@getmarrow/mcp 3.9.103 → 3.9.107

package/dist/seatbelt/env-dump.d.ts

@@ -0,0 +1,66 @@
+/** S4 reasons that mean "prints the environment". The keyed hook keeps only these from a mapper run. */
+export declare const ENV_DUMP_REASONS: ReadonlySet<string>;
+/**
+ * Programs that run the command at the end of their argv with a grammar the mapper does not model. A bare `env` or
+ * `printenv` as their last word is that command, not a name (`python -m venv env` and `conda activate env` stay fine:
+ * those programs are not listed).
+ */
+export declare const EXEC_WRAPPERS: ReadonlySet<string>;
+/** `compgen -e`, `-v`, `-A export` and `-A variable` list the names of the environment's variables. */
+export declare function compgenListsVariables(args: ReadonlyArray<string | null>): boolean;
+/** `tmux [options] show-environment` (also `showenv`, a unique prefix, and a command after `\\;`) prints a session's variables. */
+export declare function tmuxShowsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/** `systemctl [--user] show-environment` prints the manager's environment. */
+export declare function systemctlShowsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/**
+ * BSD `ps e`, `ps auxe`, `ps eww` and `ps -E` print every process's environment. A word of letters that holds `e`, or a dash
+ * cluster that holds `E`, outside the value of an option (`ps -p 1 -o etime` asks for a column, not the environment).
+ */
+export declare function psPrintsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/** The older, looser reading of `ps`: any word of letters that holds `e`, option values included. The keyless seatbelt keeps stopping it. */
+export declare function psLooselyPrintsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/** The environment object in a jq filter: `env`, `$ENV` (not a `.env` field, a key, or text in a string). */
+export declare function jqFilterReadsEnvironment(filter: string): boolean;
+/** The filter of a jq command line: the first word that is not an option or an option's value. With -f the program is a file: none. */
+export declare function jqFilters(args: ReadonlyArray<string | null>): string[];
+/** `npm run env` (also pnpm, yarn and bun) runs npm's built-in `env` script, which prints the environment. */
+export declare function packageRunsEnvScript(args: ReadonlyArray<string | null>): boolean;
+export { PROC_ENVIRON, PROC_PROCESS_TREE } from '../secret-paths';
+/** A glob that can name `environ`: `/proc/self/env*`, `/proc/1/*`, `/proc/self/task/1/e[n]viron`. */
+export declare function procGlobMatchesEnviron(path: string): boolean;
+/** `/proc`, `/proc/<pid>` and `/proc/<pid>/task[/<tid>]`: a folder whose recursive read reaches every `environ` under it. */
+export declare const PROC_PROCESS_DIRECTORY: RegExp;
+/** Programs that read or copy every file under a folder named to them. */
+export declare const RECURSIVE_READERS: ReadonlySet<string>;
+/**
+ * Inline interpreter code that can start a command (`system`, `exec*`, `popen`, `spawn*`, `passthru`, `proc_open`, `shell_exec`, Lua's `os.execute`,
+ * Perl `qx`, backticks, Node's `child_process`, Python's `subprocess`). Used only to decide that a bare `env` / `printenv` operand of the same command
+ * line is the command it starts (`perl -e 'system(shift)' env`); code that cannot start a command leaves the operand a plain name.
+ */
+export declare const CODE_STARTS_COMMAND: RegExp;
+/** awk code that can start a command: `system(` or a pipe to or from one (not `||`). A bare `getline` reads a file. */
+export declare const AWK_STARTS_COMMAND: RegExp;
+/**
+ * Shell code whose command word is an expansion (`"$@"`, `$1`, `$0`, `exec "$@"`, `eval "$1"`, `then $x`): the words after the script text are
+ * its positional parameters, and it runs one of them as a command. The captured character names the expansion (`@` or `*` all of them, a digit one
+ * of them, a letter a variable that may hold one).
+ */
+export declare const SHELL_RUNS_EXPANSION: RegExp;
+/** Interpreter code that reads its environment (`ENVIRON["X"]`, `$ENV{X}`, `os.environ`, `process.env`, `getenv`, `ENV["X"]`). */
+export declare const CODE_READS_ENVIRONMENT: RegExp;
+/**
+ * A word a command-running helper may run: the environment printer itself (`env`, `/usr/bin/printenv -0`) or a command line that holds one
+ * (`sh -c env`, `command printenv`). A one-word operand that only mentions `env` (`echo`'s argument) is not one unless it starts with it.
