@csmedeiros/codemax 1.0.3 → 1.0.6

package/dist/tooling/tools.js

@@ -1,614 +0,0 @@
-/**
- * Tools for the LangChain agent.
- * MCP Playwright is optional: if the server is unavailable, the agent runs without browser tools.
- */
-import { spawn, execFile } from 'node:child_process';
-import http from 'node:http';
-import crypto from 'node:crypto';
-import os from 'node:os';
-import path from 'node:path';
-import fs from 'node:fs';
-import { MultiServerMCPClient } from '@langchain/mcp-adapters';
-import { loadMcpServers } from './mcpConfig.js';
-import { registerPlanNonce } from './planControlChannel.js';
-import { tool } from 'langchain';
-import { z } from 'zod';
-import { readFile, writeFile } from 'node:fs/promises';
-class AuthError extends Error {
-}
-const MCP_TIMEOUT_MS = Number(process.env['MCP_CONNECT_TIMEOUT_MS'] ?? '8000');
-const PLAYWRIGHT_MCP_URL = process.env['MCP_PLAYWRIGHT_URL'] ?? 'http://localhost:8931/mcp';
-const DEFAULT_SHELL_TIMEOUT_MS = Number(process.env['CODEMAX_SHELL_TIMEOUT_MS'] ?? '120000');
-const MAX_SHELL_OUTPUT_CHARS = Number(process.env['CODEMAX_SHELL_MAX_OUTPUT'] ?? '80000');
-const DEFAULT_SHELL_CWD = process.env['CODEMAX_SHELL_CWD'] ?? process.cwd();
-function truncateOutput(text, maxChars) {
-    if (text.length <= maxChars)
-        return text;
-    const omitted = text.length - maxChars;
-    return `${text.slice(0, maxChars)}\n\n… [output truncated: ${omitted} characters omitted]`;
-}
-function openInBrowser(filePath) {
-    const platform = process.platform;
-    if (platform === 'darwin') {
-        execFile('open', [filePath], () => undefined);
-    }
-    else if (platform === 'win32') {
-        execFile('cmd', ['/c', 'start', '', filePath], () => undefined);
-    }
-    else {
-        execFile('xdg-open', [filePath], () => undefined);
-    }
-}
-function isLocalOrigin(origin, port) {
-    // Browsers send no Origin for same-document fetches from file:// pages in some
-    // engines; when present it must be a localhost loopback matching our port, or
-    // the literal "null" that file:// pages send. Anything else (a real website) is rejected.
-    if (!origin || origin === 'null')
-        return true;
-    return (origin === `http://127.0.0.1:${port}` ||
-        origin === `http://localhost:${port}`);
-}
-function startFeedbackServer(planName) {
-    const token = crypto.randomBytes(32).toString('hex');
-    const nonce = crypto.randomBytes(16).toString('hex');
-    const server = http.createServer((req, res) => {
-        // No wildcard CORS. Only same-origin loopback callers are honored.
-        const origin = req.headers.origin;
-        const port = server.address()?.port ?? 0;
-        if (req.method === 'OPTIONS') {
-            res.writeHead(204);
-            res.end();
-            return;
-        }
-        if (req.method !== 'POST' || !isLocalOrigin(origin, port)) {
-            res.writeHead(403);
-            res.end();
-            return;
-        }
-        let body = '';
-        req.on('data', (chunk) => {
-            body += chunk.toString();
-            if (body.length > 1000000)
-                req.destroy();
-        });
-        req.on('end', () => {
-            let parsed = {};
-            try {
-                parsed = JSON.parse(body);
-            }
-            catch { }
-            // Constant-time-ish single-use token check.
