@cleocode/core 2026.6.12 → 2026.6.14

package/dist/tools/schedule-agent-tools.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Cron / todo agent-tool family — `todo_add` / `todo_list` / `cron_schedule`
+ * (T11950 · M7 · epic T11456 · SG-TOOLS).
+ *
+ * Surfaces the EXISTING task store to the agent loop as `agent`-toolset tools that
+ * work daemon-OFF:
+ *
+ *   - **`todo_add`** — create a task, DELEGATING to the existing
+ *     {@link import('../tasks/ops.js')}'s `tasksAddOp` (the same path `cleo add`
+ *     uses). No new table, no new schema.
+ *   - **`todo_list`** — list tasks, DELEGATING to `tasksListOp` (the same path
+ *     `cleo list` uses).
+ *   - **`cron_schedule`** — register a recurring schedule. The schedule store now
+ *     exists (the `schedules` table + leased Gate-3 accessor `store/schedule-store.ts`,
+ *     T11962 under T11679), so this tool DELEGATES to {@link ScheduleStore.add} and
+ *     persists a row daemon-OFF (a future daemon scheduler consumes the SAME table
+ *     as a separate reader). It stays REGISTERED-but-capability-gated: its
+ *     {@link AvailabilityCheck} hides it until a host advertises a schedule store
+ *     (`capabilities.scheduleStore === true`) so a host that has opted out of the
+ *     schedule domain does not surface it; invoking it without the store still
+ *     returns a typed `E_SCHEDULE_STORE_UNAVAILABLE` failure. `todo_*` are always
+ *     available daemon-OFF.
+ *
+ * ## Why a seam, not a hardcoded import (testing + Gate-11)
+ *
+ * The task ops are injected through the {@link TaskOps} seam, defaulting to the
+ * real `ops` functions. The unit test injects a FAKE store and asserts delegation
+ * + schema validation WITHOUT opening a real `tasks.db`. The tools are DEFINED
+ * here under `packages/core/src/tools` and CONSUME the task subsystem — they
+ * construct no new atomic primitive (Gate-11).
+ *
+ * ## Gate-13
+ *
+ * No model/transport/provider client is constructed here — task CRUD is a local
+ * SQLite operation. There is no chokepoint concern.
+ *
+ * @epic T11456
+ * @task T11950
+ * @see ../tasks/ops.js — `tasksAddOp` / `tasksListOp` (the ops this family delegates to)
+ * @see ./exec-code-agent-tool.js — the injectable-seam + capability-gated availability pattern mirrored here
+ */
+import type { TaskPriority, TaskStatus, TaskType } from '@cleocode/contracts';
+import type { AddTaskResult } from '../tasks/add.js';
+import type { ListTasksResult } from '../tasks/list.js';
+import { type AgentToolRegistry, type AvailabilityCheck } from './agent-registry.js';
+/**
+ * The task store operations the `todo_*` tools delegate to. Each member has the
+ * SAME signature as the corresponding `ops` function. Injectable so the unit test
+ * can supply a fake store; defaults to the real ops in production.
+ */
+export interface TaskOps {
+    /** Create a task (→ `tasksAddOp`). */
+    readonly add: (projectRoot: string, params: {
+        title: string;
+        description?: string;
+        parent?: string;
+        priority?: TaskPriority;
+        type?: TaskType;
+        acceptance?: string[];
+    }) => Promise<AddTaskResult>;
+    /** List tasks (→ `tasksListOp`). */
+    readonly list: (projectRoot: string, params: {
+        parent?: string;
+        status?: TaskStatus;
+        priority?: TaskPriority;
+        type?: TaskType;
+        limit?: number;
+    }) => Promise<ListTasksResult>;
+}
+/**
+ * The result `cron_schedule` returns: on success the minted `scheduleId` of the
+ * persisted row; on failure a typed, non-throwing error (e.g. when no schedule
+ * store backs the host). The tool is registered (catalog-stable) and gated on the
+ * `scheduleStore` host capability.
+ */
+export interface CronScheduleResult {
+    /** Whether a schedule row was registered. */
+    readonly ok: boolean;
+    /** The registered schedule's ID (present on success). */
+    readonly scheduleId?: string;
+    /** A stable code + message for why scheduling failed (present on failure). */
+    readonly error?: {
+        readonly code: string;
+        readonly message: string;
+    };
+}
+/**
+ * The schedule-store operation the `cron_schedule` tool delegates to. Injectable
+ * so the unit test can supply a fake store; defaults to the real Gate-3 accessor
+ * (`store/schedule-store.ts`) opened through the {@link openDualScopeDb} chokepoint.
+ */
+export interface ScheduleStore {
+    /**
+     * Register a recurring schedule and return its minted opaque handle.
+     *
+     * @param projectRoot - The project root whose `cleo.db` the schedule persists in.
+     * @param params - The cron expression + task template (title / description).
+     * @returns The minted `sched-<token>` handle.
+     */
+    readonly add: (projectRoot: string, params: {
+        cron: string;
+        title: string;
+        description?: string;
+    }) => Promise<string>;
+}
+/**
+ * Available only when the host advertises a schedule store
+ * (`capabilities.scheduleStore === true`). The schedule store now EXISTS (the
+ * `schedules` table + leased Gate-3 accessor, T11962 under T11679), so the gate is
+ * a host POLICY/capability switch — a host that has opted out of the schedule
+ * domain does not surface `cron_schedule`. Registration of a schedule row persists
+ * WITHOUT a live daemon (the chokepoint serializes the single in-process writer);
+ * a future daemon scheduler consumes the same table as a separate reader.
+ */
+export declare const scheduleStoreAvailable: AvailabilityCheck;
+/** Options for {@link registerScheduleAgentTools} — all injectable for testing. */
+export interface ScheduleAgentToolOptions {
+    /** The task ops seam. Defaults to the real `tasksAddOp` / `tasksListOp`. */
+    readonly tasks?: TaskOps;
+    /**
+     * The schedule-store seam `cron_schedule` delegates to. Defaults to the real
+     * Gate-3 accessor (`store/schedule-store.ts`). Injected in tests with a fake
+     * store so registration is asserted WITHOUT opening a real `cleo.db`.
+     */
+    readonly schedule?: ScheduleStore;
+    /**
+     * The project root threaded into every op (defaults to the resolved project
+     * root via {@link resolveOrCwd} — never a bare `process.cwd()` in core, T9584).
+     */
+    readonly projectRoot?: string;
+}
+/**
+ * Register the cron / todo agent-tool family into `registry`. Pure registration —
+ * no `tasks.db` is opened, no row is written here; all of that happens later
+ * inside each tool's `execute` through the injected (or lazily-resolved real)
+ * ops. Import-time side-effect-free.
+ *
+ * @param registry - The registry to populate.
+ * @param options - Injectable task ops / project root (for testing).
+ */
+export declare function registerScheduleAgentTools(registry: AgentToolRegistry, options?: ScheduleAgentToolOptions): void;
+/**
+ * Self-registration marker (AC1) — the identifier the
+ * {@link AgentToolRegistry.discover} bounded source scan greps for. Aliases
+ * {@link registerScheduleAgentTools} so a future scan-dir discovery (or the
+ * built-in aggregator) can call it uniformly with the other agent-tool modules.
+ *
+ * @param registry - The registry to populate.
+ */
+export declare function registerAgentTools(registry: AgentToolRegistry): void;
+//# sourceMappingURL=schedule-agent-tools.d.ts.map

