Chore: Remove eval_elisp mode and symbol restrictions (#322)

tninja · Kang Tu · web-flow · commit 21ff05a277b6 · 2026-04-26T20:59:54.000-07:00
* Remove eval_elisp mode and symbol restrictions

* addressing comments

* update HISTORY, bump version

---------

Co-authored-by: Kang Tu &lt;kang_tu@apple.com&gt;
diff --git a/HISTORY.org b/HISTORY.org
@@ -2,13 +2,19 @@
 * Release history
 
 ** Main branch change
+
+** 1.77
+- Chore: Remove eval_elisp mode and symbol restrictions
+- Chore: Treat documentation changes as non-code changes
 - Breaking: Remove =ai-code-mcp-editor-tools.el= and merge its remaining MCP tools into the core server and debug modules
   - =editor_state= and =visible_buffers= are now built-in MCP tools in =ai-code-mcp-server.el=
   - =eval_elisp= now lives in =ai-code-mcp-debug-tools.el= and is gated by =ai-code-mcp-debug-tools-enable-eval-elisp=
   - Remove the legacy =messages_tail= tool in favor of =get_recent_messages=
   - Remove the old =ai-code-mcp-editor-tools-enabled= and =ai-code-mcp-editor-tools-allow-effect-eval= settings
   - Move the dedicated editor-tools tests into the server/debug MCP test files
   - Update MCP docs and release notes to match the new tool layout
+- Feat: Add Kilo backend support (Opencode fork)
+- Feat: Support Org TODO headlines in implement-todo
 
 ** 1.74
 - Fix: Guard eat/ghostel process filters against deleted buffers on exit and add regression tests
diff --git a/README.org b/README.org
@@ -225,7 +225,7 @@ These tools add:
 - =get_feature_load_state=: inspect whether an Emacs feature is loaded and where it comes from
 - =get_recent_messages=: return the latest lines from =*Messages*=
 - =get_last_error_backtrace=: return the most recently recorded Emacs command error snapshot
-- =eval_elisp=: evaluate a single Emacs Lisp form in a chosen buffer context when explicitly enabled
+- =eval_elisp=: evaluate arbitrary Emacs Lisp with possible side effects in a chosen buffer context when explicitly enabled (no restrictions once enabled)
 
 The old =ai-code-mcp-editor-tools.el= module has been removed. Its live-editor read tools are now built in, while =eval_elisp= remains an explicit opt-in.
 
@@ -235,11 +235,7 @@ To register =eval_elisp=:
 (setq ai-code-mcp-debug-tools-enable-eval-elisp t)
 #+end_src
 
-=eval_elisp= only allows =query= mode by default. To allow editor-local side effects too:
-
-#+begin_src emacs-lisp
-(setq ai-code-mcp-debug-tools-allow-effect-eval t)
-#+end_src
+Once enabled, =eval_elisp= can evaluate any Emacs Lisp form without restrictions. It takes =code= (a single top-level form), optional =buffer_name= or =file_path= for evaluation context, optional =capture_messages= to collect new =*Messages*= output, optional =include_backtrace= to include a backtrace on failure, and optional =timeout_ms=. This is useful for letting the AI apply fixes by evaluating modified function definitions directly.
 
 screenshot inside Codex cli:
 
diff --git a/ai-code-mcp-debug-tools.el b/ai-code-mcp-debug-tools.el
@@ -8,7 +8,6 @@
 
 ;;; Code:
 
-(require 'cl-lib)
 (require 'json)
 (require 'ai-code-mcp-common)
 (require 'nadvice)
@@ -31,11 +30,6 @@
   :type 'boolean
   :group 'ai-code-mcp-debug-tools)
 
-(defcustom ai-code-mcp-debug-tools-allow-effect-eval nil
-  "When non-nil, allow `eval_elisp' to run in effect mode."
-  :type 'boolean
-  :group 'ai-code-mcp-debug-tools)
-
 (defvar ai-code-mcp--last-error-record nil
   "Most recent Emacs error snapshot recorded for MCP diagnostics tools.")
 
