@warlock.js/ai-workspace 5.43.0 → 5.44.0

package/esm/policy/powershell-parser.mjs

@@ -0,0 +1,418 @@
+//#region ../../packages/ai-workspace/src/policy/powershell-parser.ts
+/**
+* Parser for the PowerShell dialect (`powershell -Command` / `pwsh -Command`).
+*
+* Like the other dialects it is deliberately conservative: it finds every
+* simple command a line would run and every redirection target, and refuses
+* what it cannot read with confidence. Supported: `;` and line breaks, `&&`,
+* `||`, `|`, `$( )` subexpressions (their commands are checked too), the call
+* operator `&` in front of a command, single and double
+* quotes (including the typographic quotes PowerShell treats as quotes),
+* backtick escapes, `$name` / `${name}` / `$env:NAME` variables (dynamic
+* words), and the redirections `>`, `>>`, `2>`, `2>>`, `*>`, `2>&1`.
+*
+* Refused: script blocks and braces, bare parentheses,
+* `@( )` / `@{ }` / splatting / here-strings, the stop-parsing token `--%`,
+* `<` redirection, comments, the comma operator, compound-statement
+* keywords (`if`, `foreach`, `function`, `try`, …), dot-sourcing, a `&` that
+* is not a call operator (background jobs), and type literals.
+*/
+/** Statement keywords that start a compound command; refused in command position. */
+const POWERSHELL_KEYWORDS = /* @__PURE__ */ new Set([
+	"if",
+	"elseif",
+	"else",
+	"switch",
+	"foreach",
+	"for",
+	"while",
+	"do",
+	"until",
+	"function",
+	"filter",
+	"workflow",
+	"param",
+	"begin",
+	"process",
+	"end",
+	"try",
+	"catch",
+	"finally",
+	"trap",
+	"data",
+	"class",
+	"enum",
+	"using",
+	"return",
+	"break",
+	"continue",
+	"throw",
+	"parallel",
+	"sequence",
+	"inlinescript"
+]);
+/** Characters PowerShell reads as a single quote. */
+const SINGLE_QUOTES = "'‘’‚‛";
+/** Characters PowerShell reads as a double quote. */
+const DOUBLE_QUOTES = "\"“”„";
+/** Variable-name characters after `$`. */
+const VARIABLE_CHAR = /[A-Za-z0-9_:?^$]/;
+/** Whether `char` (never the empty end-of-input string) is one of `set`. */
+function inSet(set, char) {
+	return char !== "" && set.includes(char);
+}
+var PowerShellRefusal = class extends Error {
+	constructor(reason, message) {
+		super(message);
+		this.reason = reason;
+	}
+};
+function unsupported(message) {
+	return new PowerShellRefusal("unsupported-syntax", message);
+}
+var PowerShellParser = class PowerShellParser {
+	constructor(src, commands = [], depth = 0) {
+		this.src = src;
+		this.commands = commands;
+		this.depth = depth;
+		this.pos = 0;
+	}
+	atEnd() {
+		return this.pos >= this.src.length;
+	}
+	peek(offset = 0) {
+		return this.src.charAt(this.pos + offset);
+	}
+	skipBlanks() {
+		while (this.peek() === " " || this.peek() === "	") this.pos++;
+	}
+	atLineBreak() {
+		return this.peek() === "\n" || this.peek() === "\r";
+	}
+	parseProgram(segments) {
+		while (true) {
+			this.skipBlanks();
+			if (this.atEnd()) {
+				if (segments.length === 0) throw unsupported("The command is empty.");
+				if (segments[segments.length - 1]?.operator === "&&" || segments[segments.length - 1]?.operator === "||") throw unsupported("The line ends with an operator but no command follows it.");
+				return;
+			}
+			const start = this.pos;
+			this.parsePipeline();
+			const end = this.pos;
+			this.skipBlanks();
+			const operator = this.readListOperator();
+			segments.push({
+				source: this.src.slice(start, end).trim(),
+				...operator !== null ? { operator } : {}
+			});
+			if (operator === null) {
+				if (!this.atEnd()) throw unsupported(`Unexpected \`${this.peek()}\`.`);
+				return;
+			}
+			if (operator === ";" || operator === "\n") while (this.peek() === " " || this.peek() === "	" || this.atLineBreak()) this.pos++;
+			else this.skipBlanks();
+		}
+	}
+	readListOperator() {
+		const char = this.peek();
+		if (char === "&" && this.peek(1) === "&") {
+			this.pos += 2;
+			return "&&";
+		}
+		if (char === "|" && this.peek(1) === "|") {
+			this.pos += 2;
+			return "||";
+		}
+		if (char === ";") {
+			this.pos++;
+			return ";";
+		}
+		if (this.atLineBreak()) {
+			while (this.atLineBreak()) this.pos++;
+			return "\n";
+		}
+		return null;
+	}
+	parsePipeline() {
+		this.parseCommand();
+		while (this.peek() === "|" && this.peek(1) !== "|") {
+			this.pos++;
+			this.skipBlanks();
+			if (this.atEnd() || this.atLineBreak() || this.peek() === ";") throw unsupported("The line ends with `|` but no command follows it.");
+			this.parseCommand();
+		}
+	}
+	atRedirectStart() {
+		const char = this.peek();
+		if (char === ">") return true;
+		return /[1-6*]/.test(char) && this.peek(1) === ">";
+	}
+	parseCommand() {
+		const start = this.pos;
+		const command = {
+			assignments: [],
+			words: [],
+			redirects: [],
+			source: ""
+		};
+		let callOperator = false;
+		if (this.peek() === "&" && this.peek(1) !== "&") {
+			callOperator = true;
+			this.pos++;
+			this.skipBlanks();
+		}
+		while (true) {
+			this.skipBlanks();
+			if (this.atEnd() || this.atLineBreak() || this.peek() === ";" || this.peek() === "|") break;
+			if (this.peek() === "&") {
+				if (this.peek(1) === "&") break;
+				throw unsupported("`&` is only supported as the call operator in front of a command (not as a background job).");
+			}
+			if (this.peek() === "<") throw unsupported("`<` is not supported in PowerShell command lines.");
+			if (this.atRedirectStart()) {
+				command.redirects.push(this.parseRedirect());
+				continue;
+			}
+			const word = this.parseWord();
+			command.words.push(word);
