hivemind-pipeline 0.1.0

package/dist/src/core/tools/executor.js

@@ -0,0 +1,306 @@
+/**
+ * Tool Executor
+ *
+ * Executes tool calls from API-based LLMs within the sandbox.
+ * Each tool maps to a file/shell operation performed safely within
+ * the project root boundary.
+ */
+import { readFile, writeFile, mkdir, stat } from 'node:fs/promises';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { dirname } from 'node:path';
+import { ToolSandbox } from './sandbox.js';
+const execFileAsync = promisify(execFile);
+/** Maximum output size for read operations (100 KB) */
+const MAX_READ_OUTPUT = 100 * 1024;
+/** Maximum output size for command output (50 KB) */
+const MAX_COMMAND_OUTPUT = 50 * 1024;
+/** Maximum number of search result lines */
+const MAX_SEARCH_RESULTS = 100;
+/** Maximum number of files listed */
+const MAX_LIST_FILES = 500;
+export class ToolExecutor {
+    sandbox;
+    constructor(sandboxConfig) {
+        this.sandbox = new ToolSandbox(sandboxConfig);
+    }
+    /** Execute a tool call by name and return the result */
+    async execute(toolName, args) {
+        try {
+            switch (toolName) {
+                case 'read_file':
+                    return await this.readFileImpl(args);
+                case 'write_file':
+                    return await this.writeFileImpl(args);
+                case 'edit_file':
+                    return await this.editFileImpl(args);
+                case 'run_command':
+                    return await this.runCommandImpl(args);
+                case 'search_files':
+                    return await this.searchFilesImpl(args);
+                case 'list_files':
+                    return await this.listFilesImpl(args);
+                case 'create_directory':
+                    return await this.createDirectoryImpl(args);
+                default:
+                    return { success: false, output: '', error: `Unknown tool: ${toolName}` };
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { success: false, output: '', error: message };
+        }
+    }
+    // ── read_file ──────────────────────────────────────────────────────────
+    async readFileImpl(args) {
+        const absPath = this.sandbox.validatePath(args.path);
+        const fileStat = await stat(absPath);
+        if (fileStat.size > this.sandbox.maxFileSize) {
+            return {
+                success: false,
+                output: '',
+                error: `File is too large (${(fileStat.size / 1024 / 1024).toFixed(1)} MB). Maximum: ${(this.sandbox.maxFileSize / 1024 / 1024).toFixed(0)} MB. Use startLine/endLine to read a portion.`,
+            };
+        }
+        const content = await readFile(absPath, 'utf-8');
+        const lines = content.split('\n');
+        const start = Math.max(1, args.startLine ?? 1);
+        const end = Math.min(lines.length, args.endLine ?? lines.length);
+        const sliced = lines.slice(start - 1, end);
+        // Format with line numbers
+        let output = sliced
+            .map((line, i) => `${String(start + i).padStart(6)} | ${line}`)
+            .join('\n');
+        if (output.length > MAX_READ_OUTPUT) {
+            output = output.slice(0, MAX_READ_OUTPUT) + '\n... [output truncated at 100KB]';
+        }
+        const totalLines = lines.length;
+        const header = `File: ${args.path} (${totalLines} lines, ${fileStat.size} bytes)`;
+        if (start > 1 || end < totalLines) {
+            return { success: true, output: `${header}\nShowing lines ${start}-${end}:\n${output}` };
+        }
+        return { success: true, output: `${header}\n${output}` };
+    }
+    // ── write_file ─────────────────────────────────────────────────────────
+    async writeFileImpl(args) {
+        this.sandbox.requireWrite();
+        const absPath = this.sandbox.validatePath(args.path);
+        const bytes = Buffer.byteLength(args.content, 'utf-8');
+        if (bytes > this.sandbox.maxFileSize) {
+            return {
+                success: false,
+                output: '',
+                error: `Content too large (${(bytes / 1024 / 1024).toFixed(1)} MB). Maximum: ${(this.sandbox.maxFileSize / 1024 / 1024).toFixed(0)} MB.`,
+            };
+        }
+        // Create parent directories
+        await mkdir(dirname(absPath), { recursive: true });
+        await writeFile(absPath, args.content, 'utf-8');
+        const lineCount = args.content.split('\n').length;
+        return {
+            success: true,
+            output: `Wrote ${bytes} bytes (${lineCount} lines) to ${args.path}`,
+        };
