invar-tools 1.12.0__py3-none-any.whl → 1.15.0__py3-none-any.whl

invar/templates/pi-tools/invar/index.ts

@@ -0,0 +1,207 @@
+/**
+ * Invar Custom Tools for Pi Coding Agent
+ *
+ * Wraps Invar CLI commands as Pi tools for better LLM integration.
+ * Installed via: invar init --pi
+ */
+
+import { Type } from "@sinclair/typebox";
+import type { CustomToolFactory } from "@mariozechner/pi-coding-agent";
+
+const factory: CustomToolFactory = (pi) => {
+  // Helper to check if invar is available
+  async function checkInvarInstalled(): Promise<boolean> {
+    try {
+      const result = await pi.exec("which", ["invar"]);
+      return result.exitCode === 0;
+    } catch {
+      return false;
+    }
+  }
+
+  // Helper to validate path/target parameters (defense-in-depth)
+  function isValidPath(p: string): boolean {
+    // Reject shell metacharacters (including newline injection) and path traversal
+    if (/[;&|`$"'\\<>\n\r\0]/.test(p)) {
+      return false;
+    }
+    if (p.includes('..')) {
+      return false;
+    }
+    return true;
+  }
+
+  return [
+    // =========================================================================
+    // invar_guard - Smart verification (static + doctests + symbolic)
+    // =========================================================================
+    {
+      name: "invar_guard",
+      label: "Invar Guard",
+      description: "Verify code quality with static analysis, doctests, CrossHair symbolic execution, and Hypothesis testing. Use this instead of pytest/crosshair. By default checks git-modified files; use --all for full project check.",
+      parameters: Type.Object({
+        changed: Type.Optional(Type.Boolean({
+          description: "Check only git-modified files (default: true)",
+          default: true,
+        })),
+        contracts_only: Type.Optional(Type.Boolean({
+          description: "Contract coverage check only (skip tests)",
+          default: false,
+        })),
+        coverage: Type.Optional(Type.Boolean({
+          description: "Collect branch coverage from doctest + hypothesis",
+          default: false,
+        })),
+        strict: Type.Optional(Type.Boolean({
+          description: "Treat warnings as errors",
+          default: false,
+        })),
+      }),
+      async execute(toolCallId, params, onUpdate, ctx, signal) {
+        const installed = await checkInvarInstalled();
+        if (!installed) {
+          throw new Error("Invar not installed. Run: pip install invar-tools");
+        }
+
+        const args = ["guard"];
+
+        // Default is --changed (check modified files)
+        if (params.changed === false) {
+          args.push("--all");
+        }
+
+        if (params.contracts_only) {
+          args.push("-c");
+        }
+        if (params.coverage) {
+          args.push("--coverage");
+        }
+        if (params.strict) {
+          args.push("--strict");
+        }
+
+        const result = await pi.exec("invar", args, { cwd: pi.cwd, signal });
+
+        if (result.killed) {
+          throw new Error("Guard verification was cancelled");
+        }
+
+        const output = result.stdout + result.stderr;
+
+        return {
+          content: [{ type: "text", text: output || "Guard completed" }],
+          details: {
+            exitCode: result.exitCode,
+            passed: result.exitCode === 0,
+          },
+        };
+      },
+    },
+
+    // =========================================================================
+    // invar_sig - Show function signatures and contracts
+    // =========================================================================
+    {
+      name: "invar_sig",
+      label: "Invar Sig",
+      description: "Show function signatures and contracts (@pre/@post). Use this INSTEAD of Read() when you want to understand file structure without reading full implementation.",
+      parameters: Type.Object({
+        target: Type.String({
+          description: "File path or file::symbol path (e.g., 'src/foo.py' or 'src/foo.py::MyClass')",
+        }),
+      }),
+      async execute(toolCallId, params, onUpdate, ctx, signal) {
+        const installed = await checkInvarInstalled();
+        if (!installed) {
+          throw new Error("Invar not installed. Run: pip install invar-tools");
+        }
+
+        if (!isValidPath(params.target)) {
+          throw new Error("Invalid target path: contains unsafe characters or path traversal");
+        }
+
+        const result = await pi.exec("invar", ["sig", params.target], {
+          cwd: pi.cwd,
+          signal,
+        });
+
+        if (result.killed) {
+          throw new Error("Sig command was cancelled");
+        }
+
+        if (result.exitCode !== 0) {
+          throw new Error(`Failed to get signatures: ${result.stderr}`);
+        }
+
+        return {
+          content: [{ type: "text", text: result.stdout }],
+          details: {
+            target: params.target,
+          },
+        };
+      },
+    },
+
+    // =========================================================================
+    // invar_map - Symbol map with reference counts
+    // =========================================================================
+    {
+      name: "invar_map",
+      label: "Invar Map",
+      description: "Symbol map with reference counts. Use this INSTEAD of Grep for 'def ' to find entry points and most-referenced symbols.",
+      parameters: Type.Object({
+        path: Type.Optional(Type.String({
+          description: "Project path (default: current directory)",
+          default: ".",
+        })),
+        top: Type.Optional(Type.Number({
+          description: "Show top N symbols by reference count",
+          default: 10,
+        })),
+      }),
+      async execute(toolCallId, params, onUpdate, ctx, signal) {
+        const installed = await checkInvarInstalled();
+        if (!installed) {
+          throw new Error("Invar not installed. Run: pip install invar-tools");
+        }
+
+        if (params.path && params.path !== "." && !isValidPath(params.path)) {
+          throw new Error("Invalid path: contains unsafe characters or path traversal");
+        }
+
+        const args = ["map"];
+
+        if (params.path && params.path !== ".") {
+          args.push(params.path);
+        }
+
+        if (params.top) {
+          args.push("--top", params.top.toString());
+        }
+
+        const result = await pi.exec("invar", args, {
+          cwd: pi.cwd,
+          signal,
+        });
+
+        if (result.killed) {
+          throw new Error("Map command was cancelled");
+        }
+
+        if (result.exitCode !== 0) {
+          throw new Error(`Failed to generate map: ${result.stderr}`);
+        }
+
+        return {
+          content: [{ type: "text", text: result.stdout }],
+          details: {
+            path: params.path || ".",
+            top: params.top || 10,
+          },
+        };
+      },
+    },
+  ];
+};
+
+export default factory;

