@patze/code-cli 0.10.2

package/dist/runtime/digest-mask.d.ts

@@ -0,0 +1,2 @@
+export declare function maskDigest(value: string | null | undefined): string;
+//# sourceMappingURL=digest-mask.d.ts.map

package/dist/runtime/digest-mask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest-mask.d.ts","sourceRoot":"","sources":["../../src/runtime/digest-mask.ts"],"names":[],"mappings":"AAAA,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CASnE"}

package/dist/runtime/digest-mask.js

@@ -0,0 +1,11 @@
+export function maskDigest(value) {
+    if (!value?.trim()) {
+        return "(empty)";
+    }
+    const trimmed = value.trim();
+    if (trimmed.length <= 12) {
+        return "••••";
+    }
+    return `${trimmed.slice(0, 6)}…${trimmed.slice(-4)}`;
+}
+//# sourceMappingURL=digest-mask.js.map

package/dist/runtime/digest-mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest-mask.js","sourceRoot":"","sources":["../../src/runtime/digest-mask.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAgC;IACzD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACnB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACzB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC"}

package/dist/runtime/inspect.d.ts

@@ -0,0 +1,20 @@
+export type DeniedHit = {
+    reason: string;
+    path: string;
+};
+export type WorkspaceInspectResult = {
+    cwd: string;
+    root: string;
+    fileCount: number;
+    directoryCount: number;
+    deniedCount: number;
+    allowRules: string[];
+    denyRules: string[];
+    contextFiles: string[];
+    deniedHits: DeniedHit[];
+    samplePaths: string[];
+    warnings: string[];
+};
+export declare function isPathDenied(relativePath: string, deny: string[]): boolean;
+export declare function inspectWorkspace(cwd: string, allow: string[], deny: string[]): WorkspaceInspectResult;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/runtime/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/runtime/inspect.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB,CAAA;AAQD,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAG1E;AAyCD,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,MAAM,EAAE,GACb,sBAAsB,CA8DxB"}

