util

Documentation

Index

• Constants
• func AtomicWriteFile(path string, data []byte, defaultMode os.FileMode) error
• func FirstNonEmpty(values ...string) string
• func FormatToolDetail(text, baseDir string) string
• func ReadAll(r io.Reader, limit int64) ([]byte, error)
• func RelativizePaths(text, baseDir string) string
• func Truncate(s string, maxRunes int) string
• type ShellSpec
  • func DetectShell() (ShellSpec, error)
  • func NewShellCommand(command string) (*exec.Cmd, ShellSpec, error)
  • func NewShellCommandContext(ctx context.Context, command string) (*exec.Cmd, ShellSpec, error)

Constants

const (
	// ReadLimitAuth is the max bytes for OAuth/token/OIDC HTTP responses.
	ReadLimitAuth int64 = 1 * 1024 * 1024 // 1 MB

	// ReadLimitAPI is the max bytes for non-streaming LLM API responses.
	ReadLimitAPI int64 = 50 * 1024 * 1024 // 50 MB

	// ReadLimitMCP is the max bytes for MCP JSON-RPC messages.
	ReadLimitMCP int64 = 100 * 1024 * 1024 // 100 MB

	// ReadLimitWebSocket is the max bytes for WebSocket messages.
	ReadLimitWebSocket int64 = 10 * 1024 * 1024 // 10 MB

	// ReadLimitGeneral is the default max bytes for generic HTTP responses.
	ReadLimitGeneral int64 = 10 * 1024 * 1024 // 10 MB
)

Functions

func AtomicWriteFile

func AtomicWriteFile(path string, data []byte, defaultMode os.FileMode) error

AtomicWriteFile writes data to path via a temp file in the same directory, fsync's it, and renames it into place. If path already exists, the existing file's mode is preserved; otherwise defaultMode is used.

This avoids two failure modes of os.WriteFile(path, data, mode):

1. A crash between O_TRUNC and the final write leaves the user's source file truncated/empty.
2. The hard-coded mode silently downgrades 0755 scripts and 0600 secrets to 0644.

See locks.md S4.

func FirstNonEmpty

func FirstNonEmpty(values ...string) string

FirstNonEmpty returns the first non-empty string from the given values. Strings that are empty or contain only whitespace are skipped. Returns the trimmed value of the first match, or "" if all values are empty.

func FormatToolDetail

func FormatToolDetail(text, baseDir string) string

FormatToolDetail prepares a tool detail string for display. It relativizes absolute paths under baseDir. No truncation — the rendering layer handles width (TUI auto-wraps, IM sends as-is).

func ReadAll

func ReadAll(r io.Reader, limit int64) ([]byte, error)

ReadAll reads from r with a size limit. Returns the data and an error if the reader exceeds limit. This prevents unbounded memory allocation from malicious or broken HTTP responses.

Usage:

data, err := util.ReadAll(resp.Body, util.ReadLimitAuth)

func RelativizePaths

func RelativizePaths(text, baseDir string) string

RelativizePaths replaces absolute paths under baseDir with relative paths ("./"). It handles two cases:

• baseDir + separator + suffix → "./" + suffix
• baseDir as an exact standalone token → "."

The second case uses boundary checking to avoid false matches (e.g. "/Users/proj" should not match inside "/Users/proj-backup").

func Truncate

func Truncate(s string, maxRunes int) string

Truncate truncates a string to maxRunes runes, appending "..." if truncated. Uses []rune to avoid UTF-8 multi-byte truncation.

Types

type ShellSpec

type ShellSpec struct {
	Path string
	Args []string
	Name string
}

func DetectShell

func DetectShell() (ShellSpec, error)

func NewShellCommand

func NewShellCommand(command string) (*exec.Cmd, ShellSpec, error)

func NewShellCommandContext

func NewShellCommandContext(ctx context.Context, command string) (*exec.Cmd, ShellSpec, error)