@ai-agent-forge/plugin-process-exec 0.85.0

package/README.md

@@ -0,0 +1,41 @@
+# @agent-forge/plugin-process-exec
+
+Process execution capability plugin for [Agent Forge](https://github.com/agent-forge/agent-forge), extracted from the
+host's `src/plugins/process-exec` (D-075 S3). It registers one full-control tool, `process_exec`, which runs an argv
+command through a host-selected process adapter and returns bounded, sanitized stdout/stderr previews.
+
+The plugin is deliberately inert at load time. The real Node adapter requires a host-owned absolute `cwd` (the
+workspace directory), which no load-time seam can supply, so the standalone entry reports an explicit `unsupported`
+result until a host binds `createNodeProcessExecAdapterV1({ cwd, ... })` through its own profile machinery. Readonly
+hosts get no tool registration at all.
+
+## Install
+
+```sh
+# from a local checkout
+agent-forge plugin install ./plugins/process-exec
+
+# from npm
+agent-forge plugin install @agent-forge/plugin-process-exec
+```
+
+The package ships two manifests: `agent-forge.json` (ecosystem manifest for the deterministic plugin resolver) and
+`plugin.json` (host-load manifest consumed by `loadCapabilityPluginFromManifest`, entry `./dist/entry.js`).
+
+## Library surface
+
+`import { createNodeProcessExecAdapterV1, createProcessExecCapabilityFactoryV1 } from "@agent-forge/plugin-process-exec";`
+
+- `createNodeProcessExecAdapterV1({ cwd, ... })` — shell-free argv execution with output budgets, previews, timeouts,
+  and cross-platform process-tree termination; `cwd` is host-owned and requests cannot override it.
+- `sanitizeProcessTextV1(value, maximum?, cwd?)` — redacts credentials and host paths from previews.
+- `createProcessExecCapabilityFactoryV1(adapter)` — registers `process_exec` on a full-control `CapabilityAPI`.
+- Default export of `dist/entry.js` — the precomposed unsupported-adapter factory used by external plugin loading.
+
+## Development
+
+```sh
+npm install --ignore-scripts        # repo root, creates the workspace symlink
+npm run build                       # plugins/process-exec (tsgo)
+npm test                            # vitest; the entry fidelity test requires `npm run build` first
+```

package/agent-forge.json

@@ -0,0 +1,12 @@
+{
+	"packageFormatVersion": 1,
+	"id": "agent-forge.plugin.process-exec",
+	"pluginVersion": "0.84.4",
+	"apiVersion": "1",
+	"minHostVersion": "0.84.4",
+	"capabilityRefs": [{ "id": "process.exec", "version": 1 }],
+	"platform": {
+		"os": ["windows", "macos", "linux"],
+		"runtime": [{ "name": "node" }]
+	}
+}

package/dist/capability.d.ts

@@ -0,0 +1,5 @@
+import type { CapabilityPluginSyncFactory } from "@agent-forge/plugin-sdk";
+import type { ProcessExecAdapterV1 } from "./types.ts";
+/** Registers process execution only for a full-control host. */
+export declare function createProcessExecCapabilityFactoryV1(runtime: ProcessExecAdapterV1): CapabilityPluginSyncFactory;
+//# sourceMappingURL=capability.d.ts.map

package/dist/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAU3E,OAAO,KAAK,EAAE,oBAAoB,EAA6C,MAAM,YAAY,CAAC;AA6KlG,gEAAgE;AAChE,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,oBAAoB,GAAG,2BAA2B,CAmD/G","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { CapabilityPluginSyncFactory } from \"@agent-forge/plugin-sdk\";\nimport { validatePluginErrorV1 } from \"@agent-forge/plugin-sdk\";\nimport { Type } from \"typebox\";\nimport { Value } from \"typebox/value\";\nimport {\n\tPROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1,\n\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tsanitizeProcessTextV1,\n} from \"./node-adapter.ts\";\nimport type { ProcessExecAdapterV1, ProcessExecRequestV1, ProcessExecResultV1 } from \"./types.ts\";\n\nconst requestSchema = Type.Object(\n\t{\n\t\tcommand: Type.String({ minLength: 1, maxLength: 512, pattern: \"^[^\\\\u0000\\\\r\\\\n]+$\" }),\n\t\targs: Type.Array(Type.String({ maxLength: 4096, pattern: \"^[^\\\\u0000\\\\r\\\\n]*$\" }), { maxItems: 256 }),\n\t\ttimeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: 120_000 })),\n\t},\n\t{ additionalProperties: false },\n);\nconst inputSchema = Type.Object({ request: requestSchema }, { additionalProperties: false });\n\nconst INVALID_ERROR = Symbol(\"process-exec-invalid-error\");\n\nfunction generatedOperationId(): string {\n\treturn `profile-runtime-tool-call-${randomUUID()}`;\n}\n\nfunction objectInput(first: unknown, second: unknown): Record<string, unknown> {\n\tconst value = second === undefined ? first : second;\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(\"Process input must be an object\");\n\treturn value as Record<string, unknown>;\n}\n\nfunction operationIdFor(first: unknown, second: unknown): string {\n\tconst explicitOperationId = second === undefined ? undefined : first;\n\treturn typeof explicitOperationId === \"string\" &&\n\t\texplicitOperationId.trim() !== \"\" &&\n\t\texplicitOperationId.length <= PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 &&\n\t\t![...explicitOperationId].some((character) => /[\\u0000-\\u001f\\u007f]/u.test(character))\n\t\t? explicitOperationId\n\t\t: generatedOperationId();\n}\n\nfunction invocation(\n\tfirst: unknown,\n\tsecond: unknown,\n): { readonly input: Record<string, unknown>; readonly operationId: string } {\n\treturn {\n\t\tinput: objectInput(first, second),\n\t\toperationId: operationIdFor(first, second),\n\t};\n}\n\nfunction signalFrom(value: unknown): AbortSignal | undefined {\n\treturn value instanceof AbortSignal ? value : undefined;\n}\n\nfunction cancelled(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"cancelled\",\n\t\tsummary: \"Process execution was cancelled\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"cancelled\", message: \"Process execution was cancelled\" },\n\t};\n}\n\nfunction malformed(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\t...cancelled(operationId),\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process adapter returned an invalid result\",\n\t\terror: { version: 1, code: \"adapter_failed\", message: \"Process adapter returned an invalid result\" },\n\t};\n}\n\nfunction invalidInput(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\t...cancelled(operationId),\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process request was invalid\",\n\t\terror: { version: 1, code: \"invalid_input\", message: \"Process request was invalid\" },\n\t};\n}\n\nfunction boundedError(value: unknown): ProcessExecResultV1[\"error\"] | typeof INVALID_ERROR | undefined {\n\tif (value === undefined) return undefined;\n\ttry {\n\t\tconst error = validatePluginErrorV1(value, \"Process adapter error\");\n\t\tif (\n\t\t\terror.code.length > 128 ||\n\t\t\terror.message.length > 512 ||\n\t\t\t(error.causeCode !== undefined && error.causeCode.length > 128)\n\t\t)\n\t\t\treturn INVALID_ERROR;\n\t\treturn {\n\t\t\tversion: 1,\n\t\t\tcode: error.code,\n\t\t\tmessage: sanitizeProcessTextV1(error.message, 512),\n\t\t\t...(error.causeCode === undefined ? {} : { causeCode: error.causeCode }),\n\t\t};\n\t} catch {\n\t\treturn INVALID_ERROR;\n\t}\n}\n\nfunction boundedResult(value: unknown, operationId: string): ProcessExecResultV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) return malformed(operationId);\n\tconst result = value as Record<string, unknown>;\n\tconst exitCode = result.exitCode;\n\tconst stdoutBytes = typeof result.stdoutBytes === \"number\" ? result.stdoutBytes : undefined;\n\tconst stderrBytes = typeof result.stderrBytes === \"number\" ? result.stderrBytes : undefined;\n\tif (\n\t\tresult.version !== 1 ||\n\t\tresult.operationId !== operationId ||\n\t\ttypeof result.status !== \"string\" ||\n\t\t![\"succeeded\", \"failed\", \"cancelled\", \"needs_user\", \"unsupported\"].includes(result.status) ||\n\t\ttypeof result.summary !== \"string\" ||\n\t\tresult.summary.length > 2048 ||\n\t\tstdoutBytes === undefined ||\n\t\tstderrBytes === undefined ||\n\t\t!Number.isSafeInteger(stdoutBytes) ||\n\t\t!Number.isSafeInteger(stderrBytes) ||\n\t\tstdoutBytes < 0 ||\n\t\tstderrBytes < 0 ||\n\t\tstdoutBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||\n\t\tstderrBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||\n\t\ttypeof result.stdoutPreview !== \"string\" ||\n\t\ttypeof result.stderrPreview !== \"string\" ||\n\t\tresult.stdoutPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||\n\t\tresult.stderrPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||\n\t\t(stdoutBytes === 0 && result.stdoutPreview.length !== 0) ||\n\t\t(stderrBytes === 0 && result.stderrPreview.length !== 0) ||\n\t\ttypeof result.stdoutTruncated !== \"boolean\" ||\n\t\ttypeof result.stderrTruncated !== \"boolean\"\n\t)\n\t\treturn malformed(operationId);\n\tconst status = result.status as ProcessExecResultV1[\"status\"];\n\tif (\n\t\t(exitCode !== undefined && (typeof exitCode !== \"number\" || !Number.isSafeInteger(exitCode) || exitCode < 0)) ||\n\t\t(status === \"succeeded\" && result.error !== undefined)\n\t)\n\t\treturn malformed(operationId);\n\tconst error = boundedError(result.error);\n\tif (error === INVALID_ERROR || (status !== \"succeeded\" && error === undefined)) return malformed(operationId);\n\tconst projected: ProcessExecResultV1 = {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus,\n\t\tsummary: sanitizeProcessTextV1(result.summary as string, 2048),\n\t\t...(exitCode === undefined ? {} : { exitCode: exitCode as number }),\n\t\tstdoutBytes,\n\t\tstderrBytes,\n\t\tstdoutPreview: sanitizeProcessTextV1(result.stdoutPreview as string),\n\t\tstderrPreview: sanitizeProcessTextV1(result.stderrPreview as string),\n\t\tstdoutTruncated: result.stdoutTruncated as boolean,\n\t\tstderrTruncated: result.stderrTruncated as boolean,\n\t\t...(error === undefined ? {} : { error }),\n\t};\n\tif (new TextEncoder().encode(JSON.stringify(projected)).byteLength > 64 * 1024) return malformed(operationId);\n\treturn projected;\n}\n\nasync function runWithCancellation(\n\trun: () => Promise<ProcessExecResultV1>,\n\tsignal: AbortSignal | undefined,\n\toperationId: string,\n): Promise<ProcessExecResultV1> {\n\t// The adapter owns cancellation and must settle after it has drained its\n\t// child/process resources. Do not race the adapter with a local cancellation\n\t// promise: that would return before the host has finished cleanup.\n\tconst output = await run();\n\treturn signal?.aborted && output.status !== \"cancelled\" ? cancelled(operationId) : output;\n}\n\n/** Registers process execution only for a full-control host. */\nexport function createProcessExecCapabilityFactoryV1(runtime: ProcessExecAdapterV1): CapabilityPluginSyncFactory {\n\treturn (api) => {\n\t\tif (api.host.mode === \"readonly\") return;\n\t\tapi.registerTool({\n\t\t\tname: \"process_exec\",\n\t\t\tlabel: \"Process exec\",\n\t\t\tdescription: \"Run an argv command through the selected host process adapter with bounded output\",\n\t\t\tparameters: inputSchema,\n\t\t\texecute: async (first: unknown, second?: unknown, third?: unknown) => {\n\t\t\t\tlet invocationResult: { readonly input: Record<string, unknown>; readonly operationId: string };\n\t\t\t\ttry {\n\t\t\t\t\tinvocationResult = invocation(first, second);\n\t\t\t\t} catch {\n\t\t\t\t\treturn invalidInput(operationIdFor(first, second));\n\t\t\t\t}\n\t\t\t\tconst { input, operationId } = invocationResult;\n\t\t\t\tconst signal = signalFrom(third);\n\t\t\t\tif (signal?.aborted) return cancelled(operationId);\n\t\t\t\tlet request: ProcessExecRequestV1;\n\t\t\t\ttry {\n\t\t\t\t\tif (!Value.Check(inputSchema, input)) return invalidInput(operationId);\n\t\t\t\t\tconst requestInput = objectInput(input.request, undefined);\n\t\t\t\t\tif (\n\t\t\t\t\t\ttypeof requestInput.command !== \"string\" ||\n\t\t\t\t\t\trequestInput.command.trim() === \"\" ||\n\t\t\t\t\t\t!Array.isArray(requestInput.args) ||\n\t\t\t\t\t\trequestInput.args.some((arg) => typeof arg !== \"string\")\n\t\t\t\t\t)\n\t\t\t\t\t\treturn invalidInput(operationId);\n\t\t\t\t\tconst command = requestInput.command as string;\n\t\t\t\t\tconst args = requestInput.args as string[];\n\t\t\t\t\tconst timeoutMs = requestInput.timeoutMs as number | undefined;\n\t\t\t\t\trequest = {\n\t\t\t\t\t\tversion: 1,\n\t\t\t\t\t\toperationId,\n\t\t\t\t\t\tcommand,\n\t\t\t\t\t\targs,\n\t\t\t\t\t\t...(timeoutMs === undefined ? {} : { timeoutMs }),\n\t\t\t\t\t};\n\t\t\t\t} catch {\n\t\t\t\t\treturn invalidInput(operationId);\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tconst output = await runWithCancellation(() => runtime.run(request, signal), signal, operationId);\n\t\t\t\t\treturn boundedResult(output, operationId);\n\t\t\t\t} catch {\n\t\t\t\t\treturn signal?.aborted ? cancelled(operationId) : malformed(operationId);\n\t\t\t\t}\n\t\t\t},\n\t\t});\n\t};\n}\n"]}

