@delorenj/pjangler 1.3.0 → 1.4.2

package/templates/hermes-agent/template/.scripts/_lib.sh

@@ -46,19 +46,63 @@ PYEOF
 # Apply a sed substitution to role.yaml in-place. Used to record IDs after
 # external provisioning steps return them.
 yaml_set() {
-  # yaml_set KEY VALUE   (only updates the first match; key must already exist)
+  # yaml_set KEY VALUE   (supports flat and one-level nested keys)
   local key="$1" val="$2"
   python3 - "$ROLE_YAML" "$key" "$val" <<'PYEOF'
-import sys, re, pathlib
+import json, pathlib, re, sys
+
 path, key, val = sys.argv[1:4]
-p = pathlib.Path(path); text = p.read_text()
-# Match `<indent><key>:<...>` and rewrite the value (last leaf only).
-leaf = key.split(".")[-1]
-new = re.sub(rf'(?m)^(\s*{re.escape(leaf)}:\s*)("?)[^"\n]*("?)\s*$',
-             lambda m: f'{m.group(1)}"{val}"', text, count=1)
-if new == text:
-    sys.exit(f"yaml_set: leaf '{leaf}' not found in {path}")
-p.write_text(new)
+p = pathlib.Path(path)
+text = p.read_text(encoding="utf-8")
+parts = key.split(".")
+if len(parts) not in (1, 2) or any(
+    not re.fullmatch(r"[A-Za-z_][A-Za-z0-9_-]*", part) for part in parts
+):
+    sys.exit(f"yaml_set: unsupported key '{key}'")
+
+lines = text.splitlines(keepends=True)
+start, end, parent_indent = 0, len(lines), -1
+if len(parts) == 2:
+    parent, leaf = parts
+    parents = []
+    for index, raw in enumerate(lines):
+        line = raw.rstrip("\r\n")
+        match = re.fullmatch(rf"( *){re.escape(parent)}:\s*(?:#.*)?", line)
+        if match and len(match.group(1)) == 0:
+            parents.append(index)
+    if len(parents) != 1:
+        sys.exit(f"yaml_set: parent '{parent}' not found uniquely in {path}")
+    parent_index = parents[0]
+    parent_indent = 0
+    start = parent_index + 1
+    for index in range(start, len(lines)):
+        candidate = lines[index].rstrip("\r\n")
+        if not candidate.strip() or candidate.lstrip().startswith("#"):
+            continue
+        indent = len(candidate) - len(candidate.lstrip(" "))
+        if indent <= parent_indent:
+            end = index
+            break
+else:
+    leaf = parts[0]
+
+targets = []
+for index in range(start, end):
+    raw = lines[index]
+    line = raw.rstrip("\r\n")
+    match = re.match(rf"^( *){re.escape(leaf)}:\s*", line)
+    if not match:
+        continue
+    indent = len(match.group(1))
+    if (parent_indent < 0 and indent == 0) or (parent_indent >= 0 and indent > parent_indent):
+        targets.append((index, match.group(1)))
+if len(targets) != 1:
+    sys.exit(f"yaml_set: key '{key}' not found uniquely in {path}")
+
+index, indent = targets[0]
+ending = "\r\n" if lines[index].endswith("\r\n") else "\n" if lines[index].endswith("\n") else ""
+lines[index] = f"{indent}{leaf}: {json.dumps(val, ensure_ascii=False)}{ending}"
+p.write_text("".join(lines), encoding="utf-8")
 PYEOF
 }
 
@@ -144,12 +188,50 @@ clear_done() {
   rm -f -- "$ROLE_DIR/.scripts/.done-$1"
 }
 
