@wrongstack/tools 0.310.1 → 0.313.1

package/dist/chunk-2TFQDEPU.js

@@ -0,0 +1,113 @@
+// src/_output-spool.ts
+import { createWriteStream, mkdirSync } from "node:fs";
+import * as fsp from "node:fs/promises";
+import * as path from "node:path";
+import { wstackGlobalRoot } from "@wrongstack/core/utils";
+var SPOOL_RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
+var SPOOL_WRITE_HWM_BYTES = 4 * 1024 * 1024;
+var sweepStarted = false;
+function toolOutputDir() {
+  return path.join(wstackGlobalRoot(), "tool-output");
+}
+function sweepOldSpoolFiles(dir) {
+  if (sweepStarted) return;
+  sweepStarted = true;
+  void (async () => {
+    try {
+      const now = Date.now();
+      for (const name of await fsp.readdir(dir)) {
+        if (!name.endsWith(".log")) continue;
+        const p = path.join(dir, name);
+        try {
+          const st = await fsp.stat(p);
+          if (now - st.mtimeMs > SPOOL_RETENTION_MS) await fsp.unlink(p);
+        } catch {
+        }
+      }
+    } catch {
+    }
+  })();
+}
+function spoolNote(info) {
+  const dropped = info.droppedBytes > 0 ? `, ~${info.droppedBytes} bytes dropped under backpressure` : "";
+  return `
+[output truncated \u2014 full ${info.bytes} bytes at ${info.path}${dropped}; read/grep that file selectively instead of re-running with more output]`;
+}
+function createOutputSpool(opts) {
+  const threshold = opts.thresholdBytes ?? 32768;
+  const safeTool = opts.tool.replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 40) || "tool";
+  let head = "";
+  let headBytes = 0;
+  let totalBytes = 0;
+  let droppedBytes = 0;
+  let stream = null;
+  let filePath = null;
+  let failed = false;
+  let finalized = false;
+  const open = () => {
+    if (stream || failed) return;
+    try {
+      const dir = toolOutputDir();
+      mkdirSync(dir, { recursive: true });
+      sweepOldSpoolFiles(dir);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const rand = Math.random().toString(36).slice(2, 6);
+      filePath = path.join(dir, `${stamp}-${safeTool}-${rand}.log`);
+      stream = createWriteStream(filePath, { flags: "w", encoding: "utf8" });
+      stream.on("error", () => {
+        failed = true;
+        stream = null;
+        filePath = null;
+      });
+      stream.write(head);
+    } catch {
+      failed = true;
+      stream = null;
+      filePath = null;
+    }
+  };
+  return {
+    write(text) {
+      if (finalized || !text) return;
+      const textBytes = Buffer.byteLength(text, "utf8");
+      totalBytes += textBytes;
+      if (!stream && !failed) {
+        if (headBytes + textBytes <= threshold) {
+          head += text;
+          headBytes += textBytes;
+          return;
+        }
+        head += text;
+        open();
+        head = "";
+        return;
+      }
+      if (stream) {
+        if (stream.writableLength > SPOOL_WRITE_HWM_BYTES) {
+          droppedBytes += textBytes;
+          return;
+        }
+        stream.write(text);
+      }
+    },
+    finalize() {
+      if (finalized) {
+        return filePath ? { path: filePath, bytes: totalBytes, droppedBytes } : null;
+      }
+      finalized = true;
+      head = "";
+      if (!stream || !filePath) return null;
+      try {
+        stream.end();
+      } catch {
+      }
+      return { path: filePath, bytes: totalBytes, droppedBytes };
+    }
+  };
+}
+
+export {
+  spoolNote,
+  createOutputSpool
+};
+//# sourceMappingURL=chunk-2TFQDEPU.js.map

package/dist/chunk-2ZCJNKFE.js

@@ -0,0 +1,315 @@
+import {
+  enqueueReindex
+} from "./chunk-2ME7ZWDD.js";
+import {
+  resolveRealInsideRoot,
+  safeResolveReal,
+  sha256hex
+} from "./chunk-D33S4RQG.js";
+
+// src/patch.ts
+import { spawn } from "node:child_process";
