@qduc/term2 0.7.3 → 0.8.0

package/dist/utils/settings-command.test.js

@@ -0,0 +1,230 @@
+import { it, expect } from 'vitest';
+import { createSettingsCommand, formatSettingsSummary, parseSettingValue } from './settings-command.js';
+import { upsertProvider } from '../providers/index.js';
+const baseSettings = {
+    agent: {
+        model: { value: 'gpt-5.1', source: 'default' },
+        reasoningEffort: { value: 'default', source: 'default' },
+        temperature: { value: undefined, source: 'default' },
+        mentorModel: { value: undefined, source: 'default' },
+        mentorProvider: { value: undefined, source: 'default' },
+        mentorReasoningEffort: { value: 'default', source: 'default' },
+        useFlexServiceTier: { value: false, source: 'default' },
+        provider: { value: 'openai', source: 'default' },
+        maxTurns: { value: 20, source: 'default' },
+        retryAttempts: { value: 2, source: 'default' },
+        transport: { value: 'websocket', source: 'default' },
+        maxParallelToolCalls: { value: 3, source: 'default' },
+    },
+    shell: {
+        timeout: { value: 120000, source: 'default' },
+        maxOutputLines: { value: 1000, source: 'default' },
+        maxOutputChars: { value: 10000, source: 'default' },
+    },
+    ui: {
+        historySize: { value: 1000, source: 'default' },
+    },
+    logging: {
+        logLevel: { value: 'info', source: 'default' },
+    },
+    app: {
+        mentorMode: { value: false, source: 'default' },
+        editMode: { value: false, source: 'default' },
+    },
+};
+const createDeps = (overrides = {}) => {
+    const messages = [];
+    const setCalls = [];
+    const resetCalls = [];
+    const applied = [];
+    const settingsService = {
+        getAll: () => baseSettings,
+        get: (key) => (overrides.values?.[key] ?? 'value-for-' + key),
+        getSource: (key) => overrides.sources?.[key] ?? 'default',
+        reset: (key) => resetCalls.push(key),
+        isRuntimeModifiable: overrides.isRuntimeModifiable || (() => true),
+        set: (key, value) => setCalls.push({ key, value }),
+        ...overrides.settingsService,
+    };
+    return {
+        messages,
+        setCalls,
+        resetCalls,
+        applied,
+        settingsService: settingsService,
+        addSystemMessage: (message) => messages.push(message),
+        applyRuntimeSetting: (key, value) => applied.push({ key, value }),
+        setInput: (_value) => { },
+    };
+};
+it('formatSettingsSummary renders values with sources', () => {
+    const summary = formatSettingsSummary(baseSettings);
+    expect(summary.includes('agent.model: gpt-5.1 (default)')).toBe(true);
+    expect(summary.includes('shell.timeout: 120000 (default)')).toBe(true);
+    expect(summary.includes('logging.logLevel: info (default)')).toBe(true);
+    expect(summary.includes('agent.maxParallelToolCalls: 3 (default)')).toBe(true);
+});
+it('viewing all settings with no args prompts for autocomplete', () => {
+    const deps = createDeps();
+    let inputValue = '';
+    deps.setInput = (value) => {
+        inputValue = value;
+    };
+    const command = createSettingsCommand(deps);
+    const result = command.action();
+    // Should set input to '/settings ' and return false to keep input active
+    expect(result).toBe(false);
+    expect(inputValue).toBe('/settings ');
+    expect(deps.messages.length).toBe(0); // No message sent
+});
+it('viewing a single setting shows value and source', () => {
+    const deps = createDeps({
+        values: { 'agent.model': 'gpt-4o' },
+        sources: { 'agent.model': 'cli' },
+    });
+    const command = createSettingsCommand(deps);
+    command.action('agent.model');
+    expect(deps.messages.length).toBe(1);
+    expect(deps.messages[0].includes('agent.model: gpt-4o (cli)')).toBe(true);
+});
+it('setting runtime-modifiable values updates service and applies runtime hook', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.model gpt-4o');
+    expect(deps.setCalls).toEqual([{ key: 'agent.model', value: 'gpt-4o' }]);
+    expect(deps.applied).toEqual([{ key: 'agent.model', value: 'gpt-4o' }]);
+    expect(deps.messages[0].includes('Set agent.model to gpt-4o')).toBe(true);
+});
+it('setting agent.maxParallelToolCalls validates positive integers', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.maxParallelToolCalls 0');
+    expect(deps.setCalls).toEqual([]);
+    expect(deps.applied).toEqual([]);
+    expect(deps.messages[0].includes('greater than or equal to 1')).toBe(true);
+});
+it('setting agent.maxParallelToolCalls reports that the new limit applies on the next request', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.maxParallelToolCalls 5');
+    expect(deps.setCalls).toEqual([{ key: 'agent.maxParallelToolCalls', value: 5 }]);
+    expect(deps.applied).toEqual([{ key: 'agent.maxParallelToolCalls', value: 5 }]);
+    expect(deps.messages.some((msg) => msg.includes('takes effect on the next request'))).toBe(true);
+});