package/dist/tools/schedule-agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-agent-tools.d.ts","sourceRoot":"","sources":["../../src/tools/schedule-agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAE7B;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,sCAAsC;IACtC,QAAQ,CAAC,GAAG,EAAE,CACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,YAAY,CAAC;QACxB,IAAI,CAAC,EAAE,QAAQ,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACvB,KACE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,QAAQ,CAAC,EAAE,YAAY,CAAC;QACxB,IAAI,CAAC,EAAE,QAAQ,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KACE,OAAO,CAAC,eAAe,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,yDAAyD;IACzD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,CACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAC1D,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,iBACK,CAAC;AAE3C,mFAAmF;AACnF,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAwCD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE,wBAA6B,GACrC,IAAI,CAwIN;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAEpE"}

package/dist/tools/schedule-agent-tools.js

@@ -0,0 +1,238 @@
+/**
+ * Cron / todo agent-tool family — `todo_add` / `todo_list` / `cron_schedule`
+ * (T11950 · M7 · epic T11456 · SG-TOOLS).
+ *
+ * Surfaces the EXISTING task store to the agent loop as `agent`-toolset tools that
+ * work daemon-OFF:
+ *
+ *   - **`todo_add`** — create a task, DELEGATING to the existing
+ *     {@link import('../tasks/ops.js')}'s `tasksAddOp` (the same path `cleo add`
+ *     uses). No new table, no new schema.
+ *   - **`todo_list`** — list tasks, DELEGATING to `tasksListOp` (the same path
+ *     `cleo list` uses).
+ *   - **`cron_schedule`** — register a recurring schedule. The schedule store now
+ *     exists (the `schedules` table + leased Gate-3 accessor `store/schedule-store.ts`,
+ *     T11962 under T11679), so this tool DELEGATES to {@link ScheduleStore.add} and
+ *     persists a row daemon-OFF (a future daemon scheduler consumes the SAME table
+ *     as a separate reader). It stays REGISTERED-but-capability-gated: its
+ *     {@link AvailabilityCheck} hides it until a host advertises a schedule store
+ *     (`capabilities.scheduleStore === true`) so a host that has opted out of the
+ *     schedule domain does not surface it; invoking it without the store still
+ *     returns a typed `E_SCHEDULE_STORE_UNAVAILABLE` failure. `todo_*` are always
+ *     available daemon-OFF.
+ *
+ * ## Why a seam, not a hardcoded import (testing + Gate-11)
+ *
+ * The task ops are injected through the {@link TaskOps} seam, defaulting to the
+ * real `ops` functions. The unit test injects a FAKE store and asserts delegation
+ * + schema validation WITHOUT opening a real `tasks.db`. The tools are DEFINED
+ * here under `packages/core/src/tools` and CONSUME the task subsystem — they
+ * construct no new atomic primitive (Gate-11).
+ *
+ * ## Gate-13
+ *
+ * No model/transport/provider client is constructed here — task CRUD is a local
+ * SQLite operation. There is no chokepoint concern.
+ *
+ * @epic T11456
+ * @task T11950
+ * @see ../tasks/ops.js — `tasksAddOp` / `tasksListOp` (the ops this family delegates to)
+ * @see ./exec-code-agent-tool.js — the injectable-seam + capability-gated availability pattern mirrored here
+ */
+import { z } from 'zod';
+import { resolveOrCwd } from '../paths.js';
+import { ALWAYS_AVAILABLE, } from './agent-registry.js';
+/**
+ * Available only when the host advertises a schedule store
+ * (`capabilities.scheduleStore === true`). The schedule store now EXISTS (the
+ * `schedules` table + leased Gate-3 accessor, T11962 under T11679), so the gate is
+ * a host POLICY/capability switch — a host that has opted out of the schedule
+ * domain does not surface `cron_schedule`. Registration of a schedule row persists
+ * WITHOUT a live daemon (the chokepoint serializes the single in-process writer);
+ * a future daemon scheduler consumes the same table as a separate reader.
+ */
+export const scheduleStoreAvailable = (ctx) => ctx.capabilities?.scheduleStore === true;
+/**
+ * Build the real task-ops seam by lazily importing the existing `ops` module.
+ * Lazy so this tool module stays import-time side-effect-free; the import happens
