Skip to main content

provost

CI PyPI License: GPL-3.0-or-later REUSE status

Turn command output into data. Run a command, and provost captures its output, auto-detects the format, and files it as a tidy, one-row-per-record dataset in a git-backed store — every capture a commit, every row traceable to its source.

Beta. provost is the simplified, single-tool successor to the three-binary Envoy suite — see docs/0001-rename-and-simplification.md.

Install

pip install provost

The PyPI package (provost) bundles the complete tool — the provost entry point plus its extract/analyze/transform engines — and a thin Python launcher execs it in place. Requires bash and git.

Quick start

provost doctor                   # check engines + store

free -m | provost                # capture stdin → auto-detect → tidy dataset 'free'
provost run df -h                # capture a command's output → dataset 'df'
provost ls                       # list datasets
provost show df                  # present a dataset (leading #N = row index)
provost source 5                 # the original input behind row #5
provost stats df                 # statistics on the dataset

What it does

run/inject  →  auto-detect (generic parsers + hint rules)  →  tidy melt  →  git-backed store
  • Auto-capture format — ~110 generic format parsers (delimited and structured), a declarative hints table, and ~145 tool-specific strategies recognise JSON, tables, logs, and system-tool output (df, ps aux, free, mount, docker, …).
  • Named datasets — provost run CMD files into a dataset named after the command (looking through sudo, env, timeout, …); piped input is named after the parser that recognised it; --name NAME overrides either.
  • Present a dataset — a wide entry<N>.field extract is melted to one row per record; same-typed captures reconcile into one table.
  • Git core — the store is a git repo; every capture is a commit tagged capture-<id>. provost log lists them, provost restore <id> brings one back up.
  • Provenance — every dataset row has a globally-unique visible #N; provost source N shows the exact captured input that produced it.
  • Global or per-directory — captures go to a global store (~/.provost) by default; provost control <dir> makes a directory its own instance.
  • Portable — provost export bundles the store; provost import reopens it elsewhere. Datasets, history, and provenance all survive the move.
  • Analyze — provost stats <dataset> runs the vendored analyze engine.

Command reference

Command Purpose
provost run [--] <cmd> capture a command's output as a commit, into dataset <cmd>
<cmd> | provost / provost [FILE] inject stdin / a file
provost batch FILE... [--from LIST] inject many files as one commit, a capture each, parsed in parallel (-j N)
provost listen <cmd> / unlisten <cmd> capture <cmd> every time it runs (output still on screen)
… --name NAME file into dataset NAME (inject/run)
… --show show the output as well as filing it (inject/run)
… --sync / --async foreground / background capture (default: background only at a terminal)
… --plugin-dir <dir> extra strategy dir for this capture (inject/run)
… --context-columns each key=value in a #% prologue becomes a column on every row (inject/batch)
provost ls / show <name> / stats <name> datasets (show --capture ID: one capture's rows; --at ID: as it stood then)
provost search <pattern> [name...] git grep over the rows (--output: raw outputs; --files: run files; --at ID)
provost source <#N | ID> original source behind a dataset row, or a capture
provost diff [name] [A [B]] rows and run files that changed between two captures
provost log [--failed] / restore <id|latest> / prev / next capture history / move the store to a capture and back
provost control [<dir>] / uncontrol / instances per-directory capture instances (each run keeps the directory's files)
provost files [ID] [path] [--to dir] a controlled directory's files as a capture kept them
provost export [<file>] / import <file> [<dest>] portable store bundle
provost triage low-confidence / unmatched bucket
provost doctor engine + store check
provost help / help advanced / <command> --help short help / full reference / one command's usage

Every dataset row carries # (its number in the store), capture (the capture it came from, e.g. c0007) and, for records, n (its place in that capture).

Layout

provost/
├── provost               # the single entry point
├── extract/            # extract engine, 268 strategies (~116 generic), hints.tsv
├── analyze/            # analyze engine
├── transform/          # tidy-melt transform
├── lib/                # shared suite libraries
├── completions/, man/  # bash completion, man page
└── tests/              # smoke + unit tests

Standalone repository

This tree is fully self-contained: provost resolves its engines from its own directory, so it runs with no external dependencies. The extract/, analyze/, transform/, and lib/ trees were originally imported from the Envoy suite but are now first-party provost code, maintained here directly — there is no live tie to upstream Envoy. Add extract strategies under extract/strategies/ and edit the engines in place; run each tree's own test suite to keep it green.

Integrating from another tool

Wrappers that pipe into provost (e.g. deframe) get two hooks:

  • --plugin-dir <dir> (or PROVOST_PLUGIN_DIR): an extra strategy directory that competes in format detection for that capture — no symlink into the engine's ~/.config/provost/strategies user dir needed. The winning plugin dir is recorded in the capture's metadata.
  • #% metadata prologue: a leading run of #% lines on injected input is capture context, not data. It is peeled off before detection (so it can never corrupt the generic parsers), stored with the capture as context.txt, and provost source still shows the original input verbatim. A #% line after the first data line is data and passes through untouched — so context no longer has to travel out-of-band in a run manifest. With --context-columns (or PROVOST_CONTEXT_COLUMNS=1) each key=value word in it is also put on every row the capture files, after # and capture: #% host=web03 rack=r2 gives each row host and rack columns. A data column of the same name keeps it and the context one becomes _host (the rule capture already follows), and the capture's meta.tsv records which columns came from the context (context_columns host=_host,rack=rack); a capture held in unsorted is kept as it came.
  • provost batch FILE... [--from LIST]: many inputs, one commit. Each file is a capture of its own — its own id, its own provost source, its own capture-<id> tag — but they are parsed in parallel (-j N, default the CPUs, at most 16) and filed under one hold of the store lock, so capturing a 50-host fleet costs one commit rather than fifty serialised ones. Ids follow the order the files were named. --name NAME applies to the files after it; --from LIST reads PATH or NAME<TAB>PATH lines. A fleet wrapper writes one file per host opening with #% host=NAME and passes --context-columns, and every row says which host it came from.

