fixo-cli 1.0.0

package/dist/lsp/lsp-manager.js

@@ -0,0 +1,154 @@
+import fs from 'fs';
+import path from 'path';
+import { LspClient, getLanguageId } from './lsp-client.js';
+function findBinaryInPath(binaryName) {
+    const pathEnv = process.env.PATH || '';
+    const delimiter = process.platform === 'win32' ? ';' : ':';
+    const dirs = pathEnv.split(delimiter);
+    for (const dir of dirs) {
+        const baseNames = [binaryName];
+        if (process.platform === 'win32') {
+            baseNames.push(`${binaryName}.cmd`, `${binaryName}.bat`, `${binaryName}.exe`);
+        }
+        for (const name of baseNames) {
+            const fullPath = path.join(dir, name);
+            try {
+                if (fs.existsSync(fullPath)) {
+                    const stat = fs.statSync(fullPath);
+                    if (process.platform === 'win32' || (stat.mode & 0o111) !== 0) {
+                        return fullPath;
+                    }
+                }
+            }
+            catch {
+                // Ignore files we cannot access
+            }
+        }
+    }
+    return null;
+}
+export class LspManager {
+    workspaceRoot;
+    clients = new Map();
+    failedSearches = new Set();
+    constructor(workspaceRoot) {
+        this.workspaceRoot = workspaceRoot;
+        process.on('exit', () => this.killAllSync());
+        process.on('SIGINT', () => {
+            this.killAllSync();
+            process.exit(130);
+        });
+    }
+    killAllSync() {
+        for (const client of this.clients.values()) {
+            client.killSync();
+        }
+    }
+    async getOrStartClient(filePath) {
+        const ext = path.extname(filePath).toLowerCase();
+        let binaryName = '';
+        let args = [];
+        const languageId = getLanguageId(filePath);
+        if (!languageId)
+            return null;
+        if (languageId === 'typescript' || languageId === 'javascript') {
+            binaryName = 'typescript-language-server';
+            args = ['--stdio'];
+        }
+        else if (languageId === 'python') {
+            binaryName = 'pyright-langserver';
+            args = ['--stdio'];
+        }
+        else if (languageId === 'go') {
+            binaryName = 'gopls';
+            args = [];
+        }
+        else if (languageId === 'rust') {
+            binaryName = 'rust-analyzer';
+            args = [];
+        }
+        else {
+            return null;
+        }
+        if (this.clients.has(languageId)) {
+            return this.clients.get(languageId);
+        }
+        if (this.failedSearches.has(binaryName)) {
+            return null;
+        }
+        let binaryPath = findBinaryInPath(binaryName);
+        // If JS/TS and not found, we no longer forcefully globally install.
+        // Let it fail gracefully and inform the user.
+        if (!binaryPath && (binaryName === 'typescript-language-server')) {
+            console.warn(`\n[LSP Manager] JS/TS language server not found on PATH. Run 'npm install -g typescript-language-server typescript' to enable LSP features.`);
+        }
+        if (!binaryPath) {
+            this.failedSearches.add(binaryName);
+            console.warn(`\n[LSP Manager] Warning: '${binaryName}' not found on PATH. LSP features for '${ext}' files are disabled.`);
+            return null;
+        }
+        const client = new LspClient(binaryPath, args, this.workspaceRoot);
+        try {
+            await client.start();
+            this.clients.set(languageId, client);
+            return client;
+        }
+        catch (err) {
+            console.error(`[LSP Manager] Failed to start LSP client for ${binaryName}:`, err);
+            this.failedSearches.add(binaryName);
+            return null;
+        }
+    }
+    syncFileFromDisk(filePath, client) {
+        try {
+            if (fs.existsSync(filePath)) {
+                const content = fs.readFileSync(filePath, 'utf-8');
+                client.syncFile(filePath, content);
+            }
+        }
+        catch (err) {
+            console.error(`[LSP Manager] Failed to read and sync file: ${filePath}`, err.message);
+        }
+    }
+    async getClientAndSync(filePath) {
+        const client = await this.getOrStartClient(filePath);
+        if (client) {
