patchwarden 0.4.0 → 0.6.0

package/src/tools/searchWorkspace.ts

@@ -0,0 +1,275 @@
+import { readdirSync, readFileSync, statSync, existsSync } from "node:fs";
+import { relative, join, extname } from "node:path";
+import { getConfig } from "../config.js";
+import { PatchWardenError } from "../errors.js";
+import { isSensitivePath } from "../security/sensitiveGuard.js";
+import {
+  readDirectSession,
+  validateDirectSessionFreshness,
+} from "../direct/directSessionStore.js";
+import { guardDirectSessionActive } from "../direct/directGuards.js";
+
+// ── Types ──────────────────────────────────────────────────────────
+
+export interface SearchWorkspaceInput {
+  session_id: string;
+  query: string;
+  max_results?: number;
+  case_sensitive?: boolean;
+  max_preview_chars?: number;
+  include_globs?: string[];
+}
+
+export interface SearchMatch {
+  path: string;
+  line: number;
+  preview: string;
+}
+
+export interface SearchWorkspaceOutput {
+  results: SearchMatch[];
+  total_matches: number;
+  truncated: boolean;
+}
+
+// ── Constants ──────────────────────────────────────────────────────
+
+const SKIP_DIRECTORIES = new Set([
+  ".git",
+  ".patchwarden",
+  "node_modules",
+  "dist",
+  "release",
+  "coverage",
+  ".next",
+  ".turbo",
+]);
+
+const BINARY_EXTENSIONS = new Set([
+  ".exe",
+  ".dll",
+  ".so",
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".bmp",
+  ".ico",
+  ".webp",
+  ".pdf",
+  ".mp3",
+  ".mp4",
+  ".zip",
+  ".gz",
+  ".tar",
+  ".bin",
+  ".dat",
+  ".class",
+  ".jar",
+  ".wasm",
+  ".node",
+]);
+
+// Safety valve: stop scanning after this many total matches to prevent
+// runaway searches in large repositories with very common terms.
+const MAX_TOTAL_MATCHES = 10_000;
+
+// ── Tool implementation ────────────────────────────────────────────
+
+export function searchWorkspace(
+  input: SearchWorkspaceInput
+): SearchWorkspaceOutput {
+  const config = getConfig();
+
+  // ── Validate session freshness ───────────────────────────────────
+
+  const validation = validateDirectSessionFreshness(input.session_id);
+  if (!validation.valid || !validation.session) {
+    throw new PatchWardenError(
+      validation.failure_reason || "session_invalid",
+      `Direct session "${input.session_id}" is not valid: ${validation.failure_reason}.`,
+      "Create a new direct session with create_direct_session.",
+      true,
+      {
+        session_id: input.session_id,
+        failure_reason: validation.failure_reason,
+        operation: "search_workspace",
+      }
+    );
+  }
+
+  const session = validation.session;
+  guardDirectSessionActive(session);
+
+  // ── Validate query ───────────────────────────────────────────────
+
+  if (!input.query || input.query.trim() === "") {
+    throw new PatchWardenError(
+      "invalid_input",
+      "query is required and must be a non-empty string.",
+      "Provide a search query to look for in file contents.",
+      true,
+      { operation: "search_workspace", session_id: input.session_id }
+    );
+  }
+
+  // ── Resolve parameters ───────────────────────────────────────────
+
+  const maxResults = input.max_results ?? 20;
+  const caseSensitive = input.case_sensitive ?? false;
+  const maxPreviewChars = input.max_preview_chars ?? 200;
+  const includeGlobs = input.include_globs;
+  const query = caseSensitive ? input.query : input.query.toLowerCase();
+
+  const repoPath = session.resolved_repo_path;
+
+  if (!existsSync(repoPath)) {
+    throw new PatchWardenError(
+      "repo_not_found",
+      `Session repo path "${repoPath}" no longer exists.`,
+      "Create a new direct session with create_direct_session.",
+      true,
+      {
+        session_id: input.session_id,
+        resolved_repo_path: repoPath,
