@gaunt-sloth/agent 2.0.0-alpha.2 → 2.0.0-alpha.4

package/dist/tools/GthDevToolkit.js

@@ -3,10 +3,109 @@
  */
 import { BaseToolkit, tool } from '@langchain/core/tools';
 import { z } from 'zod';
-import { spawn } from 'child_process';
+import { spawn, spawnSync } from 'child_process';
 import path from 'node:path';
-import { displayInfo, displayError } from '@gaunt-sloth/core/utils/consoleUtils.js';
-import { stdout } from '@gaunt-sloth/core/utils/systemUtils.js';
+import { displayInfo, displayError, displayWarning } from '@gaunt-sloth/core/utils/consoleUtils.js';
+import { getShellMaxOutputBytes, getShellTimeoutMs, isShellToolEnabled, } from '@gaunt-sloth/core/config.js';
+import { stdout, getCurrentWorkDir } from '@gaunt-sloth/core/utils/systemUtils.js';
+import { checkHardline } from '#src/tools/shell/hardline.js';
+import { buildScrubbedEnv } from '#src/tools/shell/env.js';
+import { OutputBuffer } from '#src/tools/shell/outputBuffer.js';
+// Grace period (ms) between SIGTERM and the escalation to SIGKILL when a command
+// exceeds its timeout. Mirrors opencode's `forceKillAfter` (3s).
+const KILL_GRACE_MS = 3_000;
+/**
+ * EXT-20: a run_* command that did NOT exit cleanly (non-zero exit code, or was killed for
+ * exceeding the timeout). Carries the FULL model-facing body text ({@link output}) so the
+ * softening middleware ({@link GthDeepShellExitSoftening}) can hand the model the exact same
+ * observation it saw before — the only change is the tool result's status flips to `'error'`,
+ * which drives the ✗ (`isError`) glyph.
+ *
+ * `executeCommand` previously `resolve()`d on a non-zero exit, so the LangChain `ToolMessage`
+ * stayed `status: 'success'` and every failure rendered a ✓. Throwing this typed error instead
+ * lets the deep-agent middleware convert it into an error `ToolMessage`. A clean exit (`code === 0`)
+ * still `resolve()`s; a spawn-level `child.on('error')` still rejects with a plain `Error`.
+ */
+export class ShellCommandFailedError extends Error {
+    /** The full model-facing body (command echo + `<COMMAND_OUTPUT>` + the failure/timeout tail). */
+    output;
+    /** The process exit code; `null` when the command was killed (timeout) and never exited cleanly. */
+    exitCode;
+    /** The exact command string that was executed. */
+    command;
+    /** The run_* tool name that invoked the command (e.g. `run_tests`, `run_shell_command`). */
+    toolName;
+    constructor(params) {
+        // Use the full body as the Error message so any generic logger/handler still surfaces the
+        // real command output rather than an opaque wrapper string.
+        super(params.output);
+        this.name = 'ShellCommandFailedError';
+        this.output = params.output;
+        this.exitCode = params.exitCode;
+        this.command = params.command;
+        this.toolName = params.toolName;
+    }
+}
+/**
+ * Kill the child AND its descendants on timeout.
+ *
+ * POSIX: the child is spawned `detached`, so it leads its own process group;
+ * signalling the NEGATIVE pid (`-pid`) delivers to the whole group — otherwise a
+ * shell's children (e.g. a spawned server) would be orphaned and keep running.
+ *
+ * Windows (EXT-15): there are no POSIX process groups — `process.kill(-pid)`
+ * throws `EINVAL`, and `child.kill()` only terminates the `cmd.exe` wrapper while
+ * grandchildren keep the piped stdio handles open, so `'close'` never fires and
+ * the tool Promise hangs forever (silently cancelling Windows CI). Use `taskkill
+ * /T` to kill the whole tree by pid; `/F` (force) mirrors POSIX SIGKILL, while a
+ * graceful taskkill mirrors SIGTERM. Swallows the races where it has already exited.
+ *
+ * Exported for unit testing the platform branch without a Windows host.
+ */
+export function killProcessGroup(child, signal) {
+    if (typeof child.pid !== 'number')
+        return;
+    if (process.platform === 'win32') {
+        // No process groups on Windows; taskkill /T walks the whole tree by pid.
+        const args = ['/PID', String(child.pid), '/T'];
+        if (signal === 'SIGKILL')
+            args.push('/F');
+        // IMPORTANT: spawnSync does NOT throw when it fails to spawn (e.g. ENOENT if taskkill is
+        // missing from PATH) — unlike execSync, it returns an object with an `error` property. So a
+        // try/catch would never reach the fallback. Inspect `res.error` explicitly and fall back to
+        // the direct child kill (best effort). A non-zero exit (process already gone) is NOT a spawn
+        // failure, so it correctly does not trigger the fallback. (`res?.` tolerates test mocks.)
+        const res = spawnSync('taskkill', args, { stdio: 'ignore', windowsHide: true });
+        if (res?.error) {
+            try {
+                child.kill(signal);
+            }
+            catch {
+                // Already exited — nothing to do.
+            }
+        }
+        return;
+    }
+    try {
+        // Negative pid → signal the entire process group.
+        process.kill(-child.pid, signal);
+        return;
+    }
+    catch (e) {
+        const code = e?.code;
+        // ESRCH: already gone. EPERM: group-kill not permitted — fall through to the
+        // direct child kill below. Anything else: also fall back rather than throw.