+			if (command.words.length === 1) this.checkCommandWord(word);
+		}
+		if (command.words.length === 0 && (callOperator || command.redirects.length === 0)) throw unsupported("The line has an empty command (two operators in a row?).");
+		command.source = this.src.slice(start, this.pos).trim();
+		this.commands.push(command);
+	}
+	checkCommandWord(word) {
+		if (word.raw.startsWith("[")) throw unsupported(`\`${word.raw}\` (a type literal) is not supported.`);
+		if (!word.quoted && word.value === ".") throw unsupported("Dot-sourcing (`. file`) runs a script in the current scope and is not supported.");
+		if (!word.quoted && POWERSHELL_KEYWORDS.has(word.value.toLowerCase())) throw unsupported(`\`${word.value}\` starts a PowerShell statement, which is not supported.`);
+	}
+	parseRedirect() {
+		let fd;
+		if (this.peek() === "*") this.pos++;
+		else if (/[1-6]/.test(this.peek())) {
+			fd = Number(this.peek());
+			this.pos++;
+		}
+		let op = ">";
+		if (this.peek(1) === ">") op = ">>";
+		this.pos += op.length;
+		if (op === ">" && this.peek() === "&") {
+			if (/[1-6]/.test(this.peek(1))) {
+				const target = {
+					raw: this.peek(1),
+					value: this.peek(1),
+					dynamic: false,
+					quoted: false
+				};
+				this.pos += 2;
+				return {
+					op: ">&",
+					...fd !== void 0 ? { fd } : {},
+					target,
+					type: "dup"
+				};
+			}
+			throw unsupported("Only `>&1`-style stream merges (`2>&1`) are supported.");
+		}
+		this.skipBlanks();
+		if (this.atEnd() || this.atLineBreak() || /[;&|<>]/.test(this.peek())) throw unsupported(`The redirection \`${op}\` has no target.`);
+		const target = this.parseWord();
+		return {
+			op,
+			...fd !== void 0 ? { fd } : {},
+			target,
+			type: "write"
+		};
+	}
+	parseWord() {
+		const start = this.pos;
+		let value = "";
+		let dynamic = false;
+		let quoted = false;
+		if (this.src.startsWith("--%", this.pos) && /[\s;|&]|^$/.test(this.src.charAt(this.pos + 3))) throw unsupported("The stop-parsing token `--%` is not supported.");
+		while (!this.atEnd()) {
+			const char = this.peek();
+			if (char === " " || char === "	" || char === "\n" || char === "\r" || char === ";" || char === "|" || char === "&" || char === ">" || char === "<") break;
+			if (inSet(SINGLE_QUOTES, char)) {
+				this.pos++;
+				quoted = true;
+				while (true) {
+					if (this.atEnd()) throw new PowerShellRefusal("unbalanced-quotes", "A single quote is never closed.");
+					const inner = this.peek();
+					if (inSet(SINGLE_QUOTES, inner)) {
+						if (inSet(SINGLE_QUOTES, this.peek(1))) {
+							value += this.peek(1);
+							this.pos += 2;
+							continue;
+						}
+						this.pos++;
+						break;
+					}
+					value += inner;
+					this.pos++;
+				}
+				continue;
+			}
+			if (inSet(DOUBLE_QUOTES, char)) {
+				this.pos++;
+				quoted = true;
+				while (true) {
+					if (this.atEnd()) throw new PowerShellRefusal("unbalanced-quotes", "A double quote is never closed.");
+					const inner = this.peek();
+					if (inSet(DOUBLE_QUOTES, inner)) {
+						if (inSet(DOUBLE_QUOTES, this.peek(1))) {
+							value += this.peek(1);
+							this.pos += 2;
+							continue;
+						}
+						this.pos++;
+						break;
+					}
+					if (inner === "`") {
+						const next = this.peek(1);
+						if (next !== "" && (inSet(DOUBLE_QUOTES, next) || next === "`" || next === "$")) {
+							value += next;
+							this.pos += 2;
+							continue;
+						}
+						throw unsupported("Only `\"`, `` ` `` and `$` can follow a backtick inside double quotes.");
+					}
+					if (inner === "$") {
+						const read = this.readVariable();
+						value += read;
+						dynamic = true;
+						continue;
+					}
+					value += inner;
+					this.pos++;
+				}
+				continue;
+			}
+			if (char === "`") {
+				const next = this.peek(1);
+				if (next === "" || next === "\n" || next === "\r") throw unsupported("A backtick at the end of a line (line continuation) is not supported.");
+				value += next;
+				quoted = true;
+				this.pos += 2;
+				continue;
+			}
+			if (char === "$") {
+				const wasLiteral = this.src.charAt(this.pos + 1);
+				if (wasLiteral === "" || !(wasLiteral === "{" || wasLiteral === "(" || VARIABLE_CHAR.test(wasLiteral))) {
+					value += "$";
+					this.pos++;
+					continue;
+				}
+				value += this.readVariable();
+				dynamic = true;
+				continue;
+			}
+			if (char === "@" && this.pos === start) {
+				const next = this.peek(1);
+				if (next === "(" || next === "{" || next === "'" || next === "\"" || /[A-Za-z_$]/.test(next)) throw unsupported("Arrays (`@( )`), hashtables, splatting (`@name`) and here-strings are not supported.");
+			}
+			if (char === "{" || char === "}") throw unsupported("Script blocks and braces are not supported.");
+			if (char === "(" || char === ")") throw unsupported("Parentheses (grouping and `$( )` subexpressions) are not supported; quote the text.");
+			if (char === ",") throw unsupported("The comma operator builds an array and is not supported; quote the text.");
+			if (char === "#" && this.pos === start) throw unsupported("Comments are not supported in a command line.");
+			if (char === "*" || char === "?" || char === "[" || char === "~" && this.pos === start) dynamic = true;
+			value += char;
+			this.pos++;
+		}
+		return {
+			raw: this.src.slice(start, this.pos),
+			value,
+			dynamic,
+			quoted
+		};
+	}
+	/**
+	* Parse a `$( … )` subexpression: its commands run, so they are collected
+	* (before the command that contains it) and checked like any other.
