@aria-cli/tools 1.0.10 → 1.0.12

package/dist-cjs/executors/session-history.js

@@ -0,0 +1,320 @@
+"use strict";
+/**
+ * @aria/tools - Session History tool executor
+ *
+ * Implementation of session history operations for ARIA tool system.
+ * Provides list, search, get, current, stats, delete, and set_title actions
+ * against the SessionHistory SQLite database.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSessionHistory = getSessionHistory;
+exports.executeSessionHistory = executeSessionHistory;
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const utils_js_1 = require("./utils.js");
+// ============================================================================
+// Helpers
+// ============================================================================
+/** Max content length per message in 'get' output to prevent context blowout */
+const MAX_MESSAGE_CONTENT_LENGTH = 2000;
+/**
+ * Cached fallback SessionHistory instance — created once per process via
+ * dynamic import of @aria/cli's SessionHistory class.  This avoids a hard
+ * package dependency (tools → cli) while still giving the tool access to
+ * the real SQLite history DB when ctx.sessionHistory isn't wired through.
+ */
+/** Cached fallback SessionHistory — resolved once per process via dynamic import. */
+let _fallbackSessionHistory;
+let _fallbackPromise = null;
+async function resolveFallbackSessionHistory() {
+    if (_fallbackSessionHistory !== undefined)
+        return _fallbackSessionHistory;
+    if (_fallbackPromise)
+        return _fallbackPromise;
+    _fallbackPromise = (async () => {
+        try {
+            // Dynamic import of @aria/cli (optionalDependency, ESM-only).
+            // Using a variable prevents TS from resolving the specifier statically
+            // and from downleveling to require() in CJS output.
+            const _specifier = "@aria-cli/cli";
+            const mod = (await Promise.resolve(`${_specifier}`).then(s => __importStar(require(s))));
+            const SessionHistory = mod.SessionHistory;
+            const ariaHome = process.env.ARIA_HOME ?? path.join(os.homedir(), ".aria");
+            // Determine active arion from config or default to "ARIA"
+            let arionName = "ARIA";
+            try {
+                const { readFileSync, existsSync } = await Promise.resolve().then(() => __importStar(require("node:fs")));
+                const configPath = path.join(ariaHome, "config.json");
+                if (existsSync(configPath)) {
+                    const raw = JSON.parse(readFileSync(configPath, "utf-8"));
+                    if (raw.activeArion)
+                        arionName = raw.activeArion;
+                }
+            }
+            catch {
+                // Ignore config read errors
+            }
+            const dbPath = SessionHistory.resolvePerArionPath(ariaHome, arionName);
+            _fallbackSessionHistory = new SessionHistory(dbPath);
+            return _fallbackSessionHistory;
+        }
+        catch {
+            // @aria/cli not available (e.g. isolated worker) — no fallback
+            _fallbackSessionHistory = null;
+            return null;
+        }
+    })();
+    return _fallbackPromise;
+}
+/**
+ * Get the SessionHistoryRef — from ToolContext if wired, otherwise create
+ * a fallback instance by dynamically importing @aria/cli's SessionHistory.
+ */
+async function getSessionHistory(ctx) {
+    if (ctx.sessionHistory)
+        return ctx.sessionHistory;
+    return resolveFallbackSessionHistory();
+}
+function formatSessions(sessions) {
+    return sessions.map((s) => ({
+        id: s.id,
+        title: s.title,
+        arion: s.arion,
+        model: s.model,
+        messageCount: s.messageCount,
+        updatedAt: s.updatedAt.toISOString(),
+        completedAt: s.completedAt?.toISOString(),
+        preview: s.preview,
+    }));
+}
+function truncateContent(content, max) {
+    if (content.length <= max)
+        return content;
+    return content.slice(0, max - 3) + "...";
+}
+function resolveSessionId(sh, rawId) {
+    // Try exact match first (full UUID), then prefix
+    if (rawId.length === 36) {
+        const session = sh.getSession(rawId);
+        return session ? rawId : null;
+    }
+    return sh.findSessionByPrefix(rawId);
+}
+// ============================================================================
+// Main Executor
+// ============================================================================
+/**
+ * Execute a session_history action.
