Phase 2 of v2.0. BooCoder is now a functional write-capable chatbot.
Write-path guard: resolveWritePath() uses resolve() (no realpath — files may
not exist for creates) + prefix-check + secret-file deny list (.env, *.pem,
id_rsa*, etc.). 23 unit tests cover traversal attacks.
Pending-changes service: queueEdit/Create/Delete → applyOne/All →
rejectOne/All → rewindOne. Edit diffs stored as JSON {old, new}. All writes
queue before touching disk; apply re-validates the path guard.
5 write tools: edit_file, create_file, delete_file, apply_pending, rewind.
Registered alongside 25 read-only tools from BooChat (30 total, alpha-sorted).
Write tools use a module-level inference context for sql+sessionId injection.
Inference loop via workspace dependency: apps/coder imports
createInferenceRunner, createBroker, ALL_TOOLS from @boocode/server (dist/).
apps/server gains declaration: true + exports map with typed subpath entries.
No code duplication — one inference engine shared by both apps.
API routes: POST /api/sessions/:id/messages (user msg → inference), POST stop,
GET/POST pending-changes CRUD (5 endpoints), WebSocket session streaming.
Dockerfile updated to build apps/server first (coder depends on its .d.ts).
Health endpoint reports tool count: {"ok":true,"db":true,"tools":30}.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
45 lines
1.4 KiB
TypeScript
45 lines
1.4 KiB
TypeScript
import { z } from 'zod';
|
|
import type { ToolDef, ToolContext } from './types.js';
|
|
import { applyAll } from '../pending_changes.js';
|
|
|
|
const ApplyPendingInput = z.object({});
|
|
type ApplyPendingInputT = z.infer<typeof ApplyPendingInput>;
|
|
|
|
export const applyPendingTool: ToolDef<ApplyPendingInputT> = {
|
|
name: 'apply_pending',
|
|
description:
|
|
'Apply all pending changes for the current session to disk. ' +
|
|
'Each queued create/edit/delete is executed in order.',
|
|
inputSchema: ApplyPendingInput,
|
|
jsonSchema: {
|
|
type: 'function',
|
|
function: {
|
|
name: 'apply_pending',
|
|
description:
|
|
'Apply all pending changes for the current session to disk. ' +
|
|
'Each queued create/edit/delete is executed in order.',
|
|
parameters: {
|
|
type: 'object',
|
|
properties: {},
|
|
required: [],
|
|
},
|
|
},
|
|
},
|
|
async execute(_input: ApplyPendingInputT, projectRoot: string, context: ToolContext): Promise<unknown> {
|
|
const results = await applyAll(context.sql, context.sessionId, projectRoot);
|
|
const succeeded = results.filter((r) => r.success).length;
|
|
const failed = results.filter((r) => !r.success).length;
|
|
|
|
return {
|
|
total: results.length,
|
|
succeeded,
|
|
failed,
|
|
results,
|
|
message:
|
|
results.length === 0
|
|
? 'No pending changes to apply.'
|
|
: `Applied ${succeeded}/${results.length} changes.${failed > 0 ? ` ${failed} failed.` : ''}`,
|
|
};
|
|
},
|
|
};
|