+        operation: "search_workspace",
+      }
+    );
+  }
+
+  // ── Recursive search ─────────────────────────────────────────────
+
+  const results: SearchMatch[] = [];
+  let totalMatches = 0;
+  let truncated = false;
+
+  const visit = (directory: string): void => {
+    if (truncated && totalMatches >= MAX_TOTAL_MATCHES) return;
+
+    let entries;
+    try {
+      entries = readdirSync(directory, { withFileTypes: true });
+    } catch {
+      return;
+    }
+
+    for (const entry of entries) {
+      if (totalMatches >= MAX_TOTAL_MATCHES) {
+        truncated = true;
+        return;
+      }
+
+      // Skip blacklisted directories
+      if (entry.isDirectory() && SKIP_DIRECTORIES.has(entry.name)) {
+        continue;
+      }
+
+      const fullPath = join(directory, entry.name);
+      const relPath = relative(repoPath, fullPath).replace(/\\/g, "/");
+
+      if (entry.isDirectory()) {
+        visit(fullPath);
+        continue;
+      }
+
+      if (!entry.isFile()) continue;
+
+      // Skip sensitive files
+      if (isSensitivePath(relPath)) continue;
+
+      // Skip binary files by extension
+      const ext = extname(entry.name).toLowerCase();
+      if (BINARY_EXTENSIONS.has(ext)) continue;
+
+      // Apply include_globs filter
+      if (includeGlobs && includeGlobs.length > 0) {
+        if (!matchesAnyGlob(relPath, includeGlobs)) continue;
+      }
+
+      // Read file content and search line by line
+      let content: string;
+      try {
+        const fileStat = statSync(fullPath);
+        if (fileStat.size > config.directMaxFileBytes) continue;
+        content = readFileSync(fullPath, "utf-8");
+      } catch {
+        continue;
+      }
+
+      const lines = content.split(/\r?\n/);
+      for (let i = 0; i < lines.length; i++) {
+        if (totalMatches >= MAX_TOTAL_MATCHES) {
+          truncated = true;
+          break;
+        }
+
+        const line = lines[i];
+        const haystack = caseSensitive ? line : line.toLowerCase();
+        if (haystack.includes(query)) {
+          totalMatches++;
+          if (results.length < maxResults) {
+            const preview =
+              line.length > maxPreviewChars
+                ? line.slice(0, maxPreviewChars)
+                : line;
+            results.push({
+              path: relPath,
+              line: i + 1,
+              preview,
+            });
+          } else {
+            truncated = true;
+          }
+        }
+      }
+    }
+  };
+
+  visit(repoPath);
+
+  return {
+    results,
+    total_matches: totalMatches,
+    truncated,
+  };
+}
+
+// ── Glob matching ──────────────────────────────────────────────────
+
+function matchesAnyGlob(filePath: string, globs: string[]): boolean {
+  for (const pattern of globs) {
+    if (matchGlob(filePath, pattern)) return true;
+  }
+  return false;
+}
+
+/**
+ * Simple glob matching: "*" matches any sequence of characters (including
+ * path separators), "?" matches a single character.
+ *
+ * Examples:
+ *   "*.ts"       matches "foo.ts", "src/bar.ts"
+ *   "src/*.ts"   matches "src/foo.ts", "src/sub/bar.ts"
+ *   "*.test.ts"  matches "foo.test.ts", "src/bar.test.ts"
+ */
+function matchGlob(filePath: string, pattern: string): boolean {
+  const normalizedPattern = pattern.replace(/\\/g, "/");
+  const regex = globToRegex(normalizedPattern);
+  return regex.test(filePath);
+}
+
+function globToRegex(pattern: string): RegExp {
+  let regexStr = "";
+  for (const char of pattern) {
+    if (char === "*") {
+      regexStr += ".*";
+    } else if (char === "?") {
+      regexStr += ".";
+    } else if (/[.+^${}()|[\]\\]/.test(char)) {
+      regexStr += "\\" + char;
+    } else {
+      regexStr += char;
+    }
+  }
+  return new RegExp("^" + regexStr + "$");
+}

