@getmarrow/mcp 3.9.102 → 3.9.103

package/dist/seatbelt-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seatbelt-mode.js","sourceRoot":"","sources":["../src/seatbelt-mode.ts"],"names":[],"mappings":";;;AAyGA,8BAUC;AAiJD,wCAoBC;AAuDD,kDAsFC;AA6BD,8DAsDC;AAxfD,qCAAmC;AACnC,+BAAyC;AACzC,+CAAgE;AAChE,mDAA2C;AAoB9B,QAAA,gBAAgB,GAAG;IAC9B,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,WAAW;IACX,mBAAmB;IACnB,qBAAqB;IACrB,YAAY;IACZ,uHAAuH;IACvH,eAAe;CACP,CAAC;AA2CX,qGAAqG;AACxF,QAAA,iBAAiB,GAAG;IAC/B,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,uBAAuB;IACvB,8BAA8B;IAC9B,yBAAyB;IACzB,6BAA6B;IAC7B,oBAAoB;CACrB,CAAC;AAEF;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;AAC1E,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,wGAAwG;AACxG,MAAM,aAAa,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,eAAe,EAAE,sBAAsB,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,wBAAgB,EAAE,QAAQ,CAAC,CAAC;AAE/Q,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAE/D,0GAA0G;AAC1G,SAAgB,SAAS,CAAC,IAAc;IACtC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAc;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,MAAM,CAAC,EAAc,EAAE,IAAY;IAC1C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAgB,EAAE,CAAgB;IAC/C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,EAAc,EAAE,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAc,EAAE,IAAY,EAAE,YAAY,GAAG,KAAK;IACzE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC5B,IAAI,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC1D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACjE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpC,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAc,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QAClC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,KAAK,GAAkB,QAAQ,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAClG,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,EAAc,EAAE,GAAW,EAAE,GAAkB,EAAE,UAA+B;IACvG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QAClC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzF,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,yFAAyF;AACzF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAElE,uFAAuF;AACvF,SAAS,cAAc,CAAC,EAAc,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClG,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4HAA4H;AAC5H,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnH,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,4IAA4I;AAC5I,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC3C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,EAAc,EAAE,GAAkB;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrD,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,8FAA8F;AAC9F,SAAS,cAAc,CAAC,EAAc,EAAE,GAAW,EAAE,GAAkB;IACrE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACxD,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EAAc,EAAE,IAAY,EAAE,GAAkB,EAAE,UAA+B;IAClG,MAAM,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC;IACjC,IAAI,KAAK,GAAkB,QAAQ,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,yBAAiB;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACnG,KAAK,MAAM,GAAG,IAAI,wBAAgB;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7F,IAAI,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,aAAa;QAAE,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5G,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,YAAY,CAAC;QACjD,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,sBAAsB,CAAC;QAC3D,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,UAAU,CAAC;QAC/C,8EAA8E;QAC9E,yEAAyE;QACzE,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,4BAA4B,CAAC;QACvE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC;QAC5C,iBAAiB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,qBAAqB,CAAC;QAC7D,mBAAmB,EAAE,KAAK;QAC1B,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC;QAC3C,aAAa,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACrD,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,SAAS,WAAW,CAAC,EAAc,EAAE,KAAgC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvI,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,sEAAsE;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAwB;IAC1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,wBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAA2C,CAAC;IAC5H,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAEtE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,0FAA0F;IAC1F,IAAI,eAA0C,CAAC;IAC/C,MAAM,UAAU,GAAG,GAAkB,EAAE;QACrC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YAChC,IAAI,KAAK,GAAY,IAAI,CAAC;YAC1B,IAAI,CAAC;gBACH,KAAK,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,eAAe,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACrG,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC;IACF,uEAAuE;IACvE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1D,KAAK,MAAM,EAAE,IAAI,wBAAgB;YAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