package/dist/capability.js

@@ -0,0 +1,210 @@
+import { randomUUID } from "node:crypto";
+import { validatePluginErrorV1 } from "@agent-forge/plugin-sdk";
+import { Type } from "typebox";
+import { Value } from "typebox/value";
+import { PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1, PROCESS_EXEC_MAX_OUTPUT_BYTES_V1, PROCESS_EXEC_MAX_PREVIEW_BYTES_V1, sanitizeProcessTextV1, } from "./node-adapter.js";
+const requestSchema = Type.Object({
+    command: Type.String({ minLength: 1, maxLength: 512, pattern: "^[^\\u0000\\r\\n]+$" }),
+    args: Type.Array(Type.String({ maxLength: 4096, pattern: "^[^\\u0000\\r\\n]*$" }), { maxItems: 256 }),
+    timeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: 120_000 })),
+}, { additionalProperties: false });
+const inputSchema = Type.Object({ request: requestSchema }, { additionalProperties: false });
+const INVALID_ERROR = Symbol("process-exec-invalid-error");
+function generatedOperationId() {
+    return `profile-runtime-tool-call-${randomUUID()}`;
+}
+function objectInput(first, second) {
+    const value = second === undefined ? first : second;
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Process input must be an object");
+    return value;
+}
+function operationIdFor(first, second) {
+    const explicitOperationId = second === undefined ? undefined : first;
+    return typeof explicitOperationId === "string" &&
+        explicitOperationId.trim() !== "" &&
+        explicitOperationId.length <= PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 &&
+        ![...explicitOperationId].some((character) => /[\u0000-\u001f\u007f]/u.test(character))
+        ? explicitOperationId
+        : generatedOperationId();
+}
+function invocation(first, second) {
+    return {
+        input: objectInput(first, second),
+        operationId: operationIdFor(first, second),
+    };
+}
+function signalFrom(value) {
+    return value instanceof AbortSignal ? value : undefined;
+}
+function cancelled(operationId) {
+    return {
+        version: 1,
+        operationId,
+        status: "cancelled",
+        summary: "Process execution was cancelled",
+        stdoutBytes: 0,
+        stderrBytes: 0,
+        stdoutPreview: "",
+        stderrPreview: "",
+        stdoutTruncated: false,
+        stderrTruncated: false,
+        error: { version: 1, code: "cancelled", message: "Process execution was cancelled" },
+    };
+}
+function malformed(operationId) {
+    return {
+        ...cancelled(operationId),
+        status: "failed",
+        summary: "Process adapter returned an invalid result",
+        error: { version: 1, code: "adapter_failed", message: "Process adapter returned an invalid result" },
+    };
+}
+function invalidInput(operationId) {
+    return {
+        ...cancelled(operationId),
+        status: "failed",
+        summary: "Process request was invalid",
+        error: { version: 1, code: "invalid_input", message: "Process request was invalid" },
+    };
+}
+function boundedError(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        const error = validatePluginErrorV1(value, "Process adapter error");
+        if (error.code.length > 128 ||
+            error.message.length > 512 ||
+            (error.causeCode !== undefined && error.causeCode.length > 128))
+            return INVALID_ERROR;
+        return {
+            version: 1,
+            code: error.code,
+            message: sanitizeProcessTextV1(error.message, 512),
+            ...(error.causeCode === undefined ? {} : { causeCode: error.causeCode }),
+        };
+    }
+    catch {
+        return INVALID_ERROR;
+    }
+}
+function boundedResult(value, operationId) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return malformed(operationId);
+    const result = value;
+    const exitCode = result.exitCode;
+    const stdoutBytes = typeof result.stdoutBytes === "number" ? result.stdoutBytes : undefined;
+    const stderrBytes = typeof result.stderrBytes === "number" ? result.stderrBytes : undefined;
+    if (result.version !== 1 ||
+        result.operationId !== operationId ||
+        typeof result.status !== "string" ||
+        !["succeeded", "failed", "cancelled", "needs_user", "unsupported"].includes(result.status) ||
+        typeof result.summary !== "string" ||
+        result.summary.length > 2048 ||
+        stdoutBytes === undefined ||
+        stderrBytes === undefined ||
+        !Number.isSafeInteger(stdoutBytes) ||
+        !Number.isSafeInteger(stderrBytes) ||
+        stdoutBytes < 0 ||
+        stderrBytes < 0 ||
+        stdoutBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||
+        stderrBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||
+        typeof result.stdoutPreview !== "string" ||
+        typeof result.stderrPreview !== "string" ||
+        result.stdoutPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||
+        result.stderrPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||
+        (stdoutBytes === 0 && result.stdoutPreview.length !== 0) ||
+        (stderrBytes === 0 && result.stderrPreview.length !== 0) ||
+        typeof result.stdoutTruncated !== "boolean" ||
+        typeof result.stderrTruncated !== "boolean")
+        return malformed(operationId);
+    const status = result.status;
+    if ((exitCode !== undefined && (typeof exitCode !== "number" || !Number.isSafeInteger(exitCode) || exitCode < 0)) ||
+        (status === "succeeded" && result.error !== undefined))
+        return malformed(operationId);
+    const error = boundedError(result.error);
+    if (error === INVALID_ERROR || (status !== "succeeded" && error === undefined))
+        return malformed(operationId);
+    const projected = {
+        version: 1,
+        operationId,
+        status,
+        summary: sanitizeProcessTextV1(result.summary, 2048),
+        ...(exitCode === undefined ? {} : { exitCode: exitCode }),
+        stdoutBytes,
+        stderrBytes,
+        stdoutPreview: sanitizeProcessTextV1(result.stdoutPreview),
+        stderrPreview: sanitizeProcessTextV1(result.stderrPreview),
+        stdoutTruncated: result.stdoutTruncated,
+        stderrTruncated: result.stderrTruncated,
+        ...(error === undefined ? {} : { error }),
+    };
+    if (new TextEncoder().encode(JSON.stringify(projected)).byteLength > 64 * 1024)
+        return malformed(operationId);
+    return projected;
+}
+async function runWithCancellation(run, signal, operationId) {
+    // The adapter owns cancellation and must settle after it has drained its
+    // child/process resources. Do not race the adapter with a local cancellation
+    // promise: that would return before the host has finished cleanup.
+    const output = await run();
+    return signal?.aborted && output.status !== "cancelled" ? cancelled(operationId) : output;
+}
+/** Registers process execution only for a full-control host. */
+export function createProcessExecCapabilityFactoryV1(runtime) {
+    return (api) => {
+        if (api.host.mode === "readonly")
+            return;
+        api.registerTool({
+            name: "process_exec",
+            label: "Process exec",
+            description: "Run an argv command through the selected host process adapter with bounded output",
+            parameters: inputSchema,
+            execute: async (first, second, third) => {
+                let invocationResult;
+                try {
+                    invocationResult = invocation(first, second);
+                }
+                catch {
+                    return invalidInput(operationIdFor(first, second));
+                }
+                const { input, operationId } = invocationResult;
+                const signal = signalFrom(third);
+                if (signal?.aborted)
+                    return cancelled(operationId);
+                let request;
+                try {
+                    if (!Value.Check(inputSchema, input))
+                        return invalidInput(operationId);
+                    const requestInput = objectInput(input.request, undefined);
+                    if (typeof requestInput.command !== "string" ||
+                        requestInput.command.trim() === "" ||
+                        !Array.isArray(requestInput.args) ||
+                        requestInput.args.some((arg) => typeof arg !== "string"))
+                        return invalidInput(operationId);
+                    const command = requestInput.command;
+                    const args = requestInput.args;
+                    const timeoutMs = requestInput.timeoutMs;
+                    request = {
+                        version: 1,
+                        operationId,
+                        command,
+                        args,
+                        ...(timeoutMs === undefined ? {} : { timeoutMs }),
+                    };
+                }
+                catch {
+                    return invalidInput(operationId);
+                }
+                try {
+                    const output = await runWithCancellation(() => runtime.run(request, signal), signal, operationId);
+                    return boundedResult(output, operationId);
+                }
+                catch {
+                    return signal?.aborted ? cancelled(operationId) : malformed(operationId);
+                }
+            },
+        });
+    };
+}
+//# sourceMappingURL=capability.js.map

package/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EACN,sCAAsC,EACtC,gCAAgC,EAChC,iCAAiC,EACjC,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAChC;IACC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACtF,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACrG,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;CACxE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;AACF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE3D,SAAS,oBAAoB,GAAW;IACvC,OAAO,6BAA6B,UAAU,EAAE,EAAE,CAAC;AAAA,CACnD;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAe,EAA2B;IAC9E,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAe,EAAU;IAChE,MAAM,mBAAmB,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,OAAO,OAAO,mBAAmB,KAAK,QAAQ;QAC7C,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;QACjC,mBAAmB,CAAC,MAAM,IAAI,sCAAsC;QACpE,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvF,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,oBAAoB,EAAE,CAAC;AAAA,CAC1B;AAED,SAAS,UAAU,CAClB,KAAc,EACd,MAAe,EAC6D;IAC5E,OAAO;QACN,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;QACjC,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC;KAC1C,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,KAAc,EAA2B;IAC5D,OAAO,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACxD;AAED,SAAS,SAAS,CAAC,WAAmB,EAAuB;IAC5D,OAAO;QACN,OAAO,EAAE,CAAC;QACV,WAAW;QACX,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE;KACpF,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,WAAmB,EAAuB;IAC5D,OAAO;QACN,GAAG,SAAS,CAAC,WAAW,CAAC;QACzB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,4CAA4C;QACrD,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4CAA4C,EAAE;KACpG,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,WAAmB,EAAuB;IAC/D,OAAO;QACN,GAAG,SAAS,CAAC,WAAW,CAAC;QACzB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,6BAA6B;QACtC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,6BAA6B,EAAE;KACpF,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,KAAc,EAAmE;IACtG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACpE,IACC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;YACvB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAC1B,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YAE/D,OAAO,aAAa,CAAC;QACtB,OAAO;YACN,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;YAClD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,CAAC;IACtB,CAAC;AAAA,CACD;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,WAAmB,EAAuB;IAChF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IACC,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,MAAM,CAAC,WAAW,KAAK,WAAW;QAClC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1F,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;QAC5B,WAAW,KAAK,SAAS;QACzB,WAAW,KAAK,SAAS;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;QAClC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;QAClC,WAAW,GAAG,CAAC;QACf,WAAW,GAAG,CAAC;QACf,WAAW,GAAG,gCAAgC;QAC9C,WAAW,GAAG,gCAAgC;QAC9C,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,iCAAiC;QAC/D,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,iCAAiC;QAC/D,CAAC,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;QACxD,CAAC,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS;QAC3C,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS;QAE3C,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAuC,CAAC;IAC9D,IACC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC7G,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QAEtD,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,aAAa,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAwB;QACtC,OAAO,EAAE,CAAC;QACV,WAAW;QACX,MAAM;QACN,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAiB,EAAE,IAAI,CAAC;QAC9D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAkB,EAAE,CAAC;QACnE,WAAW;QACX,WAAW;QACX,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAuB,CAAC;QACpE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAuB,CAAC;QACpE,eAAe,EAAE,MAAM,CAAC,eAA0B;QAClD,eAAe,EAAE,MAAM,CAAC,eAA0B;QAClD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KACzC,CAAC;IACF,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9G,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,KAAK,UAAU,mBAAmB,CACjC,GAAuC,EACvC,MAA+B,EAC/B,WAAmB,EACY;IAC/B,yEAAyE;IACzE,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;IAC3B,OAAO,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,CAC1F;AAED,gEAAgE;AAChE,MAAM,UAAU,oCAAoC,CAAC,OAA6B,EAA+B;IAChH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QACf,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO;QACzC,GAAG,CAAC,YAAY,CAAC;YAChB,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,mFAAmF;YAChG,UAAU,EAAE,WAAW;YACvB,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,MAAgB,EAAE,KAAe,EAAE,EAAE,CAAC;gBACrE,IAAI,gBAA2F,CAAC;gBAChG,IAAI,CAAC;oBACJ,gBAAgB,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC;gBAChD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,MAAM,EAAE,OAAO;oBAAE,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;gBACnD,IAAI,OAA6B,CAAC;gBAClC,IAAI,CAAC;oBACJ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;wBAAE,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;oBACvE,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC3D,IACC,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ;wBACxC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;wBAClC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;wBACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;wBAExD,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;oBAClC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAiB,CAAC;oBAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAgB,CAAC;oBAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,SAA+B,CAAC;oBAC/D,OAAO,GAAG;wBACT,OAAO,EAAE,CAAC;wBACV,WAAW;wBACX,OAAO;wBACP,IAAI;wBACJ,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;qBACjD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;oBAClG,OAAO,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAC1E,CAAC;YAAA,CACD;SACD,CAAC,CAAC;IAAA,CACH,CAAC;AAAA,CACF","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { CapabilityPluginSyncFactory } from \"@agent-forge/plugin-sdk\";\nimport { validatePluginErrorV1 } from \"@agent-forge/plugin-sdk\";\nimport { Type } from \"typebox\";\nimport { Value } from \"typebox/value\";\nimport {\n\tPROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1,\n\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tsanitizeProcessTextV1,\n} from \"./node-adapter.ts\";\nimport type { ProcessExecAdapterV1, ProcessExecRequestV1, ProcessExecResultV1 } from \"./types.ts\";\n\nconst requestSchema = Type.Object(\n\t{\n\t\tcommand: Type.String({ minLength: 1, maxLength: 512, pattern: \"^[^\\\\u0000\\\\r\\\\n]+$\" }),\n\t\targs: Type.Array(Type.String({ maxLength: 4096, pattern: \"^[^\\\\u0000\\\\r\\\\n]*$\" }), { maxItems: 256 }),\n\t\ttimeoutMs: Type.Optional(Type.Integer({ minimum: 1, maximum: 120_000 })),\n\t},\n\t{ additionalProperties: false },\n);\nconst inputSchema = Type.Object({ request: requestSchema }, { additionalProperties: false });\n\nconst INVALID_ERROR = Symbol(\"process-exec-invalid-error\");\n\nfunction generatedOperationId(): string {\n\treturn `profile-runtime-tool-call-${randomUUID()}`;\n}\n\nfunction objectInput(first: unknown, second: unknown): Record<string, unknown> {\n\tconst value = second === undefined ? first : second;\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(\"Process input must be an object\");\n\treturn value as Record<string, unknown>;\n}\n\nfunction operationIdFor(first: unknown, second: unknown): string {\n\tconst explicitOperationId = second === undefined ? undefined : first;\n\treturn typeof explicitOperationId === \"string\" &&\n\t\texplicitOperationId.trim() !== \"\" &&\n\t\texplicitOperationId.length <= PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 &&\n\t\t![...explicitOperationId].some((character) => /[\\u0000-\\u001f\\u007f]/u.test(character))\n\t\t? explicitOperationId\n\t\t: generatedOperationId();\n}\n\nfunction invocation(\n\tfirst: unknown,\n\tsecond: unknown,\n): { readonly input: Record<string, unknown>; readonly operationId: string } {\n\treturn {\n\t\tinput: objectInput(first, second),\n\t\toperationId: operationIdFor(first, second),\n\t};\n}\n\nfunction signalFrom(value: unknown): AbortSignal | undefined {\n\treturn value instanceof AbortSignal ? value : undefined;\n}\n\nfunction cancelled(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"cancelled\",\n\t\tsummary: \"Process execution was cancelled\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"cancelled\", message: \"Process execution was cancelled\" },\n\t};\n}\n\nfunction malformed(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\t...cancelled(operationId),\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process adapter returned an invalid result\",\n\t\terror: { version: 1, code: \"adapter_failed\", message: \"Process adapter returned an invalid result\" },\n\t};\n}\n\nfunction invalidInput(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\t...cancelled(operationId),\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process request was invalid\",\n\t\terror: { version: 1, code: \"invalid_input\", message: \"Process request was invalid\" },\n\t};\n}\n\nfunction boundedError(value: unknown): ProcessExecResultV1[\"error\"] | typeof INVALID_ERROR | undefined {\n\tif (value === undefined) return undefined;\n\ttry {\n\t\tconst error = validatePluginErrorV1(value, \"Process adapter error\");\n\t\tif (\n\t\t\terror.code.length > 128 ||\n\t\t\terror.message.length > 512 ||\n\t\t\t(error.causeCode !== undefined && error.causeCode.length > 128)\n\t\t)\n\t\t\treturn INVALID_ERROR;\n\t\treturn {\n\t\t\tversion: 1,\n\t\t\tcode: error.code,\n\t\t\tmessage: sanitizeProcessTextV1(error.message, 512),\n\t\t\t...(error.causeCode === undefined ? {} : { causeCode: error.causeCode }),\n\t\t};\n\t} catch {\n\t\treturn INVALID_ERROR;\n\t}\n}\n\nfunction boundedResult(value: unknown, operationId: string): ProcessExecResultV1 {\n\tif (value === null || typeof value !== \"object\" || Array.isArray(value)) return malformed(operationId);\n\tconst result = value as Record<string, unknown>;\n\tconst exitCode = result.exitCode;\n\tconst stdoutBytes = typeof result.stdoutBytes === \"number\" ? result.stdoutBytes : undefined;\n\tconst stderrBytes = typeof result.stderrBytes === \"number\" ? result.stderrBytes : undefined;\n\tif (\n\t\tresult.version !== 1 ||\n\t\tresult.operationId !== operationId ||\n\t\ttypeof result.status !== \"string\" ||\n\t\t![\"succeeded\", \"failed\", \"cancelled\", \"needs_user\", \"unsupported\"].includes(result.status) ||\n\t\ttypeof result.summary !== \"string\" ||\n\t\tresult.summary.length > 2048 ||\n\t\tstdoutBytes === undefined ||\n\t\tstderrBytes === undefined ||\n\t\t!Number.isSafeInteger(stdoutBytes) ||\n\t\t!Number.isSafeInteger(stderrBytes) ||\n\t\tstdoutBytes < 0 ||\n\t\tstderrBytes < 0 ||\n\t\tstdoutBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||\n\t\tstderrBytes > PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 ||\n\t\ttypeof result.stdoutPreview !== \"string\" ||\n\t\ttypeof result.stderrPreview !== \"string\" ||\n\t\tresult.stdoutPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||\n\t\tresult.stderrPreview.length > PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 ||\n\t\t(stdoutBytes === 0 && result.stdoutPreview.length !== 0) ||\n\t\t(stderrBytes === 0 && result.stderrPreview.length !== 0) ||\n\t\ttypeof result.stdoutTruncated !== \"boolean\" ||\n\t\ttypeof result.stderrTruncated !== \"boolean\"\n\t)\n\t\treturn malformed(operationId);\n\tconst status = result.status as ProcessExecResultV1[\"status\"];\n\tif (\n\t\t(exitCode !== undefined && (typeof exitCode !== \"number\" || !Number.isSafeInteger(exitCode) || exitCode < 0)) ||\n\t\t(status === \"succeeded\" && result.error !== undefined)\n\t)\n\t\treturn malformed(operationId);\n\tconst error = boundedError(result.error);\n\tif (error === INVALID_ERROR || (status !== \"succeeded\" && error === undefined)) return malformed(operationId);\n\tconst projected: ProcessExecResultV1 = {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus,\n\t\tsummary: sanitizeProcessTextV1(result.summary as string, 2048),\n\t\t...(exitCode === undefined ? {} : { exitCode: exitCode as number }),\n\t\tstdoutBytes,\n\t\tstderrBytes,\n\t\tstdoutPreview: sanitizeProcessTextV1(result.stdoutPreview as string),\n\t\tstderrPreview: sanitizeProcessTextV1(result.stderrPreview as string),\n\t\tstdoutTruncated: result.stdoutTruncated as boolean,\n\t\tstderrTruncated: result.stderrTruncated as boolean,\n\t\t...(error === undefined ? {} : { error }),\n\t};\n\tif (new TextEncoder().encode(JSON.stringify(projected)).byteLength > 64 * 1024) return malformed(operationId);\n\treturn projected;\n}\n\nasync function runWithCancellation(\n\trun: () => Promise<ProcessExecResultV1>,\n\tsignal: AbortSignal | undefined,\n\toperationId: string,\n): Promise<ProcessExecResultV1> {\n\t// The adapter owns cancellation and must settle after it has drained its\n\t// child/process resources. Do not race the adapter with a local cancellation\n\t// promise: that would return before the host has finished cleanup.\n\tconst output = await run();\n\treturn signal?.aborted && output.status !== \"cancelled\" ? cancelled(operationId) : output;\n}\n\n/** Registers process execution only for a full-control host. */\nexport function createProcessExecCapabilityFactoryV1(runtime: ProcessExecAdapterV1): CapabilityPluginSyncFactory {\n\treturn (api) => {\n\t\tif (api.host.mode === \"readonly\") return;\n\t\tapi.registerTool({\n\t\t\tname: \"process_exec\",\n\t\t\tlabel: \"Process exec\",\n\t\t\tdescription: \"Run an argv command through the selected host process adapter with bounded output\",\n\t\t\tparameters: inputSchema,\n\t\t\texecute: async (first: unknown, second?: unknown, third?: unknown) => {\n\t\t\t\tlet invocationResult: { readonly input: Record<string, unknown>; readonly operationId: string };\n\t\t\t\ttry {\n\t\t\t\t\tinvocationResult = invocation(first, second);\n\t\t\t\t} catch {\n\t\t\t\t\treturn invalidInput(operationIdFor(first, second));\n\t\t\t\t}\n\t\t\t\tconst { input, operationId } = invocationResult;\n\t\t\t\tconst signal = signalFrom(third);\n\t\t\t\tif (signal?.aborted) return cancelled(operationId);\n\t\t\t\tlet request: ProcessExecRequestV1;\n\t\t\t\ttry {\n\t\t\t\t\tif (!Value.Check(inputSchema, input)) return invalidInput(operationId);\n\t\t\t\t\tconst requestInput = objectInput(input.request, undefined);\n\t\t\t\t\tif (\n\t\t\t\t\t\ttypeof requestInput.command !== \"string\" ||\n\t\t\t\t\t\trequestInput.command.trim() === \"\" ||\n\t\t\t\t\t\t!Array.isArray(requestInput.args) ||\n\t\t\t\t\t\trequestInput.args.some((arg) => typeof arg !== \"string\")\n\t\t\t\t\t)\n\t\t\t\t\t\treturn invalidInput(operationId);\n\t\t\t\t\tconst command = requestInput.command as string;\n\t\t\t\t\tconst args = requestInput.args as string[];\n\t\t\t\t\tconst timeoutMs = requestInput.timeoutMs as number | undefined;\n\t\t\t\t\trequest = {\n\t\t\t\t\t\tversion: 1,\n\t\t\t\t\t\toperationId,\n\t\t\t\t\t\tcommand,\n\t\t\t\t\t\targs,\n\t\t\t\t\t\t...(timeoutMs === undefined ? {} : { timeoutMs }),\n\t\t\t\t\t};\n\t\t\t\t} catch {\n\t\t\t\t\treturn invalidInput(operationId);\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tconst output = await runWithCancellation(() => runtime.run(request, signal), signal, operationId);\n\t\t\t\t\treturn boundedResult(output, operationId);\n\t\t\t\t} catch {\n\t\t\t\t\treturn signal?.aborted ? cancelled(operationId) : malformed(operationId);\n\t\t\t\t}\n\t\t\t},\n\t\t});\n\t};\n}\n"]}

