@vibe-commit/capture 0.1.0

package/dist/commands/connect.js

@@ -0,0 +1,499 @@
+/**
+ * `vibecommit connect` — the install moment.
+ *
+ * This task owns the CONSENT GATE and the runtime floor. Two later tasks own the
+ * rest of the screen and must not be front-run:
+ *   - `CR-111d` landed the disclosure copy, transcribed from style guide §10.2.
+ *     D64 falsified the trust argument the earlier draft used (this repo is
+ *     private, so "read the source" is false and BLOCKED). The approved
+ *     replacement links `Vibe-Commit/claude-plugin`, which vendors the exact
+ *     binary — and "inspect the build" is WEAKER than "read the source" and may
+ *     not be dressed up as it.
+ *   - `CR-025` owns the ending: capture the current session and print the live
+ *     `/app/commits/<sha>` URL. The seam is marked below.
+ *
+ * `CR-084d` lands the browser sign-in beat (PKCE loopback → a user-principal
+ * token for the READ lane) behind `--sign-in`. It is opt-in and not part of the
+ * default install for one reason: **sign-in does not produce an ingest
+ * credential**, so it cannot replace the beat below. No route in
+ * `vibecommit-mcp` mints a `vcik_` — `mintIngestCredential` exists and has no
+ * call site outside that repo's own tests — so `VIBECOMMIT_TOKEN` remains the
+ * supported path for capture, exactly as before.
+ *
+ * @provenance vibecommit-mcp src/oauth/ingest_credential.ts — no route mints one, verified
+ */
+import { CONNECT, COMMANDS, COMMIT_HOOK, ERRORS, HELP, PATH_CLASH, RUNTIME, SIGNIN, URLS, } from "../copy/index.js";
+import { dialectFor } from "../agents/registry.js";
+import { grantProject, isAffirmative, isProjectAllowed } from "../consent.js";
+import { loadCredential } from "../credential.js";
+import { EXIT } from "../exit.js";
+import { resolveRepoSlug } from "../git.js";
+import { confinementRoots, readSpan, DEFAULT_HOOK_BUDGET_MS } from "../hooks/entry.js";
+import { classifyInstall, installPostCommitHook } from "../install.js";
+import { mcpUrl } from "../oauth/discovery.js";
+import { loadSession } from "../oauth/session.js";
+import { openBrowser, signIn } from "../oauth/signin.js";
+import { CAPTURE_NOT_APPROVED, deliver, ingestUrl, } from "../post.js";
+import { resolveProjectKeys } from "../project.js";
+import { meetsNodeFloor, NODE_FLOOR_TEXT } from "../runtime.js";
+import { paint, renderErrorBlock, truncatePath, wrap } from "../term.js";
+import { writeLines } from "./context.js";
+export async function connect(ctx, options = {}) {
+    // (1) The runtime floor refuses LOUDLY here, unlike in the hook: the user is
+    // watching and can act, and D57 §DX11 asks for exactly that asymmetry.
+    if (!meetsNodeFloor(ctx.nodeVersion)) {
+        writeLines(ctx.stderr, renderErrorBlock({
+            kind: "bad",
+            what: RUNTIME.floorWhat,
+            why: [
+                `${RUNTIME.floorWhyPrefix} ${NODE_FLOOR_TEXT} ${RUNTIME.floorWhyMiddle} ${ctx.nodeVersion}.`,
+            ],
+            fixLabel: RUNTIME.floorFix,
+            fixes: [COMMANDS.connect],
+        }, ctx.colour));
+        return EXIT.failure;
+    }
+    // (2) BOTH KEYS (`D184 §1`). Outside a work tree there is nothing to consent
+    // ABOUT, and inventing a key from cwd would grant consent to something the
+    // user cannot see in `status`.
+    //
+    // ⛔ THE GRANT BELOW IS THE ONLY WRITER OF THE ALLOW LIST, so this verb decides
+    // what every gate can ever match. It writes `keys.consent` — the git common
+    // dir — which is what admits the worktrees of this clone as well as the clone
+    // itself. Granting the toplevel here while `entry.ts` and `post_commit.ts`
+    // check the common dir is a TOTAL, SILENT capture outage in every repository
+    // (`D184 §9`), and no cell that grants and checks through one helper can see
+    // it.
+    const keys = resolveProjectKeys(ctx.cwd);
+    if (keys === null) {
+        writeLines(ctx.stderr, renderErrorBlock({ kind: "bad", what: ERRORS.notAGitRepo, why: [] }, ctx.colour));
+        return EXIT.failure;
+    }
+    if (isProjectAllowed(ctx.home, keys.consent)) {
+        writeLines(ctx.stdout, wrap(CONNECT.alreadyConnected, 2));
+        return await afterConsent(ctx, keys, options);
+    }
+    // (3) The disclosure, then the gate.
