@getmarrow/mcp 3.9.103 → 3.9.106

package/dist/seatbelt/env-dump.js

@@ -0,0 +1,308 @@
+"use strict";
+// Env-dump forms: every command an agent can type that prints many or all environment variables.
+// One table for both modes: the keyless seatbelt mapper stops them (S4) and the keyed hook policy
+// holds them (hook-tool-policy.ts asks the mapper and keeps only the reasons named here). Pure
+// word-level predicates over literal arguments; no file contents are read.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENV_PRINTER_COMMAND = exports.HELPER_ENV_VARS = exports.RECURSIVE_READERS = exports.PROC_PROCESS_DIRECTORY = exports.PROC_ENVIRON = exports.EXEC_WRAPPERS = exports.ENV_DUMP_REASONS = void 0;
+exports.compgenListsVariables = compgenListsVariables;
+exports.tmuxShowsEnvironment = tmuxShowsEnvironment;
+exports.systemctlShowsEnvironment = systemctlShowsEnvironment;
+exports.psPrintsEnvironment = psPrintsEnvironment;
+exports.psLooselyPrintsEnvironment = psLooselyPrintsEnvironment;
+exports.jqFilterReadsEnvironment = jqFilterReadsEnvironment;
+exports.jqFilters = jqFilters;
+exports.packageRunsEnvScript = packageRunsEnvScript;
+exports.procGlobMatchesEnviron = procGlobMatchesEnviron;
+exports.manPagerPrintsEnvironment = manPagerPrintsEnvironment;
+exports.straceShowsEnvironment = straceShowsEnvironment;
+exports.tmuxRunsEnvironmentPrinter = tmuxRunsEnvironmentPrinter;
+/** S4 reasons that mean "prints the environment". The keyed hook keeps only these from a mapper run. */
+exports.ENV_DUMP_REASONS = new Set([
+    'env_dump_env', 'env_dump_set', 'env_dump_export', 'env_dump_declare', 'env_dump_declare_secret', 'env_dump_readonly', 'env_dump_printenv',
+    'env_dump_printenv_secret', 'interpreter_env_dump', 'ps_environment', 'proc_environ', 'env_dump_compgen', 'env_dump_tmux', 'env_dump_systemctl',
+    'env_dump_jq', 'env_dump_strace', 'env_dump_php_info', 'env_dump_npm_run_env', 'tripwire_secret_dumper', 'echo_secret_var',
+]);
+/**
+ * Programs that run the command at the end of their argv with a grammar the mapper does not model. A bare `env` or
+ * `printenv` as their last word is that command, not a name (`python -m venv env` and `conda activate env` stay fine:
+ * those programs are not listed).
+ */
+exports.EXEC_WRAPPERS = new Set([
+    'setpriv', 'unshare', 'runuser', 'nsenter', 'chroot', 'fakeroot', 'fakeroot-sysv', 'fakechroot', 'systemd-run', 'firejail', 'bwrap', 'strace', 'ltrace',
+    'sg', 'proot', 'torsocks', 'proxychains', 'proxychains4', 'tsocks', 'xvfb-run', 'dbus-run-session', 'cross-env', 'env-cmd', 'dotenv', 'dotenvx', 'direnv',
+    'sandbox-exec', 'cgexec', 'sshpass', 'chronic', 'rlwrap',
+]);
+const letters = (text) => /^[a-zA-Z]+$/.test(text);
+/** `compgen -e`, `-v`, `-A export` and `-A variable` list the names of the environment's variables. */
+function compgenListsVariables(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--')
+            return false;
+        if (/^-A./.test(a)) {
+            if (/^(?:export|variable)$/.test(a.slice(2)))
+                return true;
+            continue;
+        }
+        if (a === '-A') {
+            const v = args[i + 1];
+            if (v === 'export' || v === 'variable')
+                return true;
+            i += 1;
+            continue;
+        }
+        if (/^-[oGWFCXPS]$/.test(a)) {
+            i += 1;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a) && /[ev]/.test(a.slice(1).replace(/[oGWFCXPS].*$/, '')))
+            return true;
+    }
+    return false;
+}
+/** tmux accepts any unambiguous prefix of a command name or alias: `show-e` and `showe` are show-environment. */
+function tmuxShowEnvironmentWord(word) {
+    return (word.length >= 6 && 'show-environment'.startsWith(word)) || (word.length >= 5 && 'showenv'.startsWith(word));
+}
+/** `tmux [options] show-environment` (also `showenv`, a unique prefix, and a command after `\\;`) prints a session's variables. */
+function tmuxShowsEnvironment(args) {
+    let i = 0;
+    // Global options come before the first command: -S, -L, -f, -c and -T take a value.