+ * only when the real ops are first needed.
+ *
+ * @returns The production {@link TaskOps}.
+ */
+async function realTaskOps() {
+    const { tasksAddOp, tasksListOp } = await import('../tasks/ops.js');
+    return {
+        add: (root, params) => tasksAddOp(root, params),
+        list: (root, params) => tasksListOp(root, params),
+    };
+}
+/**
+ * Build the real schedule-store seam by lazily importing the Gate-3 accessor.
+ * Lazy so this tool module stays import-time side-effect-free; the import (and the
+ * `cleo.db` open) happens only when `cron_schedule` first fires. The accessor
+ * routes through {@link openDualScopeDb} (the dual-scope chokepoint) — it NEVER
+ * opens a raw handle.
+ *
+ * @returns The production {@link ScheduleStore}.
+ */
+async function realScheduleStore() {
+    const { getScheduleNativeDb, addSchedule } = await import('../store/schedule-store.js');
+    return {
+        add: async (root, params) => {
+            const native = await getScheduleNativeDb(root);
+            return addSchedule(native, {
+                cronExpr: params.cron,
+                title: params.title,
+                description: params.description,
+            });
+        },
+    };
+}
+/**
+ * Register the cron / todo agent-tool family into `registry`. Pure registration —
+ * no `tasks.db` is opened, no row is written here; all of that happens later
+ * inside each tool's `execute` through the injected (or lazily-resolved real)
+ * ops. Import-time side-effect-free.
+ *
+ * @param registry - The registry to populate.
+ * @param options - Injectable task ops / project root (for testing).
+ */
+export function registerScheduleAgentTools(registry, options = {}) {
+    const projectRoot = resolveOrCwd(options.projectRoot);
+    // --- todo_add (→ tasksAddOp) ---------------------------------------------
+    registry.register({
+        name: 'todo_add',
+        // 'fs' — persists a row to the local tasks store (its strongest side-effect surface).
+        class: 'fs',
+        description: 'Add a task (todo) to the project task store. Delegates to the same path as `cleo add`. ' +
+            'Returns the created task. Always available daemon-OFF.',
+        toolset: 'agent',
+        stateless: false,
+        available: ALWAYS_AVAILABLE,
+        parameters: z.object({
+            title: z.string().describe('The task title.'),
+            description: z.string().optional().describe('A longer task description.'),
+            parent: z.string().optional().describe('Parent task/epic ID to nest this task under.'),
+            priority: z
+                .enum(['critical', 'high', 'medium', 'low'])
+                .optional()
+                .describe('Task priority (default medium).'),
+            acceptance: z
+                .array(z.string())
+                .optional()
+                .describe('Acceptance criteria — one entry per criterion.'),
+        }),
+        execute: async (rawArgs) => {
+            const tasks = options.tasks ?? (await realTaskOps());
+            const title = String(rawArgs.title);
+            const description = rawArgs.description === undefined ? undefined : String(rawArgs.description);
+            const parent = rawArgs.parent === undefined ? undefined : String(rawArgs.parent);
+            const priority = rawArgs.priority === 'critical' ||
+                rawArgs.priority === 'high' ||
+                rawArgs.priority === 'medium' ||
+                rawArgs.priority === 'low'
+                ? rawArgs.priority
+                : undefined;
+            const acceptance = Array.isArray(rawArgs.acceptance)
+                ? rawArgs.acceptance.map(String)
+                : undefined;
+            return tasks.add(projectRoot, {
+                title,
+                description,
+                parent,
+                priority,
+                type: 'task',
+                acceptance,
+            });
+        },
+    });
+    // --- todo_list (→ tasksListOp) -------------------------------------------
+    registry.register({
+        name: 'todo_list',
+        // 'search' — a local read-query of the tasks store.
+        class: 'search',