+            this.syncFileFromDisk(filePath, client);
+        }
+        return client;
+    }
+    async gotoDefinition(filePath, line, character) {
+        const client = await this.getClientAndSync(filePath);
+        if (!client)
+            return null;
+        return client.gotoDefinition(filePath, line, character);
+    }
+    async findReferences(filePath, line, character) {
+        const client = await this.getClientAndSync(filePath);
+        if (!client)
+            return null;
+        return client.findReferences(filePath, line, character);
+    }
+    async hover(filePath, line, character) {
+        const client = await this.getClientAndSync(filePath);
+        if (!client)
+            return null;
+        return client.hover(filePath, line, character);
+    }
+    async getDiagnostics(filePath) {
+        const client = await this.getClientAndSync(filePath);
+        if (!client)
+            return [];
+        // Give LSP a short tick (100ms) to publish diagnostics if this was the first open/sync
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        return client.getDiagnostics(filePath);
+    }
+    async stopAll() {
+        for (const client of this.clients.values()) {
+            await client.stop();
+        }
+        this.clients.clear();
+        this.failedSearches.clear();
+    }
+}
+//# sourceMappingURL=lsp-manager.js.map

package/dist/lsp/lsp-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsp-manager.js","sourceRoot":"","sources":["../../src/lsp/lsp-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAChF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9D,OAAO,QAAQ,CAAC;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,UAAU;IAIF;IAHX,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACvC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,YAAmB,aAAqB;QAArB,kBAAa,GAAb,aAAa,CAAQ;QACtC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE3C,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAC/D,UAAU,GAAG,4BAA4B,CAAC;YAC1C,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,UAAU,GAAG,oBAAoB,CAAC;YAClC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC/B,UAAU,GAAG,OAAO,CAAC;YACrB,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YACjC,UAAU,GAAG,eAAe,CAAC;YAC7B,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAE9C,oEAAoE;QACpE,8CAA8C;QAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,KAAK,4BAA4B,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,6IAA6I,CAAC,CAAC;QAC9J,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,6BAA6B,UAAU,0CAA0C,GAAG,uBAAuB,CAAC,CAAC;YAC1H,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YAClF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,QAAgB,EAAE,MAAiB;QAC1D,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,+CAA+C,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAiB;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAiB;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAiB;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvB,uFAAuF;QACvF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/lsp/lsp-pre-save.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Live Pre-Save LSP Compilation Check — Pillar 3 of the Phase 2
+ * safety refactor. The problem: an LLM can produce syntactically
+ * valid TypeScript that is semantically broken (undefined
+ * references, wrong import paths, type errors). A workspace
+ * corrupted by a "looks-fine" write is worse than a workspace
+ * that crashes loudly.
+ *
+ * The fix: after the new content is staged, query the local
+ * language server for diagnostics. If the user-configured mode
+ * is `block` and any errors are present, refuse the commit and
+ * roll the staging back so the user keeps the original file. If
+ * the mode is `warn`, log the diagnostics but commit anyway. If
+ * the mode is `off`, the gate is a no-op.
+ *
+ * The gate is constructed lazily on first use and cached in a
+ * module-level singleton. The diagnostics call is bounded by a
+ * 500ms hard timeout so the staging path never blocks the agent
+ * loop indefinitely waiting for a slow or hung language server.
+ *
+ * The gate is fully decoupled from `LspManager` via a
+ * `LspDiagnosticsProvider` function — production code supplies
+ * one that wraps `LspManager.getDiagnostics`; tests supply a
+ * mock that returns canned data.
