@vibe-commit/capture 0.6.1 → 0.7.0

package/dist/consent.js

@@ -30,6 +30,15 @@
  * `.consent`, and the parameter is named for it so a toplevel passed by habit
  * reads wrong at the call site.
  *
+ * ## ⛔ A SECOND KEY, AND ONE DOOR: `isCaptureAllowed` (0.7.0, D1 · B)
+ *
+ * A repo can now also be admitted by its SLUG (`owner/repo`) through
+ * `grants.json`, so any clone of it matches, not only the one that ran
+ * `connect`. Every gate asks `isCaptureAllowed`; `isProjectAllowed` is the
+ * common-dir half of it and nothing outside this file calls it
+ * (`test/consent-gates.test.ts` scans for exactly that). Two keys behind two
+ * doors is how `post_rewrite.ts` was missed once.
+ *
  * ⚠ **No migration for allow lists written under the old key**, and that is a
  * decision rather than an omission: pre-launch there are zero users and zero
  * rows (`project_pre_launch_no_data`), so there is nothing to migrate. See
@@ -37,7 +46,8 @@
  */
 import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
-import { projectsPath, rootDir } from "./paths.js";
+import { writeFileAtomic } from "./atomic_write.js";
+import { grantsPath, projectsPath, rootDir } from "./paths.js";
 /**
  * Read the allow list. **Every failure returns an empty list**, which means "no
  * project is consented" — a corrupt or unreadable file must not be able to grant
@@ -100,6 +110,198 @@ export function revokeProject(home, consentKey) {
     chmodSync(path, 0o600);
     return true;
 }
+export const EMPTY_GRANTS = {
+    disclosed_at: null,
+    owners: [],
+    repos: [],
+    excluded: [],
+    refused: [],
+};
+/**
+ * ⛔ **THE ONE NORMALIZATION.** The whole host-qualified slug, lowercased, for every host — the identity the
+ * server already stores (`resolve_repository` sets `v_slug := lower(trim(...))`). Owners, repos, exclusions,
+ * every `grants.json` write and slice 2's server comparison all go through this, so two clones whose remotes
+ * differ only in case are one repo on both sides.
+ */
+export function normalizeSlug(slug) {
+    return slug.trim().toLowerCase();
+}
+/** An owner as stored: normalized, and without the trailing `/` the picker displays (`alexvibecommit/`). */
+export function normalizeOwner(owner) {
+    return normalizeSlug(owner).replace(/\/+$/, "");
+}
+/** `local:` slugs name a path, not a repo: no grant can match one, and their consent stays per clone. */
+export function isLocalSlug(slug) {
+    return slug.startsWith("local:");
+}
+/** The owner part of a slug: everything before the last `/`. `""` when there is none. */
+export function ownerOfSlug(slug) {
+    const cut = slug.lastIndexOf("/");
+    return cut <= 0 ? "" : slug.slice(0, cut);
+}
+function stringList(value, normalize) {
+    if (!Array.isArray(value))
+        return null;
+    const out = [];
+    for (const item of value) {
+        if (typeof item !== "string")
+            return null;
+        const n = normalize(item);
+        if (n !== "" && !out.includes(n))
+            out.push(n);
+    }
+    return out;
+}
+/** The five fields this version knows; every other top-level key of `grants.json` is carried through untouched. */
+const KNOWN_GRANTS_KEYS = new Set(["disclosed_at", "owners", "repos", "excluded", "refused"]);
+/**
+ * `readGrants` plus the top-level keys it does not know, in file order. One read and one parse, so `updateGrants`
+ * rewrites exactly the file it read. `extras` is empty unless `read` is `ok`.
+ */
+function readGrantsWithExtras(home) {
+    const none = [];
+    let raw;
+    try {
+        raw = readFileSync(grantsPath(home), "utf8");
+    }
+    catch (error) {
+        return { read: error.code === "ENOENT" ? { kind: "missing" } : { kind: "unreadable" }, extras: none };
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+            return { read: { kind: "unreadable" }, extras: none };
+        const o = parsed;
+        // A missing list is NOT read as empty: a typo'd `exclude` key would otherwise silently drop every
+        // exclusion. All four are required, extra keys are ignored.