+# The parser protocol, unsafe-family scrub, complete framing validation, and
+# atomic environment apply live in one reusable library shared by provisioners,
+# launchers, and maintenance commands.
+FLEET_ENV_LIBRARY="$ROLE_DIR/.scripts/lib/fleet-env.sh"
+FLEET_ENV_PARSER="$ROLE_DIR/.scripts/lib/parse-fleet-env.py"
+if [[ ! -f "$FLEET_ENV_LIBRARY" || -L "$FLEET_ENV_LIBRARY" ]]; then
+  builtin printf 'fleet environment loader rejected: trusted library is unavailable\n' >&2
+  return 1
+fi
+# shellcheck source=lib/fleet-env.sh
+builtin source "$FLEET_ENV_LIBRARY"
+
 # Fleet source-of-truth (shared across all wrappers/provisioners).
 # Every default below resolves as: env var > fleet.env > config.toml > fallback.
+# Invocation authority is not fleet configuration. Capture the caller's board
+# gate before importing fleet.env so that file cannot weaken an MCP/CLI
+# SKIP_PLANE decision or re-enable credentials by assigning SKIP_PLANE=0.
+PJANGLER_INVOCATION_SKIP_PLANE="${SKIP_PLANE:-0}"
 FLEET_ENV="${HERMES_FLEET_ENV:-$(config_get fleet.fleet_env "$HOME/.hermes/fleet.env")}"
-if [[ -f "$FLEET_ENV" ]]; then
-  # shellcheck disable=SC1090
-  source "$FLEET_ENV"
+
+# A direct CLI caller may not have passed through the MCP parent boundary. The
+# shared loader hardens both before parser startup and again after atomic import.
+if ! load_fleet_environment "$FLEET_ENV" "$FLEET_ENV_PARSER"; then
+  return 1
+fi
+SKIP_PLANE="$PJANGLER_INVOCATION_SKIP_PLANE"
+unset PJANGLER_INVOCATION_SKIP_PLANE
+scrub_subprocess_interpreter_injection
+
+# fleet.env is allowed to supply provider credentials only for an explicitly
+# board-authorized invocation. A no-board/deferred phase must remove every
+# supported provider alias after sourcing and before any Python, Hermes,
+# systemd, provider, or other child process can inherit it.
+scrub_ticket_provider_authority() {
+  local key
+  unset PLANE_API_KEY TRELLO_KEY TRELLO_TOKEN LINEAR_API_KEY
+  while IFS= read -r key; do
+    case "$key" in
+      PLANE_*_API_KEY) unset "$key" ;;
+    esac
+  done < <(compgen -A variable PLANE_)
+}
+if [[ "$SKIP_PLANE" == "1" ]]; then
+  scrub_ticket_provider_authority
 fi
 # Identity-bearing chat credentials are never fleet-scoped. Platform wiring
 # steps capture explicit invocation values before sourcing this library and
@@ -190,7 +272,7 @@ fleet_lock_acquire() {
 fleet_lock_release() {
   if [[ "${FLEET_LOCK_FD:-}" =~ ^[0-9]+$ ]]; then
     flock -u "$FLEET_LOCK_FD" 2>/dev/null || true
-    eval "exec ${FLEET_LOCK_FD}>&-"
+    exec {FLEET_LOCK_FD}>&-
   fi
   FLEET_LOCK_FD=""
 }
@@ -202,13 +284,18 @@ BLOODBANK_COMPOSE_DIR="${BLOODBANK_COMPOSE_DIR:-$(config_get bloodbank.compose_d
 
 # Plane
 PLANE_BASE="${PLANE_BASE:-$(config_get plane.base 'https://plane.delo.sh')}"
-PLANE_API_KEY="${PLANE_API_KEY:-${PLANE_33GOD_API_KEY:-}}"
+if [[ "$SKIP_PLANE" != "1" ]]; then
+  PLANE_API_KEY="${PLANE_API_KEY:-${PLANE_33GOD_API_KEY:-}}"
+fi
 
 export FLEET_ENV HERMES_BIN HERMES_AGENT_REPO PJANGLER_BIN HERMES_RUNTIME_GIT_URL \
        HERMES_RUNTIME_GIT_REF HERMES_RUNTIME_GIT_SHA HERMES_OAUTH_FILE CODEX_HOME \
        RUNTIME_SCAFFOLD_DIR REGISTRY_FILE \
        BLOODBANK_NATS_HOST BLOODBANK_NATS_PORT BLOODBANK_COMPOSE_DIR \
-       PLANE_BASE PLANE_API_KEY
+       PLANE_BASE SKIP_PLANE
+if [[ "$SKIP_PLANE" != "1" ]]; then
+  export PLANE_API_KEY
+fi
 