+ */
+import type { StagedWrite } from '../runtime/staging.js';
+/** Pre-save gate severity. Mirrors `LspPreSaveMode` in `config.ts`. */
+export type LspPreSaveMode = 'off' | 'warn' | 'block' | 'sandbox-mock';
+/** Severity, normalised from the LSP `DiagnosticSeverity` int. */
+export type LspDiagnosticSeverity = 'error' | 'warning' | 'info' | 'hint';
+/** A single diagnostic, normalised. */
+export interface LspDiagnostic {
+    readonly severity: LspDiagnosticSeverity;
+    readonly message: string;
+    readonly line: number;
+    readonly column: number;
+    readonly source: string;
+    readonly code: string | number | null;
+}
+/** Result of a single pre-save check. */
+export type LspPreSaveResult = {
+    readonly state: 'ok';
+} | {
+    readonly state: 'no-language-server';
+} | {
+    readonly state: 'diagnostics';
+    readonly diagnostics: ReadonlyArray<LspDiagnostic>;
+    /** Convenience: the count of `error`-severity items. */
+    readonly errorCount: number;
+};
+/** Function that returns diagnostics for a file (or empty). */
+export type LspDiagnosticsProvider = (filePath: string) => Promise<LspDiagnostic[]>;
+/** Options for {@link LspPreSaveGate}. */
+export interface LspPreSaveGateOptions {
+    /** The mode. Defaults to `'off'`. */
+    mode?: LspPreSaveMode;
+    /** The diagnostics provider (defaults to a noop). */
+    provider?: LspDiagnosticsProvider;
+    /**
+     * Predicate that reports whether a real language server is
+     * installed for the given file path. Used by `sandbox-mock`
+     * mode to distinguish "LSP returned 0 diagnostics" (real pass)
+     * from "no LSP installed, unvalidated write" (must be
+     * blocked in sandbox-mock mode). Defaults to `true` — i.e.
+     * the gate assumes an LSP is available unless the caller
+     * overrides this.
+     */
+    hasLanguageServer?: (filePath: string) => boolean;
+    /** Maximum time (ms) to wait for diagnostics. Defaults to 500. */
+    timeoutMs?: number;
+    /**
+     * Optional callback invoked with the gate's decision before the
+     * caller (the staging manager) acts on it. Useful for telemetry
+     * and for warning-mode logging. Errors thrown here are caught
+     * and swallowed — they never block the write.
+     */
+    onResult?: (result: LspPreSaveResult, entry: StagedWrite) => void;
+}
+/** Map the LSP `DiagnosticSeverity` int to our normalised severity. */
+export declare function normaliseSeverity(int: unknown): LspDiagnosticSeverity;
+/** Normalise a raw LSP `Diagnostic` payload into our typed shape. */
+export declare function normaliseDiagnostic(raw: unknown): LspDiagnostic;
+export declare class LspPreSaveGate {
+    readonly mode: LspPreSaveMode;
+    readonly provider: LspDiagnosticsProvider;
+    readonly timeoutMs: number;
+    readonly onResult: ((r: LspPreSaveResult, e: StagedWrite) => void) | undefined;
+    readonly hasLanguageServer: (filePath: string) => boolean;
+    constructor(options?: LspPreSaveGateOptions);
+    /**
+     * Run the gate against a staged write. Returns one of:
+     *
+     *   - `ok`                — the file passes the gate.
+     *   - `no-language-server`— the provider returned no diagnostics and
+     *                           we have no LSP installed; treat as a
+     *                           pass-through so users without a language
+     *                           server aren't blocked.
+     *   - `diagnostics`       — there are diagnostics; the caller
+     *                           decides what to do based on the gate's
+     *                           mode and on the `errorCount`.
+     */
+    check(entry: StagedWrite): Promise<LspPreSaveResult>;
+    /**
+     * Throw an {@link LspPreSaveBlockedError} if the result should
+     * be a hard block. The caller (the staging pipeline) uses this
+     * as the pre-commit hook. In `warn` mode this always returns
+     * without throwing. In `block` mode it throws when there is at
+     * least one `error`-severity diagnostic. In `sandbox-mock` mode
+     * (Pillar 5 / Protection 3) it throws when the result was
+     * `no-language-server` — the gate refuses to allow unvalidated
+     * writes when no LSP is available, forcing the operator to
+     * install a real language server or downgrade to `off`.
+     */
+    enforce(result: LspPreSaveResult, entry: StagedWrite): void;
+    private notify;
+    private withTimeout;
+}
+/**
+ * Thrown by {@link LspPreSaveGate.enforce} when the gate's mode is
+ * `block` and the file has at least one `error`-severity
+ * diagnostic. Caught by {@link AtomicStagingManager.commit} and
+ * surfaced as a {@link PreCommitHookRejectedError}.
+ */
+export declare class LspPreSaveBlockedError extends Error {
+    readonly targetPath: string;
+    readonly diagnostics: ReadonlyArray<LspDiagnostic>;
+    constructor(targetPath: string, diagnostics: ReadonlyArray<LspDiagnostic>);
+}
+/**
+ * Build a {@link LspDiagnosticsProvider} from an
+ * {@link LspManager}-shaped object. Decouples the gate from the
+ * concrete `LspManager` class so tests can inject a mock.
