@namzu/sdk 50.0.0 → 51.0.0

package/dist/tools/command-shell.js

@@ -32,14 +32,89 @@
  * those would change what a command line means after the rules read it, so
  * they are removed from the environment of the spawned bash.
  * `NAMZU_BASH_SHELL=/bin/sh` restores the old shell exactly.
+ *
+ * ## Windows
+ *
+ * `cmd.exe` is a dialect the permission lexer cannot read: every command
+ * line comes back opaque, so every call needs a person in every mode, and a
+ * model writes POSIX syntax that cmd cannot run. So on Windows the same rule
+ * applies as everywhere else: run bash where it exists, and read the line as
+ * bash. The bash that exists on a Windows machine is Git for Windows'
+ * (`findGitBash`). Without it the tool falls back to cmd, as before, and
+ * {@link windowsShellNotice} says so once. `NAMZU_BASH_SHELL=cmd` keeps cmd
+ * on a machine that has Git Bash.
  */
-import { spawn as nodeSpawn } from 'node:child_process';
+import { execFileSync, spawn as nodeSpawn, } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
 import { constants, accessSync, existsSync } from 'node:fs';
-import { delimiter, isAbsolute, join } from 'node:path';
+import { delimiter, isAbsolute, join, win32 } from 'node:path';
+import { MSYS_TAG_VARIABLE, registerMsysShell } from '../process/kill-tree.js';
 const WELL_KNOWN_BASH = ['/bin/bash', '/usr/bin/bash'];
 const WELL_KNOWN_SH = ['/bin/sh', '/usr/bin/sh'];
 /** Environment variables that change what a bash command line means. */
 const BASH_STARTUP_VARIABLES = new Set(['BASH_ENV', 'ENV', 'SHELLOPTS', 'BASHOPTS']);
+/** A variable of a Windows environment, whose names are not case-sensitive. */
+function windowsEnv(env, name) {
+    const key = Object.keys(env).find((k) => k.toLowerCase() === name.toLowerCase());
+    return key === undefined ? undefined : env[key];
+}
+/** Is `path` the working directory or inside it? Windows paths compare without case. */
+function insideDirectory(path, directory) {
+    const relative = win32.relative(directory, path);
+    return relative === '' || (!relative.startsWith('..') && !win32.isAbsolute(relative));
+}
+/**
+ * Git for Windows' bash.exe, found in this order:
+ *
+ * 1. `%ProgramFiles%\Git\bin\bash.exe`, then `%ProgramFiles(x86)%\Git\bin\bash.exe`;
+ * 2. `%LOCALAPPDATA%\\Programs\\Git\\bin\\bash.exe`, a per-user install;
+ * 3. the install that holds the first `git` that `where.exe git` lists: its
+ *    `bin\bash.exe`, one or two directories up from the `git.exe` it printed.
+ *    A hit inside the working directory is skipped, because a repository can
+ *    carry a `git.exe` of its own and the search must not run it.
+ *
+ * There is no registry lookup, and `where bash` is never asked: on a machine
+ * with WSL, `System32\bash.exe` is the launcher of another system.
+ */
+export function findGitBash(probe) {
+    const programFiles = windowsEnv(probe.env, 'ProgramFiles') ?? 'C:\\Program Files';
+    const programFilesX86 = windowsEnv(probe.env, 'ProgramFiles(x86)') ?? 'C:\\Program Files (x86)';
+    for (const root of [programFiles, programFilesX86]) {
+        const candidate = win32.join(root, 'Git', 'bin', 'bash.exe');
+        if (probe.isExecutable(candidate))
+            return candidate;
+    }
+    // A per-user install (the installer's "just me" choice) lives under LOCALAPPDATA.
+    const localAppData = windowsEnv(probe.env, 'LOCALAPPDATA');
+    if (localAppData !== undefined && localAppData !== '') {
+        const candidate = win32.join(localAppData, 'Programs', 'Git', 'bin', 'bash.exe');
+        if (probe.isExecutable(candidate))
+            return candidate;
+    }
+    let listed = [];
+    try {
+        listed = probe.whereGit?.() ?? [];
+    }
+    catch {
+        return undefined;
+    }
+    const cwd = probe.cwd ?? process.cwd();
+    for (const line of listed) {
+        const git = line.trim();
+        if (!win32.isAbsolute(git) || insideDirectory(git, cwd))
+            continue;
+        const directory = win32.dirname(git);
+        // <Git>\cmd\git.exe and <Git>\bin\git.exe, then <Git>\mingw64\bin\git.exe.
