *
+ * Docker-basiert wenn verfügbar, Fallback auf lokale Subprozesse mit Timeout.
+ *
+ * Usage:
+ * ```typescript
+ * const sandbox = new CodeSandbox(db);
+ * const result = await sandbox.execute({
+ *   code: 'console.log("Hello");',
+ *   language: 'typescript',
+ *   timeoutMs: 5000,
+ * });
+ * console.log(result.stdout); // "Hello\n"
+ * ```
+ */
+import type Database from 'better-sqlite3';
+export type SandboxLanguage = 'typescript' | 'javascript' | 'python' | 'shell';
+export interface ExecutionRequest {
+    /** Code to execute */
+    code: string;
+    /** Language */
+    language: SandboxLanguage;
+    /** Max execution time in ms. Default: 10000 */
+    timeoutMs?: number;
+    /** Max memory in MB. Default: 128 */
+    memoryMb?: number;
+    /** Working directory (used for local execution) */
+    workDir?: string;
+    /** Name/label for this execution */
+    name?: string;
+    /** Additional context metadata */
+    metadata?: Record<string, unknown>;
+}
+export interface ExecutionResult {
+    id: string;
+    language: SandboxLanguage;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    durationMs: number;
+    timedOut: boolean;
+    error?: string;
+    name?: string;
+    createdAt: number;
+}
+export interface CodeSandboxConfig {
+    /** Prefer Docker containers. Default: true */
+    preferDocker?: boolean;
+    /** Default timeout. Default: 10000 */
+    defaultTimeoutMs?: number;
+    /** Default max memory. Default: 128 */
+    defaultMemoryMb?: number;
+    /** Max output size in chars. Default: 100000 */
+    maxOutputSize?: number;
+}
+export interface CodeSandboxStatus {
+    totalExecutions: number;
+    successCount: number;
+    failCount: number;
+    timeoutCount: number;
+    avgDurationMs: number;
+    dockerAvailable: boolean;
+    languages: string[];
+}
+export declare function runSandboxMigration(db: Database.Database): void;
+export declare class CodeSandbox {
+    private db;
+    private readonly log;
+    private readonly config;
+    private dockerAvailable;
+    private stmtInsert;
+    constructor(db: Database.Database, config?: CodeSandboxConfig);
+    /** Execute code in a sandboxed environment. */
+    execute(request: ExecutionRequest): Promise<ExecutionResult>;
+    /** Execute multiple code blocks sequentially. */
+    executeMany(requests: ExecutionRequest[]): Promise<ExecutionResult[]>;
+    /**
+     * Validate code without executing (basic syntax check).
+     * Returns null if valid, error message if invalid.
+     */
+    validate(code: string, language: SandboxLanguage): string | null;
+    private executeInDocker;
+    private executeLocal;
+    private runProcess;
+    private getDockerConfig;
+    private getLocalConfig;
+    /** Check if Docker is available on this system. */
+    isDockerAvailable(): Promise<boolean>;
+    /** Reset Docker availability cache. */
+    resetDockerCache(): void;
+    /** Get recent execution history. */
+    getHistory(limit?: number): Array<{
+        id: string;
+        language: string;
+        exitCode: number;
+        durationMs: number;
+        timedOut: boolean;
+        name: string | null;
+        error: string | null;
+        createdAt: string;
+    }>;
+    /** Get execution stats by language. */
+    getLanguageStats(): Array<{
+        language: string;
+        total: number;
+        avgDuration: number;
+        successRate: number;
+    }>;
+    getStatus(): CodeSandboxStatus;
+    private truncate;
+    private persistResult;
+}

package/dist/sandbox/code-sandbox.js

@@ -0,0 +1,353 @@
+/**
+ * Code Sandbox — Isolated Code Execution (AutoGen-inspired)
+ *
+ * Führt generierten Code in isolierten Prozessen aus.
+ * Unterstützt TypeScript, Python und Shell.
+ * Timeout und Ressourcenlimits. Ergebnis-Capture (stdout/stderr/exitCode).
+ *
+ * Docker-basiert wenn verfügbar, Fallback auf lokale Subprozesse mit Timeout.