+ */
+export declare function mayRunEnvPrinter(word: string): boolean;
+/** Variables whose value runs as a command: a pager, editor, askpass or diff helper set to `env` prints the environment. */
+export declare const HELPER_ENV_VARS: ReadonlySet<string>;
+/** A command word that is the environment printer, alone or followed by arguments. */
+export declare const ENV_PRINTER_COMMAND: RegExp;
+/** `man -P env`, `man --pager=printenv`: the pager is the command. */
+export declare function manPagerPrintsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/** strace shows the whole environment of an exec it traces unless its strings are abbreviated: `-v`, `--no-abbrev`, `-e abbrev=none`, `-e verbose=...`. */
+export declare function straceShowsEnvironment(args: ReadonlyArray<string | null>): boolean;
+/** `tmux send-keys env Enter`, `tmux new -d printenv`, `tmux run-shell env`: a command window or pane runs the environment printer. */
+export declare function tmuxRunsEnvironmentPrinter(args: ReadonlyArray<string | null>): boolean;
+//# sourceMappingURL=env-dump.d.ts.map

package/dist/seatbelt/env-dump.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-dump.d.ts","sourceRoot":"","sources":["../../src/seatbelt/env-dump.ts"],"names":[],"mappings":"AAKA,wGAAwG;AACxG,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAI/C,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAI5C,CAAC;AAIH,uGAAuG;AACvG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAWjF;AAOD,mIAAmI;AACnI,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAYhF;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAErF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAqB/E;AAED,6IAA6I;AAC7I,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAEtF;AAED,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGhE;AAED,uIAAuI;AACvI,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,CAWtE;AAID,8GAA8G;AAC9G,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAUhF;AAED,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAElE,qGAAqG;AACrG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAiB5D;AAED,6HAA6H;AAC7H,eAAO,MAAM,sBAAsB,QAAmD,CAAC;AAEvF,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAgH,CAAC;AAEnK;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QAAiL,CAAC;AAElN,uHAAuH;AACvH,eAAO,MAAM,kBAAkB,QAA6C,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,QAA8I,CAAC;AAEhL,kIAAkI;AAClI,eAAO,MAAM,sBAAsB,QAAyE,CAAC;AAE7G;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,4HAA4H;AAC5H,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAC4E,CAAC;AAE7H,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,QAA2C,CAAC;AAE5E,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CASrF;AAED,2JAA2J;AAC3J,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAkBlF;AAQD,uIAAuI;AACvI,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAetF"}

package/dist/seatbelt/env-dump.js

@@ -0,0 +1,333 @@
+"use strict";
+// Env-dump forms: the command shapes this table knows that print many or all environment variables (a known list, not every command a shell can run).
+// One table for both modes: the keyless seatbelt mapper stops them (S4) and the keyed hook policy
+// holds them (hook-tool-policy.ts asks the mapper and keeps only the reasons named here). Pure
+// word-level predicates over literal arguments; no file contents are read.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENV_PRINTER_COMMAND = exports.HELPER_ENV_VARS = exports.CODE_READS_ENVIRONMENT = exports.SHELL_RUNS_EXPANSION = exports.AWK_STARTS_COMMAND = exports.CODE_STARTS_COMMAND = exports.RECURSIVE_READERS = exports.PROC_PROCESS_DIRECTORY = exports.PROC_PROCESS_TREE = exports.PROC_ENVIRON = exports.EXEC_WRAPPERS = exports.ENV_DUMP_REASONS = void 0;
+exports.compgenListsVariables = compgenListsVariables;
+exports.tmuxShowsEnvironment = tmuxShowsEnvironment;
+exports.systemctlShowsEnvironment = systemctlShowsEnvironment;
+exports.psPrintsEnvironment = psPrintsEnvironment;
+exports.psLooselyPrintsEnvironment = psLooselyPrintsEnvironment;
+exports.jqFilterReadsEnvironment = jqFilterReadsEnvironment;
+exports.jqFilters = jqFilters;
+exports.packageRunsEnvScript = packageRunsEnvScript;
+exports.procGlobMatchesEnviron = procGlobMatchesEnviron;
+exports.mayRunEnvPrinter = mayRunEnvPrinter;
+exports.manPagerPrintsEnvironment = manPagerPrintsEnvironment;
+exports.straceShowsEnvironment = straceShowsEnvironment;
+exports.tmuxRunsEnvironmentPrinter = tmuxRunsEnvironmentPrinter;
+/** S4 reasons that mean "prints the environment". The keyed hook keeps only these from a mapper run. */
+exports.ENV_DUMP_REASONS = new Set([
+    'env_dump_env', 'env_dump_set', 'env_dump_export', 'env_dump_declare', 'env_dump_declare_secret', 'env_dump_readonly', 'env_dump_printenv',
+    'env_dump_printenv_secret', 'interpreter_env_dump', 'ps_environment', 'proc_environ', 'env_dump_compgen', 'env_dump_tmux', 'env_dump_systemctl',
+    'env_dump_jq', 'env_dump_strace', 'env_dump_php_info', 'env_dump_npm_run_env', 'tripwire_secret_dumper', 'echo_secret_var',
+]);
+/**
+ * Programs that run the command at the end of their argv with a grammar the mapper does not model. A bare `env` or
+ * `printenv` as their last word is that command, not a name (`python -m venv env` and `conda activate env` stay fine:
+ * those programs are not listed).