QAChD,QAAQ,CAAC,mBAAmB,GAAG,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzI,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QAC5C,QAAQ,CAAC,mBAAmB,GAAG,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpI,CAAC;IAED,MAAM,OAAO,GAAG,wBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,wBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAEzD,IAAI,IAAkB,CAAC;IACvB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,IAAI,GAAG,SAAS,CAAC;SACzC,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,GAAG,gBAAgB,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,GAAG,gBAAgB,CAAC;SACvF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,IAAI,GAAG,gBAAgB,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;;QAAM,IAAI,GAAG,UAAU,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED,6IAA6I;AAC7I,MAAM,aAAa,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAC/F,2EAA2E;AAC3E,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAC/C,wGAAwG;AACxG,MAAM,cAAc,GAA6B;IAC/C,UAAU,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;IACzC,iBAAiB,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAC3D,+BAA+B,EAAE,CAAC,EAAE,CAAC;CACtC,CAAC;AACF,MAAM,aAAa,GAA2B,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACxD,QAAA,cAAc,GAAG,CAAC,GAAG,aAAa,EAAE,wBAAwB,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;AAE7J,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,kBAAQ,GAAE,CAAC,OAAO,CAAC;QAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,UAStC,EAAE;IACJ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAA,4BAAc,GAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACjG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvH,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,GAAG,GAAa,MAAM,CAAC;IAC3B,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,GAAG,SAAS,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM;QAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAA,sBAAgB,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM;YAAE,GAAG,GAAG,SAAS,CAAC;IAC/F,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW;QAAE,GAAG,GAAG,UAAU,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,4EAA4E;QAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,+GAA+G;IAC/G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU;QACtE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;AAChI,CAAC"}

package/dist/seatbelt-path.d.ts

@@ -0,0 +1,123 @@
+import type { SeatbeltFs } from './seatbelt-fs';
+export declare const MAX_SYMLINK_HOPS = 40;
+export type RealPathResult = {
+    status: 'resolved';
+    path: string;
+    exists: boolean;
+} | {
+    status: 'unknown';
+    reason: 'not_absolute' | 'loop' | 'unreadable' | 'proc_handle';
+};
+/**
+ * realpath of the longest existing prefix, with the remainder appended
+ * lexically. followFinal=false leaves a final symlink unresolved (rm -r on a
+ * link removes the link, not its target).
+ */
+export declare function realPath(fs: SeatbeltFs, input: string, options?: {
+    followFinal?: boolean;
+}): RealPathResult;
+/** Comparison key: case-folded (and NFC-normalised) on case-insensitive volumes. */
+export declare function pathKey(fs: SeatbeltFs, value: string): string;
+/** True when child is root itself or below it. */
+export declare function isWithinOrEqual(fs: SeatbeltFs, root: string, child: string): boolean;
+export interface PathContext {
+    /** Trusted home: passwd or the hook's --home value, never $HOME from the agent's environment. */
+    home: string | null;
+    /** The event's cwd (absolute), or null when the harness gave none. */
+    cwd: string | null;
+    /**
+     * Shell variables whose value is known when this command's words are
+     * expanded: set by an earlier, unconditional statement (`DIR=x; rm -rf
+     * "$DIR"`, `DIR=x && rm -rf "$DIR"`). Bash semantics: a prefix assignment
+     * (`DIR=x rm -rf "$DIR"`) only goes to the command's environment and is NOT
+     * seen by its own argument expansion, which uses the shell's prior value.
+     * Never put prefix assignments here; a name not listed is unknown. Values
+     * are what the shell holds: tilde-expanded at assignment (a value that still
+     * starts with `~` is unknown). A `PWD` set here that is not `cwd` makes
+     * `$PWD` and `~+` unknown; `~-`, `~N` and `$OLDPWD` are unknown unless set.
+     */
+    variables?: Record<string, string>;
+    /**
+     * The command's own prefix assignments. Accepted only so a caller can pass
+     * them without them leaking into expansion: they are never substituted, and
+     * a name assigned here and not in `variables` stays unknown.
+     */
+    prefixAssignments?: Record<string, string>;
+    /**
+     * The $HOME the agent's shell expands for `~` and `$HOME`. When given and
+     * not exactly `home`, both expansions are unknown. (U4 gives
+     * `claimed_no_key` whenever env HOME is not the trusted home.)
