@clossys/writer 0.4.0 → 0.5.1

package/dist/approval.js

@@ -0,0 +1,421 @@
+/**
+ * Approval-record helpers shared by the schema, `writer-check approve` and
+ * `writer-check approval-state`.
+ */
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { resolve } from "node:path";
+import { computeCopyFingerprint } from "./fingerprint.js";
+import { checkApprovalBypass, scanApprovalBypass } from "./approval-bypass.js";
+import { parseCopyRegistry } from "./schema.js";
+/**
+ * One delegate scope item: a dot-separated entry-id namespace with no
+ * wildcard, e.g. `"site"` or `"site.home"`. Unlike `CopyEntryId`, a single
+ * segment is allowed, because a namespace may be a top-level one.
+ */
+export const COPY_DELEGATE_SCOPE_RE = /^[a-z0-9]+(-[a-z0-9]+)*(\.[a-z0-9]+(-[a-z0-9]+)*)*$/;
+/** True when `value` is a well-formed delegate scope item. */
+export function isDelegateScopeItem(value) {
+    return typeof value === "string" && COPY_DELEGATE_SCOPE_RE.test(value);
+}
+/**
+ * True when `entryId` falls inside one of `scope`'s namespaces: it equals an
+ * item, or starts with `item + "."`. `"site.home"` covers `"site.home"` and
+ * `"site.home.title"`, never `"site.homepage.title"`.
+ */
+export function isEntryInDelegateScope(entryId, scope) {
+    return scope.some((item) => entryId === item || entryId.startsWith(`${item}.`));
+}
+/**
+ * True when `entry`'s recorded `textFingerprint` no longer matches its
+ * current `text` — the record was made for wording that has since changed.
+ * Exported so `resolve.ts` and `assessCopyApprovals` share one predicate
+ * rather than two independently-drifting copies of the same comparison.
+ */
+export function isApprovalStale(entry) {
+    const approval = entry.approval;
+    if (!approval)
+        return false;
+    return computeCopyFingerprint(entry.text) !== approval.textFingerprint;
+}
+/** True when `approval.expiresAt` is set and has passed as of `now`. */
+export function isApprovalExpired(approval, now) {
+    return approval.expiresAt !== undefined && now.getTime() >= Date.parse(approval.expiresAt);
+}
+/**
+ * Reports the current approval state of every `approved` entry in
+ * `registry` — draft and retired entries have nothing to approve and are
+ * ignored. An `approved` entry with no record at all is a warning
+ * (`approval-record-missing`): the pre-record state every registry started
+ * in, not yet a defect. A record that no longer matches its entry's text
+ * (`approval-stale`) or has passed its `expiresAt` (`approval-expired`) is
+ * an error — the checks are mutually exclusive, staleness taking priority
+ * since an expired-but-also-stale record's fingerprint mismatch is the more
+ * fundamental problem. A current delegate record still awaiting owner
+ * sign-off (`pendingOwnerReview: true`) is a warning, not an error: the
+ * entry is legitimately approved for now, just not yet durably so.
+ */
+export function assessCopyApprovals(registry, now) {
+    const findings = [];
+    for (const entry of registry.entries) {
+        if (entry.status !== "approved")
+            continue;
+        const approval = entry.approval;
+        if (!approval) {
+            findings.push({
+                rule: "approval-record-missing",
+                severity: "warning",
+                entryId: entry.id,
+                message: `Entry "${entry.id}" is approved but has no approval record.`,
+            });
+            continue;
+        }
+        if (isApprovalStale(entry)) {
+            findings.push({
+                rule: "approval-stale",
+                severity: "error",
+                entryId: entry.id,
+                message: `Entry "${entry.id}"'s approval record no longer matches its current text.`,
+            });
+            continue;
+        }
+        if (isApprovalExpired(approval, now)) {
+            findings.push({
+                rule: "approval-expired",
+                severity: "error",
+                entryId: entry.id,
+                message: `Entry "${entry.id}"'s approval expired at ${approval.expiresAt}.`,
+            });
+            continue;
+        }
+        if (approval.approvedBy === "delegate" && approval.pendingOwnerReview === true) {
+            findings.push({
+                rule: "approval-pending-owner-review",
+                severity: "warning",
+                entryId: entry.id,
+                message: `Entry "${entry.id}" was approved by a delegate and is still awaiting owner review.`,
+            });
+        }
+    }
+    return findings;
+}
+// ============================================================================
+// `writer-check approval-state` — combines TWO independent checks into one
+// three-state verdict: `assessCopyApprovals` above (is the REGISTRY's own
+// approval bookkeeping current — no stale or expired record, no delegate
+// record stuck pending review) and `scanApprovalBypass`/`checkApprovalBypass`
+// (`./approval-bypass.ts`) (does CONSUMER SOURCE actually route copy through
+// that bookkeeping, or around it). Either half can fail independently: a
+// registry can be perfectly current while a component still hard-codes
+// `status: "approved"`, and a codebase can route every read through
+// `createCopyResolver` while the registry itself carries a record that has
+// gone stale. This command is the one place both are reported together,
+// under one exit code.
