provost
Turn command output into data. Run a command, and provost captures its output, auto-detects the format, and files it as a tidy, one-row-per-record dataset in a git-backed store — every capture a commit, every row traceable to its source.
Beta. provost is the simplified, single-tool successor to the three-binary Envoy suite — see docs/0001-rename-and-simplification.md.
Install
pip install provost
The PyPI package (provost) bundles the
complete tool — the provost entry point plus its extract/analyze/transform
engines — and a thin Python launcher execs it in place. Requires bash and git.
Quick start
provost doctor # check engines + store
free -m | provost # capture stdin → auto-detect → tidy dataset 'free'
provost run df -h # capture a command's output → dataset 'df'
provost ls # list datasets
provost show df # present a dataset (leading #N = row index)
provost source 5 # the original input behind row #5
provost stats df # statistics on the dataset
What it does
run/inject → auto-detect (generic parsers + hint rules) → tidy melt → git-backed store
- Auto-capture format — ~110 generic format parsers (delimited and
structured), a declarative hints table, and ~145 tool-specific strategies
recognise JSON, tables, logs, and system-tool output (
df,ps aux,free,mount,docker, …). - Named datasets —
provost run CMDfiles into a dataset named after the command (looking throughsudo,env,timeout, …); piped input is named after the parser that recognised it;--name NAMEoverrides either. - Present a dataset — a wide
entry<N>.fieldextract is melted to one row per record; same-typed captures reconcile into one table. - Git core — the store is a git repo; every capture is a commit tagged
capture-<id>.provost loglists them,provost restore <id>brings one back up. - Provenance — every dataset row has a globally-unique visible
#N;provost source Nshows the exact captured input that produced it. - Global or per-directory — captures go to a global store (
~/.provost) by default;provost control <dir>makes a directory its own instance. - Portable —
provost exportbundles the store;provost importreopens it elsewhere. Datasets, history, and provenance all survive the move. - Analyze —
provost stats <dataset>runs the vendored analyze engine.
Command reference
| Command | Purpose |
|---|---|
provost run [--] <cmd> |
capture a command's output as a commit, into dataset <cmd> |
<cmd> | provost / provost [FILE] |
inject stdin / a file |
… --name NAME |
file into dataset NAME (inject/run) |
… --sync / --async |
foreground / background capture (default: background only at a terminal) |
… --plugin-dir <dir> |
extra strategy dir for this capture (inject/run) |
provost source <#N> |
original source behind a dataset row |
provost control [<dir>] / uncontrol / instances |
per-directory capture instances |
provost export [<file>] / import <file> [<dest>] |
portable store bundle |
provost log [--failed] / restore <id|latest> |
capture history (or failed background captures) / bring one back up |
provost ls / show <name> / stats <name> |
datasets |
provost triage |
low-confidence / unmatched bucket |
provost doctor |
engine + store check |
provost help / <command> --help |
usage |
Layout
provost/
├── provost # the single entry point
├── extract/ # extract engine, 257 strategies (~110 generic), hints.tsv
├── analyze/ # analyze engine
├── transform/ # tidy-melt transform
├── lib/ # shared suite libraries
├── completions/, man/ # bash completion, man page
└── tests/ # smoke + unit tests
Standalone repository
This tree is fully self-contained: provost resolves its engines from its own
directory, so it runs with no external dependencies. The extract/, analyze/,
transform/, and lib/ trees were originally imported from the Envoy suite but
are now first-party provost code, maintained here directly — there is no live
tie to upstream Envoy. Add extract strategies under extract/strategies/ and
edit the engines in place; run each tree's own test suite to keep it green.
