@getmarrow/mcp 3.9.101 → 3.9.103

package/dist/seatbelt/hook.d.ts

@@ -0,0 +1,72 @@
+import type { SeatbeltDecision, SeatbeltFs as MapperFs, SeatbeltGit } from './mapper';
+import type { SeatbeltFs } from '../seatbelt-fs';
+/**
+ * Compiled-in rollout table. Not env, not a file: changing a value is a one-line, reviewed code
+ * change. `keyless: 'off'` makes every keyless machine `claimed_no_key` (3.9.103 holds plus the
+ * floor). `account_floor: 'on'` enforces the S0-S5 floor before the server flow.
+ */
+export declare const SEATBELT_ROLLOUT: {
+    readonly keyless: 'on' | 'off';
+    readonly account_floor: 'watch' | 'on';
+};
+/** One wall-clock budget for the whole seatbelt path (mode resolution and mapper). Over it: stop. */
+export declare const HOOK_BUDGET_MS = 300;
+export declare const CLAIMED_NO_KEY_TEXT = "Marrow is linked to an account but has no working key; owner: run `npx -y @getmarrow/install@latest doctor`.";
+/**
+ * `claimed_no_key` with no account evidence and no rejected key: a fallback because the machine's
+ * setup could not be confirmed (an evidence dir others can write, an unreadable probe, a home
+ * mismatch, strict mode). Same holds as CLAIMED_NO_KEY_TEXT, but it never claims an account exists.
+ */
+export declare const SETUP_UNCONFIRMED_TEXT = "Marrow has no working key on this machine and its keyless mode is off here (strict mode, or a home folder it cannot trust); owner: run `npx -y @getmarrow/install@latest doctor`.";
+export declare function seatbeltStopText(category: string, rule: string, reason: string, mode: 'seatbelt' | 'claimed_no_key' | 'account', accountLinked?: boolean): string;
+/** §4.2: an S0-S5 floor stop is lifted only by an enforced server allow (a verified permit); an advisory allow never lifts it. */
+export declare function accountFloorStops(rollout: 'watch' | 'on', floor: Pick<SeatbeltDecision, 'decision'> | null, server: 'enforced_allow' | 'advisory_allow' | 'deny' | 'none'): boolean;
+/** The mapper's file view over the host. Missing: null. A failure the mapper must not guess about throws (it stops on fs_error). */
+export declare function hostMapperFs(fs3: SeatbeltFs): MapperFs;
+/**
+ * The git view the mapper gets (r4 contract). `currentBranch` is read at every call, never cached;
+ * anything unclear is null. `getAll` throws when the config cannot be read in full.
+ */
+export declare function hostSeatbeltGit(fs3: SeatbeltFs, home: string, env: NodeJS.ProcessEnv): SeatbeltGit;
+export interface SeatbeltHookEvent {
+    tool_name: unknown;
+    tool_input: unknown;
+    /** The event's cwd as the harness sent it; anything but an absolute path means the workspace is unknown. */
+    cwd: unknown;
+    /** The harness adapter cut the input: the action is not known in full. */
+    truncated: boolean;
+    /** The harness session id; used only for the receipt's keyed session_key. */
+    session?: unknown;
+}
+export interface KeylessOutcome {
+    mode: 'seatbelt' | 'claimed_no_key';
+    /** The agent text of a stop; null when the seatbelt passes the action. */
+    stopText: string | null;
+    /** True only with account evidence or a rejected key: then the text may say the machine is linked to an account. */
+    accountLinked: boolean;
+    /**
+     * The mapper recognised the tool (audit H1). False: the seatbelt passed nothing it can vouch for, so
+     * the hook gives master's answer for that host instead of the seatbelt pass.
+     */
+    recognized: boolean;
+}
+/** The keyless branch of the hook: mode (U4), then the mapper (U2) with the U3 resolvers. Never throws. */
+export declare function keylessSeatbelt(harness: string, event: SeatbeltHookEvent): KeylessOutcome;
+/**
+ * The account floor. `watch`: computed after the answer, for the record only; it never throws and
+ * never writes output. `on` (not active): run before the server flow; a returned text is a stop.
+ */
+export declare function accountFloor(harness: string, event: SeatbeltHookEvent, deadlineAt: number): string | null;
+/**
+ * I3: how the mapper reads an action for the outage hold (Marrow unreachable). `high`: an S0-S5/S-x hit
+ * or a program on the outage list (git push, publish, deploy, remote delete), a dynamic subcommand of a
+ * listed program included. `not_high`: the mapper read all of it and found neither. `unknown`: it could
+ * not (budget, error, unparsed or dynamic text, truncated input, a tool it does not recognise); the hook
+ * then keeps the client classifier's answer. `shell`: the event ran a shell command. Never throws;
+ * writes no receipt or output.