+        const owners = stringList(o.owners, normalizeOwner);
+        const repos = stringList(o.repos, normalizeSlug);
+        const excluded = stringList(o.excluded, normalizeSlug);
+        const refused = stringList(o.refused, normalizeSlug);
+        const at = o.disclosed_at;
+        if (owners === null || repos === null || excluded === null || refused === null)
+            return { read: { kind: "unreadable" }, extras: none };
+        if (at !== null && typeof at !== "string")
+            return { read: { kind: "unreadable" }, extras: none };
+        return {
+            read: { kind: "ok", grants: { disclosed_at: at, owners, repos, excluded, refused } },
+            extras: Object.entries(o).filter(([key]) => !KNOWN_GRANTS_KEYS.has(key)),
+        };
+    }
+    catch {
+        return { read: { kind: "unreadable" }, extras: none };
+    }
+}
+export function readGrants(home) {
+    return readGrantsWithExtras(home).read;
+}
+/** True when a `grants.json` is present and unusable — the state `status` reports and a SessionStart notice names. */
+export function grantsUnreadable(home) {
+    return readGrants(home).kind === "unreadable";
+}
+/**
+ * ⛔ **THE ONE ADMISSION DECISION.** Every gate calls this; `entry.ts`, `post_commit.ts`, `post_rewrite.ts` (twice),
+ * `finalize.ts`, `status.ts` and `connect.ts` are the seven call sites. Absence is a NO and every error path denies.
+ *
+ * Precedence:
+ *  1. A MISSING `grants.json` is empty (0.6.x machines keep capturing on their common-dir consent). A PRESENT file
+ *     that cannot be read denies every clone that has a slug, whatever `projects.json` says.
+ *  2. An excluded slug is denied, whatever the basis.
+ *  3. Otherwise: admitted on the common-dir consent, or on a slug matched by `owners` or `repos`.
+ *
+ * `local:` slugs never match a grant and keep common-dir consent alone. They are also not subject to
+ * exclusion or to an unreadable file: there is no repo identity to exclude.
+ *
+ * ⚠ **`slug` MAY BE A THUNK, and the hooks pass one.** Computing a slug can spawn `git remote get-url` and `ssh -G`,
+ * which is real time on a hook's budget; a machine with no `grants.json` (every 0.6.x machine) needs none of it, and
+ * neither does a clone with no consent and no grants to match. The slug is asked for only when the answer depends on it.
+ * Pass a memoized thunk (`git.ts`'s `onceRepoSlug`) so the caller's own later use shares the one spawn.
+ *
+ * `keys` is the `resolveProjectKeys` result the caller already holds, so the confinement roots it derives afterwards
+ * come from the very resolution this gate used (`D184 §3`).
+ */
+export function isCaptureAllowed(home, keys, slug) {
+    if (keys === null)
+        return false;
+    const byClone = isProjectAllowed(home, keys.consent);
+    const read = readGrants(home);
+    if (read.kind === "missing")
+        return byClone;
+    const resolve = () => normalizeSlug(typeof slug === "function" ? slug() : slug);
+    if (read.kind === "unreadable")
+        return isLocalSlug(resolve()) ? byClone : false;
+    const { owners, repos, excluded } = read.grants;
+    if (excluded.length === 0 && (byClone || (owners.length === 0 && repos.length === 0)))
+        return byClone;
+    const name = resolve();
+    if (isLocalSlug(name))
+        return byClone;
+    if (excluded.includes(name))
+        return false;
+    return byClone || repos.includes(name) || owners.includes(ownerOfSlug(name));
+}
+/** `updateGrants` refuses to rewrite a file it cannot read: overwriting would silently drop exclusions it never saw. */
+export class GrantsUnreadableError extends Error {
+    constructor() {
+        super("grants.json is present and cannot be read");
+        this.name = "GrantsUnreadableError";
+    }
+}
+/**
+ * Read-modify-write `grants.json`. 0700 on the directory, 0600 on the file, atomic (a hook reading while a verb saves
+ * sees the old file or the new, never half). Entries are normalized and de-duplicated on the way out.
+ *
+ * ⛔ **Throws `GrantsUnreadableError` rather than start from empty** when the file is present and unusable: a rewrite
+ * would turn "denies everything" into "admits on common-dir consent" without the user having decided anything.
+ *
+ * ⛔ **Keeps the top-level keys it does not know**, verbatim and uninterpreted, after the five it rebuilds (which always
+ * win). A newer version's file read by this one is written back whole: dropping a key it added would silently undo its
+ * state. No lock: same read-modify-write as `projects.json`, so two simultaneous verbs can lose one write.
+ */
+export function updateGrants(home, change) {
+    const { read, extras } = readGrantsWithExtras(home);
+    if (read.kind === "unreadable")
+        throw new GrantsUnreadableError();
+    const next = change(read.kind === "ok" ? read.grants : EMPTY_GRANTS);
+    const clean = {
+        disclosed_at: next.disclosed_at,
+        owners: [...new Set(next.owners.map(normalizeOwner).filter((o) => o !== ""))],
+        repos: [...new Set(next.repos.map(normalizeSlug).filter((r) => r !== ""))],
+        excluded: [...new Set(next.excluded.map(normalizeSlug).filter((x) => x !== ""))],
+        refused: [...new Set(next.refused.map(normalizeSlug).filter((x) => x !== ""))],
+    };
+    const path = grantsPath(home);
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    chmodSync(rootDir(home), 0o700);
+    // `Object.fromEntries` defines own properties, so even a key named `__proto__` is written back as data.