@@ -87,14 +81,10 @@
 (defconst ai-code-mcp-debug-tools--eval-spec
   '(:function ai-code-mcp-eval-elisp
     :name "eval_elisp"
-    :description "Evaluate a single Emacs Lisp form."
+    :description "Evaluate arbitrary Emacs Lisp with possible side effects once explicitly enabled."
     :args ((:name "code"
             :type string
             :description "Single Emacs Lisp form to evaluate.")
-           (:name "mode"
-            :type string
-            :description "Evaluation mode."
-            :optional t)
            (:name "buffer_name"
             :type string
             :description "Optional buffer context."
@@ -117,21 +107,6 @@
             :optional t)))
   "Optional MCP eval tool specification.")
 
-(defconst ai-code-mcp-debug-tools--always-denied-symbols
-  '(append-to-file async-shell-command call-interactively call-process
-    command-execute compile copy-file delete-file delete-frame
-    delete-window eval funcall kill-buffer load load-file
-    make-directory make-network-process make-process rename-file
-    recompile require save-buffer save-buffers-kill-emacs shell-command
-    start-process url-retrieve write-file write-region)
-  "Symbols that `eval_elisp' rejects in every mode.")
-
-(defconst ai-code-mcp-debug-tools--query-denied-symbols
-  '(add-hook delete-region erase-buffer indent-region insert kill-region
-    newline put remove-hook replace-buffer-contents set setf setq
-    setq-local switch-to-buffer yank)
-  "Additional symbols that `eval_elisp' rejects in query mode.")
-
 (defun ai-code-mcp-debug-tools-setup ()
   "Register optional MCP debugging tools when enabled."
   (when ai-code-mcp-debug-tools-enabled
@@ -215,39 +190,16 @@
                 changed))))))
 
 (defun ai-code-mcp-debug-tools--context-summary (buffer)
-  "Return a summary of BUFFER after an evaluation."
-  (let ((position (ai-code-mcp-debug-tools--point-line-column
-                   buffer
-                   (with-current-buffer buffer (point)))))
-    `((buffer_name . ,(buffer-name buffer))
-      (file_path . ,(buffer-file-name buffer))
-      (line . ,(alist-get 'line position))
-      (column . ,(alist-get 'column position)))))
-
-(defun ai-code-mcp-debug-tools--symbol-denied-p (form denied-symbols)
-  "Return the first symbol in FORM that appears in DENIED-SYMBOLS."
-  (cond
-   ((symbolp form)
-    (and (memq form denied-symbols) form))
-   ((consp form)
-    (let ((head (car form)))
-      (cond
-       ((and (symbolp head)
-              (memq head denied-symbols))
-        head)
-       (t
-        (or (ai-code-mcp-debug-tools--symbol-denied-p head denied-symbols)
-            (cl-some
-             (lambda (item)
-               (ai-code-mcp-debug-tools--symbol-denied-p
-                item denied-symbols))
-             (cdr form)))))))
-   ((vectorp form)
-    (cl-some
-     (lambda (item)
-       (ai-code-mcp-debug-tools--symbol-denied-p item denied-symbols))
-     (append form nil)))
-   (t nil)))
+  "Return a summary of BUFFER after an evaluation.
+Return nil when BUFFER is no longer live."
+  (when (buffer-live-p buffer)
+    (let ((position (ai-code-mcp-debug-tools--point-line-column
+                     buffer
+                     (with-current-buffer buffer (point)))))
+      `((buffer_name . ,(buffer-name buffer))
+        (file_path . ,(buffer-file-name buffer))
+        (line . ,(alist-get 'line position))
+        (column . ,(alist-get 'column position))))))
 
 (defun ai-code-mcp-debug-tools--parse-single-form (code)
   "Parse CODE and return exactly one top-level Emacs Lisp form."
@@ -278,16 +230,15 @@
     (buffer-string)))
 
