@agent-beam/beam 0.2.39 → 0.2.41

package/dist/access-risk.d.ts

@@ -7,4 +7,4 @@ export type AccessAssessment = {
     suppress: true;
 };
 export declare function environmentRisk(context: ActionContext): AccessAssessment | undefined;
-export declare function assessAccessFinding(ruleId: string, context: ActionContext): AccessAssessment | undefined;
+export declare function assessAccessFinding(ruleId: string, context: ActionContext, text?: string): AccessAssessment | undefined;

package/dist/access-risk.js

@@ -1,5 +1,6 @@
+import { touchesSecretContent, isTemplateEnvPath } from "./secret-use.js";
 const routineName = (name) => /^(?:AWS_REGION|AWS_DEFAULT_REGION|NODE_ENV|PORT|HOST|LANG|TZ|CI|TERM|PWD)$/.test(name);
-const privatePath = (path) => /(?:^|[/\\])\.env(?:[.\\/]|rc\b|$)|\.ssh[/\\]|\.aws[/\\]credentials\b|id_(?:rsa|ed25519)|\.npmrc\b|\.netrc\b|kubeconfig|\.pgpass\b|credentials\.json/i.test(path);
+const privatePath = (path) => !isTemplateEnvPath(path) && /(?:^|[/\\])\.env(?:[.\\/]|rc\b|$)|\.ssh[/\\]|\.aws[/\\]credentials\b|id_(?:rsa|ed25519)|\.npmrc\b|\.netrc\b|kubeconfig|\.pgpass\b|credentials\.json/i.test(path);
 function scopedTemporaryConfiguration(path) {
     if (/[$`*?{}()[\]~]/.test(path) || path.split(/[\\/]/).some(p => p === "." || p === ".."))
         return false;
@@ -26,7 +27,7 @@ export function environmentRisk(context) {
         return { suppress: true };
     return undefined;
 }
-export function assessAccessFinding(ruleId, context) {
+export function assessAccessFinding(ruleId, context, text) {
     if (ruleId === "credentials.environment")
         return environmentRisk(context);
     if (ruleId !== "source.private_files" && ruleId !== "credentials.access")
@@ -38,6 +39,10 @@ export function assessAccessFinding(ruleId, context) {
         return { severity: "medium", explanation: "The request targets a private configuration location under a narrowly scoped temporary test directory. Its contents are not verified as fake or harmless; review access and returned output." };
     if (context.actions.length && context.actions.every(a => a.operation === "source-search"))
         return ruleId === "source.private_files" ? { suppress: true } : { severity: "info", explanation: "The request searches source code for credential-related text. This reference alone does not establish a credential-file read or disclosure." };
+    // The text names a secret file or credential word, but nothing in the command opens, loads,
+    // copies or prints it (editing code, `git check-ignore .env`, `ls -a | grep env`, ...).
+    if (text !== undefined && context.actions.length && !touchesSecretContent(text, context))
+        return ruleId === "source.private_files" ? { suppress: true } : { severity: "info", explanation: "The command mentions a credential-related name or path without opening, loading or copying its contents. Recorded for visibility." };
     return undefined;
 }
 //# sourceMappingURL=access-risk.js.map

package/dist/access-risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-risk.js","sourceRoot":"","sources":["../src/access-risk.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,4EAA4E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7H,MAAM,WAAW,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,sJAAsJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvM,SAAS,4BAA4B,CAAC,IAAW;IAC/C,IAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC;QAAC,OAAO,KAAK,CAAC;IAC5F,MAAM,KAAK,GAAC,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC,KAAK,IAAI,+DAA+D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClM,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAG,OAAO,CAAC,SAAS;QAAC,OAAO,SAAS,CAAC;IACtC,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,kBAAkB,IAAE,CAAC,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,wKAAwK,EAAC,CAAC;IAClT,MAAM,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,oBAAoB,CAAC,CAAC;IACpE,6EAA6E;IAC7E,uEAAuE;IACvE,IAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,mBAAmB,IAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,kNAAkN,EAAC,CAAC;QAC3X,IAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,mBAAmB,CAAC;YAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;QACxR,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;IACtO,CAAC;IACD,IAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,WAAW,EAAC,aAAa,EAAC,eAAe,EAAC,YAAY,EAAC,QAAQ,EAAC,YAAY,EAAC,iBAAiB,EAAC,cAAc,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;IAC/M,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAa,EAAC,OAAqB;IACrE,IAAG,MAAM,KAAG,yBAAyB;QAAC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACtE,IAAG,MAAM,KAAG,sBAAsB,IAAE,MAAM,KAAG,oBAAoB;QAAC,OAAO,SAAS,CAAC;IACnF,IAAG,OAAO,CAAC,SAAS;QAAC,OAAO,SAAS,CAAC;IACtC,MAAM,KAAK,GAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,WAAW,EAAC,aAAa,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAE,WAAW,CAAC,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAG,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,4BAA4B,CAAC,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;IACzX,IAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,eAAe,CAAC;QAAC,OAAO,MAAM,KAAG,sBAAsB,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,6IAA6I,EAAC,CAAC;IACtT,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"access-risk.js","sourceRoot":"","sources":["../src/access-risk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,MAAM,WAAW,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,4EAA4E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7H,MAAM,WAAW,GAAG,CAAC,IAAW,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,sJAAsJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnO,SAAS,4BAA4B,CAAC,IAAW;IAC/C,IAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC;QAAC,OAAO,KAAK,CAAC;IAC5F,MAAM,KAAK,GAAC,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC,KAAK,IAAI,+DAA+D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClM,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,OAAO,GAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAG,OAAO,CAAC,SAAS;QAAC,OAAO,SAAS,CAAC;IACtC,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,kBAAkB,IAAE,CAAC,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,wKAAwK,EAAC,CAAC;IAClT,MAAM,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,oBAAoB,CAAC,CAAC;IACpE,6EAA6E;IAC7E,uEAAuE;IACvE,IAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,mBAAmB,IAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,kNAAkN,EAAC,CAAC;QAC3X,IAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,mBAAmB,CAAC;YAAC,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;QACxR,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;IACtO,CAAC;IACD,IAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,WAAW,EAAC,aAAa,EAAC,eAAe,EAAC,YAAY,EAAC,QAAQ,EAAC,YAAY,EAAC,iBAAiB,EAAC,cAAc,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;IAC/M,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAa,EAAC,OAAqB,EAAC,IAAY;IAClF,IAAG,MAAM,KAAG,yBAAyB;QAAC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IACtE,IAAG,MAAM,KAAG,sBAAsB,IAAE,MAAM,KAAG,oBAAoB;QAAC,OAAO,SAAS,CAAC;IACnF,IAAG,OAAO,CAAC,SAAS;QAAC,OAAO,SAAS,CAAC;IACtC,MAAM,KAAK,GAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,WAAW,EAAC,aAAa,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAE,WAAW,CAAC,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAG,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,4BAA4B,CAAC,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,MAAM,IAAE,EAAE,CAAC,CAAC;QAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,8LAA8L,EAAC,CAAC;IACzX,IAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,SAAS,KAAG,eAAe,CAAC;QAAC,OAAO,MAAM,KAAG,sBAAsB,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,6IAA6I,EAAC,CAAC;IACtT,4FAA4F;IAC5F,wFAAwF;IACxF,IAAG,IAAI,KAAG,SAAS,IAAE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAE,CAAC,oBAAoB,CAAC,IAAI,EAAC,OAAO,CAAC;QAAC,OAAO,MAAM,KAAG,sBAAsB,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,mIAAmI,EAAC,CAAC;IAC1S,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/action-context.d.ts

