pm-orchestrator-runner 1.0.0

package/dist/evidence/evidence-manager.js

@@ -0,0 +1,337 @@
+"use strict";
+/**
+ * Evidence Manager
+ * Based on 04_COMPONENTS.md L133-154
+ *
+ * Responsible for:
+ * - Evidence collection and storage
+ * - Hash verification
+ * - Evidence index management
+ * - Atomic evidence recording
+ * - Evidence inventory tracking
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvidenceManager = exports.EvidenceManagerError = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const error_codes_1 = require("../errors/error-codes");
+/**
+ * Evidence Manager Error
+ */
+class EvidenceManagerError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message || (0, error_codes_1.getErrorMessage)(code));
+        this.name = 'EvidenceManagerError';
+        this.code = code;
+        this.details = details;
+    }
+}
+exports.EvidenceManagerError = EvidenceManagerError;
+/**
+ * Evidence Manager class
+ */
+class EvidenceManager {
+    baseDir;
+    sessions;
+    /**
+     * Create a new EvidenceManager
+     * @param baseDir Base directory for evidence storage
+     */
+    constructor(baseDir) {
+        this.baseDir = baseDir;
+        this.sessions = new Map();
+    }
+    /**
+     * Initialize evidence directory for a session
+     */
+    initializeSession(sessionId) {
+        const sessionDir = path.join(this.baseDir, sessionId);
+        const rawLogsDir = path.join(sessionDir, 'raw_logs');
+        fs.mkdirSync(sessionDir, { recursive: true });
+        fs.mkdirSync(rawLogsDir, { recursive: true });
+        // Initialize session data
+        this.sessions.set(sessionId, {
+            evidenceMap: new Map(),
+            registeredOperations: new Set(),
+            operationToEvidence: new Map(),
+            integrityFailures: new Set(),
+            rawLogFiles: [],
+        });
+    }
+    /**
+     * Record evidence for a session
+     * @throws EvidenceManagerError with E301 if session not found or validation fails
+     */
+    recordEvidence(sessionId, evidence) {
+        const sessionData = this.sessions.get(sessionId);
+        if (!sessionData) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, `Session not initialized: ${sessionId}`, { sessionId });
+        }
+        // Check for atomic operation requirement (Property 18)
+        if (!evidence.atomic_operation) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, 'Evidence must be from atomic operation (atomic_operation must be true)', { evidenceId: evidence.evidence_id });
+        }
+        // Reject aggregated evidence (Property 18)
+        if (evidence.aggregated === true) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, 'Evidence aggregation is prohibited', { evidenceId: evidence.evidence_id });
+        }
+        // Store evidence
+        sessionData.evidenceMap.set(evidence.evidence_id, evidence);
+        // Associate with operation if operation_id provided
+        if (evidence.operation_id) {
+            sessionData.operationToEvidence.set(evidence.operation_id, evidence.evidence_id);
+        }
+        // Persist evidence to disk
+        const sessionDir = path.join(this.baseDir, sessionId);
+        const evidencePath = path.join(sessionDir, `${evidence.evidence_id}.json`);
+        fs.writeFileSync(evidencePath, JSON.stringify(evidence, null, 2), 'utf-8');
+    }
+    /**
+     * Get evidence by ID
+     * @throws EvidenceManagerError if evidence not found
+     */
+    getEvidence(sessionId, evidenceId) {
+        const sessionData = this.sessions.get(sessionId);
+        if (!sessionData) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, `Session not initialized: ${sessionId}`, { sessionId });
+        }
+        const evidence = sessionData.evidenceMap.get(evidenceId);
+        if (!evidence) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, `Evidence not found: ${evidenceId}`, { sessionId, evidenceId });
+        }
+        return evidence;
+    }
+    /**
+     * List all evidence for a session
+     */
+    listEvidence(sessionId) {
+        const sessionData = this.sessions.get(sessionId);
+        if (!sessionData) {
+            return [];
+        }
+        return Array.from(sessionData.evidenceMap.values());
+    }
+    /**
+     * Verify evidence hash
+     * @throws EvidenceManagerError with E304 on hash mismatch
+     */
+    verifyEvidence(sessionId, evidenceId) {
+        const sessionData = this.sessions.get(sessionId);
+        const evidence = this.getEvidence(sessionId, evidenceId);
+        // Calculate hash from artifacts content
+        const content = this.getEvidenceContent(evidence);
