@armoriq/sdk-dev 0.6.5 → 0.6.7

package/dist/cli/commands/policy.d.ts

@@ -0,0 +1,39 @@
+/**
+ * armoriq policy — read and change the org's armor.policy.v1 profile from the
+ * terminal. Until now policy could only be authored from the dashboard or from
+ * inside a Claude Code session (`/armor`), so `armoriq policy` reported
+ * "Unknown command".
+ *
+ * Backend routes used (all accept the CLI's API key via ApiKeyOrJwtGuard,
+ * except `profiles/active` and `sync` which are ApiKeyGuard):
+ *   GET  /policies/profiles/active     read the confirmed policy
+ *   POST /policies/profiles/template   apply a named template as the draft
+ *   PUT  /policies/profiles/draft      save an arbitrary policy as the draft
+ *   POST /policies/profiles/propose    stage the draft for confirmation
+ *   POST /policies/profiles/cancel     discard the staged proposal
+ *   POST /policies/sync                set the active policy directly
+ *
+ * Confirming a staged proposal stays human-only (JWT + policies:full on
+ * /policies/profiles/confirm), so the default flow here stops at "proposed" and
+ * points at the dashboard. `--activate` is the explicit opt-out that pushes the
+ * policy straight to active through the same route the plugin uses.
+ */
+export declare function cmdPolicyShow(args?: {
+    json?: boolean;
+}): Promise<number>;
+export declare function cmdPolicyTemplates(): number;
+export declare function cmdPolicySet(args: {
+    template: string;
+    reason?: string;
+    activate?: boolean;
+    yes?: boolean;
+}): Promise<number>;
+export declare function cmdPolicyPropose(args: {
+    file: string;
+    reason?: string;
+    activate?: boolean;
+    yes?: boolean;
+}): Promise<number>;
+export declare function cmdPolicyCancel(): Promise<number>;
+export declare const POLICY_TEMPLATE_NAMES: string[];
+//# sourceMappingURL=policy.d.ts.map

package/dist/cli/commands/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAkJH,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBlF;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAU3C;AA6ED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBlB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BlB;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAKvD;AAED,eAAO,MAAM,qBAAqB,UAA+B,CAAC"}

package/dist/cli/commands/policy.js

@@ -0,0 +1,315 @@
+"use strict";
+/**
+ * armoriq policy — read and change the org's armor.policy.v1 profile from the
+ * terminal. Until now policy could only be authored from the dashboard or from
+ * inside a Claude Code session (`/armor`), so `armoriq policy` reported
+ * "Unknown command".
+ *
+ * Backend routes used (all accept the CLI's API key via ApiKeyOrJwtGuard,
+ * except `profiles/active` and `sync` which are ApiKeyGuard):
+ *   GET  /policies/profiles/active     read the confirmed policy
+ *   POST /policies/profiles/template   apply a named template as the draft
+ *   PUT  /policies/profiles/draft      save an arbitrary policy as the draft
+ *   POST /policies/profiles/propose    stage the draft for confirmation
+ *   POST /policies/profiles/cancel     discard the staged proposal
+ *   POST /policies/sync                set the active policy directly
+ *
+ * Confirming a staged proposal stays human-only (JWT + policies:full on
+ * /policies/profiles/confirm), so the default flow here stops at "proposed" and
+ * points at the dashboard. `--activate` is the explicit opt-out that pushes the
+ * policy straight to active through the same route the plugin uses.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POLICY_TEMPLATE_NAMES = void 0;
+exports.cmdPolicyShow = cmdPolicyShow;
+exports.cmdPolicyTemplates = cmdPolicyTemplates;
+exports.cmdPolicySet = cmdPolicySet;
+exports.cmdPolicyPropose = cmdPolicyPropose;
+exports.cmdPolicyCancel = cmdPolicyCancel;
+const fs = __importStar(require("fs"));
+const axios_1 = __importDefault(require("axios"));
+const util_1 = require("../util");
+const state_1 = require("../state");
+const TIMEOUT_MS = 15000;
+/**
+ * Template names are owned by the backend (src/policies/armor/policy-templates).
+ * This list is for `armoriq policy templates` and for a fast local typo check;
+ * the server is still the authority and its error text is surfaced verbatim
+ * when the two drift.
+ */
+const TEMPLATES = [
+    { name: 'all-allow', description: 'Everything permitted — intent planning still enforced' },
+    { name: 'strict-read-only', description: 'Only Read/Grep/Glob allowed. Bash/Write/Edit denied.' },
+    { name: 'balanced', description: 'Read allowed. Bash/Write/Edit require approval.' },
+    { name: 'lockdown', description: 'All tools require approval. Nothing auto-allowed.' },
+    { name: 'architect', description: 'Explore wide, write inside workspace, never destroy' },
+    {
+        name: 'quality-guardian',
+        description: 'Read and test freely, gate CI and secrets, cautious default',
+    },
+    {
+        name: 'velocity-machine',
+        description: 'Fast and low friction, hard stops on destroy, exfil and publish',
+    },
+    { name: 'night-owl', description: 'Solo off-hours, confirm writes and bash, deny by default' },
+];
+async function api(method, path, body) {
+    const creds = (0, util_1.requireCredentials)();
+    const base = (0, util_1.backendBase)();
+    let response;
+    try {
+        response = await axios_1.default.request({
+            method,
+            url: `${base}${path}`,
+            data: body,
+            headers: { 'X-API-Key': creds.apiKey, 'Content-Type': 'application/json' },
+            timeout: TIMEOUT_MS,
+            validateStatus: () => true,
+        });
+    }
+    catch (err) {
+        // No HTTP response at all: DNS, refused connection, or the timeout above.
