@inhuman.tools/policy 0.0.0-stage → 0.1.0

package/dist/tirith.js

@@ -0,0 +1,311 @@
+/**
+ * Host-side command inspection. The command is data, never shell source
+ * for the child. `analysis_incomplete` is not one threat: intel-gap
+ * (offline package lookup) is not a vote, nested-incomplete-only is
+ * remainder ask, concrete rules and scanner error keep today's map.
+ */
+import { execFile } from "node:child_process";
+import { mkdtemp, realpath, rm } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { findingSchema, outputSchema } from "./schemas/tirith.js";
+import { tirithUnits } from "./tirith-units.js";
+const policyRoot = fileURLToPath(new URL("../tirith-policy/", import.meta.url));
+const policyPath = path.join(policyRoot, ".tirith", "policy.yaml");
+const codes = { allow: 0, warn: 2, block: 1 };
+export function parseTirithOutput(stdout, code) {
+    const output = outputSchema.parse(JSON.parse(stdout));
+    if (codes[output.action] !== code)
+        throw new Error(`Tirith verdict disagrees with exit code ${code}`);
+    return output;
+}
+export function tirithFailure(error) {
+    return { action: "error", findings: [], error: error instanceof Error ? error.message : String(error) };
+}
+const INCOMPLETE_RULE = "analysis_incomplete";
+const INTERNAL_COPY = /tirith|getvet\.sh|policy\.yaml|scan\.require|operator policy|capsule command|--suggest/i;
+const BUDGET_NOTE = /nested body suffix omitted|bounded analysis|coverage gap/i;
+const INCOMPLETE_MESSAGE = "Policy safeguards were unable to classify this shell script's safety. It may be correct to use, but it is too complex for static analysis; try to produce a simpler or more explicit shell script that will do the same thing.";
+export function tirithCoverage(report) {
+    if (report.action === "error")
+        return "error";
+    if (report.findings.length === 0)
+        return "none";
+    if (report.findings.some((finding) => finding.rule_id !== INCOMPLETE_RULE))
+        return "concrete";
+    if (report.findings.every(isIntelGapFinding))
+        return "intel-gap";
+    return "incomplete";
+}
+function isIntelGapFinding(finding) {
+    const evidence = finding.evidence ?? [];
+    return evidence.length > 0 && evidence.every((item) => item.type === "threat_intel");
+}
+/** A block only when a finding is the attack itself. A coarse shape stays a question. */
+const HARD_BLOCK = new Set([
+    "pipe_to_interpreter",
+    "curl_pipe_shell",
+    "wget_pipe_shell",
+    "httpie_pipe_shell",
+    "xh_pipe_shell",
+    "base64_decode_execute",
+    "sudo_download_install",
+    "reverse_shell",
+    "proc_mem_access",
+    "docker_remote_priv_esc",
+    "plain_http_to_sink",
+    "schemeless_to_sink",
+    "insecure_tls_flags",
+    "userinfo_trick",
+    "non_ascii_hostname",
+    "shortened_url",
+    "metadata_endpoint",
+    "private_network_access",
+    "data_exfiltration",
+    "dotfile_overwrite",
+    "private_key_exposed",
+    "sudo_shell_spawn",
+    "sudo_env_preserve_sensitive",
+    "sudo_tee_system_file",
+    "sudo_recursive_perms_broad_path",
+    "blast_writes_system_path",
+    "blast_find_delete",
+    "blast_rsync_delete",
+    "wrapper_chain_too_deep",
+]);
+function hardBlock(report) {
+    return report.findings.some((finding) => HARD_BLOCK.has(finding.rule_id));
+}
+export function tirithDisposition(report) {
+    switch (tirithCoverage(report)) {
+        case "error":
+            return "block";
+        case "intel-gap":
+        case "none":
+            return "approve";
+        case "incomplete":
+            return "ask";
+        case "concrete":
+            if (report.action === "allow")
+                return "approve";
+            if (report.action === "warn")
+                return "ask";
+            return hardBlock(report) ? "block" : "ask";
+    }
+}
+/** Model-facing. Scanner identity stays in `policyEvidenceJson`. */
+export function tirithMessage(report) {
+    switch (tirithCoverage(report)) {
+        case "error":
+            return "Policy safeguards could not inspect this command.";
+        case "intel-gap":
+        case "none":
+            return null;
+        case "incomplete":
+            return withFragments(INCOMPLETE_MESSAGE, commandSnippets(report.findings));
+        case "concrete": {
+            const concrete = report.findings.filter((finding) => finding.rule_id !== INCOMPLETE_RULE);
+            const parts = concrete.map(findingAdvice).filter((part) => part !== "");
+            return parts.length === 0 ? null : parts.join("\n\n");
+        }
+    }
+}
+/** Classifier PIP. Concrete findings only — no-verdicts are not threats. */
+export function tirithPolicyCut(report) {
+    if (tirithCoverage(report) !== "concrete")
+        return "";
+    return tirithMessage(report) ?? "";
+}
+export function parseTirithEvidence(json) {
+    if (json == null || json === "")
+        return null;
+    try {
+        const parsed = JSON.parse(json);
+        if (!isRecord(parsed))
+            return null;
+        return asReport(parsed.tirith);
+    }
+    catch {
+        return null;
+    }
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asReport(value) {
+    if (!isRecord(value))
+        return null;
+    const action = value.action;
+    if (action !== "allow" && action !== "warn" && action !== "block" && action !== "error")
+        return null;
+    if (!Array.isArray(value.findings))
+        return null;
+    const findings = [];
+    for (const item of value.findings) {
+        const parsed = findingSchema.safeParse(item);
+        if (!parsed.success)
+            return null;
+        findings.push(parsed.data);
+    }
+    const error = value.error;
+    return typeof error === "string" ? { action, findings, error } : { action, findings };
+}
+function recoveryScript(ruleId) {
+    if (ruleId === "interpreter_suspicious_inline_exec") {
+        return "Drop the spawn, socket, or eval, or move that part into a file and run the file. A one-liner that only computes is already allowed.";
