@lannguyensi/harness 0.41.0 → 0.43.0

package/dist/runtime/bash-match-registry.js

@@ -0,0 +1,359 @@
+// Registration point for every engine-side constant set that mirrors
+// FULL_TEMPLATE's `bash_match` facts (task `074acf5d`, run
+// `2026-07-28-manifest-facts-drift-guard`).
+//
+// WHY A REGISTRY, NOT ONE HARD-CODED COMPARISON: the guard this replaces
+// (`tests/runtime/bash-match-head-token-drift.test.ts`, pre-migration)
+// checked exactly one named set (`NON_GIT_HEAD_TOKENS`) against the
+// manifest. That guard could not see run `dbc6d303`'s `INERT_CONSUMER_HEADS`
+// (a NEW module, CRITICAL: contained `harness`, the kill-switch's own
+// gated head token) at all — it simply never looked at any set but the
+// one it was told about. `REGISTERED_HEAD_TOKEN_SETS` below is the list
+// every such set must join; `checkRegisteredSets` walks the WHOLE list
+// against the live facts, so a set registered tomorrow is checked
+// automatically, and (paired with the unregistered-set scan in
+// `tests/runtime/bash-match-head-token-drift.test.ts`) a set that is
+// NOT registered is itself a finding.
+//
+// TWO INTENTS (minimum required — see the two historical incidents this
+// run exists to close):
+//   - "covers-gated-head-tokens": the set exists so the engine recognises
+//     these head tokens (`NON_GIT_HEAD_TOKENS`'s shape). Checked for
+//     COMPLETENESS: every head token the manifest actually gates (barring
+//     a consciously `documented-uncovered` token) must be covered by AT
+//     LEAST ONE registered set with this intent — the run `432db3d3` HIGH
+//     (a covers-set spanning only 4 of 8 gated tokens) as a standing
+//     regression class.
+//   - "must-not-contain-gated-head-token": the set exists for some OTHER
+//     purpose entirely and must NEVER contain a token the manifest itself
+//     gates — the run `dbc6d303` CRITICAL's shape (an "inert consumer"
+//     allowlist that accidentally absorbed the kill-switch's own gated
+//     head token). Checked by testing every LIVE gated head token against
+//     every such registered set's `has()`.
+//
+// FIX ROUND 2 (task `074acf5d`, second fix round, findings S1/S2/S4 —
+// see `.ai/runs/2026-07-28-manifest-facts-drift-guard/03-decisions.md`
+// D-002/D-004): review round 2 MEASURED that the round-1 guard's central
+// defence — a registration's self-declared `intent` — was still
+// escapable two ways, and that the guard reproduced its own defect class
+// inside itself. Three changes close what can be made STRUCTURALLY
+// impossible (D-002/D-003 deliberately draws the line here, not at every
+// enumerable escape — see the decisions file):
+//   (S1) `RegisteredHeadTokenSet` is now a DISCRIMINATED UNION on `intent`:
+//     the "covers-gated-head-tokens" arm's `members` is NON-OPTIONAL.
+//     Omitting `members` on a covers registration — the round-1 escape,
+//     "declare no members and check (c) below never runs" — is now a
+//     COMPILE ERROR, not a test failure. The "must-not-contain" arm keeps
+//     `members` optional (no purity semantics apply to it).
+//   (S2) check (d), COVERS-REDUNDANCY, below: NARROWS — does not close —
+//     the escape where a laundered set's declared `members` are all
+//     HONESTLY gated (so check (c) is satisfied) but the set's true
+//     purpose is something else. It works only for a gated token that some
+//     covers-set legitimately covers, and is STRUCTURALLY SILENT for the
+//     `documented-uncovered` subset. MEASURED (review round 3): a
+//     registration declaring `members: ["tee"]` — or any subset of
+//     `env`/`unset`/`tee`/`cp`, four of the eight live gated head tokens —
+//     passes checks (a) through (e) with an entirely honest, live-coupled
+//     `has()` and `members`, end to end on the real tree. That is the
+//     `dbc6d303` shape (an inert allowlist absorbing a gated head token)
+//     and this registry does not see it. Redesign filed as a follow-up;
+//     see the LIMITS paragraph at the end of this header.
+//   (S4) check (e), COVERS-PREDICATE-PURITY, below: closes the escape
+//     where a registration's `has()` PREDICATE accepts more than its
+//     declared `members` claim (measured: widening `GIT_TOKEN_RE` to also
+//     match "docker" while leaving `members: ["git"]` untouched left the
+//     full suite green) — this guard reproducing, inside itself, the exact
+//     "engine-side constant mirrors manifest content with no coupling"
+//     defect class it exists to eliminate elsewhere.
