@nexus-ai-nexoralabs/cli 0.1.0

package/dist/tools/adapters/terminalCommandPolicy.d.ts

@@ -0,0 +1,44 @@
+/**
+ * NEXUS AI — P6-C: Terminal Command Policy Engine
+ *
+ * Deterministic allowlist-based policy for validating terminal commands.
+ *
+ * SECURITY PRINCIPLES:
+ *  - Default is DENY. Only explicitly allowlisted commands may execute.
+ *  - No shell interpreters (cmd, powershell, bash, sh) are ever permitted.
+ *  - Shell chaining operators (&&, ||, ;, |, >, >>, <, 2>, &, $) are rejected.
+ *  - Destructive and network commands are permanently blocked.
+ *  - Each command/argument pair is validated, not just the command name.
+ *  - Policy is extensible: add entries to ALLOWED_COMMANDS.
+ */
+import type { CommandPolicyResult, TerminalExecuteParams } from './terminalTypes.js';
+import { LogLevel } from '../../common/logger.js';
+export interface AllowedCommandEntry {
+    /** Command executable name (lowercase). */
+    command: string;
+    /** If set, only these subcommands/args are permitted. null means no per-arg restriction. */
+    allowedSubcommands?: ReadonlySet<string> | null;
+    /** Patterns that are blocked in the args for this command. */
+    blockedArgPatterns?: ReadonlyArray<RegExp>;
+    /** Risk classification. */
+    riskLevel: 'safe' | 'elevated';
+    description: string;
+}
+export declare class TerminalCommandPolicy {
+    private logger;
+    constructor(logLevel?: LogLevel);
+    /**
+     * Evaluate whether a command invocation is permitted.
+     *
+     * @param params The structured terminal execute params.
+     * @returns Deterministic CommandPolicyResult.
+     */
+    evaluate(params: TerminalExecuteParams): CommandPolicyResult;
+    /**
+     * Returns the list of all allowed command names.
+     */
+    getAllowedCommands(): string[];
+    private deny;
+    private sanitizeForLog;
+}
+//# sourceMappingURL=terminalCommandPolicy.d.ts.map

package/dist/tools/adapters/terminalCommandPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalCommandPolicy.d.ts","sourceRoot":"","sources":["../../../src/tools/adapters/terminalCommandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAU,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AA0G1D,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAChD,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,2BAA2B;IAC3B,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AA6KD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAS;gBAEX,QAAQ,GAAE,QAAiB;IAIvC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,mBAAmB;IAgJ5D;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,cAAc;CAIvB"}

package/dist/tools/adapters/terminalCommandPolicy.js

@@ -0,0 +1,422 @@
+/**
+ * NEXUS AI — P6-C: Terminal Command Policy Engine
+ *
+ * Deterministic allowlist-based policy for validating terminal commands.
+ *
+ * SECURITY PRINCIPLES:
+ *  - Default is DENY. Only explicitly allowlisted commands may execute.
+ *  - No shell interpreters (cmd, powershell, bash, sh) are ever permitted.
+ *  - Shell chaining operators (&&, ||, ;, |, >, >>, <, 2>, &, $) are rejected.
+ *  - Destructive and network commands are permanently blocked.
+ *  - Each command/argument pair is validated, not just the command name.
+ *  - Policy is extensible: add entries to ALLOWED_COMMANDS.
+ */
+import { Logger } from '../../common/logger.js';
+// ---------------------------------------------------------------------------
+// Shell Operator Detection
+// ---------------------------------------------------------------------------
+/**
+ * Shell operators that indicate an attempt at shell chaining or injection.
+ * Primary defense is non-shell spawn (no shell: true). This is a secondary check.
+ */
+const SHELL_OPERATOR_PATTERNS = [
+    /&&/,
+    /\|\|/,
+    /(?<![a-zA-Z0-9])[;](?![a-zA-Z0-9])/, // standalone semicolons
+    /(?<![a-zA-Z0-9])\|(?!\|)/, // single pipe (not ||, already caught)
+    />/,
+    />>/,
+    /<(?!<)/,
+    /2>/,
+    /2>>/,
+    /(?<![a-zA-Z0-9])&(?!&)/, // single & (background)
+    /\$\(/, // command substitution $(...)
+    /`[^`]+`/, // backtick substitution
+    /%COMSPEC%/i,
+    /%SystemRoot%/i,
+    /\bpowershell\b/i,
+    /\bcmd\.exe\b/i,
+    /\bcmd\b/i,
+    /\bbash\b/i,
+    /\bsh\b/i,
+    /\bzsh\b/i,
+    /\/c\b/i,
+    /-[Cc]ommand\b/,
+    /-EncodedCommand\b/i,
+];
+/**
+ * Commands that are permanently blocked regardless of arguments.