The store itself is plain files (TSV datasets, per-capture meta.tsv + output.txt, provenance.tsv), so other tools can browse it read-only without provost installed. Meridian Commander ships a Provost data plug-in that does exactly that: datasets as scrollable tables, the capture log, and each row's original input via its #N provenance index — including stores on remote (SFTP/SSH) hosts.

Environment

Variable Default Meaning
PROVOST_HOME ~/.provost global store directory
PROVOST_WORKSPACE — explicit store override (wins)
PROVOST_MIN_CONFIDENCE 50 commit threshold (0–100)
PROVOST_PLUGIN_DIR — extra strategy dir for detection (same as --plugin-dir)
PROVOST_ASYNC unset 1 always background, 0 always foreground; unset = background only at a terminal
PROVOST_MULTI 0 file every dataset an input holds (same as --multi)
PROVOST_CONTEXT_COLUMNS 0 1 = each key=value word of a #% prologue becomes a column on the capture's rows (same as --context-columns)
PROVOST_AUTO_MULTI 1 segment a parse the quality gate would hold, when the parts are clearly better (0 = hold it; same as --no-auto-multi)
PROVOST_MODEL 0 1 = when the gate would still hold a parse, try the learned layout model and file its table if it passes the same gate (needs python3; same as --model)
PROVOST_LLM 0 1 = parse with a template Claude wrote for that tool (regexes, or a small boxed Python parser for records that span lines; stored in the store's llm-templates/, or shipped), before a generic parse is trusted or a capture held; with no fitting template and an API key, ask Claude to write one. Writing one sends the capture to the Anthropic API, once per tool; lines a template sets aside that still carry a word or a number (titles, version banners, summary counts, errors) are filed beside its datasets as NAME.notes, never dropped; later captures of the tool are parsed offline, except one that shows a kind of line the template has not met, which (with a key) is sent once with the template's earlier captures so Claude can extend it (repair; kept only if it still reads them) (same as --llm)
PROVOST_LLM_MODEL claude-opus-5-5 the model that writes templates
PROVOST_LLM_API_KEY — Anthropic API key for --llm (else ANTHROPIC_API_KEY; prefer this one where ANTHROPIC_API_KEY is taken, e.g. in a Claude Code environment, which keeps that name for its own sign-in)
PROVOST_LLM_BASE_URL https://api.anthropic.com API base URL
PROVOST_LLM_TEMPLATE_DIRS — colon-separated directories of templates to look in after the store's llm-templates/ and before the ones shipped with provost
PROVOST_LLM_LOG — a file to append one JSON line per API reply to (purpose, tool, model, token usage), to add up what --llm cost
PROVOST_MAX_INPUT 10485760 max input bytes (inject and run)
PROVOST_LOCK_TIMEOUT 30 seconds to wait for the store lock
PROVOST_LOCK_MAX_AGE 3600 seconds after which a lock is presumed stale
PROVOST_RECONCILE_OVERLAP 60 % column overlap to union vs split a variant
PROVOST_QUIET 0 1 suppresses progress/ok messages (same as --silent)

Tests

bash tests/smoke.sh                  # end-to-end
bash transform/tests/test_melt.sh    # transform unit tests
bash extract/tests/run_tests.sh      # extract strategies + engine
bash analyze/tests/run_tests.sh      # analyze engine
bash tests/corpus/run.sh --golden    # tidy output of ~3,500 real tools vs goldens
python -m pytest                     # PyPI launcher (100% coverage enforced)

All six run in CI (.github/workflows/ci.yml).

License

Copyright (C) 2026 Martin J. Gallagher

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see https://www.gnu.org/licenses/.

Full text: the LICENSE file at the repository root, or https://www.gnu.org/licenses/gpl-3.0.html — SPDX identifier GPL-3.0-or-later. This repository follows the REUSE Specification: source files carry SPDX copyright and licence headers, and the licence text lives in LICENSES/.

Metadata

Release files for provost 2.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for provost 2.2.0
File Size Uploaded Provenance Actions
provost-2.2.0.tar.gz 2.0 MB With provenance Details for provost-2.2.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for provost 2.2.0
File Interpreter ABI Platform Actions
provost-2.2.0-py3-none-any.whl Python 3 none any Details for provost-2.2.0-py3-none-any.whl

Total release size: 3.6 MB

Release files / provost-2.2.0.tar.gz

Download URL provost-2.2.0.tar.gz
Size 2.0 MB
Tags Source
SHA-256 checksum
How to use checksums
787daef6bb9ab2e5a9582f4680ff7cba1e054376880bbb8577a5bb702a72b2cb
BLAKE2b-256 checksum
How to use checksums
7061699aaea568e6eda5e1f3d47ec95442c9cc78dc8c97d943f68405962c8908
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / provost-2.2.0-py3-none-any.whl

Download URL provost-2.2.0-py3-none-any.whl
Size 1.6 MB
Tags Python 3
SHA-256 checksum
How to use checksums
a2986eeb522fe683a4d8e40b236d79dc461c0e31fc52259f47670ddc8b71f1c1
BLAKE2b-256 checksum
How to use checksums
7c443ab1cb4cb07e245e00188b13521468452ea76fd7063e8b10b42b8a384943
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Security for provost 2.2.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for provost-2.2.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page