+        throw new util_1.CLIError(`Could not reach the ArmorIQ backend at ${base}: ${err.message}`);
+    }
+    const status = response.status;
+    // Nest puts the useful text (e.g. the server's own list of valid template
+    // names, or why the org was refused) in `message`, as a string or an array.
+    const raw = response.data?.message;
+    const detail = Array.isArray(raw) ? raw.join('; ') : raw;
+    if (status === 401) {
+        throw new util_1.CLIError('API key rejected (401). Try `armoriq login` again.');
+    }
+    if (status === 403) {
+        // Not an auth failure: the key is valid but lacks rights on this org, so
+        // re-running `login` mints an equivalent key and changes nothing. Say why.
+        throw new util_1.CLIError(detail
+            ? `${detail} (HTTP 403)`
+            : 'This API key is not allowed to manage policy for its org (403).');
+    }
+    if (status >= 400) {
+        throw new util_1.CLIError(detail ? `${detail} (HTTP ${status})` : `Request failed (HTTP ${status}).`);
+    }
+    return response.data;
+}
+/**
+ * The org for a write. `profiles/active` and `sync` take the org from the API
+ * key, but the draft/propose routes resolve it from the body and fall back to
+ * "the caller's first org membership" when it is absent. For a user in more
+ * than one org that fallback can be a different org than the key's, so a read
+ * and a write in the same command would target different policies. Refuse
+ * rather than guess.
+ */
+function orgScope() {
+    const creds = (0, util_1.requireCredentials)();
+    if (!creds.orgId) {
+        throw new util_1.CLIError('No org on the saved credentials, so a policy write could land on the wrong org. ' +
+            'Run `armoriq login --force` (or `armoriq switch-org <name>`) and retry.');
+    }
+    return { orgId: creds.orgId };
+}
+function actionLabel(statement) {
+    const action = statement.action ?? {};
+    if (Array.isArray(action.in) && action.in.length > 0)
+        return action.in.join(', ');
+    if (action.eq)
+        return action.eq;
+    return '*';
+}
+function printPolicy(policy) {
+    const defaults = policy.defaults?.decision ?? 'unknown';
+    (0, util_1.out)(`  name          ${policy.metadata?.name ?? '(unnamed)'}`);
+    if (policy.metadata?.description)
+        (0, util_1.out)(`  description   ${policy.metadata.description}`);
+    (0, util_1.out)(`  default       ${defaults}`);
+    const statements = policy.statements ?? [];
+    (0, util_1.out)(`  statements    ${statements.length}`);
+    if (statements.length === 0)
+        return;
+    (0, util_1.out)('');
+    for (const statement of statements) {
+        const conditions = (statement.conditions ?? [])
+            .map((c) => `${c.field ?? '?'} ${c.op ?? '?'} ${JSON.stringify(c.value)}`)
+            .join(' AND ');
+        const suffix = conditions ? ` where ${conditions}` : '';
+        (0, util_1.out)(`    ${(statement.effect ?? '?').padEnd(16)} ${actionLabel(statement)}${suffix}`);
+    }
+}
+async function cmdPolicyShow(args = {}) {
+    const active = await api('GET', '/policies/profiles/active');
+    if (args.json) {
+        (0, util_1.out)(JSON.stringify(active, null, 2));
+        return 0;
+    }
+    if (!active.policy) {
+        (0, util_1.out)('No confirmed policy for this org yet.');
+        (0, util_1.out)('');
+        (0, util_1.out)('  The ArmorClaude plugin keeps enforcing its local policy until one is');
+        (0, util_1.out)('  confirmed here. Stage one with `armoriq policy set <template>`.');
+        return 0;
+    }
+    (0, util_1.out)(`Active policy (version ${active.version ?? 0}${active.publishedAt ? `, published ${active.publishedAt}` : ''}):`);
+    (0, util_1.out)('');
+    printPolicy(active.policy);
+    (0, state_1.appendLog)('policy-show', { version: active.version ?? 0 });
+    return 0;
+}
+function cmdPolicyTemplates() {
+    const width = Math.max(...TEMPLATES.map((t) => t.name.length));
+    (0, util_1.out)('Policy templates:');
+    (0, util_1.out)('');
+    for (const template of TEMPLATES) {
+        (0, util_1.out)(`  ${template.name.padEnd(width)}  ${template.description}`);
+    }
+    (0, util_1.out)('');
+    (0, util_1.out)('Apply one with `armoriq policy set <template>`.');
+    return 0;
+}
+/**
+ * Refuse an unanswerable --activate BEFORE anything is written.
+ *
+ * This has to run ahead of the first request, not next to the publish call.
+ * Both commands replace the org's shared working draft and stage a proposal on
+ * the way to activating, so a late refusal exits non-zero having already
+ * changed org state, which reads to the operator as "nothing happened".
