zesdex/apps/infrastructure/src/tools/shell.rs

//! Bash-shell execution tool with safety filters and optional timeout.

use crate::tools::{Tool, ToolCtx};
use anyhow::Result;
use serde_json::{json, Value};
use std::process::Command;
use std::time::Duration;

pub struct Bash;

impl Tool for Bash {
    fn name(&self) -> &'static str {
        "bash"
    }

    fn description(&self) -> &'static str {
        "Execute a shell command via bash -c"
    }

    fn parameters(&self) -> Value {
        json!({
            "type": "object",
            "properties": {
                "command": {
                    "type": "string",
                    "description": "Shell command to execute"
                },
                "description": {
                    "type": "string",
                    "description": "Human-readable description of what the command does"
                },
                "timeout": {
                    "type": "integer",
                    "description": "Timeout in milliseconds (default 120000, max 600000)"
                },
                "run_in_background": {
                    "type": "boolean",
                    "description": "Run the command in the background"
                }
            },
            "required": ["command"]
        })
    }

    fn run(&self, _ctx: &ToolCtx, args: &Value) -> Result<String> {
        let cmd = crate::tools::arg_str(args, "command")?;
        let timeout_ms = args
            .get("timeout")
            .and_then(serde_json::Value::as_u64)
            .unwrap_or(120_000)
            .min(600_000);

        // Safety filter: block destructive git operations
        crate::tools::shell_filter::git::check_git_destructive(&cmd)
            .map_err(|e| anyhow::anyhow!("blocked: {e}"))?;

        let run_in_background = args
            .get("run_in_background")
            .and_then(serde_json::Value::as_bool)
            .unwrap_or(false);

        if run_in_background {
            let job = crate::bgbash::job::spawn_bash_job(cmd);
            crate::bgbash::control::bash_control().register(job.clone());
            return Ok(format!("Background job: {}", job.id));
        }

        let mut child = Command::new("bash")
            .arg("-c")
            .arg(&cmd)
            .stdout(std::process::Stdio::piped())
            .stderr(std::process::Stdio::piped())
            .spawn()
            .map_err(|e| anyhow::anyhow!("failed to spawn bash: {e}"))?;

        let start = std::time::Instant::now();
        let timeout = Duration::from_millis(timeout_ms);

        loop {
            match child.try_wait() {
                Ok(Some(status)) => {
                    let elapsed = start.elapsed().as_secs_f64();
                    let output = child
                        .wait_with_output()
                        .map_err(|e| anyhow::anyhow!("failed to collect output: {e}"))?;
                    let stdout = String::from_utf8_lossy(&output.stdout).to_string();
                    let stderr = String::from_utf8_lossy(&output.stderr).to_string();
                    let combined = if stderr.is_empty() {
                        stdout
                    } else {
                        format!("{stdout}\n{stderr}")
                    };
                    let trimmed = combined.trim().to_string();
                    if status.success() {
                        return Ok(if trimmed.is_empty() {
                            format!("Command completed in {elapsed:.2}s (exit code 0)")
                        } else {
                            format!("{trimmed}\n\nExit code: 0 ({elapsed:.2}s)")
                        });
                    }
                    return Ok(format!(
                        "{}\n\nExit code: {} ({:.2}s)",
                        trimmed,
                        status.code().unwrap_or(-1),
                        elapsed
                    ));
                }
                Ok(None) => {
                    if start.elapsed() > timeout {
                        let _ = child.kill();
                        let _ = child.wait();
                        anyhow::bail!("command timed out after {timeout_ms}ms");
                    }
                    std::thread::sleep(Duration::from_millis(10));
                }
                Err(e) => {
                    anyhow::bail!("failed to wait for command: {e}");
                }
            }
        }
    }
}