[{ "actions_schema": { "run": { "annotations": { "destructiveHint": true, "idempotentHint": false, "openWorldHint": true }, "description": "Run a shell command on the device and return stdout, stderr, and exit_code. Pipes, redirects, and && chains work. A Mac endpoint executes through the signed-in user's login shell (`zsh -l -c`), so host-installed CLIs (gh, git, bun, brew, …) resolve via PATH; a headless endpoint executes through `bash --noprofile --norc -c`, which loads no profile or rc file, so prefer absolute paths over aliases there. Prefer one focused command per call over a long script. Destructive/open-world by nature — gate with approval in production.", "inputSchema": { "additionalProperties": false, "properties": { "command": { "description": "Shell command to execute. Keep commands short and targeted.", "maxLength": 20000, "minLength": 1, "type": "string" }, "cwd": { "description": "Absolute working directory. Defaults to the user's home directory. Must exist.", "type": "string" }, "stdin": { "description": "Optional string piped to the command's stdin.", "maxLength": 1000000, "type": "string" }, "timeout_ms": { "default": 60000, "description": "Wall-clock budget in milliseconds. On timeout the process gets SIGTERM (3s grace) then SIGKILL. Default 60000, max 150000.", "maximum": 150000, "minimum": 100, "type": "integer" } }, "required": ["command"], "type": "object" }, "key": "run", "kind": "write", "name": "Run command", "outputSchema": { "additionalProperties": true, "properties": { "duration_ms": { "type": "integer" }, "exit_code": { "type": "integer" }, "stderr": { "type": "string" }, "stdout": { "type": "string" }, "success": { "type": "boolean" }, "timed_out": { "type": "boolean" } }, "type": "object" }, "requiresApproval": true } }, "auth_schema": { "methods": [{ "type": "none" }] }, "description": "Run shell commands on this device through Lobu. Returns structured stdout/stderr/exit_code. Same trust tier as computer use — commands see the device's real filesystem and PATH. On a Mac they run as the signed-in user in that user's environment; on a headless host they run in a minimal environment with no profile and no inherited secrets. Gate with approval.", "feeds_schema": {}, "key": "os.shell", "name": "Shell", "required_capability": "os.shell", "runtime": { "platforms": ["headless", "macos"] }, "version": "0.3.0" }]