@@ -1,3 +1,5 @@
+import { type RepoRemote, type RegistryRef } from "./repo-remote.js";
+export type { RepoRemote, RegistryRef } from "./repo-remote.js";
 export type ActionOperation = "file-read" | "file-search" | "source-search" | "environment-lookup" | "environment-dump" | "file-write" | "delete" | "network-request" | "network-scan" | "git-change" | "mcp-call" | "command";
 export type ClassifiedAction = {
     operation: ActionOperation;
@@ -21,7 +23,10 @@ export type ActionContext = {
         name: string;
         branch?: string;
         commit?: string;
+        remote?: RepoRemote;
     };
+    /** Container registries (AWS ECR, GHCR, Docker Hub, ...) the command pushes to or pulls from. */
+    registries?: RegistryRef[];
     actions: ClassifiedAction[];
     truncated: boolean;
 };

package/dist/action-context.js

@@ -1,6 +1,7 @@
 import { dirname, basename, isAbsolute, join, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { shellActionCommands } from "./credential-egress.js";
+import { readOriginRemote, registriesIn } from "./repo-remote.js";
 const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const isDynamic = (value) => /[$`*?{}()[\]~]/.test(value);
 const asString = (value) => typeof value === "string" ? value : "";
@@ -28,7 +29,8 @@ function repositoryAt(cwd, safe) {
             const common = smallFile(join(gitdir, "commondir"));
             const refRoot = common ? resolve(gitdir, common) : gitdir;
             const commit = ref ? smallFile(join(refRoot, ref)) : head;
-            return { root: safe(root), name: safe(basename(root)), branch: ref ? safe(ref.slice(11)) : undefined, commit: commit && /^[a-f0-9]{40,64}$/i.test(commit) ? commit : undefined };
+            const remote = readOriginRemote(refRoot);
+            return { root: safe(root), name: safe(basename(root)), branch: ref ? safe(ref.slice(11)) : undefined, commit: commit && /^[a-f0-9]{40,64}$/i.test(commit) ? commit : undefined, ...(remote ? { remote } : {}) };
         }
         const parent = dirname(root);
         if (parent === root)
@@ -198,6 +200,7 @@ export function classifyActionContext(tool, input, cwd, command, safe, includeRe
             if (!/^(?:echo|printf|ls|mkdir|true|head|wc)$/.test(cmd))
                 add({ operation: "command", evidence: "shell-syntax", executable: safe(cmd), privileged });
         }
-    return { schemaVersion: 1, workingDirectory: cwd ? safe(cwd) : undefined, repository: includeRepository ? repositoryAt(cwd, safe) : undefined, actions, truncated: omitted };
+    const registries = command ? registriesIn(command) : [];
+    return { schemaVersion: 1, workingDirectory: cwd ? safe(cwd) : undefined, repository: includeRepository ? repositoryAt(cwd, safe) : undefined, ...(registries.length ? { registries } : {}), actions, truncated: omitted };
 }
 //# sourceMappingURL=action-context.js.map

