rho-coding-agent 2.19.0

A fast Rust agent harness with a small footprint and opinionated defaults
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

//! Authorizes agent definition files against discovery roots.
//!
//! Used by the TUI editor and delete flow for existing files. Roots match
//! catalog discovery: `~/.agents/agents`, `~/.rho/agents`, and trusted
//! `<project>/.agents/agents`.

use std::{
    fs, io,
    path::{Path, PathBuf},
};

use thiserror::Error;

use super::AgentOrigin;

#[derive(Debug, Error, PartialEq, Eq)]
pub(crate) enum AuthorizeAgentPathError {
    #[error("agent source is outside an editable agent directory")]
    OutsideRoot,
    #[error("editable agent root is outside its source base")]
    RootOutsideBase,
    #[error("editable agent directory must not contain symlinks")]
    SymlinkInRoot,
    #[error("editable agent directory must not be a symlink")]
    RootIsSymlink,
    #[error("editable agent source must be a regular file")]
    NotRegularFile,
    #[error("could not inspect {path}: {message}")]
    Inspect { path: String, message: String },
}

/// Authorizes an existing agent file for in-place editing.
pub(crate) fn authorize_existing_agent_file(
    origin: AgentOrigin,
    path: &Path,
    cwd: &Path,
    home: Option<&Path>,
) -> Result<PathBuf, AuthorizeAgentPathError> {
    let roots = origin_roots(origin, cwd, home);
    let (base, root) = roots
        .into_iter()
        .find(|(_, root)| path.parent() == Some(root.as_path()))
        .ok_or(AuthorizeAgentPathError::OutsideRoot)?;
    inspect_root_chain(&base, &root)?;
    inspect_existing_file(path)?;
    Ok(root)
}

fn origin_roots(origin: AgentOrigin, cwd: &Path, home: Option<&Path>) -> Vec<(PathBuf, PathBuf)> {
    match origin {
        AgentOrigin::AgentsHome => home
            .map(|home| {
                let [agents_home, _] = crate::paths::user_agent_dirs(home);
                vec![(home.to_path_buf(), agents_home)]
            })
            .unwrap_or_default(),
        AgentOrigin::RhoHome => home
            .map(|home| {
                let [_, rho_home] = crate::paths::user_agent_dirs(home);
                vec![(home.to_path_buf(), rho_home)]
            })
            .unwrap_or_default(),
        AgentOrigin::Project => crate::workspace::project_ancestor_dirs(cwd)
            .into_iter()
            .map(|base| {
                let root = base.join(".agents/agents");
                (base, root)
            })
            .collect(),
        AgentOrigin::Internal | AgentOrigin::BuiltIn | AgentOrigin::Workflow => Vec::new(),
    }
}

fn inspect_root_chain(base: &Path, root: &Path) -> Result<(), AuthorizeAgentPathError> {
    let relative = root
        .strip_prefix(base)
        .map_err(|_| AuthorizeAgentPathError::RootOutsideBase)?;
    let mut component_path = base.to_path_buf();
    for component in relative.components() {
        component_path.push(component);
        match fs::symlink_metadata(&component_path) {
            Ok(metadata) => {
                if metadata.file_type().is_symlink() {
                    return Err(if component_path == root {
                        AuthorizeAgentPathError::RootIsSymlink
                    } else {
                        AuthorizeAgentPathError::SymlinkInRoot
                    });
                }
                if component_path == root && !metadata.is_dir() {
                    return Err(AuthorizeAgentPathError::RootIsSymlink);
                }
            }
            Err(error) => return Err(inspect_error(&component_path, error)),
        }
    }
    Ok(())
}

fn inspect_existing_file(path: &Path) -> Result<(), AuthorizeAgentPathError> {
    match fs::symlink_metadata(path) {
        Ok(metadata) => {
            if metadata.file_type().is_symlink() || !metadata.is_file() {
                Err(AuthorizeAgentPathError::NotRegularFile)
            } else {
                Ok(())
            }
        }
        Err(error) => Err(inspect_error(path, error)),
    }
}

fn inspect_error(path: &Path, error: io::Error) -> AuthorizeAgentPathError {
    AuthorizeAgentPathError::Inspect {
        path: crate::paths::display(path),
        message: error.to_string(),
    }
}