+//
+// Not exported from `index.ts` (like `mainApproveCommand` in
+// `approve-cli.ts`) — this is CLI surface, dispatched from `cli.ts`'s
+// bottom-of-file `argv[0]` branch, not library surface.
+// ============================================================================
+export const APPROVAL_STATE_USAGE = `Usage: writer-check approval-state <registry-file> <scan-dir> [options]
+
+  registry-file  Path to a CopyRegistry JSON file. Required.
+  scan-dir       Directory to scan for approval-bypass patterns in consumer source. Required.
+
+Reports the current approval state of a copy registry from two angles: is
+every approved entry's own record current (see assessCopyApprovals in
+approval.ts — a stale or expired record is an error; a missing record or a
+delegate record still pending owner review is a warning), and does consumer
+source in scan-dir actually route copy through the registry's approval
+lifecycle rather than around it (see scanApprovalBypass/checkApprovalBypass
+in approval-bypass.ts — approval-set-in-code and copy-read-without-resolver
+are errors; an unchecked registry load or reference is neither a pass nor a
+finding, just an incomplete picture).
+
+Options:
+  --help                   Print this message and exit 0.
+  --extensions <ext>[,<ext>...]  File extension(s) to scan, including the leading dot (for example .mjs). Repeatable, and each occurrence may itself be a comma-separated list; values union across both forms. When omitted, default is .ts, .tsx, .js, .jsx. Every value must include the leading dot; a flag that resolves to zero extensions is a usage error.
+  --format <json>          When "json", prints exactly one machine-readable object ({ verdict, findings, unchecked, counts }) to stdout instead of the human-readable report. Any other value is a usage error.
+  --now <ISO>              ISO 8601 UTC timestamp (YYYY-MM-DDTHH:MM:SSZ, optionally with milliseconds) to evaluate staleness/expiry against. Defaults to the current time.
+
+Exit codes: 0 = satisfied (every approved entry's record is current, no
+approval-bypass finding, nothing left unchecked, and at least one file was
+scanned), 1 = violated (at least one error-severity registry finding —
+approval-stale or approval-expired — or at least one approval-bypass finding
+— approval-set-in-code or copy-read-without-resolver), 2 = could not run or
+indeterminate (bad arguments; the registry file is missing/unreadable/not
+valid JSON/fails validateCopyRegistryShape; scan-dir is not a directory; the
+scan itself could not run; or — with zero error-severity finding — at least
+one unchecked registry load/reference, at least one file that failed to
+parse, or zero files scanned). Warnings never change the exit code.
+`;
+/** Bad arguments only — mirrors `approve-cli.ts`'s `ApproveInputError`. */
+class ApprovalStateInputError extends Error {
+}
+const APPROVAL_STATE_EXTENSION_RE = /^\.[a-zA-Z0-9]+$/;
+/** Same shape schema.ts's own (unexported) `ISO_UTC_TIMESTAMP_RE` accepts. */
+const APPROVAL_STATE_NOW_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{3})?Z$/;
+/**
+ * Parses `--extensions` with the identical rules `cli.ts`'s
+ * `parseAddressabilityArgs` applies to its own `--extensions` flag —
+ * repeatable, comma-separated, leading dot required, an empty resolved set
+ * is a usage error rather than a silent fallback to the default. Duplicated
+ * rather than imported from `cli.ts`, since `cli.ts` imports this file's
+ * `mainApprovalStateCommand` — importing back would create a real
+ * value-level cycle between the two, unlike the `schema.ts` cycle this
+ * file's `parseCopyRegistry` import already tolerates (see this section's
+ * top doc comment).