+    const out = Object.fromEntries([...Object.entries(clean), ...extras]);
+    writeFileAtomic(path, `${JSON.stringify(out, null, 2)}\n`, 0o600);
+    return clean;
+}
+/** `vibecommit off`: the slug joins `excluded`. Returns true when that changed the file. */
+export function excludeSlug(home, slug) {
+    const name = normalizeSlug(slug);
+    let changed = false;
+    updateGrants(home, (g) => {
+        changed = !g.excluded.includes(name);
+        return changed ? { ...g, excluded: [...g.excluded, name] } : g;
+    });
+    return changed;
+}
+/**
+ * A yes at the disclosure re-includes a turned-off repo; nothing else does. `"none"` when the slug was not excluded
+ * (no file is written then), `"unreadable"` when `grants.json` cannot be read.
+ */
+export function clearExclusion(home, slug) {
+    const name = normalizeSlug(slug);
+    const read = readGrants(home);
+    if (read.kind === "unreadable")
+        return "unreadable";
+    if (read.kind === "missing" || !read.grants.excluded.includes(name))
+        return "none";
+    updateGrants(home, (g) => ({ ...g, excluded: g.excluded.filter((x) => x !== name) }));
+    return "cleared";
+}
 /**
  * Interpret an answer to the consent prompt. **Only an explicit yes is a yes.**
  * Empty (the user pressed return) is NO, which is what makes `[y/N]` honest.

package/dist/consent.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AASnD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtF,MAAM,GAAG,GAAiC,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,MAAM,EAAE,GAAI,KAA0B,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAAyB;IACtE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAkB,EAAE,GAAS;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAiC;QACzC,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;KACxC,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,kEAAkE;IAClE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,UAAkB;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,IAAI,GAAiC,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AAClC,CAAC"}
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAU/D;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtF,MAAM,GAAG,GAAiC,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,MAAM,EAAE,GAAI,KAA0B,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAAyB;IACtE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAkB,EAAE,GAAS;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAiC;QACzC,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;KACxC,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,kEAAkE;IAClE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,UAAkB;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,IAAI,GAAiC,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AA0BD,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,YAAY,EAAE,IAAI;IAClB,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAiBD,SAAS,UAAU,CAAC,KAAc,EAAE,SAAgC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mHAAmH;AACnH,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnH;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,IAAI,GAA4C,EAAE,CAAC;IACzD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAG,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClI,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,kGAAkG;QAClG,4DAA4D;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;QAC1B,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtI,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjG,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;YACpF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACzE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;AAChD,CAAC;AAKD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAwB,EAAE,IAAgB;IACvF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,aAAa,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACtG,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,wHAAwH;AACxH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAmC;IAC5E,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,KAAK,GAAW;QACpB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAC/E,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,wGAAwG;IACxG,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IACtE,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AAClC,CAAC"}

package/dist/copy/error_codes.d.ts

@@ -0,0 +1,222 @@
+/**
+ * The stable error codes — one per CONDITION, not per call site (0.7.0, PR 7).
+ *
+ * An agent that drives `vibecommit` keys on the code, not on the sentence: the sentence is copy and
+ * may be reworded, the code is a contract. So the rules are the rules of a contract:
+ *
+ *   - **A shipped code is never renamed or reused for another condition.** A retired code stays in
+ *     this table, marked `retired`, so the docs page still explains it.
+ *   - **Adding a code is additive; changing one is a contract change** and goes in the release
+ *     paragraph (L12).
+ *   - **Names the state, not the verb**, and never "you": `^[A-Z][A-Z0-9_]{2,31}$`. A verb prefix is
+ *     used only where the condition exists in one verb (`FINALIZE_SEVERAL_RECENT`).
+ *   - **Two conditions with different fixes get two codes**, even when they print the same sentence;
+ *     one condition reached from several verbs is one code (`NOT_A_REPO`).
+ *   - **No exit code lives here.** A code names the condition; the exit stays the verb's own and the
+ *     README's per-verb exit lists stay the contract (VQ, Q8).
+ *
+ * `test/error-codes.golden.txt` lists every code and its summary; the docs page copies it. This file
+ * imports nothing, so `term.ts` (the renderer) and `json.ts` can both use it.
+ */
+export interface ErrorCodeEntry {
+    /** One line naming the condition. The docs page gives the what line, the cause and the fix. */
+    readonly summary: string;
+    /** A retired code stays listed (never reused) and is marked as retired on the docs page. */
+    readonly retired?: true;
+}
+/**
+ * Declared as a literal so `ErrorCode` is a union of the keys and the compiler finds every
+ * `kind: "bad"` block that has no (or a misspelt) code.