 (defun ai-code-mcp-debug-tools--encode-eval-result
-    (mode target-buffer before-messages capture-messages timed-out
+    (target-buffer before-messages capture-messages timed-out
           value changed-buffers &optional error-object backtrace)
-  "Return a JSON response for MODE in TARGET-BUFFER.
+  "Return a JSON eval response for TARGET-BUFFER.
 BEFORE-MESSAGES and CAPTURE-MESSAGES control message collection.
 TIMED-OUT records timeout state, VALUE carries the result,
 CHANGED-BUFFERS lists modified buffers, and ERROR-OBJECT or BACKTRACE
 describe failures."
   (json-encode
    `((ok . ,(ai-code-mcp--json-bool (null error-object)))
-     (mode . ,mode)
      (value_repr . ,(and (null error-object) (prin1-to-string value)))
      (value_type . ,(and (null error-object)
                          (symbol-name (type-of value))))
@@ -302,10 +253,10 @@ describe failures."
                         target-buffer))
      (timed_out . ,(ai-code-mcp--json-bool timed-out)))))
 
-(defun ai-code-mcp-debug-tools--run-eval (form mode target-buffer timeout-ms
+(defun ai-code-mcp-debug-tools--run-eval (form target-buffer timeout-ms
                                                capture-messages
                                                include-backtrace)
-  "Evaluate FORM in MODE within TARGET-BUFFER using TIMEOUT-MS.
+  "Evaluate FORM within TARGET-BUFFER using TIMEOUT-MS.
 CAPTURE-MESSAGES controls message collection, and INCLUDE-BACKTRACE
 keeps the backtrace on failures."
   (let ((before-messages (ai-code-mcp--message-lines))
@@ -320,16 +271,9 @@ keeps the backtrace on failures."
                          (setq timed-out t)
                          (throw 'ai-code-mcp-debug-tools-timeout nil))
             (setq value
-                  (if (string= mode "query")
-                      (save-current-buffer
-                        (with-current-buffer target-buffer
-                          (save-excursion
-                            (save-match-data
-                              (save-restriction
-                                (eval form t))))))
-                    (save-current-buffer
-                      (with-current-buffer target-buffer
-                        (eval form t)))))))
+                  (save-current-buffer
+                    (with-current-buffer target-buffer
+                      (eval form t))))))
       (error
        (setq error-object
              (ai-code-mcp-debug-tools--error-alist
@@ -343,7 +287,6 @@ keeps the backtrace on failures."
              "timeout"
              "Evaluation exceeded the configured timeout")))
     (ai-code-mcp-debug-tools--encode-eval-result
-     mode
      target-buffer
      before-messages
      capture-messages
@@ -606,14 +549,14 @@ existing bound variable."
        (limit . ,limit)
        (messages . ,(vconcat messages))))))
 
