@intentius/chant 0.122.0 → 0.124.0

package/dist/lifecycle/gate-ledger-select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-ledger-select.d.ts","sourceRoot":"","sources":["../../src/lifecycle/gate-ledger-select.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE7E,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEvF;AAED,mMAAmM;AACnM,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,IAAI,EAAE,MAAM,GACX,iBAAiB,GAAG,SAAS,CAO/B;AAED,uOAAuO;AACvO,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,oBAAoB,GAAG,SAAS,CASlC;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,qFAAqF;IACrF,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,mBAAmB,CAuBrB"}

package/dist/lifecycle/gate-ledger.d.ts

@@ -1,6 +1,7 @@
 import { type GateOrigin } from "./gate-origin.js";
 import type { GateApprover, GatePolicyDecision, ResolvedGateApproval } from "../op/gate-approval.js";
 import type { GateRunLocator } from "../op/gate-resume.js";
+export { isPendingGateExpired, latestPendingGate, latestResolutionForPlan, latestResolutionSince, type PlanBoundResolution, } from "./gate-ledger-select.js";
 /** The directory on the `chant/lifecycle` branch that holds gate ledgers, under a member's prefix when it has one. */
 export declare const GATES_DIR = "_gates";
 /**
@@ -260,8 +261,6 @@ export type PendingGateInput = Omit<PendingGateRecord, "version" | "kind">;
 export type GateLedgerRecord = GateResolutionRecord | PendingGateRecord;
 /** The default a gate's pending fact expires after when its `GateStep` declares no `timeout` — the same 48h `GateStep.timeout` documents as its own default. */
 export declare const DEFAULT_GATE_EXPIRY = "48h";
-/** Whether a pending fact has aged out of relevance at `nowIso`. */
-export declare function isPendingGateExpired(record: PendingGateRecord, nowIso: string): boolean;
 /**
  * Where an Op's gate ledger lives, as a path a human can go and read:
  * `_gates/<op>.jsonl` on the `chant/lifecycle` orphan branch. Exported so a
@@ -320,47 +319,4 @@ export declare function readGateResolutions(op: string, opts?: {
     records: GateResolutionRecord[];
     malformed: number;
 }>;
-/** The most recent pending fact for `gate`, expired or not — the anchor {@link latestResolutionSince} measures a resolution against. `undefined` when the gate has never been recorded pending. */
-export declare function latestPendingGate(records: PendingGateRecord[], gate: string): PendingGateRecord | undefined;
-/** The most recent resolution for `gate` recorded after `sinceIso` (a gated tick's own timestamp) — what `chant operator status` uses to tell a resolved gate from a still-pending one. `undefined` when no such resolution exists. */
-export declare function latestResolutionSince(records: GateResolutionRecord[], gate: string, sinceIso: string): GateResolutionRecord | undefined;
-/** What {@link latestResolutionForPlan} found for the plan a run is holding. */
-export interface PlanBoundResolution {
-    /** The resolution that answers this gate for this plan. Absent when nothing does. */
-    resolution?: GateResolutionRecord;
-    /**
-     * Present instead of {@link PlanBoundResolution.resolution} when a
-     * resolution stands for this gate but for a different plan — the newest
-     * such record, so a refusal can name who approved what and when. Its
-     * `planDigest` is `undefined` for a record written before #2300.
-     */
-    mismatched?: GateResolutionRecord;
-}
-/**
- * The resolution that answers `gate` for the plan `planDigest` identifies
- * (#2300).
- *
- * The criterion is the digest; recency is only the tiebreak between several
- * resolutions that all match it. That inversion is the whole point of the
- * issue: {@link latestResolutionSince} asks "is there a newer approval",
- * which a run answers yes to no matter what has changed since, and this asks
- * "is there an approval of *this*".
- *
- * - `planDigest` `undefined` — the gate binds no plan (an Op `gate` step
- *   authored with no `plan`). Falls straight through to
- *   {@link latestResolutionSince}: gates that never claimed to bind a plan
- *   behave exactly as they did before #2300.
- * - A resolution whose `planDigest` equals `planDigest` answers the gate.
- * - A resolution for a different plan does not, and comes back as
- *   `mismatched` so the caller can name both digests.
- * - A resolution with no `planDigest` at all — every record written before
- *   #2300 — does not either, and comes back as `mismatched` with an absent
- *   `planDigest`. This is the safe reading of the migration: such a record
- *   proves someone approved something, and nothing about what. Accepting it
- *   once would silently apply the very change this check exists to catch, on
- *   exactly the estates that have been running longest. The cost is one
- *   further `chant approve` per gate after the upgrade, which the refusal
- *   says out loud.
- */
-export declare function latestResolutionForPlan(records: GateResolutionRecord[], gate: string, sinceIso: string, planDigest: string | undefined): PlanBoundResolution;
 //# sourceMappingURL=gate-ledger.d.ts.map

