gsd-pi 2.76.0 → 2.77.0-dev.538325aea

package/packages/gsd-agent-core/dist/artifact-manager.js

@@ -0,0 +1,118 @@
+/**
+ * Session-scoped artifact storage for truncated tool outputs.
+ *
+ * Artifacts are stored in a directory alongside the session file,
+ * accessible via artifact:// URLs.
+ */
+import { mkdirSync, readdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Manages artifact storage for a session.
+ *
+ * Artifacts are stored with sequential IDs in the session's artifact directory.
+ * The directory is created lazily on first write.
+ */
+export class ArtifactManager {
+    #nextId = 0;
+    #dir;
+    #dirCreated = false;
+    #initialized = false;
+    /**
+     * @param sessionFile Path to the session .jsonl file
+     */
+    constructor(sessionFile) {
+        // Artifact directory is session file path without .jsonl extension
+        this.#dir = sessionFile.slice(0, -6);
+    }
+    /**
+     * Artifact directory path.
+     * Directory may not exist until first artifact is saved.
+     */
+    get dir() {
+        return this.#dir;
+    }
+    #ensureDir() {
+        if (!this.#dirCreated) {
+            mkdirSync(this.#dir, { recursive: true });
+            this.#dirCreated = true;
+        }
+        if (!this.#initialized) {
+            this.#scanExistingIds();
+            this.#initialized = true;
+        }
+    }
+    /**
+     * Scan existing artifact files to find the next available ID.
+     * Ensures we don't overwrite artifacts when resuming a session.
+     */
+    #scanExistingIds() {
+        const files = this.listFiles();
+        let maxId = -1;
+        for (const file of files) {
+            const match = file.match(/^(\d+)\..*\.log$/);
+            if (match) {
+                const id = parseInt(match[1], 10);
+                if (id > maxId)
+                    maxId = id;
+            }
+        }
+        this.#nextId = maxId + 1;
+    }
+    /** Atomically allocate next artifact ID. */
+    allocateId() {
+        this.#ensureDir();
+        return this.#nextId++;
+    }
+    /**
+     * Allocate a new artifact path and ID without writing content.
+     * @param toolType Tool name for file extension (e.g., "bash", "fetch")
+     */
+    allocatePath(toolType) {
+        this.#ensureDir();
+        const id = String(this.allocateId());
+        const filename = `${id}.${toolType}.log`;
+        return { id, path: join(this.#dir, filename) };
+    }
+    /**
+     * Save content as an artifact and return the artifact ID.
+     * @param content Full content to save
+     * @param toolType Tool name for file extension (e.g., "bash", "fetch")
+     * @returns Artifact ID (numeric string)
+     */
+    save(content, toolType) {
+        const { id, path } = this.allocatePath(toolType);
+        writeFileSync(path, content);
+        return id;
+    }
+    /**
+     * Check if an artifact exists.
+     * @param id Artifact ID (numeric string)
+     */
+    exists(id) {
+        const files = this.listFiles();
+        return files.some((f) => f.startsWith(`${id}.`));
+    }
+    /**
+     * List all artifact files in the directory.
+     * Returns empty array if directory doesn't exist.
+     */
+    listFiles() {
+        try {
+            return readdirSync(this.#dir);
+        }
+        catch {
+            return [];
+        }
+    }
+    /**
+     * Get the full path to an artifact file.
+     * Returns null if artifact doesn't exist.