+ * These represent shell interpreters, destructive utilities, and network tools.
+ */
+const PERMANENTLY_BLOCKED_COMMANDS = new Set([
+    // Shell interpreters — primary threat
+    'cmd', 'cmd.exe', 'powershell', 'powershell.exe', 'pwsh', 'pwsh.exe',
+    'bash', 'bash.exe', 'sh', 'sh.exe', 'zsh', 'zsh.exe', 'fish', 'fish.exe',
+    'wscript', 'cscript', 'mshta',
+    // Destructive filesystem commands
+    'rm', 'rmdir', 'del', 'deltree', 'erase', 'format', 'rd',
+    'mkfs', 'fdisk', 'diskpart',
+    // System control
+    'shutdown', 'reboot', 'halt', 'init', 'systemctl', 'service',
+    'taskkill', 'tasklist', 'wmic',
+    'reg', 'regedit', 'regedt32',
+    'net', 'netsh', 'sc',
+    'runas', 'sudo', 'su',
+    'attrib', 'icacls', 'cacls', 'takeown', 'chmod', 'chown',
+    // Network tools
+    'curl', 'wget', 'ssh', 'scp', 'sftp', 'ftp', 'telnet',
+    'ping', 'tracert', 'traceroute', 'nslookup', 'dig',
+    'netstat', 'ipconfig', 'ifconfig', 'arp', 'route',
+    'nc', 'ncat', 'socat', 'openssl',
+    // Package installation (network)
+    'pip', 'pip3', 'pip2',
+    'gem', 'bundle',
+    'cargo', 'go',
+    'composer',
+    'apt', 'apt-get', 'yum', 'dnf', 'pacman', 'brew',
+    'choco', 'scoop', 'winget',
+    // Compilation/build from arbitrary sources
+    'make', 'cmake', 'msbuild', 'gradle', 'mvn', 'ant',
+    // Virtualization/containers
+    'docker', 'podman', 'kubectl', 'helm',
+    'vagrant', 'virtualbox',
+]);
+// ---------------------------------------------------------------------------
+// Argument Blocklist Patterns
+// ---------------------------------------------------------------------------
+/**
+ * Patterns that are never allowed in arguments regardless of command.
+ * Primarily targets embedded shell sequences or null bytes.
+ */
+const BLOCKED_ARG_PATTERNS = [
+    /\0/, // Null byte
+    /&&/,
+    /\|\|/,
+    /`[^`]*`/, // Backtick substitution
+    /\$\(/, // Command substitution
+    /%COMSPEC%/i,
+    /\bpowershell\b/i,
+    /\bcmd\.exe\b/i,
+    /\/c\s+/i, // /c flag (cmd.exe)
+    /-[Cc]ommand\s*/, // PowerShell -Command
+    /-EncodedCommand\b/i, // PowerShell -EncodedCommand
+];
+/**
+ * The canonical allowlist. Only commands listed here may execute.
+ *
+ * POLICY:
+ *  - "safe"     → auto-approvable read/query operations
+ *  - "elevated" → write/modify operations (still require approval via P5 pipeline)
+ */
+const ALLOWED_COMMANDS = [
+    // ---------------------------------------------------------------------------
+    // node
+    // ---------------------------------------------------------------------------
+    {
+        command: 'node',
+        allowedSubcommands: null, // validated at arg level below
+        blockedArgPatterns: [
+            /^-e$/i, // node -e "<code>" — arbitrary code execution
+            /^--eval$/i,
+            /^-p$/i, // node -p "<code>"
+            /^--print$/i,
+        ],
+        riskLevel: 'elevated',
+        description: 'Node.js runtime for version checks and safe script execution',
+    },
+    // ---------------------------------------------------------------------------
+    // npm
+    // ---------------------------------------------------------------------------
+    {
+        command: 'npm',
+        allowedSubcommands: new Set([
+            'test', 'run', 'build', 'lint', 'typecheck',
+            '--version', 'version', '-v',
+            'install', // allowed but flagged elevated
+        ]),
+        blockedArgPatterns: [
+            /^publish$/i,
+            /^unpublish$/i,
+            /^uninstall$/i,
+            /^remove$/i,
+            /^rm$/i,
+            /^cache$/i,
+            /^exec$/i,
+            /^x$/i, // npm x = npx shorthand for arbitrary package exec
+            /^fund$/i,
+            /^pack$/i,
+            /^deprecate$/i,
+            /^logout$/i,
+            /^adduser$/i,
+            /^whoami$/i,
+            /^token$/i,
+            /^audit\s+fix$/i,
+        ],
+        riskLevel: 'elevated',
+        description: 'npm for running defined project scripts (test, build, lint, typecheck)',
+    },