+ */
+export declare function outageRisk(event: SeatbeltHookEvent, deadlineAt: number): {
+    shell: boolean;
+    risk: 'high' | 'not_high' | 'unknown';
+};
+//# sourceMappingURL=hook.d.ts.map

package/dist/seatbelt/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/seatbelt/hook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAe,UAAU,IAAI,QAAQ,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;CAGrG,CAAC;AAEH,qGAAqG;AACrG,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,eAAO,MAAM,mBAAmB,iHAAiH,CAAC;AAClJ;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,sLAAsL,CAAC;AAmB1N,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,EAAE,aAAa,UAAO,GAAG,MAAM,CAO9J;AAED,kIAAkI;AAClI,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,EACvB,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG,IAAI,EAChD,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAC5D,OAAO,CAGT;AAuBD,oIAAoI;AACpI,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CA+BtD;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,CA6ElG;AAcD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,4GAA4G;IAC5G,GAAG,EAAE,OAAO,CAAC;IACb,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA6BD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oHAAoH;IACpH,aAAa,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,cAAc,CA8BzF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBzG;AAKD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;CAAE,CAmBlI"}

package/dist/seatbelt/hook.js

@@ -0,0 +1,362 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SETUP_UNCONFIRMED_TEXT = exports.CLAIMED_NO_KEY_TEXT = exports.HOOK_BUDGET_MS = exports.SEATBELT_ROLLOUT = void 0;
+exports.seatbeltStopText = seatbeltStopText;
+exports.accountFloorStops = accountFloorStops;
+exports.hostMapperFs = hostMapperFs;
+exports.hostSeatbeltGit = hostSeatbeltGit;
+exports.keylessSeatbelt = keylessSeatbelt;
+exports.accountFloor = accountFloor;
+exports.outageRisk = outageRisk;
+/**
+ * Compiled-in rollout table. Not env, not a file: changing a value is a one-line, reviewed code
+ * change. `keyless: 'off'` makes every keyless machine `claimed_no_key` (3.9.103 holds plus the
+ * floor). `account_floor: 'on'` enforces the S0-S5 floor before the server flow.
+ */
+exports.SEATBELT_ROLLOUT = Object.freeze({
+    keyless: 'on',
+    account_floor: 'watch',
+});
+/** One wall-clock budget for the whole seatbelt path (mode resolution and mapper). Over it: stop. */
+exports.HOOK_BUDGET_MS = 300;
+exports.CLAIMED_NO_KEY_TEXT = 'Marrow is linked to an account but has no working key; owner: run `npx -y @getmarrow/install@latest doctor`.';
+/**
+ * `claimed_no_key` with no account evidence and no rejected key: a fallback because the machine's
+ * setup could not be confirmed (an evidence dir others can write, an unreadable probe, a home
+ * mismatch, strict mode). Same holds as CLAIMED_NO_KEY_TEXT, but it never claims an account exists.