+     * @param id Artifact ID (numeric string)
+     */
+    getPath(id) {
+        const files = this.listFiles();
+        const match = files.find((f) => f.startsWith(`${id}.`));
+        return match ? join(this.#dir, match) : null;
+    }
+}
+//# sourceMappingURL=artifact-manager.js.map

package/packages/gsd-agent-core/dist/artifact-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-manager.js","sourceRoot":"","sources":["../src/artifact-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAC3B,OAAO,GAAG,CAAC,CAAC;IACH,IAAI,CAAS;IACtB,WAAW,GAAG,KAAK,CAAC;IACpB,YAAY,GAAG,KAAK,CAAC;IAErB;;OAEG;IACH,YAAY,WAAmB;QAC9B,mEAAmE;QACnE,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,UAAU;QACT,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC1B,CAAC;IACF,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,GAAG,KAAK;oBAAE,KAAK,GAAG,EAAE,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,4CAA4C;IAC5C,UAAU;QACT,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,QAAgB;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,QAAQ,MAAM,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,OAAe,EAAE,QAAgB;QACrC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC;IACX,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,EAAU;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,SAAS;QACR,IAAI,CAAC;YACJ,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,EAAU;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;CACD","sourcesContent":["/**\n * Session-scoped artifact storage for truncated tool outputs.\n *\n * Artifacts are stored in a directory alongside the session file,\n * accessible via artifact:// URLs.\n */\nimport { mkdirSync, readdirSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\n/**\n * Manages artifact storage for a session.\n *\n * Artifacts are stored with sequential IDs in the session's artifact directory.\n * The directory is created lazily on first write.\n */\nexport class ArtifactManager {\n\t#nextId = 0;\n\treadonly #dir: string;\n\t#dirCreated = false;\n\t#initialized = false;\n\n\t/**\n\t * @param sessionFile Path to the session .jsonl file\n\t */\n\tconstructor(sessionFile: string) {\n\t\t// Artifact directory is session file path without .jsonl extension\n\t\tthis.#dir = sessionFile.slice(0, -6);\n\t}\n\n\t/**\n\t * Artifact directory path.\n\t * Directory may not exist until first artifact is saved.\n\t */\n\tget dir(): string {\n\t\treturn this.#dir;\n\t}\n\n\t#ensureDir(): void {\n\t\tif (!this.#dirCreated) {\n\t\t\tmkdirSync(this.#dir, { recursive: true });\n\t\t\tthis.#dirCreated = true;\n\t\t}\n\t\tif (!this.#initialized) {\n\t\t\tthis.#scanExistingIds();\n\t\t\tthis.#initialized = true;\n\t\t}\n\t}\n\n\t/**\n\t * Scan existing artifact files to find the next available ID.\n\t * Ensures we don't overwrite artifacts when resuming a session.\n\t */\n\t#scanExistingIds(): void {\n\t\tconst files = this.listFiles();\n\t\tlet maxId = -1;\n\t\tfor (const file of files) {\n\t\t\tconst match = file.match(/^(\\d+)\\..*\\.log$/);\n\t\t\tif (match) {\n\t\t\t\tconst id = parseInt(match[1], 10);\n\t\t\t\tif (id > maxId) maxId = id;\n\t\t\t}\n\t\t}\n\t\tthis.#nextId = maxId + 1;\n\t}\n\n\t/** Atomically allocate next artifact ID. */\n\tallocateId(): number {\n\t\tthis.#ensureDir();\n\t\treturn this.#nextId++;\n\t}\n\n\t/**\n\t * Allocate a new artifact path and ID without writing content.\n\t * @param toolType Tool name for file extension (e.g., \"bash\", \"fetch\")\n\t */\n\tallocatePath(toolType: string): { id: string; path: string } {\n\t\tthis.#ensureDir();\n\t\tconst id = String(this.allocateId());\n\t\tconst filename = `${id}.${toolType}.log`;\n\t\treturn { id, path: join(this.#dir, filename) };\n\t}\n\n\t/**\n\t * Save content as an artifact and return the artifact ID.\n\t * @param content Full content to save\n\t * @param toolType Tool name for file extension (e.g., \"bash\", \"fetch\")\n\t * @returns Artifact ID (numeric string)\n\t */\n\tsave(content: string, toolType: string): string {\n\t\tconst { id, path } = this.allocatePath(toolType);\n\t\twriteFileSync(path, content);\n\t\treturn id;\n\t}\n\n\t/**\n\t * Check if an artifact exists.\n\t * @param id Artifact ID (numeric string)\n\t */\n\texists(id: string): boolean {\n\t\tconst files = this.listFiles();\n\t\treturn files.some((f) => f.startsWith(`${id}.`));\n\t}\n\n\t/**\n\t * List all artifact files in the directory.\n\t * Returns empty array if directory doesn't exist.\n\t */\n\tlistFiles(): string[] {\n\t\ttry {\n\t\t\treturn readdirSync(this.#dir);\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t}\n\n\t/**\n\t * Get the full path to an artifact file.\n\t * Returns null if artifact doesn't exist.\n\t * @param id Artifact ID (numeric string)\n\t */\n\tgetPath(id: string): string | null {\n\t\tconst files = this.listFiles();\n\t\tconst match = files.find((f) => f.startsWith(`${id}.`));\n\t\treturn match ? join(this.#dir, match) : null;\n\t}\n}\n"]}

package/packages/gsd-agent-core/dist/bash-executor.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Bash command execution with streaming support and cancellation.
