@galaxy-stack/ai-coder-core 0.3.1 → 0.3.3

package/CHANGELOG.d/2026-09-30-baseline-review-bo-qua-thay-doi-generated.md

@@ -0,0 +1,23 @@
+# 2026-09-30 — Baseline review chỉ tính file nguồn, không chết vì install/build chạy nền
+
+Vùng: host (workspace review)
+
+## Trước
+- `NodeWorkspaceReviewExecutor.create` so sánh `stateVersion` của hai lần capture, mà
+  `stateVersion` gộp **cả entry `derived`** (`node_modules`, `dist`, cache). Chỉ cần
+  `bun install` hoặc build đang chạy nền ghi vào các đường dẫn đó là baseline bị coi là
+  "đã đổi" ⇒ factory ném `Error` **ngoài mọi tool call** ⇒ cả run chết với
+  `Workspace changed while capturing review baseline. Retry when files are stable.`
+  Đo được: một run E2E 25 bước dừng ở bước 4 vì đúng lý do này.
+
+## Sau
+- Baseline dùng `durableBaselineFingerprint`: chỉ băm các entry `evidenceClass === "durable"`
+  (đúng tập mà review được phép báo cáo), nên thay đổi ở đường dẫn generated **không** còn
+  làm hỏng baseline.
+- Việc lấy baseline được **thử lại 3 lần** (chờ 250ms × lần) trước khi bỏ cuộc, và thông báo
+  lỗi nói rõ nguyên nhân (tiến trình nền còn ghi file nguồn) kèm fingerprint rút gọn để đối chiếu.
+
+## Test hồi quy
+- `test/workspace-generated-state.test.ts`: "a background write to a generated path does not
+  invalidate the review baseline" — một writer ghi liên tục vào `node_modules/pkg/index.js`
+  trong lúc `create` chạy.

package/CHANGELOG.d/2026-09-30-galaxy-credentials.md

@@ -0,0 +1,15 @@
+# 2026-09-30 — Tài liệu credential dùng chung cho mọi Galaxy host
+
+Vùng: adapters/node/config
+
+## Thêm
+- `galaxy-credentials`: một tài liệu YAML chỉ chủ sở hữu đọc được
+  (`~/.galaxy/credentials.yaml`, shape `version: 1`, `refs: <ref> -> <secret>`) để desktop app,
+  CLI, extension VS Code và web GUI cùng đọc/ghi một nguồn secret. Module sửa theo dòng thay vì
+  parse/ghi lại YAML để không phá comment/định dạng của writer khác.
+- Test `test/galaxy-credentials.test.ts`.
+
+## Vì sao cần phát hành
+- CLI 2.0.3 (đã lên npm) import `@galaxy-stack/ai-coder-core/adapters/node/config/galaxy-credentials`;
+  core 0.3.2 chưa có module này nên bản CLI đó crash lúc khởi động
+  (`ERR_MODULE_NOT_FOUND`). 0.3.3 đưa module vào bản phát hành, và CLI 2.0.4 pin core 0.3.3.

package/CHANGELOG.d/2026-09-30-shell-persistent-giong-dsh.md

@@ -0,0 +1,25 @@
+# 2026-09-30 — Shell persistent cho run_command, giống DeepSeek Harness
+
+Vùng: host (command port), runtime
+
+## Trước
+- Mỗi lệnh `run_command` spawn một tiến trình mới: `cd`/biến môi trường không giữ, tiến trình nền
+  (dev server, watcher) chết cùng lệnh, và không có gì dọn chúng khi bước kết thúc — đo được cảnh
+  `vite`/`bun run dev` còn sống sót qua nhiều run và tranh chấp với run sau.
+- Interface `CommandSessionPort` (start/read/write/interrupt/kill/list) đã có trong core nhưng
+  **chưa có implementation** nào ở host; tool `manage_session` chỉ chạy được với contract double.
+
+## Sau
+- Thêm `PersistentShell`: **một shell cho mỗi run**, đúng mô hình `@deepseek-ai/dsh-tool-bash-persistent`:
+  - lệnh chia sẻ `cwd`, biến đã `export`, và tiến trình nền; các lệnh **tuần tự hoá**;
+  - `timeoutMs` vẫn là **maximum**: xong sớm trả sớm; chạm trần thì **kill shell + trả partial**
+    và lần chạy sau bắt đầu shell mới (reset), đúng như harness;
+  - chỉ `cd` khi caller truyền `cwd` — không có `cwd` thì lệnh chạy ở nơi lệnh trước để lại;
+  - stdout/stderr **gộp một luồng** như tool bash của harness.
+- `NodeCommandPort` dùng shell này khi command containment không bắt buộc (macOS/best-effort),
+  và có `dispose()`; CLI gọi `dispose()` khi run kết thúc nên **mọi thứ bước đó khởi động đều bị dừng**.
+- Profile containment `required` giữ nguyên đường spawn một lần (không thể host shell dùng chung).
+
+## Test hồi quy
+- `test/persistent-shell.test.ts`: cwd/biến/tiến trình nền giữ qua các lệnh; lệnh chạm trần bị kill
+  và trả partial rồi shell được reset.

