@within-7/minto 0.1.7 → 0.3.0

package/dist/tools/BashTool/BashTool.js

@@ -8,13 +8,19 @@ import { PRODUCT_NAME } from "../../constants/product.js";
 import { splitCommand } from "../../utils/commands.js";
 import { isInDirectory } from "../../utils/file.js";
 import { logError } from "../../utils/log.js";
-import { PersistentShell } from "../../utils/PersistentShell.js";
+import {
+  PersistentShell
+} from "../../utils/PersistentShell.js";
 import { getCwd, getOriginalCwd } from "../../utils/state.js";
 import { getGlobalConfig } from "../../utils/config.js";
 import { getModelManager } from "../../utils/model.js";
 import { BackgroundShellManager } from "../../utils/BackgroundShellManager.js";
 import BashToolResultMessage from "./BashToolResultMessage.js";
-import { BANNED_COMMANDS, PROMPT } from "./prompt.js";
+import {
+  BANNED_COMMANDS,
+  PROMPT,
+  detectDangerousPatterns
+} from "./prompt.js";
 import { formatOutput, getCommandFilePaths } from "./utils.js";
 const inputSchema = z.strictObject({
   command: z.string().describe("The command to execute"),
@@ -49,6 +55,27 @@ const BashTool = {
     return true;
   },
   async validateInput({ command }) {
+    const dangerousPatterns = detectDangerousPatterns(command);
+    const criticalPatterns = dangerousPatterns.filter(
+      (p) => p.severity === "critical"
+    );
+    if (criticalPatterns.length > 0) {
+      const patternNames = criticalPatterns.map((p) => p.name).join(", ");
+      logError(
+        `SECURITY: Critical dangerous patterns detected in command: ${patternNames}`
+      );
+      return {
+        result: false,
+        message: `Command contains critical security risks: ${patternNames}. This command has been blocked for security reasons.`
+      };
+    }
+    const highPatterns = dangerousPatterns.filter((p) => p.severity === "high");
+    if (highPatterns.length > 0) {
+      const patternNames = highPatterns.map((p) => p.name).join(", ");
+      logError(
+        `SECURITY WARNING: High-severity patterns detected in command: ${patternNames}. User confirmation required.`
+      );
+    }
     const commands = splitCommand(command);
     for (const cmd of commands) {
       const parts = cmd.split(" ");
@@ -59,6 +86,15 @@ const BashTool = {
           message: `Command '${baseCmd}' is not allowed for security reasons`
         };
       }
+      if (baseCmd && (baseCmd.startsWith("/") || baseCmd.startsWith("./"))) {
+        const cmdName = baseCmd.split("/").pop()?.toLowerCase();
+        if (cmdName && BANNED_COMMANDS.includes(cmdName)) {
+          return {
+            result: false,
+            message: `Command '${cmdName}' is not allowed for security reasons (full path: ${baseCmd})`
+          };
+        }
+      }
       if (baseCmd === "cd" && parts[1]) {
         const targetDir = parts[1].replace(/^['"]|['"]$/g, "");
         const fullTargetDir = isAbsolute(targetDir) ? targetDir : resolve(getCwd(), targetDir);
@@ -128,6 +164,7 @@ Command: ${command}`,
     }
     let stdout = "";
     let stderr = "";
+    let isCompleted = false;
     if (abortController.signal.aborted) {
       const data = {
         stdout: "",
@@ -144,11 +181,45 @@ Command: ${command}`,
       return;
     }
     try {
-      const result = await PersistentShell.getInstance().exec(
+      let result = null;
+      let streamedStdout = "";
+      let streamedStderr = "";
+      const streamingGenerator = PersistentShell.getInstance().execStreaming(
         command,
         abortController.signal,
         timeout
       );
+      for await (const chunk of streamingGenerator) {
+        if (chunk.type === "chunk") {
+          if (chunk.stdout) {
+            streamedStdout += chunk.stdout;
+          }
+          if (chunk.stderr) {
+            streamedStderr += chunk.stderr;
+          }
+          yield {
+            type: "progress",
+            content: {
+              type: "streaming",
+              toolName: "Bash",
+              stdout: streamedStdout,
+              stderr: streamedStderr,
+              isStreaming: true
+            }
+          };
+        } else if (chunk.type === "result") {
+          result = chunk;
+        }
+      }
+      if (!result) {
+        result = {
+          type: "result",
+          stdout: streamedStdout,
+          stderr: streamedStderr,
+          code: 0,
+          interrupted: false
+        };
+      }
       stdout += (result.stdout || "").trim() + EOL;
       stderr += (result.stderr || "").trim() + EOL;
       if (result.code !== 0) {
@@ -160,6 +231,9 @@ Command: ${command}`,
       }
       if (process.env.NODE_ENV !== "test") {
         getCommandFilePaths(command, stdout).then((filePaths) => {
+          if (isCompleted) {
+            return;
+          }
           for (const filePath of filePaths) {
             const fullFilePath = isAbsolute(filePath) ? filePath : resolve(getCwd(), filePath);
             try {
@@ -199,6 +273,8 @@ Command: ${command}`,
         resultForAssistant: this.renderResultForAssistant(data),
         data
       };
+    } finally {
+      isCompleted = true;
     }
   }
 };

package/dist/tools/BashTool/BashTool.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/tools/BashTool/BashTool.tsx"],
-  "sourcesContent": ["import { statSync } from 'fs'\nimport { EOL } from 'os'\nimport { isAbsolute, relative, resolve } from 'path'\nimport * as React from 'react'\nimport { z } from 'zod'\nimport { FallbackToolUseRejectedMessage } from '@components/FallbackToolUseRejectedMessage'\nimport { PRODUCT_NAME } from '@constants/product'\nimport { queryQuick } from '@services/claude'\nimport { Tool, ValidationResult } from '@tool'\nimport { splitCommand } from '@utils/commands'\nimport { isInDirectory } from '@utils/file'\nimport { logError } from '@utils/log'\nimport { PersistentShell } from '@utils/PersistentShell'\nimport { getCwd, getOriginalCwd } from '@utils/state'\nimport { getGlobalConfig } from '@utils/config'\nimport { getModelManager } from '@utils/model'\nimport { BackgroundShellManager } from '@utils/BackgroundShellManager'\nimport BashToolResultMessage from './BashToolResultMessage'\nimport { BANNED_COMMANDS, PROMPT } from './prompt'\nimport { formatOutput, getCommandFilePaths } from './utils'\n\nexport const inputSchema = z.strictObject({\n  command: z.string().describe('The command to execute'),\n  timeout: z\n    .number()\n    .optional()\n    .describe('Optional timeout in milliseconds (max 600000)'),\n  run_in_background: z\n    .boolean()\n    .optional()\n    .describe('Set to true to run