+ *
+ * This module provides a unified bash execution implementation used by:
+ * - AgentSession.executeBash() for interactive and RPC modes
+ * - Direct calls from modes that need bash execution
+ */
+export declare function sanitizeCommand(cmd: string): string;
+/**
+ * Dynamically import a sibling module relative to an extension's import.meta.url.
+ * Replaces the removed @gsd/pi-coding-agent importExtensionModule (0.67.2).
+ *
+ * Usage: const mod = await importExtensionModule<typeof import("./foo.js")>(import.meta.url, "./foo.js");
+ */
+export declare function importExtensionModule<T = unknown>(parentModuleUrl: string, specifier: string): Promise<T>;
+import type { BashOperations } from "@gsd/agent-types";
+export interface BashExecutorOptions {
+    /** Callback for streaming output chunks (already sanitized) */
+    onChunk?: (chunk: string) => void;
+    /** AbortSignal for cancellation */
+    signal?: AbortSignal;
+}
+export interface BashResult {
+    /** Combined stdout + stderr output (sanitized, possibly truncated) */
+    output: string;
+    /** Process exit code (undefined if killed/cancelled) */
+    exitCode: number | undefined;
+    /** Whether the command was cancelled via signal */
+    cancelled: boolean;
+    /** Whether the output was truncated */
+    truncated: boolean;
+    /** Path to temp file containing full output (if output exceeded truncation threshold) */
+    fullOutputPath?: string;
+}
+/**
+ * Execute a bash command with optional streaming and cancellation support.
+ *
+ * Features:
+ * - Streams sanitized output via onChunk callback
+ * - Writes large output to temp file for later retrieval
+ * - Supports cancellation via AbortSignal
+ * - Sanitizes output (strips ANSI, removes binary garbage, normalizes newlines)
+ * - Truncates output if it exceeds the default max bytes
+ *
+ * @param command - The bash command to execute
+ * @param options - Optional streaming callback and abort signal
+ * @returns Promise resolving to execution result
+ */
+export declare function executeBash(command: string, options?: BashExecutorOptions & {
+    loginShell?: boolean;
+}): Promise<BashResult>;
+/**
+ * Execute a bash command using custom BashOperations.
+ * Used for remote execution (SSH, containers, etc.).
+ */
+export declare function executeBashWithOperations(command: string, cwd: string, operations: BashOperations, options?: BashExecutorOptions): Promise<BashResult>;
+//# sourceMappingURL=bash-executor.d.ts.map

package/packages/gsd-agent-core/dist/bash-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../src/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAqDH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAInD;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAG/G;AAED,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMvD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAkI1H;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CA0FrB"}

package/packages/gsd-agent-core/dist/bash-executor.js

@@ -0,0 +1,282 @@
+/**
+ * Bash command execution with streaming support and cancellation.
+ *
+ * This module provides a unified bash execution implementation used by:
+ * - AgentSession.executeBash() for interactive and RPC modes
+ * - Direct calls from modes that need bash execution
+ */
+import { randomBytes } from "node:crypto";
+import { createWriteStream, unlinkSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { spawn, spawnSync } from "child_process";
+/** Track temp files created by bash execution for cleanup on exit. */
+const bashTempFiles = new Set();
+let cleanupRegistered = false;
+function registerTempCleanup() {
+    if (cleanupRegistered)
+        return;
+    cleanupRegistered = true;
+    process.on("exit", () => {
+        for (const file of bashTempFiles) {
+            try {
+                unlinkSync(file);
+            }
+            catch {
+                // Best-effort cleanup
+            }
+        }
+    });
+}
+import { processStreamChunk } from "@gsd/native";
+import { getShellConfig, DEFAULT_MAX_BYTES, truncateTail } from "@gsd/pi-coding-agent";
+function getShellEnv() {
+    return { ...process.env };
+}
+function killProcessTree(pid) {
+    if (process.platform === "win32") {
+        spawnSync("taskkill", ["/pid", String(pid), "/T", "/F"], { stdio: "ignore" });
+        return;
+    }
+    try {
+        process.kill(-pid, "SIGTERM");
+    }
+    catch {
+        try {
+            process.kill(pid, "SIGTERM");
+        }
+        catch {
+            // best effort
+        }
+    }
+}
+// sanitizeCommand was removed from @gsd/pi-coding-agent 0.67.2. The function
+// stripped null bytes and other control characters that could confuse the shell.
+// Phase 09: move to @gsd/agent-types or inline permanently.