+    while (i < args.length && args[i] !== null && args[i].startsWith('-') && args[i] !== '-')
+        i += /^-[SLfcT]$/.test(args[i]) ? 2 : 1;
+    let commandStart = true;
+    for (; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === ';' || a === '\\;') {
+            commandStart = true;
+            continue;
+        }
+        if (a !== null && commandStart && tmuxShowEnvironmentWord(a))
+            return true;
+        commandStart = false;
+    }
+    return false;
+}
+/** `systemctl [--user] show-environment` prints the manager's environment. */
+function systemctlShowsEnvironment(args) {
+    return args.some((a) => a === 'show-environment');
+}
+/**
+ * BSD `ps e`, `ps auxe`, `ps eww` and `ps -E` print every process's environment. A word of letters that holds `e`, or a dash
+ * cluster that holds `E`, outside the value of an option (`ps -p 1 -o etime` asks for a column, not the environment).
+ */
+function psPrintsEnvironment(args) {
+    const longWithValue = /^--(?:sort|pid|ppid|user|User|group|Group|tty|sid|format|cols|columns|width|lines|rows|quick-pid)$/;
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a.startsWith('--')) {
+            if (longWithValue.test(a))
+                i += 1;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a)) {
+            for (let k = 1; k < a.length; k += 1) {
+                if (a[k] === 'E')
+                    return true;
+                if ('oOpquUgGstCnND'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+            continue;
+        }
+        if (letters(a)) {
+            for (let k = 0; k < a.length; k += 1) {
+                if (a[k] === 'e')
+                    return true;
+                if ('oOpqUgGstCnND'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+        }
+    }
+    return false;
+}
+/** The older, looser reading of `ps`: any word of letters that holds `e`, option values included. The keyless seatbelt keeps stopping it. */
+function psLooselyPrintsEnvironment(args) {
+    return args.some((a) => a !== null && letters(a) && a.includes('e'));
+}
+/** The environment object in a jq filter: `env`, `$ENV` (not a `.env` field, a key, or text in a string). */
+function jqFilterReadsEnvironment(filter) {
+    const code = filter.replace(/"(?:[^"\\]|\\.)*"/g, '""');
+    return /\$ENV\b/.test(code) || /(?<![.$\w])env\b(?!\s*[:,}])/.test(code);
+}
+/** The filter of a jq command line: the first word that is not an option or an option's value. With -f the program is a file: none. */
+function jqFilters(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--arg' || a === '--argjson' || a === '--slurpfile' || a === '--rawfile') {
+            i += 2;
+            continue;
+        }
+        if (a === '--indent') {
+            i += 1;
+            continue;
+        }
+        if (a === '--from-file' || /^-[a-zA-Z]*f$/.test(a))
+            return [];
+        if (a.startsWith('-') && a !== '-')
+            continue;
+        return [a];
+    }
+    return [];
+}
+const RUN_SCRIPT_WORDS = new Set(['run', 'run-script', 'rum', 'urn']);
+/** `npm run env` (also pnpm, yarn and bun) runs npm's built-in `env` script, which prints the environment. */
+function packageRunsEnvScript(args) {
+    const at = args.findIndex((a) => a !== null && RUN_SCRIPT_WORDS.has(a));
+    if (at < 0)
+        return false;
+    for (let i = at + 1; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            return false;
+        if (a.startsWith('-')) {
+            if (a === '--prefix' || a === '-C' || a === '--workspace' || a === '-w' || a === '--cwd')
+                i += 1;
+            continue;
+        }
+        return a === 'env';
+    }
+    return false;
+}
+var secret_paths_1 = require("../secret-paths");
+Object.defineProperty(exports, "PROC_ENVIRON", { enumerable: true, get: function () { return secret_paths_1.PROC_ENVIRON; } });
+/** A glob that can name `environ`: `/proc/self/env*`, `/proc/1/*`, `/proc/self/task/1/e[n]viron`. */
+function procGlobMatchesEnviron(path) {
+    const m = /^\/proc\/[^/]+\/(?:task\/[^/]+\/)?([^/]*[*?[][^/]*)$/.exec(path);
+    if (!m)
+        return false;
+    let source = '';
+    for (let i = 0; i < m[1].length; i += 1) {
+        const ch = m[1][i];
+        if (ch === '*')
+            source += '.*';
+        else if (ch === '?')