+    }
+    // ── edit_file ──────────────────────────────────────────────────────────
+    async editFileImpl(args) {
+        this.sandbox.requireWrite();
+        const absPath = this.sandbox.validatePath(args.path);
+        const content = await readFile(absPath, 'utf-8');
+        // Count occurrences
+        let count = 0;
+        let idx = 0;
+        while (true) {
+            idx = content.indexOf(args.old_text, idx);
+            if (idx === -1)
+                break;
+            count++;
+            idx += args.old_text.length;
+        }
+        if (count === 0) {
+            return {
+                success: false,
+                output: '',
+                error: `old_text not found in ${args.path}. Make sure the text matches exactly (including whitespace and indentation).`,
+            };
+        }
+        if (count > 1) {
+            return {
+                success: false,
+                output: '',
+                error: `old_text found ${count} times in ${args.path}. It must be unique. Include more surrounding context to make the match unique.`,
+            };
+        }
+        const updated = content.replace(args.old_text, args.new_text);
+        await writeFile(absPath, updated, 'utf-8');
+        // Build a brief diff snippet
+        const oldLines = args.old_text.split('\n');
+        const newLines = args.new_text.split('\n');
+        const diffSnippet = [
+            `--- ${args.path}`,
+            `+++ ${args.path}`,
+            ...oldLines.map((l) => `- ${l}`),
+            ...newLines.map((l) => `+ ${l}`),
+        ].join('\n');
+        return {
+            success: true,
+            output: `Edited ${args.path} (replaced ${oldLines.length} lines with ${newLines.length} lines)\n${diffSnippet}`,
+        };
+    }
+    // ── run_command ────────────────────────────────────────────────────────
+    async runCommandImpl(args) {
+        this.sandbox.validateCommand(args.command);
+        const cwd = args.cwd
+            ? this.sandbox.validatePath(args.cwd)
+            : this.sandbox.getProjectRoot();
+        const timeout = args.timeout ?? this.sandbox.commandTimeout;
+        try {
+            const { stdout, stderr } = await execFileAsync('/bin/sh', ['-c', args.command], {
+                cwd,
+                timeout,
+                maxBuffer: MAX_COMMAND_OUTPUT * 2,
+                env: { ...process.env, FORCE_COLOR: '0' },
+            });
+            let output = '';
+            if (stdout)
+                output += stdout;
+            if (stderr)
+                output += (output ? '\n[stderr]\n' : '[stderr]\n') + stderr;
+            if (output.length > MAX_COMMAND_OUTPUT) {
+                output = output.slice(0, MAX_COMMAND_OUTPUT) + '\n... [output truncated at 50KB]';
+            }
+            return { success: true, output: output || '(no output)' };
+        }
+        catch (err) {
+            const execErr = err;
+            if (execErr.killed) {
+                return {
+                    success: false,
+                    output: execErr.stdout?.slice(0, MAX_COMMAND_OUTPUT) ?? '',
+                    error: `Command timed out after ${timeout}ms`,
+                };
+            }
+            let output = '';
+            if (execErr.stdout)
+                output += execErr.stdout;
+            if (execErr.stderr)
+                output += (output ? '\n[stderr]\n' : '[stderr]\n') + execErr.stderr;
+            if (output.length > MAX_COMMAND_OUTPUT) {
+                output = output.slice(0, MAX_COMMAND_OUTPUT) + '\n... [output truncated at 50KB]';
+            }
+            return {
+                success: false,
+                output: output || '',
+                error: `Command exited with code ${execErr.code ?? 'unknown'}: ${execErr.message ?? ''}`,
+            };
+        }
+    }
+    // ── search_files ───────────────────────────────────────────────────────
+    async searchFilesImpl(args) {
+        const searchDir = args.path
+            ? this.sandbox.validatePath(args.path)
+            : this.sandbox.getProjectRoot();
+        const grepArgs = ['-rn', '--color=never', '-E'];
+        if (args.glob) {
+            grepArgs.push('--include', args.glob);
+        }
+        // Exclude common non-searchable directories
+        grepArgs.push('--exclude-dir=node_modules', '--exclude-dir=.git', '--exclude-dir=dist', '--exclude-dir=build', '--exclude-dir=coverage');
+        grepArgs.push('--', args.pattern, searchDir);
+        try {
+            const { stdout } = await execFileAsync('grep', grepArgs, {