package/dist/lifecycle/gate-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/gate-ledger.ts"],"names":[],"mappings":"AA8CA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKxD,sHAAsH;AACtH,eAAO,MAAM,SAAS,WAAM,CAAC;AAG7B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAY3F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,OAAO,EAAE,CAAC,CAAC;IACX,8KAA8K;IAC9K,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0HAA0H;IAC1H,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,SAAS,EAAE,MAAM,CAAC;IAClB,oLAAoL;IACpL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB;;;;;OAKG;IACH,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3D;;;;;OAKG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,8HAA8H;AAC9H,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,wFAAwF;IACxF,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,8IAA8I;IAC9I,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,SAAS,EAAE,MAAM,CAAC;IAClB,4IAA4I;IAC5I,SAAS,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;AAE3E,kDAAkD;AAClD,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAExE,gKAAgK;AAChK,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEvF;AAMD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAEpE;AAED,+mBAA+mB;AAC/mB,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAI3D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAiBxD;AA2BD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAInG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,GACd;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAmD1F;AAED,oNAAoN;AACpN,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAGjE;AAED,mMAAmM;AACnM,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,IAAI,EAAE,MAAM,GACX,iBAAiB,GAAG,SAAS,CAO/B;AAED,uOAAuO;AACvO,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,oBAAoB,GAAG,SAAS,CASlC;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,qFAAqF;IACrF,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,EAAE,EAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,mBAAmB,CAuBrB"}
+{"version":3,"file":"gate-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/gate-ledger.ts"],"names":[],"mappings":"AA6CA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAIxD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAI9B,sHAAsH;AACtH,eAAO,MAAM,SAAS,WAAM,CAAC;AAG7B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAY3F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,OAAO,EAAE,CAAC,CAAC;IACX,8KAA8K;IAC9K,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0HAA0H;IAC1H,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,SAAS,EAAE,MAAM,CAAC;IAClB,oLAAoL;IACpL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB;;;;;OAKG;IACH,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3D;;;;;OAKG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,8HAA8H;AAC9H,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,wFAAwF;IACxF,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,8IAA8I;IAC9I,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,SAAS,EAAE,MAAM,CAAC;IAClB,4IAA4I;IAC5I,SAAS,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;AAE3E,kDAAkD;AAClD,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAExE,gKAAgK;AAChK,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAMzC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAEpE;AAED,+mBAA+mB;AAC/mB,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAI3D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAiBxD;AA2BD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAInG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,GACd;IAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAmD1F;AAED,oNAAoN;AACpN,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAGjE"}

package/dist/lifecycle/override-ledger.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The override gate's lines on `chant/lifecycle` (#3760): read the denials,
+ * overrides and applied records, record a denial, and record that a run
+ * applied under an override, which spends it. The decision is
+ * `../override-gate.ts`'s, which bundles without this module's git code.
+ *
+ * Denials and overrides share `_gates/policy-override.jsonl` with the
+ * ordinary gate line shapes, so `chant approve`, `chant operator status` and
+ * the audit reader read them as they read any gate. Applied records live in
+ * `_gates/policy-override/applied.jsonl`, which no gate reader lists.
+ */
+import { type GateResolutionRecord, type PendingGateRecord } from "./gate-ledger.js";
+import { type AppliedOverrideRecord, type OverridePendingInput, type OverridePendingRecord } from "../override-gate.js";
+export interface OverrideLedger {
+    resolutions: GateResolutionRecord[];
+    pending: PendingGateRecord[];
+    applied: AppliedOverrideRecord[];
+}
+/** The override ledger and its applied records, oldest first. Empty when nothing is recorded. */
+export declare function readOverrideLedger(opts?: {
+    cwd?: string;
+}): Promise<OverrideLedger>;
+/** Append a denial's pending fact ({@link overridePending}). Does not push. */
+export declare function recordOverrideDenial(input: OverridePendingInput, opts?: {
+    cwd?: string;
+}): Promise<{
+    commit: string;
+    record: OverridePendingRecord;
+}>;
+/** Append applied records, spending the overrides they name. Write them before applying; a write that fails should stop the run. Does not push. */
+export declare function recordOverridesApplied(records: readonly AppliedOverrideRecord[], opts?: {
+    cwd?: string;
+}): Promise<string | undefined>;
+//# sourceMappingURL=override-ledger.d.ts.map

package/dist/lifecycle/override-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"override-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/override-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAqC,KAAK,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAErH,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,iGAAiG;AACjG,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAIzF;AAED,+EAA+E;AAC/E,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAI3J;AAED,mJAAmJ;AACnJ,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmB5I"}