+ */
+export declare function makeLspProvider(lspManager: {
+    getClientAndSync(filePath: string): Promise<unknown>;
+}): LspDiagnosticsProvider;
+//# sourceMappingURL=lsp-pre-save.d.ts.map

package/dist/lsp/lsp-pre-save.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsp-pre-save.d.ts","sourceRoot":"","sources":["../../src/lsp/lsp-pre-save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAMzD,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,cAAc,CAAC;AAEvE,kEAAkE;AAClE,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1E,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,yCAAyC;AACzC,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,GACxC;IACE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACnD,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEN,+DAA+D;AAC/D,MAAM,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;AAEpF,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACnE;AAMD,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAarE;AAED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CA4B/D;AAQD,qBAAa,cAAc;IACzB,SAAgB,IAAI,EAAE,cAAc,CAAC;IACrC,SAAgB,QAAQ,EAAE,sBAAsB,CAAC;IACjD,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACtF,SAAgB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;gBAErD,OAAO,GAAE,qBAA0B;IAQ/C;;;;;;;;;;;OAWG;IACU,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwCjE;;;;;;;;;;OAUG;IACI,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IA+BlE,OAAO,CAAC,MAAM;IASd,OAAO,CAAC,WAAW;CAepB;AAMD;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;gBAC9C,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC;CAc1E;AAMD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE;IACV,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD,GACA,sBAAsB,CAYxB"}

package/dist/lsp/lsp-pre-save.js

@@ -0,0 +1,245 @@
+/**
+ * Live Pre-Save LSP Compilation Check — Pillar 3 of the Phase 2
+ * safety refactor. The problem: an LLM can produce syntactically
+ * valid TypeScript that is semantically broken (undefined
+ * references, wrong import paths, type errors). A workspace
+ * corrupted by a "looks-fine" write is worse than a workspace
+ * that crashes loudly.
+ *
+ * The fix: after the new content is staged, query the local
+ * language server for diagnostics. If the user-configured mode
+ * is `block` and any errors are present, refuse the commit and
+ * roll the staging back so the user keeps the original file. If
+ * the mode is `warn`, log the diagnostics but commit anyway. If
+ * the mode is `off`, the gate is a no-op.
+ *
+ * The gate is constructed lazily on first use and cached in a
+ * module-level singleton. The diagnostics call is bounded by a
+ * 500ms hard timeout so the staging path never blocks the agent
+ * loop indefinitely waiting for a slow or hung language server.
+ *
+ * The gate is fully decoupled from `LspManager` via a
+ * `LspDiagnosticsProvider` function — production code supplies
+ * one that wraps `LspManager.getDiagnostics`; tests supply a
+ * mock that returns canned data.
+ */
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Map the LSP `DiagnosticSeverity` int to our normalised severity. */
+export function normaliseSeverity(int) {
+    switch (int) {
+        case 1:
+            return 'error';
+        case 2:
+            return 'warning';
+        case 3:
+            return 'info';
+        case 4:
+            return 'hint';
+        default:
+            return 'info';
+    }
+}
+/** Normalise a raw LSP `Diagnostic` payload into our typed shape. */
+export function normaliseDiagnostic(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return {
+            severity: 'info',
+            message: String(raw),
+            line: 0,
+            column: 0,
+            source: '',
+            code: null,
+        };
+    }
+    const r = raw;
+    const start = r.range?.start;
+    return {
+        severity: normaliseSeverity(r.severity),
+        message: typeof r.message === 'string' ? r.message : String(r.message ?? ''),
+        line: typeof start?.line === 'number' ? start.line : 0,
+        column: typeof start?.character === 'number' ? start.character : 0,
+        source: typeof r.source === 'string' ? r.source : '',
+        code: typeof r.code === 'string' || typeof r.code === 'number' ? r.code : null,
+    };
+}
+const noopProvider = async () => [];
+// ---------------------------------------------------------------------------
+// LspPreSaveGate
+// ---------------------------------------------------------------------------
+export class LspPreSaveGate {
+    mode;
+    provider;
+    timeoutMs;
+    onResult;
+    hasLanguageServer;
+    constructor(options = {}) {
+        this.mode = options.mode ?? 'off';
+        this.provider = options.provider ?? noopProvider;
+        this.timeoutMs = options.timeoutMs ?? 500;
+        this.onResult = options.onResult;
+        this.hasLanguageServer = options.hasLanguageServer ?? (() => true);
+    }
+    /**
+     * Run the gate against a staged write. Returns one of:
+     *
+     *   - `ok`                — the file passes the gate.