+        if (code === 'ESRCH')
+            return;
+    }
+    // Fallback: kill just the child (best effort).
+    try {
+        child.kill(signal);
+    }
+    catch {
+        // Already exited — nothing to do.
+    }
+}
 // Helper function to create a tool with dev type
 function createGthTool(fn, config, gthDevType) {
     const toolInstance = tool(fn, config);
@@ -21,13 +120,23 @@ const RunBuildArgsSchema = z.object({});
 const RunSingleTestArgsSchema = z.object({
     testPath: z.string().describe('Relative path to the test file to run'),
 });
+const RunShellCommandArgsSchema = z.object({
+    command: z.string().describe('The shell command to run'),
+});
 const TEST_PATH_PLACEHOLDER = '${testPath}';
 export default class GthDevToolkit extends BaseToolkit {
     tools;
     commands;
-    constructor(commands = {}) {
+    /**
+     * The active command, threaded through so the EXT-12 absent-config default for the shell
+     * tool (ON in `code`, OFF elsewhere) is resolved consistently with the deep agent's
+     * interrupt wiring. Omitted → historical OFF-by-default behaviour.
+     */
+    command;
+    constructor(commands = {}, command) {
         super();
         this.commands = commands;
+        this.command = command;
         this.tools = this.createTools();
     }
     /**
@@ -93,45 +202,132 @@ export default class GthDevToolkit extends BaseToolkit {
             throw new Error('No test command configured');
         }
     }
+    /**
+     * Execute a shell command with the EXT-9 Tier-1 hardening applied:
+     *  1. stdin closed + timeout + process-group kill (no hang on interactive
+     *     commands; runaway commands are killed group-wide on timeout),
+     *  2. output capped with a head/tail window + temp-file spillover,
+     *  3. provider/LLM credentials scrubbed from the child env,
+     *  4. an unbypassable hardline blocklist (refuses catastrophic commands BEFORE
+     *     spawn — fires even when confirmation is bypassed by yolo).
+     *
+     * Resolves with a model-facing string on a CLEAN exit (`code === 0`). EXT-20: a non-zero exit
+     * and a timeout-kill instead REJECT with a {@link ShellCommandFailedError} that carries the FULL
+     * model-facing body — the deep-agent {@link GthDeepShellExitSoftening} middleware converts that
+     * throw into an error `ToolMessage` (status:'error' → ✗) while preserving the output, so the
+     * model still sees the killed-after-N / exit-code message and can continue. Spawn-level failures
+     * (`child.on('error')`) still reject with a plain `Error`.
+     */
     async executeCommand(command, toolName) {
         displayInfo(`\n🔧 Executing ${toolName}: ${command}`);
+        // (4) Hardline blocklist — checked here so it fires regardless of yolo,
+        // allow-lists, or any confirmation path. Refuse WITHOUT executing.
+        const hardline = checkHardline(command);
+        if (hardline) {
+            const refusal = `Refusing to execute '${command}': blocked by hardline safety policy ` +
+                `(${hardline.description}). This is a catastrophic, non-recoverable command ` +
+                `and is blocked even when command confirmation is disabled.`;
+            displayWarning(`\n⛔ ${refusal}`);
+            return refusal;
+        }
+        const timeoutMs = getShellTimeoutMs(this.commands);
+        const maxOutputBytes = getShellMaxOutputBytes(this.commands);
         return new Promise((resolve, reject) => {
             const child = spawn(command, {
                 shell: true,
+                // EXT-22 (S4): spawn in the SAME directory the deepagents FilesystemBackend is rooted at,
+                // so the shell tool and the fs tools (ls/read_file/write_file/edit_file/glob/grep) operate
+                // on one path namespace instead of diverging. That backend is constructed with
+                // `rootDir: getCurrentWorkDir()` (GthDeepAgent.ts init), so getCurrentWorkDir() IS the
+                // fs-backend root on the local code/chat runner. getCurrentWorkDir() =
+                // `process.env.INIT_CWD ?? process.cwd()` (core systemUtils); it only diverges from bare
+                // process.cwd() when INIT_CWD is set (npm-bin / IDE-spawned launches) — exactly the
+                // POSIX-latent divergence S4 closes. Evaluated at call time.
+                cwd: getCurrentWorkDir(),
+                // (1) Never let the child block on stdin (e.g. git commit opening $EDITOR).
+                stdio: ['ignore', 'pipe', 'pipe'],
+                // (1) POSIX: own process group so we can kill the whole tree on timeout
+                // (see killProcessGroup). No-op/harmful on Windows, which uses taskkill /T.
+                detached: process.platform !== 'win32',
+                // (3) Child env with provider/LLM credentials removed.
+                env: buildScrubbedEnv(),
             });
-            let output = '';
-            // Capture output if available (when stdio is not 'inherit')
+            // (2) Bounded capture for the returned message; live streaming is uncapped.
+            const buffer = new OutputBuffer(maxOutputBytes);
+            let timedOut = false;
+            let settled = false;
+            let killTimer;
+            const timeoutTimer = setTimeout(() => {
