@umsai/ums-code 0.0.13-v1 → 0.0.14-v1

package/dist/src/services/prompt-processors/shellProcessor.js

@@ -3,9 +3,7 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { ApprovalMode, checkCommandPermissions, escapeShellArg, getShellConfiguration, ShellExecutionService, flatMapTextParts, } from '@umsai/ums-code-core';
-import { SHELL_INJECTION_TRIGGER, SHORTHAND_ARGS_PLACEHOLDER, } from './types.js';
-import { extractInjections } from './injectionParser.js';
+import { checkCommandPermissions, ShellExecutionService, } from '@umsai/ums-code-core';
 export class ConfirmationRequiredError extends Error {
     commandsToConfirm;
     constructor(message, commandsToConfirm) {
@@ -15,107 +13,65 @@ export class ConfirmationRequiredError extends Error {
     }
 }
 /**
- * Handles prompt interpolation, including shell command execution (`!{...}`)
- * and context-aware argument injection (`{{args}}`).
+ * Finds all instances of shell command injections (`!{...}`) in a prompt,
+ * executes them, and replaces the injection site with the command's output.
  *
- * This processor ensures that:
- * 1. `{{args}}` outside `!{...}` are replaced with raw input.
- * 2. `{{args}}` inside `!{...}` are replaced with shell-escaped input.
- * 3. Shell commands are executed securely after argument substitution.
- * 4. Parsing correctly handles nested braces.
+ * This processor ensures that only allowlisted commands are executed. If a
+ * disallowed command is found, it halts execution and reports an error.
  */
 export class ShellProcessor {
     commandName;
+    /**
+     * A regular expression to find all instances of `!{...}`. The inner
+     * capture group extracts the command itself.
+     */
+    static SHELL_INJECTION_REGEX = /!\{([^}]*)\}/g;
+    /**
+     * @param commandName The name of the custom command being executed, used
+     *   for logging and error messages.
+     */
     constructor(commandName) {
         this.commandName = commandName;
     }
     async process(prompt, context) {
-        return flatMapTextParts(prompt, (text) => this.processString(text, context));
-    }
-    async processString(prompt, context) {
-        const userArgsRaw = context.invocation?.args || '';
-        if (!prompt.includes(SHELL_INJECTION_TRIGGER)) {
-            return [
-                { text: prompt.replaceAll(SHORTHAND_ARGS_PLACEHOLDER, userArgsRaw) },
-            ];
-        }
-        const config = context.services.config;
-        if (!config) {
-            throw new Error(`Security configuration not loaded. Cannot verify shell command permissions for '${this.commandName}'. Aborting.`);
-        }
-        const { sessionShellAllowlist } = context.session;
-        const injections = extractInjections(prompt, SHELL_INJECTION_TRIGGER, this.commandName);
-        // If extractInjections found no closed blocks (and didn't throw), treat as raw.
-        if (injections.length === 0) {
-            return [
-                { text: prompt.replaceAll(SHORTHAND_ARGS_PLACEHOLDER, userArgsRaw) },
-            ];
-        }
-        const { shell } = getShellConfiguration();
-        const userArgsEscaped = escapeShellArg(userArgsRaw, shell);
-        const resolvedInjections = injections.map((injection) => {
-            const command = injection.content;
-            if (command === '') {
-                return { ...injection, resolvedCommand: undefined };
-            }
-            const resolvedCommand = command.replaceAll(SHORTHAND_ARGS_PLACEHOLDER, userArgsEscaped);
-            return { ...injection, resolvedCommand };
-        });
+        const { config, sessionShellAllowlist } = {
+            ...context.services,
+            ...context.session,
+        };
+        const commandsToExecute = [];
         const commandsToConfirm = new Set();
-        for (const injection of resolvedInjections) {
-            const command = injection.resolvedCommand;
-            if (!command)
-                continue;
-            // Security check on the final, escaped command string.
+        const matches = [...prompt.matchAll(ShellProcessor.SHELL_INJECTION_REGEX)];
+        if (matches.length === 0) {
+            return prompt; // No shell commands, nothing to do.
+        }
+        // Discover all commands and check permissions.
+        for (const match of matches) {
+            const command = match[1].trim();
