@basein/runner 0.3.20 → 0.3.22

package/dist/replay/reads-only.js

@@ -1,261 +0,0 @@
-/**
- * Whether a tool call may change something, judged by its name alone — the
- * runner's copy of the service's own rule (BaseIn src/scenarios/correctionCheck.ts,
- * `readsOnly`, `commandReadsOnly`, `callMayChange`), kept word for word so the
- * two never disagree about the same call.
- *
- * Used where a call after a plan's decision is the agent starting a way of its
- * own (the service's offer1.md O7), and where a plan started after a call
- * would make it a second time (O8). When in doubt, a call is a change: that
- * only ends a set of scenarios early or keeps a plan from starting, never lets
- * a second write through.
- */
-/** Built-in tools that only read (Claude Code's). */
-const READ_TOOLS = new Set([
-    "Read",
-    "Grep",
-    "Glob",
-    "LS",
-    "WebFetch",
-    "WebSearch",
-    "NotebookRead",
-    "TodoWrite",
-    "TaskOutput",
-    "BashOutput",
-]);
-/** Built-in tools that change files or run commands (Claude Code's). */
-const CHANGING_BUILTINS = new Set([
-    "Write",
-    "Edit",
-    "MultiEdit",
-    "NotebookEdit",
-    "Bash",
-    "KillShell",
-]);
-// Not `query`, `select` or `check`: a database query, a selected option, a
-// check-in can change something.
-const READ_WORDS = new Set([
-    "list",
-    "get",
-    "search",
-    "find",
-    "read",
-    "fetch",
-    "lookup",
-    "count",
-    "view",
-    "show",
-    "describe",
-    "retrieve",
-    "browse",
-    "peek",
-    "inspect",
-    "snapshot",
-]);
-/**
- * A word that may change something: a name holding one writes, whatever else
- * it says (`get_or_create_contact`, `find_and_replace`).
- */
-const WRITE_WORDS = new Set([
-    "create",
-    "add",
-    "set",
-    "update",
-    "upsert",
-    "insert",
-    "put",
-    "post",
-    "send",
-    "delete",
-    "remove",
-    "mark",
-    "replace",
-    "archive",
-    "move",
-    "assign",
-    "book",
-    "cancel",
-    "write",
-    "edit",
-    "modify",
-    "save",
-    "submit",
-    "approve",
-    "reject",
-    "close",
-    "open",
-    "merge",
-    "push",
-    "publish",
-    "upload",
-    "invite",
-    "schedule",
-    "reply",
-    "forward",
-    "transfer",
-    "pay",
-    "refund",
-    "notify",
-    "run",
-    "execute",
-    "exec",
-    "apply",
-    "reset",
-    "start",
-    "stop",
-    "kill",
-    "enable",
-    "disable",
-    "grant",
-    "revoke",
-    "rename",
-    "tag",
-    "label",
-    "comment",
-]);
-/** A tool name's words: `getJiraIssue` → get, jira, issue; `calendar_search_events` → calendar, search, events. */
-function nameWords(name) {
-    return name
-        .replace(/([a-z\d])([A-Z])/g, "$1 $2")
-        .replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2")
-        .toLowerCase()
-        .split(/[^a-z\d]+/)
-        .filter(Boolean);
-}
-/**
- * A tool that only reads: Claude Code's read-only tools, then the name — a
- * reading word and no writing word (`calendar_search_events`, `getJiraIssue`;
- * `run_sql` no: `run` writes). A name with both (`get_or_create_contact`)
- * changes something.
- */
-export function readsOnly(toolName) {
-    if (READ_TOOLS.has(toolName))
-        return true;
-    if (CHANGING_BUILTINS.has(toolName))
-        return false;
-    const words = nameWords(toolName.replace(/^mcp__.+?__/, ""));
-    if (words.some((w) => WRITE_WORDS.has(w)))
-        return false;
-    return words.some((w) => READ_WORDS.has(w));
-}
-/** Commands that only look (`ls`, `git status`, `grep …`). */
-const READ_COMMANDS = new Set([
-    "ls",
-    "dir",
-    "cat",
-    "type",
-    "head",
-    "tail",
-    "less",
-    "more",
-    "grep",
-    "rg",
-    "egrep",
-    "fgrep",
-    "find",
-    "wc",
-    "pwd",
-    "echo",
-    "printf",
-    "date",
-    "whoami",
-    "which",
-    "where",
-    "env",
-    "printenv",
-    "stat",
-    "file",
-    "du",
-    "df",
-    "tree",
-    "jq",
-    "sort",
-    "uniq",
-    "cut",
-    "awk",
-    "diff",
-    "cmp",
-    "basename",
-    "dirname",
-    "realpath",
-    "readlink",
-    "true",
-    "false",
-    "test",
-    "sleep",
-    "ps",
-    "uname",
-    "hostname",
-    "id",
-    "nproc",
-    "free",
-    "uptime",
-    "node --version",
-    "npm --version",
-]);
-const READ_GIT = new Set([
-    "status",
-    "log",
-    "diff",
-    "show",
-    "branch",
-    "rev-parse",
-    "ls-files",
-    "blame",
-    "remote",
-    "describe",
-    "config --get",
-    "grep",
-    "shortlog",
-    "tag --list",
-]);
-/** Whether a shell command only looks: every part of it is a looking command, and nothing is written to a file. */
-export function commandReadsOnly(command) {
-    const text = command.trim();
-    if (!text)
-        return true;
-    // A redirect into a file (not into /dev/null, not 2>&1), tee, or an in-place edit changes something.
-    if (/(^|[^0-9&])>{1,2}\s*(?!&|\/dev\/null)\S/.test(text) || /\btee\b/.test(text) || /\bsed\b[^|;&]*\s-i\b/.test(text)) {
-        return false;
-    }
-    if (/\bfind\b[^|;&]*\s-(delete|exec|execdir|ok)\b/.test(text))
-        return false;
-    const parts = text
-        .split(/\|\||&&|[|;\n]/)
-        .map((p) => p.trim())
-        .filter(Boolean);
-    return parts.every((part) => {
-        const words = part.replace(/^(\w+=\S+\s+)+/, "").split(/\s+/);
-        const cmd = (words[0] ?? "").replace(/^.*[\\/]/, "");
-        if (cmd === "git")
-            return READ_GIT.has(words[1] ?? "") || READ_GIT.has(`${words[1] ?? ""} ${words[2] ?? ""}`);
-        if (cmd === "sed" || cmd === "awk")
-            return !/\s-i\b/.test(part);
-        return READ_COMMANDS.has(cmd) || READ_COMMANDS.has(`${cmd} ${words[1] ?? ""}`);
-    });
-}
-/**
- * Whether one call may change something. A Bash call changes nothing only
- * when its command is there and only looks; any other tool is a change unless
- * {@link readsOnly} says it only reads — a tool it cannot tell about counts as
- * a change. `input` is the call's arguments, as an object or as JSON text.
- */
-export function callMayChange(toolName, input) {
-    if (toolName === "Bash") {
-        let value = input;
-        if (typeof value === "string") {
-            try {
-                value = JSON.parse(value);
-            }
-            catch {
-                value = undefined;
-            }
-        }
-        const command = value && typeof value === "object" && typeof value.command === "string"
-            ? value.command
-            : "";
-        return command.trim() === "" || !commandReadsOnly(command);
-    }
-    return !readsOnly(toolName);
-}
-//# sourceMappingURL=reads-only.js.map