+    writeLines(ctx.stdout, disclosure(ctx));
+    // (4) Non-TTY REFUSES. A consent prompt that proceeds when nobody can answer
+    // it is not a consent prompt (D65 §DR7). Exit 2 — DESIGN.md §13.7 names this
+    // case explicitly, so it is a usage error and not a failure.
+    if (!ctx.stdinIsTty) {
+        writeLines(ctx.stderr, renderErrorBlock({
+            kind: "bad",
+            what: CONNECT.nonInteractiveWhat,
+            why: [CONNECT.nonInteractiveWhy],
+            fixLabel: CONNECT.nonInteractiveFix,
+            fixes: [COMMANDS.connect],
+        }, ctx.colour));
+        return EXIT.usage;
+    }
+    // (5) The default is N. Anything that is not an explicit yes is a no.
+    const answer = await ctx.ask(`  ${CONNECT.consentPrompt} ${paint(ctx.colour, "muted", CONNECT.consentAnswers)} `);
+    if (!isAffirmative(answer)) {
+        writeLines(ctx.stdout, ["", ...wrap(CONNECT.declined, 2)]);
+        // Declining is a successful consent flow, not a failure. Exit 0 (§13.7).
+        return EXIT.ok;
+    }
+    grantProject(ctx.home, keys.consent, ctx.now());
+    return await afterConsent(ctx, keys, options);
+}
+/**
+ * Consent is settled. Sign in if asked, then do the credential beat.
+ *
+ * The two are sequential and NOT conditional on each other, because they are
+ * different lanes: sign-in establishes the user principal the READ lane needs,
+ * and the credential beat is about the machine credential the HOOK lane needs.
+ * A failure in one says nothing about the other — which is why a failed sign-in
+ * returns here rather than falling through to report the install as fine.
+ */
+async function afterConsent(ctx, keys, options) {
+    if (options.signIn === true) {
+        const code = await signInBeat(ctx);
+        if (code !== EXIT.ok)
+            return code;
+    }
+    return await credentialBeat(ctx, keys);
+}
+/**
+ * The browser sign-in beat — `CR-084d`.
+ *
+ * Reachable only behind `--sign-in`. That is deliberate and not timidity: an
+ * unconditional beat here would open a browser during every `connect`, including
+ * the ones run by a wrapper, and sign-in cannot mint the credential the rest of
+ * `connect` is about. When a read verb lands (`why` — `CR-086`; `report` —
+ * `CR-108`) it calls `readWithSession`, which drives the same session and needs
+ * no beat here at all.
+ */
+async function signInBeat(ctx) {
+    if (loadSession(ctx.home).kind === "ok") {
+        writeLines(ctx.stdout, wrap(SIGNIN.alreadySignedIn, 2));
+        return EXIT.ok;
+    }
+    const endpoint = mcpUrl(ctx.env);
+    if (endpoint === null) {
+        writeLines(ctx.stderr, signInError(ctx, SIGNIN.noServerWhat, SIGNIN.noServerRefusedWhy));
+        return EXIT.failure;
+    }
+    const outcome = await signIn({
+        home: ctx.home,
+        mcpEndpoint: endpoint,
+        fetch,
+        nowMs: () => ctx.now().getTime(),
+        openBrowser,
+        onAuthorizeUrl: (url, opened) => {
+            writeLines(ctx.stdout, [
+                "",
+                ...wrap(opened ? SIGNIN.opening : SIGNIN.manualLabel, 2),
+                // `accent` on a URL is §13.1's one exception, and the line carries no
+                // second colour. Printed on BOTH paths: a user who wants to open it in a
+                // different browser than the default should not have to guess it.
