anantham-v2 2.0.0-alpha.1

package/dist/execution/change-set-calculator.js

@@ -0,0 +1,155 @@
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ChangeSetMetadataSchema, } from "../domain/workspace.js";
+const execAsync = promisify(exec);
+/**
+ * Deterministic Change-Set Calculator.
+ * Computes exact file mutations, cryptographic hashes, diff patches,
+ * and contract/symbol modifications from an isolated worktree.
+ * PRD Part 2 Section 54.
+ */
+export class ChangeSetCalculator {
+    /**
+     * Calculate change-set metadata between base commit and worktree HEAD.
+     */
+    async calculate(workspaceId, worktreePath, baseCommit, targetCommit = baseCommit) {
+        try {
+            // 1. Get HEAD commit of worktree
+            const { stdout: headOut } = await execAsync("git rev-parse HEAD", { cwd: worktreePath });
+            const headCommit = headOut.trim();
+            // 2. Get status of changed files against baseCommit
+            // Uses `git diff --name-status <baseCommit>` to include both staged/committed and working tree modifications
+            const { stdout: diffStatusOut } = await execAsync(`git diff --name-status "${baseCommit}"`, {
+                cwd: worktreePath,
+            });
+            const filesAdded = [];
+            const filesModified = [];
+            const filesDeleted = [];
+            const filesRenamed = [];
+            const lines = diffStatusOut.split("\n").map((l) => l.trim()).filter(Boolean);
+            for (const line of lines) {
+                const parts = line.split("\t");
+                const status = parts[0];
+                const file1 = parts[1];
+                const file2 = parts[2];
+                if (!status || !file1)
+                    continue;
+                if (status.startsWith("A")) {
+                    filesAdded.push(file1);
+                }
+                else if (status.startsWith("M")) {
+                    filesModified.push(file1);
+                }
+                else if (status.startsWith("D")) {
+                    filesDeleted.push(file1);
+                }
+                else if (status.startsWith("R") && file2) {
+                    filesRenamed.push({ from: file1, to: file2 });
+                }
+            }
+            // Also inspect untracked files
+            const { stdout: untrackedOut } = await execAsync("git status --porcelain", { cwd: worktreePath });
+            const untrackedLines = untrackedOut.split("\n").map((l) => l.trim()).filter((l) => l.startsWith("??"));
+            for (const line of untrackedLines) {
+                const untrackedFile = line.slice(3).trim();
+                if (!filesAdded.includes(untrackedFile)) {
+                    filesAdded.push(untrackedFile);
+                }
+            }
+            // 3. Compute SHA-256 for all existing modified / added files
+            const fileHashes = {};
+            const allFiles = [...filesAdded, ...filesModified];
+            for (const relPath of allFiles) {
+                const fullPath = path.join(worktreePath, relPath);
+                if (fs.existsSync(fullPath) && fs.statSync(fullPath).isFile()) {
+                    const content = fs.readFileSync(fullPath);
+                    fileHashes[relPath] = crypto.createHash("sha256").update(content).digest("hex");
+                }
+            }
+            // 4. Extract diff patch
+            const { stdout: patchOut } = await execAsync(`git diff "${baseCommit}"`, { cwd: worktreePath });
+            const patch = patchOut.trim();
+            // 5. Extract modified symbols for domain contracts, migrations, and public index exports
+            const symbolsModified = this.extractSymbols(worktreePath, [...filesAdded, ...filesModified, ...filesDeleted]);
+            // 6. Compute deterministic changeSetHash
+            const hashPayload = JSON.stringify({
+                baseCommit,
+                headCommit,
+                targetCommit,
+                filesAdded: [...filesAdded].sort(),
+                filesModified: [...filesModified].sort(),
+                filesDeleted: [...filesDeleted].sort(),
+                filesRenamed,
+                fileHashes,
+                patch,
+            });
+            const changeSetHash = crypto.createHash("sha256").update(hashPayload).digest("hex");
+            const metadata = {
+                workspaceId,
+                baseCommit,
+                headCommit,
+                targetCommit,
+                filesAdded,
+                filesModified,
+                filesDeleted,
+                filesRenamed,
+                fileHashes,
+                symbolsModified: symbolsModified.length > 0 ? symbolsModified : undefined,
+                patch,
+                changeSetHash,
+                createdAt: new Date().toISOString(),
+            };
+            return ChangeSetMetadataSchema.parse(metadata);
+        }
+        catch (err) {
+            throw new Error(`CHANGESET_CALCULATION_FAILED: Failed to calculate changeset for workspace "${workspaceId}": ${err.message}`);
+        }
+    }
+    /**
+     * Extract modified symbols from key architectural files (domain, migrations, public index).
+     */
+    extractSymbols(worktreePath, files) {
+        const symbols = [];
+        for (const file of files) {
+            const fullPath = path.join(worktreePath, file);
+            if (!fs.existsSync(fullPath))
+                continue;
+            const normalized = file.replace(/\\/g, "/");
+            // Check domain models
+            if (normalized.startsWith("src/domain/") || normalized.startsWith("src/persistence/migrations/") || normalized === "src/index.ts") {
+                try {
+                    const content = fs.readFileSync(fullPath, "utf-8");
+                    // Match exported classes, interfaces, types, consts
+                    const exportMatches = content.matchAll(/export\s+(class|interface|type|const|function|enum)\s+([a-zA-Z0-9_$]+)/g);
+                    for (const match of exportMatches) {
+                        const kind = match[1];
+                        const symbol = match[2];
+                        if (symbol && kind) {
+                            symbols.push({
+                                file: normalized,
+                                symbol,
+                                kind,
+                            });
+                        }
+                    }
+                    // Migration match
+                    if (normalized.startsWith("src/persistence/migrations/")) {
+                        symbols.push({
+                            file: normalized,
+                            symbol: path.basename(file, ".ts"),
+                            kind: "migration",
+                        });
+                    }
+                }
+                catch {
+                    // ignore read error
+                }
+            }
+        }
+        return symbols;
+    }
+}
+//# sourceMappingURL=change-set-calculator.js.map