+        for (const candidate of [
+            win32.join(directory, '..', 'bin', 'bash.exe'),
+            win32.join(directory, '..', '..', 'bin', 'bash.exe'),
+        ]) {
+            if (probe.isExecutable(candidate))
+                return candidate;
+        }
+    }
+    return undefined;
+}
 export function findCommandShell(probe) {
     const override = probe.env.NAMZU_BASH_SHELL;
     if (override !== undefined && override !== '') {
@@ -52,12 +127,27 @@ export function findCommandShell(probe) {
                 ?.toLowerCase()
                 .replace(/\.exe$/, '')
             : override.slice(override.lastIndexOf('/') + 1);
-        return { path: override, dialect: name === 'bash' ? 'bash' : 'sh', source: 'override' };
+        // cmd is not a POSIX shell and takes no `-c`: naming it keeps Node's
+        // own cmd path, which is how a Windows machine with Git Bash runs the
+        // tool as it did before bash was preferred.
+        if (probe.platform === 'win32' && name === 'cmd')
+            return { path: undefined, dialect: 'cmd', source: 'override' };
+        return {
+            path: override,
+            dialect: name === 'bash' ? 'bash' : 'sh',
+            source: 'override',
+            ...(probe.platform === 'win32' ? { windows: true } : {}),
+        };
+    }
+    // Looking `bash` up on the Windows PATH can find WSL's launcher, which
+    // runs the command in another system, so only Git for Windows' own
+    // install is used. Without it Node's platform shell (cmd) runs the line.
+    if (probe.platform === 'win32') {
+        const gitBash = findGitBash(probe);
+        return gitBash === undefined
+            ? { path: undefined, dialect: 'cmd', source: 'platform' }
+            : { path: gitBash, dialect: 'bash', source: 'bash', windows: true };
     }
-    // Windows keeps Node's platform shell. Looking `bash` up on its PATH can
-    // find WSL's launcher, which runs the command in another system.
-    if (probe.platform === 'win32')
-        return { path: undefined, dialect: 'cmd', source: 'platform' };
     for (const directory of (probe.env.PATH ?? '').split(delimiter)) {
         if (directory === '' || !directory.startsWith('/'))
             continue;
@@ -71,6 +161,48 @@ export function findCommandShell(probe) {
     }
     return { path: '/bin/sh', dialect: 'sh', source: 'sh' };
 }
+/**
+ * Said once, in the session, when a Windows machine has no Git Bash and the
+ * `bash` tool runs cmd.exe. Undefined everywhere else.
+ */
+export const WINDOWS_CMD_FALLBACK_NOTICE = 'Git for Windows not found — shell commands run in cmd.exe and each one asks for approval. Install Git for Windows for full support.';
+export function windowsShellNotice(shell = hostCommandShell()) {
+    return shell.source === 'platform' && shell.path === undefined && shell.dialect === 'cmd'
+        ? WINDOWS_CMD_FALLBACK_NOTICE
+        : undefined;
+}
+/**
+ * Is the host `bash` tool Git Bash on Windows? The model is then told so, and
+ * the Windows-only spawn details apply.
+ */
+export function isWindowsBash(shell = hostCommandShell()) {
+    return shell.windows === true && shell.dialect === 'bash';
+}
+/** What a model needs to know when the `bash` tool is Git Bash on Windows, appended to the tool's description. */
+export const WINDOWS_BASH_GUIDANCE = 'This tool runs Git Bash (POSIX sh), not cmd.exe or PowerShell. Use Unix shell syntax: `/dev/null` not `NUL`, forward slashes, `$VAR` not `%VAR%` or `$env:VAR`. To run PowerShell, call `powershell -NoProfile -Command "…"`.';
+/**
+ * Rewrite a redirect to Windows' `NUL` device (`>nul`, `2>NUL`, `&>nul`) to
+ * `/dev/null`. In bash `nul` is an ordinary file name, so the line would
+ * create a file called `nul` that Windows then cannot delete. A line with
+ * `<`, `$` or a backtick is left alone: it may be a heredoc or a string that
+ * only mentions the text.