this command in the background'),\n})\n\ntype In = typeof inputSchema\nexport type Out = {\n  stdout: string\n  stdoutLines: number // Total number of lines in original stdout, even if `stdout` is now truncated\n  stderr: string\n  stderrLines: number // Total number of lines in original stderr, even if `stderr` is now truncated\n  interrupted: boolean\n  shellId?: string // Present if run_in_background is true\n}\n\nexport const BashTool = {\n  name: 'Bash',\n  async description() {\n    return 'Executes shell commands on your computer'\n  },\n  async prompt() {\n    const config = getGlobalConfig()\n    // \uD83D\uDD27 Fix: Use ModelManager to get actual current model\n    const modelManager = getModelManager()\n    const modelName =\n      modelManager.getModelName('main') || '<No Model Configured>'\n    // Substitute the placeholder in the static PROMPT string\n    return PROMPT.replace(/{MODEL_NAME}/g, modelName)\n  },\n  isReadOnly() {\n    return false\n  },\n  isConcurrencySafe() {\n    return false // BashTool modifies state/files, not safe for concurrent execution\n  },\n  inputSchema,\n  userFacingName() {\n    return 'Bash'\n  },\n  async isEnabled() {\n    return true\n  },\n  needsPermissions(): boolean {\n    // Always check per-project permissions for BashTool\n    return true\n  },\n  async validateInput({ command }): Promise<ValidationResult> {\n    const commands = splitCommand(command)\n    for (const cmd of commands) {\n      const parts = cmd.split(' ')\n      const baseCmd = parts[0]\n\n      // Check if command is banned\n      if (baseCmd && BANNED_COMMANDS.includes(baseCmd.toLowerCase())) {\n        return {\n          result: false,\n          message: `Command '${baseCmd}' is not allowed for security reasons`,\n        }\n      }\n\n      // Special handling for cd command\n      if (baseCmd === 'cd' && parts[1]) {\n        const targetDir = parts[1]!.replace(/^['\"]|['\"]$/g, '') // Remove quotes if present\n        const fullTargetDir = isAbsolute(targetDir)\n          ? targetDir\n          : resolve(getCwd(), targetDir)\n        if (\n          !isInDirectory(\n            relative(getOriginalCwd(), fullTargetDir),\n            relative(getCwd(), getOriginalCwd()),\n          )\n        ) {\n          return {\n            result: false,\n            message: `ERROR: cd to '${fullTargetDir}' was blocked. For security, ${PRODUCT_NAME} may only change directories to child directories of the original working directory (${getOriginalCwd()}) for this session.`,\n          }\n        }\n      }\n    }\n\n    return { result: true }\n  },\n  renderToolUseMessage({ command }) {\n    // Clean up any command that uses the quoted HEREDOC pattern\n    if (command.includes(\"\\\"$(cat <<'EOF'\")) {\n      const match = command.match(\n        /^(.*?)\"?\\$\\(cat <<'EOF'\\n([\\s\\S]*?)\\n\\s*EOF\\n\\s*\\)\"(.*)$/,\n      )\n      if (match && match[1] && match[2]) {\n        const prefix = match[1]\n        const content = match[2]\n        const suffix = match[3] || ''\n        return `${prefix.trim()} \"${content.trim()}\"${suffix.trim()}`\n      }\n    }\n    return command\n  },\n  renderToolUseRejectedMessage() {\n    return <FallbackToolUseRejectedMessage />\n  },\n\n  renderToolResultMessage(content) {\n    return <BashToolResultMessage content={content} verbose={false} />\n  },\n  renderResultForAssistant({ interrupted, stdout, stderr }) {\n    let errorMessage = stderr.trim()\n    if (interrupted) {\n      if (stderr) errorMessage += EOL\n      errorMessage += '<error>Command was aborted before completion</error>'\n    }\n    const hasBoth = stdout.trim() && errorMessage\n    return `${stdout.trim()}${hasBoth ? '\\n' : ''}${errorMessage.trim()}`\n  },\n  async *call(\n    { command, timeout = 120000, run_in_background = false },\n    { abortController, readFileTimestamps },\n  ) {\n    // Handle background execution\n    if (run_in_background) {\n      const shellId = BackgroundShellManager.getInstance().create(\n        command,\n        getCwd(),\n      )\n\n      const data: Out = {\n        stdout: `Background shell started with ID: ${shellId}`,\n        stdoutLines: 1,\n        stderr: '',\n        stderrLines: 0,\n        interrupted: false,\n        shellId,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: `Started background shell: ${shellId}\\nCommand: ${command}`,\n        data,\n      }\n      return\n    }\n\n    let stdout = ''\n    let stderr = ''\n\n    // \uD83D\uDD27 Check if already cancelled before starting execution\n    if (abortController.signal.aborted) {\n      const data: Out = {\n        stdout: '',\n        stdoutLines: 0,\n        stderr: 'Command cancelled before execution',\n        stderrLines: 1,\n        interrupted: true,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n      return\n    }\n\n    try {\n      // Execute commands\n      const result = await PersistentShell.getInstance().exec(\n        command,\n        abortController.signal,\n        timeout,\n      )\n      stdout += (result.stdout || '').trim() + EOL\n      stderr += (result.stderr || '').trim() + EOL\n      if (result.code !== 0) {\n        stderr += `Exit code ${result.code}`\n      }\n\n      if (!isInDirectory(getCwd(), getOriginalCwd())) {\n        // Shell directory is outside original working directory, reset it\n        await PersistentShell.getInstance().setCwd(getOriginalCwd())\n        stderr = `${stderr.trim()}${EOL}Shell cwd was reset to ${getOriginalCwd()}`\n      }\n\n      // Update read timestamps for any files referenced by the command\n      // Don't block the main thread!\n      // Skip this in tests because it makes fixtures non-deterministic (they might not always get written),\n      // so will be missing in CI.\n      if (process.env.NODE_ENV !== 'test') {\n        getCommandFilePaths(command, stdout).then(filePaths => {\n          for (const filePath of filePaths) {\n            const fullFilePath = isAbsolute(filePath)\n              ? filePath\n              : resolve(getCwd(), filePath)\n\n            // Try/catch in case the file doesn't exist (because Haiku didn't properly extract it)\n            try {\n              readFileTimestamps[fullFilePath] = statSync(fullFilePath).mtimeMs\n            } catch (e) {\n              logError(e)\n            }\n          }\n        })\n      }\n\n      const { totalLines: stdoutLines, truncatedContent: stdoutContent } =\n        formatOutput(stdout.trim())\n      const { totalLines: stderrLines, truncatedContent: stderrContent } =\n        formatOutput(stderr.trim())\n\n      const data: Out = {\n        stdout: stdoutContent,\n        stdoutLines,\n        stderr: stderrContent,\n        stderrLines,\n        interrupted: result.interrupted,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n    } catch (error) {\n      // \uD83D\uDD27 Handle cancellation or other errors properly\n      const isAborted = abortController.signal.aborted\n      const errorMessage = isAborted\n        ? 