+// Each violation now carries a `check` field (see `RegistrationViolation`)
+// naming exactly which of the five checks fired, so a fixture test can
+// assert on ONE check's output without an unrelated check's finding on the
+// same (setId, token) pair silently changing what the array contains.
+//
+// COVERS-PURITY (fix round, F1+F2): a THIRD check, over a "covers"
+// registration's OWN declared `members` (see `RegisteredHeadTokenSet.members`
+// below), closes two escapes with one rule — every declared member must
+// itself be a live gated head token:
+//   (F1) the REVERSE direction, ENGINE->MANIFEST: the pre-migration guard
+//     asserted this (every member of `NON_GIT_HEAD_TOKENS` must be a token
+//     some shipped policy gates) and the migration to this registry
+//     silently dropped it — completeness-checking (b) only ever walks
+//     `facts.gatedHeadTokens` outward to registered sets, never a
+//     registered set's own members inward to the facts. An engine set
+//     gaining an ungated member (e.g. "docker" added to
+//     `NON_GIT_HEAD_TOKENS`) is real DEAD CODE at best and a sign the
+//     manifest and the engine have silently diverged at worst; either way
+//     it is a regression this registry exists to catch.
+//   (F2) MIS-DECLARED INTENT: a `must-not-contain-gated-head-token` set
+//     relabeled `covers-gated-head-tokens` to dodge check (a) — cheap,
+//     because `intent` is self-declared and was, before this check,
+//     cross-checked against nothing. A set that exists for any purpose
+//     OTHER than recognising gated head tokens (an inert-consumer
+//     allowlist, say) necessarily contains members that are not
+//     themselves gated head tokens, so it fails THIS check the moment it
+//     declares `members` — the decision rule is: pick the intent that
+//     describes the set's PURPOSE; a set whose purpose is anything other
+//     than recognising gated head tokens is
+//     "must-not-contain-gated-head-token", never "covers-gated-head-tokens".
+//
+// AXIS SCOPE (F6, fix round): this registry models the HEAD-TOKEN axis
+// only — which literal head token a `bash_match` anchors on. A shipped
+// policy's `bash_match` can equally anchor on a VERB with no head-token
+// significance of its own (`pause` in `deny-kill-switch-bypass`), checked
+// today only by `HARNESS_READ_ONLY_SUBS` in `read-only-bash.ts`, a set this
+// registry does not see and does not check. The VERB axis is explicitly
+// OUT OF SCOPE for this run: the exact same defect shape (an engine-side
+// allowlist silently absorbing a gated token) is unmodellable here today,
+// one axis over. Do not assume verb coverage exists because head-token
+// coverage does.
+//
+// WHY src/runtime/, NOT tests/ (F8, fix round): see `bash-match-facts.ts`'s
+// module header — the same reasoning applies here.
+//
+// LIMITS — READ THIS BEFORE TRUSTING A REGISTRATION. Three independent
+// adversarial review passes each found a way to register a set that this
+// registry accepts but should not. Two rounds of added checks narrowed the
+// family without closing it, so the checks were frozen here deliberately
+// and the registration SURFACE is being redesigned instead (follow-up
+// task; the shape under consideration is that a registration hands the
+// registry the constant itself rather than a self-description, so a stale
+// or lying mirror cannot be expressed at all). What this registry does NOT
+// catch today, each measured end to end, not theorised:
+//   1. A covers registration whose declared `members` are all
+//      `documented-uncovered` gated tokens (`env`, `unset`, `tee`, `cp` —
+//      four of eight). Passes every check with an honest, live-coupled
+//      registration. This is the `dbc6d303` CRITICAL shape.
+//   2. A `has()` predicate that does not reflect the constant its
+//      `id`/`module` names: a stale hand-copied snapshot, or `() => false`.
+//      Nothing couples the two. The `must-not-contain` arm has no
+//      predicate check at all, and that is the arm the CRITICAL shape
+//      lives in.
+//   3. `members` declaring coverage the predicate rejects (the two are
+//      each walked in one direction, never against each other), and an
+//      empty `members: []`, which typechecks.
+//   4. A registration naming a `module`/`id` that no exported constant
+//      matches.
+// What it DOES catch is the bar it was built for and still meets: both
+// historical incidents (`432db3d3`'s covers-completeness gap and
+// `dbc6d303`'s `harness` in an inert allowlist), plus an unregistered set
+// in the runtime layer. Treat it as a tripwire for the accidental case,
+// never as a boundary against a determined one.
