whycodes-core 0.6.33

use std::future::Future;
use std::path::Path;
use std::pin::Pin;

use crate::file_claims::{ClaimResult, FileClaimRegistry, FileStaleEvent};
use crate::network::NetworkPolicy;
use crate::panel::PanelSink;
use crate::sandbox::SandboxSettings;
use crate::swarm_hub::SwarmHub;
use crate::types::{PermissionSet, ToolDefinition, ToolResult};

/// Context passed to tool execution
#[derive(Clone)]
pub struct ToolContext {
    pub working_dir: String,
    pub session_id: Option<String>,
    /// OS sandbox policy for shell tools (ignored by pure file tools).
    pub sandbox: SandboxSettings,
    /// Domain allow/deny for HTTP tools (`webfetch`, `websearch`, GitHub API).
    pub network: NetworkPolicy,
    /// When set (swarm workers), file mutators claim paths before writing.
    pub file_claims: Option<FileClaimRegistry>,
    /// Stable agent id for file claims (e.g. `worker-0`). Required with `file_claims`.
    pub agent_id: Option<String>,
    /// Display label for conflict messages (defaults to `agent_id`).
    pub agent_label: Option<String>,
    /// Resident workspace file index (when the host started one). File tools
    /// use it as a warm fast path for enumeration and fall back to walking.
    pub file_index: Option<std::sync::Arc<whycodes_index::WorkspaceIndex>>,
    /// Optional sink so the `panel` tool can pin a file / diff / mermaid.
    pub panel: Option<PanelSink>,
    /// Optional sink so `todowrite` can update the host todo panel live.
    pub todo_sink: Option<crate::todo::TodoSink>,
    /// Swarm mailbox (DM / broadcast).
    pub swarm_hub: Option<SwarmHub>,
}

impl std::fmt::Debug for ToolContext {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        f.debug_struct("ToolContext")
            .field("working_dir", &self.working_dir)
            .field("session_id", &self.session_id)
            .field("sandbox", &self.sandbox)
            .field("network", &self.network)
            .field("file_claims", &self.file_claims)
            .field("agent_id", &self.agent_id)
            .field("agent_label", &self.agent_label)
            .field("file_index", &self.file_index.as_ref().map(|_| "Some"))
            .field("panel", &self.panel.as_ref().map(|_| "Some"))
            .field("todo_sink", &self.todo_sink.as_ref().map(|_| "Some"))
            .field("swarm_hub", &self.swarm_hub)
            .finish()
    }
}

impl ToolContext {
    pub fn new(working_dir: impl Into<String>) -> Self {
        Self {
            working_dir: working_dir.into(),
            session_id: None,
            sandbox: SandboxSettings::default(),
            network: NetworkPolicy::unrestricted(),
            file_claims: None,
            agent_id: None,
            agent_label: None,
            file_index: None,
            panel: None,
            todo_sink: None,
            swarm_hub: None,
        }
    }

    pub fn unsandboxed(working_dir: impl Into<String>) -> Self {
        Self {
            working_dir: working_dir.into(),
            session_id: None,
            sandbox: SandboxSettings::off(),
            network: NetworkPolicy::unrestricted(),
            file_claims: None,
            agent_id: None,
            agent_label: None,
            file_index: None,
            panel: None,
            todo_sink: None,
            swarm_hub: None,
        }
    }

    /// Gate a file write/edit against the shared claim registry.
    ///
    /// No-op when claims are not active (normal single-agent turns).
    /// On conflict returns an error string suitable for `ToolResult.content`.
    pub fn check_file_write(&self, path: &Path) -> Result<(), String> {
        let Some(reg) = self.file_claims.as_ref() else {
            return Ok(());
        };
        let Some(id) = self.agent_id.as_deref() else {
            return Ok(());
        };
        let label = self.agent_label.as_deref().unwrap_or(id);
        match reg.try_claim(id, label, path) {
            ClaimResult::Acquired | ClaimResult::Held => Ok(()),
            ClaimResult::Conflict {
                owner_label,
                owner_id: _,
            } => {
                let shown = path.display();
                Err(format!(
                    "File conflict: `{shown}` is claimed by swarm agent `{owner_label}`. \
                     Choose a different file, or wait for that agent to finish."
                ))
            }
        }
    }