+                timeout: this.sandbox.commandTimeout,
+                maxBuffer: MAX_COMMAND_OUTPUT * 2,
+                env: { ...process.env },
+            });
+            const lines = stdout.trim().split('\n').filter(Boolean);
+            const projectRoot = this.sandbox.getProjectRoot();
+            // Relativize paths for cleaner output
+            const relativized = lines.map((line) => {
+                if (line.startsWith(projectRoot)) {
+                    return line.slice(projectRoot.length + 1);
+                }
+                return line;
+            });
+            if (relativized.length > MAX_SEARCH_RESULTS) {
+                const truncated = relativized.slice(0, MAX_SEARCH_RESULTS);
+                return {
+                    success: true,
+                    output: truncated.join('\n') + `\n... [${relativized.length - MAX_SEARCH_RESULTS} more matches truncated]`,
+                };
+            }
+            return { success: true, output: relativized.join('\n') || 'No matches found.' };
+        }
+        catch (err) {
+            const execErr = err;
+            // grep exits with code 1 when no matches found — that's not an error
+            if (execErr.code === 1) {
+                return { success: true, output: 'No matches found.' };
+            }
+            return {
+                success: false,
+                output: '',
+                error: `Search failed: ${execErr.stderr || execErr.message || 'unknown error'}`,
+            };
+        }
+    }
+    // ── list_files ─────────────────────────────────────────────────────────
+    async listFilesImpl(args) {
+        const projectRoot = this.sandbox.getProjectRoot();
+        // Use find + shell glob via sh -c for portability
+        // For simple patterns, this is sufficient. More complex globs would need a library.
+        try {
+            const { stdout } = await execFileAsync('/bin/sh', ['-c', `find . -path './.git' -prune -o -path './node_modules' -prune -o -name '${args.pattern.replace(/'/g, "'\\''")}' -type f -print 2>/dev/null | sort | head -n ${MAX_LIST_FILES + 1}`], {
+                cwd: projectRoot,
+                timeout: this.sandbox.commandTimeout,
+                maxBuffer: MAX_COMMAND_OUTPUT * 2,
+            });
+            const files = stdout.trim().split('\n').filter(Boolean).map((f) => f.replace(/^\.\//, ''));
+            if (files.length === 0) {
+                // Try as a directory glob using find with -path
+                const { stdout: pathStdout } = await execFileAsync('/bin/sh', ['-c', `find . -path './.git' -prune -o -path './node_modules' -prune -o -path './${args.pattern.replace(/'/g, "'\\''")}' -type f -print 2>/dev/null | sort | head -n ${MAX_LIST_FILES + 1}`], {
+                    cwd: projectRoot,
+                    timeout: this.sandbox.commandTimeout,
+                    maxBuffer: MAX_COMMAND_OUTPUT * 2,
+                });
+                const pathFiles = pathStdout.trim().split('\n').filter(Boolean).map((f) => f.replace(/^\.\//, ''));
+                if (pathFiles.length > MAX_LIST_FILES) {
+                    return {
+                        success: true,
+                        output: pathFiles.slice(0, MAX_LIST_FILES).join('\n') + `\n... [${pathFiles.length - MAX_LIST_FILES} more files truncated]`,
+                    };
+                }
+                return {
+                    success: true,
+                    output: pathFiles.join('\n') || 'No files found matching the pattern.',
+                };
+            }
+            if (files.length > MAX_LIST_FILES) {
+                return {
+                    success: true,
+                    output: files.slice(0, MAX_LIST_FILES).join('\n') + `\n... [more files truncated]`,
+                };
+            }
+            return { success: true, output: files.join('\n') };
+        }
+        catch (err) {
+            const execErr = err;
+            return {
+                success: false,
+                output: '',
+                error: `Failed to list files: ${execErr.message ?? 'unknown error'}`,
+            };
+        }
+    }
+    // ── create_directory ───────────────────────────────────────────────────
+    async createDirectoryImpl(args) {
+        this.sandbox.requireWrite();
+        const absPath = this.sandbox.validatePath(args.path);
+        await mkdir(absPath, { recursive: true });
+        return {
+            success: true,
+            output: `Created directory: ${args.path}`,
+        };