+//
+// TODAY'S REAL REGISTRATIONS are both "covers" sets — `GIT_TOKEN_RE` and
+// `NON_GIT_HEAD_TOKENS`, both from `command-normalize.ts`, the two sets
+// the pre-migration guard already knew about. No real
+// "must-not-contain-gated-head-token" consumer exists in this tree today
+// (run `dbc6d303`'s own module is explicit non-goal / future work for
+// THIS run) — the intent is fully implemented and covered by the fixture
+// regression tests in `tests/runtime/bash-match-registry.test.ts`
+// (reproducing the CRITICAL's exact shape) and by a live mutation probe
+// against this file's own `REGISTERED_HEAD_TOKEN_SETS` array, not against
+// a second production consumer: temporarily registering a fixture
+// (`intent: "must-not-contain-gated-head-token"`, `has` containing
+// "harness") reddens exactly "every registered engine-side set is clean
+// against the live facts ..." and the F5 defaults test in
+// `tests/runtime/bash-match-head-token-drift.test.ts`, with the violation
+// naming the fixture's own `setId` and the offending token — the probe was
+// reverted immediately after.
+//
+// `has()` rather than an enumerable `ReadonlySet<string>` uniformly for
+// checks (a) and (b): the live gated-head-token vocabulary is small and
+// fully known from `BashMatchFacts.gatedHeadTokens` (never more than ~8
+// entries), so both checks only ever need to ask "does this registered set
+// answer YES for token X", which a `RegExp.test` (`GIT_TOKEN_RE`) and a
+// `Set.has` (`NON_GIT_HEAD_TOKENS`) can equally answer. Check (c)
+// (COVERS-PURITY, above) is different in kind — it asks "does this
+// registered set contain something the facts DON'T know about", which no
+// predicate over the ~8 known tokens can answer; that is why `members` is
+// a separate, enumerable field rather than folded into `has()` — NON-
+// OPTIONAL on the "covers-gated-head-tokens" arm as of fix round 2 (S1;
+// see `CoversHeadTokenSet`'s doc), optional on "must-not-contain", which
+// this field's checks never apply to.
+import { GIT_TOKEN_RE, NON_GIT_HEAD_TOKENS } from "./command-normalize.js";
+import { DOCUMENTED_UNCOVERED_HEAD_TOKENS, isHeadTokenGated } from "./bash-match-facts.js";
+export const REGISTERED_HEAD_TOKEN_SETS = [
+    {
+        id: "GIT_TOKEN_RE",
+        module: "src/runtime/command-normalize.ts",
+        intent: "covers-gated-head-tokens",
+        has: (token) => GIT_TOKEN_RE.test(token),
+        members: ["git"],
+        description: "canonicalizeSegment's git-basename recognizer (matches `git`, and any `\\S*/git` path-qualified spelling, by basename)",
+    },
+    {
+        id: "NON_GIT_HEAD_TOKENS",
+        module: "src/runtime/command-normalize.ts",
+        intent: "covers-gated-head-tokens",
+        has: (token) => NON_GIT_HEAD_TOKENS.has(token),
+        members: [...NON_GIT_HEAD_TOKENS],
+        description: "canonicalizeSegment's closed non-git head-token set (today: gh, npm, harness)",
+    },
+];
+/**
+ * Fixed, deliberately small vocabulary of plausible NON-gated head tokens
+ * (fix round 2, S4/D-004) — commands a reasonable engine-side set might
+ * plausibly mirror or accidentally absorb, but that no shipped
+ * `bash_match` policy gates today. Combined with the live
+ * `facts.gatedHeadTokens` (every token that IS gated, verified fresh —
+ * see `bash-match-facts.ts`) this gives check (e) below a concrete probe
+ * domain to test every registered "covers" predicate against, instead of
+ * trusting a registration's declared `members` to be an honest reflection
+ * of what its `has()` actually accepts.
+ */
+const PLAUSIBLE_NON_GATED_HEAD_TOKENS = [
+    "docker",
+    "kubectl",
+    "ls",
+    "cat",
+    "node",
+    "python",
+    "make",
+    "ssh",
+];
+/**
+ * Check every registered set against the live facts. Returns an EMPTY
+ * array when clean. `registrations` and `documentedUncovered` default to
+ * the real, shipped values (F5 fix-round correction: the
+ * `documentedUncovered` default previously silently fell back to an empty
+ * set, which raised 4 FALSE violations — tee, cp, env, unset — when called
+ * with only `facts`; pinned by
+ * `tests/runtime/bash-match-head-token-drift.test.ts`'s
+ * "checkRegisteredSets(liveFacts())" defaults test) but accept fixtures —
+ * see `tests/runtime/bash-match-registry.test.ts`'s regression tests for
+ * the historical incidents, which pass deliberately-broken fixtures to
+ * prove this function catches their exact shape.
