lonny-agent 0.2.6 → 0.2.7

package/dist/tools/execute/bash/index.js

@@ -0,0 +1,117 @@
+import * as os from 'node:os';
+import { fmtErr } from '../../errors.js';
+import { MAX_OUTPUT_LENGTH } from './constants.js';
+import { buildErrorMsg, extractPowerShellNativeOutput, truncateOutput } from './errors.js';
+import { execCommand } from './execution.js';
+import { ENCODING, env } from './platform.js';
+import { checkDestructive, redactSensitive } from './security.js';
+import { validateInput } from './validation.js';
+export const bashTool = {
+    definition: {
+        name: 'bash',
+        category: 'Execute',
+        group: 'Shell',
+        description: `Execute a shell command. Returns stdout and stderr.
+
+Environment: ${env.osInfo}
+Shell: ${env.shell}
+Console encoding: ${ENCODING}
+
+⚠️  Use this tool for READ-ONLY operations (run tests, check builds, list files).
+For creating/modifying files, use the 'edit' tool instead.
+For git operations (status, diff, log), use the 'git' tool instead.`,
+        parameters: {
+            command: {
+                type: 'string',
+                description: 'Shell command to execute (required, non-empty string)',
+                required: true,
+            },
+            description: {
+                type: 'string',
+                description: 'Brief description (e.g. "Run unit tests"). Included in the output for traceability.',
+            },
+            timeout: {
+                type: 'number',
+                description: 'Timeout in ms (100-600000, default: 120000). Increase for slow operations like npm install.',
+            },
+            cwd: {
+                type: 'string',
+                description: 'Working directory path. Use when you need to run a command inside a subdirectory. Must exist.',
+            },
+        },
+    },
+    async execute(input) {
+        // ── Step 1: Validate input ──────────────────────────────────────────
+        const validated = validateInput(input);
+        if (!validated.ok) {
+            return { success: false, output: '', error: validated.error };
+        }
+        const { command, timeout, description, cwd } = validated;
+        // ── Step 2: Security check ──────────────────────────────────────────
+        const destructiveHint = checkDestructive(command);
+        if (destructiveHint) {
+            return {
+                success: false,
+                output: '',
+                error: `Destructive command blocked: ${destructiveHint}.\nUse the 'edit' tool for file modifications instead.`,
+            };
+        }
+        try {
+            const { stdout, stderr, exitCode, timedOut } = await execCommand(command, timeout, cwd);
+            // ── Step 3: Build output ──────────────────────────────────────────
+            let output = '';
+            if (description) {
+                output += `[bash] ${description}\n`;
+            }
+            // Redact sensitive data from output (API keys, tokens, passwords, etc.)
+            const stdoutTrimmed = redactSensitive(stdout.trim());
+            if (stdoutTrimmed) {
+                output += stdoutTrimmed;
+            }
+            let stderrTrimmed = redactSensitive(stderr.trim());
+            // On Windows, PowerShell wraps native command stderr in ErrorRecord format
+            // even when the command succeeds (exit code 0). Detect this and extract the
+            // actual message content so it doesn't pollute output with "Command exited..." noise.
+            if (exitCode === 0 &&
+                stderrTrimmed &&
+                os.platform() === 'win32') {
+                const cleaned = extractPowerShellNativeOutput(stderrTrimmed);
+                if (cleaned) {
+                    // Prepend a newline if there's already output
+                    output += (output ? '\n' : '') + cleaned;
+                    stderrTrimmed = '';
+                }
+            }
+            if (stderrTrimmed) {
+                if (output)
+                    output += '\n';
+                output += `(stderr):\n${stderrTrimmed}`;
+            }
+            // Apply global truncation
+            output = truncateOutput(output, MAX_OUTPUT_LENGTH, 'output');
+            if (!output || output === (description ? `[bash] ${description}\n` : '')) {
+                output = description ? `[bash] ${description}\n(no output)` : '(no output)';
+            }
+            if (timedOut) {
+                return {
+                    success: false,
+                    output,
+                    error: buildErrorMsg(0, stderr, command, true, cwd),
+                };
+            }
+            if (exitCode !== 0) {
+                return {
+                    success: false,
+                    output,
+                    error: buildErrorMsg(exitCode, stderr, command, false, cwd),
+                };
+            }
+            return { success: true, output };
+        }
+        catch (err) {
+            const msg = fmtErr(err);
+            return { success: false, output: '', error: `Command failed unexpectedly: ${msg}` };
+        }
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/tools/execute/bash/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/tools/execute/bash/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,CAAC,MAAM,QAAQ,GAAS;IAC5B,UAAU,EAAE;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,OAAO;QACd,WAAW,EAAE;;eAEF,GAAG,CAAC,MAAM;SAChB,GAAG,CAAC,KAAK;oBACE,QAAQ;;;;oEAIwC;QAChE,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uDAAuD;gBACpE,QAAQ,EAAE,IAAI;aACf;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,qFAAqF;aACxF;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,6FAA6F;aAChG;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,+FAA+F;aAClG;SACF;KACF;IACD,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,uEAAuE;QACvE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACtC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;QAC/D,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;QAExD,uEAAuE;QACvE,MAAM,eAAe,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,gCAAgC,eAAe,wDAAwD;aAC/G,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YAEvF,qEAAqE;YACrE,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,UAAU,WAAW,IAAI,CAAA;YACrC,CAAC;YAED,wEAAwE;YACxE,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YACpD,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,aAAa,CAAA;YACzB,CAAC;YAED,IAAI,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YAElD,2EAA2E;YAC3E,4EAA4E;YAC5E,sFAAsF;YACtF,IACE,QAAQ,KAAK,CAAC;gBACd,aAAa;gBACb,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EACzB,CAAC;gBACD,MAAM,OAAO,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAA;gBAC5D,IAAI,OAAO,EAAE,CAAC;oBACZ,8CAA8C;oBAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAA;oBACxC,aAAa,GAAG,EAAE,CAAA;gBACpB,CAAC;YACH,CAAC;YAED,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,MAAM;oBAAE,MAAM,IAAI,IAAI,CAAA;gBAC1B,MAAM,IAAI,cAAc,aAAa,EAAE,CAAA;YACzC,CAAC;YAED,0BAA0B;YAC1B,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAA;YAE5D,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzE,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,WAAW,eAAe,CAAC,CAAC,CAAC,aAAa,CAAA;YAC7E,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;iBACpD,CAAA;YACH,CAAC;YAED,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC;iBAC5D,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,GAAG,EAAE,EAAE,CAAA;QACrF,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/tools/execute/bash/platform.d.ts