+    }
+    if (ruleId === "mass_file_deletion") {
+        return "Delete fewer than three files in one step, or name the build directory you mean (node_modules, dist, target). Do not chain the rest into one command.";
+    }
+    return "";
+}
+function findingAdvice(finding) {
+    const body = modelSentences(finding.description) || modelSentences(finding.title);
+    const rem = finding.remediation === undefined ? "" : modelSentences(finding.remediation);
+    const snips = commandSnippets([finding]);
+    const hit = finding.evidence?.find((item) => item.pattern != null && item.pattern !== "")?.pattern;
+    const parts = [];
+    if (body !== "")
+        parts.push(body);
+    if (snips.length > 0)
+        parts.push(`This fragment:\n${snips.map((snip) => `  ${snip}`).join("\n")}`);
+    if (hit !== undefined)
+        parts.push(`Why: it matches ${hit}.`);
+    const script = recoveryScript(finding.rule_id);
+    if (script !== "")
+        parts.push(script);
+    else if (rem !== "" && rem !== body)
+        parts.push(rem);
+    return parts.join("\n");
+}
+function withFragments(lead, snips) {
+    if (snips.length === 0)
+        return lead;
+    return `${lead}\n\nThis fragment could not be classified:\n${snips.map((snip) => `  ${snip}`).join("\n")}`;
+}
+function commandSnippets(findings) {
+    const seen = new Set();
+    const out = [];
+    for (const finding of findings) {
+        for (const item of finding.evidence ?? []) {
+            const text = item.matched ?? item.raw;
+            if (text == null || text === "" || BUDGET_NOTE.test(text) || seen.has(text))
+                continue;
+            seen.add(text);
+            out.push(text);
+        }
+    }
+    return out;
+}
+function modelSentences(text) {
+    return text
+        .split(/(?<=\.)\s+/)
+        .filter((sentence) => sentence !== "" && !INTERNAL_COPY.test(sentence))
+        .join(" ")
+        .trim();
+}
+function binaryPath() {
+    const require = createRequire(import.meta.url);
+    const fromTirith = createRequire(require.resolve("tirith/package.json"));
+    const platform = `${process.platform}-${process.arch}`;
+    if (!["darwin-arm64", "darwin-x64", "linux-arm64", "linux-x64", "win32-x64"].includes(platform)) {
+        throw new Error(`Unsupported Tirith platform: ${platform}`);
+    }
+    const root = path.dirname(fromTirith.resolve(`@sheeki03/tirith-${platform}/package.json`));
+    return path.join(root, "bin", process.platform === "win32" ? "tirith.exe" : "tirith");
+}
+/** Do not inherit TIRITH*, loader injection, user allowlists, or project policy discovery. */
+function scannerEnv(state) {
+    const env = {
+        HOME: state,
+        USERPROFILE: state,
+        XDG_CONFIG_HOME: state,
+        XDG_DATA_HOME: state,
+        XDG_CACHE_HOME: state,
+        APPDATA: state,
+        LOCALAPPDATA: state,
+        TIRITH_POLICY_ROOT: policyRoot,
+        TIRITH_LOG: "0",
+        TIRITH_OFFLINE: "1",
+    };
+    for (const name of ["PATH", "SystemRoot", "SYSTEMROOT", "WINDIR", "TMPDIR", "TEMP", "TMP"]) {
+        if (process.env[name] !== undefined)
+            env[name] = process.env[name];
+    }
+    return env;
+}
+function joinTirithReports(reports) {
+    const findings = reports.flatMap((report) => report.findings);
+    if (reports.some((report) => report.action === "block"))
+        return { action: "block", findings };
+    const failed = reports.find((report) => report.action === "error");
+    if (failed !== undefined)
+        return { action: "error", findings, error: failed.error };
+    if (reports.some((report) => report.action === "warn"))
+        return { action: "warn", findings };
+    return { action: "allow", findings };
+}
+function inspectCommand(binary, command, cwd, env, signal) {
+    return new Promise((resolve, reject) => {
+        execFile(binary, ["check", "--format", "json", "--non-interactive", "--no-daemon", "--offline", "--shell", "posix", "--", command], {
+            cwd,
+            env,
+            signal,
+            timeout: 5000,
+            killSignal: "SIGKILL",
+            maxBuffer: 1024 * 1024,
+            encoding: "utf8",
+            windowsHide: true,
+        }, (error, stdout) => {
+            try {
+                if (error == null) {
+                    resolve(parseTirithOutput(stdout, 0));
+                    return;
+                }
+                const code = error.code;
+                if (error.killed || error.signal || typeof code !== "number")
+                    throw error;
+                resolve(parseTirithOutput(stdout, code));
+            }
+            catch (error_) {
+                reject(error_);
+            }
+        });
+    });
+}
+export const checkTirith = async (command, { cwd, signal }) => {
+    let state;
+    try {
+        signal?.throwIfAborted();
+        const binary = binaryPath();
+        // eslint-disable-next-line security/detect-non-literal-fs-filename -- fixed package asset, never caller input
+        await realpath(policyPath);
+        const home = await mkdtemp(path.join(tmpdir(), "harness-tirith-"));
+        state = home;
+        signal?.throwIfAborted();
+        const env = scannerEnv(home);
+        const reports = await Promise.all(tirithUnits(command).map(async (unit) => {
+            try {
+                const output = await inspectCommand(binary, unit, cwd, env, signal);
+                if (!output.policy_path_used) {
+                    throw new Error("Tirith did not use the package-owned policy");
+                }
+                return { action: output.action, findings: output.findings };
+            }
+            catch (error) {
+                return tirithFailure(error);
+            }
+        }));
+        return joinTirithReports(reports);
+    }
+    catch (error) {
+        return tirithFailure(error);
+    }
+    finally {
+        if (state !== undefined)
+            await rm(state, { recursive: true, force: true });
+    }
+};
+//# sourceMappingURL=tirith.js.map