+            source += '.';
+        else if (ch === '[') {
+            const end = m[1].indexOf(']', i + 2);
+            if (end < 0)
+                return true;
+            const body = m[1].slice(i + 1, end).replace(/^[!^]/, '');
+            source += `[${body.replace(/[\\\]^]/g, '\\$&')}]`;
+            i = end;
+        }
+        else
+            source += ch.replace(/[.+^${}()|\\]/g, '\\$&');
+    }
+    try {
+        return new RegExp(`^${source}$`).test('environ');
+    }
+    catch {
+        return true;
+    }
+}
+/** `/proc`, `/proc/<pid>` and `/proc/<pid>/task[/<tid>]`: a folder whose recursive read reaches every `environ` under it. */
+exports.PROC_PROCESS_DIRECTORY = /^\/proc(?:\/[^/]+(?:\/task(?:\/[^/]+)?)?)?\/?$/;
+/** Programs that read or copy every file under a folder named to them. */
+exports.RECURSIVE_READERS = new Set(['grep', 'egrep', 'fgrep', 'rg', 'ag', 'ack', 'tar', 'gtar', 'bsdtar', 'cp', 'rsync', 'zip', 'scp']);
+/** Variables whose value runs as a command: a pager, editor, askpass or diff helper set to `env` prints the environment. */
+exports.HELPER_ENV_VARS = new Set(['PAGER', 'GIT_PAGER', 'MANPAGER', 'EDITOR', 'VISUAL', 'GIT_EDITOR', 'GIT_SEQUENCE_EDITOR', 'GIT_EXTERNAL_DIFF',
+    'GIT_SSH_COMMAND', 'GIT_SSH', 'GIT_ASKPASS', 'SSH_ASKPASS', 'BROWSER', 'LESSOPEN', 'GIT_PROXY_COMMAND', 'PROMPT_COMMAND']);
+/** A command word that is the environment printer, alone or followed by arguments. */
+exports.ENV_PRINTER_COMMAND = /^\s*(?:\S*\/)?(?:env|printenv)(?:\s|$)/;
+/** `man -P env`, `man --pager=printenv`: the pager is the command. */
+function manPagerPrintsEnvironment(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if ((a === '-P' || a === '--pager') && args[i + 1] != null && exports.ENV_PRINTER_COMMAND.test(args[i + 1]))
+            return true;
+        const m = /^(?:--pager=|-P)([\s\S]+)$/.exec(a);
+        if (m && exports.ENV_PRINTER_COMMAND.test(m[1]))
+            return true;
+    }
+    return false;
+}
+/** strace shows the whole environment of an exec it traces unless its strings are abbreviated: `-v`, `--no-abbrev`, `-e abbrev=none`, `-e verbose=...`. */
+function straceShowsEnvironment(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--')
+            return false;
+        if (a === '--no-abbrev')
+            return true;
+        if (a === '-e' || a === '--trace' || a === '--abbrev' || a === '--verbose') {
+            if (/(?:abbrev\s*=\s*none|verbose)/.test(String(args[i + 1] ?? '')))
+                return true;
+            i += a === '-e' || a === '--trace' ? 1 : 0;
+            continue;
+        }
+        if (/^-e./.test(a)) {
+            if (/(?:abbrev\s*=\s*none|verbose)/.test(a))
+                return true;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a)) {
+            for (let k = 1; k < a.length; k += 1) {
+                if (a[k] === 'v')
+                    return true;
+                if ('eopsEuOSabPIUX'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+            continue;
+        }
+        if (!a.startsWith('-'))
+            return false;
+    }
+    return false;
+}
+const TMUX_COMMAND_VALUE_FLAGS = {
+    'send-keys': 'tNc', send: 'tNc', 'run-shell': 'cdt', run: 'cdt', 'new-session': 'cefFnstxy', new: 'cefFnstxy', 'new-window': 'cenFt', neww: 'cenFt',
+    'split-window': 'ceFltp', splitw: 'ceFltp', 'respawn-pane': 'cet', respawnp: 'cet', 'respawn-window': 'cet', respawnw: 'cet', 'pipe-pane': 't', pipep: 't',
+    'if-shell': 't', if: 't',
+};
+/** `tmux send-keys env Enter`, `tmux new -d printenv`, `tmux run-shell env`: a command window or pane runs the environment printer. */
+function tmuxRunsEnvironmentPrinter(args) {
+    let i = 0;
+    while (i < args.length && args[i] !== null && args[i].startsWith('-') && args[i] !== '-')
+        i += /^-[SLfcT]$/.test(args[i]) ? 2 : 1;
+    const name = args[i];
+    if (name === null || name === undefined || !(name in TMUX_COMMAND_VALUE_FLAGS))
+        return false;
+    const valueFlags = TMUX_COMMAND_VALUE_FLAGS[name];
+    for (i += 1; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === ';' || a === '\\;')
+            return false;
+        if (/^-[a-zA-Z]$/.test(a) && valueFlags.includes(a[1])) {
+            i += 1;
+            continue;
+        }
+        if (a.startsWith('-') && a.length > 1)
+            continue;
+        if (/^(?:\S*\/)?(?:env|printenv)$/.test(a))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=env-dump.js.map