+ */
+function parseApprovalStateArgs(argv) {
+    let registryFile;
+    let scanDir;
+    const extensions = [];
+    let sawExtensions = false;
+    let format = "text";
+    let now;
+    let help = false;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            help = true;
+            continue;
+        }
+        if (arg === "--extensions") {
+            sawExtensions = true;
+            const value = argv[++i];
+            if (value === undefined || value.startsWith("-")) {
+                throw new ApprovalStateInputError("--extensions requires an extension such as .mjs");
+            }
+            const tokens = value.split(",");
+            if (tokens.length === 0 || tokens.some((token) => token.trim().length === 0)) {
+                throw new ApprovalStateInputError(`--extensions requires at least one non-empty extension such as .mjs, got ${JSON.stringify(value)}`);
+            }
+            for (const rawToken of tokens) {
+                const token = rawToken.trim().toLowerCase();
+                if (!token.startsWith(".")) {
+                    throw new ApprovalStateInputError(`--extensions values must include the leading dot, got ${JSON.stringify(token)}`);
+                }
+                if (!APPROVAL_STATE_EXTENSION_RE.test(token)) {
+                    throw new ApprovalStateInputError(`invalid --extensions value ${JSON.stringify(token)}`);
+                }
+                extensions.push(token);
+            }
+            continue;
+        }
+        if (arg === "--format") {
+            const value = argv[++i];
+            if (value !== "json") {
+                throw new ApprovalStateInputError(`--format only accepts "json", got ${JSON.stringify(value)}`);
+            }
+            format = "json";
+            continue;
+        }
+        if (arg === "--now") {
+            const value = argv[++i];
+            if (value === undefined || value.startsWith("-")) {
+                throw new ApprovalStateInputError("--now requires an ISO 8601 UTC timestamp");
+            }
+            now = value;
+            continue;
+        }
+        if (arg.startsWith("-")) {
+            throw new ApprovalStateInputError(`unknown flag "${arg}"`);
+        }
+        if (registryFile === undefined) {
+            registryFile = arg;
+        }
+        else if (scanDir === undefined) {
+            scanDir = arg;
+        }
+        else {
+            throw new ApprovalStateInputError(`unexpected extra argument "${arg}"`);
+        }
+    }
+    return { registryFile, scanDir, extensions: sawExtensions ? extensions : undefined, format, now, help };
+}
+function parseApprovalStateNow(raw) {
+    if (raw === undefined)
+        return new Date();
+    if (!APPROVAL_STATE_NOW_RE.test(raw) || Number.isNaN(Date.parse(raw))) {
+        throw new ApprovalStateInputError(`--now must be an ISO 8601 UTC timestamp (e.g. 2026-01-01T00:00:00Z), got ${JSON.stringify(raw)}`);
+    }
+    return new Date(raw);
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function combineUnchecked(scan, bypass) {
+    const fromParseFailures = scan.parseFailures.map((p) => ({
+        file: p.file,
+        line: 0,
+        kind: "parse-failure",
+        detail: p.detail,
+    }));
+    return [...bypass.unchecked, ...fromParseFailures];
+}
+function computeApprovalStateVerdict(registryFindings, bypass) {
+    const hasRegistryError = registryFindings.some((f) => f.severity === "error");
+    if (hasRegistryError || bypass.verdict === "violated")
+        return "violated";
+    if (bypass.verdict === "indeterminate")
+        return "indeterminate";
+    return "satisfied";
+}
+function approvalStateExitCode(verdict) {
+    return verdict === "violated" ? 1 : verdict === "indeterminate" ? 2 : 0;
+}
+/**
+ * Emitted when this command cannot even reach the point of scanning (a bad
+ * registry file, an unusable scan-dir, or the scan itself throwing) — always
+ * exit 2, always `verdict: "indeterminate"` in JSON mode, with `error`
+ * naming the reason. Bad ARGUMENTS never reach here — those are caught in
+ * `mainApprovalStateCommand`'s own outer catch, before `--format` is even
+ * meaningfully known to matter, and always print usage to stderr regardless
+ * of `--format`.
