aiwcli 0.10.3 → 0.11.1

package/dist/templates/_shared/lib/base/atomic_write.py

@@ -1,180 +0,0 @@
-"""Cross-platform atomic file writes with security.
-
-Provides crash-safe file writes by writing to a temp file first,
-then atomically replacing the target. This prevents corrupted files
-if the process crashes mid-write.
-
-Note: This is for crash-safety, NOT for concurrent access.
-The shared context system assumes single-session-per-context.
-"""
-import os
-import sys
-import tempfile
-import time
-from pathlib import Path
-from typing import Optional, Tuple
-
-if sys.platform == 'win32':
-    import ctypes
-    from ctypes import wintypes
-
-    # Windows MoveFileEx flags
-    MOVEFILE_REPLACE_EXISTING = 0x1
-    MOVEFILE_WRITE_THROUGH = 0x8
-
-    def _atomic_replace_windows(src: Path, dst: Path) -> None:
-        """Atomic file replacement on Windows using MoveFileEx."""
-        kernel32 = ctypes.windll.kernel32
-
-        # Set proper function prototypes for 64-bit safety
-        kernel32.MoveFileExW.argtypes = [wintypes.LPCWSTR, wintypes.LPCWSTR, wintypes.DWORD]
-        kernel32.MoveFileExW.restype = wintypes.BOOL
-
-        result = kernel32.MoveFileExW(
-            str(src),
-            str(dst),
-            MOVEFILE_REPLACE_EXISTING | MOVEFILE_WRITE_THROUGH
-        )
-        if not result:
-            error_code = kernel32.GetLastError()
-            raise ctypes.WinError(error_code)
-
-
-def atomic_write(
-    path: Path,
-    content: str,
-    max_attempts: int = 2,
-    backoff_ms: Optional[list] = None
-) -> Tuple[bool, Optional[str]]:
-    """
-    Write file atomically with retry logic.
-
-    Creates a temp file in the same directory, writes content,
-    then atomically replaces the target file. This ensures the
-    file is never left in a corrupted state.
-
-    Args:
-        path: Target file path
-        content: Content to write
-        max_attempts: Maximum retry attempts (default: 2)
-        backoff_ms: Retry backoff in milliseconds (default: [500, 1000])
-
-    Returns:
-        Tuple of (success: bool, error_message: Optional[str])
-    """
-    if backoff_ms is None:
-        backoff_ms = [500, 1000]
-
-    # Ensure parent directory exists
-    path.parent.mkdir(parents=True, exist_ok=True)
-
-    for attempt in range(max_attempts):
-        try:
-            # Create temp file in same directory for atomic rename
-            temp_fd, temp_path_str = tempfile.mkstemp(
-                dir=path.parent,
-                prefix=f".{path.stem}_",
-                suffix=".tmp"
-            )
-            temp_path = Path(temp_path_str)
-
-            try:
-                # Write content to temp file
-                with os.fdopen(temp_fd, 'w', encoding='utf-8') as f:
-                    f.write(content)
-                    f.flush()
-                    os.fsync(f.fileno())  # Force write to disk
-
-                # Set restrictive permissions before rename (chmod 600)
-                try:
-                    os.chmod(temp_path, 0o600)
-                except OSError:
-                    pass  # chmod may fail on some filesystems
-
-                # Platform-specific atomic rename
-                if sys.platform == 'win32':
-                    _atomic_replace_windows(temp_path, path)
-                else:
-                    temp_path.replace(path)  # POSIX atomic
-
-                return (True, None)
-
-            except Exception:
-                # Clean up temp file on failure
-                try:
-                    temp_path.unlink()
-                except Exception:
-                    pass  # Cleanup is best-effort
-                raise
-
-        except Exception as e:
-            if attempt < max_attempts - 1:
-                # Bounds-safe backoff indexing
-                wait_ms = backoff_ms[min(attempt, len(backoff_ms) - 1)]
-                time.sleep(wait_ms / 1000.0)
-            else:
-                # Sanitize error message (no paths, no stack trace)
-                error_type = type(e).__name__
-                error_msg = str(e).split('\n')[0][:200]  # First line only, max 200 chars
-                return (False, f"{error_type}: {error_msg}")
-
-    return (False, "Max retry attempts exceeded")
-
-
-def atomic_append(
-    path: Path,
-    content: str,
-    max_attempts: int = 2,
-    backoff_ms: Optional[list] = None
-) -> Tuple[bool, Optional[str]]:
-    """
-    Append to file atomically with retry logic.
-
-    For JSONL files, this is safe because each line is independent.
-    If process crashes mid-append, only the last partial line is lost,
-    which read_events() handles gracefully.
