oxe-cc 0.9.3 → 1.0.0

package/lib/runtime/verification/verification-compiler.js

@@ -0,0 +1,147 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compile = compile;
+exports.runCheck = runCheck;
+exports.runSuite = runSuite;
+exports.summarizeSuite = summarizeSuite;
+const crypto_1 = __importDefault(require("crypto"));
+const child_process_1 = require("child_process");
+function inferCheckType(howToVerify) {
+    const v = howToVerify.toLowerCase();
+    if (v.includes('npm test') || v.includes('jest') || v.includes('vitest') || v.includes('node --test'))
+        return 'unit';
+    if (v.includes('postman') || v.includes('newman') || v.includes('integration'))
+        return 'integration';
+    if (v.includes('smoke') || v.includes('curl'))
+        return 'smoke';
+    if (v.includes('eslint') || v.includes('lint') || v.includes('oxe-policy'))
+        return 'policy';
+    if (v.includes('security') || v.includes('audit') || v.includes('trivy'))
+        return 'security';
+    return 'custom';
+}
+function inferEvidenceType(checkType) {
+    switch (checkType) {
+        case 'unit': return 'junit_xml';
+        case 'integration': return 'api_output';
+        case 'security': return 'security_report';
+        case 'policy': return 'log';
+        default: return 'stdout';
+    }
+}
+function compile(spec, plan) {
+    const checks = [];
+    const seenRefs = new Set();
+    // Generate checks from spec criteria
+    for (const criterion of spec.criteria) {
+        // Find the verify command from the task that references this criterion
+        const task = plan.tasks.find((t) => t.aceite.includes(criterion.id));
+        const command = task?.verifyCommand ?? null;
+        const type = inferCheckType(criterion.howToVerify);
+        checks.push({
+            id: `check-${criterion.id.toLowerCase()}`,
+            type,
+            command: command ?? (criterion.howToVerify.startsWith('#') ? null : criterion.howToVerify),
+            evidence_type_expected: inferEvidenceType(type),
+            acceptance_ref: criterion.id,
+            description: criterion.criterion,
+        });
+        seenRefs.add(criterion.id);
+    }
+    // Add checks for task verify commands not already covered
+    for (const task of plan.tasks) {
+        if (!task.verifyCommand)
+            continue;
+        const uncovered = task.aceite.filter((ref) => !seenRefs.has(ref));
+        if (uncovered.length === 0 && checks.some((c) => c.command === task.verifyCommand))
+            continue;
+        checks.push({
+            id: `check-task-${task.id.toLowerCase()}`,
+            type: inferCheckType(task.verifyCommand),
+            command: task.verifyCommand,
+            evidence_type_expected: 'stdout',
+            acceptance_ref: uncovered[0] ?? null,
+            description: `Verify command for task ${task.id}`,
+        });
+    }
+    return {
+        checks,
+        compiled_at: new Date().toISOString(),
+        spec_hash: hashObject(spec),
+        plan_hash: hashObject(plan),
+    };
+}
+async function runCheck(check, cwd, timeoutMs = 60000) {
+    if (!check.command) {
+        return {
+            check_id: check.id,
+            acceptance_ref: check.acceptance_ref,
+            status: 'skip',
+            stdout: '',
+            stderr: '',
+            exit_code: null,
+            duration_ms: 0,
+            error: null,
+        };
+    }
+    const start = Date.now();
+    try {
+        // Split command into program + args (simple split; no shell expansion)
+        const parts = check.command.split(/\s+/);
+        const prog = parts[0];
+        const args = parts.slice(1);
+        const result = (0, child_process_1.spawnSync)(prog, args, {
+            cwd,
+            encoding: 'utf8',
+            timeout: timeoutMs,
+            maxBuffer: 2 * 1024 * 1024,
+        });
+        const duration_ms = Date.now() - start;
+        const status = result.status === 0 ? 'pass' : 'fail';
+        return {
+            check_id: check.id,
+            acceptance_ref: check.acceptance_ref,
+            status,
+            stdout: result.stdout ?? '',
+            stderr: result.stderr ?? '',
+            exit_code: result.status ?? null,
+            duration_ms,
+            error: result.error ? String(result.error) : null,
+        };
+    }
+    catch (err) {
+        return {
+            check_id: check.id,
+            acceptance_ref: check.acceptance_ref,
+            status: 'error',
+            stdout: '',
+            stderr: '',
+            exit_code: null,
+            duration_ms: Date.now() - start,
+            error: String(err),
+        };
+    }
+}
+async function runSuite(suite, cwd, timeoutMs = 60000) {
+    const results = [];
+    for (const check of suite.checks) {
+        results.push(await runCheck(check, cwd, timeoutMs));
+    }
+    return results;
+}
+function summarizeSuite(results) {
+    const counts = { total: results.length, pass: 0, fail: 0, skip: 0, error: 0 };
+    for (const r of results)
+        counts[r.status]++;
+    return { ...counts, allPassed: counts.fail === 0 && counts.error === 0 };
+}
+function hashObject(obj) {
+    return crypto_1.default
+        .createHash('sha256')
+        .update(JSON.stringify(obj))
+        .digest('hex')
+        .slice(0, 12);
+}