@@ -0,0 +1,6 @@
+export declare const env: {
+    osInfo: string;
+    shell: string;
+};
+export declare const ENCODING: string;
+//# sourceMappingURL=platform.d.ts.map

package/dist/tools/execute/bash/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../../src/tools/execute/bash/platform.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,GAAG;YAnBgB,MAAM;WAAS,MAAM;CAmBvB,CAAA;AA0C9B,eAAO,MAAM,QAAQ,QAAmB,CAAA"}

package/dist/tools/execute/bash/platform.js

@@ -0,0 +1,64 @@
+import { execSync } from 'node:child_process';
+import * as os from 'node:os';
+function detectEnv() {
+    const platform = os.platform();
+    const release = os.release();
+    const arch = os.arch();
+    if (platform === 'win32') {
+        return {
+            osInfo: `Windows ${release} (${arch})`,
+            shell: 'powershell.exe',
+        };
+    }
+    const osName = platform === 'darwin' ? 'macOS' : platform === 'linux' ? 'Linux' : platform;
+    return {
+        osInfo: `${osName} ${release} (${arch})`,
+        shell: process.env.SHELL || '/bin/sh',
+    };
+}
+export const env = detectEnv();
+/**
+ * Detect Windows console code page to handle non-UTF-8 output correctly.
+ * Falls back to 'utf-8' if detection fails.
+ * On non-Windows platforms, always returns 'utf-8'.
+ */
+function detectEncoding() {
+    if (os.platform() !== 'win32')
+        return 'utf-8';
+    try {
+        const result = execSync('[Console]::OutputEncoding.CodePage', {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 2000,
+            windowsHide: true,
+            encoding: 'utf-8',
+            shell: 'powershell.exe',
+        });
+        const cp = Number.parseInt(result.toString().trim(), 10);
+        // Common Windows code pages that need special handling
+        if (cp === 936)
+            return 'gbk'; // Chinese (Simplified)
+        if (cp === 950)
+            return 'big5'; // Chinese (Traditional)
+        if (cp === 932)
+            return 'shift-jis'; // Japanese
+        if (cp === 949)
+            return 'euc-kr'; // Korean
+        if (cp === 1250 ||
+            cp === 1251 ||
+            cp === 1252 ||
+            cp === 1253 ||
+            cp === 1254 ||
+            cp === 1255 ||
+            cp === 1256 ||
+            cp === 1257) {
+            return `cp${cp}`; // Windows code page
+        }
+        return 'utf-8';
+    }
+    catch {
+        return 'utf-8';
+    }
+}
+// Cache encoding detection once at startup
+export const ENCODING = detectEncoding();
+//# sourceMappingURL=platform.js.map