+export function sanitizeCommand(cmd) {
+    // Remove null bytes and ASCII control characters (except newline/tab which are valid in scripts)
+    // eslint-disable-next-line no-control-regex -- intentional: sanitizing shell command input
+    return cmd.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g, "");
+}
+/**
+ * Dynamically import a sibling module relative to an extension's import.meta.url.
+ * Replaces the removed @gsd/pi-coding-agent importExtensionModule (0.67.2).
+ *
+ * Usage: const mod = await importExtensionModule<typeof import("./foo.js")>(import.meta.url, "./foo.js");
+ */
+export async function importExtensionModule(parentModuleUrl, specifier) {
+    const resolvedPath = fileURLToPath(new URL(specifier, parentModuleUrl));
+    return import(resolvedPath);
+}
+// ============================================================================
+// Implementation
+// ============================================================================
+/**
+ * Execute a bash command with optional streaming and cancellation support.
+ *
+ * Features:
+ * - Streams sanitized output via onChunk callback
+ * - Writes large output to temp file for later retrieval
+ * - Supports cancellation via AbortSignal
+ * - Sanitizes output (strips ANSI, removes binary garbage, normalizes newlines)
+ * - Truncates output if it exceeds the default max bytes
+ *
+ * @param command - The bash command to execute
+ * @param options - Optional streaming callback and abort signal
+ * @returns Promise resolving to execution result
+ */
+export function executeBash(command, options) {
+    // Check abort BEFORE spawning to avoid leaking the child process
+    if (options?.signal?.aborted) {
+        return Promise.resolve({ output: "", exitCode: undefined, cancelled: true, truncated: false });
+    }
+    return new Promise((resolve, reject) => {
+        let shell;
+        let args;
+        if (options?.loginShell) {
+            // Use the user's login shell with -l for PATH/env from shell profiles
+            shell = process.env.SHELL || "/bin/bash";
+            args = ["-l", "-c"];
+        }
+        else {
+            ({ shell, args } = getShellConfig());
+        }
+        // On Windows, detached: true sets CREATE_NEW_PROCESS_GROUP which can
+        // cause EINVAL in VSCode/ConPTY terminal contexts.  The bg-shell
+        // extension already guards this (process-manager.ts); align here.
+        // Process-tree cleanup uses taskkill /F /T on Windows regardless.
+        const child = spawn(shell, [...args, sanitizeCommand(command)], {
+            detached: process.platform !== "win32",
+            env: getShellEnv(),
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        // Track sanitized output for truncation
+        const outputChunks = [];
+        let outputBytes = 0;
+        const maxOutputBytes = DEFAULT_MAX_BYTES * 2;
+        // Temp file for large output
+        let tempFilePath;
+        let tempFileStream;
+        let totalBytes = 0;
+        // Handle abort signal
+        const abortHandler = () => {
+            if (child.pid) {
+                killProcessTree(child.pid);
+            }
+        };
+        if (options?.signal) {
+            options.signal.addEventListener("abort", abortHandler, { once: true });
+        }
+        let streamState;
+        const handleData = (data) => {
+            totalBytes += data.length;
+            // Single-pass native processing: UTF-8 decode + ANSI strip + binary sanitize + CR removal
+            const result = processStreamChunk(data, streamState);
+            streamState = result.state;
+            const text = result.text;
+            // Start writing to temp file if exceeds threshold
+            if (totalBytes > DEFAULT_MAX_BYTES && !tempFilePath) {
+                registerTempCleanup();
+                const id = randomBytes(8).toString("hex");
+                tempFilePath = join(tmpdir(), `pi-bash-${id}.log`);
+                bashTempFiles.add(tempFilePath);
+                tempFileStream = createWriteStream(tempFilePath);
+                // Write already-buffered chunks to temp file
+                for (const chunk of outputChunks) {
+                    tempFileStream.write(chunk);
+                }
+            }
+            if (tempFileStream) {
+                tempFileStream.write(text);
+            }
+            // Keep rolling buffer of sanitized text
+            outputChunks.push(text);
+            outputBytes += text.length;
+            while (outputBytes > maxOutputBytes && outputChunks.length > 1) {
+                const removed = outputChunks.shift();
+                outputBytes -= removed.length;
+            }
+            // Stream to callback if provided
+            if (options?.onChunk) {
+                options.onChunk(text);
+            }
+        };
+        child.stdout?.on("data", handleData);
+        child.stderr?.on("data", handleData);
+        child.on("close", (code) => {
+            // Clean up abort listener
+            if (options?.signal) {
+                options.signal.removeEventListener("abort", abortHandler);
+            }
+            if (tempFileStream && !tempFileStream.writableEnded) {
+                tempFileStream.end();
+            }
+            // Combine buffered chunks for truncation (already sanitized)
+            const fullOutput = outputChunks.join("");
+            const truncationResult = truncateTail(fullOutput);
+            // code === null means killed (cancelled)
+            const cancelled = code === null;
+            resolve({
+                output: truncationResult.truncated ? truncationResult.content : fullOutput,
+                exitCode: cancelled ? undefined : code,
+                cancelled,
+                truncated: truncationResult.truncated,
+                fullOutputPath: tempFilePath,
+            });
+        });
+        child.on("error", (err) => {
+            // Clean up abort listener
+            if (options?.signal) {
+                options.signal.removeEventListener("abort", abortHandler);
+            }
+            if (tempFileStream) {
+                tempFileStream.end();
+            }
+            reject(err);
+        });
+    });
+}
+/**
+ * Execute a bash command using custom BashOperations.