'Command was cancelled by user'\n        : `Command failed: ${error instanceof Error ? error.message : String(error)}`\n\n      const data: Out = {\n        stdout: stdout.trim(),\n        stdoutLines: stdout.split('\\n').length,\n        stderr: errorMessage,\n        stderrLines: 1,\n        interrupted: isAborted,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n    }\n  },\n} satisfies Tool<In, Out>\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,WAAW;AACpB,SAAS,YAAY,UAAU,eAAe;AAC9C,YAAY,WAAW;AACvB,SAAS,SAAS;AAClB,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAG7B,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB,SAAS,uBAAuB;AAChC,SAAS,QAAQ,sBAAsB;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,OAAO,2BAA2B;AAClC,SAAS,iBAAiB,cAAc;AACxC,SAAS,cAAc,2BAA2B;AAE3C,MAAM,cAAc,EAAE,aAAa;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,SAAS,wBAAwB;AAAA,EACrD,SAAS,EACN,OAAO,EACP,SAAS,EACT,SAAS,+CAA+C;AAAA,EAC3D,mBAAmB,EAChB,QAAQ,EACR,SAAS,EACT,SAAS,mDAAmD;AACjE,CAAC;AAYM,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,cAAc;AAClB,WAAO;AAAA,EACT;AAAA,EACA,MAAM,SAAS;AACb,UAAM,SAAS,gBAAgB;AAE/B,UAAM,eAAe,gBAAgB;AACrC,UAAM,YACJ,aAAa,aAAa,MAAM,KAAK;AAEvC,WAAO,OAAO,QAAQ,iBAAiB,SAAS;AAAA,EAClD;AAAA,EACA,aAAa;AACX,WAAO;AAAA,EACT;AAAA,EACA,oBAAoB;AAClB,WAAO;AAAA,EACT;AAAA,EACA;AAAA,EACA,iBAAiB;AACf,WAAO;AAAA,EACT;AAAA,EACA,MAAM,YAAY;AAChB,WAAO;AAAA,EACT;AAAA,EACA,mBAA4B;AAE1B,WAAO;AAAA,EACT;AAAA,EACA,MAAM,cAAc,EAAE,QAAQ,GAA8B;AAC1D,UAAM,WAAW,aAAa,OAAO;AACrC,eAAW,OAAO,UAAU;AAC1B,YAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,YAAM,UAAU,MAAM,CAAC;AAGvB,UAAI,WAAW,gBAAgB,SAAS,QAAQ,YAAY,CAAC,GAAG;AAC9D,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,YAAY,OAAO;AAAA,QAC9B;AAAA,MACF;AAGA,UAAI,YAAY,QAAQ,MAAM,CAAC,GAAG;AAChC,cAAM,YAAY,MAAM,CAAC,EAAG,QAAQ,gBAAgB,EAAE;AACtD,cAAM,gBAAgB,WAAW,SAAS,IACtC,YACA,QAAQ,OAAO,GAAG,SAAS;AAC/B,YACE,CAAC;AAAA,UACC,SAAS,eAAe,GAAG,aAAa;AAAA,UACxC,SAAS,OAAO,GAAG,eAAe,CAAC;AAAA,QACrC,GACA;AACA,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,iBAAiB,aAAa,gCAAgC,YAAY,wFAAwF,eAAe,CAAC;AAAA,UAC7L;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB;AAAA,EACA,qBAAqB,EAAE,QAAQ,GAAG;AAEhC,QAAI,QAAQ,SAAS,gBAAiB,GAAG;AACvC,YAAM,QAAQ,QAAQ;AAAA,QACpB;AAAA,MACF;AACA,UAAI,SAAS,MAAM,CAAC,KAAK,MAAM,CAAC,GAAG;AACjC,cAAM,SAAS,MAAM,CAAC;AACtB,cAAM,UAAU,MAAM,CAAC;AACvB,cAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,eAAO,GAAG,OAAO,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AAAA,MAC7D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EACA,+BAA+B;AAC7B,WAAO,oCAAC,oCAA+B;AAAA,EACzC;AAAA,EAEA,wBAAwB,SAAS;AAC/B,WAAO,oCAAC,yBAAsB,SAAkB,SAAS,OAAO;AAAA,EAClE;AAAA,EACA,yBAAyB,EAAE,aAAa,QAAQ,OAAO,GAAG;AACxD,QAAI,eAAe,OAAO,KAAK;AAC/B,QAAI,aAAa;AACf,UAAI,OAAQ,iBAAgB;AAC5B,sBAAgB;AAAA,IAClB;AACA,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,WAAO,GAAG,OAAO,KAAK,CAAC,GAAG,UAAU,OAAO,EAAE,GAAG,aAAa,KAAK,CAAC;AAAA,EACrE;AAAA,EACA,OAAO,KACL,EAAE,SAAS,UAAU,MAAQ,oBAAoB,MAAM,GACvD,EAAE,iBAAiB,mBAAmB,GACtC;AAEA,QAAI,mBAAmB;AACrB,YAAM,UAAU,uBAAuB,YAAY,EAAE;AAAA,QACnD;AAAA,QACA,OAAO;AAAA,MACT;AAEA,YAAM,OAAY;AAAA,QAChB,QAAQ,qCAAqC,OAAO;AAAA,QACpD,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,QACb;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,6BAA6B,OAAO;AAAA,WAAc,OAAO;AAAA,QAC7E;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,SAAS;AAGb,QAAI,gBAAgB,OAAO,SAAS;AAClC,YAAM,OAAY;AAAA,QAChB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,SAAS,MAAM,gBAAgB,YAAY,EAAE;AAAA,QACjD;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,MACF;AACA,iBAAW,OAAO,UAAU,IAAI,KAAK,IAAI;AACzC,iBAAW,OAAO,UAAU,IAAI,KAAK,IAAI;AACzC,UAAI,OAAO,SAAS,GAAG;AACrB,kBAAU,aAAa,OAAO,IAAI;AAAA,MACpC;AAEA,UAAI,CAAC,cAAc,OAAO,GAAG,eAAe,CAAC,GAAG;AAE9C,cAAM,gBAAgB,YAAY,EAAE,OAAO,eAAe,CAAC;AAC3D,iBAAS,GAAG,OAAO,KAAK,CAAC,GAAG,GAAG,0BAA0B,eAAe,CAAC;AAAA,MAC3E;AAMA,UAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,4BAAoB,SAAS,MAAM,EAAE,KAAK,eAAa;AACrD,qBAAW,YAAY,WAAW;AAChC,kBAAM,eAAe,WAAW,QAAQ,IACpC,WACA,QAAQ,OAAO,GAAG,QAAQ;AAG9B,gBAAI;AACF,iCAAmB,YAAY,IAAI,SAAS,YAAY,EAAE;AAAA,YAC5D,SAAS,GAAG;AACV,uBAAS,CAAC;AAAA,YACZ;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,YAAY,aAAa,kBAAkB,cAAc,IAC/D,aAAa,OAAO,KAAK,CAAC;AAC5B,YAAM,EAAE,YAAY,aAAa,kBAAkB,cAAc,IAC/D,aAAa,OAAO,KAAK,CAAC;AAE5B,YAAM,OAAY;AAAA,QAChB,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA,aAAa,OAAO;AAAA,MACtB;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AAEd,YAAM,YAAY,gBAAgB,OAAO;AACzC,YAAM,eAAe,YACjB,kCACA,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAE7E,YAAM,OAAY;AAAA,QAChB,QAAQ,OAAO,KAAK;AAAA,QACpB,aAAa,OAAO,MAAM,IAAI,EAAE;AAAA,QAChC,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { statSync } from 'fs'\nimport { EOL } from 'os'\nimport { isAbsolute, relative, resolve } from 'path'\nimport * as React from 'react'\nimport { z } from 'zod'\nimport { FallbackToolUseRejectedMessage } from '@components/FallbackToolUseRejectedMessage'\nimport { PRODUCT_NAME } from '@constants/product'\nimport { queryQuick } from '@services/claude'\nimport { Tool, ValidationResult } from '@tool'\nimport { splitCommand } from '@utils/commands'\nimport { isInDirectory } from '@utils/file'\nimport { logError } from '@utils/log'\nimport {\n  PersistentShell,\n  type StreamingYield,\n  type StreamingResult,\n} from '@utils/PersistentShell'\nimport { getCwd, getOriginalCwd } from '@utils/state'\nimport { getGlobalConfig } from '@utils/config'\nimport { getModelManager } from '@utils/model'\nimport { BackgroundShellManager } from '@utils/BackgroundShellManager'\nimport BashToolResultMessage from './BashToolResultMessage'\nimport {\n  BANNED_COMMANDS,\n  PROMPT,\n  matchesDangerousPattern,\n  detectDangerousPatterns,\n} from './prompt'\nimport { formatOutput, getCommandFilePaths } from './utils'\n\nexport const inputSchema = z.strictObject({\n  command: z.string().describe('The command to execute'),\n  timeout: z\n    .number()\n    .optional()\n    .describe('Optional timeout in milliseconds (max 600000)'),\n  run_in_background: z\n    .boolean()\n    .optional()\n    .describe('Set to true to run this command in the