regcode 0.10.0__tar.gz → 0.11.0__tar.gz

{regcode-0.10.0 → regcode-0.11.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: regcode
-Version: 0.10.0
+Version: 0.11.0
 Summary: Minimalistic coding agent with Python API and CLI
 Requires-Python: >=3.10
 Requires-Dist: boto3>=1.43.40

{regcode-0.10.0 → regcode-0.11.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "regcode"
-version = "0.10.0"
+version = "0.11.0"
 description = "Minimalistic coding agent with Python API and CLI"
 readme = "README.md"
 requires-python = ">=3.10"

{regcode-0.10.0 → regcode-0.11.0}/regcode/main.py

@@ -19,7 +19,7 @@ from regcode.monty_sandbox import MontySandbox, MontySandboxConfig
 from regcode.permissions import _TOOL_PERMISSIONS, AgentPermission
 from regcode.sandbox import Sandbox, SandboxConfig
 from regcode.tools.base import ToolResult
-from regcode.tools.builtins import create_default_tools
+from regcode.tools.builtins import create_default_tools, set_working_dir
 from regcode.tools.registry import ToolRegistry
 from regcode.tools.review_notes import AddReviewNoteTool, ReadReviewNotesTool
 from regcode.tracing import setup_mlflow_tracing
@@ -83,6 +83,8 @@ class Agent:
         self._context_callback = context_callback
         self._cost_callback = cost_callback
         self._allowed_dir = directory
+        # Set the working directory context variable for all filesystem tools
+        set_working_dir(directory or ".")
         self._tool_budget = self.config.tool_budget
         self._tool_budget_remaining = self._tool_budget
         self._tool_budget_exhausted = False

{regcode-0.10.0 → regcode-0.11.0}/regcode/tools/builtins.py

@@ -10,8 +10,10 @@ import json
 import os
 import re
 import subprocess
+import sys
 import time
 import urllib.request
+from contextvars import ContextVar
 from pathlib import Path
 from typing import Any
 
@@ -23,6 +25,54 @@ from regcode.tools.base import BaseTool, ToolParam, ToolResult
 from regcode.tools.web_crawl import WebCrawlerTool
 from regcode.tools.web_search import WebSearchTool
 
+# Context variable to store the working directory for directory isolation.
+# All filesystem tools resolve paths relative to this directory.
+# Default is "." (current working directory).
+_working_dir: ContextVar[str] = ContextVar("_working_dir", default=".")
+
+
+def set_working_dir(directory: str) -> None:
+    """Set the working directory for all filesystem tools.
+
+    This uses a context variable so the directory is propagated
+    across all tool calls within the same async context.
+    """
+    _working_dir.set(directory)
+
+
+def get_working_dir() -> str:
+    """Get the current working directory from context.
+
+    Returns the configured directory or "." if not set.
+    """
+    return _working_dir.get()
+
+
+def resolve_path(path: str) -> Path:
+    """Resolve a path relative to the working directory.
+
+    If the path is absolute, it is returned as-is.
+    Otherwise, it is resolved relative to the working directory.
+    """
+    p = Path(path)
+    if p.is_absolute():
+        return p
+    base = Path(get_working_dir())
+    return (base / p).resolve()
+
+
+def _get_git_root_from_working_dir() -> Path | None:
+    """Find the git repository root relative to the working directory.
+
+    Walks up from the working directory looking for .git directory.
+    Returns the repository root, or None if not found.
+    """
+    base = Path(get_working_dir()).resolve()
+    for parent in base.parents:
+        if (parent / ".git").exists():
+            return parent
+    return None
+
 # Files and patterns that are too large/toxic for context — never read them
 BLOCKED_NAMES: frozenset[str] = frozenset((
     # Package lock files
@@ -373,8 +423,9 @@ class ReadFileTool(BaseTool):
                 output="Missing required parameter: path",
                 error=True,
             )
+        # Resolve path relative to working directory
+        p = resolve_path(path)
         # Check for blocked paths
-        p = Path(path)
         # Walk all parts of the path — if any matches a blocked name, reject
         for part in p.parts:
             if part in BLOCKED_NAMES:
@@ -406,13 +457,13 @@ class ReadFileTool(BaseTool):
 