package/dist/tirith.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tirith.js","sourceRoot":"","sources":["../src/tirith.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAyC,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAYhD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AACnE,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AAEvD,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,IAAmB;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,aAAa,GAAG,yFAAyF,CAAC;AAChH,MAAM,WAAW,GAAG,2DAA2D,CAAC;AAEhF,MAAM,kBAAkB,GACtB,gOAAgO,CAAC;AAInO,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,eAAe,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9F,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,WAAW,CAAC;IACjE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AACvF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,gBAAgB;IAChB,oBAAoB;IACpB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;IACxB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,kBAAkB;IAClB,6BAA6B;IAC7B,sBAAsB;IACtB,iCAAiC;IACjC,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,wBAAwB;CACzB,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,MAAoB;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,QAAQ,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC;QACf,KAAK,UAAU;YACb,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;YAChD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC3C,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,QAAQ,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,KAAK,OAAO;YACV,OAAO,mDAAmD,CAAC;QAC7D,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,YAAY;YACf,OAAO,aAAa,CAAC,kBAAkB,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7E,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC;YAC1F,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,MAAM,KAAK,oCAAoC,EAAE,CAAC;QACpD,OAAO,qIAAqI,CAAC;IAC/I,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,OAAO,uJAAuJ,CAAC;IACjK,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,OAAsB;IAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC;IACnG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,KAAK,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,GAAG,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAwB;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,IAAI,+CAA+C,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,eAAe,CAAC,QAAkC;IACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC;YACtC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SACtE,IAAI,CAAC,GAAG,CAAC;SACT,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,oBAAoB,QAAQ,eAAe,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACxF,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAsB;QAC7B,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,kBAAkB,EAAE,UAAU;QAC9B,UAAU,EAAE,GAAG;QACf,cAAc,EAAE,GAAG;KACpB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3F,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,MAAc,EACd,OAAe,EACf,GAAW,EACX,GAAsB,EACtB,MAA+B;IAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,MAAM,EACN,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EACjH;YACE,GAAG;YACH,GAAG;YACH,MAAM;YACN,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI,GAAG,IAAI;YACtB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SAClB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,CAAC;gBACH,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;oBAClB,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBAC1E,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IAC1E,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,8GAA8G;QAC9G,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACnE,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAyB,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC"}