+     *   - `no-language-server`— the provider returned no diagnostics and
+     *                           we have no LSP installed; treat as a
+     *                           pass-through so users without a language
+     *                           server aren't blocked.
+     *   - `diagnostics`       — there are diagnostics; the caller
+     *                           decides what to do based on the gate's
+     *                           mode and on the `errorCount`.
+     */
+    async check(entry) {
+        if (this.mode === 'off') {
+            return { state: 'ok' };
+        }
+        let raw;
+        try {
+            raw = await this.withTimeout(this.provider(entry.targetPath), this.timeoutMs);
+        }
+        catch {
+            // Provider threw or timed out — treat as a pass-through so a
+            // hung language server does not block the agent loop.
+            return { state: 'no-language-server' };
+        }
+        if (raw.length === 0) {
+            // Provider returned zero diagnostics. Distinguish
+            // between "LSP installed, file is clean" (→ `ok`) and
+            // "no LSP installed, write is unvalidated" (→
+            // `no-language-server`). The latter is what the
+            // sandbox-mock mode rejects.
+            if (!this.hasLanguageServer(entry.targetPath)) {
+                const result = { state: 'no-language-server' };
+                this.notify(result, entry);
+                return result;
+            }
+            const result = { state: 'ok' };
+            this.notify(result, entry);
+            return result;
+        }
+        const errorCount = raw.filter((d) => d.severity === 'error').length;
+        const result = {
+            state: 'diagnostics',
+            diagnostics: raw,
+            errorCount,
+        };
+        this.notify(result, entry);
+        return result;
+    }
+    /**
+     * Throw an {@link LspPreSaveBlockedError} if the result should
+     * be a hard block. The caller (the staging pipeline) uses this
+     * as the pre-commit hook. In `warn` mode this always returns
+     * without throwing. In `block` mode it throws when there is at
+     * least one `error`-severity diagnostic. In `sandbox-mock` mode
+     * (Pillar 5 / Protection 3) it throws when the result was
+     * `no-language-server` — the gate refuses to allow unvalidated
+     * writes when no LSP is available, forcing the operator to
+     * install a real language server or downgrade to `off`.
+     */
+    enforce(result, entry) {
+        if (this.mode === 'off')
+            return;
+        if (this.mode === 'warn')
+            return;
+        if (this.mode === 'sandbox-mock') {
+            // Pillar 5 / Protection 3 — refuse to commit a write
+            // when the gate has no language server backing it. The
+            // operator must explicitly opt out by setting the mode
+            // to `off` (or by installing a real LSP).
+            if (result.state === 'no-language-server') {
+                throw new LspPreSaveBlockedError(entry.targetPath, [
+                    {
+                        severity: 'error',
+                        message: 'sandbox-mock: no language server is available to validate this write. ' +
+                            'Install typescript-language-server / pyright etc., or set ' +
+                            'preferences.safety.lspPreSave to "off" to disable pre-save validation.',
+                        line: 0,
+                        column: 0,
+                        source: 'fixo-safety',
+                        code: 'SANDBOX_MOCK_NO_LSP',
+                    },
+                ]);
+            }
+            return;
+        }
+        // `block` mode — fail on any error-severity diagnostic.
+        if (result.state !== 'diagnostics')
+            return;
+        if (result.errorCount === 0)
+            return;
+        throw new LspPreSaveBlockedError(entry.targetPath, result.diagnostics);
+    }
+    notify(result, entry) {
+        if (!this.onResult)
+            return;
+        try {
+            this.onResult(result, entry);
+        }
+        catch {
+            // Swallow observer errors — they are best-effort.
+        }
+    }
+    withTimeout(p, ms) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => reject(new Error('LSP gate timeout')), ms);
+            p.then((v) => {
+                clearTimeout(timer);
+                resolve(v);
+            }, (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+}
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+/**
+ * Thrown by {@link LspPreSaveGate.enforce} when the gate's mode is
+ * `block` and the file has at least one `error`-severity
+ * diagnostic. Caught by {@link AtomicStagingManager.commit} and
+ * surfaced as a {@link PreCommitHookRejectedError}.