background'),\n})\n\ntype In = typeof inputSchema\nexport type Out = {\n  stdout: string\n  stdoutLines: number // Total number of lines in original stdout, even if `stdout` is now truncated\n  stderr: string\n  stderrLines: number // Total number of lines in original stderr, even if `stderr` is now truncated\n  interrupted: boolean\n  shellId?: string // Present if run_in_background is true\n}\n\nexport const BashTool = {\n  name: 'Bash',\n  async description() {\n    return 'Executes shell commands on your computer'\n  },\n  async prompt() {\n    const config = getGlobalConfig()\n    // \uD83D\uDD27 Fix: Use ModelManager to get actual current model\n    const modelManager = getModelManager()\n    const modelName =\n      modelManager.getModelName('main') || '<No Model Configured>'\n    // Substitute the placeholder in the static PROMPT string\n    return PROMPT.replace(/{MODEL_NAME}/g, modelName)\n  },\n  isReadOnly() {\n    return false\n  },\n  isConcurrencySafe() {\n    return false // BashTool modifies state/files, not safe for concurrent execution\n  },\n  inputSchema,\n  userFacingName() {\n    return 'Bash'\n  },\n  async isEnabled() {\n    return true\n  },\n  needsPermissions(): boolean {\n    // Always check per-project permissions for BashTool\n    return true\n  },\n  async validateInput({ command }): Promise<ValidationResult> {\n    // Detect dangerous patterns (critical only block, others warn)\n    const dangerousPatterns = detectDangerousPatterns(command)\n    const criticalPatterns = dangerousPatterns.filter(\n      p => p.severity === 'critical',\n    )\n\n    if (criticalPatterns.length > 0) {\n      const patternNames = criticalPatterns.map(p => p.name).join(', ')\n      logError(\n        `SECURITY: Critical dangerous patterns detected in command: ${patternNames}`,\n      )\n      return {\n        result: false,\n        message: `Command contains critical security risks: ${patternNames}. This command has been blocked for security reasons.`,\n      }\n    }\n\n    // Log warnings for high-severity patterns (non-blocking)\n    const highPatterns = dangerousPatterns.filter(p => p.severity === 'high')\n    if (highPatterns.length > 0) {\n      const patternNames = highPatterns.map(p => p.name).join(', ')\n      logError(\n        `SECURITY WARNING: High-severity patterns detected in command: ${patternNames}. User confirmation required.`,\n      )\n    }\n\n    const commands = splitCommand(command)\n    for (const cmd of commands) {\n      const parts = cmd.split(' ')\n      const baseCmd = parts[0]\n\n      // Check if command is banned\n      if (baseCmd && BANNED_COMMANDS.includes(baseCmd.toLowerCase())) {\n        return {\n          result: false,\n          message: `Command '${baseCmd}' is not allowed for security reasons`,\n        }\n      }\n\n      // Also check for commands that might be invoked with full path\n      // e.g., /usr/bin/curl, /bin/rm\n      if (baseCmd && (baseCmd.startsWith('/') || baseCmd.startsWith('./'))) {\n        const cmdName = baseCmd.split('/').pop()?.toLowerCase()\n        if (cmdName && BANNED_COMMANDS.includes(cmdName)) {\n          return {\n            result: false,\n            message: `Command '${cmdName}' is not allowed for security reasons (full path: ${baseCmd})`,\n          }\n        }\n      }\n\n      // Special handling for cd command\n      if (baseCmd === 'cd' && parts[1]) {\n        const targetDir = parts[1]!.replace(/^['\"]|['\"]$/g, '') // Remove quotes if present\n        const fullTargetDir = isAbsolute(targetDir)\n          ? targetDir\n          : resolve(getCwd(), targetDir)\n        if (\n          !isInDirectory(\n            relative(getOriginalCwd(), fullTargetDir),\n            relative(getCwd(), getOriginalCwd()),\n          )\n        ) {\n          return {\n            result: false,\n            message: `ERROR: cd to '${fullTargetDir}' was blocked. For security, ${PRODUCT_NAME} may only change directories to child directories of the original working directory (${getOriginalCwd()}) for this session.`,\n          }\n        }\n      }\n    }\n\n    return { result: true }\n  },\n  renderToolUseMessage({ command }) {\n    // Clean up any command that uses the quoted HEREDOC pattern\n    if (command.includes(\"\\\"$(cat <<'EOF'\")) {\n      const match = command.match(\n        /^(.*?)\"?\\$\\(cat <<'EOF'\\n([\\s\\S]*?)\\n\\s*EOF\\n\\s*\\)\"(.*)$/,\n      )\n      if (match && match[1] && match[2]) {\n        const prefix = match[1]\n        const content = match[2]\n        const suffix = match[3] || ''\n        return `${prefix.trim()} \"${content.trim()}\"${suffix.trim()}`\n      }\n    }\n    return command\n  },\n  renderToolUseRejectedMessage() {\n    return <FallbackToolUseRejectedMessage />\n  },\n\n  renderToolResultMessage(content) {\n    return <BashToolResultMessage content={content} verbose={false} />\n  },\n  renderResultForAssistant({ interrupted, stdout, stderr }) {\n    let errorMessage = stderr.trim()\n    if (interrupted) {\n      if (stderr) errorMessage += EOL\n      errorMessage += '<error>Command was aborted before completion</error>'\n    }\n    const hasBoth = stdout.trim() && errorMessage\n    return `${stdout.trim()}${hasBoth ? '\\n' : ''}${errorMessage.trim()}`\n  },\n  async *call(\n    { command, timeout = 120000, run_in_background = false },\n    { abortController, readFileTimestamps },\n  ) {\n    // Handle background execution\n    if (run_in_background) {\n      const shellId = BackgroundShellManager.getInstance().create(\n        command,\n        getCwd(),\n      )\n\n      const data: Out = {\n        stdout: `Background shell started with ID: ${shellId}`,\n        stdoutLines: 1,\n        stderr: '',\n        stderrLines: 0,\n        interrupted: false,\n        shellId,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: `Started background shell: ${shellId}\\nCommand: ${command}`,\n        data,\n      }\n      return\n    }\n\n    let stdout = ''\n    let stderr = ''\n\n    // \uD83D\uDD27 CRITICAL FIX: Track whether this tool invocation has completed\n    // to prevent async callbacks from accessing stale context\n    let isCompleted = false\n\n    // \uD83D\uDD27 Check if already cancelled before starting execution\n    if (abortController.signal.aborted) {\n      const data: Out = {\n        stdout: '',\n        stdoutLines: 0,\n        stderr: 'Command cancelled before execution',\n        stderrLines: 1,\n        interrupted: true,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n      return\n    }\n\n    try {\n      // Execute