package/CHANGELOG.d/2026-09-30-timeout-do-agent-tu-quyet.md

@@ -0,0 +1,23 @@
+# 2026-09-30 — Agent tự quyết timeout của lệnh, host chỉ giữ backstop suy ra từ lựa chọn đó
+
+Vùng: tools (command.run, project.validate), runtime
+
+## Trước
+- Schema của `run_command`/`project.validate` khoá `timeoutMs` ở `maximum: 600000`, và runtime
+  bọc mỗi lần dispatch bằng một hạn mức **cứng** đúng 600000ms. Model xin 600000ms cho một lệnh
+  scaffolder chạy lâu hơn ⇒ hai hạn mức bằng nhau ⇒ host luôn thắng ⇒ bước chết với
+  `Tool run_command did not return within 600000ms` thay vì nhận kết quả timeout để xử lý tiếp.
+- Đo được: run E2E chết ở bước 1 vì đúng lý do này (`bunx orbit-cli new`).
+
+## Sau
+- **Agent tự quyết**: schema không còn `maximum`, mô tả nói rõ phải chọn theo lệnh (scaffolder,
+  typecheck + verify, test dài cần vài phút), mặc định 120000ms; executor truyền thẳng giá trị
+  model chọn, không kẹp.
+- **Host chỉ giữ backstop suy ra**: `dispatchGuardMs(requested) = requested + 60s` (mặc định
+  `120s + 60s`), nên timeout của chính tool luôn nổ trước và trả kết quả bình thường; hạn cứng
+  duy nhất còn lại là deadline của run (`--run-minutes`), và port lệnh vốn đã tự kẹp theo deadline.
+- Thêm `description` (tuỳ chọn) vào schema `run_command` để lệnh có mô tả ngắn hiện trong transcript.
+
+## Test hồi quy
+- `test/tool-timeouts.test.ts`: guard suy ra từ timeout agent chọn (600s → 660s, 900s → 960s), và
+  trường hợp không truyền timeout thì dùng mặc định + head-room.

package/CHANGELOG.d/2026-09-30-timeout-giong-dsh.md

@@ -0,0 +1,26 @@
+# 2026-09-30 — Timeout của run_command theo đúng cơ chế DeepSeek Harness
+
+Vùng: host (command port), tools
+
+## Bối cảnh
+Đọc `@deepseek-ai/dsh-tool-bash-persistent` và `@deepseek-ai/dsh-tool-call-timeout-policy`:
+- Tool `bash` có **một** tham số `command`; `timeoutMs` là **config của tool**, mặc định **300000ms (5 phút)**.
+- Khi chạm trần: **kill và reset shell**, trả về partial output kèm câu
+  *"Your command timed out after N seconds or experienced an OOM error. Below is partial output:"*
+  và marker `[Command timed out or OOM]`.
+- Policy của wrapper: *"A tool declares timeoutMs and promises to honor exec.signal; this wrapper
+  arms that deadline and maps its own expiry to TOOL_TIMEOUT **without racing or abandoning the tool
+  promise**"* — tức wrapper chỉ là backstop **cùng mốc**, không đua với tool.
+
+## Thay đổi
+- `DEFAULT_TIMEOUT_MS` của command port: **120000 → 300000**, khớp DSH.
+- Tóm tắt kết quả khi lệnh bị kill đổi thành đúng thông điệp DSH:
+  `Command timed out after <duration>s. Below is partial output:` (kèm stdout/stderr một phần,
+  `timedOut: true`), thay vì `Command timed_out with exit code -1.`.
+- Guard của runtime giữ nguyên nguyên tắc DSH đã đối chiếu: **suy ra từ timeout của chính tool**
+  (requested + 60s) nên tool luôn trả kết quả trước; hạn cứng duy nhất là deadline của run.
+
+## Ghi chú
+- Khác biệt còn lại so với DSH: DSH dùng **shell persistent** (một shell sống qua nhiều lệnh, có
+  session/queue theo agent); Galaxy hiện spawn tiến trình mới cho mỗi lệnh. Đây là hạng mục riêng,
+  cần thêm port + wiring + test nếu muốn parity đầy đủ.

