@wrongstack/tools 0.1.8 → 0.1.10

package/dist/index.js

@@ -1,7 +1,7 @@
 import * as fs4 from 'fs/promises';
 import * as path from 'path';
 import { dirname } from 'path';
-import { atomicWrite, unifiedDiff, detectNewlineStyle, normalizeToLf, toStyle, compileGlob, stripAnsi } from '@wrongstack/core';
+import { atomicWrite, unifiedDiff, detectNewlineStyle, normalizeToLf, toStyle, compileGlob, buildChildEnv, stripAnsi } from '@wrongstack/core';
 import { spawn } from 'child_process';
 import * as os from 'os';
 import * as dns from 'dns/promises';
@@ -79,7 +79,11 @@ var readTool = {
     const allLines = text.split(/\r\n|\r|\n/);
     const total = allLines.length;
     const offset = Math.max(1, input.offset ?? 1);
-    const limit = Math.max(1, Math.min(input.limit ?? 2e3, 5e3));
+    const limit = Math.max(0, Math.min(input.limit ?? 2e3, 5e3));
+    if (limit === 0) {
+      ctx.recordRead(absPath, stat9.mtimeMs);
+      return { text: "", total_lines: total, encoding: "utf8", truncated: total > 0 };
+    }
     const slice = allLines.slice(offset - 1, offset - 1 + limit);
     const truncated = offset - 1 + slice.length < total;
     const width = String(offset + slice.length - 1).length;
@@ -174,9 +178,7 @@ var editTool = {
     });
     if (!stat9.isFile()) throw new Error(`edit: "${input.path}" is not a regular file`);
     if (!ctx.hasRead(absPath)) {
-      throw new Error(
-        `edit: file "${input.path}" was not read in this session. Read it first.`
-      );
+      throw new Error(`edit: file "${input.path}" was not read in this session. Read it first.`);
     }
     const lastReadMtime = ctx.lastReadMtime(absPath);
     const mtimeTolerance = process.platform === "win32" ? 2e3 : 1;
@@ -315,7 +317,10 @@ var replaceTool = {
         description: "File(s) to target: single path, comma-separated list, or glob pattern"
       },
       glob: { type: "string", description: 'Additional glob filter (e.g. "*.ts")' },
-      replace_all: { type: "boolean", description: "Replace all occurrences in each file (default: true)" },
+      replace_all: {
+        type: "boolean",
+        description: "Replace all occurrences in each file (default: true)"
+      },
       dry_run: { type: "boolean", description: "Preview changes without writing" }
     },
     required: ["pattern", "replacement", "files"]
@@ -373,7 +378,10 @@ var replaceTool = {
         const newContent = toStyle(newContentLf, style);
         await atomicWrite(realPath, newContent, { mode: stat9.mode & 511 });
       }
-      const diff = dryRun || matches.length > 0 ? unifiedDiff(content, toStyle(newContentLf, style), { fromFile: absPath, toFile: absPath }) : void 0;
+      const diff = dryRun || matches.length > 0 ? unifiedDiff(content, toStyle(newContentLf, style), {
+        fromFile: absPath,
+        toFile: absPath
+      }) : void 0;
       results.push({
         path: absPath,
         replacements: matches.length,
@@ -457,6 +465,7 @@ async function globNative(pattern, base, extraGlob) {
     for (const e of entries) {
       if (DEFAULT_IGNORE.includes(e.name)) continue;
       const full = path.join(dir, e.name);
+      if (e.isSymbolicLink()) continue;
       if (e.isDirectory()) {
         await walk(full);
       } else if (e.isFile()) {
@@ -793,84 +802,6 @@ async function runNative(input, base, mode, limit, signal) {
   };
 }
 
-// src/_env.ts
-var ALLOWED_KEYS = /* @__PURE__ */ new Set([
-  "PATH",
-  "HOME",
-  "USER",
-  "USERNAME",
-  "LOGNAME",
-  "SHELL",
-  "LANG",
-  "LC_ALL",
-  "LC_CTYPE",
-  "TERM",