+ */
+export function checkRegisteredSets(facts, registrations = REGISTERED_HEAD_TOKEN_SETS, documentedUncovered = DOCUMENTED_UNCOVERED_HEAD_TOKENS) {
+    const violations = [];
+    // (a) must-not-contain: no registered set with this intent may answer
+    // `true` for ANY live gated head token — the dbc6d303 CRITICAL shape.
+    for (const reg of registrations) {
+        if (reg.intent !== "must-not-contain-gated-head-token")
+            continue;
+        for (const token of facts.gatedHeadTokens) {
+            if (reg.has(token)) {
+                violations.push({
+                    setId: reg.id,
+                    intent: reg.intent,
+                    token,
+                    check: "must-not-contain",
+                    reason: `"${reg.id}" (${reg.module} — ${reg.description}) declares intent "must-not-contain-gated-head-token" but contains "${token}", which IS gated by a shipped bash_match policy`,
+                });
+            }
+        }
+    }
+    // (b) covers-completeness: every gated head token NOT consciously
+    // documented as uncovered must be answered `true` by at least one
+    // registered "covers" set — the 432db3d3 HIGH shape.
+    for (const token of facts.gatedHeadTokens) {
+        if (documentedUncovered.has(token))
+            continue;
+        const covered = registrations.some((reg) => reg.intent === "covers-gated-head-tokens" && reg.has(token));
+        if (!covered) {
+            const cls = facts.classify(token);
+            violations.push({
+                setId: "(none)",
+                intent: "covers-gated-head-tokens",
+                token,
+                check: "covers-completeness",
+                reason: `gated head token "${token}" (class: ${cls ?? "unknown"}) is not covered by ANY registered "covers-gated-head-tokens" set, and is not in the documented-uncovered list either`,
+            });
+        }
+    }
+    // (c) covers-purity (fix round, F1+F2): every member a "covers" set
+    // DECLARES (see RegisteredHeadTokenSet.members) must itself be a live
+    // gated head token. Closes two escapes with one check: (1) the reverse
+    // ENGINE->MANIFEST direction the pre-migration guard checked and the
+    // migration dropped (a covers set gaining a member — e.g. "docker" —
+    // that no shipped policy gates at all); (2) the mis-declared-intent
+    // laundering escape, where a `must-not-contain-gated-head-token` set is
+    // relabeled `covers-gated-head-tokens` to dodge check (a) — a set that
+    // exists for any purpose OTHER than recognising gated head tokens
+    // necessarily contains a member that fails this check. `members` is
+    // non-optional on this arm as of fix round 2 (S1) — every registration
+    // that reaches here has one to walk.
+    for (const reg of registrations) {
+        if (reg.intent !== "covers-gated-head-tokens")
+            continue;
+        for (const member of reg.members) {
+            if (!isHeadTokenGated(facts, member)) {
+                violations.push({
+                    setId: reg.id,
+                    intent: reg.intent,
+                    token: member,
+                    check: "covers-purity",
+                    reason: `"${reg.id}" (${reg.module} — ${reg.description}) declares intent "covers-gated-head-tokens" and lists "${member}" among its members, but "${member}" is not a live gated head token (no shipped bash_match policy gates it) — pick the intent that describes the set's PURPOSE: a set that exists for any purpose OTHER than recognising gated head tokens is "must-not-contain-gated-head-token", never "covers-gated-head-tokens"`,
+                });
+            }
+        }
+    }
+    // (d) covers-redundancy (fix round 2, S2): a gated head token answered
+    // `true` by MORE THAN ONE registered "covers-gated-head-tokens" set is a
+    // violation. Closes the escape check (c) cannot: a laundered set (its
+    // TRUE purpose is something other than recognising gated head tokens,
+    // relabeled "covers-gated-head-tokens" to dodge check (a)) whose
+    // declared `members` are HONESTLY all gated — e.g. `new
+    // Set(["harness"])` or `new Set(["harness", "gh"])` — passes check (c)
+    // cleanly (every declared member IS a live gated head token). The tell
+    // is redundancy: a gated head token legitimately has exactly ONE
+    // registered "covers" set responsible for it.