+ * Used for remote execution (SSH, containers, etc.).
+ */
+export async function executeBashWithOperations(command, cwd, operations, options) {
+    const outputChunks = [];
+    let outputBytes = 0;
+    const maxOutputBytes = DEFAULT_MAX_BYTES * 2;
+    let tempFilePath;
+    let tempFileStream;
+    let totalBytes = 0;
+    let streamState2;
+    const onData = (data) => {
+        totalBytes += data.length;
+        // Single-pass native processing: UTF-8 decode + ANSI strip + binary sanitize + CR removal
+        const result = processStreamChunk(data, streamState2);
+        streamState2 = result.state;
+        const text = result.text;
+        // Start writing to temp file if exceeds threshold
+        if (totalBytes > DEFAULT_MAX_BYTES && !tempFilePath) {
+            registerTempCleanup();
+            const id = randomBytes(8).toString("hex");
+            tempFilePath = join(tmpdir(), `pi-bash-${id}.log`);
+            bashTempFiles.add(tempFilePath);
+            tempFileStream = createWriteStream(tempFilePath);
+            for (const chunk of outputChunks) {
+                tempFileStream.write(chunk);
+            }
+        }
+        if (tempFileStream) {
+            tempFileStream.write(text);
+        }
+        // Keep rolling buffer
+        outputChunks.push(text);
+        outputBytes += text.length;
+        while (outputBytes > maxOutputBytes && outputChunks.length > 1) {
+            const removed = outputChunks.shift();
+            outputBytes -= removed.length;
+        }
+        // Stream to callback
+        if (options?.onChunk) {
+            options.onChunk(text);
+        }
+    };
+    try {
+        const result = await operations.exec(command, cwd, {
+            onData,
+            signal: options?.signal,
+        });
+        if (tempFileStream) {
+            tempFileStream.end();
+        }
+        const fullOutput = outputChunks.join("");
+        const truncationResult = truncateTail(fullOutput);
+        const cancelled = options?.signal?.aborted ?? false;
+        return {
+            output: truncationResult.truncated ? truncationResult.content : fullOutput,
+            exitCode: cancelled ? undefined : (result.exitCode ?? undefined),
+            cancelled,
+            truncated: truncationResult.truncated,
+            fullOutputPath: tempFilePath,
+        };
+    }
+    catch (err) {
+        if (tempFileStream) {
+            tempFileStream.end();
+        }
+        // Check if it was an abort
+        if (options?.signal?.aborted) {
+            const fullOutput = outputChunks.join("");
+            const truncationResult = truncateTail(fullOutput);
+            return {
+                output: truncationResult.truncated ? truncationResult.content : fullOutput,
+                exitCode: undefined,
+                cancelled: true,
+                truncated: truncationResult.truncated,
+                fullOutputPath: tempFilePath,
+            };
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=bash-executor.js.map

package/packages/gsd-agent-core/dist/bash-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../src/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAoB,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAqB,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEpE,sEAAsE;AACtE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;AAExC,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,SAAS,mBAAmB;IAC3B,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACvB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,UAAU,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACR,sBAAsB;YACvB,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AACD,OAAO,EAAE,kBAAkB,EAAoB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEvF,SAAS,WAAW;IACnB,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;IACF,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,iFAAiF;AACjF,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,iGAAiG;IACjG,2FAA2F;IAC3F,OAAO,GAAG,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAc,eAAuB,EAAE,SAAiB;IAClG,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,YAAY,CAAe,CAAC;AAC3C,CAAC;AA4BD,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAwD;IACpG,iEAAiE;IACjE,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,KAAa,CAAC;QAClB,IAAI,IAAc,CAAC;QACnB,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACzB,sEAAsE;YACtE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;YACzC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACP,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,qEAAqE;QACrE,iEAAiE;QACjE,kEAAkE;QAClE,kEAAkE;QAClE,MAAM,KAAK,GAAiB,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE;YAC7E,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,GAAG,EAAE,WAAW,EAAE;YAClB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;QAEH,wCAAwC;QACxC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;QAE7C,6BAA6B;QAC7B,IAAI,YAAgC,CAAC;QACrC,IAAI,cAAuC,CAAC;QAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,sBAAsB;QACtB,MAAM,YAAY,GAAG,GAAS,EAAE;YAC/B,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACf,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC,CAAC;QAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,WAAoC,CAAC;QAEzC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAQ,EAAE;YACzC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;YAE1B,0FAA0F;YAC1F,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACrD,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAEzB,kDAAkD;YAClD,IAAI,UAAU,GAAG,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;gBACrD,mBAAmB,EAAE,CAAC;gBACtB,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBACnD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAChC,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBACjD,6CAA6C;gBAC7C,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;oBAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;YACF,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAED,wCAAwC;YACxC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;YAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;gBACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;YAC/B,CAAC;YAED,iCAAiC;YACjC,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACF,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAErC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,0BAA0B;YAC1B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;gBACrD,cAAc,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YAED,6DAA6D;YAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAElD,yCAAyC;YACzC,MAAM,SAAS,GAAG,IAAI,KAAK,IAAI,CAAC;YAEhC,OAAO,CAAC;gBACP,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBACtC,SAAS;gBACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,0BAA0B;YAC1B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACpB,cAAc,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B;IAE7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,YAAqC,CAAC;IAE1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;QACrC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,0FAA0F;QAC1F,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtD,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;YACrD,mBAAmB,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAChC,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACF,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACF,CAAC,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;SACvB,CAAC,CAAC;QAEH,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, unlinkSync, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { type ChildProcess, spawn, spawnSync } from \"child_process\";\n\n/** Track temp files created by bash execution for cleanup on exit. */\nconst bashTempFiles = new Set<string>();\n\nlet cleanupRegistered = false;\nfunction registerTempCleanup(): void {\n\tif (cleanupRegistered) return;\n\tcleanupRegistered = true;\n\tprocess.on(\"exit\", () => {\n\t\tfor (const file of bashTempFiles) {\n\t\t\ttry {\n\t\t\t\tunlinkSync(file);\n\t\t\t} catch {\n\t\t\t\t// Best-effort cleanup\n\t\t\t}\n\t\t}\n\t});\n}\nimport { processStreamChunk, type StreamState } from \"@gsd/native\";\nimport { getShellConfig, DEFAULT_MAX_BYTES, truncateTail } from \"@gsd/pi-coding-agent\";\n\nfunction getShellEnv(): NodeJS.ProcessEnv {\n\treturn { ...process.env };\n}\n\nfunction killProcessTree(pid: number): void {\n\tif (process.platform === \"win32\") {\n\t\tspawnSync(\"taskkill\", [\"/pid\", String(pid), \"/T\", \"/F\"], { stdio: \"ignore\" });\n\t\treturn;\n\t}\n\n\ttry {\n\t\tprocess.kill(-pid, \"SIGTERM\");\n\t} catch {\n\t\ttry {\n\t\t\tprocess.kill(pid, \"SIGTERM\");\n\t\t} catch {\n\t\t\t// best effort\n\t\t}\n\t}\n}\n\n// sanitizeCommand was removed from @gsd/pi-coding-agent 0.67.2. The function\n// stripped null bytes and other control characters that could confuse the shell.\n// Phase 09: move to @gsd/agent-types or inline permanently.