+        description: 'List tasks (todos) from the project task store, optionally filtered by parent / status / ' +
+            'priority. Delegates to the same path as `cleo list`. Always available daemon-OFF.',
+        toolset: 'agent',
+        stateless: true,
+        available: ALWAYS_AVAILABLE,
+        parameters: z.object({
+            parent: z.string().optional().describe('Only list direct children of this task/epic ID.'),
+            status: z.string().optional().describe('Filter by status (e.g. pending, in_progress, done).'),
+            priority: z
+                .enum(['critical', 'high', 'medium', 'low'])
+                .optional()
+                .describe('Filter by priority.'),
+            limit: z.number().int().positive().optional().describe('Maximum number of tasks to return.'),
+        }),
+        execute: async (rawArgs) => {
+            const tasks = options.tasks ?? (await realTaskOps());
+            const parent = rawArgs.parent === undefined ? undefined : String(rawArgs.parent);
+            const status = rawArgs.status === undefined ? undefined : String(rawArgs.status);
+            const priority = rawArgs.priority === 'critical' ||
+                rawArgs.priority === 'high' ||
+                rawArgs.priority === 'medium' ||
+                rawArgs.priority === 'low'
+                ? rawArgs.priority
+                : undefined;
+            const limit = typeof rawArgs.limit === 'number' ? rawArgs.limit : undefined;
+            return tasks.list(projectRoot, { parent, status, priority, limit });
+        },
+    });
+    // --- cron_schedule (persists a row through the leased Gate-3 store) -------
+    registry.register({
+        name: 'cron_schedule',
+        // 'fs' — registering a schedule persists a store row.
+        class: 'fs',
+        description: 'Register a recurring schedule (cron expression → task template). Persists a row to the ' +
+            'project schedule store and returns its schedule ID. Gated on the host advertising a ' +
+            'schedule store; persists daemon-OFF (a daemon scheduler consumes the table separately).',
+        toolset: 'agent',
+        stateless: false,
+        available: scheduleStoreAvailable,
+        parameters: z.object({
+            cron: z.string().describe('A cron expression for the recurrence (e.g. "0 9 * * 1").'),
+            title: z.string().describe('The title of the task to create on each fire.'),
+            description: z
+                .string()
+                .optional()
+                .describe('A description for the task created on each fire.'),
+        }),
+        execute: async (rawArgs) => {
+            // Delegate to the schedule-store seam (the real Gate-3 accessor, or an
+            // injected fake in tests). The accessor routes through openDualScopeDb — no
+            // raw db open here. A store/IO failure is returned as a typed, non-throwing
+            // result so the agent loop sees a structured failure rather than an
+            // exception.
+            const cron = String(rawArgs.cron);
+            const title = String(rawArgs.title);
+            const description = rawArgs.description === undefined ? undefined : String(rawArgs.description);
+            try {
+                const schedule = options.schedule ?? (await realScheduleStore());
+                const scheduleId = await schedule.add(projectRoot, { cron, title, description });
+                return { ok: true, scheduleId };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'E_SCHEDULE_STORE_UNAVAILABLE',
+                        message: `failed to register schedule: ${err instanceof Error ? err.message : String(err)}`,
+                    },
+                };
+            }
+        },
+    });
+}
+/**
+ * Self-registration marker (AC1) — the identifier the
+ * {@link AgentToolRegistry.discover} bounded source scan greps for. Aliases
+ * {@link registerScheduleAgentTools} so a future scan-dir discovery (or the
+ * built-in aggregator) can call it uniformly with the other agent-tool modules.
+ *
+ * @param registry - The registry to populate.
+ */
+export function registerAgentTools(registry) {
+    registerScheduleAgentTools(registry);
+}
+//# sourceMappingURL=schedule-agent-tools.js.map

