oxe-cc 0.9.3 → 1.0.0

package/lib/runtime/evidence/evidence-store.d.ts

@@ -0,0 +1,22 @@
+import type { Evidence, EvidenceType } from '../models/evidence';
+export interface EvidenceCollectOptions {
+    work_item_id: string;
+    run_id: string;
+    attempt_number: number;
+}
+export interface EvidenceContent {
+    evidence: Evidence;
+    content: Buffer;
+}
+export declare class EvidenceStore {
+    private readonly projectRoot;
+    constructor(projectRoot: string);
+    private evidenceDir;
+    private indexPath;
+    private readIndex;
+    private writeIndex;
+    collect(type: EvidenceType, content: Buffer | string, opts: EvidenceCollectOptions): Promise<Evidence>;
+    list(opts: EvidenceCollectOptions): Promise<Evidence[]>;
+    get(evidenceId: string, opts: EvidenceCollectOptions): Promise<EvidenceContent | null>;
+    listByRun(runId: string): Promise<Evidence[]>;
+}

package/lib/runtime/evidence/evidence-store.js

@@ -0,0 +1,106 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvidenceStore = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const EXT_MAP = {
+    diff: 'patch',
+    stdout: 'txt',
+    stderr: 'txt',
+    junit_xml: 'xml',
+    coverage: 'json',
+    screenshot: 'png',
+    trace: 'json',
+    log: 'txt',
+    security_report: 'json',
+    api_output: 'json',
+    summary: 'json',
+};
+class EvidenceStore {
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    evidenceDir(runId, workItemId, attemptNumber) {
+        return path_1.default.join(this.projectRoot, '.oxe', 'evidence', 'runs', runId, workItemId, `attempt-${attemptNumber}`);
+    }
+    indexPath(runId, workItemId, attemptNumber) {
+        return path_1.default.join(this.evidenceDir(runId, workItemId, attemptNumber), 'index.json');
+    }
+    readIndex(runId, workItemId, attemptNumber) {
+        const p = this.indexPath(runId, workItemId, attemptNumber);
+        if (!fs_1.default.existsSync(p))
+            return [];
+        try {
+            return JSON.parse(fs_1.default.readFileSync(p, 'utf8'));
+        }
+        catch {
+            return [];
+        }
+    }
+    writeIndex(runId, workItemId, attemptNumber, items) {
+        fs_1.default.writeFileSync(this.indexPath(runId, workItemId, attemptNumber), JSON.stringify(items, null, 2), 'utf8');
+    }
+    async collect(type, content, opts) {
+        const { work_item_id, run_id, attempt_number } = opts;
+        const dir = this.evidenceDir(run_id, work_item_id, attempt_number);
+        fs_1.default.mkdirSync(dir, { recursive: true });
+        const buf = Buffer.isBuffer(content) ? content : Buffer.from(content, 'utf8');
+        const checksum = crypto_1.default.createHash('sha256').update(buf).digest('hex').slice(0, 16);
+        const ext = EXT_MAP[type] ?? 'bin';
+        const existing = this.readIndex(run_id, work_item_id, attempt_number);
+        const seq = existing.filter((e) => e.type === type).length + 1;
+        const filename = seq === 1 ? `${type}.${ext}` : `${type}-${seq}.${ext}`;
+        const filePath = path_1.default.join(dir, filename);
+        fs_1.default.writeFileSync(filePath, buf);
+        const evidence = {
+            evidence_id: `ev-${run_id}-${work_item_id}-a${attempt_number}-${type}-${seq}`,
+            attempt_id: `${work_item_id}-a${attempt_number}`,
+            type,
+            path: path_1.default.relative(this.projectRoot, filePath),
+            checksum,
+            created_at: new Date().toISOString(),
+        };
+        this.writeIndex(run_id, work_item_id, attempt_number, [...existing, evidence]);
+        return evidence;
+    }
+    async list(opts) {
+        return this.readIndex(opts.run_id, opts.work_item_id, opts.attempt_number);
+    }
+    async get(evidenceId, opts) {
+        const items = this.readIndex(opts.run_id, opts.work_item_id, opts.attempt_number);
+        const ev = items.find((e) => e.evidence_id === evidenceId);
+        if (!ev)
+            return null;
+        const absPath = path_1.default.join(this.projectRoot, ev.path);
+        if (!fs_1.default.existsSync(absPath))
+            return null;
+        return { evidence: ev, content: fs_1.default.readFileSync(absPath) };
+    }
+    async listByRun(runId) {
+        const runDir = path_1.default.join(this.projectRoot, '.oxe', 'evidence', 'runs', runId);
+        if (!fs_1.default.existsSync(runDir))
+            return [];
+        const all = [];
+        for (const workItem of fs_1.default.readdirSync(runDir)) {
+            const wiDir = path_1.default.join(runDir, workItem);
+            for (const attempt of fs_1.default.readdirSync(wiDir)) {
+                const indexPath = path_1.default.join(wiDir, attempt, 'index.json');
+                if (fs_1.default.existsSync(indexPath)) {
+                    try {
+                        const items = JSON.parse(fs_1.default.readFileSync(indexPath, 'utf8'));
+                        all.push(...items);
+                    }
+                    catch {
+                        // skip corrupt index
+                    }
+                }
+            }
+        }
+        return all;
+    }
+}
+exports.EvidenceStore = EvidenceStore;