package/dist/action-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-context.js","sourceRoot":"","sources":["../src/action-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAgB7D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAC5C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzJ,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACnJ,CAAC;AACD,SAAS,YAAY,CAAC,GAAW,EAAE,IAA2B;IAC5D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,IAAI,KAAK,GAAC,CAAC,EAAC,KAAK,GAAC,EAAE,EAAC,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;QAC/B,IAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GAAC,OAAO,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC;YAClD,MAAM,IAAI,GAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAC,IAAI,EAAE,KAAK,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,CAAC;YACjD,MAAM,OAAO,GAAC,MAAM,CAAA,CAAC,CAAA,OAAO,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC;YACnD,MAAM,MAAM,GAAC,GAAG,CAAA,CAAC,CAAA,SAAS,CAAC,IAAI,CAAC,OAAO,EAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;YACnD,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAC,MAAM,EAAC,GAAG,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,MAAM,EAAC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,EAAC,CAAC;QAClK,CAAC;QACD,MAAM,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,MAAM,KAAG,IAAI;YAAC,MAAM;QAAA,IAAI,GAAC,MAAM,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAA6B,EAAE,GAAW,EAAE,OAAe,EAAE,IAAwB,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;IAC5K,MAAM,OAAO,GAAqB,EAAE,CAAC;IAAA,IAAI,OAAO,GAAC,GAAG,CAAC;IAAA,IAAI,OAAO,GAAC,KAAK,CAAC;IACvE,IAAG,KAAK,GAAC,CAAC;QAAC,OAAO,EAAC,aAAa,EAAC,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC;IAC9D,MAAM,GAAG,GAAC,CAAC,MAAuB,EAAC,EAAE,GAAG,IAAG,OAAO,CAAC,MAAM,IAAE,EAAE,EAAC,CAAC;QAAA,OAAO,GAAC,IAAI,CAAC;QAAA,OAAO;IAAA,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAC,CAAC,SAAyB,EAAC,MAAa,EAAC,QAAgC,EAAE,EAAC,EAAE,CAAA,GAAG,CAAC,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,CAAA,CAAC,CAAA,cAAc,CAAA,CAAC,CAAA,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAE,OAAO,IAAE,UAAU,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAA,UAAU,CAAC,MAAM,CAAC,IAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,KAAK,EAAC,CAAC,CAAC;IAClV,MAAM,IAAI,GAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,IAAI,IAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAG,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI,EAAE,CAAC;QAChE,MAAM,KAAK,GAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAG,MAAM,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;QACvG,MAAM,GAAG,GAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,KAAK,IAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;QACzG,IAAI,CAAC,WAAW,EAAC,IAAI,EAAC,EAAC,KAAK,EAAC,KAAK,IAAE,GAAG,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,cAAc,EAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAC,GAAG,EAAC,CAAC,CAAC;IACzG,CAAC;SAAM,IAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI;QAAE,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,CAAC;SACpG,IAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAC,GAAG,CAAC,EAAC,SAAS,EAAC,UAAU,EAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC;SACzG,IAAG,CAAC,OAAO,IAAI,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAC,GAAG,CAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAE,IAAI,CAAC,EAAC,CAAC,CAAC;IAC1L,IAAG,OAAO;QAAE,KAAI,MAAM,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAC,CAAC,CAAC,MAAM,CAAC;YAAA,IAAI,EAAE,GAAC,CAAC,CAAC;YAAA,IAAI,UAAU,GAAC,KAAK,CAAC;YAAA,MAAM,WAAW,GAAC,IAAI,GAAG,EAAU,CAAC;YACxF,OAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,IAAE,EAAE,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjD,EAAE,EAAE,CAAC;YACP,CAAC;YACD,IAAG,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,KAAG,MAAM,EAAC,CAAC;gBAAA,UAAU,GAAC,IAAI,CAAC;gBAAA,EAAE,EAAE,CAAC;gBAAA,IAAG,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,MAAM,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;YAAA,CAAC;YAC1L,MAAM,GAAG,GAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,IAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAAA,MAAM,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,CAAC;YACtG,IAAG,CAAC,GAAG;gBAAC,SAAS;YACjB,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,GAAC,MAAM,CAAC,EAAE,GAAC,CAAC,CAAC,CAAC;gBACxB,IAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC1F,MAAM,MAAM,GAAC,qBAAqB,CAAC,MAAM,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBACpF,KAAI,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO;wBAAC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAG,oBAAoB,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAA,EAAE,CAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAA,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,mBAAmB,EAAC,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC;oBAC1L,OAAO,KAAK,MAAM,CAAC,SAAS,CAAC;oBAAA,SAAS;gBACxC,CAAC;YACH,CAAC;YACD,IAAG,GAAG,KAAG,IAAI,EAAC,CAAC;gBAAA,OAAO,GAAC,IAAI,CAAC,CAAC,CAAC,IAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,IAAI,CAAA,CAAC,CAAA,OAAO,CAAC,OAAO,IAAE,GAAG,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACxG,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAC,QAAQ,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;gBACxF,IAAG,MAAM;oBAAC,IAAI,CAAC,YAAY,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,IAAG,GAAG,KAAG,KAAK,IAAE,GAAG,KAAG,UAAU,IAAE,GAAG,KAAG,QAAQ,IAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtE,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,CAAC,MAAM,IAAE,GAAG,IAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChF,IAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBACzN,IAAG,GAAG,KAAG,KAAK,IAAE,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAC,CAAC;gBACvH,GAAG,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,oBAAoB,CAAA,CAAC,CAAA,kBAAkB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,qBAAqB,EAAC,aAAa,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,EAAE,CAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,uBAAuB,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YACrX,CAAC;YACD,IAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,MAAM,IAAI,GAAC,IAAI,IAAE,CAAC,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,IAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA,CAAC,CAAA,EAAE,CAAC;gBAChD,MAAM,EAAE,GAAC,sIAAsI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3J,MAAM,EAAE,GAAC,oJAAoJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzK,MAAM,GAAG,GAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC,CAAC,IAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC,CAAC,IAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvE,IAAG,GAAG,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,oBAAoB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,qBAAqB,EAAC,aAAa,EAAC,CAAC,GAAG,CAAC,EAAC,MAAM,EAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,uBAAuB,EAAC,KAAK,EAAC,iBAAiB,