+     */
+    shellHome?: string | null;
+    /** passwd lookup for ~user. */
+    userHome?: (user: string) => string | null;
+}
+export type ExpandedOperand = {
+    kind: 'path';
+    path: string;
+    trailingFollow: boolean;
+    nonAscii: boolean;
+} | {
+    kind: 'glob';
+    path: string;
+    staticPrefix: string;
+    trailingFollow: boolean;
+    nonAscii: boolean;
+} | {
+    kind: 'dynamic';
+    reason: 'empty' | 'substitution' | 'brace' | 'variable' | 'tilde' | 'user_home' | 'no_home' | 'no_cwd' | 'glob_parent' | 'backslash' | 'pattern';
+};
+/**
+ * Expands one path operand the way the shell would, using only trusted values.
+ * `raw` is the word with quotes removed; any `$` left in it is treated as an
+ * expansion, so a literal `$` can only make the answer stricter.
+ */
+export declare function expandPathOperand(raw: string, context: PathContext): ExpandedOperand;
+export type ResolvedOperand = {
+    kind: 'path';
+    real: string;
+    exists: boolean;
+    nonAscii: boolean;
+}
+/**
+ * matches: the real path of every name the glob can reach (followed through
+ * links where the shell follows them). parents: the real dirs whose
+ * children a final wildcard deletes, judged like a static prefix.
+ */
+ | {
+    kind: 'glob';
+    staticReal: string;
+    matches: string[];
+    parents: string[];
+    nonAscii: boolean;
+} | {
+    kind: 'unknown';
+    reason: string;
+};
+/** Bound on directory entries a glob may enumerate; over it the operand is unknown. */
+export declare const MAX_GLOB_ENTRIES = 1024;
+/**
+ * Expands and realpaths one operand. use='read' follows a final symlink (cat
+ * reads the target); use='delete' follows it only after a trailing '/' or '/.'.
+ */
+export declare function resolveOperand(fs: SeatbeltFs, context: PathContext, raw: string, use: 'read' | 'delete'): ResolvedOperand;
+export interface Workspace {
+    /** False when the event gave no usable cwd: every recursive delete target is then unknown (A19). */
+    known: boolean;
+    /** Real project roots (git toplevel of the event cwd, or the cwd). Children only. */
+    roots: string[];
+    /** Real temp roots (/tmp, /var/tmp, a system TMPDIR). Children only. */
+    tempRoots: string[];
+    home: string | null;
+    reason?: 'no_cwd' | 'cwd_unresolved' | 'home_or_ancestor';
+}
+/** WS from the event cwd (fixes F3: never the hook process's cwd). */
+export declare function resolveWorkspace(fs: SeatbeltFs, input: {
+    eventCwd: unknown;
+    home: string | null;
+    tmpdir?: string | null;
+}): Workspace;
+export type DeleteTargetClass = 'in_workspace' | 'outside_workspace' | 'workspace_root' | 'home' | 'root' | 'unknown';
+/** Where a recursive-delete target falls (S5). Only 'in_workspace' is safe. A glob is the worst of its static prefix and every reachable match. */
+export declare function classifyDeleteTarget(fs: SeatbeltFs, workspace: Workspace, target: ResolvedOperand): DeleteTargetClass;
+//# sourceMappingURL=seatbelt-path.d.ts.map

package/dist/seatbelt-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seatbelt-path.d.ts","sourceRoot":"","sources":["../src/seatbelt-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAMhD,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,YAAY,GAAG,aAAa,CAAA;CAAE,CAAC;AAU1F;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CAwD/G;AAED,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKpF;AAmBD,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,sEAAsE;IACtE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,CAAC;AAI1K;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,eAAe,CAqFpF;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AACpE;;;;GAIG;GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA8DxC,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AA2DrC;;;GAGG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,eAAe,CAazH;AAED,MAAM,WAAW,SAAS;IACxB,oGAAoG;IACpG,KAAK,EAAE,OAAO,CAAC;IACf,qFAAqF;IACrF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,QAAQ,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;CAC3D;AA0BD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,CAoBrI;AAED,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAItH,mJAAmJ;AACnJ,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,GAAG,iBAAiB,CASrH"}

package/dist/seatbelt-path.js

@@ -0,0 +1,482 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_GLOB_ENTRIES = exports.MAX_SYMLINK_HOPS = void 0;
+exports.realPath = realPath;
+exports.pathKey = pathKey;
+exports.isWithinOrEqual = isWithinOrEqual;
+exports.expandPathOperand = expandPathOperand;
+exports.resolveOperand = resolveOperand;
+exports.resolveWorkspace = resolveWorkspace;
+exports.classifyDeleteTarget = classifyDeleteTarget;
+// Seatbelt path resolution (spec §1.2 S4/S5, abuse rows A13/A19). Every
+// answer that cannot be made exactly is 'dynamic' or 'unknown'; the category
+// mapper treats those as the dangerous value (§2.1 rule 2).