+ */
+export declare const ERROR_CODES: {
+    readonly INTERNAL_ERROR: {
+        readonly summary: "VibeCommit stopped on an unexpected error.";
+    };
+    readonly NODE_TOO_OLD: {
+        readonly summary: "The Node runtime is older than this version supports.";
+    };
+    readonly UNKNOWN_COMMAND: {
+        readonly summary: "The first argument is not a vibecommit command.";
+    };
+    readonly UNRECOGNIZED_ARGUMENT: {
+        readonly summary: "An argument the command does not take.";
+    };
+    readonly NOT_A_REPO: {
+        readonly summary: "The command was run outside a git work tree.";
+    };
+    readonly NOT_CONNECTED: {
+        readonly summary: "This repository is not allowed to be captured.";
+    };
+    readonly NO_CREDENTIAL: {
+        readonly summary: "This machine has no ingest credential.";
+    };
+    readonly GRANTS_UNREADABLE: {
+        readonly summary: "The grants file exists but cannot be read, so capture is stopped.";
+    };
+    readonly CONSENT_NEEDS_TTY: {
+        readonly summary: "Consent needs a person at a terminal.";
+    };
+    readonly BACKFILL_NEEDS_TTY: {
+        readonly summary: "Backfill asks a question that needs a person at a terminal.";
+    };
+    readonly OFF_NEEDS_REPO: {
+        readonly summary: "`off` was run outside a repository.";
+    };
+    readonly CREDENTIAL_IN_ARGV: {
+        readonly summary: "A credential was passed as a command-line argument.";
+    };
+    readonly CREDENTIAL_EMPTY: {
+        readonly summary: "No credential was given to `auth`.";
+    };
+    readonly CREDENTIAL_NOT_INGEST: {
+        readonly summary: "The credential given to `auth` is not an ingest credential.";
+    };
+    readonly STORED_CREDENTIAL_NOT_INGEST: {
+        readonly summary: "The credential stored for this machine is not an ingest credential.";
+    };
+    readonly CREDENTIAL_FILE_INSECURE: {
+        readonly summary: "The credential file is readable by other accounts.";
+    };
+    readonly CREDENTIAL_FILE_UNREADABLE: {
+        readonly summary: "The credential file could not be read.";
+    };
+    readonly CREDENTIAL_REJECTED: {
+        readonly summary: "The server no longer accepts this machine's credential.";
+    };
+    readonly WORKSPACE_UNCONFIRMED: {
+        readonly summary: "The workspace for a new credential could not be confirmed.";
+    };
+    readonly NOT_SIGNED_IN: {
+        readonly summary: "This machine has never signed in.";
+    };
+    readonly SIGNIN_ENDED: {
+        readonly summary: "This machine's sign-in has ended.";
+    };
+    readonly SIGNIN_BUSY: {
+        readonly summary: "Another command is renewing this machine's sign-in.";
+    };
+    readonly SIGNIN_SERVICE_NOT_FOUND: {
+        readonly summary: "The sign-in service could not be found.";
+    };
+    readonly SIGNIN_DENIED: {
+        readonly summary: "Sign-in was declined.";
+    };
+    readonly SIGNIN_TIMED_OUT: {
+        readonly summary: "Sign-in did not finish in time.";
+    };
+    readonly SIGNIN_CLIENT_REFUSED: {
+        readonly summary: "The sign-in service refused this client.";
+    };
+    readonly SIGNIN_UNREACHABLE: {
+        readonly summary: "The sign-in service could not be reached.";
+    };
+    readonly SIGNIN_ANSWER_UNUSABLE: {
+        readonly summary: "The sign-in service answered in a way this version cannot use.";
+    };
+    readonly SIGNIN_CODE_NEEDS_TTY: {
+        readonly summary: "Sign-in by code needs a terminal.";
+    };
+    readonly SIGNIN_CODE_UNSUPPORTED: {
+        readonly summary: "The server does not offer sign-in by code.";
+    };
+    readonly SIGNIN_CODE_REFUSED: {
+        readonly summary: "The service refused to start a sign-in by code.";
+    };
+    readonly SIGNIN_CODE_INVALID: {
+        readonly summary: "The service no longer recognises the sign-in code.";
+    };
+    readonly SIGNIN_CODE_DISABLED: {
+        readonly summary: "Sign-in by code is turned off for the account.";
+    };
+    readonly SIGNIN_RATE_LIMITED: {
+        readonly summary: "Too many sign-in attempts from this network.";
+    };
+    readonly AUTH_FLAGS_CONFLICT: {
+        readonly summary: "Two `auth` flags that cannot be combined were given.";
+    };
+    readonly MINT_FAILED: {
+        readonly summary: "No credential was created through the browser.";
+    };
+    readonly MINT_NOT_A_MEMBER: {