-  "TZ",
-  "TMPDIR",
-  "TEMP",
-  "TMP",
-  "PWD",
-  "OLDPWD",
-  "COMSPEC",
-  "SYSTEMROOT",
-  "SYSTEMDRIVE",
-  "WINDIR",
-  "PROGRAMFILES",
-  "PROGRAMFILES(X86)",
-  "PROGRAMDATA",
-  "APPDATA",
-  "LOCALAPPDATA",
-  "USERPROFILE",
-  "PUBLIC",
-  "PATHEXT"
-]);
-var SECRET_NAME_PARTS = [
-  "TOKEN",
-  "SECRET",
-  "PASSWORD",
-  "PASSWD",
-  "AUTH",
-  "CRED",
-  "BEARER",
-  "COOKIE",
-  "PRIVATE"
-];
-function looksSecret(name) {
-  const upper = name.toUpperCase();
-  for (const p of SECRET_NAME_PARTS) {
-    if (upper.includes(p)) return true;
-  }
-  if (/(?:^|_)KEY(?:$|_|S$)/i.test(upper)) return true;
-  if (/API[_-]?KEY/i.test(upper)) return true;
-  if (/ACCESS[_-]?KEY/i.test(upper)) return true;
-  if (/SESSION[_-]?ID/i.test(upper) === false && /SESSION/i.test(upper)) {
-    return true;
-  }
-  return false;
-}
-function buildChildEnv(sessionId) {
-  const passthrough = process.env["WRONGSTACK_BASH_ENV_PASSTHROUGH"] === "1";
-  const out = {};
-  for (const [k, v] of Object.entries(process.env)) {
-    if (v === void 0) continue;
-    if (passthrough) {
-      out[k] = v;
-      continue;
-    }
-    const upper = k.toUpperCase();
-    if (ALLOWED_KEYS.has(upper)) {
-      out[k] = v;
-      continue;
-    }
-    if (looksSecret(upper)) continue;
-    if (upper.startsWith("NODE_") || upper.startsWith("NPM_") || upper.startsWith("PNPM_") || upper.startsWith("YARN_") || upper.startsWith("GIT_") || upper.startsWith("CI") || upper.startsWith("XDG_") || upper === "EDITOR" || upper === "VISUAL" || upper === "PAGER") {
-      out[k] = v;
-    }
-  }
-  if (sessionId) out["WRONGSTACK_SESSION_ID"] = sessionId;
-  return out;
-}
-
 // src/bash.ts
 var MAX_OUTPUT = 32768;
 var DEFAULT_TIMEOUT = 3e4;
@@ -908,7 +839,7 @@ var bashTool = {
   },
   async *executeStream(input, ctx, opts) {
     if (!input?.command) throw new Error("bash: command is required");
-    const timeoutMs = Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT, 6e5);
+    const timeoutMs = Math.max(1, Math.min(input.timeout_ms ?? DEFAULT_TIMEOUT, 6e5));
     const isWin = os.platform() === "win32";
     const shell = isWin ? process.env["COMSPEC"] ?? "cmd.exe" : process.env["SHELL"] ?? "/bin/bash";
     const args = isWin ? ["/c", input.command] : ["-c", input.command];
@@ -1058,7 +989,19 @@ var ALLOWED_COMMANDS = {
   npm: ["--version", "init", "install", "test", "run", "list", "pkg", "doctor"],
   pnpm: ["--version", "init", "install", "add", "remove", "exec", "list", "run", "dlx"],
   npx: ["--version"],
-  git: ["--version", "status", "log", "diff", "branch", "checkout", "stash", "add", "commit", "push", "pull"],
+  git: [
+    "--version",
+    "status",
+    "log",
+    "diff",
+    "branch",
+    "checkout",
+    "stash",
+    "add",
+    "commit",
+    "push",
+    "pull"
+  ],
   ls: ["-la", "-l", "-a"],
   cat: [],
   head: ["-n"],
@@ -1106,7 +1049,16 @@ var execTool = {
   },
   async execute(input, ctx, opts) {
     const cmd = input.command.trim();
-    if (!cmd) return { command: cmd, args: [], stdout: "", stderr: "Empty command", exitCode: 1, truncated: false, allowed: false };
+    if (!cmd)
+      return {
+        command: cmd,
+        args: [],
+        stdout: "",
+        stderr: "Empty command",
+        exitCode: 1,
+        truncated: false,
+        allowed: false
+      };
     if (!(cmd in ALLOWED_COMMANDS)) {
       return {
         command: cmd,
@@ -1119,7 +1071,7 @@ var execTool = {
       };
     }
     const args = (input.args ?? []).slice(0, MAX_ARGS);