+exports.MAX_SYMLINK_HOPS = 40;
+function parts(value) {
+    return value.split('/').filter((part) => part !== '' && part !== '.');
+}
+// /proc/<pid>/root names the root directory; the other per-process handles
+// (cwd, fd, exe ...) point at the hook process, not the agent's shell.
+const PROC_HANDLE = new Set(['cwd', 'fd', 'fdinfo', 'exe', 'map_files', 'task', 'environ']);
+/**
+ * realpath of the longest existing prefix, with the remainder appended
+ * lexically. followFinal=false leaves a final symlink unresolved (rm -r on a
+ * link removes the link, not its target).
+ */
+function realPath(fs, input, options = {}) {
+    if (!input.startsWith('/'))
+        return { status: 'unknown', reason: 'not_absolute' };
+    const follow = options.followFinal !== false;
+    let pending = parts(input);
+    let current = [];
+    let exists = true;
+    let hops = 0;
+    while (pending.length > 0) {
+        const name = pending.shift();
+        if (name === '..') {
+            current.pop();
+            continue;
+        }
+        if (current.length === 2 && current[0] === 'proc') {
+            if (name === 'root') {
+                current = [];
+                exists = true;
+                continue;
+            }
+            if (PROC_HANDLE.has(name))
+                return { status: 'unknown', reason: 'proc_handle' };
+        }
+        if (current.length === 1 && current[0] === 'dev' && name === 'fd')
+            return { status: 'unknown', reason: 'proc_handle' };
+        if (!exists) {
+            current.push(name);
+            continue;
+        }
+        const candidate = `/${[...current, name].join('/')}`;
+        let entry;
+        try {
+            entry = fs.lstat(candidate);
+        }
+        catch {
+            return { status: 'unknown', reason: 'unreadable' };
+        }
+        if (!entry) {
+            exists = false;
+            current.push(name);
+            continue;
+        }
+        const final = pending.length === 0;
+        if (entry.type === 'symlink' && (!final || follow)) {
+            hops += 1;
+            if (hops > exports.MAX_SYMLINK_HOPS)
+                return { status: 'unknown', reason: 'loop' };
+            let target;
+            try {
+                target = fs.readlink(candidate);
+            }
+            catch {
+                return { status: 'unknown', reason: 'unreadable' };
+            }
+            if (target.startsWith('/'))
+                current = [];
+            pending = [...parts(target), ...pending];
+            continue;
+        }
+        if (entry.type !== 'dir' && !final)
+            exists = false;
+        current.push(name);
+    }
+    return { status: 'resolved', path: `/${current.join('/')}`, exists };
+}
+/** Comparison key: case-folded (and NFC-normalised) on case-insensitive volumes. */
+function pathKey(fs, value) {
+    return fs.caseInsensitive(value) ? value.normalize('NFC').toLowerCase() : value;
+}
+/** True when child is root itself or below it. */
+function isWithinOrEqual(fs, root, child) {
+    const r = pathKey(fs, root);
+    const c = pathKey(fs, child);
+    if (r === '/')
+        return c.startsWith('/');
+    return c === r || c.startsWith(`${r}/`);
+}
+/**
+ * Folded comparison used for the danger checks (root, home, a workspace root
+ * or its ancestor). It folds on every volume, so an unproven case-sensitivity
+ * can only make a target look more dangerous, never less.
+ */
+function dangerWithinOrEqual(root, child) {
+    const fold = (v) => v.normalize('NFC').toLowerCase();
+    const r = fold(root);
+    const c = fold(child);
+    if (r === '/')
+        return c.startsWith('/');
+    return c === r || c.startsWith(`${r}/`);
+}
+function isStrictlyWithin(fs, root, child) {
+    return isWithinOrEqual(fs, root, child) && pathKey(fs, root) !== pathKey(fs, child);
+}
+const VARIABLE = /\$(?:\{([^}]*)\}|([A-Za-z_][A-Za-z0-9_]*)|([0-9@*#?$!-]))/g;
+/**
+ * Expands one path operand the way the shell would, using only trusted values.