package/lib/runtime/workspace/index.d.ts

@@ -0,0 +1,5 @@
+export * from './workspace-manager';
+export { InplaceWorkspaceManager } from './strategies/inplace';
+export { GitWorktreeManager } from './strategies/git-worktree';
+export { EphemeralContainerManager } from './strategies/ephemeral-container';
+export type { ContainerOptions } from './strategies/ephemeral-container';

package/lib/runtime/workspace/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EphemeralContainerManager = exports.GitWorktreeManager = exports.InplaceWorkspaceManager = void 0;
+__exportStar(require("./workspace-manager"), exports);
+var inplace_1 = require("./strategies/inplace");
+Object.defineProperty(exports, "InplaceWorkspaceManager", { enumerable: true, get: function () { return inplace_1.InplaceWorkspaceManager; } });
+var git_worktree_1 = require("./strategies/git-worktree");
+Object.defineProperty(exports, "GitWorktreeManager", { enumerable: true, get: function () { return git_worktree_1.GitWorktreeManager; } });
+var ephemeral_container_1 = require("./strategies/ephemeral-container");
+Object.defineProperty(exports, "EphemeralContainerManager", { enumerable: true, get: function () { return ephemeral_container_1.EphemeralContainerManager; } });

package/lib/runtime/workspace/strategies/ephemeral-container.d.ts

@@ -0,0 +1,22 @@
+import type { WorkspaceManager, WorkspaceRequest } from '../workspace-manager';
+import type { WorkspaceLease, SnapshotRef } from '../../models/workspace';
+export interface ContainerOptions {
+    image: string;
+    mountPath: string;
+    extraEnv?: Record<string, string>;
+    /** Gracefully fall back to git_worktree if Docker is unavailable */
+    fallback?: boolean;
+}
+export declare class EphemeralContainerManager implements WorkspaceManager {
+    private readonly projectRoot;
+    private readonly opts;
+    private readonly fallbackManager;
+    private containerIds;
+    private useFallback;
+    constructor(projectRoot: string, opts?: ContainerOptions);
+    get usingFallback(): boolean;
+    allocate(req: WorkspaceRequest): Promise<WorkspaceLease>;
+    snapshot(id: string): Promise<SnapshotRef>;
+    reset(id: string, snapRef: SnapshotRef): Promise<void>;
+    dispose(id: string): Promise<void>;
+}