-
-    Args:
-        path: Target file path
-        content: Content to append (should include newline if needed)
-        max_attempts: Maximum retry attempts (default: 2)
-        backoff_ms: Retry backoff in milliseconds (default: [500, 1000])
-
-    Returns:
-        Tuple of (success: bool, error_message: Optional[str])
-    """
-    if backoff_ms is None:
-        backoff_ms = [500, 1000]
-
-    # Ensure parent directory exists
-    path.parent.mkdir(parents=True, exist_ok=True)
-
-    # Check if file is being created (for permission setting)
-    is_new_file = not path.exists()
-
-    for attempt in range(max_attempts):
-        try:
-            with open(path, 'a', encoding='utf-8') as f:
-                f.write(content)
-                f.flush()
-                os.fsync(f.fileno())  # Force write to disk
-
-            # Set restrictive permissions on newly created files (chmod 600)
-            if is_new_file:
-                try:
-                    os.chmod(path, 0o600)
-                except OSError:
-                    pass  # chmod may fail on some filesystems
-
-            return (True, None)
-
-        except Exception as e:
-            if attempt < max_attempts - 1:
-                wait_ms = backoff_ms[min(attempt, len(backoff_ms) - 1)]
-                time.sleep(wait_ms / 1000.0)
-            else:
-                error_type = type(e).__name__
-                error_msg = str(e).split('\n')[0][:200]
-                return (False, f"{error_type}: {error_msg}")
-
-    return (False, "Max retry attempts exceeded")

package/dist/templates/_shared/lib/base/constants.py

@@ -1,358 +0,0 @@
-"""Constants and path utilities for shared context management.
-
-Data hierarchy:
-  events.jsonl (source of truth)
-    → context.json (L1 cache)
-      → index.json (L2 cache)
-
-All data written to _output/contexts/ (method-agnostic).
-No method subfolders - method is just metadata on the context.
-"""
-import os
-import re
-from pathlib import Path
-
-# Directory names (relative to project root)
-OUTPUT_DIR = "_output"
-CONTEXTS_DIR = "contexts"
-ARCHIVE_DIR = "_archive"
-INDEX_FILENAME = "index.json"
-
-# Context ID validation
-MAX_CONTEXT_ID_LENGTH = 64
-VALID_CONTEXT_ID_PATTERN = re.compile(r'^[a-z0-9][a-z0-9_-]*[a-z0-9]$|^[a-z0-9]$')
-
-# File size limits
-MAX_EVENT_SIZE = 64 * 1024  # 64KB per event (reasonable limit)
-MAX_INDEX_SIZE = 1024 * 1024  # 1MB for index.json
-
-# Performance constants
-MAX_RETRY_ATTEMPTS = 2
-RETRY_BACKOFF_MS = [500, 1000]
-
-
-def sanitize_context_id(context_id: str) -> str:
-    """
-    Sanitize a string into a valid context ID.
-
-    Performs these transformations:
-    - Convert to lowercase
-    - Replace invalid characters with hyphens
-    - Collapse consecutive hyphens/underscores
-    - Strip leading/trailing non-alphanumeric
-    - Truncate to MAX_CONTEXT_ID_LENGTH
-
-    Args:
-        context_id: Raw input string
-
-    Returns:
-        Valid context ID string, or "context" if input is empty/invalid
-    """
-    if not context_id:
-        return "context"
-
-    # Normalize to lowercase
-    result = context_id.lower()
-
-    # Replace any character that's not alphanumeric, hyphen, or underscore
-    result = re.sub(r'[^a-z0-9_-]', '-', result)
-
-    # Collapse consecutive hyphens/underscores into single hyphen
-    result = re.sub(r'[-_]+', '-', result)
-
-    # Strip leading/trailing non-alphanumeric
-    result = result.strip('-_')
-
-    # Truncate to max length
-    if len(result) > MAX_CONTEXT_ID_LENGTH:
-        result = result[:MAX_CONTEXT_ID_LENGTH].rstrip('-_')
-
-    # If nothing left, return default
-    return result if result else "context"
-
-
-def validate_context_id(context_id: str) -> str:
-    """
-    Validate and normalize context ID.
-
-    Auto-sanitizes invalid input instead of throwing errors for format issues.
-    Only throws for security violations (path traversal).
-
-    Valid context IDs:
-    - 1-64 characters
-    - lowercase alphanumeric, hyphens, underscores
-    - must start and end with alphanumeric
-    - no consecutive hyphens/underscores
-
-    Raises:
-        ValueError: Only for path traversal attempts
-    """
-    if not context_id:
-        return "context"
-
-    # SECURITY: Check for path traversal BEFORE any normalization
-    # This prevents encoded or case-variant attacks
-    if '..' in context_id or '/' in context_id or '\\' in context_id:
-        raise ValueError(f"Invalid context ID '{context_id}': path traversal not allowed")
-
-    # Also check for URL-encoded variants
-    if '%2e' in context_id.lower() or '%2f' in context_id.lower() or '%5c' in context_id.lower():
-        raise ValueError(f"Invalid context ID '{context_id}': encoded path traversal not allowed")
-
-    # Sanitize instead of throwing for format issues
-    sanitized = sanitize_context_id(context_id)
-
-    return sanitized
-
-
-def get_output_dir(project_root: Path = None) -> Path:
-    """
-    Get the output directory path.