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/src/core/tools/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../src/core/tools/executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAW,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAA2B,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAA0B,MAAM,cAAc,CAAC;AAEnE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,uDAAuD;AACvD,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AAEnC,qDAAqD;AACrD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC,4CAA4C;AAC5C,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,qCAAqC;AACrC,MAAM,cAAc,GAAG,GAAG,CAAC;AAQ3B,MAAM,OAAO,YAAY;IACf,OAAO,CAAc;IAE7B,YAAY,aAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAA6B;QAC3D,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,WAAW;oBACd,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,IAA8D,CAAC,CAAC;gBACjG,KAAK,YAAY;oBACf,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,IAAyC,CAAC,CAAC;gBAC7E,KAAK,WAAW;oBACd,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,IAA4D,CAAC,CAAC;gBAC/F,KAAK,aAAa;oBAChB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAA2D,CAAC,CAAC;gBAChG,KAAK,cAAc;oBACjB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,IAAyD,CAAC,CAAC;gBAC/F,KAAK,YAAY;oBACf,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,IAA2B,CAAC,CAAC;gBAC/D,KAAK,kBAAkB;oBACrB,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAwB,CAAC,CAAC;gBAClE;oBACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,YAAY,CAAC,IAA4D;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+CAA+C;aAC1L,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAE3C,2BAA2B;QAC3B,IAAI,MAAM,GAAG,MAAM;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;aAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACpC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,mCAAmC,CAAC;QAClF,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QAChC,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,IAAI,KAAK,UAAU,WAAW,QAAQ,CAAC,IAAI,SAAS,CAAC;QAClF,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,KAAK,IAAI,GAAG,MAAM,MAAM,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,MAAM,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,aAAa,CAAC,IAAuC;QACjE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,sBAAsB,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;aACzI,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS,KAAK,WAAW,SAAS,cAAc,IAAI,CAAC,IAAI,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,YAAY,CAAC,IAA0D;QACnF,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEjD,oBAAoB;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,IAAI,EAAE,CAAC;YACZ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM;YACtB,KAAK,EAAE,CAAC;YACR,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9B,CAAC;QAED,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,yBAAyB,IAAI,CAAC,IAAI,8EAA8E;aACxH,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,kBAAkB,KAAK,aAAa,IAAI,CAAC,IAAI,iFAAiF;aACtI,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE3C,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG;YAClB,OAAO,IAAI,CAAC,IAAI,EAAE;YAClB,OAAO,IAAI,CAAC,IAAI,EAAE;YAClB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,MAAM,YAAY,WAAW,EAAE;SAChH,CAAC;IACJ,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,cAAc,CAAC,IAAyD;QACpF,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG;YAClB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC9E,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,kBAAkB,GAAG,CAAC;gBACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;aAC1C,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM;gBAAE,MAAM,IAAI,MAAM,CAAC;YAC7B,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;YAExE,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACvC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,kCAAkC,CAAC;YACpF,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAA8F,CAAC;YAC/G,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,EAAE;oBAC1D,KAAK,EAAE,2BAA2B,OAAO,IAAI;iBAC9C,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YAC7C,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YACxF,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBACvC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,kCAAkC,CAAC;YACpF,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,KAAK,EAAE,4BAA4B,OAAO,CAAC,IAAI,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;aACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,eAAe,CAAC,IAAuD;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI;YACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAElC,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAEhD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,4CAA4C;QAC5C,QAAQ,CAAC,IAAI,CACX,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,CACzB,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE;gBACvD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBACpC,SAAS,EAAE,kBAAkB,GAAG,CAAC;gBACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;aACxB,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAElD,sCAAsC;YACtC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,WAAW,CAAC,MAAM,GAAG,kBAAkB,0BAA0B;iBAC3G,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAClF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAA4E,CAAC;YAC7F,qEAAqE;YACrE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACxD,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,kBAAkB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,eAAe,EAAE;aAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,aAAa,CAAC,IAAyB;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAElD,kDAAkD;QAClD,oFAAoF;QACpF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,2EAA2E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iDAAiD,cAAc,GAAG,CAAC,EAAE,CAAC,EAAE;gBAC7O,GAAG,EAAE,WAAW;gBAChB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;gBACpC,SAAS,EAAE,kBAAkB,GAAG,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAE3F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,gDAAgD;gBAChD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,6EAA6E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iDAAiD,cAAc,GAAG,CAAC,EAAE,CAAC,EAAE;oBAC3P,GAAG,EAAE,WAAW;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;oBACpC,SAAS,EAAE,kBAAkB,GAAG,CAAC;iBAClC,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;gBAEnG,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;oBACtC,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,SAAS,CAAC,MAAM,GAAG,cAAc,wBAAwB;qBAC5H,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sCAAsC;iBACvE,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBAClC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,8BAA8B;iBACnF,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAA2B,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,yBAAyB,OAAO,CAAC,OAAO,IAAI,eAAe,EAAE;aACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,mBAAmB,CAAC,IAAsB;QACtD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/src/core/tools/sandbox.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Tool Execution Sandbox
+ *
+ * Safety boundary for tool execution. Validates file paths stay within
+ * the project root and filters dangerous shell commands.
+ */
+export interface ToolSandboxConfig {
+    projectRoot: string;
+    allowedPaths?: string[];
+    commandTimeout?: number;
+    commandBlocklist?: string[];
+    maxFileSize?: number;
+    readOnly?: boolean;
+}
+export declare class ToolSandbox {
+    private readonly projectRoot;
+    private readonly allowedPaths;
+    private readonly commandBlocklist;
+    readonly commandTimeout: number;
+    readonly maxFileSize: number;
+    readonly readOnly: boolean;
+    constructor(config: ToolSandboxConfig);
+    /**
+     * Validate that a file path resolves to within the sandbox boundaries.
+     * Returns the resolved absolute path.
+     * Throws if the path escapes the sandbox.
+     */
+    validatePath(path: string): string;
+    /**
+     * Validate that a command is safe to execute.
+     * Throws if the command matches a blocked pattern.
+     */
+    validateCommand(command: string): void;
+    /** Check if write operations are allowed */
+    isWriteAllowed(): boolean;
+    /** Enforce write permission, throwing if read-only */
+    requireWrite(): void;
+    /** Get the resolved project root */
+    getProjectRoot(): string;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/src/core/tools/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../../src/core/tools/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA6BD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAW;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAEf,MAAM,EAAE,iBAAiB;IAYrC;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAwBlC;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAuBtC,4CAA4C;IAC5C,cAAc,IAAI,OAAO;IAIzB,sDAAsD;IACtD,YAAY,IAAI,IAAI;IAMpB,oCAAoC;IACpC,cAAc,IAAI,MAAM;CAGzB"}

package/dist/src/core/tools/sandbox.js

@@ -0,0 +1,106 @@
+/**
+ * Tool Execution Sandbox
+ *
+ * Safety boundary for tool execution. Validates file paths stay within
+ * the project root and filters dangerous shell commands.
