subagent-cli 0.3.0 → 0.3.1

package/src/tools/PowerShellTool/UI.tsx

@@ -1,131 +0,0 @@
-import type { ToolResultBlockParam } from '@anthropic-ai/sdk/resources/index.mjs';
-import * as React from 'react';
-import { KeyboardShortcutHint } from '../../components/design-system/KeyboardShortcutHint.js';
-import { FallbackToolUseErrorMessage } from '../../components/FallbackToolUseErrorMessage.js';
-import { MessageResponse } from '../../components/MessageResponse.js';
-import { OutputLine } from '../../components/shell/OutputLine.js';
-import { ShellProgressMessage } from '../../components/shell/ShellProgressMessage.js';
-import { ShellTimeDisplay } from '../../components/shell/ShellTimeDisplay.js';
-import { Box, Text } from '../../ink.js';
-import type { Tool } from '../../Tool.js';
-import type { ProgressMessage } from '../../types/message.js';
-import type { PowerShellProgress } from '../../types/tools.js';
-import type { ThemeName } from '../../utils/theme.js';
-import type { Out, PowerShellToolInput } from './PowerShellTool.js';
-
-// Constants for command display
-const MAX_COMMAND_DISPLAY_LINES = 2;
-const MAX_COMMAND_DISPLAY_CHARS = 160;
-export function renderToolUseMessage(input: Partial<PowerShellToolInput>, {
-  verbose,
-  theme: _theme
-}: {
-  verbose: boolean;
-  theme: ThemeName;
-}): React.ReactNode {
-  const {
-    command
-  } = input;
-  if (!command) {
-    return null;
-  }
-  const displayCommand = command;
-  if (!verbose) {
-    const lines = displayCommand.split('\n');
-    const needsLineTruncation = lines.length > MAX_COMMAND_DISPLAY_LINES;
-    const needsCharTruncation = displayCommand.length > MAX_COMMAND_DISPLAY_CHARS;
-    if (needsLineTruncation || needsCharTruncation) {
-      let truncated = displayCommand;
-      if (needsLineTruncation) {
-        truncated = lines.slice(0, MAX_COMMAND_DISPLAY_LINES).join('\n');
-      }
-      if (truncated.length > MAX_COMMAND_DISPLAY_CHARS) {
-        truncated = truncated.slice(0, MAX_COMMAND_DISPLAY_CHARS);
-      }
-      return <Text>{truncated.trim()}…</Text>;
-    }
-  }
-  return displayCommand;
-}
-export function renderToolUseProgressMessage(progressMessagesForMessage: ProgressMessage<PowerShellProgress>[], {
-  verbose,
-  tools: _tools,
-  terminalSize: _terminalSize,
-  inProgressToolCallCount: _inProgressToolCallCount
-}: {
-  tools: Tool[];
-  verbose: boolean;
-  terminalSize?: {
-    columns: number;
-    rows: number;
-  };
-  inProgressToolCallCount?: number;
-}): React.ReactNode {
-  const lastProgress = progressMessagesForMessage.at(-1);
-  if (!lastProgress || !lastProgress.data) {
-    return <MessageResponse height={1}>
-        <Text dimColor>Running…</Text>
-      </MessageResponse>;
-  }
-  const data = lastProgress.data;
-  return <ShellProgressMessage fullOutput={data.fullOutput} output={data.output} elapsedTimeSeconds={data.elapsedTimeSeconds} totalLines={data.totalLines} totalBytes={data.totalBytes} timeoutMs={data.timeoutMs} taskId={data.taskId} verbose={verbose} />;
-}
-export function renderToolUseQueuedMessage(): React.ReactNode {
-  return <MessageResponse height={1}>
-      <Text dimColor>Waiting…</Text>
-    </MessageResponse>;
-}
-export function renderToolResultMessage(content: Out, progressMessagesForMessage: ProgressMessage<PowerShellProgress>[], {
-  verbose,
-  theme: _theme,
-  tools: _tools,
-  style: _style
-}: {
-  verbose: boolean;
-  theme: ThemeName;
-  tools: Tool[];
-  style?: 'condensed';
-}): React.ReactNode {
-  const lastProgress = progressMessagesForMessage.at(-1);
-  const timeoutMs = lastProgress?.data?.timeoutMs;
-  const {
-    stdout,
-    stderr,
-    interrupted,
-    returnCodeInterpretation,
-    isImage,
-    backgroundTaskId
-  } = content;
-  if (isImage) {
-    return <MessageResponse height={1}>
-        <Text dimColor>[Image data detected and sent to Claude]</Text>
-      </MessageResponse>;
-  }
-  return <Box flexDirection="column">