+ */
+export class LspPreSaveBlockedError extends Error {
+    targetPath;
+    diagnostics;
+    constructor(targetPath, diagnostics) {
+        const summary = diagnostics
+            .filter((d) => d.severity === 'error')
+            .slice(0, 3)
+            .map((d) => `${d.line + 1}:${d.column + 1} ${d.message}`)
+            .join('; ');
+        super(`LSP pre-save blocked: ${diagnostics.filter((d) => d.severity === 'error').length} ` +
+            `error(s) in ${targetPath}${summary ? ` — ${summary}` : ''}`);
+        this.name = 'LspPreSaveBlockedError';
+        this.targetPath = targetPath;
+        this.diagnostics = diagnostics;
+    }
+}
+// ---------------------------------------------------------------------------
+// Adapter — wire LspManager into the gate
+// ---------------------------------------------------------------------------
+/**
+ * Build a {@link LspDiagnosticsProvider} from an
+ * {@link LspManager}-shaped object. Decouples the gate from the
+ * concrete `LspManager` class so tests can inject a mock.
+ */
+export function makeLspProvider(lspManager) {
+    return async (filePath) => {
+        const client = (await lspManager.getClientAndSync(filePath));
+        if (!client)
+            return [];
+        // Give the LSP a short tick to publish (matches LspManager's
+        // existing behaviour for the very first open).
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        const raw = client.getDiagnostics(filePath);
+        return Array.isArray(raw) ? raw.map((d) => normaliseDiagnostic(d)) : [];
+    };
+}
+//# sourceMappingURL=lsp-pre-save.js.map

package/dist/lsp/lsp-pre-save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsp-pre-save.js","sourceRoot":"","sources":["../../src/lsp/lsp-pre-save.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAiEH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC;YACJ,OAAO,OAAO,CAAC;QACjB,KAAK,CAAC;YACJ,OAAO,SAAS,CAAC;QACnB,KAAK,CAAC;YACJ,OAAO,MAAM,CAAC;QAChB,KAAK,CAAC;YACJ,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;YACpB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,GAMT,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;IAC7B,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5E,IAAI,EAAE,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpD,IAAI,EACF,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAA2B,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;AAE5D,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,OAAO,cAAc;IACT,IAAI,CAAiB;IACrB,QAAQ,CAAyB;IACjC,SAAS,CAAS;IAClB,QAAQ,CAA8D;IACtE,iBAAiB,CAAgC;IAEjE,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,KAAK,CAAC,KAAkB;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,sDAAsD;YACtD,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,kDAAkD;YAClD,sDAAsD;YACtD,8CAA8C;YAC9C,gDAAgD;YAChD,6BAA6B;YAC7B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC3B,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,MAAM,GAAqB;YAC/B,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,GAAG;YAChB,UAAU;SACX,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACI,OAAO,CAAC,MAAwB,EAAE,KAAkB;QACzD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACjC,qDAAqD;YACrD,uDAAuD;YACvD,uDAAuD;YACvD,0CAA0C;YAC1C,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,IAAI,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE;oBACjD;wBACE,QAAQ,EAAE,OAAO;wBACjB,OAAO,EACL,wEAAwE;4BACxE,4DAA4D;4BAC5D,wEAAwE;wBAC1E,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,CAAC;wBACT,MAAM,EAAE,aAAa;wBACrB,IAAI,EAAE,qBAAqB;qBAC5B;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,wDAAwD;QACxD,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;YAAE,OAAO;QAC3C,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,IAAI,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzE,CAAC;IAEO,MAAM,CAAC,MAAwB,EAAE,KAAkB;QACzD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IAEO,WAAW,CAAI,CAAa,EAAE,EAAU;QAC9C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;gBACJ,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/B,UAAU,CAAS;IACnB,WAAW,CAA+B;IAC1D,YAAY,UAAkB,EAAE,WAAyC;QACvE,MAAM,OAAO,GAAG,WAAW;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;aACrC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CACH,yBAAyB,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,GAAG;YAClF,eAAe,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,UAEC;IAED,OAAO,KAAK,EAAE,QAAgB,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAEnD,CAAC;QACT,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QACvB,6DAA6D;QAC7D,+CAA+C;QAC/C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC"}

package/dist/lsp/syntax-fallback.d.ts

@@ -0,0 +1,83 @@
+/**
+ * syntax-fallback.ts — Pure-JS brace/paren/bracket balance check
+ * used as a fallback when no real language server is on the PATH.