package/dist/tools/execute/bash/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../../../src/tools/execute/bash/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B,SAAS,SAAS;IAChB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;IAEtB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,WAAW,OAAO,KAAK,IAAI,GAAG;YACtC,KAAK,EAAE,gBAAgB;SACxB,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC1F,OAAO;QACL,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,KAAK,IAAI,GAAG;QACxC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS;KACtC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAA;AAE9B;;;;GAIG;AACH,SAAS,cAAc;IACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,oCAAoC,EAAE;YAC5D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QACxD,uDAAuD;QACvD,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA,CAAC,uBAAuB;QACpD,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,MAAM,CAAA,CAAC,wBAAwB;QACtD,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,WAAW,CAAA,CAAC,WAAW;QAC9C,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,QAAQ,CAAA,CAAC,SAAS;QACzC,IACE,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI;YACX,EAAE,KAAK,IAAI,EACX,CAAC;YACD,OAAO,KAAK,EAAE,EAAE,CAAA,CAAC,oBAAoB;QACvC,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAA"}

package/dist/tools/execute/bash/security.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Check if a command matches destructive patterns.
+ * Returns a warning string if detected, null otherwise.
+ */
+declare function checkDestructive(command: string): string | null;
+/**
+ * Redact sensitive data from a string by replacing matches with "[REDACTED]".
+ * Returns the redacted string.
+ */
+declare function redactSensitive(s: string): string;
+export { checkDestructive, redactSensitive };
+//# sourceMappingURL=security.d.ts.map

package/dist/tools/execute/bash/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../../src/tools/execute/bash/security.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,iBAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAED;;;GAGG;AACH,iBAAS,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAM1C;AAED,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAA"}

package/dist/tools/execute/bash/security.js

@@ -0,0 +1,26 @@
+import { DESTRUCTIVE_PATTERNS, SENSITIVE_PATTERNS } from './constants.js';
+/**
+ * Check if a command matches destructive patterns.
+ * Returns a warning string if detected, null otherwise.
+ */
+function checkDestructive(command) {
+    for (const { regex, hint } of DESTRUCTIVE_PATTERNS) {
+        if (regex.test(command)) {
+            return hint;
+        }
+    }
+    return null;
+}
+/**
+ * Redact sensitive data from a string by replacing matches with "[REDACTED]".
+ * Returns the redacted string.
+ */
+function redactSensitive(s) {
+    let result = s;
+    for (const pattern of SENSITIVE_PATTERNS) {
+        result = result.replace(pattern, '[REDACTED]');
+    }
+    return result;
+}
+export { checkDestructive, redactSensitive };
+//# sourceMappingURL=security.js.map

package/dist/tools/execute/bash/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../../src/tools/execute/bash/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAEzE;;;GAGG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAA"}

package/dist/tools/execute/bash/validation.d.ts

@@ -0,0 +1,16 @@
+interface ValidatedInput {
+    ok: true;
+    command: string;
+    timeout: number;
+    description: string;
+    cwd: string | undefined;
+}
+interface InputError {
+    ok: false;
+    error: string;
+}
+type ValidateResult = ValidatedInput | InputError;
+declare function validateInput(input: Record<string, unknown>): ValidateResult;
+export type { InputError, ValidatedInput, ValidateResult };
+export { validateInput };
+//# sourceMappingURL=validation.d.ts.map

package/dist/tools/execute/bash/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/tools/execute/bash/validation.ts"],"names":[],"mappings":"AAKA,UAAU,cAAc;IACtB,EAAE,EAAE,IAAI,CAAA;IACR,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CACxB;AACD,UAAU,UAAU;IAClB,EAAE,EAAE,KAAK,CAAA;IACT,KAAK,EAAE,MAAM,CAAA;CACd;AACD,KAAK,cAAc,GAAG,cAAc,GAAG,UAAU,CAAA;AAEjD,iBAAS,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAwDrE;AAED,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,CAAA"}