package/dist/seatbelt/env-dump.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-dump.js","sourceRoot":"","sources":["../../src/seatbelt/env-dump.ts"],"names":[],"mappings":";AAAA,iGAAiG;AACjG,kGAAkG;AAClG,+FAA+F;AAC/F,2EAA2E;;;AAuB3E,sDAWC;AAQD,oDAYC;AAGD,8DAEC;AAMD,kDAqBC;AAGD,gEAEC;AAGD,4DAGC;AAGD,8BAWC;AAKD,oDAUC;AAKD,wDAiBC;AAgBD,8DASC;AAGD,wDAkBC;AASD,gEAeC;AAxND,wGAAwG;AAC3F,QAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB;IAC1I,0BAA0B,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB;IAC/I,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,iBAAiB;CAC3H,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IACvJ,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IACzJ,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ;CACzD,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEpE,uGAAuG;AACvG,SAAgB,qBAAqB,CAAC,IAAkC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACjH,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iHAAiH;AACjH,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,mIAAmI;AACnI,SAAgB,oBAAoB,CAAC,IAAkC;IACrE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,oFAAoF;IACpF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YAAC,YAAY,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,IAAI,YAAY,IAAI,uBAAuB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAgB,yBAAyB,CAAC,IAAkC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,IAAkC;IACpE,MAAM,aAAa,GAAG,oGAAoG,CAAC;IAC3H,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACjF,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6IAA6I;AAC7I,SAAgB,0BAA0B,CAAC,IAAkC;IAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,6GAA6G;AAC7G,SAAgB,wBAAwB,CAAC,MAAc;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,uIAAuI;AACvI,SAAgB,SAAS,CAAC,IAAkC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzG,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,aAAa,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QAC7C,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtE,8GAA8G;AAC9G,SAAgB,oBAAoB,CAAC,IAAkC;IACrE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO;gBAAE,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtI,OAAO,CAAC,KAAK,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gDAA+C;AAAtC,4GAAA,YAAY,OAAA;AAErB,qGAAqG;AACrG,SAAgB,sBAAsB,CAAC,IAAY;IACjD,MAAM,CAAC,GAAG,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAC;aAC1B,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAC;aAC9B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC;YAClD,CAAC,GAAG,GAAG,CAAC;QACV,CAAC;;YAAM,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClF,CAAC;AAED,6HAA6H;AAChH,QAAA,sBAAsB,GAAG,gDAAgD,CAAC;AAEvF,0EAA0E;AAC7D,QAAA,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnK,4HAA4H;AAC/G,QAAA,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,EAAE,mBAAmB;IACzK,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE7H,sFAAsF;AACzE,QAAA,mBAAmB,GAAG,wCAAwC,CAAC;AAE5E,sEAAsE;AACtE,SAAgB,yBAAyB,CAAC,IAAkC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3H,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2JAA2J;AAC3J,SAAgB,sBAAsB,CAAC,IAAkC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvN,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3F,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACjF,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,wBAAwB,GAA2B;IACvD,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IACnJ,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG;IAC1J,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG;CACzB,CAAC;AAEF,uIAAuI;AACvI,SAAgB,0BAA0B,CAAC,IAAkC;IAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAChD,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/seatbelt/fallback-copy.d.ts

@@ -0,0 +1,16 @@
+/** The reason codes of the resolver that can explain a fallback, in the order the text picks one. */
+declare const REASON_ORDER: readonly ["strict", "key_rejected", "home_unknown", "home_unusable", "env_home_unusable", "home_mismatch", "evidence_unknown"];
+export type FallbackReason = typeof REASON_ORDER[number];
+export declare const FALLBACK_OTHER = "setup_unconfirmed";
+/** The one code that explains the fallback: the first of the resolver's reasons in the fixed order, else the generic code. */
+export declare function pickFallbackReason(reasons: unknown): FallbackReason | typeof FALLBACK_OTHER;
+/** The sentence both fallback texts share. Fixed words only: no path, value or user name. */
+export declare function fallbackSentence(code?: string | null): string;
+/** The code printed after "Code:" / "mode:" for a pick. */
+export declare function fallbackCode(code?: string | null): string;
+/** The hold text for a protected action when the fallback is on and the seatbelt did not answer. */
+export declare function setupUnconfirmedText(code?: string | null): string;
+/** Every hold text setupUnconfirmedText can return: one per row of the table, generated from it and from no input. */
+export declare function setupUnconfirmedTexts(): string[];
+export {};
+//# sourceMappingURL=fallback-copy.d.ts.map

package/dist/seatbelt/fallback-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback-copy.d.ts","sourceRoot":"","sources":["../../src/seatbelt/fallback-copy.ts"],"names":[],"mappings":"AAOA,qGAAqG;AACrG,QAAA,MAAM,YAAY,gIAAiI,CAAC;AACpJ,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAEzD,eAAO,MAAM,cAAc,sBAAsB,CAAC;AA0BlD,8HAA8H;AAC9H,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,GAAG,OAAO,cAAc,CAI3F;AAMD,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG7D;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEzD;AAED,oGAAoG;AACpG,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEjE;AAED,sHAAsH;AACtH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD"}

package/dist/seatbelt/fallback-copy.js

@@ -0,0 +1,68 @@
+"use strict";
+// Words for the keyless fallback: why a machine without a key is in the stricter `claimed_no_key`
+// mode with no sign of an account, and what the person at the machine can do about it.