-            if (typeof parsed.token !== 'string' ||
-                parsed.token.length !== token.length ||
-                !crypto.timingSafeEqual(Buffer.from(parsed.token), Buffer.from(token))) {
-                res.writeHead(403);
-                res.end();
-                return;
-            }
-            if (req.url === '/accept') {
-                process.stdout.write(`\nPlan accepted: ${nonce}:${planName}\n`);
-                res.writeHead(200, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ ok: true }));
-                server.close();
-                return;
-            }
-            if (req.url === '/feedback') {
-                const text = typeof parsed.feedback === 'string' ? parsed.feedback : '';
-                const oneLine = text.replace(/[\r\n]+/g, ' ');
-                process.stdout.write(`\nReceived user feedback: ${nonce}:${oneLine}\n`);
-                res.writeHead(200, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ ok: true }));
-                server.close();
-                return;
-            }
-            res.writeHead(404);
-            res.end();
-        });
-    });
-    server.listen(0, '127.0.0.1');
-    const addr = server.address();
-    if (!addr || typeof addr === 'string') {
-        throw new Error('Failed to get server port');
-    }
-    registerPlanNonce(nonce);
-    return { port: addr.port, token, nonce };
-}
-function buildPlanHtml(planName, markdownContent, feedbackPort, token) {
-    const escaped = markdownContent
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;');
-    const escapedPlanName = planName
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;');
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>CodeMax Plan: ${escapedPlanName}</title>
-  <style>
-    * { box-sizing: border-box; margin: 0; padding: 0; }
-    body {
-      background: #0a0a0a;
-      color: #e8e8e8;
-      font-family: 'Courier New', monospace;
-      font-size: 14px;
-      line-height: 1.6;
-      padding: 32px;
-      max-width: 860px;
-      margin: 0 auto;
-    }
-    h1, h2, h3 { color: #ff8c00; margin-top: 1.5em; margin-bottom: 0.5em; }
-    h1 { font-size: 1.6em; border-bottom: 1px solid #ff8c00; padding-bottom: 0.3em; }
-    h2 { font-size: 1.2em; }
-    h3 { font-size: 1em; }
-    pre {
-      background: #141414;
-      border: 1px solid #333;
-      border-left: 3px solid #ff8c00;
-      padding: 12px 16px;
-      overflow-x: auto;
-      margin: 1em 0;
-      white-space: pre-wrap;
-      word-break: break-word;
-    }
-    code { font-family: inherit; }
-    p { margin: 0.8em 0; }
-    ul, ol { margin: 0.8em 0 0.8em 1.5em; }
-    li { margin: 0.3em 0; }
-    a { color: #ff8c00; }
-    blockquote { border-left: 3px solid #555; padding-left: 1em; color: #aaa; margin: 1em 0; }
-    hr { border: none; border-top: 1px solid #333; margin: 1.5em 0; }
-    .actions {
-      position: sticky;
-      bottom: 0;
-      background: #0a0a0a;
-      border-top: 1px solid #333;
-      padding: 16px 0;
-      display: flex;
-      gap: 12px;
-      align-items: flex-end;
-      margin-top: 32px;
-    }
-    .btn-accept {
-      background: #ff8c00;
-      color: #0a0a0a;
-      border: none;
-      padding: 10px 24px;
-      font-family: inherit;
-      font-size: 14px;
-      font-weight: bold;
-      cursor: pointer;
-      flex-shrink: 0;
-    }
-    .btn-accept:hover { background: #ffa733; }
-    .btn-feedback {
-      background: transparent;
-      color: #ff8c00;
-      border: 1px solid #ff8c00;
-      padding: 10px 24px;
-      font-family: inherit;
-      font-size: 14px;
-      cursor: pointer;
-      flex-shrink: 0;
-    }
-    .btn-feedback:hover { background: #1a1000; }
-    textarea {
-      flex: 1;
-      background: #141414;
-      color: #e8e8e8;
-      border: 1px solid #555;
-      padding: 10px;
-      font-family: inherit;
-      font-size: 14px;
-      resize: vertical;
-      min-height: 42px;
-    }
-    textarea:focus { outline: 1px solid #ff8c00; border-color: #ff8c00; }
-    .status { color: #aaa; font-size: 12px; min-width: 120px; text-align: right; }
-  </style>
-</head>
-<body>
-  <pre id="plan-content">${escaped}</pre>
-
-  <div class="actions">
-    <textarea id="feedback-input" placeholder="Give feedback to refine the plan…"></textarea>
-    <button class="btn-feedback" onclick="sendFeedback()">Send Feedback</button>
-    <button class="btn-accept" onclick="acceptPlan()">Accept Plan</button>
-    <span class="status" id="status"></span>
-  </div>
-
-  <script>
-    const PORT = ${feedbackPort};
-    const TOKEN = ${JSON.stringify(token)};