+        readonly summary: "The signed-in account is not a member of the workspace.";
+    };
+    readonly MINT_RATE_LIMITED: {
+        readonly summary: "Too many credential requests; the service asked to wait.";
+    };
+    readonly PATH_COMMAND_FOREIGN: {
+        readonly summary: "Another program owns the `vibecommit` command.";
+    };
+    readonly PATH_COMMAND_ABSENT: {
+        readonly summary: "The `vibecommit` command is not on PATH.";
+    };
+    readonly FINALIZE_NEEDS_TARGET: {
+        readonly summary: "`finalize` was given no session to close.";
+    };
+    readonly FINALIZE_BAD_SESSION_ID: {
+        readonly summary: "The value given is not a session id.";
+    };
+    readonly FINALIZE_NO_RECENT_SESSION: {
+        readonly summary: "No session in this repository delivered anything recently.";
+    };
+    readonly FINALIZE_SEVERAL_RECENT: {
+        readonly summary: "More than one recent session; one must be named.";
+    };
+    readonly FINALIZE_UNKNOWN_SESSION: {
+        readonly summary: "This repository has no captured session with that id.";
+    };
+    readonly FINALIZE_TRANSCRIPT_MISSING: {
+        readonly summary: "The transcript for the session could not be found.";
+    };
+    readonly FINALIZE_STILL_WRITING: {
+        readonly summary: "The session's transcript changed a moment ago.";
+    };
+    readonly FINALIZE_REFUSED: {
+        readonly summary: "The server declined to close the session on this attempt.";
+    };
+    readonly DELIVERY_FAILED: {
+        readonly summary: "The session could not be delivered; nothing was closed.";
+    };
+    readonly INGEST_URL_UNAVAILABLE: {
+        readonly summary: "The ingest address from the environment is unusable.";
+    };
+    readonly RECORD_SERVICE_UNREACHABLE: {
+        readonly summary: "The record service could not be reached.";
+    };
+    readonly RECORD_SERVICE_ERROR: {
+        readonly summary: "The record service could not answer.";
+    };
+    readonly RECORD_ANSWER_UNREADABLE: {
+        readonly summary: "The record service answered in a way this version cannot read.";
+    };
+    readonly WHY_NEEDS_FILE_AND_LINE: {
+        readonly summary: "`why` needs a file and a line number.";
+    };
+    readonly BLAME_FAILED: {
+        readonly summary: "`git blame` could not attribute the line.";
+    };
+    readonly REPORT_NEEDS_SINCE: {
+        readonly summary: "`report` needs a start date.";
+    };
+    readonly REPORT_SINCE_UNREADABLE: {
+        readonly summary: "The start date could not be read.";
+    };
+    readonly REPORT_REF_UNNAMEABLE: {
+        readonly summary: "`report` needs a ref it can name.";
+    };
+    readonly REPORT_REACHABILITY_UNKNOWN: {
+        readonly summary: "Whether a captured commit is reachable could not be determined.";
+    };
+    readonly SHALLOW_CLONE: {
+        readonly summary: "The clone is shallow, so the answer cannot be trusted.";
+    };
+    readonly CLIENT_TOO_OLD: {
+        readonly summary: "The server sent an answer this version is too old to show.";
+    };
+};
+export type ErrorCode = keyof typeof ERROR_CODES;
+/** What is printed after the code, without the scheme (Alexander, "Code line before the fix"). */
+export declare const ERROR_DOCS_PATH = "vibecommit.ai/docs/errors";
+/** The anchor on the docs page: `#` plus the code, lowercased, underscores as hyphens. */
+export declare function errorAnchor(code: ErrorCode): string;
+/** The one muted line under a block's why paragraphs: `NOT_A_REPO · vibecommit.ai/docs/errors#not-a-repo`. */
+export declare function errorCodeLine(code: ErrorCode): string;

package/dist/copy/error_codes.js

@@ -0,0 +1,105 @@
+/**
+ * The stable error codes — one per CONDITION, not per call site (0.7.0, PR 7).
+ *
+ * An agent that drives `vibecommit` keys on the code, not on the sentence: the sentence is copy and
+ * may be reworded, the code is a contract. So the rules are the rules of a contract:
+ *
+ *   - **A shipped code is never renamed or reused for another condition.** A retired code stays in
+ *     this table, marked `retired`, so the docs page still explains it.
+ *   - **Adding a code is additive; changing one is a contract change** and goes in the release
+ *     paragraph (L12).
+ *   - **Names the state, not the verb**, and never "you": `^[A-Z][A-Z0-9_]{2,31}$`. A verb prefix is
+ *     used only where the condition exists in one verb (`FINALIZE_SEVERAL_RECENT`).