package/dist/tools/schedule-agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-agent-tools.js","sourceRoot":"","sources":["../../src/tools/schedule-agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAEL,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAmE7B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,GAAG,EAAE,EAAE,CAC/D,GAAG,CAAC,YAAY,EAAE,aAAa,KAAK,IAAI,CAAC;AAmB3C;;;;;;GAMG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpE,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACxF,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,WAAW,CAAC,MAAM,EAAE;gBACzB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAA2B,EAC3B,UAAoC,EAAE;IAEtC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEtD,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,UAAU;QAChB,sFAAsF;QACtF,KAAK,EAAE,IAAI;QACX,WAAW,EACT,yFAAyF;YACzF,wDAAwD;QAC1D,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,gBAAgB;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YACtF,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;iBAC3C,QAAQ,EAAE;iBACV,QAAQ,CAAC,iCAAiC,CAAC;YAC9C,UAAU,EAAE,CAAC;iBACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,gDAAgD,CAAC;SAC9D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAoB,EAAE;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjF,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAC/B,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAC3B,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,OAAO,CAAC,QAAQ,KAAK,KAAK;gBACxB,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAClB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBAChC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC5B,KAAK;gBACL,WAAW;gBACX,MAAM;gBACN,QAAQ;gBACR,IAAI,EAAE,MAAM;gBACZ,UAAU;aACX,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,WAAW;QACjB,oDAAoD;QACpD,KAAK,EAAE,QAAQ;QACf,WAAW,EACT,2FAA2F;YAC3F,mFAAmF;QACrF,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,gBAAgB;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YACzF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YAC7F,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;iBAC3C,QAAQ,EAAE;iBACV,QAAQ,CAAC,qBAAqB,CAAC;YAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;SAC7F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAoB,EAAE;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAgB,CAAC;YACpF,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAC/B,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAC3B,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC7B,OAAO,CAAC,QAAQ,KAAK,KAAK;gBACxB,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAClB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,eAAe;QACrB,sDAAsD;QACtD,KAAK,EAAE,IAAI;QACX,WAAW,EACT,yFAAyF;YACzF,sFAAsF;YACtF,yFAAyF;QAC3F,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,sBAAsB;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;YACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;YAC3E,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;SAChE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAA+B,EAAE;YACtD,uEAAuE;YACvE,4EAA4E;YAC5E,4EAA4E;YAC5E,oEAAoE;YACpE,aAAa;YACb,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;gBACjE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,8BAA8B;wBACpC,OAAO,EAAE,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC5F;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAC5D,0BAA0B,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC"}

