CalvinBackup/shannon
1
0
Fork 0
mirror of https://github.com/KeygraphHQ/shannon.git synced 2026-07-13 08:16:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(worker): enforce bounded bash timeouts via pi extension

Browse Source
This commit is contained in:
ezl-keygraph
2026-06-16 12:48:00 +05:30
parent f97afb482e
commit cf396fb9c7
3 changed files with 53 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/worker/src/ai/pi-executor.ts
+3 -2
View File
@@ -21,7 +21,7 @@ import {
} from '@earendil-works/pi-coding-agent';
import { fs, path } from 'zx';
import type { AuditSession } from '../audit/index.js';
import { deliverablesDir, PLAYWRIGHT_SKILL_DIR } from '../paths.js';
import { BASH_TIMEOUT_EXTENSION_DIR, deliverablesDir, PLAYWRIGHT_SKILL_DIR } from '../paths.js';
import { isRetryableError, PentestError } from '../services/error-handling.js';
import { AGENT_VALIDATORS } from '../session-manager.js';
import type { ActivityLogger } from '../types/activity-logger.js';
@@ -65,7 +65,8 @@ function permissionExtensionDir(): string | null {
}
async function buildResourceLoader(cwd: string, logger: ActivityLogger): Promise<ResourceLoader> {
const additionalExtensionPaths: string[] = [];
// Always enforce bounded bash timeouts so an unbounded command cannot hang the agent.
const additionalExtensionPaths: string[] = [BASH_TIMEOUT_EXTENSION_DIR];
if (fs.existsSync(permissionConfigPath())) {
const extDir = permissionExtensionDir();
if (extDir) {