shelllisted

# shell Execute shell commands. All commands use the universal set defined in `PLATFORM_AGNOSTIC_MAPPING.md`. ## Platform Agnosticism - Internal reasoning always uses the **Universal Command Set** (`ls`, `cat`, `grep`, etc.). - Internal paths always use POSIX-style forward slashes `/`. - The active adapter's `shell()` implementation performs OS-specific translation. ## Operations - `shell.run(cmd, cwd, env, timeout)` — capture stdout/stderr/exit. - `shell.pipe([cmd, cmd])` — piped sequences. - `shell.bg(cmd)` — background (returns handle; managed by adapter). - `shell.which(bin)` — PATH lookup. ## I/O Contract ```yaml io_contract: input: { cmd: string, "cwd?": path, "env?": map, "timeout_s?": int } output: { stdout: string, stderr: string, exit: int } idempotent: false side_effects: [shell] ``` ## Safety - Honours host permission rules (see `adapters/*/PERMISSIONS.md`). - Refuses commands matching `configuration/local/rules.config.md.forbidden_ops`. - `sudo` + privileged binaries are always mid+ risk. - Timeouts default to `acquisition.config.sandbox_limits.wall_s` in sandbox contexts.