@duckmind/dm-linux-x64 0.65.5 → 0.65.6

package/extensions/dm-lens/clients/tool-agreement.js

@@ -0,0 +1,403 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { BoundedFifoMap } from "./bounded-cache.js";
+import { findNearestMarkerRoot } from "./path-utils.js";
+import { getDegradationLedgerGeneration } from "./degradation-ledger.js";
+import {
+  hasBlackConfig,
+  hasClangFormatConfig,
+  hasCljfmtConfig,
+  hasCmakeFormatConfig,
+  hasCsharpierConfig,
+  hasDetektConfig,
+  hasFantomasConfig,
+  hasGoogleJavaFormatConfig,
+  hasGradleKtlintPlugin,
+  hasGolangciConfig,
+  hasKtfmtConfig,
+  hasKtlintConfig,
+  hasMarkdownlintConfig,
+  hasMixFormatConfig,
+  hasOcamlformatConfig,
+  hasOrmoluConfig,
+  hasPhpCsFixerConfig,
+  hasRubocopConfig,
+  hasRuffConfig,
+  hasSqlfluffConfig,
+  hasStandardrbConfig,
+  hasStyluaConfig,
+  hasSwiftformatConfig,
+  hasTaploConfig,
+  hasTerraformConfig
+} from "./tool-policy.js";
+const NODE_PACKAGES = {
+  biome: "@biomejs/biome",
+  eslint: "eslint",
+  markdownlint: "markdownlint-cli2",
+  oxfmt: "oxfmt",
+  oxlint: "oxlint",
+  prettier: "prettier",
+  stylelint: "stylelint"
+};
+export const TOOL_AGREEMENT_POLICIES = {
+  biome: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  eslint: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  markdownlint: {
+    bucket: "node-lockfile",
+    withoutEvidence: "decline",
+    check: hasMarkdownlintConfig
+  },
+  oxfmt: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  oxlint: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  prettier: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  stylelint: { bucket: "node-lockfile", withoutEvidence: "decline" },
+  ruff: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasRuffConfig
+  },
+  black: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasBlackConfig
+  },
+  sqlfluff: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasSqlfluffConfig
+  },
+  rubocop: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasRubocopConfig
+  },
+  standardrb: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasStandardrbConfig
+  },
+  ktlint: { bucket: "standalone-cli", withoutEvidence: "decline" },
+  typstyle: { bucket: "standalone-cli", withoutEvidence: "decline" },
+  ktfmt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasKtfmtConfig
+  },
+  "rust-clippy": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["Cargo.toml"])
+  },
+  "dart-analyze": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["pubspec.yaml"])
+  },
+  "golangci-lint": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasGolangciConfig
+  },
+  detekt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasDetektConfig
+  },
+  gofmt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["go.mod"])
+  },
+  rustfmt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["Cargo.toml"])
+  },
+  zig: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["build.zig"])
+  },
+  dart: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["pubspec.yaml"])
+  },
+  shfmt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, [".editorconfig"])
+  },
+  nixfmt: { bucket: "project-config", withoutEvidence: "decline" },
+  mix: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasMixFormatConfig
+  },
+  ocamlformat: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasOcamlformatConfig
+  },
+  "clang-format": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasClangFormatConfig
+  },
+  gleam: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["gleam.toml"])
+  },
+  terraform: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasTerraformConfig
+  },
+  "terragrunt-hcl": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["terragrunt.hcl", "terragrunt.hcl.json"])
+  },
+  "php-cs-fixer": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasPhpCsFixerConfig
+  },
+  csharpier: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasCsharpierConfig
+  },
+  fantomas: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasFantomasConfig
+  },
+  swiftformat: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasSwiftformatConfig
+  },
+  stylua: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasStyluaConfig
+  },
+  ormolu: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasOrmoluConfig
+  },
+  taplo: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasTaploConfig
+  },
+  "google-java-format": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasGoogleJavaFormatConfig
+  },
+  cljfmt: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasCljfmtConfig
+  },
+  "cmake-format": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: hasCmakeFormatConfig
+  },
+  "psscriptanalyzer-format": {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, [
+      "PSScriptAnalyzerSettings.psd1",
+      "ScriptAnalyzerSettings.psd1"
+    ])
+  },
+  cue: {
+    bucket: "project-config",
+    withoutEvidence: "decline",
+    check: (cwd) => hasMarker(cwd, ["cue.mod"])
+  }
+};
+function hasMarker(cwd, markers) {
+  return findNearestMarkerRoot(cwd, markers, {
+    boundaries: [".git", ".hg", ".svn"]
+  }) !== null;
+}
+function readJson(filePath) {
+  if (!fs.existsSync(filePath))
+    return { kind: "missing" };
+  try {
+    const value = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    return value && typeof value === "object" ? { kind: "value", value } : { kind: "unparseable" };
+  } catch (error) {
+    return {
+      kind: error instanceof SyntaxError ? "unparseable" : "unreadable"
+    };
+  }
+}
+function declaredRange(pkg, name) {
+  for (const field of [
+    "dependencies",
+    "devDependencies",
+    "optionalDependencies"
+  ]) {
+    const deps = pkg[field];
+    if (deps && typeof deps === "object") {
+      const range = deps[name];
+      if (typeof range === "string")
+        return range;
+    }
+  }
+  return;
+}
+function parseCoreVersion(version) {
+  const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+  if (!match)
+    return;
+  const parts = match.slice(1).map(Number);
+  if (parts.some((part) => !Number.isSafeInteger(part)))
+    return;
+  return parts;
+}
+function exactOrSimpleRangeMatches(range, version) {
+  const clean = range.trim().replace(/^v/, "");
+  const actual = parseCoreVersion(version);
+  if (!actual)
+    return { matches: false, unsupported: version.includes("+") };
+  if (/^\d+\.\d+\.\d+$/.test(clean))
+    return { matches: clean === version, unsupported: false };
+  const caret = clean.match(/^\^(\d+)\.(\d+)\.(\d+)$/);
+  if (caret) {
+    const [major, minor, patch] = caret.slice(1).map(Number);
+    return {
+      matches: actual[0] === major && (major !== 0 || actual[1] === minor) && (major !== 0 || minor !== 0 || actual[2] === patch) && (actual[1] > minor || actual[1] === minor && actual[2] >= patch),
+      unsupported: false
+    };
+  }
+  const tilde = clean.match(/^~(\d+)\.(\d+)\.(\d+)$/);
+  if (tilde) {
+    const [major, minor, patch] = tilde.slice(1).map(Number);
+    return {
+      matches: actual[0] === major && actual[1] === minor && actual[2] >= patch,
+      unsupported: false
+    };
+  }
+  return { matches: false, unsupported: true };
+}
+function nodeAgreement(tool, root) {
+  const packageName = NODE_PACKAGES[tool];
+  if (!packageName)
+    return;
+  const pkg = readJson(path.join(root, "package.json"));
+  if (pkg.kind === "unreadable" || pkg.kind === "unparseable") {
+    return {
+      decision: "decline",
+      subject: `node:${tool}`,
+      reason: `the project package.json is ${pkg.kind}; tool agreement cannot be established`,
+      reasonCode: `evidence-${pkg.kind}`
+    };
+  }
+  const range = pkg.kind === "value" ? declaredRange(pkg.value, packageName) : undefined;
+  if (!range)
+    return;
+  const lock = readJson(path.join(root, "package-lock.json"));
+  if (lock.kind === "unreadable" || lock.kind === "unparseable") {
+    return {
+      decision: "decline",
+      subject: `node:${tool}`,
+      reason: `the project package-lock.json is ${lock.kind}; tool agreement cannot be established`,
+      reasonCode: `evidence-${lock.kind}`
+    };
+  }
+  const packages = lock.kind === "value" ? lock.value.packages : undefined;
