Clément SAILLANT
ccbeb68937
- Added new tools for generating and applying safe patches using Mistral. - Implemented a local embedding index for repository files to facilitate search functionality. - Created a schema for validating patch JSON structure. - Developed various prompts for different agent roles (Architect, PM, QA, etc.) to guide Mistral's output. - Established a set of scope allowlists to ensure safe application of patches. - Included documentation for agents and systems correspondence. - Added requirements for Mistral dependencies in requirements-mistral.txt.
97 lines
2.8 KiB
Python
97 lines
2.8 KiB
Python
#!/usr/bin/env python3
|
|
"""
|
|
Apply a SafePatch JSON to the repo with scope allowlists + deny globs.
|
|
|
|
This script never runs shell commands. It only writes files.
|
|
|
|
Example:
|
|
python tools/mistral/apply_safe_patch.py --scope ai:spec --patch /tmp/patch.json
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import json
|
|
from pathlib import Path
|
|
|
|
from jsonschema import Draft202012Validator
|
|
|
|
from tools.mistral.scope_allowlists import is_path_allowed, explain_scope
|
|
|
|
SCHEMA_PATH = Path(__file__).parent / "schemas" / "safe_patch.schema.json"
|
|
|
|
|
|
def safe_write(path: Path, content: str) -> None:
|
|
path.parent.mkdir(parents=True, exist_ok=True)
|
|
path.write_text(content, encoding="utf-8")
|
|
|
|
|
|
def main() -> int:
|
|
ap = argparse.ArgumentParser()
|
|
ap.add_argument("--scope", required=True, help="ai:spec|ai:plan|ai:tasks|ai:impl|ai:qa|ai:docs")
|
|
ap.add_argument("--patch", required=True)
|
|
ap.add_argument("--allow-delete", action="store_true")
|
|
ap.add_argument("--root", default=".", help="repo root (default: .)")
|
|
args = ap.parse_args()
|
|
|
|
root = Path(args.root).resolve()
|
|
schema = json.loads(SCHEMA_PATH.read_text(encoding="utf-8"))
|
|
|
|
patch_path = Path(args.patch)
|
|
patch = json.loads(patch_path.read_text(encoding="utf-8"))
|
|
|
|
v = Draft202012Validator(schema)
|
|
errors = sorted(v.iter_errors(patch), key=lambda e: e.path)
|
|
if errors:
|
|
msg = "\n".join([f"- {list(e.path)}: {e.message}" for e in errors])
|
|
raise SystemExit(f"Patch JSON does not match schema:\n{msg}")
|
|
|
|
edits = patch.get("edits", [])
|
|
blocked = []
|
|
for e in edits:
|
|
p = e["path"].replace("\\", "/").lstrip("/")
|
|
if not is_path_allowed(args.scope, p):
|
|
blocked.append(p)
|
|
|
|
if blocked:
|
|
raise SystemExit(
|
|
"Blocked paths for scope "
|
|
+ args.scope
|
|
+ ":\n - "
|
|
+ "\n - ".join(blocked)
|
|
+ "\n\n"
|
|
+ explain_scope(args.scope)
|
|
)
|
|
|
|
applied = []
|
|
for e in edits:
|
|
rel = e["path"].replace("\\", "/").lstrip("/")
|
|
action = e["action"]
|
|
dst = root / rel
|
|
|
|
if action in ("create", "update"):
|
|
safe_write(dst, e.get("content", ""))
|
|
applied.append(f"{action}: {rel}")
|
|
elif action == "delete":
|
|
if not args.allow_delete:
|
|
raise SystemExit(f"Refusing to delete {rel} (pass --allow-delete)")
|
|
if dst.exists():
|
|
dst.unlink()
|
|
applied.append(f"delete: {rel}")
|
|
else:
|
|
raise SystemExit(f"Unknown action: {action}")
|
|
|
|
print("Applied edits:")
|
|
for a in applied:
|
|
print(" -", a)
|
|
|
|
if patch.get("commands"):
|
|
print("\nSuggested verify commands (NOT executed):")
|
|
for c in patch["commands"]:
|
|
print(" -", c)
|
|
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|