package/lib/runtime/workspace/strategies/ephemeral-container.js

@@ -0,0 +1,109 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EphemeralContainerManager = void 0;
+const child_process_1 = require("child_process");
+const crypto_1 = __importDefault(require("crypto"));
+const git_worktree_1 = require("./git-worktree");
+function isDockerAvailable() {
+    const result = (0, child_process_1.spawnSync)('docker', ['version', '--format', '{{.Server.Version}}'], {
+        encoding: 'utf8',
+        timeout: 5000,
+    });
+    return result.status === 0;
+}
+class EphemeralContainerManager {
+    constructor(projectRoot, opts = { image: 'node:20-alpine', mountPath: '/workspace', fallback: true }) {
+        this.projectRoot = projectRoot;
+        this.opts = opts;
+        this.containerIds = new Map();
+        this.useFallback = false;
+        this.fallbackManager = new git_worktree_1.GitWorktreeManager(projectRoot);
+        if (!isDockerAvailable()) {
+            if (opts.fallback !== false) {
+                this.useFallback = true;
+            }
+            else {
+                throw new Error('Docker is not available and fallback is disabled');
+            }
+        }
+    }
+    get usingFallback() { return this.useFallback; }
+    async allocate(req) {
+        if (this.useFallback)
+            return this.fallbackManager.allocate(req);
+        const wsId = `ws-container-${req.work_item_id}-a${req.attempt_number}`;
+        const envArgs = Object.entries(this.opts.extraEnv ?? {}).flatMap(([k, v]) => ['-e', `${k}=${v}`]);
+        const result = (0, child_process_1.spawnSync)('docker', [
+            'run', '-d',
+            '-v', `${this.projectRoot}:${this.opts.mountPath}`,
+            '-w', this.opts.mountPath,
+            ...envArgs,
+            this.opts.image,
+            'sleep', '3600',
+        ], { encoding: 'utf8' });
+        if (result.status !== 0) {
+            if (this.opts.fallback !== false) {
+                this.useFallback = true;
+                return this.fallbackManager.allocate(req);
+            }
+            throw new Error(`docker run failed: ${result.stderr}`);
+        }
+        const containerId = result.stdout.trim().slice(0, 12);
+        this.containerIds.set(wsId, containerId);
+        return {
+            workspace_id: wsId,
+            strategy: 'ephemeral_container',
+            branch: null,
+            base_commit: null,
+            root_path: `docker:${containerId}:${this.opts.mountPath}`,
+            ttl_minutes: 60,
+        };
+    }
+    async snapshot(id) {
+        if (this.useFallback)
+            return this.fallbackManager.snapshot(id);
+        const containerId = this.containerIds.get(id);
+        if (!containerId)
+            throw new Error(`Container for workspace ${id} not found`);
+        const tag = `oxe-snap-${crypto_1.default.randomBytes(4).toString('hex')}`;
+        (0, child_process_1.execFileSync)('docker', ['commit', containerId, tag]);
+        return {
+            snapshot_id: tag,
+            workspace_id: id,
+            commit: tag,
+            created_at: new Date().toISOString(),
+        };
+    }
+    async reset(id, snapRef) {
+        if (this.useFallback)
+            return this.fallbackManager.reset(id, snapRef);
+        const containerId = this.containerIds.get(id);
+        if (!containerId)
+            return;
+        // Stop current container and start from snapshot
+        (0, child_process_1.spawnSync)('docker', ['stop', containerId]);
+        (0, child_process_1.spawnSync)('docker', ['rm', containerId]);
+        const result = (0, child_process_1.spawnSync)('docker', [
+            'run', '-d',
+            '-v', `${this.projectRoot}:${this.opts.mountPath}`,
+            snapRef.commit,
+            'sleep', '3600',
+        ], { encoding: 'utf8' });
+        const newId = result.stdout.trim().slice(0, 12);
+        this.containerIds.set(id, newId);
+    }
+    async dispose(id) {
+        if (this.useFallback)
+            return this.fallbackManager.dispose(id);
+        const containerId = this.containerIds.get(id);
+        if (!containerId)
+            return;
+        (0, child_process_1.spawnSync)('docker', ['stop', containerId], { encoding: 'utf8' });
+        (0, child_process_1.spawnSync)('docker', ['rm', containerId], { encoding: 'utf8' });
+        this.containerIds.delete(id);
+    }
+}
+exports.EphemeralContainerManager = EphemeralContainerManager;