+ * `raw` is the word with quotes removed; any `$` left in it is treated as an
+ * expansion, so a literal `$` can only make the answer stricter.
+ */
+function expandPathOperand(raw, context) {
+    let value = String(raw ?? '');
+    if (value === '')
+        return { kind: 'dynamic', reason: 'empty' };
+    // A `\` left after quote removal is a literal name character on POSIX and a
+    // separator on Windows: either reading can move the target, so it is unknown.
+    if (value.includes('\\'))
+        return { kind: 'dynamic', reason: 'backslash' };
+    // The shell's $HOME, when known to differ from the trusted home, makes ~ and $HOME unknown.
+    // So does an earlier statement that set HOME (or PWD) in the shell.
+    const setEarlier = (name) => context.variables !== undefined && Object.prototype.hasOwnProperty.call(context.variables, name);
+    const homeForShell = (context.shellHome !== undefined && context.shellHome !== context.home) || (setEarlier('HOME') && context.variables?.HOME !== context.home) ? null : context.home;
+    const cwdForShell = setEarlier('PWD') && context.variables?.PWD !== context.cwd ? null : context.cwd;
+    // Judged on the operand and substituted values only: a non-ASCII home or cwd is not the agent's choice.
+    let nonAscii = /[^\x20-\x7e]/.test(value);
+    if (/\$\(|`|<\(|>\(/.test(value))
+        return { kind: 'dynamic', reason: 'substitution' };
+    if (value.includes('}') && /\{[^{}]*(?:,|\.\.)/.test(value))
+        return { kind: 'dynamic', reason: 'brace' };
+    // Patterns this resolver does not enumerate: bash globstar/extglob and zsh's
+    // default `**`, `(a|b)`, `<1-9>` and qualifiers, plus extendedglob `^`/`#`.
+    if (/\*\*|[()|<>^#]/.test(value))
+        return { kind: 'dynamic', reason: 'pattern' };
+    if (value.startsWith('~')) {
+        const slash = value.indexOf('/');
+        const prefix = slash < 0 ? value.slice(1) : value.slice(1, slash);
+        const rest = slash < 0 ? '' : value.slice(slash);
+        let base;
+        if (prefix === '') {
+            if (!homeForShell)
+                return { kind: 'dynamic', reason: 'no_home' };
+            base = homeForShell;
+        }
+        else if (prefix === '+') {
+            // `~+` is the shell's $PWD, which an earlier `PWD=…` statement may have changed.
+            if (!cwdForShell)
+                return { kind: 'dynamic', reason: 'no_cwd' };
+            base = cwdForShell;
+        }
+        else if (/^[0-9]+$/.test(prefix)) {
+            // `~N` is the Nth entry of the directory stack, which this resolver does not track (`~-` and `~+N`/`~-N` fall to the branch below).
+            return { kind: 'dynamic', reason: 'tilde' };
+        }
+        else if (/^[A-Za-z0-9._][A-Za-z0-9._-]*$/.test(prefix)) {
+            base = context.userHome ? context.userHome(prefix) : null;
+            if (!base)
+                return { kind: 'dynamic', reason: 'user_home' };
+        }
+        else {
+            return { kind: 'dynamic', reason: 'tilde' };
+        }
+        value = `${base}${rest}`;
+    }
+    let unresolved = null;
+    value = value.replace(VARIABLE, (_match, braced, plain) => {
+        const name = braced ?? plain;
+        if (name === undefined || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {
+            unresolved = { kind: 'dynamic', reason: 'variable' };
+            return '';
+        }
+        if (name === 'HOME') {
+            if (!homeForShell)
+                unresolved = { kind: 'dynamic', reason: 'no_home' };
+            return homeForShell || '';
+        }
+        if (name === 'PWD') {
+            if (!cwdForShell)
+                unresolved = { kind: 'dynamic', reason: 'no_cwd' };
+            return cwdForShell || '';
+        }
+        // Only values set before this command count; prefixAssignments never do.
