@patze/code-cli 0.10.2

package/dist/backend/preview-payload.js

@@ -0,0 +1,92 @@
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { basename, relative, resolve } from "node:path";
+import { guessWorkspaceRoot } from "../runtime/workspace.js";
+const BROAD_SCOPES = new Set(["", ".", "./", "/", "**", "*", "repo", "workspace", "all"]);
+function sha256Hex(value) {
+    return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function isBroadScope(scope) {
+    const normalized = scope.trim();
+    if (BROAD_SCOPES.has(normalized)) {
+        return true;
+    }
+    if (normalized.startsWith("/") || normalized.startsWith("~") || normalized.includes("\\")) {
+        return true;
+    }
+    return normalized.split("/").some((part) => part === ".." || part === "*" || part === "**");
+}
+function resolveRepoId(root) {
+    const pkgPath = resolve(root, "package.json");
+    if (existsSync(pkgPath)) {
+        try {
+            const parsed = JSON.parse(readFileSync(pkgPath, "utf8"));
+            if (typeof parsed.name === "string" && parsed.name.trim()) {
+                return parsed.name.trim().replace(/^@/, "").replace(/\//g, "-");
+            }
+        }
+        catch {
+            // fall through
+        }
+    }
+    return basename(root);
+}
+function resolveAllowedPaths(config, scope) {
+    const fromConfig = config.defaultAllow.filter((path) => !isBroadScope(path));
+    if (fromConfig.length) {
+        return fromConfig;
+    }
+    if (!isBroadScope(scope)) {
+        return [scope];
+    }
+    return ["packages/patze-code-cli"];
+}
+export function buildPreviewPayload(input) {
+    const root = guessWorkspaceRoot(input.cwd);
+    const scopeRaw = relative(root, input.cwd).replace(/\\/g, "/") || ".";
+    const scope = isBroadScope(scopeRaw) ? "packages/patze-code-cli" : scopeRaw;
+    const repoId = resolveRepoId(root);
+    const allowedPaths = resolveAllowedPaths(input.config, scope);
+    const deniedPaths = input.config.defaultDeny.map((pattern) => pattern.replace(/^\*\*\//, "").replace(/\/\*\*$/, ""));
+    const userDigest = sha256Hex(`patze-code-cli:user:${input.config.userId ?? "anonymous"}`);
+    return {
+        owner_user_id: input.config.userId ?? "",
+        task_input: {
+            objective: input.objective,
+            workflow_mode: "cookbook_quickstart_local",
+            repo_id: repoId,
+            workspace_scope: scope,
+            allowed_paths: allowedPaths,
+            denied_paths: deniedPaths.length ? deniedPaths : [".env", "node_modules", ".git"],
+            consent: {
+                status: "granted",
+                consent_digest: sha256Hex("patze-code-cli:preview-consent:v1"),
+                granted_by_digest: userDigest,
+            },
+            approval_requirement: {
+                required: true,
+                reason: "human_review_required",
+                review_artifact_digest: "",
+            },
+            expected_artifacts: ["preview"],
+            rollback_notes: ["Patze CLI preview only — no apply or execute."],
+            canary_requested: false,
+            metadata: { source: "patze_code_cli" },
+            repo_metadata: { repo: repoId },
+        },
+        policy: {
+            repo_id: repoId,
+            repo_allowlist: [repoId],
+            no_auto_apply: true,
+            auto_apply_requested: false,
+            cloud_requested: false,
+            pr_requested: false,
+            public_route_requested: false,
+            ui_requested: false,
+            cursor_canary_requested: false,
+            frontend_api_key_exposure_marker: false,
+            require_review_artifact_for_canary: true,
+        },
+    };
+}
+//# sourceMappingURL=preview-payload.js.map