+ */
+exports.EXEC_WRAPPERS = new Set([
+    'setpriv', 'unshare', 'runuser', 'nsenter', 'chroot', 'fakeroot', 'fakeroot-sysv', 'fakechroot', 'systemd-run', 'firejail', 'bwrap', 'strace', 'ltrace',
+    'sg', 'proot', 'torsocks', 'proxychains', 'proxychains4', 'tsocks', 'xvfb-run', 'dbus-run-session', 'cross-env', 'env-cmd', 'dotenv', 'dotenvx', 'direnv',
+    'sandbox-exec', 'cgexec', 'sshpass', 'chronic', 'rlwrap',
+]);
+const letters = (text) => /^[a-zA-Z]+$/.test(text);
+/** `compgen -e`, `-v`, `-A export` and `-A variable` list the names of the environment's variables. */
+function compgenListsVariables(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--')
+            return false;
+        if (/^-A./.test(a)) {
+            if (/^(?:export|variable)$/.test(a.slice(2)))
+                return true;
+            continue;
+        }
+        if (a === '-A') {
+            const v = args[i + 1];
+            if (v === 'export' || v === 'variable')
+                return true;
+            i += 1;
+            continue;
+        }
+        if (/^-[oGWFCXPS]$/.test(a)) {
+            i += 1;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a) && /[ev]/.test(a.slice(1).replace(/[oGWFCXPS].*$/, '')))
+            return true;
+    }
+    return false;
+}
+/** tmux accepts any unambiguous prefix of a command name or alias: `show-e` and `showe` are show-environment. */
+function tmuxShowEnvironmentWord(word) {
+    return (word.length >= 6 && 'show-environment'.startsWith(word)) || (word.length >= 5 && 'showenv'.startsWith(word));
+}
+/** `tmux [options] show-environment` (also `showenv`, a unique prefix, and a command after `\\;`) prints a session's variables. */
+function tmuxShowsEnvironment(args) {
+    let i = 0;
+    // Global options come before the first command: -S, -L, -f, -c and -T take a value.
+    while (i < args.length && args[i] !== null && args[i].startsWith('-') && args[i] !== '-')
+        i += /^-[SLfcT]$/.test(args[i]) ? 2 : 1;
+    let commandStart = true;
+    for (; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === ';' || a === '\\;') {
+            commandStart = true;
+            continue;
+        }
+        if (a !== null && commandStart && tmuxShowEnvironmentWord(a))
+            return true;
+        commandStart = false;
+    }
+    return false;
+}
+/** `systemctl [--user] show-environment` prints the manager's environment. */
+function systemctlShowsEnvironment(args) {
+    return args.some((a) => a === 'show-environment');
+}
+/**
+ * BSD `ps e`, `ps auxe`, `ps eww` and `ps -E` print every process's environment. A word of letters that holds `e`, or a dash
+ * cluster that holds `E`, outside the value of an option (`ps -p 1 -o etime` asks for a column, not the environment).
