feat: Major refactoring and improvements v2.11.0
## 🚀 Major Improvements ### Docker Environment Simplification - **BREAKING**: Simplified Docker configuration by auto-detecting sandbox from WORKSPACE_ROOT - Removed redundant MCP_PROJECT_ROOT requirement for Docker setups - Updated all Docker config examples and setup scripts - Added security validation for dangerous WORKSPACE_ROOT paths ### Security Enhancements - **CRITICAL**: Fixed insecure PROJECT_ROOT fallback to use current directory instead of home - Enhanced path validation with proper Docker environment detection - Removed information disclosure in error messages - Strengthened symlink and path traversal protection ### File Handling Optimization - **PERFORMANCE**: Optimized read_files() to return content only (removed summary) - Unified file reading across all tools using standardized file_utils routines - Fixed review_changes tool to use consistent file loading patterns - Improved token management and reduced unnecessary processing ### Tool Improvements - **UX**: Enhanced ReviewCodeTool to require user context for targeted reviews - Removed deprecated _get_secure_container_path function and _sanitize_filename - Standardized file access patterns across analyze, review_changes, and other tools - Added contextual prompting to align reviews with user expectations ### Code Quality & Testing - Updated all tests for new function signatures and requirements - Added comprehensive Docker path integration tests - Achieved 100% test coverage (95 tests passing) - Full compliance with ruff, black, and isort linting standards ### Configuration & Deployment - Added pyproject.toml for modern Python packaging - Streamlined Docker setup removing redundant environment variables - Updated setup scripts across all platforms (Windows, macOS, Linux) - Improved error handling and validation throughout ## 🔧 Technical Changes - **Removed**: `_get_secure_container_path()`, `_sanitize_filename()`, unused SANDBOX_MODE - **Enhanced**: Path translation, security validation, token management - **Standardized**: File reading patterns, error handling, Docker detection - **Updated**: All tool prompts for better context alignment ## 🛡️ Security Notes This release significantly improves the security posture by: - Eliminating broad filesystem access defaults - Adding validation for Docker environment variables - Removing information disclosure in error paths - Strengthening path traversal and symlink protections 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
Data models for tool responses and interactions
|
||||
"""
|
||||
|
||||
from typing import Any, Dict, List, Literal, Optional
|
||||
from typing import Any, Literal, Optional
|
||||
|
||||
from pydantic import BaseModel, Field
|
||||
|
||||
@@ -10,22 +10,20 @@ from pydantic import BaseModel, Field
|
||||
class ToolOutput(BaseModel):
|
||||
"""Standardized output format for all tools"""
|
||||
|
||||
status: Literal[
|
||||
"success", "error", "requires_clarification", "requires_file_prompt"
|
||||
] = "success"
|
||||
status: Literal["success", "error", "requires_clarification", "requires_file_prompt"] = "success"
|
||||
content: str = Field(..., description="The main content/response from the tool")
|
||||
content_type: Literal["text", "markdown", "json"] = "text"
|
||||
metadata: Optional[Dict[str, Any]] = Field(default_factory=dict)
|
||||
metadata: Optional[dict[str, Any]] = Field(default_factory=dict)
|
||||
|
||||
|
||||
class ClarificationRequest(BaseModel):
|
||||
"""Request for additional context or clarification"""
|
||||
|
||||
question: str = Field(..., description="Question to ask Claude for more context")
|
||||
files_needed: Optional[List[str]] = Field(
|
||||
files_needed: Optional[list[str]] = Field(
|
||||
default_factory=list, description="Specific files that are needed for analysis"
|
||||
)
|
||||
suggested_next_action: Optional[Dict[str, Any]] = Field(
|
||||
suggested_next_action: Optional[dict[str, Any]] = Field(
|
||||
None,
|
||||
description="Suggested tool call with parameters after getting clarification",
|
||||
)
|
||||
@@ -35,28 +33,22 @@ class DiagnosticHypothesis(BaseModel):
|
||||
"""A debugging hypothesis with context and next steps"""
|
||||
|
||||
rank: int = Field(..., description="Ranking of this hypothesis (1 = most likely)")
|
||||
confidence: Literal["high", "medium", "low"] = Field(
|
||||
..., description="Confidence level"
|
||||
)
|
||||
confidence: Literal["high", "medium", "low"] = Field(..., description="Confidence level")
|
||||
hypothesis: str = Field(..., description="Description of the potential root cause")
|
||||
reasoning: str = Field(..., description="Why this hypothesis is plausible")
|
||||
next_step: str = Field(
|
||||
..., description="Suggested action to test/validate this hypothesis"
|
||||
)
|
||||
next_step: str = Field(..., description="Suggested action to test/validate this hypothesis")
|
||||
|
||||
|
||||
class StructuredDebugResponse(BaseModel):
|
||||
"""Enhanced debug response with multiple hypotheses"""
|
||||
|
||||
summary: str = Field(..., description="Brief summary of the issue")
|
||||
hypotheses: List[DiagnosticHypothesis] = Field(
|
||||
..., description="Ranked list of potential causes"
|
||||
)
|
||||
immediate_actions: List[str] = Field(
|
||||
hypotheses: list[DiagnosticHypothesis] = Field(..., description="Ranked list of potential causes")
|
||||
immediate_actions: list[str] = Field(
|
||||
default_factory=list,
|
||||
description="Immediate steps to take regardless of root cause",
|
||||
)
|
||||
additional_context_needed: Optional[List[str]] = Field(
|
||||
additional_context_needed: Optional[list[str]] = Field(
|
||||
default_factory=list,
|
||||
description="Additional files or information that would help with analysis",
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user