package/dist/lifecycle/rollback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/lifecycle/rollback.ts"],"names":[],"mappings":"AAiBA,2CAA2C;AAC3C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,qCAAqC;AACrC,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAO5F;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkD1B"}
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/lifecycle/rollback.ts"],"names":[],"mappings":"AAkBA,2CAA2C;AAC3C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,qCAAqC;AACrC,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAO5F;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqD1B"}

package/dist/lifecycle/work-item-id.d.ts

@@ -0,0 +1,22 @@
+/**
+ * What a work item id has to be to key a work lease (#2815). The id lands in
+ * refs (`refs/chant/lease/work/<id>`, `refs/chant/kept/.../<item>/<token>`,
+ * the work branch `chant/work/.../<id>`) and in a file name
+ * (`_leases/<id>.jsonl`), so it has to be a valid ref path segment under
+ * `git check-ref-format`, and git's check is stricter than a character class.
+ *
+ * Kept free of imports so `Op()`, `declareSteward` and the CLI can all call it
+ * without loading the lease machinery.
+ */
+/** The characters an id may use: letters, digits, ".", "_" and "-", starting with a letter or digit, at most 100. */
+export declare const WORK_ITEM_ID_PATTERN: RegExp;
+/**
+ * Why `id` can't key a work lease, or `undefined` when it can. On top of
+ * {@link WORK_ITEM_ID_PATTERN}, git refuses a ref component that has `..`,
+ * ends in `.`, or ends in `.lock` (git's own lock file for the ref; matched
+ * case-insensitively here since a case-folding filesystem would collide).
+ */
+export declare function workItemIdProblem(id: unknown): string | undefined;
+/** Whether `id` can key a work lease. */
+export declare function isWorkItemId(id: unknown): id is string;
+//# sourceMappingURL=work-item-id.d.ts.map

package/dist/lifecycle/work-item-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-item-id.d.ts","sourceRoot":"","sources":["../../src/lifecycle/work-item-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qHAAqH;AACrH,eAAO,MAAM,oBAAoB,QAAsC,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CASjE;AAED,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,EAAE,EAAE,OAAO,GAAG,EAAE,IAAI,MAAM,CAEtD"}

package/dist/lifecycle/work-lease.d.ts

@@ -1,11 +1,11 @@
+import { WORK_ITEM_ID_PATTERN, isWorkItemId, workItemIdProblem } from "./work-item-id.js";
 /** The key prefix of a work lease under the operator lease's ref namespace. */
 export declare const WORK_LEASE_KEY_PREFIX = "work/";
 /** The directory on `chant/lifecycle` that holds lease histories, under a member's prefix when it has one. */
 export declare const LEASES_DIR = "_leases";
 /** How long a claim lasts unless renewed: chud's default, which its dispatcher renews at a third of. */
 export declare const DEFAULT_WORK_LEASE_TTL_MS: number;
-/** A work item id a lease can be keyed by: one ref path segment and one file name. */
-export declare const WORK_ITEM_ID_PATTERN: RegExp;
+export { WORK_ITEM_ID_PATTERN, isWorkItemId, workItemIdProblem };
 /** The lease key of work item `id`. */
 export declare function workLeaseKey(id: string): string;
 /** The lease ref of work item `id` in the ledger with `memberPrefix`. */