+ */
+export function rewriteWindowsNullRedirect(command) {
+    if (/[<$`]/.test(command))
+        return command;
+    return command.replace(/(\d?&?>+[ \t]*)nul(?=\s|$|[|&;)\n])/gi, '$1/dev/null');
+}
+/** `where.exe git`, run from the system directory by its absolute path, so PATH cannot stand in for it. */
+function whereGit() {
+    const root = process.env.SystemRoot ?? process.env.windir ?? 'C:\\Windows';
+    const output = execFileSync(win32.join(root, 'System32', 'where.exe'), ['git'], {
+        encoding: 'utf8',
+        windowsHide: true,
+        stdio: ['ignore', 'pipe', 'ignore'],
+        timeout: 5000,
+    });
+    return output.split(/\r?\n/);
+}
 /**
  * An explicitly requested interpreter for a host script. Unlike the live
  * `bash` tool's automatic choice, this never substitutes bash for sh (or sh
@@ -122,7 +254,12 @@ let resolved;
  */
 export function hostCommandShell() {
     if (resolved === undefined) {
-        resolved = findCommandShell({ env: process.env, platform: process.platform, isExecutable });
+        resolved = findCommandShell({
+            env: process.env,
+            platform: process.platform,
+            isExecutable,
+            whereGit,
+        });
     }
     return resolved;
 }
@@ -147,7 +284,17 @@ export function hostShellSpawn(command, env, shell = hostCommandShell()) {
         return { file: undefined, args: [command], env };
     if (shell.dialect !== 'bash')
         return { file: shell.path, args: ['-c', command], env };
-    return { file: shell.path, args: ['-c', command], env: withoutBashStartup(env) };
+    const clean = withoutBashStartup(env);
+    // Git for Windows: the line is read as bash, so `>nul` must already have
+    // become `/dev/null` (the tool's input does that before the rules read it;
+    // this covers a caller that did not), and git must never open an editor.
+    if (shell.windows === true)
+        return {
+            file: shell.path,
+            args: ['-c', rewriteWindowsNullRedirect(command)],
+            env: { ...clean, GIT_EDITOR: 'true' },
+        };
+    return { file: shell.path, args: ['-c', command], env: clean };
 }
 /** Why a command could not be started, in the words a model or operator reads. */
 export function describeSpawnFailure(error, cwd) {
@@ -222,16 +369,30 @@ function windowsCmdSpawn(command, env) {
  */
 export function spawnHostShell(command, options) {
     const spawnFn = options.spawnImpl ?? nodeSpawn;
-    const resolved = hostShellSpawn(command, options.env, options.shell);
+    const shell = options.shell ?? hostCommandShell();
+    const spawned = hostShellSpawn(command, options.env, shell);
+    // Git Bash: tag the shell so a kill can find what a forked command left.
+    const tag = shell.windows === true && shell.path !== undefined ? randomUUID() : undefined;
+    const resolved = tag === undefined ? spawned : { ...spawned, env: { ...spawned.env, [MSYS_TAG_VARIABLE]: tag } };
     const common = {
         cwd: options.cwd,
         env: resolved.env,
         detached: options.detached ?? (options.platform ?? process.platform) !== 'win32',
         windowsHide: true,
-        ...(options.stdio === undefined ? {} : { stdio: options.stdio }),
+        // Git Bash reads no terminal: a command that asks for input gets
+        // end-of-file (the null device) instead of waiting for a timeout.