package/dist/tool-path.d.ts

@@ -0,0 +1,8 @@
+import type { Disposition } from "./types.js";
+export declare function normalizeToolPath(raw: string, cwd?: string, home?: string): string;
+/** Strictest dist-floor answer for a model-supplied path, after host normalisation. */
+export declare function checkToolPath(operation: "read" | "write", raw: string, options?: {
+    readonly cwd?: string;
+    readonly home?: string;
+}): Disposition;
+//# sourceMappingURL=tool-path.d.ts.map

package/dist/tool-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-path.d.ts","sourceRoot":"","sources":["../src/tool-path.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAU5G;AAED,uFAAuF;AACvF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,OAAO,EAC3B,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,WAAW,CAIb"}

package/dist/tool-path.js

@@ -0,0 +1,38 @@
+/**
+ * Host path preparation for the file floor, for hosts that hand the model's path
+ * string straight to the adapter. Mirrors the harness's `workspacePath`: resolve
+ * against the working directory, collapse `.` / `..`, make in-root paths relative,
+ * leave extra-root paths absolute (so a miss is `deny`, never `..` ask).
+ * Lexical only: no realpath, so a symlink inside the tree is not followed.
+ * The floor matches case-sensitively, so `checkToolPath` also asks about the
+ * lower-cased path and keeps the stricter answer (`.GIT/hooks` is `.git/hooks`
+ * on APFS and NTFS).
+ */
+import { homedir } from "node:os";
+import path from "node:path";
+import { defaultPolicy } from "./bind.js";
+import { lattice } from "./lift.js";
+function slash(text) {
+    return text.replaceAll("\\", "/");
+}
+export function normalizeToolPath(raw, cwd = process.cwd(), home = homedir()) {
+    let written = slash(raw.trim() === "" ? "." : raw.trim());
+    if (written === "~" || written.startsWith("~/"))
+        written = `${slash(home)}${written.slice(1)}`;
+    const root = path.posix.normalize(slash(cwd.startsWith("/") || /^[a-z]:/i.test(cwd) ? cwd : `/${cwd}`));
+    const resolved = path.posix.normalize(written.startsWith("/") ? written : path.posix.join(root, written));
+    const trimmed = resolved.length > 1 && resolved.endsWith("/") ? resolved.slice(0, -1) : resolved;
+    const rel = path.posix.relative(root, trimmed);
+    if (rel === "")
+        return ".";
+    if (rel === ".." || rel.startsWith("../") || rel.startsWith("/"))
+        return trimmed;
+    return rel;
+}
+/** Strictest dist-floor answer for a model-supplied path, after host normalisation. */
+export function checkToolPath(operation, raw, options) {
+    const prepared = normalizeToolPath(raw, options?.cwd, options?.home);
+    const check = operation === "read" ? defaultPolicy.read : defaultPolicy.write;
+    return lattice([check(prepared), check(prepared.toLowerCase())]);
+}
+//# sourceMappingURL=tool-path.js.map

package/dist/tool-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-path.js","sourceRoot":"","sources":["../src/tool-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE,EAAE,OAAe,OAAO,EAAE;IAClG,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1G,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAC3B,SAA2B,EAC3B,GAAW,EACX,OAA2D;IAE3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;IAC9E,OAAO,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Floor carriers. `policyApprove` is the positive vote. Stored `approve` and `allow` parse as it.
+ * `block` is unliftable. `deny` is overridable by descending arms.
+ * File effects (`read_path` / `write_path`) join on their own lattice, apart from bash
+ * shape — they cannot lift `ask`.
+ */
+import type { ClassId } from "./classes.js";
+export type Disposition = "policyApprove" | "ask" | "deny" | "block";
+/** Write-deny remainder intern. Null when the floor is not deny. */
+export type WriteRemainderKind = "protected" | "outside" | "risky";
+export type ArgType = "read_path" | "write_path";
+/** Why an approve became ask without a rule saying so. A lifted vote is never grantable. */
+export type LiftKind = "env" | "xargs" | "nonliteral" | "unparsed" | "overflow" | "readings";
+/** Grant family of one shell unit: program, recognized subcommand spine, `family_args` positionals. */
+export type UnitIdentity = {
+    readonly argv0: string;