+ */
+function emitApprovalStateCouldNotRun(format, reason) {
+    if (format === "json") {
+        console.log(JSON.stringify({
+            verdict: "indeterminate",
+            findings: [],
+            unchecked: [],
+            counts: { errors: 0, warnings: 0, unchecked: 0, filesScanned: 0, coupledFiles: 0 },
+            error: reason,
+        }));
+    }
+    else {
+        console.error(`[approval-state] could not run: ${reason}`);
+    }
+    return 2;
+}
+/**
+ * Prints the human-text or `--format json` report and returns the exit code
+ * — the one place `assessCopyApprovals`' registry findings and
+ * `checkApprovalBypass`'s source findings are merged into a single verdict.
+ * See this section's top doc comment for why the two are combined rather
+ * than reported as two separate commands.
+ */
+function reportApprovalState(format, registryPath, scanDirPath, registryFindings, scan, bypass) {
+    const verdict = computeApprovalStateVerdict(registryFindings, bypass);
+    const exitCode = approvalStateExitCode(verdict);
+    const registryErrors = registryFindings.filter((f) => f.severity === "error");
+    const registryWarnings = registryFindings.filter((f) => f.severity === "warning");
+    const unchecked = combineUnchecked(scan, bypass);
+    const errorCount = registryErrors.length + bypass.findings.length;
+    if (format === "json") {
+        const findings = [
+            ...registryFindings.map((f) => ({ source: "registry", rule: f.rule, severity: f.severity, entryId: f.entryId, message: f.message })),
+            ...bypass.findings.map((f) => ({ source: "source", rule: f.rule, severity: f.severity, file: f.file, line: f.line, message: f.detail })),
+        ];
+        console.log(JSON.stringify({
+            verdict,
+            findings,
+            unchecked,
+            counts: {
+                errors: errorCount,
+                warnings: registryWarnings.length,
+                unchecked: unchecked.length,
+                filesScanned: scan.filesScanned,
+                coupledFiles: scan.coupledFiles.length,
+            },
+        }));
+        return exitCode;
+    }
+    console.log(`[approval-state] registry: ${registryPath}`);
+    console.log(`[approval-state] scan dir: ${scanDirPath}`);
+    console.log(`[approval-state] ${errorCount} error(s), ${registryWarnings.length} warning(s), ${unchecked.length} unchecked item(s), ${scan.filesScanned} file(s) scanned, ${scan.coupledFiles.length} coupled file(s).`);
+    for (const f of registryErrors) {
+        console.log(`[approval-state] [${f.rule}] ${f.entryId}: ${f.message}`);
+    }
+    for (const f of bypass.findings) {
+        console.log(`[approval-state] [${f.rule}] ${f.file}:${f.line} ${f.detail}`);
+    }
+    if (registryWarnings.length > 0) {
+        console.log(`[approval-state] warnings:`);
+        for (const f of registryWarnings) {
+            console.log(`[approval-state]   [${f.rule}] ${f.entryId}: ${f.message}`);
+        }
+    }
+    if (unchecked.length > 0) {
+        console.log(`[approval-state] unchecked:`);
+        for (const u of unchecked) {
+            console.log(`[approval-state]   [${u.kind}] ${u.file}:${u.line} ${u.detail}`);
+        }
+    }
+    if (bypass.reasons.length > 0) {
+        console.log(`[approval-state] reasons:`);
+        for (const r of bypass.reasons) {
+            console.log(`[approval-state]   ${r}`);
+        }
+    }
+    console.log(`[approval-state] verdict: ${verdict}`);
+    return exitCode;
+}
+/**
+ * Exported (unlike a typical CLI `main`) so this package's tests (which do
+ * not ship) can exercise the whole argv-to-exit-code contract directly, without spawning a subprocess —
+ * the same discipline `mainApproveCommand` (`approve-cli.ts`) and
+ * `mainAddressabilityCheck`/`mainPassagesCheck` (`cli.ts`) already hold to.
+ * `argv` excludes the leading `"approval-state"` token. Never throws: every
+ * failure, expected or not, is caught here and mapped to exit code 2.