+                `  ${paint(ctx.colour, "accent", url)}`,
+                ...(opened ? wrap(SIGNIN.waiting, 2) : []),
+            ]);
+        },
+        page: { done: SIGNIN.browserDone, refused: SIGNIN.browserRefused },
+    });
+    if (outcome.kind === "ok") {
+        writeLines(ctx.stdout, ["", ...wrap(SIGNIN.done, 2)]);
+        return EXIT.ok;
+    }
+    writeLines(ctx.stderr, ["", ...signInFailure(ctx, outcome)]);
+    return EXIT.failure;
+}
+/** §13.6's shape for a sign-in failure. One renderer, six outcomes. */
+function signInFailure(ctx, outcome) {
+    switch (outcome.kind) {
+        case "no-server":
+            return signInError(ctx, SIGNIN.noServerWhat, outcome.detail === "unreachable"
+                ? SIGNIN.noServerUnreachableWhy
+                : SIGNIN.noServerMalformedWhy, SIGNIN.noServerFix);
+        case "denied":
+            return signInError(ctx, SIGNIN.deniedWhat, SIGNIN.deniedWhy, SIGNIN.deniedFix);
+        case "timeout":
+            return signInError(ctx, SIGNIN.timeoutWhat, SIGNIN.timeoutWhy, SIGNIN.timeoutFix);
+        case "rejected":
+            return signInError(ctx, SIGNIN.rejectedWhat, SIGNIN.rejectedWhy, SIGNIN.rejectedFix);
+        case "unreachable":
+            return signInError(ctx, SIGNIN.unreachableWhat, SIGNIN.unreachableWhy, SIGNIN.unreachableFix);
+        case "malformed":
+            return signInError(ctx, SIGNIN.malformedWhat, SIGNIN.malformedWhy, SIGNIN.malformedFix);
+    }
+}
+function signInError(ctx, what, why, fixLabel = SIGNIN.noServerFix) {
+    return renderErrorBlock({ kind: "bad", what, why: [why], fixLabel, fixes: [COMMANDS.signIn] }, ctx.colour);
+}
+/**
+ * The disclosure block — `CR-111d`, style guide §10.2 transcribed.
+ *
+ * FOUR paragraphs and two labelled links: what is uploaded, what that means
+ * concretely, the scrubber's STATED LIMIT, and — `T15` — the COMMITS, which are
+ * a second data class the first three never mentioned. Then the docs list and
+ * the public bundle.
+ *
+ * ⚠ The rules it satisfies that no gate can check (§10.2 rules 3-6): every noun
+ * names something actually uploaded IN THE USER'S VOCABULARY (*"the output of
+ * commands it ran"*, never *"Bash tool results"*); the scrubber is a pattern
+ * list with a stated limit, never protection; no reassurance adjective appears;
+ * and "open source" does not. The claims gate registers four of the five
+ * adjectives on this surface — **`private` is deliberately NOT registered**,
+ * because the approved copy itself says "private-repo paths", so a substring
+ * gate would fire on approved copy on day one. That one is a HUMAN review item.
+ */
+function disclosure(ctx) {
+    // §10.2 aligns the two link URLs in one column. The width is DERIVED from the
+    // labels rather than hardcoded, so editing a label cannot silently break the
+    // alignment — and the four trailing spaces are the gutter the guide draws.
+    const gutter = Math.max(CONNECT.consentDocsLabel.length, CONNECT.consentBundleLabel.length) + 4;
+    return [
+        ...wrap(CONNECT.consentHeading, 2),
+        "",
+        ...wrap(CONNECT.consentDetail, 2),
+        "",
+        ...wrap(CONNECT.consentScrubber, 2),
+        "",
+        // ⛔ THE SECOND DATA CLASS (`T15`, `D190`). The three paragraphs above are
+        // TRANSCRIPT CONTENT and were the whole disclosure; commit SHAs have been on
+        // the wire since `CR-170` with no word here, and `D190` adds the attribution
+        // rung and LOCAL, UNPUSHED REWRITE HISTORY. Placed AFTER the scrubber so the
+        // transcript thread — what is uploaded, then that its secret scrubbing has a
+        // stated limit — is not split by a different subject.
+        ...wrap(CONNECT.consentCommits, 2),
+        "",
+        // Both URLs have ONE definition each, in the copy module. `accent` is
+        // allowed on a URL (§13.1) and neither line carries a second colour.
+        `  ${CONNECT.consentDocsLabel.padEnd(gutter)}${paint(ctx.colour, "accent", HELP.docsUrl)}`,
+        // ⚠ THE HONEST REPLACEMENT FOR THE OPEN-SOURCE CLAIM. D64 made this repo
+        // private with MIT intact, so "read the source" is false and is registered
+        // BLOCKED on this surface. `claude-plugin` is public non-negotiably (D20)
+        // and vendors the binary — an artefact to inspect, which is WEAKER than
+        // readable source and is not dressed up as it (D65 §DR7).
+        `  ${CONNECT.consentBundleLabel.padEnd(gutter)}${paint(ctx.colour, "accent", URLS.pluginBundle)}`,
+        "",
+    ];
+}
+/**
+ * The credential beat.
+ *
+ * `CR-025` replaces this with the real ending: capture the current session and
+ * print the live `/app/commits/<sha>` URL. It also owns the PATH-clash check —
+ * the npm package `vibecommit` (a different project) installs a bin of the same
+ * name, and on npm >= 7 the clash surfaces as EEXIST during the first install of
+ * exactly the population that installs commit tooling.