 # systemd --user health check. Accept running/degraded/starting — only one
 # broken unit shouldn't disqualify the rest of the user manager.
@@ -255,6 +342,19 @@ systemctl_user_unit_state() {
 # Resolve project repo path (the repo that holds agents/hermes/<role>/).
 # Walk up from $ROLE_DIR until we find a git root that isn't us.
 project_repo_path() {
+  # Structured provisioners know the project root even before a fresh target
+  # receives its own .git directory. Accept only a root that contains this
+  # exact role path; otherwise fail closed instead of walking into a parent
+  # checkout and mutating its manifest.
+  if [[ -n "${PJANGLER_PROJECT_ROOT:-}" ]]; then
+    local explicit role_real
+    explicit="$(cd "$PJANGLER_PROJECT_ROOT" 2>/dev/null && pwd -P)" || return 1
+    role_real="$(cd "$ROLE_DIR" 2>/dev/null && pwd -P)" || return 1
+    case "$role_real" in
+      "$explicit"/agents/hermes/*) printf '%s\n' "$explicit"; return 0 ;;
+      *) return 1 ;;
+    esac
+  fi
   local d="$ROLE_DIR"
   [[ -d "$d/.git" || -f "$d/.git" ]] && { echo "$d"; return 0; }
   for _ in 1 2 3 4 5; do

package/templates/hermes-agent/template/.scripts/checkpoint.sh

@@ -38,6 +38,23 @@ secret_scan_ok() {
   return 0
 }
 
+# A checkpoint on a DETACHED HEAD belongs to no branch: `git push origin HEAD`
+# cannot resolve a destination, so every commit stays local forever. One runtime
+# reached 232 orphaned commits this way before anyone noticed.
+BRANCH="$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo HEAD)"
+if [ "$BRANCH" = "HEAD" ]; then
+  printf '[checkpoint] ABORT: %s is on a DETACHED HEAD — refusing to create commits that can never be pushed.\n' "$RUNTIME_DIR" >&2
+  printf '[checkpoint] Fix: git -C %s switch -c main && git -C %s push -u origin main\n' "$RUNTIME_DIR" "$RUNTIME_DIR" >&2
+  exit 4
+fi
+
+# Report an existing backlog BEFORE adding to it, so a broken push is visible on
+# the very next tick instead of compounding silently for months.
+backlog="$(git rev-list --count "origin/$BRANCH..HEAD" 2>/dev/null || echo 0)"
+if [ "$backlog" -ge 10 ]; then
+  printf '[checkpoint] WARNING: %s already has %s UNPUSHED commit(s) on %s.\n' "$RUNTIME_DIR" "$backlog" "$BRANCH" >&2
+fi
+
 git add -A
 if git diff --cached --quiet; then
   exit 0
@@ -51,4 +68,15 @@ if ! secret_scan_ok; then
 fi
 
 git -c commit.gpgsign=false commit -m "checkpoint $(date -Iseconds)" >/dev/null
-git push origin HEAD 2>&1 | tail -1 || true
+
+# The push MUST be observable. This line used to be
+#   git push origin HEAD 2>&1 | tail -1 || true
+# where `|| true` swallowed every failure — diverged branch, auth, network —
+# and the pipe masked git's exit status on top of it. Run hourly, that turns a
+# broken push into an invisible, unbounded pile of local-only commits.
+if ! git push origin "$BRANCH" >/dev/null 2>&1; then
+  ahead="$(git rev-list --count "origin/$BRANCH..HEAD" 2>/dev/null || echo '?')"
+  printf '[checkpoint] PUSH FAILED for %s (%s commit(s) exist ONLY on this disk).\n' "$RUNTIME_DIR" "$ahead" >&2
+  printf '[checkpoint] Diagnose: git -C %s push origin %s\n' "$RUNTIME_DIR" "$BRANCH" >&2
+  exit 5
+fi

package/templates/hermes-agent/template/.scripts/heartbeat.sh

@@ -20,12 +20,24 @@ PROMPT_FILE="$ROLE_DIR/.scripts/sentinel.prompt.md"
 STATE_FILE="$RUNTIME/continuous-ticket-sentinel-state.json"
 LOCK_FILE="$RUNTIME/continuous-ticket-sentinel.lock"
 ROLE_YAML="$ROLE_DIR/role.yaml"
+FLEET_ENV="${HERMES_FLEET_ENV:-$HOME/.hermes/fleet.env}"
+FLEET_ENV_LIBRARY="$ROLE_DIR/.scripts/lib/fleet-env.sh"
+FLEET_ENV_PARSER="$ROLE_DIR/.scripts/lib/parse-fleet-env.py"
 LOG_FILE="$RUNTIME/logs/heartbeat.log"
 CHECKPOINT_BIN="$ROLE_DIR/.scripts/checkpoint.sh"
 CHECKPOINT_STAMP="$RUNTIME/.last-checkpoint"
 