package/dist/execution/change-set-calculator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-set-calculator.js","sourceRoot":"","sources":["../../src/execution/change-set-calculator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAEL,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAQlC;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,WAAmB,EACnB,YAAoB,EACpB,UAAkB,EAClB,eAAuB,UAAU;QAEjC,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACzF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAElC,oDAAoD;YACpD,6GAA6G;YAC7G,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,SAAS,CAAC,2BAA2B,UAAU,GAAG,EAAE;gBAC1F,GAAG,EAAE,YAAY;aAClB,CAAC,CAAC;YAEH,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,aAAa,GAAa,EAAE,CAAC;YACnC,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,YAAY,GAAwC,EAAE,CAAC;YAE7D,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAEhC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;oBAC3C,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAClG,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACvG,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,aAAa,CAAC,CAAC;YACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;gBAClD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC9D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC1C,UAAU,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,UAAU,GAAG,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAChG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE9B,yFAAyF;YACzF,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;YAE9G,yCAAyC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;gBACjC,UAAU;gBACV,UAAU;gBACV,YAAY;gBACZ,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;gBAClC,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE;gBACxC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;gBACtC,YAAY;gBACZ,UAAU;gBACV,KAAK;aACN,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpF,MAAM,QAAQ,GAAsB;gBAClC,WAAW;gBACX,UAAU;gBACV,UAAU;gBACV,YAAY;gBACZ,UAAU;gBACV,aAAa;gBACb,YAAY;gBACZ,YAAY;gBACZ,UAAU;gBACV,eAAe,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;gBACzE,KAAK;gBACL,aAAa;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,OAAO,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8EAA8E,WAAW,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,YAAoB,EAAE,KAAe;QAC1D,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE5C,sBAAsB;YACtB,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,6BAA6B,CAAC,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;gBAClI,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACnD,oDAAoD;oBACpD,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,yEAAyE,CAAC,CAAC;oBAClH,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;wBAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAA+B,CAAC;wBACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACxB,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,UAAU;gCAChB,MAAM;gCACN,IAAI;6BACL,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBACD,kBAAkB;oBAClB,IAAI,UAAU,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;wBACzD,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,UAAU;4BAChB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;4BAClC,IAAI,EAAE,WAAW;yBAClB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/execution/conflict-detector.d.ts