+ *
+ * Usage:
+ * ```typescript
+ * const sandbox = new CodeSandbox(db);
+ * const result = await sandbox.execute({
+ *   code: 'console.log("Hello");',
+ *   language: 'typescript',
+ *   timeoutMs: 5000,
+ * });
+ * console.log(result.stdout); // "Hello\n"
+ * ```
+ */
+import { execFile } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { getLogger } from '../utils/logger.js';
+// ── Migration ───────────────────────────────────────────
+export function runSandboxMigration(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS sandbox_executions (
+      id TEXT PRIMARY KEY,
+      language TEXT NOT NULL,
+      exit_code INTEGER NOT NULL DEFAULT 0,
+      duration_ms INTEGER NOT NULL DEFAULT 0,
+      timed_out INTEGER NOT NULL DEFAULT 0,
+      name TEXT,
+      stdout_preview TEXT,
+      error TEXT,
+      created_at TEXT DEFAULT (datetime('now'))
+    );
+    CREATE INDEX IF NOT EXISTS idx_sandbox_created ON sandbox_executions(created_at);
+    CREATE INDEX IF NOT EXISTS idx_sandbox_language ON sandbox_executions(language);
+  `);
+}
+// ── Sandbox ─────────────────────────────────────────────
+export class CodeSandbox {
+    db;
+    log = getLogger();
+    config;
+    dockerAvailable = null;
+    stmtInsert;
+    constructor(db, config = {}) {
+        this.db = db;
+        runSandboxMigration(db);
+        this.config = {
+            preferDocker: config.preferDocker ?? true,
+            defaultTimeoutMs: config.defaultTimeoutMs ?? 10000,
+            defaultMemoryMb: config.defaultMemoryMb ?? 128,
+            maxOutputSize: config.maxOutputSize ?? 100000,
+        };
+        this.stmtInsert = db.prepare('INSERT INTO sandbox_executions (id, language, exit_code, duration_ms, timed_out, name, stdout_preview, error) VALUES (?, ?, ?, ?, ?, ?, ?, ?)');
+    }
+    // ── Execution ─────────────────────────────────────────
+    /** Execute code in a sandboxed environment. */
+    async execute(request) {
+        const timeoutMs = request.timeoutMs ?? this.config.defaultTimeoutMs;
+        const id = `exec-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+        const startTime = Date.now();
+        let result;
+        try {
+            // Check Docker availability (cached)
+            const useDocker = this.config.preferDocker && await this.isDockerAvailable();
+            if (useDocker) {
+                result = await this.executeInDocker(id, request, timeoutMs);
+            }
+            else {
+                result = await this.executeLocal(id, request, timeoutMs);
+            }
+        }
+        catch (e) {
+            result = {
+                id,
+                language: request.language,
+                stdout: '',
+                stderr: '',
+                exitCode: 1,
+                durationMs: Date.now() - startTime,
+                timedOut: false,
+                error: e.message,
+                name: request.name,
+                createdAt: Date.now(),
+            };
+        }
+        // Truncate output
+        result.stdout = this.truncate(result.stdout);
+        result.stderr = this.truncate(result.stderr);
+        // Persist
+        this.persistResult(result);
+        return result;
+    }
+    /** Execute multiple code blocks sequentially. */
+    async executeMany(requests) {
+        const results = [];
+        for (const req of requests) {
+            results.push(await this.execute(req));
+        }
+        return results;
+    }
+    /**
+     * Validate code without executing (basic syntax check).
+     * Returns null if valid, error message if invalid.