+it('resetting agent.maxParallelToolCalls reports that the default applies on the next request', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('reset agent.maxParallelToolCalls');
+    expect(deps.resetCalls).toEqual(['agent.maxParallelToolCalls']);
+    expect(deps.applied).toEqual([{ key: 'agent.maxParallelToolCalls', value: 'value-for-agent.maxParallelToolCalls' }]);
+    expect(deps.messages.some((msg) => msg.includes('takes effect on the next request'))).toBe(true);
+});
+it('refuses to set startup-only values at runtime', () => {
+    const deps = createDeps({
+        isRuntimeModifiable: (key) => key !== 'agent.maxTurns',
+    });
+    const command = createSettingsCommand(deps);
+    command.action('agent.maxTurns 40');
+    expect(deps.setCalls).toEqual([]);
+    expect(deps.applied).toEqual([]);
+    expect(deps.messages[0].toLowerCase().includes('restart')).toBe(true);
+});
+it('reset restores defaults and reports action', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('reset shell.timeout');
+    expect(deps.resetCalls).toEqual(['shell.timeout']);
+    expect(deps.messages[0].includes('Reset shell.timeout')).toBe(true);
+});
+it('parseSettingValue converts common primitives', () => {
+    expect(parseSettingValue('42')).toBe(42);
+    expect(parseSettingValue('true')).toBe(true);
+    expect(parseSettingValue('false')).toBe(false);
+    expect(parseSettingValue('gpt-4o')).toBe('gpt-4o');
+});
+it('setting agent.model strips --provider flag from value', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.model mistralai/devstral-2512:free --provider=openrouter');
+    // Should save the provider and the model ID
+    expect(deps.setCalls).toEqual([
+        { key: 'agent.provider', value: 'openrouter' },
+        { key: 'agent.model', value: 'mistralai/devstral-2512:free' },
+    ]);
+    expect(deps.applied).toEqual([
+        { key: 'agent.provider', value: 'openrouter' },
+        { key: 'agent.model', value: 'mistralai/devstral-2512:free' },
+    ]);
+    expect(deps.messages[0].includes('Set agent.model to mistralai/devstral-2512:free')).toBe(true);
+});
+it('setting agent.model strips --provider=openai flag from value', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.model gpt-4o --provider=openai');
+    // Should save the provider and the model ID
+    expect(deps.setCalls).toEqual([
+        { key: 'agent.provider', value: 'openai' },
+        { key: 'agent.model', value: 'gpt-4o' },
+    ]);
+    expect(deps.applied).toEqual([
+        { key: 'agent.provider', value: 'openai' },
+        { key: 'agent.model', value: 'gpt-4o' },
+    ]);
+    expect(deps.messages[0].includes('Set agent.model to gpt-4o')).toBe(true);
+});
+it('setting agent.model without provider flag works normally', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.model gpt-5.1');
+    // Should save the model ID as-is
+    expect(deps.setCalls).toEqual([{ key: 'agent.model', value: 'gpt-5.1' }]);
+    expect(deps.applied).toEqual([{ key: 'agent.model', value: 'gpt-5.1' }]);
+    expect(deps.messages[0].includes('Set agent.model to gpt-5.1')).toBe(true);
+});
+it('setting agent.mentorModel strips --provider flag and saves mentor provider', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('agent.mentorModel some/mentor-model --provider=openrouter');
+    expect(deps.setCalls).toEqual([
+        { key: 'agent.mentorProvider', value: 'openrouter' },
+        { key: 'agent.mentorModel', value: 'some/mentor-model' },
+    ]);
+    expect(deps.applied).toEqual([
+        { key: 'agent.mentorProvider', value: 'openrouter' },
+        { key: 'agent.mentorModel', value: 'some/mentor-model' },
+    ]);
+});
+it('setting tools.editHealingModel strips --provider flag and saves edit healing provider', () => {
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action('tools.editHealingModel fast-healer --provider=openrouter');
+    expect(deps.setCalls).toEqual([
+        { key: 'tools.editHealingProvider', value: 'openrouter' },
+        { key: 'tools.editHealingModel', value: 'fast-healer' },
+    ]);
+    expect(deps.applied).toEqual([
+        { key: 'tools.editHealingProvider', value: 'openrouter' },
+        { key: 'tools.editHealingModel', value: 'fast-healer' },
+    ]);
+});
+it('setting agent.model accepts provider names with spaces', () => {
+    const providerId = 'opencode go settings command test';
+    // TODO: // TODO: t.teardown(() => unregisterProvider(providerId)) needs manual try/finally conversion;
+    upsertProvider({
+        id: providerId,
+        label: providerId,
+        fetchModels: async () => [],
+    });
+    const deps = createDeps();
+    const command = createSettingsCommand(deps);
+    command.action(`agent.model deepseek-v4-flash --provider=${providerId}`);
+    expect(deps.setCalls).toEqual([
+        { key: 'agent.provider', value: providerId },
+        { key: 'agent.model', value: 'deepseek-v4-flash' },
+    ]);
+    expect(deps.applied).toEqual([
+        { key: 'agent.provider', value: providerId },
+        { key: 'agent.model', value: 'deepseek-v4-flash' },
+    ]);
+});
+//# sourceMappingURL=settings-command.test.js.map