package/dist/entry.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@agent-forge/plugin-sdk").CapabilityPluginSyncFactory;
+export default _default;
+//# sourceMappingURL=entry.d.ts.map

package/dist/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":";AAyCA,wBAA6F","sourcesContent":["import { createProcessExecCapabilityFactoryV1 } from \"./capability.ts\";\nimport type { ProcessExecAdapterV1, ProcessExecRequestV1, ProcessExecResultV1 } from \"./types.ts\";\nimport { PROCESS_EXEC_HOST_ADAPTER_ID_V1, PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 } from \"./types.ts\";\n\n/**\n * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.\n *\n * The real Node adapter is host-bound: `createNodeProcessExecAdapterV1` requires\n * a host-owned absolute `cwd` (the workspace directory the host selected), which\n * no load-time seam can supply. Constructing it here would either throw at\n * import time or silently anchor execution to an arbitrary process cwd, so the\n * entry ships an explicit unsupported adapter instead: the `process_exec` tool\n * registers on full-control hosts and reports an `unsupported` result until a\n * host binds a real adapter through its own profile machinery (fail-closed by\n * design, same contract as the embedded build).\n */\nfunction createUnsupportedProcessExecAdapterV1(): ProcessExecAdapterV1 {\n\tconst unsupported = (request: ProcessExecRequestV1): ProcessExecResultV1 => ({\n\t\tversion: 1,\n\t\toperationId: request.operationId,\n\t\tstatus: \"unsupported\",\n\t\tsummary: \"No process executor is bound by this host\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: {\n\t\t\tversion: 1,\n\t\t\tcode: \"process_exec_unavailable\",\n\t\t\tmessage: \"No host process executor is bound\",\n\t\t},\n\t});\n\treturn {\n\t\tadapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\t\tadapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\t\trun: async (request) => unsupported(request),\n\t};\n}\n\nexport default createProcessExecCapabilityFactoryV1(createUnsupportedProcessExecAdapterV1());\n"]}

package/dist/entry.js

@@ -0,0 +1,40 @@
+import { createProcessExecCapabilityFactoryV1 } from "./capability.js";
+import { PROCESS_EXEC_HOST_ADAPTER_ID_V1, PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 } from "./types.js";
+/**
+ * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.
+ *
+ * The real Node adapter is host-bound: `createNodeProcessExecAdapterV1` requires
+ * a host-owned absolute `cwd` (the workspace directory the host selected), which
+ * no load-time seam can supply. Constructing it here would either throw at
+ * import time or silently anchor execution to an arbitrary process cwd, so the
+ * entry ships an explicit unsupported adapter instead: the `process_exec` tool
+ * registers on full-control hosts and reports an `unsupported` result until a
+ * host binds a real adapter through its own profile machinery (fail-closed by
+ * design, same contract as the embedded build).
+ */
+function createUnsupportedProcessExecAdapterV1() {
+    const unsupported = (request) => ({
+        version: 1,
+        operationId: request.operationId,
+        status: "unsupported",
+        summary: "No process executor is bound by this host",
+        stdoutBytes: 0,
+        stderrBytes: 0,
+        stdoutPreview: "",
+        stderrPreview: "",
+        stdoutTruncated: false,
+        stderrTruncated: false,
+        error: {
+            version: 1,
+            code: "process_exec_unavailable",
+            message: "No host process executor is bound",
+        },
+    });
+    return {
+        adapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,
+        adapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,
+        run: async (request) => unsupported(request),
+    };
+}
+export default createProcessExecCapabilityFactoryV1(createUnsupportedProcessExecAdapterV1());
+//# sourceMappingURL=entry.js.map

package/dist/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EAAE,+BAA+B,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAEnG;;;;;;;;;;;GAWG;AACH,SAAS,qCAAqC,GAAyB;IACtE,MAAM,WAAW,GAAG,CAAC,OAA6B,EAAuB,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,2CAA2C;QACpD,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE;YACN,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,mCAAmC;SAC5C;KACD,CAAC,CAAC;IACH,OAAO;QACN,SAAS,EAAE,+BAA+B;QAC1C,cAAc,EAAE,oCAAoC;QACpD,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC;KAC5C,CAAC;AAAA,CACF;AAED,eAAe,oCAAoC,CAAC,qCAAqC,EAAE,CAAC,CAAC","sourcesContent":["import { createProcessExecCapabilityFactoryV1 } from \"./capability.ts\";\nimport type { ProcessExecAdapterV1, ProcessExecRequestV1, ProcessExecResultV1 } from \"./types.ts\";\nimport { PROCESS_EXEC_HOST_ADAPTER_ID_V1, PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 } from \"./types.ts\";\n\n/**\n * Default-export factory consumed by the host's `loadCapabilityPluginFromManifest`.\n *\n * The real Node adapter is host-bound: `createNodeProcessExecAdapterV1` requires\n * a host-owned absolute `cwd` (the workspace directory the host selected), which\n * no load-time seam can supply. Constructing it here would either throw at\n * import time or silently anchor execution to an arbitrary process cwd, so the\n * entry ships an explicit unsupported adapter instead: the `process_exec` tool\n * registers on full-control hosts and reports an `unsupported` result until a\n * host binds a real adapter through its own profile machinery (fail-closed by\n * design, same contract as the embedded build).\n */\nfunction createUnsupportedProcessExecAdapterV1(): ProcessExecAdapterV1 {\n\tconst unsupported = (request: ProcessExecRequestV1): ProcessExecResultV1 => ({\n\t\tversion: 1,\n\t\toperationId: request.operationId,\n\t\tstatus: \"unsupported\",\n\t\tsummary: \"No process executor is bound by this host\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: {\n\t\t\tversion: 1,\n\t\t\tcode: \"process_exec_unavailable\",\n\t\t\tmessage: \"No host process executor is bound\",\n\t\t},\n\t});\n\treturn {\n\t\tadapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\t\tadapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\t\trun: async (request) => unsupported(request),\n\t};\n}\n\nexport default createProcessExecCapabilityFactoryV1(createUnsupportedProcessExecAdapterV1());\n"]}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { createProcessExecCapabilityFactoryV1 } from "./capability.ts";
+export type { NodeProcessExecAdapterOptionsV1 } from "./node-adapter.ts";
+export { createNodeProcessExecAdapterV1, PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1, PROCESS_EXEC_MAX_OUTPUT_BYTES_V1, PROCESS_EXEC_MAX_PREVIEW_BYTES_V1, sanitizeProcessTextV1, } from "./node-adapter.ts";
+export { killProcessTree, sanitizeBinaryOutput } from "./shell-utils.ts";
+export type * from "./types.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,iBAAiB,CAAC;AACvE,YAAY,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACN,8BAA8B,EAC9B,sCAAsC,EACtC,gCAAgC,EAChC,iCAAiC,EACjC,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACzE,mBAAmB,YAAY,CAAC","sourcesContent":["export { createProcessExecCapabilityFactoryV1 } from \"./capability.ts\";\nexport type { NodeProcessExecAdapterOptionsV1 } from \"./node-adapter.ts\";\nexport {\n\tcreateNodeProcessExecAdapterV1,\n\tPROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1,\n\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tsanitizeProcessTextV1,\n} from \"./node-adapter.ts\";\nexport { killProcessTree, sanitizeBinaryOutput } from \"./shell-utils.ts\";\nexport type * from \"./types.ts\";\n"]}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { createProcessExecCapabilityFactoryV1 } from "./capability.js";
+export { createNodeProcessExecAdapterV1, PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1, PROCESS_EXEC_MAX_OUTPUT_BYTES_V1, PROCESS_EXEC_MAX_PREVIEW_BYTES_V1, sanitizeProcessTextV1, } from "./node-adapter.js";
+export { killProcessTree, sanitizeBinaryOutput } from "./shell-utils.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,iBAAiB,CAAC;AAEvE,OAAO,EACN,8BAA8B,EAC9B,sCAAsC,EACtC,gCAAgC,EAChC,iCAAiC,EACjC,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC","sourcesContent":["export { createProcessExecCapabilityFactoryV1 } from \"./capability.ts\";\nexport type { NodeProcessExecAdapterOptionsV1 } from \"./node-adapter.ts\";\nexport {\n\tcreateNodeProcessExecAdapterV1,\n\tPROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1,\n\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tsanitizeProcessTextV1,\n} from \"./node-adapter.ts\";\nexport { killProcessTree, sanitizeBinaryOutput } from \"./shell-utils.ts\";\nexport type * from \"./types.ts\";\n"]}

package/dist/node-adapter.d.ts

@@ -0,0 +1,23 @@
+import { spawn } from "node:child_process";
+import { type ProcessExecAdapterV1 } from "./types.ts";
+export declare const PROCESS_EXEC_MAX_OUTPUT_BYTES_V1: number;
+export declare const PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 = 8192;
+export declare const PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 = 256;
+export interface NodeProcessExecAdapterOptionsV1 {
+    /** Host-owned working directory; requests cannot override it. */
+    readonly cwd: string;
+    readonly env?: Readonly<Record<string, string>>;
+    readonly defaultTimeoutMs?: number;
+    readonly maxStdoutBytes?: number;
+    readonly maxStderrBytes?: number;
+    readonly previewBytes?: number;
+    /** Test seam for the host-owned process-tree terminator. */
+    readonly killProcessTree?: (pid: number) => void;
+    /** Deterministic host seam; production defaults to Node's shell-free spawn. */
+    readonly spawn?: typeof spawn;
+}
+/** Redacts credentials and host paths before a preview can reach the model. */
+export declare function sanitizeProcessTextV1(value: string, maximumChars?: number, cwd?: string): string;
+/** Node host adapter with shell-free argv execution and bounded output previews. */
+export declare function createNodeProcessExecAdapterV1(options: NodeProcessExecAdapterOptionsV1): ProcessExecAdapterV1;
+//# sourceMappingURL=node-adapter.d.ts.map