+ */
+function assertActivationAnswerable(activate, yes) {
+    if (!activate || yes)
+        return;
+    if (!process.stdin.isTTY) {
+        throw new util_1.CLIError('Refusing to activate without confirmation in a non-interactive shell. ' +
+            'Re-run with --yes, or drop --activate and confirm on the dashboard. ' +
+            'Nothing was changed.');
+    }
+}
+/**
+ * Gate for --activate. Publishing from the terminal bypasses the dashboard
+ * confirmation step, so it is never silent: interactively it asks, having first
+ * shown the diff. The non-interactive case is already rejected up front by
+ * assertActivationAnswerable, so reaching here without a TTY means --yes.
+ */
+async function confirmActivation(yes) {
+    if (yes)
+        return true;
+    (0, util_1.out)(`${util_1.WARN} --activate publishes this policy immediately, skipping dashboard confirmation.`);
+    (0, util_1.out)('  Every agent session in this org picks it up on its next policy pull.');
+    return (0, util_1.promptYesNo)('Publish it as the active policy now?', false);
+}
+/** Stage the current draft, then optionally push it straight to active. */
+async function proposeAndReport(reason, options, logEvent, logDetails) {
+    const proposal = await api('POST', '/policies/profiles/propose', {
+        reason,
+        ...orgScope(),
+    });
+    (0, util_1.out)('');
+    (0, util_1.out)('Changes vs the active policy:');
+    (0, util_1.out)('');
+    for (const line of (proposal.diff ?? '(no changes)').split('\n'))
+        (0, util_1.out)(`  ${line}`);
+    (0, util_1.out)('');
+    if (options.activate) {
+        if (!proposal.proposed) {
+            throw new util_1.CLIError('Server staged the proposal but returned no policy document to activate.');
+        }
+        if (await confirmActivation(options.yes)) {
+            const synced = await api('POST', '/policies/sync', {
+                policy: proposal.proposed,
+                source: 'armoriq-cli',
+            });
+            (0, util_1.out)(`${util_1.CHECK} Activated (version ${synced.version ?? 'unknown'}).`);
+            (0, util_1.out)('  Plugin sessions pick this up on their next policy pull.');
+            (0, state_1.appendLog)(logEvent, { ...logDetails, activated: true, version: synced.version });
+            return 0;
+        }
+        // Declined: the proposal is still staged, which is the safe default anyway.
+        (0, util_1.out)('Not activated.');
+    }
+    (0, util_1.out)(`${util_1.CHECK} Proposed (hash ${proposal.proposalHash ?? 'unknown'}).`);
+    (0, util_1.out)('  Confirm it on the dashboard to make it active: activation is human-only.');
+    (0, util_1.out)('  Discard it with `armoriq policy cancel`.');
+    (0, state_1.appendLog)(logEvent, { ...logDetails, activated: false, hash: proposal.proposalHash });
+    return 0;
+}
+async function cmdPolicySet(args) {
+    if (!args.template) {
+        throw new util_1.CLIError('Usage: armoriq policy set <template>. See `armoriq policy templates`.');
+    }
+    assertActivationAnswerable(Boolean(args.activate), Boolean(args.yes));
+    if (!TEMPLATES.some((t) => t.name === args.template)) {
+        (0, util_1.out)(`${util_1.WARN} "${args.template}" is not a template this CLI knows about, asking the server anyway.`);
+    }
+    await api('POST', '/policies/profiles/template', {
+        template: args.template,
+        ...orgScope(),
+    });
+    // The org has exactly one working draft, shared with the dashboard editor.
+    (0, util_1.out)(`${util_1.CHECK} Draft set from template "${args.template}" (replaces the org's working draft).`);
+    return proposeAndReport(args.reason ?? `Template "${args.template}" applied via armoriq CLI`, { activate: Boolean(args.activate), yes: Boolean(args.yes) }, 'policy-set', { template: args.template });
+}
+async function cmdPolicyPropose(args) {
+    if (!args.file) {
+        throw new util_1.CLIError('Usage: armoriq policy propose --file <policy.json>');
+    }
+    assertActivationAnswerable(Boolean(args.activate), Boolean(args.yes));
+    // statSync covers both "missing" and "is a directory"; without the second
+    // check readFileSync reports the policy as invalid JSON with an EISDIR body.