+    //
+    // SCOPE OF THIS CHECK, measured, not assumed (review round 3): the tell
+    // only exists for a token some covers-set ALREADY covers. For the four
+    // `documented-uncovered` tokens (`env`, `unset`, `tee`, `cp`) no
+    // covers-set covers them by definition, so `coveringSets.length` is 1
+    // and this check is structurally silent — while check (b) skips them and
+    // checks (c)/(e) pass because they ARE gated. A laundered set declaring
+    // only those tokens therefore passes everything. Do not read this check
+    // as a completeness proof; an earlier version of this comment did, and
+    // it was false for half the live vocabulary.
+    for (const token of facts.gatedHeadTokens) {
+        const coveringSets = registrations.filter((reg) => reg.intent === "covers-gated-head-tokens" && reg.has(token));
+        if (coveringSets.length > 1) {
+            for (const reg of coveringSets) {
+                const others = coveringSets.filter((r) => r.id !== reg.id).map((r) => r.id);
+                violations.push({
+                    setId: reg.id,
+                    intent: reg.intent,
+                    token,
+                    check: "covers-redundancy",
+                    reason: `"${reg.id}" (${reg.module} — ${reg.description}) declares intent "covers-gated-head-tokens" and answers true for "${token}", but "${token}" is ALSO covered by ${others.length} other registered covers-set(s) (${others.join(", ")}) — a gated head token must be covered by exactly one registered covers-set; redundant coverage is the signature of an intent-laundered set whose declared members happen to already be genuinely gated elsewhere`,
+                });
+            }
+        }
+    }
+    // (e) covers-predicate-purity (fix round 2, S4/D-004): unlike check (c),
+    // which only inspects a registration's DECLARED `members`, this probes
+    // the registration's ACTUAL `has()` predicate directly against a fixed
+    // vocabulary — every live gated head token plus
+    // `PLAUSIBLE_NON_GATED_HEAD_TOKENS` — and demands `has(token)` answer
+    // `true` ONLY for tokens that ARE live gated head tokens. Closes the
+    // exact defect class this run exists to eliminate, reproduced INSIDE
+    // this guard: a predicate-based registration (`GIT_TOKEN_RE.test`)
+    // paired with a hand-written `members` list that check (c) verifies but
+    // the predicate ITSELF is never re-checked against — measured (D-004):
+    // widening `GIT_TOKEN_RE` to also match "docker" while leaving
+    // `members: ["git"]` untouched left the full suite green before this
+    // check existed.
+    const probeVocabulary = new Set([
+        ...facts.gatedHeadTokens,
+        ...PLAUSIBLE_NON_GATED_HEAD_TOKENS,
+    ]);
+    for (const reg of registrations) {
+        if (reg.intent !== "covers-gated-head-tokens")
+            continue;
+        for (const token of probeVocabulary) {
+            if (reg.has(token) && !isHeadTokenGated(facts, token)) {
+                violations.push({
+                    setId: reg.id,
+                    intent: reg.intent,
+                    token,
+                    check: "covers-predicate-purity",
+                    reason: `"${reg.id}" (${reg.module} — ${reg.description}) declares intent "covers-gated-head-tokens" and its has() predicate answers true for "${token}", but "${token}" is not a live gated head token — the predicate accepts more than its declared members claim, reproducing this run's own defect class (an engine-side predicate mirroring manifest content with no coupling) inside the guard itself`,
+                });
+            }
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=bash-match-registry.js.map

package/dist/runtime/bash-match-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-match-registry.js","sourceRoot":"","sources":["../../src/runtime/bash-match-registry.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2DAA2D;AAC3D,4CAA4C;AAC5C,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,6EAA6E;AAC7E,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,kEAAkE;AAClE,+DAA+D;AAC/D,qEAAqE;AACrE,sCAAsC;AACtC,EAAE;AACF,wEAAwE;AACxE,wBAAwB;AACxB,0EAA0E;AAC1E,qEAAqE;AACrE,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,wBAAwB;AACxB,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,2CAA2C;AAC3C,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,yEAAyE;AACzE,gEAAgE;AAChE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,+CAA+C;AAC/C,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,0EAA0E;AAC1E,4DAA4D;AAC5D,yEAAyE;AACzE,oEAAoE;AACpE,oEAAoE;AACpE,2EAA2E;AAC3E,yEAAyE;AACzE,