+ */
+import { resolve, normalize, relative } from 'node:path';
+/** Default command patterns that are always blocked */
+const DEFAULT_COMMAND_BLOCKLIST = [
+    'rm -rf /',
+    'rm -rf ~',
+    'sudo ',
+    ':(){:|:&};:',
+    'mkfs',
+    'dd if=',
+    '> /dev/',
+    'chmod 777 /',
+    'chown -R',
+    'shutdown',
+    'reboot',
+    'init 0',
+    'init 6',
+];
+/** Commands that are dangerous when piped to */
+const DANGEROUS_PIPE_TARGETS = [
+    'sh',
+    'bash',
+    'zsh',
+    'eval',
+    'exec',
+    'source',
+];
+export class ToolSandbox {
+    projectRoot;
+    allowedPaths;
+    commandBlocklist;
+    commandTimeout;
+    maxFileSize;
+    readOnly;
+    constructor(config) {
+        this.projectRoot = resolve(config.projectRoot);
+        this.allowedPaths = (config.allowedPaths ?? []).map((p) => resolve(p));
+        this.commandTimeout = config.commandTimeout ?? 30_000;
+        this.commandBlocklist = [
+            ...DEFAULT_COMMAND_BLOCKLIST,
+            ...(config.commandBlocklist ?? []),
+        ];
+        this.maxFileSize = config.maxFileSize ?? 10 * 1024 * 1024; // 10 MB
+        this.readOnly = config.readOnly ?? false;
+    }
+    /**
+     * Validate that a file path resolves to within the sandbox boundaries.
+     * Returns the resolved absolute path.
+     * Throws if the path escapes the sandbox.
+     */
+    validatePath(path) {
+        // Resolve relative to project root
+        const absolute = resolve(this.projectRoot, path);
+        const normalized = normalize(absolute);
+        // Check the path is within project root or an allowed path
+        const isWithinProjectRoot = normalized.startsWith(this.projectRoot + '/') || normalized === this.projectRoot;
+        const isWithinAllowed = this.allowedPaths.some((allowed) => normalized.startsWith(allowed + '/') || normalized === allowed);
+        if (!isWithinProjectRoot && !isWithinAllowed) {
+            // Compute relative path for a clear error message
+            const rel = relative(this.projectRoot, normalized);
+            throw new Error(`Path "${path}" resolves to "${normalized}" which is outside the sandbox. ` +
+                `Relative resolution: "${rel}". Access is restricted to the project root: "${this.projectRoot}".`);
+        }
+        return normalized;
+    }
+    /**
+     * Validate that a command is safe to execute.
+     * Throws if the command matches a blocked pattern.
+     */
+    validateCommand(command) {
+        const lower = command.toLowerCase().trim();
+        for (const blocked of this.commandBlocklist) {
+            if (lower.includes(blocked.toLowerCase())) {
+                throw new Error(`Command blocked by sandbox: "${command}" matches blocklist pattern "${blocked}".`);
+            }
+        }
+        // Check for pipe to dangerous commands
+        const pipeSegments = command.split('|').slice(1); // everything after the first pipe
+        for (const segment of pipeSegments) {
+            const target = segment.trim().split(/\s+/)[0];
+            if (target && DANGEROUS_PIPE_TARGETS.includes(target)) {
+                throw new Error(`Command blocked by sandbox: piping to "${target}" is not allowed.`);
+            }
+        }
+    }
+    /** Check if write operations are allowed */
+    isWriteAllowed() {
+        return !this.readOnly;
+    }
+    /** Enforce write permission, throwing if read-only */
+    requireWrite() {
+        if (this.readOnly) {
+            throw new Error('Write operation denied: sandbox is in read-only mode.');
+        }
+    }
+    /** Get the resolved project root */
+    getProjectRoot() {
+        return this.projectRoot;
