@mikode13/harness 4.0.1 → 5.0.0

package/dist/tools/infrastructure/editFormats.js

@@ -0,0 +1,211 @@
+import { lstat } from 'node:fs/promises';
+import { z } from 'zod';
+import { asNative } from '#src/llm/domain/tool';
+import { EditRefusedError } from "../domain/fileEdits.js";
+import { addedLine, joinLines, splitLines, textsOf } from "../domain/textLines.js";
+import { applyUpdate, createdContent } from "../domain/v4aPatch.js";
+import { definePreparingTool } from "./defineTool.js";
+import { prepareTrackedEdit } from "./trackedEdits.js";
+import { readTracked } from "./trackedReadFile.js";
+import { readRange } from "./workspaceTools.js";
+// A folder the editor views is listed, as its reference implementation does, up to this many.
+const maxListedFiles = 200;
+/**
+ * A native tool: its provider gives the model the schema, so the one here only says what the
+ * calls hold, and each call is checked against `input` before anything is prepared.
+ */
+function nativeTool({ name, description, native, input, prepare, }) {
+    return asNative({
+        name,
+        description,
+        inputSchema: { type: 'object' },
+        prepare: (raw, signal, call) => {
+            const parsed = input.safeParse(raw);
+            if (!parsed.success)
+                return Promise.reject(new Error(z.prettifyError(parsed.error)));
+            return prepare(parsed.data, signal, call);
+        },
+    }, native);
+}
+const patchOperation = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('create_file'), path: z.string(), diff: z.string() }),
+    z.object({ type: z.literal('update_file'), path: z.string(), diff: z.string() }),
+    z.object({ type: z.literal('delete_file'), path: z.string() }),
+]);
+/**
+ * OpenAI's native `apply_patch`: each call is one operation on one file, `create_file` and
+ * `update_file` with a V4A diff. It cannot read, so the agent also has `readFile`.
+ */
+export function createApplyPatchTool(writes) {
+    return nativeTool({
+        name: 'apply_patch',
+        description: 'Creates, changes or deletes a file with a V4A patch.',
+        native: 'applyPatch',
+        input: patchOperation,
+        prepare: (operation, signal, call) => {
+            const { path } = operation;
+            switch (operation.type) {
+                case 'create_file':
+                    return prepareTrackedEdit(writes, { kind: 'create', path, content: Buffer.from(createdContent(operation.diff, path)) }, signal, call);
+                case 'update_file':
+                    return prepareTrackedEdit(writes, {
+                        kind: 'modify',
+                        path,
+                        change: current => Buffer.from(applyUpdate(current.toString('utf8'), operation.diff, path)),
+                    }, signal, call);
+                case 'delete_file':
+                    return prepareTrackedEdit(writes, { kind: 'delete', path }, signal, call);
+            }
+        },
+    });
+}
+const editorCommand = z.discriminatedUnion('command', [
+    z.object({
+        command: z.literal('view'),
+        path: z.string(),
+        view_range: z.tuple([z.number().int(), z.number().int()]).optional(),
+    }),
+    z.object({
+        command: z.literal('str_replace'),
+        path: z.string(),
+        old_str: z.string(),
+        new_str: z.string().optional(),
+    }),
+    z.object({ command: z.literal('create'), path: z.string(), file_text: z.string() }),
+    z.object({
+        command: z.literal('insert'),
+        path: z.string(),
+        insert_line: z.number().int(),
+        insert_text: z.string(),
+    }),
+]);
+/** How many times `text` appears in `source`, without overlaps. */
+function occurrences(source, text) {
+    return source.split(text).length - 1;
+}
+/**
+ * Replaces the one place `oldText` appears. The model writes `\n`: when the text as sent is not
+ * in the file, it is tried with CRLF too, so a CRLF file can be edited, and written with CRLF.
+ */
+function replaceOnce(source, oldText, newText, path) {
+    if (oldText === '') {
+        throw new EditRefusedError(`old_str is empty; copy the text to replace from "${path}"`);
+    }
+    let [from, to] = [oldText, newText];
+    let count = occurrences(source, from);
+    if (count === 0 && !oldText.includes('\r\n') && oldText.includes('\n')) {
+        [from, to] = [oldText.replaceAll('\n', '\r\n'), newText.replaceAll('\n', '\r\n')];
+        count = occurrences(source, from);
+    }
+    if (count === 0) {
+        throw new EditRefusedError(`old_str is not in "${path}"; view the file and copy the text exactly, whitespace included`);
+    }
+    if (count > 1) {
+        throw new EditRefusedError(`old_str appears ${String(count)} times in "${path}"; include more of the lines around it so it appears once`);
+    }
+    const at = source.indexOf(from);
+    // New lines end like the line where the text sits, so a CRLF line gains no bare `\n`.
+    // When the text ends with its line's newline, that newline says how the line ends.
+    const ending = endingAt(source, from.endsWith('\n') ? at + from.length - 1 : at + from.length);
+    const written = to.replace(/(?<!\r)\n/g, ending);
+    return source.slice(0, at) + written + source.slice(at + from.length);
+}
+/** The ending of the line holding `index`, or the text's usual one for a last line without. */
+function endingAt(source, index) {
+    const newline = source.indexOf('\n', index);
+    if (newline === -1)
+        return splitLines(source).eol;
+    return source[newline - 1] === '\r' ? '\r\n' : '\n';
+}
+/**
+ * Puts `text` after line `after` of `source`, 0 being before the first. The lines inserted end
+ * like the line before them, and every other line is written back as it was.