+ */
+async function credentialBeat(ctx, keys) {
+    const load = loadCredential({ env: ctx.env, home: ctx.home });
+    if (load.kind === "ok") {
+        return await captureBeat(ctx, keys, load.credential);
+    }
+    writeLines(ctx.stderr, renderErrorBlock({
+        kind: "warn",
+        what: CONNECT.credentialNeededWhat,
+        why: [CONNECT.credentialNeededWhy],
+        fixLabel: CONNECT.credentialNeededFix,
+        fixes: [CONNECT.credentialNeededCommand, COMMANDS.connect],
+    }, ctx.colour));
+    return EXIT.notConnected;
+}
+/**
+ * The ending — D57 §DX5's Sentry-wizard test-event pattern.
+ *
+ * The install does not end on "configured", it ends on EVIDENCE: record this
+ * session, then hand over a URL that resolves. §10.2 draws it.
+ *
+ * Two things §10.2 draws that are deliberately NOT here:
+ *   - **`4 turns · 1 commit`.** Counting turns means parsing the transcript, and
+ *     the client may render but may not analyze (D60 §D6). It is not obtainable
+ *     from the server either: `send()` returns a status and discards the body,
+ *     so no id, sha or count exists on this side of the wire.
+ *   - **`Opening your browser to sign in...`.** That beat is the oauth lane's.
+ *     Until PKCE lands, `VIBECOMMIT_TOKEN` is the supported path.
+ */
+async function captureBeat(ctx, keys, credential) {
+    // ⚠ EVERY USE BELOW BUT ONE IS THE TOPLEVEL ROLE — locating the transcript,
+    // the `repoKey` binding, the slug, the hook install and the copy the user
+    // reads. The exception is the redaction root set at `readSpan`, which takes
+    // BOTH keys through `confinementRoots`. Aliased rather than renamed
+    // throughout, so the diff shows the line whose ROLE changed and not fourteen
+    // that did not.
+    const projectKey = keys.worktree;
+    // ⛔ SKIPPED ENTIRELY ON A DIALECT WITH NO LOCATOR — `CR-183`. `connect` is
+    // typed by a human and is handed no `transcript_path`, so finding the running
+    // session is a per-agent capability rather than something this verb can do.
+    // The absence is a real answer and not a gap to fill: the available fallback
+    // is reading a `cwd` out of the transcript's own records, which is ANALYSIS
+    // and D60 §D6 forbids it. The refusal below would also be a false statement —
+    // it names Claude Code, and this is not that agent.
+    const locate = dialectFor(ctx.agentId).locateCurrentTranscript;
+    const found = locate === undefined ? null : locate(ctx.home, ctx.env, projectKey);
+    if (locate !== undefined && found === null) {
+        writeLines(ctx.stderr, renderErrorBlock({
+            kind: "warn",
+            what: CONNECT.noTranscriptWhat,
+            why: [CONNECT.noTranscriptWhy],
+            fixLabel: CONNECT.noTranscriptFix,
+            fixes: [COMMANDS.status],
+        }, ctx.colour));
+        return EXIT.failure;
+    }
+    const url = ingestUrl(ctx.env);
+    let delivery = null;
+    if (found !== null && url !== null) {
+        // Through `deliver()`, so the offset ledger, the failure policy and
+        // `CR-024d`'s redaction all apply exactly as they do for a hook. A second
+        // upload path here would bypass all three.
+        delivery = await deliver({
+            home: ctx.home,
+            env: ctx.env,
+            url,
+            credential,
+            repoKey: projectKey,
+            repoSlug: resolveRepoSlug(projectKey),
+            sessionId: found.sessionId,
+            fileKey: "main",
+            // ⛔ The LOCATED path (`CR-204`), so this test capture names its producer
+            // on the wire exactly as a hook's would — and names it the same way,
+            // from the root that contains the file rather than from `ctx.agentId`.
+            // ⚠ The LOCATOR above is still the flag's: `connect` is looking FOR a
+            // transcript, so there is no path yet to ask a root about.
+            transcriptPath: found.path,
+            timeoutMs: DEFAULT_HOOK_BUDGET_MS,
+            nowMs: ctx.now().getTime(),
+        }, found.size, 
+        // ⛔ THE ROOT SET, and it is `confinementRoots` — THE SAME FUNCTION THE
+        // HOOK PATH CALLS (`entry.ts`), not a set built here. `D184 §3`: the
+        // confinement root is `[worktree, mainToplevel]` and the consent key is
+        // NEVER a member, so this does not follow the flip above.