+        const calculatedHash = 'sha256:' + crypto.createHash('sha256').update(content).digest('hex');
+        if (calculatedHash !== evidence.hash) {
+            // Track integrity failure
+            sessionData?.integrityFailures.add(evidenceId);
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E304_EVIDENCE_HASH_MISMATCH, `Hash mismatch for evidence: ${evidenceId}`, { evidenceId, expectedHash: evidence.hash, calculatedHash });
+        }
+        return true;
+    }
+    /**
+     * Get content for hash calculation
+     */
+    getEvidenceContent(evidence) {
+        if (evidence.artifacts.length === 0) {
+            return '';
+        }
+        // Concatenate artifact contents
+        return evidence.artifacts
+            .map((a) => a.content || '')
+            .join('');
+    }
+    /**
+     * Finalize session - create evidence_index.json and evidence_index.sha256
+     */
+    finalizeSession(sessionId) {
+        const sessionData = this.sessions.get(sessionId);
+        if (!sessionData) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E301_EVIDENCE_COLLECTION_FAILURE, `Session not initialized: ${sessionId}`, { sessionId });
+        }
+        const sessionDir = path.join(this.baseDir, sessionId);
+        // Create evidence index
+        const evidenceItems = Array.from(sessionData.evidenceMap.values()).map(e => ({
+            evidence_id: e.evidence_id,
+            operation_type: e.operation_type,
+            timestamp: e.timestamp,
+            hash: e.hash,
+        }));
+        const index = {
+            session_id: sessionId,
+            created_at: new Date().toISOString(),
+            finalized_at: new Date().toISOString(),
+            evidence_items: evidenceItems,
+            total_items: evidenceItems.length,
+        };
+        // Write evidence_index.json
+        const indexPath = path.join(sessionDir, 'evidence_index.json');
+        const indexContent = JSON.stringify(index, null, 2);
+        fs.writeFileSync(indexPath, indexContent, 'utf-8');
+        // Write evidence_index.sha256 (hash of evidence_index.json ONLY - user clarification)
+        const indexHash = crypto.createHash('sha256').update(indexContent).digest('hex');
+        const sha256Path = path.join(sessionDir, 'evidence_index.sha256');
+        fs.writeFileSync(sha256Path, indexHash, 'utf-8');
+        // Create report.json
+        const reportPath = path.join(sessionDir, 'report.json');
+        const report = {
+            session_id: sessionId,
+            generated_at: new Date().toISOString(),
+            total_evidence_items: evidenceItems.length,
+            integrity_verified: sessionData.integrityFailures.size === 0,
+            summary: {
+                operations: evidenceItems.map(e => e.operation_type),
+            },
+        };
+        fs.writeFileSync(reportPath, JSON.stringify(report, null, 2), 'utf-8');
+    }
+    /**
+     * Verify session integrity (check evidence_index.json hash)
+     * @throws EvidenceManagerError with E304 if tampered
+     */
+    verifySessionIntegrity(sessionId) {
+        const sessionDir = path.join(this.baseDir, sessionId);
+        const indexPath = path.join(sessionDir, 'evidence_index.json');
+        const sha256Path = path.join(sessionDir, 'evidence_index.sha256');
+        if (!fs.existsSync(indexPath) || !fs.existsSync(sha256Path)) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E302_EVIDENCE_INDEX_CORRUPTION, 'Evidence index files missing', { sessionId });
+        }
+        const indexContent = fs.readFileSync(indexPath, 'utf-8');
+        const storedHash = fs.readFileSync(sha256Path, 'utf-8').trim();
+        const calculatedHash = crypto.createHash('sha256').update(indexContent).digest('hex');
+        if (storedHash !== calculatedHash) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E304_EVIDENCE_HASH_MISMATCH, 'Evidence index has been modified after finalization', { sessionId, expectedHash: storedHash, calculatedHash });
+        }
+        return true;
+    }
+    /**
+     * Load evidence index from disk
+     * @throws EvidenceManagerError with E302 if corrupted
+     */
+    loadEvidenceIndex(sessionId) {
+        const sessionDir = path.join(this.baseDir, sessionId);
+        const indexPath = path.join(sessionDir, 'evidence_index.json');
+        if (!fs.existsSync(indexPath)) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E302_EVIDENCE_INDEX_CORRUPTION, 'Evidence index not found', { sessionId });
+        }
+        try {
+            const content = fs.readFileSync(indexPath, 'utf-8');
+            return JSON.parse(content);
+        }