-    const BASE = 'http://127.0.0.1:' + PORT;
-
-    async function acceptPlan() {
-      document.getElementById('status').textContent = 'Accepting…';
-      try {
-        await fetch(BASE + '/accept', {
-          method: 'POST',
-          headers: {'Content-Type': 'application/json'},
-          body: JSON.stringify({token: TOKEN}),
-        });
-        document.getElementById('status').textContent = 'Accepted!';
-        document.querySelector('.btn-accept').disabled = true;
-        document.querySelector('.btn-feedback').disabled = true;
-      } catch(e) {
-        document.getElementById('status').textContent = 'Error: ' + e.message;
-      }
-    }
-
-    async function sendFeedback() {
-      const text = document.getElementById('feedback-input').value.trim();
-      if (!text) return;
-      document.getElementById('status').textContent = 'Sending…';
-      try {
-        await fetch(BASE + '/feedback', {
-          method: 'POST',
-          headers: {'Content-Type': 'application/json'},
-          body: JSON.stringify({token: TOKEN, feedback: text}),
-        });
-        document.getElementById('status').textContent = 'Feedback sent!';
-        document.getElementById('feedback-input').value = '';
-      } catch(e) {
-        document.getElementById('status').textContent = 'Error: ' + e.message;
-      }
-    }
-  </script>
-</body>
-</html>`;
-}
-function runShellCommand(command, cwd, timeoutMs) {
-    return new Promise((resolve, reject) => {
-        const child = spawn(command, {
-            cwd,
-            shell: true,
-            env: process.env,
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        let stdout = '';
-        let stderr = '';
-        let settled = false;
-        const timer = setTimeout(() => {
-            if (settled)
-                return;
-            settled = true;
-            child.kill('SIGKILL');
-            reject(new Error(`timeout after ${timeoutMs}ms`));
-        }, timeoutMs);
-        child.stdout?.on('data', (chunk) => {
-            stdout += chunk.toString('utf8');
-        });
-        child.stderr?.on('data', (chunk) => {
-            stderr += chunk.toString('utf8');
-        });
-        child.on('error', err => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            reject(err);
-        });
-        child.on('close', (code, signal) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            const meta = [];
-            if (code !== null)
-                meta.push(`exit_code: ${code}`);
-            if (signal)
-                meta.push(`signal: ${signal}`);
-            let body = '';
-            if (stdout)
-                body += `stdout:\n${stdout}`;
-            if (stderr) {
-                if (body)
-                    body += '\n';
-                body += `stderr:\n${stderr}`;
-            }
-            if (!body)
-                body = '(no output)';
-            resolve(`${meta.join(', ')}\n\n${body}`);
-        });
-    });
-}
-const shellTool = tool(async ({ command, cwd, timeout_ms }, _config) => {
-    const wd = (cwd?.trim() || DEFAULT_SHELL_CWD).trim();
-    const timeoutMs = timeout_ms ?? DEFAULT_SHELL_TIMEOUT_MS;
-    try {
-        const raw = await runShellCommand(command.trim(), wd, timeoutMs);
-        return truncateOutput(raw, MAX_SHELL_OUTPUT_CHARS);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        return `Failed to execute shell command: ${msg}`;
-    }
-}, {
-    name: 'shellTool',
-    description: 'Runs a command in the system shell (Unix: /bin/sh -c). Use for git, pnpm/npm, listing files, grep, etc. Prefer non-interactive commands. Default working directory is the session cwd (or CODEMAX_SHELL_CWD).',
-    schema: z.object({
-        command: z
-            .string()
-            .min(1)
-            .describe('Shell command to run (single line; pipes and && chains are allowed).'),
-        cwd: z
-            .string()
-            .optional()
-            .describe('Working directory (absolute or relative path); omit to use the default cwd.'),
-        timeout_ms: z
-            .number()
-            .int()
-            .positive()
-            .max(600000)
-            .optional()
-            .describe('Timeout in milliseconds (max 600000). Defaults to CODEMAX_SHELL_TIMEOUT_MS or 120000.'),
-    }),
-});
-// Strip outputSchema from MCP tools/list responses before the adapter processes them.
-// Some servers (e.g. stitch) return complex $defs-based outputSchemas that @cfworker/json-schema
-// can't resolve, crashing tool loading. outputSchema is not used for tool invocation.
