shell

type ShellBashConfig struct {
	// WorkDir is working directory relative to the workspace root.
	WorkDir string `json:"workDir"`
	// TimeoutSeconds is per-command limit when the model omits timeout; 0 means no limit.
	TimeoutSeconds int `json:"timeoutSeconds"`
	// Commands optionally overrides env var names injected for shell-bash.<token>.
	// Default: scope is derived from the command's first token; keys come from L1 scopedEnv
	// or secrets.enc.json / dotenv (/env add).
	Commands map[string][]string `json:"commands,omitempty"`
	// TrimEnv trims the child env to a minimal base (PATH/HOME/... + PWD) plus
	// scoped/extra pairs. Default false: the child inherits the full host env
	// (os.Environ) plus scoped pairs — secrets belong in scopedEnv / /env add.
	TrimEnv *bool `json:"trimEnv,omitempty"`
	// ExtraEnv adds static, non-secret KEY=value entries to the child env.
	// Secrets belong in credentials scopedEnv / /env add, not here.
	ExtraEnv map[string]string `json:"extraEnv,omitempty"`
}

type ShellBashDeps struct {
	Workspace   workspace.Service `json:"workspace"`
	Credentials credentials.Store `json:"credentials,omitempty"`
}

type ShellInput struct {
	Command string   `json:"command" jsonschema:"Shell command to execute"`
	Timeout *float64 `json:"timeout,omitempty" jsonschema:"Timeout in seconds (optional, no default timeout)"`
}

type ShellOutput struct {
	ExitCode int
	Stdout   string
	Stderr   string
}