contextos-mcp 0.4.0

package/dist/utils/rolling-buffer.js

@@ -0,0 +1,30 @@
+/**
+ * Rolling string buffer with a maximum byte limit.
+ *
+ * Drops oldest chunks when the total accumulated length exceeds `maxBytes`.
+ * Used by agent backends to prevent OOM when a runaway child process
+ * produces unbounded stdout/stderr output.
+ */
+export class RollingBuffer {
+    maxBytes;
+    chunks = [];
+    totalLength = 0;
+    constructor(maxBytes = 2 * 1024 * 1024) {
+        this.maxBytes = maxBytes;
+    } // 2MB default
+    append(text) {
+        this.chunks.push(text);
+        this.totalLength += text.length;
+        while (this.totalLength > this.maxBytes && this.chunks.length > 1) {
+            const dropped = this.chunks.shift();
+            this.totalLength -= dropped.length;
+        }
+    }
+    toString() {
+        return this.chunks.join("");
+    }
+    get length() {
+        return this.totalLength;
+    }
+}
+//# sourceMappingURL=rolling-buffer.js.map

package/dist/utils/rolling-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolling-buffer.js","sourceRoot":"","sources":["../../src/utils/rolling-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAII;IAHrB,MAAM,GAAa,EAAE,CAAC;IACtB,WAAW,GAAG,CAAC,CAAC;IAExB,YAA6B,WAAmB,CAAC,GAAG,IAAI,GAAG,IAAI;QAAlC,aAAQ,GAAR,QAAQ,CAA0B;IAAG,CAAC,CAAC,cAAc;IAElF,MAAM,CAAC,IAAY;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAChC,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC;YACrC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QACpC,CAAC;IACF,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;CACD"}

package/dist/utils/safe-spawn.d.ts

@@ -0,0 +1,13 @@
+import { type ChildProcess, type SpawnOptions } from "node:child_process";
+/**
+ * Escapes an argument for Windows cmd.exe /s /c invocation to prevent
+ * command chaining (&, |, &&, ||), variable expansion (%VAR%), and redirections (<, >).
+ */
+export declare function escapeWindowsArg(arg: string): string;
+/**
+ * Safely spawns a child process in a cross-platform manner.
+ * On Unix or Windows with native .exe, uses direct execution with shell: false.
+ * On Windows with .cmd/.bat scripts, invokes cmd.exe /d /s /c with strictly escaped arguments
+ * and windowsVerbatimArguments: true, preventing shell injection.
+ */
+export declare function safeSpawn(command: string, args?: string[], options?: SpawnOptions): Promise<ChildProcess>;

package/dist/utils/safe-spawn.js

@@ -0,0 +1,49 @@
+import { spawn } from "node:child_process";
+import { resolveExecutablePath } from "./command-exists.js";
+/**
+ * Escapes an argument for Windows cmd.exe /s /c invocation to prevent
+ * command chaining (&, |, &&, ||), variable expansion (%VAR%), and redirections (<, >).
+ */
+export function escapeWindowsArg(arg) {
+    if (!arg)
+        return '""';
+    // Double all percent signs to prevent %VAR% expansion in cmd.exe
+    let escaped = arg.replace(/%/g, "%%");
+    // Escape backslashes before quotes and escape quotes
+    escaped = escaped.replace(/(\\*)"/g, '$1$1\\"');
+    // If it contains spaces or metacharacters, wrap in double quotes
+    if (/[ \t\n\v"&|<>^]/.test(escaped)) {
+        return `"${escaped}"`;
+    }
+    return escaped;
+}
+/**
+ * Safely spawns a child process in a cross-platform manner.
+ * On Unix or Windows with native .exe, uses direct execution with shell: false.
+ * On Windows with .cmd/.bat scripts, invokes cmd.exe /d /s /c with strictly escaped arguments
+ * and windowsVerbatimArguments: true, preventing shell injection.
+ */
+export async function safeSpawn(command, args = [], options = {}) {
+    const isWindows = process.platform === "win32";
+    // If already a resolved path or command, find executable
+    const resolved = (await resolveExecutablePath(command)) || command;
+    if (!isWindows) {
+        return spawn(resolved, args, { ...options, shell: false });
+    }
+    const isBatchOrCmd = /\.(cmd|bat)$/i.test(resolved);
+    if (!isBatchOrCmd) {
+        // Native Windows .exe — execute directly without shell
+        return spawn(resolved, args, { ...options, shell: false });
+    }
+    // Windows .cmd or .bat script: Node CVE-2024-27980 throws EINVAL on shell: false.
+    // Safely invoke cmd.exe with strict escaping and windowsVerbatimArguments.
+    const comSpec = process.env.COMSPEC || "cmd.exe";
+    const escapedArgs = args.map(escapeWindowsArg);
+    const fullCommandLine = `"${resolved}" ${escapedArgs.join(" ")}`;
+    return spawn(comSpec, ["/d", "/s", "/c", fullCommandLine], {
+        ...options,
+        windowsVerbatimArguments: true,
+        shell: false,
+    });
+}
+//# sourceMappingURL=safe-spawn.js.map