-
-    Args:
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/
-    """
-    if project_root is None:
-        project_root = Path(os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd()))
-    return Path(project_root) / OUTPUT_DIR
-
-
-def get_contexts_dir(project_root: Path = None) -> Path:
-    """
-    Get the contexts directory path.
-
-    Args:
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/
-    """
-    return get_output_dir(project_root) / CONTEXTS_DIR
-
-
-def get_context_dir(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the directory path for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/
-
-    Raises:
-        ValueError: If context_id is invalid or path escapes expected directory
-    """
-    validated_id = validate_context_id(context_id)
-    contexts_dir = get_contexts_dir(project_root)
-    result_path = contexts_dir / validated_id
-
-    # SECURITY: Verify resolved path stays within contexts directory
-    # This prevents symlink attacks and any path manipulation we might have missed
-    try:
-        resolved = result_path.resolve()
-        contexts_resolved = contexts_dir.resolve()
-        # Check that resolved path starts with the contexts directory
-        # Use os.path for cross-platform compatibility
-        import os
-        resolved_str = os.path.normcase(str(resolved))
-        contexts_str = os.path.normcase(str(contexts_resolved))
-        if not resolved_str.startswith(contexts_str):
-            raise ValueError(f"Invalid context ID '{context_id}': path escapes contexts directory")
-    except (OSError, ValueError) as e:
-        if isinstance(e, ValueError):
-            raise
-        # OSError can occur if path doesn't exist yet, which is fine for creation
-        pass
-
-    return result_path
-
-
-def get_context_plans_dir(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the plans directory for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/plans/
-    """
-    return get_context_dir(context_id, project_root) / "plans"
-
-
-def get_context_handoffs_dir(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the handoffs directory for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/handoffs/
-    """
-    return get_context_dir(context_id, project_root) / "handoffs"
-
-
-def get_context_reviews_dir(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the reviews directory for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/reviews/
-    """
-    return get_context_dir(context_id, project_root) / "reviews"
-
-
-def get_index_path(project_root: Path = None) -> Path:
-    """
-    Get the global index file path.
-
-    Args:
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/index.json
-    """
-    return get_output_dir(project_root) / INDEX_FILENAME
-
-
-def get_context_file_path(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the context.json file path for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/context.json
-    """
-    return get_context_dir(context_id, project_root) / "context.json"
-
-
-def get_events_file_path(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the events.jsonl file path for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/events.jsonl
-    """
-    return get_context_dir(context_id, project_root) / "events.jsonl"
-
-
-def get_auto_state_path(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the auto-state.json file path for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/{context_id}/auto-state.json
-    """
-    return get_context_dir(context_id, project_root) / "auto-state.json"
-
-
-def get_archive_dir(project_root: Path = None) -> Path:
-    """
-    Get the archive directory path.
-
-    Args:
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/_archive/
-    """
-    return get_contexts_dir(project_root) / ARCHIVE_DIR
-
-
-def get_archive_context_dir(context_id: str, project_root: Path = None) -> Path:
-    """
-    Get the archive directory for a specific context.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/_archive/{context_id}/
-
-    Raises:
-        ValueError: If context_id is invalid
-    """
-    validated_id = validate_context_id(context_id)
-    return get_archive_dir(project_root) / validated_id
-
-
-def get_archive_index_path(project_root: Path = None) -> Path:
-    """
-    Get the archive index file path.
-
-    Args:
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to _output/contexts/_archive/index.json
-    """
-    return get_archive_dir(project_root) / INDEX_FILENAME
-
-
-def get_handoff_folder_path(context_id: str, project_root: Path = None) -> Path:
-    """Get path for a new handoff folder with datetime naming.
-
-    Returns: _output/contexts/{context_id}/handoffs/{YYYY-MM-DD-HHMM}/
-    Handles collisions by appending -N suffix if folder exists.
-
-    Args:
-        context_id: Context identifier
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to new handoff folder (not yet created)
-    """
-    from datetime import datetime
-    handoffs_dir = get_context_handoffs_dir(context_id, project_root)
-    timestamp = datetime.now().strftime("%Y-%m-%d-%H%M")
-    folder = handoffs_dir / timestamp
-
-    counter = 1
-    while folder.exists():
-        folder = handoffs_dir / f"{timestamp}-{counter}"
-        counter += 1
-
-    return folder
-
-
-def get_review_folder_path(context_id: str, iteration: int, project_root: Path = None) -> Path:
-    """Get path for a new review folder with datetime and iteration naming.
-
-    Returns: _output/contexts/{context_id}/reviews/cc-native/{YYYY-MM-DD-HHMM-iteration-N}/
-
-    Args:
-        context_id: Context identifier
-        iteration: Iteration number (1-based)
-        project_root: Project root directory (default: cwd)
-
-    Returns:
-        Path to new review folder (not yet created)
-    """
-    from datetime import datetime
-    reviews_dir = get_context_reviews_dir(context_id, project_root) / "cc-native"
-    timestamp = datetime.now().strftime("%Y-%m-%d-%H%M")
-    return reviews_dir / f"{timestamp}-iteration-{iteration}"