+  const entry = packages && typeof packages === "object" ? packages[`node_modules/${packageName}`] : undefined;
+  const version = entry && typeof entry === "object" ? entry.version : undefined;
+  const comparison = typeof version === "string" ? exactOrSimpleRangeMatches(range, version) : { matches: false, unsupported: false };
+  if (typeof version !== "string" || !comparison.matches) {
+    const reasonCode = typeof version === "string" && comparison.unsupported ? "evidence-unsupported" : typeof version === "string" && version.includes("+") ? "evidence-unsupported" : "evidence-unparseable";
+    const reason = typeof version === "string" && comparison.unsupported ? `the project declares ${packageName}@${range}, but the lockfile shape ${packageName}@${version} or its range is unsupported; tool agreement cannot be established` : typeof version === "string" && parseCoreVersion(version) ? `the project declares ${packageName}@${range} in package.json, but the lockfile resolves ${packageName}@${version} in package-lock.json; agreement disagrees` : `the project declares ${packageName}@${range} in package.json, but package-lock.json does not establish its resolved version; tool agreement cannot be established`;
+    return {
+      decision: "decline",
+      subject: `node:${tool}`,
+      reason,
+      reasonCode
+    };
+  }
+  return { decision: "established" };
+}
+export function establishToolAgreement(tool, cwd) {
+  const key = `${getDegradationLedgerGeneration()}\x00${path.resolve(cwd)}\x00${tool}`;
+  const cached = agreementCache.get(key);
+  if (cached)
+    return cached;
+  agreementResolutionCount += 1;
+  const policy = TOOL_AGREEMENT_POLICIES[tool];
+  if (!policy) {
+    const agreement = {
+      decision: "decline",
+      subject: `tool:${tool}`,
+      reason: "the autonomous writer is not registered with a project-evidence policy; tool agreement cannot be established",
+      reasonCode: "evidence-unsupported"
+    };
+    agreementCache.set(key, agreement);
+    return agreement;
+  }
+  let agreement = { decision: "established" };
+  if (tool === "ktlint") {
+    const ownership = hasGradleKtlintPlugin(cwd);
+    if (ownership.kind === "owned" || hasKtlintConfig(cwd)) {
+      agreement = {
+        decision: "decline",
+        subject: "kotlin:gradle-ktlint",
+        reason: "the project resolves ktlint through Gradle, so CLI agreement cannot be established from project data",
+        reasonCode: "evidence-unsupported"
+      };
+    } else if (ownership.kind === "indeterminate") {
+      agreement = {
+        decision: "decline",
+        subject: "kotlin:gradle-ktlint",
+        reason: "Gradle ownership evidence is unreadable or exceeded its scan budget; tool agreement cannot be established",
+        reasonCode: "evidence-unreadable"
+      };
+    }
+  }
+  if (agreement.decision === "established" && policy.bucket === "node-lockfile") {
+    const root = findNearestMarkerRoot(cwd, ["package.json"], {
+      boundaries: [".git", ".hg", ".svn"]
+    });
+    const node = root ? nodeAgreement(tool, root) : undefined;
+    agreement = node ?? {
+      decision: "decline",
+      subject: `node:${tool}`,
+      reason: "the project has no package declaration and lockfile evidence for this tool",
+      reasonCode: "evidence-absent"
+    };
+  } else if (agreement.decision === "established" && policy.bucket === "project-config" && (!policy.check || !policy.check(cwd))) {
+    agreement = {
+      decision: "decline",
+      subject: `project:${tool}`,
+      reason: "the project has no readable configuration or manifest evidence selecting this tool",
+      reasonCode: "evidence-absent"
+    };
+  }
+  if (agreement.decision === "established" && !policy.bucket) {
+    agreement = {
+      decision: "decline",
+      subject: `tool:${tool}`,
+      reason: "the tool evidence bucket is unsupported",
+      reasonCode: "evidence-unsupported"
+    };
+  }
+  agreementCache.set(key, agreement);
+  return agreement;
+}
+const agreementCache = new BoundedFifoMap(512);
+let agreementResolutionCount = 0;