+        ...(options.stdio === undefined
+            ? resolved.file !== undefined && shell.windows === true
+                ? { stdio: ['ignore', 'pipe', 'pipe'] }
+                : {}
+            : { stdio: options.stdio }),
     };
-    if (resolved.file !== undefined)
-        return spawnFn(resolved.file, [...resolved.args], common);
+    if (resolved.file !== undefined) {
+        const child = spawnFn(resolved.file, [...resolved.args], common);
+        if (tag !== undefined && child !== null && typeof child === 'object')
+            registerMsysShell(child, { bash: resolved.file, tag });
+        return child;
+    }
     const windows = windowsCmdSpawn(command, resolved.env);
     return spawnFn(windows.file, [...windows.args], {
         ...common,

package/dist/tools/command-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-shell.js","sourceRoot":"","sources":["../../src/tools/command-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAwC,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAqBvD,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;AACtD,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;AAEhD,wEAAwE;AACxE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;AAEpF,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,oEAAoE;QACpE,oCAAoC;QACpC,MAAM,IAAI,GACT,KAAK,CAAC,QAAQ,KAAK,OAAO;YACzB,CAAC,CAAC,QAAQ;iBACP,KAAK,CAAC,OAAO,CAAC;iBACd,EAAE,CAAC,CAAC,CAAC,CAAC;gBACP,EAAE,WAAW,EAAE;iBACd,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YACxB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACxF,CAAC;IACD,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC9F,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACzC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC/F,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACzC,OAAsB,EACtB,KAAwB;IAExB,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;gBACjD,CAAC,CAAC,SAAS,CAAA;QACb,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAA;IACpB,qEAAqE;IACrE,sEAAsE;IACtE,KAAK,MAAM,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACxF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACxF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IACjC,IAAI,CAAC;QACJ,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAChC,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,IAAI,QAAkC,CAAA;AAEtC;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAC9C,OAAsB;IAEtB,OAAO,0BAA0B,CAAC,OAAO,EAAE;QAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY;KACZ,CAAC,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,KAA+B;IAC5E,QAAQ,GAAG,KAAK,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAe,EACf,GAAsB,EACtB,QAAsB,gBAAgB,EAAE;IAMxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;IAC9E,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;IACrF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAA;AACjF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAY;IAChE,wEAAwE;IACxE,4EAA4E;IAC5E,6DAA6D;IAC7D,IACC,GAAG,KAAK,SAAS;QAChB,KAA2C,EAAE,IAAI,KAAK,QAAQ;QAC/D,CAAC,UAAU,CAAC,GAAG,CAAC,EACf,CAAC;QACF,OAAO,sEAAsE,GAAG,EAAE,CAAA;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACrE,OAAO,gCAAgC,MAAM,EAAE,CAAA;AAChD,CAAC;AAED,6EAA6E;AAC7E,MAAM,wBAAwB,GAAG,oBAAoB,CAAA;AACrD,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CACvB,OAAe,EACf,GAAsB;IAMtB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAChF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChD,CAAC,CAAA;IACD,MAAM,OAAO,GACZ,MAAM,CAAC,SAAS,CAAC;QACjB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,qBAAqB,CAAA;IACxF,OAAO;QACN,IAAI,EAAE,OAAO;QACb,uEAAuE;QACvE,eAAe;QACf,IAAI,EAAE;YACL,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,uBAAuB,sBAAsB,iBAAiB,wBAAwB,KAAK;SAC3F;QACD,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE;KACvF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAe,EACf,OAWC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAA;IAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,MAAM,GAAiB;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;QAChF,WAAW,EAAE,IAAI;QACjB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KAChE,CAAA;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;IACtD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/C,GAAG,MAAM;QACT,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,wBAAwB,EAAE,IAAI;KAC9B,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CACjC,GAAM;IAEN,MAAM,GAAG,GAAuC,EAAE,CAAA;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAQ;QAC/E,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAQ,CAAA;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAClC,sFAAsF,CAAA;AAEvF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAIhD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAA;AAChF,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,OAAwC;IACvE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAA;AAC7D,CAAC"}
+{"version":3,"file":"command-shell.js","sourceRoot":"","sources":["../../src/tools/command-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAGN,YAAY,EACZ,KAAK,IAAI,SAAS,GAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAE9D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AA6B9E,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;AACtD,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;AAEhD,wEAAwE;AACxE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;AAEpF,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAsB,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IAChF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAChD,CAAC;AAED,wFAAwF;AACxF,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,KAAwB;IACnD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,mBAAmB,CAAA;IACjF,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,yBAAyB,CAAA;IAC/F,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC5D,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IACpD,CAAC;IACD,kFAAkF;IAClF,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAC1D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAChF,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IACpD,CAAC;IACD,IAAI,MAAM,GAAsB,EAAE,CAAA;IAClC,IAAI,CAAC;QACJ,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,SAAQ;QACjE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,2EAA2E;QAC3E,KAAK,MAAM,SAAS,IAAI;YACvB,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC;SACpD,EAAE,CAAC;