topchester-ai 0.70.0 → 0.71.0

package/dist/bin.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as runTopchesterCli } from "./cli-BWEWnkpM.mjs";
+import { t as runTopchesterCli } from "./cli-BKVU9tvf.mjs";
 //#region src/bin.ts
 await runTopchesterCli();
 //#endregion

package/dist/{cli-BWEWnkpM.mjs → cli-BKVU9tvf.mjs}

@@ -761,7 +761,7 @@ const bashArgsSchema = z.object({
 const bashTool = defineTool({
 	name: "bash",
 	description: "Run an approval-gated shell command inside the workspace.",
-	prompt: "bash: run an approval-gated shell command for terminal work that needs shell syntax, one-off user-requested commands, package manager commands, scripts, pipelines, redirects, or chaining. Prefer run_validator for tests, lint, typecheck, build, check, format-check, and smoke. To use it, reply with only JSON: {\"tool\":\"bash\",\"args\":{\"command\":\"printf hi | wc -c\",\"workdir\":\".\",\"timeout_ms\":120000,\"description\":\"count bytes\"}}",
+	prompt: "bash: run an approval-gated shell command for terminal work that needs shell syntax, one-off user-requested commands, package manager commands, scripts, pipelines, redirects, or chaining. Use run_validator, not bash, for tests and checks that fit strict validator shapes such as pnpm test, go test, cargo test, node --test, local npx tsx --test, lint, typecheck, build, check, format-check, and smoke. To use it, reply with only JSON: {\"tool\":\"bash\",\"args\":{\"command\":\"printf hi | wc -c\",\"workdir\":\".\",\"timeout_ms\":120000,\"description\":\"count bytes\"}}",
 	argsSchema: bashArgsSchema,
 	requiresExclusiveWorkspace: true,
 	execute: async (context, args) => runBashCommand(context.workspaceRoot, args, {
@@ -4355,8 +4355,6 @@ const DANGEROUS_EXECUTABLES = new Set([
 	"git",
 	"kubectl",
 	"mv",
-	"npx",
-	"pnpx",
 	"rm",
 	"rmdir",
 	"scp",
@@ -4585,13 +4583,24 @@ async function findNearestPackageMetadata(workspaceRoot, cwd) {
 async function readPackageMetadata(path) {
 	const raw = JSON.parse(await readFile(path, "utf8"));
 	const scripts = Object.fromEntries(Object.entries(raw.scripts ?? {}).filter((entry) => typeof entry[1] === "string"));
+	const dependencies = new Set([
+		...getPackageDependencyNames(raw.dependencies),
+		...getPackageDependencyNames(raw.devDependencies),
+		...getPackageDependencyNames(raw.optionalDependencies),
+		...getPackageDependencyNames(raw.peerDependencies)
+	]);
 	return {
 		path,
 		dir: dirname(path),
 		scripts,
+		dependencies,
 		packageManager: parsePackageManager(raw.packageManager) ?? await detectPackageManagerFromLockfiles(dirname(path))
 	};
 }
+function getPackageDependencyNames(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return [];
+	return Object.keys(value);
+}
 function parsePackageManager(value) {
 	if (typeof value !== "string") return;
 	const name = value.split("@")[0];
@@ -4614,8 +4623,25 @@ async function detectPackageManagerFromLockfiles(dir) {
 }
 function classifyValidator(command, metadata) {
 	if (isPackageManager(command.executable)) return classifyPackageManagerCommand(command, metadata);
+	if (command.executable === "npx" || command.executable === "pnpx") return classifyPackageExecutorCommand(command, metadata);
 	return classifyDirectValidator(command);
 }
+function classifyPackageExecutorCommand(command, metadata) {
+	const args = command.args[0] === "--no-install" ? command.args.slice(1) : command.args;
+	const executable = args[0];
+	if (executable !== "tsx") return {
+		allowed: false,
+		reason: `command policy rejected '${command.executable}' because only local tsx validators are allowed.`
+	};
+	if (!metadata?.dependencies.has("tsx")) return {
+		allowed: false,