+                timedOut = true;
+                killProcessGroup(child, 'SIGTERM');
+                // Escalate to SIGKILL after a short grace if it didn't die.
+                killTimer = setTimeout(() => killProcessGroup(child, 'SIGKILL'), KILL_GRACE_MS);
+                // killTimer must not keep the event loop alive on its own.
+                killTimer.unref?.();
+            }, timeoutMs);
+            timeoutTimer.unref?.();
+            const clearTimers = () => {
+                clearTimeout(timeoutTimer);
+                if (killTimer)
+                    clearTimeout(killTimer);
+            };
             if (child.stdout) {
                 child.stdout.on('data', (data) => {
                     const chunk = data.toString();
                     stdout.write(chunk);
-                    output += chunk;
+                    buffer.append(chunk);
                 });
             }
             if (child.stderr) {
                 child.stderr.on('data', (data) => {
                     const chunk = data.toString();
                     stdout.write(chunk);
-                    output += chunk;
+                    buffer.append(chunk);
                 });
             }
             child.on('close', (code) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimers();
+                const captured = buffer.finalize();
+                const body = `Executing '${command}'...\n\n` +
+                    `<COMMAND_OUTPUT>\n` +
+                    captured.text +
+                    `</COMMAND_OUTPUT>\n`;
+                if (timedOut) {
+                    // EXT-20: a timeout-kill is a failure — reject so the deep-agent middleware flips the
+                    // tool result to status:'error' (✗). The FULL body is preserved on the error so the
+                    // model's observation is unchanged except for the status.
+                    reject(new ShellCommandFailedError({
+                        output: body +
+                            `\n\nCommand '${command}' was killed after exceeding the ${Math.round(timeoutMs / 1000)}s timeout. ` +
+                            `If it legitimately needs longer, increase the shell timeout in config.`,
+                        exitCode: null,
+                        command,
+                        toolName,
+                    }));
+                    return;
+                }
                 if (code === 0) {
-                    resolve(`Executing '${command}'...\n\n` +
-                        `<COMMAND_OUTPUT>\n` +
-                        output +
-                        `</COMMAND_OUTPUT>\n` +
-                        `\n\nCommand '${command}' completed successfully`);
+                    resolve(body + `\n\nCommand '${command}' completed successfully`);
                 }
                 else {
-                    resolve(`Executing '${command}'...\n\n` +
-                        `<COMMAND_OUTPUT>\n` +
-                        output +
-                        `</COMMAND_OUTPUT>\n` +
-                        `\n\nCommand '${command}' exited with code ${code}`);
+                    // EXT-20: a non-zero exit is a failure — reject (was resolve) so the softening
+                    // middleware surfaces the ✗ (isError) signal while preserving the full output body.
+                    reject(new ShellCommandFailedError({
+                        output: body + `\n\nCommand '${command}' exited with code ${code}`,
+                        exitCode: code,
+                        command,
+                        toolName,
+                    }));
                 }
             });
             child.on('error', (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimers();
                 const errorMsg = `Failed to execute command '${command}': ${error.message}`;
                 displayError(errorMsg);
                 reject(new Error(errorMsg));
@@ -183,6 +379,22 @@ export default class GthDevToolkit extends BaseToolkit {
                 schema: RunBuildArgsSchema,
             }, 'execute'));
         }
+        // Opt-in general-purpose shell tool. Unlike the fixed run_* commands, the model supplies
+        // the command, so the guardrail is the per-command confirmation dialog wired by the deep
+        // agent (createDeepAgent `interruptOn`), not a parameter sanitizer — a real shell command
+        // legitimately contains pipes / `$` / `;`, so validateParameterValue must NOT be applied.
+        if (isShellToolEnabled(this.commands, this.command)) {
+            tools.push(createGthTool(async (args) => {
+                return await this.executeCommand(args.command, 'run_shell_command');
+            }, {
+                name: 'run_shell_command',
+                description: 'Run an arbitrary shell command in the project working directory and return its ' +
+                    'combined stdout/stderr and exit status. Use for any task the fixed run_* tools do ' +
+                    'not cover (e.g. git, package managers, file inspection). Each call is subject to ' +
+                    'human approval before it runs unless approval has been disabled.',
+                schema: RunShellCommandArgsSchema,
+            }, 'execute'));
+        }
         return tools;
     }
 }