+ */
+function psPrintsEnvironment(args) {
+    const longWithValue = /^--(?:sort|pid|ppid|user|User|group|Group|tty|sid|format|cols|columns|width|lines|rows|quick-pid)$/;
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a.startsWith('--')) {
+            if (longWithValue.test(a))
+                i += 1;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a)) {
+            for (let k = 1; k < a.length; k += 1) {
+                if (a[k] === 'E')
+                    return true;
+                if ('oOpquUgGstCnND'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+            continue;
+        }
+        if (letters(a)) {
+            for (let k = 0; k < a.length; k += 1) {
+                if (a[k] === 'e')
+                    return true;
+                if ('oOpqUgGstCnND'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+        }
+    }
+    return false;
+}
+/** The older, looser reading of `ps`: any word of letters that holds `e`, option values included. The keyless seatbelt keeps stopping it. */
+function psLooselyPrintsEnvironment(args) {
+    return args.some((a) => a !== null && letters(a) && a.includes('e'));
+}
+/** The environment object in a jq filter: `env`, `$ENV` (not a `.env` field, a key, or text in a string). */
+function jqFilterReadsEnvironment(filter) {
+    const code = filter.replace(/"(?:[^"\\]|\\.)*"/g, '""');
+    return /\$ENV\b/.test(code) || /(?<![.$\w])env\b(?!\s*[:,}])/.test(code);
+}
+/** The filter of a jq command line: the first word that is not an option or an option's value. With -f the program is a file: none. */
+function jqFilters(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--arg' || a === '--argjson' || a === '--slurpfile' || a === '--rawfile') {
+            i += 2;
+            continue;
+        }
+        if (a === '--indent') {
+            i += 1;
+            continue;
+        }
+        if (a === '--from-file' || /^-[a-zA-Z]*f$/.test(a))
+            return [];
+        if (a.startsWith('-') && a !== '-')
+            continue;
+        return [a];
+    }
+    return [];
+}
+const RUN_SCRIPT_WORDS = new Set(['run', 'run-script', 'rum', 'urn']);
+/** `npm run env` (also pnpm, yarn and bun) runs npm's built-in `env` script, which prints the environment. */
+function packageRunsEnvScript(args) {
+    const at = args.findIndex((a) => a !== null && RUN_SCRIPT_WORDS.has(a));
+    if (at < 0)
+        return false;
+    for (let i = at + 1; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            return false;
+        if (a.startsWith('-')) {
+            if (a === '--prefix' || a === '-C' || a === '--workspace' || a === '-w' || a === '--cwd')
+                i += 1;
+            continue;
+        }
+        return a === 'env';
+    }
+    return false;
+}
+var secret_paths_1 = require("../secret-paths");
+Object.defineProperty(exports, "PROC_ENVIRON", { enumerable: true, get: function () { return secret_paths_1.PROC_ENVIRON; } });
+Object.defineProperty(exports, "PROC_PROCESS_TREE", { enumerable: true, get: function () { return secret_paths_1.PROC_PROCESS_TREE; } });
+/** A glob that can name `environ`: `/proc/self/env*`, `/proc/1/*`, `/proc/self/task/1/e[n]viron`. */
+function procGlobMatchesEnviron(path) {
+    const m = /^\/proc\/[^/]+\/(?:task\/[^/]+\/)?([^/]*[*?[][^/]*)$/.exec(path);
+    if (!m)
+        return false;
+    let source = '';
+    for (let i = 0; i < m[1].length; i += 1) {
+        const ch = m[1][i];
+        if (ch === '*')
+            source += '.*';
+        else if (ch === '?')
+            source += '.';
+        else if (ch === '[') {
+            const end = m[1].indexOf(']', i + 2);
+            if (end < 0)
+                return true;
+            const body = m[1].slice(i + 1, end).replace(/^[!^]/, '');
+            source += `[${body.replace(/[\\\]^]/g, '\\$&')}]`;
+            i = end;
+        }
+        else
+            source += ch.replace(/[.+^${}()|\\]/g, '\\$&');
+    }
+    try {
+        return new RegExp(`^${source}$`).test('environ');
+    }
+    catch {
+        return true;
+    }
+}
+/** `/proc`, `/proc/<pid>` and `/proc/<pid>/task[/<tid>]`: a folder whose recursive read reaches every `environ` under it. */
+exports.PROC_PROCESS_DIRECTORY = /^\/proc(?:\/[^/]+(?:\/task(?:\/[^/]+)?)?)?\/?$/;
+/** Programs that read or copy every file under a folder named to them. */
+exports.RECURSIVE_READERS = new Set(['grep', 'egrep', 'fgrep', 'rg', 'ag', 'ack', 'tar', 'gtar', 'bsdtar', 'cp', 'rsync', 'zip', 'scp']);
+/**
+ * Inline interpreter code that can start a command (`system`, `exec*`, `popen`, `spawn*`, `passthru`, `proc_open`, `shell_exec`, Lua's `os.execute`,
+ * Perl `qx`, backticks, Node's `child_process`, Python's `subprocess`). Used only to decide that a bare `env` / `printenv` operand of the same command
+ * line is the command it starts (`perl -e 'system(shift)' env`); code that cannot start a command leaves the operand a plain name.