package/lib/runtime/workspace/strategies/git-worktree.d.ts

@@ -0,0 +1,12 @@
+import type { WorkspaceManager, WorkspaceRequest } from '../workspace-manager';
+import type { WorkspaceLease, SnapshotRef } from '../../models/workspace';
+export declare class GitWorktreeManager implements WorkspaceManager {
+    private readonly projectRoot;
+    private leases;
+    constructor(projectRoot: string);
+    allocate(req: WorkspaceRequest): Promise<WorkspaceLease>;
+    snapshot(id: string): Promise<SnapshotRef>;
+    reset(id: string, snapRef: SnapshotRef): Promise<void>;
+    dispose(id: string): Promise<void>;
+    private git;
+}

package/lib/runtime/workspace/strategies/git-worktree.js

@@ -0,0 +1,79 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitWorktreeManager = void 0;
+const child_process_1 = require("child_process");
+const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const crypto_1 = __importDefault(require("crypto"));
+class GitWorktreeManager {
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+        this.leases = new Map();
+    }
+    async allocate(req) {
+        const wsId = `ws-${req.work_item_id}-a${req.attempt_number}`;
+        const branch = `oxe/${req.work_item_id}-attempt${req.attempt_number}`;
+        const worktreePath = path_1.default.join(this.projectRoot, '.oxe', 'workspaces', wsId);
+        const baseCommit = this.git(['rev-parse', 'HEAD']).trim();
+        fs_1.default.mkdirSync(path_1.default.dirname(worktreePath), { recursive: true });
+        // Create worktree on a new branch starting from HEAD
+        this.git(['worktree', 'add', worktreePath, '-b', branch]);
+        const lease = {
+            workspace_id: wsId,
+            strategy: 'git_worktree',
+            branch,
+            base_commit: baseCommit,
+            root_path: worktreePath,
+            ttl_minutes: 45,
+        };
+        this.leases.set(wsId, lease);
+        return lease;
+    }
+    async snapshot(id) {
+        const lease = this.leases.get(id);
+        if (!lease || !lease.root_path)
+            throw new Error(`Workspace ${id} not found`);
+        const commit = this.git(['rev-parse', 'HEAD'], lease.root_path).trim();
+        return {
+            snapshot_id: `snap-${crypto_1.default.randomBytes(4).toString('hex')}`,
+            workspace_id: id,
+            commit,
+            created_at: new Date().toISOString(),
+        };
+    }
+    async reset(id, snapRef) {
+        const lease = this.leases.get(id);
+        if (!lease)
+            return;
+        this.git(['reset', '--hard', snapRef.commit], lease.root_path);
+    }
+    async dispose(id) {
+        const lease = this.leases.get(id);
+        if (!lease)
+            return;
+        try {
+            this.git(['worktree', 'remove', lease.root_path, '--force']);
+        }
+        catch {
+            // worktree may already be gone
+        }
+        try {
+            if (lease.branch)
+                this.git(['branch', '-D', lease.branch]);
+        }
+        catch {
+            // branch may already be deleted
+        }
+        this.leases.delete(id);
+    }
+    git(args, cwd) {
+        return (0, child_process_1.execFileSync)('git', args, {
+            cwd: cwd ?? this.projectRoot,
+            encoding: 'utf8',
+        });
+    }
+}
+exports.GitWorktreeManager = GitWorktreeManager;