package/dist/node-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter.d.ts","sourceRoot":"","sources":["../src/node-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAGN,KAAK,oBAAoB,EAGzB,MAAM,YAAY,CAAC;AAKpB,eAAO,MAAM,gCAAgC,QAAc,CAAC;AAE5D,eAAO,MAAM,iCAAiC,OAAO,CAAC;AAItD,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAE1D,MAAM,WAAW,+BAA+B;IAC/C,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC9B;AAQD,+EAA+E;AAC/E,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,MAAM,EACb,YAAY,SAAoC,EAChD,GAAG,CAAC,EAAE,MAAM,GACV,MAAM,CAUR;AAwID,oFAAoF;AACpF,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,+BAA+B,GAAG,oBAAoB,CAwL7G","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { isAbsolute } from \"node:path\";\nimport { killProcessTree, sanitizeBinaryOutput } from \"./shell-utils.ts\";\nimport {\n\tPROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\tPROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\ttype ProcessExecAdapterV1,\n\ttype ProcessExecRequestV1,\n\ttype ProcessExecResultV1,\n} from \"./types.ts\";\n\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_OUTPUT_BYTES_V1 = 64 * 1024;\nexport const PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 = 1024 * 1024;\nconst DEFAULT_PREVIEW_BYTES_V1 = 4096;\nexport const PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 = 8192;\nconst MAX_ARGS_V1 = 256;\nconst MAX_COMMAND_CHARS_V1 = 512;\nconst MAX_ARG_CHARS_V1 = 4096;\nexport const PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 = 256;\n\nexport interface NodeProcessExecAdapterOptionsV1 {\n\t/** Host-owned working directory; requests cannot override it. */\n\treadonly cwd: string;\n\treadonly env?: Readonly<Record<string, string>>;\n\treadonly defaultTimeoutMs?: number;\n\treadonly maxStdoutBytes?: number;\n\treadonly maxStderrBytes?: number;\n\treadonly previewBytes?: number;\n\t/** Test seam for the host-owned process-tree terminator. */\n\treadonly killProcessTree?: (pid: number) => void;\n\t/** Deterministic host seam; production defaults to Node's shell-free spawn. */\n\treadonly spawn?: typeof spawn;\n}\n\nconst SAFE_ENVIRONMENT_KEYS_V1 = new Set(\n\t[\"PATH\", \"PATHEXT\", \"SystemRoot\", \"SYSTEMROOT\", \"WINDIR\", \"TEMP\", \"TMP\", \"TMPDIR\", \"LANG\", \"LC_ALL\"].map((key) =>\n\t\tkey.toLowerCase(),\n\t),\n);\n\n/** Redacts credentials and host paths before a preview can reach the model. */\nexport function sanitizeProcessTextV1(\n\tvalue: string,\n\tmaximumChars = PROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tcwd?: string,\n): string {\n\tlet text = sanitizeBinaryOutput(value);\n\tif (cwd !== undefined && cwd !== \"\") text = text.replaceAll(cwd, \"[redacted-path]\");\n\ttext = text\n\t\t.replace(\n\t\t\t/((?:api[-_ ]?key|access[-_ ]?token|auth(?:orization)?|bearer|password|passwd|secret|token)\\s*[:=]\\s*)([^\\s,;]+)/giu,\n\t\t\t\"$1[redacted-secret]\",\n\t\t)\n\t\t.replace(/(?:[A-Za-z]:[\\\\/]|\\\\\\\\|\\/(?:home|Users|private|tmp|var|workspace)\\/)[^\\s\"'<>]*/gu, \"[redacted-path]\");\n\treturn text.length <= maximumChars ? text : text.slice(0, maximumChars);\n}\n\nfunction hostEnvironment(explicit: Readonly<Record<string, string>> | undefined): NodeJS.ProcessEnv {\n\tconst inherited: NodeJS.ProcessEnv = {};\n\tfor (const [key, value] of Object.entries(process.env)) {\n\t\tif (value !== undefined && SAFE_ENVIRONMENT_KEYS_V1.has(key.toLowerCase())) inherited[key] = value;\n\t}\n\treturn { ...inherited, ...(explicit ?? {}) };\n}\n\nfunction positiveBound(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result < 1 || result > maximum)\n\t\tthrow new Error(`${label} must be a positive integer at most ${maximum}`);\n\treturn result;\n}\n\nfunction inputError(operationId: string, message: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process request was invalid\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"invalid_input\", message },\n\t};\n}\n\nfunction cancelled(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"cancelled\",\n\t\tsummary: \"Process execution was cancelled\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"cancelled\", message: \"Process execution was cancelled\" },\n\t};\n}\n\nfunction validateRequest(request: ProcessExecRequestV1): string | undefined {\n\tif (request.version !== 1) return \"version must be 1\";\n\tif (\n\t\ttypeof request.operationId !== \"string\" ||\n\t\trequest.operationId.trim() === \"\" ||\n\t\trequest.operationId.length > PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1\n\t)\n\t\treturn \"operationId is invalid\";\n\tif (\n\t\ttypeof request.command !== \"string\" ||\n\t\trequest.command.trim() === \"\" ||\n\t\trequest.command.length > MAX_COMMAND_CHARS_V1 ||\n\t\t/[\\u0000\\r\\n]/u.test(request.command)\n\t)\n\t\treturn \"command is invalid\";\n\tif (!Array.isArray(request.args) || request.args.length > MAX_ARGS_V1) return \"args are invalid\";\n\tif (\n\t\trequest.args.some((arg) => typeof arg !== \"string\" || arg.length > MAX_ARG_CHARS_V1 || /[\\u0000\\r\\n]/u.test(arg))\n\t)\n\t\treturn \"args are invalid\";\n\tif (\n\t\trequest.timeoutMs !== undefined &&\n\t\t(!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > MAX_TIMEOUT_MS_V1)\n\t)\n\t\treturn `timeoutMs must be a positive integer at most ${MAX_TIMEOUT_MS_V1}`;\n\treturn undefined;\n}\n\nfunction previewText(bytes: Uint8Array): string {\n\treturn new TextDecoder().decode(bytes);\n}\n\nfunction result(\n\trequest: ProcessExecRequestV1,\n\tstatus: ProcessExecResultV1[\"status\"],\n\tstdout: Uint8Array,\n\tstderr: Uint8Array,\n\tstdoutBytes: number,\n\tstderrBytes: number,\n\tpreviewBytes: number,\n\ttermination?: \"timeout\" | \"output_budget_exceeded\" | \"spawn_failed\" | \"exit_nonzero\" | \"cancelled\",\n\tcode?: number,\n\tcwd?: string,\n): ProcessExecResultV1 {\n\tconst stdoutPreview = sanitizeProcessTextV1(previewText(stdout.subarray(0, previewBytes)), previewBytes, cwd);\n\tconst stderrPreview = sanitizeProcessTextV1(previewText(stderr.subarray(0, previewBytes)), previewBytes, cwd);\n\tconst errorCode = termination;\n\tconst error =\n\t\terrorCode === undefined\n\t\t\t? undefined\n\t\t\t: {\n\t\t\t\t\tversion: 1 as const,\n\t\t\t\t\tcode: errorCode,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\terrorCode === \"exit_nonzero\"\n\t\t\t\t\t\t\t? \"Process exited with a non-zero status\"\n\t\t\t\t\t\t\t: errorCode === \"cancelled\"\n\t\t\t\t\t\t\t\t? \"Process execution was cancelled\"\n\t\t\t\t\t\t\t\t: \"Process execution failed\",\n\t\t\t\t};\n\treturn {\n\t\tversion: 1,\n\t\toperationId: request.operationId,\n\t\tstatus,\n\t\tsummary:\n\t\t\tstatus === \"succeeded\"\n\t\t\t\t? \"Process completed successfully\"\n\t\t\t\t: termination === \"cancelled\"\n\t\t\t\t\t? \"Process execution was cancelled\"\n\t\t\t\t\t: termination === \"timeout\"\n\t\t\t\t\t\t? \"Process execution timed out\"\n\t\t\t\t\t\t: termination === \"output_budget_exceeded\"\n\t\t\t\t\t\t\t? \"Process output exceeded the host budget\"\n\t\t\t\t\t\t\t: termination === \"spawn_failed\"\n\t\t\t\t\t\t\t\t? \"Process could not be started\"\n\t\t\t\t\t\t\t\t: \"Process exited with a non-zero status\",\n\t\t...(code === undefined ? {} : { exitCode: code }),\n\t\tstdoutBytes,\n\t\tstderrBytes,\n\t\tstdoutPreview,\n\t\tstderrPreview,\n\t\tstdoutTruncated: stdoutBytes > previewBytes,\n\t\tstderrTruncated: stderrBytes > previewBytes,\n\t\t...(error === undefined ? {} : { error }),\n\t};\n}\n\n/** Node host adapter with shell-free argv execution and bounded output previews. */\nexport function createNodeProcessExecAdapterV1(options: NodeProcessExecAdapterOptionsV1): ProcessExecAdapterV1 {\n\tif (typeof options.cwd !== \"string\" || !isAbsolute(options.cwd)) throw new Error(\"cwd must be an absolute path\");\n\tconst defaultTimeoutMs = positiveBound(\n\t\toptions.defaultTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"defaultTimeoutMs\",\n\t);\n\tconst maxStdoutBytes = positiveBound(\n\t\toptions.maxStdoutBytes,\n\t\tDEFAULT_OUTPUT_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\t\t\"maxStdoutBytes\",\n\t);\n\tconst maxStderrBytes = positiveBound(\n\t\toptions.maxStderrBytes,\n\t\tDEFAULT_OUTPUT_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\t\t\"maxStderrBytes\",\n\t);\n\tconst previewBytes = positiveBound(\n\t\toptions.previewBytes,\n\t\tDEFAULT_PREVIEW_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\t\t\"previewBytes\",\n\t);\n\tconst env = hostEnvironment(options.env);\n\tconst spawnProcess = options.spawn ?? spawn;\n\tconst terminateTree = options.killProcessTree ?? killProcessTree;\n\n\treturn {\n\t\tadapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\t\tadapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\t\trun: (request, signal) => {\n\t\t\tconst operationId =\n\t\t\t\ttypeof request.operationId === \"string\" && request.operationId.trim() !== \"\"\n\t\t\t\t\t? request.operationId\n\t\t\t\t\t: \"invalid-process-operation\";\n\t\t\tconst invalid = validateRequest(request);\n\t\t\tif (invalid !== undefined) return Promise.resolve(inputError(operationId, invalid));\n\t\t\tif (signal?.aborted) return Promise.resolve(cancelled(operationId));\n\t\t\tconst timeoutMs = request.timeoutMs ?? defaultTimeoutMs;\n\t\t\treturn new Promise<ProcessExecResultV1>((resolve) => {\n\t\t\t\tlet child: ReturnType<typeof spawn>;\n\t\t\t\ttry {\n\t\t\t\t\tchild = spawnProcess(request.command, [...request.args], {\n\t\t\t\t\t\tcwd: options.cwd,\n\t\t\t\t\t\t...(env === undefined ? {} : { env }),\n\t\t\t\t\t\tshell: false,\n\t\t\t\t\t\twindowsHide: true,\n\t\t\t\t\t\tdetached: process.platform !== \"win32\",\n\t\t\t\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\t\t\t});\n\t\t\t\t} catch {\n\t\t\t\t\tresolve(\n\t\t\t\t\t\tresult(\n\t\t\t\t\t\t\trequest,\n\t\t\t\t\t\t\t\"failed\",\n\t\t\t\t\t\t\tnew Uint8Array(),\n\t\t\t\t\t\t\tnew Uint8Array(),\n\t\t\t\t\t\t\t0,\n\t\t\t\t\t\t\t0,\n\t\t\t\t\t\t\tpreviewBytes,\n\t\t\t\t\t\t\t\"spawn_failed\",\n\t\t\t\t\t\t\tundefined,\n\t\t\t\t\t\t\toptions.cwd,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tlet stdoutBytes = 0;\n\t\t\t\tlet stderrBytes = 0;\n\t\t\t\tconst stdoutPreview = new Uint8Array(previewBytes);\n\t\t\t\tconst stderrPreview = new Uint8Array(previewBytes);\n\t\t\t\tlet stdoutPreviewLength = 0;\n\t\t\t\tlet stderrPreviewLength = 0;\n\t\t\t\tlet termination:\n\t\t\t\t\t| \"timeout\"\n\t\t\t\t\t| \"output_budget_exceeded\"\n\t\t\t\t\t| \"spawn_failed\"\n\t\t\t\t\t| \"exit_nonzero\"\n\t\t\t\t\t| \"cancelled\"\n\t\t\t\t\t| undefined;\n\t\t\t\tlet settled = false;\n\t\t\t\tlet exited = false;\n\t\t\t\tlet terminationRequested = false;\n\t\t\t\tlet forceKillTimer: ReturnType<typeof setTimeout> | undefined;\n\t\t\t\tlet hardFinishTimer: ReturnType<typeof setTimeout> | undefined;\n\t\t\t\tconst append = (target: Uint8Array, length: number, chunk: Uint8Array): number => {\n\t\t\t\t\tconst copy = Math.min(chunk.byteLength, target.byteLength - length);\n\t\t\t\t\ttarget.set(chunk.subarray(0, copy), length);\n\t\t\t\t\treturn length + copy;\n\t\t\t\t};\n\t\t\t\tconst forceTerminate = (): void => {\n\t\t\t\t\tif (exited) return;\n\t\t\t\t\tif (typeof child.pid === \"number\" && child.pid > 0) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tterminateTree(child.pid);\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The host cleanup boundary is best-effort; close/error still settles the operation.\n\t\t\t\t\t\t}\n\t\t\t\t\t} else if (!child.killed) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The close/error event remains authoritative.\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\tconst armForceTermination = (): void => {\n\t\t\t\t\tif (forceKillTimer !== undefined) return;\n\t\t\t\t\tforceKillTimer = setTimeout(() => {\n\t\t\t\t\t\tforceTerminate();\n\t\t\t\t\t\thardFinishTimer = setTimeout(() => finalize(null), 500);\n\t\t\t\t\t}, 2000);\n\t\t\t\t};\n\t\t\t\tconst terminate = (reason: \"timeout\" | \"output_budget_exceeded\" | \"spawn_failed\" | \"cancelled\"): void => {\n\t\t\t\t\tif (termination === undefined) termination = reason;\n\t\t\t\t\tif (!terminationRequested) {\n\t\t\t\t\t\tterminationRequested = true;\n\t\t\t\t\t\tif (!child.killed) {\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tchild.kill(\"SIGTERM\");\n\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t// The force cleanup timer still runs.\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tarmForceTermination();\n\t\t\t\t};\n\t\t\t\tconst onAbort = () => {\n\t\t\t\t\tterminate(\"cancelled\");\n\t\t\t\t};\n\t\t\t\tconst finalize = (code: number | null): void => {\n\t\t\t\t\tif (settled) return;\n\t\t\t\t\tsettled = true;\n\t\t\t\t\texited = true;\n\t\t\t\t\tclearTimeout(timeout);\n\t\t\t\t\tif (forceKillTimer !== undefined) clearTimeout(forceKillTimer);\n\t\t\t\t\tif (hardFinishTimer !== undefined) clearTimeout(hardFinishTimer);\n\t\t\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\t\t\tif (signal?.aborted && termination === undefined) termination = \"cancelled\";\n\t\t\t\t\tif (termination === undefined && code !== 0) termination = \"exit_nonzero\";\n\t\t\t\t\tconst status =\n\t\t\t\t\t\ttermination === undefined ? \"succeeded\" : termination === \"cancelled\" ? \"cancelled\" : \"failed\";\n\t\t\t\t\tresolve(\n\t\t\t\t\t\tresult(\n\t\t\t\t\t\t\trequest,\n\t\t\t\t\t\t\tstatus,\n\t\t\t\t\t\t\tstdoutPreview.subarray(0, stdoutPreviewLength),\n\t\t\t\t\t\t\tstderrPreview.subarray(0, stderrPreviewLength),\n\t\t\t\t\t\t\tstdoutBytes,\n\t\t\t\t\t\t\tstderrBytes,\n\t\t\t\t\t\t\tpreviewBytes,\n\t\t\t\t\t\t\ttermination,\n\t\t\t\t\t\t\tcode ?? undefined,\n\t\t\t\t\t\t\toptions.cwd,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t};\n\t\t\t\tconst timeout = setTimeout(() => terminate(\"timeout\"), timeoutMs);\n\t\t\t\tif (signal !== undefined) signal.addEventListener(\"abort\", onAbort, { once: true });\n\t\t\t\tchild.stdout?.on(\"data\", (chunk: Buffer | Uint8Array) => {\n\t\t\t\t\tconst bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);\n\t\t\t\t\tstdoutBytes += bytes.byteLength;\n\t\t\t\t\tstdoutPreviewLength = append(stdoutPreview, stdoutPreviewLength, bytes);\n\t\t\t\t\tif (stdoutBytes > maxStdoutBytes) terminate(\"output_budget_exceeded\");\n\t\t\t\t});\n\t\t\t\tchild.stderr?.on(\"data\", (chunk: Buffer | Uint8Array) => {\n\t\t\t\t\tconst bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);\n\t\t\t\t\tstderrBytes += bytes.byteLength;\n\t\t\t\t\tstderrPreviewLength = append(stderrPreview, stderrPreviewLength, bytes);\n\t\t\t\t\tif (stderrBytes > maxStderrBytes) terminate(\"output_budget_exceeded\");\n\t\t\t\t});\n\t\t\t\tchild.once(\"error\", () => {\n\t\t\t\t\tterminate(\"spawn_failed\");\n\t\t\t\t});\n\t\t\t\tchild.once(\"close\", (code) => {\n\t\t\t\t\texited = true;\n\t\t\t\t\tfinalize(code);\n\t\t\t\t});\n\t\t\t});\n\t\t},\n\t};\n}\n"]}