+     */
+    validate(code, language) {
+        try {
+            switch (language) {
+                case 'javascript':
+                case 'typescript':
+                    // Basic check: try parsing with Function constructor
+                    // eslint-disable-next-line no-new-func
+                    new Function(code);
+                    return null;
+                case 'python':
+                    // Basic check: look for obvious syntax errors
+                    if (code.includes('def ') && !code.includes(':'))
+                        return 'Missing colon after def';
+                    return null;
+                case 'shell':
+                    return null; // Shell is hard to validate statically
+                default:
+                    return `Unsupported language: ${language}`;
+            }
+        }
+        catch (e) {
+            return e.message;
+        }
+    }
+    // ── Docker Execution ──────────────────────────────────
+    async executeInDocker(id, request, timeoutMs) {
+        const { code, language, memoryMb } = request;
+        const memory = memoryMb ?? this.config.defaultMemoryMb;
+        const startTime = Date.now();
+        // Determine Docker image and command
+        const { image, cmd, ext } = this.getDockerConfig(language);
+        // Write code to temp file
+        const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'brain-sandbox-'));
+        const codeFile = path.join(tmpDir, `code${ext}`);
+        fs.writeFileSync(codeFile, code, 'utf-8');
+        try {
+            const dockerArgs = [
+                'run', '--rm',
+                '--memory', `${memory}m`,
+                '--cpus', '1',
+                '--network', 'none',
+                '--read-only',
+                '-v', `${tmpDir}:/sandbox:ro`,
+                '-w', '/sandbox',
+                image,
+                ...cmd,
+            ];
+            const { stdout, stderr, exitCode, timedOut } = await this.runProcess('docker', dockerArgs, timeoutMs);
+            return {
+                id,
+                language,
+                stdout,
+                stderr,
+                exitCode,
+                durationMs: Date.now() - startTime,
+                timedOut,
+                name: request.name,
+                createdAt: Date.now(),
+            };
+        }
+        finally {
+            // Cleanup temp files
+            try {
+                fs.rmSync(tmpDir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // ── Local Execution ───────────────────────────────────
+    async executeLocal(id, request, timeoutMs) {
+        const { code, language } = request;
+        const startTime = Date.now();
+        // Write code to temp file
+        const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'brain-sandbox-'));
+        const { ext, localCmd } = this.getLocalConfig(language);
+        const codeFile = path.join(tmpDir, `code${ext}`);
+        fs.writeFileSync(codeFile, code, 'utf-8');
+        try {
+            const cmd = localCmd(codeFile);
+            const { stdout, stderr, exitCode, timedOut } = await this.runProcess(cmd[0], cmd.slice(1), timeoutMs);
+            return {
+                id,
+                language,
+                stdout,
+                stderr,
+                exitCode,
+                durationMs: Date.now() - startTime,
+                timedOut,
+                name: request.name,
+                createdAt: Date.now(),
+            };
+        }
+        finally {
+            try {
+                fs.rmSync(tmpDir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // ── Process Runner ────────────────────────────────────
+    runProcess(cmd, args, timeoutMs) {
+        return new Promise((resolve) => {
+            let timedOut = false;
+            let child;
+            try {
+                child = execFile(cmd, args, {
+                    timeout: timeoutMs,
+                    maxBuffer: this.config.maxOutputSize,
+                    windowsHide: true,
+                }, (error, stdout, stderr) => {
+                    if (error && 'killed' in error && error.killed) {
+                        timedOut = true;
+                    }
+                    resolve({
+                        stdout: stdout ?? '',
+                        stderr: stderr ?? '',
+                        exitCode: error ? (typeof error.code === 'number' ? error.code : 1) : 0,
+                        timedOut,
+                    });
+                });
+            }
+            catch (e) {
+                resolve({
+                    stdout: '',
+                    stderr: e.message,
+                    exitCode: 127, // command not found
+                    timedOut: false,
+                });
+            }
+        });
+    }
+    // ── Language Config ───────────────────────────────────