+    // ---------------------------------------------------------------------------
+    // npx
+    // ---------------------------------------------------------------------------
+    {
+        command: 'npx',
+        allowedSubcommands: new Set([
+            'tsc', // TypeScript compiler
+        ]),
+        riskLevel: 'elevated',
+        description: 'npx limited to tsc (TypeScript compiler) only',
+    },
+    // ---------------------------------------------------------------------------
+    // git (read-only operations only)
+    // ---------------------------------------------------------------------------
+    {
+        command: 'git',
+        allowedSubcommands: new Set([
+            'status',
+            'diff',
+            'log',
+            'show',
+            'branch',
+            '--version',
+            'version',
+            '-v',
+            '--no-pager', // git --no-pager <subcommand> — safe prefix
+        ]),
+        blockedArgPatterns: [
+            /^push$/i,
+            /^reset$/i,
+            /^clean$/i,
+            /^checkout$/i,
+            /^restore$/i,
+            /^rebase$/i,
+            /^merge$/i,
+            /^commit$/i,
+            /^tag$/i,
+            /^stash$/i,
+            /^bisect$/i,
+            /^cherry-pick$/i,
+            /^revert$/i,
+            /^am$/i,
+            /^apply$/i,
+            /^fetch$/i,
+            /^pull$/i,
+            /^clone$/i,
+            /^submodule$/i,
+            /^config$/i,
+            /^remote$/i,
+            /--force/i,
+            /--hard/i,
+            /--soft/i,
+            /--mixed/i,
+        ],
+        riskLevel: 'safe',
+        description: 'git for read-only status, diff, log, and branch inspection',
+    },
+    // ---------------------------------------------------------------------------
+    // python / python3
+    // ---------------------------------------------------------------------------
+    {
+        command: 'python',
+        allowedSubcommands: null,
+        blockedArgPatterns: [
+            /^-c$/i, // python -c "<code>" — arbitrary code execution
+            /^-m\s*pip/i, // python -m pip — package installation
+        ],
+        riskLevel: 'elevated',
+        description: 'Python runtime for version checks and safe script execution',
+    },
+    {
+        command: 'python3',
+        allowedSubcommands: null,
+        blockedArgPatterns: [
+            /^-c$/i,
+            /^-m\s*pip/i,
+        ],
+        riskLevel: 'elevated',
+        description: 'Python3 runtime for version checks and safe script execution',
+    },
+    // ---------------------------------------------------------------------------
+    // pytest
+    // ---------------------------------------------------------------------------
+    {
+        command: 'pytest',
+        allowedSubcommands: null,
+        blockedArgPatterns: [],
+        riskLevel: 'elevated',
+        description: 'pytest test runner for Python projects',
+    },
+    // ---------------------------------------------------------------------------
+    // tsc (TypeScript compiler)
+    // ---------------------------------------------------------------------------
+    {
+        command: 'tsc',
+        allowedSubcommands: null,
+        blockedArgPatterns: [],
+        riskLevel: 'elevated',
+        description: 'TypeScript compiler for type-checking and compilation',
+    },
+];
+// Build lookup map for O(1) access
+const ALLOWED_COMMAND_MAP = new Map(ALLOWED_COMMANDS.map((entry) => [entry.command.toLowerCase(), entry]));
+// ---------------------------------------------------------------------------
+// TerminalCommandPolicy Class
+// ---------------------------------------------------------------------------
+export class TerminalCommandPolicy {
+    logger;
+    constructor(logLevel = 'info') {
+        this.logger = new Logger('TerminalCommandPolicy', logLevel);
+    }
+    /**
+     * Evaluate whether a command invocation is permitted.
+     *
+     * @param params The structured terminal execute params.
+     * @returns Deterministic CommandPolicyResult.