package/lib/runtime/workspace/strategies/inplace.d.ts

@@ -0,0 +1,10 @@
+import type { WorkspaceManager, WorkspaceRequest } from '../workspace-manager';
+import type { WorkspaceLease, SnapshotRef } from '../../models/workspace';
+export declare class InplaceWorkspaceManager implements WorkspaceManager {
+    private readonly projectRoot;
+    constructor(projectRoot: string);
+    allocate(req: WorkspaceRequest): Promise<WorkspaceLease>;
+    snapshot(id: string): Promise<SnapshotRef>;
+    reset(_id: string, _snapRef: SnapshotRef): Promise<void>;
+    dispose(_id: string): Promise<void>;
+}

package/lib/runtime/workspace/strategies/inplace.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InplaceWorkspaceManager = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+class InplaceWorkspaceManager {
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    async allocate(req) {
+        return {
+            workspace_id: `ws-inplace-${req.work_item_id}-a${req.attempt_number}`,
+            strategy: 'inplace',
+            branch: null,
+            base_commit: null,
+            root_path: this.projectRoot,
+            ttl_minutes: 60,
+        };
+    }
+    async snapshot(id) {
+        return {
+            snapshot_id: `snap-${crypto_1.default.randomBytes(4).toString('hex')}`,
+            workspace_id: id,
+            commit: 'HEAD',
+            created_at: new Date().toISOString(),
+        };
+    }
+    async reset(_id, _snapRef) {
+        // inplace: no filesystem isolation — reset is a no-op
+    }
+    async dispose(_id) {
+        // inplace: nothing to tear down
+    }
+}
+exports.InplaceWorkspaceManager = InplaceWorkspaceManager;

package/lib/runtime/workspace/workspace-manager.d.ts

@@ -0,0 +1,13 @@
+import type { WorkspaceLease, SnapshotRef, WorkspaceStrategy } from '../models/workspace';
+export interface WorkspaceRequest {
+    work_item_id: string;
+    attempt_number: number;
+    strategy: WorkspaceStrategy;
+    mutation_scope: string[];
+}
+export interface WorkspaceManager {
+    allocate(req: WorkspaceRequest): Promise<WorkspaceLease>;
+    snapshot(id: string): Promise<SnapshotRef>;
+    reset(id: string, snapRef: SnapshotRef): Promise<void>;
+    dispose(id: string): Promise<void>;
+}

package/lib/runtime/workspace/workspace-manager.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/lib/sdk/index.cjs

@@ -648,13 +648,20 @@ module.exports = {
     operationalPaths: operational.operationalPaths,
     appendEvent: operational.appendEvent,
     readEvents: operational.readEvents,
-    summarizeEvents: operational.summarizeEvents,
-    writeRunState: operational.writeRunState,
-    readRunState: operational.readRunState,
-    buildOperationalGraph: operational.buildOperationalGraph,
-    applyRuntimeAction: operational.applyRuntimeAction,
-    parseCapabilityManifest: operational.parseCapabilityManifest,
-    readCapabilityCatalog: operational.readCapabilityCatalog,
+    summarizeEvents: operational.summarizeEvents,
+    writeRunState: operational.writeRunState,
+    readRunState: operational.readRunState,
+    buildOperationalGraph: operational.buildOperationalGraph,
+    serializeCanonicalState: operational.serializeCanonicalState,
+    hydrateCanonicalState: operational.hydrateCanonicalState,
+    reduceCanonicalRunState: operational.reduceCanonicalRunState,
+    compileExecutionGraphFromArtifacts: operational.compileExecutionGraphFromArtifacts,
+    compileVerificationSuiteFromArtifacts: operational.compileVerificationSuiteFromArtifacts,
+    projectRuntimeArtifacts: operational.projectRuntimeArtifacts,
+    runRuntimeCiChecks: operational.runRuntimeCiChecks,
+    applyRuntimeAction: operational.applyRuntimeAction,
+    parseCapabilityManifest: operational.parseCapabilityManifest,
+    readCapabilityCatalog: operational.readCapabilityCatalog,
     buildMemoryLayers: operational.buildMemoryLayers,
     replayEvents: operational.replayEvents,
   },
@@ -735,3 +742,13 @@ module.exports = {
   /** Um único objeto com verificações tipo `doctor` + relatório de saúde. */
   runDoctorChecks,
 };
+
+
+// Re-exports from @oxe/runtime (R1 — Runtime Foundation)
+// The compiled runtime lives at lib/runtime/ alongside this file.
+try {
+  const runtime = require('../runtime/index.js');
+  Object.assign(module.exports, runtime);
+} catch {
+  // Runtime not built yet — safe to skip during development
+}