package/dist/lifecycle/work-lease.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-lease.d.ts","sourceRoot":"","sources":["../../src/lifecycle/work-lease.ts"],"names":[],"mappings":"AAqDA,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,8GAA8G;AAC9G,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,wGAAwG;AACxG,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,QAAsC,CAAC;AAMxE,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAElE;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAEtE;AAED,8DAA8D;AAC9D,MAAM,WAAW,SAAS;IACxB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;AAC9B,0DAA0D;AAC1D,MAAM;AACN,+EAA+E;AAC/E,UAAU;AACV,gHAAgH;AAChH,WAAW;AACX,0DAA0D;AAC1D,OAAO;AACP,iFAAiF;AACjF,SAAS;AACT,4FAA4F;AAC5F,SAAS;AACT,kGAAkG;AAClG,SAAS;AACT,wGAAwG;AACxG,KAAK,CACG,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EAA8B,CAAC;AAEvF,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGlF;AAED,sEAAsE;AACtE,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAEjG;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAErF;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8FAA8F;AAC9F,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAa7H;AAED,wCAAwC;AACxC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,uGAAuG;IACvG,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,yHAAyH;IACzH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0FAA0F;AAC1F,eAAO,MAAM,mBAAmB,wGAWU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,mCAAmC;AACnC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,gBAAgB;IAC/B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAoCD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,eAAe,CAAC,CAW1B;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,eAAe,CAAC,CAY1B;AAuBD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,eAAe,CAAC,CAqC1B;AAmCD,qGAAqG;AACrG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAiBvG;AAED,8GAA8G;AAC9G,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAIvI;AAaD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAyBvH;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CASxH"}
+{"version":3,"file":"work-lease.d.ts","sourceRoot":"","sources":["../../src/lifecycle/work-lease.ts"],"names":[],"mappings":"AAoDA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEvF,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,8GAA8G;AAC9G,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,wGAAwG;AACxG,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAMjE,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAElE;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,MAAM,CAEtE;AAED,8DAA8D;AAC9D,MAAM,WAAW,SAAS;IACxB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;AAC9B,0DAA0D;AAC1D,MAAM;AACN,+EAA+E;AAC/E,UAAU;AACV,gHAAgH;AAChH,WAAW;AACX,0DAA0D;AAC1D,OAAO;AACP,iFAAiF;AACjF,SAAS;AACT,4FAA4F;AAC5F,SAAS;AACT,kGAAkG;AAClG,SAAS;AACT,wGAAwG;AACxG,KAAK,CACG,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EAA8B,CAAC;AAEvF,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGlF;AAED,sEAAsE;AACtE,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAEjG;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAErF;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8FAA8F;AAC9F,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAa7H;AAED,wCAAwC;AACxC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,uGAAuG;IACvG,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,yHAAyH;IACzH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0FAA0F;AAC1F,eAAO,MAAM,mBAAmB,wGAWU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,mCAAmC;AACnC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,gBAAgB;IAC/B,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAmCD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,eAAe,CAAC,CAW1B;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,eAAe,CAAC,CAY1B;AAuBD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,eAAe,CAAC,CAqC1B;AAmCD,qGAAqG;AACrG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAiBvG;AAED,8GAA8G;AAC9G,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAIvI;AAaD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAyBvH;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CASxH"}

package/dist/lint/policy-import.d.ts

@@ -7,7 +7,7 @@
  * `importConfigModule` (`chant.config.ts`): one narrow module whose only job is
  * "execute project-authored code here", so that "did any project code run in
  * this process?" has one place to look and one place to instrument — see
- * `examples/sandbox-execution-boundary.test.ts`, which spies on all three.
+ * `examples/sandbox-execution-boundary.e2e.test.ts`, which spies on all three.
  *
  * Before chant #1131 `./policy.ts` called `await import(resolved)` inline,
  * which is why the corpus boundary gate could not see it even after #1113 put

package/dist/lint/post-synth.d.ts

@@ -61,6 +61,21 @@ export interface PostSynthContext {
      * hand-built context. OTEL118 runs only when it is set.
      */
     readonly telemetry?: TelemetryAttribution;
+    /**
+     * The directory of the project config the build loaded (#3751): where a
+     * relative `sourceDir` resolves, and so where a check looks for a file the
+     * project keeps beside its source (the sql lexicon's `sql-types.d.ts`).
+     * Set by `chant build` and `chant lint`; absent from a hand-built context,
+     * where a check that reads the disk stays silent.
+     */
+    readonly projectDir?: string;
+    /**
+     * The project config the build loaded (#3751), as source lint rules get it
+     * in `LintContext.projectConfig`. A check that renders output again, as the
+     * sql lexicon's does for `sql-types.d.ts`, needs the settings the build ran
+     * with. Absent from a hand-built context.
+     */
+    readonly projectConfig?: Record<string, unknown>;
     /** Raw build result object */
     buildResult: {
         outputs: Map<string, string | SerializerResult>;
@@ -189,10 +204,14 @@ export declare function isPostSynthCheck(value: unknown): value is PostSynthChec
  * into the context so a check can branch on the current environment/stack, and
  * `opts.activityContracts` (chant #2101) carries the build's cross-lexicon
  * activity-contract map to the checks that validate Op steps against it.
- * `opts.telemetry` is the build's resolved telemetry attribution.
+ * `opts.telemetry` is the build's resolved telemetry attribution, and
+ * `opts.projectDir` and `opts.projectConfig` the config the build loaded and
+ * its directory.
  */
 export declare function runPostSynthChecks(checks: PostSynthCheck[], buildResult: PostSynthContext["buildResult"], env?: string, opts?: {
     activityContracts?: ReadonlyMap<string, ActivityContract>;
     telemetry?: TelemetryAttribution;
+    projectDir?: string;
+    projectConfig?: Record<string, unknown>;
 }): PostSynthDiagnostic[];
 //# sourceMappingURL=post-synth.d.ts.map