+if [[ ! -f "$FLEET_ENV_LIBRARY" || -L "$FLEET_ENV_LIBRARY" \
+   || ! -f "$FLEET_ENV_PARSER" || -L "$FLEET_ENV_PARSER" ]]; then
+  echo "heartbeat: trusted fleet environment loader unavailable" >&2
+  exit 1
+fi
+# shellcheck source=lib/fleet-env.sh
+builtin source "$FLEET_ENV_LIBRARY"
+load_fleet_environment "$FLEET_ENV" "$FLEET_ENV_PARSER"
+
 # Hermes binary: explicit env > ~/.config/hermes-agent/hermes-bin > PATH.
-HERMES_BIN="${HERMES_BIN:-}"
+HERMES_BIN="${HERMES_BIN:-${HERMES_FLEET_BIN:-}}"
 if [[ -z "$HERMES_BIN" ]]; then
   if [[ -r "$HOME/.config/hermes-agent/hermes-bin" ]]; then
     HERMES_BIN="$(cat "$HOME/.config/hermes-agent/hermes-bin")"

package/templates/hermes-agent/template/.scripts/lib/fleet-env.sh

@@ -0,0 +1,202 @@
+# shellcheck shell=bash
+# Shared data-only fleet.env loader. This file is trusted template code; the
+# fleet.env it reads is configuration data and is never evaluated by a shell.
+
+if [[ "${__PJANGLER_FLEET_ENV_LIBRARY_LOADED:-0}" == "1" ]]; then
+  return 0
+fi
+__PJANGLER_FLEET_ENV_LIBRARY_LOADED=1
+
+# fleet.env is shared configuration, not authority to inject code into Python,
+# shell, Node, or dynamic-loader children. PATH remains intact so explicitly
+# configured Hermes/PJangler/provider tools still resolve.
+subprocess_injection_key_is_unsafe() {
+  local key="$1" loader_key="$1"
+  case "$key" in
+    PYTHONPATH|PYTHONHOME|PYTHONSTARTUP|PYTHONUSERBASE|\
+    BASH_ENV|ENV|BASHOPTS|SHELLOPTS|BASH_COMPAT|BASH_LOADABLES_PATH|\
+    BASH_XTRACEFD|PROMPT_COMMAND|PS0|PS1|PS2|PS3|PS4|\
+    NODE_OPTIONS|NODE_PATH|GLIBC_TUNABLES|BASH_FUNC_*|DYLD_*)
+      return 0
+      ;;
+  esac
+
+  # GNU and multilib loaders consume the same control stem with an optional
+  # _32/_64 ABI suffix. Do not delete unrelated application keys such as
+  # LD_SDK_KEY merely because they share the LD_ prefix.
+  case "$loader_key" in
+    LD_*_32|LD_*_64) loader_key="${loader_key%_*}" ;;
+  esac
+  case "$loader_key" in
+    LD_ASSUME_KERNEL|LD_AUDIT|LD_BIND_NOT|LD_BIND_NOW|LD_DEBUG|\
+    LD_DEBUG_OUTPUT|LD_DYNAMIC_WEAK|LD_HWCAP_MASK|LD_LIBRARY_PATH|\
+    LD_ORIGIN_PATH|LD_POINTER_GUARD|LD_PREFER_MAP_32BIT_EXEC|LD_PRELOAD|\
+    LD_PROFILE|LD_PROFILE_OUTPUT|LD_SHOW_AUXV|LD_TRACE_LOADED_OBJECTS|\
+    LD_TRACE_PRELINKING|LD_USE_LOAD_BIAS|LD_VERBOSE|LD_WARN)
+      return 0
+      ;;
+  esac
+  return 1
+}
+
+scrub_subprocess_interpreter_injection() {
+  local key declaration function_name
+
+  builtin set +x +v
+  while IFS= read -r key; do
+    if subprocess_injection_key_is_unsafe "$key"; then
+      case "$key" in
+        BASHOPTS|SHELLOPTS|BASH_XTRACEFD)
+          builtin export -n "$key" 2>/dev/null || true
+          ;;
+        *)
+          builtin unset -v "$key" 2>/dev/null || true
+          ;;
+      esac
+    fi
+  done < <(builtin compgen -A variable)
+
+  # Imported exported functions are live functions rather than ordinary
+  # BASH_FUNC_* variables. Remove the whole class before selecting any child.
+  while IFS= read -r declaration; do
+    function_name="${declaration##* }"
+    [[ -n "$function_name" ]] && builtin unset -f -- "$function_name"
+  done < <(builtin declare -Fx)
+
+  builtin export PYTHONNOUSERSITE=1 PYTHONSAFEPATH=1
+}
+