package/dist/runtime/inspect.js

@@ -0,0 +1,152 @@
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { join, relative, resolve } from "node:path";
+import { guessWorkspaceRoot } from "./workspace.js";
+const CONTEXT_CANDIDATES = ["PATZE.md", ".patze/context.md", "AGENTS.md", "README.md"];
+const SKIP_WALK_DIRS = new Set(["node_modules", ".git", ".patze", "dist", "build", ".next"]);
+const MAX_DENIED_HITS = 12;
+const MAX_SAMPLE_PATHS = 10;
+const MAX_WALK_DEPTH = 4;
+export function isPathDenied(relativePath, deny) {
+    const normalized = relativePath.replace(/\\/g, "/");
+    return deny.some((pattern) => matchesDenyPattern(normalized, pattern));
+}
+function matchesDenyPattern(normalized, pattern) {
+    const p = pattern.replace(/\\/g, "/");
+    if (p === "**/.env") {
+        return normalized === ".env" || normalized.endsWith("/.env");
+    }
+    if (p === "**/.env.*") {
+        const base = normalized.split("/").pop() ?? normalized;
+        return base.startsWith(".env.");
+    }
+    if (p === "**/node_modules/**" || p === "**/node_modules") {
+        return (normalized === "node_modules" ||
+            normalized.startsWith("node_modules/") ||
+            normalized.includes("/node_modules/"));
+    }
+    if (p === "**/.git/**" || p === "**/.git") {
+        return normalized === ".git" || normalized.startsWith(".git/") || normalized.includes("/.git/");
+    }
+    if (p.endsWith("/**")) {
+        const prefix = p.slice(0, -3).replace(/^\*\*\//, "");
+        return normalized === prefix || normalized.startsWith(`${prefix}/`) || normalized.includes(`/${prefix}/`);
+    }
+    if (p.includes("*")) {
+        const escaped = p.replace(/\./g, "\\.").replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*");
+        return new RegExp(`^${escaped}$`).test(normalized);
+    }
+    return normalized === p || normalized.startsWith(`${p}/`);
+}
+function denyReason(normalized, deny) {
+    for (const pattern of deny) {
+        if (matchesDenyPattern(normalized, pattern)) {
+            return pattern;
+        }
+    }
+    return null;
+}
+export function inspectWorkspace(cwd, allow, deny) {
+    const root = guessWorkspaceRoot(cwd);
+    const warnings = [];
+    const contextFiles = [];
+    const deniedHits = [];
+    const samplePaths = [];
+    let fileCount = 0;
+    let directoryCount = 0;
+    let deniedCount = 0;
+    const recordDenied = (path, reason) => {
+        deniedCount += 1;
+        if (deniedHits.length < MAX_DENIED_HITS) {
+            deniedHits.push({ reason, path });
+        }
+    };
+    for (const candidate of CONTEXT_CANDIDATES) {
+        const abs = join(root, candidate);
+        if (existsSync(abs)) {
+            contextFiles.push(candidate);
+        }
+    }
+    const seeds = allow.length ? allow : ["."];
+    for (const seed of seeds) {
+        const abs = resolve(root, seed);
+        if (!existsSync(abs)) {
+            warnings.push(`allow path missing: ${seed}`);
+            continue;
+        }
+        walkInspect(abs, root, deny, {
+            onFile(rel) {
+                fileCount += 1;
+                if (samplePaths.length < MAX_SAMPLE_PATHS) {
+                    samplePaths.push(rel);
+                }
+            },
+            onDirectory(rel) {
+                directoryCount += 1;
+                if (samplePaths.length < MAX_SAMPLE_PATHS) {
+                    samplePaths.push(`${rel}/`);
+                }
+            },
+            onDenied: recordDenied,
+        });
+    }
+    return {
+        cwd,
+        root,
+        fileCount,
+        directoryCount,
+        deniedCount,
+        allowRules: [...allow],
+        denyRules: [...deny].sort(),
+        contextFiles: [...contextFiles].sort(),
+        deniedHits: [...deniedHits].sort((a, b) => a.path.localeCompare(b.path)),
+        samplePaths: [...new Set(samplePaths)].sort(),
+        warnings: [...warnings],
+    };
+}
+function walkInspect(startAbs, root, deny, handlers, depth = 0) {
+    let st;
+    try {
+        st = statSync(startAbs);
+    }
+    catch {
+        return;
+    }
+    const rel = relative(root, startAbs).replace(/\\/g, "/") || ".";
+    if (rel !== ".") {
+        const denied = denyReason(rel, deny);
+        if (denied) {
+            handlers.onDenied(rel, denied);
+            return;
+        }
+    }
+    if (st.isFile()) {
+        handlers.onFile(rel);
+        return;
+    }
+    if (!st.isDirectory()) {
+        return;
+    }
+    if (rel !== ".") {
+        handlers.onDirectory(rel);
+    }
+    if (depth >= MAX_WALK_DEPTH) {
+        return;
+    }
+    let entries;
+    try {
+        entries = readdirSync(startAbs).sort();
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        const childAbs = join(startAbs, entry);
+        const childRel = relative(root, childAbs).replace(/\\/g, "/");
+        if (SKIP_WALK_DIRS.has(entry)) {
+            handlers.onDenied(`${childRel}/`, "skipped");
+            continue;
+        }
+        walkInspect(childAbs, root, deny, handlers, depth + 1);
+    }
+}
+//# sourceMappingURL=inspect.js.map

package/dist/runtime/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../src/runtime/inspect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAqBnD,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;AACtF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AAC5F,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,cAAc,GAAG,CAAC,CAAA;AAExB,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,IAAc;IAC/D,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,OAAe;IAC7D,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAA;QACtD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC1D,OAAO,CACL,UAAU,KAAK,cAAc;YAC7B,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC;YACtC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACtC,CAAA;IACH,CAAC;IACD,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACpD,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,GAAG,CAAC,CAAA;IAC3G,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACtF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAc;IACpD,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,KAAe,EACf,IAAc;IAEd,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,MAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;QACpD,WAAW,IAAI,CAAC,CAAA;QAChB,IAAI,UAAU,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,CAAA;IAED,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACjC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAA;YAC5C,SAAQ;QACV,CAAC;QAED,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3B,MAAM,CAAC,GAAG;gBACR,SAAS,IAAI,CAAC,CAAA;gBACd,IAAI,WAAW,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACvB,CAAC;YACH,CAAC;YACD,WAAW,CAAC,GAAG;gBACb,cAAc,IAAI,CAAC,CAAA;gBACnB,IAAI,WAAW,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;gBAC7B,CAAC;YACH,CAAC;YACD,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,GAAG;QACH,IAAI;QACJ,SAAS;QACT,cAAc;QACd,WAAW;QACX,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC;QACtB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE;QAC3B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QACtC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxE,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7C,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;KACxB,CAAA;AACH,CAAC;AAQD,SAAS,WAAW,CAClB,QAAgB,EAChB,IAAY,EACZ,IAAc,EACd,QAA6B,EAC7B,KAAK,GAAG,CAAC;IAET,IAAI,EAAE,CAAA;IACN,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAA;IAC/D,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC9B,OAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAChB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,OAAM;IACR,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,OAAM;IACR,CAAC;IAED,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAE7D,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,EAAE,SAAS,CAAC,CAAA;YAC5C,SAAQ;QACV,CAAC;QAED,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/runtime/patch-apply.d.ts

