jac-coder 0.1.0__py3-none-any.whl

jac_coder/tool/impl/git.impl.jac

@@ -0,0 +1,115 @@
+def _run_git(args: list[str], cwd: str = "") -> tuple {
+    work_dir = cwd or os.getcwd();
+    (sandboxed, allowed) = sandbox_path(work_dir);
+    if not allowed {
+        return ("", f"Error: directory {work_dir} is outside sandbox.", 1);
+    }
+    try {
+        result = subprocess.run(
+            ["git"] + args, capture_output=True, text=True, timeout=30, cwd=sandboxed
+        );
+        return (result.stdout.strip(), result.stderr.strip(), result.returncode);
+    } except subprocess.TimeoutExpired {
+        return ("", "Error: git command timed out after 30s.", 1);
+    } except FileNotFoundError {
+        return ("", "Error: git is not installed or not in PATH.", 1);
+    } except Exception as e {
+        return ("", f"Error: {str(e)}", 1);
+    }
+}
+
+
+impl git_status() -> str {
+    tool_status("git_status", "checking working tree");
+    (out, err, code) = _run_git(["status", "--short"]);
+    if code != 0 {
+        tool_end("-> error", error=True);
+        return f"Error: {err}";
+    }
+    if not out {
+        tool_end("-> clean");
+        return "Working tree clean - no changes.";
+    }
+    (out, _) = truncate_output(out);
+    tool_end(f"-> {len(out.splitlines())} changes");
+    return out;
+}
+
+
+impl git_diff(ref: str = "HEAD") -> str {
+    tool_status("git_diff", f"diff against {ref}");
+    (out, err, code) = _run_git(["diff", ref]);
+    if code != 0 {
+        # Try without ref (unstaged changes)
+        (out, err, code) = _run_git(["diff"]);
+        if code != 0 {
+            tool_end("-> error", error=True);
+            return f"Error: {err}";
+        }
+    }
+    if not out {
+        tool_end("-> no diff");
+        return "No differences found.";
+    }
+    (out, _) = truncate_output(out);
+    tool_end(f"-> {len(out.splitlines())} lines");
+    return out;
+}
+
+
+impl git_commit(message: str, files: list[str] = []) -> str {
+    tool_status("git_commit", message[:60]);
+    if not message {
+        tool_end("-> error", error=True);
+        return "Error: commit message is required.";
+    }
+
+    # Stage files
+    if files {
+        for fp in files {
+            (_, err, code) = _run_git(["add", fp]);
+            if code != 0 {
+                tool_end(f"-> stage error: {err}", error=True);
+                return f"Error staging {fp}: {err}";
+            }
+        }
+    } else {
+        (_, err, code) = _run_git(["add", "-A"]);
+        if code != 0 {
+            tool_end(f"-> stage error: {err}", error=True);
+            return f"Error staging files: {err}";
+        }
+    }
+
+    # Commit
+    (out, err, code) = _run_git(["commit", "-m", message]);
+    if code != 0 {
+        if "nothing to commit" in (out + err) {
+            tool_end("-> nothing to commit");
+            return "Nothing to commit - working tree clean.";
+        }
+        tool_end("-> commit error", error=True);
+        return f"Error: {err or out}";
+    }
+    tool_end("-> committed");
+    return out;
+}
+
+
+impl git_log(count: int = 10) -> str {
+    tool_status("git_log", f"last {count} commits");
+    (out, err, code) = _run_git(
+        ["log", f"--max-count={count}", "--oneline", "--decorate"]
+    );
+    if code != 0 {
+        tool_end("-> error", error=True);
+        return f"Error: {err}";
+    }
+    if not out {
+        tool_end("-> no commits");
+        return "No commits found.";
+    }
+    tool_end(f"-> {len(out.splitlines())} commits");
+    (out, _) = truncate_output(out);
+    return out;
+}

jac_coder/tool/impl/guarded.impl.jac

@@ -0,0 +1,72 @@
+impl _check_permission(tool_id: str, resource: str) -> str {
+    action = permission_engine.check(tool_id, resource);
+
+    if action == "deny" {
+        return f"Permission denied: {tool_id} on {resource} is not allowed in this agent mode.";
+    }
+
+    if action == "ask" {
+        decision = _ask_user(tool_id, resource);
+        if decision == "deny" {
+            return f"Permission denied by user: {tool_id} on {resource}";
+        }
+        if decision == "always" {
+            permission_engine.remember_allow(tool_id, "*");
+        }
+    }
+
+    return "allow";
+}
+
+
+impl _ask_user(tool_id: str, resource: str) -> str {
+    if os.environ.get("JACCODER_WEB_MODE", "") {
+        return "allow";
+    }
+    display = resource[:80] + "..." if len(resource) > 80 else resource;
+    print(f"\n{YELLOW}[Permission]{RESET} {tool_id}: {display}");
+    print(f"  {DIM}(y)es / (n)o / (a)lways allow {tool_id}{RESET}");
+    try {
+        answer = input("  Allow? ").strip().lower();
+    } except (EOFError, KeyboardInterrupt) {
+        return "deny";
+    }
+    if answer in ["a", "always"] {
+        return "always";
+    }
+    if answer in ["y", "yes", ""] {
+        return "allow";
+    }
+    return "deny";
+}
+
+
+impl write_file_guarded(file_path: str, content: str) -> str {
+    verdict = _check_permission("write_file", file_path);
+    if verdict != "allow" {
+        return verdict;
+    }
+    return write_file(file_path, content);
+}
+
+
+impl edit_file_guarded(
+    file_path: str, old_string: str, new_string: str, replace_all: bool = False
+) -> str {
+    verdict = _check_permission("edit_file", file_path);
+    if verdict != "allow" {
+        return verdict;
+    }
+    return edit_file(file_path, old_string, new_string, replace_all);
+}
+
+
+impl run_command(
+    command: str, workdir: str = ".", timeout: int = 120, background: bool = False
+) -> str {
+    verdict = _check_permission("bash_exec", command);
+    if verdict != "allow" {
+        return verdict;
+    }
+    return bash_exec(command, workdir, timeout, background);
+}