package/dist/tools/schema-gen.d.ts

@@ -0,0 +1,57 @@
+/**
+ * OpenAI-format tool-schema generation (T1739 · AC3 · epic T11456).
+ *
+ * The SINGLE generator that turns a Cleo Zod parameter schema into the
+ * OpenAI / JSON-Schema {@link TransportTool} shape the ModelRunner + transport
+ * wire layer (and the Pi adapter) consume. Both the agent-facing
+ * {@link ./agent-registry.js | AgentToolRegistry} (AC3) and the Pi streamFn
+ * bridge (`core/src/llm/pi/pi-stream-fn.ts`) call THIS function, so there is one
+ * conversion doctrine and no drift (DRY).
+ *
+ * Uses Zod v4's native `z.toJSONSchema` — NO `zod-to-json-schema` dependency and
+ * NO typebox value-import, so the cleo↔Pi tool surface carries zero typebox
+ * (Gate 10). The resulting `inputSchema` is a plain JSON-Schema object the
+ * transport passes through verbatim after any provider-specific adaptation.
+ *
+ * @task T1739
+ * @epic T11456
+ */
+import type { TransportTool } from '@cleocode/contracts/llm/normalized-response.js';
+import { z } from 'zod';
+/**
+ * A name + description + Zod-schema tool definition, in the shape the schema
+ * generator consumes. Both the agent registry's {@link
+ * ./agent-registry.js | AgentToolDescriptor} and the Pi streamFn's `PiZodTool`
+ * structurally satisfy this, so one generator serves both.
+ */
+export interface ZodSchemaTool {
+    /** Tool name as the provider / model will see it. */
+    readonly name: string;
+    /** Human-readable description for the model. */
+    readonly description: string;
+    /** Zod schema for the tool's input parameters. */
+    readonly parameters: z.ZodType;
+}
+/**
+ * Convert a Cleo Zod-schema tool into the OpenAI-format JSON-Schema
+ * {@link TransportTool}.
+ *
+ * The conversion is purely a function of its input (no I/O, no global state), so
+ * it is safe to call at any time, including during a lazy
+ * {@link ./agent-registry.js | AgentToolRegistry} discovery pass.
+ *
+ * @param tool - The Cleo Zod tool ({@link ZodSchemaTool}).
+ * @returns The transport-shaped JSON-Schema tool (OpenAI function format).
+ *
+ * @example
+ * ```ts
+ * const t = zodSchemaToOpenAITool({
+ *   name: 'read_file',
+ *   description: 'Read a file as text',
+ *   parameters: z.object({ path: z.string() }),
+ * });
+ * // t.inputSchema === { type: 'object', properties: { path: { type: 'string' } }, ... }
+ * ```
+ */
+export declare function zodSchemaToOpenAITool(tool: ZodSchemaTool): TransportTool;
+//# sourceMappingURL=schema-gen.d.ts.map