package/dist/lint/post-synth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"post-synth.d.ts","sourceRoot":"","sources":["../../src/lint/post-synth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAChD,8CAA8C;IAC9C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;QAChD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,GAC9C,MAAM,SAAS,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5F;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,IAAI,EAAE,MAAM,CAAC;QACb,0DAA0D;QAC1D,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IACpD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,EAC5C,GAAG,CAAC,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,oBAAoB,CAAA;CAAE,GACrG,mBAAmB,EAAE,CAmBvB"}
+{"version":3,"file":"post-synth.d.ts","sourceRoot":"","sources":["../../src/lint/post-synth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAChD,8CAA8C;IAC9C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,8BAA8B;IAC9B,WAAW,EAAE;QACX,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;QAChD,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAAC,GAC9C,MAAM,SAAS,EAAE,CAQnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5F;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,EAAE;QACR,kEAAkE;QAClE,IAAI,EAAE,MAAM,CAAC;QACb,0DAA0D;QAC1D,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IACpD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EAAE,EACxB,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,EAC5C,GAAG,CAAC,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnK,mBAAmB,EAAE,CAqBvB"}

package/dist/notify-verify.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Signing and checking a notify event (#3761). This module needs only
+ * `node:crypto`, so a receiver can import it alone and bundle nothing else:
+ *
+ * ```ts
+ * import { verifyWebhook } from "@intentius/chant/notify-verify";
+ *
+ * const checked = verifyWebhook({ body, headers: req.headers, key: process.env.CHANT_WEBHOOK_KEY });
+ * if (!checked.ok) return reply(401, checked.reason);
+ * handle(checked.event);
+ * ```
+ *
+ * The signature is HMAC-SHA256, keyed with the shared secret, over
+ * `<timestamp>.<body>`: the timestamp header (seconds since the epoch), a
+ * dot, and the request body exactly as sent. It travels as
+ * `x-chant-signature: sha256=<hex>`. Signing the timestamp with the body lets
+ * a receiver refuse a delivery replayed later; {@link verifyWebhook} refuses
+ * one more than five minutes from now by default. This is SQL Yodeler's
+ * scheme (#3756), with the header prefix a product can keep as its own.
+ */
+/** The header names' default prefix. A product passes its own (`x-yodel`, `x-terragucci`) to keep its receivers working. */
+export declare const DEFAULT_HEADER_PREFIX = "x-chant";
+/** The four headers a delivery carries, under `prefix`. */
+export declare function webhookHeaderNames(prefix?: string): {
+    signature: string;
+    timestamp: string;
+    event: string;
+    delivery: string;
+};
+/** How far from now a delivery's timestamp {@link verifyWebhook} still accepts, in seconds. */
+export declare const DEFAULT_TOLERANCE_SECONDS = 300;
+/** `sha256=<hex>` of `<timestamp>.<body>`, keyed with `key`. */
+export declare function signWebhook(key: string, timestamp: number | string, body: string): string;
+export type WebhookHeaders = Record<string, string | readonly string[] | undefined> | Headers;
+export interface VerifyWebhookInput {
+    /** The request body exactly as received, before any JSON parsing. */
+    body: string | Uint8Array;
+    /** The request's headers; names match without regard to case. */
+    headers: WebhookHeaders;
+    /** The shared secret. An empty or missing key never verifies. */
+    key: string | undefined;
+    /** Now, in seconds since the epoch. Default: the clock. */
+    now?: number;
+    /** How far from now the timestamp may be, in seconds. Default {@link DEFAULT_TOLERANCE_SECONDS}. */
+    toleranceSeconds?: number;
+    /** The header names' prefix the sender used. Default {@link DEFAULT_HEADER_PREFIX}. */
+    prefix?: string;
+}
+export type VerifyWebhookResult = {
+    ok: true;
+    event: unknown;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Whether a delivery was signed with `key` and is recent: the signature
+ * header matches (compared in constant time) and the timestamp is within the
+ * tolerance either side of now. On success, the parsed event.
+ */
+export declare function verifyWebhook(input: VerifyWebhookInput): VerifyWebhookResult;
+//# sourceMappingURL=notify-verify.d.ts.map

package/dist/notify-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify-verify.d.ts","sourceRoot":"","sources":["../src/notify-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,4HAA4H;AAC5H,eAAO,MAAM,qBAAqB,YAAY,CAAC;AAE/C,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,MAAM,GAAE,MAA8B,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAGpJ;AAED,+FAA+F;AAC/F,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAE7C,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;AAE9F,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,cAAc,CAAC;IACxB,iEAAiE;IACjE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oGAAoG;IACpG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAW/F;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAmB5E"}