+    if (!fs.existsSync(args.file) || !fs.statSync(args.file).isFile()) {
+        throw new util_1.CLIError(`Not a readable file: ${args.file}`);
+    }
+    let policy;
+    try {
+        policy = JSON.parse(fs.readFileSync(args.file, 'utf-8'));
+    }
+    catch (err) {
+        throw new util_1.CLIError(`${args.file} is not valid JSON: ${err.message}`);
+    }
+    if (!policy || typeof policy !== 'object' || Array.isArray(policy)) {
+        throw new util_1.CLIError(`${args.file} must contain an armor.policy.v1 object.`);
+    }
+    await api('PUT', '/policies/profiles/draft', { policy, ...orgScope() });
+    (0, util_1.out)(`${util_1.CHECK} Draft saved from ${args.file} (replaces the org's working draft).`);
+    return proposeAndReport(args.reason ?? `Policy from ${args.file} proposed via armoriq CLI`, { activate: Boolean(args.activate), yes: Boolean(args.yes) }, 'policy-propose', { file: args.file });
+}
+async function cmdPolicyCancel() {
+    await api('POST', '/policies/profiles/cancel', orgScope());
+    (0, util_1.out)(`${util_1.CHECK} Staged proposal discarded. The active policy is unchanged.`);
+    (0, state_1.appendLog)('policy-cancel', {});
+    return 0;
+}
+exports.POLICY_TEMPLATE_NAMES = TEMPLATES.map((t) => t.name);
+//# sourceMappingURL=policy.js.map

package/dist/cli/commands/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cli/commands/policy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkJH,sCAkBC;AAED,gDAUC;AA6ED,oCA6BC;AAED,4CAkCC;AAED,0CAKC;AAnUD,uCAAyB;AACzB,kDAAsC;AACtC,kCAAmG;AACnG,oCAAqC;AAErC,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,SAAS,GAAiD;IAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uDAAuD,EAAE;IAC3F,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,sDAAsD,EAAE;IACjG,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,iDAAiD,EAAE;IACpF,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,mDAAmD,EAAE;IACtF,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,qDAAqD,EAAE;IACzF;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,iEAAiE;KAC/E;IACD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,0DAA0D,EAAE;CAC/F,CAAC;AA+BF,KAAK,UAAU,GAAG,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;IAChE,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAA,kBAAW,GAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,eAAK,CAAC,OAAO,CAAI;YAChC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE;YACrB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC1E,OAAO,EAAE,UAAU;YACnB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,MAAM,IAAI,eAAQ,CAAC,0CAA0C,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,GAAG,GAAI,QAAQ,CAAC,IAAoD,EAAE,OAAO,CAAC;IACpF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAEzD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,IAAI,eAAQ,CAChB,MAAM;YACJ,CAAC,CAAC,GAAG,MAAM,aAAa;YACxB,CAAC,CAAC,iEAAiE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,eAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,wBAAwB,MAAM,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,IAAA,yBAAkB,GAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,eAAQ,CAChB,kFAAkF;YAChF,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,SAA0B;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;IACxD,IAAA,UAAG,EAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,EAAE,WAAW;QAAE,IAAA,UAAG,EAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxF,IAAA,UAAG,EAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,IAAA,UAAG,EAAC,mBAAmB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC;aAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;aACzE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,IAAA,UAAG,EAAC,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,OAA2B,EAAE;IAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAiB,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAA,UAAG,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,IAAA,UAAG,EAAC,uCAAuC,CAAC,CAAC;QAC7C,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;QACR,IAAA,UAAG,EAAC,wEAAwE,CAAC,CAAC;QAC9E,IAAA,UAAG,EAAC,mEAAmE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAA,UAAG,EAAC,0BAA0B,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvH,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAA,iBAAS,EAAC,aAAa,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,IAAA,UAAG,EAAC,mBAAmB,CAAC,CAAC;IACzB,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAA,UAAG,EAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EAAC,iDAAiD,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B,CAAC,QAAiB,EAAE,GAAY;IACjE,IAAI,CAAC,QAAQ,IAAI,GAAG;QAAE,OAAO;IAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,eAAQ,CAChB,wEAAwE;YACtE,sEAAsE;YACtE,sBAAsB,CACzB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAY;IAC3C,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACrB,IAAA,UAAG,EAAC,GAAG,WAAI,iFAAiF,CAAC,CAAC;IAC9F,IAAA,UAAG,EAAC,wEAAwE,CAAC,CAAC;IAC9E,OAAO,IAAA,kBAAW,EAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,OAA4C,EAC5C,QAAgB,EAChB,UAAmC;IAEnC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAkB,MAAM,EAAE,4BAA4B,EAAE;QAChF,MAAM;QACN,GAAG,QAAQ,EAAE;KACd,CAAC,CAAC;IAEH,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,IAAA,UAAG,EAAC,+BAA+B,CAAC,CAAC;IACrC,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IACR,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,IAAA,UAAG,EAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnF,IAAA,UAAG,EAAC,EAAE,CAAC,CAAC;IAER,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,eAAQ,CAAC,yEAAyE,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAqC,MAAM,EAAE,gBAAgB,EAAE;gBACrF,MAAM,EAAE,QAAQ,CAAC,QAAQ;gBACzB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;YACH,IAAA,UAAG,EAAC,GAAG,YAAK,uBAAuB,MAAM,CAAC,OAAO,IAAI,SAAS,IAAI,CAAC,CAAC;YACpE,IAAA,UAAG,EAAC,2DAA2D,CAAC,CAAC;YACjE,IAAA,iBAAS,EAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,4EAA4E;QAC5E,IAAA,UAAG,EAAC,gBAAgB,CAAC,CAAC;IACxB,CAAC;IAED,IAAA,UAAG,EAAC,GAAG,YAAK,mBAAmB,QAAQ,CAAC,YAAY,IAAI,SAAS,IAAI,CAAC,CAAC;IACvE,IAAA,UAAG,EAAC,4EAA4E,CAAC,CAAC;IAClF,IAAA,UAAG,EAAC,4CAA4C,CAAC,CAAC;IAClD,IAAA,iBAAS,EAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAKlC;IACC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