+        //
+        // ⚠ WHY IT CANNOT STAY THE SINGLETON IT WAS: `connect` runs in whatever
+        // cwd a human typed it in, which is reachable from inside a worktree. With
+        // one root, this preview would redact main-clone content that the hook
+        // path transmits — the two would disagree SILENTLY, and the preview is the
+        // artefact the user reads to decide whether redaction works. `isInside`
+        // fail-closes an unresolvable path to REDACT, so the disagreement shows up
+        // as a plausible, well-formed, emptier payload rather than an error.
+        (from, to) => readSpan(found.path, from, to, confinementRoots(keys), ctx.home, ctx.env));
+    }
+    // THE FIFTH BEAT — `CR-110`, D65 §DR6, D81.
+    //
+    // ⚠ ONE outcome is branched on, identified by its ERROR CODE. The general rule
+    // below still stands: `later` and `never` are transient or per-payload (D58)
+    // and the offset holds, so a 503 must still print the ordinary ending.
+    const pending = approvalPending(delivery);
+    if (pending !== null)
+        return approvalPendingBeat(ctx, projectKey, pending.ownersNotified);
+    // The beat, then the URL on its own line, then what-now. Every OTHER outcome
+    // of the send is deliberately not branched on: telling a user their install
+    // failed because one POST 503'd would be false.
+    writeLines(ctx.stdout, [
+        "",
+        ...wrap(`${CONNECT.capturing} ${CONNECT.doneHeading}`, 2),
+        "",
+        `  ${paint(ctx.colour, "accent", URLS.commits)}`,
+        "",
+        ...wrap(CONNECT.doneForRepo(truncatePath(projectKey, 52)), 2),
+        ...wrap(`${CONNECT.stopLabel}: ${COMMANDS.off}`, 2),
+    ]);
+    // ⛔ COMMIT CAPTURE IS INSTALLED AND REPORTED HERE (`CR-170`, D154). Three of
+    // its failure modes are silent no-ops, so every outcome prints — including
+    // success, which is the only place the PER-CLONE cost can be stated at a
+    // moment the user can act on it.
+    commitHookBeat(ctx, projectKey);
+    return pathClash(ctx);
+}
+/**
+ * Install the `post-commit` hook for this clone and SAY WHAT HAPPENED.
+ *
+ * ⚠ **Never changes the exit code.** Commit observation is an addition to
+ * transcript capture, not a precondition for it: a repository whose
+ * `core.hooksPath` points elsewhere still captures transcripts perfectly, and
+ * exiting non-zero would tell the user their connection failed when it did not.
+ * The report is the whole response.
+ */
+function commitHookBeat(ctx, projectKey) {
+    const outcome = installPostCommitHook(projectKey, ctx.selfPath);
+    const repo = truncatePath(projectKey, 52);
+    if (outcome.kind === "hooks-path" || outcome.kind === "failed") {
+        writeLines(ctx.stdout, [
+            "",
+            ...renderErrorBlock({
+                kind: "warn",
+                what: outcome.kind === "hooks-path" ? COMMIT_HOOK.hooksPathWhat : COMMIT_HOOK.failedWhat,
+                why: [
+                    outcome.kind === "hooks-path"
+                        ? COMMIT_HOOK.hooksPathWhy(outcome.configured)
+                        : COMMIT_HOOK.failedWhy(outcome.why),
+                ],
+                fixLabel: COMMIT_HOOK.hooksPathFixLabel,
+                fixes: [COMMIT_HOOK.hooksPathFixUnset, COMMIT_HOOK.hooksPathFixManual],
+            }, ctx.colour),
+        ]);
+        return;
+    }
+    const line = outcome.kind === "installed"
+        ? COMMIT_HOOK.installed(repo)
+        : outcome.kind === "chained"
+            ? COMMIT_HOOK.chained(repo)
+            : COMMIT_HOOK.already;
+    writeLines(ctx.stdout, ["", ...wrap(line, 2), ...wrap(COMMIT_HOOK.perClone, 2)]);
+}
+/**
+ * Is this delivery the org-approval-pending outcome, and nothing else?
+ *
+ * ⚠ **BRANCHES ON THE ERROR CODE, NEVER ON THE 403 STATUS**, and that is the
+ * whole correctness content of this function. `repository_forbidden` is ALSO a
+ * 403 and deliberately carries no `owners_notified` — so a client that keyed on
+ * the status would tell a user whose repository simply is not theirs that *their
+ * org needs to approve capture*: a false statement about someone else's org, at
+ * the moment of highest trust. A test asserting "a 403 prints the pending beat"
+ * passes against exactly that defect, which is why the suite drives both codes.