-      {stdout !== '' ? <OutputLine content={stdout} verbose={verbose} /> : null}
-      {stderr.trim() !== '' ? <OutputLine content={stderr} verbose={verbose} isError /> : null}
-      {stdout === '' && stderr.trim() === '' ? <MessageResponse height={1}>
-          <Text dimColor>
-            {backgroundTaskId ? <>
-                Running in the background{' '}
-                <KeyboardShortcutHint shortcut="↓" action="manage" parens />
-              </> : interrupted ? 'Interrupted' : returnCodeInterpretation || '(No output)'}
-          </Text>
-        </MessageResponse> : null}
-      {timeoutMs ? <MessageResponse>
-          <ShellTimeDisplay timeoutMs={timeoutMs} />
-        </MessageResponse> : null}
-    </Box>;
-}
-export function renderToolUseErrorMessage(result: ToolResultBlockParam['content'], {
-  verbose,
-  progressMessagesForMessage: _progressMessagesForMessage,
-  tools: _tools
-}: {
-  verbose: boolean;
-  progressMessagesForMessage: ProgressMessage<PowerShellProgress>[];
-  tools: Tool[];
-}): React.ReactNode {
-  return <FallbackToolUseErrorMessage result={result} verbose={verbose} />;
-}
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJuYW1lcyI6WyJUb29sUmVzdWx0QmxvY2tQYXJhbSIsIlJlYWN0IiwiS2V5Ym9hcmRTaG9ydGN1dEhpbnQiLCJGYWxsYmFja1Rvb2xVc2VFcnJvck1lc3NhZ2UiLCJNZXNzYWdlUmVzcG9uc2UiLCJPdXRwdXRMaW5lIiwiU2hlbGxQcm9ncmVzc01lc3NhZ2UiLCJTaGVsbFRpbWVEaXNwbGF5IiwiQm94IiwiVGV4dCIsIlRvb2wiLCJQcm9ncmVzc01lc3NhZ2UiLCJQb3dlclNoZWxsUHJvZ3Jlc3MiLCJUaGVtZU5hbWUiLCJPdXQiLCJQb3dlclNoZWxsVG9vbElucHV0IiwiTUFYX0NPTU1BTkRfRElTUExBWV9MSU5FUyIsIk1BWF9DT01NQU5EX0RJU1BMQVlfQ0hBUlMiLCJyZW5kZXJUb29sVXNlTWVzc2FnZSIsImlucHV0IiwiUGFydGlhbCIsInZlcmJvc2UiLCJ0aGVtZSIsIl90aGVtZSIsIlJlYWN0Tm9kZSIsImNvbW1hbmQiLCJkaXNwbGF5Q29tbWFuZCIsImxpbmVzIiwic3BsaXQiLCJuZWVkc0xpbmVUcnVuY2F0aW9uIiwibGVuZ3RoIiwibmVlZHNDaGFyVHJ1bmNhdGlvbiIsInRydW5jYXRlZCIsInNsaWNlIiwiam9pbiIsInRyaW0iLCJyZW5kZXJUb29sVXNlUHJvZ3Jlc3NNZXNzYWdlIiwicHJvZ3Jlc3NNZXNzYWdlc0Zvck1lc3NhZ2UiLCJ0b29scyIsIl90b29scyIsInRlcm1pbmFsU2l6ZSIsIl90ZXJtaW5hbFNpemUiLCJpblByb2dyZXNzVG9vbENhbGxDb3VudCIsIl9pblByb2dyZXNzVG9vbENhbGxDb3VudCIsImNvbHVtbnMiLCJyb3dzIiwibGFzdFByb2dyZXNzIiwiYXQiLCJkYXRhIiwiZnVsbE91dHB1dCIsIm91dHB1dCIsImVsYXBzZWRUaW1lU2Vjb25kcyIsInRvdGFsTGluZXMiLCJ0b3RhbEJ5dGVzIiwidGltZW91dE1zIiwidGFza0lkIiwicmVuZGVyVG9vbFVzZVF1ZXVlZE1lc3NhZ2UiLCJyZW5kZXJUb29sUmVzdWx0TWVzc2FnZSIsImNvbnRlbnQiLCJzdHlsZSIsIl9zdHlsZSIsInN0ZG91dCIsInN0ZGVyciIsImludGVycnVwdGVkIiwicmV0dXJuQ29kZUludGVycHJldGF0aW9uIiwiaXNJbWFnZSIsImJhY2tncm91bmRUYXNrSWQiLCJyZW5kZXJUb29sVXNlRXJyb3JNZXNzYWdlIiwicmVzdWx0IiwiX3Byb2dyZXNzTWVzc2FnZXNGb3JNZXNzYWdlIl0sInNvdXJjZXMiOlsiVUkudHN4Il0sInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB0eXBlIHsgVG9vbFJlc3VsdEJsb2NrUGFyYW0gfSBmcm9tICdAYW50aHJvcGljLWFpL3Nkay9yZXNvdXJjZXMvaW5kZXgubWpzJ1xuaW1wb3J0ICogYXMgUmVhY3QgZnJvbSAncmVhY3QnXG5pbXBvcnQgeyBLZXlib2FyZFNob3J0Y3V0SGludCB9IGZyb20gJy4uLy4uL2NvbXBvbmVudHMvZGVzaWduLXN5c3RlbS9LZXlib2FyZFNob3J0Y3V0SGludC5qcydcbmltcG9ydCB7IEZhbGxiYWNrVG9vbFVzZUVycm9yTWVzc2FnZSB9IGZyb20gJy4uLy4uL2NvbXBvbmVudHMvRmFsbGJhY2tUb29sVXNlRXJyb3JNZXNzYWdlLmpzJ1xuaW1wb3J0IHsgTWVzc2FnZVJlc3BvbnNlIH0gZnJvbSAnLi4vLi4vY29tcG9uZW50cy9NZXNzYWdlUmVzcG9uc2UuanMnXG5pbXBvcnQgeyBPdXRwdXRMaW5lIH0gZnJvbSAnLi4vLi4vY29tcG9uZW50cy9zaGVsbC9PdXRwdXRMaW5lLmpzJ1xuaW1wb3J0IHsgU2hlbGxQcm9ncmVzc01lc3NhZ2UgfSBmcm9tICcuLi8uLi9jb21wb25lbnRzL3NoZWxsL1NoZWxsUHJvZ3Jlc3NNZXNzYWdlLmpzJ1xuaW1wb3J0IHsgU2hlbGxUaW1lRGlzcGxheSB9IGZyb20gJy4uLy4uL2NvbXBvbmVudHMvc2hlbGwvU2hlbGxUaW1lRGlzcGxheS5qcydcbmltcG9ydCB7IEJveCwgVGV4dCB9IGZyb20gJy4uLy4uL2luay5qcydcbmltcG9ydCB0eXBlIHsgVG9vbCB9IGZyb20gJy4uLy4uL1Rvb2wuanMnXG5pbXBvcnQgdHlwZSB7IFByb2dyZXNzTWVzc2FnZSB9IGZyb20gJy4uLy4uL3R5cGVzL21lc3NhZ2UuanMnXG5pbXBvcnQgdHlwZSB7IFBvd2VyU2hlbGxQcm9ncmVzcyB9IGZyb20gJy4uLy4uL3R5cGVzL3Rvb2xzLmpzJ1xuaW1wb3J0IHR5cGUgeyBUaGVtZU5hbWUgfSBmcm9tICcuLi8uLi91dGlscy90aGVtZS5qcydcbmltcG9ydCB0eXBlIHsgT3V0LCBQb3dlclNoZWxsVG9vbElucHV0IH0gZnJvbSAnLi9Qb3dlclNoZWxsVG9vbC5qcydcblxuLy8gQ29uc3RhbnRzIGZvciBjb21tYW5kIGRpc3BsYXlcbmNvbnN0IE1BWF9DT01NQU5EX0RJU1BMQVlfTElORVMgPSAyXG5jb25zdCBNQVhfQ09NTUFORF9ESVNQTEFZX0NIQVJTID0gMTYwXG5cbmV4cG9ydCBmdW5jdGlvbiByZW5kZXJUb29sVXNlTWVzc2FnZShcbiAgaW5wdXQ6IFBhcnRpYWw8UG93ZXJTaGVsbFRvb2xJbnB1dD4sXG4gIHsgdmVyYm9zZSwgdGhlbWU6IF90aGVtZSB9OiB7IHZlcmJvc2U6IGJvb2xlYW47IHRoZW1lOiBUaGVtZU5hbWUgfSxcbik6IFJlYWN0LlJlYWN0Tm9kZSB7XG4gIGNvbnN0IHsgY29tbWFuZCB9ID0gaW5wdXRcbiAgaWYgKCFjb21tYW5kKSB7XG4gICAgcmV0dXJuIG51bGxcbiAgfVxuXG4gIGNvbnN0IGRpc3BsYXlDb21tYW5kID0gY29tbWFuZFxuXG4gIGlmICghdmVyYm9zZSkge1xuICAgIGNvbnN0IGxpbmVzID0gZGlzcGxheUNvbW1hbmQuc3BsaXQoJ1xcbicpXG4gICAgY29uc3QgbmVlZHNMaW5lVHJ1bmNhdGlvbiA9IGxpbmVzLmxlbmd0aCA+IE1BWF9DT01NQU5EX0RJU1BMQVlfTElORVNcbiAgICBjb25zdCBuZWVkc0NoYXJUcnVuY2F0aW9uID1cbiAgICAgIGRpc3BsYXlDb21tYW5kLmxlbmd0aCA+IE1BWF9DT01NQU5EX0RJU1BMQVlfQ0hBUlNcblxuICAgIGlmIChuZWVkc0xpbmVUcnVuY2F0aW9uIHx8IG5lZWRzQ2hhclRydW5jYXRpb24pIHtcbiAgICAgIGxldCB0cnVuY2F0ZWQgPSBkaXNwbGF5Q29tbWFuZFxuXG4gICAgICBpZiAobmVlZHNMaW5lVHJ1bmNhdGlvbikge1xuICAgICAgICB0cnVuY2F0ZWQgPSBsaW5lcy5zbGljZSgwLCBNQVhfQ09NTUFORF9ESVNQTEFZX0xJTkVTKS5qb2luKCdcXG4nKVxuICAgICAgfVxuXG4gICAgICBpZiAodHJ1bmNhdGVkLmxlbmd0aCA+IE1BWF9DT01NQU5EX0RJU1BMQVlfQ0hBUlMpIHtcbiAgICAgICAgdHJ1bmNhdGVkID0gdHJ1bmNhdGVkLnNsaWNlKDAsIE1BWF9DT01NQU5EX0RJU1BMQVlfQ0hBUlMpXG4gICAgICB9XG5cbiAgICAgIHJldHVybiA8VGV4dD57dHJ1bmNhdGVkLnRyaW0oKX3igKY8L1RleHQ+XG4gICAgfVxuICB9XG5cbiAgcmV0dXJuIGRpc3BsYXlDb21tYW5kXG59XG5cbmV4cG9ydCBmdW5jdGlvbiByZW5kZXJUb29sVXNlUHJvZ3Jlc3NNZXNzYWdlKFxuICBwcm9ncmVzc01lc3NhZ2VzRm9yTWVzc2FnZTogUHJvZ3Jlc3NNZXNzYWdlPFBvd2VyU2hlbGxQcm9ncmVzcz5bXSxcbiAge1xuICAgIHZlcmJvc2UsXG4gICAgdG9vbHM6IF90b29scyxcbiAgICB0ZXJtaW5hbFNpemU6IF90ZXJtaW5hbFNpemUsXG4gICAgaW5Qcm9ncmVzc1Rvb2xDYWxsQ291bnQ6IF9pblByb2dyZXNzVG9vbENhbGxDb3VudCxcbiAgfToge1xuICAgIHRvb2xzOiBUb29sW11cbiAgICB2ZXJib3NlOiBib29sZWFuXG4gICAgdGVybWluYWxTaXplPzogeyBjb2x1bW5zOiBudW1iZXI7IHJvd3M6IG51bWJlciB9XG4gICAgaW5Qcm9ncmVzc1Rvb2xDYWxsQ291bnQ/OiBudW1iZXJcbiAgfSxcbik6IFJlYWN0LlJlYWN0Tm9kZSB7XG4gIGNvbnN0IGxhc3RQcm9ncmVzcyA9IHByb2dyZXNzTWVzc2FnZXNGb3JNZXNzYWdlLmF0KC0xKVxuXG4gIGlmICghbGFzdFByb2dyZXNzIHx8ICFsYXN0UHJvZ3Jlc3MuZGF0YSkge1xuICAgIHJldHVybiAoXG4gICAgICA8TWVzc2FnZVJlc3BvbnNlIGhlaWdodD17MX0+XG4gICAgICAgIDxUZXh0IGRpbUNvbG9yPlJ1bm5pbmfigKY8L1RleHQ+XG4gICAgICA8L01lc3NhZ2VSZXNwb25zZT5cbiAgICApXG4gIH1cblxuICBjb25zdCBkYXRhID0gbGFzdFByb2dyZXNzLmRhdGFcblxuICByZXR1cm4gKFxuICAgIDxTaGVsbFByb2dyZXNzTWVzc2FnZVxuICAgICAgZnVsbE91dHB1dD17ZGF0YS5mdWxsT3V0cHV0fVxuICAgICAgb3V0cHV0PXtkYXRhLm91dHB1dH1cbiAgICAgIGVsYXBzZWRUaW1lU2Vjb25kcz17ZGF0YS5lbGFwc2VkVGltZVNlY29uZHN9XG4gICAgICB0b3RhbExpbmVzPXtkYXRhLnRvdGFsTGluZXN9XG4gICAgICB0b3RhbEJ5dGVzPXtkYXRhLnRvdGFsQnl0ZXN9XG4gICAgICB0aW1lb3V0TXM9e2RhdGEudGltZW91dE1zfVxuICAgICAgdGFza0lkPXtkYXRhLnRhc2tJZH1cbiAgICAgIHZlcmJvc2U9e3ZlcmJvc2V9XG4gICAgLz5cbiAgKVxufVxuXG5leHBvcnQgZnVuY3Rpb24gcmVuZGVyVG9vbFVzZVF1ZXVlZE1lc3NhZ2UoKTogUmVhY3QuUmVhY3ROb2RlIHtcbiAgcmV0dXJuIChcbiAgICA8TWVzc2FnZVJlc3BvbnNlIGhlaWdodD17MX0+XG4gICAgICA8VGV4dCBkaW1Db2xvcj5XYWl0aW5n4oCmPC9UZXh0PlxuICAgIDwvTWVzc2FnZVJlc3BvbnNlPlxuICApXG59XG5cbmV4cG9ydCBmdW5jdGlvbiByZW5kZXJUb29sUmVzdWx0TWVzc2FnZShcbiAgY29udGVudDogT3V0LFxuICBwcm9ncmVzc01lc3NhZ2VzRm9yTWVzc2FnZTogUHJvZ3Jlc3NNZXNzYWdlPFBvd2VyU2hlbGxQcm9ncmVzcz5bXSxcbiAge1xuICAgIHZlcmJvc2UsXG4gICAgdGhlbWU6IF90aGVtZSxcbiAgICB0b29sczogX3Rvb2xzLFxuICAgIHN0eWxlOiBfc3R5bGUsXG4gIH06IHtcbiAgICB2ZXJib3NlOiBib29sZWFuXG4gICAgdGhlbWU6IFRoZW1lTmFtZVxuICAgIHRvb2xzOiBUb29sW11cbiAgICBzdHlsZT86ICdjb25kZW5zZWQnXG4gIH0sXG4pOiBSZWFjdC5SZWFjdE5vZGUge1xuICBjb25zdCBsYXN0UHJvZ3Jlc3MgPSBwcm9ncmVzc01lc3NhZ2VzRm9yTWVzc2FnZS5hdCgtMSlcbiAgY29uc3QgdGltZW91dE1zID0gbGFzdFByb2dyZXNzPy5kYXRhPy50aW1lb3V0TXNcbiAgY29uc3Qge1xuICAgIHN0ZG91dCxcbiAgICBzdGRlcnIsXG4gICAgaW50ZXJydXB0ZWQsXG4gICAgcmV0dXJuQ29kZUludGVycHJldGF0aW9uLFxuICAgIGlzSW1hZ2UsXG4gICAgYmFja2dyb3VuZFRhc2tJZCxcbiAgfSA9IGNvbnRlbnRcblxuICBpZiAoaXNJbWFnZSkge1xuICAgIHJldHVybiAoXG4gICAgICA8TWVzc2FnZVJlc3BvbnNlIGhlaWdodD17MX0+XG4gICAgICAgIDxUZXh0IGRpbUNvbG9yPltJbWFnZSBkYXRhIGRldGVjdGVkIGFuZCBzZW50IHRvIENsYXVkZV08L1RleHQ+XG4gICAgICA8L01lc3NhZ2VSZXNwb25zZT5cbiAgICApXG4gIH1cblxuICByZXR1cm4gKFxuICAgIDxCb3ggZmxleERpcmVjdGlvbj1cImNvbHVtblwiPlxuICAgICAge3N0ZG91dCAhPT0gJycgPyA8T3V0cHV0TGluZSBjb250ZW50PXtzdGRvdXR9IHZlcmJvc2U9e3ZlcmJvc2V9IC8+IDogbnVsbH1cbiAgICAgIHtzdGRlcnIudHJpbSgpICE9PSAnJyA/IChcbiAgICAgICAgPE91dHB1dExpbmUgY29udGVudD17c3RkZXJyfSB2ZXJib3NlPXt2ZXJib3NlfSBpc0Vycm9yIC8+XG4gICAgICApIDogbnVsbH1cbiAgICAgIHtzdGRvdXQgPT09ICcnICYmIHN0ZGVyci50cmltKCkgPT09ICcnID8gKFxuICAgICAgICA8TWVzc2FnZVJlc3BvbnNlIGhlaWdodD17MX0+XG4gICAgICAgICAgPFRleHQgZGltQ29sb3I+XG4gICAgICAgICAgICB7YmFja2dyb3VuZFRhc2tJZCA/IChcbiAgICAgICAgICAgICAgPD5cbiAgICAgICAgICAgICAgICBSdW5uaW5nIGluIHRoZSBiYWNrZ3JvdW5keycgJ31cbiAgICAgICAgICAgICAgICA8S2V5Ym9hcmRTaG9ydGN1dEhpbnQgc2hvcnRjdXQ9XCLihpNcIiBhY3Rpb249XCJtYW5hZ2VcIiBwYXJlbnMgLz5cbiAgICAgICAgICAgICAgPC8+XG4gICAgICAgICAgICApIDogaW50ZXJydXB0ZWQgPyAoXG4gICAgICAgICAgICAgICdJbnRlcnJ1cHRlZCdcbiAgICAgICAgICAgICkgOiAoXG4gICAgICAgICAgICAgIHJldHVybkNvZGVJbnRlcnByZXRhdGlvbiB8fCAnKE5vIG91dHB1dCknXG4gICAgICAgICAgICApfVxuICAgICAgICAgIDwvVGV4dD5cbiAgICAgICAgPC9NZXNzYWdlUmVzcG9uc2U+XG4gICAgICApIDogbnVsbH1cbiAgICAgIHt0aW1lb3V0TXMgPyAoXG4gICAgICAgIDxNZXNzYWdlUmVzcG9uc2U+XG4gICAgICAgICAgPFNoZWxsVGltZURpc3BsYXkgdGltZW91dE1zPXt0aW1lb3V0TXN9IC8+XG4gICAgICAgIDwvTWVzc2FnZVJlc3BvbnNlPlxuICAgICAgKSA6IG51bGx9XG4gICAgPC9Cb3g+XG4gIClcbn1cblxuZXhwb3J0IGZ1bmN0aW9uIHJlbmRlclRvb2xVc2VFcnJvck1lc3NhZ2UoXG4gIHJlc3VsdDogVG9vbFJlc3VsdEJsb2NrUGFyYW1bJ2NvbnRlbnQnXSxcbiAge1xuICAgIHZlcmJvc2UsXG4gICAgcHJvZ3Jlc3NNZXNzYWdlc0Zvck1lc3NhZ2U6IF9wcm9ncmVzc01lc3NhZ2VzRm9yTWVzc2FnZSxcbiAgICB0b29sczogX3Rvb2xzLFxuICB9OiB7XG4gICAgdmVyYm9zZTogYm9vbGVhblxuICAgIHByb2dyZXNzTWVzc2FnZXNGb3JNZXNzYWdlOiBQcm9ncmVzc01lc3NhZ2U8UG93ZXJTaGVsbFByb2dyZXNzPltdXG4gICAgdG9vbHM6IFRvb2xbXVxuICB9LFxuKTogUmVhY3QuUmVhY3ROb2RlIHtcbiAgcmV0dXJuIDxGYWxsYmFja1Rvb2xVc2VFcnJvck1lc3NhZ2UgcmVzdWx0PXtyZXN1bHR9IHZlcmJvc2U9e3ZlcmJvc2V9IC8+XG59XG4iXSwibWFwcGluZ3MiOiJBQUFBLGNBQWNBLG9CQUFvQixRQUFRLHVDQUF1QztBQUNqRixPQUFPLEtBQUtDLEtBQUssTUFBTSxPQUFPO0FBQzlCLFNBQVNDLG9CQUFvQixRQUFRLHdEQUF3RDtBQUM3RixTQUFTQywyQkFBMkIsUUFBUSxpREFBaUQ7QUFDN0YsU0FBU0MsZUFBZSxRQUFRLHFDQUFxQztBQUNyRSxTQUFTQyxVQUFVLFFBQVEsc0NBQXNDO0FBQ2pFLFNBQVNDLG9CQUFvQixRQUFRLGdEQUFnRDtBQUNyRixTQUFTQyxnQkFBZ0IsUUFBUSw0Q0FBNEM7QUFDN0UsU0FBU0MsR0FBRyxFQUFFQyxJQUFJLFFBQVEsY0FBYztBQUN4QyxjQUFjQyxJQUFJLFFBQVEsZUFBZTtBQUN6QyxjQUFjQyxlQUFlLFFBQVEsd0JBQXdCO0FBQzdELGNBQWNDLGtCQUFrQixRQUFRLHNCQUFzQjtBQUM5RCxjQUFjQyxTQUFTLFFBQVEsc0JBQXNCO0FBQ3JELGNBQWNDLEdBQUcsRUFBRUMsbUJBQW1CLFFBQVEscUJBQXFCOztBQUVuRTtBQUNBLE1BQU1DLHlCQUF5QixHQUFHLENBQUM7QUFDbkMsTUFBTUMseUJBQXlCLEdBQUcsR0FBRztBQUVyQyxPQUFPLFNBQVNDLG9CQUFvQkEsQ0FDbENDLEtBQUssRUFBRUMsT0FBTyxDQUFDTCxtQkFBbUIsQ0FBQyxFQUNuQztFQUFFTSxPQUFPO0VBQUVDLEtBQUssRUFBRUM7QUFBK0MsQ0FBdkMsRUFBRTtFQUFFRixPQUFPLEVBQUUsT0FBTztFQUFFQyxLQUFLLEVBQUVULFNBQVM7QUFBQyxDQUFDLENBQ25FLEVBQUVaLEtBQUssQ0FBQ3VCLFNBQVMsQ0FBQztFQUNqQixNQUFNO0lBQUVDO0VBQVEsQ0FBQyxHQUFHTixLQUFLO0VBQ3pCLElBQUksQ0FBQ00sT0FBTyxFQUFFO0lBQ1osT0FBTyxJQUFJO0VBQ2I7RUFFQSxNQUFNQyxjQUFjLEdBQUdELE9BQU87RUFFOUIsSUFBSSxDQUFDSixPQUFPLEVBQUU7SUFDWixNQUFNTSxLQUFLLEdBQUdELGNBQWMsQ0FBQ0UsS0FBSyxDQUFDLElBQUksQ0FBQztJQUN4QyxNQUFNQyxtQkFBbUIsR0FBR0YsS0FBSyxDQUFDRyxNQUFNLEdBQUdkLHlCQUF5QjtJQUNwRSxNQUFNZSxtQkFBbUIsR0FDdkJMLGNBQWMsQ0FBQ0ksTUFBTSxHQUFHYix5QkFBeUI7SUFFbkQsSUFBSVksbUJBQW1CLElBQUlFLG1CQUFtQixFQUFFO01BQzlDLElBQUlDLFNBQVMsR0FBR04sY0FBYztNQUU5QixJQUFJRyxtQkFBbUIsRUFBRTtRQUN2QkcsU0FBUyxHQUFHTCxLQUFLLENBQUNNLEtBQUssQ0FBQyxDQUFDLEVBQUVqQix5QkFBeUIsQ0FBQyxDQUFDa0IsSUFBSSxDQUFDLElBQUksQ0FBQztNQUNsRTtNQUVBLElBQUlGLFNBQVMsQ0FBQ0YsTUFBTSxHQUFHYix5QkFBeUIsRUFBRTtRQUNoRGUsU0FBUyxHQUFHQSxTQUFTLENBQUNDLEtBQUssQ0FBQyxDQUFDLEVBQUVoQix5QkFBeUIsQ0FBQztNQUMzRDtNQUVBLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQ2UsU0FBUyxDQUFDRyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxJQUFJLENBQUM7SUFDekM7RUFDRjtFQUVBLE9BQU9ULGNBQWM7QUFDdkI7QUFFQSxPQUFPLFNBQVNVLDRCQUE0QkEsQ0FDMUNDLDBCQUEwQixFQUFFMUIsZUFBZSxDQUFDQyxrQkFBa0IsQ0FBQyxFQUFFLEVBQ2pFO0VBQ0VTLE9BQU87RUFDUGlCLEtBQUssRUFBRUMsTUFBTTtFQUNiQyxZQUFZLEVBQUVDLGFBQWE7RUFDM0JDLHVCQUF1QixFQUFFQztBQU0zQixDQUxDLEVBQUU7RUFDREwsS0FBSyxFQUFFNUIsSUFBSSxFQUFFO0VBQ2JXLE9BQU8sRUFBRSxPQUFPO0VBQ2hCbUIsWUFBWSxDQUFDLEVBQUU7SUFBRUksT0FBTyxFQUFFLE1BQU07SUFBRUMsSUFBSSxFQUFFLE1BQU07RUFBQyxDQUFDO0VBQ2hESCx1QkFBdUIsQ0FBQyxFQUFFLE1BQU07QUFDbEMsQ0FBQyxDQUNGLEVBQUV6QyxLQUFLLENBQUN1QixTQUFTLENBQUM7RUFDakIsTUFBTXNCLFlBQVksR0FBR1QsMEJBQTBCLENBQUNVLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztFQUV0RCxJQUFJLENBQUNELFlBQVksSUFBSSxDQUFDQSxZQUFZLENBQUNFLElBQUksRUFBRTtJQUN2QyxPQUNFLENBQUMsZUFBZSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQztBQUNqQyxRQUFRLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLEVBQUUsSUFBSTtBQUNyQyxNQUFNLEVBQUUsZUFBZSxDQUFDO0VBRXRCO0VBRUEsTUFBTUEsSUFBSSxHQUFHRixZQUFZLENBQUNFLElBQUk7RUFFOUIsT0FDRSxDQUFDLG9CQUFvQixDQUNuQixVQUFVLENBQUMsQ0FBQ0EsSUFBSSxDQUFDQyxVQUFVLENBQUMsQ0FDNUIsTUFBTSxDQUFDLENBQUNELElBQUksQ0FBQ0UsTUFBTSxDQUFDLENBQ3BCLGtCQUFrQixDQUFDLENBQUNGLElBQUksQ0FBQ0csa0JBQWtCLENBQUMsQ0FDNUMsVUFBVSxDQUFDLENBQUNILElBQUksQ0FBQ0ksVUFBVSxDQUFDLENBQzVCLFVBQVUsQ0FBQyxDQUFDSixJQUFJLENBQUNLLFVBQVUsQ0FBQyxDQUM1QixTQUFTLENBQUMsQ0FBQ0wsSUFBSSxDQUFDTSxTQUFTLENBQUMsQ0FDMUIsTUFBTSxDQUFDLENBQUNOLElBQUksQ0FBQ08sTUFBTSxDQUFDLENBQ3BCLE9BQU8sQ0FBQyxDQUFDbEMsT0FBTyxDQUFDLEdBQ2pCO0FBRU47QUFFQSxPQUFPLFNBQVNtQywwQkFBMEJBLENBQUEsQ0FBRSxFQUFFdkQsS0FBSyxDQUFDdUIsU0FBUyxDQUFDO0VBQzVELE9BQ0UsQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQy9CLE1BQU0sQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsRUFBRSxJQUFJO0FBQ25DLElBQUksRUFBRSxlQUFlLENBQUM7QUFFdEI7QUFFQSxPQUFPLFNBQVNpQyx1QkFBdUJBLENBQ3JDQyxPQUFPLEVBQUU1QyxHQUFHLEVBQ1p1QiwwQkFBMEIsRUFBRTFCLGVBQWUsQ0FBQ0Msa0JBQWtCLENBQUMsRUFBRSxFQUNqRTtFQUNFUyxPQUFPO0VBQ1BDLEtBQUssRUFBRUMsTUFBTTtFQUNiZSxLQUFLLEVBQUVDLE1BQU07RUFDYm9CLEtBQUssRUFBRUM7QUFNVCxDQUxDLEVBQUU7RUFDRHZDLE9BQU8sRUFBRSxPQUFPO0VBQ2hCQyxLQUFLLEVBQUVULFNBQVM7RUFDaEJ5QixLQUFLLEVBQUU1QixJQUFJLEVBQUU7RUFDYmlELEtBQUssQ0FBQyxFQUFFLFdBQVc7QUFDckIsQ0FBQyxDQUNGLEVBQUUxRCxLQUFLLENBQUN1QixTQUFTLENBQUM7RUFDakIsTUFBTXNCLFlBQVksR0FBR1QsMEJBQTBCLENBQUNVLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztFQUN0RCxNQUFNTyxTQUFTLEdBQUdSLFlBQVksRUFBRUUsSUFBSSxFQUFFTSxTQUFTO0VBQy9DLE1BQU07SUFDSk8sTUFBTTtJQUNOQyxNQUFNO0lBQ05DLFdBQVc7SUFDWEMsd0JBQXdCO0lBQ3hCQyxPQUFPO0lBQ1BDO0VBQ0YsQ0FBQyxHQUFHUixPQUFPO0VBRVgsSUFBSU8sT0FBTyxFQUFFO0lBQ1gsT0FDRSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUM7QUFDakMsUUFBUSxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsd0NBQXdDLEVBQUUsSUFBSTtBQUNyRSxNQUFNLEVBQUUsZUFBZSxDQUFDO0VBRXRCO0VBRUEsT0FDRSxDQUFDLEdBQUcsQ0FBQyxhQUFhLENBQUMsUUFBUTtBQUMvQixNQUFNLENBQUNKLE1BQU0sS0FBSyxFQUFFLEdBQUcsQ0FBQyxVQUFVLENBQUMsT0FBTyxDQUFDLENBQUNBLE1BQU0sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDeEMsT0FBTyxDQUFDLEdBQUcsR0FBRyxJQUFJO0FBQy9FLE1BQU0sQ0FBQ3lDLE1BQU0sQ0FBQzNCLElBQUksQ0FBQyxDQUFDLEtBQUssRUFBRSxHQUNuQixDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUMsQ0FBQzJCLE1BQU0sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDekMsT0FBTyxDQUFDLENBQUMsT0FBTyxHQUFHLEdBQ3ZELElBQUk7QUFDZCxNQUFNLENBQUN3QyxNQUFNLEtBQUssRUFBRSxJQUFJQyxNQUFNLENBQUMzQixJQUFJLENBQUMsQ0FBQyxLQUFLLEVBQUUsR0FDcEMsQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQ25DLFVBQVUsQ0FBQyxJQUFJLENBQUMsUUFBUTtBQUN4QixZQUFZLENBQUMrQixnQkFBZ0IsR0FDZjtBQUNkLHlDQUF5QyxDQUFDLEdBQUc7QUFDN0MsZ0JBQWdCLENBQUMsb0JBQW9CLENBQUMsUUFBUSxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLE1BQU07QUFDekUsY0FBYyxHQUFHLEdBQ0RILFdBQVcsR0FDYixhQUFhLEdBRWJDLHdCQUF3QixJQUFJLGFBQzdCO0FBQ2IsVUFBVSxFQUFFLElBQUk7QUFDaEIsUUFBUSxFQUFFLGVBQWUsQ0FBQyxHQUNoQixJQUFJO0FBQ2QsTUFBTSxDQUFDVixTQUFTLEdBQ1IsQ0FBQyxlQUFlO0FBQ3hCLFVBQVUsQ0FBQyxnQkFBZ0IsQ0FBQyxTQUFTLENBQUMsQ0FBQ0EsU0FBUyxDQUFDO0FBQ2pELFFBQVEsRUFBRSxlQUFlLENBQUMsR0FDaEIsSUFBSTtBQUNkLElBQUksRUFBRSxHQUFHLENBQUM7QUFFVjtBQUVBLE9BQU8sU0FBU2EseUJBQXlCQSxDQUN2Q0MsTUFBTSxFQUFFcEUsb0JBQW9CLENBQUMsU0FBUyxDQUFDLEVBQ3ZDO0VBQ0VxQixPQUFPO0VBQ1BnQiwwQkFBMEIsRUFBRWdDLDJCQUEyQjtFQUN2RC9CLEtBQUssRUFBRUM7QUFLVCxDQUpDLEVBQUU7RUFDRGxCLE9BQU8sRUFBRSxPQUFPO0VBQ2hCZ0IsMEJBQTBCLEVBQUUxQixlQUFlLENBQUNDLGtCQUFrQixDQUFDLEVBQUU7RUFDakUwQixLQUFLLEVBQUU1QixJQUFJLEVBQUU7QUFDZixDQUFDLENBQ0YsRUFBRVQsS0FBSyxDQUFDdUIsU0FBUyxDQUFDO0VBQ2pCLE9BQU8sQ0FBQywyQkFBMkIsQ0FBQyxNQUFNLENBQUMsQ0FBQzRDLE1BQU0sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDL0MsT0FBTyxDQUFDLEdBQUc7QUFDMUUiLCJpZ25vcmVMaXN0IjpbXX0=