package/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 Times are recorded in Asia/Ho_Chi_Minh (+07:00). Per-fix fragments are filed in
 [CHANGELOG.d](CHANGELOG.d/README.md) and compiled here at release time.
 
+## [0.3.2] - 2026-09-30 14:50 +0700
+
+### Changed
+
+- Baseline review chỉ tính file nguồn, không chết vì install/build chạy nền.
+- Shell persistent cho run_command, giống DeepSeek Harness.
+- Agent tự quyết timeout của lệnh, host chỉ giữ backstop suy ra từ lựa chọn đó.
+- Timeout của run_command theo đúng cơ chế DeepSeek Harness.
+
+## [0.3.3] - 2026-09-30 18:07 +0700
+
+### Changed
+
+- Baseline review chỉ tính file nguồn, không chết vì install/build chạy nền.
+- Tài liệu credential dùng chung cho mọi Galaxy host.
+- Shell persistent cho run_command, giống DeepSeek Harness.
+- Agent tự quyết timeout của lệnh, host chỉ giữ backstop suy ra từ lựa chọn đó.
+- Timeout của run_command theo đúng cơ chế DeepSeek Harness.
+
 ## [0.3.1] - 2026-09-29 05:25 +07:00
 
 ### Fixed

package/dist/adapters/node/config/galaxy-credentials.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Galaxy keeps every provider secret in one owner-only YAML document,
+ * `~/.galaxy/credentials.yaml`, written in the shape the DeepSeek Harness
+ * credential store reads (`version: 1`, `refs: <ref> -> <secret>`). Pointing DSH
+ * at this file is a one-row profile patch, so the desktop app, the CLI, the VS
+ * Code extension and the web GUI all read and write the same secrets.
+ *
+ * The editor works on lines instead of round-tripping YAML on purpose: the file
+ * is shared with another writer that preserves comments and formatting, and a
+ * full parse/render would silently reformat or drop entries this module does not
+ * own (including DSH's `records` block).
+ */
+/** File name inside the Galaxy home. */
+export declare const GALAXY_CREDENTIALS_FILENAME = "credentials.yaml";
+/** Document version this module writes; DSH refuses an unversioned document. */
+export declare const GALAXY_CREDENTIALS_VERSION = 1;
+/** Absent or unreadable documents read as empty rather than throwing. */
+export interface GalaxyCredentialsDocument {
+    readonly refs: Readonly<Record<string, string>>;
+    readonly version: number | undefined;
+}
+/** Absolute path of the shared credential document. */
+export declare function galaxyCredentialsPath(home?: string): string;
+/**
+ * Reference name for one provider id: `galaxy` → `GBH_GALAXY_API_KEY`,
+ * `my-gateway` → `GBH_MY_GATEWAY_API_KEY`. DSH resolves a route's `apiKeyEnv`
+ * against these names, so the mapping has to be derivable, never hand-kept.
+ */
+export declare function galaxyRefName(providerId: string): string;
+/** Quote a scalar the way the shared document expects, only when it must. */
+export declare function renderRefValue(value: string): string;
+/** Parse the document's refs and version. A flat pre-version file still reads. */
+export declare function parseGalaxyCredentials(text: string): GalaxyCredentialsDocument;
+/** Read the document; a missing file is an empty document, never an error. */
+export declare function readGalaxyCredentials(path?: string): GalaxyCredentialsDocument;
+/** One reference value, or undefined when it is absent or empty. */
+export declare function readGalaxyCredential(ref: string, path?: string): string | undefined;
+/** Owner-only mode and the refs present, for `config doctor`. */
+export interface GalaxyCredentialsHealth {
+    readonly exists: boolean;
+    readonly mode: string | undefined;
+    readonly ownerOnly: boolean;
+    readonly refs: readonly string[];
+    readonly version: number | undefined;
+}
+export declare function galaxyCredentialsHealth(path?: string): GalaxyCredentialsHealth;
+/**
+ * Insert, replace, or remove one reference while leaving every other byte of the
+ * document — comments, formatting, and DSH's own `records` block — untouched.
+ *
+ * @param ref - reference name to write.
+ * @param value - secret value; an empty string removes the reference.
+ * @param path - document path, defaulting to the shared Galaxy home.
+ */
+export declare function upsertGalaxyCredential(ref: string, value: string, path?: string): void;
+/** Write several references in one locked pass. */
+export declare function upsertGalaxyCredentials(entries: Readonly<Record<string, string>>, path?: string): void;
+//# sourceMappingURL=galaxy-credentials.d.ts.map