+ */
+export function mainApprovalStateCommand(argv) {
+    try {
+        const args = parseApprovalStateArgs(argv);
+        if (args.help) {
+            console.log(APPROVAL_STATE_USAGE);
+            return 0;
+        }
+        if (args.registryFile === undefined) {
+            throw new ApprovalStateInputError("registry-file is required");
+        }
+        if (args.scanDir === undefined) {
+            throw new ApprovalStateInputError("scan-dir is required");
+        }
+        const now = parseApprovalStateNow(args.now);
+        const registryPath = resolve(process.cwd(), args.registryFile);
+        const scanDirPath = resolve(process.cwd(), args.scanDir);
+        let raw;
+        try {
+            raw = readFileSync(registryPath, "utf8");
+        }
+        catch (error) {
+            return emitApprovalStateCouldNotRun(args.format, `registry file "${registryPath}" could not be read: ${errorMessage(error)}`);
+        }
+        let parsedJson;
+        try {
+            parsedJson = JSON.parse(raw);
+        }
+        catch (error) {
+            return emitApprovalStateCouldNotRun(args.format, `registry file "${registryPath}" is not valid JSON: ${errorMessage(error)}`);
+        }
+        let registry;
+        try {
+            registry = parseCopyRegistry(parsedJson);
+        }
+        catch (error) {
+            return emitApprovalStateCouldNotRun(args.format, errorMessage(error));
+        }
+        if (!existsSync(scanDirPath) || !statSync(scanDirPath).isDirectory()) {
+            return emitApprovalStateCouldNotRun(args.format, `scan-dir "${scanDirPath}" is not a directory`);
+        }
+        const registryFindings = assessCopyApprovals(registry, now);
+        let scan;
+        try {
+            scan = scanApprovalBypass(scanDirPath, { registryPath, extensions: args.extensions });
+        }
+        catch (error) {
+            return emitApprovalStateCouldNotRun(args.format, errorMessage(error));
+        }
+        const bypass = checkApprovalBypass(scan);
+        return reportApprovalState(args.format, registryPath, scanDirPath, registryFindings, scan, bypass);
+    }
+    catch (error) {
+        if (error instanceof ApprovalStateInputError) {
+            console.error(`writer-check approval-state: ${error.message}`);
+            console.error(`\n${APPROVAL_STATE_USAGE}`);
+            return 2;
+        }
+        console.error(`writer-check approval-state: unexpected error: ${error instanceof Error ? (error.stack ?? error.message) : String(error)}`);
+        return 2;
+    }
+}
+//# sourceMappingURL=approval.js.map

package/dist/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAA8H,MAAM,sBAAsB,CAAC;AAC3M,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,qDAAqD,CAAC;AAE5F,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAwB;IAC9E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAmD;IACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,eAAe,CAAC;AACzE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,QAAsB,EAAE,GAAS;IACjE,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7F,CAAC;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,GAAS;IACnE,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,2CAA2C;aACvE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,yDAAyD;aACrF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,2BAA2B,QAAQ,CAAC,SAAS,GAAG;aAC5E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,IAAI,QAAQ,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;YAC/E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,kEAAkE;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,2EAA2E;AAC3E,wEAAwE;AACxE,uBAAuB;AACvB,EAAE;AACF,6DAA6D;AAC7D,sEAAsE;AACtE,wDAAwD;AACxD,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BnC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,uBAAwB,SAAQ,KAAK;CAAG;AAE9C,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AACvD,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,kDAAkD,CAAC;AAYjF;;;;;;;;;;GAUG;AACH,SAAS,sBAAsB,CAAC,IAAc;IAC5C,IAAI,YAAgC,CAAC;IACrC,IAAI,OAA2B,CAAC;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,MAAM,GAAoB,MAAM,CAAC;IACrC,IAAI,GAAuB,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,uBAAuB,CAAC,iDAAiD,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,uBAAuB,CAC/B,4EAA4E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,uBAAuB,CAAC,yDAAyD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACtH,CAAC;gBACD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,IAAI,uBAAuB,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,GAAG,MAAM,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;YAChF,CAAC;YACD,GAAG,GAAG,KAAK,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,YAAY,GAAG,GAAG,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,GAAG,GAAG,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,uBAAuB,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,uBAAuB,CAAC,4EAA4E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAWD,SAAS,gBAAgB,CAAC,IAA8B,EAAE,MAAgC;IACxF,MAAM,iBAAiB,GAA6B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,GAAI,MAAM,CAAC,SAA2C,EAAE,GAAG,iBAAiB,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,2BAA2B,CAAC,gBAAuC,EAAE,MAAgC;IAC5G,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9E,IAAI,gBAAgB,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,eAAe,CAAC;IAC/D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA6B;IAC1D,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,4BAA4B,CAAC,MAAuB,EAAE,MAAc;IAC3E,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;YAClF,KAAK,EAAE,MAAM;SACd,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAC1B,MAAuB,EACvB,YAAoB,EACpB,WAAmB,EACnB,gBAAuC,EACvC,IAA8B,EAC9B,MAAgC;IAEhC,MAAM,OAAO,GAAG,2BAA2B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9E,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAElE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG;YACf,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7I,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAwB,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACzK,CAAC;QACF,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,OAAO;YACP,QAAQ;YACR,SAAS;YACT,MAAM,EAAE;gBACN,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,gBAAgB,CAAC,MAAM;gBACjC,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;aACvC;SACF,CAAC,CACH,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CACT,oBAAoB,UAAU,cAAc,gBAAgB,CAAC,MAAM,gBAAgB,SAAS,CAAC,MAAM,uBAAuB,IAAI,CAAC,YAAY,qBAAqB,IAAI,CAAC,YAAY,CAAC,MAAM,mBAAmB,CAC5M,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAc;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,YAAY,wBAAwB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChI,CAAC;QAED,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,YAAY,wBAAwB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChI,CAAC;QAED,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACrE,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,WAAW,sBAAsB,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAE5D,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,KAAK,oBAAoB,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CACX,kDAAkD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5H,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/approve-cli.d.ts

@@ -0,0 +1,82 @@
+/**
+ * `writer-check approve` — writes a `CopyRegistryEntry.approval` record so
+ * nobody has to hand-edit one. It exists as a command, not a hand-edited
+ * JSON field, for the same reason `textFingerprint` (`fingerprint.ts`) is a
+ * content hash rather than a human-maintained counter: a hand-typed record
+ * is easy to get wrong — copying yesterday's `approvedAt`, pinning `textFingerprint` to
+ * some other entry's text, or leaving `pendingOwnerReview` set after an
+ * owner actually reviewed it. Every field this command writes is either
+ * computed (`approvedAt` from the clock, `textFingerprint` from the
+ * entry's own current `text` via `computeCopyFingerprint`) or copied
+ * verbatim from an argument this command itself validated (`--delegate`,
+ * `--scope`, `--expires`) — there is no field here a human types free-form
+ * into the JSON.
+ *
+ * This module owns argument parsing, registry-file I/O, and the mutate-
+ * then-atomically-rename write; `./approval.ts`'s `isDelegateScopeItem` and
+ * `isEntryInDelegateScope` decide whether a requested id is in a delegate's
+ * declared scope, and `./schema.ts`'s `validateCopyRegistryShape` decides
+ * whether the registry file is trustworthy enough to mutate at all — this
+ * file calls both rather than re-deriving either.
+ *
+ * `main`-equivalent shape is `mainApproveCommand`, exported (unlike a
+ * typical CLI `main`) so this package's tests (which do not ship) can exercise the whole
+ * argv-to-exit-code contract directly against real `mkdtemp` fixture
+ * files, without spawning a subprocess — the same discipline every other
+ * subcommand in this package's `cli.ts` already holds to. `argv` excludes
+ * the leading `"approve"` token: `cli.ts`'s top-level dispatch calls
+ * `mainApproveCommand(argv.slice(1))` for `writer-check approve ...`, the same way `"passages"` and
+ * `"addressability"` are already dispatched there.
+ *
+ * Exit codes — a three-state contract matching every other gate/command in
+ * this package:
+ *
+ *   0 — written: every named entry was approved or revoked, and the
+ *       registry file on disk now reflects it.
+ *   1 — refused: at least one named entry is unknown, is `retired`, or —
+ *       for a delegate approval — falls outside `--scope`. This is
+ *       ALL-OR-NOTHING: when any requested id has a problem, EVERY problem
+ *       is printed and NOTHING is written, even for the other ids that
+ *       would otherwise have succeeded. A partial write here would leave a
+ *       consumer's own audit trail unable to tell whether a whole
+ *       requested batch was actually reviewed together.
+ *   2 — could not run: bad arguments (see below), or the registry file is
+ *       missing/unreadable, not valid JSON, or fails
+ *       `validateCopyRegistryShape`. Nothing is written in this state
+ *       either — this command never mutates a registry it does not first
+ *       fully trust.
