@dexto/core 1.2.3 → 1.2.5

package/dist/plugins/manager.cjs

@@ -21,21 +21,23 @@ __export(manager_exports, {
   PluginManager: () => PluginManager
 });
 module.exports = __toCommonJS(manager_exports);
-var import_logger = require("../logger/index.js");
 var import_errors = require("../errors/index.js");
 var import_error_codes = require("./error-codes.js");
 var import_loader = require("./loader.js");
 var import_async_context = require("../utils/async-context.js");
+var import_types = require("../logger/v2/types.js");
 class PluginManager {
   plugins = /* @__PURE__ */ new Map();
   pluginsByExtensionPoint = /* @__PURE__ */ new Map();
   options;
   initialized = false;
+  logger;
   /** Default timeout for plugin execution (milliseconds) */
   static DEFAULT_TIMEOUT = 5e3;
-  constructor(options) {
+  constructor(options, logger) {
     this.options = options;
-    import_logger.logger.debug("PluginManager created");
+    this.logger = logger.createChild(import_types.DextoLogComponent.PLUGIN);
+    this.logger.debug("PluginManager created");
   }
   /**
    * Register a built-in plugin
@@ -67,7 +69,7 @@ class PluginManager {
       }
     };
     this.plugins.set(name, loadedPlugin);
-    import_logger.logger.debug(`Built-in plugin registered: ${name}`);
+    this.logger.debug(`Built-in plugin registered: ${name}`);
   }
   /**
    * Initialize all plugins from configuration
@@ -106,7 +108,7 @@ class PluginManager {
     }
     for (const pluginConfig of customPlugins) {
       if (!pluginConfig.enabled) {
-        import_logger.logger.debug(`Skipping disabled plugin: ${pluginConfig.name}`);
+        this.logger.debug(`Skipping disabled plugin: ${pluginConfig.name}`);
         continue;
       }
       try {
@@ -118,7 +120,7 @@ class PluginManager {
           config: pluginConfig
         };
         this.plugins.set(pluginConfig.name, loadedPlugin);
-        import_logger.logger.info(`Custom plugin loaded: ${pluginConfig.name}`);
+        this.logger.info(`Custom plugin loaded: ${pluginConfig.name}`);
       } catch (error) {
         throw new import_errors.DextoRuntimeError(
           import_error_codes.PluginErrorCode.PLUGIN_INITIALIZATION_FAILED,
@@ -133,7 +135,7 @@ class PluginManager {
       try {
         if (loadedPlugin.plugin.initialize) {
           await loadedPlugin.plugin.initialize(loadedPlugin.config.config || {});
-          import_logger.logger.debug(`Plugin initialized: ${name}`);
+          this.logger.debug(`Plugin initialized: ${name}`);
         }
       } catch (error) {
         throw new import_errors.DextoRuntimeError(
@@ -150,7 +152,7 @@ class PluginManager {
     }
     for (const [extensionPoint, plugins] of this.pluginsByExtensionPoint.entries()) {
       plugins.sort((a, b) => a.config.priority - b.config.priority);
-      import_logger.logger.debug(
+      this.logger.debug(
         `Extension point '${extensionPoint}': ${plugins.length} plugin(s) registered`,
         {
           plugins: plugins.map((p) => ({
@@ -161,7 +163,7 @@ class PluginManager {
       );
     }
     this.initialized = true;
-    import_logger.logger.info(`PluginManager initialized with ${this.plugins.size} plugin(s)`);
+    this.logger.info(`PluginManager initialized with ${this.plugins.size} plugin(s)`);
   }
   /**
    * Register a plugin to the extension points it implements
@@ -214,7 +216,7 @@ class PluginManager {