package/lib/sdk/index.d.ts

@@ -573,13 +573,20 @@ export interface OxeSdk {
     operationalPaths: (projectRoot: string, activeSession: string | null) => Record<string, string | null>;
     appendEvent: (projectRoot: string, activeSession: string | null, event?: Record<string, unknown>) => Record<string, unknown>;
     readEvents: (projectRoot: string, activeSession: string | null) => Array<Record<string, unknown>>;
-    summarizeEvents: (events: Array<Record<string, unknown>>) => Record<string, unknown>;
-    writeRunState: (projectRoot: string, activeSession: string | null, runState?: Record<string, unknown>) => Record<string, unknown>;
-    readRunState: (projectRoot: string, activeSession: string | null) => Record<string, unknown> | null;
-    buildOperationalGraph: (runState?: Record<string, unknown>) => { nodes: Array<Record<string, unknown>>; edges: Array<Record<string, unknown>> };
-    applyRuntimeAction: (projectRoot: string, activeSession: string | null, input?: Record<string, unknown>) => Record<string, unknown>;
-    parseCapabilityManifest: (text: string) => Record<string, unknown>;
-    readCapabilityCatalog: (projectRoot: string) => Array<Record<string, unknown>>;
+    summarizeEvents: (events: Array<Record<string, unknown>>) => Record<string, unknown>;
+    writeRunState: (projectRoot: string, activeSession: string | null, runState?: Record<string, unknown>) => Record<string, unknown>;
+    readRunState: (projectRoot: string, activeSession: string | null) => Record<string, unknown> | null;
+    buildOperationalGraph: (runState?: Record<string, unknown>) => { nodes: Array<Record<string, unknown>>; edges: Array<Record<string, unknown>> };
+    serializeCanonicalState: (state: unknown) => Record<string, unknown> | null;
+    hydrateCanonicalState: (serialized: unknown) => Record<string, unknown>;
+    reduceCanonicalRunState: (projectRoot: string, activeSession: string | null, options?: Record<string, unknown>) => Record<string, unknown> | null;
+    compileExecutionGraphFromArtifacts: (projectRoot: string, activeSession: string | null, options?: Record<string, unknown>) => Record<string, unknown>;
+    compileVerificationSuiteFromArtifacts: (projectRoot: string, activeSession: string | null, options?: Record<string, unknown>) => Record<string, unknown>;
+    projectRuntimeArtifacts: (projectRoot: string, activeSession: string | null, options?: Record<string, unknown>) => Record<string, unknown>;
+    runRuntimeCiChecks: (projectRoot: string, activeSession: string | null, options?: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    applyRuntimeAction: (projectRoot: string, activeSession: string | null, input?: Record<string, unknown>) => Record<string, unknown>;
+    parseCapabilityManifest: (text: string) => Record<string, unknown>;
+    readCapabilityCatalog: (projectRoot: string) => Array<Record<string, unknown>>;
     buildMemoryLayers: (projectRoot: string, activeSession: string | null) => Record<string, unknown>;
     replayEvents: (projectRoot: string, activeSession: string | null, options?: {
       fromEventId?: string;
@@ -631,3 +638,6 @@ export interface OxeSdk {
 