package/dist/utils/settings-command.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-command.test.js","sourceRoot":"","sources":["../../source/utils/settings-command.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAIvD,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE;QACL,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QAC9C,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACxD,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACpD,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACpD,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACvD,qBAAqB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QAC9D,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;QACvD,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;QAChD,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC1C,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE;QAC9C,SAAS,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE;QACpD,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE;KACtD;IACD,KAAK,EAAE;QACL,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;QAC7C,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;QAClD,cAAc,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;KACpD;IACD,EAAE,EAAE;QACF,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;KAChD;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;KAC/C;IACD,GAAG,EAAE;QACH,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;QAC/C,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE;KAC9C;CACgC,CAAC;AAEpC,MAAM,UAAU,GAAG,CACjB,YAKI,EAAE,EACN,EAAE;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAA2C,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2C,EAAE,CAAC;IAE3D,MAAM,eAAe,GAAG;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY;QAC1B,GAAG,EAAE,CAAc,GAAW,EAAK,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,YAAY,GAAG,GAAG,CAAM;QAC1F,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,SAAS;QACjE,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAClE,GAAG,EAAE,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACnE,GAAG,SAAS,CAAC,eAAe;KAC7B,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,OAAO;QACP,eAAe,EAAE,eAA6C;QAC9D,gBAAgB,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7D,mBAAmB,EAAE,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAClF,QAAQ,EAAE,CAAC,MAAc,EAAE,EAAE,GAAE,CAAC;KACjC,CAAC;AACJ,CAAC,CAAC;AAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC3D,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAEpD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACpE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,EAAE;QACxB,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,yEAAyE;IACzE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB;AAC1D,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE;QACnC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;IACpF,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAErC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;IACxE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAE/C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACnG,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAE/C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACnG,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAEnD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC,CAAC;IACrH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,gBAAgB;KACvD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAEpC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACpD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEtC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACtD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;IAC/D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC;IAEjF,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC5B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE;QAC9C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE;KAC9D,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAC3B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE;QAC9C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE;KAC9D,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACtE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;IAEvD,4CAA4C;IAC5C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC5B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC1C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE;KACxC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAC3B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC1C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE;KACxC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;IAClE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEtC,iCAAiC;IACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;IACpF,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,2DAA2D,CAAC,CAAC;IAE5E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC5B,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,YAAY,EAAE;QACpD,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE;KACzD,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAC3B,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,YAAY,EAAE;QACpD,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE;KACzD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;IAC/F,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,0DAA0D,CAAC,CAAC;IAE3E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC5B,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,YAAY,EAAE;QACzD,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,aAAa,EAAE;KACxD,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAC3B,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,YAAY,EAAE;QACzD,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,aAAa,EAAE;KACxD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAChE,MAAM,UAAU,GAAG,mCAAmC,CAAC;IAEvD,uGAAuG;IACvG,cAAc,CAAC;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;KAC5B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,4CAA4C,UAAU,EAAE,CAAC,CAAC;IAEzE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC5B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE;QAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE;KACnD,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAC3B,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE;QAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE;KACnD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/shell/command-logger.d.ts