package/dist/notify-verify.js

@@ -0,0 +1,76 @@
+/**
+ * Signing and checking a notify event (#3761). This module needs only
+ * `node:crypto`, so a receiver can import it alone and bundle nothing else:
+ *
+ * ```ts
+ * import { verifyWebhook } from "@intentius/chant/notify-verify";
+ *
+ * const checked = verifyWebhook({ body, headers: req.headers, key: process.env.CHANT_WEBHOOK_KEY });
+ * if (!checked.ok) return reply(401, checked.reason);
+ * handle(checked.event);
+ * ```
+ *
+ * The signature is HMAC-SHA256, keyed with the shared secret, over
+ * `<timestamp>.<body>`: the timestamp header (seconds since the epoch), a
+ * dot, and the request body exactly as sent. It travels as
+ * `x-chant-signature: sha256=<hex>`. Signing the timestamp with the body lets
+ * a receiver refuse a delivery replayed later; {@link verifyWebhook} refuses
+ * one more than five minutes from now by default. This is SQL Yodeler's
+ * scheme (#3756), with the header prefix a product can keep as its own.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+/** The header names' default prefix. A product passes its own (`x-yodel`, `x-terragucci`) to keep its receivers working. */
+export const DEFAULT_HEADER_PREFIX = "x-chant";
+/** The four headers a delivery carries, under `prefix`. */
+export function webhookHeaderNames(prefix = DEFAULT_HEADER_PREFIX) {
+    const p = prefix.toLowerCase();
+    return { signature: `${p}-signature`, timestamp: `${p}-timestamp`, event: `${p}-event`, delivery: `${p}-delivery` };
+}
+/** How far from now a delivery's timestamp {@link verifyWebhook} still accepts, in seconds. */
+export const DEFAULT_TOLERANCE_SECONDS = 300;
+/** `sha256=<hex>` of `<timestamp>.<body>`, keyed with `key`. */
+export function signWebhook(key, timestamp, body) {
+    return `sha256=${createHmac("sha256", key).update(`${String(timestamp)}.${body}`, "utf8").digest("hex")}`;
+}
+function header(headers, name) {
+    if (typeof headers.get === "function")
+        return headers.get(name) ?? undefined;
+    for (const [k, v] of Object.entries(headers)) {
+        if (k.toLowerCase() !== name)
+            continue;
+        return Array.isArray(v) ? v[0] : v;
+    }
+    return undefined;
+}
+/**
+ * Whether a delivery was signed with `key` and is recent: the signature
+ * header matches (compared in constant time) and the timestamp is within the
+ * tolerance either side of now. On success, the parsed event.
+ */
+export function verifyWebhook(input) {
+    if (!input.key)
+        return { ok: false, reason: "no key to verify with" };
+    const names = webhookHeaderNames(input.prefix);
+    const body = typeof input.body === "string" ? input.body : Buffer.from(input.body).toString("utf8");
+    const signature = header(input.headers, names.signature);
+    const timestamp = header(input.headers, names.timestamp);
+    if (!signature)
+        return { ok: false, reason: `no ${names.signature} header` };
+    if (!timestamp || !/^\d+$/.test(timestamp))
+        return { ok: false, reason: `no ${names.timestamp} header, or not a number of seconds` };
+    const expected = Buffer.from(signWebhook(input.key, timestamp, body));
+    const given = Buffer.from(signature);
+    if (given.length !== expected.length || !timingSafeEqual(given, expected))
+        return { ok: false, reason: "the signature does not match" };
+    const now = input.now ?? Math.floor(Date.now() / 1000);
+    const tolerance = input.toleranceSeconds ?? DEFAULT_TOLERANCE_SECONDS;
+    if (Math.abs(now - Number(timestamp)) > tolerance)
+        return { ok: false, reason: `the timestamp is more than ${String(tolerance)}s from now` };
+    try {
+        return { ok: true, event: JSON.parse(body) };
+    }
+    catch {
+        return { ok: false, reason: "the body is not JSON" };
+    }
+}
+//# sourceMappingURL=notify-verify.js.map