package/dist/tools/schema-gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-gen.d.ts","sourceRoot":"","sources":["../../src/tools/schema-gen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAUxE"}

package/dist/tools/schema-gen.js

@@ -0,0 +1,52 @@
+/**
+ * OpenAI-format tool-schema generation (T1739 · AC3 · epic T11456).
+ *
+ * The SINGLE generator that turns a Cleo Zod parameter schema into the
+ * OpenAI / JSON-Schema {@link TransportTool} shape the ModelRunner + transport
+ * wire layer (and the Pi adapter) consume. Both the agent-facing
+ * {@link ./agent-registry.js | AgentToolRegistry} (AC3) and the Pi streamFn
+ * bridge (`core/src/llm/pi/pi-stream-fn.ts`) call THIS function, so there is one
+ * conversion doctrine and no drift (DRY).
+ *
+ * Uses Zod v4's native `z.toJSONSchema` — NO `zod-to-json-schema` dependency and
+ * NO typebox value-import, so the cleo↔Pi tool surface carries zero typebox
+ * (Gate 10). The resulting `inputSchema` is a plain JSON-Schema object the
+ * transport passes through verbatim after any provider-specific adaptation.
+ *
+ * @task T1739
+ * @epic T11456
+ */
+import { z } from 'zod';
+/**
+ * Convert a Cleo Zod-schema tool into the OpenAI-format JSON-Schema
+ * {@link TransportTool}.
+ *
+ * The conversion is purely a function of its input (no I/O, no global state), so
+ * it is safe to call at any time, including during a lazy
+ * {@link ./agent-registry.js | AgentToolRegistry} discovery pass.
+ *
+ * @param tool - The Cleo Zod tool ({@link ZodSchemaTool}).
+ * @returns The transport-shaped JSON-Schema tool (OpenAI function format).
+ *
+ * @example
+ * ```ts
+ * const t = zodSchemaToOpenAITool({
+ *   name: 'read_file',
+ *   description: 'Read a file as text',
+ *   parameters: z.object({ path: z.string() }),
+ * });
+ * // t.inputSchema === { type: 'object', properties: { path: { type: 'string' } }, ... }
+ * ```
+ */
+export function zodSchemaToOpenAITool(tool) {
+    // Zod v4's native `z.toJSONSchema` renders a plain JSON-Schema object — NO
+    // `zod-to-json-schema` dep and NO typebox value-import at this boundary, so
+    // every tool surface (registry + Pi bridge) carries zero typebox (Gate 10).
+    const inputSchema = z.toJSONSchema(tool.parameters);
+    return {
+        name: tool.name,
+        description: tool.description,
+        inputSchema,
+    };
+}
+//# sourceMappingURL=schema-gen.js.map

package/dist/tools/schema-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-gen.js","sourceRoot":"","sources":["../../src/tools/schema-gen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAA4B,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/tools/shell.d.ts