+ */
+exports.CODE_STARTS_COMMAND = /\b(?:system|exec(?:l[pe]?|v[pe]{0,2}|ute|File(?:Sync)?|Sync)?|fork|qx|Open3|passthru|shell_exec)\b|spawn(?:Sync|[lv][pe]{0,2})?\b|popen|proc_open|child_process|subprocess|`/;
+/** awk code that can start a command: `system(` or a pipe to or from one (not `||`). A bare `getline` reads a file. */
+exports.AWK_STARTS_COMMAND = /\bsystem\s*\(|(?<!\|)\|&?\s*["'$a-zA-Z(]/;
+/**
+ * Shell code whose command word is an expansion (`"$@"`, `$1`, `$0`, `exec "$@"`, `eval "$1"`, `then $x`): the words after the script text are
+ * its positional parameters, and it runs one of them as a command. The captured character names the expansion (`@` or `*` all of them, a digit one
+ * of them, a letter a variable that may hold one).
+ */
+exports.SHELL_RUNS_EXPANSION = /(?:^|[;&|({\n]|\b(?:exec|eval|command|builtin|nohup|time|sudo|env|xargs|nice|timeout|setsid|then|else|do))\s*["']?\$\{?([@*0-9A-Za-z_#!])/;
+/** Interpreter code that reads its environment (`ENVIRON["X"]`, `$ENV{X}`, `os.environ`, `process.env`, `getenv`, `ENV["X"]`). */
+exports.CODE_READS_ENVIRONMENT = /\bENVIRON\b|\bENV\b|\benviron\b|getenv|process\.env|\$_ENV|\$_SERVER/;
+/**
+ * A word a command-running helper may run: the environment printer itself (`env`, `/usr/bin/printenv -0`) or a command line that holds one
+ * (`sh -c env`, `command printenv`). A one-word operand that only mentions `env` (`echo`'s argument) is not one unless it starts with it.
+ */
+function mayRunEnvPrinter(word) {
+    return exports.ENV_PRINTER_COMMAND.test(word) || (/\s/.test(word) && /\b(?:env|printenv)\b/.test(word));
+}
+/** Variables whose value runs as a command: a pager, editor, askpass or diff helper set to `env` prints the environment. */
+exports.HELPER_ENV_VARS = new Set(['PAGER', 'GIT_PAGER', 'MANPAGER', 'EDITOR', 'VISUAL', 'GIT_EDITOR', 'GIT_SEQUENCE_EDITOR', 'GIT_EXTERNAL_DIFF',
+    'GIT_SSH_COMMAND', 'GIT_SSH', 'GIT_ASKPASS', 'SSH_ASKPASS', 'BROWSER', 'LESSOPEN', 'GIT_PROXY_COMMAND', 'PROMPT_COMMAND']);
+/** A command word that is the environment printer, alone or followed by arguments. */
+exports.ENV_PRINTER_COMMAND = /^\s*(?:\S*\/)?(?:env|printenv)(?:\s|$)/;
+/** `man -P env`, `man --pager=printenv`: the pager is the command. */
+function manPagerPrintsEnvironment(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if ((a === '-P' || a === '--pager') && args[i + 1] != null && exports.ENV_PRINTER_COMMAND.test(args[i + 1]))
+            return true;
+        const m = /^(?:--pager=|-P)([\s\S]+)$/.exec(a);
+        if (m && exports.ENV_PRINTER_COMMAND.test(m[1]))
+            return true;
+    }
+    return false;
+}
+/** strace shows the whole environment of an exec it traces unless its strings are abbreviated: `-v`, `--no-abbrev`, `-e abbrev=none`, `-e verbose=...`. */
+function straceShowsEnvironment(args) {
+    for (let i = 0; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === '--')
+            return false;
+        if (a === '--no-abbrev')
+            return true;
+        if (a === '-e' || a === '--trace' || a === '--abbrev' || a === '--verbose') {
+            if (/(?:abbrev\s*=\s*none|verbose)/.test(String(args[i + 1] ?? '')))
+                return true;
+            i += a === '-e' || a === '--trace' ? 1 : 0;
+            continue;
+        }
+        if (/^-e./.test(a)) {
+            if (/(?:abbrev\s*=\s*none|verbose)/.test(a))
+                return true;
+            continue;
+        }
+        if (/^-[a-zA-Z]+$/.test(a)) {
+            for (let k = 1; k < a.length; k += 1) {
+                if (a[k] === 'v')
+                    return true;
+                if ('eopsEuOSabPIUX'.includes(a[k])) {
+                    if (k === a.length - 1)
+                        i += 1;
+                    break;
+                }
+            }
+            continue;
+        }
+        if (!a.startsWith('-'))
+            return false;
+    }
+    return false;
+}
+const TMUX_COMMAND_VALUE_FLAGS = {