package/dist/notify.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Notify (#3761): tell people that a wave waits for an approval, that a run
+ * was refused or failed, or that drift was found.
+ *
+ * terragucci and SQL Yodeler each carried a copy of this (#3756). chant owns
+ * the event, its signing and the Slack and Teams posting; a product decides
+ * when to send and what its summary says. One event shape,
+ * `chant.notify/v1` (`./notify.schema.json`), carries what both send: the
+ * wave or environment, the targets concerned, the plan digest, the command
+ * that approves it and the run's link.
+ *
+ * ```ts
+ * import { makeNotifyEvent, sendNotify } from "@intentius/chant/notify";
+ *
+ * const event = makeNotifyEvent({ source: "sql-yodeler", event: "waiting", summary: "prod waits for an approval", targets: ["0007_add_index"], digest, approve: { command } });
+ * await sendNotify({ webhook: "YODEL_WEBHOOK_URL", key: "YODEL_WEBHOOK_KEY", slack: "SLACK_WEBHOOK_URL" }, event);
+ * ```
+ *
+ * The configuration names environment variables, never URLs or keys, and
+ * nothing here prints a URL or a key. The generic webhook gets the event as
+ * JSON, signed over `<timestamp>.<body>` (`./notify-verify.ts`); it is never
+ * posted unsigned. Slack and Teams incoming webhooks get a message rendered
+ * from the event, unsigned, since neither checks a signature. A delivery that
+ * fails is logged and returned; {@link sendNotify} never throws, so a
+ * caller's exit code never depends on it.
+ *
+ * Bundle-safe: this module reaches only `node:crypto` and
+ * `./notify-verify.ts` (`./notify-bundle.test.ts`).
+ */
+export { DEFAULT_HEADER_PREFIX, DEFAULT_TOLERANCE_SECONDS, signWebhook, verifyWebhook, webhookHeaderNames } from "./notify-verify.js";
+export type { VerifyWebhookInput, VerifyWebhookResult, WebhookHeaders } from "./notify-verify.js";
+/** The event's `schema` value. A field is only ever added within a version. */
+export declare const NOTIFY_SCHEMA = "chant.notify/v1";
+/** The JSON Schema's `$id`. */
+export declare const NOTIFY_SCHEMA_ID = "https://intentius.io/chant/schemas/notify/v1/notify.schema.json";
+/** What happened. */
+export declare const NOTIFY_EVENTS: readonly ["waiting", "refused", "failed", "drift"];
+export type NotifyEventKind = (typeof NOTIFY_EVENTS)[number];
+/** Where the run is: the CI run's page, the forge, the repository and commit. */
+export interface NotifyRun {
+    url?: string;
+    forge?: "github" | "gitlab" | "forgejo";
+    /** owner/name on GitHub and Forgejo, the project path on GitLab. */
+    repository?: string;
+    commit?: string;
+    /** The pull or merge request the run is for, when there is one. */
+    pr?: number;
+}
+/** `chant.notify/v1`. The JSON Schema is `./notify.schema.json`. */
+export interface NotifyEvent {
+    schema: typeof NOTIFY_SCHEMA;
+    /** The same for every send of one event about one digest (or drift fingerprint, or commit), so a receiver can drop a repeat. Random when there is none. */
+    id: string;
+    event: NotifyEventKind;
+    /** When it was sent, ISO 8601 UTC. */
+    at: string;
+    /** The product that sent it: `chant`, `terragucci`, `sql-yodeler`. */
+    source: string;
+    /** What the run belongs to: the repository, or a name the product gives. */
+    project: string;
+    /** One line a person can read. */
+    summary: string;
+    /** The wave, for a product that applies in waves. */
+    wave?: {
+        number: number;
+        name?: string;
+        gate?: string;
+    };
+    /** The environment, for a product that applies per environment. */
+    environment?: string;
+    /** What the event concerns: the wave's roots or runs, the pending migrations. Empty when the product names none. */
+    targets: string[];
+    /** The plan digest an approval binds. */
+    digest?: string;
+    /** On `waiting`: how a person approves it. */
+    approve?: {
+        /** The command to run, as the product prints it. */
+        command: string;
+        /** chant's own command for the same approval, when the product's differs. */
+        chant?: string;
+        /** Under `pr-review`: the pull request whose approving review would approve it. */
+        review?: {
+            pr: number;
+            url: string;
+        };
+    };
+    /** The product's own word for the outcome (`gated`, `denied`, `incomplete`). */
+    status?: string;
+    /** On `refused` and `failed`: why. */
+    reason?: string;
+    /** The exit code the run ended with. */
+    exitCode?: number;
+    /** On `drift`: what moved. */
+    drift?: {
+        changed: string[];
+        missing?: string[];
+        failed?: string[];
+        fingerprint?: string;
+    };
+    run?: NotifyRun;
+    /** A report page for the run. */
+    reportUrl?: string;
+    /** The product's own record of the outcome, carried whole for programs that know it. */
+    detail?: Record<string, unknown>;
+}
+/** What a product fills in; {@link makeNotifyEvent} adds the rest. */
+export type NotifyFields = Omit<NotifyEvent, "schema" | "id" | "at" | "project" | "targets" | "run"> & {
+    id?: string;
+    project?: string;
+    targets?: string[];
+    run?: NotifyRun;
+};
+/** The CI run, from its environment: GitHub Actions, Forgejo Actions or GitLab CI. */
+export declare function ciRun(env: NodeJS.ProcessEnv): NotifyRun;
+/**
+ * A whole event: the fields, with the schema, the time, the CI run (the
+ * product's own `run` fields win) and an id. The id is a hash over the
+ * source, project, event, wave, environment and digest (else the drift
+ * fingerprint, else the commit), so a re-run sends the same id; with none of
+ * the three it is random.
+ */
+export declare function makeNotifyEvent(fields: NotifyFields, options?: {
+    env?: NodeJS.ProcessEnv;
+    now?: Date;
+}): NotifyEvent;
+/** The first line of every chat message: `<source>: <summary>`, or what happened to what when there is no summary. */
+export declare function notifyHeadline(e: NotifyEvent): string;
+/** A Slack incoming webhook's body: one mrkdwn text, with the approve command as code and the links as links. */
+export declare function slackMessage(e: NotifyEvent): {
+    text: string;
+};
+/** A Teams incoming webhook's body (a Workflows webhook): one Adaptive Card, with buttons that open the review page and the run. */
+export declare function teamsMessage(e: NotifyEvent): Record<string, unknown>;
+/** Where events go. Each value is the NAME of an environment variable; the configuration never holds a URL or a key. */
+export interface NotifyConfig {
+    /** The variable holding the generic webhook's URL. */
+    webhook?: string;
+    /** The variable holding the key the webhook's events are signed with. Required with `webhook`. */
+    key?: string;
+    /** The variable holding a Slack incoming webhook's URL. */
+    slack?: string;
+    /** The variable holding a Microsoft Teams incoming webhook's (Workflows) URL. */
+    teams?: string;
+    /** The events to send. Default: all of them. */
+    events?: NotifyEventKind[];
+}
+/** The first problem with a {@link NotifyConfig}, or undefined. `where` prefixes the message. */
+export declare function notifyConfigProblem(value: unknown, where?: string): string | undefined;
+/** The environment variables a configuration names, for a pipeline to map its secrets into. */
+export declare function notifyVariables(config: NotifyConfig | undefined): string[];
+/** The request {@link sendNotify} posts to the webhook: the event as JSON, signed with `key` over `<timestamp>.<body>`. */
+export declare function webhookRequest(event: NotifyEvent, key: string, options?: {
+    now?: number;
+    prefix?: string;
+    userAgent?: string;
+}): {
+    headers: Record<string, string>;
+    body: string;
+};
+/** The part of `fetch` {@link sendNotify} uses. Tests pass their own. */
+export type NotifyFetch = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+}>;
+export interface NotifyDelivery {
+    target: "webhook" | "slack" | "teams";
+    ok: boolean;
+    /** `delivered`, the HTTP status, or why there was none. Never a URL or a key. */
+    detail: string;
+}
+export interface SendNotifyOptions {
+    env?: NodeJS.ProcessEnv;
+    fetch?: NotifyFetch;
+    /** Tries per target. A 4xx is not retried. Default 3. */
+    attempts?: number;
+    /** Waits between tries. Default `setTimeout`, 500 ms times the try. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Where a failed delivery is written. Default stderr. */
+    log?: (line: string) => void;
+    /** The webhook headers' prefix. Default `x-chant`. */
+    prefix?: string;
+    userAgent?: string;
+    /** A product's own Slack or Teams body (terragucci's relay buttons), in place of {@link slackMessage} and {@link teamsMessage}. */
+    render?: {
+        slack?: (e: NotifyEvent) => unknown;
+        teams?: (e: NotifyEvent) => unknown;
+    };
+    /** Seconds since the epoch, for the signature's timestamp. Default: the clock. */
+    now?: number;
+}
+/**
+ * Sends `event` to what `config` names, reading the URLs and the key from
+ * the environment at send time. Never throws: each delivery's outcome is
+ * returned, and a failed one is logged without its URL.
+ */
+export declare function sendNotify(config: NotifyConfig | undefined, event: NotifyEvent | undefined, options?: SendNotifyOptions): Promise<NotifyDelivery[]>;
+//# sourceMappingURL=notify.d.ts.map