,eAAQ,CAAC,uEAAuE,CAAC,CAAC;IAC9F,CAAC;IACD,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAA,UAAG,EACD,GAAG,WAAI,KAAK,IAAI,CAAC,QAAQ,qEAAqE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,CAAC,MAAM,EAAE,6BAA6B,EAAE;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,QAAQ,EAAE;KACd,CAAC,CAAC;IACH,2EAA2E;IAC3E,IAAA,UAAG,EAAC,GAAG,YAAK,6BAA6B,IAAI,CAAC,QAAQ,uCAAuC,CAAC,CAAC;IAE/F,OAAO,gBAAgB,CACrB,IAAI,CAAC,MAAM,IAAI,aAAa,IAAI,CAAC,QAAQ,2BAA2B,EACpE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC5D,YAAY,EACZ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAC5B,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAKtC;IACC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3E,CAAC;IACD,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,eAAQ,CAAC,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,0CAA0C,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,GAAG,CAAC,KAAK,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxE,IAAA,UAAG,EAAC,GAAG,YAAK,qBAAqB,IAAI,CAAC,IAAI,sCAAsC,CAAC,CAAC;IAElF,OAAO,gBAAgB,CACrB,IAAI,CAAC,MAAM,IAAI,eAAe,IAAI,CAAC,IAAI,2BAA2B,EAClE,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC5D,gBAAgB,EAChB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,IAAA,UAAG,EAAC,GAAG,YAAK,6DAA6D,CAAC,CAAC;IAC3E,IAAA,iBAAS,EAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC;AACX,CAAC;AAEY,QAAA,qBAAqB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC"}

package/dist/cli/index.d.ts

@@ -11,5 +11,12 @@
  */
 type Argv = string[];
 declare function run(argv: Argv): Promise<number>;
-export { run as runCli };
+/**
+ * Same dispatch as run(), but with the process-level error handling folded in:
+ * a CLIError becomes a one-line message and exit code 1 instead of a stack
+ * trace. This is what the binary calls, so tests exercising failure paths get
+ * the exit code a user would actually see.
+ */
+declare function main(argv: Argv): Promise<number>;
+export { run as runCli, main as runCliMain };
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAkCH,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;AAcrB,iBAAe,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CA6E9C;AAgBD,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AA+CH,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC;AAmCrB,iBAAe,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAqH9C;AAED;;;;;GAKG;AACH,iBAAe,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAc/C;AAMD,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,IAAI,IAAI,UAAU,EAAE,CAAC"}

package/dist/cli/index.js

@@ -12,6 +12,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runCli = run;
+exports.runCliMain = main;
 const util_1 = require("./util");
 const HELP = `
 armoriq — ArmorIQ SDK CLI
@@ -35,6 +36,19 @@ Commands:
   keys revoke <id>           Revoke a single API key
   keys prune [--yes]         Revoke expired / unused (>90d) keys
 
+  policy show [--json]       Show the org's active armor policy
+  policy templates           List the built-in policy templates
+  policy set <template>      Stage a template as the org policy
+                             [--reason <text>] [--activate] [--yes]
+  policy propose --file <p>  Stage an armor.policy.v1 JSON document
+                             [--reason <text>] [--activate] [--yes]
+  policy cancel              Discard the staged proposal
+
+                             set/propose replace the org's working draft and
+                             stage it for confirmation on the dashboard.
+                             --activate publishes it immediately instead, and
+                             asks first (--yes to skip, required off a TTY).
+
   status                     Show local CLI state (agent, env, MCPs)
   logs [--follow]            Tail the CLI log file
 
@@ -44,10 +58,31 @@ Use \`armoriq help <command>\` for command-specific options.
 `;
 function parseFlag(args, name, hasValue = true) {
     for (let i = 0; i < args.length; i++) {
-        if (args[i] === `--${name}`) {
+        const arg = args[i];
+        // `--name=value`. Without this the whole token matches nothing and the flag
+        // is silently ignored, so `--activate=true` looks accepted and does nothing.
+        if (arg.startsWith(`--${name}=`)) {
+            const v = arg.slice(name.length + 3);
+            args.splice(i, 1);
+            if (!hasValue) {
+                if (v === 'false')
+                    return false;
+                return true;
+            }
+            if (!v)
+                throw new util_1.CLIError(`--${name} needs a value.`);
+            return v;
+        }
+        if (arg === `--${name}`) {
             if (!hasValue)
                 return true;
             const v = args[i + 1];
+            // A value flag whose value is missing used to swallow the following
+            // token, so `--reason --activate` consumed --activate as the reason and
+            // the publish silently never happened.
+            if (v === undefined || v.startsWith('--')) {
+                throw new util_1.CLIError(`--${name} needs a value.`);
+            }
             args.splice(i, 2);
             return v;
         }
@@ -107,6 +142,42 @@ async function run(argv) {
             (0, util_1.out)('Usage: armoriq keys list | revoke <id> | prune [--yes]');
             return 1;
         }
+        case 'policy': {
+            const sub = rest[0];
+            const { cmdPolicyShow, cmdPolicyTemplates, cmdPolicySet, cmdPolicyPropose, cmdPolicyCancel, } = await import('./commands/policy.js');
+            if (sub === 'show') {
+                const json = parseFlag(rest, 'json', false) === true;
+                return cmdPolicyShow({ json });
+            }
+            if (sub === 'templates')
+                return cmdPolicyTemplates();
+            if (sub === 'set') {
+                const reason = parseFlag(rest, 'reason');
+                const activate = parseFlag(rest, 'activate', false) === true;
+                const yes = parseFlag(rest, 'yes', false) === true;
+                // rest[0] is the 'set' subcommand itself; the template is the next
+                // non-flag token (flags were spliced out by parseFlag above).
