axio-tools-docker 0.9.7__tar.gz → 0.9.8__tar.gz

{axio_tools_docker-0.9.7 → axio_tools_docker-0.9.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: axio-tools-docker
-Version: 0.9.7
+Version: 0.9.8
 Summary: Docker sandbox tools for Axio
 Project-URL: Documentation, https://docs.axio-agent.com
 Project-URL: Homepage, https://github.com/mosquito/axio-agent

{axio_tools_docker-0.9.7 → axio_tools_docker-0.9.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "axio-tools-docker"
-version = "0.9.7"
+version = "0.9.8"
 description = "Docker sandbox tools for Axio"
 readme = "README.md"
 requires-python = ">=3.12"

{axio_tools_docker-0.9.7 → axio_tools_docker-0.9.8}/src/axio_tools_docker/sandbox.py

@@ -97,6 +97,7 @@ async def read_file(
     write_file or patch_file."""
     sandbox: DockerSandbox = CONTEXT.get()
     path = _resolve_path(sandbox.workdir, filename)
+    sandbox._patched_files.discard(path)
     raw = await sandbox.read_file_bytes(path)
     try:
         text = raw.decode()
@@ -179,18 +180,32 @@ async def patch_file(file_path: str, from_line: int, to_line: int, content: str,
     from_line and to_line are both inclusive (from_line=2, to_line=4 replaces
     lines 2, 3, 4). To insert without deleting, set to_line = from_line - 1.
     Always read the file first with line_numbers=True to get correct line numbers.
+    Patch each file at most once per read — re-read with line_numbers=True after
+    patching before issuing another patch to the same file.
     Use this for surgical edits instead of rewriting the whole file with
     write_file."""
     sandbox: DockerSandbox = CONTEXT.get()
     path = _resolve_path(sandbox.workdir, file_path)
+    if path in sandbox._patched_files:
+        raise RuntimeError(
+            f"{file_path!r} was already patched since the last read. "
+            "Re-read the file with line_numbers=True to get updated line numbers before patching again."
+        )
     raw = await sandbox.read_file_bytes(path)
     lines = raw.decode().splitlines(keepends=True)
+    n = len(lines)
+    if not (1 <= from_line <= n + 1):
+        raise ValueError(f"from_line={from_line} out of range; file has {n} lines (valid: 1..{n + 1})")
+    if not (from_line - 1 <= to_line <= n):
+        raise ValueError(f"to_line={to_line} out of range (valid: {from_line - 1}..{n})")
     content_lines = content.splitlines(keepends=True)
     if content_lines and not content_lines[-1].endswith("\n"):
         content_lines[-1] += "\n"
     new_lines = lines[: from_line - 1] + content_lines + lines[to_line:]
-    await sandbox.write_file(path, "".join(new_lines), mode=mode)
-    return f"{len(new_lines)} lines written to {path}"
+    result = "".join(new_lines)
+    await sandbox.write_file(path, result, mode=mode)
+    sandbox._patched_files.add(path)
+    return f"{len(result)} bytes written to {path}"
 
 
 # ---------------------------------------------------------------------------
@@ -302,6 +317,7 @@ class DockerSandbox:
         self.privileged = privileged
         self.ulimits: dict[str, int | tuple[int, int]] = ulimits or {}
         self.tmpfs: dict[str, str] = tmpfs or {}
+        self._patched_files: set[str] = set()
         self.ports: dict[int, int] = ports or {}
         self.platform = platform
         self.extra_hosts: dict[str, str] = extra_hosts or {}

{axio_tools_docker-0.9.7 → axio_tools_docker-0.9.8}/tests/test_integration.py

@@ -145,6 +145,105 @@ async def test_patch_file_insert(sandbox: DockerSandbox) -> None:
     assert raw == b"line1\nline2\nline3\n"
 