commands with streaming output\n      let result: StreamingResult | null = null\n      let streamedStdout = ''\n      let streamedStderr = ''\n\n      // Use streaming execution for real-time output\n      const streamingGenerator = PersistentShell.getInstance().execStreaming(\n        command,\n        abortController.signal,\n        timeout,\n      )\n\n      for await (const chunk of streamingGenerator) {\n        if (chunk.type === 'chunk') {\n          // Accumulate streamed output\n          if (chunk.stdout) {\n            streamedStdout += chunk.stdout\n          }\n          if (chunk.stderr) {\n            streamedStderr += chunk.stderr\n          }\n\n          // Yield progress update for real-time UI feedback\n          // Use StreamingProgressContent format for proper rendering\n          yield {\n            type: 'progress',\n            content: {\n              type: 'streaming',\n              toolName: 'Bash',\n              stdout: streamedStdout,\n              stderr: streamedStderr,\n              isStreaming: true,\n            },\n          }\n        } else if (chunk.type === 'result') {\n          // Final result\n          result = chunk\n        }\n      }\n\n      // Use the final result (or construct from streamed data)\n      if (!result) {\n        result = {\n          type: 'result',\n          stdout: streamedStdout,\n          stderr: streamedStderr,\n          code: 0,\n          interrupted: false,\n        }\n      }\n\n      stdout += (result.stdout || '').trim() + EOL\n      stderr += (result.stderr || '').trim() + EOL\n      if (result.code !== 0) {\n        stderr += `Exit code ${result.code}`\n      }\n\n      if (!isInDirectory(getCwd(), getOriginalCwd())) {\n        // Shell directory is outside original working directory, reset it\n        await PersistentShell.getInstance().setCwd(getOriginalCwd())\n        stderr = `${stderr.trim()}${EOL}Shell cwd was reset to ${getOriginalCwd()}`\n      }\n\n      // Update read timestamps for any files referenced by the command\n      // Don't block the main thread!\n      // Skip this in tests because it makes fixtures non-deterministic (they might not always get written),\n      // so will be missing in CI.\n      if (process.env.NODE_ENV !== 'test') {\n        getCommandFilePaths(command, stdout).then(filePaths => {\n          // \uD83D\uDD27 CRITICAL FIX: Check if tool invocation has already completed\n          // to prevent accessing potentially stale context\n          if (isCompleted) {\n            return // Tool has finished, don't access readFileTimestamps\n          }\n\n          for (const filePath of filePaths) {\n            const fullFilePath = isAbsolute(filePath)\n              ? filePath\n              : resolve(getCwd(), filePath)\n\n            // Try/catch in case the file doesn't exist (because Haiku didn't properly extract it)\n            try {\n              readFileTimestamps[fullFilePath] = statSync(fullFilePath).mtimeMs\n            } catch (e) {\n              logError(e)\n            }\n          }\n        })\n      }\n\n      const { totalLines: stdoutLines, truncatedContent: stdoutContent } =\n        formatOutput(stdout.trim())\n      const { totalLines: stderrLines, truncatedContent: stderrContent } =\n        formatOutput(stderr.trim())\n\n      const data: Out = {\n        stdout: stdoutContent,\n        stdoutLines,\n        stderr: stderrContent,\n        stderrLines,\n        interrupted: result.interrupted,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n    } catch (error) {\n      // \uD83D\uDD27 Handle cancellation or other errors properly\n      const isAborted = abortController.signal.aborted\n      const errorMessage = isAborted\n        ? 'Command was cancelled by user'\n        : `Command failed: ${error instanceof Error ? error.message : String(error)}`\n\n      const data: Out = {\n        stdout: stdout.trim(),\n        stdoutLines: stdout.split('\\n').length,\n        stderr: errorMessage,\n        stderrLines: 1,\n        interrupted: isAborted,\n      }\n\n      yield {\n        type: 'result',\n        resultForAssistant: this.renderResultForAssistant(data),\n        data,\n      }\n    } finally {\n      // \uD83D\uDD27 CRITICAL FIX: Mark tool invocation as completed\n      // This prevents async callbacks (like getCommandFilePaths) from\n      // accessing potentially stale context after this tool returns\n      isCompleted = true\n    }\n  },\n} satisfies Tool<In, Out>\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,WAAW;AACpB,SAAS,YAAY,UAAU,eAAe;AAC9C,YAAY,WAAW;AACvB,SAAS,SAAS;AAClB,SAAS,sCAAsC;AAC/C,SAAS,oBAAoB;AAG7B,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,OAGK;AACP,SAAS,QAAQ,sBAAsB;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,OAAO,2BAA2B;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AACP,SAAS,cAAc,2BAA2B;AAE3C,MAAM,cAAc,EAAE,aAAa;AAAA,EACxC,SAAS,EAAE,OAAO,EAAE,SAAS,wBAAwB;AAAA,EACrD,SAAS,EACN,OAAO,EACP,SAAS,EACT,SAAS,+CAA+C;AAAA,EAC3D,mBAAmB,EAChB,QAAQ,EACR,SAAS,EACT,SAAS,mDAAmD;AACjE,CAAC;AAYM,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,cAAc;AAClB,WAAO;AAAA,EACT;AAAA,EACA,MAAM,SAAS;AACb,UAAM,SAAS,gBAAgB;AAE/B,UAAM,eAAe,gBAAgB;AACrC,UAAM,YACJ,aAAa,aAAa,MAAM,KAAK;AAEvC,WAAO,OAAO,QAAQ,iBAAiB,SAAS;AAAA,EAClD;AAAA,EACA,aAAa;AACX,WAAO;AAAA,EACT;AAAA,EACA,oBAAoB;AAClB,WAAO;AAAA,EACT;AAAA,EACA;AAAA,EACA,iBAAiB;AACf,WAAO;AAAA,EACT;AAAA,EACA,MAAM,YAAY;AAChB,WAAO;AAAA,EACT;AAAA,EACA,mBAA4B;AAE1B,WAAO;AAAA,EACT;AAAA,EACA,MAAM,cAAc,EAAE,QAAQ,GAA8B;AAE1D,UAAM,oBAAoB,wBAAwB,OAAO;AACzD,UAAM,mBAAmB,kBAAkB;AAAA,MACzC,OAAK,EAAE,aAAa;AAAA,IACtB;AAEA,QAAI,iBAAiB,SAAS,GAAG;AAC/B,YAAM,eAAe,iBAAiB,IAAI,OAAK,EAAE,IAAI,EAAE,KAAK,IAAI;AAChE;AAAA,QACE,8DAA8D,YAAY;AAAA,MAC5E;AACA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,6CAA6C,YAAY;AAAA,MACpE;AAAA,IACF;AAGA,UAAM,eAAe,kBAAkB,OAAO,OAAK,EAAE,aAAa,MAAM;AACxE,QAAI,aAAa,SAAS,GAAG;AAC3B,YAAM,eAAe,aAAa,IAAI,OAAK,EAAE,IAAI,EAAE,KAAK,IAAI;AAC5D;AAAA,QACE,iEAAiE,YAAY;AAAA,MAC/E;AAAA,IACF;AAEA,UAAM,WAAW,aAAa,OAAO;AACrC,eAAW,OAAO,UAAU;AAC1B,YAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,YAAM,UAAU,MAAM,CAAC;AAGvB,UAAI,WAAW,gBAAgB,SAAS,QAAQ,YAAY,CAAC,GAAG;AAC9D,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,YAAY,OAAO;AAAA,QAC9B;AAAA,MACF;AAIA,UAAI,YAAY,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,IAAI,IAAI;AACpE,cAAM,UAAU,QAAQ,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AACtD,YAAI,WAAW,gBAAgB,SAAS,OAAO,GAAG;AAChD,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,YAAY,OAAO,qDAAqD,OAAO;AAAA,UAC1F;AAAA,QACF