+                const template = rest.slice(1).find((a) => !a.startsWith('--'));
+                if (!template)
+                    throw new util_1.CLIError('Usage: armoriq policy set <template>');
+                return cmdPolicySet({ template, reason, activate, yes });
+            }
+            if (sub === 'propose') {
+                const reason = parseFlag(rest, 'reason');
+                const activate = parseFlag(rest, 'activate', false) === true;
+                const yes = parseFlag(rest, 'yes', false) === true;
+                const file = parseFlag(rest, 'file') ??
+                    rest.slice(1).find((a) => !a.startsWith('--'));
+                if (!file)
+                    throw new util_1.CLIError('Usage: armoriq policy propose --file <policy.json>');
+                return cmdPolicyPropose({ file, reason, activate, yes });
+            }
+            if (sub === 'cancel')
+                return cmdPolicyCancel();
+            (0, util_1.out)('Usage: armoriq policy show [--json] | templates | set <template> | ' +
+                'propose --file <policy.json> | cancel');
+            return 1;
+        }
         case 'status': {
             const { cmdStatus } = await import('./commands/status.js');
             return cmdStatus();
@@ -131,17 +202,29 @@ async function run(argv) {
             return 1;
     }
 }
-if (require.main === module) {
-    const argv = process.argv.slice(2);
-    run(argv)
-        .then((code) => process.exit(code))
-        .catch((err) => {
+/**
+ * Same dispatch as run(), but with the process-level error handling folded in:
+ * a CLIError becomes a one-line message and exit code 1 instead of a stack
+ * trace. This is what the binary calls, so tests exercising failure paths get
+ * the exit code a user would actually see.
+ */
+async function main(argv) {
+    try {
+        return await run(argv);
+    }
+    catch (err) {
         if (err instanceof util_1.CLIError) {
             (0, util_1.out)(`  ${util_1.CROSS} ${err.message}`);
-            process.exit(1);
+            return 1;
         }
-        (0, util_1.out)(`  ${util_1.CROSS} Unexpected error: ${err.message}`);
-        process.exit(1);
-    });
+        // Not necessarily an Error: a thrown string or null would make a `.message`
+        // read throw inside the handler, and nothing is left to catch that.
+        const detail = err instanceof Error ? err.message : String(err);
+        (0, util_1.out)(`  ${util_1.CROSS} Unexpected error: ${detail}`);
+        return 1;
+    }
+}
+if (require.main === module) {
+    main(process.argv.slice(2)).then((code) => process.exit(code));
 }
 //# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;AACA;;;;;;;;;GASG;;AA6Ia,qBAAM;AA3ItB,iCAA8C;AAE9C,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BZ,CAAC;AAIF,SAAS,SAAS,CAAC,IAAU,EAAE,IAAY,EAAE,WAAoB,IAAI;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAU;IAC3B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC/E,IAAA,UAAG,EAAC,IAAI,CAAC,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAuB,CAAC;YACzD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAuB,CAAC;YACjE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAuB,CAAC;YACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;YACvD,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACzD,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACzD,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACvD,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAuB,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAQ,CAAC,wCAAwC,CAAC,CAAC;YAC1E,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxF,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,WAAW,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,IAAI,CAAC,EAAE;oBAAE,MAAM,IAAI,eAAQ,CAAC,iCAAiC,CAAC,CAAC;gBAC/D,OAAO,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnD,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,IAAA,UAAG,EAAC,wDAAwD,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAA,UAAG,EACD,YAAY,OAAO,mDAAmD;gBACpE,sEAAsE;gBACtE,OAAO;gBACP,wFAAwF,CAC3F,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,IAAA,UAAG,EAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACnC,IAAA,UAAG,EAAC,IAAI,CAAC,CAAC;YACV,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,IAAI,CAAC;SACN,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,GAAG,YAAY,eAAQ,EAAE,CAAC;YAC5B,IAAA,UAAG,EAAC,KAAK,YAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAA,UAAG,EAAC,KAAK,YAAK,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;AACA;;;;;;;;;GASG;;AAmOa,qBAAM;AAAU,0BAAU;AAjO1C,iCAA8C;AAE9C,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyCZ,CAAC;AAIF,SAAS,SAAS,CAAC,IAAU,EAAE,IAAY,EAAE,WAAoB,IAAI;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,OAAO;oBAAE,OAAO,KAAK,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,eAAQ,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,GAAG,KAAK,KAAK,IAAI,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtB,oEAAoE;YACpE,wEAAwE;YACxE,uCAAuC;YACvC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,eAAQ,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAU;IAC3B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC/E,IAAA,UAAG,EAAC,IAAI,CAAC,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAuB,CAAC;YACzD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAuB,CAAC;YACjE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAuB,CAAC;YACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;YACvD,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACzD,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACzD,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACvD,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAuB,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAQ,CAAC,wCAAwC,CAAC,CAAC;YAC1E,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxF,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,WAAW,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,IAAI,CAAC,EAAE;oBAAE,MAAM,IAAI,eAAQ,CAAC,iCAAiC,CAAC,CAAC;gBAC/D,OAAO,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnD,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,IAAA,UAAG,EAAC,wDAAwD,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gBACrD,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,GAAG,KAAK,WAAW;gBAAE,OAAO,kBAAkB,EAAE,CAAC;YACrD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAuB,CAAC;gBAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gBAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gBACnD,mEAAmE;gBACnE,8DAA8D;gBAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,eAAQ,CAAC,sCAAsC,CAAC,CAAC;gBAC1E,OAAO,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAuB,CAAC;gBAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gBAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gBACnD,MAAM,IAAI,GAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAwB;oBAC1D,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,eAAQ,CAAC,oDAAoD,CAAC,CAAC;gBACpF,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ;gBAAE,OAAO,eAAe,EAAE,CAAC;YAC/C,IAAA,UAAG,EACD,qEAAqE;gBACnE,uCAAuC,CAC1C,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAA,UAAG,EACD,YAAY,OAAO,mDAAmD;gBACpE,sEAAsE;gBACtE,OAAO;gBACP,wFAAwF,CAC3F,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,IAAA,UAAG,EAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YACnC,IAAA,UAAG,EAAC,IAAI,CAAC,CAAC;YACV,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,IAAI,CAAC,IAAU;IAC5B,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAQ,EAAE,CAAC;YAC5B,IAAA,UAAG,EAAC,KAAK,YAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,4EAA4E;QAC5E,oEAAoE;QACpE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,IAAA,UAAG,EAAC,KAAK,YAAK,sBAAsB,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/client.d.ts

@@ -259,6 +259,13 @@ export declare class ArmorIQClient {
      * Eagerly load metadata for an MCP so subsequent invoke() calls are fast.