package/dist/notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../src/notify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACnI,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE/F,+EAA+E;AAC/E,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAC/C,+BAA+B;AAC/B,eAAO,MAAM,gBAAgB,oEAAoE,CAAC;AAElG,qBAAqB;AACrB,eAAO,MAAM,aAAa,YAAI,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,aAAa,CAAC;IAC7B,2JAA2J;IAC3J,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oHAAoH;IACpH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE;QACR,oDAAoD;QACpD,OAAO,EAAE,MAAM,CAAC;QAChB,6EAA6E;QAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,mFAAmF;QACnF,MAAM,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KACtC,CAAC;IACF,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3F,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,sEAAsE;AACtE,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,GAAG;IACrG,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB,CAAC;AAEF,sFAAsF;AACtF,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAavD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAO,GAAG,WAAW,CAoBxH;AASD,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAIrD;AAmBD,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAS7D;AAED,oIAAoI;AACpI,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAyBpE;AAED,wHAAwH;AACxH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kGAAkG;IAClG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAKD,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAW,GAAG,MAAM,GAAG,SAAS,CAmBxF;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,EAAE,CAG1E;AAED,2HAA2H;AAC3H,wBAAgB,cAAc,CAC5B,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClE;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAenD;AAED,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnL,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mIAAmI;IACnI,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,OAAO,CAAA;KAAE,CAAC;IACtF,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAkCD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAuC7J"}