package/lib/runtime/evidence/index.d.ts

@@ -0,0 +1 @@
+export * from './evidence-store';

package/lib/runtime/evidence/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./evidence-store"), exports);

package/lib/runtime/gate/gate-manager.d.ts

@@ -0,0 +1,39 @@
+import type { GateScope, GateDecisionValue } from '../models/gate-decision';
+export interface GateContext {
+    work_item_id?: string;
+    run_id?: string;
+    description: string;
+    evidence_refs: string[];
+    risks: string[];
+}
+export interface GateToken {
+    gate_id: string;
+    scope: GateScope;
+    requested_at: string;
+    context: GateContext;
+    status: 'pending' | 'resolved';
+    decision?: GateDecisionValue;
+    actor?: string;
+    reason?: string;
+    resolved_at?: string;
+}
+export interface GateResolution {
+    decision: GateDecisionValue;
+    actor: string;
+    reason?: string;
+}
+export declare class GateManager {
+    private readonly projectRoot;
+    private readonly sessionId;
+    private readonly runId;
+    constructor(projectRoot: string, sessionId: string | null, runId: string);
+    private gatesPath;
+    private readGates;
+    private writeGates;
+    request(scope: GateScope, ctx: GateContext): Promise<GateToken>;
+    resolve(token: GateToken, resolution: GateResolution): Promise<GateToken>;
+    isPending(scope: GateScope): boolean;
+    listPending(): GateToken[];
+    listAll(): GateToken[];
+    get(gateId: string): GateToken | null;
+}