+ *
+ * Returns the `owners_notified` value on a match. `undefined` — the key absent —
+ * is normalised to `null`, because both mean *not determinable* to the copy and
+ * neither may assert delivery.
+ */
+function approvalPending(delivery) {
+    if (delivery === null || delivery.kind !== "attempted")
+        return null;
+    if (delivery.detail?.code !== CAPTURE_NOT_APPROVED)
+        return null;
+    return { ownersNotified: delivery.detail.ownersNotified ?? null };
+}
+/**
+ * The fifth beat — style guide §10.2, D65 §DR6, D81.
+ *
+ * ⚠ `warn`, never `bad`. ⚠ **`EXIT.ok`, never `EXIT.failure` and never
+ * `EXIT.notConnected`** — the user is correctly installed and capture is armed.
+ * That 403 means *later*, not *failed*: `policy.ts` classes it `later`, so the
+ * offset holds and the backlog uploads in order once an owner approves. A red
+ * exit here tells a correctly-installed user they broke something.
+ */
+function approvalPendingBeat(ctx, projectKey, ownersNotified) {
+    // ⚠ THE SHARED CLAUSE FIRST, THE NOTIFICATION SECOND — it ADDS, it does not
+    // replace (D81). Composed here rather than as two independent paragraphs, so
+    // the branches cannot drift apart: there is exactly one place the
+    // recorded-request sentence exists.
+    //
+    // ⚠ AND `null` NEVER REACHES THE NOTIFICATION CLAUSE. `null` = not
+    // determinable, `0` = determinable and nobody was told; both render the
+    // recorded-go-ask branch alone. The owner genuinely is not emailed until
+    // `CR-036`, which is provisioning-blocked — disclosed, not concealed.
+    const why = ownersNotified !== null && ownersNotified > 0
+        ? `${CONNECT.pendingRecorded} ${CONNECT.pendingNotified(ownersNotified)}`
+        : CONNECT.pendingRecorded;
+    // ⚠ STDOUT, not stderr, and the rule is consistent in this file: stderr
+    // accompanies a NON-ZERO exit here (`credentialBeat` → 3, `noTranscript` → 1,
+    // `pathClash` → 1, the sign-in failures → 1). This beat exits 0, so it is the
+    // install's OUTCOME rather than a diagnostic — and §10.2 draws it as one
+    // screen, which `2>/dev/null` would otherwise cut in half, leaving "Capture is
+    // armed" with the reason stripped off it.
+    writeLines(ctx.stdout, [
+        "",
+        ...renderErrorBlock({
+            kind: "warn",
+            what: CONNECT.pendingWhat,
+            why: [CONNECT.pendingWhy(resolveRepoSlug(projectKey)), why, CONNECT.pendingBuffered],
+            fixLabel: CONNECT.pendingTrackLabel,
+            fixes: [URLS.captureAccess],
+        }, ctx.colour),
+        "",
+        ...wrap(CONNECT.pendingArmed(truncatePath(projectKey, 52)), 2),
+    ]);
+    // The PATH clash still runs — it is about the verbs a human types and is
+    // orthogonal to whether capture is approved. It can still exit 1.
+    return pathClash(ctx);
+}
+/**
+ * Does the `vibecommit` a user types belong to us? — `DESIGN.md` §13.6's worked
+ * example, which was drawn for this check.
+ *
+ * **Runs LAST, deliberately.** The clash is about the verbs a human types, not
+ * about whether capture works; running it first would refuse to connect a user
+ * whose install is otherwise fine, and hook capture is unaffected either way
+ * because the plugin invokes the binary by path.
+ *
+ * Exit 1, not 2 and not 3: the user typed nothing wrong (2 is usage) and may be
+ * perfectly well connected (3 is not-connected). §13.7.