       userId: asyncCtx?.userId ?? void 0,
       tenantId: asyncCtx?.tenantId ?? void 0,
       llmConfig,
-      logger: import_logger.logger,
+      logger: this.logger,
       abortSignal: options.abortSignal ?? void 0,
       agent: {
         sessionManager: options.sessionManager,
@@ -236,7 +238,7 @@ class PluginManager {
           PluginManager.DEFAULT_TIMEOUT
         );
         const duration = Date.now() - startTime;
-        import_logger.logger.debug(`Plugin '${config.name}' executed at ${extensionPoint}`, {
+        this.logger.debug(`Plugin '${config.name}' executed at ${extensionPoint}`, {
           ok: result.ok,
           cancelled: result.cancel,
           duration,
@@ -245,7 +247,7 @@ class PluginManager {
         if (result.notices && result.notices.length > 0) {
           for (const notice of result.notices) {
             const level = notice.kind === "block" || notice.kind === "warn" ? "warn" : "info";
-            import_logger.logger[level](`Plugin notice (${notice.kind}): ${notice.message}`, {
+            this.logger[level](`Plugin notice (${notice.kind}): ${notice.message}`, {
               plugin: config.name,
               code: notice.code,
               details: notice.details
@@ -253,7 +255,7 @@ class PluginManager {
           }
         }
         if (!result.ok) {
-          import_logger.logger.warn(`Plugin '${config.name}' returned error`, {
+          this.logger.warn(`Plugin '${config.name}' returned error`, {
             message: result.message
           });
           if (config.blocking && result.cancel) {
@@ -273,7 +275,7 @@ class PluginManager {
         }
         if (result.modify) {
           currentPayload = { ...currentPayload, ...result.modify };
-          import_logger.logger.debug(`Plugin '${config.name}' modified payload`, {
+          this.logger.debug(`Plugin '${config.name}' modified payload`, {
             keys: Object.keys(result.modify)
           });
         }
@@ -295,7 +297,7 @@ class PluginManager {
         if (error instanceof import_errors.DextoRuntimeError) {
           throw error;
         }
-        import_logger.logger.error(`Plugin '${config.name}' threw error`, {
+        this.logger.error(`Plugin '${config.name}' threw error`, {
           error: error instanceof Error ? error.message : String(error),
           duration
         });
@@ -311,7 +313,7 @@ class PluginManager {
             }
           );
         }
-        import_logger.logger.debug(`Non-blocking plugin error, continuing execution`);
+        this.logger.debug(`Non-blocking plugin error, continuing execution`);
       }
     }
     return currentPayload;
@@ -354,15 +356,15 @@ class PluginManager {
       if (loadedPlugin.plugin.cleanup) {
         try {
           await loadedPlugin.plugin.cleanup();
-          import_logger.logger.debug(`Plugin cleaned up: ${name}`);
+          this.logger.debug(`Plugin cleaned up: ${name}`);
         } catch (error) {
-          import_logger.logger.error(`Plugin cleanup failed: ${name}`, {
+          this.logger.error(`Plugin cleanup failed: ${name}`, {
             error: error instanceof Error ? error.message : String(error)
           });
         }
       }
     }
-    import_logger.logger.info("PluginManager cleanup complete");
+    this.logger.info("PluginManager cleanup complete");
   }
   /**
    * Get plugin statistics