@@ -0,0 +1,16 @@
+import { type ChangeSetMetadata, type ConflictReport } from "../domain/workspace.js";
+import { type GitWorkingTreeStatus } from "./git-worktree-manager.js";
+/**
+ * Deterministic Conflict Detector.
+ * Evaluates file overlaps, contract/migration collisions, delete-modify conflicts,
+ * base divergence, and external user modifications.
+ * PRD Part 2 Section 53.
+ */
+export declare class ConflictDetector {
+    /**
+     * Detect potential conflicts between a workspace changeset, peer active changesets,
+     * and the target repository state.
+     */
+    detectConflicts(primaryChangeSet: ChangeSetMetadata, peerChangeSets: ChangeSetMetadata[], targetStatus?: GitWorkingTreeStatus): ConflictReport | null;
+}
+//# sourceMappingURL=conflict-detector.d.ts.map

package/dist/execution/conflict-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflict-detector.d.ts","sourceRoot":"","sources":["../../src/execution/conflict-detector.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B;;;OAGG;IACI,eAAe,CACpB,gBAAgB,EAAE,iBAAiB,EACnC,cAAc,EAAE,iBAAiB,EAAE,EACnC,YAAY,CAAC,EAAE,oBAAoB,GAClC,cAAc,GAAG,IAAI;CAsLzB"}