+export function _getAgreementResolutionCountForTests() {
+  return agreementResolutionCount;
+}

package/extensions/dm-lens/clients/tool-config.js

@@ -0,0 +1,218 @@
+import { readFlagConfigValue } from "./lens-flag-registry.js";
+import { escapeRegExp } from "./string-utils.js";
+export const TOOL_REGISTRY = [
+  {
+    name: "ast_grep_search",
+    piName: "ast_grep_search",
+    mcpName: "dmlens_ast_grep_search",
+    situational: true,
+    summary: "AST-aware structural code search across ~40 languages (ast-grep patterns).",
+    disableable: true
+  },
+  {
+    name: "ast_grep_replace",
+    piName: "ast_grep_replace",
+    mcpName: "dmlens_ast_grep_replace",
+    situational: true,
+    summary: "AST-aware structural code rewrite/refactor (ast-grep patterns).",
+    disableable: true
+  },
+  {
+    name: "ast_grep_outline",
+    piName: "ast_grep_outline",
+    mcpName: undefined,
+    situational: true,
+    summary: "Syntax-only file/dir structure (symbols/imports/exports/members) via ast-grep outline — no index/LSP.",
+    disableable: true
+  },
+  {
+    name: "lsp_navigation",
+    piName: "lsp_navigation",
+    mcpName: "dmlens_lsp_navigation",
+    situational: true,
+    summary: "IDE-style LSP navigation: definition, references, implementation, rename, call hierarchy.",
+    disableable: true
+  },
+  {
+    name: "lens_diagnostics",
+    piName: "lens_diagnostics",
+    mcpName: "dmlens_diagnostics",
+    disableable: true
+  },
+  {
+    name: "lens_diagnostic_mark",
+    piName: "lens_diagnostic_mark",
+    mcpName: undefined,
+    situational: true,
+    summary: "Record a disposition for a diagnostic: false-positive / suppress (inline ignore comment) / defer (this session) / flagged (to fix).",
+    disableable: true
+  },
+  {
+    name: "symbol_search",
+    piName: "symbol_search",
+    mcpName: "dmlens_symbol_search",
+    disableable: true
+  },
+  {
+    name: "module_report",
+    piName: "module_report",
+    mcpName: "dmlens_module_report",
+    disableable: true
+  },
+  {
+    name: "project_report",
+    piName: "project_report",
+    mcpName: "dmlens_project_report",
+    disableable: true
+  },
+  {
+    name: "read_symbol",
+    piName: "read_symbol",
+    mcpName: "dmlens_read_symbol",
+    disableable: true
+  },
+  {
+    name: "read_enclosing",
+    piName: "read_enclosing",
+    mcpName: "dmlens_read_enclosing",
+    disableable: true
+  },
+  {
+    name: "effective_config",
+    piName: "effective_config",
+    mcpName: "dmlens_effective_config",
+    disableable: true
+  },
+  {
+    name: "dm_lens_activate_tools",
+    piName: "dm_lens_activate_tools",
+    mcpName: undefined,
+    disableable: false
+  },
+  {
+    name: "analyze",
+    piName: undefined,
+    mcpName: "dmlens_analyze",
+    disableable: true
+  },
+  {
+    name: "health",
+    piName: undefined,
+    mcpName: "dmlens_health",
+    disableable: true
+  },
+  {
+    name: "latency",
+    piName: undefined,
+    mcpName: "dmlens_latency",
+    disableable: true
+  },
+  {
+    name: "project_scan",
+    piName: undefined,
+    mcpName: "dmlens_project_scan",
+    disableable: true
+  },
+  {
+    name: "rebuild",
+    piName: undefined,
+    mcpName: "dmlens_rebuild",
+    disableable: true
+  },
+  {
+    name: "session_start",
+    piName: undefined,
+    mcpName: "dmlens_session_start",
+    disableable: false
+  },
+  {
+    name: "turn_end",
+    piName: undefined,
+    mcpName: "dmlens_turn_end",
+    disableable: false
+  },
+  {
+    name: "session_end",
+    piName: undefined,
+    mcpName: "dmlens_session_end",
+    disableable: false
+  }
+];
+export const LENS_TOOL_NAMES = TOOL_REGISTRY.map((tool) => tool.name);
+export const PI_ONLY_TOOL_REASONS = {
+  ast_grep_outline: "pi situational tool with no MCP mirror; MCP parity deferred like read_enclosing was.",
+  lens_diagnostic_mark: "dm-lens-internal disposition tool; MCP has no equivalent surface (needs its own engine seam and tool route).",
+  dm_lens_activate_tools: "pi dynamic-tooling loader; MCP lists every tool statically, so there is nothing to activate."