package/dist/tools/GthDevToolkit.js.map

@@ -1 +1 @@
-{"version":3,"file":"GthDevToolkit.js","sourceRoot":"","sources":["../../src/tools/GthDevToolkit.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,WAAW,EAA2B,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,EAAE,MAAM,EAAE,MAAM,wCAAwC,CAAC;AAEhE,iDAAiD;AACjD,SAAS,aAAa,CACpB,EAAyC,EACzC,MAIC,EACD,UAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,8DAA8D;IAC7D,YAAoB,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,wCAAwC;AACxC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,KAAK,CAA4B;IACzB,QAAQ,CAAoB;IAEpC,YAAY,WAA8B,EAAE;QAC1C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,iBAA8B;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,8DAA8D;YAC9D,MAAM,QAAQ,GAAI,IAAY,CAAC,UAAU,CAAC;YAC1C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,UAAkB,EAAE,SAAiB;QAC1D,2BAA2B;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,yCAAyC;QACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,8DAA8D,SAAS,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,oDAAoD;QACpD,IACE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,SAAS,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,wDAAwD;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEnD,mCAAmC;QACnC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8DAA8D,SAAS,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAAgB;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAClE,0CAA0C;gBAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,gCAAgC;gBAChC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,QAAQ,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAAgB;QAC5D,WAAW,CAAC,kBAAkB,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QAEtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;gBAC3B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,4DAA4D;YAC5D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC;gBAClB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC;gBAClB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CACL,cAAc,OAAO,UAAU;wBAC7B,oBAAoB;wBACpB,MAAM;wBACN,qBAAqB;wBACrB,gBAAgB,OAAO,0BAA0B,CACpD,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CACL,cAAc,OAAO,UAAU;wBAC7B,oBAAoB;wBACpB,MAAM;wBACN,qBAAqB;wBACrB,gBAAgB,OAAO,sBAAsB,IAAI,EAAE,CACtD,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,QAAQ,GAAG,8BAA8B,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5E,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,MAAM,KAAK,GAA8B,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAyC,EAAmB,EAAE;gBACnE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC,EACD;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EACT,mGAAmG;oBACnG,gCAAgC,IAAI,CAAC,QAAQ,CAAC,SAAU,IAAI;gBAC9D,MAAM,EAAE,kBAAkB;aAC3B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,IAA6C,EAAmB,EAAE;gBACvE,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;gBAC3D,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAC/D,CAAC,EACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,kGAAkG;oBAClG,qGAAqG;oBACrG,0BAA0B,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI;gBAC7D,MAAM,EAAE,uBAAuB;aAChC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAwC,EAAmB,EAAE;gBAClE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAS,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC,EACD;gBACE,IAAI,EAAE,UAAU;gBAChB,WAAW,EACT,sHAAsH;oBACtH,gCAAgC,IAAI,CAAC,QAAQ,CAAC,QAAS,IAAI;gBAC7D,MAAM,EAAE,iBAAiB;aAC1B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAyC,EAAmB,EAAE;gBACnE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC,EACD;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EACT,wFAAwF;oBACxF,gCAAgC,IAAI,CAAC,QAAQ,CAAC,SAAU,IAAI;gBAC9D,MAAM,EAAE,kBAAkB;aAC3B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"GthDevToolkit.js","sourceRoot":"","sources":["../../src/tools/GthDevToolkit.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,WAAW,EAA2B,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAEL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,iFAAiF;AACjF,iEAAiE;AACjE,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,iGAAiG;IACxF,MAAM,CAAS;IACxB,oGAAoG;IAC3F,QAAQ,CAAgB;IACjC,kDAAkD;IACzC,OAAO,CAAS;IACzB,4FAA4F;IACnF,QAAQ,CAAS;IAE1B,YAAY,MAKX;QACC,0FAA0F;QAC1F,4DAA4D;QAC5D,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAmE,EACnE,MAAsB;IAEtB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO;IAE1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,yFAAyF;QACzF,4FAA4F;QAC5F,4FAA4F;QAC5F,6FAA6F;QAC7F,0FAA0F;QAC1F,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,kDAAkD;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,EAAE,IAAI,CAAC;QAChD,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO;IAC/B,CAAC;IACD,+CAA+C;IAC/C,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,SAAS,aAAa,CACpB,EAAyC,EACzC,MAIC,EACD,UAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,8DAA8D;IAC7D,YAAoB,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,wCAAwC;AACxC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACvE,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACzD,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAE5C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,KAAK,CAA4B;IACzB,QAAQ,CAAoB;IACpC;;;;OAIG;IACc,OAAO,CAAyB;IAEjD,YAAY,WAA8B,EAAE,EAAE,OAAgC;QAC5E,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,iBAA8B;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,8DAA8D;YAC9D,MAAM,QAAQ,GAAI,IAAY,CAAC,UAAU,CAAC;YAC1C,OAAO,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