    /// After a successful read, note the path. Returns a stale-read event when
    /// another agent wrote the file since this reader last saw it.
    pub fn check_file_read(&self, path: &Path) -> Option<FileStaleEvent> {
        let reg = self.file_claims.as_ref()?;
        let id = self.agent_id.as_deref()?;
        reg.note_read(id, path)
    }
}

/// The object-safe future returned by [`Tool::execute`].
///
/// This explicit erased future preserves dispatch through `Box<dyn Tool>`.
pub type ToolFuture<'a> = Pin<Box<dyn Future<Output = ToolResult> + Send + 'a>>;

/// A tool that can be invoked by the LLM
pub trait Tool: Send + Sync {
    /// Name of the tool
    fn name(&self) -> &str;

    /// Description for the LLM
    fn description(&self) -> &str;

    /// JSON Schema for the tool parameters
    fn parameters(&self) -> serde_json::Value;

    /// Execute the tool
    fn execute<'a>(&'a self, args: serde_json::Value, ctx: &'a ToolContext) -> ToolFuture<'a>;

    /// Get the full tool definition for LLM requests
    fn definition(&self) -> ToolDefinition {
        ToolDefinition {
            name: self.name().to_string(),
            description: self.description().to_string(),
            parameters: self.parameters(),
        }
    }

    /// Whether this tool is allowed given a permission set.
    ///
    /// Resolution: `rules` (allow/ask/deny), then legacy
    /// allowed/denied lists and category flags. `Ask` still returns true so the
    /// tool appears in the schema; the agent loop prompts before execution.
    fn is_allowed(&self, permissions: &PermissionSet) -> bool {
        permissions.is_tool_allowed(self.name())
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::file_claims::FileClaimRegistry;
    use crate::types::PermissionSet;
    use std::path::Path;

    struct DummyTool;

    impl Tool for DummyTool {
        fn name(&self) -> &str {
            "dummy"
        }
        fn description(&self) -> &str {
            "d"
        }
        fn parameters(&self) -> serde_json::Value {
            serde_json::json!({"type": "object"})
        }
        fn execute<'a>(
            &'a self,
            _args: serde_json::Value,
            _ctx: &'a ToolContext,
        ) -> ToolFuture<'a> {
            Box::pin(async {
                crate::types::ToolResult {
                    tool_call_id: "1".into(),
                    content: "ok".into(),
                    is_error: false,
                }
            })
        }
    }

    #[tokio::test]
    async fn context_debug_claims_and_tool_trait() {
        let ctx = ToolContext::new("/w");
        assert_eq!(ctx.working_dir, "/w");
        assert!(format!("{ctx:?}").contains("working_dir"));
        let unsandboxed = ToolContext::unsandboxed("/u");
        assert_eq!(unsandboxed.sandbox.mode, crate::sandbox::SandboxMode::Off);
        assert!(ctx.check_file_write(Path::new("a.rs")).is_ok());
        assert!(ctx.check_file_read(Path::new("a.rs")).is_none());

        let mut claimed = ToolContext::new("/w");
        claimed.file_claims = Some(FileClaimRegistry::new());
        assert!(claimed.check_file_write(Path::new("a.rs")).is_ok());
        claimed.agent_id = Some("w0".into());
        claimed.agent_label = Some("worker".into());
        assert!(claimed.check_file_write(Path::new("a.rs")).is_ok());
        assert!(claimed.check_file_read(Path::new("a.rs")).is_none());

        let mut other = ToolContext::new("/w");
        other.file_claims = claimed.file_claims.clone();
        other.agent_id = Some("w1".into());
        other.agent_label = Some("other".into());
        let err = other.check_file_write(Path::new("a.rs")).unwrap_err();
        assert!(err.contains("File conflict"));

        let tool = DummyTool;
        let def = tool.definition();
        assert_eq!(def.name, "dummy");
        let result = tool.execute(serde_json::json!({}), &ctx).await;
        assert!(!result.is_error);
        assert_eq!(result.content, "ok");
        let perms = PermissionSet {
            allowed_tools: None,
            denied_tools: None,
            allow_file_writes: true,
            allow_network: true,
            allow_shell: true,
            allowed_paths: None,
            rules: Default::default(),
        };
        assert!(tool.is_allowed(&perms));
    }
}