@wzwjustdoit/dsh-plugin-git-bash 0.0.0-stage → 0.4.0

package/cordis.patch.yml

@@ -0,0 +1,27 @@
+# Replace the platform-selected PowerShell stack with Git Bash on Windows.
+# On other platforms the stock Bash provider remains unchanged.
+
+- id: bash-sandbox
+  disabled: !!js process.platform === 'win32'
+
+- id: pwsh-sandbox
+  disabled: true
+
+- id: tool-bash
+  disabled: false
+
+- id: tool-pwsh
+  disabled: true
+
+- insert:
+    - id: git-bash-shell
+      name: '@wzwjustdoit/dsh-plugin-git-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        timeoutMs: 60000
+
+    # Web agent presets contribute PowerShell from an ancestor scope. This
+    # adapter shadows that contribution with the global Git Bash-backed tool.
+    - id: git-bash-agent-shell
+      name: '@wzwjustdoit/dsh-plugin-git-bash/agents'
+      disabled: !!js process.platform !== 'win32'

package/lib/agents.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+export declare const name = "git-bash-agent-shell";
+export declare const inject: string[];
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=agents.d.ts.map

package/lib/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAKnD,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAC3C,eAAO,MAAM,MAAM,UAAsC,CAAC;AAG1D,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CA0DxC"}

package/lib/agents.js

@@ -0,0 +1,56 @@
+export const name = "git-bash-agent-shell";
+export const inject = ["agents", "tools", "systemPrompt"];
+// Make the global Git Bash-backed Bash tool win over preset-provided shells.
+export function apply(ctx) {
+    const installed = new Map();
+    const install = (agent) => {
+        if (installed.has(agent))
+            return;
+        let cleanup;
+        cleanup = agent.ctx.effect(() => {
+            const disposers = [];
+            const globalBash = ctx.tools.get("bash");
+            if (!globalBash) {
+                throw new Error("git-bash-agent-shell: the global bash tool is unavailable; keep the tool-bash row enabled");
+            }
+            disposers.push(agent.ctx.tools.register(globalBash));
+            if (ctx.tools.get("pwsh", agent)) {
+                disposers.push(agent.ctx.tools.restrict({ deny: ["pwsh"] }));
+            }
+            disposers.push(agent.ctx.systemPrompt.section({
+                name: "tool:bash",
+                order: 105,
+                text: "Check the [exit code: N] marker on every Git Bash result; investigate failures before moving on.",
+            }));
+            disposers.push(agent.ctx.systemPrompt.section({
+                name: "tool:pwsh",
+                order: 105,
+                text: "",
+            }));
+            return () => {
+                for (const dispose of disposers.reverse())
+                    dispose();
+                if (installed.get(agent) === cleanup)
+                    installed.delete(agent);
+            };
+        }, "git-bash-agent-shell.install()");
+        installed.set(agent, cleanup);
+    };
+    ctx.effect(() => {
+        const stopCreated = ctx.on("agent/created", ({ agent }) => {
+            install(agent);
+            return undefined;
+        });
+        const stopDisposed = ctx.on("agent/disposed", ({ agent }) => installed.delete(agent));
+        for (const agent of ctx.agents.list())
+            install(agent);
+        return async () => {
+            stopCreated();
+            stopDisposed();
+            const cleanups = [...installed.values()];
+            installed.clear();
+            await Promise.allSettled(cleanups.map((cleanup) => Promise.resolve(cleanup())));
+        };
+    }, "git-bash-agent-shell.lifecycle()");
+}
+//# sourceMappingURL=agents.js.map

package/lib/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,IAAI,GAAG,sBAAsB,CAAC;AAC3C,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAE1D,6EAA6E;AAC7E,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAElD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;QACrC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAEjC,IAAI,OAAuB,CAAC;QAC5B,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YAC9B,MAAM,SAAS,GAAyB,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;YACJ,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YAErD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACjC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;gBAC5C,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,kGAAkG;aACzG,CAAC,CAAC,CAAC;YACJ,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;gBAC5C,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,EAAE;aACT,CAAC,CAAC,CAAC;YAEJ,OAAO,GAAG,EAAE;gBACV,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE;oBAAE,OAAO,EAAE,CAAC;gBACrD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO;oBAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC;QACJ,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAErC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACxD,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAEtD,OAAO,KAAK,IAAI,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC;IACJ,CAAC,EAAE,kCAAkC,CAAC,CAAC;AACzC,CAAC"}