         # Check against .gitignore patterns
         # Find the git repository root (or project root)
-        repo_root = self._find_git_root(p)
+        repo_root = _get_git_root_from_working_dir()
         if repo_root is not None:
             spec = self._load_gitignore_spec(repo_root)
             if spec is not None:
                 # Get relative path from repo_root
                 try:
-                    rel_path = p.resolve().relative_to(repo_root.resolve())
+                    rel_path = p.relative_to(repo_root)
                     # pathspec expects forward slashes
                     rel_path_str = str(rel_path).replace("\\", "/")
                     if spec.match_file(rel_path_str):
@@ -510,19 +561,17 @@ class WriteFileTool(BaseTool):
                 output="Missing required parameter: content",
                 error=True,
             )
-        p = Path(path)
-        # Block path traversal
-        if ".." in p.parts:
+        # Block path traversal BEFORE resolving
+        if ".." in path:
             return ToolResult(
                 output="Error writing file: Path traversal ('..') is not allowed",
                 error=True,
                 exit_code=1,
             )
-        # Resolve the path to get absolute path
-        resolved = p.resolve()
+        p = resolve_path(path)
         try:
-            resolved.parent.mkdir(parents=True, exist_ok=True)
-            resolved.write_text(content)
+            p.parent.mkdir(parents=True, exist_ok=True)
+            p.write_text(content)
             return ToolResult(
                 output=f"Written {len(content)} bytes to {path}",
                 exit_code=0,
@@ -555,24 +604,22 @@ class DeleteDirectoryTool(BaseTool):
                 output="Missing required parameter: path",
                 error=True,
             )
-        p = Path(path)
-        # Block path traversal
-        if ".." in p.parts:
+        # Block path traversal BEFORE resolving
+        if ".." in path:
             return ToolResult(
                 output="Error deleting directory: Path traversal ('..') is not allowed",
                 error=True,
                 exit_code=1,
             )
-        # Resolve the path to get absolute path
-        resolved = p.resolve()
-        if not resolved.is_dir():
+        p = resolve_path(path)
+        if not p.is_dir():
             return ToolResult(
                 output=f"Error deleting: {path} is not a directory or does not exist",
                 error=True,
                 exit_code=1,
             )
         try:
-            resolved.rmdir()
+            p.rmdir()
             return ToolResult(
                 output=f"Deleted directory: {path}",
                 exit_code=0,
@@ -603,26 +650,24 @@ class DeleteFileTool(BaseTool):
                 output="Missing required parameter: path",
                 error=True,
             )
-        p = Path(path)
-        # Block path traversal
-        if ".." in p.parts:
+        # Block path traversal BEFORE resolving
+        if ".." in path:
             return ToolResult(
                 output="Error deleting file: Path traversal ('..') is not allowed",
                 error=True,
                 exit_code=1,
             )
-        # Resolve the path to get absolute path
-        resolved = p.resolve()
+        p = resolve_path(path)
         # check if delete is allowed for this path
-        if not self._is_delete_allowed(resolved):
+        if not self._is_delete_allowed(p):
             return ToolResult(
                 output=f"Error deleting file: Deletion not allowed for path {path}",
                 error=True,
                 exit_code=1,
             )
         try:
-            resolved.parent.mkdir(parents=True, exist_ok=True)
-            resolved.unlink()
+            p.parent.mkdir(parents=True, exist_ok=True)
+            p.unlink()
             return ToolResult(
                 output=f"Deleted file: {path}",
                 exit_code=0,
@@ -706,6 +751,14 @@ class PatchFileTool(BaseTool):
                 error=True,
             )
 