+	*/
+	parseSubexpression() {
+		if (this.depth >= 8) throw unsupported("`$( )` subexpressions are nested too deeply.");
+		const open = this.pos;
+		let level = 0;
+		let index = open;
+		for (; index < this.src.length; index++) {
+			const char = this.src.charAt(index);
+			if (inSet(SINGLE_QUOTES, char) || inSet(DOUBLE_QUOTES, char)) {
+				const set = inSet(SINGLE_QUOTES, char) ? SINGLE_QUOTES : DOUBLE_QUOTES;
+				index++;
+				while (index < this.src.length) {
+					const inner = this.src.charAt(index);
+					if (inner === "`" && set === DOUBLE_QUOTES) {
+						index += 2;
+						continue;
+					}
+					if (inSet(set, inner)) {
+						if (inSet(set, this.src.charAt(index + 1))) {
+							index += 2;
+							continue;
+						}
+						break;
+					}
+					index++;
+				}
+				continue;
+			}
+			if (char === "`") {
+				index++;
+				continue;
+			}
+			if (char === "(") level++;
+			else if (char === ")") {
+				level--;
+				if (level === 0) break;
+			}
+		}
+		if (level !== 0) throw new PowerShellRefusal("unbalanced-quotes", "A `$(` subexpression is never closed.");
+		const inner = this.src.slice(open + 1, index);
+		new PowerShellParser(inner, this.commands, this.depth + 1).parseProgram([]);
+		this.pos = index + 1;
+	}
+	/** Read `$name`, `${name}` or `$env:NAME` at the cursor; a `$(` is refused. */
+	readVariable() {
+		const begin = this.pos;
+		this.pos++;
+		if (this.peek() === "(") {
+			this.parseSubexpression();
+			return this.src.slice(begin, this.pos);
+		}
+		if (this.peek() === "{") {
+			const close = this.src.indexOf("}", this.pos);
+			if (close === -1) throw new PowerShellRefusal("unbalanced-quotes", "A `${` variable name is never closed.");
+			this.pos = close + 1;
+			return this.src.slice(begin, this.pos);
+		}
+		while (!this.atEnd() && VARIABLE_CHAR.test(this.peek())) this.pos++;
+		return this.src.slice(begin, this.pos);
+	}
+};
+/** Parse a PowerShell command line for the shell policy. Never throws. */
+function parsePowerShellLine(line) {
+	const segments = [];
+	const parser = new PowerShellParser(line);
+	try {
+		parser.parseProgram(segments);
+		return {
+			ok: true,
+			commands: parser.commands,
+			segments,
+			background: false
+		};
+	} catch (error) {
+		if (error instanceof PowerShellRefusal) return {
+			ok: false,
+			reason: error.reason,
+			message: error.message
+		};
+		throw error;
+	}
+}
+
+//#endregion
+export { parsePowerShellLine };
+//# sourceMappingURL=powershell-parser.mjs.map

package/esm/policy/powershell-parser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"powershell-parser.mjs","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/powershell-parser.ts"],"sourcesContent":["import type {\n  ShellParseResult,\n  ShellRedirect,\n  ShellSegment,\n  ShellSimpleCommand,\n  ShellWord,\n} from \"./shell-parser\";\n\n/**\n * Parser for the PowerShell dialect (`powershell -Command` / `pwsh -Command`).\n *\n * Like the other dialects it is deliberately conservative: it finds every\n * simple command a line would run and every redirection target, and refuses\n * what it cannot read with confidence. Supported: `;` and line breaks, `&&`,\n * `||`, `|`, `$( )` subexpressions (their commands are checked too), the call\n * operator `&` in front of a command, single and double\n * quotes (including the typographic quotes PowerShell treats as quotes),\n * backtick escapes, `$name` / `${name}` / `$env:NAME` variables (dynamic\n * words), and the redirections `>`, `>>`, `2>`, `2>>`, `*>`, `2>&1`.\n *\n * Refused: script blocks and braces, bare parentheses,\n * `@( )` / `@{ }` / splatting / here-strings, the stop-parsing token `--%`,\n * `<` redirection, comments, the comma operator, compound-statement\n * keywords (`if`, `foreach`, `function`, `try`, …), dot-sourcing, a `&` that\n * is not a call operator (background jobs), and type literals.\n */\n\n/** Statement keywords that start a compound command; refused in command position. */\nconst POWERSHELL_KEYWORDS = new Set([\n  \"if\",\n  \"elseif\",\n  \"else\",\n  \"switch\",\n  \"foreach\",\n  \"for\",\n  \"while\",\n  \"do\",\n  \"until\",\n  \"function\",\n  \"filter\",\n  \"workflow\",\n  \"param\",\n  \"begin\",\n  \"process\",\n  \"end\",\n  \"try\",\n  \"catch\",\n  \"finally\",\n  \"trap\",\n  \"data\",\n  \"class\",\n  \"enum\",\n  \"using\",\n  \"return\",\n  \"break\",\n  \"continue\",\n  \"throw\",\n  \"parallel\",\n  \"sequence\",\n  \"inlinescript\",\n]);\n\n/** Characters PowerShell reads as a single quote. */\nconst SINGLE_QUOTES = \"'‘’‚‛\";\n\n/** Characters PowerShell reads as a double quote. */\nconst DOUBLE_QUOTES = '\"“”„';\n\n/** Variable-name characters after `$`. */\nconst VARIABLE_CHAR = /[A-Za-z0-9_:?^$]/;\n\n/** Whether `char` (never the empty end-of-input string) is one of `set`. */\nfunction inSet(set: string, char: string): boolean {\n  return char !