+ */
+exports.SETUP_UNCONFIRMED_TEXT = 'Marrow has no working key on this machine and its keyless mode is off here (strict mode, or a home folder it cannot trust); owner: run `npx -y @getmarrow/install@latest doctor`.';
+const LABELS = {
+    S0: 'a change to Marrow seatbelt settings or an owner-only command',
+    S1: 'force-push or delete of a protected branch',
+    S2: 'production deploy',
+    S3: 'package publish',
+    S4: 'credential or secret access',
+    S5: 'recursive delete outside the workspace',
+    Sx: 'obfuscated execution',
+    hook: 'a safety check that could not finish',
+};
+const CODE = /^[A-Za-z0-9_.:-]{1,64}$/;
+function codes(list) {
+    return Array.isArray(list) ? list.filter((item) => typeof item === 'string' && CODE.test(item)).slice(0, 16) : [];
+}
+function seatbeltStopText(category, rule, reason, mode, accountLinked = true) {
+    const label = LABELS[category] || LABELS.hook;
+    const head = `MARROW SEATBELT stopped this action: ${label} (${CODE.test(rule) ? rule : 'unknown'}, ${CODE.test(reason) ? reason : 'unknown'}). This needs the machine owner. Do not retry it another way or edit Marrow settings.`;
+    if (mode === 'account')
+        return `${head} Tell the owner: run it yourself in your own terminal.`;
+    return mode === 'seatbelt'
+        ? `${head} Tell the owner: run it yourself in your own terminal, or link a Marrow account with "npx -y @getmarrow/install@latest activate" (it needs MARROW_API_KEY set first) so these become approval prompts.`
+        : `${head} ${accountLinked ? exports.CLAIMED_NO_KEY_TEXT : exports.SETUP_UNCONFIRMED_TEXT}`;
+}
+/** §4.2: an S0-S5 floor stop is lifted only by an enforced server allow (a verified permit); an advisory allow never lifts it. */
+function accountFloorStops(rollout, floor, server) {
+    if (rollout !== 'on' || !floor || floor.decision !== 'stop')
+        return false;
+    return server !== 'enforced_allow';
+}
+/** The event as the receipt writer may use it: to derive enums and keyed hashes only, never stored. */
+function recordContext(event, home) {
+    return { tool_name: event.tool_name, tool_input: event.tool_input, cwd: event.cwd, session: event.session, truncated: event.truncated, home };
+}
+function record(entry, event, home) {
+    try {
+        require('./record').recordSeatbeltDecision(entry, recordContext(event, home));
+    }
+    catch { /* the record hook never changes a decision */ }
+}
+function gone(error) {
+    const code = error?.code;
+    return code === 'ENOENT' || code === 'ENOTDIR';
+}
+function unreadable(error) {
+    const code = error?.code;
+    return code === 'EACCES' || code === 'EPERM';
+}
+/** The mapper's file view over the host. Missing: null. A failure the mapper must not guess about throws (it stops on fs_error). */
+function hostMapperFs(fs3) {
+    const fs = require('node:fs');
+    const realpath = (p) => {
+        try {
+            return fs.realpathSync(p);
+        }
+        catch (error) {
+            if (gone(error))
+                return null;
+            throw error;
+        }
+    };
+    return {
+        realpath,
+        readFile(p, maxBytes) {
+            const real = realpath(p);
+            if (real === null)
+                return null;
+            try {
+                return fs3.readFile(real, maxBytes);
+            }
+            catch (error) {
+                if (gone(error) || unreadable(error))
+                    return null;
+                throw error;
+            }
+        },
+        readdir(p) {
+            try {
+                return fs.readdirSync(p);
+            }
+            catch (error) {
+                if (gone(error) || unreadable(error))
+                    return null;
+                throw error;
+            }
+        },
+    };
+}
+const BRANCH_NAME = /^[A-Za-z0-9._/+@-]+$/;
+/**
+ * The git view the mapper gets (r4 contract). `currentBranch` is read at every call, never cached;
+ * anything unclear is null. `getAll` throws when the config cannot be read in full.
+ */
+function hostSeatbeltGit(fs3, home, env) {
+    const G = require('../seatbelt-git');
+    const P = require('../seatbelt-path');
+    const gitEnv = () => Object.keys(env).some((name) => name.startsWith('GIT_'));
+    const configEnv = { ...env };
+    // git reads $HOME; when it is the trusted home under another spelling (a symlink) it is the same files.
+    if (typeof env.HOME === 'string' && env.HOME !== home) {
+        const real = P.realPath(fs3, env.HOME, { followFinal: true });
+        if (real.status === 'resolved' && real.exists && real.path === home)
+            configEnv.HOME = home;
+    }
+    // The work tree that holds the `.git` entry nearest to cwd; null when none; 'unknown' when unclear.