@@ -0,0 +1,32 @@
+import type { NormalizedPatchProposal } from "./patch-proposal.js";
+export type PatchApplyPlan = {
+    relativePath: string;
+    absolutePath: string;
+    action: "add" | "modify" | "delete";
+};
+export type AppliedFileOutcome = {
+    relativePath: string;
+    action: "add" | "modify" | "delete";
+    beforeHash: string | null;
+    afterHash: string | null;
+};
+export type PatchApplyResult = {
+    ok: true;
+    filesWritten: string[];
+    fileOutcomes: AppliedFileOutcome[];
+    lines: string[];
+} | {
+    ok: false;
+    exitCode: number;
+    lines: string[];
+};
+export declare function buildPatchApplyPlans(proposal: NormalizedPatchProposal, cwd: string, deny: string[]): {
+    ok: true;
+    plans: PatchApplyPlan[];
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function applyPatchPlans(proposal: NormalizedPatchProposal, plans: PatchApplyPlan[], cwd: string, deny: string[]): PatchApplyResult;
+export declare function applyApprovedPatch(proposal: NormalizedPatchProposal, cwd: string): PatchApplyResult;
+//# sourceMappingURL=patch-apply.d.ts.map

package/dist/runtime/patch-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-apply.d.ts","sourceRoot":"","sources":["../../src/runtime/patch-apply.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAIlE,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GACxB;IACE,EAAE,EAAE,IAAI,CAAA;IACR,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,YAAY,EAAE,kBAAkB,EAAE,CAAA;IAClC,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,GACD;IACE,EAAE,EAAE,KAAK,CAAA;IACT,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB,CAAA;AAEL,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,cAAc,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAiCvE;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,uBAAuB,EACjC,KAAK,EAAE,cAAc,EAAE,EACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,GACb,gBAAgB,CA6ElB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,uBAAuB,EACjC,GAAG,EAAE,MAAM,GACV,gBAAgB,CAQlB"}