package/src/tools/PowerShellTool/clmTypes.ts

@@ -1,211 +0,0 @@
-/**
- * PowerShell Constrained Language Mode allowed types.
- *
- * Microsoft's CLM restricts .NET type usage to this allowlist when PS runs
- * under AppLocker/WDAC system lockdown. Any type NOT in this set is considered
- * unsafe for untrusted code execution.
- *
- * We invert this: type literals not in this set → ask. One canonical check
- * replaces enumerating individual dangerous types (named pipes, reflection,
- * process spawning, P/Invoke marshaling, etc.). Microsoft maintains the list.
- *
- * Source: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_language_modes
- *
- * Normalization: entries stored lowercase, short AND full names where both
- * exist (PS resolves type accelerators like [int] → System.Int32 at runtime;
- * we match against what the AST emits, which is the literal text).
- */
-export const CLM_ALLOWED_TYPES: ReadonlySet<string> = new Set(
-  [
-    // Type accelerators (short names as they appear in AST TypeName.Name)
-    // SECURITY: 'adsi' and 'adsisearcher' REMOVED. Both are Active Directory
-    // Service Interface types that perform NETWORK BINDS when cast:
-    //   [adsi]'LDAP://evil.com/...' → connects to LDAP server
-    //   [adsisearcher]'(objectClass=user)' → binds to AD and queries
-    // Microsoft's CLM allows these because it's for Windows admins in trusted
-    // domains; we block them since the target isn't validated.
-    'alias',
-    'allowemptycollection',
-    'allowemptystring',
-    'allownull',
-    'argumentcompleter',
-    'argumentcompletions',
-    'array',
-    'bigint',
-    'bool',
-    'byte',
-    'char',
-    'cimclass',
-    'cimconverter',
-    'ciminstance',
-    // 'cimsession' REMOVED — see wmi/adsi comment below
-    'cimtype',
-    'cmdletbinding',
-    'cultureinfo',
-    'datetime',
-    'decimal',
-    'double',
-    'dsclocalconfigurationmanager',
-    'dscproperty',
-    'dscresource',
-    'experimentaction',
-    'experimental',
-    'experimentalfeature',
-    'float',
-    'guid',
-    'hashtable',
-    'int',
-    'int16',
-    'int32',
-    'int64',
-    'ipaddress',
-    'ipendpoint',
-    'long',
-    'mailaddress',
-    'norunspaceaffinity',
-    'nullstring',
-    'objectsecurity',
-    'ordered',
-    'outputtype',
-    'parameter',
-    'physicaladdress',
-    'pscredential',
-    'pscustomobject',
-    'psdefaultvalue',
-    'pslistmodifier',
-    'psobject',
-    'psprimitivedictionary',
-    'pstypenameattribute',
-    'ref',
-    'regex',
-    'sbyte',
-    'securestring',
-    'semver',
-    'short',
-    'single',
-    'string',
-    'supportswildcards',
-    'switch',
-    'timespan',
-    'uint',
-    'uint16',
-    'uint32',
-    'uint64',
-    'ulong',
-    'uri',
-    'ushort',
-    'validatecount',
-    'validatedrive',
-    'validatelength',
-    'validatenotnull',
-    'validatenotnullorempty',
-    'validatenotnullorwhitespace',
-    'validatepattern',
-    'validaterange',
-    'validatescript',
-    'validateset',
-    'validatetrusteddata',
-    'validateuserdrive',
-    'version',
-    'void',
-    'wildcardpattern',
-    // SECURITY: 'wmi', 'wmiclass', 'wmisearcher', 'cimsession' REMOVED.
-    // WMI type casts perform WMI queries which can target remote computers
-    // (network request) and access dangerous classes like Win32_Process.
-    // cimsession creates a CIM session (network connection to remote host).
-    //   [wmi]'\\evil-host\root\cimv2:Win32_Process.Handle="1"' → remote WMI
-    //   [wmisearcher]'SELECT * FROM Win32_Process' → runs WQL query
-    // Same rationale as adsi/adsisearcher removal above.