kEAAkE;AAClE,mEAAmE;AACnE,2EAA2E;AAC3E,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,0DAA0D;AAC1D,sEAAsE;AACtE,qEAAqE;AACrE,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,uEAAuE;AACvE,qDAAqD;AACrD,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,sEAAsE;AACtE,EAAE;AACF,mEAAmE;AACnE,8EAA8E;AAC9E,wEAAwE;AACxE,qCAAqC;AACrC,0EAA0E;AAC1E,2EAA2E;AAC3E,oEAAoE;AACpE,sEAAsE;AACtE,kEAAkE;AAClE,sEAAsE;AACtE,wDAAwD;AACxD,sEAAsE;AACtE,0EAA0E;AAC1E,wDAAwD;AACxD,wEAAwE;AACxE,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,kEAAkE;AAClE,gEAAgE;AAChE,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,4CAA4C;AAC5C,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,iBAAiB;AACjB,EAAE;AACF,4EAA4E;AAC5E,mDAAmD;AACnD,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,wDAAwD;AACxD,8DAA8D;AAC9D,0EAA0E;AAC1E,uEAAuE;AACvE,4DAA4D;AAC5D,kEAAkE;AAClE,4EAA4E;AAC5E,kEAAkE;AAClE,sEAAsE;AACtE,iBAAiB;AACjB,uEAAuE;AACvE,uEAAuE;AACvE,8CAA8C;AAC9C,uEAAuE;AACvE,gBAAgB;AAChB,uEAAuE;AACvE,iEAAiE;AACjE,0EAA0E;AAC1E,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,sDAAsD;AACtD,yEAAyE;AACzE,sEAAsE;AACtE,yEAAyE;AACzE,kEAAkE;AAClE,wEAAwE;AACxE,0EAA0E;AAC1E,kEAAkE;AAClE,mEAAmE;AACnE,wEAAwE;AACxE,0DAA0D;AAC1D,0EAA0E;AAC1E,2EAA2E;AAC3E,8BAA8B;AAC9B,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,kEAAkE;AAClE,mEAAmE;AACnE,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,sCAAsC;AAEtC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAsD3F,MAAM,CAAC,MAAM,0BAA0B,GAAsC;IAC3E;QACE,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,kCAAkC;QAC1C,MAAM,EAAE,0BAA0B;QAClC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,WAAW,EACT,wHAAwH;KAC3H;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,kCAAkC;QAC1C,MAAM,EAAE,0BAA0B;QAClC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC;QACjC,WAAW,EACT,+EAA+E;KAClF;CACF,CAAC;AAuBF;;;;;;;;;;GAUG;AACH,MAAM,+BAA+B,GAAsB;IACzD,QAAQ;IACR,SAAS;IACT,IAAI;IACJ,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;CACN,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA2D,EAC3D,gBAAmD,0BAA0B,EAC7E,sBAA2C,gCAAgC;IAE3E,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,sEAAsE;IACtE,sEAAsE;IACtE,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,mCAAmC;YAAE,SAAS;QACjE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,KAAK;oBACL,KAAK,EAAE,kBAAkB;oBACzB,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,uEAAuE,KAAK,kDAAkD;iBACtL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,qDAAqD;IACrD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAChC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,0BAA0B,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CACrE,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC;gBACd,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,0BAA0B;gBAClC,KAAK;gBACL,KAAK,EAAE,qBAAqB;gBAC5B,MAAM,EAAE,qBAAqB,KAAK,aAAa,GAAG,IAAI,SAAS,uHAAuH;aACvL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,oEAAoE;IACpE,uEAAuE;IACvE,qCAAqC;IACrC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,0BAA0B;YAAE,SAAS;QACxD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,2DAA2D,MAAM,6BAA6B,MAAM,kRAAkR;iBAC9a,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,iEAAiE;IACjE,wDAAwD;IACxD,uEAAuE;IACvE,uEAAuE;IACvE,iEAAiE;IACjE,8CAA8C;IAC9C,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,iEAAiE;IACjE,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,6CAA6C;IAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,0BAA0B,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CACrE,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5E,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,KAAK;oBACL,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,sEAAsE,KAAK,WAAW,KAAK,wBAAwB,MAAM,CAAC,MAAM,oCAAoC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mNAAmN;iBAChc,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,gDAAgD;IAChD,sEAAsE;IACtE,qEAAqE;IACrE,qEAAqE;IACrE,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,+DAA+D;IAC/D,qEAAqE;IACrE,iBAAiB;IACjB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;QACtC,GAAG,KAAK,CAAC,eAAe;QACxB,GAAG,+BAA+B;KACnC,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,0BAA0B;YAAE,SAAS;QACxD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,KAAK;oBACL,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,0FAA0F,KAAK,WAAW,KAAK,uOAAuO;iBAC9Y,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/runtime/bash-prefix-parse.js

@@ -30,6 +30,16 @@
 // after `cd <path>`) the parser falls through cleanly: the malformed
 // prefix is not consumed, the resolver-side fallback to process env /
 // hook cwd holds. There are no thrown errors from this module.
