@psnext/s-subagents 0.1.20260522-1

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@psnext/s-subagents",
+  "version": "0.1.20260522-1",
+  "devDependencies": {
+    "@earendil-works/pi-coding-agent": "^0.75.4",
+    "@earendil-works/pi-tui": "^0.75.4",
+    "@sinclair/typebox": "^0.34.49",
+    "@types/node": "^25.9.1"
+  }
+}

package/tools/safe-bash.ts

@@ -0,0 +1,60 @@
+/**
+ * Safe bash extension for worker subagent.
+ * Wraps the built-in bash tool with dangerous command blocking.
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { createBashTool } from "@earendil-works/pi-coding-agent";
+import { Type } from "@sinclair/typebox";
+
+const DANGEROUS_PATTERNS = [
+	/\brm\s+(-[a-zA-Z]*f[a-zA-Z]*\s+)?(-[a-zA-Z]*r[a-zA-Z]*\s+)?(\/|~\/?\s|~\/?\b)/,
+	/\brm\s+(-[a-zA-Z]*r[a-zA-Z]*\s+)?(-[a-zA-Z]*f[a-zA-Z]*\s+)?(\/|~\/?\s|~\/?\b)/,
+	/\bsudo\b/,
+	/\bmkfs\b/,
+	/\bdd\s+if=/,
+	/:\(\)\s*\{\s*:\|:&\s*\}\s*;:/,
+	/>\s*\/dev\/[sh]d[a-z]/,
+	/\bchmod\s+(-[a-zA-Z]+\s+)?777\s+\//,
+	/\bchown\s+(-[a-zA-Z]+\s+)?root/,
+	/\bcurl\s.*\|\s*(ba)?sh/,
+	/\bwget\s.*\|\s*(ba)?sh/,
+	/\bshutdown\b/,
+	/\breboot\b/,
+	/\binit\s+0\b/,
+	/\bkill\s+-9\s+1\b/,
+	/\bkillall\b/,
+];
+
+function isDangerous(command: string): string | null {
+	const normalized = command.replace(/\\\n/g, " ");
+	for (const pattern of DANGEROUS_PATTERNS) {
+		if (pattern.test(normalized)) {
+			return `Command blocked by safe_bash: matches dangerous pattern ${pattern}`;
+		}
+	}
+	return null;
+}
+
+export default function (pi: ExtensionAPI) {
+	const bashTool = createBashTool(process.cwd());
+
+	pi.registerTool({
+		name: "safe_bash",
+		label: "Safe Bash",
+		description:
+			"Execute a bash command. Blocks dangerous commands (rm -rf /, sudo, mkfs, etc.).",
+		parameters: Type.Object({
+			command: Type.String({ description: "Bash command to execute" }),
+			timeout: Type.Optional(
+				Type.Number({ description: "Timeout in seconds (optional)" }),
+			),
+		}),
+		async execute(toolCallId, params, signal, onUpdate, ctx) {
+			const danger = isDangerous(params.command);
+			if (danger) {
+				throw new Error(danger);
+			}
+			return bashTool.execute(toolCallId, params, signal, onUpdate);
+		},
+	});
+}

package/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "types": ["node"],
+    "moduleResolution": "nodenext",
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "target": "ES2020",
+    "module": "NodeNext",
+    "lib": ["ES2022"]
+  },
+  "include": ["**/*.ts"],
+  "exclude": ["node_modules"]
+}