+    const worktree = (cwd) => {
+        const real = P.realPath(fs3, cwd, { followFinal: true });
+        if (real.status !== 'resolved' || !real.exists)
+            return 'unknown';
+        let dir = real.path;
+        for (;;) {
+            const entry = fs3.lstat(dir === '/' ? '/.git' : `${dir}/.git`);
+            if (entry && (entry.type === 'dir' || entry.type === 'file'))
+                return dir;
+            if (entry)
+                return 'unknown';
+            if (dir === '/')
+                return null;
+            dir = dir.slice(0, dir.lastIndexOf('/')) || '/';
+        }
+    };
+    const dirsOf = (cwd) => {
+        const dirs = G.discoverGitDirs(fs3, cwd, configEnv);
+        if (dirs === 'unknown')
+            throw new Error('git_dirs_unknown');
+        return dirs;
+    };
+    const refExists = (commonDir, branch) => {
+        const loose = fs3.lstat(`${commonDir}/refs/heads/${branch}`);
+        if (loose && loose.type === 'file')
+            return true;
+        if (loose)
+            return false;
+        const packedEntry = fs3.lstat(`${commonDir}/packed-refs`);
+        if (!packedEntry)
+            return false;
+        if (packedEntry.type !== 'file')
+            return false;
+        const packed = fs3.readFile(`${commonDir}/packed-refs`, G.MAX_GIT_CONFIG_BYTES);
+        return packed !== null && packed.split('\n').some((line) => line.endsWith(` refs/heads/${branch}`));
+    };
+    return {
+        toplevel(cwd) {
+            if (gitEnv())
+                throw new Error('git_env');
+            const top = worktree(cwd);
+            if (top === 'unknown')
+                throw new Error('git_toplevel_unknown');
+            return top;
+        },
+        getAll(cwd, key) {
+            const dirs = dirsOf(cwd);
+            const config = G.loadGitConfig(fs3, { home, dirs, env: configEnv });
+            if (config.incomplete)
+                throw new Error('git_config_unreadable');
+            return G.gitConfigValues(config, key);
+        },
+        currentBranch(cwd) {
+            if (gitEnv())
+                return null;
+            try {
+                const top = worktree(cwd);
+                if (top === null || top === 'unknown')
+                    return null;
+                const dirs = G.discoverGitDirs(fs3, cwd, configEnv);
+                if (dirs === null || dirs === 'unknown')
+                    return null;
+                for (const marker of ['rebase-merge', 'rebase-apply', 'BISECT_LOG'])
+                    if (fs3.lstat(`${dirs.gitDir}/${marker}`))
+                        return null;
+                const head = G.readGitHead(fs3, dirs);
+                if (head.kind !== 'branch')
+                    return null;
+                const name = head.branch;
+                if (!BRANCH_NAME.test(name) || name.startsWith('-') || name.startsWith('/') || name.endsWith('/')
+                    || name.includes('..') || name.includes('//') || name.endsWith('.lock'))
+                    return null;
+                return refExists(dirs.commonDir, name) ? name : null;
+            }
+            catch {
+                return null;
+            }
+        },
+        remoteHead(cwd, remote) {
+            const dirs = dirsOf(cwd);
+            if (!dirs)
+                return null;
+            const head = G.readRemoteDefaultBranch(fs3, dirs, remote);
+            if (head === 'unknown')
+                throw new Error('remote_head_unknown');
+            return head;
+        },
+    };
+}
+const TEMP_ROOTS = /^\/(?:tmp|var\/tmp|private\/tmp|var\/folders|private\/var\/folders)(?:\/|$)/;
+/** $TMPDIR only when it resolves under a system temp root: the environment can only narrow the workspace. */
+function trustedTmpdir() {
+    try {
+        const real = require('node:fs').realpathSync(require('node:os').tmpdir());
+        return TEMP_ROOTS.test(real) && real !== '/' ? real : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function mapperEnv(home, cwd, budgetMs) {
+    const fs3 = require('../seatbelt-fs').nodeSeatbeltFs();
+    return {
+        cwd: typeof cwd === 'string' && cwd.startsWith('/') ? cwd : null,
+        home,
+        tmpdir: trustedTmpdir(),
+        platform: process.platform,
+        fs: hostMapperFs(fs3),
+        git: hostSeatbeltGit(fs3, home, process.env),
+        budgetMs: Math.max(0, budgetMs),
+    };
+}
+function evaluate(event, home, budgetMs) {
+    const { evaluateSeatbelt } = require('./mapper');
+    return evaluateSeatbelt({ tool_name: String(event.tool_name || ''), tool_input: event.tool_input }, mapperEnv(home, event.cwd, budgetMs));
+}
+function passwdHome() {
+    try {
+        const home = require('node:os').userInfo().homedir;