+ *
+ * Bad-argument cases that produce exit 2, all before the registry file is
+ * ever opened: no registry-file argument, zero entry ids, neither `--by`
+ * nor `--revoke` (or both), `--by` other than `owner`/`delegate`, `--by
+ * owner` combined with `--delegate`/`--scope`/`--expires`, `--by delegate`
+ * missing `--delegate` or `--scope`, an empty `--delegate` value, a
+ * `--scope` item that fails `isDelegateScopeItem` or an empty scope list,
+ * `--revoke` combined with any of `--by`/`--delegate`/`--scope`/
+ * `--expires`, an `--expires` value that is not a well-formed ISO 8601 UTC
+ * timestamp or is not strictly after the current time, or an unknown flag.
+ * `--help`/`-h` always prints usage and returns 0, taking precedence over
+ * every other check reachable in the same parse. Any other unexpected
+ * exception is caught and mapped to exit 2 as well — this command never
+ * lets an uncaught error double as a "something went wrong" report.
+ */
+export declare const APPROVE_USAGE = "Usage: writer-check approve <registry-file> <entry-id>... --by owner\n   or: writer-check approve <registry-file> <entry-id>... --by delegate --delegate <id> --scope <ns>[,<ns>...] [--expires <ISO>]\n   or: writer-check approve <registry-file> <entry-id>... --revoke\n\n  registry-file  Path to a CopyRegistry JSON file. Required.\n  entry-id       One or more entry ids to approve or revoke (repeatable positional argument; duplicates are deduplicated). Required.\n\nOptions:\n  --help                  Print this message and exit 0.\n  --by <owner|delegate>   Who is recording this approval. Exactly one of --by or --revoke is required.\n  --delegate <id>         Opaque delegate identifier, never a personal name. Required (and only allowed) with --by delegate.\n  --scope <ns>[,<ns>...]  One or more dot-separated entry-id namespaces the delegate may approve (repeatable; a comma-separated value and repeated flags union). Required (and only allowed) with --by delegate.\n  --expires <ISO>         ISO 8601 UTC timestamp (YYYY-MM-DDTHH:MM:SSZ, optionally with milliseconds) after which the delegate approval expires. Must be strictly after the current time. Only allowed with --by delegate.\n  --revoke                Return every named entry to \"draft\" and delete its approval record. Cannot be combined with --by, --delegate, --scope, or --expires.\n\nApproving an entry that already carries a delegate's approval record with\n--by owner replaces that record with the owner's own \u2014 this is how a\npending delegate approval is durably confirmed.\n\nExit codes: 0 = written (every named entry approved or revoked; the\nregistry file was updated), 1 = refused (an unknown, retired, or \u2014 for a\ndelegate approval \u2014 out-of-scope entry id was named; every problem is\nprinted and nothing is written), 2 = could not run (bad arguments, or the\nregistry file is missing/unreadable/not valid JSON/fails schema\nvalidation; nothing is written).\n";
+/**
+ * Exported (unlike a typical CLI `main`) so this package's tests (which do
+ * not ship) can exercise the whole argv-to-exit-code contract directly against real
+ * `mkdtemp` fixture files, without spawning a subprocess — see this file's
+ * top doc comment for the full exit-code contract. `argv` excludes the
+ * leading `"approve"` subcommand token. `io.now` lets a test pin the clock
+ * that `approvedAt` and `--expires` validation are measured against;
+ * omitted, it defaults to `new Date()`.
+ *
+ * Never throws: every failure, expected or not, is caught here and mapped
+ * to an exit code — bad arguments and an untrustworthy registry file both
+ * become 2 with nothing written, a refused (but well-formed) request
+ * becomes 1 with nothing written, and a clean run becomes 0 with the
+ * registry file updated on disk.
+ */
+export declare function mainApproveCommand(argv: string[], io?: {
+    now?: Date;
+}): number;
+//# sourceMappingURL=approve-cli.d.ts.map

package/dist/approve-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-cli.d.ts","sourceRoot":"","sources":["../src/approve-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AASH,eAAO,MAAM,aAAa,46DAyBzB,CAAC;AA+SF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAO,GAAG,MAAM,CA4DlF"}