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;YAC7P,CAAC;YACD,IAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,OAAwB,CAAC;gBAAA,MAAM,KAAK,GAAU,EAAE,CAAC;gBACrD,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,EAAE,EAAC,CAAC;oBAC7B,MAAM,GAAG,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAA,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;wBAAA,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;wBAAA,SAAS;oBAAA,CAAC;oBAChF,IAAG,mDAAmD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;wBAAA,CAAC,EAAE,CAAC;wBAAA,SAAS;oBAAA,CAAC;oBAChF,IAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAC,SAAS;oBAAA,IAAG,OAAO,KAAG,SAAS;wBAAC,OAAO,GAAC,GAAG,CAAC;yBAAK,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzH,CAAC;gBACD,MAAM,GAAG,GAAC,OAAO,EAAE,KAAK,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpE,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,CAAC,gBAAgB,CAAC,EAAC,CAAC;oBACzD,MAAM,YAAY,GAAC,OAAO,CAAC,OAAO,IAAE,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACxI,IAAG,MAAM,KAAG,gBAAgB;wBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,aAAa,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,EAAC,aAAa,EAAC,GAAG,CAAA,CAAC,CAAA,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;;wBAC1K,IAAI,CAAC,YAAY,CAAA,CAAC,CAAA,eAAe,CAAA,CAAC,CAAA,aAAa,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,aAAa,EAAC,GAAG,CAAA,CAAC,CAAA,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBACrJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC;oBAAA,MAAM,QAAQ,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC,CAAC;oBAAA,MAAM,MAAM,GAAC,QAAQ,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;oBAAA,IAAG,MAAM;wBAAC,IAAI,CAAC,YAAY,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBAC7P,IAAI,UAAU,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtF,IAAG,GAAG,KAAG,KAAK;oBAAC,UAAU,GAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9C,KAAI,MAAM,MAAM,IAAI,UAAU;oBAAC,IAAI,CAAC,WAAW,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YACpH,CAAC;YACD,IAAG,GAAG,KAAG,IAAI,EAAC,CAAC;gBAAA,KAAI,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAAC,IAAI,CAAC,QAAQ,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YAClI,IAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,MAAM,WAAW,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,WAAW,CAAA,CAAC,CAAA,IAAI,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,iBAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,IAAI,IAAE,CAAC,KAAG,YAAY,IAAE,CAAC,KAAG,wBAAwB,CAAC,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YACpX,IAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,cAAc,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC/M,IAAG,GAAG,KAAG,KAAK,IAAE,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,EAAE,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,YAAY,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YACrM,IAAG,CAAC,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,IAAI,CAAC,GAAG,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC;QAC7I,CAAC;IACD,OAAO,EAAC,aAAa,EAAC,CAAC,EAAC,gBAAgB,EAAC,GAAG,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,iBAAiB,CAAA,CAAC,CAAA,YAAY,CAAC,GAAG,EAAC,IAAI,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC;AAC5J,CAAC"}
+{"version":3,"file":"action-context.js","sourceRoot":"","sources":["../src/action-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAqC,MAAM,kBAAkB,CAAC;AAmBrG,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAC5C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzJ,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACnJ,CAAC;AACD,SAAS,YAAY,CAAC,GAAW,EAAE,IAA2B;IAC5D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,IAAI,KAAK,GAAC,CAAC,EAAC,KAAK,GAAC,EAAE,EAAC,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC;QAC/B,IAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GAAC,OAAO,CAAA,CAAC,CAAA,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC;YAClD,MAAM,IAAI,GAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAC,IAAI,EAAE,KAAK,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,CAAC;YACjD,MAAM,OAAO,GAAC,MAAM,CAAA,CAAC,CAAA,OAAO,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC;YACnD,MAAM,MAAM,GAAC,GAAG,CAAA,CAAC,CAAA,SAAS,CAAC,IAAI,CAAC,OAAO,EAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;YACnD,MAAM,MAAM,GAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAC,MAAM,EAAC,GAAG,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,MAAM,EAAC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;QAC1L,CAAC;QACD,MAAM,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,MAAM,KAAG,IAAI;YAAC,MAAM;QAAA,IAAI,GAAC,MAAM,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAA6B,EAAE,GAAW,EAAE,OAAe,EAAE,IAAwB,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;IAC5K,MAAM,OAAO,GAAqB,EAAE,CAAC;IAAA,IAAI,OAAO,GAAC,GAAG,CAAC;IAAA,IAAI,OAAO,GAAC,KAAK,CAAC;IACvE,IAAG,KAAK,GAAC,CAAC;QAAC,OAAO,EAAC,aAAa,EAAC,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC;IAC9D,MAAM,GAAG,GAAC,CAAC,MAAuB,EAAC,EAAE,GAAG,IAAG,OAAO,CAAC,MAAM,IAAE,EAAE,EAAC,CAAC;QAAA,OAAO,GAAC,IAAI,CAAC;QAAA,OAAO;IAAA,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAC,CAAC,SAAyB,EAAC,MAAa,EAAC,QAAgC,EAAE,EAAC,EAAE,CAAA,GAAG,CAAC,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,CAAA,CAAC,CAAA,cAAc,CAAA,CAAC,CAAA,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAE,OAAO,IAAE,UAAU,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAA,UAAU,CAAC,MAAM,CAAC,IAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,KAAK,EAAC,CAAC,CAAC;IAClV,MAAM,IAAI,GAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,IAAI,IAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAG,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI,EAAE,CAAC;QAChE,MAAM,KAAK,GAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAG,MAAM,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;QACvG,MAAM,GAAG,GAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,KAAK,IAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;QACzG,IAAI,CAAC,WAAW,EAAC,IAAI,EAAC,EAAC,KAAK,EAAC,KAAK,IAAE,GAAG,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,cAAc,EAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAC,GAAG,EAAC,CAAC,CAAC;IACzG,CAAC;SAAM,IAAG,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,IAAI;QAAE,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,CAAC;SACpG,IAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAC,GAAG,CAAC,EAAC,SAAS,EAAC,UAAU,EAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC;SACzG,IAAG,CAAC,OAAO,IAAI,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAC,GAAG,CAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAE,IAAI,CAAC,EAAC,CAAC,CAAC;IAC1L,IAAG,OAAO;QAAE,KAAI,MAAM,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAC,CAAC,CAAC,MAAM,CAAC;YAAA,IAAI,EAAE,GAAC,CAAC,CAAC;YAAA,IAAI,UAAU,GAAC,KAAK,CAAC;YAAA,MAAM,WAAW,GAAC,IAAI,GAAG,EAAU,CAAC;YACxF,OAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,IAAE,EAAE,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjD,EAAE,EAAE,CAAC;YACP,CAAC;YACD,IAAG,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,KAAG,MAAM,EAAC,CAAC;gBAAA,UAAU,GAAC,IAAI,CAAC;gBAAA,EAAE,EAAE,CAAC;gBAAA,IAAG,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,MAAM,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;YAAA,CAAC;YAC1L,MAAM,GAAG,GAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,IAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAAA,MAAM,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,CAAC;YACtG,IAAG,CAAC,GAAG;gBAAC,SAAS;YACjB,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,GAAC,MAAM,CAAC,EAAE,GAAC,CAAC,CAAC,CAAC;gBACxB,IAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC1F,MAAM,MAAM,GAAC,qBAAqB,CAAC,MAAM,EAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;oBACpF,KAAI,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO;wBAAC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAG,oBAAoB,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAA,EAAE,CAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAA,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,mBAAmB,EAAC,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC;oBAC1L,OAAO,KAAK,MAAM,CAAC,SAAS,CAAC;oBAAA,SAAS;gBACxC,CAAC;YACH,CAAC;YACD,IAAG,GAAG,KAAG,IAAI,EAAC,CAAC;gBAAA,OAAO,GAAC,IAAI,CAAC,CAAC,CAAC,IAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,IAAI,CAAA,CAAC,CAAA,OAAO,CAAC,OAAO,IAAE,GAAG,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACxG,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAC,QAAQ,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;gBACxF,IAAG,MAAM;oBAAC,IAAI,CAAC,YAAY,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,IAAG,GAAG,KAAG,KAAK,IAAE,GAAG,KAAG,UAAU,IAAE,GAAG,KAAG,QAAQ,IAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtE,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,CAAC,MAAM,IAAE,GAAG,IAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChF,IAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBACzN,IAAG,GAAG,KAAG,KAAK,IAAE,IAAI,CAAC,MAAM,EAAE,CAAC;oBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAC,CAAC;gBACvH,GAAG,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,oBAAoB,CAAA,CAAC,CAAA,kBAAkB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,qBAAqB,EAAC,aAAa,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,EAAE,CAAA,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,uBAAuB,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YACrX,CAAC;YACD,IAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,MAAM,IAAI,GAAC,IAAI,IAAE,CAAC,CAAA,CAAC,CAAA,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,IAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA,CAAC,CAAA,EAAE,CAAC;gBAChD,MAAM,EAAE,GAAC,sIAAsI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3J,MAAM,EAAE,GAAC,oJAAoJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzK,MAAM,GAAG,GAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC,CAAC,IAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC,CAAC,IAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvE,IAAG,GAAG,EAAC,CAAC;oBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,oBAAoB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,qBAAqB,EAAC,aAAa,EAAC,CAAC,GAAG,CAAC,EAAC,MAAM,EAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,uBAAuB,EAAC,KAAK,EAAC,iBAAiB,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;YAC7P,CAAC;YACD,IAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,OAAwB,CAAC;gBAAA,MAAM,KAAK,GAAU,EAAE,CAAC;gBACrD,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,EAAE,EAAC,CAAC;oBAC7B,MAAM,GAAG,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAA,IAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;wBAAA,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;wBAAA,SAAS;oBAAA,CAAC;oBAChF,IAAG,mDAAmD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;wBAAA,CAAC,EAAE,CAAC;wBAAA,SAAS;oBAAA,CAAC;oBAChF,IAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAC,SAAS;oBAAA,IAAG,OAAO,KAAG,SAAS;wBAAC,OAAO,GAAC,GAAG,CAAC;yBAAK,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzH,CAAC;gBACD,MAAM,GAAG,GAAC,OAAO,EAAE,KAAK,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpE,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,CAAC,gBAAgB,CAAC,EAAC,CAAC;oBACzD,MAAM,YAAY,GAAC,OAAO,CAAC,OAAO,IAAE,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBACxI,IAAG,MAAM,KAAG,gBAAgB;wBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,aAAa,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,EAAC,aAAa,EAAC,GAAG,CAAA,CAAC,CAAA,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;;wBAC1K,IAAI,CAAC,YAAY,CAAA,CAAC,CAAA,eAAe,CAAA,CAAC,CAAA,aAAa,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,aAAa,EAAC,GAAG,CAAA,CAAC,CAAA,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBACrJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC;oBAAA,MAAM,QAAQ,GAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,GAAG,IAAE,CAAC,KAAG,IAAI,CAAC,CAAC;oBAAA,MAAM,MAAM,GAAC,QAAQ,IAAE,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;oBAAA,IAAG,MAAM;wBAAC,IAAI,CAAC,YAAY,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBAC7P,IAAI,UAAU,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtF,IAAG,GAAG,KAAG,KAAK;oBAAC,UAAU,GAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9C,KAAI,MAAM,MAAM,IAAI,UAAU;oBAAC,IAAI,CAAC,WAAW,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YACpH,CAAC;YACD,IAAG,GAAG,KAAG,IAAI,EAAC,CAAC;gBAAA,KAAI,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAAC,IAAI,CAAC,QAAQ,EAAC,MAAM,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YAClI,IAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,MAAM,WAAW,GAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,iBAAiB,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,WAAW,CAAA,CAAC,CAAA,IAAI,CAAC,WAAW,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,iBAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,IAAI,IAAE,CAAC,KAAG,YAAY,IAAE,CAAC,KAAG,wBAAwB,CAAC,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YACpX,IAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,cAAc,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC/M,IAAG,GAAG,KAAG,KAAK,IAAE,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,EAAE,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,EAAC,SAAS,EAAC,YAAY,EAAC,QAAQ,EAAC,cAAc,EAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,GAAG,EAAC,UAAU,EAAC,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YACrM,IAAG,CAAC,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAC,GAAG,CAAC,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,cAAc,EAAC,UAAU,EAAC,IAAI,CAAC,GAAG,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC;QAC7I,CAAC;IACD,MAAM,UAAU,GAAC,OAAO,CAAA,CAAC,CAAA,YAAY,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC;IAClD,OAAO,EAAC,aAAa,EAAC,CAAC,EAAC,gBAAgB,EAAC,GAAG,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,UAAU,EAAC,iBAAiB,CAAA,CAAC,CAAA,YAAY,CAAC,GAAG,EAAC,IAAI,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC;AACnM,CAAC"}