package/dist/execution/conflict-detector.js

@@ -0,0 +1,182 @@
+import { randomUUID } from "node:crypto";
+import { ConflictReportSchema, } from "../domain/workspace.js";
+/**
+ * Deterministic Conflict Detector.
+ * Evaluates file overlaps, contract/migration collisions, delete-modify conflicts,
+ * base divergence, and external user modifications.
+ * PRD Part 2 Section 53.
+ */
+export class ConflictDetector {
+    /**
+     * Detect potential conflicts between a workspace changeset, peer active changesets,
+     * and the target repository state.
+     */
+    detectConflicts(primaryChangeSet, peerChangeSets, targetStatus) {
+        const now = new Date().toISOString();
+        // 1. User / External Change Check on Target Branch
+        if (targetStatus && !targetStatus.isClean) {
+            return ConflictReportSchema.parse({
+                id: randomUUID(),
+                workspaceId: primaryChangeSet.workspaceId,
+                conflictType: "USER_CHANGE_CONFLICT",
+                conflictingFiles: [...targetStatus.modifiedFiles, ...targetStatus.untrackedFiles],
+                details: `Target working tree is dirty with ${targetStatus.modifiedFiles.length} uncommitted user modifications. Integration is blocked to protect user changes.`,
+                reconciliationSuggestion: "MANUAL_RECONCILIATION",
+                detectedAt: now,
+            });
+        }
+        // 2. Base Revision Divergence Check
+        if (targetStatus && targetStatus.headCommit !== primaryChangeSet.baseCommit) {
+            return ConflictReportSchema.parse({
+                id: randomUUID(),
+                workspaceId: primaryChangeSet.workspaceId,
+                conflictType: "BASE_DIVERGENCE",
+                conflictingFiles: [],
+                details: `Target branch has advanced from base commit "${primaryChangeSet.baseCommit}" to "${targetStatus.headCommit}". Workspace requires rebase before integration.`,
+                reconciliationSuggestion: "REBASE",
+                detectedAt: now,
+            });
+        }
+        const primaryAllFiles = new Set([
+            ...primaryChangeSet.filesAdded,
+            ...primaryChangeSet.filesModified,
+            ...primaryChangeSet.filesDeleted,
+            ...primaryChangeSet.filesRenamed.map((r) => r.to),
+        ]);
+        // 3. Compare with each active peer workspace
+        for (const peer of peerChangeSets) {
+            if (peer.workspaceId === primaryChangeSet.workspaceId)
+                continue;
+            const peerAllFiles = new Set([
+                ...peer.filesAdded,
+                ...peer.filesModified,
+                ...peer.filesDeleted,
+                ...peer.filesRenamed.map((r) => r.to),
+            ]);
+            // A. Event Schema Conflict
+            const primaryHasEvent = [...primaryAllFiles].some((f) => f.replace(/\\/g, "/") === "src/domain/event.ts");
+            const peerHasEvent = [...peerAllFiles].some((f) => f.replace(/\\/g, "/") === "src/domain/event.ts");
+            if (primaryHasEvent && peerHasEvent) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "EVENT_SCHEMA_CONFLICT",
+                    conflictingFiles: ["src/domain/event.ts"],
+                    details: `Event schema conflict: both workspaces modified canonical event definitions in src/domain/event.ts.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // B. Public API Export Collision
+            const primaryHasIndex = [...primaryAllFiles].some((f) => f.replace(/\\/g, "/") === "src/index.ts");
+            const peerHasIndex = [...peerAllFiles].some((f) => f.replace(/\\/g, "/") === "src/index.ts");
+            if (primaryHasIndex && peerHasIndex) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "PUBLIC_API_CONFLICT",
+                    conflictingFiles: ["src/index.ts"],
+                    details: `Public API collision detected: both workspaces modify public exports in src/index.ts.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // C. Database Migration Conflict
+            const primaryMigrations = [...primaryAllFiles].filter((f) => f.replace(/\\/g, "/").startsWith("src/persistence/migrations/"));
+            const peerMigrations = [...peerAllFiles].filter((f) => f.replace(/\\/g, "/").startsWith("src/persistence/migrations/"));
+            if (primaryMigrations.length > 0 && peerMigrations.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "MIGRATION_CONFLICT",
+                    conflictingFiles: [...new Set([...primaryMigrations, ...peerMigrations])],
+                    details: `Database schema migration conflict detected: both workspaces introduce migration files.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // D. Shared Contract Conflict (domain model symbols)
+            const primaryContracts = [...primaryAllFiles].filter((f) => f.replace(/\\/g, "/").startsWith("src/domain/"));
+            const peerContracts = [...peerAllFiles].filter((f) => f.replace(/\\/g, "/").startsWith("src/domain/"));
+            if (primaryContracts.length > 0 && peerContracts.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "CONTRACT_CONFLICT",
+                    conflictingFiles: [...new Set([...primaryContracts, ...peerContracts])],
+                    details: `Shared domain contract conflict detected: both workspaces modified domain models in src/domain/.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // E. Delete / Modify Conflict
+            const deleteModifyOverlap = [
+                ...primaryChangeSet.filesDeleted.filter((f) => peer.filesModified.includes(f)),
+                ...peer.filesDeleted.filter((f) => primaryChangeSet.filesModified.includes(f)),
+            ];
+            if (deleteModifyOverlap.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "DELETE_MODIFY_CONFLICT",
+                    conflictingFiles: deleteModifyOverlap,
+                    details: `Delete-Modify conflict detected: files [${deleteModifyOverlap.join(", ")}] deleted by one workspace and modified by another.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // F. Rename Conflict
+            const primaryRenamedTo = primaryChangeSet.filesRenamed.map((r) => r.to);
+            const peerRenamedTo = peer.filesRenamed.map((r) => r.to);
+            const renameOverlap = primaryRenamedTo.filter((f) => peerRenamedTo.includes(f));
+            if (renameOverlap.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "RENAME_CONFLICT",
+                    conflictingFiles: renameOverlap,
+                    details: `Rename conflict detected: both workspaces rename to same target file [${renameOverlap.join(", ")}].`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // G. Add / Add Conflict
+            const addAddOverlap = primaryChangeSet.filesAdded.filter((f) => peer.filesAdded.includes(f));
+            const differingAddAdds = addAddOverlap.filter((f) => primaryChangeSet.fileHashes[f] !== peer.fileHashes[f]);
+            if (differingAddAdds.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "ADD_ADD_CONFLICT",
+                    conflictingFiles: differingAddAdds,
+                    details: `Add-Add conflict detected: both workspaces add file [${differingAddAdds.join(", ")}] with differing content hashes.`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+            // H. Same-File Overlap (Modified by both)
+            const sameFileOverlap = primaryChangeSet.filesModified.filter((f) => peer.filesModified.includes(f));
+            if (sameFileOverlap.length > 0) {
+                return ConflictReportSchema.parse({
+                    id: randomUUID(),
+                    workspaceId: primaryChangeSet.workspaceId,
+                    conflictingWorkspaceId: peer.workspaceId,
+                    conflictType: "FILE_CONFLICT",
+                    conflictingFiles: sameFileOverlap,
+                    details: `Direct file conflict detected: both workspaces modified file [${sameFileOverlap.join(", ")}].`,
+                    reconciliationSuggestion: "RESERIALIZE",
+                    detectedAt: now,
+                });
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=conflict-detector.js.map