package/dist/node-adapter.js

@@ -0,0 +1,284 @@
+import { spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { killProcessTree, sanitizeBinaryOutput } from "./shell-utils.js";
+import { PROCESS_EXEC_HOST_ADAPTER_ID_V1, PROCESS_EXEC_HOST_ADAPTER_VERSION_V1, } from "./types.js";
+const DEFAULT_TIMEOUT_MS_V1 = 30_000;
+const MAX_TIMEOUT_MS_V1 = 120_000;
+const DEFAULT_OUTPUT_BYTES_V1 = 64 * 1024;
+export const PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 = 1024 * 1024;
+const DEFAULT_PREVIEW_BYTES_V1 = 4096;
+export const PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 = 8192;
+const MAX_ARGS_V1 = 256;
+const MAX_COMMAND_CHARS_V1 = 512;
+const MAX_ARG_CHARS_V1 = 4096;
+export const PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 = 256;
+const SAFE_ENVIRONMENT_KEYS_V1 = new Set(["PATH", "PATHEXT", "SystemRoot", "SYSTEMROOT", "WINDIR", "TEMP", "TMP", "TMPDIR", "LANG", "LC_ALL"].map((key) => key.toLowerCase()));
+/** Redacts credentials and host paths before a preview can reach the model. */
+export function sanitizeProcessTextV1(value, maximumChars = PROCESS_EXEC_MAX_PREVIEW_BYTES_V1, cwd) {
+    let text = sanitizeBinaryOutput(value);
+    if (cwd !== undefined && cwd !== "")
+        text = text.replaceAll(cwd, "[redacted-path]");
+    text = text
+        .replace(/((?:api[-_ ]?key|access[-_ ]?token|auth(?:orization)?|bearer|password|passwd|secret|token)\s*[:=]\s*)([^\s,;]+)/giu, "$1[redacted-secret]")
+        .replace(/(?:[A-Za-z]:[\\/]|\\\\|\/(?:home|Users|private|tmp|var|workspace)\/)[^\s"'<>]*/gu, "[redacted-path]");
+    return text.length <= maximumChars ? text : text.slice(0, maximumChars);
+}
+function hostEnvironment(explicit) {
+    const inherited = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value !== undefined && SAFE_ENVIRONMENT_KEYS_V1.has(key.toLowerCase()))
+            inherited[key] = value;
+    }
+    return { ...inherited, ...(explicit ?? {}) };
+}
+function positiveBound(value, fallback, maximum, label) {
+    const result = value ?? fallback;
+    if (!Number.isSafeInteger(result) || result < 1 || result > maximum)
+        throw new Error(`${label} must be a positive integer at most ${maximum}`);
+    return result;
+}
+function inputError(operationId, message) {
+    return {
+        version: 1,
+        operationId,
+        status: "failed",
+        summary: "Process request was invalid",
+        stdoutBytes: 0,
+        stderrBytes: 0,
+        stdoutPreview: "",
+        stderrPreview: "",
+        stdoutTruncated: false,
+        stderrTruncated: false,
+        error: { version: 1, code: "invalid_input", message },
+    };
+}
+function cancelled(operationId) {
+    return {
+        version: 1,
+        operationId,
+        status: "cancelled",
+        summary: "Process execution was cancelled",
+        stdoutBytes: 0,
+        stderrBytes: 0,
+        stdoutPreview: "",
+        stderrPreview: "",
+        stdoutTruncated: false,
+        stderrTruncated: false,
+        error: { version: 1, code: "cancelled", message: "Process execution was cancelled" },
+    };
+}
+function validateRequest(request) {
+    if (request.version !== 1)
+        return "version must be 1";
+    if (typeof request.operationId !== "string" ||
+        request.operationId.trim() === "" ||
+        request.operationId.length > PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1)
+        return "operationId is invalid";
+    if (typeof request.command !== "string" ||
+        request.command.trim() === "" ||
+        request.command.length > MAX_COMMAND_CHARS_V1 ||
+        /[\u0000\r\n]/u.test(request.command))
+        return "command is invalid";
+    if (!Array.isArray(request.args) || request.args.length > MAX_ARGS_V1)
+        return "args are invalid";
+    if (request.args.some((arg) => typeof arg !== "string" || arg.length > MAX_ARG_CHARS_V1 || /[\u0000\r\n]/u.test(arg)))
+        return "args are invalid";
+    if (request.timeoutMs !== undefined &&
+        (!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > MAX_TIMEOUT_MS_V1))
+        return `timeoutMs must be a positive integer at most ${MAX_TIMEOUT_MS_V1}`;
+    return undefined;
+}
+function previewText(bytes) {
+    return new TextDecoder().decode(bytes);
+}
+function result(request, status, stdout, stderr, stdoutBytes, stderrBytes, previewBytes, termination, code, cwd) {
+    const stdoutPreview = sanitizeProcessTextV1(previewText(stdout.subarray(0, previewBytes)), previewBytes, cwd);
+    const stderrPreview = sanitizeProcessTextV1(previewText(stderr.subarray(0, previewBytes)), previewBytes, cwd);
+    const errorCode = termination;
+    const error = errorCode === undefined
+        ? undefined
+        : {
+            version: 1,
+            code: errorCode,
+            message: errorCode === "exit_nonzero"
+                ? "Process exited with a non-zero status"
+                : errorCode === "cancelled"
+                    ? "Process execution was cancelled"
+                    : "Process execution failed",
+        };
+    return {
+        version: 1,
+        operationId: request.operationId,
+        status,
+        summary: status === "succeeded"
+            ? "Process completed successfully"
+            : termination === "cancelled"
+                ? "Process execution was cancelled"
+                : termination === "timeout"
+                    ? "Process execution timed out"
+                    : termination === "output_budget_exceeded"
+                        ? "Process output exceeded the host budget"
+                        : termination === "spawn_failed"
+                            ? "Process could not be started"
+                            : "Process exited with a non-zero status",
+        ...(code === undefined ? {} : { exitCode: code }),
+        stdoutBytes,
+        stderrBytes,
+        stdoutPreview,
+        stderrPreview,
+        stdoutTruncated: stdoutBytes > previewBytes,
+        stderrTruncated: stderrBytes > previewBytes,
+        ...(error === undefined ? {} : { error }),
+    };
+}
+/** Node host adapter with shell-free argv execution and bounded output previews. */
+export function createNodeProcessExecAdapterV1(options) {
+    if (typeof options.cwd !== "string" || !isAbsolute(options.cwd))
+        throw new Error("cwd must be an absolute path");
+    const defaultTimeoutMs = positiveBound(options.defaultTimeoutMs, DEFAULT_TIMEOUT_MS_V1, MAX_TIMEOUT_MS_V1, "defaultTimeoutMs");
+    const maxStdoutBytes = positiveBound(options.maxStdoutBytes, DEFAULT_OUTPUT_BYTES_V1, PROCESS_EXEC_MAX_OUTPUT_BYTES_V1, "maxStdoutBytes");
+    const maxStderrBytes = positiveBound(options.maxStderrBytes, DEFAULT_OUTPUT_BYTES_V1, PROCESS_EXEC_MAX_OUTPUT_BYTES_V1, "maxStderrBytes");
+    const previewBytes = positiveBound(options.previewBytes, DEFAULT_PREVIEW_BYTES_V1, PROCESS_EXEC_MAX_PREVIEW_BYTES_V1, "previewBytes");
+    const env = hostEnvironment(options.env);
+    const spawnProcess = options.spawn ?? spawn;
+    const terminateTree = options.killProcessTree ?? killProcessTree;
+    return {
+        adapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,
+        adapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,
+        run: (request, signal) => {
+            const operationId = typeof request.operationId === "string" && request.operationId.trim() !== ""
+                ? request.operationId
+                : "invalid-process-operation";
+            const invalid = validateRequest(request);
+            if (invalid !== undefined)
+                return Promise.resolve(inputError(operationId, invalid));
+            if (signal?.aborted)
+                return Promise.resolve(cancelled(operationId));
+            const timeoutMs = request.timeoutMs ?? defaultTimeoutMs;
+            return new Promise((resolve) => {
+                let child;
+                try {
+                    child = spawnProcess(request.command, [...request.args], {
+                        cwd: options.cwd,
+                        ...(env === undefined ? {} : { env }),
+                        shell: false,
+                        windowsHide: true,
+                        detached: process.platform !== "win32",
+                        stdio: ["ignore", "pipe", "pipe"],
+                    });
+                }
+                catch {
+                    resolve(result(request, "failed", new Uint8Array(), new Uint8Array(), 0, 0, previewBytes, "spawn_failed", undefined, options.cwd));
+                    return;
+                }
+                let stdoutBytes = 0;
+                let stderrBytes = 0;
+                const stdoutPreview = new Uint8Array(previewBytes);
+                const stderrPreview = new Uint8Array(previewBytes);
+                let stdoutPreviewLength = 0;
+                let stderrPreviewLength = 0;
+                let termination;
+                let settled = false;
+                let exited = false;
+                let terminationRequested = false;
+                let forceKillTimer;
+                let hardFinishTimer;
+                const append = (target, length, chunk) => {
+                    const copy = Math.min(chunk.byteLength, target.byteLength - length);
+                    target.set(chunk.subarray(0, copy), length);
+                    return length + copy;
+                };
+                const forceTerminate = () => {
+                    if (exited)
+                        return;
+                    if (typeof child.pid === "number" && child.pid > 0) {
+                        try {
+                            terminateTree(child.pid);
+                        }
+                        catch {
+                            // The host cleanup boundary is best-effort; close/error still settles the operation.
+                        }
+                    }
+                    else if (!child.killed) {
+                        try {
+                            child.kill("SIGKILL");
+                        }
+                        catch {
+                            // The close/error event remains authoritative.
+                        }
+                    }
+                };
+                const armForceTermination = () => {
+                    if (forceKillTimer !== undefined)
+                        return;
+                    forceKillTimer = setTimeout(() => {
+                        forceTerminate();
+                        hardFinishTimer = setTimeout(() => finalize(null), 500);
+                    }, 2000);
+                };
+                const terminate = (reason) => {
+                    if (termination === undefined)
+                        termination = reason;
+                    if (!terminationRequested) {
+                        terminationRequested = true;
+                        if (!child.killed) {
+                            try {
+                                child.kill("SIGTERM");
+                            }
+                            catch {
+                                // The force cleanup timer still runs.
+                            }
+                        }
+                    }
+                    armForceTermination();
+                };
+                const onAbort = () => {
+                    terminate("cancelled");
+                };
+                const finalize = (code) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    exited = true;
+                    clearTimeout(timeout);
+                    if (forceKillTimer !== undefined)
+                        clearTimeout(forceKillTimer);
+                    if (hardFinishTimer !== undefined)
+                        clearTimeout(hardFinishTimer);
+                    signal?.removeEventListener("abort", onAbort);
+                    if (signal?.aborted && termination === undefined)
+                        termination = "cancelled";
+                    if (termination === undefined && code !== 0)
+                        termination = "exit_nonzero";
+                    const status = termination === undefined ? "succeeded" : termination === "cancelled" ? "cancelled" : "failed";
+                    resolve(result(request, status, stdoutPreview.subarray(0, stdoutPreviewLength), stderrPreview.subarray(0, stderrPreviewLength), stdoutBytes, stderrBytes, previewBytes, termination, code ?? undefined, options.cwd));
+                };
+                const timeout = setTimeout(() => terminate("timeout"), timeoutMs);
+                if (signal !== undefined)
+                    signal.addEventListener("abort", onAbort, { once: true });
+                child.stdout?.on("data", (chunk) => {
+                    const bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);
+                    stdoutBytes += bytes.byteLength;
+                    stdoutPreviewLength = append(stdoutPreview, stdoutPreviewLength, bytes);
+                    if (stdoutBytes > maxStdoutBytes)
+                        terminate("output_budget_exceeded");
+                });
+                child.stderr?.on("data", (chunk) => {
+                    const bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);
+                    stderrBytes += bytes.byteLength;
+                    stderrPreviewLength = append(stderrPreview, stderrPreviewLength, bytes);
+                    if (stderrBytes > maxStderrBytes)
+                        terminate("output_budget_exceeded");
+                });
+                child.once("error", () => {
+                    terminate("spawn_failed");
+                });
+                child.once("close", (code) => {
+                    exited = true;
+                    finalize(code);
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=node-adapter.js.map