+        const assigned = context.variables && Object.prototype.hasOwnProperty.call(context.variables, name)
+            ? context.variables[name]
+            : undefined;
+        if (assigned === undefined)
+            unresolved = { kind: 'dynamic', reason: 'variable' };
+        // The shell tilde-expands an assignment's value when it is assigned: a value that still
+        // starts with `~` was not expanded by the caller, and bash never expands it later.
+        else if (assigned.startsWith('~'))
+            unresolved = { kind: 'dynamic', reason: 'tilde' };
+        else if (/[^\x20-\x7e]/.test(assigned))
+            nonAscii = true;
+        return assigned ?? '';
+    });
+    if (unresolved)
+        return unresolved;
+    // Any `$` left ($'..', $"..", a lone $) is an expansion this resolver does not model.
+    if (value.includes('$'))
+        return { kind: 'dynamic', reason: 'variable' };
+    if (value === '')
+        return { kind: 'dynamic', reason: 'empty' };
+    if (!value.startsWith('/')) {
+        if (!context.cwd || !context.cwd.startsWith('/'))
+            return { kind: 'dynamic', reason: 'no_cwd' };
+        value = `${context.cwd}/${value}`;
+    }
+    const trailingFollow = /\/\.?$/.test(value);
+    const normalized = `/${parts(value).join('/')}`;
+    if (/[*?[]/.test(normalized)) {
+        const segments = parts(normalized);
+        const firstGlob = segments.findIndex((part) => /[*?[]/.test(part));
+        // `..` after a wildcard climbs out of whatever the wildcard matched.
+        if (segments.slice(firstGlob).includes('..'))
+            return { kind: 'dynamic', reason: 'glob_parent' };
+        return { kind: 'glob', path: normalized, staticPrefix: `/${segments.slice(0, firstGlob).join('/')}`, trailingFollow, nonAscii };
+    }
+    return { kind: 'path', path: normalized, trailingFollow, nonAscii };
+}
+/**
+ * Whether a name can match one glob segment. `*` and `?` as in the shell; a
+ * bracket expression counts as any one character, and a leading dot is not
+ * special, so the answer is a superset of the shell's. Dynamic programming,
+ * linear in pattern × name: no backtracking blow-up.
+ */
+function segmentMayMatch(pattern, name) {
+    const tokens = [];
+    for (let i = 0; i < pattern.length; i += 1) {
+        const ch = pattern[i];
+        if (ch === '[') {
+            // A bracket expression: an optional `!`/`^`, a leading `]` is a member, and
+            // `[:class:]`, `[.x.]`, `[=x=]` hold a `]` of their own.
+            let j = i + 1;
+            if (pattern[j] === '!' || pattern[j] === '^')
+                j += 1;
+            if (pattern[j] === ']')
+                j += 1;
+            let close = -1;
+            while (j < pattern.length) {
+                if (pattern[j] === '[' && (pattern[j + 1] === ':' || pattern[j + 1] === '.' || pattern[j + 1] === '=')) {
+                    const end = pattern.indexOf(`${pattern[j + 1]}]`, j + 2);
+                    if (end < 0)
+                        break;
+                    j = end + 2;
+                    continue;
+                }
+                if (pattern[j] === ']') {
+                    close = j;
+                    break;
+                }
+                j += 1;
+            }
+            if (close < 0)
+                tokens.push('[');
+            else {
+                tokens.push('?');
+                i = close;
+            }
+        }
+        else if (ch === '*') {
+            if (tokens[tokens.length - 1] !== '*')
+                tokens.push('*');
+        }
+        else
+            tokens.push(ch === '?' ? '?' : `=${ch}`);
+    }
+    let row = new Array(name.length + 1).fill(false);
+    row[0] = true;
+    for (const token of tokens) {
+        const next = new Array(name.length + 1).fill(false);
+        if (token === '*') {
+            let any = false;
+            for (let j = 0; j <= name.length; j += 1) {
+                any = any || row[j];
+                next[j] = any;
+            }
+        }
+        else {
+            for (let j = 1; j <= name.length; j += 1) {
+                const ch = name[j - 1];
+                next[j] = row[j - 1] && (token === '?' || (token === '[' ? ch === '[' : ch === token.slice(1)));
+            }
+        }
+        row = next;
+    }
+    return row[name.length];
+}
+/** Bound on directory entries a glob may enumerate; over it the operand is unknown. */
+exports.MAX_GLOB_ENTRIES = 1024;
+/**
+ * The real target of every path a glob can name, as far as the filesystem
+ * shows it. Each wildcard segment is matched against every entry of the
+ * directory (a superset of what the shell matches, dotfiles included, so it
+ * can only add targets). A name the shell resolves through a link (a further
+ * segment, a trailing `/` or `/.`, or use='read') is realpath-ed; a final name
+ * without one is the link itself. Null when it cannot be enumerated for certain.