 
+# ---------------------------------------------------------------------------
+# patch_file validation
+# ---------------------------------------------------------------------------
+
+
+async def test_patch_file_from_line_zero_rejected(sandbox: DockerSandbox) -> None:
+    await sandbox.write_file("/workspace/v.txt", "a\nb\nc\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    with pytest.raises(Exception, match="from_line=0"):
+        await tool(file_path="/workspace/v.txt", from_line=0, to_line=1, content="x")
+    assert await sandbox.read_file_bytes("/workspace/v.txt") == b"a\nb\nc\n"
+
+
+async def test_patch_file_negative_from_line_rejected(sandbox: DockerSandbox) -> None:
+    await sandbox.write_file("/workspace/v.txt", "a\nb\nc\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    with pytest.raises(Exception, match="from_line=-1"):
+        await tool(file_path="/workspace/v.txt", from_line=-1, to_line=1, content="x")
+    assert await sandbox.read_file_bytes("/workspace/v.txt") == b"a\nb\nc\n"
+
+
+async def test_patch_file_from_line_beyond_end_rejected(sandbox: DockerSandbox) -> None:
+    await sandbox.write_file("/workspace/v.txt", "a\nb\nc\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    with pytest.raises(Exception, match="from_line=5"):
+        await tool(file_path="/workspace/v.txt", from_line=5, to_line=5, content="x")
+    assert await sandbox.read_file_bytes("/workspace/v.txt") == b"a\nb\nc\n"
+
+
+async def test_patch_file_to_line_beyond_end_rejected(sandbox: DockerSandbox) -> None:
+    await sandbox.write_file("/workspace/v.txt", "a\nb\nc\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    with pytest.raises(Exception, match="to_line=4"):
+        await tool(file_path="/workspace/v.txt", from_line=2, to_line=4, content="x")
+    assert await sandbox.read_file_bytes("/workspace/v.txt") == b"a\nb\nc\n"
+
+
+async def test_patch_file_gap_range_rejected(sandbox: DockerSandbox) -> None:
+    """from_line > to_line + 1 must be rejected."""
+    await sandbox.write_file("/workspace/v.txt", "a\nb\nc\nd\ne\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    with pytest.raises(Exception, match="to_line=2"):
+        await tool(file_path="/workspace/v.txt", from_line=4, to_line=2, content="x")
+    assert await sandbox.read_file_bytes("/workspace/v.txt") == b"a\nb\nc\nd\ne\n"
+
+
+# ---------------------------------------------------------------------------
+# patch_file double-patching guard
+# ---------------------------------------------------------------------------
+
+
+async def test_patch_file_second_patch_rejected(sandbox: DockerSandbox) -> None:
+    """Second patch to the same file without re-reading must raise RuntimeError."""
+    await sandbox.write_file("/workspace/dp.txt", "a\nb\nc\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    await tool(file_path="/workspace/dp.txt", from_line=1, to_line=1, content="A\n")
+    with pytest.raises(Exception, match="already patched"):
+        await tool(file_path="/workspace/dp.txt", from_line=2, to_line=2, content="B\n")
+    raw = await sandbox.read_file_bytes("/workspace/dp.txt")
+    assert raw == b"A\nb\nc\n"
+
+
+async def test_patch_file_read_clears_double_patch_guard(sandbox: DockerSandbox) -> None:
+    """Re-reading the file via the read_file tool clears the patch guard."""
+    await sandbox.write_file("/workspace/rg.txt", "a\nb\nc\n")
+    patch_tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    read_tool = next(t for t in sandbox.tools if t.name == "read_file")
+    await patch_tool(file_path="/workspace/rg.txt", from_line=1, to_line=1, content="A\n")
+    await read_tool(filename="/workspace/rg.txt", line_numbers=True)
+    await patch_tool(file_path="/workspace/rg.txt", from_line=2, to_line=2, content="B\n")
+    raw = await sandbox.read_file_bytes("/workspace/rg.txt")
+    assert raw == b"A\nB\nc\n"
+
+
+# ---------------------------------------------------------------------------
+# patch_file special file content
+# ---------------------------------------------------------------------------
+
+
+async def test_patch_file_null_bytes_in_preserved_lines_survive(sandbox: DockerSandbox) -> None:
+    """Null bytes in lines not being replaced must not be stripped."""
+    await sandbox.write_file("/workspace/null.txt", "line1\nline2\x00null\nline3\n")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    await tool(file_path="/workspace/null.txt", from_line=1, to_line=1, content="replaced\n")
+    raw = await sandbox.read_file_bytes("/workspace/null.txt")
+    assert b"line2\x00null" in raw, "null byte in preserved line was stripped"
+    assert raw.startswith(b"replaced\n")
+
+
+async def test_patch_file_binary_file_raises_before_write(sandbox: DockerSandbox) -> None:
+    """Patching a non-UTF-8 binary file must fail before any modification."""
+    await sandbox.exec("python3 -c \"open('/workspace/bin.bin','wb').write(bytes(range(128,200)))\"")
+    tool = next(t for t in sandbox.tools if t.name == "patch_file")
+    original = await sandbox.read_file_bytes("/workspace/bin.bin")
+    with pytest.raises(Exception, match="codec can't decode"):
+        await tool(file_path="/workspace/bin.bin", from_line=1, to_line=1, content="hello\n")
+    assert await sandbox.read_file_bytes("/workspace/bin.bin") == original
+
+
 async def test_run_python(sandbox: DockerSandbox) -> None:
     tool = next(t for t in sandbox.tools if t.name == "run_python")
     result = await tool(code="print(2 + 2)")