+//
+// MEASUREMENT RULE (task 47297478): any claim about this parser's
+// CD-TARGET extraction versus another build (lost or gained `cdTarget`
+// values) must come from scripts/measure-bash-prefix-parse.mjs, the
+// per-arm-gated corpus with real bash as referee. Three consecutive
+// ad-hoc corpora in the b093911d run reported "0 lost" while being
+// structurally unable to report a loss; that tool's self-test rebuilds
+// exactly that failure and demands the gate catch it. The tool does NOT
+// measure `inlineEnv` extraction — claims about inline-env behavior
+// have no instrument yet and need their own measurement.
 /**
  * Parse leading inline-env and `cd <path>` idioms from a Bash command
  * string. Returns an empty `inlineEnv` and `cdTarget:null` when neither
@@ -77,6 +87,19 @@ function skipWs(s, i) {
  * On a syntactically broken token (e.g. unterminated quote) the broken
  * token is NOT consumed and the function returns the cursor at the
  * start of that token, preserving the rest of the command for fallback.
+ *
+ * QUOTE-MODEL DIVERGENCE, recorded so the next change here starts from
+ * the known state instead of rediscovering it (task 13e55484, review
+ * round 1): `command-normalize.ts`'s `consumeAssignment` is a SECOND
+ * quote model for the same leading-`VAR=value` construction, with
+ * different deliberate coverage — it handles backslash escapes (outside
+ * single quotes) and chained quote runs (`'a b'"c d"`), which this
+ * function does not, while this function extracts the VALUE (which the
+ * normaliser never needs). Neither model handles ANSI-C `$'...'`
+ * escapes; the normaliser side carries a one-directional guard so that
+ * divergence can only fall back to its pre-continuation behaviour,
+ * never swallow a gated head token. This function's own escape gaps are
+ * task `b093911d`.
  */
 function consumeInlineEnv(s, start, into) {
     let i = skipWs(s, start);

package/dist/runtime/bash-prefix-parse.js.map

@@ -1 +1 @@
-{"version":3,"file":"bash-prefix-parse.js","sourceRoot":"","sources":["../../src/runtime/bash-prefix-parse.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,aAAa;AACb,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,2DAA2D;AAC3D,uEAAuE;AACvE,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,6BAA6B;AAC7B,wEAAwE;AACxE,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,oBAAoB;AACpB,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,+DAA+D;AAU/D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,oEAAoE;IACpE,sEAAsE;IACtE,WAAW;IACX,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC;gBACnB,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM;IAC/B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,EAAE,GAAG,IAAI,CAAC;AAChB,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC;AAEhC,SAAS,MAAM,CAAC,CAAS,EAAE,CAAS;IAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,CAAS,EAAE,KAAa,EAAE,IAA4B;IAC9E,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM;QAClC,CAAC,EAAE,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC;QACJ,mEAAmE;QACnE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7B,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7B,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC5C,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjB,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,CAAS,EAAE,KAAa;IAChD,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzB,mEAAmE;IACnE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,4BAA4B;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACd,CAAC;SAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACd,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"bash-prefix-parse.js","sourceRoot":"","sources":["../../src/runtime/bash-prefix-parse.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,aAAa;AACb,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,2DAA2D;AAC3D,uEAAuE;AACvE,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,6BAA6B;AAC7B,wEAAwE;AACxE,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,oBAAoB;AACpB,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,+DAA+D;AAC/D,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,oEAAoE;AACpE,oEAAoE;AACpE,mEAAmE;AACnE,uEAAuE;AACvE,wEAAwE;AACxE,oEAAoE;AACpE,yDAAyD;AAUzD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,oEAAoE;IACpE,sEAAsE;IACtE,WAAW;IACX,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC;gBACnB,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM;IAC/B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,EAAE,GAAG,IAAI,CAAC;AAChB,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC;AAEhC,SAAS,MAAM,CAAC,CAAS,EAAE,CAAS;IAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,gBAAgB,CAAC,CAAS,EAAE,KAAa,EAAE,IAA4B;IAC9E,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM;QAClC,CAAC,EAAE,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC;QACJ,mEAAmE;QACnE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7B,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC7B,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC5C,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjB,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,CAAS,EAAE,KAAa;IAChD,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzB,mEAAmE;IACnE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,4BAA4B;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACd,CAAC;SAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACd,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/command-normalize.d.ts

@@ -0,0 +1,92 @@
+export interface NormalizedCommand {
+    /**
+     * The command with wrapper prefixes peeled and git invocations
+     * canonicalised to `git <subcommand>`. Shell boundary characters
+     * (`\n ; | && ( )`) are preserved verbatim so a boundary-anchored
+     * regex still matches. Byte-identical to the input when nothing
+     * recognisable was found anywhere in the command.