package/dist/node-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-adapter.js","sourceRoot":"","sources":["../src/node-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EACN,+BAA+B,EAC/B,oCAAoC,GAIpC,MAAM,YAAY,CAAC;AAEpB,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5D,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;AACtD,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,sCAAsC,GAAG,GAAG,CAAC;AAgB1D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CACvC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChH,GAAG,CAAC,WAAW,EAAE,CACjB,CACD,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACpC,KAAa,EACb,YAAY,GAAG,iCAAiC,EAChD,GAAY,EACH;IACT,IAAI,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACpF,IAAI,GAAG,IAAI;SACT,OAAO,CACP,oHAAoH,EACpH,qBAAqB,CACrB;SACA,OAAO,CAAC,kFAAkF,EAAE,iBAAiB,CAAC,CAAC;IACjH,OAAO,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AAAA,CACxE;AAED,SAAS,eAAe,CAAC,QAAsD,EAAqB;IACnG,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpG,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AAAA,CAC7C;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAa,EAAU;IAC3G,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,OAAO;QAClE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,OAAe,EAAuB;IAC9E,OAAO;QACN,OAAO,EAAE,CAAC;QACV,WAAW;QACX,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE;KACrD,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,WAAmB,EAAuB;IAC5D,OAAO;QACN,OAAO,EAAE,CAAC;QACV,WAAW;QACX,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,eAAe,EAAE,KAAK;QACtB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE;KACpF,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,OAA6B,EAAsB;IAC3E,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACtD,IACC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QACjC,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,sCAAsC;QAEnE,OAAO,wBAAwB,CAAC;IACjC,IACC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACnC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAC7B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,oBAAoB;QAC7C,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAErC,OAAO,oBAAoB,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACjG,IACC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjH,OAAO,kBAAkB,CAAC;IAC3B,IACC,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,iBAAiB,CAAC;QAE5G,OAAO,gDAAgD,iBAAiB,EAAE,CAAC;IAC5E,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,WAAW,CAAC,KAAiB,EAAU;IAC/C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,MAAM,CACd,OAA6B,EAC7B,MAAqC,EACrC,MAAkB,EAClB,MAAkB,EAClB,WAAmB,EACnB,WAAmB,EACnB,YAAoB,EACpB,WAAkG,EAClG,IAAa,EACb,GAAY,EACU;IACtB,MAAM,aAAa,GAAG,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAC9G,MAAM,aAAa,GAAG,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,WAAW,CAAC;IAC9B,MAAM,KAAK,GACV,SAAS,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACA,OAAO,EAAE,CAAU;YACnB,IAAI,EAAE,SAAS;YACf,OAAO,EACN,SAAS,KAAK,cAAc;gBAC3B,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,SAAS,KAAK,WAAW;oBAC1B,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,0BAA0B;SAC/B,CAAC;IACL,OAAO;QACN,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM;QACN,OAAO,EACN,MAAM,KAAK,WAAW;YACrB,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,WAAW,KAAK,WAAW;gBAC5B,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,WAAW,KAAK,SAAS;oBAC1B,CAAC,CAAC,6BAA6B;oBAC/B,CAAC,CAAC,WAAW,KAAK,wBAAwB;wBACzC,CAAC,CAAC,yCAAyC;wBAC3C,CAAC,CAAC,WAAW,KAAK,cAAc;4BAC/B,CAAC,CAAC,8BAA8B;4BAChC,CAAC,CAAC,uCAAuC;QAC/C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjD,WAAW;QACX,WAAW;QACX,aAAa;QACb,aAAa;QACb,eAAe,EAAE,WAAW,GAAG,YAAY;QAC3C,eAAe,EAAE,WAAW,GAAG,YAAY;QAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KACzC,CAAC;AAAA,CACF;AAED,oFAAoF;AACpF,MAAM,UAAU,8BAA8B,CAAC,OAAwC,EAAwB;IAC9G,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjH,MAAM,gBAAgB,GAAG,aAAa,CACrC,OAAO,CAAC,gBAAgB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,CAClB,CAAC;IACF,MAAM,cAAc,GAAG,aAAa,CACnC,OAAO,CAAC,cAAc,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,gBAAgB,CAChB,CAAC;IACF,MAAM,cAAc,GAAG,aAAa,CACnC,OAAO,CAAC,cAAc,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,gBAAgB,CAChB,CAAC;IACF,MAAM,YAAY,GAAG,aAAa,CACjC,OAAO,CAAC,YAAY,EACpB,wBAAwB,EACxB,iCAAiC,EACjC,cAAc,CACd,CAAC;IACF,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC;IAEjE,OAAO;QACN,SAAS,EAAE,+BAA+B;QAC1C,cAAc,EAAE,oCAAoC;QACpD,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YACzB,MAAM,WAAW,GAChB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC3E,CAAC,CAAC,OAAO,CAAC,WAAW;gBACrB,CAAC,CAAC,2BAA2B,CAAC;YAChC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACpF,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;YACxD,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,IAAI,KAA+B,CAAC;gBACpC,IAAI,CAAC;oBACJ,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;wBACxD,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;wBACrC,KAAK,EAAE,KAAK;wBACZ,WAAW,EAAE,IAAI;wBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;wBACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;qBACjC,CAAC,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,CACN,MAAM,CACL,OAAO,EACP,QAAQ,EACR,IAAI,UAAU,EAAE,EAChB,IAAI,UAAU,EAAE,EAChB,CAAC,EACD,CAAC,EACD,YAAY,EACZ,cAAc,EACd,SAAS,EACT,OAAO,CAAC,GAAG,CACX,CACD,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,IAAI,WAAW,GAAG,CAAC,CAAC;gBACpB,IAAI,WAAW,GAAG,CAAC,CAAC;gBACpB,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;gBACnD,IAAI,mBAAmB,GAAG,CAAC,CAAC;gBAC5B,IAAI,mBAAmB,GAAG,CAAC,CAAC;gBAC5B,IAAI,WAMQ,CAAC;gBACb,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,IAAI,oBAAoB,GAAG,KAAK,CAAC;gBACjC,IAAI,cAAyD,CAAC;gBAC9D,IAAI,eAA0D,CAAC;gBAC/D,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAE,KAAiB,EAAU,EAAE,CAAC;oBACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;oBACpE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC5C,OAAO,MAAM,GAAG,IAAI,CAAC;gBAAA,CACrB,CAAC;gBACF,MAAM,cAAc,GAAG,GAAS,EAAE,CAAC;oBAClC,IAAI,MAAM;wBAAE,OAAO;oBACnB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;wBACpD,IAAI,CAAC;4BACJ,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC1B,CAAC;wBAAC,MAAM,CAAC;4BACR,qFAAqF;wBACtF,CAAC;oBACF,CAAC;yBAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC1B,IAAI,CAAC;4BACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACvB,CAAC;wBAAC,MAAM,CAAC;4BACR,+CAA+C;wBAChD,CAAC;oBACF,CAAC;gBAAA,CACD,CAAC;gBACF,MAAM,mBAAmB,GAAG,GAAS,EAAE,CAAC;oBACvC,IAAI,cAAc,KAAK,SAAS;wBAAE,OAAO;oBACzC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;wBACjC,cAAc,EAAE,CAAC;wBACjB,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;oBAAA,CACxD,EAAE,IAAI,CAAC,CAAC;gBAAA,CACT,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,MAA2E,EAAQ,EAAE,CAAC;oBACxG,IAAI,WAAW,KAAK,SAAS;wBAAE,WAAW,GAAG,MAAM,CAAC;oBACpD,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBAC3B,oBAAoB,GAAG,IAAI,CAAC;wBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;4BACnB,IAAI,CAAC;gCACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;4BACvB,CAAC;4BAAC,MAAM,CAAC;gCACR,sCAAsC;4BACvC,CAAC;wBACF,CAAC;oBACF,CAAC;oBACD,mBAAmB,EAAE,CAAC;gBAAA,CACtB,CAAC;gBACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;oBACrB,SAAS,CAAC,WAAW,CAAC,CAAC;gBAAA,CACvB,CAAC;gBACF,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAQ,EAAE,CAAC;oBAC/C,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,GAAG,IAAI,CAAC;oBACd,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,cAAc,KAAK,SAAS;wBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;oBAC/D,IAAI,eAAe,KAAK,SAAS;wBAAE,YAAY,CAAC,eAAe,CAAC,CAAC;oBACjE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAI,MAAM,EAAE,OAAO,IAAI,WAAW,KAAK,SAAS;wBAAE,WAAW,GAAG,WAAW,CAAC;oBAC5E,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,CAAC;wBAAE,WAAW,GAAG,cAAc,CAAC;oBAC1E,MAAM,MAAM,GACX,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAChG,OAAO,CACN,MAAM,CACL,OAAO,EACP,MAAM,EACN,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAC9C,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAC9C,WAAW,EACX,WAAW,EACX,YAAY,EACZ,WAAW,EACX,IAAI,IAAI,SAAS,EACjB,OAAO,CAAC,GAAG,CACX,CACD,CAAC;gBAAA,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;gBAClE,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAA0B,EAAE,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;oBAC1E,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;oBAChC,mBAAmB,GAAG,MAAM,CAAC,aAAa,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;oBACxE,IAAI,WAAW,GAAG,cAAc;wBAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBAAA,CACtE,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAA0B,EAAE,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;oBAC1E,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;oBAChC,mBAAmB,GAAG,MAAM,CAAC,aAAa,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;oBACxE,IAAI,WAAW,GAAG,cAAc;wBAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;gBAAA,CACtE,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;oBACzB,SAAS,CAAC,cAAc,CAAC,CAAC;gBAAA,CAC1B,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7B,MAAM,GAAG,IAAI,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAA,CACf,CAAC,CAAC;YAAA,CACH,CAAC,CAAC;QAAA,CACH;KACD,CAAC;AAAA,CACF","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { isAbsolute } from \"node:path\";\nimport { killProcessTree, sanitizeBinaryOutput } from \"./shell-utils.ts\";\nimport {\n\tPROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\tPROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\ttype ProcessExecAdapterV1,\n\ttype ProcessExecRequestV1,\n\ttype ProcessExecResultV1,\n} from \"./types.ts\";\n\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_OUTPUT_BYTES_V1 = 64 * 1024;\nexport const PROCESS_EXEC_MAX_OUTPUT_BYTES_V1 = 1024 * 1024;\nconst DEFAULT_PREVIEW_BYTES_V1 = 4096;\nexport const PROCESS_EXEC_MAX_PREVIEW_BYTES_V1 = 8192;\nconst MAX_ARGS_V1 = 256;\nconst MAX_COMMAND_CHARS_V1 = 512;\nconst MAX_ARG_CHARS_V1 = 4096;\nexport const PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1 = 256;\n\nexport interface NodeProcessExecAdapterOptionsV1 {\n\t/** Host-owned working directory; requests cannot override it. */\n\treadonly cwd: string;\n\treadonly env?: Readonly<Record<string, string>>;\n\treadonly defaultTimeoutMs?: number;\n\treadonly maxStdoutBytes?: number;\n\treadonly maxStderrBytes?: number;\n\treadonly previewBytes?: number;\n\t/** Test seam for the host-owned process-tree terminator. */\n\treadonly killProcessTree?: (pid: number) => void;\n\t/** Deterministic host seam; production defaults to Node's shell-free spawn. */\n\treadonly spawn?: typeof spawn;\n}\n\nconst SAFE_ENVIRONMENT_KEYS_V1 = new Set(\n\t[\"PATH\", \"PATHEXT\", \"SystemRoot\", \"SYSTEMROOT\", \"WINDIR\", \"TEMP\", \"TMP\", \"TMPDIR\", \"LANG\", \"LC_ALL\"].map((key) =>\n\t\tkey.toLowerCase(),\n\t),\n);\n\n/** Redacts credentials and host paths before a preview can reach the model. */\nexport function sanitizeProcessTextV1(\n\tvalue: string,\n\tmaximumChars = PROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\tcwd?: string,\n): string {\n\tlet text = sanitizeBinaryOutput(value);\n\tif (cwd !== undefined && cwd !== \"\") text = text.replaceAll(cwd, \"[redacted-path]\");\n\ttext = text\n\t\t.replace(\n\t\t\t/((?:api[-_ ]?key|access[-_ ]?token|auth(?:orization)?|bearer|password|passwd|secret|token)\\s*[:=]\\s*)([^\\s,;]+)/giu,\n\t\t\t\"$1[redacted-secret]\",\n\t\t)\n\t\t.replace(/(?:[A-Za-z]:[\\\\/]|\\\\\\\\|\\/(?:home|Users|private|tmp|var|workspace)\\/)[^\\s\"'<>]*/gu, \"[redacted-path]\");\n\treturn text.length <= maximumChars ? text : text.slice(0, maximumChars);\n}\n\nfunction hostEnvironment(explicit: Readonly<Record<string, string>> | undefined): NodeJS.ProcessEnv {\n\tconst inherited: NodeJS.ProcessEnv = {};\n\tfor (const [key, value] of Object.entries(process.env)) {\n\t\tif (value !== undefined && SAFE_ENVIRONMENT_KEYS_V1.has(key.toLowerCase())) inherited[key] = value;\n\t}\n\treturn { ...inherited, ...(explicit ?? {}) };\n}\n\nfunction positiveBound(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result < 1 || result > maximum)\n\t\tthrow new Error(`${label} must be a positive integer at most ${maximum}`);\n\treturn result;\n}\n\nfunction inputError(operationId: string, message: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"failed\",\n\t\tsummary: \"Process request was invalid\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"invalid_input\", message },\n\t};\n}\n\nfunction cancelled(operationId: string): ProcessExecResultV1 {\n\treturn {\n\t\tversion: 1,\n\t\toperationId,\n\t\tstatus: \"cancelled\",\n\t\tsummary: \"Process execution was cancelled\",\n\t\tstdoutBytes: 0,\n\t\tstderrBytes: 0,\n\t\tstdoutPreview: \"\",\n\t\tstderrPreview: \"\",\n\t\tstdoutTruncated: false,\n\t\tstderrTruncated: false,\n\t\terror: { version: 1, code: \"cancelled\", message: \"Process execution was cancelled\" },\n\t};\n}\n\nfunction validateRequest(request: ProcessExecRequestV1): string | undefined {\n\tif (request.version !== 1) return \"version must be 1\";\n\tif (\n\t\ttypeof request.operationId !== \"string\" ||\n\t\trequest.operationId.trim() === \"\" ||\n\t\trequest.operationId.length > PROCESS_EXEC_MAX_OPERATION_ID_CHARS_V1\n\t)\n\t\treturn \"operationId is invalid\";\n\tif (\n\t\ttypeof request.command !== \"string\" ||\n\t\trequest.command.trim() === \"\" ||\n\t\trequest.command.length > MAX_COMMAND_CHARS_V1 ||\n\t\t/[\\u0000\\r\\n]/u.test(request.command)\n\t)\n\t\treturn \"command is invalid\";\n\tif (!Array.isArray(request.args) || request.args.length > MAX_ARGS_V1) return \"args are invalid\";\n\tif (\n\t\trequest.args.some((arg) => typeof arg !== \"string\" || arg.length > MAX_ARG_CHARS_V1 || /[\\u0000\\r\\n]/u.test(arg))\n\t)\n\t\treturn \"args are invalid\";\n\tif (\n\t\trequest.timeoutMs !== undefined &&\n\t\t(!Number.isSafeInteger(request.timeoutMs) || request.timeoutMs < 1 || request.timeoutMs > MAX_TIMEOUT_MS_V1)\n\t)\n\t\treturn `timeoutMs must be a positive integer at most ${MAX_TIMEOUT_MS_V1}`;\n\treturn undefined;\n}\n\nfunction previewText(bytes: Uint8Array): string {\n\treturn new TextDecoder().decode(bytes);\n}\n\nfunction result(\n\trequest: ProcessExecRequestV1,\n\tstatus: ProcessExecResultV1[\"status\"],\n\tstdout: Uint8Array,\n\tstderr: Uint8Array,\n\tstdoutBytes: number,\n\tstderrBytes: number,\n\tpreviewBytes: number,\n\ttermination?: \"timeout\" | \"output_budget_exceeded\" | \"spawn_failed\" | \"exit_nonzero\" | \"cancelled\",\n\tcode?: number,\n\tcwd?: string,\n): ProcessExecResultV1 {\n\tconst stdoutPreview = sanitizeProcessTextV1(previewText(stdout.subarray(0, previewBytes)), previewBytes, cwd);\n\tconst stderrPreview = sanitizeProcessTextV1(previewText(stderr.subarray(0, previewBytes)), previewBytes, cwd);\n\tconst errorCode = termination;\n\tconst error =\n\t\terrorCode === undefined\n\t\t\t? undefined\n\t\t\t: {\n\t\t\t\t\tversion: 1 as const,\n\t\t\t\t\tcode: errorCode,\n\t\t\t\t\tmessage:\n\t\t\t\t\t\terrorCode === \"exit_nonzero\"\n\t\t\t\t\t\t\t? \"Process exited with a non-zero status\"\n\t\t\t\t\t\t\t: errorCode === \"cancelled\"\n\t\t\t\t\t\t\t\t? \"Process execution was cancelled\"\n\t\t\t\t\t\t\t\t: \"Process execution failed\",\n\t\t\t\t};\n\treturn {\n\t\tversion: 1,\n\t\toperationId: request.operationId,\n\t\tstatus,\n\t\tsummary:\n\t\t\tstatus === \"succeeded\"\n\t\t\t\t? \"Process completed successfully\"\n\t\t\t\t: termination === \"cancelled\"\n\t\t\t\t\t? \"Process execution was cancelled\"\n\t\t\t\t\t: termination === \"timeout\"\n\t\t\t\t\t\t? \"Process execution timed out\"\n\t\t\t\t\t\t: termination === \"output_budget_exceeded\"\n\t\t\t\t\t\t\t? \"Process output exceeded the host budget\"\n\t\t\t\t\t\t\t: termination === \"spawn_failed\"\n\t\t\t\t\t\t\t\t? \"Process could not be started\"\n\t\t\t\t\t\t\t\t: \"Process exited with a non-zero status\",\n\t\t...(code === undefined ? {} : { exitCode: code }),\n\t\tstdoutBytes,\n\t\tstderrBytes,\n\t\tstdoutPreview,\n\t\tstderrPreview,\n\t\tstdoutTruncated: stdoutBytes > previewBytes,\n\t\tstderrTruncated: stderrBytes > previewBytes,\n\t\t...(error === undefined ? {} : { error }),\n\t};\n}\n\n/** Node host adapter with shell-free argv execution and bounded output previews. */\nexport function createNodeProcessExecAdapterV1(options: NodeProcessExecAdapterOptionsV1): ProcessExecAdapterV1 {\n\tif (typeof options.cwd !== \"string\" || !isAbsolute(options.cwd)) throw new Error(\"cwd must be an absolute path\");\n\tconst defaultTimeoutMs = positiveBound(\n\t\toptions.defaultTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"defaultTimeoutMs\",\n\t);\n\tconst maxStdoutBytes = positiveBound(\n\t\toptions.maxStdoutBytes,\n\t\tDEFAULT_OUTPUT_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\t\t\"maxStdoutBytes\",\n\t);\n\tconst maxStderrBytes = positiveBound(\n\t\toptions.maxStderrBytes,\n\t\tDEFAULT_OUTPUT_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_OUTPUT_BYTES_V1,\n\t\t\"maxStderrBytes\",\n\t);\n\tconst previewBytes = positiveBound(\n\t\toptions.previewBytes,\n\t\tDEFAULT_PREVIEW_BYTES_V1,\n\t\tPROCESS_EXEC_MAX_PREVIEW_BYTES_V1,\n\t\t\"previewBytes\",\n\t);\n\tconst env = hostEnvironment(options.env);\n\tconst spawnProcess = options.spawn ?? spawn;\n\tconst terminateTree = options.killProcessTree ?? killProcessTree;\n\n\treturn {\n\t\tadapterId: PROCESS_EXEC_HOST_ADAPTER_ID_V1,\n\t\tadapterVersion: PROCESS_EXEC_HOST_ADAPTER_VERSION_V1,\n\t\trun: (request, signal) => {\n\t\t\tconst operationId =\n\t\t\t\ttypeof request.operationId === \"string\" && request.operationId.trim() !== \"\"\n\t\t\t\t\t? request.operationId\n\t\t\t\t\t: \"invalid-process-operation\";\n\t\t\tconst invalid = validateRequest(request);\n\t\t\tif (invalid !== undefined) return Promise.resolve(inputError(operationId, invalid));\n\t\t\tif (signal?.aborted) return Promise.resolve(cancelled(operationId));\n\t\t\tconst timeoutMs = request.timeoutMs ?? defaultTimeoutMs;\n\t\t\treturn new Promise<ProcessExecResultV1>((resolve) => {\n\t\t\t\tlet child: ReturnType<typeof spawn>;\n\t\t\t\ttry {\n\t\t\t\t\tchild = spawnProcess(request.command, [...request.args], {\n\t\t\t\t\t\tcwd: options.cwd,\n\t\t\t\t\t\t...(env === undefined ? {} : { env }),\n\t\t\t\t\t\tshell: false,\n\t\t\t\t\t\twindowsHide: true,\n\t\t\t\t\t\tdetached: process.platform !== \"win32\",\n\t\t\t\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\t\t\t});\n\t\t\t\t} catch {\n\t\t\t\t\tresolve(\n\t\t\t\t\t\tresult(\n\t\t\t\t\t\t\trequest,\n\t\t\t\t\t\t\t\"failed\",\n\t\t\t\t\t\t\tnew Uint8Array(),\n\t\t\t\t\t\t\tnew Uint8Array(),\n\t\t\t\t\t\t\t0,\n\t\t\t\t\t\t\t0,\n\t\t\t\t\t\t\tpreviewBytes,\n\t\t\t\t\t\t\t\"spawn_failed\",\n\t\t\t\t\t\t\tundefined,\n\t\t\t\t\t\t\toptions.cwd,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tlet stdoutBytes = 0;\n\t\t\t\tlet stderrBytes = 0;\n\t\t\t\tconst stdoutPreview = new Uint8Array(previewBytes);\n\t\t\t\tconst stderrPreview = new Uint8Array(previewBytes);\n\t\t\t\tlet stdoutPreviewLength = 0;\n\t\t\t\tlet stderrPreviewLength = 0;\n\t\t\t\tlet termination:\n\t\t\t\t\t| \"timeout\"\n\t\t\t\t\t| \"output_budget_exceeded\"\n\t\t\t\t\t| \"spawn_failed\"\n\t\t\t\t\t| \"exit_nonzero\"\n\t\t\t\t\t| \"cancelled\"\n\t\t\t\t\t| undefined;\n\t\t\t\tlet settled = false;\n\t\t\t\tlet exited = false;\n\t\t\t\tlet terminationRequested = false;\n\t\t\t\tlet forceKillTimer: ReturnType<typeof setTimeout> | undefined;\n\t\t\t\tlet hardFinishTimer: ReturnType<typeof setTimeout> | undefined;\n\t\t\t\tconst append = (target: Uint8Array, length: number, chunk: Uint8Array): number => {\n\t\t\t\t\tconst copy = Math.min(chunk.byteLength, target.byteLength - length);\n\t\t\t\t\ttarget.set(chunk.subarray(0, copy), length);\n\t\t\t\t\treturn length + copy;\n\t\t\t\t};\n\t\t\t\tconst forceTerminate = (): void => {\n\t\t\t\t\tif (exited) return;\n\t\t\t\t\tif (typeof child.pid === \"number\" && child.pid > 0) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tterminateTree(child.pid);\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The host cleanup boundary is best-effort; close/error still settles the operation.\n\t\t\t\t\t\t}\n\t\t\t\t\t} else if (!child.killed) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t// The close/error event remains authoritative.\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\tconst armForceTermination = (): void => {\n\t\t\t\t\tif (forceKillTimer !== undefined) return;\n\t\t\t\t\tforceKillTimer = setTimeout(() => {\n\t\t\t\t\t\tforceTerminate();\n\t\t\t\t\t\thardFinishTimer = setTimeout(() => finalize(null), 500);\n\t\t\t\t\t}, 2000);\n\t\t\t\t};\n\t\t\t\tconst terminate = (reason: \"timeout\" | \"output_budget_exceeded\" | \"spawn_failed\" | \"cancelled\"): void => {\n\t\t\t\t\tif (termination === undefined) termination = reason;\n\t\t\t\t\tif (!terminationRequested) {\n\t\t\t\t\t\tterminationRequested = true;\n\t\t\t\t\t\tif (!child.killed) {\n\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\tchild.kill(\"SIGTERM\");\n\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t// The force cleanup timer still runs.\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tarmForceTermination();\n\t\t\t\t};\n\t\t\t\tconst onAbort = () => {\n\t\t\t\t\tterminate(\"cancelled\");\n\t\t\t\t};\n\t\t\t\tconst finalize = (code: number | null): void => {\n\t\t\t\t\tif (settled) return;\n\t\t\t\t\tsettled = true;\n\t\t\t\t\texited = true;\n\t\t\t\t\tclearTimeout(timeout);\n\t\t\t\t\tif (forceKillTimer !== undefined) clearTimeout(forceKillTimer);\n\t\t\t\t\tif (hardFinishTimer !== undefined) clearTimeout(hardFinishTimer);\n\t\t\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\t\t\tif (signal?.aborted && termination === undefined) termination = \"cancelled\";\n\t\t\t\t\tif (termination === undefined && code !== 0) termination = \"exit_nonzero\";\n\t\t\t\t\tconst status =\n\t\t\t\t\t\ttermination === undefined ? \"succeeded\" : termination === \"cancelled\" ? \"cancelled\" : \"failed\";\n\t\t\t\t\tresolve(\n\t\t\t\t\t\tresult(\n\t\t\t\t\t\t\trequest,\n\t\t\t\t\t\t\tstatus,\n\t\t\t\t\t\t\tstdoutPreview.subarray(0, stdoutPreviewLength),\n\t\t\t\t\t\t\tstderrPreview.subarray(0, stderrPreviewLength),\n\t\t\t\t\t\t\tstdoutBytes,\n\t\t\t\t\t\t\tstderrBytes,\n\t\t\t\t\t\t\tpreviewBytes,\n\t\t\t\t\t\t\ttermination,\n\t\t\t\t\t\t\tcode ?? undefined,\n\t\t\t\t\t\t\toptions.cwd,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t};\n\t\t\t\tconst timeout = setTimeout(() => terminate(\"timeout\"), timeoutMs);\n\t\t\t\tif (signal !== undefined) signal.addEventListener(\"abort\", onAbort, { once: true });\n\t\t\t\tchild.stdout?.on(\"data\", (chunk: Buffer | Uint8Array) => {\n\t\t\t\t\tconst bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);\n\t\t\t\t\tstdoutBytes += bytes.byteLength;\n\t\t\t\t\tstdoutPreviewLength = append(stdoutPreview, stdoutPreviewLength, bytes);\n\t\t\t\t\tif (stdoutBytes > maxStdoutBytes) terminate(\"output_budget_exceeded\");\n\t\t\t\t});\n\t\t\t\tchild.stderr?.on(\"data\", (chunk: Buffer | Uint8Array) => {\n\t\t\t\t\tconst bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);\n\t\t\t\t\tstderrBytes += bytes.byteLength;\n\t\t\t\t\tstderrPreviewLength = append(stderrPreview, stderrPreviewLength, bytes);\n\t\t\t\t\tif (stderrBytes > maxStderrBytes) terminate(\"output_budget_exceeded\");\n\t\t\t\t});\n\t\t\t\tchild.once(\"error\", () => {\n\t\t\t\t\tterminate(\"spawn_failed\");\n\t\t\t\t});\n\t\t\t\tchild.once(\"close\", (code) => {\n\t\t\t\t\texited = true;\n\t\t\t\t\tfinalize(code);\n\t\t\t\t});\n\t\t\t});\n\t\t},\n\t};\n}\n"]}

