shell

type ShellBashConfig struct {
	// WorkDir is working directory relative to the workspace root.
	WorkDir string `json:"workDir"`
	// TimeoutSeconds is per-command limit when the model omits timeout; 0 means no limit.
	TimeoutSeconds int `json:"timeoutSeconds"`
	// Commands optionally overrides env var names injected for shell-bash.<token>.
	// Default: scope is derived from the command's first token; keys come from L1 scopedEnv
	// or secrets.enc.json / dotenv (/env add).
	Commands map[string][]string `json:"commands,omitempty"`
	// TrimEnv trims the child env to a minimal base (PATH/HOME/... + PWD) plus
	// scoped/extra pairs. Default false: the child inherits the full host env
	// (os.Environ) plus scoped pairs — secrets belong in scopedEnv / /env add.
	TrimEnv *bool `json:"trimEnv,omitempty"`
	// ExtraEnv adds static, non-secret KEY=value entries to the child env.
	// Secrets belong in credentials scopedEnv / /env add, not here.
	ExtraEnv map[string]string `json:"extraEnv,omitempty"`
}

type ShellBashDeps struct {
	Workspace   workspace.Service `json:"workspace"`
	Credentials credentials.Store `json:"credentials,omitempty"`
}

type ShellInput struct {
	Command string   `json:"command" jsonschema:"Shell command to execute"`
	Timeout *float64 `json:"timeout,omitempty" jsonschema:"Timeout in seconds (optional, no default timeout)"`
}

type ShellOutput struct {
	ExitCode int
	Stdout   string
	Stderr   string
}

type StructuredShell interface {
	// RunStructured executes command in the tool's workspace work dir (bash -lc),
	// with optional per-call timeout in seconds. Callers may wrap with cd.
	RunStructured(ctx context.Context, command string, timeoutSeconds *float64) (stdout, stderr string, exitCode int, err error)
}