+        catch (error) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E302_EVIDENCE_INDEX_CORRUPTION, 'Evidence index is corrupted', { sessionId, error: error.message });
+        }
+    }
+    /**
+     * Store raw log for an executor
+     */
+    storeRawLog(sessionId, executorId, content) {
+        const sessionData = this.sessions.get(sessionId);
+        const sessionDir = path.join(this.baseDir, sessionId);
+        const rawLogsDir = path.join(sessionDir, 'raw_logs');
+        // Ensure raw_logs directory exists
+        if (!fs.existsSync(rawLogsDir)) {
+            fs.mkdirSync(rawLogsDir, { recursive: true });
+        }
+        const timestamp = Date.now();
+        const logFileName = `${executorId}-${timestamp}.log`;
+        const logPath = path.join(rawLogsDir, logFileName);
+        fs.writeFileSync(logPath, content, 'utf-8');
+        // Track raw log file
+        if (sessionData) {
+            sessionData.rawLogFiles.push(logPath);
+        }
+        return logPath;
+    }
+    /**
+     * Verify raw logs exist
+     * @throws EvidenceManagerError with E303 if raw log missing
+     */
+    verifyRawLogs(sessionId, evidenceId) {
+        const evidence = this.getEvidence(sessionId, evidenceId);
+        // Check main raw_logs path
+        if (evidence.raw_logs && !fs.existsSync(evidence.raw_logs)) {
+            throw new EvidenceManagerError(error_codes_1.ErrorCode.E303_RAW_LOG_MISSING, `Raw log file not found: ${evidence.raw_logs}`, { sessionId, evidenceId, rawLogs: evidence.raw_logs });
+        }
+        // Check raw_evidence_refs
+        for (const ref of evidence.raw_evidence_refs) {
+            if (!fs.existsSync(ref)) {
+                throw new EvidenceManagerError(error_codes_1.ErrorCode.E303_RAW_LOG_MISSING, `Raw evidence reference not found: ${ref}`, { sessionId, evidenceId, missingRef: ref });
+            }
+        }
+        return true;
+    }
+    /**
+     * Register an operation for evidence tracking
+     */
+    registerOperation(sessionId, operationId) {
+        const sessionData = this.sessions.get(sessionId);
+        if (sessionData) {
+            sessionData.registeredOperations.add(operationId);
+        }
+    }
+    /**
+     * Get evidence inventory for a session
+     */
+    getEvidenceInventory(sessionId) {
+        const sessionData = this.sessions.get(sessionId);
+        if (!sessionData) {
+            return {
+                total_evidence_items: 0,
+                missing_evidence_operations: [],
+                integrity_failures: [],
+                raw_evidence_files: [],
+            };
+        }
+        // Find operations without evidence
+        const missingOperations = [];
+        for (const opId of sessionData.registeredOperations) {
+            if (!sessionData.operationToEvidence.has(opId)) {
+                missingOperations.push(opId);
+            }
+        }
+        return {
+            total_evidence_items: sessionData.evidenceMap.size,
+            missing_evidence_operations: missingOperations,
+            integrity_failures: Array.from(sessionData.integrityFailures),
+            raw_evidence_files: sessionData.rawLogFiles,
+        };
+    }
+}
+exports.EvidenceManager = EvidenceManager;
+//# sourceMappingURL=evidence-manager.js.map

package/dist/evidence/evidence-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-manager.js","sourceRoot":"","sources":["../../src/evidence/evidence-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,+CAAiC;AAGjC,uDAAmE;AAEnE;;GAEG;AACH,MAAa,oBAAqB,SAAQ,KAAK;IAC7B,IAAI,CAAY;IAChB,OAAO,CAA2B;IAElD,YAAY,IAAe,EAAE,OAAgB,EAAE,OAAiC;QAC9E,KAAK,CAAC,OAAO,IAAI,IAAA,6BAAe,EAAC,IAAI,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAVD,oDAUC;AA6BD;;GAEG;AACH,MAAa,eAAe;IACT,OAAO,CAAS;IAChB,QAAQ,CAA2B;IAEpD;;;OAGG;IACH,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAiB;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAErD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,oBAAoB,EAAE,IAAI,GAAG,EAAE;YAC/B,mBAAmB,EAAE,IAAI,GAAG,EAAE;YAC9B,iBAAiB,EAAE,IAAI,GAAG,EAAE;YAC5B,WAAW,EAAE,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,SAAiB,EAAE,QAAoE;QACpG,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,4BAA4B,SAAS,EAAE,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,wEAAwE,EACxE,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,CACrC,CAAC;QACJ,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,oCAAoC,EACpC,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,CACrC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE5D,oDAAoD;QACpD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC1B,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnF,CAAC;QAED,2BAA2B;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,WAAW,OAAO,CAAC,CAAC;QAC3E,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,SAAiB,EAAE,UAAkB;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,4BAA4B,SAAS,EAAE,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,uBAAuB,UAAU,EAAE,EACnC,EAAE,SAAS,EAAE,UAAU,EAAE,CAC1B,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,SAAiB,EAAE,UAAkB;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzD,wCAAwC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7F,IAAI,cAAc,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,0BAA0B;YAC1B,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAE/C,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,2BAA2B,EACrC,+BAA+B,UAAU,EAAE,EAC3C,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,QAAkB;QAC3C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,gCAAgC;QAChC,OAAO,QAAQ,CAAC,SAAS;aACtB,GAAG,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;aACrC,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,gCAAgC,EAC1C,4BAA4B,SAAS,EAAE,EACvC,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEtD,wBAAwB;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAkB;YAC3B,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,cAAc,EAAE,aAAa;YAC7B,WAAW,EAAE,aAAa,CAAC,MAAM;SAClC,CAAC;QAEF,4BAA4B;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAEnD,sFAAsF;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAClE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEjD,qBAAqB;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,oBAAoB,EAAE,aAAa,CAAC,MAAM;YAC1C,kBAAkB,EAAE,WAAW,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC;YAC5D,OAAO,EAAE;gBACP,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;aACrD;SACF,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,sBAAsB,CAAC,SAAiB;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,8BAA8B,EACxC,8BAA8B,EAC9B,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtF,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,2BAA2B,EACrC,qDAAqD,EACrD,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,SAAiB;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAE/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,8BAA8B,EACxC,0BAA0B,EAC1B,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,8BAA8B,EACxC,6BAA6B,EAC7B,EAAE,SAAS,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAe;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAErD,mCAAmC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,GAAG,UAAU,IAAI,SAAS,MAAM,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEnD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE5C,qBAAqB;QACrB,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,SAAiB,EAAE,UAAkB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzD,2BAA2B;QAC3B,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,oBAAoB,EAC9B,2BAA2B,QAAQ,CAAC,QAAQ,EAAE,EAC9C,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,oBAAoB,CAC5B,uBAAS,CAAC,oBAAoB,EAC9B,qCAAqC,GAAG,EAAE,EAC1C,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAiB,EAAE,WAAmB;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,oBAAoB,EAAE,CAAC;gBACvB,2BAA2B,EAAE,EAAE;gBAC/B,kBAAkB,EAAE,EAAE;gBACtB,kBAAkB,EAAE,EAAE;aACvB,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACpD,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO;YACL,oBAAoB,EAAE,WAAW,CAAC,WAAW,CAAC,IAAI;YAClD,2BAA2B,EAAE,iBAAiB;YAC9C,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC;YAC7D,kBAAkB,EAAE,WAAW,CAAC,WAAW;SAC5C,CAAC;IACJ,CAAC;CACF;AAtXD,0CAsXC"}

package/dist/executor/claude-code-executor.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Claude Code Executor
+ *
+ * Executes tasks via Claude Code CLI subprocess.
+ * Per spec 04_COMPONENTS.md: L2 Executor must use Claude Code CLI for task execution.
+ * Per spec 10_REPL_UX.md Section 10: Non-interactive mode guarantees (Property 34-36).
+ *
+ * This is NOT a simulation - it actually spawns the `claude` CLI process.
+ *
+ * Timeout Design (v2 - Production Ready):
+ * - SOFT_TIMEOUT: Warning only, continue execution
+ * - HARD_TIMEOUT: No output for extended period, terminate
+ * - OVERALL_TIMEOUT: Total execution time limit
+ * - Process state monitoring: Check if process is still alive
+ */
+import type { BlockedReason, TerminatedBy } from '../models/enums';
+/**
+ * Executor configuration
+ */
+export interface ExecutorConfig {
+    projectPath: string;
+    timeout: number;
+    cliPath?: string;
+    softTimeoutMs?: number;
+    hardTimeoutMs?: number;
+}
+/**
+ * Task to execute
+ *
+ * Per spec 10_REPL_UX.md L117-118: Model selection is REPL-local.