\nexport function sanitizeCommand(cmd: string): string {\n\t// Remove null bytes and ASCII control characters (except newline/tab which are valid in scripts)\n\t// eslint-disable-next-line no-control-regex -- intentional: sanitizing shell command input\n\treturn cmd.replace(/[\\x00-\\x08\\x0B\\x0C\\x0E-\\x1F\\x7F]/g, \"\");\n}\n\n/**\n * Dynamically import a sibling module relative to an extension's import.meta.url.\n * Replaces the removed @gsd/pi-coding-agent importExtensionModule (0.67.2).\n *\n * Usage: const mod = await importExtensionModule<typeof import(\"./foo.js\")>(import.meta.url, \"./foo.js\");\n */\nexport async function importExtensionModule<T = unknown>(parentModuleUrl: string, specifier: string): Promise<T> {\n\tconst resolvedPath = fileURLToPath(new URL(specifier, parentModuleUrl));\n\treturn import(resolvedPath) as Promise<T>;\n}\n\nimport type { BashOperations } from \"@gsd/agent-types\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command with optional streaming and cancellation support.\n *\n * Features:\n * - Streams sanitized output via onChunk callback\n * - Writes large output to temp file for later retrieval\n * - Supports cancellation via AbortSignal\n * - Sanitizes output (strips ANSI, removes binary garbage, normalizes newlines)\n * - Truncates output if it exceeds the default max bytes\n *\n * @param command - The bash command to execute\n * @param options - Optional streaming callback and abort signal\n * @returns Promise resolving to execution result\n */\nexport function executeBash(command: string, options?: BashExecutorOptions & { loginShell?: boolean }): Promise<BashResult> {\n\t// Check abort BEFORE spawning to avoid leaking the child process\n\tif (options?.signal?.aborted) {\n\t\treturn Promise.resolve({ output: \"\", exitCode: undefined, cancelled: true, truncated: false });\n\t}\n\n\treturn new Promise((resolve, reject) => {\n\t\tlet shell: string;\n\t\tlet args: string[];\n\t\tif (options?.loginShell) {\n\t\t\t// Use the user's login shell with -l for PATH/env from shell profiles\n\t\t\tshell = process.env.SHELL || \"/bin/bash\";\n\t\t\targs = [\"-l\", \"-c\"];\n\t\t} else {\n\t\t\t({ shell, args } = getShellConfig());\n\t\t}\n\t\t// On Windows, detached: true sets CREATE_NEW_PROCESS_GROUP which can\n\t\t// cause EINVAL in VSCode/ConPTY terminal contexts.  The bg-shell\n\t\t// extension already guards this (process-manager.ts); align here.\n\t\t// Process-tree cleanup uses taskkill /F /T on Windows regardless.\n\t\tconst child: ChildProcess = spawn(shell, [...args, sanitizeCommand(command)], {\n\t\t\tdetached: process.platform !== \"win32\",\n\t\t\tenv: getShellEnv(),\n\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t});\n\n\t\t// Track sanitized output for truncation\n\t\tconst outputChunks: string[] = [];\n\t\tlet outputBytes = 0;\n\t\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\t\t// Temp file for large output\n\t\tlet tempFilePath: string | undefined;\n\t\tlet tempFileStream: WriteStream | undefined;\n\t\tlet totalBytes = 0;\n\n\t\t// Handle abort signal\n\t\tconst abortHandler = (): void => {\n\t\t\tif (child.pid) {\n\t\t\t\tkillProcessTree(child.pid);\n\t\t\t}\n\t\t};\n\n\t\tif (options?.signal) {\n\t\t\toptions.signal.addEventListener(\"abort\", abortHandler, { once: true });\n\t\t}\n\n\t\tlet streamState: StreamState | undefined;\n\n\t\tconst handleData = (data: Buffer): void => {\n\t\t\ttotalBytes += data.length;\n\n\t\t\t// Single-pass native processing: UTF-8 decode + ANSI strip + binary sanitize + CR removal\n\t\t\tconst result = processStreamChunk(data, streamState);\n\t\t\tstreamState = result.state;\n\t\t\tconst text = result.text;\n\n\t\t\t// Start writing to temp file if exceeds threshold\n\t\t\tif (totalBytes > DEFAULT_MAX_BYTES && !tempFilePath) {\n\t\t\t\tregisterTempCleanup();\n\t\t\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\t\t\ttempFilePath = join(tmpdir(), `pi-bash-${id}.log`);\n\t\t\t\tbashTempFiles.add(tempFilePath);\n\t\t\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\t\t\t// Write already-buffered chunks to temp file\n\t\t\t\tfor (const chunk of outputChunks) {\n\t\t\t\t\ttempFileStream.write(chunk);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.write(text);\n\t\t\t}\n\n\t\t\t// Keep rolling buffer of sanitized text\n\t\t\toutputChunks.push(text);\n\t\t\toutputBytes += text.length;\n\t\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\t\tconst removed = outputChunks.shift()!;\n\t\t\t\toutputBytes -= removed.length;\n\t\t\t}\n\n\t\t\t// Stream to callback if provided\n\t\t\tif (options?.onChunk) {\n\t\t\t\toptions.onChunk(text);\n\t\t\t}\n\t\t};\n\n\t\tchild.stdout?.on(\"data\", handleData);\n\t\tchild.stderr?.on(\"data\", handleData);\n\n\t\tchild.on(\"close\", (code) => {\n\t\t\t// Clean up abort listener\n\t\t\tif (options?.signal) {\n\t\t\t\toptions.signal.removeEventListener(\"abort\", abortHandler);\n\t\t\t}\n\n\t\t\tif (tempFileStream && !tempFileStream.writableEnded) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\n\t\t\t// Combine buffered chunks for truncation (already sanitized)\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\n\t\t\t// code === null means killed (cancelled)\n\t\t\tconst cancelled = code === null;\n\n\t\t\tresolve({\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: cancelled ? undefined : code,\n\t\t\t\tcancelled,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t});\n\t\t});\n\n\t\tchild.on(\"error\", (err) => {\n\t\t\t// Clean up abort listener\n\t\t\tif (options?.signal) {\n\t\t\t\toptions.signal.removeEventListener(\"abort\", abortHandler);\n\t\t\t}\n\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\n\t\t\treject(err);\n\t\t});\n\t});\n}\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tlet streamState2: StreamState | undefined;\n\n\tconst onData = (data: Buffer): void => {\n\t\ttotalBytes += data.length;\n\n\t\t// Single-pass native processing: UTF-8 decode + ANSI strip + binary sanitize + CR removal\n\t\tconst result = processStreamChunk(data, streamState2);\n\t\tstreamState2 = result.state;\n\t\tconst text = result.text;\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES && !tempFilePath) {\n\t\t\tregisterTempCleanup();\n\t\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\t\ttempFilePath = join(tmpdir(), `pi-bash-${id}.log`);\n\t\t\tbashTempFiles.add(tempFilePath);\n\t\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\t\tfor (const chunk of outputChunks) {\n\t\t\t\ttempFileStream.write(chunk);\n\t\t\t}\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tthrow err;\n\t}\n}\n"]}

package/packages/gsd-agent-core/dist/blob-store.d.ts

@@ -0,0 +1,39 @@
+export interface BlobPutResult {
+    hash: string;
+    path: string;
+    get ref(): string;
+}
+export declare class BlobStore {
+    readonly dir: string;
+    constructor(dir: string);
+    /** Write binary data to the blob store. Idempotent — same content → same hash. */
+    put(data: Buffer): BlobPutResult;
+    /** Read blob by hash, returns Buffer or null if not found. */
+    get(hash: string): Buffer | null;
+    /** Check if a blob exists. */
+    has(hash: string): boolean;
+    /**
+     * Remove blobs not referenced by any session file.
+     * @param referencedHashes Set of SHA-256 hashes still referenced in session files.
+     * @returns Number of orphaned blobs removed.
+     */
+    gc(referencedHashes: Set<string>): number;
+    /** Get total size of all blobs in bytes, or 0 if the directory is empty/unreadable. */
+    totalSize(): number;
+}
+/** Check if a data string is a blob reference. */
+export declare function isBlobRef(data: string): boolean;
+/** Extract the SHA-256 hash from a blob reference string. Returns null if format is invalid. */
+export declare function parseBlobRef(data: string): string | null;
+/**
+ * Externalize an image's base64 data to the blob store, returning a blob reference.
+ * If the data is already a blob reference, returns it unchanged.
+ */
+export declare function externalizeImageData(blobStore: BlobStore, base64Data: string): string;
+/**
+ * Resolve a blob reference back to base64 data.
+ * If the data is not a blob reference, returns it unchanged.
+ * If the blob is missing, returns the ref unchanged.
+ */
+export declare function resolveImageData(blobStore: BlobStore, data: string): string;
+//# sourceMappingURL=blob-store.d.ts.map

package/packages/gsd-agent-core/dist/blob-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.d.ts","sourceRoot":"","sources":["../src/blob-store.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,GAAG,IAAI,MAAM,CAAC;CAClB;AAED,qBAAa,SAAS;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,GAAG,EAAE,MAAM;IAKvB,kFAAkF;IAClF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa;IAoBhC,8DAA8D;IAC9D,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAUhC,8BAA8B;IAC9B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU1B;;;;OAIG;IACH,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM;IAqBzC,uFAAuF;IACvF,SAAS,IAAI,MAAM;CAiBnB;AAED,kDAAkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAKrF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ3E"}