@bastani/atomic 0.8.28-alpha.2 → 0.8.28-alpha.3

package/dist/core/agent-session.js

@@ -33,6 +33,7 @@ import { CURRENT_SESSION_VERSION, getLatestCompactionBoundaryEntry } from "./ses
 import { createSyntheticSourceInfo } from "./source-info.js";
 import { buildSystemPrompt } from "./system-prompt.js";
 import { createLocalBashOperations } from "./tools/bash.js";
+import { evaluateBashCommandPolicy, formatBashCommandPolicyRejection, } from "./tools/bash-policy.js";
 import { createAllToolDefinitions, defaultToolNames } from "./tools/index.js";
 import { redirectOversizedToolResult } from "./tools/oversized-tool-result.js";
 import { createToolDefinitionFromAgentTool } from "./tools/tool-definition-wrapper.js";
@@ -187,6 +188,7 @@ export class AgentSession {
         this._scopedModels = config.scopedModels ?? [];
         this._resourceLoader = config.resourceLoader;
         this._customTools = config.customTools ?? [];
+        this._bashPolicy = config.bashPolicy;
         this._cwd = config.cwd;
         this._modelRegistry = config.modelRegistry;
         this._extensionRunnerRef = config.extensionRunnerRef;
@@ -2244,7 +2246,12 @@ export class AgentSession {
             ]))
             : createAllToolDefinitions(this._cwd, {
                 read: { autoResizeImages },
-                bash: { commandPrefix: shellCommandPrefix, shellPath },
+                bash: {
+                    commandPrefix: shellCommandPrefix,
+                    shellPath,
+                    policy: this._bashPolicy,
+                    policyLabel: "session bash policy",
+                },
             });
         this._baseToolDefinitions = new Map(Object.entries(baseToolDefinitions).map(([name, tool]) => [name, tool]));
         const extensionsResult = this._resourceLoader.getExtensions();
@@ -2422,6 +2429,10 @@ export class AgentSession {
      * @param options.operations Custom BashOperations for remote execution
      */
     async executeBash(command, onChunk, options) {
+        const policyDecision = evaluateBashCommandPolicy(command, this._bashPolicy);
+        if (!policyDecision.allowed) {
+            throw new Error(formatBashCommandPolicyRejection(policyDecision, "session bash policy"));
+        }
         this._bashAbortController = new AbortController();
         // Apply command prefix if configured (e.g., "shopt -s expand_aliases" for alias support)
         const prefix = this.settingsManager.getShellCommandPrefix();