+import * as fs from "node:fs/promises";
+import * as os from "node:os";
+import * as path from "node:path";
+import { buildChildEnv, toErrorMessage } from "@wrongstack/core/utils";
+var patchTool = {
+  name: "patch",
+  category: "Filesystem",
+  description: "Apply a unified diff (patch) to the project. This is the correct tool when you have a diff that needs to be applied precisely, including handling of rejects.",
+  usageHint: "Best used when you already have a diff (from generation, external source, or previous step).\n- Use `dry_run: true` to see what would happen without modifying files.\n- Applied with `--merge`: a conflicting hunk writes git-style conflict\n  markers (<<<<<<< / ======= / >>>>>>>) INTO the file and reports failure.\n  It does NOT create .rej/.orig files. `files` lists what changed on disk\n  even when the patch failed, so read those back before retrying.\nOften cleaner than many small `edit` operations for larger changes.",
+  selection: {
+    doNotUseWhen: "you do not already have a unified diff or only need one precise replacement.",
+    useInstead: ["edit"]
+  },
+  permission: "confirm",
+  // WS-046: gives permission decisions something to key on.
+  // The target directory. The patch body itself is unstable (every diff
+  // differs), so it could never re-match its own stored rule.
+  subjectKey: "directory",
+  mutating: true,
+  capabilities: ["fs.write"],
+  icon: "edit",
+  timeoutMs: 3e4,
+  inputSchema: {
+    type: "object",
+    properties: {
+      patch: { type: "string", description: "Unified diff patch content" },
+      directory: { type: "string", description: "Root directory for patch (default: cwd)" },
+      strip: { type: "integer", description: "Strip leading path components (default: 1)" },
+      dry_run: { type: "boolean", description: "Preview without applying" }
+    },
+    required: ["patch"]
+  },
+  async execute(input, ctx, opts) {
+    if (!input?.patch) throw new Error("patch: patch content is required");
+    const strip = Math.max(1, input.strip ?? 1);
+    const dryRun = input.dry_run ?? false;
+    const refuse = (message) => ({
+      applied: 0,
+      rejected: 1,
+      files: [],
+      dry_run: dryRun,
+      message
+    });
+    let dir;
+    try {
+      dir = input.directory ? await safeResolveReal(input.directory, ctx) : ctx.cwd;
+    } catch (err) {
+      return refuse(`patch refused: ${toErrorMessage(err)}`);
+    }
+    const realRoot = await fs.realpath(ctx.projectRoot).catch(() => path.resolve(ctx.projectRoot));
+    const targets = extractDiffTargets(input.patch);
+    const resolvedTargets = [];
+    for (const t of targets) {
+      const stripped = stripPathComponents(t.raw, strip);
+      if (!stripped) continue;
+      if (path.isAbsolute(stripped)) {
+        return refuse(`patch refused: target "${t.raw}" strips to absolute path`);
+      }
+      const candidate = path.resolve(dir, stripped);
+      let real;
+      try {
+        real = await resolveRealInsideRoot(candidate, ctx);
+      } catch (err) {
+        return refuse(`patch refused: target "${t.raw}" ${toErrorMessage(err)}`);
+      }
+      const rel = path.relative(realRoot, real);
+      if (rel.startsWith("..") || path.isAbsolute(rel)) {
+        return refuse(`patch refused: target "${t.raw}" resolves outside project root`);
+      }
+      resolvedTargets.push({ raw: t.raw, deleted: t.deleted, abs: real });
+    }
+    const beforeContents = /* @__PURE__ */ new Map();
+    const beforeExisted = /* @__PURE__ */ new Set();
+    if (!dryRun) {
+      for (const target of resolvedTargets) {
+        const existed = (await fs.stat(target.abs).catch(() => null))?.isFile() ?? false;