+ */
+function globTargets(fs, path, trailingFollow, use) {
+    const segments = parts(path);
+    let current = ['/'];
+    let budget = exports.MAX_GLOB_ENTRIES;
+    const out = [];
+    const parents = [];
+    for (let i = 0; i < segments.length; i += 1) {
+        const segment = segments[i];
+        const final = i === segments.length - 1;
+        const next = [];
+        for (const dir of current) {
+            let names;
+            if (/[*?[]/.test(segment)) {
+                const real = realPath(fs, dir, { followFinal: true });
+                if (real.status !== 'resolved')
+                    return null;
+                if (!real.exists)
+                    continue;
+                let entry;
+                try {
+                    entry = fs.lstat(real.path);
+                }
+                catch {
+                    return null;
+                }
+                if (!entry || entry.type !== 'dir')
+                    continue;
+                if (final)
+                    parents.push(real.path);
+                try {
+                    names = fs.readdir(real.path);
+                }
+                catch {
+                    return null;
+                }
+                budget -= names.length;
+                if (budget < 0)
+                    return null;
+                names = names.filter((name) => segmentMayMatch(segment, name));
+                // bash before 5.2 lets a pattern with a leading `.` match `.` and `..`.
+                if (segment.startsWith('.'))
+                    for (const dot of ['.', '..'])
+                        if (segmentMayMatch(segment, dot))
+                            names.push(dot);
+            }
+            else
+                names = [segment];
+            for (const name of names)
+                next.push(dir === '/' ? `/${name}` : `${dir}/${name}`);
+        }
+        current = next;
+        if (final) {
+            for (const candidate of current) {
+                const real = realPath(fs, candidate, { followFinal: use === 'read' || trailingFollow });
+                if (real.status !== 'resolved')
+                    return null;
+                out.push(real.path);
+            }
+        }
+    }
+    return { matches: out, parents };
+}
+/**
+ * Expands and realpaths one operand. use='read' follows a final symlink (cat
+ * reads the target); use='delete' follows it only after a trailing '/' or '/.'.
+ */
+function resolveOperand(fs, context, raw, use) {
+    const expanded = expandPathOperand(raw, context);
+    if (expanded.kind === 'dynamic')
+        return { kind: 'unknown', reason: expanded.reason };
+    if (expanded.kind === 'glob') {
+        const real = realPath(fs, expanded.staticPrefix, { followFinal: true });
+        if (real.status !== 'resolved')
+            return { kind: 'unknown', reason: real.reason };
+        const targets = globTargets(fs, expanded.path, expanded.trailingFollow, use);
+        if (targets === null)
+            return { kind: 'unknown', reason: 'glob_unresolved' };
+        return { kind: 'glob', staticReal: real.path, matches: targets.matches, parents: targets.parents, nonAscii: expanded.nonAscii };
+    }
+    const real = realPath(fs, expanded.path, { followFinal: use === 'read' || expanded.trailingFollow });
+    if (real.status !== 'resolved')
+        return { kind: 'unknown', reason: real.reason };
+    return { kind: 'path', real: real.path, exists: real.exists, nonAscii: expanded.nonAscii };
+}
+// TMPDIR comes from the environment, which may not widen the workspace
+// (§2.1 rule 5): it is used only when its real path is under a system temp dir.