package/lib/discovery.d.ts

@@ -0,0 +1,21 @@
+export declare const GIT_BASH_PATH_ENV = "DSH_GIT_BASH_PATH";
+export declare const GIT_BASH_PATH_CONFINED_ENV = "DSH_GIT_BASH_PATH_CONFINED";
+export interface GitBashDiscoveryOptions {
+    env?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    /** Environment variable naming the configured executable; defaults to {@link GIT_BASH_PATH_ENV}. */
+    envName?: string;
+}
+export declare function gitBashCandidates(env?: NodeJS.ProcessEnv): string[];
+export declare function resolveGitBashPath(executable?: string, options?: GitBashDiscoveryOptions): string;
+/**
+ * The validated `bash.exe` named by one environment variable, or `undefined`
+ * when that variable is unset. Unlike {@link resolveGitBashPath} this never
+ * falls back to auto-discovery, so callers can layer several variables.
+ * @param envName - environment variable to read (case-insensitively).
+ * @param options - environment/platform overrides, as for {@link resolveGitBashPath}.
+ * @returns the resolved executable, or `undefined` when the variable is unset.
+ * @throws when the variable is set but names a missing or unusable executable.
+ */
+export declare function configuredGitBashPath(envName: string, options?: GitBashDiscoveryOptions): string | undefined;
+//# sourceMappingURL=discovery.d.ts.map

package/lib/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAKrD,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA8CD,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAiChF;AAGD,wBAAgB,kBAAkB,CAChC,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,GAAE,uBAA4B,GACpC,MAAM,CA8BR;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,SAAS,CAIpB"}

