@visorcraft/idlehands 1.3.4 → 1.3.5

package/dist/tools/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/tools/path-safety.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,GAAW;IACrD,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAgB,EAAE,CAAM;IAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAc;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,iBAAiB,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,YAAoB,EAAE,GAAgB;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,qBAAqB,YAAY,uCAAuC,MAAM,oHAAoH,CAAC;IACnN,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,WAAW,YAAY,uCAAuC,MAAM,IAAI,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,YAAoB,EAAE,GAAgB;IAC3F,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAErC,+EAA+E;IAC/E,oEAAoE;IACpE,IAAI,GAAG,CAAC,yBAAyB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QAC5C,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,MAAM,KAAK,YAAY,IAAI,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uHAAuH,IAAI,EAAE,CAAC,CAAC;QACxJ,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qBAAqB,SAAS,qCAAqC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,IAAI,QAAQ;QAAE,OAAO;IAErB,2FAA2F;IAC3F,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qBAAqB,SAAS,uCAAuC,MAAM,mEAAmE,CAAC,CAAC;IACzK,CAAC;AACH,CAAC"}

package/dist/tools/undo.js

@@ -0,0 +1,141 @@
+/**
+ * Backup system and undo functionality for file tools.
+ * Manages file backups with FIFO rotation and provides undo support.
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { stateDir } from '../utils.js';
+import { resolvePath, redactPath } from './path-safety.js';
+const DEFAULT_MAX_BACKUPS_PER_FILE = 5;
+function defaultBackupDir() {
+    return path.join(stateDir(), 'backups');
+}
+function sha256(s) {
+    return crypto.createHash('sha256').update(s).digest('hex');
+}
+function keyFromPath(absPath) {
+    return sha256(absPath);
+}
+function backupDirForPath(ctx, absPath) {
+    const bdir = ctx.backupDir ?? defaultBackupDir();
+    const key = keyFromPath(absPath);
+    return { bdir, key, keyDir: path.join(bdir, key) };
+}
+function formatBackupTs() {
+    return new Date().toISOString().replace(/[:.]/g, '-');
+}
+async function restoreLatestBackup(absPath, ctx) {
+    const { key, keyDir } = backupDirForPath(ctx, absPath);
+    const legacyDir = ctx.backupDir ?? defaultBackupDir();
+    const latestInDir = async (dir) => {
+        const ents = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+        return ents
+            .filter((e) => e.isFile())
+            .map((e) => e.name)
+            .filter((n) => n.endsWith('.bak'))
+            .sort()
+            .reverse()[0];
+    };
+    let bakDir = keyDir;
+    let bakFile = await latestInDir(keyDir);
+    if (!bakFile) {
+        // Compatibility with older flat backup format (without nested key dir).
+        const ents = await fs.readdir(legacyDir, { withFileTypes: true }).catch(() => []);
+        const legacy = ents
+            .filter((e) => e.isFile())
+            .map((e) => e.name)
+            .filter((n) => n.startsWith(`${key}.`) && !n.endsWith('.json'))
+            .sort()
+            .reverse()[0];
+        if (legacy) {
+            bakFile = legacy;
+            bakDir = legacyDir;
+        }
+    }
+    if (!bakFile) {
+        throw new Error(`undo: no backups found for ${absPath} in ${legacyDir}`);
+    }
+    const bakPath = path.join(bakDir, bakFile);
+    const buf = await fs.readFile(bakPath);
+    // backup current file before restoring
+    await backupFile(absPath, ctx);
+    await atomicWrite(absPath, buf);
+    return `restored ${absPath} from backup ${bakPath}`;
+}
+export async function rotateBackups(absPath, ctx) {
+    const { keyDir } = backupDirForPath(ctx, absPath);
+    const limit = ctx.maxBackupsPerFile ?? DEFAULT_MAX_BACKUPS_PER_FILE;
+    if (limit <= 0)
+        return;
+    await fs.mkdir(keyDir, { recursive: true });
+    const ents = await fs.readdir(keyDir, { withFileTypes: true }).catch(() => []);
+    const backups = ents