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/src/core/tools/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../src/core/tools/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAWzD,uDAAuD;AACvD,MAAM,yBAAyB,GAAa;IAC1C,UAAU;IACV,UAAU;IACV,OAAO;IACP,aAAa;IACb,MAAM;IACN,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,gDAAgD;AAChD,MAAM,sBAAsB,GAAa;IACvC,IAAI;IACJ,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC;AAEF,MAAM,OAAO,WAAW;IACL,WAAW,CAAS;IACpB,YAAY,CAAW;IACvB,gBAAgB,CAAW;IACnC,cAAc,CAAS;IACvB,WAAW,CAAS;IACpB,QAAQ,CAAU;IAE3B,YAAY,MAAyB;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC;QACtD,IAAI,CAAC,gBAAgB,GAAG;YACtB,GAAG,yBAAyB;YAC5B,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACnC,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;QACnE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,IAAY;QACvB,mCAAmC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEvC,2DAA2D;QAC3D,MAAM,mBAAmB,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,CAAC;QAE7G,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAC5C,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,OAAO,CAC5E,CAAC;QAEF,IAAI,CAAC,mBAAmB,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7C,kDAAkD;YAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,kBAAkB,UAAU,kCAAkC;gBACzE,yBAAyB,GAAG,iDAAiD,IAAI,CAAC,WAAW,IAAI,CACpG,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,OAAe;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAE3C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,gCAAgC,OAAO,IAAI,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC;QACpF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,mBAAmB,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,cAAc;QACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IACxB,CAAC;IAED,sDAAsD;IACtD,YAAY;QACV,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF"}

package/dist/src/core/training-pipeline.d.ts

@@ -0,0 +1,66 @@
+import type { TrainingExample, TeachState } from '../types.js';
+/** Training job status record */
+interface TrainingJob {
+    id: string;
+    model: string;
+    status: 'pending' | 'training' | 'complete' | 'failed';
+    startedAt: number;
+    completedAt?: number;
+    metrics?: {
+        loss: number;
+        accuracy: number;
+    };
+    exampleCount: number;
+    taskTypes: string[];
+}
+/** Deployed model record */
+interface DeployedModel {
+    id: string;
+    taskTypes: string[];
+    costReduction: number;
+    qualityDelta: number;
+    deployedAt: number;
+    trainingJobId: string;
+}
+/** Evaluation result for a model */
+interface EvaluationResult {
+    modelId: string;
+    accuracy: number;
+    qualityScore: number;
+    costReduction: number;
+    taskBreakdown: Array<{
+        taskType: string;
+        accuracy: number;
+        sampleCount: number;
+    }>;
+    evaluatedAt: number;
+}
+export declare class TrainingPipeline {
+    private cwd;
+    private examples;
+    private trainingJobs;
+    private deployedModels;
+    private lastCollected;
+    constructor(cwd: string);
+    /** Collect training examples from history */
+    collect(): TrainingExample[];
+    /** Curate the dataset: filter by quality signals */
+    curate(): TrainingExample[];
+    /** Start a training job (stub for fine-tuning API) */
+    train(baseModel: string): TrainingJob;
+    /** Evaluate a trained model (stub) */
+    evaluate(): EvaluationResult | null;
+    /** Deploy a model (stub) */
+    deploy(): DeployedModel | null;
+    /** Get current state summary */
+    getState(): TeachState;
+    private classifySource;
+    private computeQuality;
+    private deduplicateExamples;
+    private evaluateModel;
+    private loadHistory;
+    private loadState;
+    private persist;
+}
+export {};
+//# sourceMappingURL=training-pipeline.d.ts.map

package/dist/src/core/training-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"training-pipeline.d.ts","sourceRoot":"","sources":["../../../src/core/training-pipeline.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2B/D,iCAAiC;AACjC,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,4BAA4B;AAC5B,UAAU,aAAa;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,oCAAoC;AACpC,UAAU,gBAAgB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,aAAa,CAAa;gBAEtB,GAAG,EAAE,MAAM;IAOvB,6CAA6C;IAC7C,OAAO,IAAI,eAAe,EAAE;IAmC5B,oDAAoD;IACpD,MAAM,IAAI,eAAe,EAAE;IAmB3B,sDAAsD;IACtD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW;IAyBrC,sCAAsC;IACtC,QAAQ,IAAI,gBAAgB,GAAG,IAAI;IAqBnC,4BAA4B;IAC5B,MAAM,IAAI,aAAa,GAAG,IAAI;IAkB9B,gCAAgC;IAChC,QAAQ,IAAI,UAAU;IA8BtB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,OAAO;CAahB"}