@@ -0,0 +1,11 @@
+import type { ISettingsService } from '../../services/service-interfaces.js';
+/**
+ * Log command execution for security forensics
+ * Only writes to stderr if DEBUG_BASH_TOOL is enabled to avoid polluting Ink UI
+ */
+export declare function logCommandExecution(settingsService: ISettingsService, command: string, isDangerous: boolean, approved: boolean): void;
+/**
+ * Log validation errors for debugging
+ */
+export declare function logValidationError(settingsService: ISettingsService, message: string): void;
+//# sourceMappingURL=command-logger.d.ts.map

package/dist/utils/shell/command-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.d.ts","sourceRoot":"","sources":["../../../source/utils/shell/command-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,gBAAgB,EACjC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,OAAO,EACpB,QAAQ,EAAE,OAAO,GAChB,IAAI,CAiBN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAS3F"}

package/dist/utils/shell/command-logger.js

@@ -0,0 +1,34 @@
+/**
+ * Log command execution for security forensics
+ * Only writes to stderr if DEBUG_BASH_TOOL is enabled to avoid polluting Ink UI
+ */
+export function logCommandExecution(settingsService, command, isDangerous, approved) {
+    if (!settingsService.get('debug.debugBashTool')) {
+        return;
+    }
+    if (settingsService.get('logging.suppressConsoleOutput')) {
+        return;
+    }
+    const timestamp = new Date().toISOString();
+    const context = {
+        timestamp,
+        command: command.substring(0, 100), // Truncate for safety
+        isDangerous,
+        approved,
+        env: settingsService.get('environment.nodeEnv') || 'production',
+    };
+    console.error(`[BASH_TOOL_LOG] ${JSON.stringify(context)}`);
+}
+/**
+ * Log validation errors for debugging
+ */
+export function logValidationError(settingsService, message) {
+    if (!settingsService.get('debug.debugBashTool')) {
+        return;
+    }
+    if (settingsService.get('logging.suppressConsoleOutput')) {
+        return;
+    }
+    console.error(`[BASH_TOOL_ERROR] ${message}`);
+}
+//# sourceMappingURL=command-logger.js.map

package/dist/utils/shell/command-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.js","sourceRoot":"","sources":["../../../source/utils/shell/command-logger.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,eAAiC,EACjC,OAAe,EACf,WAAoB,EACpB,QAAiB;IAEjB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAU,qBAAqB,CAAC,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAU,+BAA+B,CAAC,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG;QACd,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,sBAAsB;QAC1D,WAAW;QACX,QAAQ;QACR,GAAG,EAAE,eAAe,CAAC,GAAG,CAAS,qBAAqB,CAAC,IAAI,YAAY;KACxE,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,eAAiC,EAAE,OAAe;IACnF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAU,qBAAqB,CAAC,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAU,+BAA+B,CAAC,EAAE,CAAC;QAClE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/utils/shell/command-logger.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=command-logger.test.d.ts.map