package/dist/tools/execute/bash/validation.js

@@ -0,0 +1,57 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { DEFAULT_TIMEOUT, MAX_TIMEOUT, MIN_TIMEOUT } from './constants.js';
+function validateInput(input) {
+    // command: must be a non-empty string
+    const command = input.command;
+    if (command === undefined || command === null) {
+        return { ok: false, error: 'command is required' };
+    }
+    if (typeof command !== 'string') {
+        return { ok: false, error: `command must be a string, got ${typeof command}` };
+    }
+    if (command.trim() === '') {
+        return { ok: false, error: 'command must not be empty or whitespace-only' };
+    }
+    // timeout: must be a number (or default), within bounds
+    let timeout = DEFAULT_TIMEOUT;
+    if (input.timeout !== undefined) {
+        if (typeof input.timeout === 'number' &&
+            !Number.isNaN(input.timeout) &&
+            Number.isFinite(input.timeout)) {
+            timeout = Math.round(input.timeout);
+            if (timeout < MIN_TIMEOUT) {
+                timeout = MIN_TIMEOUT;
+            }
+            else if (timeout > MAX_TIMEOUT) {
+                timeout = MAX_TIMEOUT;
+            }
+        }
+        // If timeout is not a valid number, silently use default
+    }
+    // description: optional string
+    const description = typeof input.description === 'string' ? input.description : '';
+    // cwd: optional string, must be a valid directory, no path traversal
+    let cwd;
+    if (typeof input.cwd === 'string' && input.cwd.trim()) {
+        const rawCwd = input.cwd.trim();
+        // Path traversal protection
+        if (/(?:^|[\\/])\.\.(?:[\\/]|$)/.test(rawCwd)) {
+            return {
+                ok: false,
+                error: `cwd contains path traversal (..) which is not allowed: "${rawCwd}"`,
+            };
+        }
+        const resolvedCwd = path.resolve(rawCwd);
+        if (!fs.existsSync(resolvedCwd)) {
+            return { ok: false, error: `cwd directory does not exist: "${resolvedCwd}"` };
+        }
+        if (!fs.statSync(resolvedCwd).isDirectory()) {
+            return { ok: false, error: `cwd is not a directory: "${resolvedCwd}"` };
+        }
+        cwd = resolvedCwd;
+    }
+    return { ok: true, command: command.trim(), timeout, description, cwd };
+}
+export { validateInput };
+//# sourceMappingURL=validation.js.map

package/dist/tools/execute/bash/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/tools/execute/bash/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAe1E,SAAS,aAAa,CAAC,KAA8B;IACnD,sCAAsC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,OAAO,OAAO,EAAE,EAAE,CAAA;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAA;IAC7E,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,GAAG,eAAe,CAAA;IAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAC9B,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACnC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC1B,OAAO,GAAG,WAAW,CAAA;YACvB,CAAC;iBAAM,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBACjC,OAAO,GAAG,WAAW,CAAA;YACvB,CAAC;QACH,CAAC;QACD,yDAAyD;IAC3D,CAAC;IAED,+BAA+B;IAC/B,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;IAElF,qEAAqE;IACrE,IAAI,GAAuB,CAAA;IAC3B,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC/B,4BAA4B;QAC5B,IAAI,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2DAA2D,MAAM,GAAG;aAC5E,CAAA;QACH,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,WAAW,GAAG,EAAE,CAAA;QAC/E,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,WAAW,GAAG,EAAE,CAAA;QACzE,CAAC;QACD,GAAG,GAAG,WAAW,CAAA;IACnB,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AACzE,CAAC;AAGD,OAAO,EAAE,aAAa,EAAE,CAAA"}

package/dist/tools/execute/bash.d.ts

@@ -0,0 +1,3 @@
+import type { Tool } from '../types.js';
+export declare const bashTool: Tool;
+//# sourceMappingURL=bash.d.ts.map

package/dist/tools/execute/bash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/tools/execute/bash.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,aAAa,CAAA;AA2sBnD,eAAO,MAAM,QAAQ,EAAE,IA0GtB,CAAA"}