-(defun ai-code-mcp-eval-elisp (code &optional mode buffer-name file-path
+(defun ai-code-mcp-eval-elisp (code &optional buffer-name file-path
                                     capture-messages include-backtrace
                                     timeout-ms)
-  "Evaluate CODE as a single form using MODE and BUFFER-NAME.
-Return a JSON payload for BUFFER-NAME, FILE-PATH,
-CAPTURE-MESSAGES, INCLUDE-BACKTRACE, and TIMEOUT-MS."
-  (let* ((mode (or mode "query"))
-         (capture-messages (ai-code-mcp-debug-tools--bool-arg
+  "Evaluate CODE as a single Emacs Lisp form.
+Return a JSON payload.  BUFFER-NAME or FILE-PATH select the evaluation
+context.  CAPTURE-MESSAGES, INCLUDE-BACKTRACE, and TIMEOUT-MS control
+diagnostics."
+  (let* ((capture-messages (ai-code-mcp-debug-tools--bool-arg
                             capture-messages
                             t))
          (include-backtrace (ai-code-mcp-debug-tools--bool-arg
@@ -624,93 +567,32 @@ CAPTURE-MESSAGES, INCLUDE-BACKTRACE, and TIMEOUT-MS."
                          buffer-name
                          file-path))
          (parse-error nil)
-         form
-         always-denied
-         query-denied)
-    (unless (member mode '("query" "effect"))
-      (error "Argument mode must be either query or effect"))
+         form)
     (unless (and (integerp timeout-ms) (> timeout-ms 0))
       (error "Argument timeout_ms must be a positive integer"))
     (condition-case err
         (setq form (ai-code-mcp-debug-tools--parse-single-form code))
       (error
        (setq parse-error err)))
-    (cond
-     (parse-error
-      (ai-code-mcp-debug-tools--encode-eval-result
-       mode
-       target-buffer
-       (ai-code-mcp--message-lines)
-       capture-messages
-       nil
-       nil
-       '()
-       (ai-code-mcp-debug-tools--error-alist
-        (symbol-name (car parse-error))
-        (error-message-string parse-error))
-       (and include-backtrace
-            (ai-code-mcp-debug-tools--backtrace-string))))
-     (t
-      (setq always-denied
-            (ai-code-mcp-debug-tools--symbol-denied-p
-             form
-             ai-code-mcp-debug-tools--always-denied-symbols))
-      (setq query-denied
-            (and (string= mode "query")
-                 (ai-code-mcp-debug-tools--symbol-denied-p
-                  form
-                  ai-code-mcp-debug-tools--query-denied-symbols)))
-      (cond
-       (always-denied
+    (if parse-error
         (ai-code-mcp-debug-tools--encode-eval-result
-         mode
          target-buffer
          (ai-code-mcp--message-lines)
          capture-messages
          nil
          nil
          '()
          (ai-code-mcp-debug-tools--error-alist
-          "symbol_denied"
-          (format "Symbol `%s' is not allowed in eval_elisp"
-                  always-denied))
-         nil))
-       (query-denied
-        (ai-code-mcp-debug-tools--encode-eval-result
-         mode
-         target-buffer
-         (ai-code-mcp--message-lines)
-         capture-messages
-         nil
-         nil
-         '()
-         (ai-code-mcp-debug-tools--error-alist
-          "query_symbol_denied"
-          (format "Symbol `%s' is not allowed in query mode"
-                  query-denied))
-         nil))
-       ((and (string= mode "effect")
-             (not ai-code-mcp-debug-tools-allow-effect-eval))
-        (ai-code-mcp-debug-tools--encode-eval-result
-         mode
-         target-buffer
-        (ai-code-mcp--message-lines)
-        capture-messages
-        nil
-        nil
-        '()
-        (ai-code-mcp-debug-tools--error-alist
-         "effect_mode_disabled"
-         "Effect mode is disabled by configuration")
-        nil))
-       (t
-        (ai-code-mcp-debug-tools--run-eval
-         form
-         mode
-         target-buffer
-         timeout-ms
-         capture-messages
-         include-backtrace)))))))
+          (symbol-name (car parse-error))
+          (error-message-string parse-error))
+         (and include-backtrace
+              (ai-code-mcp-debug-tools--backtrace-string)))
+      (ai-code-mcp-debug-tools--run-eval
+       form
+       target-buffer
+       timeout-ms
+       capture-messages
+       include-backtrace))))
 
 (add-to-list 'ai-code-mcp-server-tool-setup-functions
              #'ai-code-mcp-debug-tools-setup)
diff --git a/ai-code.el b/ai-code.el
@@ -1,7 +1,7 @@
 ;;; ai-code.el --- Unified interface for AI coding backends such as Codex CLI, Copilot CLI, Claude Code, Gemini CLI, Opencode, Kilo, Grok CLI, etc -*- lexical-binding: t; -*-
 
 ;; Author: Kang Tu <tninja@gmail.com>
-;; Version: 1.74
+;; Version: 1.77
 ;; Package-Requires: ((emacs "29.1") (transient "0.9.0") (magit "2.1.0"))
 ;; URL: https://github.com/tninja/ai-code-interface.el
 
diff --git a/test/test_ai-code-mcp-debug-tools.el b/test/test_ai-code-mcp-debug-tools.el