,UAAkB,EAAE,SAAiB;QAC1D,2BAA2B;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,yCAAyC;QACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,8DAA8D,SAAS,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,oDAAoD;QACpD,IACE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,SAAS,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,uBAAuB;QACvB,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,SAAS,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,wDAAwD;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEnD,mCAAmC;QACnC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8DAA8D,SAAS,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAAgB;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAClE,0CAA0C;gBAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,gCAAgC;gBAChC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,QAAQ,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACK,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAAgB;QAC5D,WAAW,CAAC,kBAAkB,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QAEtD,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GACX,wBAAwB,OAAO,uCAAuC;gBACtE,IAAI,QAAQ,CAAC,WAAW,qDAAqD;gBAC7E,4DAA4D,CAAC;YAC/D,cAAc,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;gBAC3B,KAAK,EAAE,IAAI;gBACX,0FAA0F;gBAC1F,2FAA2F;gBAC3F,+EAA+E;gBAC/E,uFAAuF;gBACvF,uEAAuE;gBACvE,yFAAyF;gBACzF,oFAAoF;gBACpF,6DAA6D;gBAC7D,GAAG,EAAE,iBAAiB,EAAE;gBACxB,4EAA4E;gBAC5E,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,wEAAwE;gBACxE,4EAA4E;gBAC5E,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBACtC,uDAAuD;gBACvD,GAAG,EAAE,gBAAgB,EAAE;aACxB,CAAC,CAAC;YAEH,4EAA4E;YAC5E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,SAAqC,CAAC;YAE1C,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBACnC,QAAQ,GAAG,IAAI,CAAC;gBAChB,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACnC,4DAA4D;gBAC5D,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;gBAChF,2DAA2D;gBAC3D,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;YAEvB,MAAM,WAAW,GAAG,GAAS,EAAE;gBAC7B,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC,CAAC;YAEF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,WAAW,EAAE,CAAC;gBAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,GACR,cAAc,OAAO,UAAU;oBAC/B,oBAAoB;oBACpB,QAAQ,CAAC,IAAI;oBACb,qBAAqB,CAAC;gBAExB,IAAI,QAAQ,EAAE,CAAC;oBACb,sFAAsF;oBACtF,oFAAoF;oBACpF,0DAA0D;oBAC1D,MAAM,CACJ,IAAI,uBAAuB,CAAC;wBAC1B,MAAM,EACJ,IAAI;4BACJ,gBAAgB,OAAO,oCAAoC,IAAI,CAAC,KAAK,CACnE,SAAS,GAAG,IAAI,CACjB,aAAa;4BACd,wEAAwE;wBAC1E,QAAQ,EAAE,IAAI;wBACd,OAAO;wBACP,QAAQ;qBACT,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,GAAG,gBAAgB,OAAO,0BAA0B,CAAC,CAAC;gBACpE,CAAC;qBAAM,CAAC;oBACN,+EAA+E;oBAC/E,oFAAoF;oBACpF,MAAM,CACJ,IAAI,uBAAuB,CAAC;wBAC1B,MAAM,EAAE,IAAI,GAAG,gBAAgB,OAAO,sBAAsB,IAAI,EAAE;wBAClE,QAAQ,EAAE,IAAI;wBACd,OAAO;wBACP,QAAQ;qBACT,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,WAAW,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,8BAA8B,OAAO,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5E,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,MAAM,KAAK,GAA8B,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAyC,EAAmB,EAAE;gBACnE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC,EACD;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EACT,mGAAmG;oBACnG,gCAAgC,IAAI,CAAC,QAAQ,CAAC,SAAU,IAAI;gBAC9D,MAAM,EAAE,kBAAkB;aAC3B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,IAA6C,EAAmB,EAAE;gBACvE,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;gBAC3D,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAC/D,CAAC,EACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,kGAAkG;oBAClG,qGAAqG;oBACrG,0BAA0B,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI;gBAC7D,MAAM,EAAE,uBAAuB;aAChC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAwC,EAAmB,EAAE;gBAClE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAS,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC,EACD;gBACE,IAAI,EAAE,UAAU;gBAChB,WAAW,EACT,sHAAsH;oBACtH,gCAAgC,IAAI,CAAC,QAAQ,CAAC,QAAS,IAAI;gBAC7D,MAAM,EAAE,iBAAiB;aAC1B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,KAAyC,EAAmB,EAAE;gBACnE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;YAC1E,CAAC,EACD;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EACT,wFAAwF;oBACxF,gCAAgC,IAAI,CAAC,QAAQ,CAAC,SAAU,IAAI;gBAC9D,MAAM,EAAE,kBAAkB;aAC3B,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,0FAA0F;QAC1F,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,EAAE,IAA+C,EAAmB,EAAE;gBACzE,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YACtE,CAAC,EACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EACT,iFAAiF;oBACjF,oFAAoF;oBACpF,mFAAmF;oBACnF,kEAAkE;gBACpE,MAAM,EAAE,yBAAyB;aAClC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/tools/shell/allowlist.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @module tools/shell/allowlist
+ *
+ * Re-export of the EXT-9 Tier-2 allow-list engine. The implementation lives in
+ * `@gaunt-sloth/core` (`core/shell/allowlist`) because the core {@link GthAgentRunner}
+ * owns the per-instance session store and the loaded persisted store and consults
+ * `matchesApproval` before prompting (core cannot import from `@gaunt-sloth/agent`).
+ *
+ * See the core module for the exact safe-bin / anti-widening matching rule.
+ */
+export { matchesApproval, hasWideningFlag, AllowlistStore, PersistedAllowlist, type ApprovalScope, type ApprovalStores, } from '@gaunt-sloth/core/core/shell/allowlist.js';