package/dist/adapters/node/config/galaxy-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"galaxy-credentials.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/config/galaxy-credentials.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;GAWG;AAEH,wCAAwC;AACxC,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAC9D,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGxD;AAaD,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAyBD,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,CAoB9E;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,MAAgC,GAAG,yBAAyB,CAMvG;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,MAAgC,GAAG,MAAM,GAAG,SAAS,CAG5G;AAED,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,MAAgC,GAAG,uBAAuB,CAcvG;AAsCD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAgC,GAAG,IAAI,CAgC/G;AAED,mDAAmD;AACnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,GAAE,MAAgC,GAAG,IAAI,CAE/H"}

package/dist/adapters/node/config/galaxy-credentials.js

@@ -0,0 +1,216 @@
+/**
+ * @author Bùi Trọng Hiếu
+ * @email kevinbui210191@gmail.com
+ * @create date 2026-09-29
+ * @desc The Galaxy credential document — one secrets file for every Galaxy host.
+ */
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+/**
+ * Galaxy keeps every provider secret in one owner-only YAML document,
+ * `~/.galaxy/credentials.yaml`, written in the shape the DeepSeek Harness
+ * credential store reads (`version: 1`, `refs: <ref> -> <secret>`). Pointing DSH
+ * at this file is a one-row profile patch, so the desktop app, the CLI, the VS
+ * Code extension and the web GUI all read and write the same secrets.
+ *
+ * The editor works on lines instead of round-tripping YAML on purpose: the file
+ * is shared with another writer that preserves comments and formatting, and a
+ * full parse/render would silently reformat or drop entries this module does not
+ * own (including DSH's `records` block).
+ */
+/** File name inside the Galaxy home. */
+export const GALAXY_CREDENTIALS_FILENAME = "credentials.yaml";
+/** Document version this module writes; DSH refuses an unversioned document. */
+export const GALAXY_CREDENTIALS_VERSION = 1;
+/** Absolute path of the shared credential document. */
+export function galaxyCredentialsPath(home = homedir()) {
+    return join(home, ".galaxy", GALAXY_CREDENTIALS_FILENAME);
+}
+/**
+ * Reference name for one provider id: `galaxy` → `GBH_GALAXY_API_KEY`,
+ * `my-gateway` → `GBH_MY_GATEWAY_API_KEY`. DSH resolves a route's `apiKeyEnv`
+ * against these names, so the mapping has to be derivable, never hand-kept.
+ */
+export function galaxyRefName(providerId) {
+    const normalized = providerId.trim().replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
+    return `GBH_${normalized.length === 0 ? "PROVIDER" : normalized}_API_KEY`;
+}
+function unquote(raw) {
+    const value = raw.trim();
+    if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
+        return value.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+    }
+    if (value.length >= 2 && value.startsWith("'") && value.endsWith("'"))
+        return value.slice(1, -1).replace(/''/g, "'");
+    /* A plain scalar ends at an inline comment. */
+    const comment = value.search(/\s#/);
+    return (comment === -1 ? value : value.slice(0, comment)).trim();
+}
+/** Quote a scalar the way the shared document expects, only when it must. */
+export function renderRefValue(value) {
+    return /^[A-Za-z0-9._@/+:-]+$/.test(value) ? value : `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/** Locate the top-level `refs:` block and the entries inside it. */
+function findRefsBlock(lines) {
+    for (let index = 0; index < lines.length; index += 1) {
+        if (!/^refs:\s*(#.*)?$/.test(lines[index] ?? ""))
+            continue;
+        const entries = [];
+        for (let scan = index + 1; scan < lines.length; scan += 1) {
+            const line = lines[scan] ?? "";
+            if (line.trim().length === 0 || line.trimStart().startsWith("#"))
+                continue;
+            const match = /^(\s+)([^\s#][^:]*):\s*(.*)$/.exec(line);
+            if (match === null)
+                break;
+            entries.push({ indent: match[1] ?? "  ", key: unquote(match[2] ?? ""), line: scan });
+        }
+        return { header: index, entries };
+    }
+    return undefined;
+}
+/** Parse the document's refs and version. A flat pre-version file still reads. */
+export function parseGalaxyCredentials(text) {
+    const lines = text.split(/\r?\n/);
+    const versionLine = lines.find(line => /^version:\s*\d+\s*$/.test(line));
+    const version = versionLine === undefined ? undefined : Number(versionLine.split(":")[1]?.trim());
+    const refs = {};
+    const block = findRefsBlock(lines);
+    if (block !== undefined) {
+        for (const entry of block.entries) {
+            const raw = lines[entry.line] ?? "";
+            refs[entry.key] = unquote(raw.slice(raw.indexOf(":") + 1));
+        }
+        return Object.freeze({ refs: Object.freeze(refs), version });
+    }
+    /* Pre-release flat layout: every top-level scalar is a reference. */
+    for (const line of lines) {
+        const match = /^([A-Za-z_][A-Za-z0-9_]*):\s*(\S.*)$/.exec(line);