package/dist/plugins/manager.d.ts

@@ -5,6 +5,7 @@ import type { SessionManager } from '../session/index.js';
 import type { MCPManager } from '../mcp/manager.js';
 import type { ToolManager } from '../tools/tool-manager.js';
 import type { AgentStateManager } from '../agent/state-manager.js';
+import type { IDextoLogger } from '../logger/v2/types.js';
 /**
  * Options for PluginManager construction
  */
@@ -40,9 +41,10 @@ export declare class PluginManager {
     private pluginsByExtensionPoint;
     private options;
     private initialized;
+    private logger;
     /** Default timeout for plugin execution (milliseconds) */
     private static readonly DEFAULT_TIMEOUT;
-    constructor(options: PluginManagerOptions);
+    constructor(options: PluginManagerOptions, logger: IDextoLogger);
     /**
      * Register a built-in plugin
      * Called by the built-in plugin registry before initialize()

package/dist/plugins/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/plugins/manager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACR,cAAc,EAEd,YAAY,EAGf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACpC,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,iBAAiB,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,qBAAa,aAAa;IACtB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,uBAAuB,CAAkD;IACjF,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,WAAW,CAAkB;IAErC,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAQ;gBAEnC,OAAO,EAAE,oBAAoB;IAKzC;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,IAAI;IA8B3F;;;;;;OAMG;IACG,UAAU,CAAC,aAAa,GAAE,YAAY,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAqHnE;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAkBjC;;;;;;;;;OASG;IACG,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC9C,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,uBAAuB,GACjC,OAAO,CAAC,CAAC,CAAC;IAoKb;;;OAGG;YACW,kBAAkB;IA8BhC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B;;OAEG;IACH,QAAQ,IAAI;QACR,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;KACpD;CAcJ"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/plugins/manager.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACR,cAAc,EAEd,YAAY,EAGf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACpC,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,iBAAiB,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,qBAAa,aAAa;IACtB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,uBAAuB,CAAkD;IACjF,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,MAAM,CAAe;IAE7B,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAQ;gBAEnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY;IAM/D;;;;;;;OAOG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,IAAI;IA8B3F;;;;;;OAMG;IACG,UAAU,CAAC,aAAa,GAAE,YAAY,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAqHnE;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAkBjC;;;;;;;;;OASG;IACG,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC9C,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,uBAAuB,GACjC,OAAO,CAAC,CAAC,CAAC;IAoKb;;;OAGG;YACW,kBAAkB;IA8BhC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B;;OAEG;IACH,QAAQ,IAAI;QACR,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;KACpD;CAcJ"}