+ */
+function insertAfter(source, after, text, path) {
+    const file = splitLines(source);
+    if (after < 0 || after > file.lines.length) {
+        throw new EditRefusedError(`insert_line must be between 0 and ${String(file.lines.length)}, the number of lines in "${path}"`);
+    }
+    const texts = textsOf(splitLines(text).lines);
+    const inserted = [];
+    for (const line of texts.length > 0 ? texts : ['']) {
+        inserted.push(addedLine(line, inserted.at(-1) ?? file.lines[after - 1], file.eol));
+    }
+    const lines = [...file.lines];
+    lines.splice(after, 0, ...inserted);
+    return joinLines({ ...file, lines, finalNewline: file.finalNewline || file.lines.length === 0 });
+}
+/** The files under a folder, as the editor shows a folder it views. */
+async function listFolder(workspace, path, signal) {
+    const { files, total, truncated } = await workspace.listFiles({ path, limit: maxListedFiles }, signal);
+    if (files.length === 0)
+        return 'No files.';
+    const notice = truncated
+        ? `\n[Showing ${String(files.length)} of ${String(total)} files. View a folder inside it to see the rest.]`
+        : '';
+    return files.join('\n') + notice;
+}
+/**
+ * Claude's native text editor, `str_replace_based_edit_tool`. `view` reads through the access
+ * policy and counts as a read, so it replaces `readFile`; on a folder it lists the files in it.
+ * `create` makes only a file that does not exist, and the editor has no command to delete:
+ * Claude gets `delete_file` for that.
+ */
+export function createTextEditorTool({ writes, policy, workspace, }) {
+    return nativeTool({
+        name: 'str_replace_based_edit_tool',
+        description: 'Views, creates and changes files.',
+        native: 'textEditor',
+        input: editorCommand,
+        prepare: async (command, signal, call) => {
+            const { path } = command;
+            switch (command.command) {
+                case 'view': {
+                    const [start, end] = command.view_range ?? [1, -1];
+                    if (start < 1) {
+                        throw new Error(`view_range starts at line ${String(start)}; lines count from 1`);
+                    }
+                    if (end !== -1 && end < start) {
+                        throw new Error(`view_range ends before it starts: [${String(start)}, ${String(end)}]`);
+                    }
+                    const { from, count } = readRange({
+                        fromLine: start,
+                        lineCount: end === -1 ? null : end - start + 1,
+                    });
+                    const target = await policy.check(path, 'read', signal);
+                    const isFolder = await lstat(target.absolute).then(stats => stats.isDirectory(), () => false);
+                    return {
+                        risk: 'safe',
+                        run: runSignal => isFolder
+                            ? listFolder(workspace, path, runSignal)
+                            : readTracked({ target, path, from, count, reads: call.reads, signal: runSignal }),
+                    };
+                }
+                case 'str_replace':
+                    return prepareTrackedEdit(writes, {
+                        kind: 'modify',
+                        path,
+                        change: current => Buffer.from(replaceOnce(current.toString('utf8'), command.old_str, command.new_str ?? '', path)),
+                    }, signal, call);
+                case 'create':
+                    return prepareTrackedEdit(writes, { kind: 'create', path, content: Buffer.from(command.file_text) }, signal, call);
+                case 'insert':
+                    return prepareTrackedEdit(writes, {
+                        kind: 'modify',
+                        path,
+                        change: current => Buffer.from(insertAfter(current.toString('utf8'), command.insert_line, command.insert_text, path)),
+                    }, signal, call);
+            }
+        },
+    });
+}
+/** The delete Claude's text editor has no command for. */
+export function createDeleteFileTool(writes) {
+    return definePreparingTool({
+        name: 'delete_file',
+        description: 'Deletes a file. Read it first.',
+        input: z.object({ path: z.string().describe('The file, relative to the root.') }),
+        prepare: ({ path }, signal, call) => prepareTrackedEdit(writes, { kind: 'delete', path }, signal, call),
+    });
+}
+//# sourceMappingURL=editFormats.js.map