+        if (match === null || match[1] === "version")
+            continue;
+        refs[match[1]] = unquote(match[2] ?? "");
+    }
+    return Object.freeze({ refs: Object.freeze(refs), version });
+}
+/** Read the document; a missing file is an empty document, never an error. */
+export function readGalaxyCredentials(path = galaxyCredentialsPath()) {
+    try {
+        return parseGalaxyCredentials(readFileSync(path, "utf8"));
+    }
+    catch {
+        return Object.freeze({ refs: Object.freeze({}), version: undefined });
+    }
+}
+/** One reference value, or undefined when it is absent or empty. */
+export function readGalaxyCredential(ref, path = galaxyCredentialsPath()) {
+    const value = readGalaxyCredentials(path).refs[ref];
+    return value !== undefined && value.length > 0 ? value : undefined;
+}
+export function galaxyCredentialsHealth(path = galaxyCredentialsPath()) {
+    try {
+        const info = statSync(path);
+        const document = readGalaxyCredentials(path);
+        return Object.freeze({
+            exists: true,
+            mode: (info.mode & 0o777).toString(8),
+            ownerOnly: (info.mode & 0o077) === 0,
+            refs: Object.freeze(Object.keys(document.refs).sort()),
+            version: document.version,
+        });
+    }
+    catch {
+        return Object.freeze({ exists: false, mode: undefined, ownerOnly: true, refs: Object.freeze([]), version: undefined });
+    }
+}
+function sleepSync(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+/** Cross-process writer lock beside the document, so two hosts never interleave. */
+function withLock(path, run) {
+    const lock = path + ".lock";
+    mkdirSync(dirname(path), { recursive: true });
+    for (let attempt = 0; attempt < 40; attempt += 1) {
+        try {
+            const handle = openSync(lock, "wx", 0o600);
+            closeSync(handle);
+            try {
+                return run();
+            }
+            finally {
+                try {
+                    unlinkSync(lock);
+                }
+                catch {
+                    /* a peer already released it */
+                }
+            }
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== "EEXIST")
+                throw error;
+            /* Break a stale lock left by a crashed writer. */
+            try {
+                if (Date.now() - statSync(lock).mtimeMs > 10_000)
+                    unlinkSync(lock);
+            }
+            catch {
+                /* the lock disappeared meanwhile */
+            }
+            sleepSync(50);
+        }
+    }
+    throw new Error(`credentials: could not acquire ${lock}`);
+}
+/**
+ * Insert, replace, or remove one reference while leaving every other byte of the
+ * document — comments, formatting, and DSH's own `records` block — untouched.
+ *
+ * @param ref - reference name to write.
+ * @param value - secret value; an empty string removes the reference.
+ * @param path - document path, defaulting to the shared Galaxy home.
+ */
+export function upsertGalaxyCredential(ref, value, path = galaxyCredentialsPath()) {
+    withLock(path, () => {
+        const exists = existsSync(path);
+        const text = exists ? readFileSync(path, "utf8") : "";
+        const trailingNewline = text.length === 0 || text.endsWith("\n");
+        const lines = text.replace(/\r\n/g, "\n").split("\n");
+        if (lines.length > 0 && lines[lines.length - 1] === "")
+            lines.pop();
+        const block = findRefsBlock(lines);
+        const encoded = value.length === 0 ? undefined : renderRefValue(value);
+        if (block === undefined) {
+            if (!lines.some(line => /^version:\s*\d+\s*$/.test(line)))
+                lines.unshift(`version: ${GALAXY_CREDENTIALS_VERSION}`);
+            lines.push("refs:");
+            if (encoded !== undefined)
+                lines.push(`  ${ref}: ${encoded}`);
+        }
+        else {
+            const existing = block.entries.find(entry => entry.key === ref);
+            if (existing !== undefined) {
+                if (encoded === undefined)
+                    lines.splice(existing.line, 1);
+                else
+                    lines[existing.line] = `${existing.indent}${ref}: ${encoded}`;
+            }
+            else if (encoded !== undefined) {
+                const indent = block.entries[0]?.indent ?? "  ";
+                const lastLine = block.entries.length === 0 ? block.header : block.entries[block.entries.length - 1].line;
+                lines.splice(lastLine + 1, 0, `${indent}${ref}: ${encoded}`);
+            }
+        }
+        const rendered = lines.join("\n") + (trailingNewline ? "\n" : "");
+        const temporary = `${path}.${process.pid.toString(36)}.tmp`;
+        writeFileSync(temporary, rendered, { encoding: "utf8", mode: 0o600 });
+        renameSync(temporary, path);
+    });
+}
+/** Write several references in one locked pass. */
+export function upsertGalaxyCredentials(entries, path = galaxyCredentialsPath()) {
+    for (const [ref, value] of Object.entries(entries))
+        upsertGalaxyCredential(ref, value, path);
+}
+//# sourceMappingURL=galaxy-credentials.js.map