package/dist/shell-utils.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Sanitize binary output for display/storage.
+ * Removes characters that crash string-width or cause display issues:
+ * - Control characters (except tab, newline, carriage return)
+ * - Lone surrogates
+ * - Unicode Format characters (crash string-width due to a bug)
+ * - Characters with undefined code points
+ */
+export declare function sanitizeBinaryOutput(str: string): string;
+/**
+ * Kill a process and all its children (cross-platform)
+ */
+export declare function killProcessTree(pid: number): void;
+//# sourceMappingURL=shell-utils.d.ts.map

package/dist/shell-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-utils.d.ts","sourceRoot":"","sources":["../src/shell-utils.ts"],"names":[],"mappings":"AAQA;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA8BxD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA+BjD","sourcesContent":["/**\n * Inlined from agent-forge `src/utils/shell.ts` (D-075 S3 extraction) so this\n * package keeps its dependency closure limited to the plugin SDK and typebox.\n * Semantics are unchanged.\n */\nimport { spawn } from \"node:child_process\";\nimport { join } from \"node:path\";\n\n/**\n * Sanitize binary output for display/storage.\n * Removes characters that crash string-width or cause display issues:\n * - Control characters (except tab, newline, carriage return)\n * - Lone surrogates\n * - Unicode Format characters (crash string-width due to a bug)\n * - Characters with undefined code points\n */\nexport function sanitizeBinaryOutput(str: string): string {\n\t// Use Array.from to properly iterate over code points (not code units)\n\t// This handles surrogate pairs correctly and catches edge cases where\n\t// codePointAt() might return undefined\n\treturn Array.from(str)\n\t\t.filter((char) => {\n\t\t\t// Filter out characters that cause string-width to crash\n\t\t\t// This includes:\n\t\t\t// - Unicode format characters\n\t\t\t// - Lone surrogates (already filtered by Array.from)\n\t\t\t// - Control chars except \\t \\n \\r\n\t\t\t// - Characters with undefined code points\n\n\t\t\tconst code = char.codePointAt(0);\n\n\t\t\t// v8 ignore next -- Array.from iterating over a legal string, codePointAt will not return undefined\n\t\t\tif (code === undefined) return false;\n\n\t\t\t// Allow tab, newline, carriage return\n\t\t\tif (code === 0x09 || code === 0x0a || code === 0x0d) return true;\n\n\t\t\t// Filter out control characters (0x00-0x1F, except 0x09, 0x0a, 0x0d)\n\t\t\tif (code <= 0x1f) return false;\n\n\t\t\t// Filter out Unicode format characters\n\t\t\tif (code >= 0xfff9 && code <= 0xfffb) return false;\n\n\t\t\treturn true;\n\t\t})\n\t\t.join(\"\");\n}\n\n/**\n * Kill a process and all its children (cross-platform)\n */\nexport function killProcessTree(pid: number): void {\n\tif (process.platform === \"win32\") {\n\t\t// Use the trusted System32 executable so cleanup does not depend on PATH.\n\t\ttry {\n\t\t\tconst child = spawn(\n\t\t\t\tjoin(process.env.SystemRoot ?? \"C:\\\\Windows\", \"System32\", \"taskkill.exe\"),\n\t\t\t\t[\"/F\", \"/T\", \"/PID\", String(pid)],\n\t\t\t\t{\n\t\t\t\t\tstdio: \"ignore\",\n\t\t\t\t\tdetached: true,\n\t\t\t\t\twindowsHide: true,\n\t\t\t\t},\n\t\t\t);\n\t\t\t// A failed spawn emits \"error\" asynchronously; consume it to avoid crashing Node.\n\t\t\tchild.once(\"error\", () => {});\n\t\t} catch {\n\t\t\t// Ignore errors if taskkill fails.\n\t\t}\n\t} else {\n\t\t// Use SIGKILL on Unix/Linux/Mac\n\t\ttry {\n\t\t\tprocess.kill(-pid, \"SIGKILL\");\n\t\t} catch {\n\t\t\t// Fallback to killing just the child if process group kill fails\n\t\t\ttry {\n\t\t\t\tprocess.kill(pid, \"SIGKILL\");\n\t\t\t} catch {\n\t\t\t\t// Process already dead\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/dist/shell-utils.js