+        return typeof home === 'string' && home.startsWith('/') ? home : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The keyless branch of the hook: mode (U4), then the mapper (U2) with the U3 resolvers. Never throws. */
+function keylessSeatbelt(harness, event) {
+    const started = Date.now();
+    let mode = 'claimed_no_key';
+    let accountLinked = false;
+    let trustedHome;
+    const stop = (reason) => {
+        record({ v: 1, mode, enforcement: 'enforce', harness, decision: 'stop', category: 'hook', rule: 'U5.fail_closed', reasons: [reason], flags: [], parse: 'unparsed', latency_ms: Date.now() - started }, event, trustedHome);
+        return { mode, accountLinked, recognized: true, stopText: seatbeltStopText('hook', 'U5.fail_closed', reason, mode, accountLinked) };
+    };
+    try {
+        const { resolveSeatbeltModeOnHost } = require('../seatbelt-mode');
+        const resolution = resolveSeatbeltModeOnHost();
+        mode = resolution.mode === 'seatbelt' && exports.SEATBELT_ROLLOUT.keyless === 'on' ? 'seatbelt' : 'claimed_no_key';
+        accountLinked = resolution.reasons.includes('account_evidence') || resolution.reasons.includes('key_rejected');
+        if (event.truncated)
+            return stop('input_truncated');
+        const home = resolution.homes[0] || passwdHome() || '/nonexistent-home';
+        trustedHome = home;
+        const decision = evaluate(event, home, exports.HOOK_BUDGET_MS - (Date.now() - started));
+        if (Date.now() - started > exports.HOOK_BUDGET_MS)
+            return stop('hook_budget');
+        const reasons = codes(decision.reasons);
+        record({
+            v: 1, mode, enforcement: 'enforce', harness, decision: decision.decision === 'pass' ? 'pass' : 'stop',
+            category: CODE.test(decision.category) ? decision.category : 'unknown', rule: CODE.test(decision.rule) ? decision.rule : 'unknown',
+            reasons, flags: codes(decision.flags), parse: CODE.test(decision.parse) ? decision.parse : 'unknown', latency_ms: Date.now() - started,
+        }, event, home);
+        if (decision.decision === 'pass')
+            return { mode, accountLinked, recognized: decision.recognized === true, stopText: null };
+        return { mode, accountLinked, recognized: true, stopText: seatbeltStopText(decision.category, decision.rule, reasons[0] || 'unspecified', mode, accountLinked) };
+    }
+    catch {
+        return stop('hook_error');
+    }
+}
+/**
+ * The account floor. `watch`: computed after the answer, for the record only; it never throws and
+ * never writes output. `on` (not active): run before the server flow; a returned text is a stop.
+ */
+function accountFloor(harness, event, deadlineAt) {
+    const started = Date.now();
+    try {
+        const budget = Math.min(exports.HOOK_BUDGET_MS, (Number.isFinite(deadlineAt) ? deadlineAt : Number.POSITIVE_INFINITY) - started - 200);
+        const enforcement = exports.SEATBELT_ROLLOUT.account_floor === 'on' ? 'enforce' : 'watch';
+        if (!(budget >= 20)) {
+            record({ v: 1, mode: 'account', enforcement, harness, decision: 'skipped', category: 'none', rule: 'none', reasons: ['floor_no_budget'], flags: [], parse: 'ok', latency_ms: 0 }, event);
+            return enforcement === 'enforce' ? seatbeltStopText('hook', 'U5.fail_closed', 'hook_budget', 'account') : null;
+        }
+        const decision = event.truncated ? null : evaluate(event, passwdHome() || '/nonexistent-home', budget);
+        const stopped = decision === null || decision.decision === 'stop' || Date.now() - started > budget;
+        record({
+            v: 1, mode: 'account', enforcement, harness, decision: stopped ? 'stop' : 'pass',
+            category: decision && CODE.test(decision.category) ? decision.category : 'hook', rule: decision && CODE.test(decision.rule) ? decision.rule : 'U5.fail_closed',
+            reasons: decision ? codes(decision.reasons) : ['input_truncated'], flags: decision ? codes(decision.flags) : [],
+            parse: decision && CODE.test(decision.parse) ? decision.parse : 'unparsed', latency_ms: Date.now() - started,
+        }, event);
+        if (!accountFloorStops(exports.SEATBELT_ROLLOUT.account_floor, { decision: stopped ? 'stop' : 'pass' }, 'none'))
+            return null;
+        return decision && decision.decision === 'stop'
+            ? seatbeltStopText(decision.category, decision.rule, codes(decision.reasons)[0] || 'unspecified', 'account')
+            : seatbeltStopText('hook', 'U5.fail_closed', decision ? 'hook_budget' : 'input_truncated', 'account');
+    }
+    catch {
+        return exports.SEATBELT_ROLLOUT.account_floor === 'on' ? seatbeltStopText('hook', 'U5.fail_closed', 'hook_error', 'account') : null;
+    }
+}
+// Hits that only mean the mapper could not finish (load, an internal error): not a reading of the action.