package/dist/adapters/node/config/galaxy-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"galaxy-credentials.js","sourceRoot":"","sources":["../../../../src/adapters/node/config/galaxy-credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpI,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;;;GAWG;AAEH,wCAAwC;AACxC,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAC9D,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAQ5C,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,OAAe,OAAO,EAAE;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1G,OAAO,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrH,+CAA+C;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAChH,CAAC;AAQD,oEAAoE;AACpE,SAAS,aAAa,CAAC,KAAwB;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,SAAS;QAC3D,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC3E,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM;YAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,OAAe,qBAAqB,EAAE;IAC1E,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,OAAe,qBAAqB,EAAE;IACtF,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAWD,MAAM,UAAU,uBAAuB,CAAC,OAAe,qBAAqB,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YACpC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAI,IAAY,EAAE,GAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACnC,kDAAkD;YAClD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM;oBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YACD,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe,qBAAqB,EAAE;IACvG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;QAClB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAEpE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,YAAY,0BAA0B,EAAE,CAAC,CAAC;YACnH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,IAAI,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,OAAO,KAAK,SAAS;oBAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;;oBACrD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,KAAK,OAAO,EAAE,CAAC;YACrE,CAAC;iBAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;gBAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAc,CAAC,IAAI,CAAC;gBACxH,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,GAAG,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;QAC5D,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,uBAAuB,CAAC,OAAyC,EAAE,OAAe,qBAAqB,EAAE;IACvH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/F,CAAC"}