+ * The selectedModel is passed to Claude Code CLI via --model flag.
+ * This is a "thin wrapper" - no prompt modification, no result interpretation.
+ */
+export interface ExecutorTask {
+    id: string;
+    prompt: string;
+    workingDir: string;
+    /** Model to use (from .claude/repl.json). Undefined means use CLI default. */
+    selectedModel?: string;
+}
+/**
+ * Verified file information
+ */
+export interface VerifiedFile {
+    path: string;
+    exists: boolean;
+    size?: number;
+    content_preview?: string;
+}
+/**
+ * Execution result
+ * Per spec 10_REPL_UX.md Section 10: Includes blocking detection info (Property 34-36)
+ */
+export interface ExecutorResult {
+    executed: boolean;
+    output: string;
+    error?: string;
+    files_modified: string[];
+    duration_ms: number;
+    status: 'COMPLETE' | 'INCOMPLETE' | 'NO_EVIDENCE' | 'ERROR' | 'BLOCKED';
+    /** cwd used for execution - must be projectPath */
+    cwd: string;
+    /** Files that were verified to exist after execution */
+    verified_files: VerifiedFile[];
+    /** Files that were claimed but don't exist (fail-closed detection) */
+    unverified_files: string[];
+    /** Executor blocked in non-interactive mode (Property 34-36) */
+    executor_blocked?: boolean;
+    /** Blocking reason when executor_blocked is true */
+    blocked_reason?: BlockedReason;
+    /** Time until blocking was detected (ms) */
+    timeout_ms?: number;
+    /** How the executor was terminated */
+    terminated_by?: TerminatedBy;
+}
+/**
+ * Executor interface for dependency injection
+ *
+ * Allows substituting the real ClaudeCodeExecutor with mocks for testing.
+ */
+export interface IExecutor {
+    execute(task: ExecutorTask): Promise<ExecutorResult>;
+    isClaudeCodeAvailable(): Promise<boolean>;
+}
+/**
+ * Claude Code Executor class
+ *
+ * Spawns Claude Code CLI to execute natural language tasks.
+ * Fail-closed: If CLI is not available, returns error status.
+ * Property 34-36: Detects blocking in non-interactive mode and terminates.
+ *
+ * v2 Improvements:
+ * - Two-stage timeout (soft/hard)
+ * - Process state monitoring
+ * - Extended interactive prompt detection
+ * - Better error recovery
+ */
+export declare class ClaudeCodeExecutor implements IExecutor {
+    private readonly config;
+    private readonly cliPath;
+    private readonly softTimeoutMs;
+    private readonly hardTimeoutMs;
+    constructor(config: ExecutorConfig);
+    /**
+     * Check if Claude Code CLI is available
+     *
+     * @returns true if CLI is available, false otherwise
+     */
+    isClaudeCodeAvailable(): Promise<boolean>;
+    /**
+     * Execute a task via Claude Code CLI
+     *
+     * Fail-closed behavior:
+     * - If CLI not available → error status
+     * - If no files modified → INCOMPLETE status
+     * - If timeout → error status
+     *
+     * v2 Timeout behavior:
+     * - Soft timeout: Warning only, continue execution
+     * - Hard timeout: No output for extended period, terminate
+     * - Overall timeout: Total execution time limit
+     *
+     * @param task - Task to execute
+     * @returns Execution result
+     */
+    execute(task: ExecutorTask): Promise<ExecutorResult>;
+    /**
+     * List all files in a directory (recursively)
+     */
+    private listFiles;
+    /**
+     * Detect files that were modified or created
+     */
+    private detectModifiedFiles;
+}
+//# sourceMappingURL=claude-code-executor.d.ts.map

package/dist/executor/claude-code-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-executor.d.ts","sourceRoot":"","sources":["../../src/executor/claude-code-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IACxE,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oDAAoD;IACpD,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrD,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAuED;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAmB,YAAW,SAAS;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,cAAc;IAUlC;;;;OAIG;IACG,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC;IA2B/C;;;;;;;;;;;;;;;OAeG;IACG,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IA+a1D;;OAEG;YACW,SAAS;IAsCvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAwB5B"}