+ *   - **Two conditions with different fixes get two codes**, even when they print the same sentence;
+ *     one condition reached from several verbs is one code (`NOT_A_REPO`).
+ *   - **No exit code lives here.** A code names the condition; the exit stays the verb's own and the
+ *     README's per-verb exit lists stay the contract (VQ, Q8).
+ *
+ * `test/error-codes.golden.txt` lists every code and its summary; the docs page copies it. This file
+ * imports nothing, so `term.ts` (the renderer) and `json.ts` can both use it.
+ */
+/**
+ * Declared as a literal so `ErrorCode` is a union of the keys and the compiler finds every
+ * `kind: "bad"` block that has no (or a misspelt) code.
+ */
+export const ERROR_CODES = {
+    // — the process —
+    INTERNAL_ERROR: { summary: "VibeCommit stopped on an unexpected error." },
+    NODE_TOO_OLD: { summary: "The Node runtime is older than this version supports." },
+    UNKNOWN_COMMAND: { summary: "The first argument is not a vibecommit command." },
+    UNRECOGNIZED_ARGUMENT: { summary: "An argument the command does not take." },
+    // — the repository and the machine —
+    NOT_A_REPO: { summary: "The command was run outside a git work tree." },
+    NOT_CONNECTED: { summary: "This repository is not allowed to be captured." },
+    NO_CREDENTIAL: { summary: "This machine has no ingest credential." },
+    GRANTS_UNREADABLE: { summary: "The grants file exists but cannot be read, so capture is stopped." },
+    CONSENT_NEEDS_TTY: { summary: "Consent needs a person at a terminal." },
+    BACKFILL_NEEDS_TTY: { summary: "Backfill asks a question that needs a person at a terminal." },
+    OFF_NEEDS_REPO: { summary: "`off` was run outside a repository." },
+    // — credentials —
+    CREDENTIAL_IN_ARGV: { summary: "A credential was passed as a command-line argument." },
+    CREDENTIAL_EMPTY: { summary: "No credential was given to `auth`." },
+    CREDENTIAL_NOT_INGEST: { summary: "The credential given to `auth` is not an ingest credential." },
+    STORED_CREDENTIAL_NOT_INGEST: { summary: "The credential stored for this machine is not an ingest credential." },
+    CREDENTIAL_FILE_INSECURE: { summary: "The credential file is readable by other accounts." },
+    CREDENTIAL_FILE_UNREADABLE: { summary: "The credential file could not be read." },
+    CREDENTIAL_REJECTED: { summary: "The server no longer accepts this machine's credential." },
+    WORKSPACE_UNCONFIRMED: { summary: "The workspace for a new credential could not be confirmed." },
+    // — signing in —
+    NOT_SIGNED_IN: { summary: "This machine has never signed in." },
+    SIGNIN_ENDED: { summary: "This machine's sign-in has ended." },
+    SIGNIN_BUSY: { summary: "Another command is renewing this machine's sign-in." },
+    SIGNIN_SERVICE_NOT_FOUND: { summary: "The sign-in service could not be found." },
+    SIGNIN_DENIED: { summary: "Sign-in was declined." },
+    SIGNIN_TIMED_OUT: { summary: "Sign-in did not finish in time." },
+    SIGNIN_CLIENT_REFUSED: { summary: "The sign-in service refused this client." },
+    SIGNIN_UNREACHABLE: { summary: "The sign-in service could not be reached." },
+    SIGNIN_ANSWER_UNUSABLE: { summary: "The sign-in service answered in a way this version cannot use." },
+    SIGNIN_CODE_NEEDS_TTY: { summary: "Sign-in by code needs a terminal." },
+    SIGNIN_CODE_UNSUPPORTED: { summary: "The server does not offer sign-in by code." },
+    SIGNIN_CODE_REFUSED: { summary: "The service refused to start a sign-in by code." },
+    SIGNIN_CODE_INVALID: { summary: "The service no longer recognises the sign-in code." },
+    SIGNIN_CODE_DISABLED: { summary: "Sign-in by code is turned off for the account." },
+    SIGNIN_RATE_LIMITED: { summary: "Too many sign-in attempts from this network." },
+    AUTH_FLAGS_CONFLICT: { summary: "Two `auth` flags that cannot be combined were given." },
+    MINT_FAILED: { summary: "No credential was created through the browser." },
+    MINT_NOT_A_MEMBER: { summary: "The signed-in account is not a member of the workspace." },
+    MINT_RATE_LIMITED: { summary: "Too many credential requests; the service asked to wait." },
+    // — the command on PATH —
+    PATH_COMMAND_FOREIGN: { summary: "Another program owns the `vibecommit` command." },
+    PATH_COMMAND_ABSENT: { summary: "The `vibecommit` command is not on PATH." },
+    // — finalize and delivery —
+    FINALIZE_NEEDS_TARGET: { summary: "`finalize` was given no session to close." },
+    FINALIZE_BAD_SESSION_ID: { summary: "The value given is not a session id." },
+    FINALIZE_NO_RECENT_SESSION: { summary: "No session in this repository delivered anything recently." },
+    FINALIZE_SEVERAL_RECENT: { summary: "More than one recent session; one must be named." },
+    FINALIZE_UNKNOWN_SESSION: { summary: "This repository has no captured session with that id." },
+    FINALIZE_TRANSCRIPT_MISSING: { summary: "The transcript for the session could not be found." },
+    FINALIZE_STILL_WRITING: { summary: "The session's transcript changed a moment ago." },
+    FINALIZE_REFUSED: { summary: "The server declined to close the session on this attempt." },
+    DELIVERY_FAILED: { summary: "The session could not be delivered; nothing was closed." },
+    INGEST_URL_UNAVAILABLE: { summary: "The ingest address from the environment is unusable." },
+    // — why and report —
+    RECORD_SERVICE_UNREACHABLE: { summary: "The record service could not be reached." },
+    RECORD_SERVICE_ERROR: { summary: "The record service could not answer." },
+    RECORD_ANSWER_UNREADABLE: { summary: "The record service answered in a way this version cannot read." },
+    WHY_NEEDS_FILE_AND_LINE: { summary: "`why` needs a file and a line number." },
+    BLAME_FAILED: { summary: "`git blame` could not attribute the line." },
+    REPORT_NEEDS_SINCE: { summary: "`report` needs a start date." },
+    REPORT_SINCE_UNREADABLE: { summary: "The start date could not be read." },
+    REPORT_REF_UNNAMEABLE: { summary: "`report` needs a ref it can name." },
+    REPORT_REACHABILITY_UNKNOWN: { summary: "Whether a captured commit is reachable could not be determined." },
+    SHALLOW_CLONE: { summary: "The clone is shallow, so the answer cannot be trusted." },
+    CLIENT_TOO_OLD: { summary: "The server sent an answer this version is too old to show." },
+};
+/** What is printed after the code, without the scheme (Alexander, "Code line before the fix"). */
+export const ERROR_DOCS_PATH = "vibecommit.ai/docs/errors";
+/** The anchor on the docs page: `#` plus the code, lowercased, underscores as hyphens. */
+export function errorAnchor(code) {
+    return `#${code.toLowerCase().replaceAll("_", "-")}`;
+}
+/** The one muted line under a block's why paragraphs: `NOT_A_REPO · vibecommit.ai/docs/errors#not-a-repo`. */
+export function errorCodeLine(code) {
+    return `${code} · ${ERROR_DOCS_PATH}${errorAnchor(code)}`;
+}
+//# sourceMappingURL=error_codes.js.map

package/dist/copy/error_codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error_codes.js","sourceRoot":"","sources":["../../src/copy/error_codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AASH;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kBAAkB;IAClB,cAAc,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE;IACzE,YAAY,EAAE,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAClF,eAAe,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC/E,qBAAqB,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE;IAE5E,qCAAqC;IACrC,UAAU,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACvE,aAAa,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC5E,aAAa,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACpE,iBAAiB,EAAE,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACnG,iBAAiB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE;IACvE,kBAAkB,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC9F,cAAc,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAElE,kBAAkB;IAClB,kBAAkB,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE;IACtF,gBAAgB,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACnE,qBAAqB,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE;IACjG,4BAA4B,EAAE,EAAE,OAAO,EAAE,qEAAqE,EAAE;IAChH,wBAAwB,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC3F,0BAA0B,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACjF,mBAAmB,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE;IAC3F,qBAAqB,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE;IAEhG,iBAAiB;IACjB,aAAa,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE;IAC/D,YAAY,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE;IAC9D,WAAW,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAC/E,wBAAwB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE;IAChF,aAAa,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACnD,gBAAgB,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;IAC9E,kBAAkB,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC5E,sBAAsB,EAAE,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACrG,qBAAqB,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE;IACvE,uBAAuB,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAClF,mBAAmB,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE;IACnF,mBAAmB,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE;IACtF,oBAAoB,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACnF,mBAAmB,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE;IAChF,mBAAmB,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACxF,WAAW,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC1E,iBAAiB,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACzF,iBAAiB,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAE1F,0BAA0B;IAC1B,oBAAoB,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACnF,mBAAmB,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;IAE5E,4BAA4B;IAC5B,qBAAqB,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC/E,uBAAuB,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE;IAC5E,0BAA0B,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACrG,uBAAuB,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE;IACxF,wBAAwB,EAAE,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC9F,2BAA2B,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC9F,sBAAsB,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACrF,gBAAgB,EAAE,EAAE,OAAO,EAAE,2DAA2D,EAAE;IAC1F,eAAe,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACvF,sBAAsB,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE;IAE3F,qBAAqB;IACrB,0BAA0B,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE;IACnF,oBAAoB,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACzE,wBAAwB,EAAE,EAAE,OAAO,EAAE,gEAAgE,EAAE;IACvG,uBAAuB,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC7E,YAAY,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACtE,kBAAkB,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE;IAC/D,uBAAuB,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE;IACzE,qBAAqB,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE;IACvE,2BAA2B,EAAE,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC3G,aAAa,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACpF,cAAc,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE;CAC9B,CAAC;AAI9D,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAE3D,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,GAAG,IAAI,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC"}

package/dist/copy/index.d.ts

@@ -6,7 +6,7 @@
  * it describes a commit's evidence, it belongs in `grades.ts` behind the one
  * header renderer.