-    const timeout = Math.min(input.timeout ?? TIMEOUT_MS, TIMEOUT_MS);
+    const timeout = Math.max(1, Math.min(input.timeout ?? TIMEOUT_MS, TIMEOUT_MS));
     const requestedCwd = input.cwd ? path.resolve(ctx.projectRoot, input.cwd) : ctx.cwd;
     const rel = path.relative(ctx.projectRoot, requestedCwd);
     if (rel.startsWith("..") || path.isAbsolute(rel)) {
@@ -1272,7 +1224,11 @@ var fetchTool = {
       if (/^image\/|^audio\/|^video\/|application\/octet-stream/.test(ct)) {
         throw new Error(`fetch: refusing to read binary content-type "${ct}"`);
       }
-      yield { type: "log", text: `HTTP ${res.status} ${ct}`, data: { status: res.status, contentType: ct } };
+      yield {
+        type: "log",
+        text: `HTTP ${res.status} ${ct}`,
+        data: { status: res.status, contentType: ct }
+      };
       const reader = res.body?.getReader();
       let received = 0;
       const chunks = [];
@@ -1507,7 +1463,11 @@ var searchTool = {
     if (!input?.query) throw new Error("search: query is required");
     const num = Math.max(1, Math.min(input.num_results ?? DEFAULT_NUM, MAX_RESULTS));
     const source = input.source ?? "duckduckgo";
-    yield { type: "log", text: `Querying ${source} for "${input.query}"\u2026`, data: { source, query: input.query } };
+    yield {
+      type: "log",
+      text: `Querying ${source} for "${input.query}"\u2026`,
+      data: { source, query: input.query }
+    };
     let output;
     switch (source) {
       case "duckduckgo":
@@ -1820,11 +1780,7 @@ function buildArgs(input) {
         ...input.format === "short" || !input.format ? [] : []
       ];
     case "diff":
-      return [
-        "diff",
-        "--no-color",
-        ...files.length ? ["--", ...files] : []
-      ];
+      return ["diff", "--no-color", ...files.length ? ["--", ...files] : []];
     case "commit":
       return [
         "commit",
@@ -1835,7 +1791,11 @@ function buildArgs(input) {
     case "branch":
       return input.branch ? ["branch", input.branch] : ["branch"];
     case "checkout":
-      return ["checkout", ...input.branch ? [input.branch] : [], ...files.length ? ["--", ...files] : []];
+      return [
+        "checkout",
+        ...input.branch ? [input.branch] : [],
+        ...files.length ? ["--", ...files] : []
+      ];
     case "stash":
       return input.message ? ["stash", "push", "-m", input.message] : ["stash", "push"];
     case "push":
@@ -1933,13 +1893,7 @@ var patchTool = {
       });
       const patchFile = path.join(tmpDir, "in.diff");
       await fs4.writeFile(patchFile, input.patch, { mode: 384 });
-      const args = [
-        `-p${strip}`,
-        "--merge",
-        ...dryRun ? ["--dry-run"] : [],
-        "-i",
-        patchFile
-      ];
+      const args = [`-p${strip}`, "--merge", ...dryRun ? ["--dry-run"] : [], "-i", patchFile];
       const result = await runPatch(args, dir, opts.signal);
       if (result.exitCode !== 0 && !dryRun) {
         return {
@@ -1983,7 +1937,7 @@ function runPatch(args, cwd, signal) {
   return new Promise((resolve4) => {
     let stdout = "";
     let stderr = "";
-    const env = { ...process.env, LANG: "C", LC_ALL: "C" };
+    const env = { ...buildChildEnv(), LANG: "C", LC_ALL: "C" };
     const child = spawn("patch", args, { cwd, signal, env, stdio: ["pipe", "pipe", "pipe"] });
     child.stdout?.on("data", (c) => {
       stdout += c.toString();
@@ -2015,7 +1969,10 @@ var jsonTool = {
     properties: {
       file: { type: "string", description: "Path to JSON/JSON5/YAML file" },