+ *
+ * Why this exists
+ * ---------------
+ * The LspPreSaveGate calls into `LspManager` to ask the local
+ * language server for diagnostics. On a freshly-installed system
+ * there is no `tsserver` / `gopls` / `rust-analyzer` on the PATH —
+ * the user has a working FixO CLI but no editor infrastructure.
+ * In that case the pre-save gate would silently fall through and
+ * commit syntactically broken edits.
+ *
+ * This module provides a *very* cheap structural sanity check
+ * (brace/paren/bracket/quote balance) that runs in microseconds
+ * and catches the most common form of "LLM forgot a closing
+ * brace" corruption. It is intentionally not a real parser — it
+ * is a smoke detector, not a smoke alarm. If the syntax check
+ * reports `ok`, the real LSP may still surface semantic errors;
+ * if it reports `unbalanced`, the file is almost certainly
+ * broken and we should refuse the write.
+ *
+ * The check is env-gated behind `FIXO_LSP_FALLBACK=syntax-only`
+ * so a developer who *does* have a language server is never
+ * bothered by it.
+ */
+export type SyntaxHealthVerdict = {
+    readonly state: 'ok';
+} | {
+    readonly state: 'unbalanced';
+    /** The first unclosed delimiter, in document order. */
+    readonly opener: '{' | '(' | '[';
+    /** 1-based line where the imbalance was detected. */
+    readonly line: number;
+} | {
+    readonly state: 'unterminated-string';
+    /** 1-based line where the runaway string starts. */
+    readonly line: number;
+} | {
+    readonly state: 'unterminated-comment';
+    /** 1-based line where the block comment starts. */
+    readonly line: number;
+};
+/**
+ * Run the structural sanity check on a source string. Pure,
+ * sync, and allocation-light. The output is stable so tests can
+ * pin the verdict exactly.
+ */
+export declare function syntaxHealthCheck(source: string): SyntaxHealthVerdict;
+/**
+ * Format a {@link SyntaxHealthVerdict} as a single-line summary
+ * suitable for the LLM's `tool_result`.
+ */
+export declare function formatSyntaxVerdict(verdict: SyntaxHealthVerdict): string;
+export interface LspSanityResult {
+    /** True when at least one common language server is on the PATH,
+     *  or when the syntax-fallback mode is explicitly enabled. */
+    ok: boolean;
+    /** Human-readable reason. Empty when `ok`. */
+    reason: string;
+    /** The language servers we looked for. */
+    checked: string[];
+    /** The ones we actually found on the PATH. */
+    found: string[];
+    /** Whether `FIXO_LSP_FALLBACK=syntax-only` is set. */
+    syntaxOnly: boolean;
+}
+/**
+ * Synchronous PATH check for common language servers. Returns a
+ * {@link LspSanityResult} the boot code can use to decide whether
+ * to warn the user. Pure — no side effects, no I/O beyond
+ * `which`-style PATH scanning.
+ *
+ * The check is intentionally permissive: a missing language server
+ * is a `reason` to warn, not a hard failure. The user can always
+ * install one later. The hard fail mode is when neither a
+ * language server nor `FIXO_LSP_FALLBACK=syntax-only` is present
+ * AND the user has configured `lspPreSave: 'block'` — in that
+ * case the pre-save gate would block all writes, which is a much
+ * worse experience than a boot-time warning.
+ */
+export declare function checkLspSanity(env?: NodeJS.ProcessEnv): LspSanityResult;
+//# sourceMappingURL=syntax-fallback.d.ts.map

package/dist/lsp/syntax-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax-fallback.d.ts","sourceRoot":"","sources":["../../src/lsp/syntax-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACxB;IACE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACjC,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CA8IrE;AAcD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAWxE;AAMD,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,EAAE,EAAE,OAAO,CAAC;IACZ,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;CACrB;AAeD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,CA4CpF"}