package/dist/execution/conflict-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflict-detector.js","sourceRoot":"","sources":["../../src/execution/conflict-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGL,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAGhC;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;;OAGG;IACI,eAAe,CACpB,gBAAmC,EACnC,cAAmC,EACnC,YAAmC;QAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,mDAAmD;QACnD,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1C,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,EAAE,EAAE,UAAU,EAAE;gBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;gBACzC,YAAY,EAAE,sBAAsB;gBACpC,gBAAgB,EAAE,CAAC,GAAG,YAAY,CAAC,aAAa,EAAE,GAAG,YAAY,CAAC,cAAc,CAAC;gBACjF,OAAO,EAAE,qCAAqC,YAAY,CAAC,aAAa,CAAC,MAAM,kFAAkF;gBACjK,wBAAwB,EAAE,uBAAuB;gBACjD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,oCAAoC;QACpC,IAAI,YAAY,IAAI,YAAY,CAAC,UAAU,KAAK,gBAAgB,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO,oBAAoB,CAAC,KAAK,CAAC;gBAChC,EAAE,EAAE,UAAU,EAAE;gBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;gBACzC,YAAY,EAAE,iBAAiB;gBAC/B,gBAAgB,EAAE,EAAE;gBACpB,OAAO,EAAE,gDAAgD,gBAAgB,CAAC,UAAU,SAAS,YAAY,CAAC,UAAU,kDAAkD;gBACtK,wBAAwB,EAAE,QAAQ;gBAClC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;YAC9B,GAAG,gBAAgB,CAAC,UAAU;YAC9B,GAAG,gBAAgB,CAAC,aAAa;YACjC,GAAG,gBAAgB,CAAC,YAAY;YAChC,GAAG,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,6CAA6C;QAC7C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW;gBAAE,SAAS;YAEhE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;gBAC3B,GAAG,IAAI,CAAC,UAAU;gBAClB,GAAG,IAAI,CAAC,aAAa;gBACrB,GAAG,IAAI,CAAC,YAAY;gBACpB,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,CAAC,CAAC;YAEH,2BAA2B;YAC3B,MAAM,eAAe,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,qBAAqB,CAAC,CAAC;YAC1G,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,qBAAqB,CAAC,CAAC;YACpG,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;gBACpC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,uBAAuB;oBACrC,gBAAgB,EAAE,CAAC,qBAAqB,CAAC;oBACzC,OAAO,EAAE,qGAAqG;oBAC9G,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,iCAAiC;YACjC,MAAM,eAAe,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,cAAc,CAAC,CAAC;YACnG,MAAM,YAAY,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,cAAc,CAAC,CAAC;YAC7F,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;gBACpC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,qBAAqB;oBACnC,gBAAgB,EAAE,CAAC,cAAc,CAAC;oBAClC,OAAO,EAAE,uFAAuF;oBAChG,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,iCAAiC;YACjC,MAAM,iBAAiB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAC9H,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACxH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,oBAAoB;oBAClC,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;oBACzE,OAAO,EAAE,yFAAyF;oBAClG,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,qDAAqD;YACrD,MAAM,gBAAgB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7G,MAAM,aAAa,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;YACvG,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5D,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,mBAAmB;oBACjC,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;oBACvE,OAAO,EAAE,kGAAkG;oBAC3G,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,MAAM,mBAAmB,GAAG;gBAC1B,GAAG,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9E,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC/E,CAAC;YACF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,wBAAwB;oBACtC,gBAAgB,EAAE,mBAAmB;oBACrC,OAAO,EAAE,2CAA2C,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD;oBACvI,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,iBAAiB;oBAC/B,gBAAgB,EAAE,aAAa;oBAC/B,OAAO,EAAE,yEAAyE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC9G,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,wBAAwB;YACxB,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAC7D,CAAC;YACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,kBAAkB;oBAChC,gBAAgB,EAAE,gBAAgB;oBAClC,OAAO,EAAE,wDAAwD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC;oBAC9H,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,0CAA0C;YAC1C,MAAM,eAAe,GAAG,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACrG,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,oBAAoB,CAAC,KAAK,CAAC;oBAChC,EAAE,EAAE,UAAU,EAAE;oBAChB,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,sBAAsB,EAAE,IAAI,CAAC,WAAW;oBACxC,YAAY,EAAE,eAAe;oBAC7B,gBAAgB,EAAE,eAAe;oBACjC,OAAO,EAAE,iEAAiE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACxG,wBAAwB,EAAE,aAAa;oBACvC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/execution/docker-sandbox-executor.d.ts