-function withOutputSchemaPatch(fn) {
-    const originalFetch = globalThis.fetch;
-    globalThis.fetch = async (input, init) => {
-        const res = await originalFetch(input, init);
-        if (res.status === 401 || res.status === 403) {
-            throw new AuthError(`HTTP ${res.status}`);
-        }
-        const contentType = res.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json'))
-            return res;
-        const text = await res.text();
-        try {
-            const body = JSON.parse(text);
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            const tools = body?.result?.tools;
-            if (Array.isArray(tools)) {
-                for (const t of tools)
-                    delete t.outputSchema;
-                return new Response(JSON.stringify(body), {
-                    status: res.status,
-                    statusText: res.statusText,
-                    headers: res.headers,
-                });
-            }
-        }
-        catch { }
-        return new Response(text, {
-            status: res.status,
-            statusText: res.statusText,
-            headers: res.headers,
-        });
-    };
-    return fn().finally(() => {
-        globalThis.fetch = originalFetch;
-    });
-}
-async function loadServerTools(
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-name, config) {
-    const mcpConfig = config;
-    const timeout = new Promise((_, reject) => {
-        setTimeout(() => reject(new Error(`MCP connection timeout (${MCP_TIMEOUT_MS}ms)`)), MCP_TIMEOUT_MS);
-    });
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const client = new MultiServerMCPClient({
-            mcpServers: { [name]: config },
-            onConnectionError: 'ignore',
-        });
-        const tools = (await Promise.race([
-            withOutputSchemaPatch(() => client.getTools()),
-            timeout,
-        ]));
-        return {
-            tools,
-            status: {
-                name,
-                config: mcpConfig,
-                status: 'connected',
-                toolCount: tools.length,
-            },
-        };
-    }
-    catch (e) {
-        const isAuth = e instanceof AuthError;
-        const msg = e instanceof Error ? e.message : String(e);
-        if (isAuth) {
-            process.stderr.write(`[CodeMax] MCP server "${name}" requires authentication: ${msg}\n`);
-        }
-        else {
-            process.stderr.write(`[CodeMax] MCP server "${name}" unavailable: ${msg}\n`);
-        }
-        return {
-            tools: [],
-            status: {
-                name,
-                config: mcpConfig,
-                status: isAuth ? 'unauthenticated' : 'unavailable',
-                toolCount: 0,
-                error: msg,
-            },
-        };
-    }
-}
-async function loadMcpTools() {
-    const configServers = loadMcpServers();
-    const hasConfigServers = Object.keys(configServers).length > 0;
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const serversToLoad = hasConfigServers
-        ? configServers
-        : {
-            playwright: {
-                transport: 'http',
-                url: PLAYWRIGHT_MCP_URL,
-                defaultToolTimeout: 25000,
-            },
-        };
-    // Load servers sequentially — fetch is patched per-server to strip outputSchema,
-    // so concurrent loading would cause patch collisions.
-    const results = [];
-    for (const [name, config] of Object.entries(serversToLoad)) {
-        // eslint-disable-next-line no-await-in-loop
-        results.push(await loadServerTools(name, config));
-    }
-    const tools = results.flatMap(r => r.tools);
-    const statuses = results.map(r => r.status);
-    if (hasConfigServers) {
-        process.stderr.write(`[CodeMax] Loaded ${tools.length} MCP tool(s) from config.\n`);
-    }
-    return { tools, statuses };
-}
-export async function reloadMcpServer(name) {
-    const configServers = loadMcpServers();
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const config = configServers[name] ?? {
-        transport: 'http',
-        url: PLAYWRIGHT_MCP_URL,
-        defaultToolTimeout: 25000,
-    };
-    const { status } = await loadServerTools(name, config);
-    return status;
-}
-const readFileTool = tool(async ({ filePath, startLine, endLine }) => {
-    const content = await readFile(filePath, 'utf8');
-    if (startLine === undefined && endLine === undefined)
-        return content;
-    const lines = content.split('\n');
-    const start = (startLine ?? 1) - 1;
-    const end = endLine ?? lines.length;
-    return lines.slice(start, end).join('\n');
-}, {
-    name: 'readFileTool',
-    description: 'Reads a UTF-8 text file from the filesystem. Use startLine/endLine to read only a portion of the file. If unsure how many lines are needed, read the first 20 lines first.',
-    schema: z.object({
-        filePath: z.string().describe('Path to the file to read.'),