package/dist/approvals.d.ts

@@ -33,6 +33,14 @@ export interface ApprovalRequest {
     status: ApprovalStatus;
     decision?: ApprovalDecision;
     fingerprint: string;
+    /** Why the requester says it needs this access. Shown to the approver; not itself a grant. */
+    reason?: string;
+    /** The approver's own explanation, set when the decision is applied (see applyApproval()). */
+    decision_reason?: string;
+    /** How long an APPROVED decision grants: the approver's choice, 10-60 minutes. Only meaningful
+     * alongside status "APPROVED"; unset on every other status. Drives the local TTL on the
+     * requesting device's approved-actions.json (see beam-cli's approved-actions.ts). */
+    grant_minutes?: number;
 }
 export interface ApprovalPolicy {
     level: ApprovalLevel;
@@ -61,5 +69,9 @@ export declare function createApprovalRequest(input: Omit<ApprovalRequest, "requ
 export declare function validateApprovalRequest(request: ApprovalRequest): boolean;
 export declare function approvalAuditEvent(previous: ApprovalRequest, next: ApprovalRequest, approver: string): string;
 export declare function formatApprovalRequest(request: ApprovalRequest): string;
-export declare function applyApproval(request: ApprovalRequest, decision: ApprovalDecision, approver: string, now?: number): ApprovalRequest;
+export declare const MIN_GRANT_MINUTES = 10;
+export declare const MAX_GRANT_MINUTES = 60;
+export declare const DEFAULT_GRANT_MINUTES = 15;
+export declare function clampGrantMinutes(minutes: number | undefined): number;
+export declare function applyApproval(request: ApprovalRequest, decision: ApprovalDecision, approver: string, now?: number, decisionReason?: string, grantMinutes?: number): ApprovalRequest;
 export declare function approvalStillValid(request: ApprovalRequest, current: Omit<ApprovalRequest, "request_id" | "created_at" | "expires_at" | "status" | "fingerprint">, now?: number): boolean;

package/dist/approvals.js

@@ -65,7 +65,15 @@ export function formatApprovalRequest(request) {
     const resource = request.path || request.url || request.command || request.tool;
     return `[${request.level}] ${request.agent} ${request.tool}: ${resource} (risk ${request.risk_score}/100 ${request.risk_level})`;
 }
-export function applyApproval(request, decision, approver, now = Date.now()) {
+export const MIN_GRANT_MINUTES = 10;
+export const MAX_GRANT_MINUTES = 60;
+export const DEFAULT_GRANT_MINUTES = 15;
+export function clampGrantMinutes(minutes) {
+    if (!Number.isFinite(minutes))
+        return DEFAULT_GRANT_MINUTES;
+    return Math.min(MAX_GRANT_MINUTES, Math.max(MIN_GRANT_MINUTES, Math.round(minutes)));
+}
+export function applyApproval(request, decision, approver, now = Date.now(), decisionReason, grantMinutes) {
     if (!validateApprovalRequest(request))
         return { ...request, status: "DENIED", decision: "DENY" };
     if (Date.parse(request.expires_at) <= now || decision === "EXPIRE")
@@ -74,11 +82,14 @@ export function applyApproval(request, decision, approver, now = Date.now()) {
         return { ...request, status: "DENIED", decision: "DENY" };
     if (!request.approver.includes(approver))
         return { ...request, status: "DENIED", decision: "DENY" };
+    // decisionReason/grantMinutes only ever reflect a genuine decision made below by an authorized
+    // approver on a still-pending request -- never attached to the fail-closed guard rejections
+    // above, which aren't a real person's explanation and shouldn't be presented as one.
     if (decision === "DENY")
-        return { ...request, status: "DENIED", decision };
+        return { ...request, status: "DENIED", decision, decision_reason: decisionReason };
     if (request.status !== "PENDING")
         return request;
-    return { ...request, status: "APPROVED", decision };
+    return { ...request, status: "APPROVED", decision, decision_reason: decisionReason, grant_minutes: clampGrantMinutes(grantMinutes) };
 }
 export function approvalStillValid(request, current, now = Date.now()) {
     return request.status === "APPROVED" && Date.parse(request.expires_at) > now && request.fingerprint === approvalFingerprint(current);