package/dist/tools/infrastructure/editFormats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editFormats.js","sourceRoot":"","sources":["../../../src/tools/infrastructure/editFormats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AAEjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAa,UAAU,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,8FAA8F;AAC9F,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;GAGG;AACH,SAAS,UAAU,CAA2B,EAC7C,IAAI,EACJ,WAAW,EACX,MAAM,EACN,KAAK,EACL,OAAO,GAWP;IACA,OAAO,QAAQ,CACd;QACC,IAAI;QACJ,WAAW;QACX,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,GAAY,EAAE,MAAmB,EAAE,IAAqB,EAAE,EAAE;YACrE,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;KACD,EACD,MAAM,CACN,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC3D,OAAO,UAAU,CAAC;QACjB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,sDAAsD;QACnE,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACpC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC;YAC3B,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;gBACxB,KAAK,aAAa;oBACjB,OAAO,kBAAkB,CACxB,MAAM,EACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EACpF,MAAM,EACN,IAAI,CACJ,CAAC;gBACH,KAAK,aAAa;oBACjB,OAAO,kBAAkB,CACxB,MAAM,EACN;wBACC,IAAI,EAAE,QAAQ;wBACd,IAAI;wBACJ,MAAM,EAAE,OAAO,CAAC,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;qBACzE,EACD,MAAM,EACN,IAAI,CACJ,CAAC;gBACH,KAAK,aAAa;oBACjB,OAAO,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5E,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpE,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnF,CAAC,CAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACvB,CAAC;CACF,CAAC,CAAC;AAEH,mEAAmE;AACnE,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAChD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,OAAe,EAAE,OAAe,EAAE,IAAY;IAClF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClF,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,gBAAgB,CACzB,sBAAsB,IAAI,iEAAiE,CAC3F,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CACzB,mBAAmB,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,2DAA2D,CAC7G,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,sFAAsF;IACtF,mFAAmF;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY;IAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAgB,CACzB,qCAAqC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,IAAI,GAAG,CAClG,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,UAAU,CACxB,SAAoB,EACpB,IAAY,EACZ,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,CAC5D,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAC/B,MAAM,CACN,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS;QACvB,CAAC,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,mDAAmD;QAC3G,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACpC,MAAM,EACN,MAAM,EACN,SAAS,GAKT;IACA,OAAO,UAAU,CAAC;QACjB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,mCAAmC;QAChD,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACxC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YACzB,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACb,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACnD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBACnF,CAAC;oBACD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzF,CAAC;oBACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;wBACjC,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC;qBAC9C,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CACjD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAC5B,GAAG,EAAE,CAAC,KAAK,CACX,CAAC;oBACF,OAAO;wBACN,IAAI,EAAE,MAAM;wBACZ,GAAG,EAAE,SAAS,CAAC,EAAE,CAChB,QAAQ;4BACP,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC;4BACxC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;qBACpF,CAAC;gBACH,CAAC;gBACD,KAAK,aAAa;oBACjB,OAAO,kBAAkB,CACxB,MAAM,EACN;wBACC,IAAI,EAAE,QAAQ;wBACd,IAAI;wBACJ,MAAM,EAAE,OAAO,CAAC,EAAE,CACjB,MAAM,CAAC,IAAI,CACV,WAAW,CACV,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,OAAO,IAAI,EAAE,EACrB,IAAI,CACJ,CACD;qBACF,EACD,MAAM,EACN,IAAI,CACJ,CAAC;gBACH,KAAK,QAAQ;oBACZ,OAAO,kBAAkB,CACxB,MAAM,EACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EACjE,MAAM,EACN,IAAI,CACJ,CAAC;gBACH,KAAK,QAAQ;oBACZ,OAAO,kBAAkB,CACxB,MAAM,EACN;wBACC,IAAI,EAAE,QAAQ;wBACd,IAAI;wBACJ,MAAM,EAAE,OAAO,CAAC,EAAE,CACjB,MAAM,CAAC,IAAI,CACV,WAAW,CACV,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EACxB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,WAAW,EACnB,IAAI,CACJ,CACD;qBACF,EACD,MAAM,EACN,IAAI,CACJ,CAAC;YACJ,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC3D,OAAO,mBAAmB,CAAC;QAC1B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CACnC,kBAAkB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC;KACnE,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { lstat } from 'node:fs/promises';\nimport { z } from 'zod';\nimport { asNative, type NativeTool } from '#src/llm/domain/tool';\nimport type { AccessPolicy } from '../domain/accessPolicy.ts';\nimport { EditRefusedError } from '../domain/fileEdits.ts';\nimport type { PreparedCall, PreparingTool } from '../domain/preparedCall.ts';\nimport type { ToolCallContext } from '../domain/readRegistry.ts';\nimport { addedLine, joinLines, type Line, splitLines, textsOf } from '../domain/textLines.ts';\nimport { applyUpdate, createdContent } from '../domain/v4aPatch.ts';\nimport type { Workspace } from '../domain/workspace.ts';\nimport { definePreparingTool } from './defineTool.ts';\nimport { prepareTrackedEdit } from './trackedEdits.ts';\nimport { readTracked } from './trackedReadFile.ts';\nimport { readRange } from './workspaceTools.ts';\nimport type { WorkspaceWrites } from './workspaceWrites.ts';\n\n// A folder the editor views is listed, as its reference implementation does, up to this many.\nconst maxListedFiles = 200;\n\n/**\n * A native tool: its provider gives the model the schema, so the one here only says what the\n * calls hold, and each call is checked against `input` before anything is prepared.