package/src/tools/taskTemplates.ts

@@ -42,7 +42,8 @@ export function expandTaskTemplate(input: TaskTemplateInput): ExpandedTaskTempla
     `## Goal\n${goal}`,
     "## Safety boundaries",
     "- Work only inside the resolved repository path.",
-    "- Do not commit, push, publish, expose credentials, or modify unrelated files.",
+    "- Leave repository changes uncommitted for review; remote operations are outside this task.",
+    "- Keep credentials private and do not modify unrelated files.",
     "- Report exact files inspected or changed and any remaining uncertainty.",
   ];
 

package/src/tools/toolCatalog.ts

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../version.js";
 
-export type ToolProfile = "full" | "chatgpt_core";
+export type ToolProfile = "full" | "chatgpt_core" | "chatgpt_direct";
 
 export interface CatalogTool {
   name: string;
@@ -37,22 +37,51 @@ export const CHATGPT_CORE_TOOL_NAMES = [
   "audit_task",
 ] as const;
 
+export const CHATGPT_DIRECT_TOOL_NAMES = [
+  "health_check",
+  "list_workspace",
+  "create_direct_session",
+  "search_workspace",
+  "read_workspace_file",
+  "apply_patch",
+  "run_verification",
+  "finalize_direct_session",
+  "audit_session",
+] as const;
+
 let lastSnapshot: ToolCatalogSnapshot | null = null;
 
 export function resolveToolProfile(configProfile?: string): ToolProfile {
   const raw = (process.env.PATCHWARDEN_TOOL_PROFILE || configProfile || "full").trim();
-  if (raw !== "full" && raw !== "chatgpt_core") {
-    throw new Error(`Invalid tool profile "${raw}". Expected "full" or "chatgpt_core".`);
+  if (raw !== "full" && raw !== "chatgpt_core" && raw !== "chatgpt_direct") {
+    throw new Error(`Invalid tool profile "${raw}". Expected "full", "chatgpt_core", or "chatgpt_direct".`);
   }
   return raw;
 }
 
-export function selectToolsForProfile<T extends CatalogTool>(tools: T[], profile: ToolProfile): T[] {
+export function selectToolsForProfile<T extends CatalogTool>(tools: T[], profile: ToolProfile, enableDirectProfile?: boolean): T[] {
   if (profile === "full") return tools;
   const byName = new Map(tools.map((tool) => [tool.name, tool]));
-  return CHATGPT_CORE_TOOL_NAMES.map((name) => {
+
+  if (profile === "chatgpt_core") {
+    return CHATGPT_CORE_TOOL_NAMES.map((name) => {
+      const tool = byName.get(name);
+      if (!tool) throw new Error(`chatgpt_core tool profile requires missing tool "${name}".`);
+      return tool;
+    });
+  }
+
+  // chatgpt_direct
+  if (!enableDirectProfile) {
+    // Degraded mode: only expose health_check for diagnostics
+    const tool = byName.get("health_check");
+    if (!tool) throw new Error(`chatgpt_direct degraded mode requires missing tool "health_check".`);
+    return [tool];
+  }
+
+  return CHATGPT_DIRECT_TOOL_NAMES.map((name) => {
     const tool = byName.get(name);
-    if (!tool) throw new Error(`chatgpt_core tool profile requires missing tool "${name}".`);
+    if (!tool) throw new Error(`chatgpt_direct tool profile requires missing tool "${name}".`);
     return tool;
   });
 }

package/src/tools/waitForTask.ts

@@ -1,6 +1,6 @@
 import { setTimeout as sleep } from "node:timers/promises";
 import { getTaskStatus } from "./getTaskStatus.js";
-import { getTaskSummary, type TaskSummaryOutput } from "./getTaskSummary.js";
+import { getTaskSummary, type TaskSummaryResult } from "./getTaskSummary.js";
 
 const TERMINAL_STATUSES = new Set([
   "done",
@@ -32,7 +32,7 @@ export interface WaitForTaskOutput {
     name: "wait_for_task" | "audit_task" | "health_check";
     arguments: Record<string, unknown>;
   };
-  summary?: TaskSummaryOutput;
+  summary?: TaskSummaryResult;
   progress_summary?: WaitForTaskProgressSummary;
 }
 