      */
     loadMcp(mcpName: string): Promise<void>;
+    /**
+     * Already-fetched metadata for an MCP, or undefined if it was never loaded.
+     * For callers that cannot await — notably the synchronous
+     * `ArmorIQSession.enforceLocal`, which needs the canonical amount fields to
+     * evaluate a financial threshold.
+     */
+    toolMetadataSync(mcpName: string): MCPSemanticMetadata | undefined;
     /**
      * List all MCPs registered for this org (resolved via API key).
      */
@@ -290,14 +297,20 @@ export declare class ArmorIQClient {
     /**
      * Check if a delegation request has been approved.
      */
-    checkApprovedDelegation(userEmail: string, tool: string, amount: number): Promise<ApprovedDelegation | null>;
+    /**
+     * #831: `planId` scopes the lookup to the plan asking. An approval is a decision
+     * about one plan, so without it the backend returns nothing rather than an
+     * approval granted elsewhere — callers that omit it get no reuse and fall
+     * through to raising a fresh hold.
+     */
+    checkApprovedDelegation(userEmail: string, tool: string, amount: number, planId?: string): Promise<ApprovedDelegation | null>;
     /**
      * Mark a delegation as executed.
      *
      * Idempotent on the backend (delegationId-keyed), so a stable
      * Idempotency-Key derived from the delegation_id is safe to retry.
      */
-    markDelegationExecuted(userEmail: string, delegationId: string): Promise<void>;
+    markDelegationExecuted(userEmail: string, delegationId: string, planId?: string): Promise<void>;
     /**
      * Return a single delegation's current status: 'pending' | 'approved' |
      * 'rejected' | 'expired' | 'none'. Throws DelegationException on an HTTP error

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAGjC,OAAO,EACL,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EAEnB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAElB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,uBAAuB,EAA4B,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAY3E;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAkBD,qBAAa,aAAa;IAExB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA4B;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA8B;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA4B;IAQ5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAqC;IACnF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAuC;IACvF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAsC;IAMxF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAA2B;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAA2B;IACjF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAA2B;IAEnF,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,aAAa,CAAmC;IAIxD,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,oBAAoB,CAAiC;IAC7D,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,SAAS,CAA4E;IAC7F,OAAO,CAAC,qBAAqB,CAAe;IAC5C;;;OAGG;IACI,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAElC;;;;OAIG;IACI,aAAa,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACjE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAY;gBAErC,OAAO,GAAE,OAAO,CAAC,SAAS,CAAC,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAO;IAgK3F;;OAEG;IACH,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;;OAIG;IACH,iBAAiB;;;;;;;;IAWjB,WAAW,CAAC,OAAO,EAAE,MAAM;IAI3B;;OAEG;IACH,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAAG,OAAO,WAAW,EAAE,cAAc;IAarF,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAgBzC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAQhD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAuBlE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAUjC,gBAAgB,CACpB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAuBhF;;;;;;;;;;;;;;;;OAgBG;IACG,uBAAuB,CAAC,IAAI,EAAE;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;QACrD,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAe/D,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB;IAW5C;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAE,MAAuB,GAAG,aAAa;IAgCnE,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,gBAAgB;IAqD9E,OAAO,CAAC,gBAAgB;IAMxB,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM;IAWvD,OAAO,CAAC,WAAW;IAKnB;;;;OAIG;IACG,UAAU,CACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,OAAO,GAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;KACpB,GACL,OAAO,CAAC,OAAO,OAAO,EAAE,aAAa,CAAC;IAwCzC;;OAEG;YACW,cAAc;IA4B5B;;OAEG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,WAAW;IAyCd;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqD7D;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,eAAe,GAAE,MAAa,GAC7B,OAAO,CAAC,WAAW,CAAC;IA2GvB;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EACxC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,CAAC;IAiR/B;;OAEG;IACG,QAAQ,CACZ,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,MAAM,EACzB,eAAe,GAAE,MAAa,EAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAiG5B;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA2B3E;;;;OAIG;IACG,QAAQ,CACZ,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAChC,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,CAAC;IAwB3C;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE;QACJ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,GAAG,CAAC;QACX,cAAc,EAAE,GAAG,EAAE,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB;;;;WAIG;QACH,cAAc,EAAE,WAAW,CAAC;KAC7B,CAAC;IA8DF,OAAO,CAAC,6BAA6B;IAOrC;;;;;OAKG;IACH,gBAAgB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI;IAK3C;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IA0B5D;;;;;OAKG;IACG,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAoC7D;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6BtE;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAY9E;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAaxD;;OAEG;YACW,mBAAmB;IA+BjC;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpE;;OAEG;YACW,eAAe;IA4B7B;;OAEG;IACG,