+const UNFINISHED_HIT = /^(?:budget_[a-z_]+|mapper_error|fs_error)$/;
+/**
+ * I3: how the mapper reads an action for the outage hold (Marrow unreachable). `high`: an S0-S5/S-x hit
+ * or a program on the outage list (git push, publish, deploy, remote delete), a dynamic subcommand of a
+ * listed program included. `not_high`: the mapper read all of it and found neither. `unknown`: it could
+ * not (budget, error, unparsed or dynamic text, truncated input, a tool it does not recognise); the hook
+ * then keeps the client classifier's answer. `shell`: the event ran a shell command. Never throws;
+ * writes no receipt or output.
+ */
+function outageRisk(event, deadlineAt) {
+    const started = Date.now();
+    try {
+        const budget = Math.min(exports.HOOK_BUDGET_MS, (Number.isFinite(deadlineAt) ? deadlineAt : Number.POSITIVE_INFINITY) - started - 200);
+        if (!(budget >= 20) || event.truncated)
+            return { shell: false, risk: 'unknown' };
+        const decision = evaluate(event, passwdHome() || '/nonexistent-home', budget);
+        const shell = decision.shell === true;
+        if (Date.now() - started > budget)
+            return { shell, risk: 'unknown' };
+        // T-3: a command that only prints its help or version is never held in an outage.
+        if (decision.outageHelpOnly === true && decision.parse === 'ok' && decision.recognized === true)
+            return { shell, risk: 'not_high' };
+        // A real hit or a listed program is high even where the rest of the text could not be read; a listed
+        // program whose subcommand word is dynamic (`unknown`) may be the listed one, so it is high too.
+        if (decision.hits.some((h) => !UNFINISHED_HIT.test(h.reason)))
+            return { shell, risk: 'high' };
+        if (decision.risk.length)
+            return { shell, risk: 'high' };
+        if (decision.decision === 'stop' || decision.parse !== 'ok' || decision.recognized !== true)
+            return { shell, risk: 'unknown' };
+        return { shell, risk: 'not_high' };
+    }
+    catch {
+        return { shell: false, risk: 'unknown' };
+    }
+}
+//# sourceMappingURL=hook.js.map

package/dist/seatbelt/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/seatbelt/hook.ts"],"names":[],"mappings":";;;AA+CA,4CAOC;AAGD,8CAOC;AAwBD,oCA+BC;AAQD,0CA6EC;AAkED,0CA8BC;AAMD,oCAwBC;AAaD,gCAmBC;AAjWD;;;;GAIG;AACU,QAAA,gBAAgB,GAA+E,MAAM,CAAC,MAAM,CAAC;IACxH,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,OAAO;CACvB,CAAC,CAAC;AAEH,qGAAqG;AACxF,QAAA,cAAc,GAAG,GAAG,CAAC;AAErB,QAAA,mBAAmB,GAAG,8GAA8G,CAAC;AAClJ;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,mLAAmL,CAAC;AAE1N,MAAM,MAAM,GAA2B;IACrC,EAAE,EAAE,+DAA+D;IACnE,EAAE,EAAE,4CAA4C;IAChD,EAAE,EAAE,mBAAmB;IACvB,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,6BAA6B;IACjC,EAAE,EAAE,wCAAwC;IAC5C,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,sCAAsC;CAC7C,CAAC;AAEF,MAAM,IAAI,GAAG,yBAAyB,CAAC;AAEvC,SAAS,KAAK,CAAC,IAAa;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpI,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAc,EAAE,IAA+C,EAAE,aAAa,GAAG,IAAI;IACpJ,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,wCAAwC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,uFAAuF,CAAC;IACpO,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,IAAI,wDAAwD,CAAC;IAC/F,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,GAAG,IAAI,wMAAwM;QACjN,CAAC,CAAC,GAAG,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,2BAAmB,CAAC,CAAC,CAAC,8BAAsB,EAAE,CAAC;AAChF,CAAC;AAED,kIAAkI;AAClI,SAAgB,iBAAiB,CAC/B,OAAuB,EACvB,KAAgD,EAChD,MAA6D;IAE7D,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,MAAM,KAAK,gBAAgB,CAAC;AACrC,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,KAAwB,EAAE,IAAa;IAC5D,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;AAChJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAqB,EAAE,KAAwB,EAAE,IAAa;IAC5E,IAAI,CAAC;QACF,OAAO,CAAC,UAAU,CAA+B,CAAC,sBAAsB,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAC;IAC3D,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAC;IAC3D,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC;AAC/C,CAAC;AAED,oIAAoI;AACpI,SAAgB,YAAY,CAAC,GAAe;IAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAA6B,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAiB,EAAE;QAC5C,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,QAAQ;QACR,QAAQ,CAAC,CAAC,EAAE,QAAQ;YAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;YACP,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C;;;GAGG;AACH,SAAgB,eAAe,CAAC,GAAe,EAAE,IAAY,EAAE,GAAsB;IACnF,MAAM,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAqC,CAAC;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAsC,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAuC,EAAE,GAAG,GAAG,EAAE,CAAC;IACjE,wGAAwG;IACxG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7F,CAAC;IACD,oGAAoG;IACpG,MAAM,QAAQ,GAAG,CAAC,GAAW,EAA6B,EAAE;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;YAC/D,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;gBAAE,OAAO,GAAG,CAAC;YACzE,IAAI,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC5B,IAAI,GAAG,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC7B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAW,EAAE;QAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,eAAe,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,cAAc,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,WAAW,