+     */
+    evaluate(params) {
+        // 1. Basic structural validation
+        if (!params || typeof params !== 'object') {
+            return this.deny('INVALID_REQUEST', 'Terminal execute params must be a structured object.', 'blocked');
+        }
+        if (!params.command || typeof params.command !== 'string' || params.command.trim() === '') {
+            return this.deny('INVALID_REQUEST', 'Terminal execute params must specify a non-empty command string.', 'blocked');
+        }
+        if (!Array.isArray(params.args)) {
+            return this.deny('INVALID_REQUEST', 'Terminal execute params.args must be an array.', 'blocked');
+        }
+        // 2. Null byte check on command
+        if (params.command.includes('\0')) {
+            return this.deny('INVALID_REQUEST', 'Command contains a null byte character.', 'blocked');
+        }
+        const commandLower = params.command.trim().toLowerCase();
+        // 3. Permanently blocked commands check
+        if (PERMANENTLY_BLOCKED_COMMANDS.has(commandLower)) {
+            this.logger.warn(`Command policy: permanently blocked command rejected`, {
+                command: params.command,
+            });
+            return this.deny('COMMAND_NOT_ALLOWED', `Command '${params.command}' is permanently blocked by security policy.`, 'blocked');
+        }
+        // 4. Shell operator check on command itself
+        for (const pattern of SHELL_OPERATOR_PATTERNS) {
+            if (pattern.test(params.command)) {
+                this.logger.warn(`Command policy: shell operator detected in command`, {
+                    command: params.command,
+                    pattern: pattern.toString(),
+                });
+                return this.deny('INVALID_COMMAND_POLICY', `Command '${params.command}' contains a shell operator or injection pattern.`, 'blocked');
+            }
+        }
+        // 5. Allowlist check
+        const entry = ALLOWED_COMMAND_MAP.get(commandLower);
+        if (!entry) {
+            this.logger.warn(`Command policy: command not in allowlist`, {
+                command: params.command,
+            });
+            return this.deny('COMMAND_NOT_ALLOWED', `Command '${params.command}' is not in the terminal execution allowlist.`, 'blocked');
+        }
+        // 6. Validate each argument
+        for (const arg of params.args) {
+            if (typeof arg !== 'string') {
+                return this.deny('INVALID_REQUEST', 'All args must be strings.', 'blocked');
+            }
+            // Null byte in arg
+            if (arg.includes('\0')) {
+                return this.deny('INVALID_REQUEST', `Argument contains a null byte character.`, 'blocked');
+            }
+            // Global shell operator patterns in args
+            for (const pattern of SHELL_OPERATOR_PATTERNS) {
+                if (pattern.test(arg)) {
+                    this.logger.warn(`Command policy: shell operator detected in argument`, {
+                        command: params.command,
+                        arg,
+                        pattern: pattern.toString(),
+                    });
+                    return this.deny('INVALID_COMMAND_POLICY', `Argument '${this.sanitizeForLog(arg)}' contains a shell operator or injection pattern.`, 'blocked');
+                }
+            }
+            // Global blocked arg patterns
+            for (const pattern of BLOCKED_ARG_PATTERNS) {
+                if (pattern.test(arg)) {
+                    return this.deny('INVALID_COMMAND_POLICY', `Argument '${this.sanitizeForLog(arg)}' contains a blocked pattern.`, 'blocked');
+                }
+            }
+            // Per-command blocked arg patterns
+            if (entry.blockedArgPatterns) {
+                for (const pattern of entry.blockedArgPatterns) {
+                    if (pattern.test(arg)) {
+                        this.logger.warn(`Command policy: blocked argument pattern matched`, {
+                            command: params.command,
+                            arg,
+                            pattern: pattern.toString(),
+                        });
+                        return this.deny('COMMAND_NOT_ALLOWED', `Argument '${this.sanitizeForLog(arg)}' is not permitted for command '${params.command}'.`, 'blocked');
+                    }
+                }
+            }
+        }
+        // 7. Subcommand validation (if entry has restricted subcommand set)
+        if (entry.allowedSubcommands !== null && entry.allowedSubcommands !== undefined) {
+            // Find the first "subcommand" arg (first non-flag arg)
+            const firstArg = params.args[0];
+            if (!firstArg) {
+                // No subcommand provided — may be valid (e.g. --version) — allow
+            }
+            else {
+                const firstArgLower = firstArg.toLowerCase();
+                if (!entry.allowedSubcommands.has(firstArgLower) && !firstArgLower.startsWith('-')) {
+                    this.logger.warn(`Command policy: subcommand not in allowlist`, {
+                        command: params.command,
+                        subcommand: firstArg,
+                    });
+                    return this.deny('COMMAND_NOT_ALLOWED', `Subcommand '${firstArg}' is not permitted for '${params.command}'.`, 'blocked');
+                }
+            }
+        }
+        // 8. Git-specific: check all args for blocked git subcommands
+        if (commandLower === 'git' && entry.blockedArgPatterns) {
+            for (const arg of params.args) {
+                for (const pattern of entry.blockedArgPatterns) {
+                    if (pattern.test(arg)) {
+                        this.logger.warn(`Command policy: blocked git argument`, {
+                            command: 'git',
+                            arg,
+                        });
+                        return this.deny('COMMAND_NOT_ALLOWED', `git argument '${this.sanitizeForLog(arg)}' is blocked by security policy (destructive git operations are not permitted).`, 'blocked');
+                    }
+                }
+            }
+        }
+        // All checks passed
+        this.logger.info(`Command policy: ALLOWED`, {
+            command: params.command,
+            riskLevel: entry.riskLevel,
+            argCount: params.args.length,
+        });
+        return {
+            allowed: true,
+            decision: 'ALLOWED',
+            reason: `Command '${params.command}' is permitted by the terminal execution policy.`,
+            riskLevel: entry.riskLevel,
+            resolvedCommand: params.command.trim(),
+            resolvedArgs: [...params.args],
+        };
+    }
+    /**
+     * Returns the list of all allowed command names.