+    getDockerConfig(language) {
+        switch (language) {
+            case 'typescript':
+                return { image: 'node:20-alpine', cmd: ['npx', '--yes', 'tsx', '/sandbox/code.ts'], ext: '.ts' };
+            case 'javascript':
+                return { image: 'node:20-alpine', cmd: ['node', '/sandbox/code.js'], ext: '.js' };
+            case 'python':
+                return { image: 'python:3.12-alpine', cmd: ['python', '/sandbox/code.py'], ext: '.py' };
+            case 'shell':
+                return { image: 'alpine:3.19', cmd: ['sh', '/sandbox/code.sh'], ext: '.sh' };
+            default:
+                throw new Error(`Unsupported language: ${language}`);
+        }
+    }
+    getLocalConfig(language) {
+        switch (language) {
+            case 'typescript':
+                return { ext: '.ts', localCmd: (f) => ['npx', '--yes', 'tsx', f] };
+            case 'javascript':
+                return { ext: '.js', localCmd: (f) => ['node', f] };
+            case 'python':
+                return { ext: '.py', localCmd: (f) => ['python', f] };
+            case 'shell':
+                return { ext: '.sh', localCmd: (f) => ['sh', f] };
+            default:
+                throw new Error(`Unsupported language: ${language}`);
+        }
+    }
+    // ── Docker Detection ──────────────────────────────────
+    /** Check if Docker is available on this system. */
+    async isDockerAvailable() {
+        if (this.dockerAvailable !== null)
+            return this.dockerAvailable;
+        try {
+            const { exitCode } = await this.runProcess('docker', ['info'], 5000);
+            this.dockerAvailable = exitCode === 0;
+        }
+        catch {
+            this.dockerAvailable = false;
+        }
+        return this.dockerAvailable;
+    }
+    /** Reset Docker availability cache. */
+    resetDockerCache() {
+        this.dockerAvailable = null;
+    }
+    // ── History ──────────────────────────────────────────
+    /** Get recent execution history. */
+    getHistory(limit = 50) {
+        return this.db.prepare('SELECT id, language, exit_code as exitCode, duration_ms as durationMs, timed_out as timedOut, name, error, created_at as createdAt FROM sandbox_executions ORDER BY created_at DESC LIMIT ?').all(limit).map(r => ({
+            ...r,
+            timedOut: !!r.timedOut,
+        }));
+    }
+    /** Get execution stats by language. */
+    getLanguageStats() {
+        try {
+            return this.db.prepare(`
+        SELECT language,
+               COUNT(*) as total,
+               ROUND(AVG(duration_ms)) as avgDuration,
+               ROUND(CAST(SUM(CASE WHEN exit_code = 0 THEN 1 ELSE 0 END) AS REAL) / COUNT(*), 3) as successRate
+        FROM sandbox_executions
+        GROUP BY language
+        ORDER BY total DESC
+      `).all();
+        }
+        catch {
+            return [];
+        }
+    }
+    // ── Status ──────────────────────────────────────────
+    getStatus() {
+        try {
+            const total = this.db.prepare('SELECT COUNT(*) as c FROM sandbox_executions').get().c;
+            const success = this.db.prepare('SELECT COUNT(*) as c FROM sandbox_executions WHERE exit_code = 0').get().c;
+            const timeouts = this.db.prepare('SELECT COUNT(*) as c FROM sandbox_executions WHERE timed_out = 1').get().c;
+            const avgDuration = this.db.prepare('SELECT COALESCE(AVG(duration_ms), 0) as v FROM sandbox_executions').get().v;
+            const languages = this.db.prepare('SELECT DISTINCT language FROM sandbox_executions').all().map(r => r.language);
+            return {
+                totalExecutions: total,
+                successCount: success,
+                failCount: total - success - timeouts,
+                timeoutCount: timeouts,
+                avgDurationMs: Math.round(avgDuration),
+                dockerAvailable: this.dockerAvailable ?? false,
+                languages,
+            };
+        }
+        catch {
+            return { totalExecutions: 0, successCount: 0, failCount: 0, timeoutCount: 0, avgDurationMs: 0, dockerAvailable: false, languages: [] };
+        }
+    }
+    // ── Private Helpers ───────────────────────────────────
+    truncate(str) {
+        return str.length > this.config.maxOutputSize
+            ? str.slice(0, this.config.maxOutputSize) + '\n... [truncated]'
+            : str;
+    }
+    persistResult(result) {
+        try {
+            this.stmtInsert.run(result.id, result.language, result.exitCode, result.durationMs, result.timedOut ? 1 : 0, result.name ?? null, result.stdout.slice(0, 500), // preview only
+            result.error ?? null);
+        }
+        catch (e) {
+            this.log.warn(`[CodeSandbox] Failed to persist: ${e.message}`);
+        }
+    }
+}
+//# sourceMappingURL=code-sandbox.js.map