package/lib/runtime/gate/gate-manager.js

@@ -0,0 +1,104 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GateManager = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const bus_1 = require("../events/bus");
+class GateManager {
+    constructor(projectRoot, sessionId, runId) {
+        this.projectRoot = projectRoot;
+        this.sessionId = sessionId;
+        this.runId = runId;
+    }
+    gatesPath() {
+        if (this.sessionId) {
+            return path_1.default.join(this.projectRoot, '.oxe', this.sessionId, 'execution', 'GATES.json');
+        }
+        return path_1.default.join(this.projectRoot, '.oxe', 'execution', 'GATES.json');
+    }
+    readGates() {
+        const p = this.gatesPath();
+        if (!fs_1.default.existsSync(p))
+            return [];
+        try {
+            return JSON.parse(fs_1.default.readFileSync(p, 'utf8'));
+        }
+        catch {
+            return [];
+        }
+    }
+    writeGates(gates) {
+        const p = this.gatesPath();
+        fs_1.default.mkdirSync(path_1.default.dirname(p), { recursive: true });
+        fs_1.default.writeFileSync(p, JSON.stringify(gates, null, 2), 'utf8');
+    }
+    async request(scope, ctx) {
+        const token = {
+            gate_id: `gate-${crypto_1.default.randomBytes(4).toString('hex')}`,
+            scope,
+            requested_at: new Date().toISOString(),
+            context: ctx,
+            status: 'pending',
+        };
+        const gates = this.readGates();
+        gates.push(token);
+        this.writeGates(gates);
+        (0, bus_1.appendEvent)(this.projectRoot, this.sessionId, {
+            type: 'GateRequested',
+            run_id: this.runId,
+            work_item_id: ctx.work_item_id ?? null,
+            payload: {
+                gate_id: token.gate_id,
+                scope,
+                description: ctx.description,
+                evidence_refs: ctx.evidence_refs,
+                risks: ctx.risks,
+            },
+        });
+        return token;
+    }
+    async resolve(token, resolution) {
+        const gates = this.readGates();
+        const idx = gates.findIndex((g) => g.gate_id === token.gate_id);
+        if (idx === -1)
+            throw new Error(`Gate ${token.gate_id} not found`);
+        const resolved = {
+            ...gates[idx],
+            status: 'resolved',
+            decision: resolution.decision,
+            actor: resolution.actor,
+            reason: resolution.reason ?? undefined,
+            resolved_at: new Date().toISOString(),
+        };
+        gates[idx] = resolved;
+        this.writeGates(gates);
+        (0, bus_1.appendEvent)(this.projectRoot, this.sessionId, {
+            type: 'GateResolved',
+            run_id: this.runId,
+            payload: {
+                gate_id: token.gate_id,
+                scope: token.scope,
+                decision: resolution.decision,
+                actor: resolution.actor,
+            },
+        });
+        return resolved;
+    }
+    isPending(scope) {
+        return this.readGates().some((g) => g.scope === scope && g.status === 'pending');
+    }
+    listPending() {
+        return this.readGates().filter((g) => g.status === 'pending');
+    }
+    listAll() {
+        return this.readGates();
+    }
+    get(gateId) {
+        return this.readGates().find((g) => g.gate_id === gateId) ?? null;
+    }
+}
+exports.GateManager = GateManager;

package/lib/runtime/gate/index.d.ts

@@ -0,0 +1 @@
+export * from './gate-manager';

package/lib/runtime/gate/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./gate-manager"), exports);

package/lib/runtime/index.d.ts

@@ -0,0 +1,16 @@
+export * from './models/index';
+export * from './events/index';
+export * from './reducers/index';
+export * from './compiler/index';
+export * from './scheduler/index';
+export * from './workspace/index';
+export * from './evidence/index';
+export { compile as compileVerification, runCheck, runSuite, summarizeSuite, } from './verification/verification-compiler';
+export type { CheckType, AcceptanceCheck, AcceptanceCheckSuite, CheckResult, } from './verification/verification-compiler';
+export * from './policy/index';
+export * from './gate/index';
+export * from './projection/index';
+export * from './plugins/index';
+export * from './delivery/index';
+export * from './context/index';
+export * from './scheduler/multi-agent-coordinator';

package/lib/runtime/index.js

@@ -0,0 +1,40 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.summarizeSuite = exports.runSuite = exports.runCheck = exports.compileVerification = void 0;
+// R1 Public ABI — OXE Runtime Foundation
+__exportStar(require("./models/index"), exports);
+__exportStar(require("./events/index"), exports);
+__exportStar(require("./reducers/index"), exports);
+__exportStar(require("./compiler/index"), exports);
+__exportStar(require("./scheduler/index"), exports);
+__exportStar(require("./workspace/index"), exports);
+// R2 Public ABI — OXE Evidence & Verification
+__exportStar(require("./evidence/index"), exports);
+// verification exports compile as compileVerification to avoid conflict with compiler/compile
+var verification_compiler_1 = require("./verification/verification-compiler");
+Object.defineProperty(exports, "compileVerification", { enumerable: true, get: function () { return verification_compiler_1.compile; } });
+Object.defineProperty(exports, "runCheck", { enumerable: true, get: function () { return verification_compiler_1.runCheck; } });
+Object.defineProperty(exports, "runSuite", { enumerable: true, get: function () { return verification_compiler_1.runSuite; } });
+Object.defineProperty(exports, "summarizeSuite", { enumerable: true, get: function () { return verification_compiler_1.summarizeSuite; } });
+__exportStar(require("./policy/index"), exports);
+__exportStar(require("./gate/index"), exports);
+__exportStar(require("./projection/index"), exports);
+// R3 Public ABI — OXE Delivery & Extensibility
+__exportStar(require("./plugins/index"), exports);
+__exportStar(require("./delivery/index"), exports);
+__exportStar(require("./context/index"), exports);
+__exportStar(require("./scheduler/multi-agent-coordinator"), exports);

package/lib/runtime/models/attempt.d.ts

@@ -0,0 +1,12 @@
+export type AttemptOutcome = 'success' | 'failure_env' | 'failure_policy' | 'failure_test' | 'failure_timeout' | 'cancelled';
+export interface Attempt {
+    attempt_id: string;
+    work_item_id: string;
+    attempt_number: number;
+    workspace_id: string | null;
+    agent_profile: string | null;
+    model: string | null;
+    started_at: string;
+    ended_at: string | null;
+    outcome: AttemptOutcome | null;
+}

package/lib/runtime/models/attempt.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/evidence.d.ts

@@ -0,0 +1,9 @@
+export type EvidenceType = 'diff' | 'stdout' | 'stderr' | 'junit_xml' | 'coverage' | 'screenshot' | 'trace' | 'log' | 'security_report' | 'api_output' | 'summary';
+export interface Evidence {
+    evidence_id: string;
+    attempt_id: string;
+    type: EvidenceType;
+    path: string;
+    checksum: string | null;
+    created_at: string;
+}

package/lib/runtime/models/evidence.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/gate-decision.d.ts

@@ -0,0 +1,10 @@
+export type GateDecisionValue = 'approved' | 'rejected' | 'approved_with_caveats' | 'needs_more_evidence';
+export type GateScope = 'plan_approval' | 'critical_mutation' | 'security' | 'pr_promotion' | 'merge';
+export interface GateDecision {
+    gate_id: string;
+    scope: GateScope;
+    decision: GateDecisionValue;
+    actor: string;
+    reason: string | null;
+    timestamp: string;
+}

package/lib/runtime/models/gate-decision.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/index.d.ts

@@ -0,0 +1,8 @@
+export * from './session';
+export * from './run';
+export * from './work-item';
+export * from './attempt';
+export * from './workspace';
+export * from './evidence';
+export * from './gate-decision';
+export * from './verification-result';

package/lib/runtime/models/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./session"), exports);
+__exportStar(require("./run"), exports);
+__exportStar(require("./work-item"), exports);
+__exportStar(require("./attempt"), exports);
+__exportStar(require("./workspace"), exports);
+__exportStar(require("./evidence"), exports);
+__exportStar(require("./gate-decision"), exports);
+__exportStar(require("./verification-result"), exports);

package/lib/runtime/models/run.d.ts

@@ -0,0 +1,13 @@
+export type RunStatus = 'planned' | 'running' | 'paused' | 'waiting_approval' | 'failed' | 'completed' | 'replaying' | 'aborted' | 'cancelled';
+export type RunMode = 'completo' | 'por_onda' | 'por_tarefa';
+export type RunInitiator = 'user' | 'scheduler' | 'retry' | 'replay';
+export interface Run {
+    run_id: string;
+    session_id: string | null;
+    graph_version: string;
+    started_at: string;
+    ended_at: string | null;
+    status: RunStatus;
+    initiator: RunInitiator;
+    mode: RunMode;
+}

package/lib/runtime/models/run.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/session.d.ts

@@ -0,0 +1,10 @@
+export type SessionStatus = 'active' | 'archived' | 'closed';
+export interface Session {
+    session_id: string;
+    title: string;
+    created_at: string;
+    status: SessionStatus;
+    repo_root: string;
+    baseline_commit: string | null;
+    active_run_id: string | null;
+}

package/lib/runtime/models/session.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/verification-result.d.ts

@@ -0,0 +1,9 @@
+export type VerificationStatus = 'pass' | 'fail' | 'skip' | 'error';
+export interface VerificationResult {
+    verification_id: string;
+    work_item_id: string;
+    check_id: string;
+    status: VerificationStatus;
+    evidence_refs: string[];
+    summary: string | null;
+}

package/lib/runtime/models/verification-result.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/work-item.d.ts