;AAAA,MACF;AAGA,UAAI,YAAY,QAAQ,MAAM,CAAC,GAAG;AAChC,cAAM,YAAY,MAAM,CAAC,EAAG,QAAQ,gBAAgB,EAAE;AACtD,cAAM,gBAAgB,WAAW,SAAS,IACtC,YACA,QAAQ,OAAO,GAAG,SAAS;AAC/B,YACE,CAAC;AAAA,UACC,SAAS,eAAe,GAAG,aAAa;AAAA,UACxC,SAAS,OAAO,GAAG,eAAe,CAAC;AAAA,QACrC,GACA;AACA,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,iBAAiB,aAAa,gCAAgC,YAAY,wFAAwF,eAAe,CAAC;AAAA,UAC7L;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB;AAAA,EACA,qBAAqB,EAAE,QAAQ,GAAG;AAEhC,QAAI,QAAQ,SAAS,gBAAiB,GAAG;AACvC,YAAM,QAAQ,QAAQ;AAAA,QACpB;AAAA,MACF;AACA,UAAI,SAAS,MAAM,CAAC,KAAK,MAAM,CAAC,GAAG;AACjC,cAAM,SAAS,MAAM,CAAC;AACtB,cAAM,UAAU,MAAM,CAAC;AACvB,cAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,eAAO,GAAG,OAAO,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AAAA,MAC7D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EACA,+BAA+B;AAC7B,WAAO,oCAAC,oCAA+B;AAAA,EACzC;AAAA,EAEA,wBAAwB,SAAS;AAC/B,WAAO,oCAAC,yBAAsB,SAAkB,SAAS,OAAO;AAAA,EAClE;AAAA,EACA,yBAAyB,EAAE,aAAa,QAAQ,OAAO,GAAG;AACxD,QAAI,eAAe,OAAO,KAAK;AAC/B,QAAI,aAAa;AACf,UAAI,OAAQ,iBAAgB;AAC5B,sBAAgB;AAAA,IAClB;AACA,UAAM,UAAU,OAAO,KAAK,KAAK;AACjC,WAAO,GAAG,OAAO,KAAK,CAAC,GAAG,UAAU,OAAO,EAAE,GAAG,aAAa,KAAK,CAAC;AAAA,EACrE;AAAA,EACA,OAAO,KACL,EAAE,SAAS,UAAU,MAAQ,oBAAoB,MAAM,GACvD,EAAE,iBAAiB,mBAAmB,GACtC;AAEA,QAAI,mBAAmB;AACrB,YAAM,UAAU,uBAAuB,YAAY,EAAE;AAAA,QACnD;AAAA,QACA,OAAO;AAAA,MACT;AAEA,YAAM,OAAY;AAAA,QAChB,QAAQ,qCAAqC,OAAO;AAAA,QACpD,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,QACb;AAAA,MACF;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,6BAA6B,OAAO;AAAA,WAAc,OAAO;AAAA,QAC7E;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,SAAS;AAIb,QAAI,cAAc;AAGlB,QAAI,gBAAgB,OAAO,SAAS;AAClC,YAAM,OAAY;AAAA,QAChB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI;AAEF,UAAI,SAAiC;AACrC,UAAI,iBAAiB;AACrB,UAAI,iBAAiB;AAGrB,YAAM,qBAAqB,gBAAgB,YAAY,EAAE;AAAA,QACvD;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,MACF;AAEA,uBAAiB,SAAS,oBAAoB;AAC5C,YAAI,MAAM,SAAS,SAAS;AAE1B,cAAI,MAAM,QAAQ;AAChB,8BAAkB,MAAM;AAAA,UAC1B;AACA,cAAI,MAAM,QAAQ;AAChB,8BAAkB,MAAM;AAAA,UAC1B;AAIA,gBAAM;AAAA,YACJ,MAAM;AAAA,YACN,SAAS;AAAA,cACP,MAAM;AAAA,cACN,UAAU;AAAA,cACV,QAAQ;AAAA,cACR,QAAQ;AAAA,cACR,aAAa;AAAA,YACf;AAAA,UACF;AAAA,QACF,WAAW,MAAM,SAAS,UAAU;AAElC,mBAAS;AAAA,QACX;AAAA,MACF;AAGA,UAAI,CAAC,QAAQ;AACX,iBAAS;AAAA,UACP,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAEA,iBAAW,OAAO,UAAU,IAAI,KAAK,IAAI;AACzC,iBAAW,OAAO,UAAU,IAAI,KAAK,IAAI;AACzC,UAAI,OAAO,SAAS,GAAG;AACrB,kBAAU,aAAa,OAAO,IAAI;AAAA,MACpC;AAEA,UAAI,CAAC,cAAc,OAAO,GAAG,eAAe,CAAC,GAAG;AAE9C,cAAM,gBAAgB,YAAY,EAAE,OAAO,eAAe,CAAC;AAC3D,iBAAS,GAAG,OAAO,KAAK,CAAC,GAAG,GAAG,0BAA0B,eAAe,CAAC;AAAA,MAC3E;AAMA,UAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,4BAAoB,SAAS,MAAM,EAAE,KAAK,eAAa;AAGrD,cAAI,aAAa;AACf;AAAA,UACF;AAEA,qBAAW,YAAY,WAAW;AAChC,kBAAM,eAAe,WAAW,QAAQ,IACpC,WACA,QAAQ,OAAO,GAAG,QAAQ;AAG9B,gBAAI;AACF,iCAAmB,YAAY,IAAI,SAAS,YAAY,EAAE;AAAA,YAC5D,SAAS,GAAG;AACV,uBAAS,CAAC;AAAA,YACZ;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM,EAAE,YAAY,aAAa,kBAAkB,cAAc,IAC/D,aAAa,OAAO,KAAK,CAAC;AAC5B,YAAM,EAAE,YAAY,aAAa,kBAAkB,cAAc,IAC/D,aAAa,OAAO,KAAK,CAAC;AAE5B,YAAM,OAAY;AAAA,QAChB,QAAQ;AAAA,QACR;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA,aAAa,OAAO;AAAA,MACtB;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AAEd,YAAM,YAAY,gBAAgB,OAAO;AACzC,YAAM,eAAe,YACjB,kCACA,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAE7E,YAAM,OAAY;AAAA,QAChB,QAAQ,OAAO,KAAK;AAAA,QACpB,aAAa,OAAO,MAAM,IAAI,EAAE;AAAA,QAChC,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,aAAa;AAAA,MACf;AAEA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,oBAAoB,KAAK,yBAAyB,IAAI;AAAA,QACtD;AAAA,MACF;AAAA,IACF,UAAE;AAIA,oBAAc;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/tools/BashTool/BashToolResultMessage.js

@@ -3,6 +3,9 @@ import { OutputLine } from "./OutputLine.js";
 import React from "react";
 import { getTheme } from "../../utils/theme.js";
 function BashToolResultMessage({ content, verbose }) {
+  if (!content) {
+    return /* @__PURE__ */ React.createElement(Box, { flexDirection: "row" }, /* @__PURE__ */ React.createElement(Text, null, "\xA0\xA0\u23BF \xA0"), /* @__PURE__ */ React.createElement(Text, { color: getTheme().secondaryText }, "(No output)"));
+  }
   const { stdout, stdoutLines, stderr, stderrLines } = content;
   return /* @__PURE__ */ React.createElement(Box, { flexDirection: "column" }, stdout !== "" ? /* @__PURE__ */ React.createElement(OutputLine, { content: stdout, lines: stdoutLines, verbose }) : null, stderr !== "" ? /* @__PURE__ */ React.createElement(
     OutputLine,

package/dist/tools/BashTool/BashToolResultMessage.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/tools/BashTool/BashToolResultMessage.tsx"],
-  "sourcesContent": ["import { Box, Text } from 'ink'\nimport { OutputLine } from './OutputLine'\nimport React from 'react'\nimport { getTheme } from '@utils/theme'\nimport { Out as BashOut } from './BashTool'\n\ntype Props = {\n  content: Omit<BashOut, 'interrupted'>\n  verbose: boolean\n}\n\nfunction BashToolResultMessage({ content, verbose }: Props): React.JSX.Element {\n  const { stdout, stdoutLines, stderr, stderrLines } = content\n\n  return (\n    <Box flexDirection=\"column\">\n      {stdout !== '' ? (\n        <OutputLine content={stdout} lines={stdoutLines} verbose={verbose} />\n      ) : null}\n      {stderr !== '' ? (\n        <OutputLine\n          content={stderr}\n          lines={stderrLines}\n          verbose={verbose}\n          isError\n        />\n      ) : null}\n      {stdout === '' && stderr === '' ? (\n        <Box flexDirection=\"row\">\n          <Text>&nbsp;&nbsp;\u23BF &nbsp;</Text>\n          <Text color={getTheme().secondaryText}>(No content)</Text>\n        </Box>\n      ) : null}\n    </Box>\n  )\n}\n\nexport default BashToolResultMessage\n"],
-  "mappings": "AAAA,SAAS,KAAK,YAAY;AAC1B,SAAS,kBAAkB;AAC3B,OAAO,WAAW;AAClB,SAAS,gBAAgB;AAQzB,SAAS,sBAAsB,EAAE,SAAS,QAAQ,GAA6B;AAC7E,QAAM,EAAE,QAAQ,aAAa,QAAQ,YAAY,IAAI;AAErD,SACE,oCAAC,OAAI,eAAc,YAChB,WAAW,KACV,oCAAC,cAAW,SAAS,QAAQ,OAAO,aAAa,SAAkB,IACjE,MACH,WAAW,KACV;AAAA,IAAC;AAAA;AAAA,MACC,SAAS;AAAA,MACT,OAAO;AAAA,MACP;AAAA,MACA,SAAO;AAAA;AAAA,EACT,IACE,MACH,WAAW,MAAM,WAAW,KAC3B,oCAAC,OAAI,eAAc,SACjB,oCAAC,YAAK,qBAAoB,GAC1B,oCAAC,QAAK,OAAO,SAAS,EAAE,iBAAe,cAAY,CACrD,IACE,IACN;AAEJ;AAEA,IAAO,gCAAQ;",