package/dist/tools/shell/allowlist.js

@@ -0,0 +1,12 @@
+/**
+ * @module tools/shell/allowlist
+ *
+ * Re-export of the EXT-9 Tier-2 allow-list engine. The implementation lives in
+ * `@gaunt-sloth/core` (`core/shell/allowlist`) because the core {@link GthAgentRunner}
+ * owns the per-instance session store and the loaded persisted store and consults
+ * `matchesApproval` before prompting (core cannot import from `@gaunt-sloth/agent`).
+ *
+ * See the core module for the exact safe-bin / anti-widening matching rule.
+ */
+export { matchesApproval, hasWideningFlag, AllowlistStore, PersistedAllowlist, } from '@gaunt-sloth/core/core/shell/allowlist.js';
+//# sourceMappingURL=allowlist.js.map

package/dist/tools/shell/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../src/tools/shell/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,kBAAkB,GAGnB,MAAM,2CAA2C,CAAC"}

package/dist/tools/shell/arity.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @module tools/shell/arity
+ *
+ * Re-export of the EXT-9 Tier-2 command classifier. The implementation lives in
+ * `@gaunt-sloth/core` (`core/shell/arity`) because the core {@link GthAgentRunner}
+ * must consult it BEFORE prompting (and core cannot import from `@gaunt-sloth/agent`).
+ * This stable agent-side path is kept for tests and any agent-layer consumers.
+ *
+ * See the core module for the arity table scope and the anti-injection fail-closed rule.
+ */
+export { classifyCommand, tokenize, meaningfulPrefixTokens, type CommandClassification, } from '@gaunt-sloth/core/core/shell/arity.js';

package/dist/tools/shell/arity.js

@@ -0,0 +1,12 @@
+/**
+ * @module tools/shell/arity
+ *
+ * Re-export of the EXT-9 Tier-2 command classifier. The implementation lives in
+ * `@gaunt-sloth/core` (`core/shell/arity`) because the core {@link GthAgentRunner}
+ * must consult it BEFORE prompting (and core cannot import from `@gaunt-sloth/agent`).
+ * This stable agent-side path is kept for tests and any agent-layer consumers.
+ *
+ * See the core module for the arity table scope and the anti-injection fail-closed rule.
+ */
+export { classifyCommand, tokenize, meaningfulPrefixTokens, } from '@gaunt-sloth/core/core/shell/arity.js';
+//# sourceMappingURL=arity.js.map

package/dist/tools/shell/arity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arity.js","sourceRoot":"","sources":["../../../src/tools/shell/arity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,eAAe,EACf,QAAQ,EACR,sBAAsB,GAEvB,MAAM,uCAAuC,CAAC"}

package/dist/tools/shell/env.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Explicit blocklist of LLM-provider and cloud credentials. Covers the providers
+ * gaunt-sloth (and its consumers) can be configured against, plus the standard
+ * cloud secret-bearing vars. Matched case-insensitively.
+ */
+export declare const CREDENTIAL_BLOCKLIST: ReadonlyArray<string>;
+/**
+ * Allow-list of credential-shaped names that must survive the wildcard sweep
+ * because gaunt-sloth legitimately depends on them. Matched case-insensitively.
+ */
+export declare const CREDENTIAL_ALLOWLIST: ReadonlyArray<string>;
+/**
+ * True when an env var name should be scrubbed from the child environment.
+ * Exported for testing.
+ */
+export declare function shouldScrubEnvVar(name: string): boolean;
+/**
+ * Build the child environment for a spawned shell command: a copy of the parent
+ * env with LLM/cloud credentials removed. Defaults to the live `process.env`
+ * (via systemUtils); a source can be injected for testing.
+ */
+export declare function buildScrubbedEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/tools/shell/env.js