YACH,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAA;QACpD,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,oEAAoE;QACpE,oCAAoC;QACpC,MAAM,IAAI,GACT,KAAK,CAAC,QAAQ,KAAK,OAAO;YACzB,CAAC,CAAC,QAAQ;iBACP,KAAK,CAAC,OAAO,CAAC;iBACd,EAAE,CAAC,CAAC,CAAC,CAAC;gBACP,EAAE,WAAW,EAAE;iBACd,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YACxB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,qEAAqE;QACrE,sEAAsE;QACtE,4CAA4C;QAC5C,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;YAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC/D,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACxC,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAA;IACF,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QAClC,OAAO,OAAO,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;YACzD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACrE,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACzC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC/F,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACvC,qIAAqI,CAAA;AAEtI,MAAM,UAAU,kBAAkB,CAAC,QAAsB,gBAAgB,EAAE;IAC1E,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QACxF,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,SAAS,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAsB,gBAAgB,EAAE;IACrE,OAAO,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAA;AAC1D,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,MAAM,qBAAqB,GACjC,+NAA+N,CAAA;AAEhO;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACzD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,uCAAuC,EAAE,aAAa,CAAC,CAAA;AAC/E,CAAC;AAED,2GAA2G;AAC3G,SAAS,QAAQ;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,aAAa,CAAA;IAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;QAC/E,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,OAAO,EAAE,IAAI;KACb,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACzC,OAAsB,EACtB,KAAwB;IAExB,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;gBACjD,CAAC,CAAC,SAAS,CAAA;QACb,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAA;IACpB,qEAAqE;IACrE,sEAAsE;IACtE,KAAK,MAAM,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACxF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IACxF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IACjC,IAAI,CAAC;QACJ,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAChC,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAED,IAAI,QAAkC,CAAA;AAEtC;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ,GAAG,gBAAgB,CAAC;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY;YACZ,QAAQ;SACR,CAAC,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAC9C,OAAsB;IAEtB,OAAO,0BAA0B,CAAC,OAAO,EAAE;QAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY;KACZ,CAAC,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B,CAAC,KAA+B;IAC5E,QAAQ,GAAG,KAAK,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAe,EACf,GAAsB,EACtB,QAAsB,gBAAgB,EAAE;IAMxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;IAC9E,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAA;IACrF,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACrC,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QACzB,OAAO;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACjD,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE;SACrC,CAAA;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AAC/D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAY;IAChE,wEAAwE;IACxE,4EAA4E;IAC5E,6DAA6D;IAC7D,IACC,GAAG,KAAK,SAAS;QAChB,KAA2C,EAAE,IAAI,KAAK,QAAQ;QAC/D,CAAC,UAAU,CAAC,GAAG,CAAC,EACf,CAAC;QACF,OAAO,sEAAsE,GAAG,EAAE,CAAA;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACrE,OAAO,gCAAgC,MAAM,EAAE,CAAA;AAChD,CAAC;AAED,6EAA6E;AAC7E,MAAM,wBAAwB,GAAG,oBAAoB,CAAA;AACrD,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CACvB,OAAe,EACf,GAAsB;IAMtB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QAChF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAChD,CAAC,CAAA;IACD,MAAM,OAAO,GACZ,MAAM,CAAC,SAAS,CAAC;QACjB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,qBAAqB,CAAA;IACxF,OAAO;QACN,IAAI,EAAE,OAAO;QACb,uEAAuE;QACvE,eAAe;QACf,IAAI,EAAE;YACL,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,uBAAuB,sBAAsB,iBAAiB,wBAAwB,KAAK;SAC3F;QACD,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE;KACvF,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAe,EACf,OAWC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAA;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gBAAgB,EAAE,CAAA;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC3D,yEAAyE;IACzE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,MAAM,QAAQ,GACb,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,EAAE,CAAA;IAChG,MAAM,MAAM,GAAiB;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;QAChF,WAAW,EAAE,IAAI;QACjB,iEAAiE;QACjE,kEAAkE;QAClE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;YAC9B,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBACtD,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAA0B,EAAE;gBAChE,CAAC,CAAC,EAAE;YACL,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KAC5B,CAAA;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QAChE,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YACnE,iBAAiB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QACvD,OAAO,KAAK,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;IACtD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/C,GAAG,MAAM;QACT,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,wBAAwB,EAAE,IAAI;KAC9B,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CACjC,GAAM;IAEN,MAAM,GAAG,GAAuC,EAAE,CAAA;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAQ;QAC/E,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAQ,CAAA;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAClC,sFAAsF,CAAA;AAEvF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAIhD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAA;AAChF,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,OAAwC;IACvE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAA;AAC7D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sdk",
-  "version": "50.0.0",
+  "version": "51.0.0",
   "description": "Open-source AI agent SDK with a built-in runtime. Nothing between you and your agents.",
   "license": "FSL-1.1-MIT",
   "engines": {

package/src/agents/AGENTS.md

@@ -40,52 +40,140 @@ list of agent kinds.
   declared, not inferred.