+  "sourcesContent": ["import { Box, Text } from 'ink'\nimport { OutputLine } from './OutputLine'\nimport React from 'react'\nimport { getTheme } from '@utils/theme'\nimport { Out as BashOut } from './BashTool'\n\ntype Props = {\n  content: Omit<BashOut, 'interrupted'>\n  verbose: boolean\n}\n\nfunction BashToolResultMessage({ content, verbose }: Props): React.JSX.Element {\n  // Guard against undefined or null content\n  if (!content) {\n    return (\n      <Box flexDirection=\"row\">\n        <Text>&nbsp;&nbsp;\u23BF &nbsp;</Text>\n        <Text color={getTheme().secondaryText}>(No output)</Text>\n      </Box>\n    )\n  }\n\n  const { stdout, stdoutLines, stderr, stderrLines } = content\n\n  return (\n    <Box flexDirection=\"column\">\n      {stdout !== '' ? (\n        <OutputLine content={stdout} lines={stdoutLines} verbose={verbose} />\n      ) : null}\n      {stderr !== '' ? (\n        <OutputLine\n          content={stderr}\n          lines={stderrLines}\n          verbose={verbose}\n          isError\n        />\n      ) : null}\n      {stdout === '' && stderr === '' ? (\n        <Box flexDirection=\"row\">\n          <Text>&nbsp;&nbsp;\u23BF &nbsp;</Text>\n          <Text color={getTheme().secondaryText}>(No content)</Text>\n        </Box>\n      ) : null}\n    </Box>\n  )\n}\n\nexport default BashToolResultMessage\n"],
+  "mappings": "AAAA,SAAS,KAAK,YAAY;AAC1B,SAAS,kBAAkB;AAC3B,OAAO,WAAW;AAClB,SAAS,gBAAgB;AAQzB,SAAS,sBAAsB,EAAE,SAAS,QAAQ,GAA6B;AAE7E,MAAI,CAAC,SAAS;AACZ,WACE,oCAAC,OAAI,eAAc,SACjB,oCAAC,YAAK,qBAAoB,GAC1B,oCAAC,QAAK,OAAO,SAAS,EAAE,iBAAe,aAAW,CACpD;AAAA,EAEJ;AAEA,QAAM,EAAE,QAAQ,aAAa,QAAQ,YAAY,IAAI;AAErD,SACE,oCAAC,OAAI,eAAc,YAChB,WAAW,KACV,oCAAC,cAAW,SAAS,QAAQ,OAAO,aAAa,SAAkB,IACjE,MACH,WAAW,KACV;AAAA,IAAC;AAAA;AAAA,MACC,SAAS;AAAA,MACT,OAAO;AAAA,MACP;AAAA,MACA,SAAO;AAAA;AAAA,EACT,IACE,MACH,WAAW,MAAM,WAAW,KAC3B,oCAAC,OAAI,eAAc,SACjB,oCAAC,YAAK,qBAAoB,GAC1B,oCAAC,QAAK,OAAO,SAAS,EAAE,iBAAe,cAAY,CACrD,IACE,IACN;AAEJ;AAEA,IAAO,gCAAQ;",
   "names": []
 }

package/dist/tools/BashTool/OutputLine.js

@@ -3,7 +3,61 @@ import * as React from "react";
 import { getTheme } from "../../utils/theme.js";
 import { MAX_RENDERED_LINES } from "./prompt.js";
 import chalk from "chalk";
+function tryFormatGitCommit(content) {
+  const lines = content.trim().split("\n");
+  const commitMatch = lines[0]?.match(/^\[([^\]]+)\s+([a-f0-9]+)\]\s+(.+)$/);
+  if (!commitMatch) return null;
+  const [, branch, hash, message] = commitMatch;
+  const shortHash = hash.slice(0, 7);
+  const statsLine = lines.find((l) => l.match(/\d+\s+file.*changed/));
+  let stats = "";
+  if (statsLine) {
+    const filesMatch = statsLine.match(/(\d+)\s+file/);
+    const insertMatch = statsLine.match(/(\d+)\s+insertion/);
+    const deleteMatch = statsLine.match(/(\d+)\s+deletion/);
+    const parts = [];
+    if (filesMatch)
+      parts.push(`${filesMatch[1]} file${filesMatch[1] === "1" ? "" : "s"}`);
+    if (insertMatch) parts.push(`+${insertMatch[1]}`);
+    if (deleteMatch) parts.push(`-${deleteMatch[1]}`);
+    if (parts.length > 0) stats = ` (${parts.join(", ")})`;
+  }
+  const maxMsgLen = 50;
+  const truncatedMsg = message.length > maxMsgLen ? message.slice(0, maxMsgLen - 3) + "..." : message;
+  return `${shortHash} ${truncatedMsg}${stats}`;
+}
+function tryFormatGitStatus(content) {
+  const lines = content.trim().split("\n");
+  if (!lines.some(
+    (l) => l.includes("On branch") || l.includes("Changes") || l.includes("nothing to commit")
+  )) {
+    return null;
+  }
+  let staged = 0, modified = 0, untracked = 0;
+  let branch = "";
+  for (const line of lines) {
+    if (line.includes("On branch")) {
+      branch = line.replace("On branch", "").trim();
+    }
+    if (line.match(/^\s*(modified|new file|deleted):/)) staged++;
+    if (line.match(/^\s*modified:/)) modified++;
+    if (line.match(/^\?\?|Untracked files:/)) untracked++;
+  }
+  if (lines.some((l) => l.includes("nothing to commit"))) {
+    return branch ? `${branch}: clean` : "clean";
+  }
+  const parts = [];
+  if (branch) parts.push(branch);
+  if (staged > 0) parts.push(`${staged} staged`);
+  if (modified > 0) parts.push(`${modified} modified`);
+  if (untracked > 0) parts.push(`${untracked} untracked`);
+  return parts.length > 0 ? parts.join(", ") : null;
+}
 function renderTruncatedContent(content, totalLines) {
+  const gitCommit = tryFormatGitCommit(content);
+  if (gitCommit) return gitCommit;
+  const gitStatus = tryFormatGitStatus(content);
+  if (gitStatus) return gitStatus;
   const allLines = content.split("\n");
   if (allLines.length <= MAX_RENDERED_LINES) {
     return allLines.join("\n");

package/dist/tools/BashTool/OutputLine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/tools/BashTool/OutputLine.tsx"],
-  "sourcesContent": ["import { Box, Text } from 'ink'\nimport * as React from 'react'\nimport { getTheme } from '@utils/theme'\nimport { MAX_RENDERED_LINES } from './prompt'\nimport chalk from 'chalk'\n\nfunction renderTruncatedContent(content: string, totalLines: number): string {\n  const allLines = content.split('\\n')\n  if (allLines.length <= MAX_RENDERED_LINES) {\n    return allLines.join('\\n')\n  }\n\n  // Show last 5 lines of output by default (matching reference implementation)\n  const lastLines = allLines.slice(-MAX_RENDERED_LINES)\n  return [\n    chalk.grey(\n      `Showing last ${MAX_RENDERED_LINES} lines of ${totalLines} total lines`,\n    ),\n    ...lastLines,\n  ].join('\\n')\n}\n\nexport function OutputLine({\n  content,\n  lines,\n  verbose,\n  isError,\n}: {\n  content: string\n  lines: number\n  verbose: boolean\n  isError?: boolean\n  key?: React.Key\n}) {\n  return (\n    <Box justifyContent=\"space-between\" width=\"100%\">\n      <Box flexDirection=\"row\">\n        <Text>&nbsp;&nbsp;\u23BF &nbsp;</Text>\n        <Box flexDirection=\"column\">\n          <Text color={isError ? getTheme().error : undefined}>\n            {verbose\n              ? content.trim()\n              : renderTruncatedContent(content.trim(), lines)}\n          </Text>\n        </Box>\n      </Box>\n    </Box>\n  )\n}\n"],
-  "mappings": "AAAA,SAAS,KAAK,YAAY;AAC1B,YAAY,WAAW;AACvB,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,OAAO,WAAW;AAElB,SAAS,uBAAuB,SAAiB,YAA4B;AAC3E,QAAM,WAAW,QAAQ,MAAM,IAAI;AACnC,MAAI,SAAS,UAAU,oBAAoB;AACzC,WAAO,SAAS,KAAK,IAAI;AAAA,EAC3B;AAGA,QAAM,YAAY,SAAS,MAAM,CAAC,kBAAkB;AACpD,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,gBAAgB,kBAAkB,aAAa,UAAU;AAAA,IAC3D;AAAA,IACA,GAAG;AAAA,EACL,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,WAAW;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,SACE,oCAAC,OAAI,gBAAe,iBAAgB,OAAM,UACxC,oCAAC,OAAI,eAAc,SACjB,oCAAC,YAAK,qBAAoB,GAC1B,oCAAC,OAAI,eAAc,YACjB,oCAAC,QAAK,OAAO,UAAU,SAAS,EAAE,QAAQ,UACvC,UACG,QAAQ,KAAK,IACb,uBAAuB,QAAQ,KAAK,GAAG,KAAK,CAClD,CACF,CACF,CACF;AAEJ;",