package/dist/runtime/patch-apply.js

@@ -0,0 +1,170 @@
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { hashFileContent } from "./content-hash.js";
+import { loadConfig } from "../config/config.js";
+import { validatePatchDiffText, validatePatchPath } from "./patch-path-guard.js";
+import { applyUnifiedDiffToText, parseUnifiedDiff } from "./unified-diff.js";
+export function buildPatchApplyPlans(proposal, cwd, deny) {
+    const diffText = collectUnifiedDiffText(proposal);
+    const diffValidation = validatePatchDiffText(diffText);
+    if (!diffValidation.ok) {
+        return { ok: false, reason: diffValidation.reason };
+    }
+    const parsedFiles = parseUnifiedDiff(diffText);
+    if (!parsedFiles.length && proposal.files.length) {
+        return buildPlansFromFileEntries(proposal, cwd, deny);
+    }
+    const plans = [];
+    for (const file of parsedFiles) {
+        const targetPath = file.newPath ?? file.oldPath;
+        if (!targetPath) {
+            continue;
+        }
+        const validated = validatePatchPath(targetPath, cwd, deny);
+        if (!validated.ok) {
+            return { ok: false, reason: validated.reason };
+        }
+        const action = file.oldPath === null ? "add" : file.newPath === null ? "delete" : "modify";
+        plans.push({
+            relativePath: validated.relativePath,
+            absolutePath: validated.absolutePath,
+            action,
+        });
+    }
+    return { ok: true, plans: dedupePlans(plans) };
+}
+export function applyPatchPlans(proposal, plans, cwd, deny) {
+    const diffText = collectUnifiedDiffText(proposal);
+    const diffValidation = validatePatchDiffText(diffText);
+    if (!diffValidation.ok) {
+        return fail(diffValidation.reason);
+    }
+    const parsedFiles = parseUnifiedDiff(diffText);
+    const parsedByPath = indexParsedFiles(parsedFiles);
+    const written = [];
+    const fileOutcomes = [];
+    for (const plan of plans.sort((a, b) => a.relativePath.localeCompare(b.relativePath))) {
+        const validated = validatePatchPath(plan.relativePath, cwd, deny);
+        if (!validated.ok) {
+            return fail(validated.reason);
+        }
+        const parsed = parsedByPath.get(plan.relativePath);
+        if (!parsed) {
+            return fail(`Missing unified diff hunks for ${plan.relativePath}.`);
+        }
+        try {
+            if (plan.action === "delete") {
+                const before = existsSync(validated.absolutePath)
+                    ? hashFileContent(readFileSync(validated.absolutePath, "utf8"))
+                    : null;
+                unlinkSync(validated.absolutePath);
+                written.push(plan.relativePath);
+                fileOutcomes.push({
+                    relativePath: plan.relativePath,
+                    action: "delete",
+                    beforeHash: before,
+                    afterHash: null,
+                });
+                continue;
+            }
+            const originalRaw = plan.action === "add"
+                ? ""
+                : readFileSync(validated.absolutePath, "utf8");
+            const original = originalRaw.replace(/\r\n/g, "\n");
+            const beforeHash = plan.action === "add" ? null : hashFileContent(original);
+            const next = applyUnifiedDiffToText(original, parsed.hunks);
+            mkdirSync(dirname(validated.absolutePath), { recursive: true });
+            writeFileSync(validated.absolutePath, next, "utf8");
+            written.push(plan.relativePath);
+            fileOutcomes.push({
+                relativePath: plan.relativePath,
+                action: plan.action,
+                beforeHash,
+                afterHash: hashFileContent(next),
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return fail(`Failed to apply patch for ${plan.relativePath}: ${message}`);
+        }
+    }
+    return {
+        ok: true,
+        filesWritten: written,
+        fileOutcomes,
+        lines: [
+            "Patze apply complete.",
+            "",
+            "Files written",
+            ...written.map((file) => `  - ${file}`),
+            "",
+            "Safety",
+            "  Patch applied from approved server artifact only.",
+            "  No shell commands were executed.",
+        ],
+    };
+}
+export function applyApprovedPatch(proposal, cwd) {
+    const config = loadConfig(cwd);
+    const deny = config.defaultDeny;
+    const planResult = buildPatchApplyPlans(proposal, cwd, deny);
+    if (!planResult.ok) {
+        return fail(planResult.reason);
+    }
+    return applyPatchPlans(proposal, planResult.plans, cwd, deny);
+}
+function buildPlansFromFileEntries(proposal, cwd, deny) {
+    const plans = [];
+    for (const file of proposal.files) {
+        const validated = validatePatchPath(file.path, cwd, deny);
+        if (!validated.ok) {
+            return { ok: false, reason: validated.reason };
+        }
+        const action = file.status === "added" ? "add" : file.status === "deleted" ? "delete" : "modify";
+        plans.push({
+            relativePath: validated.relativePath,
+            absolutePath: validated.absolutePath,
+            action,
+        });
+    }
+    return { ok: true, plans: dedupePlans(plans) };
+}
+function collectUnifiedDiffText(proposal) {
+    if (proposal.unifiedDiff?.trim()) {
+        return proposal.unifiedDiff;
+    }
+    return proposal.files
+        .map((file) => file.unifiedDiff?.trim())
+        .filter(Boolean)
+        .join("\n");
+}
+function indexParsedFiles(files) {
+    const map = new Map();
+    for (const file of files) {
+        const path = file.newPath ?? file.oldPath;
+        if (path) {
+            map.set(path.replace(/^a\//, "").replace(/^b\//, ""), file);
+        }
+    }
+    return map;
+}
+function dedupePlans(plans) {
+    const seen = new Set();
+    const out = [];
+    for (const plan of plans) {
+        if (seen.has(plan.relativePath)) {
+            continue;
+        }
+        seen.add(plan.relativePath);
+        out.push(plan);
+    }
+    return out;
+}
+function fail(reason) {
+    return {
+        ok: false,
+        exitCode: 2,
+        lines: ["Apply failed (fail-closed).", "", reason, "", "No files modified."],
+    };
+}
+//# sourceMappingURL=patch-apply.js.map