package/dist/utils/shell/command-logger.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.test.d.ts","sourceRoot":"","sources":["../../../source/utils/shell/command-logger.test.ts"],"names":[],"mappings":""}

package/dist/utils/shell/command-logger.test.js

@@ -0,0 +1,32 @@
+import { it, expect } from 'vitest';
+import { logCommandExecution } from './command-logger.js';
+const buildSettingsService = (overrides = {}) => ({
+    get: (key) => {
+        switch (key) {
+            case 'debug.debugBashTool':
+                return true;
+            case 'logging.suppressConsoleOutput':
+                return true;
+            case 'environment.nodeEnv':
+                return 'test';
+            default:
+                return overrides[key];
+        }
+    },
+    set: () => { },
+});
+it('logCommandExecution does not write to console when suppressed', () => {
+    const originalConsoleError = console.error;
+    const calls = [];
+    console.error = (...args) => {
+        calls.push(args);
+    };
+    try {
+        logCommandExecution(buildSettingsService(), 'echo hi', false, true);
+        expect(calls.length).toBe(0);
+    }
+    finally {
+        console.error = originalConsoleError;
+    }
+});
+//# sourceMappingURL=command-logger.test.js.map

package/dist/utils/shell/command-logger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-logger.test.js","sourceRoot":"","sources":["../../../source/utils/shell/command-logger.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,oBAAoB,GAAG,CAAC,YAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,GAAG,EAAE,CAAc,GAAW,EAAK,EAAE;QACnC,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,qBAAqB;gBACxB,OAAO,IAAS,CAAC;YACnB,KAAK,+BAA+B;gBAClC,OAAO,IAAS,CAAC;YACnB,KAAK,qBAAqB;gBACxB,OAAO,MAAW,CAAC;YACrB;gBACE,OAAO,SAAS,CAAC,GAAG,CAAM,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;CACd,CAAC,CAAC;AAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACvE,MAAM,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3C,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE;QAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,mBAAmB,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,GAAG,oBAAoB,CAAC;IACvC,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/utils/shell/command-safety/constants.d.ts

@@ -0,0 +1,21 @@
+export declare const ALLOWED_COMMANDS: Set<string>;
+export declare const BLOCKED_COMMANDS: Set<string>;
+/**
+ * Validate command safety using an AST parser.
+ * Returns true when a command requires user approval.
+ * Throws for invalid/empty inputs.
+ */
+export declare enum SafetyStatus {
+    GREEN = "GREEN",
+    YELLOW = "YELLOW",
+    RED = "RED"
+}
+export declare const SYSTEM_PATHS: string[];
+export declare const SENSITIVE_EXTENSIONS: string[];
+export declare const SAFE_JSON_FILES: Set<string>;
+export declare const SUSPICIOUS_JSON_PATTERNS: RegExp[];
+export declare const HOME_PATTERNS: RegExp[];
+export declare const SENSITIVE_PATHS: string[];
+export declare const SAFE_GIT_COMMANDS: Set<string>;
+export declare const DANGEROUS_GIT_COMMANDS: Set<string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/utils/shell/command-safety/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../source/utils/shell/command-safety/constants.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,gBAAgB,aAuE3B,CAAC;AAEH,eAAO,MAAM,gBAAgB,aAkB3B,CAAC;AAEH;;;;GAIG;AACH,oBAAY,YAAY;IACtB,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,GAAG,QAAQ;CACZ;AAGD,eAAO,MAAM,YAAY,UAA6D,CAAC;AAEvF,eAAO,MAAM,oBAAoB,UAA2B,CAAC;AAG7D,eAAO,MAAM,eAAe,aAqB1B,CAAC;AAGH,eAAO,MAAM,wBAAwB,UAkDpC,CAAC;AAEF,eAAO,MAAM,aAAa,UAUzB,CAAC;AAEF,eAAO,MAAM,eAAe,UAU3B,CAAC;AAGF,eAAO,MAAM,iBAAiB,aAmC5B,CAAC;AAEH,eAAO,MAAM,sBAAsB,aAwCjC,CAAC"}