 - **`runAgent.ts`** — the entry a host calls.
 
-## The decided position: control flow is authored by a developer
-
-A model may choose *what* to do — which tool, which delegate, in what order
-within a turn. It does not author the *program* that runs those choices.
-
-The proposal this rules on is a model-emitted orchestration SCRIPT —
-`agent()`, `parallel()`, `pipeline()` as globals — executed in an isolate, so
-that logic between steps costs no model turns. It is refused, and the reason
-is the trust boundary rather than the feature's value.
-
-**The argument.** `bash` from a model is mediated by `packages/sandbox`
-because code from a model is untrusted input. A model-authored script is the
-same input through a different door, and a strictly more powerful one: it can
-call back into the agent surface, spawn delegates and spend budget, which a
-shell command reaching only the filesystem cannot. Running it in-process would
-leave the kernel's one clearly-drawn confinement boundary covering the weaker
-case and not the stronger. So an isolate is mandatory rather than an
-optimisation — and once it is mandatory, the capability costs a **second
-mediated execution surface** to secure, audit, version and keep in step with
-the first.
-
-**What it would buy, measured honestly.** Model turns spent on orchestration
-between steps. That is real, and most of it is already available: `PipelineAgent`
-spends none, and `SupervisorAgent`'s concurrent `create_task` fan-out spends
-one turn for N children. The remaining gap is orchestration a developer did
-not anticipate and a model invents at runtime — which is also the case where a
-wrong program is hardest to review before it runs.
-
-## The bar a reopen has to clear
-
-Not "someone wants it". Specifically:
-
-1. **A decided trust model**, in writing, before any code: mediated by
-   `packages/sandbox` like `bash`, or not at all. "Decide later" is the
-   answer this refusal rejects.
-2. **A second execution surface worth its own maintenance** — its own
-   confinement, its own audit records, its own version story. If the answer
-   is "reuse the sandbox", show how a script that calls `agent()` is confined
-   by a boundary designed for a subprocess.
-3. **A measured gap**, against `PipelineAgent` and concurrent `create_task`
-   rather than against a single sequential agent. The comparison the original
-   proposal made was to the wrong baseline.
-
-Recorded in `ses_020`'s decision log as D5. If the owner reverses it, replace
-this section rather than adding to it — two stances in one file is how the
-first one got lost.
+## The decided position: a model may author a workflow script, confined
+
+Decided by the owner on **2026-10-18**, reversing the earlier refusal (D5,
+which kept control flow developer-authored). The earlier text named the bar a
+reopen had to clear: a written trust model before any code, a second
+execution surface worth its own maintenance, a measured gap. This section is
+the first; the second is the code under `execution/workflow/`; the third is
+the table below, measured on 2026-10-18 and not met (see its reading).
+
+A model may choose *what* to do, and it may also author a **workflow script**:
+a program run once in the background that decides how many subagents run, with
+which prompts, in which order and under which phase titles. The runtime
+(`WorkflowRuntime`, `docs/sdk/workflows.md`) schedules them. A workflow's
+agents are not subagent rows and not separate notifications; the `Agent` tool
+stays the way a model starts one subagent.
+
+### Trust model
+
+1. **The script is untrusted model input**, exactly like a `bash` command
+   line. It is never evaluated in the host's Node process.
+2. **Confinement is the `run_code` interpreter**, not a new one. The script
+   runs in a fresh QuickJS WASM interpreter in a worker thread
+   (`execution/code-runtime`, `WorkerCodeRuntime`): no filesystem, network,
+   process, module loading or host timers; JSON-only crossings; a memory
+   ceiling; source and value size limits; a CPU interrupt on synchronous
+   loops. A workflow is a second *bridge* on that surface, not a second
+   interpreter. The workflow bridge differs in one respect: it bounds
+   interpreter CPU time (per synchronous stretch and in total) instead of the
+   run's wall clock while the script awaits its agents, because agents take
+   minutes.
+3. **One capability: `agent()`.** The bridge admits exactly one host call,
+   `agent`. It starts a subagent through the host's own delegation path (the
+   same permission mode and rules, sandbox, tool sets, accounting and
+   cancellation as the `Agent` tool), so a script cannot widen a grant, pick a
+   tool set the `Agent` tool could not, run a command or read a file. Prompts
+   are data. `parallel`, `pipeline`, `phase`, `log`, `args` and `budget` live
+   inside the interpreter. The host re-validates every call; the in-interpreter
+   prelude is convenience, never enforcement.