+        if (existed) beforeExisted.add(target.abs);
+        beforeContents.set(target.abs, await readTextForTracking(target.abs));
+      }
+    }
+    const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), ".wstack_patch_"));
+    try {
+      await fs.chmod(tmpDir, 448).catch(() => {
+      });
+      const patchFile = path.join(tmpDir, "in.diff");
+      await fs.writeFile(patchFile, input.patch, { mode: 384 });
+      const args = [`-p${strip}`, "--merge", ...dryRun ? ["--dry-run"] : [], "-i", patchFile];
+      const result = await runPatch(args, dir, opts.signal, {
+        patchFile,
+        strip,
+        dryRun
+      });
+      const touched = [];
+      if (!dryRun) {
+        for (const target of resolvedTargets) {
+          const abs = target.abs;
+          const before = beforeContents.get(abs) ?? null;
+          const stat2 = await fs.stat(abs).catch(() => null);
+          if (!stat2?.isFile()) {
+            if (beforeExisted.has(abs)) {
+              touched.push(abs);
+              ctx.session?.recordFileChange?.({
+                path: abs,
+                action: "deleted",
+                before,
+                after: null
+              });
+            }
+            continue;
+          }
+          const after = await readTextForTracking(abs);
+          if (after === null || after === before) continue;
+          touched.push(abs);
+          ctx.recordRead?.(abs, stat2.mtimeMs, "write", sha256hex(after));
+          ctx.session?.recordFileChange?.({
+            path: abs,
+            action: before === null ? "created" : "modified",
+            before,
+            after
+          });
+        }
+        if (touched.length > 0) {
+          try {
+            enqueueReindex({ projectRoot: ctx.projectRoot, files: touched });
+          } catch {
+          }
+        }
+      }
+      if (result.exitCode !== 0) {
+        if (!dryRun) {
+          const partial = touched.length > 0 ? ` ${touched.length} file(s) were still modified on disk and have been recorded for rewind: ${touched.map((p) => path.relative(realRoot, p) || p).join(", ")}.` : "";
+          return {
+            applied: touched.length,
+            rejected: 1,
+            // Normalize to relative-to-realRoot for API consistency with the
+            // success path (which returns GNU patch's dir-relative names).
+            // `touched` entries are realpaths from resolveRealInsideRoot, and
+            // realRoot is also a realpath, so path.relative is like-for-like.
+            files: touched.map((p) => path.relative(realRoot, p) || p),
+            dry_run: dryRun,
+            message: `patch failed: ${result.stderr || result.stdout}${partial}`
+          };
+        }
+        const wouldPatch = extractPatchedFiles(result.stdout);
+        return {
+          applied: wouldPatch.length,
+          rejected: 1,
+          files: wouldPatch,
+          dry_run: dryRun,
+          message: `patch preview: would conflict \u2014 ${result.stderr || result.stdout}`
+        };
+      }
+      const patched = result.engine === "git" ? [
+        ...new Set(
+          resolvedTargets.map((target) => path.relative(dir, target.abs) || target.abs)
+        )
+      ] : extractPatchedFiles(result.stdout);
+      return {
+        applied: patched.length,
+        rejected: 0,
+        files: patched,
+        dry_run: dryRun,
+        message: result.stdout || "patch applied"
+      };
+    } finally {
+      await fs.rm(tmpDir, { recursive: true, force: true }).catch(() => {
+      });
+    }
+  }
+};
+var MAX_TRACKING_BYTES = 5 * 1024 * 1024;
+async function readTextForTracking(absPath) {
+  try {
+    const stat2 = await fs.stat(absPath);