package/dist/utils/safe-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-spawn.js","sourceRoot":"","sources":["../../src/utils/safe-spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,iEAAiE;IACjE,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,qDAAqD;IACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChD,iEAAiE;IACjE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,OAAO,GAAG,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,OAAe,EACf,OAAiB,EAAE,EACnB,UAAwB,EAAE;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAE/C,yDAAyD;IACzD,MAAM,QAAQ,GAAG,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC;IAEnE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,uDAAuD;QACvD,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,kFAAkF;IAClF,2EAA2E;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,IAAI,QAAQ,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAEjE,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE;QAC1D,GAAG,OAAO;QACV,wBAAwB,EAAE,IAAI;QAC9B,KAAK,EAAE,KAAK;KACZ,CAAC,CAAC;AACJ,CAAC"}

package/dist/worktree/manager.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Git worktree manager — creates isolated worktrees for thread execution.
+ *
+ * Phase 2 enhancements:
+ *   - Mutex on create() to prevent branch name races under concurrency
+ *   - Retry logic for git worktree add (transient lock file contention)
+ *
+ * Lifecycle:
+ *   1. create() — git worktree add -b swarm/<id> <path> HEAD
+ *   2. Agent runs in worktree directory
+ *   3. getDiff() — capture changes
+ *   4. commit() — commit changes in worktree
+ *   5. destroy() — git worktree remove + branch cleanup
+ */
+import type { WorktreeInfo } from "../core/types.js";
+/** Read a worktree without initializing a runtime or changing its real index. */
+export declare function readWorktreeDiff(worktreePath: string, repoRoot: string): Promise<string>;
+export declare class ScopeViolationError extends Error {
+    readonly files: readonly string[];
+    constructor(files: readonly string[]);
+}
+export declare function normalizeGitPath(file: string): string;
+export declare function isWithinWriteScope(file: string, writeScope: readonly string[]): boolean;
+export declare function isDeniedByWriteScope(file: string, denyScope: readonly string[]): boolean;
+export declare function createRepositoryFingerprint(repoRoot: string): string;
+export declare class WorktreeManager {
+    private repoRoot;
+    private baseDir;
+    private sessionId;
+    private repoFingerprint;
+    private worktrees;
+    private createMutex;
+    constructor(repoRoot: string, baseDir?: string, sessionId?: string);
+    getSessionId(): string;
+    getRepositoryFingerprint(): string;
+    isContextosWorktree(wtPath: string): boolean;
+    /** Ensure we're in a git repo and the base directory exists. */
+    init(): Promise<void>;
+    /**
+     * Create a new worktree for a thread.
+     * Serialized via mutex to prevent branch name races.
+     * Retries on transient lock-file contention.
+     */
+    create(threadId: string): Promise<WorktreeInfo>;
+    private createWorktreeWithRetry;
+    /** Get HEAD commit SHA of a worktree. */
+    getHeadSha(threadId: string): Promise<string>;
+    /** Get diff of candidate worktree commits against baseSha. */
+    getCandidateDiff(threadId: string, baseSha: string): Promise<string>;
+    /** Get the git diff of uncommitted changes in a worktree. */
+    getDiff(threadId: string): Promise<string>;
+    /** Get diff stats (short summary). */
+    getDiffStats(threadId: string): Promise<string>;
+    /** Get list of changed files without mutating Git index. */
+    getChangedFiles(threadId: string): Promise<string[]>;
+    /**
+     * Detect every worktree change, including untracked, staged, unstaged,
+     * committed, and both sides of renames, then enforce the immutable scope.
+     */
+    assertWriteScope(threadId: string, baseSha: string, writeScope: readonly string[], denyScope?: readonly string[]): Promise<string[]>;
+    /** Commit all changes in a worktree. */
+    commit(threadId: string, message: string, writeScope?: readonly string[], denyScope?: readonly string[]): Promise<boolean>;
+    /** Destroy a worktree and optionally its branch. */
+    destroy(threadId: string, deleteBranch?: boolean): Promise<void>;
+    /** Get info for a thread's worktree. */
+    getWorktreeInfo(threadId: string): WorktreeInfo | undefined;
+    /** Cleanup all worktrees. Resilient — continues past individual failures. */
+    destroyAll(): Promise<void>;
+}