+};
+export function resolveLensToolName(name, host = "pi") {
+  const entry = TOOL_REGISTRY.find((tool) => tool.name === name || tool.piName === name || tool.mcpName === name);
+  if (!entry)
+    return name;
+  if (host === "mcp")
+    return entry.mcpName;
+  return entry.piName;
+}
+export function translateGuidanceToolNames(content, host) {
+  if (host === "pi")
+    return content;
+  let text = content;
+  const byLength = [...TOOL_REGISTRY].sort((a, b) => (b.piName?.length ?? 0) - (a.piName?.length ?? 0));
+  for (const entry of byLength) {
+    if (typeof entry.piName !== "string" || typeof entry.mcpName !== "string") {
+      continue;
+    }
+    text = text.replace(new RegExp(`\\b${escapeRegExp(entry.piName)}\\b`, "g"), entry.mcpName);
+  }
+  return text.replace("activate via dm_lens_activate_tools", "call directly");
+}
+export function toolRegistryEntryForPi(name) {
+  return TOOL_REGISTRY.find((tool) => tool.piName === name);
+}
+export function toolRegistryEntryForMcp(name) {
+  return TOOL_REGISTRY.find((tool) => tool.mcpName === name);
+}
+export function resolveLensToolEnabled(name, globalConfig, projectConfig, cliNoTools) {
+  const entry = TOOL_REGISTRY.find((tool) => tool.name === name);
+  if (entry?.disableable === false)
+    return true;
+  const cliNames = Array.isArray(cliNoTools) ? cliNoTools : typeof cliNoTools === "string" ? cliNoTools.split(",") : [];
+  if (cliNames.some((entry) => entry.trim() === name))
+    return false;
+  const project = readFlagConfigValue(projectConfig, `tools.${name}.enabled`);
+  if (project !== undefined)
+    return project;
+  const global = readFlagConfigValue(globalConfig, `tools.${name}.enabled`);
+  return global ?? true;
+}
+export function readToolConfig(raw, warnInvalid) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const section = raw.tools;
+  if (!section || typeof section !== "object" || Array.isArray(section))
+    return;
+  const result = {};
+  for (const [name, value] of Object.entries(section)) {
+    if (name === "lazy")
+      continue;
+    const entry = TOOL_REGISTRY.find((tool) => tool.name === name);
+    if (!entry) {
+      warnInvalid(`unknown key "tools.${name}.enabled" is not a recognized dm-lens tool`, "PILENS_CFG_0009");
+      continue;
+    }
+    if (!entry.disableable) {
+      warnInvalid(`key "tools.${name}.enabled" cannot be disabled because it is required for the ${entry.mcpName ? "MCP session" : "pi tool activation"} contract`, "PILENS_CFG_0009");
+      continue;
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+      warnInvalid(`tools.${name} must be an object with enabled`);
+      continue;
+    }
+    const enabled = value.enabled;
+    if (enabled !== undefined && typeof enabled !== "boolean") {
+      warnInvalid(`tools.${name}.enabled must be a boolean`);
+      continue;
+    }
+    result[name] = enabled === undefined ? {} : { enabled };
+  }
+  return Object.keys(result).length > 0 ? result : undefined;
+}