package/dist/plugins/manager.js

@@ -1,19 +1,21 @@
 import "../chunk-C6A6W6XS.js";
-import { logger } from "../logger/index.js";
 import { DextoRuntimeError, ErrorScope, ErrorType } from "../errors/index.js";
 import { PluginErrorCode } from "./error-codes.js";
 import { loadPluginModule, resolvePluginPath } from "./loader.js";
 import { getContext } from "../utils/async-context.js";
+import { DextoLogComponent } from "../logger/v2/types.js";
 class PluginManager {
   plugins = /* @__PURE__ */ new Map();
   pluginsByExtensionPoint = /* @__PURE__ */ new Map();
   options;
   initialized = false;
+  logger;
   /** Default timeout for plugin execution (milliseconds) */
   static DEFAULT_TIMEOUT = 5e3;
-  constructor(options) {
+  constructor(options, logger) {
     this.options = options;
-    logger.debug("PluginManager created");
+    this.logger = logger.createChild(DextoLogComponent.PLUGIN);
+    this.logger.debug("PluginManager created");
   }
   /**
    * Register a built-in plugin
@@ -45,7 +47,7 @@ class PluginManager {
       }
     };
     this.plugins.set(name, loadedPlugin);
-    logger.debug(`Built-in plugin registered: ${name}`);
+    this.logger.debug(`Built-in plugin registered: ${name}`);
   }
   /**
    * Initialize all plugins from configuration
@@ -84,7 +86,7 @@ class PluginManager {
     }
     for (const pluginConfig of customPlugins) {
       if (!pluginConfig.enabled) {
-        logger.debug(`Skipping disabled plugin: ${pluginConfig.name}`);
+        this.logger.debug(`Skipping disabled plugin: ${pluginConfig.name}`);
         continue;
       }
       try {
@@ -96,7 +98,7 @@ class PluginManager {
           config: pluginConfig
         };
         this.plugins.set(pluginConfig.name, loadedPlugin);
-        logger.info(`Custom plugin loaded: ${pluginConfig.name}`);
+        this.logger.info(`Custom plugin loaded: ${pluginConfig.name}`);
       } catch (error) {
         throw new DextoRuntimeError(
           PluginErrorCode.PLUGIN_INITIALIZATION_FAILED,
@@ -111,7 +113,7 @@ class PluginManager {
       try {
         if (loadedPlugin.plugin.initialize) {
           await loadedPlugin.plugin.initialize(loadedPlugin.config.config || {});
-          logger.debug(`Plugin initialized: ${name}`);
+          this.logger.debug(`Plugin initialized: ${name}`);
         }
       } catch (error) {
         throw new DextoRuntimeError(
@@ -128,7 +130,7 @@ class PluginManager {
     }
     for (const [extensionPoint, plugins] of this.pluginsByExtensionPoint.entries()) {
       plugins.sort((a, b) => a.config.priority - b.config.priority);
-      logger.debug(
+      this.logger.debug(
         `Extension point '${extensionPoint}': ${plugins.length} plugin(s) registered`,
         {
           plugins: plugins.map((p) => ({
@@ -139,7 +141,7 @@ class PluginManager {
       );
     }
     this.initialized = true;
-    logger.info(`PluginManager initialized with ${this.plugins.size} plugin(s)`);
+    this.logger.info(`PluginManager initialized with ${this.plugins.size} plugin(s)`);
   }
   /**
    * Register a plugin to the extension points it implements
@@ -192,7 +194,7 @@ class PluginManager {
       userId: asyncCtx?.userId ?? void 0,
       tenantId: asyncCtx?.tenantId ?? void 0,
       llmConfig,
-      logger,
+      logger: this.logger,
       abortSignal: options.abortSignal ?? void 0,
       agent: {
         sessionManager: options.sessionManager,
@@ -214,7 +216,7 @@ class PluginManager {
           PluginManager.DEFAULT_TIMEOUT
         );
         const duration = Date.now() - startTime;
-        logger.debug(`Plugin '${config.name}' executed at ${extensionPoint}`, {
+        this.logger.debug(`Plugin '${config.name}' executed at ${extensionPoint}`, {
           ok: result.ok,
           cancelled: result.cancel,
           duration,
@@ -223,7 +225,7 @@ class PluginManager {
         if (result.notices && result.notices.length > 0) {
           for (const notice of result.notices) {
             const level = notice.kind === "block" || notice.kind === "warn" ? "warn" : "info";
-            logger[level](`Plugin notice (${notice.kind}): ${notice.message}`, {
+            this.logger[level](`Plugin notice (${notice.kind}): ${notice.message}`, {
               plugin: config.name,
               code: notice.code,
               details: notice.details
@@ -231,7 +233,7 @@ class PluginManager {
           }
         }
         if (!result.ok) {
-          logger.warn(`Plugin '${config.name}' returned error`, {
+          this.logger.warn(`Plugin '${config.name}' returned error`, {
             message: result.message
           });
           if (config.blocking && result.cancel) {
@@ -251,7 +253,7 @@ class PluginManager {
         }
         if (result.modify) {
           currentPayload = { ...currentPayload, ...result.modify };
-          logger.debug(`Plugin '${config.name}' modified payload`, {
+          this.logger.debug(`Plugin '${config.name}' modified payload`, {
             keys: Object.keys(result.modify)
           });
         }
@@ -273,7 +275,7 @@ class PluginManager {
         if (error instanceof DextoRuntimeError) {
           throw error;
         }
-        logger.error(`Plugin '${config.name}' threw error`, {
+        this.logger.error(`Plugin '${config.name}' threw error`, {
           error: error instanceof Error ? error.message : String(error),
           duration
         });
@@ -289,7 +291,7 @@ class PluginManager {
             }
           );
         }
-        logger.debug(`Non-blocking plugin error, continuing execution`);
+        this.logger.debug(`Non-blocking plugin error, continuing execution`);
       }
     }
     return currentPayload;
@@ -332,15 +334,15 @@ class PluginManager {
       if (loadedPlugin.plugin.cleanup) {
         try {
           await loadedPlugin.plugin.cleanup();
-          logger.debug(`Plugin cleaned up: ${name}`);
+          this.logger.debug(`Plugin cleaned up: ${name}`);
         } catch (error) {
-          logger.error(`Plugin cleanup failed: ${name}`, {
+          this.logger.error(`Plugin cleanup failed: ${name}`, {
             error: error instanceof Error ? error.message : String(error)
           });
         }
       }
     }
-    logger.info("PluginManager cleanup complete");
+    this.logger.info("PluginManager cleanup complete");
   }
   /**
    * Get plugin statistics