+     */
+    getAllowedCommands() {
+        return ALLOWED_COMMANDS.map((e) => e.command);
+    }
+    deny(decision, reason, riskLevel) {
+        return {
+            allowed: false,
+            decision,
+            reason,
+            riskLevel,
+        };
+    }
+    sanitizeForLog(arg) {
+        // Truncate and remove control characters for safe logging
+        return arg.slice(0, 80).replace(/[\x00-\x1f\x7f]/g, '?');
+    }
+}
+//# sourceMappingURL=terminalCommandPolicy.js.map

package/dist/tools/adapters/terminalCommandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalCommandPolicy.js","sourceRoot":"","sources":["../../../src/tools/adapters/terminalCommandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,MAAM,EAAY,MAAM,wBAAwB,CAAC;AAE1D,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,uBAAuB,GAA0B;IACrD,IAAI;IACJ,MAAM;IACN,oCAAoC,EAAG,wBAAwB;IAC/D,0BAA0B,EAAe,uCAAuC;IAChF,GAAG;IACH,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,KAAK;IACL,wBAAwB,EAAgB,wBAAwB;IAChE,MAAM,EAAmC,8BAA8B;IACvE,SAAS,EAA+B,wBAAwB;IAChE,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,WAAW;IACX,SAAS;IACT,UAAU;IACV,QAAQ;IACR,eAAe;IACf,oBAAoB;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,sCAAsC;IACtC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU;IACpE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU;IACxE,SAAS,EAAE,SAAS,EAAE,OAAO;IAE7B,kCAAkC;IAClC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI;IACxD,MAAM,EAAE,OAAO,EAAE,UAAU;IAE3B,iBAAiB;IACjB,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS;IAC5D,UAAU,EAAE,UAAU,EAAE,MAAM;IAC9B,KAAK,EAAE,SAAS,EAAE,UAAU;IAC5B,KAAK,EAAE,OAAO,EAAE,IAAI;IACpB,OAAO,EAAE,MAAM,EAAE,IAAI;IACrB,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO;IAExD,gBAAgB;IAChB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ;IACrD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK;IAClD,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;IACjD,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAEhC,iCAAiC;IACjC,KAAK,EAAE,MAAM,EAAE,MAAM;IACrB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,IAAI;IACb,UAAU;IACV,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;IAChD,OAAO,EAAE,OAAO,EAAE,QAAQ;IAE1B,2CAA2C;IAC3C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK;IAElD,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;IACrC,SAAS,EAAE,YAAY;CACxB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,oBAAoB,GAA0B;IAClD,IAAI,EAAsB,YAAY;IACtC,IAAI;IACJ,MAAM;IACN,SAAS,EAAgB,wBAAwB;IACjD,MAAM,EAAmB,uBAAuB;IAChD,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,SAAS,EAAgB,oBAAoB;IAC7C,gBAAgB,EAAS,sBAAsB;IAC/C,oBAAoB,EAAK,6BAA6B;CACvD,CAAC;AAkBF;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAuC;IAC3D,8EAA8E;IAC9E,OAAO;IACP,8EAA8E;IAC9E;QACE,OAAO,EAAE,MAAM;QACf,kBAAkB,EAAE,IAAI,EAAE,+BAA+B;QACzD,kBAAkB,EAAE;YAClB,OAAO,EAAY,8CAA8C;YACjE,WAAW;YACX,OAAO,EAAY,mBAAmB;YACtC,YAAY;SACb;QACD,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,8DAA8D;KAC5E;IAED,8EAA8E;IAC9E,MAAM;IACN,8EAA8E;IAC9E;QACE,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI,GAAG,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW;YAC3C,WAAW,EAAE,SAAS,EAAE,IAAI;YAC5B,SAAS,EAAG,+BAA+B;SAC5C,CAAC;QACF,kBAAkB,EAAE;YAClB,YAAY;YACZ,cAAc;YACd,cAAc;YACd,WAAW;YACX,OAAO;YACP,UAAU;YACV,SAAS;YACT,MAAM,EAAY,mDAAmD;YACrE,SAAS;YACT,SAAS;YACT,cAAc;YACd,WAAW;YACX,YAAY;YACZ,WAAW;YACX,UAAU;YACV,gBAAgB;SACjB;QACD,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,wEAAwE;KACtF;IAED,8EAA8E;IAC9E,MAAM;IACN,8EAA8E;IAC9E;QACE,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI,GAAG,CAAC;YAC1B,KAAK,EAAa,sBAAsB;SACzC,CAAC;QACF,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,+CAA+C;KAC7D;IAED,8EAA8E;IAC9E,kCAAkC;IAClC,8EAA8E;IAC9E;QACE,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI,GAAG,CAAC;YAC1B,QAAQ;YACR,MAAM;YACN,KAAK;YACL,MAAM;YACN,QAAQ;YACR,WAAW;YACX,SAAS;YACT,IAAI;YACJ,YAAY,EAAI,4CAA4C;SAC7D,CAAC;QACF,kBAAkB,EAAE;YAClB,SAAS;YACT,UAAU;YACV,UAAU;YACV,aAAa;YACb,YAAY;YACZ,WAAW;YACX,UAAU;YACV,WAAW;YACX,QAAQ;YACR,UAAU;YACV,WAAW;YACX,gBAAgB;YAChB,WAAW;YACX,OAAO;YACP,UAAU;YACV,UAAU;YACV,SAAS;YACT,UAAU;YACV,cAAc;YACd,WAAW;YACX,WAAW;YACX,UAAU;YACV,SAAS;YACT,SAAS;YACT,UAAU;SACX;QACD,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,4DAA4D;KAC1E;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAC9E;QACE,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE;YAClB,OAAO,EAAM,gDAAgD;YAC7D,YAAY,EAAE,uCAAuC;SACtD;QACD,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,OAAO,EAAE,SAAS;QAClB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE;YAClB,OAAO;YACP,YAAY;SACb;QACD,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,8DAA8D;KAC5E;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAC9E;QACE,OAAO,EAAE,QAAQ;QACjB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,EAAE;QACtB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,wCAAwC;KACtD;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAC9E;QACE,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,EAAE;QACtB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,uDAAuD;KACrE;CACF,CAAC;AAEF,mCAAmC;AACnC,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAC3E,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CACtE,CAAC;AAEF,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAS;IAEvB,YAAY,WAAqB,MAAM;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAA6B;QACpC,iCAAiC;QACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,sDAAsD,EAAE,SAAS,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,kEAAkE,EAAE,SAAS,CAAC,CAAC;QACrH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,gDAAgD,EAAE,SAAS,CAAC,CAAC;QACnG,CAAC;QAED,gCAAgC;QAChC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,SAAS,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzD,wCAAwC;QACxC,IAAI,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBACvE,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,YAAY,MAAM,CAAC,OAAO,8CAA8C,EAAE,SAAS,CAAC,CAAC;QAC/H,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBACrE,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;iBAC5B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,MAAM,CAAC,OAAO,mDAAmD,EAAE,SAAS,CAAC,CAAC;YACvI,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,YAAY,MAAM,CAAC,OAAO,+CAA+C,EAAE,SAAS,CAAC,CAAC;QAChI,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;YAC9E,CAAC;YAED,mBAAmB;YACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,0CAA0C,EAAE,SAAS,CAAC,CAAC;YAC7F,CAAC;YAED,yCAAyC;YACzC,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;gBAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;wBACtE,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,GAAG;wBACH,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;qBAC5B,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,aAAa,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,mDAAmD,EAAE,SAAS,CAAC,CAAC;gBAClJ,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,aAAa,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;gBAC9H,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;oBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;4BACnE,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,GAAG;4BACH,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;yBAC5B,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,aAAa,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,OAAO,IAAI,EAAE,SAAS,CAAC,CAAC;oBACjJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChF,uDAAuD;YACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iEAAiE;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;wBAC9D,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,UAAU,EAAE,QAAQ;qBACrB,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,eAAe,QAAQ,2BAA2B,MAAM,CAAC,OAAO,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC3H,CAAC;YACH,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,YAAY,KAAK,KAAK,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACvD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;oBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;4BACvD,OAAO,EAAE,KAAK;4BACd,GAAG;yBACJ,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,iFAAiF,EAAE,SAAS,CAAC,CAAC;oBACjL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,YAAY,MAAM,CAAC,OAAO,kDAAkD;YACpF,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;YACtC,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAEO,IAAI,CACV,QAAwG,EACxG,MAAc,EACd,SAAoB;QAEpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,MAAM;YACN,SAAS;SACV,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,0DAA0D;QAC1D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/tools/adapters/terminalTypes.d.ts

@@ -0,0 +1,111 @@
+/**
+ * NEXUS AI — P6-C: Bounded Terminal Execution Types
+ *
+ * Provides normalized data contracts for the terminal_execute tool.
