#!/usr/bin/env bash
# Stub sudo for the deploy-handler seam: run_privileged pipes the password
# on stdin and calls `sudo -S -- <cmd>`. The stub drops the password and the
# flags and execs the command, so no privilege gate hides a handler bug.
cat >/dev/null 2>&1 || true
while [ "$#" -gt 0 ]; do
    case "$1" in
        -S|--prompt) shift ;;
        --) shift; break ;;
        *) break ;;
    esac
done
exec "$@"