+//
+// Text only. The mode itself is decided by resolveSeatbeltMode() (src/seatbelt-mode.ts); this module
+// reads the reason codes it already computed and never changes a mode or a decision. A resolution
+// without a known reason gets the generic row (code `setup_unconfirmed`).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FALLBACK_OTHER = void 0;
+exports.pickFallbackReason = pickFallbackReason;
+exports.fallbackSentence = fallbackSentence;
+exports.fallbackCode = fallbackCode;
+exports.setupUnconfirmedText = setupUnconfirmedText;
+exports.setupUnconfirmedTexts = setupUnconfirmedTexts;
+/** The reason codes of the resolver that can explain a fallback, in the order the text picks one. */
+const REASON_ORDER = ['strict', 'key_rejected', 'home_unknown', 'home_unusable', 'env_home_unusable', 'home_mismatch', 'evidence_unknown'];
+exports.FALLBACK_OTHER = 'setup_unconfirmed';
+const DOCTOR = 'npx -y @getmarrow/install@latest doctor';
+const REASON_TEXT = {
+    strict: 'MARROW_SEATBELT_STRICT=1 is set',
+    key_rejected: 'the Marrow key on this machine was rejected',
+    home_unknown: 'it cannot find your login home folder (common in containers that run as a user with no home)',
+    home_unusable: 'your login home folder is missing, is not a folder, or is /',
+    env_home_unusable: 'HOME points to a folder that is missing, is not a folder, or is /',
+    home_mismatch: 'HOME is not your login home folder',
+    evidence_unknown: 'a folder or file it checks (your home folder, ~/.marrow, or an agent folder such as ~/.claude) belongs to another user, can be written by other users, or could not be read',
+    [exports.FALLBACK_OTHER]: 'it could not confirm this machine\'s setup',
+};
+const FIX_TEXT = {
+    strict: 'unset MARROW_SEATBELT_STRICT',
+    key_rejected: `run ${DOCTOR}`,
+    home_unknown: 'run the agent as a user that has a home folder',
+    home_unusable: 'give this user a real home folder',
+    env_home_unusable: 'set HOME to your login home folder',
+    home_mismatch: 'start the agent with HOME set to your login home folder',
+    evidence_unknown: 'make sure your home folder, ~/.marrow and your agent folders (such as ~/.claude) belong to you and can be read, then run chmod go-w on them',
+    [exports.FALLBACK_OTHER]: `run ${DOCTOR}`,
+};
+/** The one code that explains the fallback: the first of the resolver's reasons in the fixed order, else the generic code. */
+function pickFallbackReason(reasons) {
+    if (!Array.isArray(reasons))
+        return exports.FALLBACK_OTHER;
+    for (const code of REASON_ORDER)
+        if (reasons.includes(code))
+            return code;
+    return exports.FALLBACK_OTHER;
+}
+function known(code) {
+    return typeof code === 'string' && Object.prototype.hasOwnProperty.call(REASON_TEXT, code) ? code : exports.FALLBACK_OTHER;
+}
+/** The sentence both fallback texts share. Fixed words only: no path, value or user name. */
+function fallbackSentence(code) {
+    const picked = known(code);
+    return `Marrow uses its stricter no-key mode here because ${REASON_TEXT[picked]}. Fix (for the person at this machine, not the agent): ${FIX_TEXT[picked]}, or add a Marrow key (getmarrow.ai/docs#start-here).`;
+}
+/** The code printed after "Code:" / "mode:" for a pick. */
+function fallbackCode(code) {
+    return known(code);
+}
+/** The hold text for a protected action when the fallback is on and the seatbelt did not answer. */
+function setupUnconfirmedText(code) {
+    return `Marrow stopped this action: there is no Marrow key on this machine, and ${fallbackSentence(code)} Agent: do not retry it another way and do not edit Marrow settings; tell the user why it was stopped. Code: ${fallbackCode(code)}.`;
+}
+/** Every hold text setupUnconfirmedText can return: one per row of the table, generated from it and from no input. */
+function setupUnconfirmedTexts() {
+    return Object.keys(REASON_TEXT).map((code) => setupUnconfirmedText(code));
+}
+//# sourceMappingURL=fallback-copy.js.map