-    'x500distinguishedname',
-    'x509certificate',
-    'xml',
-    // Full names for accelerators that resolve to System.* (AST may emit either)
-    'system.array',
-    'system.boolean',
-    'system.byte',
-    'system.char',
-    'system.datetime',
-    'system.decimal',
-    'system.double',
-    'system.guid',
-    'system.int16',
-    'system.int32',
-    'system.int64',
-    'system.numerics.biginteger',
-    'system.sbyte',
-    'system.single',
-    'system.string',
-    'system.timespan',
-    'system.uint16',
-    'system.uint32',
-    'system.uint64',
-    'system.uri',
-    'system.version',
-    'system.void',
-    'system.collections.hashtable',
-    'system.text.regularexpressions.regex',
-    'system.globalization.cultureinfo',
-    'system.net.ipaddress',
-    'system.net.ipendpoint',
-    'system.net.mail.mailaddress',
-    'system.net.networkinformation.physicaladdress',
-    'system.security.securestring',
-    'system.security.cryptography.x509certificates.x509certificate',
-    'system.security.cryptography.x509certificates.x500distinguishedname',
-    'system.xml.xmldocument',
-    // System.Management.Automation.* — FQ equivalents of PS-specific accelerators
-    'system.management.automation.pscredential',
-    'system.management.automation.pscustomobject',
-    'system.management.automation.pslistmodifier',
-    'system.management.automation.psobject',
-    'system.management.automation.psprimitivedictionary',
-    'system.management.automation.psreference',
-    'system.management.automation.semanticversion',
-    'system.management.automation.switchparameter',
-    'system.management.automation.wildcardpattern',
-    'system.management.automation.language.nullstring',
-    // Microsoft.Management.Infrastructure.* — FQ equivalents of CIM accelerators
-    // SECURITY: cimsession FQ REMOVED — same network-bind hazard as short name
-    // (creates a CIM session to a remote host).
-    'microsoft.management.infrastructure.cimclass',
-    'microsoft.management.infrastructure.cimconverter',
-    'microsoft.management.infrastructure.ciminstance',
-    'microsoft.management.infrastructure.cimtype',
-    // FQ equivalents of remaining short-name accelerators
-    // SECURITY: DirectoryEntry/DirectorySearcher/ManagementObject/
-    // ManagementClass/ManagementObjectSearcher FQ REMOVED — same network-bind
-    // hazard as short names adsi/adsisearcher/wmi/wmiclass/wmisearcher
-    // (LDAP bind, remote WMI). See short-name removal comments above.
-    'system.collections.specialized.ordereddictionary',
-    'system.security.accesscontrol.objectsecurity',
-    // Arrays of allowed types are allowed (e.g. [string[]])
-    // normalizeTypeName strips [] before lookup, so store the base name
-    'object',
-    'system.object',
-    // ModuleSpecification — full qualified name
-    'microsoft.powershell.commands.modulespecification',
-  ].map(t => t.toLowerCase()),
-)
-
-/**
- * Normalize a type name from AST TypeName.FullName or TypeName.Name.
- * Handles array suffix ([]) and generic brackets.
- */
-export function normalizeTypeName(name: string): string {
-  // Strip array suffix: "String[]" → "string" (arrays of allowed types are allowed)
-  // Strip generic args: "List[int]" → "list" (conservative — the generic wrapper
-  // might be unsafe even if the type arg is safe, so we check the outer type)
-  return name
-    .toLowerCase()
-    .replace(/\[\]$/, '')
-    .replace(/\[.*\]$/, '')
-    .trim()
-}
-
-/**
- * True if typeName (from AST) is in Microsoft's CLM allowlist.
- * Types NOT in this set trigger ask — they access system APIs CLM blocks.
- */
-export function isClmAllowedType(typeName: string): boolean {
-  return CLM_ALLOWED_TYPES.has(normalizeTypeName(typeName))
-}

package/src/tools/PowerShellTool/commandSemantics.ts

@@ -1,142 +0,0 @@
-/**
- * Command semantics configuration for interpreting exit codes in PowerShell.
- *
- * PowerShell-native cmdlets do NOT need exit-code semantics:
- *   - Select-String (grep equivalent) exits 0 on no-match (returns $null)
- *   - Compare-Object (diff equivalent) exits 0 regardless
- *   - Test-Path exits 0 regardless (returns bool via pipeline)
- * Native cmdlets signal failure via terminating errors ($?), not exit codes.
- *
- * However, EXTERNAL executables invoked from PowerShell DO set $LASTEXITCODE,
- * and many use non-zero codes to convey information rather than failure:
- *   - grep.exe / rg.exe (Git for Windows, scoop, etc.): 1 = no match
- *   - findstr.exe (Windows native): 1 = no match
- *   - robocopy.exe (Windows native): 0-7 = success, 8+ = error (notorious!)
- *
- * Without this module, PowerShellTool throws ShellError on any non-zero exit,
- * so `robocopy` reporting "files copied successfully" (exit 1) shows as an error.
- */
-
-export type CommandSemantic = (
-  exitCode: number,
-  stdout: string,
-  stderr: string,
-) => {
-  isError: boolean
-  message?: string
-}
-
-/**
- * Default semantic: treat only 0 as success, everything else as error
- */
-const DEFAULT_SEMANTIC: CommandSemantic = (exitCode, _stdout, _stderr) => ({
-  isError: exitCode !== 0,
-  message:
-    exitCode !== 0 ? `Command failed with exit code ${exitCode}` : undefined,
-})
-
-/**
- * grep / ripgrep: 0 = matches found, 1 = no matches, 2+ = error
- */
-const GREP_SEMANTIC: CommandSemantic = (exitCode, _stdout, _stderr) => ({
-  isError: exitCode >= 2,
-  message: exitCode === 1 ? 'No matches found' : undefined,
-})
-
-/**
- * Command-specific semantics for external executables.
- * Keys are lowercase command names WITHOUT .exe suffix.
- *
- * Deliberately omitted:
- *   - 'diff': Ambiguous. Windows PowerShell 5.1 aliases `diff` → Compare-Object
- *     (exit 0 on differ), but PS Core / Git for Windows may resolve to diff.exe
- *     (exit 1 on differ). Cannot reliably interpret.
- *   - 'fc': Ambiguous. PowerShell aliases `fc` → Format-Custom (a native cmdlet),
- *     but `fc.exe` is the Windows file compare utility (exit 1 = files differ).
- *     Same aliasing problem as `diff`.
- *   - 'find': Ambiguous. Windows find.exe (text search) vs Unix find.exe
- *     (file search via Git for Windows) have different semantics.
- *   - 'test', '[': Not PowerShell constructs.
- *   - 'select-string', 'compare-object', 'test-path': Native cmdlets exit 0.
- */
-const COMMAND_SEMANTICS: Map<string, CommandSemantic> = new Map([
-  // External grep/ripgrep (Git for Windows, scoop, choco)
-  ['grep', GREP_SEMANTIC],
-  ['rg', GREP_SEMANTIC],
-
-  // findstr.exe: Windows native text search
-  // 0 = match found, 1 = no match, 2 = error
-  ['findstr', GREP_SEMANTIC],
-
-  // robocopy.exe: Windows native robust file copy
-  // Exit codes are a BITFIELD — 0-7 are success, 8+ indicates at least one failure:
-  //   0 = no files copied, no mismatch, no failures (already in sync)
-  //   1 = files copied successfully
-  //   2 = extra files/dirs detected (no copy)
-  //   4 = mismatched files/dirs detected
-  //   8 = some files/dirs could not be copied (copy errors)
-  //  16 = serious error (robocopy did not copy any files)
-  // This is the single most common "CI failed but nothing's wrong" Windows gotcha.
