@voybio/ace-swarm 0.1.0

package/dist/safe-edit.js

@@ -0,0 +1,255 @@
+/**
+ * Safe-edit module: copy → modify → validate → swap pattern.
+ * Prevents bricking by never leaving core files in a broken state.
+ */
+import { copyFileSync, existsSync, mkdirSync, unlinkSync, writeFileSync, } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+import { WORKSPACE_ROOT, safeRead, wsPath } from "./helpers.js";
+import { isInside, isReadError, normalizeRelPath } from "./shared.js";
+const STAGING_DIR = ".ace-staging";
+// ────────────────────────────────────────────────────────────────────
+// Helpers
+// ────────────────────────────────────────────────────────────────────
+function fileHash(content) {
+    return createHash("sha256").update(content).digest("hex").slice(0, 16);
+}
+function ensureDir(dirPath) {
+    if (!existsSync(dirPath))
+        mkdirSync(dirPath, { recursive: true });
+}
+function runValidation(validationCmd, testCmd) {
+    let validation_passed;
+    let validation_output;
+    let test_passed;
+    let test_output;
+    if (validationCmd) {
+        const res = spawnSync("sh", ["-c", validationCmd], {
+            cwd: WORKSPACE_ROOT,
+            encoding: "utf-8",
+            timeout: 60_000,
+            maxBuffer: 4 * 1024 * 1024,
+        });
+        validation_passed = res.status === 0;
+        validation_output = ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 4000);
+    }
+    if (testCmd && (validation_passed === undefined || validation_passed)) {
+        const res = spawnSync("sh", ["-c", testCmd], {
+            cwd: WORKSPACE_ROOT,
+            encoding: "utf-8",
+            timeout: 120_000,
+            maxBuffer: 4 * 1024 * 1024,
+        });
+        test_passed = res.status === 0;
+        test_output = ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 4000);
+    }
+    const passed = (validation_passed ?? true) && (test_passed ?? true);
+    return { passed, validation_passed, validation_output, test_passed, test_output };
+}
+// ────────────────────────────────────────────────────────────────────
+// Safe edit (copy → modify → validate → swap)
+// ────────────────────────────────────────────────────────────────────
+export function safeEditFile(input) {
+    const absPath = resolve(WORKSPACE_ROOT, input.path);
+    // ── Workspace boundary guard ──────────────────────────────────────
+    if (!isInside(WORKSPACE_ROOT, absPath)) {
+        return {
+            ok: false,
+            original_path: absPath,
+            staging_path: "",
+            original_hash: "none",
+            new_hash: "none",
+            error: `Path escapes workspace root: ${input.path}`,
+            restored: false,
+        };
+    }
+    const relPath = normalizeRelPath(input.path);
+    const timestamp = Date.now();
+    const originalContent = safeRead(input.path);
+    const isNew = isReadError(originalContent);
+    const originalHash = isNew ? "none" : fileHash(originalContent);
+    const newHash = fileHash(input.content);
+    // Step 1: Create staging directory
+    const stagingDir = wsPath(STAGING_DIR, `${timestamp}-${isNew ? "new" : originalHash.slice(0, 8)}`);
+    ensureDir(stagingDir);
+    const flatName = relPath.replace(/\//g, "__");
+    const stagingNew = resolve(stagingDir, `new__${flatName}`);
+    writeFileSync(stagingNew, input.content, "utf-8");
+    // Step 2: If file exists, copy original to staging + backup
+    let backupPath;
+    if (!isNew) {
+        const stagingOriginal = resolve(stagingDir, `original__${flatName}`);
+        writeFileSync(stagingOriginal, originalContent, "utf-8");
+        if (input.backup !== false) {
+            backupPath = `${absPath}.ace-backup.${originalHash.slice(0, 8)}`;
+            copyFileSync(absPath, backupPath);
+        }
+    }
+    // Step 3: Write new content
+    ensureDir(dirname(absPath));
+    writeFileSync(absPath, input.content, "utf-8");
+    // Step 4: Run validation/tests
+    if (input.validation_command || input.test_command) {
+        const check = runValidation(input.validation_command, input.test_command);
+        if (!check.passed) {
+            // ROLLBACK: restore original content
+            if (!isNew) {
+                writeFileSync(absPath, originalContent, "utf-8");
+            }
+            else {
+                // Remove newly created file
+                try {
+                    unlinkSync(absPath);
+                }
+                catch {
+                    /* best effort */
+                }
+            }
+            return {
+                ok: false,
+                original_path: absPath,
+                staging_path: stagingDir,
+                backup_path: backupPath,
+                original_hash: originalHash,
+                new_hash: newHash,
+                validation_passed: check.validation_passed,
+                validation_output: check.validation_output,
+                test_passed: check.test_passed,
+                test_output: check.test_output,
+                error: "Validation/test failed — original restored",
+                restored: true,
+            };
+        }
+    }
+    return {
+        ok: true,
+        original_path: absPath,
+        staging_path: stagingDir,
+        backup_path: backupPath,
+        original_hash: originalHash,
+        new_hash: newHash,
+    };
+}
+// ────────────────────────────────────────────────────────────────────
+// Test runner
+// ────────────────────────────────────────────────────────────────────
+function detectTestCommand() {
+    const pkgJson = safeRead("package.json");
+    if (!isReadError(pkgJson)) {
+        try {
+            const pkg = JSON.parse(pkgJson);
+            if (pkg.scripts?.test)
+                return "npm test";
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    const acePkgJson = safeRead("ace-mcp-server/package.json");
+    if (!isReadError(acePkgJson)) {
+        try {
+            const pkg = JSON.parse(acePkgJson);
+            if (pkg.scripts?.test)
+                return "cd ace-mcp-server && npm test";
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    return "echo 'No test command detected' && exit 1";
+}
+export function runTestSuite(command) {
+    const cmd = command ?? detectTestCommand();
+    const start = Date.now();
+    const res = spawnSync("sh", ["-c", cmd], {
+        cwd: WORKSPACE_ROOT,
+        encoding: "utf-8",
+        timeout: 300_000,
+        maxBuffer: 8 * 1024 * 1024,
+    });
+    return {
+        ok: res.status === 0,
+        exit_code: res.status ?? -1,
+        output: ((res.stdout ?? "") + (res.stderr ?? "")).slice(0, 8000),
+        command: cmd,
+        duration_ms: Date.now() - start,
+    };
+}
+// ────────────────────────────────────────────────────────────────────
+// File diff
+// ────────────────────────────────────────────────────────────────────
+export function diffContents(original, updated) {
+    const origLines = original.split(/\r?\n/);
+    const newLines = updated.split(/\r?\n/);
+    // Simple line-based diff summary
+    const origSet = new Set(origLines);
+    const newSet = new Set(newLines);
+    let added = 0;
+    let removed = 0;
+    for (const line of newLines) {
+        if (!origSet.has(line))
+            added++;
+    }
+    for (const line of origLines) {
+        if (!newSet.has(line))
+            removed++;
+    }
+    const summaryLines = [];
+    summaryLines.push(`Lines: ${origLines.length} → ${newLines.length} (${added > 0 ? `+${added}` : "+0"}, ${removed > 0 ? `-${removed}` : "-0"})`);
+    // Show first 30 changed lines for context
+    const changes = [];
+    const maxContext = 30;
+    let shown = 0;
+    for (const line of origLines) {
+        if (!newSet.has(line) && shown < maxContext) {
+            changes.push(`- ${line}`);
+            shown++;
+        }
+    }
+    for (const line of newLines) {
+        if (!origSet.has(line) && shown < maxContext) {
+            changes.push(`+ ${line}`);
+            shown++;
+        }
+    }
+    if (changes.length > 0) {
+        summaryLines.push("", "Changes (sample):", ...changes);
+    }
+    return {
+        has_diff: added > 0 || removed > 0,
+        original_lines: origLines.length,
+        new_lines: newLines.length,
+        added,
+        removed,
+        diff_summary: summaryLines.join("\n"),
+    };
+}
+export function diffFiles(pathA, pathB) {
+    const contentA = safeRead(pathA);
+    const contentB = safeRead(pathB);
+    if (isReadError(contentA)) {
+        return {
+            has_diff: true,
+            original_lines: 0,
+            new_lines: 0,
+            added: 0,
+            removed: 0,
+            diff_summary: "",
+            error: `Cannot read file A: ${contentA}`,
+        };
+    }
+    if (isReadError(contentB)) {
+        return {
+            has_diff: true,
+            original_lines: 0,
+            new_lines: 0,
+            added: 0,
+            removed: 0,
+            diff_summary: "",
+            error: `Cannot read file B: ${contentB}`,
+        };
+    }
+    return diffContents(contentA, contentB);
+}
+//# sourceMappingURL=safe-edit.js.map