+4. **Review before it runs.** The host (WF2, the CLI tool) shows the script's
+   `meta`, the agent cap and the script text, and the operator approves once,
+   unless the session is in bypass. Headless sessions with no reviewer refuse
+   it unless in bypass.
+5. **Opt-in offering.** The tool is offered only when the operator asked for
+   orchestration (hypermode, the word "workflow", or a slash command or skill).
+6. **Limits.** Concurrent agents `min(8, cpus - 2)` (at most 16); agents per
+   run 200 (at most 1000); script source 256 KiB; interpreter memory 64 MiB;
+   one bridge value 1 MiB; an optional token budget that stops new agents;
+   all with plain errors.
+7. **Audit.** Every run is journaled: the script and its sha256, `meta`,
+   `args`, one record per `agent()` request and outcome, phase announcements,
+   `log()` lines and the final result. Each agent keeps its own transcript.
+
+Not in v1, each a later and separate decision: nested `workflow()`, worktree
+isolation, resume from a journal, saved or named workflows.
+
+### The measured gap (WF3, 2026-10-18)
+
+Same two tasks three ways on small fixture repos (a fresh git repo per run, a
+checker script for correctness): **2 phases x 3 agents** (scan three packages
+for a seeded defect, then fix each; the checker runs the three self-tests and
+requires that nothing but the three `index.js` files changed) and a **10-item
+pipeline** (extract, then write a derived file per item; the checker verifies
+all ten JSON files). Ways: (a) one CLI parent fanning out with labelled `Agent`
+calls (the prompt never says "workflow"), (b) concurrent `create_task` through
+`SupervisorAgent` and `AgentManager` from the SDK, (c) the `workflow` tool
+(`namzu exec --permission-mode auto`, prompt says "use a workflow").
+
+**Real model**, `space-bunny-free` on the keyless Zen free route (every request
+went to `opencode.ai/inference/v1/chat/completions` from an `env -i` process
+with no credential, and none returned a non-200 in the rows below). Frozen
+build `d8a7e2f23`. Median (min-max) over the reps that finished:
+
+| Task | Way | Reps | Parent requests | Parent tokens | Child requests | Child tokens | Wall time | Correct |
+| --- | --- | --- | --- | --- | --- | --- | --- | --- |
+| 2 phases x 3 agents | (a) `Agent` fan-out | 2 | 7 (7-7) | 117,761 (116,263-119,259) | 23 (23-23) | 181,040 (174,347-187,732) | 60 s (57-62) | 2/2 |
+| 2 phases x 3 agents | (b) `create_task` | 2 | 6 (5-6) | 34,428 (28,171-40,685) | 31 (29-32) | 153,850 (142,475-165,224) | 46 s (43-49) | 2/2 |
+| 2 phases x 3 agents | (c) workflow | 2 | 9 (7-11) | 150,984 (111,614-190,354) | 20 (19-21) | 152,263 (147,307-157,219) | 51 s (45-56) | 2/2 |
+| 10-item pipeline | (a) `Agent` fan-out | 2 | 9 (7-11) | 188,078 (150,833-225,323) | 56 (46-65) | 426,912 (352,653-501,170) | 62 s (56-67) | 2/2 |
+| 10-item pipeline | (b) `create_task` | 2 | 8 (7-9) | 69,678 (62,780-76,575) | 76 (70-82) | 356,317 (322,126-390,507) | 83 s (77-88) | 2/2 |
+| 10-item pipeline | (c) workflow | 1 | 26 | 604,756 | 291 | 2,348,135 | 213 s | 1/1 |
+
+Not measured: a second (c) rep of the 10-item pipeline. It was rate limited
+mid-run (Zen answered 429 with "retry delay at least 20 hours" for every free
+model, so no further real-model run was possible that day) and is excluded, not
+counted as a failure.
+
+**Scripted model**, same rows, deterministic (the model emits every call of a
+stage in one response; tokens are request bytes / 4, so compare ways, not
+absolutes): the parent takes **3 requests in every way** for both tasks, and
+the fan-out is the same (6 children, 15 child requests; 20 children, 40 child
+requests). `Agent` and `create_task` parents spend 41.8k and 44.7k estimated
+tokens (CLI parent: a 27-tool prefix of about 12k tokens per request); the workflow
+parent 43.7k and 43.9k; the `SupervisorAgent` harness parent 9.1k and 14.7k
+because it carries no CLI system prompt or builtin tools, which is a property of
+the harness and not of `create_task`.