             const { allAllowed, disallowedCommands, blockReason, isHardDenial } = checkCommandPermissions(command, config, sessionShellAllowlist);
             if (!allAllowed) {
+                // If it's a hard denial, this is a non-recoverable security error.
                 if (isHardDenial) {
-                    throw new Error(`${this.commandName} cannot be run. Blocked command: "${command}". Reason: ${blockReason || 'Blocked by configuration.'}`);
-                }
-                // If not a hard denial, respect YOLO mode and auto-approve.
-                if (config.getApprovalMode() !== ApprovalMode.YOLO) {
-                    disallowedCommands.forEach((uc) => commandsToConfirm.add(uc));
+                    throw new Error(`${this.commandName} cannot be run. ${blockReason || 'A shell command in this custom command is explicitly blocked in your config settings.'}`);
                 }
+                // Add each soft denial disallowed command to the set for confirmation.
+                disallowedCommands.forEach((uc) => commandsToConfirm.add(uc));
             }
+            commandsToExecute.push({ fullMatch: match[0], command });
         }
-        // Handle confirmation requirements.
+        // If any commands require confirmation, throw a special error to halt the
+        // pipeline and trigger the UI flow.
         if (commandsToConfirm.size > 0) {
             throw new ConfirmationRequiredError('Shell command confirmation required', Array.from(commandsToConfirm));
         }
-        let processedPrompt = '';
-        let lastIndex = 0;
-        for (const injection of resolvedInjections) {
-            // Append the text segment BEFORE the injection, substituting {{args}} with RAW input.
-            const segment = prompt.substring(lastIndex, injection.startIndex);
-            processedPrompt += segment.replaceAll(SHORTHAND_ARGS_PLACEHOLDER, userArgsRaw);
-            // Execute the resolved command (which already has ESCAPED input).
-            if (injection.resolvedCommand) {
-                const { result } = await ShellExecutionService.execute(injection.resolvedCommand, config.getTargetDir(), () => { }, new AbortController().signal, config.getShouldUseNodePtyShell());
-                const executionResult = await result;
-                // Handle Spawn Errors
-                if (executionResult.error && !executionResult.aborted) {
-                    throw new Error(`Failed to start shell command in '${this.commandName}': ${executionResult.error.message}. Command: ${injection.resolvedCommand}`);
-                }
-                // Append the output, making stderr explicit for the model.
-                processedPrompt += executionResult.output;
-                // Append a status message if the command did not succeed.
-                if (executionResult.aborted) {
-                    processedPrompt += `\n[Shell command '${injection.resolvedCommand}' aborted]`;
-                }
-                else if (executionResult.exitCode !== 0 &&
-                    executionResult.exitCode !== null) {
-                    processedPrompt += `\n[Shell command '${injection.resolvedCommand}' exited with code ${executionResult.exitCode}]`;
-                }
-                else if (executionResult.signal !== null) {
-                    processedPrompt += `\n[Shell command '${injection.resolvedCommand}' terminated by signal ${executionResult.signal}]`;
-                }
-            }
-            lastIndex = injection.endIndex;
+        // Execute all commands (only runs if no confirmation was needed).
+        let processedPrompt = prompt;
+        for (const { fullMatch, command } of commandsToExecute) {
+            const { result } = ShellExecutionService.execute(command, config.getTargetDir(), () => { }, // No streaming needed.
+            new AbortController().signal);
+            const executionResult = await result;
+            processedPrompt = processedPrompt.replace(fullMatch, executionResult.output);
         }
-        // Append the remaining text AFTER the last injection, substituting {{args}} with RAW input.
-        const finalSegment = prompt.substring(lastIndex);
-        processedPrompt += finalSegment.replaceAll(SHORTHAND_ARGS_PLACEHOLDER, userArgsRaw);
-        return [{ text: processedPrompt }];
+        return processedPrompt;
     }
 }
 //# sourceMappingURL=shellProcessor.js.map