+ */
+async function executeSessionHistory(input, ctx) {
+    if (ctx.abortSignal?.aborted)
+        return (0, utils_js_1.fail)("Operation cancelled");
+    if (!input.action) {
+        return (0, utils_js_1.fail)("action is required. Valid actions: list, search, get, current, stats, delete, set_title");
+    }
+    const sh = await getSessionHistory(ctx);
+    if (!sh) {
+        return (0, utils_js_1.fail)("Session history is not available in this context");
+    }
+    try {
+        switch (input.action) {
+            case "list":
+                return executeList(input, sh);
+            case "search":
+                return executeSearch(input, sh);
+            case "get":
+                return executeGet(input, sh);
+            case "current":
+                return executeCurrent(ctx, sh);
+            case "stats":
+                return executeStats(sh);
+            case "delete":
+                return executeDelete(input, sh);
+            case "set_title":
+                return executeSetTitle(input, sh);
+            default:
+                return (0, utils_js_1.fail)(`Unknown action "${input.action}". Valid actions: list, search, get, current, stats, delete, set_title`);
+        }
+    }
+    catch (err) {
+        return (0, utils_js_1.fail)((0, utils_js_1.getErrorMessage)(err));
+    }
+}
+// ============================================================================
+// Action Implementations
+// ============================================================================
+function executeList(input, sh) {
+    const limit = input.limit ?? 20;
+    const offset = input.offset ?? 0;
+    const sessions = sh.listSessions(limit, offset);
+    const formatted = formatSessions(sessions);
+    const output = {
+        sessions: formatted,
+        total: formatted.length,
+        limit,
+        offset,
+    };
+    if (formatted.length === 0) {
+        return (0, utils_js_1.success)("No sessions found", output);
+    }
+    const summaryLines = formatted.map((s) => `• ${s.id.slice(0, 8)}… | ${s.title || "(untitled)"} | ${s.messageCount} msgs | ${s.arion} | ${s.updatedAt.slice(0, 10)}`);
+    return (0, utils_js_1.success)(`Found ${formatted.length} session(s):\n${summaryLines.join("\n")}`, output);
+}
+function executeSearch(input, sh) {
+    if (!input.query || input.query.trim() === "") {
+        return (0, utils_js_1.fail)("query is required for 'search' action");
+    }
+    const limit = input.limit ?? 20;
+    const offset = input.offset ?? 0;
+    const sessions = sh.searchSessionsFts(input.query, limit, offset);
+    const formatted = formatSessions(sessions);
+    const output = {
+        sessions: formatted,
+        total: formatted.length,
+        limit,
+        offset,
+    };
+    if (formatted.length === 0) {
+        return (0, utils_js_1.success)(`No sessions found matching "${input.query}"`, output);
+    }
+    const summaryLines = formatted.map((s) => `• ${s.id.slice(0, 8)}… | ${s.title || "(untitled)"} | ${s.messageCount} msgs | ${s.arion} | ${s.updatedAt.slice(0, 10)}`);
+    return (0, utils_js_1.success)(`Found ${formatted.length} session(s) matching "${input.query}":\n${summaryLines.join("\n")}`, output);
+}
+function executeGet(input, sh) {
+    if (!input.sessionId || input.sessionId.trim() === "") {
+        return (0, utils_js_1.fail)("sessionId is required for 'get' action");
+    }
+    const resolvedId = resolveSessionId(sh, input.sessionId);
+    if (!resolvedId) {
+        return (0, utils_js_1.fail)(`Session not found for ID/prefix "${input.sessionId}"`);
+    }
+    const session = sh.getSession(resolvedId);
+    if (!session) {
+        return (0, utils_js_1.fail)(`Session ${resolvedId} not found`);
+    }
+    const messageLimit = input.messageLimit ?? 50;
+    // Take the last N messages to avoid context blowout
+    const messagesSlice = session.messages.slice(-messageLimit);
+    const formattedMessages = messagesSlice.map((m) => ({
+        role: m.role,
+        content: truncateContent(m.content, MAX_MESSAGE_CONTENT_LENGTH),
+        createdAt: m.createdAt.toISOString(),
+        toolCallId: m.toolCallId,
+    }));
+    // Also fetch metrics if available (getRunMetrics may not exist on all impls)
+    let metrics;
+    try {
+        const rawMetrics = sh.getRunMetrics?.(resolvedId) ?? [];
+        metrics =
+            rawMetrics.length > 0
+                ? rawMetrics.map((rm) => ({
+                    turnCount: rm.turnCount,
+                    inputTokens: rm.inputTokens,