package/lib/discovery.js

@@ -0,0 +1,122 @@
+import { accessSync, constants, realpathSync, statSync, } from "node:fs";
+import { win32 } from "node:path";
+export const GIT_BASH_PATH_ENV = "DSH_GIT_BASH_PATH";
+// The Git installation the confined modes use. Its MSYS named-object hash must
+// differ from the unconfined one's, so a Low-integrity child can create its own
+// `\BaseNamedObjects\msys-2.0S5-<hash>` instead of opening an existing
+// Medium-labelled object (see README's "两个环境变量的分工" section).
+export const GIT_BASH_PATH_CONFINED_ENV = "DSH_GIT_BASH_PATH_CONFINED";
+function envValue(env, name) {
+    const wanted = name.toLowerCase();
+    const entry = Object.entries(env).find(([key]) => key.toLowerCase() === wanted);
+    const value = entry?.[1]?.trim();
+    return value && value.length > 0 ? value : undefined;
+}
+function expandEnvironmentVariables(value, env) {
+    return value.replace(/%([^%]+)%/g, (match, name) => envValue(env, name) ?? match);
+}
+function canonicalExecutable(candidate) {
+    try {
+        if (!statSync(candidate).isFile())
+            return undefined;
+        accessSync(candidate, constants.X_OK);
+        return realpathSync.native(candidate);
+    }
+    catch {
+        return undefined;
+    }
+}
+function uniqueWindowsPaths(paths) {
+    const seen = new Set();
+    const result = [];
+    for (const candidate of paths) {
+        const normalized = win32.normalize(candidate.trim());
+        if (normalized.length === 0)
+            continue;
+        const key = normalized.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push(normalized);
+    }
+    return result;
+}
+function appendGitRoot(candidates, root) {
+    if (!root)
+        return;
+    candidates.push(win32.join(root, "bin", "bash.exe"), win32.join(root, "usr", "bin", "bash.exe"));
+}
+// Return likely Git for Windows Bash locations in preference order.
+export function gitBashCandidates(env = process.env) {
+    const candidates = [];
+    for (const variable of ["ProgramFiles", "ProgramW6432", "ProgramFiles(x86)"]) {
+        const directory = envValue(env, variable);
+        if (directory)
+            appendGitRoot(candidates, win32.join(directory, "Git"));
+    }
+    const localAppData = envValue(env, "LOCALAPPDATA");
+    if (localAppData)
+        appendGitRoot(candidates, win32.join(localAppData, "Programs", "Git"));
+    const userProfile = envValue(env, "USERPROFILE");
+    if (userProfile) {
+        appendGitRoot(candidates, win32.join(userProfile, "scoop", "apps", "git", "current"));
+        appendGitRoot(candidates, win32.join(userProfile, "AppData", "Local", "Programs", "Git"));
+    }
+    appendGitRoot(candidates, envValue(env, "GIT_INSTALL_ROOT"));
+    const pathValue = envValue(env, "PATH") ?? "";
+    for (const rawEntry of pathValue.split(win32.delimiter)) {
+        const entry = rawEntry.trim().replace(/^"|"$/g, "");
+        if (entry.length === 0)
+            continue;
+        const gitRoot = /^(.*[\\/]git)(?:[\\/].*)?$/i.exec(entry)?.[1];
+        if (gitRoot)
+            appendGitRoot(candidates, gitRoot);
+        if (/(?:^|[\\/])git(?:[\\/]|$)/i.test(entry)) {
+            candidates.push(win32.join(entry, "bash.exe"));
+        }
+    }
+    return uniqueWindowsPaths(candidates);
+}
+// Resolve and validate the Git for Windows Bash executable.
+export function resolveGitBashPath(executable, options = {}) {
+    const env = options.env ?? process.env;
+    const platform = options.platform ?? process.platform;
+    if (platform !== "win32") {
+        throw new Error("git-bash: Git for Windows is supported only on Windows");
+    }
+    const configured = executable?.trim() || envValue(env, options.envName ?? GIT_BASH_PATH_ENV);
+    if (configured) {
+        const expanded = expandEnvironmentVariables(configured, env);
+        const resolved = canonicalExecutable(expanded);
+        if (resolved)
+            return resolved;
+        throw new Error(`git-bash: configured executable does not exist or is not executable: ${expanded}`);
+    }
+    const candidates = gitBashCandidates(env);
+    for (const candidate of candidates) {
+        const resolved = canonicalExecutable(candidate);
+        if (resolved)
+            return resolved;
+    }
+    throw new Error([
+        "git-bash: Git for Windows Bash was not found.",
+        `Install Git for Windows or set ${GIT_BASH_PATH_ENV} to bash.exe.`,
+        candidates.length > 0 ? `Checked: ${candidates.join(", ")}` : "No candidate paths were available.",
+    ].join(" "));
+}
+/**
+ * The validated `bash.exe` named by one environment variable, or `undefined`
+ * when that variable is unset. Unlike {@link resolveGitBashPath} this never
+ * falls back to auto-discovery, so callers can layer several variables.
+ * @param envName - environment variable to read (case-insensitively).
+ * @param options - environment/platform overrides, as for {@link resolveGitBashPath}.
+ * @returns the resolved executable, or `undefined` when the variable is unset.
+ * @throws when the variable is set but names a missing or unusable executable.
+ */
+export function configuredGitBashPath(envName, options = {}) {
+    const env = options.env ?? process.env;
+    if (!envValue(env, envName))
+        return undefined;
+    return resolveGitBashPath(undefined, { ...options, envName });
+}
+//# sourceMappingURL=discovery.js.map