@@ -0,0 +1,16 @@
+import { type ExecutionRequest, type ExecutionResult } from "../domain/execution.js";
+import { ProcessSupervisor } from "./process-supervisor.js";
+export interface DockerSandboxExecutorOptions {
+    supervisor?: ProcessSupervisor;
+    defaultImage?: string;
+    defaultProjectRoot?: string;
+}
+export declare class DockerSandboxExecutor {
+    readonly type: "docker";
+    private readonly defaultImage;
+    private readonly defaultProjectRoot;
+    constructor(options?: DockerSandboxExecutorOptions);
+    isAvailable(): Promise<boolean>;
+    execute(request: ExecutionRequest): Promise<ExecutionResult>;
+}
+//# sourceMappingURL=docker-sandbox-executor.d.ts.map

package/dist/execution/docker-sandbox-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-executor.d.ts","sourceRoot":"","sources":["../../src/execution/docker-sandbox-executor.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAI5D,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,qBAAa,qBAAqB;IAChC,SAAgB,IAAI,EAAG,QAAQ,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;gBAEhC,OAAO,GAAE,4BAAiC;IAKzC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS/B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;CA0H1E"}

package/dist/execution/docker-sandbox-executor.js

@@ -0,0 +1,138 @@
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+import path from "node:path";
+import { ExecutionRequestSchema, } from "../domain/execution.js";
+import { resolveSafePath } from "../tools/native/path-utils.js";
+const execAsync = promisify(exec);
+export class DockerSandboxExecutor {
+    type = "docker";
+    defaultImage;
+    defaultProjectRoot;
+    constructor(options = {}) {
+        this.defaultImage = options.defaultImage || "alpine:latest";
+        this.defaultProjectRoot = options.defaultProjectRoot || process.cwd();
+    }
+    async isAvailable() {
+        try {
+            await execAsync("docker info", { timeout: 3000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async execute(request) {
+        const validated = ExecutionRequestSchema.parse(request);
+        const root = validated.projectRoot || this.defaultProjectRoot;
+        const startTime = Date.now();
+        // 1. Privileged Container Check
+        if (validated.sandbox?.privileged) {
+            return {
+                executionId: validated.executionId,
+                executorType: "docker",
+                status: "failed",
+                exitCode: 1,
+                stdout: "",
+                stderr: "Security violation: Privileged containers are strictly prohibited.",
+                truncated: false,
+                durationMs: Date.now() - startTime,
+                error: "Privileged containers prohibited",
+            };
+        }
+        // 2. Mount Validation (Strict Containment)
+        if (validated.sandbox?.mounts) {
+            for (const mount of validated.sandbox.mounts) {
+                try {
+                    resolveSafePath(root, mount.hostPath);
+                }
+                catch {
+                    return {
+                        executionId: validated.executionId,
+                        executorType: "docker",
+                        status: "failed",
+                        exitCode: 1,
+                        stdout: "",
+                        stderr: `Security violation: Mount path "${mount.hostPath}" attempts to escape project boundary "${root}".`,
+                        truncated: false,
+                        durationMs: Date.now() - startTime,
+                        error: "Mount escape prohibited",
+                    };
+                }
+                const normalizedHost = path.resolve(mount.hostPath).toLowerCase();
+                if (normalizedHost === "c:\\" ||
+                    normalizedHost === "c:/" ||
+                    normalizedHost === "/" ||
+                    normalizedHost.includes("docker.sock") ||
+                    normalizedHost.includes("windows\\system32")) {
+                    return {
+                        executionId: validated.executionId,
+                        executorType: "docker",
+                        status: "failed",
+                        exitCode: 1,
+                        stdout: "",
+                        stderr: `Security violation: Mounting host sensitive system path "${mount.hostPath}" is forbidden.`,
+                        truncated: false,
+                        durationMs: Date.now() - startTime,
+                        error: "System mount forbidden",
+                    };
+                }
+            }
+        }
+        // 3. Availability Check (Fail Closed - No silent host fallback!)
+        const available = await this.isAvailable();
+        if (!available) {
+            return {
+                executionId: validated.executionId,
+                executorType: "docker",