+                    outputTokens: rm.outputTokens,
+                    estimatedCost: rm.estimatedCost,
+                    wallTimeMs: rm.wallTimeMs,
+                }))
+                : undefined;
+    }
+    catch {
+        // Non-critical — metrics may not be available
+    }
+    const output = {
+        id: session.id,
+        arion: session.arion,
+        model: session.model,
+        messageCount: session.messages.length,
+        messages: formattedMessages,
+        metrics,
+    };
+    const truncNote = session.messages.length > messageLimit
+        ? ` (showing last ${messageLimit} of ${session.messages.length})`
+        : "";
+    return (0, utils_js_1.success)(`Session ${session.id.slice(0, 8)}… | ${session.arion} | ${session.model} | ${session.messages.length} messages${truncNote}`, output);
+}
+function executeCurrent(ctx, sh) {
+    if (!ctx.currentSessionId) {
+        return (0, utils_js_1.fail)("No current session ID available");
+    }
+    const output = {
+        sessionId: ctx.currentSessionId,
+    };
+    // Try to get session details if available
+    const session = sh.getSession(ctx.currentSessionId);
+    if (session) {
+        return (0, utils_js_1.success)(`Current session: ${session.id.slice(0, 8)}… | ${session.arion} | ${session.model} | ${session.messages.length} messages`, {
+            ...output,
+            arion: session.arion,
+            model: session.model,
+            messageCount: session.messages.length,
+        });
+    }
+    return (0, utils_js_1.success)(`Current session: ${ctx.currentSessionId}`, output);
+}
+function executeStats(sh) {
+    const totalSessions = sh.getSessionCount?.() ?? 0;
+    const incompleteSessions = (sh.getIncompleteSessions?.(1000) ?? []).length;
+    const output = {
+        totalSessions,
+        incompleteSessions,
+    };
+    return (0, utils_js_1.success)(`Session stats: ${totalSessions} total, ${incompleteSessions} incomplete, ${totalSessions - incompleteSessions} completed`, output);
+}
+function executeDelete(input, sh) {
+    if (!input.sessionId || input.sessionId.trim() === "") {
+        return (0, utils_js_1.fail)("sessionId is required for 'delete' action");
+    }
+    const resolvedId = resolveSessionId(sh, input.sessionId);
+    if (!resolvedId) {
+        return (0, utils_js_1.fail)(`Session not found for ID/prefix "${input.sessionId}"`);
+    }
+    sh.deleteSession(resolvedId);
+    return (0, utils_js_1.success)(`Deleted session ${resolvedId}`);
+}
+function executeSetTitle(input, sh) {
+    if (!input.sessionId || input.sessionId.trim() === "") {
+        return (0, utils_js_1.fail)("sessionId is required for 'set_title' action");
+    }
+    if (!input.title || input.title.trim() === "") {
+        return (0, utils_js_1.fail)("title is required for 'set_title' action");
+    }
+    const resolvedId = resolveSessionId(sh, input.sessionId);
+    if (!resolvedId) {
+        return (0, utils_js_1.fail)(`Session not found for ID/prefix "${input.sessionId}"`);
+    }
+    sh.setSessionTitle(resolvedId, input.title);
+    return (0, utils_js_1.success)(`Set title of session ${resolvedId.slice(0, 8)}… to "${input.title}"`);
+}

package/dist-cjs/executors/shell-safety.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @aria/tools - Shell command risk classifier
+ *
+ * Statically classifies shell commands into risk tiers to gate execution:
+ * - "safe"     : read-only, execute immediately without approval
+ * - "moderate" : requires runtime policy handling (approval, allowlist, or autorun)
+ * - "blocked"  : catastrophic, hard-denied — never execute
+ */
+export type ShellRisk = "safe" | "moderate" | "blocked";
+/** Patterns that are unconditionally blocked — catastrophic risk. */
+export declare const BLOCKED_PATTERNS: RegExp[];
+/**
+ * Classify a shell command's risk level.
+ *
+ * - "safe"     — skip approval, execute immediately
+ * - "moderate" — handle via runtime policy (approval, allowlist, or autorun)
+ * - "blocked"  — never execute, return error immediately
+ */
+export declare function classifyCommand(command: string): ShellRisk;
+/**
+ * Classify argv-based process execution (spawn/exec) with shell-aware behavior.
+ *
+ * When callers explicitly invoke a shell interpreter with `-c`, classify the
+ * payload command text itself. This preserves catastrophic-command blocking
+ * while avoiding false positives that would block every `bash -c ...` call.
+ */
+export declare function classifyExecInvocation(program: string, args?: string[]): ShellRisk;