+ */
+function pathClash(ctx) {
+    const verdict = classifyInstall(ctx.env, ctx.selfPath);
+    if (verdict.kind === "ours")
+        return EXIT.ok;
+    writeLines(ctx.stderr, renderErrorBlock({
+        kind: "bad",
+        what: verdict.kind === "foreign" ? PATH_CLASH.foreignWhat : PATH_CLASH.absentWhat,
+        why: [
+            verdict.kind === "foreign"
+                ? PATH_CLASH.foreignWhy(truncatePath(verdict.resolved, 52))
+                : PATH_CLASH.absentWhy,
+        ],
+        fixLabel: PATH_CLASH.fixLabel,
+        fixes: [
+            verdict.kind === "foreign" ? PATH_CLASH.fixReplace : PATH_CLASH.fixInstall,
+            PATH_CLASH.fixDirectLabel,
+            PATH_CLASH.fixDirect,
+        ],
+    }, ctx.colour));
+    return EXIT.failure;
+}
+//# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,OAAO,EACP,QAAQ,EACR,WAAW,EACX,MAAM,EACN,IAAI,EACJ,UAAU,EACV,OAAO,EACP,MAAM,EACN,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAyB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAe,MAAM,oBAAoB,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,OAAO,EACP,SAAS,GAGV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAoB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AAa/D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAmB,EAAE,UAA0B,EAAE;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,IAAI,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,WAAW,GAAG;aAC7F;YACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC1B,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,+BAA+B;IAC/B,EAAE;IACF,+EAA+E;IAC/E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM;IACN,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CACjF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,qCAAqC;IACrC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAExC,6EAA6E;IAC7E,6EAA6E;IAC7E,6DAA6D;IAC7D,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,OAAO,CAAC,kBAAkB;YAChC,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAChC,QAAQ,EAAE,OAAO,CAAC,iBAAiB;YACnC,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;SAC1B,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAC1B,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CACpF,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,yEAAyE;QACzE,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,YAAY,CACzB,GAAmB,EACnB,IAAiB,EACjB,OAAuB;IAEvB,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,UAAU,CAAC,GAAmB;IAC3C,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,QAAQ;QACrB,KAAK;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;QAChC,WAAW;QACX,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9B,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;gBACrB,EAAE;gBACF,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACxD,sEAAsE;gBACtE,yEAAyE;gBACzE,kEAAkE;gBAClE,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE;gBACvC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE;KACnE,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,SAAS,aAAa,CAAC,GAAmB,EAAE,OAAwC;IAClF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,WAAW,CAChB,GAAG,EACH,MAAM,CAAC,YAAY,EACnB,OAAO,CAAC,MAAM,KAAK,aAAa;gBAC9B,CAAC,CAAC,MAAM,CAAC,sBAAsB;gBAC/B,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAC/B,MAAM,CAAC,WAAW,CACnB,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACjF,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACpF,KAAK,UAAU;YACb,OAAO,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACvF,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAChG,KAAK,WAAW;YACd,OAAO,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,GAAmB,EACnB,IAAY,EACZ,GAAW,EACX,WAAmB,MAAM,CAAC,WAAW;IAErC,OAAO,gBAAgB,CACrB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EACrE,GAAG,CAAC,MAAM,CACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,UAAU,CAAC,GAAmB;IACrC,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,MAAM,GACV,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnF,OAAO;QACL,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClC,EAAE;QACF,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACjC,EAAE;QACF,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QACnC,EAAE;QACF,0EAA0E;QAC1E,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,sDAAsD;QACtD,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClC,EAAE;QACF,sEAAsE;QACtE,qEAAqE;QACrE,KAAK,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;QAC1F,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,0DAA0D;QAC1D,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE;QACjG,EAAE;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,IAAiB;IAClE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO,CAAC,oBAAoB;QAClC,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC,mBAAmB;QACrC,KAAK,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,CAAC,OAAO,CAAC;KAC3D,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,WAAW,CACxB,GAAmB,EACnB,IAAiB,EACjB,UAA4B;IAE5B,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,oEAAoE;IACpE,6EAA6E;IAC7E,gBAAgB;IAChB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;IACjC,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,oDAAoD;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,uBAAuB,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAClF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3C,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO,CAAC,gBAAgB;YAC9B,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;YAC9B,QAAQ,EAAE,OAAO,CAAC,eAAe;YACjC,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;SACzB,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACnC,oEAAoE;QACpE,0EAA0E;QAC1E,2CAA2C;QAC3C,QAAQ,GAAG,MAAM,OAAO,CACtB;YACE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG;YACH,UAAU;YACV,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,MAAiB;YAC1B,yEAAyE;YACzE,qEAAqE;YACrE,uEAAuE;YACvE,sEAAsE;YACtE,2DAA2D;YAC3D,cAAc,EAAE,KAAK,CAAC,IAAI;YAC1B,SAAS,EAAE