@@ -0,0 +1,110 @@
+/**
+ * @module tools/shell/env
+ *
+ * Credential scrubbing for the shell tool's child environment. By default a
+ * spawned child inherits `process.env` verbatim, so an approved (or yolo'd)
+ * command can `echo $ANTHROPIC_API_KEY` and exfiltrate the operator's LLM/cloud
+ * credentials. {@link buildScrubbedEnv} returns a copy of the parent env with
+ * those credentials removed before spawn.
+ *
+ * Policy (deliberately scoped):
+ * - Strip LLM provider keys and cloud-provider secrets (the explicit blocklist +
+ *   a wildcard sweep for `*_API_KEY` / `*_TOKEN` / `*_SECRET` / `*SECRET_KEY`).
+ * - LEAVE generic dev env intact (PATH, HOME, SHELL, LANG, npm/pnpm config, …)
+ *   so normal commands still work.
+ * - LEAVE `GITHUB_TOKEN` / `GH_TOKEN` intact: gaunt-sloth's content/requirement
+ *   providers shell out to `gh` (`gh pr diff`, `gh issue view`), so stripping
+ *   these would break first-class workflows. They are explicitly allow-listed
+ *   against the wildcard `*_TOKEN` sweep.
+ *
+ * Patterned after hermes-agent `_HERMES_PROVIDER_ENV_BLOCKLIST` (tools/environments/local.py)
+ * — but narrower: we only own the provider/cloud-secret floor.
+ */
+import { env as processEnv } from '@gaunt-sloth/core/utils/systemUtils.js';
+/**
+ * Explicit blocklist of LLM-provider and cloud credentials. Covers the providers
+ * gaunt-sloth (and its consumers) can be configured against, plus the standard
+ * cloud secret-bearing vars. Matched case-insensitively.
+ */
+export const CREDENTIAL_BLOCKLIST = [
+    // LLM providers
+    'ANTHROPIC_API_KEY',
+    'ANTHROPIC_AUTH_TOKEN',
+    'CLAUDE_CODE_OAUTH_TOKEN',
+    'OPENAI_API_KEY',
+    'GOOGLE_API_KEY',
+    'GEMINI_API_KEY',
+    'GOOGLE_APPLICATION_CREDENTIALS',
+    'GROQ_API_KEY',
+    'XAI_API_KEY',
+    'DEEPSEEK_API_KEY',
+    'MISTRAL_API_KEY',
+    'OPENROUTER_API_KEY',
+    'COHERE_API_KEY',
+    'TOGETHER_API_KEY',
+    'PERPLEXITY_API_KEY',
+    'FIREWORKS_API_KEY',
+    // Azure OpenAI
+    'AZURE_OPENAI_API_KEY',
+    'AZURE_API_KEY',
+    // Cloud provider secrets (AWS / GCP)
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_ACCESS_KEY_ID',
+];
+/**
+ * Allow-list of credential-shaped names that must survive the wildcard sweep
+ * because gaunt-sloth legitimately depends on them. Matched case-insensitively.
+ */
+export const CREDENTIAL_ALLOWLIST = [
+    // `gh` CLI auth — used by the github content/requirement providers.
+    'GITHUB_TOKEN',
+    'GH_TOKEN',
+];
+// Wildcard sweep: any var whose name ends in one of these suffixes is treated as
+// a secret and stripped (unless allow-listed). Catches provider keys we didn't
+// enumerate (e.g. a new `FOO_API_KEY`).
+const SECRET_SUFFIXES = [
+    /_API_KEY$/i,
+    /_SECRET_ACCESS_KEY$/i,
+    /_SECRET_KEY$/i,
+    /_SECRET$/i,
+    /_TOKEN$/i,
+];
+function isAllowlisted(name) {
+    return CREDENTIAL_ALLOWLIST.some((a) => a.toUpperCase() === name.toUpperCase());
+}
+function isBlocklisted(name) {
+    return CREDENTIAL_BLOCKLIST.some((b) => b.toUpperCase() === name.toUpperCase());
+}
+function matchesSecretSuffix(name) {
+    return SECRET_SUFFIXES.some((re) => re.test(name));
+}
+/**
+ * True when an env var name should be scrubbed from the child environment.
+ * Exported for testing.
+ */
+export function shouldScrubEnvVar(name) {
+    if (isAllowlisted(name))
+        return false;
+    if (isBlocklisted(name))
+        return true;
+    return matchesSecretSuffix(name);
+}
+/**
+ * Build the child environment for a spawned shell command: a copy of the parent
+ * env with LLM/cloud credentials removed. Defaults to the live `process.env`
+ * (via systemUtils); a source can be injected for testing.
+ */
+export function buildScrubbedEnv(source = processEnv) {
+    const scrubbed = {};
+    for (const [key, value] of Object.entries(source)) {
+        if (value === undefined)
+            continue;
+        if (shouldScrubEnvVar(key))
+            continue;
+        scrubbed[key] = value;
+    }
+    return scrubbed;
+}
+//# sourceMappingURL=env.js.map

package/dist/tools/shell/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/tools/shell/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA0B;IACzD,gBAAgB;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,gCAAgC;IAChC,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,eAAe;IACf,sBAAsB;IACtB,eAAe;IACf,qCAAqC;IACrC,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;CACpB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA0B;IACzD,oEAAoE;IACpE,cAAc;IACd,UAAU;CACX,CAAC;AAEF,iFAAiF;AACjF,+EAA+E;AAC/E,wCAAwC;AACxC,MAAM,eAAe,GAAG;IACtB,YAAY;IACZ,sBAAsB;IACtB,eAAe;IACf,WAAW;IACX,UAAU;CACX,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAA4B,UAAU;IACrE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tools/shell/hardline.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Hardline patterns: [regex, human description]. Matched case-insensitively
+ * against the normalized command.
+ */
+export declare const HARDLINE_PATTERNS: ReadonlyArray<readonly [RegExp, string]>;
+export interface HardlineMatch {
+    /** Human-readable reason the command was refused. */
+    description: string;
+}
+/**
+ * Check a raw command against the hardline blocklist. Normalizes first so
+ * obfuscated variants are caught. Returns the match (with a description) when the
+ * command is catastrophic, or `null` when it is allowed to proceed.
+ */
+export declare function checkHardline(command: string): HardlineMatch | null;