       data: { type: "string", description: "JSON/JSON5/YAML string (alternative to file)" },
-      query: { type: "string", description: 'JMESPath-like query (e.g. "a.b[0].c" or "a[*].name")' },
+      query: {
+        type: "string",
+        description: 'JMESPath-like query (e.g. "a.b[0].c" or "a[*].name")'
+      },
       format: {
         type: "string",
         enum: ["json", "json5", "yaml"],
@@ -2208,7 +2165,12 @@ async function fileDiff(input, ctx, signal) {
   input.context ?? 3;
   const files = input.files ? (Array.isArray(input.files) ? input.files : input.files.split(",")).map((f) => f.trim()).filter(Boolean) : [];
   if (files.length === 0) {
-    return { diff: "No files specified", files: [], truncated: false, mode: input.mode ?? "unified" };
+    return {
+      diff: "No files specified",
+      files: [],
+      truncated: false,
+      mode: input.mode ?? "unified"
+    };
   }
   const results = [];
   for (const file of files) {
@@ -2231,7 +2193,15 @@ ${formatUnified(lines)}`);
 function formatUnified(lines, context) {
   return lines.map((line, i) => ` ${line}`).join("\n");
 }
-var DEFAULT_IGNORE4 = ["node_modules", ".git", "dist", "build", ".next", "coverage", "__pycache__"];
+var DEFAULT_IGNORE4 = [
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  ".next",
+  "coverage",
+  "__pycache__"
+];
 var treeTool = {
   name: "tree",
   description: "Display directory structure as an ASCII tree. Shows files and folders with indentation.",
@@ -2396,6 +2366,7 @@ async function* spawnStream(opts) {
   const child = spawn(opts.cmd, opts.args, {
     cwd: opts.cwd,
     signal: opts.signal,
+    env: buildChildEnv(),
     stdio: ["ignore", "pipe", "pipe"]
   });
   const queue = [];
@@ -2607,7 +2578,11 @@ var formatTool = {
       };
       return;
     }
-    yield { type: "log", text: `Running ${detected}\u2026`, data: { fixer: detected, check: !!input.check } };
+    yield {
+      type: "log",
+      text: `Running ${detected}\u2026`,
+      data: { fixer: detected, check: !!input.check }
+    };
     const args = ["format", "--write"];
     if (input.check) args[args.length - 1] = "--check";
     if (input.files) {
@@ -2894,7 +2869,10 @@ var installTool = {
         description: "Save as regular, dev, or optional dependency"
       },
       cwd: { type: "string", description: "Working directory (default: cwd)" },
-      dry_run: { type: "boolean", description: "Preview install without modifying (default: false)" },
+      dry_run: {
+        type: "boolean",
+        description: "Preview install without modifying (default: false)"
+      },
       global: { type: "boolean", description: "Install globally (default: false)" }
     }
   },
@@ -2922,9 +2900,15 @@ var installTool = {
     } else {
       args.push("install", ...globalFlag);
     }
-    const pkgList = input.packages ? (Array.isArray(input.packages) ? input.packages : input.packages.split(",")).map((p) => p.trim()) : [];
+    const pkgList = input.packages ? (Array.isArray(input.packages) ? input.packages : input.packages.split(",")).map(
+      (p) => p.trim()
+    ) : [];
     if (pkgList.length > 0) args.push(...pkgList);
-    yield { type: "log", text: `Fetching ${pkgList.length || "all"} packages\u2026`, data: { phase: "fetch" } };
+    yield {
+      type: "log",
+      text: `Fetching ${pkgList.length || "all"} packages\u2026`,
+      data: { phase: "fetch" }
+    };
     const result = yield* spawnStream({
       cmd: pkgManager,
       args,
@@ -3132,13 +3116,16 @@ function runOutdated(manager, args, cwd, signal) {