== \"\" && set.includes(char);\n}\n\nclass PowerShellRefusal extends Error {\n  public constructor(\n    public readonly reason: \"unbalanced-quotes\" | \"unsupported-syntax\",\n    message: string,\n  ) {\n    super(message);\n  }\n}\n\nfunction unsupported(message: string): PowerShellRefusal {\n  return new PowerShellRefusal(\"unsupported-syntax\", message);\n}\n\nclass PowerShellParser {\n  private pos = 0;\n\n  public constructor(\n    private readonly src: string,\n    public readonly commands: ShellSimpleCommand[] = [],\n    private readonly depth = 0,\n  ) {}\n\n  private atEnd(): boolean {\n    return this.pos >= this.src.length;\n  }\n\n  private peek(offset = 0): string {\n    return this.src.charAt(this.pos + offset);\n  }\n\n  private skipBlanks(): void {\n    while (this.peek() === \" \" || this.peek() === \"\\t\") {\n      this.pos++;\n    }\n  }\n\n  private atLineBreak(): boolean {\n    return this.peek() === \"\\n\" || this.peek() === \"\\r\";\n  }\n\n  public parseProgram(segments: ShellSegment[]): void {\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n      this.skipBlanks();\n\n      if (this.atEnd()) {\n        if (segments.length === 0) {\n          throw unsupported(\"The command is empty.\");\n        }\n\n        if (\n          segments[segments.length - 1]?.operator === \"&&\" ||\n          segments[segments.length - 1]?.operator === \"||\"\n        ) {\n          throw unsupported(\"The line ends with an operator but no command follows it.\");\n        }\n\n        return;\n      }\n\n      const start = this.pos;\n\n      this.parsePipeline();\n\n      const end = this.pos;\n\n      this.skipBlanks();\n\n      const operator = this.readListOperator();\n\n      segments.push({\n        source: this.src.slice(start, end).trim(),\n        ...(operator !== null ? { operator } : {}),\n      });\n\n      if (operator === null) {\n        if (!this.atEnd()) {\n          throw unsupported(`Unexpected \\`${this.peek()}\\`.`);\n        }\n\n        return;\n      }\n\n      if (operator === \";\" || operator === \"\\n\") {\n        // Further separators and blanks are allowed after one; a trailing run is fine.\n        while (this.peek() === \" \" || this.peek() === \"\\t\" || this.atLineBreak()) {\n          this.pos++;\n        }\n      } else {\n        this.skipBlanks();\n      }\n    }\n  }\n\n  private readListOperator(): string | null {\n    const char = this.peek();\n\n    if (char === \"&\" && this.peek(1) === \"&\") {\n      this.pos += 2;\n\n      return \"&&\";\n    }\n\n    if (char === \"|\" && this.peek(1) === \"|\") {\n      this.pos += 2;\n\n      return \"||\";\n    }\n\n    if (char === \";\") {\n      this.pos++;\n\n      return \";\";\n    }\n\n    if (this.atLineBreak()) {\n      while (this.atLineBreak()) {\n        this.pos++;\n      }\n\n      return \"\\n\";\n    }\n\n    return null;\n  }\n\n  private parsePipeline(): void {\n    this.parseCommand();\n\n    while (this.peek() === \"|\" && this.peek(1) !== \"|\") {\n      this.pos++;\n      this.skipBlanks();\n\n      if (this.atEnd() || this.atLineBreak() || this.peek() === \";\") {\n        throw unsupported(\"The line ends with `|` but no command follows it.\");\n      }\n\n      this.parseCommand();\n    }\n  }\n\n  private atRedirectStart(): boolean {\n    const char = this.peek();\n\n    if (char === \">\") {\n      return true;\n    }\n\n    return /[1-6*]/.test(char) && this.peek(1) === \">\";\n  }\n\n  private parseCommand(): void {\n    const start = this.pos;\n    const command: ShellSimpleCommand = { assignments: [], words: [], redirects: [], source: \"\" };\n    let callOperator = false;\n\n    if (this.peek() === \"&\" && this.peek(1) !== \"&\") {\n      callOperator = true;\n      this.pos++;\n      this.skipBlanks();\n    }\n\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n      this.skipBlanks();\n\n      if (this.atEnd() || this.atLineBreak() || this.peek() === \";\" || this.peek() === \"|\") {\n        break;\n      }\n\n      if (this.peek() === \"&\") {\n        if (this.peek(1) === \"&\") {\n          break;\n        }\n\n        throw unsupported(\n          \"`&` is only supported as the call operator in front of a command (not as a background job).\",\n        );\n      }\n\n      if (this.peek() === \"<\") {\n        throw unsupported(\"`<` is not supported in PowerShell command lines.\");\n      }\n\n      if (this.atRedirectStart()) {\n        command.redirects.push(this.parseRedirect());\n\n        continue;\n      }\n\n      const word = this.parseWord();\n\n      command.words.push(word);\n\n      if (command.words.length === 1) {\n        this.checkCommandWord(word);\n      }\n    }\n\n    if (command.words.length === 0 && (callOperator || command.redirects.length === 0)) {\n      throw unsupported(\"The line has an empty command (two operators in a row?).\");\n    }\n\n    command.source = this.src.slice(start, this.pos).trim();\n    this.commands.push(command);\n  }\n\n  private checkCommandWord(word: ShellWord): void {\n    if (word.raw.startsWith(\"[\")) {\n      throw unsupported(`\\`${word.raw}\\` (a type literal) is not supported.`);\n    }\n\n    if (!word.quoted && word.value === \".\") {\n      throw unsupported(\n        \"Dot-sourcing (`. file`) runs a script in the current scope and is not supported.\",\n      );\n    }\n\n    if (!word.quoted && POWERSHELL_KEYWORDS.has(word.value.toLowerCase())) {\n      throw unsupported(`\\`${word.value}\\` starts a PowerShell statement, which is not supported.