Integrating from another tool
Wrappers that pipe into provost (e.g. deframe) get two hooks:
--plugin-dir <dir>(orPROVOST_PLUGIN_DIR): an extra strategy directory that competes in format detection for that capture — no symlink into the engine's~/.mfe/strategiesuser dir needed. The winning plugin dir is recorded in the capture's metadata.#%metadata prologue: a leading run of#%lines on injected input is capture context, not data. It is peeled off before detection (so it can never corrupt the generic parsers), stored with the capture ascontext.txt, andprovost sourcestill shows the original input verbatim. A#%line after the first data line is data and passes through untouched — so context no longer has to travel out-of-band in a run manifest.
The store itself is plain files (TSV datasets, per-capture meta.tsv +
output.txt, provenance.tsv), so other tools can browse it read-only without
provost installed. Meridian Commander
ships a Provost data plug-in that does exactly that: datasets as scrollable
tables, the capture log, and each row's original input via its #N provenance
index — including stores on remote (SFTP/SSH) hosts.
Environment
| Variable | Default | Meaning |
|---|---|---|
PROVOST_HOME |
~/.provost |
global store directory |
PROVOST_WORKSPACE |
— | explicit store override (wins) |
PROVOST_MIN_CONFIDENCE |
50 |
commit threshold (0–100) |
PROVOST_PLUGIN_DIR |
— | extra strategy dir for detection (same as --plugin-dir) |
PROVOST_ASYNC |
unset | 1 always background, 0 always foreground; unset = background only at a terminal |
PROVOST_MULTI |
0 |
file every dataset an input holds (same as --multi) |
PROVOST_MAX_INPUT |
10485760 |
max input bytes (inject and run) |
PROVOST_LOCK_TIMEOUT |
30 |
seconds to wait for the store lock |
PROVOST_LOCK_MAX_AGE |
3600 |
seconds after which a lock is presumed stale |
PROVOST_RECONCILE_OVERLAP |
60 |
% column overlap to union vs split a variant |
PROVOST_QUIET |
0 |
1 suppresses progress/ok messages (same as --silent) |
Tests
bash tests/smoke.sh # end-to-end
bash transform/tests/test_melt.sh # transform unit tests
bash extract/tests/run_tests.sh # extract strategies + engine
bash analyze/tests/run_tests.sh # analyze engine
bash tests/corpus/run.sh --golden # tidy output of ~3,500 real tools vs goldens
python -m pytest # PyPI launcher (100% coverage enforced)
All six run in CI (.github/workflows/ci.yml).
License
Copyright (C) 2026 Martin J. Gallagher
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see https://www.gnu.org/licenses/.
Full text: the LICENSE file at the repository root, or
https://www.gnu.org/licenses/gpl-3.0.html — SPDX identifier
GPL-3.0-or-later. This repository follows the
REUSE Specification: source files carry SPDX
copyright and licence headers, and the licence text lives in LICENSES/.
Metadata
Release files for provost 2.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| provost-2.0.1.tar.gz | 953.7 kB | With provenance | Details for provost-2.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| provost-2.0.1-py3-none-any.whl | Python 3 | none | any | Details for provost-2.0.1-py3-none-any.whl |
Total release size: 1.7 MB
Release files / provost-2.0.1.tar.gz
| Download URL | provost-2.0.1.tar.gz |
|---|---|
| Size | 953.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b1d48044cfdefa86e3349baeef45219165346eaf13611b0626fe0aff2d76d5ce
|
|
BLAKE2b-256 checksum How to use checksums |
1de5fb26a964d00d45d35c7976b24de1dfa4f0783dabf4fc0f53a9e44a9a872b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.
Transparency logRelease files / provost-2.0.1-py3-none-any.whl
| Download URL | provost-2.0.1-py3-none-any.whl |
|---|---|
| Size | 745.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
865156d0c9810d405e0487238cacce8c0e71bddf0d3bd929b58b7f555abd28ca
|
|
BLAKE2b-256 checksum How to use checksums |
61971da94ab0a16d62d9fcede9e48f21bdc2a46b20f86d289bfb28e1587ec62f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.
Transparency logSecurity for provost 2.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for provost-2.0.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.