+		reason: `command policy rejected '${command.executable} tsx' because package.json does not declare tsx.`
+	};
+	return classifyDirectValidator({
+		executable,
+		args: args.slice(1)
+	});
+}
 function classifyPackageManagerCommand(command, metadata) {
 	const manager = command.executable;
 	const firstArg = command.args[0];
@@ -4689,6 +4715,15 @@ function getPackageScriptName(manager, args) {
 }
 function classifyDirectValidator(command) {
 	switch (command.executable) {
+		case "go": return classifyGoValidator(command);
+		case "cargo": return classifyCargoValidator(command);
+		case "tsx": return command.args[0] === "--test" || command.args.includes("--test") ? {
+			allowed: true,
+			validator: "test"
+		} : {
+			allowed: false,
+			reason: "command policy rejected 'tsx' because only 'tsx --test' is a validator."
+		};
 		case "vitest":
 		case "jest":
 		case "mocha": return {
@@ -4739,6 +4774,30 @@ function classifyDirectValidator(command) {
 		reason: `command policy rejected '${command.executable}' because it is not a known validator.`
 	};
 }
+function classifyGoValidator(command) {
+	if (command.args[0] !== "test") return {
+		allowed: false,
+		reason: "command policy rejected 'go' because only 'go test' is a validator."
+	};
+	if (command.args.includes("-c") || command.args.some((arg) => arg.startsWith("-exec") || arg.startsWith("-toolexec"))) return {
+		allowed: false,
+		reason: "command policy rejected 'go test' because compile-only or custom tool execution flags are not allowed."
+	};
+	return {
+		allowed: true,
+		validator: "test"
+	};
+}
+function classifyCargoValidator(command) {
+	if (command.args[0] !== "test") return {
+		allowed: false,
+		reason: "command policy rejected 'cargo' because only 'cargo test' is a validator."
+	};
+	return {
+		allowed: true,
+		validator: "test"
+	};
+}
 function classifyScriptName(scriptName) {
 	if (scriptName === "test" || scriptName.startsWith("test:")) return "test";
 	if (scriptName === "lint" || scriptName.startsWith("lint:")) return "lint";
@@ -4771,7 +4830,7 @@ const validatorKindSchema = z.preprocess((value) => value === "format" || value
 const runValidatorTool = defineTool({
 	name: "run_validator",
 	description: "Run a strictly validated test, lint, typecheck, build, check, or smoke command inside the workspace.",
-	prompt: "run_validator: run a strict verification command after edits, such as tests, lint, typecheck, build, check, format-check, or smoke; format means check-only commands such as pnpm format-check, not mutating formatter commands such as pnpm format; failed exits are useful evidence and should be inspected before retrying. To use it, reply with only JSON: {\"tool\":\"run_validator\",\"args\":{\"command\":\"pnpm test test/tools.test.ts\",\"validator\":\"test\",\"workdir\":\".\",\"timeout_ms\":120000}}",
+	prompt: "run_validator: run a strict verification command after edits, such as pnpm test, go test ./..., cargo test, node --test, local npx tsx --test, lint, typecheck, build, check, format-check, or smoke; format means check-only commands such as pnpm format-check, not mutating formatter commands such as pnpm format; failed exits are useful evidence and should be inspected before retrying. To use it, reply with only JSON: {\"tool\":\"run_validator\",\"args\":{\"command\":\"pnpm test test/tools.test.ts\",\"validator\":\"test\",\"workdir\":\".\",\"timeout_ms\":120000}}",
 	argsSchema: z.object({
 		command: z.string().min(1).max(2e3),
 		validator: validatorKindSchema.optional(),
@@ -16788,4 +16847,4 @@ function formatDryRunSyncStatus(status) {
 //#endregion
 export { runTopchesterCli as t };
 
-//# sourceMappingURL=cli-BWEWnkpM.mjs.map
+//# sourceMappingURL=cli-BKVU9tvf.mjs.map