\n */\nfunction nativeTool<Schema extends z.ZodType>({\n\tname,\n\tdescription,\n\tnative,\n\tinput,\n\tprepare,\n}: {\n\tname: string;\n\tdescription: string;\n\tnative: NativeTool;\n\tinput: Schema;\n\tprepare: (\n\t\tinput: z.infer<Schema>,\n\t\tsignal: AbortSignal,\n\t\tcall: ToolCallContext,\n\t) => Promise<PreparedCall>;\n}): PreparingTool {\n\treturn asNative(\n\t\t{\n\t\t\tname,\n\t\t\tdescription,\n\t\t\tinputSchema: { type: 'object' },\n\t\t\tprepare: (raw: unknown, signal: AbortSignal, call: ToolCallContext) => {\n\t\t\t\tconst parsed = input.safeParse(raw);\n\t\t\t\tif (!parsed.success) return Promise.reject(new Error(z.prettifyError(parsed.error)));\n\t\t\t\treturn prepare(parsed.data, signal, call);\n\t\t\t},\n\t\t},\n\t\tnative,\n\t);\n}\n\nconst patchOperation = z.discriminatedUnion('type', [\n\tz.object({ type: z.literal('create_file'), path: z.string(), diff: z.string() }),\n\tz.object({ type: z.literal('update_file'), path: z.string(), diff: z.string() }),\n\tz.object({ type: z.literal('delete_file'), path: z.string() }),\n]);\n\n/**\n * OpenAI's native `apply_patch`: each call is one operation on one file, `create_file` and\n * `update_file` with a V4A diff. It cannot read, so the agent also has `readFile`.\n */\nexport function createApplyPatchTool(writes: WorkspaceWrites): PreparingTool {\n\treturn nativeTool({\n\t\tname: 'apply_patch',\n\t\tdescription: 'Creates, changes or deletes a file with a V4A patch.',\n\t\tnative: 'applyPatch',\n\t\tinput: patchOperation,\n\t\tprepare: (operation, signal, call) => {\n\t\t\tconst { path } = operation;\n\t\t\tswitch (operation.type) {\n\t\t\t\tcase 'create_file':\n\t\t\t\t\treturn prepareTrackedEdit(\n\t\t\t\t\t\twrites,\n\t\t\t\t\t\t{ kind: 'create', path, content: Buffer.from(createdContent(operation.diff, path)) },\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tcall,\n\t\t\t\t\t);\n\t\t\t\tcase 'update_file':\n\t\t\t\t\treturn prepareTrackedEdit(\n\t\t\t\t\t\twrites,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tkind: 'modify',\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tchange: current =>\n\t\t\t\t\t\t\t\tBuffer.from(applyUpdate(current.toString('utf8'), operation.diff, path)),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tcall,\n\t\t\t\t\t);\n\t\t\t\tcase 'delete_file':\n\t\t\t\t\treturn prepareTrackedEdit(writes, { kind: 'delete', path }, signal, call);\n\t\t\t}\n\t\t},\n\t});\n}\n\nconst editorCommand = z.discriminatedUnion('command', [\n\tz.object({\n\t\tcommand: z.literal('view'),\n\t\tpath: z.string(),\n\t\tview_range: z.tuple([z.number().int(), z.number().int()]).optional(),\n\t}),\n\tz.object({\n\t\tcommand: z.literal('str_replace'),\n\t\tpath: z.string(),\n\t\told_str: z.string(),\n\t\tnew_str: z.string().optional(),\n\t}),\n\tz.object({ command: z.literal('create'), path: z.string(), file_text: z.string() }),\n\tz.object({\n\t\tcommand: z.literal('insert'),\n\t\tpath: z.string(),\n\t\tinsert_line: z.number().int(),\n\t\tinsert_text: z.string(),\n\t}),\n]);\n\n/** How many times `text` appears in `source`, without overlaps. */\nfunction occurrences(source: string, text: string): number {\n\treturn source.split(text).length - 1;\n}\n\n/**\n * Replaces the one place `oldText` appears. The model writes `\\n`: when the text as sent is not\n * in the file, it is tried with CRLF too, so a CRLF file can be edited, and written with CRLF.\n */\nfunction replaceOnce(source: string, oldText: string, newText: string, path: string): string {\n\tif (oldText === '') {\n\t\tthrow new EditRefusedError(`old_str is empty; copy the text to replace from \"${path}\"`);\n\t}\n\tlet [from, to] = [oldText, newText];\n\tlet count = occurrences(source, from);\n\tif (count === 0 && !oldText.includes('\\r\\n') && oldText.includes('\\n')) {\n\t\t[from, to] = [oldText.replaceAll('\\n', '\\r\\n'), newText.replaceAll('\\n', '\\r\\n')];\n\t\tcount = occurrences(source, from);\n\t}\n\tif (count === 0) {\n\t\tthrow new EditRefusedError(\n\t\t\t`old_str is not in \"${path}\"; view the file and copy the text exactly, whitespace included`,\n\t\t);\n\t}\n\tif (count > 1) {\n\t\tthrow new EditRefusedError(\n\t\t\t`old_str appears ${String(count)} times in \"${path}\"; include more of the lines around it so it appears once`,\n\t\t);\n\t}\n\tconst at = source.indexOf(from);\n\t// New lines end like the line where the text sits, so a CRLF line gains no bare `\\n`.\n\t// When the text ends with its line's newline, that newline says how the line ends.\n\tconst ending = endingAt(source, from.endsWith('\\n') ? at + from.length - 1 : at + from.length);\n\tconst written = to.replace(/(?<!\\r)\\n/g, ending);\n\treturn source.slice(0, at) + written + source.slice(at + from.length);\n}\n\n/** The ending of the line holding `index`, or the text's usual one for a last line without. */\nfunction endingAt(source: string, index: number): '\\n' | '\\r\\n' {\n\tconst newline = source.indexOf('\\n', index);\n\tif (newline === -1) return splitLines(source).eol;\n\treturn source[newline - 1] === '\\r' ? '\\r\\n' : '\\n';\n}\n\n/**\n * Puts `text` after line `after` of `source`, 0 being before the first. The lines inserted end\n * like the line before them, and every other line is written back as it was.