+                status: "failed",
+                exitCode: 1,
+                stdout: "",
+                stderr: "Executor unavailable: Docker daemon is not accessible or not running. Isolation downgrade to host execution is strictly denied.",
+                truncated: false,
+                durationMs: Date.now() - startTime,
+                error: "Docker daemon unavailable",
+            };
+        }
+        // 4. Construct Bounded Docker Run Command
+        const image = validated.sandbox?.image || this.defaultImage;
+        const networkFlag = validated.sandbox?.network === "allowed" ? "--network bridge" : "--network none";
+        const memFlag = validated.limits?.maxMemoryMb ? `-m ${validated.limits.maxMemoryMb}m` : "";
+        const capDropFlag = "--cap-drop=ALL";
+        const mountFlags = (validated.sandbox?.mounts || [])
+            .map((m) => {
+            const ro = m.readOnly ? ":ro" : "";
+            return `-v "${resolveSafePath(root, m.hostPath)}:${m.containerPath}${ro}"`;
+        })
+            .join(" ");
+        const dockerCmd = `docker run --rm ${capDropFlag} ${networkFlag} ${memFlag} ${mountFlags} ${image} ${validated.command} ${(validated.args || []).join(" ")}`.trim();
+        try {
+            const { stdout, stderr } = await execAsync(dockerCmd, {
+                timeout: validated.timeoutMs || 30000,
+            });
+            return {
+                executionId: validated.executionId,
+                executorType: "docker",
+                status: "completed",
+                exitCode: 0,
+                stdout,
+                stderr,
+                truncated: false,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        catch (err) {
+            return {
+                executionId: validated.executionId,
+                executorType: "docker",
+                status: "failed",
+                exitCode: err.code || 1,
+                stdout: err.stdout || "",
+                stderr: err.stderr || err.message,
+                truncated: false,
+                durationMs: Date.now() - startTime,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=docker-sandbox-executor.js.map

package/dist/execution/docker-sandbox-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-executor.js","sourceRoot":"","sources":["../../src/execution/docker-sandbox-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAGL,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAQlC,MAAM,OAAO,qBAAqB;IAChB,IAAI,GAAG,QAAiB,CAAC;IACxB,YAAY,CAAS;IACrB,kBAAkB,CAAS;IAE5C,YAAY,UAAwC,EAAE;QACpD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC;QAC5D,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxE,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,OAAyB;QAC5C,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,kBAAkB,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,gCAAgC;QAChC,IAAI,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YAClC,OAAO;gBACL,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,oEAAoE;gBAC5E,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,KAAK,EAAE,kCAAkC;aAC1C,CAAC;QACJ,CAAC;QAED,2CAA2C;QAC3C,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;wBACL,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,YAAY,EAAE,QAAQ;wBACtB,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,CAAC;wBACX,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,mCAAmC,KAAK,CAAC,QAAQ,0CAA0C,IAAI,IAAI;wBAC3G,SAAS,EAAE,KAAK;wBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,KAAK,EAAE,yBAAyB;qBACjC,CAAC;gBACJ,CAAC;gBAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClE,IACE,cAAc,KAAK,MAAM;oBACzB,cAAc,KAAK,KAAK;oBACxB,cAAc,KAAK,GAAG;oBACtB,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC;oBACtC,cAAc,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAC5C,CAAC;oBACD,OAAO;wBACL,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,YAAY,EAAE,QAAQ;wBACtB,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,CAAC;wBACX,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,4DAA4D,KAAK,CAAC,QAAQ,iBAAiB;wBACnG,SAAS,EAAE,KAAK;wBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,KAAK,EAAE,wBAAwB;qBAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,iIAAiI;gBACzI,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrG,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,WAAW,GAAG,gBAAgB,CAAC;QAErC,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,EAAE,GAAG,CAAC;QAC7E,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,mBAAmB,WAAW,IAAI,WAAW,IAAI,OAAO,IAAI,UAAU,IAAI,KAAK,IAAI,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAEpK,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBACpD,OAAO,EAAE,SAAS,CAAC,SAAS,IAAI,KAAK;aACtC,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO;gBACjC,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/execution/executor-registry.d.ts