  */
-export { HELP, USAGE, STATUS, FINALIZE, CONNECT, SIGNIN, OFF, WHY, REPORT, ABSENCE, type AbsenceStateName, type AbsenceState, type AbsenceField, ERRORS, INTERNAL, CREDENTIAL, AUTH, RUNTIME, SYSTEM_MESSAGE, REDACTION, COMMANDS, URLS, AGENT_HOOKS, COMMIT_HOOK, PATH_CLASH, REJECTED, RETIRE, REPLACE, DEVICE, UPDATE, } from "./strings.js";
-export { relativeAge } from "./time.js";
+export { HELP, USAGE, STATUS, FINALIZE, CONNECT, SIGNIN, OFF, SCAN, BACKFILL, PICKER, WHY, REPORT, ABSENCE, type AbsenceStateName, type AbsenceState, type AbsenceField, ERRORS, INTERNAL, CREDENTIAL, AUTH, RUNTIME, SYSTEM_MESSAGE, REDACTION, COMMANDS, URLS, AGENT_HOOKS, COMMIT_HOOK, PATH_CLASH, REJECTED, RETIRE, REPLACE, DEVICE, UPDATE, } from "./strings.js";
+export { relativeAge, shortDate } from "./time.js";
 export { renderCommitHeader, renderCommitIdentity, gradeFloor, gradeCopyFor, ALL_GRADES, type BlamedCommit, type EdgeGrade, } from "./grades.js";
 export { BLOCKED_PHRASES, findClaimViolations, type Surface, type BlockedPhrase, type ClaimViolation, } from "./claims.js";

package/dist/copy/index.js

@@ -6,8 +6,8 @@
  * it describes a commit's evidence, it belongs in `grades.ts` behind the one
  * header renderer.
  */
-export { HELP, USAGE, STATUS, FINALIZE, CONNECT, SIGNIN, OFF, WHY, REPORT, ABSENCE, ERRORS, INTERNAL, CREDENTIAL, AUTH, RUNTIME, SYSTEM_MESSAGE, REDACTION, COMMANDS, URLS, AGENT_HOOKS, COMMIT_HOOK, PATH_CLASH, REJECTED, RETIRE, REPLACE, DEVICE, UPDATE, } from "./strings.js";
-export { relativeAge } from "./time.js";
+export { HELP, USAGE, STATUS, FINALIZE, CONNECT, SIGNIN, OFF, SCAN, BACKFILL, PICKER, WHY, REPORT, ABSENCE, ERRORS, INTERNAL, CREDENTIAL, AUTH, RUNTIME, SYSTEM_MESSAGE, REDACTION, COMMANDS, URLS, AGENT_HOOKS, COMMIT_HOOK, PATH_CLASH, REJECTED, RETIRE, REPLACE, DEVICE, UPDATE, } from "./strings.js";
+export { relativeAge, shortDate } from "./time.js";
 export { renderCommitHeader, renderCommitIdentity, gradeFloor, gradeCopyFor, ALL_GRADES, } from "./grades.js";
 export { BLOCKED_PHRASES, findClaimViolations, } from "./claims.js";
 //# sourceMappingURL=index.js.map

package/dist/copy/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/copy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,GAAG,EACH,MAAM,EACN,OAAO,EAIP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,OAAO,EACP,cAAc,EACd,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,QAAQ,EACR,MAAM,EACN,OAAO,EACP,MAAM,EACN,MAAM,GACP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,UAAU,GAGX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,GAIpB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/copy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,GAAG,EACH,MAAM,EACN,OAAO,EAIP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,OAAO,EACP,cAAc,EACd,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,QAAQ,EACR,MAAM,EACN,OAAO,EACP,MAAM,EACN,MAAM,GACP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,UAAU,GAGX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,GAIpB,MAAM,aAAa,CAAC"}