+        .filter((e) => e.isFile())
+        .map((e) => e.name)
+        .filter((n) => n.endsWith('.bak'))
+        .sort(); // oldest → newest due to ISO timestamp
+    const toDelete = backups.length > limit ? backups.slice(0, backups.length - limit) : [];
+    for (const name of toDelete) {
+        const bak = path.join(keyDir, name);
+        const meta = path.join(keyDir, `${name.replace(/\.bak$/, '')}.meta.json`);
+        await fs.rm(bak, { force: true }).catch(() => { });
+        await fs.rm(meta, { force: true }).catch(() => { });
+    }
+}
+export async function backupFile(absPath, ctx) {
+    const { bdir, keyDir } = backupDirForPath(ctx, absPath);
+    await fs.mkdir(bdir, { recursive: true });
+    await fs.mkdir(keyDir, { recursive: true });
+    // Auto-create .gitignore in state dir to prevent backups from being committed
+    const gitignorePath = path.join(bdir, '.gitignore');
+    await fs.writeFile(gitignorePath, '*\n', { flag: 'wx' }).catch(() => { });
+    // 'wx' flag = create only if doesn't exist, silently skip if it does
+    const st = await fs.stat(absPath).catch(() => null);
+    if (!st || !st.isFile())
+        return;
+    const content = await fs.readFile(absPath);
+    const hash = crypto.createHash('sha256').update(content).digest('hex');
+    const ts = formatBackupTs();
+    const bakName = `${ts}.bak`;
+    const metaName = `${ts}.meta.json`;
+    const bakPath = path.join(keyDir, bakName);
+    const metaPath = path.join(keyDir, metaName);
+    await fs.writeFile(bakPath, content);
+    await fs.writeFile(metaPath, JSON.stringify({ original_path: absPath, timestamp: ts, size: st.size, sha256_before: hash }, null, 2) + '\n', 'utf8');
+    await rotateBackups(absPath, ctx);
+}
+export async function atomicWrite(absPath, data) {
+    const dir = path.dirname(absPath);
+    await fs.mkdir(dir, { recursive: true });
+    // Capture original permissions before overwriting
+    const origStat = await fs.stat(absPath).catch(() => null);
+    const origMode = origStat?.mode;
+    const tmp = path.join(dir, `.${path.basename(absPath)}.idlehands.tmp.${process.pid}.${Date.now()}`);
+    await fs.writeFile(tmp, data);
+    // Restore original file mode bits if the file existed
+    if (origMode != null) {
+        await fs.chmod(tmp, origMode & 0o7777).catch(() => { });
+    }
+    await fs.rename(tmp, absPath);
+}
+export async function undo_path(ctx, args) {
+    const directPath = args?.path === undefined ? undefined : String(args.path);
+    const p = directPath ? resolvePath(ctx, directPath) : ctx.lastEditedPath;
+    if (!p)
+        throw new Error('undo: missing path');
+    const absCwd = path.resolve(ctx.cwd);
+    const redactedPath = redactPath(p, absCwd);
+    if (!ctx.noConfirm && ctx.confirm) {
+        const ok = await ctx.confirm(`Restore latest backup for:\n  ${redactedPath}\nThis will overwrite the current file. Proceed? (y/N) `);
+        if (!ok)
+            return 'undo: cancelled';
+    }
+    if (!ctx.noConfirm && !ctx.confirm) {
+        throw new Error('undo: confirmation required (run with --no-confirm/--yolo or in interactive mode)');
+    }
+    if (ctx.dryRun)
+        return `dry-run: would restore latest backup for ${redactedPath}`;
+    return await restoreLatestBackup(p, ctx);
+}
+//# sourceMappingURL=undo.js.map

package/dist/tools/undo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo.js","sourceRoot":"","sources":["../../src/tools/undo.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAEvC,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAgB,EAAE,OAAe;IACzD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,GAAgB;IAClE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAEtD,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAA+B,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,IAAI,EAAE;aACN,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,wEAAwE;QACxE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC9D,IAAI,EAAE;aACN,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,OAAO,SAAS,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEvC,uCAAuC;IACvC,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,YAAY,OAAO,gBAAgB,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,GAAgB;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;IACpE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO;IAEvB,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE,CAAC,CAAC,uCAAuC;IAElD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,GAAgB;IAChE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,8EAA8E;IAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,qEAAqE;IAErE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO;IAEhC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,EAAE,MAAM,CAAC;IAC5B,MAAM,QAAQ,GAAG,GAAG,EAAE,YAAY,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,SAAS,CAChB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC7G,MAAM,CACP,CAAC;IAEF,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAqB;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,kDAAkD;IAClD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,CAAC;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpG,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE9B,sDAAsD;IACtD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAgB,EAAE,IAAS;IACzD,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IACzE,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,iCAAiC,YAAY,yDAAyD,CAAC,CAAC;QACrI,IAAI,CAAC,EAAE;YAAE,OAAO,iBAAiB,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,4CAA4C,YAAY,EAAE,CAAC;IAClF,OAAO,MAAM,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/tools.js

@@ -1,12 +1,16 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import crypto from 'node:crypto';
 import { spawn, spawnSync } from 'node:child_process';
 import { ToolError } from './tools/tool-error.js';
 import { checkExecSafety, checkPathSafety, isProtectedDeleteTarget } from './safety.js';
 import { sys_context as sysContextTool } from './sys/context.js';
-import { stateDir, shellEscape, BASH_PATH } from './utils.js';
-const DEFAULT_MAX_BACKUPS_PER_FILE = 5;
+import { isWithinDir, resolvePath, redactPath, checkCwdWarning, enforceMutationWithinCwd, } from './tools/path-safety.js';
+import { normalizePatchPath, extractTouchedFilesFromPatch, } from './tools/patch.js';
+import { atomicWrite, backupFile } from './tools/undo.js';
+import { shellEscape, BASH_PATH } from './utils.js';
+// Re-export from extracted modules so existing imports don't break
+export { atomicWrite, undo_path } from './tools/undo.js';
+// Backup/undo system imported from tools/undo.ts (atomicWrite, backupFile, undo_path)
 /**
  * Build a read-back snippet showing the region around a mutation.
  * Returns numbered lines ±contextLines around the changed area, capped to avoid bloat.
@@ -73,61 +77,6 @@ function guessMimeType(filePath, buf) {
     };
     return extMap[ext] ?? 'application/octet-stream';
 }
-function defaultBackupDir() {
-    return path.join(stateDir(), 'backups');
-}
-function sha256(s) {
-    return crypto.createHash('sha256').update(s).digest('hex');
-}
-function keyFromPath(absPath) {
-    return sha256(absPath);
-}
-function backupDirForPath(ctx, absPath) {
-    const bdir = ctx.backupDir ?? defaultBackupDir();
-    const key = keyFromPath(absPath);
-    return { bdir, key, keyDir: path.join(bdir, key) };
-}
-function formatBackupTs() {
-    return new Date().toISOString().replace(/[:.]/g, '-');
-}
-async function restoreLatestBackup(absPath, ctx) {
-    const { key, keyDir } = backupDirForPath(ctx, absPath);
-    const legacyDir = ctx.backupDir ?? defaultBackupDir();
-    const latestInDir = async (dir) => {
-        const ents = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
-        return ents
-            .filter((e) => e.isFile())
-            .map((e) => e.name)
-            .filter((n) => n.endsWith('.bak'))
-            .sort()
-            .reverse()[0];
-    };
-    let bakDir = keyDir;
-    let bakFile = await latestInDir(keyDir);
-    if (!bakFile) {
-        // Compatibility with older flat backup format (without nested key dir).
