bash

name	bash
description	Run shell/terminal commands in the Agentium Docker stack safely — pytest, alembic, ruff/black/mypy, docker compose, make, and Postgres/Redis/Chroma inspection. Covers the ShellTool list-vs-shell rule and safe-bash discipline.
skill_type	automation
domain	devops
complexity	intermediate
tags	["bash","shell","docker","terminal","devops","testing","migrations"]
creator_tier	head

Bash for Agentium Agents

Agentium runs entirely in Docker. You execute shell through ShellTool.execute(command: List[str]), which calls subprocess.run without a shell.

The ShellTool rule (critical)

Pipes, redirects, &&, ||, $(), and globs do NOT work unless you wrap the whole command in bash -lc "..." and quote the inner string: bash -lc "docker compose exec -T backend pytest tests/foo.py -q 2>&1 | tail -40".

Two shells

• Host shell: lifecycle via make + docker compose (make up, make down, make restart, make test-integration, make audit, make benchmark, make docker-scout).
• Container shell (Python 3.11 toolchain: pytest 8.4, alembic 1.14, ruff/black/ mypy/interrogate/detect-secrets/vulture): reach via docker compose exec -T backend bash -lc '...'.

Host path discipline

Follow tools/host_path.py: ~ → /host_home, other absolute paths → /host, /tmp and relative → container-local. Never write Sovereign/user files into the container filesystem.

Safe-bash discipline (summary)

See safety.md. One-liner: set -euo pipefail, quote "${var}", [[ ]] not [ ], no eval, check return codes, idempotent, explicit ./ for globs, preview destructive ops. ShellTool already blocks rm -rf /, mkfs, dd if=/dev/zero, shutdown, reboot.

Command cookbook

See commands.md for copy-paste recipes (tests, DB/alembic, Redis/Chroma, lint/ format/type, logs/health, lifecycle, git).

Bundled helpers (scripts & datasets)

This skill ships runnable helpers. The __SKILL_DIR__ token resolves to this skill's absolute path inside the container (/app/backend/.agentium/skills/bash). Invoke a helper through bash -lc: bash -lc '__SKILL_DIR__/scripts/agent-health.sh' Datasets (if any) live at __SKILL_DIR__/datasets/.

Error handling & red flags

Unhealthy services, migration conflicts, port clashes, offline model downloads, secret-scan failures. Agent foot-guns: guessing commands, unquoted vars, ignoring non-zero exits, unvetted rm -rf.