package/dist/runtime/patch-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-apply.js","sourceRoot":"","sources":["../../src/runtime/patch-apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAuB,MAAM,mBAAmB,CAAA;AA4BjG,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,GAAW,EACX,IAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IACtD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAA;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAC1D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAA;QAChD,CAAC;QAED,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;QAC7E,KAAK,CAAC,IAAI,CAAC;YACT,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAiC,EACjC,KAAuB,EACvB,GAAW,EACX,IAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IACtD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,YAAY,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAClD,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,YAAY,GAAyB,EAAE,CAAA;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACjE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,kCAAkC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;QACrE,CAAC;QAED,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,MAAM,GACV,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC;oBAChC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBAC/D,CAAC,CAAC,IAAI,CAAA;gBACV,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;gBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBAC/B,YAAY,CAAC,IAAI,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YAED,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,KAAK,KAAK;gBACnB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC3E,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3D,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,aAAa,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC/B,YAAY,CAAC,IAAI,CAAC;gBAChB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU;gBACV,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC;aACjC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO,IAAI,CAAC,6BAA6B,IAAI,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY,EAAE,OAAO;QACrB,YAAY;QACZ,KAAK,EAAE;YACL,uBAAuB;YACvB,EAAE;YACF,eAAe;YACf,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;YACvC,EAAE;YACF,QAAQ;YACR,qDAAqD;YACrD,oCAAoC;SACrC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAiC,EACjC,GAAW;IAEX,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAA;IAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAiC,EACjC,GAAW,EACX,IAAc;IAEd,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACzD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAA;QAChD,CAAC;QACD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;QACnF,KAAK,CAAC,IAAI,CAAC;YACT,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAA;AAChD,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,WAAW,CAAA;IAC7B,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;SACvC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAA;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC,6BAA6B,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,oBAAoB,CAAC;KAC7E,CAAA;AACH,CAAC"}

package/dist/runtime/patch-path-guard.d.ts

@@ -0,0 +1,17 @@
+export type PatchPathValidationResult = {
+    ok: true;
+    relativePath: string;
+    absolutePath: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function normalizePatchRelativePath(rawPath: string): string | null;
+export declare function validatePatchPath(rawPath: string, cwd: string, deny: string[]): PatchPathValidationResult;
+export declare function validatePatchDiffText(text: string): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=patch-path-guard.d.ts.map

package/dist/runtime/patch-path-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-path-guard.d.ts","sourceRoot":"","sources":["../../src/runtime/patch-path-guard.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAIjC,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqBzE;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,GACb,yBAAyB,CAkB3B;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmBhG"}

package/dist/runtime/patch-path-guard.js

@@ -0,0 +1,56 @@
+import { resolve, sep } from "node:path";
+import { isPathDenied } from "./inspect.js";
+import { guessWorkspaceRoot } from "./workspace.js";
+const SHELL_COMMAND_PATTERN = /^\+.*\b(sh -c|bash -lc|curl |wget |rm -rf|sudo |eval )\b/i;
+export function normalizePatchRelativePath(rawPath) {
+    const trimmed = rawPath.trim().replace(/\\/g, "/");
+    if (!trimmed || trimmed === "/dev/null") {
+        return null;
+    }
+    let path = trimmed;
+    if (path.startsWith("a/") || path.startsWith("b/")) {
+        path = path.slice(2);
+    }
+    if (path.startsWith("/") || /^[A-Za-z]:/.test(path)) {
+        return null;
+    }
+    const segments = path.split("/");
+    if (segments.some((segment) => segment === "..")) {
+        return null;
+    }
+    return path;
+}
+export function validatePatchPath(rawPath, cwd, deny) {
+    const relativePath = normalizePatchRelativePath(rawPath);
+    if (!relativePath) {
+        return { ok: false, reason: `Invalid or absolute patch path: ${rawPath}` };
+    }
+    const workspaceRoot = guessWorkspaceRoot(cwd);
+    const root = resolve(workspaceRoot);
+    const absolutePath = resolve(root, relativePath);
+    if (absolutePath !== root && !absolutePath.startsWith(`${root}${sep}`)) {
+        return { ok: false, reason: `Patch path escapes workspace: ${relativePath}` };
+    }
+    if (isPathDenied(relativePath, deny)) {
+        return { ok: false, reason: `Patch path is denied by policy: ${relativePath}` };
+    }
+    return { ok: true, relativePath, absolutePath };
+}
+export function validatePatchDiffText(text) {
+    if (text.includes("\u0000")) {
+        return { ok: false, reason: "Binary patch content is not allowed." };
+    }
+    if (/^Binary files /m.test(text) || /^GIT binary patch/m.test(text)) {
+        return { ok: false, reason: "Binary patches are not allowed." };
+    }
+    for (const line of text.split("\n")) {
+        if (line.startsWith("!")) {
+            return { ok: false, reason: "Shell-style diff commands are not allowed." };
+        }
+        if (SHELL_COMMAND_PATTERN.test(line)) {
+            return { ok: false, reason: "Patch contains blocked shell command content." };
+        }
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=patch-path-guard.js.map