-        const ents = await fs.readdir(legacyDir, { withFileTypes: true }).catch(() => []);
-        const legacy = ents
-            .filter((e) => e.isFile())
-            .map((e) => e.name)
-            .filter((n) => n.startsWith(`${key}.`) && !n.endsWith('.json'))
-            .sort()
-            .reverse()[0];
-        if (legacy) {
-            bakFile = legacy;
-            bakDir = legacyDir;
-        }
-    }
-    if (!bakFile) {
-        throw new Error(`undo: no backups found for ${absPath} in ${legacyDir}`);
-    }
-    const bakPath = path.join(bakDir, bakFile);
-    const buf = await fs.readFile(bakPath);
-    // backup current file before restoring
-    await backupFile(absPath, ctx);
-    await atomicWrite(absPath, buf);
-    return `restored ${absPath} from backup ${bakPath}`;
-}
 function stripAnsi(s) {
     // eslint-disable-next-line no-control-regex
     return s
@@ -217,48 +166,6 @@ function truncateBytes(s, maxBytes, totalBytesHint) {
     const cut = b.subarray(0, maxBytes);
     return { text: cut.toString('utf8') + `\n[truncated, ${total} bytes total]`, truncated: true };
 }
-async function rotateBackups(absPath, ctx) {
-    const { keyDir } = backupDirForPath(ctx, absPath);
-    const limit = ctx.maxBackupsPerFile ?? DEFAULT_MAX_BACKUPS_PER_FILE;
-    if (limit <= 0)
-        return;
-    await fs.mkdir(keyDir, { recursive: true });
-    const ents = await fs.readdir(keyDir, { withFileTypes: true }).catch(() => []);
-    const backups = ents
-        .filter((e) => e.isFile())
-        .map((e) => e.name)
-        .filter((n) => n.endsWith('.bak'))
-        .sort(); // oldest → newest due to ISO timestamp
-    const toDelete = backups.length > limit ? backups.slice(0, backups.length - limit) : [];
-    for (const name of toDelete) {
-        const bak = path.join(keyDir, name);
-        const meta = path.join(keyDir, `${name.replace(/\.bak$/, '')}.meta.json`);
-        await fs.rm(bak, { force: true }).catch(() => { });
-        await fs.rm(meta, { force: true }).catch(() => { });
-    }
-}
-async function backupFile(absPath, ctx) {
-    const { bdir, keyDir } = backupDirForPath(ctx, absPath);
-    await fs.mkdir(bdir, { recursive: true });
-    await fs.mkdir(keyDir, { recursive: true });
-    // Auto-create .gitignore in state dir to prevent backups from being committed
-    const gitignorePath = path.join(bdir, '.gitignore');
-    await fs.writeFile(gitignorePath, '*\n', { flag: 'wx' }).catch(() => { });
-    // 'wx' flag = create only if doesn't exist, silently skip if it does
-    const st = await fs.stat(absPath).catch(() => null);
-    if (!st || !st.isFile())
-        return;
-    const content = await fs.readFile(absPath);
-    const hash = crypto.createHash('sha256').update(content).digest('hex');
-    const ts = formatBackupTs();
-    const bakName = `${ts}.bak`;
-    const metaName = `${ts}.meta.json`;
-    const bakPath = path.join(keyDir, bakName);
-    const metaPath = path.join(keyDir, metaName);
-    await fs.writeFile(bakPath, content);
-    await fs.writeFile(metaPath, JSON.stringify({ original_path: absPath, timestamp: ts, size: st.size, sha256_before: hash }, null, 2) + '\n', 'utf8');
-    await rotateBackups(absPath, ctx);
-}
 async function checkpointReplay(ctx, payload) {
     if (!ctx.replay)
         return '';
@@ -279,39 +186,6 @@ async function checkpointReplay(ctx, payload) {
         return ` replay_skipped: ${e?.message ?? String(e)}`;
     }
 }
-export async function atomicWrite(absPath, data) {
-    const dir = path.dirname(absPath);
-    await fs.mkdir(dir, { recursive: true });
-    // Capture original permissions before overwriting
-    const origStat = await fs.stat(absPath).catch(() => null);
-    const origMode = origStat?.mode;
-    const tmp = path.join(dir, `.${path.basename(absPath)}.idlehands.tmp.${process.pid}.${Date.now()}`);
-    await fs.writeFile(tmp, data);
-    // Restore original file mode bits if the file existed
-    if (origMode != null) {
-        await fs.chmod(tmp, origMode & 0o7777).catch(() => { });
-    }
-    await fs.rename(tmp, absPath);
-}
-export async function undo_path(ctx, args) {
-    const directPath = args?.path === undefined ? undefined : String(args.path);
-    const p = directPath ? resolvePath(ctx, directPath) : ctx.lastEditedPath;
-    if (!p)
-        throw new Error('undo: missing path');