invar/templates/protocol/python/tools.md

@@ -1,9 +1,9 @@
 ## Commands (Python)
 
 ```bash
-invar guard              # Full: static + doctests + CrossHair + Hypothesis
+invar guard              # Check git-modified files (fast, default)
+invar guard --all        # Check entire project (CI, release)
 invar guard --static     # Static only (quick debug, ~0.5s)
-invar guard --changed    # Modified files only
 invar guard --coverage   # Collect branch coverage
 invar guard -c           # Contract coverage only (DX-63)
 invar sig <file>         # Show contracts + signatures
@@ -11,6 +11,9 @@ invar map --top 10       # Most-referenced symbols
 invar rules              # List all rules with detection/hints (JSON)
 ```
 
+**Default behavior**: Checks git-modified files for fast feedback during development.
+Use `--all` for comprehensive checks before release.
+
 ## Configuration (Python)
 
 ```toml

invar/templates/protocol/typescript/tools.md

@@ -2,15 +2,18 @@
 
 ```bash
 # Verification (Python CLI - works for TypeScript)
-invar guard                  # Full: tsc + eslint + vitest + ts-analyzer
+invar guard                  # Check git-modified files (fast, default)
+invar guard --all            # Check entire project (CI, release)
 invar guard --json           # Agent-friendly v2.0 JSON output
-invar guard --changed        # Modified files only
 
 # Analysis
 invar sig <file>             # Show function signatures
 invar map --top 10           # Most-referenced symbols
 ```
 
+**Default behavior**: Checks git-modified files for fast feedback during development.
+Use `--all` for comprehensive checks before release.
+
 ## Guard Output (v2.0 JSON)
 
 ```json