+    readonly spine: readonly string[];
+    readonly familyArgs: readonly string[];
+};
+/** One rule's vote, with the class that says why it voted. Only votes at the call's tier are reported. */
+export type FloorVote = {
+    readonly disposition: Disposition;
+    readonly class: ClassId;
+    /** Stable rule identity: `bash:git/push[--force]`, `write_block:.git/hooks`, `lift:env`. */
+    readonly ruleId: string;
+    /** Shell votes only: the unit that voted. Absent for path and host votes. */
+    readonly unit?: UnitIdentity;
+    readonly lift?: LiftKind;
+    /** Path votes only: the prepared path and the cluster it was judged in. */
+    readonly path?: {
+        readonly cluster: "read" | "write";
+        readonly path: string;
+    };
+};
+/** The tier and the votes that decided it. `votes` is empty for `policyApprove`. */
+export type FloorVerdict = {
+    readonly disposition: Disposition;
+    readonly votes: readonly FloorVote[];
+    /**
+     * Every shell unit the call runs, at any tier (an approve names none in `votes`). Only a shell verdict
+     * has it. An acknowledgement flag on a command family needs it to see an approved call.
+     */
+    readonly seen?: readonly UnitIdentity[];
+};
+export type Policy = {
+    /** `cwd`: workspace-relative directory the shell runs in; relative path words re-base on it. */
+    readonly bash: (command: string, cwd?: string) => Disposition;
+    readonly explainBash: (command: string, cwd?: string) => FloorVerdict;
+    readonly read: (path: string) => Disposition;
+    readonly explainRead: (path: string) => FloorVerdict;
+    readonly write: (path: string) => Disposition;
+    readonly explainWrite: (path: string) => FloorVerdict;
+    /** Write-deny remainder intern. Null when the floor is not deny. */
+    readonly writeKind: (path: string) => WriteRemainderKind | null;
+};
+export type FlagConstraint = {
+    readonly names: readonly string[];
+    readonly vals: readonly string[];
+    readonly takesValue: boolean;
+};
+export type Matcher = {
+    readonly class?: ClassId;
+    readonly flags: Readonly<Record<string, FlagConstraint>>;
+    readonly globs: readonly string[];
+    readonly toks: readonly string[];
+    readonly matchers: readonly Matcher[];
+    readonly policy?: Disposition;
+};
+export type CommandNode = {
+    readonly policy?: Disposition;
+    /** Why this node votes what it votes. Inherited from the nearest ancestor that names one. */
+    readonly class?: ClassId;
+    /** Leading positionals (after the spine) that belong to the grant family. Does not affect the tier. */
+    readonly familyArgs: number;
+    readonly argTypes: readonly ArgType[];
+    readonly argRestType?: ArgType;
+    readonly matchers: readonly Matcher[];
+    /** Option whose value is a path (`--output=F`, glued `-oF`). Long names carry their prefixes. */
+    readonly flagPaths: Readonly<Record<string, ArgType>>;
+    /** Named argument guards (see guards.ts) for what flags and positionals cannot express. */
+    readonly guards: readonly string[];
+    readonly dash?: CommandNode;
+    readonly subcommands: Readonly<Record<string, CommandNode>>;
+};
+/** Classes of the votes that decided the tier. A tier with no voting rule is `unmodelled`. */
+export declare function classesOf(verdict: FloorVerdict): readonly ClassId[];
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE,MAAM,MAAM,OAAO,GAAG,WAAW,GAAG,YAAY,CAAC;AAEjD,4FAA4F;AAC5F,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;AAE7F,uGAAuG;AACvG,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAEF,0GAA0G;AAC1G,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/E,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACnB,gGAAgG;IAChG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,WAAW,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,YAAY,CAAC;IACtE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,YAAY,CAAC;IACtD,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,kBAAkB,GAAG,IAAI,CAAC;CACjE,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,uGAAuG;IACvG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,iGAAiG;IACjG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;CAC7D,CAAC;AAEF,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,OAAO,EAAE,CAMnE"}