@@ -0,0 +1,80 @@
+/**
+ * Inlined from agent-forge `src/utils/shell.ts` (D-075 S3 extraction) so this
+ * package keeps its dependency closure limited to the plugin SDK and typebox.
+ * Semantics are unchanged.
+ */
+import { spawn } from "node:child_process";
+import { join } from "node:path";
+/**
+ * Sanitize binary output for display/storage.
+ * Removes characters that crash string-width or cause display issues:
+ * - Control characters (except tab, newline, carriage return)
+ * - Lone surrogates
+ * - Unicode Format characters (crash string-width due to a bug)
+ * - Characters with undefined code points
+ */
+export function sanitizeBinaryOutput(str) {
+    // Use Array.from to properly iterate over code points (not code units)
+    // This handles surrogate pairs correctly and catches edge cases where
+    // codePointAt() might return undefined
+    return Array.from(str)
+        .filter((char) => {
+        // Filter out characters that cause string-width to crash
+        // This includes:
+        // - Unicode format characters
+        // - Lone surrogates (already filtered by Array.from)
+        // - Control chars except \t \n \r
+        // - Characters with undefined code points
+        const code = char.codePointAt(0);
+        // v8 ignore next -- Array.from iterating over a legal string, codePointAt will not return undefined
+        if (code === undefined)
+            return false;
+        // Allow tab, newline, carriage return
+        if (code === 0x09 || code === 0x0a || code === 0x0d)
+            return true;
+        // Filter out control characters (0x00-0x1F, except 0x09, 0x0a, 0x0d)
+        if (code <= 0x1f)
+            return false;
+        // Filter out Unicode format characters
+        if (code >= 0xfff9 && code <= 0xfffb)
+            return false;
+        return true;
+    })
+        .join("");
+}
+/**
+ * Kill a process and all its children (cross-platform)
+ */
+export function killProcessTree(pid) {
+    if (process.platform === "win32") {
+        // Use the trusted System32 executable so cleanup does not depend on PATH.
+        try {
+            const child = spawn(join(process.env.SystemRoot ?? "C:\\Windows", "System32", "taskkill.exe"), ["/F", "/T", "/PID", String(pid)], {
+                stdio: "ignore",
+                detached: true,
+                windowsHide: true,
+            });
+            // A failed spawn emits "error" asynchronously; consume it to avoid crashing Node.
+            child.once("error", () => { });
+        }
+        catch {
+            // Ignore errors if taskkill fails.
+        }
+    }
+    else {
+        // Use SIGKILL on Unix/Linux/Mac
+        try {
+            process.kill(-pid, "SIGKILL");
+        }
+        catch {
+            // Fallback to killing just the child if process group kill fails
+            try {
+                process.kill(pid, "SIGKILL");
+            }
+            catch {
+                // Process already dead
+            }
+        }
+    }
+}
+//# sourceMappingURL=shell-utils.js.map

package/dist/shell-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-utils.js","sourceRoot":"","sources":["../src/shell-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAU;IACzD,uEAAuE;IACvE,sEAAsE;IACtE,uCAAuC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,yDAAyD;QACzD,iBAAiB;QACjB,8BAA8B;QAC9B,qDAAqD;QACrD,kCAAkC;QAClC,0CAA0C;QAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAEjC,oGAAoG;QACpG,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAErC,sCAAsC;QACtC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAEjE,qEAAqE;QACrE,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QAE/B,uCAAuC;QACvC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC;QAEnD,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CACX;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAQ;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,0EAA0E;QAC1E,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,KAAK,CAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC,EACzE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EACjC;gBACC,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,IAAI;aACjB,CACD,CAAC;YACF,kFAAkF;YAClF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,mCAAmC;QACpC,CAAC;IACF,CAAC;SAAM,CAAC;QACP,gCAAgC;QAChC,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,iEAAiE;YACjE,IAAI,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACR,uBAAuB;YACxB,CAAC;QACF,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["/**\n * Inlined from agent-forge `src/utils/shell.ts` (D-075 S3 extraction) so this\n * package keeps its dependency closure limited to the plugin SDK and typebox.\n * Semantics are unchanged.\n */\nimport { spawn } from \"node:child_process\";\nimport { join } from \"node:path\";\n\n/**\n * Sanitize binary output for display/storage.\n * Removes characters that crash string-width or cause display issues:\n * - Control characters (except tab, newline, carriage return)\n * - Lone surrogates\n * - Unicode Format characters (crash string-width due to a bug)\n * - Characters with undefined code points\n */\nexport function sanitizeBinaryOutput(str: string): string {\n\t// Use Array.from to properly iterate over code points (not code units)\n\t// This handles surrogate pairs correctly and catches edge cases where\n\t// codePointAt() might return undefined\n\treturn Array.from(str)\n\t\t.filter((char) => {\n\t\t\t// Filter out characters that cause string-width to crash\n\t\t\t// This includes:\n\t\t\t// - Unicode format characters\n\t\t\t// - Lone surrogates (already filtered by Array.from)\n\t\t\t// - Control chars except \\t \\n \\r\n\t\t\t// - Characters with undefined code points\n\n\t\t\tconst code = char.codePointAt(0);\n\n\t\t\t// v8 ignore next -- Array.from iterating over a legal string, codePointAt will not return undefined\n\t\t\tif (code === undefined) return false;\n\n\t\t\t// Allow tab, newline, carriage return\n\t\t\tif (code === 0x09 || code === 0x0a || code === 0x0d) return true;\n\n\t\t\t// Filter out control characters (0x00-0x1F, except 0x09, 0x0a, 0x0d)\n\t\t\tif (code <= 0x1f) return false;\n\n\t\t\t// Filter out Unicode format characters\n\t\t\tif (code >= 0xfff9 && code <= 0xfffb) return false;\n\n\t\t\treturn true;\n\t\t})\n\t\t.join(\"\");\n}\n\n/**\n * Kill a process and all its children (cross-platform)\n */\nexport function killProcessTree(pid: number): void {\n\tif (process.platform === \"win32\") {\n\t\t// Use the trusted System32 executable so cleanup does not depend on PATH.\n\t\ttry {\n\t\t\tconst child = spawn(\n\t\t\t\tjoin(process.env.SystemRoot ?? \"C:\\\\Windows\", \"System32\", \"taskkill.exe\"),\n\t\t\t\t[\"/F\", \"/T\", \"/PID\", String(pid)],\n\t\t\t\t{\n\t\t\t\t\tstdio: \"ignore\",\n\t\t\t\t\tdetached: true,\n\t\t\t\t\twindowsHide: true,\n\t\t\t\t},\n\t\t\t);\n\t\t\t// A failed spawn emits \"error\" asynchronously; consume it to avoid crashing Node.\n\t\t\tchild.once(\"error\", () => {});\n\t\t} catch {\n\t\t\t// Ignore errors if taskkill fails.\n\t\t}\n\t} else {\n\t\t// Use SIGKILL on Unix/Linux/Mac\n\t\ttry {\n\t\t\tprocess.kill(-pid, \"SIGKILL\");\n\t\t} catch {\n\t\t\t// Fallback to killing just the child if process group kill fails\n\t\t\ttry {\n\t\t\t\tprocess.kill(pid, \"SIGKILL\");\n\t\t\t} catch {\n\t\t\t\t// Process already dead\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/dist/types.d.ts

@@ -0,0 +1,45 @@
+import type { PluginErrorV1, PluginResultStatusV1 } from "@agent-forge/plugin-sdk";
+export declare const PROCESS_EXEC_PLUGIN_ID_V1: "agent-forge.plugin.process-exec";
+export declare const PROCESS_EXEC_CAPABILITY_VERSION_V1: 1;
+export declare const PROCESS_EXEC_HOST_ADAPTER_ID_V1: "node-process-exec";
+export declare const PROCESS_EXEC_HOST_ADAPTER_VERSION_V1: "1.0.0";
+export interface ProcessExecRequestV1 {
+    readonly version: 1;
+    readonly operationId: string;
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly timeoutMs?: number;
+}
+/**
+ * A bounded process result. stdout/stderr are previews only; the host may keep
+ * complete logs in a private artifact, but never returns them through this DTO.
+ */
+export interface ProcessExecResultV1 {
+    readonly version: 1;
+    readonly operationId: string;
+    readonly status: PluginResultStatusV1;
+    readonly summary: string;
+    readonly exitCode?: number;
+    readonly stdoutBytes: number;
+    readonly stderrBytes: number;
+    readonly stdoutPreview: string;
+    readonly stderrPreview: string;
+    readonly stdoutTruncated: boolean;
+    readonly stderrTruncated: boolean;
+    readonly error?: PluginErrorV1;
+}
+export interface ProcessExecAdapterV1 {
+    readonly adapterId: string;
+    readonly adapterVersion: string;
+    readonly run: (request: ProcessExecRequestV1, signal?: AbortSignal) => Promise<ProcessExecResultV1>;
+}
+export interface ProcessExecPluginManifestV1 {
+    readonly id: typeof PROCESS_EXEC_PLUGIN_ID_V1;
+    readonly pluginVersion: string;
+    readonly apiVersion: "1";
+    readonly capabilityRefs: readonly {
+        readonly id: "process.exec";
+        readonly version: 1;
+    }[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,eAAO,MAAM,yBAAyB,mCAA6C,CAAC;AACpF,eAAO,MAAM,kCAAkC,GAAa,CAAC;AAC7D,eAAO,MAAM,+BAA+B,qBAA+B,CAAC;AAC5E,eAAO,MAAM,oCAAoC,SAAmB,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACpG;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,EAAE,EAAE,OAAO,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;KAAE,EAAE,CAAC;CACzF","sourcesContent":["import type { PluginErrorV1, PluginResultStatusV1 } from \"@agent-forge/plugin-sdk\";\n\nexport const PROCESS_EXEC_PLUGIN_ID_V1 = \"agent-forge.plugin.process-exec\" as const;\nexport const PROCESS_EXEC_CAPABILITY_VERSION_V1 = 1 as const;\nexport const PROCESS_EXEC_HOST_ADAPTER_ID_V1 = \"node-process-exec\" as const;\nexport const PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 = \"1.0.0\" as const;\n\nexport interface ProcessExecRequestV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly command: string;\n\treadonly args: readonly string[];\n\treadonly timeoutMs?: number;\n}\n\n/**\n * A bounded process result. stdout/stderr are previews only; the host may keep\n * complete logs in a private artifact, but never returns them through this DTO.\n */\nexport interface ProcessExecResultV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly status: PluginResultStatusV1;\n\treadonly summary: string;\n\treadonly exitCode?: number;\n\treadonly stdoutBytes: number;\n\treadonly stderrBytes: number;\n\treadonly stdoutPreview: string;\n\treadonly stderrPreview: string;\n\treadonly stdoutTruncated: boolean;\n\treadonly stderrTruncated: boolean;\n\treadonly error?: PluginErrorV1;\n}\n\nexport interface ProcessExecAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\treadonly run: (request: ProcessExecRequestV1, signal?: AbortSignal) => Promise<ProcessExecResultV1>;\n}\n\nexport interface ProcessExecPluginManifestV1 {\n\treadonly id: typeof PROCESS_EXEC_PLUGIN_ID_V1;\n\treadonly pluginVersion: string;\n\treadonly apiVersion: \"1\";\n\treadonly capabilityRefs: readonly { readonly id: \"process.exec\"; readonly version: 1 }[];\n}\n"]}

package/dist/types.js

@@ -0,0 +1,5 @@
+export const PROCESS_EXEC_PLUGIN_ID_V1 = "agent-forge.plugin.process-exec";
+export const PROCESS_EXEC_CAPABILITY_VERSION_V1 = 1;
+export const PROCESS_EXEC_HOST_ADAPTER_ID_V1 = "node-process-exec";
+export const PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 = "1.0.0";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAA0C,CAAC;AACpF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAU,CAAC;AAC7D,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAA4B,CAAC;AAC5E,MAAM,CAAC,MAAM,oCAAoC,GAAG,OAAgB,CAAC","sourcesContent":["import type { PluginErrorV1, PluginResultStatusV1 } from \"@agent-forge/plugin-sdk\";\n\nexport const PROCESS_EXEC_PLUGIN_ID_V1 = \"agent-forge.plugin.process-exec\" as const;\nexport const PROCESS_EXEC_CAPABILITY_VERSION_V1 = 1 as const;\nexport const PROCESS_EXEC_HOST_ADAPTER_ID_V1 = \"node-process-exec\" as const;\nexport const PROCESS_EXEC_HOST_ADAPTER_VERSION_V1 = \"1.0.0\" as const;\n\nexport interface ProcessExecRequestV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly command: string;\n\treadonly args: readonly string[];\n\treadonly timeoutMs?: number;\n}\n\n/**\n * A bounded process result. stdout/stderr are previews only; the host may keep\n * complete logs in a private artifact, but never returns them through this DTO.\n */\nexport interface ProcessExecResultV1 {\n\treadonly version: 1;\n\treadonly operationId: string;\n\treadonly status: PluginResultStatusV1;\n\treadonly summary: string;\n\treadonly exitCode?: number;\n\treadonly stdoutBytes: number;\n\treadonly stderrBytes: number;\n\treadonly stdoutPreview: string;\n\treadonly stderrPreview: string;\n\treadonly stdoutTruncated: boolean;\n\treadonly stderrTruncated: boolean;\n\treadonly error?: PluginErrorV1;\n}\n\nexport interface ProcessExecAdapterV1 {\n\treadonly adapterId: string;\n\treadonly adapterVersion: string;\n\treadonly run: (request: ProcessExecRequestV1, signal?: AbortSignal) => Promise<ProcessExecResultV1>;\n}\n\nexport interface ProcessExecPluginManifestV1 {\n\treadonly id: typeof PROCESS_EXEC_PLUGIN_ID_V1;\n\treadonly pluginVersion: string;\n\treadonly apiVersion: \"1\";\n\treadonly capabilityRefs: readonly { readonly id: \"process.exec\"; readonly version: 1 }[];\n}\n"]}

package/package.json

@@ -0,0 +1,55 @@
+{
+	"name": "@ai-agent-forge/plugin-process-exec",
+	"version": "0.85.0",
+	"description": "Process execution capability plugin for Agent Forge (full-control process_exec tool)",
+	"type": "module",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		}
+	},
+	"files": [
+		"dist",
+		"agent-forge.json",
+		"plugin.json",
+		"README.md"
+	],
+	"scripts": {
+		"clean": "shx rm -rf dist",
+		"build": "tsgo -p tsconfig.build.json",
+		"test": "vitest --run",
+		"prepublishOnly": "npm run clean && npm run build"
+	},
+	"keywords": [
+		"agent-forge",
+		"plugin",
+		"process",
+		"exec"
+	],
+	"author": "Agent Forge contributors",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/agent-forge/agent-forge.git",
+		"directory": "plugins/process-exec"
+	},
+	"bugs": {
+		"url": "https://github.com/agent-forge/agent-forge/issues"
+	},
+	"homepage": "https://github.com/agent-forge/agent-forge#readme",
+	"engines": {
+		"node": ">=22.19.0"
+	},
+	"dependencies": {
+		"@agent-forge/plugin-sdk": "^0.85.0",
+		"typebox": "1.3.27"
+	},
+	"devDependencies": {
+		"@agent-forge/agent-forge": "^0.85.0",
+		"shx": "0.4.0",
+		"vitest": "4.1.9"
+	}
+}

package/plugin.json

@@ -0,0 +1,9 @@
+{
+	"id": "agent-forge.plugin.process-exec",
+	"version": "0.84.4",
+	"apiVersion": "1-draft",
+	"entry": "./dist/entry.js",
+	"hostVersion": ">=0.84.4",
+	"requiredCapabilities": ["tools"],
+	"provides": [{ "id": "process.exec", "version": 1, "kind": "contribution" }]
+}