+# Apply staged records as one transaction. Existing variables always win. New
+# variables are removed in reverse order if any assignment/export fails.
+apply_fleet_environment_records() {
+  local -n __pjangler_fleet_keys_ref="$1"
+  local -n __pjangler_fleet_values_ref="$2"
+  local __pjangler_fleet_index __pjangler_fleet_key
+  local -a __pjangler_fleet_applied=()
+
+  if (( ${#__pjangler_fleet_keys_ref[@]} != ${#__pjangler_fleet_values_ref[@]} )); then
+    builtin printf 'fleet environment apply failed: mismatched staging arrays\n' >&2
+    return 1
+  fi
+
+  for ((__pjangler_fleet_index = 0; __pjangler_fleet_index < ${#__pjangler_fleet_keys_ref[@]}; __pjangler_fleet_index++)); do
+    __pjangler_fleet_key="${__pjangler_fleet_keys_ref[__pjangler_fleet_index]}"
+    if [[ ! "$__pjangler_fleet_key" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] \
+      || subprocess_injection_key_is_unsafe "$__pjangler_fleet_key"; then
+      builtin printf 'fleet environment apply failed: rejected variable name\n' >&2
+      for ((__pjangler_fleet_index = ${#__pjangler_fleet_applied[@]} - 1; __pjangler_fleet_index >= 0; __pjangler_fleet_index--)); do
+        builtin unset -v "${__pjangler_fleet_applied[__pjangler_fleet_index]}" 2>/dev/null || true
+      done
+      return 1
+    fi
+
+    if builtin declare -p "$__pjangler_fleet_key" >/dev/null 2>&1; then
+      continue
+    fi
+    if ! builtin printf -v "$__pjangler_fleet_key" '%s' \
+      "${__pjangler_fleet_values_ref[__pjangler_fleet_index]}"; then
+      builtin printf 'fleet environment apply failed: assignment rejected\n' >&2
+      for ((__pjangler_fleet_index = ${#__pjangler_fleet_applied[@]} - 1; __pjangler_fleet_index >= 0; __pjangler_fleet_index--)); do
+        builtin unset -v "${__pjangler_fleet_applied[__pjangler_fleet_index]}" 2>/dev/null || true
+      done
+      return 1
+    fi
+    __pjangler_fleet_applied+=("$__pjangler_fleet_key")
+    if ! builtin export "$__pjangler_fleet_key"; then
+      builtin printf 'fleet environment apply failed: export rejected\n' >&2
+      for ((__pjangler_fleet_index = ${#__pjangler_fleet_applied[@]} - 1; __pjangler_fleet_index >= 0; __pjangler_fleet_index--)); do
+        builtin unset -v "${__pjangler_fleet_applied[__pjangler_fleet_index]}" 2>/dev/null || true
+      done
+      return 1
+    fi
+  done
+}
+
+# Consume a parser child through a complete, double-NUL-terminated protocol.
+# Nothing reaches this shell until child status and the entire frame validate.
+import_fleet_environment_stream() {
+  local __pjangler_fleet_fd="$1" __pjangler_fleet_pid="$2"
+  local __pjangler_fleet_count __pjangler_fleet_index
+  local __pjangler_fleet_record __pjangler_fleet_key __pjangler_fleet_value
+  local -a __pjangler_fleet_records=() __pjangler_fleet_keys=() __pjangler_fleet_values=()
+  local -A __pjangler_fleet_seen=()
+
+  builtin mapfile -d '' -t -u "$__pjangler_fleet_fd" __pjangler_fleet_records || true
+  exec {__pjangler_fleet_fd}<&-
+  if ! builtin wait "$__pjangler_fleet_pid"; then
+    builtin printf 'fleet environment frame rejected: parser child failed\n' >&2
+    return 1
+  fi
+
+  __pjangler_fleet_count="${#__pjangler_fleet_records[@]}"
+  if (( __pjangler_fleet_count < 3 )) \