+        # Block path traversal BEFORE resolving
+        if ".." in path:
+            return ToolResult(
+                output="Error: Path traversal ('..') is not allowed",
+                error=True,
+                exit_code=1,
+            )
+
         # Coerce line numbers
         try:
             start_line = int(start_line)
@@ -724,16 +777,9 @@ class PatchFileTool(BaseTool):
                 exit_code=1,
             )
 
-        p = Path(path)
-        if ".." in p.parts:
-            return ToolResult(
-                output="Error: Path traversal ('..') is not allowed",
-                error=True,
-                exit_code=1,
-            )
+        p = resolve_path(path)
 
-        resolved = p.resolve()
-        if not resolved.exists():
+        if not p.exists():
             return ToolResult(
                 output=f"File not found: {path}",
                 error=True,
@@ -741,7 +787,7 @@ class PatchFileTool(BaseTool):
             )
 
         try:
-            raw_content = resolved.read_text()
+            raw_content = p.read_text()
             trailing_newline = raw_content.endswith("\n") if raw_content else False
             lines = raw_content.splitlines()
             total = len(lines)
@@ -783,7 +829,7 @@ class PatchFileTool(BaseTool):
             if trailing_newline:
                 new_content += "\n"
 
-            resolved.write_text(new_content)
+            p.write_text(new_content)
             return ToolResult(
                 output=(
                     f"Replaced lines {start_line}-{end_line} in {path}\n"
@@ -820,7 +866,7 @@ class ListDirTool(BaseTool):
     def execute(self, **kwargs: Any) -> ToolResult:
         path = kwargs.get("path", ".")
         # List from host filesystem
-        p = Path(path)
+        p = resolve_path(path)
         if not p.exists():
             return ToolResult(
                 output=f"Directory not found: {path}",
@@ -883,7 +929,7 @@ class SearchFilesTool(BaseTool):
                 error=True,
             )
         # Search on host filesystem
-        p = Path(path)
+        p = resolve_path(path)
         if not p.exists():
             return ToolResult(
                 output=f"Directory not found: {path}",
@@ -934,7 +980,7 @@ class BrowseDirTool(BaseTool):
     def execute(self, **kwargs: Any) -> ToolResult:
         path = kwargs.get("path", ".")
         try:
-            p = Path(path)
+            p = resolve_path(path)
             if not p.exists():
                 return ToolResult(
                     output=f"Path not found: {path}",
@@ -1024,7 +1070,7 @@ class SearchDirTool(BaseTool):
                 error=True,
             )
         try:
-            p = Path(path)
+            p = resolve_path(path)
             if not p.exists():
                 return ToolResult(
                     output=f"Directory not found: {path}",
@@ -1140,7 +1186,7 @@ class RunPythonScriptTool(BaseTool):
         sandbox = MontySandbox()
         try:
             # Read script file from the host filesystem
-            p = Path(script_path)
+            p = resolve_path(script_path)
             if not p.exists():
                 return ToolResult(
                     output=f"Script not found: {script_path}",
@@ -1188,7 +1234,6 @@ class SystemInfoTool(BaseTool):
 
     def execute(self, **kwargs: Any) -> ToolResult:
         import platform
-        import sys
 
         try:
             python_version = sys.version
@@ -1305,7 +1350,7 @@ class OSVCVETool(BaseTool):
         deps: list[dict[str, str]] = []
 
         # Try pyproject.toml
-        p = Path("pyproject.toml")
+        p = resolve_path("pyproject.toml")
         if p.exists():
             try:
                 deps.extend(self._parse_pyproject(p))
@@ -1313,7 +1358,7 @@ class OSVCVETool(BaseTool):
                 pass
 
         # Try package.json
-        pj = Path("package.json")
+        pj = resolve_path("package.json")
         if pj.exists():
             try:
                 deps.extend(self._parse_package_json(pj))

{regcode-0.10.0 → regcode-0.11.0}/uv.lock

@@ -3935,7 +3935,7 @@ wheels = [
 
 [[package]]
 name = "regcode"
-version = "0.10.0"
+version = "0.11.0"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },