@pentoshi/clai 4.11.7 → 4.11.8

package/dist/tools/shell/exec-attempt.js

@@ -0,0 +1,288 @@
+import { redactSecrets } from "../../llm/provider.js";
+import { augmentedPathEnv } from "../../os/command.js";
+import { safeCwd } from "../../os/cwd.js";
+import { terminateProcessTree } from "../../os/process-tree.js";
+import { resolveShell } from "../shell.js";
+import { benignNoMatchTool, binarySuppressionNotice, DEFAULT_TIMEOUT_MS, launchErrorOutput, redactArtifactInPlace, } from "./internals.js";
+import { chooseStdio, DEFAULT_MAX_CAPTURE_BYTES, DEFAULT_MAX_MODEL_BYTES, openArtifact, OutputDecoder, RingBuffer, takeOverCookedStdin, } from "./capture.js";
+import { spawn } from "node:child_process";
+import { stat } from "node:fs/promises";
+export async function shellExecAttempt(args) {
+    if (args.signal?.aborted) {
+        return { ok: false, output: "Command aborted.", exitCode: 130 };
+    }
+    const cwd = args.cwd ?? safeCwd();
+    try {
+        const cwdStat = await stat(cwd);
+        if (!cwdStat.isDirectory()) {
+            return {
+                ok: false,
+                output: `Command launch error [INVALID_CWD]: working directory is not a directory.\n` +
+                    `cwd=${JSON.stringify(cwd)}\nThe command did not start; correct the shell.exec cwd instead of changing command syntax.`,
+                exitCode: 127,
+            };
+        }
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        return {
+            ok: false,
+            output: `Command launch error [INVALID_CWD]: ${detail}\n` +
+                `cwd=${JSON.stringify(cwd)}\nThe command did not start; correct the shell.exec cwd instead of changing command syntax.`,
+            exitCode: 127,
+        };
+    }
+    const maxModelBytes = args.maxModelBytes ?? DEFAULT_MAX_MODEL_BYTES;
+    const maxCaptureBytes = args.maxCaptureBytes ?? DEFAULT_MAX_CAPTURE_BYTES;
+    const onLimit = args.onLimit ?? "continue";
+    const halfModel = Math.max(512, Math.floor(maxModelBytes / 2));
+    const start = Date.now();
+    const artifact = args.noArtifact
+        ? undefined
+        : await openArtifact(args.command, args.artifactPath);
+    let head = "";
+    const tail = new RingBuffer(halfModel);
+    let bytesRead = 0;
+    const decoder = new OutputDecoder();
+    let bytesDropped = 0;
+    let linesRead = 0;
+    let captureLimitHit = false;
+    return new Promise((resolve) => {
+        const detached = process.platform !== "win32";
+        const stdio = chooseStdio(args.command, args.interactiveStdin);
+        const usingInteractiveStdin = stdio[0] === "inherit";
+        const restoreStdin = usingInteractiveStdin
+            ? takeOverCookedStdin()
+            : () => { };
+        const shell = resolveShell();
+        if (!shell) {
+            restoreStdin();
+            if (artifact)
+                artifact.stream.end();
+            resolve({
+                ok: false,
+                exitCode: 127,
+                output: "No usable command shell was found. shell.exec requires /bin/sh (or $SHELL); use a purpose-built tool where available.",
+            });
+            return;
+        }
+        const child = spawn(args.command, {
+            cwd,
+            detached: detached && !usingInteractiveStdin,
+            shell,
+            stdio,
+            env: { ...process.env, PATH: augmentedPathEnv() },
+        });
+        let aborted = false;
+        let timedOut = false;
+        let timeout;
+        let forceKill;
+        const cleanup = () => {
+            if (timeout)
+                clearTimeout(timeout);
+            if (forceKill)
+                clearTimeout(forceKill);
+            args.signal?.removeEventListener("abort", abort);
+            restoreStdin();
+            if (artifact) {
+                artifact.stream.end();
+            }
+        };
+        const append = (chunk, stream) => {
+            const decoded = decoder.decode(chunk);
+            const text = decoded.text;
+            bytesRead += decoded.bytes;
+            linesRead += text.split("\n").length - 1;
+            if (artifact && !captureLimitHit) {
+                if (bytesRead <= maxCaptureBytes) {
+                    artifact.stream.write(text);
+                }
+                else {
+                    const overflow = bytesRead - maxCaptureBytes;
+                    const allowed = text.length - overflow;
+                    if (allowed > 0)
+                        artifact.stream.write(text.slice(0, allowed));
+                    captureLimitHit = true;
+                    artifact.stream.end();
+                }
+            }
+            if (head.length < halfModel) {
+                const room = halfModel - head.length;
+                head += text.slice(0, room);
+                if (text.length > room)
+                    tail.push(text.slice(room));
+            }
+            else {
+                tail.push(text);
+            }
+            const inMemory = head.length + tail.size();
+            bytesDropped = Math.max(0, bytesRead - inMemory);
+            args.onOutput?.(text, stream);
+            if (captureLimitHit && onLimit === "terminate") {
+                terminate("cap");
+            }
+        };
+        const killChild = (signal) => {
+            if (!child.pid)
+                return;
+            const useGroup = detached && !usingInteractiveStdin;
+            if (!useGroup && process.platform !== "win32") {
+                try {
+                    child.kill(signal);
+                }
+                catch {
+                }
+                return;
+            }
+            terminateProcessTree(child.pid, {
+                signal,
+                ...(useGroup ? { processGroupId: child.pid } : {}),
+            });
+        };
+        const terminate = (reason) => {
+            if (reason === "abort") {
+                if (aborted) {
+                    killChild("SIGKILL");
+                    return;
+                }
+                aborted = true;
+            }
+            if (reason === "timeout")
+                timedOut = true;
+            killChild("SIGTERM");
+            forceKill = setTimeout(() => killChild("SIGKILL"), 500);
+        };
+        const abort = () => terminate("abort");
+        child.stdout?.on("data", (chunk) => append(chunk, "stdout"));
+        child.stderr?.on("data", (chunk) => append(chunk, "stderr"));
+        child.on("error", (error) => {
+            cleanup();
+            if (aborted || args.signal?.aborted) {
+                resolve({ ok: false, output: "Command aborted.", exitCode: 130 });
+            }
+            else {
+                resolve({
+                    ok: false,
+                    exitCode: 127,
+                    output: launchErrorOutput(error, {
+                        shell,
+                        cwd,
+                    }),
+                    launchFailure: {
+                        code: error.code,
+                        shell,
+                        cwd,
+                    },
+                });
+            }
+        });
+        child.on("close", (code) => {
+            cleanup();
+            const stats = {
+                bytesRead,
+                bytesDropped,
+                linesRead,
+                elapsedMs: Date.now() - start,
+                captureLimitHit,
+            };
+            const trimmedTail = tail.toString().trim();
+            const trimmedHead = head.trim();
+            const inMemory = head.length + tail.size();
+            let combined;
+            if (bytesRead === 0) {
+                combined = "";
+            }
+            else if (inMemory >= bytesRead) {
+                combined = (head + tail.toString()).trimEnd();
+            }
+            else {
+                const omittedBytes = bytesRead - inMemory;
+                combined =
+                    `${trimmedHead}\n... (${omittedBytes.toLocaleString()} bytes / ~${linesRead.toLocaleString()} lines truncated — full output in artifact) ...\n${trimmedTail}`.trim();
+            }
+            // Always redact before exposing the bounded text to callers.
+            const output = decoder.isBinary
+                ? binarySuppressionNotice(bytesRead, artifact?.path)
+                : redactSecrets(combined);
+            // Redact the on-disk artifact too so `/output last` and any later
+            const finalize = (result) => {
+                if (artifact) {
+                    // Wait for the artifact write stream to flush, then redact in
+                    const onFlushed = () => {
+                        void redactArtifactInPlace(artifact.path).then(() => resolve(result));
+                    };
+                    if (artifact.stream.writableFinished) {
+                        onFlushed();
+                    }
+                    else {
+                        artifact.stream.once("finish", onFlushed);
+                        artifact.stream.once("error", onFlushed);
+                    }
+                }
+                else {
+                    resolve(result);
+                }
+            };
+            if (aborted || args.signal?.aborted) {
+                finalize({
+                    ok: false,
+                    output: output ? `${output}\nCommand aborted.` : "Command aborted.",
+                    exitCode: 130,
+                    ...(artifact ? { outputPath: artifact.path } : {}),
+                    truncated: bytesRead > inMemory,
+                    stats,
+                });
+                return;
+            }
+            if (timedOut) {
+                finalize({
+                    ok: false,
+                    output: output
+                        ? `${output}\nCommand timed out.`
+                        : "Command timed out.",
+                    exitCode: 124,
+                    ...(artifact ? { outputPath: artifact.path } : {}),
+                    truncated: bytesRead > inMemory,
+                    stats,
+                });
+                return;
+            }
+            if (captureLimitHit) {
+                finalize({
+                    ok: false,
+                    output: output
+                        ? `${output}\nCommand killed after exceeding capture cap of ${maxCaptureBytes.toLocaleString()} bytes.`
+                        : "Command exceeded capture cap.",
+                    exitCode: 137,
+                    ...(artifact ? { outputPath: artifact.path } : {}),
+                    truncated: true,
+                    stats,
+                });
+                return;
+            }
+            const noMatchTool = benignNoMatchTool(args.command, code);
+            const benignNote = (() => {
+                if (!noMatchTool)
+                    return undefined;
+                if (["diff", "diff3", "cmp", "comm"].includes(noMatchTool))
+                    return `files differ`;
+                if (["test", "["].includes(noMatchTool))
+                    return `condition false`;
+                return `no matching lines`;
+            })();
+            finalize({
+                ok: code === 0 || noMatchTool !== undefined,
+                output: noMatchTool
+                    ? `${output ? `${output}\n` : ""}[note: exit=1 from ${noMatchTool} (${benignNote}) — not an error]`
+                    : output,
+                exitCode: code ?? undefined,
+                ...(artifact ? { outputPath: artifact.path } : {}),
+                truncated: bytesRead > inMemory,
+                stats,
+            });
+        });
+        args.signal?.addEventListener("abort", abort, { once: true });
+        timeout = setTimeout(() => terminate("timeout"), args.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    });
+}
+//# sourceMappingURL=exec-attempt.js.map

package/dist/tools/shell/exec-attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-attempt.js","sourceRoot":"","sources":["../../../src/tools/shell/exec-attempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAYxC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAmB;IAEnB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,6EAA6E;oBAC7E,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,6FAA6F;gBACzH,QAAQ,EAAE,GAAG;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,uCAAuC,MAAM,IAAI;gBACjD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,6FAA6F;YACzH,QAAQ,EAAE,GAAG;SACd,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAExD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IACpC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,qBAAqB,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;QACrD,MAAM,YAAY,GAAG,qBAAqB;YACxC,CAAC,CAAC,mBAAmB,EAAE;YACvB,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,YAAY,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,GAAG;gBACb,MAAM,EACJ,uHAAuH;aAC1H,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;YAChC,GAAG;YACH,QAAQ,EAAE,QAAQ,IAAI,CAAC,qBAAqB;YAC5C,KAAK;YACL,KAAK;YACL,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAmC,CAAC;QACxC,IAAI,SAAqC,CAAC;QAE1C,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjD,YAAY,EAAE,CAAC;YACf,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACxB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAA2B,EAAQ,EAAE;YAClE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;YAC3B,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACzC,IAAI,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;gBACjC,IAAI,SAAS,IAAI,eAAe,EAAE,CAAC;oBACjC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAC;oBAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;oBACvC,IAAI,OAAO,GAAG,CAAC;wBAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC/D,eAAe,GAAG,IAAI,CAAC;oBACvB,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9B,IAAI,eAAe,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC/C,SAAS,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,MAAsB,EAAQ,EAAE;YACjD,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO;YACvB,MAAM,QAAQ,GAAG,QAAQ,IAAI,CAAC,qBAAqB,CAAC;YACpD,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;gBACT,CAAC;gBACD,OAAO;YACT,CAAC;YACD,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC9B,MAAM;gBACN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,MAAmC,EAAQ,EAAE;YAC9D,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,IAAI,OAAO,EAAE,CAAC;oBACZ,SAAS,CAAC,SAAS,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,MAAM,KAAK,SAAS;gBAAE,QAAQ,GAAG,IAAI,CAAC;YAC1C,SAAS,CAAC,SAAS,CAAC,CAAC;YACrB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE7C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,GAAG;oBACb,MAAM,EAAE,iBAAiB,CAAC,KAA8B,EAAE;wBACxD,KAAK;wBACL,GAAG;qBACJ,CAAC;oBACF,aAAa,EAAE;wBACb,IAAI,EAAG,KAA+B,CAAC,IAAI;wBAC3C,KAAK;wBACL,GAAG;qBACJ;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,MAAM,KAAK,GAAc;gBACvB,SAAS;gBACT,YAAY;gBACZ,SAAS;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC7B,eAAe;aAChB,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,QAAgB,CAAC;YACrB,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,QAAQ,GAAG,EAAE,CAAC;YAChB,CAAC;iBAAM,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,QAAQ,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;gBAC1C,QAAQ;oBACN,GAAG,WAAW,UAAU,YAAY,CAAC,cAAc,EAAE,aAAa,SAAS,CAAC,cAAc,EAAE,oDAAoD,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YACzK,CAAC;YAED,6DAA6D;YAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;gBAC7B,CAAC,CAAC,uBAAuB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;gBACpD,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAE5B,kEAAkE;YAClE,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAQ,EAAE;gBAC5C,IAAI,QAAQ,EAAE,CAAC;oBACb,8DAA8D;oBAC9D,MAAM,SAAS,GAAG,GAAS,EAAE;wBAC3B,KAAK,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAClD,OAAO,CAAC,MAAM,CAAC,CAChB,CAAC;oBACJ,CAAC,CAAC;oBACF,IAAK,QAAQ,CAAC,MAAsB,CAAC,gBAAgB,EAAE,CAAC;wBACtD,SAAS,EAAE,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAC1C,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpC,QAAQ,CAAC;oBACP,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,kBAAkB;oBACnE,QAAQ,EAAE,GAAG;oBACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,SAAS,EAAE,SAAS,GAAG,QAAQ;oBAC/B,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC;oBACP,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM;wBACZ,CAAC,CAAC,GAAG,MAAM,sBAAsB;wBACjC,CAAC,CAAC,oBAAoB;oBACxB,QAAQ,EAAE,GAAG;oBACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,SAAS,EAAE,SAAS,GAAG,QAAQ;oBAC/B,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,eAAe,EAAE,CAAC;gBACpB,QAAQ,CAAC;oBACP,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAM;wBACZ,CAAC,CAAC,GAAG,MAAM,mDAAmD,eAAe,CAAC,cAAc,EAAE,SAAS;wBACvG,CAAC,CAAC,+BAA+B;oBACnC,QAAQ,EAAE,GAAG;oBACb,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE;gBACvB,IAAI,CAAC,WAAW;oBAAE,OAAO,SAAS,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBACxD,OAAO,cAAc,CAAC;gBACxB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAAE,OAAO,iBAAiB,CAAC;gBAClE,OAAO,mBAAmB,CAAC;YAC7B,CAAC,CAAC,EAAE,CAAC;YACL,QAAQ,CAAC;gBACP,EAAE,EAAE,IAAI,KAAK,CAAC,IAAI,WAAW,KAAK,SAAS;gBAC3C,MAAM,EAAE,WAAW;oBACjB,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,sBAAsB,WAAW,KAAK,UAAU,mBAAmB;oBACnG,CAAC,CAAC,MAAM;gBACV,QAAQ,EAAE,IAAI,IAAI,SAAS;gBAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,SAAS,EAAE,SAAS,GAAG,QAAQ;gBAC/B,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAC1B,IAAI,CAAC,SAAS,IAAI,kBAAkB,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/shell/internals-2.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Re-read a freshly written artifact, run it through the same redactor
+ * the model-facing output uses, and write it back atomically. This is a
+ * defense-in-depth measure: live capture is unavoidable byte-by-byte, so
+ * we redact post-hoc the moment the child closes, before any reader
+ * (user, model, or `/output last`) gets a chance to see the raw bytes.
+ *
+ * Returns whether the artifact was rewritten. Any error is swallowed — a
+ * raw artifact is still better than an inaccessible one, and the model
+ * never receives the unredacted content (that path runs through
+ * redactSecrets() too).
+ */
+/** Skip full-file redaction above this size (avoids multi‑hundred‑MB heap spikes). */
+export declare const MAX_REDACT_IN_MEMORY_BYTES: number;
+export declare const NO_MATCH_EXIT_COMMANDS: Set<string>;
+export declare function finalPipelineStageName(command: string): string | undefined;

package/dist/tools/shell/internals-2.js

@@ -0,0 +1,48 @@
+/**
+ * Re-read a freshly written artifact, run it through the same redactor
+ * the model-facing output uses, and write it back atomically. This is a
+ * defense-in-depth measure: live capture is unavoidable byte-by-byte, so
+ * we redact post-hoc the moment the child closes, before any reader
+ * (user, model, or `/output last`) gets a chance to see the raw bytes.
+ *
+ * Returns whether the artifact was rewritten. Any error is swallowed — a
+ * raw artifact is still better than an inaccessible one, and the model
+ * never receives the unredacted content (that path runs through
+ * redactSecrets() too).
+ */
+/** Skip full-file redaction above this size (avoids multi‑hundred‑MB heap spikes). */
+export const MAX_REDACT_IN_MEMORY_BYTES = 8 * 1024 * 1024;
+export const NO_MATCH_EXIT_COMMANDS = new Set([
+    "grep",
+    "egrep",
+    "fgrep",
+    "zgrep",
+    "rg",
+    "findstr",
+    "ack",
+    "ag",
+    "diff",
+    "diff3",
+    "cmp",
+    "comm",
+    "test",
+    "[",
+]);
+export function finalPipelineStageName(command) {
+    const lastInChain = command.split(/;|&&|\|\|/).pop() ?? "";
+    const lastStage = lastInChain.split("|").pop() ?? "";
+    const tokens = lastStage.trim().split(/\s+/).filter(Boolean);
+    let index = 0;
+    while (index < tokens.length &&
+        (tokens[index] === "sudo" ||
+            tokens[index] === "command" ||
+            tokens[index] === "builtin" ||
+            /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[index]))) {
+        index += 1;
+    }
+    const first = tokens[index];
+    if (!first)
+        return undefined;
+    return first.split("/").pop();
+}
+//# sourceMappingURL=internals-2.js.map

package/dist/tools/shell/internals-2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internals-2.js","sourceRoot":"","sources":["../../../src/tools/shell/internals-2.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,sFAAsF;AACtF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,IAAI;IACJ,SAAS;IACT,KAAK;IACL,IAAI;IACJ,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,GAAG;CACJ,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OACE,KAAK,GAAG,MAAM,CAAC,MAAM;QACrB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;YACvB,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAC3B,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS;YAC3B,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC,EAClD,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AAChC,CAAC"}

package/dist/tools/shell/internals.d.ts

@@ -0,0 +1,10 @@
+export declare const DEFAULT_TIMEOUT_MS = 40000;
+export declare function launchErrorOutput(error: NodeJS.ErrnoException, details: {
+    shell: string;
+    cwd: string;
+}): string;
+export declare function assignAllowInteractiveStdinInherit(value: boolean): void;
+export declare let allowInteractiveStdinInherit: boolean;
+export declare function binarySuppressionNotice(bytes: number, artifactPath: string | undefined): string;
+export declare function redactArtifactInPlace(path: string): Promise<boolean>;
+export declare function benignNoMatchTool(command: string, code: number | null): string | undefined;