+    if (!stat2.isFile() || stat2.size > MAX_TRACKING_BYTES) return null;
+    const buf = await fs.readFile(absPath);
+    if (buf.includes(0)) return null;
+    return buf.toString("utf8");
+  } catch {
+    return null;
+  }
+}
+function extractDiffTargets(patch) {
+  const out = [];
+  const clean = (raw) => {
+    if (!raw) return "";
+    return (raw.length > 4096 ? raw.slice(0, 4096) : raw).trim();
+  };
+  let lastOld;
+  let inHunk = false;
+  let oldLinesLeft = 0;
+  let newLinesLeft = 0;
+  for (const line of patch.split(/\r?\n/)) {
+    const hunkMatch = /^@@ -\d+(?:,(\d+))? \+\d+(?:,(\d+))? @@/.exec(line);
+    if (hunkMatch) {
+      inHunk = true;
+      oldLinesLeft = hunkMatch[1] ? Number(hunkMatch[1]) : 1;
+      newLinesLeft = hunkMatch[2] ? Number(hunkMatch[2]) : 1;
+      lastOld = void 0;
+      continue;
+    }
+    if (inHunk) {
+      const ch = line[0];
+      if (ch === "-") oldLinesLeft--;
+      else if (ch === "+") newLinesLeft--;
+      else if (ch === " " || ch === void 0) {
+        oldLinesLeft--;
+        newLinesLeft--;
+      }
+      if (oldLinesLeft <= 0 && newLinesLeft <= 0) inHunk = false;
+      continue;
+    }
+    const oldMatch = /^---\s+([^\t\r\n]+)/.exec(line);
+    if (oldMatch) {
+      lastOld = clean(oldMatch[1]);
+      continue;
+    }
+    const newMatch = /^\+\+\+\s+([^\t\r\n]+)/.exec(line);
+    if (!newMatch) continue;
+    const newTarget = clean(newMatch[1]);
+    if (newTarget && newTarget !== "/dev/null") {
+      out.push({ raw: newTarget, deleted: false });
+    } else if (lastOld && lastOld !== "/dev/null") {
+      out.push({ raw: lastOld, deleted: true });
+    }
+    lastOld = void 0;
+  }
+  return out;
+}
+function stripPathComponents(p, strip) {
+  const s = p.replace(/\\/g, "/");
+  let idx = 0;
+  for (let i = 0; i < strip; i++) {
+    while (idx < s.length && s[idx] !== "/") idx++;
+    let hadSlash = false;
+    while (idx < s.length && s[idx] === "/") {
+      idx++;
+      hadSlash = true;
+    }
+    if (!hadSlash) return void 0;
+  }
+  return s.slice(idx) || void 0;
+}
+function runPatch(args, cwd, signal, fallback) {
+  return runPatchProcess("patch", args, cwd, signal).then(async (result) => {
+    if (!result.unavailable) return { ...result, engine: "patch" };
+    const gitArgs = [
+      "apply",
+      "--unsafe-paths",
+      `-p${fallback.strip}`,
+      "--verbose",
+      ...fallback.dryRun ? ["--check"] : [],
+      fallback.patchFile
+    ];
+    const gitResult = await runPatchProcess("git", gitArgs, cwd, signal);
+    return { ...gitResult, engine: "git" };
+  });
+}
+function runPatchProcess(command, args, cwd, signal) {
+  return new Promise((resolve2) => {
+    let stdout = "";
+    let stderr = "";
+    const env = { ...buildChildEnv(), LANG: "C", LC_ALL: "C" };
+    const child = spawn(command, args, {
+      cwd,
+      signal,
+      env,
+      stdio: ["pipe", "pipe", "pipe"],
+      windowsHide: true
+    });
+    child.stdout?.on("data", (c) => {
+      stdout += c.toString();
+    });
+    child.stderr?.on("data", (c) => {
+      stderr += c.toString();
+    });
+    child.on(
+      "close",
+      (code) => resolve2({ exitCode: code ?? 1, stdout, stderr, unavailable: false })
+    );
+    child.on(
+      "error",
+      (e) => resolve2({
+        exitCode: 1,
+        stdout: "",
+        stderr: e.message,
+        unavailable: e.code === "ENOENT"
+      })
+    );
+  });
+}
+function extractPatchedFiles(output) {
+  const files = [];
+  const re = /(?:patching|checking) file (.+)/gi;
+  for (const m of output.matchAll(re)) {
+    if (m[1]) files.push(m[1]);
+  }
+  return files;
+}
+
+export {
+  patchTool
+};
+//# sourceMappingURL=chunk-2ZCJNKFE.js.map