package/dist/types.js

@@ -0,0 +1,14 @@
+/**
+ * Floor carriers. `policyApprove` is the positive vote. Stored `approve` and `allow` parse as it.
+ * `block` is unliftable. `deny` is overridable by descending arms.
+ * File effects (`read_path` / `write_path`) join on their own lattice, apart from bash
+ * shape — they cannot lift `ask`.
+ */
+/** Classes of the votes that decided the tier. A tier with no voting rule is `unmodelled`. */
+export function classesOf(verdict) {
+    if (verdict.disposition === "policyApprove")
+        return [];
+    const classes = new Set(verdict.votes.filter((vote) => vote.disposition === verdict.disposition).map((vote) => vote.class));
+    return classes.size === 0 ? ["unmodelled"] : [...classes];
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyFH,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,OAAqB;IAC7C,IAAI,OAAO,CAAC,WAAW,KAAK,eAAe;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CACnG,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;AAC5D,CAAC"}

package/dist/verdict.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Votes on the strict lattice. `join` is `lattice` that keeps the rules which decided the tier:
+ * the result is the strictest disposition and the union of the votes at exactly that disposition.
+ */
+import type { ClassId } from "./classes.js";
+import type { Disposition, FloorVerdict, FloorVote } from "./types.js";
+export declare const APPROVE: FloorVerdict;
+export declare function rank(disposition: Disposition): number;
+/** A single vote. An approve carries no vote: it names no class. */
+export declare function cast(disposition: Disposition, cls: ClassId, ruleId: string, extra?: Pick<FloorVote, "unit" | "lift" | "path">): FloorVerdict;
+/** Strictest of the verdicts, with the votes at that tier (deduplicated by rule, class and unit). */
+export declare function join(verdicts: readonly FloorVerdict[]): FloorVerdict;
+/** Same verdict with every vote stamped with a unit (shell units only). */
+export declare function withUnit(verdict: FloorVerdict, unit: FloorVote["unit"]): FloorVerdict;
+//# sourceMappingURL=verdict.d.ts.map