-    const absCwd = path.resolve(ctx.cwd);
-    const redactedPath = redactPath(p, absCwd);
-    if (!ctx.noConfirm && ctx.confirm) {
-        const ok = await ctx.confirm(`Restore latest backup for:\n  ${redactedPath}\nThis will overwrite the current file. Proceed? (y/N) `);
-        if (!ok)
-            return 'undo: cancelled';
-    }
-    if (!ctx.noConfirm && !ctx.confirm) {
-        throw new Error('undo: confirmation required (run with --no-confirm/--yolo or in interactive mode)');
-    }
-    if (ctx.dryRun)
-        return `dry-run: would restore latest backup for ${redactedPath}`;
-    return await restoreLatestBackup(p, ctx);
-}
 export async function read_file(ctx, args) {
     const p = resolvePath(ctx, args?.path);
     const absCwd = path.resolve(ctx.cwd);
@@ -686,82 +560,8 @@ export async function edit_file(ctx, args) {
     const readback = mutationReadback(next, editStartLine, editEndLine);
     return `edited ${redactedPath} (replace_all=${replaceAll})${replayNote}${cwdWarning}${readback}`;
 }
-function normalizePatchPath(p) {
-    let s = String(p ?? '').trim();
-    if (!s || s === '/dev/null')
-        return '';
-    // Strip quotes some generators add
-    s = s.replace(/^"|"$/g, '');
-    // Drop common diff prefixes
-    s = s.replace(/^[ab]\//, '').replace(/^\.\/+/, '');
-    // Normalize to posix separators for diffs
-    s = s.replace(/\\/g, '/');
-    const norm = path.posix.normalize(s);
-    if (norm.startsWith('../') || norm === '..' || norm.startsWith('/')) {
-        throw new Error(`apply_patch: unsafe path in patch: ${JSON.stringify(s)}`);
-    }
-    return norm;
-}
-function extractTouchedFilesFromPatch(patchText) {
-    const paths = [];
-    const created = new Set();
-    const deleted = new Set();
-    let pendingOld = null;
-    let pendingNew = null;
-    const seen = new Set();
-    const lines = String(patchText ?? '').split(/\r?\n/);
-    for (const line of lines) {
-        // Primary: git-style header
-        if (line.startsWith('diff --git ')) {
-            const m = /^diff --git\s+a\/(.+?)\s+b\/(.+?)\s*$/.exec(line);
-            if (m) {
-                const aPath = normalizePatchPath(m[1]);
-                const bPath = normalizePatchPath(m[2]);
-                const use = bPath || aPath;
-                if (use && !seen.has(use)) {
-                    seen.add(use);
-                    paths.push(use);
-                }
-            }
-            pendingOld = null;
-            pendingNew = null;
-            continue;
-        }
-        // Fallback: unified diff headers
-        if (line.startsWith('--- ')) {
-            pendingOld = line.slice(4).trim();
-            continue;
-        }
-        if (line.startsWith('+++ ')) {
-            pendingNew = line.slice(4).trim();
-            const oldP = pendingOld ? pendingOld.replace(/^a\//, '').trim() : '';
-            const newP = pendingNew ? pendingNew.replace(/^b\//, '').trim() : '';
-            const oldIsDevNull = oldP === '/dev/null';
-            const newIsDevNull = newP === '/dev/null';
-            if (!newIsDevNull) {
-                const rel = normalizePatchPath(newP);
-                if (rel && !seen.has(rel)) {
-                    seen.add(rel);
-                    paths.push(rel);
-                }
-                if (oldIsDevNull)
-                    created.add(rel);
-            }
-            if (!oldIsDevNull && newIsDevNull) {
-                const rel = normalizePatchPath(oldP);
-                if (rel && !seen.has(rel)) {
-                    seen.add(rel);
-                    paths.push(rel);
-                }
-                deleted.add(rel);
-            }
-            pendingOld = null;
-            pendingNew = null;
-            continue;
-        }
-    }
-    return { paths, created, deleted };
-}
+// Patch parsing helpers imported from tools/patch.ts:
+// PatchTouchInfo, normalizePatchPath, extractTouchedFilesFromPatch
 async function runCommandWithStdin(cmd, cmdArgs, stdinText, cwd, maxOutBytes) {
     return await new Promise((resolve, reject) => {
         const child = spawn(cmd, cmdArgs, { cwd, stdio: ['pipe', 'pipe', 'pipe'] });
@@ -1605,86 +1405,8 @@ export async function vault_search(ctx, args) {
 export async function sys_context(ctx, args) {
     return sysContextTool(ctx, args);
 }
-/**
- * Check if a target path is within a directory.