package/dist/approvals.js.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBrD,MAAM,OAAO,qBAAqB;IACH;IAAsD;IAAnF,YAA6B,KAAmC,EAAmB,aAAoD,EAAE;QAA5G,UAAK,GAAL,KAAK,CAA8B;QAAmB,eAAU,GAAV,UAAU,CAA4C;IAAG,CAAC;IAC7I,UAAU,CAAC,IAAY,IAAwB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,YAAY,CAAC,OAAwB,EAAE,MAAsB;QAC3D,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3J,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AACD,MAAM,UAAU,SAAS,CAAC,KAAa,IAAmC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpK,MAAM,UAAU,mBAAmB,CAAC,KAAmG;IACrI,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAmG,EAAE,SAAS,GAAG,MAAM;IAC3J,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAA2B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/M,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,OAAO,CAAC;AACnE,CAAC;AACD,SAAS,qBAAqB,CAAC,KAA6F;IAC1H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAClM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AAC1K,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,CAAC;QAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACjP,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,IAAqB,EAAE,QAAgB;IACnG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,UAAU,GAAG,CAAC;AACnI,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,QAA0B,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpH,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACrH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpG,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAqG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClL,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACvI,CAAC"}
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBrD,MAAM,OAAO,qBAAqB;IACH;IAAsD;IAAnF,YAA6B,KAAmC,EAAmB,aAAoD,EAAE;QAA5G,UAAK,GAAL,KAAK,CAA8B;QAAmB,eAAU,GAAV,UAAU,CAA4C;IAAG,CAAC;IAC7I,UAAU,CAAC,IAAY,IAAwB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,YAAY,CAAC,OAAwB,EAAE,MAAsB;QAC3D,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3J,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AACD,MAAM,UAAU,SAAS,CAAC,KAAa,IAAmC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpK,MAAM,UAAU,mBAAmB,CAAC,KAAmG;IACrI,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAmG,EAAE,SAAS,GAAG,MAAM;IAC3J,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAA2B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/M,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,OAAO,CAAC;AACnE,CAAC;AACD,SAAS,qBAAqB,CAAC,KAA6F;IAC1H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAClM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AAC1K,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,CAAC;QAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACjP,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,IAAqB,EAAE,QAAgB;IACnG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,UAAU,GAAG,CAAC;AACnI,CAAC;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,QAA0B,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,cAAuB,EAAE,YAAqB;IACpK,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACrH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpG,+FAA+F;IAC/F,4FAA4F;IAC5F,qFAAqF;IACrF,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAqG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClL,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACvI,CAAC"}

package/dist/approved-actions.d.ts

@@ -0,0 +1,11 @@
+export interface ApprovedActionTarget {
+    agent: string;
+    tool: string;
+    command?: string;
+    path?: string;
+    url?: string;
+}
+export declare function approvedActionsFile(): string;
+export declare function approvedActionFingerprint(target: ApprovedActionTarget): string;
+export declare function recordApprovedAction(target: ApprovedActionTarget, ttlMs?: number): Promise<void>;
+export declare function consumeApprovedAction(target: ApprovedActionTarget): Promise<boolean>;

package/dist/approved-actions.js

@@ -0,0 +1,53 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { getDataDirectory } from "./config.js";
+export function approvedActionsFile() { return join(getDataDirectory(), "approved-actions.json"); }
+export function approvedActionFingerprint(target) {
+    return createHash("sha256").update(JSON.stringify({
+        agent: target.agent.toLowerCase(),
+        tool: target.tool.toLowerCase(),
+        command: target.command || "",
+        path: target.path || "",
+        url: target.url || "",
+    })).digest("hex");
+}
+async function readApprovedActions() {
+    try {
+        const parsed = JSON.parse(await readFile(approvedActionsFile(), "utf8"));
+        return Array.isArray(parsed)
+            ? parsed.filter((e) => Boolean(e) && typeof e === "object" && typeof e.fingerprint === "string" && typeof e.expiresAt === "string")
+            : [];
+    }
+    catch {
+        return [];
+    }
+}
+async function writeApprovedActions(entries) {
+    const dir = getDataDirectory();
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    const file = approvedActionsFile();
+    const temp = `${file}.tmp`;
+    await writeFile(temp, JSON.stringify(entries) + "\n", { mode: 0o600 });
+    await rename(temp, file);
+}
+// Bounded (default 15 minutes) -- an approval is permission to proceed now, not a standing
+// exception. Capped at 200 entries so a burst of asks can't grow this file unbounded.
+export async function recordApprovedAction(target, ttlMs = 15 * 60_000) {
+    const live = (await readApprovedActions()).filter(e => Date.parse(e.expiresAt) > Date.now());
+    live.push({ fingerprint: approvedActionFingerprint(target), expiresAt: new Date(Date.now() + ttlMs).toISOString() });
+    await writeApprovedActions(live.slice(-200));
+}
+// Single-use: APPROVE_ONCE semantics (see approvals.ts) -- a match is removed on read so it can't
+// silently re-authorize a later, unrelated repeat of the same command without asking again.
+export async function consumeApprovedAction(target) {
+    const fingerprint = approvedActionFingerprint(target);
+    const now = Date.now();
+    const entries = await readApprovedActions();
+    const match = entries.find(e => e.fingerprint === fingerprint && Date.parse(e.expiresAt) > now);
+    if (!match)
+        return false;
+    await writeApprovedActions(entries.filter(e => e !== match && Date.parse(e.expiresAt) > now));
+    return true;
+}
+//# sourceMappingURL=approved-actions.js.map

package/dist/approved-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-actions.js","sourceRoot":"","sources":["../src/approved-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,MAAM,UAAU,mBAAmB,KAAa,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAE3G,MAAM,UAAU,yBAAyB,CAAC,MAA4B;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;KACtB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;YAC7J,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IAChE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC3B,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,2FAA2F;AAC3F,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAA4B,EAAE,KAAK,GAAG,EAAE,GAAG,MAAM;IAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,kGAAkG;AAClG,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA4B;IACtE,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli.js