,sBAAsB;YACjC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;SAC3B,EACD,KAAK,CAAC,IAAI;QACV,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,0DAA0D;QAC1D,EAAE;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,qEAAqE;QACrE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CACxF,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE1F,6EAA6E;IAC7E,4EAA4E;IAC5E,gDAAgD;IAChD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;QACrB,EAAE;QACF,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,EAAE;QACF,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;QAChD,EAAE;QACF,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,iCAAiC;IACjC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,GAAmB,EAAE,UAAkB;IAC7D,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/D,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE;YACF,GAAG,gBAAgB,CACjB;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU;gBACpF,GAAG,EAAE;oBACH,OAAO,CAAC,IAAI,KAAK,YAAY;wBAC3B,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;wBAC9C,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;iBACvC;gBACD,QAAQ,EAAE,WAAW,CAAC,iBAAiB;gBACvC,KAAK,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,CAAC;aACvE,EACD,GAAG,CAAC,MAAM,CACX;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;IAC5B,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,QAAyB;IAChD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,oBAAoB;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAC1B,GAAmB,EACnB,UAAkB,EAClB,cAA6B;IAE7B,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,oCAAoC;IACpC,EAAE;IACF,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,GAAG,GACP,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,CAAC;QAC3C,CAAC,CAAC,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,EAAE;QACzE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAE9B,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,+EAA+E;IAC/E,0CAA0C;IAC1C,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE;QACrB,EAAE;QACF,GAAG,gBAAgB,CACjB;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO,CAAC,WAAW;YACzB,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC;YACpF,QAAQ,EAAE,OAAO,CAAC,iBAAiB;YACnC,KAAK,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;SAC5B,EACD,GAAG,CAAC,MAAM,CACX;QACD,EAAE;QACF,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/D,CAAC,CAAC;IACH,yEAAyE;IACzE,kEAAkE;IAClE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,GAAmB;IACpC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC;IAE5C,UAAU,CACR,GAAG,CAAC,MAAM,EACV,gBAAgB,CACd;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU;QACjF,GAAG,EAAE;YACH,OAAO,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC3D,CAAC,CAAC,UAAU,CAAC,SAAS;SACzB;QACD,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,KAAK,EAAE;YACL,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU;YAC1E,UAAU,CAAC,cAAc;YACzB,UAAU,CAAC,SAAS;SACrB;KACF,EACD,GAAG,CAAC,MAAM,CACX,CACF,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC"}

package/dist/commands/context.d.ts

@@ -0,0 +1,45 @@
+/**
+ * What an interactive verb is handed.
+ *
+ * Everything ambient — env, home, cwd, the TTY answer, the clock — arrives as
+ * data. No verb calls `os.homedir()`, `process.cwd()` or `Date.now()` itself,
+ * which is what lets the tests drive a real binary against a temp HOME without
+ * the risk of a test run touching the developer's own credentials.
+ */
+import type { Writable } from "node:stream";
+export interface CommandContext {
+    readonly env: NodeJS.ProcessEnv;
+    readonly home: string;
+    readonly cwd: string;
+    readonly nodeVersion: string;
+    /** §13.3 — resolved once at process start, never re-derived per line. */
+    readonly colour: boolean;
+    /** stdin is a TTY. The consent gate refuses when it is not (§13.7 exit 2). */
+    readonly stdinIsTty: boolean;
+    readonly stdout: Writable;
+    readonly stderr: Writable;
+    /** Ask the consent question. Only reached when `stdinIsTty` is true. */
+    readonly ask: (question: string) => Promise<string>;
+    readonly now: () => Date;
+    /**
+     * This process's entry point — `process.argv[1]`. Ambient, so it arrives as
+     * data like everything else here: `CR-025`'s PATH check compares it against
+     * the `vibecommit` on PATH, and a test cannot drive that without supplying
+     * both sides.
+     */
+    readonly selfPath: string;
+    /**
+     * Which agent this invocation was told it is running under — `CR-183`,
+     * `--agent=<id>`, resolved once in `index.ts`.
+     *
+     * OPTIONAL, and absent means the default dialect (`claude-code`). Every
+     * install that predates the flag omits it, so the absent case is the common
+     * one rather than an edge; `dialectFor(undefined)` answers it directly and
+     * there is no second place that has to remember the default.
+     *
+     * A LITERAL, not a narrowed id: an unrecognised value must never stop capture
+     * (plan §D7), so what travels is what the operator wrote.
+     */
+    readonly agentId?: string;
+}
+export declare function writeLines(stream: Writable, lines: readonly string[]): void;

package/dist/commands/context.js

@@ -0,0 +1,14 @@
+/**
+ * What an interactive verb is handed.
+ *
+ * Everything ambient — env, home, cwd, the TTY answer, the clock — arrives as
+ * data. No verb calls `os.homedir()`, `process.cwd()` or `Date.now()` itself,
+ * which is what lets the tests drive a real binary against a temp HOME without
+ * the risk of a test run touching the developer's own credentials.
+ */
+export function writeLines(stream, lines) {
+    if (lines.length === 0)
+        return;
+    stream.write(`${lines.join("\n")}\n`);
+}
+//# sourceMappingURL=context.js.map

package/dist/commands/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwCH,MAAM,UAAU,UAAU,CAAC,MAAgB,EAAE,KAAwB;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}