+
+Sources: parent and child request counts and tokens are summed from the
+`message_completed` records of the root session JSONL and of
+`<session>/subagents/*.jsonl` (cross-checked against a fetch-recording
+`--require` hook: parent + child requests equalled the hook's count of chat
+requests in every CLI run); for (b) from the `SupervisorAgent` result and the
+same hook (parent = requests offering `create_task`). Wall time is the process's
+own, start to exit.
+
+**Reading.** There is no measured gap in the workflow's favour, and on this
+model it lost the larger task.
+
+- The two-phase task is a tie. Parent requests (7, 6, 9) and wall time (60, 46,
+  51 s) are within each other's range, every run was correct, and the workflow
+  parent spent as many or more tokens than the `Agent` parent. The parent's cost
+  is the request prefix times the number of requests, and a model offered
+  `workflow` still explored first, kept a task list and verified afterwards, as
+  the `Agent` parent did.
+- With a model that batches the calls of a stage into one response, a fan-out
+  needs no more parent requests than a workflow (3 and 3), so the workflow does
+  not save requests on a fixed two-stage shape. What a workflow could still
+  buy is not exercised here: children returned one line each, so the parent
+  context never grew, and there was no failure to repair mid-run. Concurrency
+  does not separate them either: the `Agent` parent also ran at most 8 children
+  at once (measured from the child sessions' timestamps).
+- The 10-item pipeline run took 5 workflow runs. The model's script misused
+  `pipeline` (first argument not an array, though the tool description gives the
+  signature), asked children for schema-validated JSON that 4 of 10 did not
+  produce, and passed `args.ids` as numbers while believing they were strings, so
+  its padded file names came out wrong. Each repair re-ran the work, which is why
+  child requests and tokens are 5x and 6x the `Agent` way. Whether a stronger
+  model scripts it in one run is not measured.
+- Caveat on (b): the harness parent has no CLI prompt, so its parent-token
+  column is not comparable to (a) and (c).
+- Caveat on scale: two reps, one model, two fixtures. The ranges overlap for
+  every comparison except the pipeline's workflow row.
+
+If a later change reverses this again, replace this section rather than
+adding to it: two stances in one file is how the first one got lost.
 
 ## Working here
 

package/src/execution/code-runtime/types.ts

@@ -83,11 +83,47 @@ export interface RunCodeOptions {
 	 */
 	readonly maxOutputBytes: number
 	readonly signal?: AbortSignal
+	/**
+	 * Replace the single wall-clock interrupt with a CPU budget.
+	 *
+	 * By default `timeoutMs` bounds synchronous interpreter execution as well
+	 * as the whole run, so a program waiting on slow host calls is stopped at
+	 * the same deadline as one spinning in a loop. A host that legitimately
+	 * awaits long host operations (a workflow awaiting subagents) sets this:
+	 * the interpreter is then interrupted when ONE synchronous slice (the time
+	 * between entering the interpreter and handing control back) exceeds
+	 * `sliceMs`, or all slices together exceed `totalMs`. Time spent awaiting
+	 * the host is not counted. `timeoutMs` still bounds the run's wall clock.
+	 */
+	readonly cpuLimits?: { readonly sliceMs: number; readonly totalMs: number }
+	/**
+	 * Called with each line the program prints, in order, as it is printed and
+	 * within `maxOutputBytes`. A line is data, not a capability: the callback
+	 * must treat it as untrusted text.
+	 */
+	readonly onOutput?: (line: string) => void
+}
+
+export interface CodeFrame {
+	readonly line: number
+	readonly column: number
 }
 
 export type CodeRunOutcome =
 	| { readonly status: 'completed'; readonly result: unknown }
-	| { readonly status: 'failed'; readonly error: string }
+	| {
+			readonly status: 'failed'
+			readonly error: string
+			/** The thrown value's `name`, when it was an error object. */
+			readonly errorName?: string
+			/**
+			 * Where the interpreter says the program failed: innermost first, line and
+			 * column counted in the submitted `source` (1-based). Absent when the
+			 * interpreter gave no location (a non-error was thrown, or the failure was
+			 * not in the program).
+			 */
+			readonly frames?: readonly CodeFrame[]
+	  }
 	| { readonly status: 'timed-out' }
 	| { readonly status: 'cancelled' }