@@ -85,6 +85,6 @@ export async function waitForTask(taskId: string, waitSeconds = 25): Promise<Wai
       : executionBlocked
         ? { name: "health_check", arguments: {} }
       : { name: "wait_for_task", arguments: { task_id: taskId, timeout_seconds: waitSeconds } },
-    ...(terminal ? { summary: getTaskSummary(taskId) } : { progress_summary: progressSummary }),
+    ...(terminal ? { summary: getTaskSummary(taskId, { view: "compact" }) } : { progress_summary: progressSummary }),
   };
 }

package/src/version.ts

@@ -1,2 +1,2 @@
-export const PATCHWARDEN_VERSION = "0.4.0";
-export const TOOL_SCHEMA_EPOCH = "2026-06-21-v3";
+export const PATCHWARDEN_VERSION = "0.6.0";
+export const TOOL_SCHEMA_EPOCH = "2026-06-22-v6";

package/tsconfig.json

@@ -1,17 +1,18 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ES2022",
-    "moduleResolution": "node",
-    "outDir": "dist",
-    "rootDir": "src",
-    "strict": true,
-    "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "declaration": true,
-    "skipLibCheck": true
-  },
-  "include": ["src/**/*.ts"],
-  "exclude": ["node_modules", "dist"]
-}
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "types": ["node"],
+    "outDir": "dist",
+    "rootDir": "src",
+    "strict": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "skipLibCheck": true
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/Check-PatchWarden-Health.cmd

@@ -1,6 +0,0 @@
-@echo off
-setlocal
-cd /d "%~dp0"
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0scripts\get-patchwarden-health.ps1"
-echo.
-pause

package/Reset-PatchWarden-Tunnel-Key.cmd

@@ -1,6 +0,0 @@
-@echo off
-setlocal
-cd /d "%~dp0"
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0scripts\start-patchwarden-tunnel.ps1" -ForgetSavedApiKey
-echo.
-pause

package/Restart-PatchWarden.cmd

@@ -1,19 +0,0 @@
-@echo off
-setlocal
-cd /d "%~dp0"
-echo.
-echo ========================================
-echo  PatchWarden One-Click Restart
-echo ========================================
-echo.
-echo This will:
-echo   1. Stop only processes owned by the current PatchWarden launcher
-echo   2. Rebuild the project
-echo   3. Start a fresh tunnel launcher window
-echo.
-echo Close this window to cancel, or
-pause
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0scripts\restart-patchwarden.ps1"
-echo.
-echo Restart script finished.
-pause

package/Start-PatchWarden-Tunnel.cmd

@@ -1,7 +0,0 @@
-@echo off
-setlocal
-cd /d "%~dp0"
-powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0scripts\start-patchwarden-tunnel.ps1"
-echo.
-echo PatchWarden tunnel launcher exited.
-pause

package/docs/release-v0.3.0.md

@@ -1,43 +0,0 @@
-# Safe-Bifrost v0.3.0
-
-Safe-Bifrost v0.3.0 makes ChatGPT-managed local agent work easier to monitor,
-verify, and accept without weakening the workspace and command boundaries.
-
-## Highlights
-
-- Adds `wait_for_task` so ChatGPT can stay in the tool loop until a task is
-  terminal, plus `get_task_summary` for one-call acceptance evidence.
-- Requires an explicit existing repository directory and supports both
-  workspace-relative and absolute `repo_path` values.
-- Adds independent multi-command `verify_commands` while keeping
-  `test_command` compatibility.
-- Generates structured `result.json`, `verify.json`, readable `verify.log`,
-  and a complete `diff.patch` for every terminal task.
-- Adds task-scoped file statistics, clear large/no-diff responses, and avoids
-  including unchanged pre-existing workspace files in task diff evidence.
-- Detects changes outside `resolved_repo_path`, marks the task
-  `failed_scope_violation`, invalidates verification acceptance, and creates a
-  review-only `rollback_scope_violation_plan.md`.
-- Allows ordinary long build/test/release plans while blocking explicit
-  credential theft, destructive disk deletion, and malicious persistence.
-- Redacts secret-like values in ordinary task artifacts instead of rejecting
-  the entire read.
-- Expands `doctor`, stdio/HTTP MCP smoke tests, lifecycle coverage, packaging
-  checks, and ChatGPT workflow documentation.
-
-## Compatibility note
-
-`create_task` now requires `repo_path`. Existing clients that omitted it must
-pass an existing directory under `workspaceRoot`. `test_command` remains
-supported and is converted into a one-entry verification list.
-
-## Verification
-
-- `npm test`: 63 security tests, 14 lifecycle tests, and doctor smoke passed
-- `npm run test:mcp`: passed
-- `npm run test:http-mcp`: 11 passed
-- `npm run doctor`: 47 OK, 0 WARN, 0 FAIL
-- `npm run pack:clean`: passed
-- `npm run verify:package`: passed
-
-Tracked in [issue #1](https://github.com/jiezeng2004-design/safe-bifrost/issues/1).