package/dist/src/services/prompt-processors/shellProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"shellProcessor.js","sourceRoot":"","sources":["../../../../src/services/prompt-processors/shellProcessor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAkB,MAAM,sBAAsB,CAAC;AAEzE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGzC;IAFT,YACE,OAAe,EACR,iBAA2B;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,sBAAiB,GAAjB,iBAAiB,CAAU;QAGlC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAWD;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CACX,MAA6B,EAC7B,OAAuB;QAEvB,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAClC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,OAAuB;QAEvB,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;QAEnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,0BAA0B,EAAE,WAAW,CAAC,EAAE;aACrE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,mFAAmF,IAAI,CAAC,WAAW,cAAc,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAElD,MAAM,UAAU,GAAG,iBAAiB,CAClC,MAAM,EACN,uBAAuB,EACvB,IAAI,CAAC,WAAW,CACjB,CAAC;QAEF,gFAAgF;QAChF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,0BAA0B,EAAE,WAAW,CAAC,EAAE;aACrE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAE3D,MAAM,kBAAkB,GAA6B,UAAU,CAAC,GAAG,CACjE,CAAC,SAAS,EAAE,EAAE;YACZ,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAElC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YAED,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CACxC,0BAA0B,EAC1B,eAAe,CAChB,CAAC;YACF,OAAO,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,CAAC;QAC3C,CAAC,CACF,CAAC;QAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC;YAE1C,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,uDAAuD;YACvD,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,GACjE,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;YAElE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,WAAW,qCAAqC,OAAO,cAAc,WAAW,IAAI,2BAA2B,EAAE,CAC1H,CAAC;gBACJ,CAAC;gBAED,4DAA4D;gBAC5D,IAAI,MAAM,CAAC,eAAe,EAAE,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;oBACnD,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,qCAAqC,EACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,sFAAsF;YACtF,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YAClE,eAAe,IAAI,OAAO,CAAC,UAAU,CACnC,0BAA0B,EAC1B,WAAW,CACZ,CAAC;YAEF,kEAAkE;YAClE,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;gBAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,CACpD,SAAS,CAAC,eAAe,EACzB,MAAM,CAAC,YAAY,EAAE,EACrB,GAAG,EAAE,GAAE,CAAC,EACR,IAAI,eAAe,EAAE,CAAC,MAAM,EAC5B,MAAM,CAAC,wBAAwB,EAAE,CAClC,CAAC;gBAEF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC;gBAErC,sBAAsB;gBACtB,IAAI,eAAe,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,WAAW,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,cAAc,SAAS,CAAC,eAAe,EAAE,CAClI,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,eAAe,IAAI,eAAe,CAAC,MAAM,CAAC;gBAE1C,0DAA0D;gBAC1D,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;oBAC5B,eAAe,IAAI,qBAAqB,SAAS,CAAC,eAAe,YAAY,CAAC;gBAChF,CAAC;qBAAM,IACL,eAAe,CAAC,QAAQ,KAAK,CAAC;oBAC9B,eAAe,CAAC,QAAQ,KAAK,IAAI,EACjC,CAAC;oBACD,eAAe,IAAI,qBAAqB,SAAS,CAAC,eAAe,sBAAsB,eAAe,CAAC,QAAQ,GAAG,CAAC;gBACrH,CAAC;qBAAM,IAAI,eAAe,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC3C,eAAe,IAAI,qBAAqB,SAAS,CAAC,eAAe,0BAA0B,eAAe,CAAC,MAAM,GAAG,CAAC;gBACvH,CAAC;YACH,CAAC;YAED,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC;QACjC,CAAC;QAED,4FAA4F;QAC5F,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,eAAe,IAAI,YAAY,CAAC,UAAU,CACxC,0BAA0B,EAC1B,WAAW,CACZ,CAAC;QAEF,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"shellProcessor.js","sourceRoot":"","sources":["../../../../src/services/prompt-processors/shellProcessor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAK9B,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGzC;IAFT,YACE,OAAe,EACR,iBAA2B;QAElC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,sBAAiB,GAAjB,iBAAiB,CAAU;QAGlC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAWI;IAV7B;;;OAGG;IACK,MAAM,CAAU,qBAAqB,GAAG,eAAe,CAAC;IAEhE;;;OAGG;IACH,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAAuB;QACnD,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG;YACxC,GAAG,OAAO,CAAC,QAAQ;YACnB,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QACF,MAAM,iBAAiB,GAAkD,EAAE,CAAC;QAC5E,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE5C,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,CAAC,oCAAoC;QACrD,CAAC;QAED,+CAA+C;QAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,GACjE,uBAAuB,CAAC,OAAO,EAAE,MAAO,EAAE,qBAAqB,CAAC,CAAC;YAEnE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,mEAAmE;gBACnE,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,WAAW,mBAAmB,WAAW,IAAI,uFAAuF,EAAE,CAC/I,CAAC;gBACJ,CAAC;gBAED,uEAAuE;gBACvE,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,0EAA0E;QAC1E,oCAAoC;QACpC,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,qCAAqC,EACrC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,IAAI,eAAe,GAAG,MAAM,CAAC;QAC7B,KAAK,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACvD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAC9C,OAAO,EACP,MAAO,CAAC,YAAY,EAAE,EACtB,GAAG,EAAE,GAAE,CAAC,EAAE,uBAAuB;YACjC,IAAI,eAAe,EAAE,CAAC,MAAM,CAC7B,CAAC;YAEF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC;YACrC,eAAe,GAAG,eAAe,CAAC,OAAO,CACvC,SAAS,EACT,eAAe,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC"}