+ *
+ * SECURITY DESIGN:
+ *  - Input is a structured object (NOT a raw shell string).
+ *  - Command and args are always separate fields.
+ *  - No shell interpretation is performed at any layer.
+ */
+/**
+ * Structured request for the terminal_execute tool.
+ *
+ * DO NOT accept raw shell strings. Command + args are always separate.
+ * This prevents shell injection, chaining, and interpretation.
+ */
+export interface TerminalExecuteParams {
+    /** The executable to run (e.g. "npm", "git", "node"). Must be in the allowlist. */
+    command: string;
+    /** Arguments to pass to the command. Each arg is a separate string - no chaining. */
+    args: string[];
+    /**
+     * Working directory for the process.
+     * - Relative paths are resolved against the workspace root.
+     * - Absolute paths must resolve inside the workspace root.
+     * - Defaults to workspace root if omitted or ".".
+     */
+    cwd?: string;
+    /**
+     * Execution timeout in milliseconds.
+     * - Default: 30,000 ms (30 seconds)
+     * - Maximum: 120,000 ms (120 seconds)
+     */
+    timeoutMs?: number;
+    /**
+     * Maximum bytes to buffer for stdout.
+     * - Default: 262,144 bytes (256 KB)
+     * - Maximum: 1,048,576 bytes (1 MB)
+     */
+    maxStdoutBytes?: number;
+    /**
+     * Maximum bytes to buffer for stderr.
+     * - Default: 262,144 bytes (256 KB)
+     * - Maximum: 1,048,576 bytes (1 MB)
+     */
+    maxStderrBytes?: number;
+}
+/**
+ * Normalized result returned by the terminal_execute tool.
+ */
+export interface TerminalExecuteResult {
+    /** True if the process exited with code 0 and no timeout/cancellation occurred. */
+    success: boolean;
+    /** Process exit code. null if terminated by signal or timeout. */
+    exitCode: number | null;
+    /** Signal name that terminated the process (e.g. "SIGTERM"), or null. */
+    signal: string | null;
+    /** Standard output captured from the process (possibly truncated). */
+    stdout: string;
+    /** Standard error captured from the process (possibly truncated). */
+    stderr: string;
+    /** True if stdout was truncated due to output size limits. */
+    stdoutTruncated: boolean;
+    /** True if stderr was truncated due to output size limits. */
+    stderrTruncated: boolean;
+    /** Elapsed time in milliseconds from spawn to process exit/timeout. */
+    durationMs: number;
+    /** True if the process was killed due to timeout. */
+    timedOut: boolean;
+    /** True if the process was cancelled via AbortSignal. */
+    cancelled: boolean;
+    /** Error category if execution was blocked or failed. */
+    errorCategory?: TerminalErrorCategory;
+    /** Human-readable error message if execution was blocked or failed. */
+    errorMessage?: string;
+}
+export type CommandPolicyDecision = 'ALLOWED' | 'COMMAND_NOT_ALLOWED' | 'INVALID_REQUEST' | 'PATH_TRAVERSAL_DENIED' | 'INVALID_COMMAND_POLICY';
+/**
+ * Risk classification for a validated command.
+ */
+export type CommandRiskLevel = 'safe' | 'elevated' | 'blocked';
+/**
+ * Result returned by TerminalCommandPolicy.evaluate().
+ */
+export interface CommandPolicyResult {
+    allowed: boolean;
+    decision: CommandPolicyDecision;
+    reason: string;
+    riskLevel: CommandRiskLevel;
+    /** Normalized/resolved command that will be executed. */
+    resolvedCommand?: string;
+    /** Sanitized args (may be identical to input for safe commands). */
+    resolvedArgs?: string[];
+}
+/**
+ * Deterministic error category string union for terminal execution failures.