-  [
-    'robocopy',
-    (exitCode, _stdout, _stderr) => ({
-      isError: exitCode >= 8,
-      message:
-        exitCode === 0
-          ? 'No files copied (already in sync)'
-          : exitCode >= 1 && exitCode < 8
-            ? exitCode & 1
-              ? 'Files copied successfully'
-              : 'Robocopy completed (no errors)'
-            : undefined,
-    }),
-  ],
-])
-
-/**
- * Extract the command name from a single pipeline segment.
- * Strips leading `&` / `.` call operators and `.exe` suffix, lowercases.
- */
-function extractBaseCommand(segment: string): string {
-  // Strip PowerShell call operators: & "cmd", . "cmd"
-  // (& and . at segment start followed by whitespace invoke the next token)
-  const stripped = segment.trim().replace(/^[&.]\s+/, '')
-  const firstToken = stripped.split(/\s+/)[0] || ''
-  // Strip surrounding quotes if command was invoked as & "grep.exe"
-  const unquoted = firstToken.replace(/^["']|["']$/g, '')
-  // Strip path: C:\bin\grep.exe → grep.exe, .\rg.exe → rg.exe
-  const basename = unquoted.split(/[\\/]/).pop() || unquoted
-  // Strip .exe suffix (Windows is case-insensitive)
-  return basename.toLowerCase().replace(/\.exe$/, '')
-}
-
-/**
- * Extract the primary command from a PowerShell command line.
- * Takes the LAST pipeline segment since that determines the exit code.
- *
- * Heuristic split on `;` and `|` — may get it wrong for quoted strings or
- * complex constructs. Do NOT depend on this for security; it's only used
- * for exit-code interpretation (false negatives just fall back to default).
- */
-function heuristicallyExtractBaseCommand(command: string): string {
-  const segments = command.split(/[;|]/).filter(s => s.trim())
-  const last = segments[segments.length - 1] || command
-  return extractBaseCommand(last)
-}
-
-/**
- * Interpret command result based on semantic rules
- */
-export function interpretCommandResult(
-  command: string,
-  exitCode: number,
-  stdout: string,
-  stderr: string,
-): {
-  isError: boolean
-  message?: string
-} {
-  const baseCommand = heuristicallyExtractBaseCommand(command)
-  const semantic = COMMAND_SEMANTICS.get(baseCommand) ?? DEFAULT_SEMANTIC
-  return semantic(exitCode, stdout, stderr)
-}

package/src/tools/PowerShellTool/commonParameters.ts

@@ -1,30 +0,0 @@
-/**
- * PowerShell Common Parameters (available on all cmdlets via [CmdletBinding()]).
- * Source: about_CommonParameters (PowerShell docs) + Get-Command output.
- *
- * Shared between pathValidation.ts (merges into per-cmdlet known-param sets)
- * and readOnlyValidation.ts (merges into safeFlags check). Split out to break
- * what would otherwise be an import cycle between those two files.
- *
- * Stored lowercase with leading dash — callers `.toLowerCase()` their input.
- */
-
-export const COMMON_SWITCHES = ['-verbose', '-debug']
-
-export const COMMON_VALUE_PARAMS = [
-  '-erroraction',
-  '-warningaction',
-  '-informationaction',
-  '-progressaction',
-  '-errorvariable',
-  '-warningvariable',
-  '-informationvariable',
-  '-outvariable',
-  '-outbuffer',
-  '-pipelinevariable',
-]
-
-export const COMMON_PARAMETERS: ReadonlySet<string> = new Set([
-  ...COMMON_SWITCHES,
-  ...COMMON_VALUE_PARAMS,
-])

package/src/tools/PowerShellTool/destructiveCommandWarning.ts

@@ -1,109 +0,0 @@
-/**
- * Detects potentially destructive PowerShell commands and returns a warning
- * string for display in the permission dialog. This is purely informational
- * -- it doesn't affect permission logic or auto-approval.
- */
-
-type DestructivePattern = {
-  pattern: RegExp
-  warning: string
-}
-
-const DESTRUCTIVE_PATTERNS: DestructivePattern[] = [
-  // Remove-Item with -Recurse and/or -Force (and common aliases)
-  // Anchored to statement start (^, |, ;, &, newline, {, () so `git rm --force`
-  // doesn't match — \b would match `rm` after any word boundary. The `{(`
-  // chars catch scriptblock/group bodies: `{ rm -Force ./x }`. The stopper
-  // adds only `}` (NOT `)`) — `}` ends a block so flags after it belong to a
-  // different statement (`if {rm} else {... -Force}`), but `)` closes a path
-  // grouping and flags after it are still this command's flags:
-  // `Remove-Item (Join-Path $r "tmp") -Recurse -Force` must still warn.
-  {
-    pattern:
-      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b[^|;&\n}]*-Force\b/i,
-    warning: 'Note: may recursively force-remove files',
-  },
-  {
-    pattern:
-      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b[^|;&\n}]*-Recurse\b/i,
-    warning: 'Note: may recursively force-remove files',
-  },
-  {
-    pattern:
-      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Recurse\b/i,
-    warning: 'Note: may recursively remove files',
-  },
-  {
-    pattern:
-      /(?:^|[|;&\n({])\s*(Remove-Item|rm|del|rd|rmdir|ri)\b[^|;&\n}]*-Force\b/i,
-    warning: 'Note: may force-remove files',
-  },
-
-  // Clear-Content on broad paths
-  {
-    pattern: /\bClear-Content\b[^|;&\n]*\*/i,
-    warning: 'Note: may clear content of multiple files',
-  },
-
-  // Format-Volume and Clear-Disk
-  {
-    pattern: /\bFormat-Volume\b/i,
-    warning: 'Note: may format a disk volume',
-  },
-  {
-    pattern: /\bClear-Disk\b/i,
-    warning: 'Note: may clear a disk',
-  },
-
-  // Git destructive operations (same as BashTool)
-  {
-    pattern: /\bgit\s+reset\s+--hard\b/i,
-    warning: 'Note: may discard uncommitted changes',
-  },
-  {
-    pattern: /\bgit\s+push\b[^|;&\n]*\s+(--force|--force-with-lease|-f)\b/i,
-    warning: 'Note: may overwrite remote history',
-  },
-  {
-    pattern:
-      /\bgit\s+clean\b(?![^|;&\n]*(?:-[a-zA-Z]*n|--dry-run))[^|;&\n]*-[a-zA-Z]*f/i,
-    warning: 'Note: may permanently delete untracked files',
-  },
-  {
-    pattern: /\bgit\s+stash\s+(drop|clear)\b/i,
-    warning: 'Note: may permanently remove stashed changes',
-  },
-
-  // Database operations
-  {
-    pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
-    warning: 'Note: may drop or truncate database objects',
-  },
-
-  // System operations
-  {
-    pattern: /\bStop-Computer\b/i,
-    warning: 'Note: will shut down the computer',
-  },
-  {
-    pattern: /\bRestart-Computer\b/i,
-    warning: 'Note: will restart the computer',
-  },
-  {
-    pattern: /\bClear-RecycleBin\b/i,
-    warning: 'Note: permanently deletes recycled files',
-  },
-]
-
-/**
- * Checks if a PowerShell command matches known destructive patterns.
- * Returns a human-readable warning string, or null if no destructive pattern is detected.
- */
-export function getDestructiveCommandWarning(command: string): string | null {
-  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
-    if (pattern.test(command)) {
-      return warning
-    }
-  }
-  return null
-}