+    'send-keys': 'tNc', send: 'tNc', 'run-shell': 'cdt', run: 'cdt', 'new-session': 'cefFnstxy', new: 'cefFnstxy', 'new-window': 'cenFt', neww: 'cenFt',
+    'split-window': 'ceFltp', splitw: 'ceFltp', 'respawn-pane': 'cet', respawnp: 'cet', 'respawn-window': 'cet', respawnw: 'cet', 'pipe-pane': 't', pipep: 't',
+    'if-shell': 't', if: 't',
+};
+/** `tmux send-keys env Enter`, `tmux new -d printenv`, `tmux run-shell env`: a command window or pane runs the environment printer. */
+function tmuxRunsEnvironmentPrinter(args) {
+    let i = 0;
+    while (i < args.length && args[i] !== null && args[i].startsWith('-') && args[i] !== '-')
+        i += /^-[SLfcT]$/.test(args[i]) ? 2 : 1;
+    const name = args[i];
+    if (name === null || name === undefined || !(name in TMUX_COMMAND_VALUE_FLAGS))
+        return false;
+    const valueFlags = TMUX_COMMAND_VALUE_FLAGS[name];
+    for (i += 1; i < args.length; i += 1) {
+        const a = args[i];
+        if (a === null)
+            continue;
+        if (a === ';' || a === '\\;')
+            return false;
+        if (/^-[a-zA-Z]$/.test(a) && valueFlags.includes(a[1])) {
+            i += 1;
+            continue;
+        }
+        if (a.startsWith('-') && a.length > 1)
+            continue;
+        if (/^(?:\S*\/)?(?:env|printenv)$/.test(a))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=env-dump.js.map

package/dist/seatbelt/env-dump.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-dump.js","sourceRoot":"","sources":["../../src/seatbelt/env-dump.ts"],"names":[],"mappings":";AAAA,sJAAsJ;AACtJ,kGAAkG;AAClG,+FAA+F;AAC/F,2EAA2E;;;AAuB3E,sDAWC;AAQD,oDAYC;AAGD,8DAEC;AAMD,kDAqBC;AAGD,gEAEC;AAGD,4DAGC;AAGD,8BAWC;AAKD,oDAUC;AAKD,wDAiBC;AAgCD,4CAEC;AAUD,8DASC;AAGD,wDAkBC;AASD,gEAeC;AApPD,wGAAwG;AAC3F,QAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB;IAC1I,0BAA0B,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB;IAC/I,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,iBAAiB;CAC3H,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;IACvJ,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;IACzJ,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ;CACzD,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEpE,uGAAuG;AACvG,SAAgB,qBAAqB,CAAC,IAAkC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACjH,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iHAAiH;AACjH,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,mIAAmI;AACnI,SAAgB,oBAAoB,CAAC,IAAkC;IACrE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,oFAAoF;IACpF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YAAC,YAAY,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,IAAI,YAAY,IAAI,uBAAuB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAgB,yBAAyB,CAAC,IAAkC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,IAAkC;IACpE,MAAM,aAAa,GAAG,oGAAoG,CAAC;IAC3H,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACjF,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6IAA6I;AAC7I,SAAgB,0BAA0B,CAAC,IAAkC;IAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,6GAA6G;AAC7G,SAAgB,wBAAwB,CAAC,MAAc;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,uIAAuI;AACvI,SAAgB,SAAS,CAAC,IAAkC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzG,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,aAAa,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QAC7C,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtE,8GAA8G;AAC9G,SAAgB,oBAAoB,CAAC,IAAkC;IACrE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO;gBAAE,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtI,OAAO,CAAC,KAAK,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gDAAkE;AAAzD,4GAAA,YAAY,OAAA;AAAE,iHAAA,iBAAiB,OAAA;AAExC,qGAAqG;AACrG,SAAgB,sBAAsB,CAAC,IAAY;IACjD,MAAM,CAAC,GAAG,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,IAAI,CAAC;aAC1B,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM,IAAI,GAAG,CAAC;aAC9B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC;YAClD,CAAC,GAAG,GAAG,CAAC;QACV,CAAC;;YAAM,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClF,CAAC;AAED,6HAA6H;AAChH,QAAA,sBAAsB,GAAG,gDAAgD,CAAC;AAEvF,0EAA0E;AAC7D,QAAA,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnK;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,8KAA8K,CAAC;AAElN,uHAAuH;AAC1G,QAAA,kBAAkB,GAAG,0CAA0C,CAAC;AAE7E;;;;GAIG;AACU,QAAA,oBAAoB,GAAG,2IAA2I,CAAC;AAEhL,kIAAkI;AACrH,QAAA,sBAAsB,GAAG,sEAAsE,CAAC;AAE7G;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,4HAA4H;AAC/G,QAAA,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,EAAE,mBAAmB;IACzK,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE7H,sFAAsF;AACzE,QAAA,mBAAmB,GAAG,wCAAwC,CAAC;AAE5E,sEAAsE;AACtE,SAAgB,yBAAyB,CAAC,IAAkC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3H,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2JAA2J;AAC3J,SAAgB,sBAAsB,CAAC,IAAkC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvN,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3F,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC9B,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACjF,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,wBAAwB,GAA2B;IACvD,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IACnJ,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG;IAC1J,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG;CACzB,CAAC;AAEF,uIAAuI;AACvI,SAAgB,0BAA0B,CAAC,IAAkC;IAC3E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,wBAAwB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAChD,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/seatbelt/env-names.d.ts

@@ -0,0 +1,22 @@
+/** `secret`: read as a secret env file by its name alone; `present`: `<name>.env`, which the shared table reads only where the file is there. */
+export type EnvNameKind = 'secret' | 'present' | null;
+/** The basename of a path as written (the last segment, a trailing slash ignored). */
+export declare function lastSegment(text: string): string;
+/**
+ * A basename the shared secret table reads as an env file: `.env`, `.env.<word>` (a template such as `.env.example` is not) and `.dev.vars`, whatever the case
+ * (the same case-blind reading the keyed policy has); `<name>.env` is `present`. The table stays the one source (src/secret-paths.ts): this only repeats
+ * its name rules for a word that is not yet a path.
+ */
+export declare function secretEnvBase(base: string): EnvNameKind;
+/** Names a glob that cannot be listed is judged against, besides the mapper's own samples: common secret env names a project holds. */
+export declare const ENV_NAME_CORPUS: readonly string[];
+/** The host side of a `-v`/`--volume` value `host:container[:options]`: the text before the first colon; null with no colon (an anonymous volume) or an empty host. */
+export declare function volumeHost(value: string): string | null;
+/** The `source=` / `src=` values of a `--mount` value (comma-separated `key=value` fields): every one, a repeated key included, whatever the mount type. */
+export declare function mountSources(value: string): string[];
+/**
+ * Whether a find `-regex` pattern matches any of the candidate paths (the whole path, as find matches it), read as emacs and as extended syntax.
+ * `unsure`: neither reading could be completed (unreadable syntax, too large, out of steps) and none matched.
+ */
+export declare function regexMatchesAny(pattern: string, candidates: readonly string[]): 'yes' | 'no' | 'unsure';
+//# sourceMappingURL=env-names.d.ts.map

package/dist/seatbelt/env-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-names.d.ts","sourceRoot":"","sources":["../../src/seatbelt/env-names.ts"],"names":[],"mappings":"AAKA,iJAAiJ;AACjJ,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;AAEtD,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAMvD;AAED,uIAAuI;AACvI,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAI5C,CAAC;AAEF,uKAAuK;AACvK,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvD;AAED,4JAA4J;AAC5J,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAOpD;AAoKD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,CAWvG"}