package/dist/schemas.d.ts

@@ -0,0 +1,44 @@
+export type ValidationResult = {
+    ok: true;
+    schema: string;
+} | {
+    ok: false;
+    schema: string;
+    errors: string[];
+};
+export type HandoffValidationMode = "auto" | "swarm" | "agent-state";
+/**
+ * Event types that MUST carry provenance fields (autonomy gate – fail-closed).
+ * Exported so status-events.ts can use the same canonical set.
+ */
+export declare const PROVENANCE_CRITICAL_EVENT_TYPES: Set<string>;
+export declare function validateSwarmHandoffPayload(payload: unknown): ValidationResult;
+export declare function validateAgentStateHandoffPayload(payload: unknown): ValidationResult;
+export declare function validateArtifactManifestPayload(payload: unknown): ValidationResult;
+export declare function validateWorkspaceSessionRegistryPayload(payload: unknown): ValidationResult;
+export declare function validateTrackerSnapshotPayload(payload: unknown): ValidationResult;
+export declare function validateRuntimeToolSpecRegistryPayload(payload: unknown): ValidationResult;
+export declare function validateRuntimeExecutorSessionRegistryPayload(payload: unknown): ValidationResult;
+export declare function validateVericifyProcessPostLogPayload(payload: unknown): ValidationResult;
+export declare function validateVericifyBridgeSnapshotPayload(payload: unknown): ValidationResult;
+export declare function validateStatusEventPayload(payload: unknown, options?: {
+    provenanceCritical?: boolean;
+}): ValidationResult;
+export declare function validateStatusEventsNdjsonContent(content: string): ValidationResult;
+export declare function validateTealConfigContent(content: string): ValidationResult;
+export declare function validateProvenanceLogContent(content: string): ValidationResult;
+export declare function validateHandoffPayload(payload: unknown, mode?: HandoffValidationMode): ValidationResult;
+export interface HandoffLintResult {
+    ok: boolean;
+    warnings: string[];
+    errors: string[];
+}
+/**
+ * Deep lint beyond schema validation:
+ *  - Route legitimacy (from/to must be known roles)
+ *  - Evidence freshness (context_pointers must reference existing files)
+ *  - Acceptance criteria must be non-trivial
+ *  - Required evidence array must be non-empty
+ */
+export declare function lintHandoffPayload(payload: unknown, workspaceRoot: string): HandoffLintResult;
+//# sourceMappingURL=schemas.d.ts.map