package/dist/seatbelt/fallback-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback-copy.js","sourceRoot":"","sources":["../../src/seatbelt/fallback-copy.ts"],"names":[],"mappings":";AAAA,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,0EAA0E;;;AAiC1E,gDAIC;AAOD,4CAGC;AAGD,oCAEC;AAGD,oDAEC;AAGD,sDAEC;AA5DD,qGAAqG;AACrG,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB,CAAU,CAAC;AAGvI,QAAA,cAAc,GAAG,mBAAmB,CAAC;AAElD,MAAM,MAAM,GAAG,yCAAyC,CAAC;AAEzD,MAAM,WAAW,GAA2D;IAC1E,MAAM,EAAE,iCAAiC;IACzC,YAAY,EAAE,6CAA6C;IAC3D,YAAY,EAAE,8FAA8F;IAC5G,aAAa,EAAE,6DAA6D;IAC5E,iBAAiB,EAAE,mEAAmE;IACtF,aAAa,EAAE,oCAAoC;IACnD,gBAAgB,EAAE,6KAA6K;IAC/L,CAAC,sBAAc,CAAC,EAAE,4CAA4C;CAC/D,CAAC;AAEF,MAAM,QAAQ,GAA2D;IACvE,MAAM,EAAE,8BAA8B;IACtC,YAAY,EAAE,OAAO,MAAM,EAAE;IAC7B,YAAY,EAAE,gDAAgD;IAC9D,aAAa,EAAE,mCAAmC;IAClD,iBAAiB,EAAE,oCAAoC;IACvD,aAAa,EAAE,yDAAyD;IACxE,gBAAgB,EAAE,6IAA6I;IAC/J,CAAC,sBAAc,CAAC,EAAE,OAAO,MAAM,EAAE;CAClC,CAAC;AAEF,8HAA8H;AAC9H,SAAgB,kBAAkB,CAAC,OAAgB;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,sBAAc,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,YAAY;QAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,OAAO,sBAAc,CAAC;AACxB,CAAC;AAED,SAAS,KAAK,CAAC,IAAa;IAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAsB,CAAC,CAAC,CAAC,sBAAc,CAAC;AACvI,CAAC;AAED,6FAA6F;AAC7F,SAAgB,gBAAgB,CAAC,IAAoB;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,qDAAqD,WAAW,CAAC,MAAM,CAAC,0DAA0D,QAAQ,CAAC,MAAM,CAAC,uDAAuD,CAAC;AACnN,CAAC;AAED,2DAA2D;AAC3D,SAAgB,YAAY,CAAC,IAAoB;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,oGAAoG;AACpG,SAAgB,oBAAoB,CAAC,IAAoB;IACvD,OAAO,2EAA2E,gBAAgB,CAAC,IAAI,CAAC,gHAAgH,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;AAChP,CAAC;AAED,sHAAsH;AACtH,SAAgB,qBAAqB;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/dist/seatbelt/hook.d.ts

@@ -16,9 +16,11 @@ export declare const CLAIMED_NO_KEY_TEXT = "Marrow is linked to an account but h
  * `claimed_no_key` with no account evidence and no rejected key: a fallback because the machine's
  * setup could not be confirmed (an evidence dir others can write, an unreadable probe, a home
  * mismatch, strict mode). Same holds as CLAIMED_NO_KEY_TEXT, but it never claims an account exists.
+ * This constant is the generic wording; a hold names its reason (setupUnconfirmedText, fallback-copy.ts).
  */
-export declare const SETUP_UNCONFIRMED_TEXT = "Marrow has no working key on this machine and its keyless mode is off here (strict mode, or a home folder it cannot trust); owner: run `npx -y @getmarrow/install@latest doctor`.";
-export declare function seatbeltStopText(category: string, rule: string, reason: string, mode: 'seatbelt' | 'claimed_no_key' | 'account', accountLinked?: boolean): string;
+export declare const SETUP_UNCONFIRMED_TEXT: string;
+/** `modeReason`: the fixed code that explains a fallback (pickFallbackReason); only read when the machine is not account-linked. */
+export declare function seatbeltStopText(category: string, rule: string, reason: string, mode: 'seatbelt' | 'claimed_no_key' | 'account', accountLinked?: boolean, modeReason?: string): string;
 /** §4.2: an S0-S5 floor stop is lifted only by an enforced server allow (a verified permit); an advisory allow never lifts it. */
 export declare function accountFloorStops(rollout: 'watch' | 'on', floor: Pick<SeatbeltDecision, 'decision'> | null, server: 'enforced_allow' | 'advisory_allow' | 'deny' | 'none'): boolean;
 /** The mapper's file view over the host. Missing: null. A failure the mapper must not guess about throws (it stops on fs_error). */
@@ -49,9 +51,26 @@ export interface KeylessOutcome {
      * the hook gives master's answer for that host instead of the seatbelt pass.
      */
     recognized: boolean;
+    /**
+     * Why the machine is in the stricter fallback: one fixed code from the resolver's reasons, or
+     * `setup_unconfirmed`. Words only: it never changes the mode or a decision.
+     */
+    modeReason: string;
 }
 /** The keyless branch of the hook: mode (U4), then the mapper (U2) with the U3 resolvers. Never throws. */
 export declare function keylessSeatbelt(harness: string, event: SeatbeltHookEvent): KeylessOutcome;
+export interface SeatbeltStatus {
+    mode: 'seatbelt' | 'claimed_no_key' | 'account';
+    reasons: string[];
+}
+/**
+ * What `marrow-mcp seatbelt-status` prints (the installer's doctor reads it): the mode this machine's
+ * hook would be in right now, from the same resolution the keyless hook runs (same key lookup, same
+ * rollout table), and the resolver's reason codes that are on a closed list. Reads only; writes no file
+ * or state, opens no connection, and names no key, path, user or environment value. Throws when the
+ * resolution does (the caller prints the unknown line).
+ */
+export declare function seatbeltStatus(): SeatbeltStatus;
 /**
  * The account floor. `watch`: computed after the answer, for the record only; it never throws and
  * never writes output. `on` (not active): run before the server flow; a returned text is a stop.