-        startLine: z
-            .number()
-            .int()
-            .positive()
-            .optional()
-            .describe('1-based line number to start reading from (inclusive).'),
-        endLine: z
-            .number()
-            .int()
-            .positive()
-            .optional()
-            .describe('1-based line number to stop reading at (inclusive).'),
-    }),
-});
-const writeFileTool = tool(async ({ filePath, content, append }) => {
-    await writeFile(filePath, content, {
-        encoding: 'utf8',
-        flag: append ? 'a' : 'w',
-    });
-    return `File ${filePath} written successfully`;
-}, {
-    name: 'writeFileTool',
-    description: 'Writes a UTF-8 text file to the filesystem.',
-    schema: z.object({
-        filePath: z.string().describe('Path to the file to write.'),
-        content: z.string().describe('Content to write to the file.'),
-        append: z
-            .boolean()
-            .default(false)
-            .describe('Whether to only append to the end of the file or not.'),
-    }),
-});
-const editFileTool = tool(async ({ filePath, start, end, content }) => {
-    const fullContent = await readFile(filePath, 'utf8');
-    const lines = fullContent.split('\n');
-    // Lines are 1-indexed
-    const startIdx = Math.max(0, start - 1);
-    const endIdx = Math.min(lines.length, end);
-    const newLines = [
-        ...lines.slice(0, startIdx),
-        ...content.split('\n'),
-        ...lines.slice(endIdx),
-    ];
-    await writeFile(filePath, newLines.join('\n'), 'utf8');
-    return `File ${filePath} edited from line ${start} to ${end}.`;
-}, {
-    name: 'editFileTool',
-    description: 'Edit a file by replacing a range of lines with new content.',
-    schema: z.object({
-        filePath: z.string().describe('Path to the file to edit.'),
-        start: z
-            .number()
-            .int()
-            .positive()
-            .describe('Starting line number (1-indexed).'),
-        end: z
-            .number()
-            .int()
-            .positive()
-            .describe('Ending line number (inclusive, 1-indexed).'),
-        content: z.string().describe('New content to insert in the range.'),
-    }),
-});
-const todoTool = tool(async ({ action: _action, id: _id, task: _task, status: _status }) => {
-    // The logic is handled in the toolNode in codemax.ts
-    return 'Todo list updated.';
-}, {
-    name: 'todoTool',
-    description: 'Manage a TODO list for the current task. Actions: add, update, remove, list.',
-    schema: z.object({
-        action: z.enum(['add', 'update', 'remove', 'list']),
-        id: z.string().optional().describe('Required for update and remove.'),
-        task: z.string().optional().describe('Required for add.'),
-        status: z
-            .enum(['pending', 'in_progress', 'completed'])
-            .optional()
-            .describe('Optional for add and update.'),
-    }),
-});
-export const writePlanTool = tool(async ({ planName, content }) => {
-    const plansDir = path.join(os.homedir(), '.codemax', 'plans');
-    await fs.promises.mkdir(plansDir, { recursive: true });
-    const mdPath = path.join(plansDir, `${planName}.md`);
-    const htmlPath = path.join(plansDir, `${planName}.html`);
-    // Defense in depth: even with the strict schema, confirm the resolved paths
-    // stay inside plansDir before writing.
-    const dirPrefix = path.resolve(plansDir) + path.sep;
-    if (!path.resolve(mdPath).startsWith(dirPrefix) ||
-        !path.resolve(htmlPath).startsWith(dirPrefix)) {
-        throw new Error('Invalid planName: resolved path escapes the plans directory');
-    }
-    await fs.promises.writeFile(mdPath, content, 'utf8');
-    const { port, token } = startFeedbackServer(planName);
-    const html = buildPlanHtml(planName, content, port, token);
-    await fs.promises.writeFile(htmlPath, html, 'utf8');
-    openInBrowser(htmlPath);
-    return `Plan written to ${mdPath}\nHTML preview opened in browser (feedback server on port ${port})`;
-}, {
-    name: 'writePlanTool',
-    description: 'Write an implementation plan as a Markdown file and open it in the browser for review. Only available in Plan Mode. planName must have no spaces.',
-    schema: z.object({
-        planName: z
-            .string()
-            .regex(/^[A-Za-z0-9._-]{1,64}$/, 'planName must be 1-64 chars of letters, digits, dot, underscore or hyphen')
-            .describe('Plan file name without extension, e.g. "add-auth-feature"'),
-        content: z.string().describe('Full plan content in Markdown'),
-    }),
-});
-const { tools: _mcpTools, statuses: _mcpStatuses } = await loadMcpTools();
-export const MCP_STATUSES = _mcpStatuses;
-export const TOOLS = [
-    shellTool,
-    readFileTool,
-    writeFileTool,
-    editFileTool,
-    todoTool,
-    ..._mcpTools,
-];
-export const PLAN_TOOLS = [
-    shellTool,
-    readFileTool,
-    writePlanTool,
-    todoTool,
-    ..._mcpTools,
-];