`);\n    }\n  }\n\n  private parseRedirect(): ShellRedirect {\n    let fd: number | undefined;\n\n    if (this.peek() === \"*\") {\n      this.pos++;\n    } else if (/[1-6]/.test(this.peek())) {\n      fd = Number(this.peek());\n      this.pos++;\n    }\n\n    let op = \">\";\n\n    if (this.peek(1) === \">\") {\n      op = \">>\";\n    }\n\n    this.pos += op.length;\n\n    if (op === \">\" && this.peek() === \"&\") {\n      if (/[1-6]/.test(this.peek(1))) {\n        const target: ShellWord = {\n          raw: this.peek(1),\n          value: this.peek(1),\n          dynamic: false,\n          quoted: false,\n        };\n\n        this.pos += 2;\n\n        return { op: \">&\", ...(fd !== undefined ? { fd } : {}), target, type: \"dup\" };\n      }\n\n      throw unsupported(\"Only `>&1`-style stream merges (`2>&1`) are supported.\");\n    }\n\n    this.skipBlanks();\n\n    if (this.atEnd() || this.atLineBreak() || /[;&|<>]/.test(this.peek())) {\n      throw unsupported(`The redirection \\`${op}\\` has no target.`);\n    }\n\n    const target = this.parseWord();\n\n    return { op, ...(fd !== undefined ? { fd } : {}), target, type: \"write\" };\n  }\n\n  private parseWord(): ShellWord {\n    const start = this.pos;\n    let value = \"\";\n    let dynamic = false;\n    let quoted = false;\n\n    if (this.src.startsWith(\"--%\", this.pos) && /[\\s;|&]|^$/.test(this.src.charAt(this.pos + 3))) {\n      throw unsupported(\"The stop-parsing token `--%` is not supported.\");\n    }\n\n    while (!this.atEnd()) {\n      const char = this.peek();\n\n      if (\n        char === \" \" ||\n        char === \"\\t\" ||\n        char === \"\\n\" ||\n        char === \"\\r\" ||\n        char === \";\" ||\n        char === \"|\" ||\n        char === \"&\" ||\n        char === \">\" ||\n        char === \"<\"\n      ) {\n        break;\n      }\n\n      if (inSet(SINGLE_QUOTES, char)) {\n        this.pos++;\n        quoted = true;\n\n        // eslint-disable-next-line no-constant-condition\n        while (true) {\n          if (this.atEnd()) {\n            throw new PowerShellRefusal(\"unbalanced-quotes\", \"A single quote is never closed.\");\n          }\n\n          const inner = this.peek();\n\n          if (inSet(SINGLE_QUOTES, inner)) {\n            if (inSet(SINGLE_QUOTES, this.peek(1))) {\n              value += this.peek(1);\n              this.pos += 2;\n\n              continue;\n            }\n\n            this.pos++;\n\n            break;\n          }\n\n          value += inner;\n          this.pos++;\n        }\n\n        continue;\n      }\n\n      if (inSet(DOUBLE_QUOTES, char)) {\n        this.pos++;\n        quoted = true;\n\n        // eslint-disable-next-line no-constant-condition\n        while (true) {\n          if (this.atEnd()) {\n            throw new PowerShellRefusal(\"unbalanced-quotes\", \"A double quote is never closed.\");\n          }\n\n          const inner = this.peek();\n\n          if (inSet(DOUBLE_QUOTES, inner)) {\n            if (inSet(DOUBLE_QUOTES, this.peek(1))) {\n              value += this.peek(1);\n              this.pos += 2;\n\n              continue;\n            }\n\n            this.pos++;\n\n            break;\n          }\n\n          if (inner === \"`\") {\n            const next = this.peek(1);\n\n            if (next !== \"\" && (inSet(DOUBLE_QUOTES, next) || next === \"`\" || next === \"$\")) {\n              value += next;\n              this.pos += 2;\n\n              continue;\n            }\n\n            throw unsupported(\n              'Only `\"`, `` ` `` and `$` can follow a backtick inside double quotes.',\n            );\n          }\n\n          if (inner === \"$\") {\n            const read = this.readVariable();\n\n            value += read;\n            dynamic = true;\n\n            continue;\n          }\n\n          value += inner;\n          this.pos++;\n        }\n\n        continue;\n      }\n\n      if (char === \"`\") {\n        const next = this.peek(1);\n\n        if (next === \"\" || next === \"\\n\" || next === \"\\r\") {\n          throw unsupported(\n            \"A backtick at the end of a line (line continuation) is not supported.\",\n          );\n        }\n\n        value += next;\n        quoted = true;\n        this.pos += 2;\n\n        continue;\n      }\n\n      if (char === \"$\") {\n        const wasLiteral = this.src.charAt(this.pos + 1);\n\n        if (\n          wasLiteral === \"\" ||\n          !(wasLiteral === \"{\" || wasLiteral === \"(\" || VARIABLE_CHAR.test(wasLiteral))\n        ) {\n          value += \"$\";\n          this.pos++;\n\n          continue;\n        }\n\n        value += this.readVariable();\n        dynamic = true;\n\n        continue;\n      }\n\n      if (char === \"@\" && this.pos === start) {\n        const next = this.peek(1);\n\n        if (\n          next === \"(\" ||\n          next === \"{\" ||\n          next === \"'\" ||\n          next === '\"' ||\n          /[A-Za-z_$]/.test(next)\n        ) {\n          throw unsupported(\n            \"Arrays (`@( )`), hashtables, splatting (`@name`) and here-strings are not supported.\",\n          );\n        }\n      }\n\n      if (char === \"{\" || char === \"}\") {\n        throw unsupported(\"Script blocks and braces are not supported.\");\n      }\n\n      if (char === \"(\" || char === \")\") {\n        throw unsupported(\n          \"Parentheses (grouping and `$( )` subexpressions) are not supported; quote the text.