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuBhG;;OAEG;IACG,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAgBrC;;;;;OAKG;IACG,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpF;;;;;OAKG;IACG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBhE;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;OAMG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrE;;OAEG;IACG,gBAAgB,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAoJ/B;;OAEG;IACH,KAAK,IAAI,IAAI;CAId;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAGzB,OAAO,CAAC,MAAM;IAFhB,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAExB,MAAM,EAAE,aAAa,EAC7B,SAAS,EAAE,MAAM;IAKnB,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAAG,OAAO,WAAW,EAAE,cAAc;IAUrF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAG9C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAGjC,OAAO,EACL,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EAEnB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAElB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,uBAAuB,EAA4B,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAY3E;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAkBD,qBAAa,aAAa;IAExB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA4B;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA8B;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAA4B;IAQ5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAqC;IACnF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAuC;IACvF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAsC;IAMxF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAA2B;IAC/E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAA2B;IACjF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAA2B;IAEnF,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,aAAa,CAAmC;IAIxD,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,oBAAoB,CAAiC;IAC7D,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,SAAS,CAA4E;IAC7F,OAAO,CAAC,qBAAqB,CAAe;IAC5C;;;OAGG;IACI,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAElC;;;;OAIG;IACI,aAAa,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACjE,WAAW,EAAE,MAAM,GAAG,QAAQ,CAAY;gBAErC,OAAO,GAAE,OAAO,CAAC,SAAS,CAAC,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAO;IAgK3F;;OAEG;IACH,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;;OAIG;IACH,iBAAiB;;;;;;;;IAWjB,WAAW,CAAC,OAAO,EAAE,MAAM;IAI3B;;OAEG;IACH,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAAG,OAAO,WAAW,EAAE,cAAc;IAarF,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAgBzC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAQhD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAuBlE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAUjC,gBAAgB,CACpB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAuBhF;;;;;;;;;;;;;;;;OAgBG;IACG,uBAAuB,CAAC,IAAI,EAAE;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;QACrD,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAe/D,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB;IAW5C;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAE,MAAuB,GAAG,aAAa;IAgCnE,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,gBAAgB;IAqD9E,OAAO,CAAC,gBAAgB;IAMxB,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM;IAWvD,OAAO,CAAC,WAAW;IAKnB;;;;OAIG;IACG,UAAU,CACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,OAAO,GAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;KACpB,GACL,OAAO,CAAC,OAAO,OAAO,EAAE,aAAa,CAAC;IAwCzC;;OAEG;YACW,cAAc;IA4B5B;;OAEG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,WAAW;IAyCd;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqD7D;;OAEG;IACG,cAAc,CAClB,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,eAAe,GAAE,MAAa,GAC7B,OAAO,CAAC,WAAW,CAAC;IA2GvB;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EACxC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,CAAC;IAiR/B;;OAEG;IACG,QAAQ,CACZ,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,MAAM,EACzB,eAAe,GAAE,MAAa,EAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAiG5B;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA2B3E;;;;OAIG;IACG,QAAQ,CACZ,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAChC,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAA;KAAE,CAAC;IAwB3C;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE;QACJ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,GAAG,CAAC;QACX,cAAc,EAAE,GAAG,EAAE,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB;;;;WAIG;QACH,cAAc,EAAE,WAAW,CAAC;KAC7B,CAAC;IA8DF,OAAO,CAAC,6BAA6B;IAOrC;;;;;OAKG;IACH,gBAAgB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI;IAK3C;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IA0B5D;;;;;OAKG;IACG,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAoC7D;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6BtE;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;OAKG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAIlE;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAY9E;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAaxD;;OAEG;YACW,mBAAmB;IA+BjC;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpE;;OAEG;YACW,eAAe;IA4B7B;;OAEG;IACG,uBAAuB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuBhG;;OAEG;IACH;;;;;OAKG;IACG,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAgBrC;;;;;OAKG;IACG,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBhE;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;OAMG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrE;;OAEG;IACG,gBAAgB,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,WAAW,EACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,mBAAmB,CAAC;IAiK/B;;OAEG;IACH,KAAK,IAAI,IAAI;CAId;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAGzB,OAAO,CAAC,MAAM;IAFhB,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAExB,MAAM,EAAE,aAAa,EAC7B,SAAS,EAAE,MAAM;IAKnB,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,GAAG,OAAO,WAAW,EAAE,cAAc;IAUrF,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAG9C"}