       const result = parseOutdatedOutput(stdout, code ?? 0);
       resolve4(result);
     });
-    child.on("error", (e) => resolve4({
-      exit_code: 1,
-      packages: [],
-      total: 0,
-      output: e.message,
-      truncated: false
-    }));
+    child.on(
+      "error",
+      (e) => resolve4({
+        exit_code: 1,
+        packages: [],
+        total: 0,
+        output: e.message,
+        truncated: false
+      })
+    );
   });
 }
 function parseOutdatedOutput(json, exitCode) {
@@ -3267,13 +3254,16 @@ async function dockerLogs(service, lines, filterRe, cwd, signal, since) {
         stream_mode: false
       });
     });
-    child.on("error", (e) => resolve4({
-      source: `docker:${service}`,
-      entries: [],
-      total: 0,
-      truncated: false,
-      stream_mode: false
-    }));
+    child.on(
+      "error",
+      (e) => resolve4({
+        source: `docker:${service}`,
+        entries: [],
+        total: 0,
+        truncated: false,
+        stream_mode: false
+      })
+    );
   });
 }
 var MAX_TAIL_LINES = 1e5;
@@ -3395,7 +3385,13 @@ var documentTool = {
       try {
         const content = await fs4.readFile(absPath, "utf8");
         filesProcessed++;
-        const processed = processFile(content, absPath, style, input.overwrite ?? false, input.target ?? "all");
+        const processed = processFile(
+          content,
+          absPath,
+          style,
+          input.overwrite ?? false,
+          input.target ?? "all"
+        );
         results.push(...processed);
         itemsDocumented += processed.filter((r) => r.status === "documented").length;
       } catch (e) {
@@ -3441,23 +3437,43 @@ function processFile(content, absPath, style, overwrite, target) {
   if (target === "all" || target === "function") {
     for (const m of content.matchAll(functionRegex)) {
       if (!m[1]) continue;
-      allMatches.push({ name: m[1], sig: m[2] ?? "", type: "function", line: content.slice(0, m.index).split("\n").length });
+      allMatches.push({
+        name: m[1],
+        sig: m[2] ?? "",
+        type: "function",
+        line: content.slice(0, m.index).split("\n").length
+      });
     }
     for (const m of content.matchAll(arrowRegex)) {
       if (!m[1]) continue;
-      allMatches.push({ name: m[1], sig: m[2] ?? "", type: "arrow", line: content.slice(0, m.index).split("\n").length });
+      allMatches.push({
+        name: m[1],
+        sig: m[2] ?? "",
+        type: "arrow",
+        line: content.slice(0, m.index).split("\n").length
+      });
     }
   }
   if (target === "all" || target === "class") {
     for (const m of content.matchAll(classRegex)) {
       if (!m[1]) continue;
-      allMatches.push({ name: m[1], sig: "", type: "class", line: content.slice(0, m.index).split("\n").length });
+      allMatches.push({
+        name: m[1],
+        sig: "",
+        type: "class",
+        line: content.slice(0, m.index).split("\n").length
+      });
     }
   }
   if (target === "all" || target === "type") {
     for (const m of content.matchAll(typeRegex)) {
       if (!m[1]) continue;
-      allMatches.push({ name: m[1], sig: m[0] ?? "", type: "type", line: content.slice(0, m.index).split("\n").length });
+      allMatches.push({
+        name: m[1],
+        sig: m[0] ?? "",
+        type: "type",
+        line: content.slice(0, m.index).split("\n").length
+      });
     }
   }
   for (const m of allMatches) {
@@ -3475,18 +3491,26 @@ var BUILT_IN_TEMPLATES = {
   "npm-package": {
     description: "Basic npm package with ESM",
