use std::sync::Arc; use std::time::Duration; use async_trait::async_trait; use codex_async_utils::CancelErr; use codex_async_utils::OrCancelExt; use codex_protocol::user_input::UserInput; use tokio_util::sync::CancellationToken; use tracing::error; use uuid::Uuid; use crate::codex::TurnContext; use crate::exec::ExecToolCallOutput; use crate::exec::SandboxType; use crate::exec::StdoutStream; use crate::exec::StreamOutput; use crate::exec::execute_exec_env; use crate::exec_env::create_env; use crate::parse_command::parse_command; use crate::protocol::EventMsg; use crate::protocol::ExecCommandBeginEvent; use crate::protocol::ExecCommandEndEvent; use crate::protocol::SandboxPolicy; use crate::protocol::TaskStartedEvent; use crate::sandboxing::ExecEnv; use crate::state::TaskKind; use crate::tools::format_exec_output_str; use crate::user_shell_command::user_shell_command_record_item; use super::SessionTask; use super::SessionTaskContext; #[derive(Clone)] pub(crate) struct UserShellCommandTask { command: String, } impl UserShellCommandTask { pub(crate) fn new(command: String) -> Self { Self { command } } } #[async_trait] impl SessionTask for UserShellCommandTask { fn kind(&self) -> TaskKind { TaskKind::Regular } async fn run( self: Arc, session: Arc, turn_context: Arc, _input: Vec, cancellation_token: CancellationToken, ) -> Option { let event = EventMsg::TaskStarted(TaskStartedEvent { model_context_window: turn_context.client.get_model_context_window(), }); let session = session.clone_session(); session.send_event(turn_context.as_ref(), event).await; // Execute the user's script under their default shell when known; this // allows commands that use shell features (pipes, &&, redirects, etc.). // We do not source rc files or otherwise reformat the script. let shell_invocation = match session.user_shell() { crate::shell::Shell::Zsh(zsh) => vec![ zsh.shell_path.clone(), "-lc".to_string(), self.command.clone(), ], crate::shell::Shell::Bash(bash) => vec![ bash.shell_path.clone(), "-lc".to_string(), self.command.clone(), ], crate::shell::Shell::PowerShell(ps) => vec![ ps.exe.clone(), "-NoProfile".to_string(), "-Command".to_string(), self.command.clone(), ], crate::shell::Shell::Unknown => { shlex::split(&self.command).unwrap_or_else(|| vec![self.command.clone()]) } }; let call_id = Uuid::new_v4().to_string(); let raw_command = self.command.clone(); let parsed_cmd = parse_command(&shell_invocation); session .send_event( turn_context.as_ref(), EventMsg::ExecCommandBegin(ExecCommandBeginEvent { call_id: call_id.clone(), command: shell_invocation.clone(), cwd: turn_context.cwd.clone(), parsed_cmd, is_user_shell_command: true, }), ) .await; let exec_env = ExecEnv { command: shell_invocation, cwd: turn_context.cwd.clone(), env: create_env(&turn_context.shell_environment_policy), timeout_ms: None, sandbox: SandboxType::None, with_escalated_permissions: None, justification: None, arg0: None, }; let stdout_stream = Some(StdoutStream { sub_id: turn_context.sub_id.clone(), call_id: call_id.clone(), tx_event: session.get_tx_event(), }); let sandbox_policy = SandboxPolicy::DangerFullAccess; let exec_result = execute_exec_env(exec_env, &sandbox_policy, stdout_stream) .or_cancel(&cancellation_token) .await; match exec_result { Err(CancelErr::Cancelled) => { let aborted_message = "command aborted by user".to_string(); let exec_output = ExecToolCallOutput { exit_code: -1, stdout: StreamOutput::new(String::new()), stderr: StreamOutput::new(aborted_message.clone()), aggregated_output: StreamOutput::new(aborted_message.clone()), duration: Duration::ZERO, timed_out: false, }; let output_items = [user_shell_command_record_item(&raw_command, &exec_output)]; session .record_conversation_items(turn_context.as_ref(), &output_items) .await; session .send_event( turn_context.as_ref(), EventMsg::ExecCommandEnd(ExecCommandEndEvent { call_id, stdout: String::new(), stderr: aborted_message.clone(), aggregated_output: aborted_message.clone(), exit_code: -1, duration: Duration::ZERO, formatted_output: aborted_message, }), ) .await; } Ok(Ok(output)) => { session .send_event( turn_context.as_ref(), EventMsg::ExecCommandEnd(ExecCommandEndEvent { call_id: call_id.clone(), stdout: output.stdout.text.clone(), stderr: output.stderr.text.clone(), aggregated_output: output.aggregated_output.text.clone(), exit_code: output.exit_code, duration: output.duration, formatted_output: format_exec_output_str(&output), }), ) .await; let output_items = [user_shell_command_record_item(&raw_command, &output)]; session .record_conversation_items(turn_context.as_ref(), &output_items) .await; } Ok(Err(err)) => { error!("user shell command failed: {err:?}"); let message = format!("execution error: {err:?}"); let exec_output = ExecToolCallOutput { exit_code: -1, stdout: StreamOutput::new(String::new()), stderr: StreamOutput::new(message.clone()), aggregated_output: StreamOutput::new(message.clone()), duration: Duration::ZERO, timed_out: false, }; session .send_event( turn_context.as_ref(), EventMsg::ExecCommandEnd(ExecCommandEndEvent { call_id, stdout: exec_output.stdout.text.clone(), stderr: exec_output.stderr.text.clone(), aggregated_output: exec_output.aggregated_output.text.clone(), exit_code: exec_output.exit_code, duration: exec_output.duration, formatted_output: format_exec_output_str(&exec_output), }), ) .await; let output_items = [user_shell_command_record_item(&raw_command, &exec_output)]; session .record_conversation_items(turn_context.as_ref(), &output_items) .await; } } None } }