package/dist/adapters/node/host/node-command-port.d.ts

@@ -5,11 +5,27 @@ export declare class NodeCommandPort implements CommandRunnerPort {
     private readonly scope;
     readonly containmentStatus: CommandContainmentStatus;
     readonly hostEnvironment: ReturnType<typeof nodeCommandHostEnvironment>;
+    /**
+     * One shell per run, like @deepseek-ai/dsh-tool-bash-persistent: commands share cwd,
+     * exports and background jobs, calls are serialized, a command that hits its maximum is
+     * killed with its partial output returned, and disposing the port at the end of a run
+     * stops whatever the step left running. Used whenever command containment is not
+     * mandatory, because a contained one-shot spawn cannot host a shared shell.
+     */
+    private readonly shell;
     private constructor();
     static create(workspaceRoot: string, options?: Readonly<{
         containment?: CommandContainmentMode;
     }>): Promise<NodeCommandPort>;
     static probeContainment(): Promise<CommandContainmentProbeResult>;
+    /**
+     * Run through the shared shell: cwd, exports and background jobs persist between calls,
+     * calls are serialized, and the timeout is a maximum whose expiry kills the shell and
+     * returns the partial output (the harness behaves the same way).
+     */
+    private runInPersistentShell;
+    /** Stop the shared shell and anything it started; call this when a run ends. */
+    dispose(): Promise<void>;
     run(input: Readonly<{
         command: string;
         cwd?: string;

package/dist/adapters/node/host/node-command-port.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-command-port.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/host/node-command-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAGhB,UAAU,EACV,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAgHnE,qBAAa,eAAgB,YAAW,iBAAiB;IAErD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB;IACpD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC;IAHzE,OAAO;WAMM,MAAM,CACjB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAM,GAC/D,OAAO,CAAC,eAAe,CAAC;WAYd,gBAAgB,IAAI,OAAO,CAAC,6BAA6B,CAAC;IAIjE,GAAG,CACP,KAAK,EAAE,QAAQ,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,EACF,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;CA2IzC"}
+{"version":3,"file":"node-command-port.d.ts","sourceRoot":"","sources":["../../../../src/adapters/node/host/node-command-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAGhB,UAAU,EACV,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAoHnE,qBAAa,eAAgB,YAAW,iBAAiB;IAErD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB;IACpD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC;IACvE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,KAAK;IAXxB,OAAO;WAcM,MAAM,CACjB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,QAAQ,CAAC;QAAE,WAAW,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAM,GAC/D,OAAO,CAAC,eAAe,CAAC;WAiBd,gBAAgB,IAAI,OAAO,CAAC,6BAA6B,CAAC;IAIvE;;;;OAIG;YACW,oBAAoB;IAiDlC,gFAAgF;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,GAAG,CACP,KAAK,EAAE,QAAQ,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,EACF,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;CAgJzC"}