package/dist/runtime/patch-path-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-path-guard.js","sourceRoot":"","sources":["../../src/runtime/patch-path-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAMnD,MAAM,qBAAqB,GAAG,2DAA2D,CAAA;AAEzF,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,IAAI,GAAG,OAAO,CAAA;IAClB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,GAAW,EACX,IAAc;IAEd,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,OAAO,EAAE,EAAE,CAAA;IAC5E,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAChD,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,YAAY,EAAE,EAAE,CAAA;IAC/E,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,YAAY,EAAE,EAAE,CAAA;IACjF,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAA;IACtE,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAA;IACjE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAA;QAC5E,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAA;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC"}

package/dist/runtime/patch-proposal.d.ts

@@ -0,0 +1,55 @@
+export type PatchFileChange = {
+    path: string;
+    status: "added" | "modified" | "deleted" | "unknown";
+    unifiedDiff?: string;
+};
+export type NormalizedPatchProposal = {
+    artifactDigest: string;
+    previewDigest: string;
+    objective?: string;
+    files: PatchFileChange[];
+    unifiedDiff?: string;
+    source: "server_preview" | "explicit";
+};
+export type PatchProposalRaw = {
+    files?: unknown;
+    unified_diff?: unknown;
+    unifiedDiff?: unknown;
+};
+export type DiffResolution = {
+    state: "no_preview";
+    message: string;
+} | {
+    state: "local_plan";
+    message: string;
+} | {
+    state: "digest_only";
+    proposal: NormalizedPatchProposal;
+    message: string;
+} | {
+    state: "patch_available";
+    proposal: NormalizedPatchProposal;
+};
+export declare function normalizePatchProposalInput(input: {
+    artifactDigest?: string;
+    previewDigest?: string;
+    objective?: string;
+    raw?: PatchProposalRaw | null;
+    source?: NormalizedPatchProposal["source"];
+}): NormalizedPatchProposal | null;
+export declare function resolvePatchProposal(input: {
+    previewSource: "server" | "local" | null;
+    previewStatus?: string;
+    serverResponse?: {
+        artifact_digest: string;
+        preview_digest: string;
+        patch_proposal?: PatchProposalRaw | null;
+    };
+    objective?: string;
+    explicitArtifactDigest?: string;
+    explicitPreviewDigest?: string;
+    explicitPatch?: PatchProposalRaw | null;
+}): DiffResolution;
+export declare function hasPatchBody(proposal: NormalizedPatchProposal): boolean;
+export declare function parsePatchProposalRaw(value: unknown): PatchProposalRaw | null;
+//# sourceMappingURL=patch-proposal.d.ts.map

package/dist/runtime/patch-proposal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-proposal.d.ts","sourceRoot":"","sources":["../../src/runtime/patch-proposal.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;IACpD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,eAAe,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,uBAAuB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,CAAA;AAEnE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7B,MAAM,CAAC,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAA;CAC3C,GAAG,uBAAuB,GAAG,IAAI,CAsBjC;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,aAAa,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAA;IACxC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE;QACf,eAAe,EAAE,MAAM,CAAA;QACvB,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;KACzC,CAAA;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,aAAa,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CACxC,GAAG,cAAc,CAqDjB;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAEvE;AAkDD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAK7E"}