package/dist/plugins/schemas.d.ts

@@ -10,17 +10,17 @@ export declare const CustomPluginConfigSchema: z.ZodObject<{
     priority: z.ZodNumber;
     config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strict", z.ZodTypeAny, {
+    enabled: boolean;
     name: string;
     priority: number;
-    enabled: boolean;
-    blocking: boolean;
     module: string;
+    blocking: boolean;
     config?: Record<string, any> | undefined;
 }, {
     name: string;
     priority: number;
-    blocking: boolean;
     module: string;
+    blocking: boolean;
     config?: Record<string, any> | undefined;
     enabled?: boolean | undefined;
 }>;
@@ -80,27 +80,27 @@ export declare const PluginsConfigSchema: z.ZodDefault<z.ZodObject<{
         priority: z.ZodNumber;
         config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
         name: string;
         priority: number;
-        enabled: boolean;
-        blocking: boolean;
         module: string;
+        blocking: boolean;
         config?: Record<string, any> | undefined;
     }, {
         name: string;
         priority: number;
-        blocking: boolean;
         module: string;
+        blocking: boolean;
         config?: Record<string, any> | undefined;
         enabled?: boolean | undefined;
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
     custom: {
+        enabled: boolean;
         name: string;
         priority: number;
-        enabled: boolean;
-        blocking: boolean;
         module: string;
+        blocking: boolean;
         config?: Record<string, any> | undefined;
     }[];
     contentPolicy?: z.objectOutputType<{
@@ -117,8 +117,8 @@ export declare const PluginsConfigSchema: z.ZodDefault<z.ZodObject<{
     custom?: {
         name: string;
         priority: number;
-        blocking: boolean;
         module: string;
+        blocking: boolean;
         config?: Record<string, any> | undefined;
         enabled?: boolean | undefined;
     }[] | undefined;

package/dist/plugins/types.d.ts

@@ -1,5 +1,5 @@
 import type { ValidatedLLMConfig } from '../llm/schemas.js';
-import type { Logger } from '../logger/index.js';
+import type { IDextoLogger } from '../logger/v2/types.js';
 import type { SessionManager } from '../session/index.js';
 import type { MCPManager } from '../mcp/manager.js';
 import type { ToolManager } from '../tools/tool-manager.js';
@@ -49,7 +49,7 @@ export interface PluginExecutionContext {
     /** Current LLM configuration */
     llmConfig: ValidatedLLMConfig;
     /** Logger scoped to this plugin execution */
-    logger: Logger;
+    logger: IDextoLogger;
     /** Abort signal for cancellation */
     abortSignal?: AbortSignal | undefined;
     /** Reference to agent services (read-only access) */

package/dist/plugins/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,cAAc,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,CAAC;AAEvB;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,uCAAuC;IACvC,EAAE,EAAE,OAAO,CAAC;IAEZ,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7B,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACnC,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,gCAAgC;IAChC,SAAS,EAAE,kBAAkB,CAAC;IAE9B,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IAEf,oCAAoC;IACpC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAEtC,qDAAqD;IACrD,KAAK,EAAE;QACH,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;QACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;QAClC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;KAC3C,CAAC;CACL;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,iEAAiE;IACjE,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,0CAA0C;IAC1C,gBAAgB,CAAC,CACb,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,wCAAwC;IACxC,cAAc,CAAC,CACX,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,yCAAyC;IACzC,eAAe,CAAC,CACZ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,uCAAuC;IACvC,cAAc,CAAC,CACX,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,6CAA6C;IAC7C,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,cAAc,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,CAAC;AAEvB;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,uCAAuC;IACvC,EAAE,EAAE,OAAO,CAAC;IAEZ,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7B,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACnC,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,gCAAgC;IAChC,SAAS,EAAE,kBAAkB,CAAC;IAE9B,6CAA6C;IAC7C,MAAM,EAAE,YAAY,CAAC;IAErB,oCAAoC;IACpC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAEtC,qDAAqD;IACrD,KAAK,EAAE;QACH,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;QACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;QAClC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;KAC3C,CAAC;CACL;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,iEAAiE;IACjE,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,0CAA0C;IAC1C,gBAAgB,CAAC,CACb,OAAO,EAAE,uBAAuB,EAChC,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,wCAAwC;IACxC,cAAc,CAAC,CACX,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,yCAAyC;IACzC,eAAe,CAAC,CACZ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,uCAAuC;IACvC,cAAc,CAAC,CACX,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,sBAAsB,GAChC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,6CAA6C;IAC7C,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;CACxB"}