package/dist/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAgB,MAAM,YAAY,CAAC;AAIrF,eAAO,MAAM,OAAO,EAAE,YAA0D,CAAC;AAEjF,wBAAgB,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAErD;AAED,oEAAoE;AACpE,wBAAgB,IAAI,CAClB,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,GAChD,YAAY,CAGd;AAED,qGAAqG;AACrG,wBAAgB,IAAI,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,YAAY,CAIpE;AA2BD,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,YAAY,CAGrF"}

package/dist/verdict.js

@@ -0,0 +1,55 @@
+const RANK = { policyApprove: 0, ask: 1, deny: 2, block: 3 };
+export const APPROVE = { disposition: "policyApprove", votes: [] };
+export function rank(disposition) {
+    return RANK[disposition];
+}
+/** A single vote. An approve carries no vote: it names no class. */
+export function cast(disposition, cls, ruleId, extra) {
+    if (disposition === "policyApprove")
+        return APPROVE;
+    return { disposition, votes: [{ disposition, class: cls, ruleId, ...extra }] };
+}
+/** Strictest of the verdicts, with the votes at that tier (deduplicated by rule, class and unit). */
+export function join(verdicts) {
+    const joined = joinVotes(verdicts);
+    const seen = mergeSeen(verdicts);
+    return seen === undefined ? joined : { ...joined, seen };
+}
+function mergeSeen(verdicts) {
+    const out = new Map();
+    for (const verdict of verdicts)
+        for (const unit of verdict.seen ?? [])
+            out.set(JSON.stringify(unit), unit);
+    return out.size === 0 ? undefined : [...out.values()];
+}
+function joinVotes(verdicts) {
+    let top = "policyApprove";
+    for (const verdict of verdicts)
+        if (rank(verdict.disposition) > rank(top))
+            top = verdict.disposition;
+    if (top === "policyApprove")
+        return APPROVE;
+    const seen = new Set();
+    const votes = [];
+    for (const verdict of verdicts) {
+        if (verdict.disposition !== top)
+            continue;
+        for (const vote of verdict.votes) {
+            if (vote.disposition !== top)
+                continue;
+            const key = JSON.stringify([vote.ruleId, vote.class, vote.unit, vote.lift, vote.path]);
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            votes.push(vote);
+        }
+    }
+    return { disposition: top, votes };
+}
+/** Same verdict with every vote stamped with a unit (shell units only). */
+export function withUnit(verdict, unit) {
+    if (unit === undefined || verdict.votes.length === 0)
+        return verdict;
+    return { disposition: verdict.disposition, votes: verdict.votes.map((vote) => ({ unit, ...vote })) };
+}
+//# sourceMappingURL=verdict.js.map

package/dist/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAOA,MAAM,IAAI,GAA0C,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAEpG,MAAM,CAAC,MAAM,OAAO,GAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAEjF,MAAM,UAAU,IAAI,CAAC,WAAwB;IAC3C,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,IAAI,CAClB,WAAwB,EACxB,GAAY,EACZ,MAAc,EACd,KAAiD;IAEjD,IAAI,WAAW,KAAK,eAAe;QAAE,OAAO,OAAO,CAAC;IACpD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,IAAI,CAAC,QAAiC;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,QAAiC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3G,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,QAAiC;IAClD,IAAI,GAAG,GAAgB,eAAe,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;IACrG,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,OAAO,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,WAAW,KAAK,GAAG;YAAE,SAAS;QAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CAAC,OAAqB,EAAE,IAAuB;IACrE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACvG,CAAC"}