@@ -3,7 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { Command } from "commander";
 import { startServer } from "./serve.js";
-import { captureHook, extractPreview, extractSave, importEvents, readToken, reloadRemoteRules, scanFile } from "./client.js";
+import { askApproval, captureHook, extractPreview, extractSave, importEvents, listPendingApprovals, readToken, reloadRemoteRules, resolveApproval, scanFile } from "./client.js";
 import { supportsExtraction } from "./extract.js";
 import { AGENTS } from "./agents.js";
 import { installAllDetectedHooks, installHook, uninstallAllHooks, uninstallHook } from "./install.js";
@@ -986,6 +986,69 @@ rule.command("reload")
     for (const e of result.errors)
         console.log(`✖ ${e}`);
 });
+const policy = program.command("policy").description("Request and resolve human approval for an action a security policy blocked");
+policy.command("ask <target> <reason>")
+    .description("Ask for permission to use a blocked command, path, or URL, and wait for a decision. On an enrolled device this goes to the workspace (an admin resolves it from the dashboard); otherwise it's resolved locally with 'beam policy pending'/'approve'/'reject' on this machine")
+    .option("--tool <name>", "Tool name to record on the request", "Bash")
+    .option("--agent <name>", "Agent name to record on the request", "cli")
+    .option("--approver <name>", "Who must decide this -- only meaningful when unenrolled; an enrolled device defaults to the workspace's own owners/admins")
+    .option("--timeout <seconds>", "How long to wait for a decision before giving up", "600")
+    .action(async (target, reason, opts) => {
+    const isUrl = /^https?:\/\//i.test(target);
+    const isPath = !isUrl && (target.startsWith("/") || target.startsWith("./") || target.startsWith("../") || target.startsWith("~"));
+    const timeoutMs = Number(opts.timeout) * 1000;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+        throw new Error("--timeout must be a positive number of seconds.");
+    console.log(`Asking ${opts.approver ?? "admin"} for approval of ${target}… (up to ${opts.timeout}s)`);
+    const request = await askApproval({
+        agent: opts.agent, tool: opts.tool, reason,
+        command: isUrl || isPath ? undefined : target,
+        path: isPath ? target : undefined,
+        url: isUrl ? target : undefined,
+        approver: opts.approver, timeoutMs,
+    });
+    if (request.status === "APPROVED") {
+        console.log(`✔ Approved for ${request.grant_minutes ?? 15} minute${(request.grant_minutes ?? 15) === 1 ? "" : "s"} (${request.request_id}).${request.decision_reason ? ` ${request.decision_reason}` : ""} Continue.`);
+        return;
+    }
+    console.log(`✖ ${request.status} (${request.request_id}).${request.decision_reason ? ` ${request.decision_reason}` : " No reason was given."}`);
+    process.exitCode = 1;
+});
+policy.command("pending")
+    .alias("ls")
+    .description("List approval requests waiting on a decision, on this machine's own local collector. An enrolled device's requests are resolved from the workspace dashboard instead, not here")
+    .action(async () => {
+    const pending = await listPendingApprovals();
+    if (!pending.length) {
+        console.log("No pending approval requests.");
+        return;
+    }
+    for (const r of pending) {
+        console.log(`${r.request_id}  [${r.level}] ${r.agent} ${r.tool}: ${r.path || r.url || r.command || "(no target)"}`);
+        if (r.reason)
+            console.log(`  reason: ${r.reason}`);
+        console.log(`  expires: ${r.expires_at}`);
+    }
+});
+policy.command("approve <id>")
+    .description("Approve a pending request filed on this machine's own local collector (not an enrolled device's workspace request -- those are approved from the dashboard)")
+    .option("--note <text>", "Optional note the requester will see")
+    .option("--approver <name>", "Your name or id, recorded on the decision", "admin")
+    .option("--grant <minutes>", "How long the agent's retry window stays open, 10-60 minutes", "15")
+    .action(async (id, opts) => {
+    const grantMinutes = Number(opts.grant);
+    if (!Number.isFinite(grantMinutes) || grantMinutes < 10 || grantMinutes > 60)
+        throw new Error("--grant must be a number of minutes between 10 and 60.");
+    const result = await resolveApproval(id, "APPROVE_ONCE", opts.approver, opts.note, grantMinutes);
+    console.log(`${result.request_id}: ${result.status} (grant: ${result.grant_minutes ?? grantMinutes} min)`);
+});
+policy.command("reject <id> <reason>")
+    .description("Reject a pending request filed on this machine's own local collector, with a reason the requester will see (not an enrolled device's workspace request -- those are rejected from the dashboard)")
+    .option("--approver <name>", "Your name or id, recorded on the decision", "admin")
+    .action(async (id, reason, opts) => {
+    const result = await resolveApproval(id, "DENY", opts.approver, reason);
+    console.log(`${result.request_id}: ${result.status} — ${result.decision_reason}`);
+});
 const trust = program.command("trust").description("Manage the global allowlist of outside-workspace paths Beam won't ask about again (advisory/enforce mode only)");
 trust.command("add <path>")
     .description("Pre-approve a path or directory (or a glob containing '*') so Beam stops asking about it")