package/dist/utils/shell/command-safety/constants.js

@@ -0,0 +1,265 @@
+// 1. CONSTANTS
+// Note: 'sed' is useful for read-only transformations. We allow it by default
+// but add guards below to prevent in-place edits (-i) and unapproved redirections.
+export const ALLOWED_COMMANDS = new Set([
+    // navigation / listing
+    'pwd',
+    'cd',
+    'ls',
+    'find',
+    // file viewing
+    'cat',
+    'head',
+    'tail',
+    'nl',
+    'sed',
+    // searching / matching
+    'grep',
+    'rg',
+    'fd',
+    // counting / metadata
+    'wc',
+    'stat',
+    'file',
+    'du',
+    'df',
+    // path utilities (string-only, no file mutation)
+    'basename',
+    'dirname',
+    'realpath',
+    // text inspection / transformation to stdout
+    'sort',
+    'uniq',
+    'cut',
+    'tr',
+    'strings',
+    'echo',
+    'printf',
+    'seq',
+    'comm',
+    'column',
+    'diff',
+    // binary / hex inspection (read-only dumps)
+    'xxd',
+    'od',
+    'hexdump',
+    // shell no-ops / lookups (output-only, do not mutate state)
+    'true',
+    'false',
+    'which',
+    'type',
+    // structured data inspection
+    'jq',
+    // checksums
+    'sha256sum',
+    'sha1sum',
+    'md5sum',
+    // basic identity / environment context
+    'whoami',
+    'id',
+    'uname',
+    'date',
+    // Git read-only commands
+    'git',
+]);
+export const BLOCKED_COMMANDS = new Set([
+    // Inherently destructive filesystem operations
+    'rm',
+    'rmdir',
+    'mkfs',
+    'dd',
+    // Privilege escalation and system shutdown
+    'sudo',
+    'su',
+    'shutdown',
+    'reboot',
+    // Dangerous wrappers / process control
+    'eval',
+    'exec',
+    'kill',
+    'killall',
+]);
+/**
+ * Validate command safety using an AST parser.
+ * Returns true when a command requires user approval.
+ * Throws for invalid/empty inputs.
+ */
+export var SafetyStatus;
+(function (SafetyStatus) {
+    SafetyStatus["GREEN"] = "GREEN";
+    SafetyStatus["YELLOW"] = "YELLOW";
+    SafetyStatus["RED"] = "RED";
+})(SafetyStatus || (SafetyStatus = {}));
+// Constants for path analysis
+export const SYSTEM_PATHS = ['/etc', '/dev', '/proc', '/var', '/usr', '/boot', '/bin'];
+export const SENSITIVE_EXTENSIONS = ['.env', '.pem', '.key'];
+// Safe JSON files that are common project configuration files
+export const SAFE_JSON_FILES = new Set([
+    'package.json',
+    'package-lock.json',
+    'tsconfig.json',
+    'jsconfig.json',
+    'eslint.config.json',
+    '.eslintrc.json',
+    'prettier.config.json',
+    '.prettierrc.json',
+    'jest.config.json',
+    'babel.config.json',
+    '.babelrc.json',
+    'ava.config.json',
+    'xo.config.json',
+    'tslint.json',
+    'renovate.json',
+    'nx.json',
+    'project.json',
+    'vercel.json',
+    'now.json',
+    'composer.json',
+]);
+// Patterns that indicate potentially sensitive JSON files (credentials, tokens, etc.)
+export const SUSPICIOUS_JSON_PATTERNS = [
+    // Credentials and secrets (exact and with suffixes)
+    /^secrets?\.json$/i,
+    /^secrets?[-_.].*\.json$/i,
+    /^credentials?\.json$/i,
+    /^credentials?[-_.].*\.json$/i,