+     */
+    normalized: string;
+    /**
+     * The effective target directory of the command's git invocation, or
+     * `null` when the command names none, the command names invocations
+     * that disagree, or the only named value is `~`-prefixed (see the
+     * module header's target-directory-extraction rules).
+     *
+     * NOT WIRED TO ANY GATE (see the module header's STATUS paragraph):
+     * extracted and fully tested, pending a redesign that attributes a
+     * target per-policy instead of per-event — follow-up task
+     * `98ad072f`.
+     */
+    targetDir: string | null;
+    /**
+     * When `targetDir` is a RELATIVE path, the directory it should be
+     * resolved against instead of the caller's own cwd — the wrapping
+     * `env -C` on the same invocation, or a leading `cd` prefix (see the
+     * module header). `null` when `targetDir` is absolute, `null` itself,
+     * or no more specific base was found.
+     *
+     * Same unconsumed status as `targetDir` above — see the module
+     * header's STATUS paragraph.
+     */
+    targetBase: string | null;
+    /**
+     * `true` when the input exceeded `MAX_NORMALIZE_LENGTH` and
+     * normalisation was skipped entirely (G4 fix, review round 2,
+     * 2026-07-27): the caller previously had no way to tell "nothing
+     * recognisable was found" apart from "normalisation never ran at all",
+     * so the skip carried no audit signal. `false` whenever the input WAS
+     * run through `normalizeCommandInner` (including when nothing
+     * recognisable was found there either — that case is still `false`,
+     * only the length-bound short-circuit sets this).
+     */
+    truncated: boolean;
+}
+/**
+ * The `git` token itself, matched by BASENAME so a path-qualified
+ * invocation (`/usr/bin/git`, `./git`) is recognised too (F4 fix).
+ * Anchored to the WHOLE token (not a substring) so `mygit` / `git-foo`
+ * still correctly fail to match — `\S*` only ever contributes characters
+ * immediately before a literal `/`, never before `git` directly.
+ * Exported (fix round 2, finding F3) so
+ * `tests/runtime/bash-match-head-token-drift.test.ts` can couple this
+ * module's covered set to what FULL_TEMPLATE's shipped `bash_match`
+ * policies actually key on today, instead of a test-owned duplicate.
+ */
+export declare const GIT_TOKEN_RE: RegExp;
+/**
+ * The three OTHER head tokens this module covers (D-001, run
+ * 2026-07-28-nongit-trigger-wrappers) — `gh` (`gh pr merge` / `gh pr
+ * create`), `npm` (`npm publish`), `harness` (the kill-switch verbs). A
+ * closed set, deliberately NOT a general "any head token" rule (see the
+ * module header): matched by EXACT literal equality, unlike `GIT_TOKEN_RE`'s
+ * basename match, so a path-qualified spelling of any of these three stays
+ * out of scope (named residual, module header NOT-SUPPORTED list). This is
+ * NOT the complete set of head tokens a shipped `bash_match` trigger keys
+ * on — see the module header's "SHIPPED BUT NOT COVERED" paragraph (fix
+ * round 2, finding F1) for the four that are NOT in this set (`env`,
+ * `unset`, `tee`, `cp`) and why. Exported (fix round 2, finding F3) for the
+ * same drift-guard reason as `GIT_TOKEN_RE` above.
+ */
+export declare const NON_GIT_HEAD_TOKENS: ReadonlySet<string>;
+/**
+ * Above this length, normalisation is skipped entirely and the command
+ * is returned unchanged (F3 fix — see the module header for why command
+ * SIZE must be bounded even after `findNextBoundary` was made linear).
+ * 100k characters comfortably covers any command a human or agent would
+ * plausibly type, while keeping the worst case a small constant instead
+ * of scaling with whatever ends up pasted into a single Bash call.
+ * Exported (G4 fix, review round 2) so a caller reporting the skip (see
+ * `NormalizedCommand.truncated`) can reference the same number instead of
+ * hand-copying it into a diagnostic message.
+ */
+export declare const MAX_NORMALIZE_LENGTH = 100000;
+/**
+ * Given a Bash command string, return its normalised form and the target
+ * directory (and base, if relative) of its git invocation. Never throws:
+ * any internal failure (there should be none — this is a defensive
+ * backstop matching the fail-safe shape used elsewhere in this codebase,
+ * e.g. `policyMatchesEvent`'s `try/catch` around `new RegExp`) falls back
+ * to the input unchanged.
+ */
+export declare function normalizeCommand(command: string): NormalizedCommand;