package/lib/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,+EAA+E;AAC/E,gFAAgF;AAChF,uEAAuE;AACvE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AASvE,SAAS,QAAQ,CAAC,GAAsB,EAAE,IAAY;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,GAAsB;IACvE,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC;QACpD,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtC,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,UAAoB,EAAE,IAAwB;IACnE,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,UAAU,CAAC,IAAI,CACb,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,EACnC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,QAAQ,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,SAAS;YAAE,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,YAAY;QAAE,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzF,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACtF,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEjC,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAChC,UAAmB,EACnB,UAAmC,EAAE;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;IAC7F,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,0BAA0B,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,wEAAwE,QAAQ,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,KAAK,CACb;QACE,+CAA+C;QAC/C,kCAAkC,iBAAiB,eAAe;QAClE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,oCAAoC;KACnG,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,UAAmC,EAAE;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,kBAAkB,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,55 @@
+import type { Context } from "@deepseek-ai/cordis";
+import { LocalBashExecutor } from "@deepseek-ai/dsh-bash-local";
+import type { Config as LocalBashConfig } from "@deepseek-ai/dsh-bash-local";
+import type { SandboxMode } from "@deepseek-ai/dsh-sandbox";
+import type { ShellExecRequest, ShellExecSpec, ShellExecution, ShellProcess } from "@deepseek-ai/dsh-shell";
+import z from "@deepseek-ai/schemastery";
+export { GIT_BASH_PATH_CONFINED_ENV, GIT_BASH_PATH_ENV, configuredGitBashPath, gitBashCandidates, resolveGitBashPath, } from "./discovery.js";
+export interface Config extends LocalBashConfig {
+    executable?: string;
+    confinedExecutable?: string;
+}
+export declare const Config: z<Config>;
+export declare function describeGuardFailure(detail: string): string;
+export declare class GitBashExecutor extends LocalBashExecutor {
+    static inject: string[];
+    static Config: typeof LocalBashExecutor.Config;
+    private readonly executableCache;
+    private readonly mode;
+    private readonly processFacts;
+    constructor(ctx: Context, config: Config);
+    /**
+     * The bash.exe for one file-effect mode. `danger-full-access` uses the
+     * unconfined installation (`executable` / {@link GIT_BASH_PATH_ENV}); the
+     * confined modes prefer their dedicated installation (`confinedExecutable` /
+     * {@link GIT_BASH_PATH_CONFINED_ENV}) so their MSYS shared object is created
+     * fresh by the Low-integrity child rather than inherited as a Medium object.
+     * @param mode - the resolved policy mode for this execution.
+     */
+    private executableFor;
+    /** The unconfined-mode bash.exe; kept as the public property existing tests and callers read. */
+    get executable(): string;
+    get sandboxMode(): SandboxMode;
+    resolve(request: ShellExecRequest): ShellExecSpec;
+    private argv;
+    private guardedArgv;
+    private policy;
+    private confine;
+    private serverDaclNormalized;
+    private ensureServerDaclNormalized;
+    execute(spec: ShellExecSpec): Promise<ShellExecution>;
+    /**
+     * Decorate the handle's foreground projection in place, memoized once. The
+     * handle keeps its identity (never wrapped in a second object) because the
+     * per-process facts and `onProcessDone` key on the exact instance.
+     */
+    private static decorateResult;
+    /**
+     * Stamp per-process sandbox facts before `done` settles. Full-access
+     * processes carry no facts; provider rejections are classified as runner
+     * failures rather than denials.
+     */
+    protected onProcessDone(proc: ShellProcess, stderr: string, providerRejected: boolean, providerError?: unknown): void;
+}
+export default GitBashExecutor;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE7E,OAAO,KAAK,EAMV,WAAW,EAEZ,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,YAAY,EAEb,MAAM,wBAAwB,CAAC;AAChC,OAAO,CAAC,MAAM,0BAA0B,CAAC;AAOzC,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAgDxB,MAAM,WAAW,MAAO,SAAQ,eAAe;IAE7C,UAAU,CAAC,EAAE,MAAM,CAAC;IAMpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAWD,eAAO,MAAM,MAAM,EAkBZ,CAAC,CAAC,MAAM,CAAC,CAAC;AAgGjB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM3D;AA2DD,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,OAAgB,MAAM,WAA8C;IAIpE,OAAgB,MAAM,EAAwB,OAAO,iBAAiB,CAAC,MAAM,CAAC;IAE9E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA+D;IAC/F,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyC;gBAE1D,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAOxC;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAarB,iGAAiG;IACjG,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAa,WAAW,IAAI,WAAW,CAEtC;IAEQ,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa;IAc1D,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,MAAM;YAOA,OAAO;IAmBrB,OAAO,CAAC,oBAAoB,CAAS;IAErC,OAAO,CAAC,0BAA0B;IAMnB,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAyEpE;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAc7B;;;;OAIG;cACgB,aAAa,CAC9B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,OAAO,EACzB,aAAa,CAAC,EAAE,OAAO,GACtB,IAAI;CAoBR;AAED,eAAe,eAAe,CAAC"}