+  "sourcesContent": ["import { Box, Text } from 'ink'\nimport * as React from 'react'\nimport { getTheme } from '@utils/theme'\nimport { MAX_RENDERED_LINES } from './prompt'\nimport chalk from 'chalk'\n\n/**\n * Try to format git commit output as a concise single-line summary\n * Returns null if not a git commit output\n */\nfunction tryFormatGitCommit(content: string): string | null {\n  const lines = content.trim().split('\\n')\n\n  // Pattern: [branch hash] message\n  const commitMatch = lines[0]?.match(/^\\[([^\\]]+)\\s+([a-f0-9]+)\\]\\s+(.+)$/)\n  if (!commitMatch) return null\n\n  const [, branch, hash, message] = commitMatch\n  const shortHash = hash.slice(0, 7)\n\n  // Look for file change stats\n  const statsLine = lines.find(l => l.match(/\\d+\\s+file.*changed/))\n  let stats = ''\n  if (statsLine) {\n    const filesMatch = statsLine.match(/(\\d+)\\s+file/)\n    const insertMatch = statsLine.match(/(\\d+)\\s+insertion/)\n    const deleteMatch = statsLine.match(/(\\d+)\\s+deletion/)\n    const parts = []\n    if (filesMatch)\n      parts.push(`${filesMatch[1]} file${filesMatch[1] === '1' ? '' : 's'}`)\n    if (insertMatch) parts.push(`+${insertMatch[1]}`)\n    if (deleteMatch) parts.push(`-${deleteMatch[1]}`)\n    if (parts.length > 0) stats = ` (${parts.join(', ')})`\n  }\n\n  // Truncate message if too long\n  const maxMsgLen = 50\n  const truncatedMsg =\n    message.length > maxMsgLen\n      ? message.slice(0, maxMsgLen - 3) + '...'\n      : message\n\n  return `${shortHash} ${truncatedMsg}${stats}`\n}\n\n/**\n * Try to format git status output concisely\n */\nfunction tryFormatGitStatus(content: string): string | null {\n  const lines = content.trim().split('\\n')\n\n  // Detect git status output\n  if (\n    !lines.some(\n      l =>\n        l.includes('On branch') ||\n        l.includes('Changes') ||\n        l.includes('nothing to commit'),\n    )\n  ) {\n    return null\n  }\n\n  // Count different types of changes\n  let staged = 0,\n    modified = 0,\n    untracked = 0\n  let branch = ''\n\n  for (const line of lines) {\n    if (line.includes('On branch')) {\n      branch = line.replace('On branch', '').trim()\n    }\n    if (line.match(/^\\s*(modified|new file|deleted):/)) staged++\n    if (line.match(/^\\s*modified:/)) modified++\n    if (line.match(/^\\?\\?|Untracked files:/)) untracked++\n  }\n\n  if (lines.some(l => l.includes('nothing to commit'))) {\n    return branch ? `${branch}: clean` : 'clean'\n  }\n\n  const parts = []\n  if (branch) parts.push(branch)\n  if (staged > 0) parts.push(`${staged} staged`)\n  if (modified > 0) parts.push(`${modified} modified`)\n  if (untracked > 0) parts.push(`${untracked} untracked`)\n\n  return parts.length > 0 ? parts.join(', ') : null\n}\n\nfunction renderTruncatedContent(content: string, totalLines: number): string {\n  // Try git-specific formatting first\n  const gitCommit = tryFormatGitCommit(content)\n  if (gitCommit) return gitCommit\n\n  const gitStatus = tryFormatGitStatus(content)\n  if (gitStatus) return gitStatus\n\n  const allLines = content.split('\\n')\n  if (allLines.length <= MAX_RENDERED_LINES) {\n    return allLines.join('\\n')\n  }\n\n  // Show last 5 lines of output by default (matching reference implementation)\n  const lastLines = allLines.slice(-MAX_RENDERED_LINES)\n  return [\n    chalk.grey(\n      `Showing last ${MAX_RENDERED_LINES} lines of ${totalLines} total lines`,\n    ),\n    ...lastLines,\n  ].join('\\n')\n}\n\nexport function OutputLine({\n  content,\n  lines,\n  verbose,\n  isError,\n}: {\n  content: string\n  lines: number\n  verbose: boolean\n  isError?: boolean\n  key?: React.Key\n}) {\n  return (\n    <Box justifyContent=\"space-between\" width=\"100%\">\n      <Box flexDirection=\"row\">\n        <Text>&nbsp;&nbsp;\u23BF &nbsp;</Text>\n        <Box flexDirection=\"column\">\n          <Text color={isError ? getTheme().error : undefined}>\n            {verbose\n              ? content.trim()\n              : renderTruncatedContent(content.trim(), lines)}\n          </Text>\n        </Box>\n      </Box>\n    </Box>\n  )\n}\n"],
+  "mappings": "AAAA,SAAS,KAAK,YAAY;AAC1B,YAAY,WAAW;AACvB,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,OAAO,WAAW;AAMlB,SAAS,mBAAmB,SAAgC;AAC1D,QAAM,QAAQ,QAAQ,KAAK,EAAE,MAAM,IAAI;AAGvC,QAAM,cAAc,MAAM,CAAC,GAAG,MAAM,qCAAqC;AACzE,MAAI,CAAC,YAAa,QAAO;AAEzB,QAAM,CAAC,EAAE,QAAQ,MAAM,OAAO,IAAI;AAClC,QAAM,YAAY,KAAK,MAAM,GAAG,CAAC;AAGjC,QAAM,YAAY,MAAM,KAAK,OAAK,EAAE,MAAM,qBAAqB,CAAC;AAChE,MAAI,QAAQ;AACZ,MAAI,WAAW;AACb,UAAM,aAAa,UAAU,MAAM,cAAc;AACjD,UAAM,cAAc,UAAU,MAAM,mBAAmB;AACvD,UAAM,cAAc,UAAU,MAAM,kBAAkB;AACtD,UAAM,QAAQ,CAAC;AACf,QAAI;AACF,YAAM,KAAK,GAAG,WAAW,CAAC,CAAC,QAAQ,WAAW,CAAC,MAAM,MAAM,KAAK,GAAG,EAAE;AACvE,QAAI,YAAa,OAAM,KAAK,IAAI,YAAY,CAAC,CAAC,EAAE;AAChD,QAAI,YAAa,OAAM,KAAK,IAAI,YAAY,CAAC,CAAC,EAAE;AAChD,QAAI,MAAM,SAAS,EAAG,SAAQ,KAAK,MAAM,KAAK,IAAI,CAAC;AAAA,EACrD;AAGA,QAAM,YAAY;AAClB,QAAM,eACJ,QAAQ,SAAS,YACb,QAAQ,MAAM,GAAG,YAAY,CAAC,IAAI,QAClC;AAEN,SAAO,GAAG,SAAS,IAAI,YAAY,GAAG,KAAK;AAC7C;AAKA,SAAS,mBAAmB,SAAgC;AAC1D,QAAM,QAAQ,QAAQ,KAAK,EAAE,MAAM,IAAI;AAGvC,MACE,CAAC,MAAM;AAAA,IACL,OACE,EAAE,SAAS,WAAW,KACtB,EAAE,SAAS,SAAS,KACpB,EAAE,SAAS,mBAAmB;AAAA,EAClC,GACA;AACA,WAAO;AAAA,EACT;AAGA,MAAI,SAAS,GACX,WAAW,GACX,YAAY;AACd,MAAI,SAAS;AAEb,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,SAAS,WAAW,GAAG;AAC9B,eAAS,KAAK,QAAQ,aAAa,EAAE,EAAE,KAAK;AAAA,IAC9C;AACA,QAAI,KAAK,MAAM,kCAAkC,EAAG;AACpD,QAAI,KAAK,MAAM,eAAe,EAAG;AACjC,QAAI,KAAK,MAAM,wBAAwB,EAAG;AAAA,EAC5C;AAEA,MAAI,MAAM,KAAK,OAAK,EAAE,SAAS,mBAAmB,CAAC,GAAG;AACpD,WAAO,SAAS,GAAG,MAAM,YAAY;AAAA,EACvC;AAEA,QAAM,QAAQ,CAAC;AACf,MAAI,OAAQ,OAAM,KAAK,MAAM;AAC7B,MAAI,SAAS,EAAG,OAAM,KAAK,GAAG,MAAM,SAAS;AAC7C,MAAI,WAAW,EAAG,OAAM,KAAK,GAAG,QAAQ,WAAW;AACnD,MAAI,YAAY,EAAG,OAAM,KAAK,GAAG,SAAS,YAAY;AAEtD,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI;AAC/C;AAEA,SAAS,uBAAuB,SAAiB,YAA4B;AAE3E,QAAM,YAAY,mBAAmB,OAAO;AAC5C,MAAI,UAAW,QAAO;AAEtB,QAAM,YAAY,mBAAmB,OAAO;AAC5C,MAAI,UAAW,QAAO;AAEtB,QAAM,WAAW,QAAQ,MAAM,IAAI;AACnC,MAAI,SAAS,UAAU,oBAAoB;AACzC,WAAO,SAAS,KAAK,IAAI;AAAA,EAC3B;AAGA,QAAM,YAAY,SAAS,MAAM,CAAC,kBAAkB;AACpD,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,gBAAgB,kBAAkB,aAAa,UAAU;AAAA,IAC3D;AAAA,IACA,GAAG;AAAA,EACL,EAAE,KAAK,IAAI;AACb;AAEO,SAAS,WAAW;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMG;AACD,SACE,oCAAC,OAAI,gBAAe,iBAAgB,OAAM,UACxC,oCAAC,OAAI,eAAc,SACjB,oCAAC,YAAK,qBAAoB,GAC1B,oCAAC,OAAI,eAAc,YACjB,oCAAC,QAAK,OAAO,UAAU,SAAS,EAAE,QAAQ,UACvC,UACG,QAAQ,KAAK,IACb,uBAAuB,QAAQ,KAAK,GAAG,KAAK,CAClD,CACF,CACF,CACF;AAEJ;",
   "names": []
 }