+    || [[ "${__pjangler_fleet_records[0]}" != "PJANGLER_FLEET_ENV_V1" ]] \
+    || [[ "${__pjangler_fleet_records[__pjangler_fleet_count - 2]}" != "PJANGLER_FLEET_ENV_END" ]] \
+    || [[ -n "${__pjangler_fleet_records[__pjangler_fleet_count - 1]}" ]]; then
+    builtin printf 'fleet environment frame rejected: incomplete framing\n' >&2
+    return 1
+  fi
+
+  for ((__pjangler_fleet_index = 1; __pjangler_fleet_index < __pjangler_fleet_count - 2; __pjangler_fleet_index++)); do
+    __pjangler_fleet_record="${__pjangler_fleet_records[__pjangler_fleet_index]}"
+    if [[ "$__pjangler_fleet_record" != *=* ]]; then
+      builtin printf 'fleet environment frame rejected: malformed record\n' >&2
+      return 1
+    fi
+    __pjangler_fleet_key="${__pjangler_fleet_record%%=*}"
+    __pjangler_fleet_value="${__pjangler_fleet_record#*=}"
+    if [[ ! "$__pjangler_fleet_key" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] \
+      || subprocess_injection_key_is_unsafe "$__pjangler_fleet_key"; then
+      builtin printf 'fleet environment frame rejected: unsafe variable\n' >&2
+      return 1
+    fi
+    if [[ -n "${__pjangler_fleet_seen[$__pjangler_fleet_key]+present}" ]]; then
+      builtin printf 'fleet environment frame rejected: duplicate variable\n' >&2
+      return 1
+    fi
+    __pjangler_fleet_seen["$__pjangler_fleet_key"]=1
+    __pjangler_fleet_keys+=("$__pjangler_fleet_key")
+    __pjangler_fleet_values+=("$__pjangler_fleet_value")
+  done
+
+  apply_fleet_environment_records __pjangler_fleet_keys __pjangler_fleet_values
+}
+
+# fleet.env is parsed by an isolated interpreter. The parser path is explicit
+# so every caller binds to its colocated, attested copy rather than PATH state.
+import_fleet_environment() {
+  local __pjangler_fleet_path="$1" __pjangler_fleet_parser="$2"
+  local __pjangler_fleet_python __pjangler_fleet_fd __pjangler_fleet_pid
+
+  if [[ "$__pjangler_fleet_parser" != /* ]] \
+    || [[ ! -f "$__pjangler_fleet_parser" || -L "$__pjangler_fleet_parser" ]]; then
+    builtin printf 'fleet environment frame rejected: trusted parser is unavailable\n' >&2
+    return 1
+  fi
+  __pjangler_fleet_python="$(builtin type -P python3)" || {
+    builtin printf 'fleet environment frame rejected: python3 is unavailable\n' >&2
+    return 1
+  }
+
+  exec {__pjangler_fleet_fd}< <(
+    "$__pjangler_fleet_python" -I "$__pjangler_fleet_parser" "$__pjangler_fleet_path"
+  )
+  __pjangler_fleet_pid=$!
+  import_fleet_environment_stream "$__pjangler_fleet_fd" "$__pjangler_fleet_pid"
+}
+
+# Public loader used by rendered provisioners, launchers, and maintenance
+# scripts. Missing configuration remains optional; every existing path,
+# including symlinks and non-regular files, must pass the parser's file checks.
+load_fleet_environment() {
+  local __pjangler_fleet_path="$1" __pjangler_fleet_parser="$2"
+  scrub_subprocess_interpreter_injection
+  if [[ ! -e "$__pjangler_fleet_path" && ! -L "$__pjangler_fleet_path" ]]; then
+    return 0
+  fi
+  if ! import_fleet_environment "$__pjangler_fleet_path" "$__pjangler_fleet_parser"; then
+    builtin printf 'fleet environment import failed: %s\n' "$__pjangler_fleet_path" >&2
+    return 1
+  fi
+  scrub_subprocess_interpreter_injection
+}