package/dist/tools/shell/internals.js

@@ -0,0 +1,51 @@
+import { redactSecrets } from "../../llm/provider.js";
+import { finalPipelineStageName, MAX_REDACT_IN_MEMORY_BYTES, NO_MATCH_EXIT_COMMANDS } from "./internals-2.js";
+import { readFile, stat, writeFile } from "node:fs/promises";
+export const DEFAULT_TIMEOUT_MS = 40_000;
+export function launchErrorOutput(error, details) {
+    const code = error.code ?? "UNKNOWN";
+    const fields = [
+        `shell=${JSON.stringify(details.shell)}`,
+        `cwd=${JSON.stringify(details.cwd)}`,
+        error.syscall ? `syscall=${JSON.stringify(error.syscall)}` : undefined,
+        error.path ? `path=${JSON.stringify(error.path)}` : undefined,
+    ].filter((value) => Boolean(value));
+    return (`Command launch error [${code}]: ${error.message}\n` +
+        `${fields.join("; ")}\n` +
+        "The command did not start. Do not rewrite its syntax to work around this infrastructure error; verify the shell and cwd, then retry at most once.");
+}
+export function assignAllowInteractiveStdinInherit(value) {
+    allowInteractiveStdinInherit = value;
+}
+export let allowInteractiveStdinInherit = false;
+export function binarySuppressionNotice(bytes, artifactPath) {
+    return (`[binary output suppressed: ${bytes.toLocaleString()} bytes]` +
+        (artifactPath
+            ? `\nFull bytes were captured to ${artifactPath}. Use a text-producing command (xxd/strings/file) if you need to inspect them.`
+            : "\nUse a text-producing command (xxd/strings/file) if you need to inspect the bytes."));
+}
+export async function redactArtifactInPlace(path) {
+    try {
+        const st = await stat(path);
+        if (st.size > MAX_REDACT_IN_MEMORY_BYTES)
+            return false;
+        const raw = await readFile(path, "utf8");
+        const redacted = redactSecrets(raw);
+        if (redacted === raw)
+            return false;
+        await writeFile(path, redacted, { mode: 0o600 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function benignNoMatchTool(command, code) {
+    if (code !== 1)
+        return undefined;
+    const name = finalPipelineStageName(command);
+    return name !== undefined && NO_MATCH_EXIT_COMMANDS.has(name)
+        ? name
+        : undefined;
+}
+//# sourceMappingURL=internals.js.map

package/dist/tools/shell/internals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internals.js","sourceRoot":"","sources":["../../../src/tools/shell/internals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,UAAU,iBAAiB,CAC/B,KAA4B,EAC5B,OAAuC;IAEvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;IACrC,MAAM,MAAM,GAAG;QACb,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACpC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACtE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,OAAO,CACL,yBAAyB,IAAI,MAAM,KAAK,CAAC,OAAO,IAAI;QACpD,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACxB,mJAAmJ,CACpJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,4BAA4B,GAAG,KAAK,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,IAAI,4BAA4B,GAAG,KAAK,CAAC;AAEhD,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,YAAgC;IAEhC,OAAO,CACL,8BAA8B,KAAK,CAAC,cAAc,EAAE,SAAS;QAC7D,CAAC,YAAY;YACX,CAAC,CAAC,iCAAiC,YAAY,gFAAgF;YAC/H,CAAC,CAAC,qFAAqF,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,IAAI,GAAG,0BAA0B;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,IAAmB;IAEnB,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,IAAI,KAAK,SAAS,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/tools/shell/spawn-argv.d.ts

@@ -0,0 +1,17 @@
+import type { ToolResult } from "../../types.js";
+export interface SpawnArgvArgs {
+    command: string;
+    argv: string[];
+    cwd?: string | undefined;
+    timeoutMs?: number | undefined;
+    signal?: AbortSignal | undefined;
+    onOutput?: ((chunk: string, stream: "stdout" | "stderr") => void) | undefined;
+    maxModelBytes?: number | undefined;
+    maxCaptureBytes?: number | undefined;
+    onLimit?: "terminate" | "continue" | undefined;
+    artifactPath?: string | undefined;
+    noArtifact?: boolean | undefined;
+    stdinText?: string | undefined;
+    interactiveStdin?: boolean | "auto" | undefined;
+}
+export declare function spawnArgv(args: SpawnArgvArgs): Promise<ToolResult>;