@@ -0,0 +1,15 @@
+import type { WorkspaceStrategy } from './workspace';
+export type WorkItemStatus = 'pending' | 'ready' | 'running' | 'completed' | 'failed' | 'blocked' | 'skipped';
+export type WorkItemType = 'task' | 'checkpoint' | 'gate' | 'verification';
+export interface WorkItem {
+    work_item_id: string;
+    run_id: string;
+    title: string;
+    type: WorkItemType;
+    depends_on: string[];
+    mutation_scope: string[];
+    policy_ref: string | null;
+    verify_ref: string[];
+    status: WorkItemStatus;
+    workspace_strategy: WorkspaceStrategy;
+}

package/lib/runtime/models/work-item.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/models/workspace.d.ts

@@ -0,0 +1,25 @@
+export type WorkspaceStrategy = 'inplace' | 'git_worktree' | 'ephemeral_container';
+export type WorkspaceStatus = 'allocating' | 'ready' | 'dirty' | 'disposed' | 'error';
+export interface Workspace {
+    workspace_id: string;
+    strategy: WorkspaceStrategy;
+    base_commit: string | null;
+    branch: string | null;
+    container_ref: string | null;
+    status: WorkspaceStatus;
+    root_path: string;
+}
+export interface WorkspaceLease {
+    workspace_id: string;
+    strategy: WorkspaceStrategy;
+    branch: string | null;
+    base_commit: string | null;
+    root_path: string;
+    ttl_minutes: number;
+}
+export interface SnapshotRef {
+    snapshot_id: string;
+    workspace_id: string;
+    commit: string;
+    created_at: string;
+}

package/lib/runtime/models/workspace.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/runtime/plugins/index.d.ts

@@ -0,0 +1,2 @@
+export * from './plugin-abi';
+export * from './plugin-registry';

package/lib/runtime/plugins/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./plugin-abi"), exports);
+__exportStar(require("./plugin-registry"), exports);

package/lib/runtime/plugins/plugin-abi.d.ts

@@ -0,0 +1,76 @@
+import type { WorkspaceManager } from '../workspace/workspace-manager';
+import type { VerificationResult } from '../models/verification-result';
+export interface ToolInvocationInput {
+    action_type: string;
+    work_item_id: string;
+    run_id: string;
+    attempt_id: string;
+    params: Record<string, unknown>;
+    workspace_root: string;
+}
+export interface ToolInvocationResult {
+    success: boolean;
+    output: string;
+    evidence_paths: string[];
+    side_effects_applied: string[];
+    error?: string;
+}
+export interface ToolProvider {
+    readonly name: string;
+    readonly kind: 'read' | 'mutation' | 'verification' | 'analysis' | 'external_operation';
+    readonly idempotent: boolean;
+    supports(actionType: string): boolean;
+    invoke(input: ToolInvocationInput): Promise<ToolInvocationResult>;
+}
+export interface WorkspaceProvider extends WorkspaceManager {
+    readonly name: string;
+    supportsStrategy(strategy: string): boolean;
+}
+export interface VerificationInput {
+    check_id: string;
+    check_type: string;
+    command: string | null;
+    work_item_id: string;
+    workspace_root: string;
+    evidence_dir: string;
+}
+export interface VerifierProvider {
+    readonly name: string;
+    supports(checkType: string): boolean;
+    execute(input: VerificationInput): Promise<VerificationResult>;
+}
+export interface ContextRequest {
+    work_item_id: string;
+    run_id: string;
+    decision_type: 'execute' | 'verify' | 'plan' | 'review';
+    artifact_paths: string[];
+    project_root: string;
+}
+export interface PluginContextArtifact {
+    source: string;
+    weight: number;
+    reason: string;
+    content?: string;
+}
+export interface PluginContextArtifacts {
+    included: PluginContextArtifact[];
+    excluded: Array<{
+        source: string;
+        reason: string;
+    }>;
+    total_weight: number;
+}
+export interface ContextProvider {
+    readonly name: string;
+    collect(input: ContextRequest): Promise<PluginContextArtifacts>;
+}
+export interface OxePlugin {
+    readonly name: string;
+    readonly version?: string;
+    toolProviders?: ToolProvider[];
+    workspaceProviders?: WorkspaceProvider[];
+    verifierProviders?: VerifierProvider[];
+    contextProviders?: ContextProvider[];
+    /** Legacy lifecycle hooks (compatible with oxe-plugins.cjs) */
+    hooks?: Record<string, (ctx: Record<string, unknown>) => Promise<void> | void>;
+}