\n */\nfunction insertAfter(source: string, after: number, text: string, path: string): string {\n\tconst file = splitLines(source);\n\tif (after < 0 || after > file.lines.length) {\n\t\tthrow new EditRefusedError(\n\t\t\t`insert_line must be between 0 and ${String(file.lines.length)}, the number of lines in \"${path}\"`,\n\t\t);\n\t}\n\tconst texts = textsOf(splitLines(text).lines);\n\tconst inserted: Line[] = [];\n\tfor (const line of texts.length > 0 ? texts : ['']) {\n\t\tinserted.push(addedLine(line, inserted.at(-1) ?? file.lines[after - 1], file.eol));\n\t}\n\tconst lines = [...file.lines];\n\tlines.splice(after, 0, ...inserted);\n\treturn joinLines({ ...file, lines, finalNewline: file.finalNewline || file.lines.length === 0 });\n}\n\n/** The files under a folder, as the editor shows a folder it views. */\nasync function listFolder(\n\tworkspace: Workspace,\n\tpath: string,\n\tsignal: AbortSignal,\n): Promise<string> {\n\tconst { files, total, truncated } = await workspace.listFiles(\n\t\t{ path, limit: maxListedFiles },\n\t\tsignal,\n\t);\n\tif (files.length === 0) return 'No files.';\n\tconst notice = truncated\n\t\t? `\\n[Showing ${String(files.length)} of ${String(total)} files. View a folder inside it to see the rest.]`\n\t\t: '';\n\treturn files.join('\\n') + notice;\n}\n\n/**\n * Claude's native text editor, `str_replace_based_edit_tool`. `view` reads through the access\n * policy and counts as a read, so it replaces `readFile`; on a folder it lists the files in it.\n * `create` makes only a file that does not exist, and the editor has no command to delete:\n * Claude gets `delete_file` for that.\n */\nexport function createTextEditorTool({\n\twrites,\n\tpolicy,\n\tworkspace,\n}: {\n\twrites: WorkspaceWrites;\n\tpolicy: AccessPolicy;\n\tworkspace: Workspace;\n}): PreparingTool {\n\treturn nativeTool({\n\t\tname: 'str_replace_based_edit_tool',\n\t\tdescription: 'Views, creates and changes files.',\n\t\tnative: 'textEditor',\n\t\tinput: editorCommand,\n\t\tprepare: async (command, signal, call) => {\n\t\t\tconst { path } = command;\n\t\t\tswitch (command.command) {\n\t\t\t\tcase 'view': {\n\t\t\t\t\tconst [start, end] = command.view_range ?? [1, -1];\n\t\t\t\t\tif (start < 1) {\n\t\t\t\t\t\tthrow new Error(`view_range starts at line ${String(start)}; lines count from 1`);\n\t\t\t\t\t}\n\t\t\t\t\tif (end !== -1 && end < start) {\n\t\t\t\t\t\tthrow new Error(`view_range ends before it starts: [${String(start)}, ${String(end)}]`);\n\t\t\t\t\t}\n\t\t\t\t\tconst { from, count } = readRange({\n\t\t\t\t\t\tfromLine: start,\n\t\t\t\t\t\tlineCount: end === -1 ? null : end - start + 1,\n\t\t\t\t\t});\n\t\t\t\t\tconst target = await policy.check(path, 'read', signal);\n\t\t\t\t\tconst isFolder = await lstat(target.absolute).then(\n\t\t\t\t\t\tstats => stats.isDirectory(),\n\t\t\t\t\t\t() => false,\n\t\t\t\t\t);\n\t\t\t\t\treturn {\n\t\t\t\t\t\trisk: 'safe',\n\t\t\t\t\t\trun: runSignal =>\n\t\t\t\t\t\t\tisFolder\n\t\t\t\t\t\t\t\t? listFolder(workspace, path, runSignal)\n\t\t\t\t\t\t\t\t: readTracked({ target, path, from, count, reads: call.reads, signal: runSignal }),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tcase 'str_replace':\n\t\t\t\t\treturn prepareTrackedEdit(\n\t\t\t\t\t\twrites,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tkind: 'modify',\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tchange: current =>\n\t\t\t\t\t\t\t\tBuffer.from(\n\t\t\t\t\t\t\t\t\treplaceOnce(\n\t\t\t\t\t\t\t\t\t\tcurrent.toString('utf8'),\n\t\t\t\t\t\t\t\t\t\tcommand.old_str,\n\t\t\t\t\t\t\t\t\t\tcommand.new_str ?? '',\n\t\t\t\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tcall,\n\t\t\t\t\t);\n\t\t\t\tcase 'create':\n\t\t\t\t\treturn prepareTrackedEdit(\n\t\t\t\t\t\twrites,\n\t\t\t\t\t\t{ kind: 'create', path, content: Buffer.from(command.file_text) },\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tcall,\n\t\t\t\t\t);\n\t\t\t\tcase 'insert':\n\t\t\t\t\treturn prepareTrackedEdit(\n\t\t\t\t\t\twrites,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tkind: 'modify',\n\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\tchange: current =>\n\t\t\t\t\t\t\t\tBuffer.from(\n\t\t\t\t\t\t\t\t\tinsertAfter(\n\t\t\t\t\t\t\t\t\t\tcurrent.toString('utf8'),\n\t\t\t\t\t\t\t\t\t\tcommand.insert_line,\n\t\t\t\t\t\t\t\t\t\tcommand.insert_text,\n\t\t\t\t\t\t\t\t\t\tpath,\n\t\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tcall,\n\t\t\t\t\t);\n\t\t\t}\n\t\t},\n\t});\n}\n\n/** The delete Claude's text editor has no command for. */\nexport function createDeleteFileTool(writes: WorkspaceWrites): PreparingTool {\n\treturn definePreparingTool({\n\t\tname: 'delete_file',\n\t\tdescription: 'Deletes a file. Read it first.',\n\t\tinput: z.object({ path: z.string().describe('The file, relative to the root.') }),\n\t\tprepare: ({ path }, signal, call) =>\n\t\t\tprepareTrackedEdit(writes, { kind: 'delete', path }, signal, call),\n\t});\n}\n"]}

package/dist/tools/infrastructure/fileEditor.d.ts

@@ -0,0 +1,64 @@
+import type { FileState } from '#src/recovery/domain/recoveryStore';
+import type { ToolRisk } from '#src/agent/domain/approval';
+import type { AccessPolicy, AllowedPath } from '../domain/accessPolicy.ts';
+import { type FileChange, type PreparedEdit } from '../domain/fileEdits.ts';
+import type { WriteSession } from './writeSession.ts';
+/**
+ * The risk of a prepared change. A change git or the run's record can undo is `mutating`; one
+ * that widens `.gitignore` is `destructive`, so it waits for the user, because it would open
+ * paths that every tool keeps closed.