package/dist/adapters/node/host/node-command-port.js

@@ -2,8 +2,12 @@ import { spawn } from "node:child_process";
 import { lstat } from "node:fs/promises";
 import { assertWorkspaceHasNoHardLinks, buildBubblewrapArguments, containmentStatus, probeCommandContainment, } from "./command-containment.js";
 import { nodeCommandHostEnvironment } from "./host-environment.js";
+import { PersistentShell } from "./node-persistent-shell.js";
 import { WorkspaceScope } from "./path-scope.js";
-const DEFAULT_TIMEOUT_MS = 120_000;
+// Matches the harness default this project mirrors (@deepseek-ai/dsh-tool-bash-persistent
+// declares timeoutMs 300000): a command may run for five minutes unless the caller asks for
+// more or less, and the timeout is a maximum, not a wait.
+const DEFAULT_TIMEOUT_MS = 300_000;
 const DEFAULT_MAX_OUTPUT_BYTES = 256 * 1024;
 const MAX_OUTPUT_BYTES = 4 * 1024 * 1024;
 function failure(code, message, retryable = false) {
@@ -115,10 +119,20 @@ export class NodeCommandPort {
     scope;
     containmentStatus;
     hostEnvironment;
-    constructor(scope, containmentStatus, hostEnvironment) {
+    shell;
+    constructor(scope, containmentStatus, hostEnvironment, 
+    /**
+     * One shell per run, like @deepseek-ai/dsh-tool-bash-persistent: commands share cwd,
+     * exports and background jobs, calls are serialized, a command that hits its maximum is
+     * killed with its partial output returned, and disposing the port at the end of a run
+     * stops whatever the step left running. Used whenever command containment is not
+     * mandatory, because a contained one-shot spawn cannot host a shared shell.
+     */
+    shell) {
         this.scope = scope;
         this.containmentStatus = containmentStatus;
         this.hostEnvironment = hostEnvironment;
+        this.shell = shell;
     }
     static async create(workspaceRoot, options = {}) {
         const mode = options.containment ?? "best_effort";
@@ -129,11 +143,63 @@ export class NodeCommandPort {
             WorkspaceScope.create(workspaceRoot),
             probeCommandContainment(),
         ]);
-        return new NodeCommandPort(scope, containmentStatus(mode, probe), nodeCommandHostEnvironment());
+        return new NodeCommandPort(scope, containmentStatus(mode, probe), nodeCommandHostEnvironment(), new PersistentShell({ root: workspaceRoot }));
     }
     static async probeContainment() {
         return await probeCommandContainment();
     }
+    /**
+     * Run through the shared shell: cwd, exports and background jobs persist between calls,
+     * calls are serialized, and the timeout is a maximum whose expiry kills the shell and
+     * returns the partial output (the harness behaves the same way).
+     */
+    async runInPersistentShell(input, context) {
+        try {
+            const cwd = await this.scope.resolveExisting(input.cwd ?? ".");
+            if (!(await lstat(cwd)).isDirectory()) {
+                return failure("INVALID_INPUT", "Command cwd must be a workspace directory.");
+            }
+            const requestedTimeout = input.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+            if (!Number.isSafeInteger(requestedTimeout) || requestedTimeout < 1) {
+                return failure("INVALID_INPUT", "timeoutMs must be a positive integer.");
+            }
+            const remaining = context.deadline - Date.now();
+            if (remaining <= 0)
+                return failure("DEADLINE_EXCEEDED", "The run deadline elapsed.");
+            const result = await this.shell.run(input.command, {
+                // Only an explicit cwd moves the shell; without one the command runs where the
+                // previous command left the shell, which is what makes the session persistent.
+                ...(input.cwd === undefined ? {} : { cwd }),
+                ...(input.env === undefined ? {} : { env: input.env }),
+                ...(input.maxOutputBytes === undefined ? {} : { maxOutputBytes: input.maxOutputBytes }),
+                timeoutMs: Math.min(requestedTimeout, remaining),
+            }, context.signal);
+            if (result.status === "unavailable") {
+                return failure("UNAVAILABLE", "The persistent shell could not be started.");
+            }
+            return Object.freeze({
+                ok: true,
+                data: Object.freeze({
+                    command: input.command,
+                    durationMs: result.durationMs,
+                    exitCode: result.exitCode,
+                    // The shared shell merges both streams, like the harness tool does.
+                    stderr: "",
+                    stderrTruncated: false,
+                    stdout: result.output,
+                    stdoutTruncated: result.truncated,
+                    status: result.status,
+                }),
+            });
+        }
+        catch (error) {
+            return exceptionFailure(error);
+        }
+    }
+    /** Stop the shared shell and anything it started; call this when a run ends. */
+    async dispose() {
+        await this.shell.dispose();
+    }
     async run(input, context) {
         if (context.signal.aborted)
             return failure("CANCELED", "The run was canceled.");
@@ -142,6 +208,11 @@ export class NodeCommandPort {
         if (typeof input.command !== "string" || input.command.trim().length === 0 || input.command.length > 32_768) {
             return failure("INVALID_INPUT", "Command must contain between 1 and 32768 characters.");
         }
+        // A mandatory confinement wraps each spawn, so only the best-effort profile can host the
+        // shared shell the harness uses; everything else keeps the one-shot path below.
+        if (this.containmentStatus.mode !== "required") {
+            return await this.runInPersistentShell(input, context);
+        }
         try {
             const cwd = await this.scope.resolveExisting(input.cwd ?? ".");
             if (!(await lstat(cwd)).isDirectory()) {