@blockrun/franklin 3.15.38 → 3.15.39

package/dist/tools/bash.js

@@ -2,6 +2,7 @@
  * Bash capability — execute shell commands with timeout and output capture.
  */
 import { spawn } from 'node:child_process';
+import fs from 'node:fs';
 // ─── Smart Output Compression ─────────────────────────────────────────────
 // Learned from RTK (Rust Token Killer): strip noise before sending to LLM.
 // Applied after capture, before the 32KB cap — reduces tokens on verbose commands.
@@ -273,7 +274,19 @@ async function execute(input, ctx) {
 }
 function executeCommand(command, timeoutMs, ctx) {
     return new Promise((resolve) => {
-        const shell = process.env.SHELL || '/bin/bash';
+        // Force /bin/bash (not $SHELL) so the tool's behavior matches its name
+        // and its tool description. Pre-3.15.39 used `process.env.SHELL ||
+        // '/bin/bash'`, which on macOS defaults to zsh — and zsh has
+        // semantically different rules (NOMATCH on unmatched globs is fatal,
+        // unlike bash's literal-passthrough). Verified 2026-05-04 from a real
+        // session: agent ran `rm -f data/etl_out/shard-*.ndjson` expecting
+        // bash's "if no match, -f ignores it"; zsh fatal-erred with `no
+        // matches found`. Other zsh-vs-bash divergences (process substitution
+        // syntax, `[[` bashisms in scripts, parameter expansion edge cases)
+        // would silently bite agents that learned bash. /bin/bash exists on
+        // every Linux + macOS install we ship to. Fall back to $SHELL only if
+        // /bin/bash is somehow missing (NixOS-style stores, exotic Docker).
+        const shell = fs.existsSync('/bin/bash') ? '/bin/bash' : (process.env.SHELL || '/bin/sh');
         let child;
         try {
             child = spawn(shell, ['-c', command], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/franklin",
-  "version": "3.15.38",
+  "version": "3.15.39",
   "description": "Franklin — The AI agent with a wallet. Spends USDC autonomously to get real work done. Pay per action, no subscriptions.",
   "type": "module",
   "exports": {