+ */
+export declare function editRisk(prepared: PreparedEdit): ToolRisk;
+/**
+ * Makes the changes the edit tools ask for, under the access policy and the run's recovery
+ * journal. `prepare` checks a change and fixes what it will do; `apply` makes it, in this order:
+ *
+ * 1. Check the policy again, and that the file still holds what was prepared.
+ * 2. Store the content it replaces and the content it writes, and record the change as
+ *    prepared. If either fails, nothing is touched.
+ * 3. Write: a new file appears whole and only if nothing took its place meanwhile; a replaced
+ *    one is swapped for its new version in one rename; a deleted one is unlinked.
+ * 4. Record the change as applied, or as abandoned when the write failed and left the file as
+ *    it was. A change the record cannot confirm stops the session and throws
+ *    `EditUnconfirmedError`, never a success or a refusal.
+ *
+ * Every message names the file as the model wrote it, never by its place on the host.
+ */
+export declare class FileEditor {
+    private readonly policy;
+    private readonly session;
+    private readonly maxFileBytes;
+    constructor({ policy, session, maxFileBytes, }: {
+        policy: AccessPolicy;
+        session: WriteSession;
+        maxFileBytes?: number;
+    });
+    /**
+     * What `path` holds now, checked as a change to it would be: an edit format works its new
+     * content out from this, and an edit tool compares it with the version the model read.
+     */
+    current(path: string, signal: AbortSignal): Promise<{
+        target: AllowedPath;
+        state: FileState;
+        content?: Buffer;
+    }>;
+    prepare(change: FileChange, signal: AbortSignal): Promise<PreparedEdit>;
+    apply(prepared: PreparedEdit, signal: AbortSignal): Promise<void>;
+    /**
+     * Records a change that was made. If that fails, its prepared line still holds both states, so
+     * an undo can tell; but the record cannot be trusted to continue, and the caller must know.
+     */
+    private markApplied;
+    /** What `path` holds now. Only a regular file within the size limit can be changed. */
+    private read;
+    /** Stores what the change replaces and what it writes, and returns the state it leaves. */
+    private record;
+    private journal;
+    private write;
+    /**
+     * A write threw. If the file still holds what it held, nothing happened and the change is
+     * abandoned; if it holds the new state, the change happened anyway. Anything else cannot be
+     * explained, so the session stops writing.
+     */
+    private settleFailedWrite;
+}

package/dist/tools/infrastructure/fileEditor.js

@@ -0,0 +1,306 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { chmod, link, lstat, mkdir, mkdtemp, open, readFile, rename, rm, rmdir, stat, unlink, } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { basename, dirname, join } from 'node:path';
+import { EditRefusedError, EditUnconfirmedError, } from "../domain/fileEdits.js";
+import { isIgnoreFile, widensIgnoreRules } from "./ignoreFileChanges.js";
+// Larger than any source file a model should rewrite whole, and small enough to keep a copy.
+const defaultMaxFileBytes = 5 * 1024 * 1024;
+function hashOf(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+function code(error) {
+    return error.code ?? 'an unknown error';
+}
+function sameState(a, b) {
+    if (!a.exists || !b.exists)
+        return a.exists === b.exists;
+    return a.hash === b.hash && a.mode === b.mode;
+}
+async function syncDirectory(path) {
+    const directory = await open(path, 'r');
+    try {
+        await directory.sync();
+    }
+    finally {
+        await directory.close();
+    }
+}
+let newFileMode;
+/**
+ * The mode a new file gets in this process: 0o666 less the umask. Measured once by creating
+ * one, because reading the umask directly briefly changes it for every thread.