package/dist/seatbelt/hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/seatbelt/hook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAe,UAAU,IAAI,QAAQ,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;CAGrG,CAAC;AAEH,qGAAqG;AACrG,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,eAAO,MAAM,mBAAmB,iHAAiH,CAAC;AAClJ;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,sLAAsL,CAAC;AAmB1N,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,EAAE,aAAa,UAAO,GAAG,MAAM,CAO9J;AAED,kIAAkI;AAClI,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,EACvB,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG,IAAI,EAChD,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAC5D,OAAO,CAGT;AAuBD,oIAAoI;AACpI,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CA+BtD;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,CA6ElG;AAcD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,4GAA4G;IAC5G,GAAG,EAAE,OAAO,CAAC;IACb,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA6BD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oHAAoH;IACpH,aAAa,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,cAAc,CA8BzF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBzG;AAKD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;CAAE,CAmBlI"}
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/seatbelt/hook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAe,UAAU,IAAI,QAAQ,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIjD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;CAGrG,CAAC;AAEH,qGAAqG;AACrG,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,eAAO,MAAM,mBAAmB,iHAAiH,CAAC;AAClJ;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,QAAuC,CAAC;AA8B3E,oIAAoI;AACpI,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,EAAE,aAAa,UAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQnL;AAED,kIAAkI;AAClI,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,EACvB,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG,IAAI,EAChD,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAC5D,OAAO,CAGT;AAuBD,oIAAoI;AACpI,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CA+BtD;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,CA6ElG;AAcD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,4GAA4G;IAC5G,GAAG,EAAE,OAAO,CAAC;IACb,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA6BD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oHAAoH;IACpH,aAAa,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,cAAc,CAiCzF;AAKD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI,cAAc,CAM/C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBzG;AAKD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;CAAE,CAmBlI"}

package/dist/seatbelt/hook.js

@@ -6,8 +6,10 @@ exports.accountFloorStops = accountFloorStops;
 exports.hostMapperFs = hostMapperFs;
 exports.hostSeatbeltGit = hostSeatbeltGit;
 exports.keylessSeatbelt = keylessSeatbelt;
+exports.seatbeltStatus = seatbeltStatus;
 exports.accountFloor = accountFloor;
 exports.outageRisk = outageRisk;
+const fallback_copy_1 = require("./fallback-copy");
 /**
  * Compiled-in rollout table. Not env, not a file: changing a value is a one-line, reviewed code
  * change. `keyless: 'off'` makes every keyless machine `claimed_no_key` (3.9.103 holds plus the
@@ -24,14 +26,15 @@ exports.CLAIMED_NO_KEY_TEXT = 'Marrow is linked to an account but has no working
  * `claimed_no_key` with no account evidence and no rejected key: a fallback because the machine's
  * setup could not be confirmed (an evidence dir others can write, an unreadable probe, a home
  * mismatch, strict mode). Same holds as CLAIMED_NO_KEY_TEXT, but it never claims an account exists.
+ * This constant is the generic wording; a hold names its reason (setupUnconfirmedText, fallback-copy.ts).
  */
-exports.SETUP_UNCONFIRMED_TEXT = 'Marrow has no working key on this machine and its keyless mode is off here (strict mode, or a home folder it cannot trust); owner: run `npx -y @getmarrow/install@latest doctor`.';
+exports.SETUP_UNCONFIRMED_TEXT = (0, fallback_copy_1.setupUnconfirmedText)(fallback_copy_1.FALLBACK_OTHER);
 const LABELS = {
     S0: 'a change to Marrow seatbelt settings or an owner-only command',
     S1: 'force-push or delete of a protected branch',
     S2: 'production deploy',
     S3: 'package publish',
-    S4: 'credential or secret access',
+    S4: 'reading, copying or writing secrets (like .env files or private keys)',
     S5: 'recursive delete outside the workspace',
     Sx: 'obfuscated execution',
     hook: 'a safety check that could not finish',
@@ -40,14 +43,26 @@ const CODE = /^[A-Za-z0-9_.:-]{1,64}$/;
 function codes(list) {
     return Array.isArray(list) ? list.filter((item) => typeof item === 'string' && CODE.test(item)).slice(0, 16) : [];
 }
-function seatbeltStopText(category, rule, reason, mode, accountLinked = true) {
+/** What the agent and the person read after the label, in every stop. */
+const STOP_ADVICE = 'If you (the person at this machine) meant it, run it yourself in your own terminal. Agent: do not retry it another way and do not edit Marrow settings; tell the user it was stopped.';
+/** Keyless (no account): the way to approval prompts. The plugin path is the one the plugin's own docs give. */
+const KEYLESS_KEY_ADVICE = 'For approval prompts instead of stops, add a Marrow key: getmarrow.ai/docs#start-here (Claude Code plugin: put MARROW_API_KEY in ~/.marrow/env, chmod 600, then /reload-plugins).';
+/** The label of a stop. A script Marrow could not read is named as such: it is not known to be what its name says. */
+function stopLabel(category, reason) {
     const label = LABELS[category] || LABELS.hook;
-    const head = `MARROW SEATBELT stopped this action: ${label} (${CODE.test(rule) ? rule : 'unknown'}, ${CODE.test(reason) ? reason : 'unknown'}). This needs the machine owner. Do not retry it another way or edit Marrow settings.`;
+    return reason === 'script_unreadable' ? `a script Marrow could not read (treated as ${label})` : label;
+}
+/** `modeReason`: the fixed code that explains a fallback (pickFallbackReason); only read when the machine is not account-linked. */
+function seatbeltStopText(category, rule, reason, mode, accountLinked = true, modeReason) {
+    const head = `MARROW SEATBELT stopped this action: ${stopLabel(category, reason)}. ${STOP_ADVICE}`;
+    const code = `Code: ${CODE.test(rule) ? rule : 'unknown'}/${CODE.test(reason) ? reason : 'unknown'}`;
     if (mode === 'account')
-        return `${head} Tell the owner: run it yourself in your own terminal.`;
-    return mode === 'seatbelt'
-        ? `${head} Tell the owner: run it yourself in your own terminal, or link a Marrow account with "npx -y @getmarrow/install@latest activate" (it needs MARROW_API_KEY set first) so these become approval prompts.`
-        : `${head} ${accountLinked ? exports.CLAIMED_NO_KEY_TEXT : exports.SETUP_UNCONFIRMED_TEXT}`;
+        return `${head} ${code}.`;
+    if (mode === 'seatbelt')
+        return `${head} ${KEYLESS_KEY_ADVICE} ${code}.`;
+    return accountLinked
+        ? `${head} ${exports.CLAIMED_NO_KEY_TEXT} ${code}.`
+        : `${head} ${(0, fallback_copy_1.fallbackSentence)(modeReason)} ${code}; mode: ${(0, fallback_copy_1.fallbackCode)(modeReason)}.`;
 }
 /** §4.2: an S0-S5 floor stop is lifted only by an enforced server allow (a verified permit); an advisory allow never lifts it. */
 function accountFloorStops(rollout, floor, server) {
@@ -260,16 +275,19 @@ function keylessSeatbelt(harness, event) {
     const started = Date.now();
     let mode = 'claimed_no_key';
     let accountLinked = false;
+    // A resolution that fails or has no reason keeps the generic code.