+    /^tokens?\.json$/i,
+    /^tokens?[-_.].*\.json$/i,
+    /^auth\.json$/i,
+    /^auth[-_.].*\.json$/i,
+    /^api[-_]?keys?\.json$/i,
+    /^api[-_]?keys?[-_.].*\.json$/i,
+    /^service[-_]?accounts?\.json$/i,
+    /^service[-_]?accounts?[-_.].*\.json$/i,
+    // Private keys
+    /^private\.json$/i,
+    /^private[-_.].*\.json$/i,
+    /^key\.json$/i,
+    /^key[-_.].*\.json$/i,
+    /^id_rsa.*\.json$/i,
+    // Cloud provider credentials
+    /^firebase[-_]?adminsdk.*\.json$/i,
+    /^google[-_]?credentials.*\.json$/i,
+    /^gcloud.*\.json$/i,
+    /^azure.*\.json$/i,
+    /^aws.*\.json$/i,
+    /^service[-_]account\.json$/i,
+    /^client[-_]secret.*\.json$/i,
+    /^oauth.*client.*\.json$/i,
+    // SSO and authentication providers
+    /^okta.*\.json$/i,
+    /^sso.*\.json$/i,
+    /^saml.*\.json$/i,
+    // Monitoring and logging credentials
+    /^sentry.*\.json$/i,
+    /^newrelic.*\.json$/i,
+    /^datadog.*\.json$/i,
+    // Key storage formats
+    /.*\.keystore\.json$/i,
+    /.*\.keypair\.json$/i,
+    /.*\.p8\.json$/i,
+    /.*\.p12\.json$/i,
+    // Vault and secret management
+    /^vault.*\.json$/i,
+];
+export const HOME_PATTERNS = [
+    /^~/, // Tilde
+    /^\$HOME/, // $HOME variable
+    /^\$\{HOME\}/, // ${HOME} variable
+    /^\$USER/, // $USER variable
+    /^\$LOGNAME/, // $LOGNAME variable
+    /^\$XDG_/, // XDG variables
+    /^\/home\//, // Linux home directories
+    /^\/Users\//, // macOS home directories
+    /^\/root($|\/)/, // Root's home
+];
+export const SENSITIVE_PATHS = [
+    '/.ssh',
+    '/.gnupg',
+    '/.aws',
+    '/.kube',
+    '/.env',
+    '/.git',
+    '/.config',
+    '/.bash_history',
+    '/.zsh_history',
+];
+// Git command classification
+export const SAFE_GIT_COMMANDS = new Set([
+    // Status and information
+    'status',
+    'log',
+    'show',
+    'diff',
+    'reflog',
+    // Inspection
+    'ls-files',
+    'ls-tree',
+    'ls-remote',
+    'describe',
+    'rev-parse',
+    'rev-list',
+    'show-ref',
+    'show-branch',
+    'name-rev',
+    // History viewing
+    'blame',
+    'shortlog',
+    'whatchanged',
+    // Object inspection
+    'cat-file',
+    'count-objects',
+    'verify-pack',
+    'verify-commit',
+    'verify-tag',
+    // Other read-only commands
+    'grep',
+    'help',
+    'version',
+    'fsck',
+    'check-ignore',
+    'check-attr',
+    'check-ref-format',
+]);
+export const DANGEROUS_GIT_COMMANDS = new Set([
+    // Write operations
+    'push',
+    'commit',
+    'add',
+    'rm',
+    'mv',
+    // Destructive operations
+    'reset',
+    'clean',
+    'rebase',
+    'merge',
+    'cherry-pick',
+    'revert',
+    // History rewriting
+    'filter-branch',
+    'filter-repo',
+    'replace',
+    // Branch/tag management
+    'checkout',
+    'switch',
+    'restore',
+    'branch',
+    'tag',
+    // Configuration changes
+    'config',
+    'remote',
+    // Submodule operations
+    'submodule',
+    'subtree',
+    // Other write operations
+    'stash',
+    'apply',
+    'fetch',
+    'pull',
+    'clone',
+    'init',
+    'gc',
+    'prune',
+    'worktree',
+]);
+//# sourceMappingURL=constants.js.map