+const SYSTEM_TEMP = ['/tmp', '/var/tmp', '/private/tmp', '/private/var/tmp', '/private/var/folders', '/var/folders'];
+function realOrNull(fs, value) {
+    const real = realPath(fs, value, { followFinal: true });
+    return real.status === 'resolved' && real.exists ? real.path : null;
+}
+function gitToplevel(fs, start) {
+    let dir = start;
+    for (;;) {
+        let entry;
+        try {
+            entry = fs.lstat(dir === '/' ? '/.git' : `${dir}/.git`);
+        }
+        catch {
+            entry = null;
+        }
+        if (entry && (entry.type === 'dir' || entry.type === 'file'))
+            return dir;
+        if (dir === '/')
+            return null;
+        dir = dir.slice(0, dir.lastIndexOf('/')) || '/';
+    }
+}
+/** WS from the event cwd (fixes F3: never the hook process's cwd). */
+function resolveWorkspace(fs, input) {
+    const realHome = input.home ? realOrNull(fs, input.home) || input.home : null;
+    const tempRoots = [];
+    for (const candidate of ['/tmp', '/var/tmp', input.tmpdir || '']) {
+        if (!candidate || !candidate.startsWith('/'))
+            continue;
+        const real = realOrNull(fs, candidate);
+        if (!real || !SYSTEM_TEMP.some((root) => isWithinOrEqual(fs, root, real)))
+            continue;
+        if (realHome && dangerWithinOrEqual(real, realHome))
+            continue;
+        if (!tempRoots.some((root) => pathKey(fs, root) === pathKey(fs, real)))
+            tempRoots.push(real);
+    }
+    const base = { tempRoots, home: realHome };
+    if (typeof input.eventCwd !== 'string' || !input.eventCwd.startsWith('/'))
+        return { known: false, roots: [], ...base, reason: 'no_cwd' };
+    const cwd = realPath(fs, input.eventCwd, { followFinal: true });
+    if (cwd.status !== 'resolved' || !cwd.exists)
+        return { known: false, roots: [], ...base, reason: 'cwd_unresolved' };
+    const dangerous = (dir) => dir === '/' || (realHome !== null && dangerWithinOrEqual(dir, realHome));
+    const top = gitToplevel(fs, cwd.path);
+    // A repo at $HOME (dotfiles) or a project dir that is really $HOME never makes home the workspace.
+    const root = top && !dangerous(top) ? top : cwd.path;
+    if (dangerous(root))
+        return { known: true, roots: [], ...base, reason: 'home_or_ancestor' };
+    return { known: true, roots: [root], ...base };
+}
+const DELETE_CLASS_ORDER = ['unknown', 'root', 'home', 'workspace_root', 'outside_workspace', 'in_workspace'];
+/** Where a recursive-delete target falls (S5). Only 'in_workspace' is safe. A glob is the worst of its static prefix and every reachable match. */
+function classifyDeleteTarget(fs, workspace, target) {
+    if (!workspace.known || target.kind === 'unknown' || target.nonAscii)
+        return 'unknown';
+    if (target.kind === 'glob') {
+        const classes = [classifyReal(fs, workspace, target.staticReal, true)];
+        for (const parent of target.parents)
+            classes.push(classifyReal(fs, workspace, parent, true));
+        for (const match of target.matches)
+            classes.push(classifyReal(fs, workspace, match, false));
+        return DELETE_CLASS_ORDER.find((c) => classes.includes(c));
+    }
+    return classifyReal(fs, workspace, target.real, false);
+}
+function classifyReal(fs, workspace, real, children) {
+    if (real === '/')
+        return 'root';
+    const home = workspace.home;
+    if (home && dangerWithinOrEqual(real, home))
+        return 'home';
+    for (const root of [...workspace.roots, ...workspace.tempRoots]) {
+        if (dangerWithinOrEqual(real, root))
+            return 'workspace_root';
+    }
+    // A glob deletes children of its static prefix; a path deletes itself.
+    const inside = (root) => (children ? isWithinOrEqual(fs, root, real) : isStrictlyWithin(fs, root, real));
+    if (workspace.roots.some(inside))
+        return 'in_workspace';
+    // Temp roots never cover anything inside home (a home under /tmp stays protected).
+    if (workspace.tempRoots.some(inside) && !(home && dangerWithinOrEqual(home, real)))
+        return 'in_workspace';
+    return 'outside_workspace';
+}
+//# sourceMappingURL=seatbelt-path.js.map