+    let modeReason = fallback_copy_1.FALLBACK_OTHER;
     let trustedHome;
     const stop = (reason) => {
         record({ v: 1, mode, enforcement: 'enforce', harness, decision: 'stop', category: 'hook', rule: 'U5.fail_closed', reasons: [reason], flags: [], parse: 'unparsed', latency_ms: Date.now() - started }, event, trustedHome);
-        return { mode, accountLinked, recognized: true, stopText: seatbeltStopText('hook', 'U5.fail_closed', reason, mode, accountLinked) };
+        return { mode, accountLinked, recognized: true, modeReason, stopText: seatbeltStopText('hook', 'U5.fail_closed', reason, mode, accountLinked, modeReason) };
     };
     try {
         const { resolveSeatbeltModeOnHost } = require('../seatbelt-mode');
         const resolution = resolveSeatbeltModeOnHost();
         mode = resolution.mode === 'seatbelt' && exports.SEATBELT_ROLLOUT.keyless === 'on' ? 'seatbelt' : 'claimed_no_key';
         accountLinked = resolution.reasons.includes('account_evidence') || resolution.reasons.includes('key_rejected');
+        modeReason = (0, fallback_copy_1.pickFallbackReason)(resolution.reasons);
         if (event.truncated)
             return stop('input_truncated');
         const home = resolution.homes[0] || passwdHome() || '/nonexistent-home';
@@ -284,13 +302,29 @@ function keylessSeatbelt(harness, event) {
             reasons, flags: codes(decision.flags), parse: CODE.test(decision.parse) ? decision.parse : 'unknown', latency_ms: Date.now() - started,
         }, event, home);
         if (decision.decision === 'pass')
-            return { mode, accountLinked, recognized: decision.recognized === true, stopText: null };
-        return { mode, accountLinked, recognized: true, stopText: seatbeltStopText(decision.category, decision.rule, reasons[0] || 'unspecified', mode, accountLinked) };
+            return { mode, accountLinked, recognized: decision.recognized === true, modeReason, stopText: null };
+        return { mode, accountLinked, recognized: true, modeReason, stopText: seatbeltStopText(decision.category, decision.rule, reasons[0] || 'unspecified', mode, accountLinked, modeReason) };
     }
     catch {
         return stop('hook_error');
     }
 }
+/** The reason codes mode resolution can emit (src/seatbelt-mode.ts), the only ones the status line may print. */
+const STATUS_REASONS = ['strict', 'key_rejected', 'home_unknown', 'home_unusable', 'env_home_unusable', 'home_mismatch', 'account_evidence', 'evidence_unknown'];
+/**
+ * What `marrow-mcp seatbelt-status` prints (the installer's doctor reads it): the mode this machine's
+ * hook would be in right now, from the same resolution the keyless hook runs (same key lookup, same
+ * rollout table), and the resolver's reason codes that are on a closed list. Reads only; writes no file
+ * or state, opens no connection, and names no key, path, user or environment value. Throws when the
+ * resolution does (the caller prints the unknown line).
+ */
+function seatbeltStatus() {
+    const { resolveSeatbeltModeOnHost } = require('../seatbelt-mode');
+    const resolution = resolveSeatbeltModeOnHost({ argv: [] });
+    const mode = resolution.mode === 'seatbelt' && exports.SEATBELT_ROLLOUT.keyless !== 'on' ? 'claimed_no_key' : resolution.mode;
+    const reasons = STATUS_REASONS.filter((code) => resolution.reasons.includes(code));
+    return { mode, reasons };
+}
 /**
  * The account floor. `watch`: computed after the answer, for the record only; it never throws and
  * never writes output. `on` (not active): run before the server flow; a returned text is a stop.