package/dist/process/command-validator.cjs

@@ -21,7 +21,6 @@ __export(command_validator_exports, {
   CommandValidator: () => CommandValidator
 });
 module.exports = __toCommonJS(command_validator_exports);
-var import_logger = require("../logger/index.js");
 const MAX_COMMAND_LENGTH = 1e4;
 const DANGEROUS_PATTERNS = [
   // File system destruction
@@ -142,21 +141,13 @@ const DANGEROUS_PATTERNS = [
   // Remove packages
 ];
 const INJECTION_PATTERNS = [
-  // Command chaining with dangerous commands
+  // Command chaining with dangerous commands using semicolon (more suspicious)
   /;\s*rm\s+-rf/,
   // ; rm -rf
-  /&&\s*rm\s+-rf/,
-  // && rm -rf
-  /\|\s*rm\s+-rf/,
-  // | rm -rf
   /;\s*chmod\s+777/,
   // ; chmod 777
-  /&&\s*chmod\s+777/,
-  // && chmod 777
   /;\s*chown\s+root/,
   // ; chown root
-  /&&\s*chown\s+root/,
-  // && chown root
   // Command substitution with dangerous commands
   /`.*rm.*`/,
   // backticks with rm
@@ -413,9 +404,13 @@ const WRITE_PATTERNS = [
 ];
 class CommandValidator {
   config;
-  constructor(config) {
+  logger;
+  constructor(config, logger) {
     this.config = config;
-    import_logger.logger.debug(`CommandValidator initialized with security level: ${config.securityLevel}`);
+    this.logger = logger;
+    this.logger.debug(
+      `CommandValidator initialized with security level: ${config.securityLevel}`
+    );
   }
   /**
    * Validate a command for security and policy compliance
@@ -428,6 +423,12 @@ class CommandValidator {
       };
     }
     const trimmedCommand = command.trim();
+    if (/&\s*$/.test(trimmedCommand)) {
+      return {
+        isValid: false,
+        error: "Commands ending with & (shell backgrounding) are not allowed. Use run_in_background parameter instead for proper process management."
+      };
+    }
     if (trimmedCommand.length > MAX_COMMAND_LENGTH) {
       return {
         isValid: false,
@@ -504,18 +505,27 @@ class CommandValidator {
   }
   /**
    * Determine if a command requires approval
+   * Handles compound commands (with &&, ||, ;) by checking each sub-command
    */
   determineApprovalRequirement(command) {
-    for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
-      if (pattern.test(command)) {
+    const subCommands = command.split(/\s*(?:&&|\|\||;)\s*/).map((cmd) => cmd.trim());
+    for (const subCmd of subCommands) {
+      if (!subCmd) continue;
+      const normalizedSubCmd = subCmd.replace(/^(?:then|do|else)\b\s*/, "").replace(/^\{\s*/, "").trim();
+      if (!normalizedSubCmd) continue;
+      for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
+        if (pattern.test(normalizedSubCmd)) {
+          return true;
+        }
+      }
+      if (this.config.securityLevel === "strict") {
         return true;
       }
-    }
-    if (this.config.securityLevel === "strict") {
-      return true;
-    }
-    if (this.config.securityLevel === "moderate") {
-      return WRITE_PATTERNS.some((pattern) => pattern.test(command));
+      if (this.config.securityLevel === "moderate") {
+        if (WRITE_PATTERNS.some((pattern) => pattern.test(normalizedSubCmd))) {
+          return true;
+        }
+      }
     }
     return false;
   }

package/dist/process/command-validator.d.ts

@@ -4,6 +4,7 @@
  * Security-focused command validation for process execution
  */
 import { ProcessConfig, CommandValidation } from './types.js';
+import type { IDextoLogger } from '../logger/v2/types.js';
 /**
  * CommandValidator - Validates commands for security and policy compliance
  *
@@ -17,7 +18,8 @@ import { ProcessConfig, CommandValidation } from './types.js';
  */
 export declare class CommandValidator {
     private config;
-    constructor(config: ProcessConfig);
+    private logger;
+    constructor(config: ProcessConfig, logger: IDextoLogger);
     /**
      * Validate a command for security and policy compliance
      */
@@ -28,6 +30,7 @@ export declare class CommandValidator {
     private detectInjection;
     /**
      * Determine if a command requires approval
+     * Handles compound commands (with &&, ||, ;) by checking each sub-command
      */
     private determineApprovalRequirement;
     /**