+ */
+function getNewFileMode() {
+    newFileMode ??= (async () => {
+        const folder = await mkdtemp(join(tmpdir(), 'mikode-harness-mode-'));
+        try {
+            const probe = join(folder, 'probe');
+            await (await open(probe, 'wx', 0o666)).close();
+            return (await stat(probe)).mode & 0o7777;
+        }
+        finally {
+            await rm(folder, { recursive: true, force: true });
+        }
+    })();
+    return newFileMode;
+}
+/** The folders between the nearest existing one and `folder`, outermost first. */
+async function missingFolders(folder) {
+    const missing = [];
+    for (let current = folder;; current = dirname(current)) {
+        const exists = await lstat(current).then(() => true, (error) => {
+            if (code(error) === 'ENOENT')
+                return false;
+            throw error;
+        });
+        if (exists || dirname(current) === current)
+            return missing;
+        missing.unshift(current);
+    }
+}
+/**
+ * The risk of a prepared change. A change git or the run's record can undo is `mutating`; one
+ * that widens `.gitignore` is `destructive`, so it waits for the user, because it would open
+ * paths that every tool keeps closed.
+ */
+export function editRisk(prepared) {
+    return prepared.widensIgnoreRules ? 'destructive' : 'mutating';
+}
+/**
+ * Makes the changes the edit tools ask for, under the access policy and the run's recovery
+ * journal. `prepare` checks a change and fixes what it will do; `apply` makes it, in this order:
+ *
+ * 1. Check the policy again, and that the file still holds what was prepared.
+ * 2. Store the content it replaces and the content it writes, and record the change as
+ *    prepared. If either fails, nothing is touched.
+ * 3. Write: a new file appears whole and only if nothing took its place meanwhile; a replaced
+ *    one is swapped for its new version in one rename; a deleted one is unlinked.
+ * 4. Record the change as applied, or as abandoned when the write failed and left the file as
+ *    it was. A change the record cannot confirm stops the session and throws
+ *    `EditUnconfirmedError`, never a success or a refusal.
+ *
+ * Every message names the file as the model wrote it, never by its place on the host.
+ */
+export class FileEditor {
+    policy;
+    session;
+    maxFileBytes;
+    constructor({ policy, session, maxFileBytes = defaultMaxFileBytes, }) {
+        this.policy = policy;
+        this.session = session;
+        this.maxFileBytes = maxFileBytes;
+    }
+    /**
+     * What `path` holds now, checked as a change to it would be: an edit format works its new
+     * content out from this, and an edit tool compares it with the version the model read.
+     */
+    async current(path, signal) {
+        const target = await this.policy.check(path, 'write', signal);
+        return { target, ...(await this.read(target.absolute, path)) };
+    }
+    async prepare(change, signal) {
+        const { path } = change;
+        const target = await this.policy.check(path, 'write', signal);
+        const { state, content: previous } = await this.read(target.absolute, path);
+        if (change.kind === 'create') {
+            if (state.exists) {
+                throw new EditRefusedError(`"${path}" already exists; read it and change it instead`);
+            }
+        }
+        else {
+            if (!state.exists)
+                throw new EditRefusedError(`"${path}" does not exist`);
+            if (change.expected !== undefined && change.expected !== state.hash) {
+                throw new EditRefusedError(`"${path}" changed since it was read; read it again`);
+            }
+        }
+        const content = change.kind === 'delete' ? undefined : change.content;
+        if (content && content.length > this.maxFileBytes) {
+            throw new EditRefusedError(`The new content of "${path}" is larger than ${String(this.maxFileBytes / 1024 / 1024)} MB`);
+        }
+        if (content && state.exists && hashOf(content) === state.hash) {
+            throw new EditRefusedError(`"${path}" already holds that content; nothing to change`);
+        }
+        // Copies all the way down: what is approved must not change while the approval waits.
+        return Object.freeze({
+            kind: change.kind,
+            path,
+            target: Object.freeze({ ...target }),
+            before: Object.freeze({ ...state }),
+            content: content && Buffer.from(content),
+            contentHash: content && hashOf(content),
+            widensIgnoreRules: isIgnoreFile(target.absolute) && widensIgnoreRules(previous, content),
+        });
+    }
+    async apply(prepared, signal) {
+        const { path } = prepared;
+        signal.throwIfAborted();
+        // A Buffer's bytes cannot be frozen: copied, then checked, so what is written is what was
+        // approved, whatever happens to `prepared.content` from here on.
+        const content = prepared.content && Buffer.from(prepared.content);
+        if ((content && hashOf(content)) !== prepared.contentHash) {
+            throw new EditRefusedError(`The content prepared for "${path}" changed after it was prepared; prepare the change again`);
+        }
+        const target = await this.policy.check(path, 'write', signal);
+        if (target.absolute !== prepared.target.absolute) {
+            throw new EditRefusedError(`"${path}" now leads somewhere else; prepare the change again`);
+        }
+        const current = await this.read(target.absolute, path);
+        if (!sameState(current.state, prepared.before)) {
+            throw new EditRefusedError(`"${path}" changed after this change was prepared; read it again`);
+        }
+        // Checked again before the first effect: starting the journal takes the workspace.
+        signal.throwIfAborted();
+        const journal = await this.session.journalForChange();
+        const after = await this.record(journal, path, current.content, content, prepared.before);
+        const createdFolders = prepared.kind === 'create' ? await missingFolders(dirname(target.absolute)) : [];
+        const sequence = await this.journal(path, () => journal.prepare({
+            path: target.absolute,
+            before: current.state,
+            after,
+            ...(createdFolders.length > 0 ? { createdFolders } : {}),
+        }));
+        // The last moment to stop: past here the file changes.
