openclaw/dist/bash-tools.descriptions-CVVAAtco.js

Multi-channel AI gateway with extensible messaging integrations

import { i as resolveExecApprovalsFromFile } from "./exec-approvals-BSZ-fPIY.js";
import { r as loadExecApprovals } from "./exec-approvals-store-DBR0neS0.js";
import path from "node:path";
//#region src/agents/bash-tools.descriptions.ts
/**
* Tool descriptions for bash exec and process-control tools.
* Descriptions include platform-specific guidance and approved executable
* hints that are safe to show to the model.
*/
/**
* Show the exact approved token in hints. Absolute paths stay absolute so the
* hint cannot imply an equivalent PATH lookup that resolves to a different binary.
*/
function deriveExecShortName(fullPath) {
	if (path.isAbsolute(fullPath)) return fullPath;
	const base = path.basename(fullPath);
	return base.replace(/\.exe$/i, "") || base;
}
/** Builds the model-facing exec tool description for the current platform/config. */
function describeExecTool(params) {
	const base = [
		...params?.hasProcessTool === false ? ["Run shell and wait for completion."] : [
			"Run shell now; background continuation supported.",
			"Use yieldMs/background, then process for logs/status/input/intervention.",
			"Long run: automatic completion wake when enabled and output/failure occurs; otherwise process confirms completion."
		],
		params?.hasCronTool ? "No sleep loops for reminders/follow-ups; use automations." : void 0,
		"TTY CLI/UI/coding agent: pty=true."
	].filter(Boolean).join(" ");
	if (process.platform !== "win32") return `${base} Quote arguments containing shell metacharacters, including URL query strings with \`?\` or \`&\`.`;
	const lines = [base];
	lines.push("IMPORTANT (Windows): Run executables directly; do NOT wrap commands in `cmd /c`, `powershell -Command`, `& ` prefix, or WSL. Use backslash paths (C:\\path), not forward slashes. Use short executable names (e.g. `node`, `python3`) instead of full paths.");
	try {
		const approvalsFile = loadExecApprovals();
		const allowlist = resolveExecApprovalsFromFile({
			file: approvalsFile,
			agentId: params?.agentId
		}).allowlist.filter((entry) => {
			const pattern = entry.pattern?.trim() ?? "";
			return pattern.length > 0 && pattern !== "*" && !pattern.startsWith("=command:") && (pattern.includes("/") || pattern.includes("\\") || pattern.includes("~"));
		});
		if (allowlist.length > 0) {
			lines.push("Pre-approved executables (exact arguments are enforced at runtime; no approval prompt needed when args match):");
			for (const entry of allowlist.slice(0, 10)) {
				const shortName = deriveExecShortName(entry.pattern);
				const argNote = entry.argPattern ? "(restricted args)" : "(any arguments)";
				lines.push(`  ${shortName} ${argNote}`);
			}
		}
	} catch {}
	return lines.join("\n");
}
/** Builds the model-facing process-control tool description. */
function describeProcessTool(params) {
	return [
		"Control existing exec: list, poll, log, write, send-keys, submit, paste, kill.",
		"poll/log: status, output, quiet success, completion without auto-wake, input hints. Others: input/intervention.",
		params?.hasCronTool ? "No polling as timer/reminder; scheduled follow-up uses automations." : void 0
	].filter(Boolean).join(" ");
}
//#endregion
export { describeProcessTool as n, describeExecTool as t };