@@ -30,6 +30,18 @@ export type ShellExecutor = (input: ExecuteShellInput) => Promise<ExecuteShellRe
  * stderr and resolving `{ stdout, stderr, code }`. A `timeoutMs` kills the
  * process (code resolves to `null` on signal/timeout). Never rejects on a
  * non-zero exit — the exit code is the result, not an error.
+ *
+ * ## Environment is SCRUBBED, never inherited (T11897 · security)
+ *
+ * The child runs under a MINIMAL, explicitly-constructed environment built by
+ * {@link scrubSubprocessEnv} — it does NOT inherit the parent `process.env`.
+ * This is load-bearing: the parent (the Cleo daemon) holds resolved provider
+ * credentials (`ANTHROPIC_API_KEY`, vault material, OAuth headers); blindly
+ * forwarding the full env into a child spawned on behalf of an in-process Pi
+ * loop would let a single `env`/`printenv` exfiltrate them, and would forward a
+ * Pi-poisoned `LD_PRELOAD`/`PATH`/`NODE_OPTIONS` into the loader. The
+ * caller-supplied `input.env` is merged on top but itself scrubbed (forbidden
+ * keys dropped, `PATH` pinned). Benign vars (locale/term/home) pass through.
  */
 export declare const defaultShellExecutor: ShellExecutor;
 /**

package/dist/tools/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACZ,MAAM,kCAAkC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAoB/B,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,iBAAiB,EACxB,QAAQ,GAAE,aAAoC,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CACpB,KAAK,EAAE,WAAW,EAClB,QAAQ,GAAE,aAAoC,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAK7B"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACZ,MAAM,kCAAkC,CAAC;AAG1C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEtF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAoB/B,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,iBAAiB,EACxB,QAAQ,GAAE,aAAoC,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CACpB,KAAK,EAAE,WAAW,EAClB,QAAQ,GAAE,aAAoC,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAK7B"}

package/dist/tools/shell.js

@@ -19,16 +19,29 @@
  * @saga T11387
  */
 import { spawn } from 'node:child_process';
+import { scrubSubprocessEnv } from './env-scrub.js';
 /**
  * Default executor: `spawn(command, args)` with no shell, capturing stdout +
  * stderr and resolving `{ stdout, stderr, code }`. A `timeoutMs` kills the
  * process (code resolves to `null` on signal/timeout). Never rejects on a
  * non-zero exit — the exit code is the result, not an error.
+ *
+ * ## Environment is SCRUBBED, never inherited (T11897 · security)
+ *
+ * The child runs under a MINIMAL, explicitly-constructed environment built by
+ * {@link scrubSubprocessEnv} — it does NOT inherit the parent `process.env`.
+ * This is load-bearing: the parent (the Cleo daemon) holds resolved provider
+ * credentials (`ANTHROPIC_API_KEY`, vault material, OAuth headers); blindly
+ * forwarding the full env into a child spawned on behalf of an in-process Pi
+ * loop would let a single `env`/`printenv` exfiltrate them, and would forward a
+ * Pi-poisoned `LD_PRELOAD`/`PATH`/`NODE_OPTIONS` into the loader. The
+ * caller-supplied `input.env` is merged on top but itself scrubbed (forbidden
+ * keys dropped, `PATH` pinned). Benign vars (locale/term/home) pass through.
  */
 export const defaultShellExecutor = (input) => new Promise((resolve, reject) => {
     const child = spawn(input.command, [...(input.args ?? [])], {
         cwd: input.cwd,
-        env: input.env ? { ...process.env, ...input.env } : process.env,
+        env: scrubSubprocessEnv({ extra: input.env }),
         timeout: input.timeoutMs,
         shell: false,
     });

package/dist/tools/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAc3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,CAAC,KAAK,EAAE,EAAE,CAC3D,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;QAC1D,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;QAC/D,OAAO,EAAE,KAAK,CAAC,SAAS;QACxB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;QACrC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;QACrC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAwB,EACxB,WAA0B,oBAAoB;IAE9C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,MAAM,CACpB,KAAkB,EAClB,WAA0B,oBAAoB;IAE9C,OAAO,YAAY,CACjB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAChF,QAAQ,CACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAM3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AASpD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,CAAC,KAAK,EAAE,EAAE,CAC3D,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;QAC1D,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,CAAC,SAAS;QACxB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;QACrC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;QACrC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAwB,EACxB,WAA0B,oBAAoB;IAE9C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,MAAM,CACpB,KAAkB,EAClB,WAA0B,oBAAoB;IAE9C,OAAO,YAAY,CACjB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAChF,QAAQ,CACT,CAAC;AACJ,CAAC"}