- * Handles the classic root directory edge case: when dir is `/`, every absolute path is valid.
- */
-function isWithinDir(target, dir) {
-    if (dir === '/')
-        return target.startsWith('/') && !target.includes('..');
-    const rel = path.relative(dir, target);
-    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
-}
-function resolvePath(ctx, p) {
-    if (typeof p !== 'string' || !p.trim())
-        throw new Error('missing path');
-    return path.resolve(ctx.cwd, p);
-}
-/**
- * Redact a path for safe output.
- * - Paths within cwd are shown as relative paths
- * - Paths outside cwd are redacted as [outside-cwd]/basename
- */
-function redactPath(filePath, absCwd) {
-    const resolved = path.resolve(filePath);
-    if (isWithinDir(resolved, absCwd)) {
-        return path.relative(absCwd, resolved);
-    }
-    const basename = path.basename(resolved);
-    return `[outside-cwd]/${basename}`;
-}
-/**
- * Check if a resolved path is outside the working directory.
- * Returns a model-visible warning string if so, empty string otherwise.
- */
-function checkCwdWarning(tool, resolvedPath, ctx) {
-    const absCwd = path.resolve(ctx.cwd);
-    if (isWithinDir(resolvedPath, absCwd))
-        return '';
-    const warning = `\n[WARNING] Path "${resolvedPath}" is OUTSIDE the working directory "${absCwd}". You MUST use relative paths and work within the project directory. Do NOT create or edit files outside the cwd.`;
-    console.warn(`[warning] ${tool}: path "${resolvedPath}" is outside the working directory "${absCwd}".`);
-    return warning;
-}
-/**
- * Hard guard for mutating file tools in normal code mode.
- * In code mode, writing outside cwd is always blocked to prevent accidental edits
- * in the wrong repository. System mode keeps broader path freedom for /etc workflows.
- */
-function enforceMutationWithinCwd(tool, resolvedPath, ctx) {
-    if (ctx.mode === 'sys')
-        return;
-    const absTarget = path.resolve(resolvedPath);
-    const absCwd = path.resolve(ctx.cwd);
-    const roots = (ctx.allowedWriteRoots ?? []).map((r) => path.resolve(r));
-    const allowAny = roots.includes('/');
-    // If session requires explicit /dir pinning, block all mutations until pinned.
-    // Exception: if cwd matches one of the repo candidates, auto-allow.
-    if (ctx.requireDirPinForMutations && !ctx.dirPinned) {
-        const candidates = ctx.repoCandidates ?? [];
-        const cwdMatchesCandidate = candidates.some((c) => {
-            const absCandidate = path.resolve(c);
-            return absCwd === absCandidate || isWithinDir(absCwd, absCandidate);
-        });
-        if (!cwdMatchesCandidate) {
-            const hint = candidates.length ? ` Candidates: ${candidates.slice(0, 8).join(', ')}` : '';
-            throw new Error(`${tool}: BLOCKED — multiple repository candidates detected. Set repo root explicitly with /dir <path> before editing files.${hint}`);
-        }
-    }
-    // Respect allowed roots first.
-    if (roots.length > 0 && !allowAny) {
-        const inAllowed = roots.some((root) => isWithinDir(absTarget, root));
-        if (!inAllowed) {
-            throw new Error(`${tool}: BLOCKED — path "${absTarget}" is outside allowed directories: ${roots.join(', ')}`);
-        }
-    }
-    // If / is explicitly allowed, permit filesystem-wide writes after pin policy above.
-    if (allowAny)
-        return;
-    // In code mode, keep edits scoped to current working directory unless explicitly sys mode.
-    if (!isWithinDir(absTarget, absCwd)) {
-        throw new Error(`${tool}: BLOCKED — path "${absTarget}" is outside the working directory "${absCwd}". Run /dir <project-root> first, then retry with relative paths.`);
-    }
-}
+// Path safety helpers imported from tools/path-safety.ts:
+// isWithinDir, resolvePath, redactPath, checkCwdWarning, enforceMutationWithinCwd
 async function hasRg() {
     const isWin = process.platform === 'win32';
     if (!isWin) {