+ */
+export type TerminalErrorCategory = 'COMMAND_NOT_ALLOWED' | 'INVALID_REQUEST' | 'PATH_TRAVERSAL_DENIED' | 'APPROVAL_REQUIRED' | 'PERMISSION_DENIED' | 'TIMEOUT' | 'PROCESS_ERROR' | 'OUTPUT_LIMIT_EXCEEDED' | 'PROCESS_TERMINATED' | 'INVALID_COMMAND_POLICY';
+export declare const TERMINAL_LIMITS: {
+    /** Default execution timeout in ms. */
+    readonly DEFAULT_TIMEOUT_MS: 30000;
+    /** Maximum execution timeout in ms. */
+    readonly MAX_TIMEOUT_MS: 120000;
+    /** Default stdout/stderr buffer size in bytes (256 KB). */
+    readonly DEFAULT_OUTPUT_BYTES: number;
+    /** Maximum stdout/stderr buffer size in bytes (1 MB). */
+    readonly MAX_OUTPUT_BYTES: number;
+    /** Grace period in ms before SIGKILL after SIGTERM. */
+    readonly KILL_GRACE_MS: 2000;
+};
+//# sourceMappingURL=terminalTypes.d.ts.map

package/dist/tools/adapters/terminalTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalTypes.d.ts","sourceRoot":"","sources":["../../../src/tools/adapters/terminalTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,OAAO,EAAE,OAAO,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,yDAAyD;IACzD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,qBAAqB,GACrB,iBAAiB,GACjB,uBAAuB,GACvB,wBAAwB,CAAC;AAE7B;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;IAC5B,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,qBAAqB,GACrB,iBAAiB,GACjB,uBAAuB,GACvB,mBAAmB,GACnB,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,wBAAwB,CAAC;AAM7B,eAAO,MAAM,eAAe;IAC1B,uCAAuC;;IAEvC,uCAAuC;;IAEvC,2DAA2D;;IAE3D,yDAAyD;;IAEzD,uDAAuD;;CAE/C,CAAC"}

package/dist/tools/adapters/terminalTypes.js

@@ -0,0 +1,26 @@
+/**
+ * NEXUS AI — P6-C: Bounded Terminal Execution Types
+ *
+ * Provides normalized data contracts for the terminal_execute tool.
+ *
+ * SECURITY DESIGN:
+ *  - Input is a structured object (NOT a raw shell string).
+ *  - Command and args are always separate fields.
+ *  - No shell interpretation is performed at any layer.
+ */
+// ---------------------------------------------------------------------------
+// Terminal Execution Limits
+// ---------------------------------------------------------------------------
+export const TERMINAL_LIMITS = {
+    /** Default execution timeout in ms. */
+    DEFAULT_TIMEOUT_MS: 30_000,
+    /** Maximum execution timeout in ms. */
+    MAX_TIMEOUT_MS: 120_000,
+    /** Default stdout/stderr buffer size in bytes (256 KB). */
+    DEFAULT_OUTPUT_BYTES: 256 * 1024,
+    /** Maximum stdout/stderr buffer size in bytes (1 MB). */
+    MAX_OUTPUT_BYTES: 1024 * 1024,
+    /** Grace period in ms before SIGKILL after SIGTERM. */
+    KILL_GRACE_MS: 2_000,
+};
+//# sourceMappingURL=terminalTypes.js.map

package/dist/tools/adapters/terminalTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalTypes.js","sourceRoot":"","sources":["../../../src/tools/adapters/terminalTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA+HH,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,uCAAuC;IACvC,kBAAkB,EAAE,MAAM;IAC1B,uCAAuC;IACvC,cAAc,EAAE,OAAO;IACvB,2DAA2D;IAC3D,oBAAoB,EAAE,GAAG,GAAG,IAAI;IAChC,yDAAyD;IACzD,gBAAgB,EAAE,IAAI,GAAG,IAAI;IAC7B,uDAAuD;IACvD,aAAa,EAAE,KAAK;CACZ,CAAC"}

package/dist/tools/approvalGate.d.ts

@@ -0,0 +1,24 @@
+/**
+ * NEXUS AI — Approval Gate
+ *
+ * Deterministic execution gate positioned immediately before tool execution.
+ * Evaluates human approval status for a given task step.
+ *
+ * Pipeline sequence:
+ *   Plan -> PlanValidator -> PermissionEngine -> ApprovalPolicyEngine -> ApprovalGate -> ToolExecutor
+ *
+ * SECURITY GUARANTEES:
+ *  - Missing, pending, rejected, expired, or cancelled approvals BLOCK execution completely.
+ *  - Approval DOES NOT grant authorization — PermissionEngine remains mandatory.
+ */
+import type { ApprovalRequest, ApprovalGateResult } from './approvalTypes.js';
+import { LogLevel } from '../common/logger.js';
+export declare class ApprovalGate {
+    private logger;
+    constructor(logLevel?: LogLevel);
+    /**
+     * Evaluate whether execution is permitted according to the approval request state.
+     */
+    evaluateGate(approvalRequest: ApprovalRequest | null): ApprovalGateResult;
+}
+//# sourceMappingURL=approvalGate.d.ts.map

package/dist/tools/approvalGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalGate.d.ts","sourceRoot":"","sources":["../../src/tools/approvalGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAU,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEvD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,QAAQ,GAAE,QAAiB;IAIvC;;OAEG;IACH,YAAY,CAAC,eAAe,EAAE,eAAe,GAAG,IAAI,GAAG,kBAAkB;CAyH1E"}