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,SAAS,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAChF,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC;IACF,OAAO;QACL,QAAQ,CAAC,GAAG;YACV,IAAI,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC/D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,GAAG;YACb,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,aAAa,CAAC,GAAG;YACf,IAAI,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACnD,MAAM,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBACpD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACrD,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC;oBAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC5H,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;uBAC5F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACvF,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,MAAM;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,6EAA6E,CAAC;AAEjG,6GAA6G;AAC7G,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,OAAO,CAAC,SAAS,CAA8B,CAAC,YAAY,CAAE,OAAO,CAAC,SAAS,CAA8B,CAAC,MAAM,EAAE,CAAC,CAAC;QACtI,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAaD,SAAS,SAAS,CAAC,IAAY,EAAE,GAAY,EAAE,QAAgB;IAC7D,MAAM,GAAG,GAAI,OAAO,CAAC,gBAAgB,CAAqC,CAAC,cAAc,EAAE,CAAC;IAC5F,OAAO;QACL,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAChE,IAAI;QACJ,MAAM,EAAE,aAAa,EAAE;QACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC;QACrB,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;QAC5C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAAY,EAAE,QAAgB;IACxE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,UAAU,CAA8B,CAAC;IAC9E,OAAO,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5I,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,OAAO,CAAC,SAAS,CAA8B,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACjF,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAeD,2GAA2G;AAC3G,SAAgB,eAAe,CAAC,OAAe,EAAE,KAAwB;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,IAAI,GAA2B,gBAAgB,CAAC;IACpD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,WAA+B,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAkB,EAAE;QAC9C,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3N,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;IACtI,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAsC,CAAC;QACvG,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,IAAI,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,wBAAgB,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3G,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC/G,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,IAAI,mBAAmB,CAAC;QACxE,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,sBAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,sBAAc;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC;YACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACrG,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAClI,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SACvI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAChB,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3H,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;IACnK,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,OAAe,EAAE,KAAwB,EAAE,UAAkB;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAc,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;QAC/H,MAAM,WAAW,GAAG,wBAAgB,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAClF,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzL,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjH,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM,CAAC;QACnG,MAAM,CAAC;YACL,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChF,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;YAC9J,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/G,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC7G,EAAE,KAAK,CAAC,CAAC;QACV,IAAI,CAAC,iBAAiB,CAAC,wBAAgB,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACrH,OAAO,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAC7C,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,SAAS,CAAC;YAC5G,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wBAAgB,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9H,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,cAAc,GAAG,4CAA4C,CAAC;AAEpE;;;;;;;GAOG;AACH,SAAgB,UAAU,CAAC,KAAwB,EAAE,UAAkB;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAc,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;QAC/H,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACrE,kFAAkF;QAClF,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACpI,qGAAqG;QACrG,iGAAiG;QACjG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9F,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/H,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/seatbelt/longopts.d.ts

@@ -0,0 +1,68 @@
+/** n: no value. v: a value, `--name=value` or the next word. o: an optional value, `--name=value` only. a: any of these (long lists whose modes do not matter). */
+export type LongMode = 'n' | 'v' | 'o' | 'a';
+export type LongList = ReadonlyMap<string, LongMode>;
+/** A word of a command line; a null text is a word the mapper cannot read. */
+export interface OptWord {
+    readonly text: string | null;
+}
+/**
+ * Builds a list from text. Tokens are separated by spaces: `name` (no value), `name=` (a value), `name[=]` (an
+ * optional value), `name~` (any form). A leading `[no-]` adds the `no-name` form (no value).