\",\n        );\n      }\n\n      if (char === \",\") {\n        throw unsupported(\n          \"The comma operator builds an array and is not supported; quote the text.\",\n        );\n      }\n\n      if (char === \"#\" && this.pos === start) {\n        throw unsupported(\"Comments are not supported in a command line.\");\n      }\n\n      if (char === \"*\" || char === \"?\" || char === \"[\" || (char === \"~\" && this.pos === start)) {\n        dynamic = true;\n      }\n\n      value += char;\n      this.pos++;\n    }\n\n    return { raw: this.src.slice(start, this.pos), value, dynamic, quoted };\n  }\n\n  /**\n   * Parse a `$( … )` subexpression: its commands run, so they are collected\n   * (before the command that contains it) and checked like any other.\n   */\n  private parseSubexpression(): void {\n    if (this.depth >= 8) {\n      throw unsupported(\"`$( )` subexpressions are nested too deeply.\");\n    }\n\n    const open = this.pos;\n    let level = 0;\n    let index = open;\n\n    for (; index < this.src.length; index++) {\n      const char = this.src.charAt(index);\n\n      if (inSet(SINGLE_QUOTES, char) || inSet(DOUBLE_QUOTES, char)) {\n        const set = inSet(SINGLE_QUOTES, char) ? SINGLE_QUOTES : DOUBLE_QUOTES;\n\n        index++;\n\n        while (index < this.src.length) {\n          const inner = this.src.charAt(index);\n\n          if (inner === \"`\" && set === DOUBLE_QUOTES) {\n            index += 2;\n\n            continue;\n          }\n\n          if (inSet(set, inner)) {\n            if (inSet(set, this.src.charAt(index + 1))) {\n              index += 2;\n\n              continue;\n            }\n\n            break;\n          }\n\n          index++;\n        }\n\n        continue;\n      }\n\n      if (char === \"`\") {\n        index++;\n\n        continue;\n      }\n\n      if (char === \"(\") {\n        level++;\n      } else if (char === \")\") {\n        level--;\n\n        if (level === 0) {\n          break;\n        }\n      }\n    }\n\n    if (level !== 0) {\n      throw new PowerShellRefusal(\"unbalanced-quotes\", \"A `$(` subexpression is never closed.\");\n    }\n\n    const inner = this.src.slice(open + 1, index);\n\n    new PowerShellParser(inner, this.commands, this.depth + 1).parseProgram([]);\n    this.pos = index + 1;\n  }\n\n  /** Read `$name`, `${name}` or `$env:NAME` at the cursor; a `$(` is refused. */\n  private readVariable(): string {\n    const begin = this.pos;\n\n    this.pos++;\n\n    if (this.peek() === \"(\") {\n      this.parseSubexpression();\n\n      return this.src.slice(begin, this.pos);\n    }\n\n    if (this.peek() === \"{\") {\n      const close = this.src.indexOf(\"}\", this.pos);\n\n      if (close === -1) {\n        throw new PowerShellRefusal(\"unbalanced-quotes\", \"A `${` variable name is never closed.\");\n      }\n\n      this.pos = close + 1;\n\n      return this.src.slice(begin, this.pos);\n    }\n\n    while (!this.atEnd() && VARIABLE_CHAR.test(this.peek())) {\n      this.pos++;\n    }\n\n    return this.src.slice(begin, this.pos);\n  }\n}\n\n/** Parse a PowerShell command line for the shell policy. Never throws. */\nexport function parsePowerShellLine(line: string): ShellParseResult {\n  const segments: ShellSegment[] = [];\n  const parser = new PowerShellParser(line);\n\n  try {\n    parser.parseProgram(segments);\n\n    return { ok: true, commands: parser.commands, segments, background: false };\n  } catch (error) {\n    if (error instanceof PowerShellRefusal) {\n      return { ok: false, reason: error.reason, message: error.message };\n    }\n\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA4BA,MAAM,sCAAsB,IAAI,IAAI;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,MAAM,gBAAgB;;AAGtB,MAAM,gBAAgB;;AAGtB,MAAM,gBAAgB;;AAGtB,SAAS,MAAM,KAAa,MAAuB;CACjD,OAAO,SAAS,MAAM,IAAI,SAAS,IAAI;AACzC;AAEA,IAAM,oBAAN,cAAgC,MAAM;CACpC,AAAO,YACL,AAAgB,QAChB,SACA;EACA,MAAM,OAAO;EAHG;CAIlB;AACF;AAEA,SAAS,YAAY,SAAoC;CACvD,OAAO,IAAI,kBAAkB,sBAAsB,OAAO;AAC5D;AAEA,IAAM,mBAAN,MAAM,iBAAiB;CAGrB,AAAO,YACL,AAAiB,KACjB,AAAgB,WAAiC,CAAC,GAClD,AAAiB,QAAQ,GACzB;EAHiB;EACD;EACC;aALL;CAMX;CAEH,AAAQ,QAAiB;EACvB,OAAO,KAAK,OAAO,KAAK,IAAI;CAC9B;CAEA,AAAQ,KAAK,SAAS,GAAW;EAC/B,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,MAAM;CAC1C;CAEA,AAAQ,aAAmB;EACzB,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KAC5C,KAAK;CAET;CAEA,AAAQ,cAAuB;EAC7B,OAAO,KAAK,KAAK,MAAM,QAAQ,KAAK,KAAK,MAAM;CACjD;CAEA,AAAO,aAAa,UAAgC;EAElD,OAAO,MAAM;GACX,KAAK,WAAW;GAEhB,IAAI,KAAK,MAAM,GAAG;IAChB,IAAI,SAAS,WAAW,GACtB,MAAM,YAAY,uBAAuB;IAG3C,IACE,SAAS,SAAS,SAAS,EAAE,EAAE,aAAa,QAC5C,SAAS,SAAS,SAAS,EAAE,EAAE,aAAa,MAE5C,MAAM,YAAY,2DAA2D;IAG/E;GACF;GAEA,MAAM,QAAQ,KAAK;GAEnB,KAAK,cAAc;GAEnB,MAAM,MAAM,KAAK;GAEjB,KAAK,WAAW;GAEhB,MAAM,WAAW,KAAK,iBAAiB;GAEvC,SAAS,KAAK;IACZ,QAAQ,KAAK,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK;IACxC,GAAI,aAAa,OAAO,EAAE,SAAS,IAAI,CAAC;GAC1C,CAAC;GAED,IAAI,aAAa,MAAM;IACrB,IAAI,CAAC,KAAK,MAAM,GACd,MAAM,YAAY,gBAAgB,KAAK,KAAK,EAAE,IAAI;IAGpD;GACF;GAEA,IAAI,aAAa,OAAO,aAAa,MAEnC,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,OAAQ,KAAK,YAAY,GACrE,KAAK;QAGP,KAAK,WAAW;EAEpB;CACF;CAEA,AAAQ,mBAAkC;EACxC,MAAM,OAAO,KAAK,KAAK;EAEvB,