@@ -0,0 +1,18 @@
+import { type ExecutorType, type ExecutionRequest, type ExecutionResult } from "../domain/execution.js";
+import { ProcessSupervisor } from "./process-supervisor.js";
+export interface ExecutorInstance {
+    type: ExecutorType;
+    execute(request: ExecutionRequest): Promise<ExecutionResult>;
+}
+export declare class ExecutorRegistry {
+    private readonly executors;
+    private readonly supervisor;
+    constructor(options?: {
+        supervisor?: ProcessSupervisor;
+    });
+    register(executor: ExecutorInstance): void;
+    get(type: ExecutorType): ExecutorInstance;
+    execute(request: ExecutionRequest): Promise<ExecutionResult>;
+    getSupervisor(): ProcessSupervisor;
+}
+//# sourceMappingURL=executor-registry.d.ts.map

package/dist/execution/executor-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-registry.d.ts","sourceRoot":"","sources":["../../src/execution/executor-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9D;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6C;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,iBAAiB,CAAA;KAAO;IAOrD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAI1C,GAAG,CAAC,IAAI,EAAE,YAAY,GAAG,gBAAgB;IAQnC,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAOlE,aAAa,IAAI,iBAAiB;CAG1C"}

package/dist/execution/executor-registry.js

@@ -0,0 +1,35 @@
+import { ExecutionRequestSchema, } from "../domain/execution.js";
+import { LocalExecutor } from "./local-executor.js";
+import { DockerSandboxExecutor } from "./docker-sandbox-executor.js";
+import { RemoteExecutor } from "./remote-executor.js";
+import { ProcessSupervisor } from "./process-supervisor.js";
+export class ExecutorRegistry {
+    executors = new Map();
+    supervisor;
+    constructor(options = {}) {
+        this.supervisor = options.supervisor || new ProcessSupervisor();
+        this.register(new LocalExecutor({ supervisor: this.supervisor }));
+        this.register(new DockerSandboxExecutor({ supervisor: this.supervisor }));
+        this.register(new RemoteExecutor());
+    }
+    register(executor) {
+        this.executors.set(executor.type, executor);
+    }
+    get(type) {
+        const executor = this.executors.get(type);
+        if (!executor) {
+            throw new Error(`Executor of type "${type}" is not registered.`);
+        }
+        return executor;
+    }
+    async execute(request) {
+        const validated = ExecutionRequestSchema.parse(request);
+        const executorType = validated.executorType || "local";
+        const executor = this.get(executorType);
+        return executor.execute(validated);
+    }
+    getSupervisor() {
+        return this.supervisor;
+    }
+}
+//# sourceMappingURL=executor-registry.js.map

package/dist/execution/executor-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-registry.js","sourceRoot":"","sources":["../../src/execution/executor-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAO5D,MAAM,OAAO,gBAAgB;IACV,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtD,UAAU,CAAoB;IAE/C,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAChE,IAAI,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,qBAAqB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACtC,CAAC;IAEM,QAAQ,CAAC,QAA0B;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAEM,GAAG,CAAC,IAAkB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,OAAyB;QAC5C,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,OAAO,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}