package/dist/process/command-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-validator.d.ts","sourceRoot":"","sources":["../../src/process/command-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAqQ9D;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,aAAa;IAKjC;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB;IAuEnD;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAsBpC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG7B"}
+{"version":3,"file":"command-validator.d.ts","sourceRoot":"","sources":["../../src/process/command-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAkQ1D;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY;IAQvD;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB;IAgFnD;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAyCpC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG7B"}

package/dist/process/command-validator.js

@@ -1,5 +1,4 @@
 import "../chunk-C6A6W6XS.js";
-import { logger } from "../logger/index.js";
 const MAX_COMMAND_LENGTH = 1e4;
 const DANGEROUS_PATTERNS = [
   // File system destruction
@@ -120,21 +119,13 @@ const DANGEROUS_PATTERNS = [
   // Remove packages
 ];
 const INJECTION_PATTERNS = [
-  // Command chaining with dangerous commands
+  // Command chaining with dangerous commands using semicolon (more suspicious)
   /;\s*rm\s+-rf/,
   // ; rm -rf
-  /&&\s*rm\s+-rf/,
-  // && rm -rf
-  /\|\s*rm\s+-rf/,
-  // | rm -rf
   /;\s*chmod\s+777/,
   // ; chmod 777
-  /&&\s*chmod\s+777/,
-  // && chmod 777
   /;\s*chown\s+root/,
   // ; chown root
-  /&&\s*chown\s+root/,
-  // && chown root
   // Command substitution with dangerous commands
   /`.*rm.*`/,
   // backticks with rm
@@ -391,9 +382,13 @@ const WRITE_PATTERNS = [
 ];
 class CommandValidator {
   config;
-  constructor(config) {
+  logger;
+  constructor(config, logger) {
     this.config = config;
-    logger.debug(`CommandValidator initialized with security level: ${config.securityLevel}`);
+    this.logger = logger;
+    this.logger.debug(
+      `CommandValidator initialized with security level: ${config.securityLevel}`
+    );
   }
   /**
    * Validate a command for security and policy compliance
@@ -406,6 +401,12 @@ class CommandValidator {
       };
     }
     const trimmedCommand = command.trim();
+    if (/&\s*$/.test(trimmedCommand)) {
+      return {
+        isValid: false,
+        error: "Commands ending with & (shell backgrounding) are not allowed. Use run_in_background parameter instead for proper process management."
+      };
+    }
     if (trimmedCommand.length > MAX_COMMAND_LENGTH) {
       return {
         isValid: false,
@@ -482,18 +483,27 @@ class CommandValidator {
   }
   /**
    * Determine if a command requires approval
+   * Handles compound commands (with &&, ||, ;) by checking each sub-command
    */
   determineApprovalRequirement(command) {
-    for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
-      if (pattern.test(command)) {
+    const subCommands = command.split(/\s*(?:&&|\|\||;)\s*/).map((cmd) => cmd.trim());
+    for (const subCmd of subCommands) {
+      if (!subCmd) continue;
+      const normalizedSubCmd = subCmd.replace(/^(?:then|do|else)\b\s*/, "").replace(/^\{\s*/, "").trim();
+      if (!normalizedSubCmd) continue;
+      for (const pattern of REQUIRES_APPROVAL_PATTERNS) {
+        if (pattern.test(normalizedSubCmd)) {
+          return true;
+        }
+      }
+      if (this.config.securityLevel === "strict") {
         return true;
       }
-    }
-    if (this.config.securityLevel === "strict") {
-      return true;
-    }
-    if (this.config.securityLevel === "moderate") {
-      return WRITE_PATTERNS.some((pattern) => pattern.test(command));
+      if (this.config.securityLevel === "moderate") {
+        if (WRITE_PATTERNS.some((pattern) => pattern.test(normalizedSubCmd))) {
+          return true;
+        }
+      }
     }
     return false;
   }