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK;GACxC,KAAK,OAAO;GAEZ,OAAO;EACT;EAEA,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK;GACxC,KAAK,OAAO;GAEZ,OAAO;EACT;EAEA,IAAI,SAAS,KAAK;GAChB,KAAK;GAEL,OAAO;EACT;EAEA,IAAI,KAAK,YAAY,GAAG;GACtB,OAAO,KAAK,YAAY,GACtB,KAAK;GAGP,OAAO;EACT;EAEA,OAAO;CACT;CAEA,AAAQ,gBAAsB;EAC5B,KAAK,aAAa;EAElB,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK;GAClD,KAAK;GACL,KAAK,WAAW;GAEhB,IAAI,KAAK,MAAM,KAAK,KAAK,YAAY,KAAK,KAAK,KAAK,MAAM,KACxD,MAAM,YAAY,mDAAmD;GAGvE,KAAK,aAAa;EACpB;CACF;CAEA,AAAQ,kBAA2B;EACjC,MAAM,OAAO,KAAK,KAAK;EAEvB,IAAI,SAAS,KACX,OAAO;EAGT,OAAO,SAAS,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM;CACjD;CAEA,AAAQ,eAAqB;EAC3B,MAAM,QAAQ,KAAK;EACnB,MAAM,UAA8B;GAAE,aAAa,CAAC;GAAG,OAAO,CAAC;GAAG,WAAW,CAAC;GAAG,QAAQ;EAAG;EAC5F,IAAI,eAAe;EAEnB,IAAI,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK;GAC/C,eAAe;GACf,KAAK;GACL,KAAK,WAAW;EAClB;EAGA,OAAO,MAAM;GACX,KAAK,WAAW;GAEhB,IAAI,KAAK,MAAM,KAAK,KAAK,YAAY,KAAK,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KAC/E;GAGF,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,IAAI,KAAK,KAAK,CAAC,MAAM,KACnB;IAGF,MAAM,YACJ,6FACF;GACF;GAEA,IAAI,KAAK,KAAK,MAAM,KAClB,MAAM,YAAY,mDAAmD;GAGvE,IAAI,KAAK,gBAAgB,GAAG;IAC1B,QAAQ,UAAU,KAAK,KAAK,cAAc,CAAC;IAE3C;GACF;GAEA,MAAM,OAAO,KAAK,UAAU;GAE5B,QAAQ,MAAM,KAAK,IAAI;GAEvB,IAAI,QAAQ,MAAM,WAAW,GAC3B,KAAK,iBAAiB,IAAI;EAE9B;EAEA,IAAI,QAAQ,MAAM,WAAW,MAAM,gBAAgB,QAAQ,UAAU,WAAW,IAC9E,MAAM,YAAY,0DAA0D;EAG9E,QAAQ,SAAS,KAAK,IAAI,MAAM,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK;EACtD,KAAK,SAAS,KAAK,OAAO;CAC5B;CAEA,AAAQ,iBAAiB,MAAuB;EAC9C,IAAI,KAAK,IAAI,WAAW,GAAG,GACzB,MAAM,YAAY,KAAK,KAAK,IAAI,sCAAsC;EAGxE,IAAI,CAAC,KAAK,UAAU,KAAK,UAAU,KACjC,MAAM,YACJ,kFACF;EAGF,IAAI,CAAC,KAAK,UAAU,oBAAoB,IAAI,KAAK,MAAM,YAAY,CAAC,GAClE,MAAM,YAAY,KAAK,KAAK,MAAM,0DAA0D;CAEhG;CAEA,AAAQ,gBAA+B;EACrC,IAAI;EAEJ,IAAI,KAAK,KAAK,MAAM,KAClB,KAAK;OACA,IAAI,QAAQ,KAAK,KAAK,KAAK,CAAC,GAAG;GACpC,KAAK,OAAO,KAAK,KAAK,CAAC;GACvB,KAAK;EACP;EAEA,IAAI,KAAK;EAET,IAAI,KAAK,KAAK,CAAC,MAAM,KACnB,KAAK;EAGP,KAAK,OAAO,GAAG;EAEf,IAAI,OAAO,OAAO,KAAK,KAAK,MAAM,KAAK;GACrC,IAAI,QAAQ,KAAK,KAAK,KAAK,CAAC,CAAC,GAAG;IAC9B,MAAM,SAAoB;KACxB,KAAK,KAAK,KAAK,CAAC;KAChB,OAAO,KAAK,KAAK,CAAC;KAClB,SAAS;KACT,QAAQ;IACV;IAEA,KAAK,OAAO;IAEZ,OAAO;KAAE,IAAI;KAAM,GAAI,OAAO,SAAY,EAAE,GAAG,IAAI,CAAC;KAAI;KAAQ,MAAM;IAAM;GAC9E;GAEA,MAAM,YAAY,wDAAwD;EAC5E;EAEA,KAAK,WAAW;EAEhB,IAAI,KAAK,MAAM,KAAK,KAAK,YAAY,KAAK,UAAU,KAAK,KAAK,KAAK,CAAC,GAClE,MAAM,YAAY,qBAAqB,GAAG,kBAAkB;EAG9D,MAAM,SAAS,KAAK,UAAU;EAE9B,OAAO;GAAE;GAAI,GAAI,OAAO,SAAY,EAAE,GAAG,IAAI,CAAC;GAAI;GAAQ,MAAM;EAAQ;CAC1E;CAEA,AAAQ,YAAuB;EAC7B,MAAM,QAAQ,KAAK;EACnB,IAAI,QAAQ;EACZ,IAAI,UAAU;EACd,IAAI,SAAS;EAEb,IAAI,KAAK,IAAI,WAAW,OAAO,KAAK,GAAG,KAAK,aAAa,KAAK,KAAK,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,GACzF,MAAM,YAAY,gDAAgD;EAGpE,OAAO,CAAC,KAAK,MAAM,GAAG;GACpB,MAAM,OAAO,KAAK,KAAK;GAEvB,IACE,SAAS,OACT,SAAS,OACT,SAAS,QACT,SAAS,QACT,SAAS,OACT,SAAS,OACT,SAAS,OACT,SAAS,OACT,SAAS,KAET;GAGF,IAAI,MAAM,eAAe,IAAI,GAAG;IAC9B,KAAK;IACL,SAAS;IAGT,OAAO,MAAM;KACX,IAAI,KAAK,MAAM,GACb,MAAM,IAAI,kBAAkB,qBAAqB,iCAAiC;KAGpF,MAAM,QAAQ,KAAK,KAAK;KAExB,IAAI,MAAM,eAAe,KAAK,GAAG;MAC/B,IAAI,MAAM,eAAe,KAAK,KAAK,CAAC,CAAC,GAAG;OACtC,SAAS,KAAK,KAAK,CAAC;OACpB,KAAK,OAAO;OAEZ;MACF;MAEA,KAAK;MAEL;KACF;KAEA,SAAS;KACT,KAAK;IACP;IAEA;GACF;GAEA,IAAI,MAAM,eAAe,IAAI,GAAG;IAC9B,KAAK;IACL,SAAS;IAGT,OAAO,MAAM;KACX,IAAI,KAAK,MAAM,GACb,MAAM,IAAI,kBAAkB,qBAAqB,iCAAiC;KAGpF,MAAM,QAAQ,KAAK,KAAK;KAExB,IAAI,MAAM,eAAe,KAAK,GAAG;MAC/B,IAAI,MAAM,eAAe,KAAK,KAAK,CAAC,CAAC,GAAG;OACtC,SAAS,KAAK,KAAK,CAAC;OACpB,KAAK,OAAO;OAEZ;MACF;MAEA,KAAK;MAEL;KACF;KAEA,IAAI,UAAU,KAAK;MACjB,MAAM,OAAO,KAAK,KAAK,CAAC;MAExB,IAAI,SAAS,OAAO,MAAM,eAAe,IAAI,KAAK,SAAS,OAAO,SAAS,MAAM;OAC/E,SAAS;OACT,KAAK,OAAO;OAEZ;MACF;MAEA,MAAM,YACJ,wEACF;KACF;KAEA,IAAI,UAAU,KAAK;MACjB,MAAM,OAAO,KAAK,aAAa;MAE/B,SAAS;MACT,UAAU;MAEV;KACF;KAEA,SAAS;KACT,KAAK;IACP;IAEA;GACF;GAEA,IAAI,SAAS,KAAK;IAChB,MAAM,OAAO,KAAK,KAAK,CAAC;IAExB,IAAI,SAAS,MAAM,SAAS,QAAQ,SAAS,MAC3C,MAAM,YACJ,uEACF;IAGF,SAAS;IACT,SAAS;IACT,KAAK,OAAO;IAEZ;GACF;GAEA,IAAI,SAAS,KAAK;IAChB,MAAM,aAAa,KAAK,IAAI,OAAO,KAAK,MAAM,CAAC;IAE/C,IACE,eAAe,MACf,EAAE,eAAe,OAAO,eAAe,OAAO,cAAc,KAAK,UAAU,IAC3E;KACA,SAAS;KACT,KAAK;KAEL;IACF;IAEA,SAAS,KAAK,aAAa;IAC3B,UAAU;IAEV;GACF;GAEA,IAAI,SAAS,OAAO,KAAK,QAAQ,OAAO;IACtC,MAAM,OAAO,KAAK,KAAK,CAAC;IAExB,IACE,SAAS,OACT,SAAS,OACT,SAAS,OACT,SAAS,QACT,aAAa,KAAK,IAAI,GAEtB,MAAM,YACJ,sFACF;GAEJ;GAEA,IAAI,SAAS,OAAO,SAAS,KAC3B,MAAM,YAAY,6CAA6C;GAGjE,IAAI,SAAS,OAAO,SAAS,KAC3B,MAAM,YACJ,qFACF;GAGF,IAAI,SAAS,KACX,MAAM,YACJ,0EACF;GAGF,IAAI,SAAS,OAAO,KAAK,QAAQ,OAC/B,MAAM,YAAY,+CAA+C;GAGnE,IAAI,SAAS,OAAO,SAAS,OAAO,SAAS,OAAQ,SAAS,OAAO,KAAK,QAAQ,OAChF,UAAU;GAGZ,SAAS;GACT,KAAK;EACP;EAEA,OAAO;GAAE,KAAK,KAAK,IAAI,MAAM,OAAO,KAAK,GAAG;GAAG;GAAO;GAAS;EAAO;CACxE;;;;;CAMA,AAAQ,qBAA2B;EACjC,IAAI,KAAK,SAAS,GAChB,MAAM,YAAY,8CAA8C;EAGlE,MAAM,OAAO,KAAK;EAClB,IAAI,QAAQ;EACZ,IAAI,QAAQ;EAEZ,OAAO,QAAQ,KAAK,IAAI,QAAQ,SAAS;GACvC,MAAM,OAAO,KAAK,IAAI,OAAO,KAAK;GAElC,IAAI,MAAM,eAAe,IAAI,KAAK,MAAM,eAAe,IAAI,GAAG;IAC5D,MAAM,MAAM,MAAM,eAAe,IAAI,IAAI,gBAAgB;IAEzD;IAEA,OAAO,QAAQ,KAAK,IAAI,QAAQ;KAC9B,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK;KAEnC,IAAI,UAAU,OAAO,QAAQ,eAAe;MAC1C,SAAS;MAET;KACF;KAEA,IAAI,MAAM,KAAK,KAAK,GAAG;MACrB,IAAI,MAAM,KAAK,KAAK,IAAI,OAAO,QAAQ,CAAC,CAAC,GAAG;OAC1C,SAAS;OAET;MACF;MAEA;KACF;KAEA;IACF;IAEA;GACF;GAEA,IAAI,SAAS,KAAK;IAChB;IAEA;GACF;GAEA,IAAI,SAAS,KACX;QACK,IAAI,SAAS,KAAK;IACvB;IAEA,IAAI,UAAU,GACZ;GAEJ;EACF;EAEA,IAAI,UAAU,GACZ,MAAM,IAAI,kBAAkB,qBAAqB,uCAAuC;EAG1F,MAAM,QAAQ,KAAK,IAAI,MAAM,OAAO,GAAG,KAAK;EAE5C,IAAI,iBAAiB,OAAO,KAAK,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;EAC1E,KAAK,MAAM,QAAQ;CACrB;;CAGA,AAAQ,eAAuB;EAC7B,MAAM,QAAQ,KAAK;EAEnB,KAAK;EAEL,IAAI,KAAK,KAAK,MAAM,KAAK;GACvB,KAAK,mBAAmB;GAExB,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK,GAAG;EACvC;EAEA,IAAI,KAAK,KAAK,MAAM,KAAK;GACvB,MAAM,QAAQ,KAAK,IAAI,QAAQ,KAAK,KAAK,GAAG;GAE5C,IAAI,UAAU,IACZ,MAAM,IAAI,kBAAkB,qBAAqB,uCAAuC;GAG1F,KAAK,MAAM,QAAQ;GAEnB,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK,GAAG;EACvC;EAEA,OAAO,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,KAAK,KAAK,CAAC,GACpD,KAAK;EAGP,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK,GAAG;CACvC;AACF;;AAGA,SAAgB,oBAAoB,MAAgC;CAClE,MAAM,WAA2B,CAAC;CAClC,MAAM,SAAS,IAAI,iBAAiB,IAAI;CAExC,IAAI;EACF,OAAO,aAAa,QAAQ;EAE5B,OAAO;GAAE,IAAI;GAAM,UAAU,OAAO;GAAU;GAAU,YAAY;EAAM;CAC5E,SAAS,OAAO;EACd,IAAI,iBAAiB,mBACnB,OAAO;GAAE,IAAI;GAAO,QAAQ,MAAM;GAAQ,SAAS,MAAM;EAAQ;EAGnE,MAAM;CACR;AACF"}

package/esm/policy/shell-check.d.mts

@@ -1,6 +1,8 @@
-import { WorkspacePolicy } from "../contracts/workspace-policy.type.mjs";
+import { WorkspaceShellAsk, WorkspaceShellClassification } from "../contracts/shell-approval.type.mjs";
+import { WorkspaceCommandPattern, WorkspacePolicy } from "../contracts/workspace-policy.type.mjs";
 import "../contracts/index.mjs";
 import { WorkspaceShellRefusalReason } from "../errors.mjs";
+import { ResolvedShell, ShellHost } from "./shell-interpreter.mjs";
 //#region ../../packages/ai-workspace/src/policy/shell-check.d.ts
 /** How a shell-mode line touches a path the jail has to vet. */
 export type WorkspaceShellPathAccess = "read" | "write" | "cwd";
@@ -28,11 +30,26 @@ export interface WorkspaceShellCheck {
   executable?: string;
   /** The redirection target or `cd` directory a `"path-escape"` refusal is about. */
   path?: string;
+  /**
+   * Commands that need a decision from `shell.onAsk` before the line may run.
+   * When non-empty, `allowed` is `false` with reason `"approval-required"`;
+   * the ops layer asks, and refuses with `"approval-denied"` if the answer is no.
+   */
+  asks: WorkspaceShellAsk[];
   /** The argv of every simple command checked, in order (wrapped commands included). */
   commands: string[][];
   /** Shell mode: every redirection target and `cd` directory, for the jail recheck. */
   paths: WorkspaceShellPath[];
 }
+/** Options a check takes beyond the policy and the line. */
+export interface ShellCheckOptions {
+  /** Patterns a host approved earlier with `remember`; they allow what would ask, never what is denied. */
+  remembered?: readonly WorkspaceCommandPattern[];
+  /** The host the `"auto"` interpreter is resolved against (tests inject one). */
+  host?: ShellHost;
+  /** The already-resolved shell, to skip resolving it again. */
+  resolved?: ResolvedShell;
+}
 /**
  * The shell policy's verdict on a command line, without touching the
  * filesystem.
@@ -58,6 +75,19 @@ export interface WorkspaceShellCheck {
  * checkShellCommand({ cwd, shell: { allow: ["git"] } }, "git add -A && git commit -m wip");
  * // { allowed: false, reason: "metacharacter", message: "`&&` is not supported in argv mode: run `git add -A`, then `git commit -m wip`, …" }
  */
-export declare function checkShellCommand(policy: WorkspacePolicy, command: string): WorkspaceShellCheck;
+export declare function checkShellCommand(policy: WorkspacePolicy, command: string, options?: ShellCheckOptions): WorkspaceShellCheck;
+/**
+ * The simple commands a line would run (pipeline members, `&&` / `||` / `;`
+ * parts, subshells and substitutions included), without checking anything.
+ * A line the parser cannot read with confidence comes back with `opaque`
+ * set to the reason and no commands.
+ *
+ * The line is read with the policy's shell dialect when its `interpreter`
+ * is a shell, and with the platform's default shell otherwise.
+ *
+ * @example
+ * classifyShellCommand("a | b"); // { commands: [["a"], ["b"]] }
+ */
+export declare function classifyShellCommand(command: string, policy?: Pick<WorkspacePolicy, "shell">, host?: ShellHost): WorkspaceShellClassification;
 //#endregion
 //# sourceMappingURL=shell-check.d.mts.map

package/esm/policy/shell-check.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-check.d.mts","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/shell-check.ts"],"mappings":";;;;;YAmBY;;iBAGK;;EAEf;;EAEA,QAAQ;;EAER;;;;;;iBAOe;;EAEf;;EAEA,SAAS;;EAET;;EAEA;;EAEA;;EAEA;;EAEA,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA6hCO,kBAAkB,QAAQ,iBAAiB,kBAAkB"}
+{"version":3,"file":"shell-check.d.mts","names":[],"sources":["../../../../../../../../packages/ai-workspace/src/policy/shell-check.ts"],"mappings":";;;;;;;YAkCY;;iBAGK;;EAEf;;EAEA,QAAQ;;EAER;;;;;;iBAOe;;EAEf;;EAEA,SAAS;;EAET;;EAEA;;EAEA;;;;;;EAMA,MAAM;;EAEN;;EAEA,OAAO;;;iBAwQQ;;EAEf,sBAAsB;;EAEtB,OAAO;;EAEP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAggCG,kBACd,QAAQ,iBACR,iBACA,UAAU,oBACT;;;;;;;;;;;;;wBAyHa,qBACd,iBACA,SAAS,KAAK,2BACd,OAAO,YACN"}