package/docs/release-v0.4.0.md

@@ -1,74 +0,0 @@
-# PatchWarden v0.4.0
-
-PatchWarden v0.4.0 hardens the ChatGPT-to-local-agent task loop without
-weakening workspace, command, or sensitive-file boundaries.
-
-This release also completes the project rename from Safe-Bifrost to
-PatchWarden. The npm package is now `patchwarden`; the old package is retained
-only to point existing users to the new name.
-
-## Highlights
-
-- Adds supervised Windows tunnel recovery with local readiness probes,
-  structured failure categories, capped retry backoff, and redacted runtime
-  state under `%LOCALAPPDATA%\patchwarden\runtime`.
-- Adds `Check-PatchWarden-Health.cmd` for diagnostics when the MCP tunnel itself
-  is unreachable.
-- Expands `health_check` with workspace, tasks directory, watcher, agent, tunnel,
-  and last-error evidence; local HTTP `/healthz` and `/readyz` are also available.
-- Lets `create_task` use exactly one of a saved `plan_id`, persisted
-  `inline_plan`, or a guarded task template.
-- Adds `inspect_only`, `feature_small`, `fix_tests`, `release_check`, and safe
-  review-only `rollback_scope_violation` templates.
-- Enforces no-change templates with `failed_policy_violation`.
-- Adds deterministic failure guidance through `failure_reason`,
-  `failed_command`, `suggested_next_action`, and `safe_followup_prompt`.
-- Adds standalone `file-stats.json` while preserving complete `diff.patch`,
-  `changed-files.json`, and the v0.3.0 acceptance contract.
-- Adds deterministic `full` and `chatgpt_core` tool profiles. Tunnel stdio uses
-  an exact 16-tool core manifest while ordinary local launches remain on the
-  22-tool full profile.
-- Adds schema-inclusive tool manifest hashing, `schema_epoch`, server version,
-  and a real MCP stdio preflight before tunnel startup.
-- Adds structured `create_task.next_tool_call`, preferred
-  `wait_for_task(timeout_seconds)`, legacy `wait_seconds` compatibility, and a
-  complete terminal summary in the wait response.
-- Adds recursive redaction for structured result/verification summaries and
-  concise verification counts/headlines such as `166 passed`.
-- Adds explicit `get_diff.patch_mode` values for textual, no-change, and
-  hash-only evidence, including a reason when a textual patch is unavailable.
-- Enhances the local health report with process source/version evidence and
-  mixed-version warnings without automatically ending any process.
-- Adds first-class watcher stale/missing evidence, structured pending artifact
-  responses, and controlled recovery for launcher-owned watcher processes.
-- Reports stale client catalogs as `tool_catalog_mismatch` with the active
-  profile, schema epoch, manifest hash, and Connector refresh guidance.
-- Fixes a plan-guard bypass where generic security wording could suppress a
-  later credential-access instruction. Every dangerous occurrence is now
-  evaluated independently and only directly negated actions are allowed.
-
-## Compatibility
-
-The MCP tool names and `save_plan` -> `create_task` workflow remain stable, but
-the product rename is intentionally breaking: old CLI names, `SAFE_BIFROST_*`
-variables, `safe-bifrost.config.json`, `.safe-bifrost/`, and legacy AppData
-paths are not loaded. Follow the migration guide before replacing an existing
-installation. `repo_path`, configured agent validation, and exact
-verification-command allowlists remain mandatory.
-
-## Verification
-
-Run the following from Windows PowerShell:
-
-```powershell
-npm.cmd test
-npm.cmd run test:mcp
-npm.cmd run test:http-mcp
-npm.cmd run doctor
-npm.cmd run check:tool-manifest
-npm.cmd run check:brand
-npm.cmd run test:tunnel-supervisor
-npm.cmd run test:watcher-supervisor
-npm.cmd run pack:clean
-npm.cmd run verify:package
-```