     files: {
-      "package.json": JSON.stringify({
-        name: "{{name}}",
-        version: "0.1.1",
-        type: "module",
-        main: "./dist/index.js",
-        scripts: { build: "tsc", test: "vitest run" },
-        devDependencies: { typescript: "^5.0.0" }
-      }, null, 2),
-      "tsconfig.json": JSON.stringify({
-        compilerOptions: { target: "ES2022", module: "ESNext", strict: true },
-        include: ["src"]
-      }, null, 2),
+      "package.json": JSON.stringify(
+        {
+          name: "{{name}}",
+          version: "0.1.1",
+          type: "module",
+          main: "./dist/index.js",
+          scripts: { build: "tsc", test: "vitest run" },
+          devDependencies: { typescript: "^5.0.0" }
+        },
+        null,
+        2
+      ),
+      "tsconfig.json": JSON.stringify(
+        {
+          compilerOptions: { target: "ES2022", module: "ESNext", strict: true },
+          include: ["src"]
+        },
+        null,
+        2
+      ),
       "src/index.ts": `export function hello() {
   return 'Hello from {{name}}';
 }
@@ -3505,13 +3529,17 @@ describe('hello', () => {
   "cli-tool": {
     description: "CLI tool with argparse",
     files: {
-      "package.json": JSON.stringify({
-        name: "{{name}}",
-        version: "0.1.1",
-        type: "module",
-        bin: { "{{name}}": "./src/index.js" },
-        scripts: { build: "tsc", start: "node dist/index.js" }
-      }, null, 2),
+      "package.json": JSON.stringify(
+        {
+          name: "{{name}}",
+          version: "0.1.1",
+          type: "module",
+          bin: { "{{name}}": "./src/index.js" },
+          scripts: { build: "tsc", start: "node dist/index.js" }
+        },
+        null,
+        2
+      ),
       "src/index.ts": `#!/usr/bin/env node
 
 async function main() {
@@ -3624,7 +3652,10 @@ async function handleBuiltIn(name, templateFiles, cwd, dryRun, vars) {
 function substituteVars(content, name, vars) {
   let result = content;
   result = result.replace(/\{\{name\}\}/g, name.toLowerCase().replace(/\s+/g, "-"));
-  result = result.replace(/\{\{Name\}\}/g, name.replace(/(?:^|[-_\s]+)([a-z])/g, (_, c) => c.toUpperCase()));
+  result = result.replace(
+    /\{\{Name\}\}/g,
+    name.replace(/(?:^|[-_\s]+)([a-z])/g, (_, c) => c.toUpperCase())
+  );
   for (const [k, v] of Object.entries(vars)) {
     result = result.replace(new RegExp(`\\{\\{${k}\\}\\}`, "g"), v);
   }
@@ -3911,14 +3942,16 @@ var toolHelpTool = {
       return {
         tool: tool.name,
         help: formatToolHelp(tool, format, includeExamples),
-        tools: [{
-          name: tool.name,
-          description: tool.description,
-          usageHint: tool.usageHint ?? "",
-          inputSchema: tool.inputSchema,
-          permission: tool.permission,
-          mutating: tool.mutating
-        }],
+        tools: [
+          {
+            name: tool.name,
+            description: tool.description,
+            usageHint: tool.usageHint ?? "",
+            inputSchema: tool.inputSchema,
+            permission: tool.permission,
+            mutating: tool.mutating
+          }
+        ],
         total: 1
       };
     }
@@ -4110,7 +4143,11 @@ ${mode.description}`
           };
         }
         default:
-          return { action: input.action, success: false, message: `Unknown action "${input.action}"` };
+          return {
+            action: input.action,
+            success: false,
+            message: `Unknown action "${input.action}"`
+          };
       }
     }
   };