package/dist/sandbox/code-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-sandbox.js","sourceRoot":"","sources":["../../src/sandbox/code-sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAqB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAyD/C,2DAA2D;AAE3D,MAAM,UAAU,mBAAmB,CAAC,EAAqB;IACvD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;GAcP,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAE3D,MAAM,OAAO,WAAW;IAOZ;IANO,GAAG,GAAG,SAAS,EAAE,CAAC;IAClB,MAAM,CAA8B;IAC7C,eAAe,GAAmB,IAAI,CAAC;IACvC,UAAU,CAAqB;IAEvC,YACU,EAAqB,EAC7B,SAA4B,EAAE;QADtB,OAAE,GAAF,EAAE,CAAmB;QAG7B,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAExB,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,KAAK;YAClD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,GAAG;YAC9C,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;SAC9C,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B,+IAA+I,CAChJ,CAAC;IACJ,CAAC;IAED,yDAAyD;IAEzD,+CAA+C;IAC/C,KAAK,CAAC,OAAO,CAAC,OAAyB;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACpE,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,MAAuB,CAAC;QAE5B,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE7E,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG;gBACP,EAAE;gBACF,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAG,CAAW,CAAC,OAAO;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7C,UAAU;QACV,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,WAAW,CAAC,QAA4B;QAC5C,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAY,EAAE,QAAyB;QAC9C,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,YAAY,CAAC;gBAClB,KAAK,YAAY;oBACf,qDAAqD;oBACrD,uCAAuC;oBACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,KAAK,QAAQ;oBACX,8CAA8C;oBAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,OAAO,yBAAyB,CAAC;oBACnF,OAAO,IAAI,CAAC;gBACd,KAAK,OAAO;oBACV,OAAO,IAAI,CAAC,CAAC,uCAAuC;gBACtD;oBACE,OAAO,yBAAyB,QAAQ,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAQ,CAAW,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,yDAAyD;IAEjD,KAAK,CAAC,eAAe,CAC3B,EAAU,EACV,OAAyB,EACzB,SAAiB;QAEjB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,qCAAqC;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3D,0BAA0B;QAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM;gBACb,UAAU,EAAE,GAAG,MAAM,GAAG;gBACxB,QAAQ,EAAE,GAAG;gBACb,WAAW,EAAE,MAAM;gBACnB,aAAa;gBACb,IAAI,EAAE,GAAG,MAAM,cAAc;gBAC7B,IAAI,EAAE,UAAU;gBAChB,KAAK;gBACL,GAAG,GAAG;aACP,CAAC;YAEF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAClE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAChC,CAAC;YAEF,OAAO;gBACL,EAAE;gBACF,QAAQ;gBACR,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,QAAQ;gBACR,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,qBAAqB;YACrB,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,yDAAyD;IAEjD,KAAK,CAAC,YAAY,CACxB,EAAU,EACV,OAAyB,EACzB,SAAiB;QAEjB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,0BAA0B;QAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAClE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAChC,CAAC;YAEF,OAAO;gBACL,EAAE;gBACF,QAAQ;gBACR,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,QAAQ;gBACR,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,yDAAyD;IAEjD,UAAU,CAChB,GAAW,EACX,IAAc,EACd,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,KAAmB,CAAC;YAExB,IAAI,CAAC;gBACH,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC1B,OAAO,EAAE,SAAS;oBAClB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;oBACpC,WAAW,EAAE,IAAI;iBAClB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBAC3B,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC/C,QAAQ,GAAG,IAAI,CAAC;oBAClB,CAAC;oBACD,OAAO,CAAC;wBACN,MAAM,EAAE,MAAM,IAAI,EAAE;wBACpB,MAAM,EAAE,MAAM,IAAI,EAAE;wBACpB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAQ,KAAiC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC3I,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC;oBACN,MAAM,EAAE,EAAE;oBACV,MAAM,EAAG,CAAW,CAAC,OAAO;oBAC5B,QAAQ,EAAE,GAAG,EAAE,oBAAoB;oBACnC,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IAEjD,eAAe,CAAC,QAAyB;QAC/C,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,YAAY;gBACf,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YACnG,KAAK,YAAY;gBACf,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YACpF,KAAK,QAAQ;gBACX,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YAC1F,KAAK,OAAO;gBACV,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YAC/E;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,QAAyB;QAC9C,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,YAAY;gBACf,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,YAAY;gBACf,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,KAAK,QAAQ;gBACX,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK,OAAO;gBACV,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpD;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,yDAAyD;IAEzD,mDAAmD;IACnD,KAAK,CAAC,iBAAiB;QACrB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAE/D,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,eAAe,GAAG,QAAQ,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,uCAAuC;IACvC,gBAAgB;QACd,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,wDAAwD;IAExD,oCAAoC;IACpC,UAAU,CAAC,KAAK,GAAG,EAAE;QAInB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,6LAA6L,CAC9L,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,GAAI,CAA6B;YACjC,QAAQ,EAAE,CAAC,CAAE,CAA6B,CAAC,QAAQ;SACpD,CAAC,CAGA,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,gBAAgB;QACd,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;OAQtB,CAAC,CAAC,GAAG,EAA0F,CAAC;QACnG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,uDAAuD;IAEvD,SAAS;QACP,IAAI,CAAC;YACH,MAAM,KAAK,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YACzG,MAAM,OAAO,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC/H,MAAM,QAAQ,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAChI,MAAM,WAAW,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YACpI,MAAM,SAAS,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,EAAkC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAElJ,OAAO;gBACL,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,OAAO;gBACrB,SAAS,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ;gBACrC,YAAY,EAAE,QAAQ;gBACtB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBACtC,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;gBAC9C,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACzI,CAAC;IACH,CAAC;IAED,yDAAyD;IAEjD,QAAQ,CAAC,GAAW;QAC1B,OAAO,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;YAC3C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,mBAAmB;YAC/D,CAAC,CAAC,GAAG,CAAC;IACV,CAAC;IAEO,aAAa,CAAC,MAAuB;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe;YAC5C,MAAM,CAAC,KAAK,IAAI,IAAI,CACrB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAqC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,2 @@
+export { CodeSandbox, runSandboxMigration } from './code-sandbox.js';
+export type { SandboxLanguage, ExecutionRequest, ExecutionResult, CodeSandboxConfig, CodeSandboxStatus, } from './code-sandbox.js';

package/dist/sandbox/index.js

@@ -0,0 +1,2 @@
+export { CodeSandbox, runSandboxMigration } from './code-sandbox.js';
+//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/self-modification/self-modification-engine.d.ts

@@ -24,6 +24,8 @@ export interface ProposalMeta {
     reason_code?: string;
     metrics_before?: Record<string, number>;
     metrics_after?: Record<string, number>;
+    /** Reference code snippet from absorbed repos — included in generation prompt as inspiration. */
+    referenceCode?: string;
 }
 export type ModificationStatus = 'proposed' | 'generating' | 'testing' | 'ready' | 'approved' | 'rejected' | 'applied' | 'rolled_back' | 'failed';
 export interface FileDiff {
@@ -71,6 +73,7 @@ export declare class SelfModificationEngine {
     private selfScanner;
     private ts;
     private recentGenerations;
+    private referenceCodeMap;
     private readonly stmtInsert;
     private readonly stmtUpdate;
     private readonly stmtGet;

package/dist/self-modification/self-modification-engine.js

@@ -71,6 +71,8 @@ export class SelfModificationEngine {
     ts = null;
     // Rate limiting
     recentGenerations = [];
+    // Ephemeral reference code snippets (not persisted in DB)
+    referenceCodeMap = new Map();
     // Prepared statements
     stmtInsert;
     stmtUpdate;
@@ -129,6 +131,9 @@ export class SelfModificationEngine {
         // Store structured proposal metadata if provided
         if (meta) {
             this.updateProposalMeta(id, meta);
+            if (meta.referenceCode) {
+                this.referenceCodeMap.set(id, meta.referenceCode);
+            }
         }
         this.log.info(`[self-mod] Proposed modification #${id}: ${title}${meta?.risk_level ? ` [risk: ${meta.risk_level}]` : ''}`);
         this.ts?.emit('self-modification', 'analyzing', `Proposed: ${title}`, 'notable');
@@ -194,6 +199,15 @@ export class SelfModificationEngine {
             if (fileContents.length > 0) {
                 systemPrompt += '\n\n## Current Source Code of Target Files\n' + fileContents.join('\n\n');
             }
+            // Add reference implementation from absorbed repos if available
+            const refCode = this.referenceCodeMap.get(modificationId);
+            if (refCode) {
+                systemPrompt += '\n\n## Reference Implementation (from absorbed repos)\n' +
+                    'The following code snippet shows a similar implementation that scored well:\n' +
+                    '```\n' + refCode + '\n```\n' +
+                    "Adapt this approach to fit Brain's architecture.";
+                this.referenceCodeMap.delete(modificationId); // Clean up after use
+            }
             // User message
             const userMessage = [
                 `## Task: ${mod.title}`,