package/dist/src/services/prompt-processors/types.d.ts

@@ -3,12 +3,7 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import type { CommandContext } from '../../ui/commands/types.js';
-import type { PartUnion } from '@google/genai';
-/**
- * Defines the input/output type for prompt processors.
- */
-export type PromptPipelineContent = PartUnion[];
+import { CommandContext } from '../../ui/commands/types.js';
 /**
  * Defines the interface for a prompt processor, a module that can transform
  * a prompt string before it is sent to the model. Processors are chained
@@ -16,8 +11,12 @@ export type PromptPipelineContent = PartUnion[];
  */
 export interface IPromptProcessor {
     /**
-     * Processes a prompt input (which may contain text and multi-modal parts),
-     * applying a specific transformation as part of a pipeline.
+     * Processes a prompt string, applying a specific transformation as part of a pipeline.
+     *
+     * Each processor in a command's pipeline receives the output of the previous
+     * processor. This method provides the full command context, allowing for
+     * complex transformations that may require access to invocation details,
+     * application services, or UI state.
      *
      * @param prompt The current state of the prompt string. This may have been
      *   modified by previous processors in the pipeline.
@@ -27,19 +26,13 @@ export interface IPromptProcessor {
      * @returns A promise that resolves to the transformed prompt string, which
      *   will be passed to the next processor or, if it's the last one, sent to the model.
      */
-    process(prompt: PromptPipelineContent, context: CommandContext): Promise<PromptPipelineContent>;
+    process(prompt: string, context: CommandContext): Promise<string>;
 }
 /**
  * The placeholder string for shorthand argument injection in custom commands.
- * When used outside of !{...}, arguments are injected raw.
- * When used inside !{...}, arguments are shell-escaped.
  */
 export declare const SHORTHAND_ARGS_PLACEHOLDER = "{{args}}";
 /**
  * The trigger string for shell command injection in custom commands.
  */
 export declare const SHELL_INJECTION_TRIGGER = "!{";
-/**
- * The trigger string for at file injection in custom commands.
- */
-export declare const AT_FILE_INJECTION_TRIGGER = "@{";

package/dist/src/services/prompt-processors/types.js

@@ -5,16 +5,10 @@
  */
 /**
  * The placeholder string for shorthand argument injection in custom commands.
- * When used outside of !{...}, arguments are injected raw.
- * When used inside !{...}, arguments are shell-escaped.
  */
 export const SHORTHAND_ARGS_PLACEHOLDER = '{{args}}';
 /**
  * The trigger string for shell command injection in custom commands.
  */
 export const SHELL_INJECTION_TRIGGER = '!{';
-/**
- * The trigger string for at file injection in custom commands.
- */
-export const AT_FILE_INJECTION_TRIGGER = '@{';
 //# sourceMappingURL=types.js.map

package/dist/src/services/prompt-processors/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/services/prompt-processors/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkCH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/services/prompt-processors/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6BH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC"}

package/dist/src/services/types.d.ts

@@ -3,7 +3,7 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import type { SlashCommand } from '../ui/commands/types.js';
+import { SlashCommand } from '../ui/commands/types.js';
 /**
  * Defines the contract for any class that can load and provide slash commands.
  * This allows the CommandService to be extended with new command sources

package/dist/src/ui/App.d.ts

@@ -3,8 +3,8 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import type { LoadedSettings } from '../config/settings.js';
-import type { Config } from '@umsai/ums-code-core';
+import { LoadedSettings } from '../config/settings.js';
+import { type Config } from '@umsai/ums-code-core';
 interface AppProps {
     config: Config;
     settings: LoadedSettings;