+ */
+export declare function longList(text: string): LongList;
+/**
+ * The indexes of the long options in `words` that are not on `list` (exact name; `=value` only where the option
+ * takes one); empty when every long option is on it. A bare `--` ends the options when `honourEnd` is set. A value
+ * word that belongs to a listed option (`--name value`) is skipped. `dashes` is 2 for `--name`; find writes its
+ * options as `-name` (1), where `=` is never part of an option. A word with no readable text is not a long option here
+ * (each parser already treats it on its own).
+ */
+export declare function unknownLongAll(words: readonly OptWord[], list: LongList, dashes?: 1 | 2, honourEnd?: boolean): number[];
+/** The index of the first long option that is not on `list` (see unknownLongAll), or -1. */
+export declare function unknownLong(words: readonly OptWord[], list: LongList, dashes?: 1 | 2, honourEnd?: boolean): number;
+/** True for a word that is exactly `--name` of a listed option that takes its value as the next word. */
+export declare function takesNextWord(text: string, list: LongList): boolean;
+/** The text after `=` of a `--name=value` word, or null when there is none. */
+export declare function longValue(text: string): string | null;
+export declare const NO_LONG: LongList;
+export declare const CP_LONG: LongList;
+export declare const MV_LONG: LongList;
+export declare const LN_LONG: LongList;
+export declare const INSTALL_LONG: LongList;
+export declare const TAR_LONG: LongList;
+export declare const SED_LONG: LongList;
+export declare const CURL_LONG: LongList;
+export declare const WGET_LONG: LongList;
+export declare const RSYNC_LONG: LongList;
+export declare const SCP_LONG: LongList;
+export declare const CAT_LONG: LongList;
+export declare const HEAD_LONG: LongList;
+export declare const TAIL_LONG: LongList;
+export declare const WC_LONG: LongList;
+export declare const STAT_LONG: LongList;
+export declare const LS_LONG: LongList;
+export declare const DU_LONG: LongList;
+export declare const DIFF_LONG: LongList;
+export declare const CMP_LONG: LongList;
+export declare const FILE_LONG: LongList;
+export declare const GREP_LONG: LongList;
+export declare const CHECKSUM_LONG: LongList;
+export declare const JQ_LONG: LongList;
+export declare const YQ_LONG: LongList;
+export declare const BAT_LONG: LongList;
+export declare const LESS_LONG: LongList;
+export declare const MORE_LONG: LongList;
+export declare const RG_LONG: LongList;
+export declare const TREE_LONG: LongList;
+export declare const PRETTIER_LONG: LongList;
+export declare const ZIP_LONG: LongList;
+export declare const ENV_LONG: LongList;
+export declare const SUDO_LONG: LongList;
+export declare const DOAS_LONG: LongList;
+export declare const GIT_READ_LONG: LongList;
+export declare const GIT_GLOBAL_LONG: LongList;
+export declare const GIT_RESET_LONG: LongList;
+export declare const GIT_RM_LONG: LongList;
+export declare const GIT_RESTORE_LONG: LongList;
+export declare const FIND_LONG: LongList;
+//# sourceMappingURL=longopts.d.ts.map

package/dist/seatbelt/longopts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"longopts.d.ts","sourceRoot":"","sources":["../../src/seatbelt/longopts.ts"],"names":[],"mappings":"AAkBA,mKAAmK;AACnK,MAAM,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAC7C,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAErD,8EAA8E;AAC9E,MAAM,WAAW,OAAO;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAEzD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAe/C;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAE,CAAC,GAAG,CAAK,EAAE,SAAS,UAAO,GAAG,MAAM,EAAE,CAevH;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAE,CAAC,GAAG,CAAK,EAAE,SAAS,UAAO,GAAG,MAAM,CAGlH;AAED,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAEnE;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrD;AAED,eAAO,MAAM,OAAO,EAAE,QAAuB,CAAC;AAE9C,eAAO,MAAM,OAAO,EAAE,QAKrB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAGrB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAGrB,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAG1B,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAsBtB,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAGtB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAiCvB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAsBvB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,QAiBxB,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAEvB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAGvB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAErB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAEvB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAMrB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAIrB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QASvB,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAIvB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAOvB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAG3B,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAIrB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAKrB,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAKtB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAKvB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAEvB,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,QAmBrB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAGvB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAS3B,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAE,QAGtB,CAAC;AAMF,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,QAGvB,CAAC;AACF,eAAO,MAAM,SAAS,EAAE,QAAuB,CAAC;AAEhD,eAAO,MAAM,aAAa,EAAE,QAoE3B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAI7B,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAG5B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,QAGzB,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAG9B,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,QAQvB,CAAC"}