package/dist/utils/shell/command-safety/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../source/utils/shell/command-safety/constants.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,8EAA8E;AAC9E,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,uBAAuB;IACvB,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,MAAM;IAEN,eAAe;IACf,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,KAAK;IAEL,uBAAuB;IACvB,MAAM;IACN,IAAI;IACJ,IAAI;IAEJ,sBAAsB;IACtB,IAAI;IACJ,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IAEJ,iDAAiD;IACjD,UAAU;IACV,SAAS;IACT,UAAU;IAEV,6CAA6C;IAC7C,MAAM;IACN,MAAM;IACN,KAAK;IACL,IAAI;IACJ,SAAS;IACT,MAAM;IACN,QAAQ;IACR,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IAEN,4CAA4C;IAC5C,KAAK;IACL,IAAI;IACJ,SAAS;IAET,4DAA4D;IAC5D,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IAEN,6BAA6B;IAC7B,IAAI;IAEJ,YAAY;IACZ,WAAW;IACX,SAAS;IACT,QAAQ;IAER,uCAAuC;IACvC,QAAQ;IACR,IAAI;IACJ,OAAO;IACP,MAAM;IAEN,yBAAyB;IACzB,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,+CAA+C;IAC/C,IAAI;IACJ,OAAO;IACP,MAAM;IACN,IAAI;IAEJ,2CAA2C;IAC3C,MAAM;IACN,IAAI;IACJ,UAAU;IACV,QAAQ;IAER,uCAAuC;IACvC,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,+BAAe,CAAA;IACf,iCAAiB,CAAA;IACjB,2BAAW,CAAA;AACb,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAED,8BAA8B;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE7D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,SAAS;IACT,cAAc;IACd,aAAa;IACb,UAAU;IACV,eAAe;CAChB,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,oDAAoD;IACpD,mBAAmB;IACnB,0BAA0B;IAC1B,uBAAuB;IACvB,8BAA8B;IAC9B,kBAAkB;IAClB,yBAAyB;IACzB,eAAe;IACf,sBAAsB;IACtB,wBAAwB;IACxB,+BAA+B;IAC/B,gCAAgC;IAChC,uCAAuC;IAEvC,eAAe;IACf,kBAAkB;IAClB,yBAAyB;IACzB,cAAc;IACd,qBAAqB;IACrB,mBAAmB;IAEnB,6BAA6B;IAC7B,kCAAkC;IAClC,mCAAmC;IACnC,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,6BAA6B;IAC7B,6BAA6B;IAC7B,0BAA0B;IAE1B,mCAAmC;IACnC,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IAEjB,qCAAqC;IACrC,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IAEpB,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IAEjB,8BAA8B;IAC9B,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,iBAAiB;IAC5B,aAAa,EAAE,mBAAmB;IAClC,SAAS,EAAE,iBAAiB;IAC5B,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,gBAAgB;IAC3B,WAAW,EAAE,yBAAyB;IACtC,YAAY,EAAE,yBAAyB;IACvC,eAAe,EAAE,cAAc;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,eAAe;CAChB,CAAC;AAEF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACvC,yBAAyB;IACzB,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,UAAU;IACV,SAAS;IACT,WAAW;IACX,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,aAAa;IACb,UAAU;IACV,kBAAkB;IAClB,OAAO;IACP,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,UAAU;IACV,eAAe;IACf,aAAa;IACb,eAAe;IACf,YAAY;IACZ,2BAA2B;IAC3B,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,cAAc;IACd,YAAY;IACZ,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,mBAAmB;IACnB,MAAM;IACN,QAAQ;IACR,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,yBAAyB;IACzB,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,aAAa;IACb,QAAQ;IACR,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,SAAS;IACT,wBAAwB;IACxB,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,KAAK;IACL,wBAAwB;IACxB,QAAQ;IACR,QAAQ;IACR,uBAAuB;IACvB,WAAW;IACX,SAAS;IACT,yBAAyB;IACzB,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,IAAI;IACJ,OAAO;IACP,UAAU;CACX,CAAC,CAAC"}