+        if (signal.aborted) {
+            await journal.abandoned(sequence);
+            signal.throwIfAborted();
+        }
+        try {
+            await this.write(prepared, content, target.absolute);
+        }
+        catch (error) {
+            await this.settleFailedWrite({
+                journal,
+                sequence,
+                kind: prepared.kind,
+                path,
+                target: target.absolute,
+                current,
+                after,
+                createdFolders,
+                error,
+            });
+            return;
+        }
+        await this.markApplied(journal, sequence, path);
+    }
+    /**
+     * Records a change that was made. If that fails, its prepared line still holds both states, so
+     * an undo can tell; but the record cannot be trusted to continue, and the caller must know.
+     */
+    async markApplied(journal, sequence, path) {
+        try {
+            await journal.applied(sequence);
+        }
+        catch (error) {
+            this.session.stop('Writing stopped: the harness could not record a change it made');
+            throw new EditUnconfirmedError(`"${path}" was changed, but the harness could not record it; writing has stopped for this run`, { cause: error });
+        }
+    }
+    /** What `path` holds now. Only a regular file within the size limit can be changed. */
+    async read(absolute, path) {
+        let stats;
+        try {
+            stats = await lstat(absolute);
+        }
+        catch (error) {
+            if (code(error) === 'ENOENT')
+                return { state: { exists: false } };
+            throw new EditRefusedError(`Could not read "${path}" (${code(error)})`, { cause: error });
+        }
+        if (!stats.isFile())
+            throw new EditRefusedError(`"${path}" is not a regular file`);
+        if (stats.size > this.maxFileBytes) {
+            throw new EditRefusedError(`"${path}" is larger than ${String(this.maxFileBytes / 1024 / 1024)} MB, too large to change`);
+        }
+        let content;
+        try {
+            content = await readFile(absolute);
+        }
+        catch (error) {
+            throw new EditRefusedError(`Could not read "${path}" (${code(error)})`, { cause: error });
+        }
+        return {
+            state: { exists: true, hash: hashOf(content), mode: stats.mode & 0o7777 },
+            content,
+        };
+    }
+    /** Stores what the change replaces and what it writes, and returns the state it leaves. */
+    async record(journal, path, previous, content, before) {
+        if (previous)
+            await this.journal(path, () => journal.saveContent(previous));
+        if (!content)
+            return { exists: false };
+        const hash = await this.journal(path, () => journal.saveContent(content));
+        return { exists: true, hash, mode: before.exists ? before.mode : await getNewFileMode() };
+    }
+    async journal(path, step) {
+        try {
+            return await step();
+        }
+        catch (error) {
+            throw new EditRefusedError(`The harness could not record how to undo the change to "${path}", so it was not changed`, { cause: error });
+        }
+    }
+    async write({ kind, before }, content, absolute) {
+        if (kind === 'delete') {
+            await unlink(absolute);
+            await syncDirectory(dirname(absolute));
+            return;
+        }
+        await mkdir(dirname(absolute), { recursive: true });
+        // Written beside the file, so the final step is one rename or link on the same disk.
+        const temporary = join(dirname(absolute), `.${basename(absolute)}.${randomBytes(6).toString('hex')}.mikode-tmp`);
+        try {
+            const handle = await open(temporary, 'wx');
+            try {
+                await handle.writeFile(content ?? Buffer.alloc(0));
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            if (before.exists)
+                await chmod(temporary, before.mode);
+            if (kind === 'create') {
+                // A link fails if something appeared at the path meanwhile; a rename would replace it.
+                await link(temporary, absolute);
+            }
+            else {
+                await rename(temporary, absolute);
+            }
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+        await syncDirectory(dirname(absolute));
+    }
+    /**
+     * A write threw. If the file still holds what it held, nothing happened and the change is
+     * abandoned; if it holds the new state, the change happened anyway. Anything else cannot be
+     * explained, so the session stops writing.
+     */
+    async settleFailedWrite({ journal, sequence, kind, path, target, current, after, createdFolders, error, }) {
+        const now = await this.read(target, path).catch(() => undefined);
+        if (now && sameState(now.state, after)) {
+            await this.markApplied(journal, sequence, path);
+            return;
+        }
+        // A link that found the path taken made no change: what is there now is someone else's.
+        const appeared = kind === 'create' && code(error) === 'EEXIST';
+        if (appeared || (now && sameState(now.state, current.state))) {
+            // Innermost first, and only while empty: anything else in them is not this run's.
+            for (const folder of [...createdFolders].reverse()) {
+                await rmdir(folder).catch(() => undefined);
+            }
+            await journal.abandoned(sequence).catch(() => undefined);
+            throw new EditRefusedError(appeared
+                ? `"${path}" appeared while it was being created; read it before changing it`
+                : `Could not write "${path}" (${code(error)}); it was not changed`, { cause: error });
+        }
+        this.session.stop(`Writing stopped: the harness could not tell whether "${path}" was changed; ask the user to check it`);
+        throw new EditUnconfirmedError(`Could not tell whether "${path}" was changed (${code(error)}); writing has stopped for this run`, { cause: error });
+    }
+}
+//# sourceMappingURL=fileEditor.js.map