package/dist/tools/shell/hardline.js

@@ -0,0 +1,88 @@
+/**
+ * @module tools/shell/hardline
+ *
+ * Unbypassable hardline blocklist for the shell tool. These are catastrophic,
+ * non-recoverable commands (wipe the root filesystem, format a disk, overwrite a
+ * raw block device, fork-bomb, take the host down). They are refused inside
+ * `executeCommand` itself — BEFORE spawn — so the refusal fires regardless of
+ * yolo (`shellYolo`), any allow-list, or the confirmation path. yolo deliberately
+ * bypasses the *confirmation*; it does NOT bypass this floor.
+ *
+ * Recoverable-but-costly operations (e.g. `git reset --hard`, `rm -rf ./build`,
+ * `chmod -R 777 ./dir`, `curl | sh`) are intentionally NOT here — those are what
+ * the confirmation dialog / yolo are for.
+ *
+ * Patterns match the NORMALIZED command ({@link ./normalize.js}) so obfuscation
+ * (ANSI/fullwidth/backslash splits/whitespace padding) cannot bypass them.
+ *
+ * Patterned after hermes-agent `tools/approval.py` HARDLINE_PATTERNS.
+ */
+import { normalizeCommand } from '#src/tools/shell/normalize.js';
+// Matches a position where the shell would begin parsing a NEW command: start of
+// string, after a separator (; & | newline), after `$(` or backtick, optionally
+// consuming leading wrappers (sudo/env VAR=VAL/exec/nohup/setsid/time). Used by
+// the shutdown-family patterns so they don't false-positive on `echo reboot`.
+const CMD_POS = '(?:^|[;&|\\n`]|\\$\\()' +
+    '\\s*' +
+    '(?:sudo\\s+(?:-[^\\s]+\\s+)*)?' +
+    '(?:env\\s+(?:\\w+=\\S*\\s+)*)?' +
+    '(?:(?:exec|nohup|setsid|time)\\s+)*' +
+    '\\s*';
+/**
+ * Hardline patterns: [regex, human description]. Matched case-insensitively
+ * against the normalized command.
+ */
+export const HARDLINE_PATTERNS = [
+    // rm -rf targeting the root filesystem (`/`, `/*`).
+    [/\brm\s+(?:-[^\s]*\s+)*\/\s*\*?\s*(?:$|[;&|])/, 'recursive delete of root filesystem'],
+    // rm -rf targeting protected system directories (with optional /* suffix).
+    [
+        /\brm\s+(?:-[^\s]*\s+)*(?:\/(?:home|root|etc|usr|var|bin|sbin|boot|lib|lib64|opt|sys|proc))(?:\/\*)?\s*(?:$|[;&|])/,
+        'recursive delete of system directory',
+    ],
+    // rm -rf targeting the home directory (~ or $HOME).
+    // Note: patterns match the LOWERCASED normalized command, so $HOME → $home.
+    [
+        /\brm\s+(?:-[^\s]*\s+)*(?:~|\$home)(?:\/\*)?\s*(?:$|[;&|])/,
+        'recursive delete of home directory',
+    ],
+    // Filesystem format.
+    [/\bmkfs(?:\.[a-z0-9]+)?\b/, 'format filesystem (mkfs)'],
+    // dd writing to a raw block device.
+    [/\bdd\b[^\n]*\bof=\/dev\/(?:sd|nvme|hd|mmcblk|vd|xvd)[a-z0-9]*/, 'dd to raw block device'],
+    // Shell redirection to a raw block device (`> /dev/sda`).
+    [/>\s*\/dev\/(?:sd|nvme|hd|mmcblk|vd|xvd)[a-z0-9]*\b/, 'redirect to raw block device'],
+    // Classic fork bomb `:(){ :|:& };:`.
+    [/:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/, 'fork bomb'],
+    // chmod -R 777 / (recursive world-writable on root).
+    [
+        /\bchmod\s+(?:-[^\s]*\s+)*(?:-r|--recursive)\s+(?:-[^\s]*\s+)*777\s+\//,
+        'recursive chmod 777 of root',
+    ],
+    // Kill every process on the system (`kill -1`, `kill -9 -1`).
+    [/\bkill\s+(?:-[^\s]+\s+)*-1\b/, 'kill all processes'],
+    // System shutdown / reboot — anchored to a command position so `echo reboot`
+    // and `grep shutdown log` don't trip it.
+    [new RegExp(CMD_POS + '(?:shutdown|reboot|halt|poweroff)\\b'), 'system shutdown/reboot'],
+    [new RegExp(CMD_POS + 'init\\s+[06]\\b'), 'init 0/6 (shutdown/reboot)'],
+    [
+        new RegExp(CMD_POS + 'systemctl\\s+(?:poweroff|reboot|halt|kexec)\\b'),
+        'systemctl poweroff/reboot',
+    ],
+    [new RegExp(CMD_POS + 'telinit\\s+[06]\\b'), 'telinit 0/6 (shutdown/reboot)'],
+];
+/**
+ * Check a raw command against the hardline blocklist. Normalizes first so
+ * obfuscated variants are caught. Returns the match (with a description) when the
+ * command is catastrophic, or `null` when it is allowed to proceed.
+ */
+export function checkHardline(command) {
+    const normalized = normalizeCommand(command).toLowerCase();
+    for (const [pattern, description] of HARDLINE_PATTERNS) {
+        if (pattern.test(normalized)) {
+            return { description };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=hardline.js.map