WHC
2fde898da0
Tools - Table-driven tool registry with permission classes and default/minimal profiles; new tools: edit_file, list_dir, glob, grep, delete_file, move_file, todo_write, web_fetch, ask_user (plus read_file paging). - Built-in Myers diff; write tools return unified diffs. - Persistent permission rules (.agent/permissions.json), per-turn undo snapshots (.agent/undo), AGENTS.md project notes, auto-compact at 80% of the model context, cancellable run_shell with process-group kill. TUI - Table-driven slash commands: /provider /key /effort /status /tools /permissions /yolo /undo /retry /diff /export /copy /rename /delete /init /max-steps /todo, with / and @ completion. - Permission modal with diff and prefix rules, ask_user modal, todo panel, header with model/effort/context, bracketed paste, line editing, wide-char cursor, NO_COLOR and ASCII fallback; Esc never quits. Startup and configuration - API keys are entered in the TUI (hidden) and saved per provider in <config>/credentials (0600); env variables are only a fallback. - Last provider, per-provider model and reasoning effort are remembered in <config>/settings.json; --effort/-e and /effort send reasoning_effort (low|medium|high|max) to models that accept it. - DeepSeek preset uses deepseek-flash / deepseek-v4-pro. - Session flags --new/--continue/--resume/--list-sessions, --yolo, --confirm. Compatibility and tests - ncurses detection, macOS/Homebrew support, make install, XDG config dir, POSIX cleanups; Gitea CI (gcc/clang/asan/musl/macOS). - Unit tests for diff, fs tools, registry, undo/perms and config; e2e fixtures multi_file_refactor and ask_or_todo; vendored cJSON.
64 lines
1.7 KiB
C
64 lines
1.7 KiB
C
#ifndef _DEFAULT_SOURCE
|
|
#define _DEFAULT_SOURCE
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "cst_agent.h"
|
|
#include "os_compat.h"
|
|
|
|
int cst_sandbox_resolve(const char *workspace_root, const char *rel_or_abs,
|
|
char *out, size_t out_sz) {
|
|
if (!workspace_root || !rel_or_abs || !out || out_sz < 2)
|
|
return -1;
|
|
|
|
char root_real[OS_PATH_MAX];
|
|
if (os_realpath(workspace_root, root_real, sizeof(root_real)) != 0)
|
|
return -1;
|
|
os_path_norm_slashes(root_real);
|
|
size_t root_len = strlen(root_real);
|
|
|
|
char candidate[OS_PATH_MAX];
|
|
if (os_path_is_abs(rel_or_abs)) {
|
|
snprintf(candidate, sizeof(candidate), "%s", rel_or_abs);
|
|
} else if (os_path_join(candidate, sizeof(candidate), root_real, rel_or_abs) !=
|
|
0) {
|
|
return -1;
|
|
}
|
|
os_path_norm_slashes(candidate);
|
|
|
|
char resolved[OS_PATH_MAX];
|
|
if (os_realpath(candidate, resolved, sizeof(resolved)) == 0) {
|
|
os_path_norm_slashes(resolved);
|
|
if (!os_path_under(root_real, resolved))
|
|
return -1;
|
|
if (strlen(resolved) + 1 > out_sz)
|
|
return -1;
|
|
memcpy(out, resolved, strlen(resolved) + 1);
|
|
return 0;
|
|
}
|
|
|
|
/* Parent exists, leaf may be new file. */
|
|
char tmp[OS_PATH_MAX];
|
|
snprintf(tmp, sizeof(tmp), "%s", candidate);
|
|
char *slash = strrchr(tmp, '/');
|
|
if (!slash)
|
|
return -1;
|
|
*slash = 0;
|
|
const char *base = slash + 1;
|
|
char parent_real[OS_PATH_MAX];
|
|
if (os_realpath(tmp, parent_real, sizeof(parent_real)) != 0)
|
|
return -1;
|
|
os_path_norm_slashes(parent_real);
|
|
if (!os_path_under(root_real, parent_real) &&
|
|
strcmp(parent_real, root_real) != 0)
|
|
return -1;
|
|
(void)root_len;
|
|
int n = snprintf(out, out_sz, "%s/%s", parent_real, base);
|
|
if (n < 0 || (size_t)n >= out_sz)
|
|
return -1;
|
|
return 0;
|
|
}
|