 declare const sdk: OxeSdk;
 export = sdk;
+
+// Re-exports from @oxe/runtime (R1 — Runtime Foundation)
+export * from '../runtime/index';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "oxe-cc",
-	"version": "0.9.3",
+	"version": "1.0.0",
 	"description": "OXE — spec-driven workflows in .oxe/; integrates with Cursor, GitHub Copilot, Claude, OpenCode, Gemini, Codex, Windsurf, Antigravity (npx)",
 	"license": "GPL-3.0",
 	"author": "",
@@ -49,14 +49,20 @@
 		".github",
 		"commands",
 		"vscode-extension",
+		"packages/runtime/src",
+		"packages/runtime/package.json",
+		"packages/runtime/tsconfig.json",
 		"AGENTS.md",
 		"README.md",
 		"CHANGELOG.md"
 	],
 	"scripts": {
+		"build:runtime": "cd packages/runtime && npm run build",
 		"sync:runtime-metadata": "node scripts/sync-runtime-metadata.cjs",
 		"sync:cursor": "node scripts/sync-cursor-from-prompts.cjs",
-		"test": "node --test tests/install.test.cjs tests/oxe-project-health.test.cjs tests/oxe-dashboard.test.cjs tests/oxe-operational.test.cjs tests/oxe-azure.test.cjs tests/oxe-sdk.test.cjs tests/oxe-manifest.test.cjs tests/oxe-agent-install.test.cjs tests/oxe-install-resolve-full.test.cjs tests/oxe-health-extended.test.cjs tests/oxe-workflows-edge.test.cjs tests/oxe-sdk-edge.test.cjs tests/oxe-cli-edge.test.cjs tests/oxe-npm-version.test.cjs tests/oxe-scripts.test.cjs tests/oxe-retro-health.test.cjs tests/oxe-security-permissions.test.cjs tests/oxe-runtime-semantics.test.cjs",
+		"test:root": "node --test tests/install.test.cjs tests/oxe-project-health.test.cjs tests/oxe-dashboard.test.cjs tests/oxe-operational.test.cjs tests/oxe-azure.test.cjs tests/oxe-sdk.test.cjs tests/oxe-manifest.test.cjs tests/oxe-agent-install.test.cjs tests/oxe-install-resolve-full.test.cjs tests/oxe-health-extended.test.cjs tests/oxe-workflows-edge.test.cjs tests/oxe-sdk-edge.test.cjs tests/oxe-cli-edge.test.cjs tests/oxe-npm-version.test.cjs tests/oxe-scripts.test.cjs tests/oxe-retro-health.test.cjs tests/oxe-security-permissions.test.cjs tests/oxe-runtime-semantics.test.cjs",
+		"test:runtime": "cd packages/runtime && npm test",
+		"test": "npm run build:runtime && npm run test:root && npm run test:runtime",
 		"test:coverage": "c8 --check-coverage --lines 82 --functions 85 --branches 58 --statements 82 npm test",
 		"scan:assets": "node scripts/oxe-assets-scan.cjs",
 		"build:vscode-ext": "cd vscode-extension && npx @vscode/vsce package --no-yarn --allow-missing-repository",
@@ -83,4 +89,4 @@
 	"dependencies": {
 		"semver": "^7.7.4"
 	}
-}
+}

package/packages/runtime/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@oxe/runtime",
+  "version": "0.1.0",
+  "private": true,
+  "description": "OXE agentic execution engine — Runtime Foundation (R1)",
+  "main": "../../lib/runtime/index.js",
+  "types": "../../lib/runtime/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "tsc --project tsconfig.test.json && node --test dist-tests/tests/*.test.js",
+    "clean": "node -e \"const fs=require('fs');['../../lib/runtime','dist-tests'].forEach(d=>{try{fs.rmSync(d,{recursive:true})}catch{}});\""
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "typescript": "^5.4.5"
+  }
+}