package/dist/backend/preview-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-payload.js","sourceRoot":"","sources":["../../src/backend/preview-payload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AA0C5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAA;AAEzF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAC7C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAuB,CAAA;YAC9E,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAsB,EAAE,KAAa;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,CAAC,yBAAyB,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAA;IACrE,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAA;IAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3D,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CACtD,CAAA;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,uBAAuB,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAA;IAEzF,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;QACxC,UAAU,EAAE;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,2BAA2B;YAC1C,OAAO,EAAE,MAAM;YACf,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC;YACjF,OAAO,EAAE;gBACP,MAAM,EAAE,SAAS;gBACjB,cAAc,EAAE,SAAS,CAAC,mCAAmC,CAAC;gBAC9D,iBAAiB,EAAE,UAAU;aAC9B;YACD,oBAAoB,EAAE;gBACpB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,uBAAuB;gBAC/B,sBAAsB,EAAE,EAAE;aAC3B;YACD,kBAAkB,EAAE,CAAC,SAAS,CAAC;YAC/B,cAAc,EAAE,CAAC,+CAA+C,CAAC;YACjE,gBAAgB,EAAE,KAAK;YACvB,QAAQ,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;YACtC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SAChC;QACD,MAAM,EAAE;YACN,OAAO,EAAE,MAAM;YACf,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,aAAa,EAAE,IAAI;YACnB,oBAAoB,EAAE,KAAK;YAC3B,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,KAAK;YACnB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE,KAAK;YACnB,uBAAuB,EAAE,KAAK;YAC9B,gCAAgC,EAAE,KAAK;YACvC,kCAAkC,EAAE,IAAI;SACzC;KACF,CAAA;AACH,CAAC"}

package/dist/cli/argv.d.ts

@@ -0,0 +1,10 @@
+export type ParsedArgv = {
+    command: string[];
+    positional: string[];
+    flags: Map<string, string | boolean>;
+    raw: string[];
+};
+export declare function parseArgv(argv: string[]): ParsedArgv;
+export declare function flagBoolean(flags: Map<string, string | boolean>, name: string): boolean;
+export declare function flagString(flags: Map<string, string | boolean>, name: string): string | null;
+//# sourceMappingURL=argv.d.ts.map

package/dist/cli/argv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.d.ts","sourceRoot":"","sources":["../../src/cli/argv.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;IACpC,GAAG,EAAE,MAAM,EAAE,CAAA;CACd,CAAA;AAID,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAuDpD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGvF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5F"}

package/dist/cli/argv.js

@@ -0,0 +1,67 @@
+const MULTI_LEVEL_ROOTS = new Set(["code", "runs"]);
+export function parseArgv(argv) {
+    const flags = new Map();
+    const positional = [];
+    const command = [];
+    let index = 0;
+    while (index < argv.length) {
+        const token = argv[index];
+        if (!token) {
+            index += 1;
+            continue;
+        }
+        if (token === "--") {
+            positional.push(...argv.slice(index + 1));
+            break;
+        }
+        if (token.startsWith("--")) {
+            const body = token.slice(2);
+            const eq = body.indexOf("=");
+            if (eq >= 0) {
+                flags.set(body.slice(0, eq), body.slice(eq + 1));
+            }
+            else {
+                const next = argv[index + 1];
+                if (next && !next.startsWith("-")) {
+                    flags.set(body, next);
+                    index += 1;
+                }
+                else {
+                    flags.set(body, true);
+                }
+            }
+            index += 1;
+            continue;
+        }
+        if (token.startsWith("-") && token.length > 1) {
+            for (const char of token.slice(1)) {
+                flags.set(char, true);
+            }
+            index += 1;
+            continue;
+        }
+        if (command.length === 0) {
+            command.push(token);
+        }
+        else if (command.length === 1 && MULTI_LEVEL_ROOTS.has(command[0])) {
+            command.push(token);
+        }
+        else {
+            positional.push(token);
+        }
+        index += 1;
+    }
+    return { command, positional, flags, raw: argv };
+}
+export function flagBoolean(flags, name) {
+    const value = flags.get(name);
+    return value === true || value === "true" || value === "";
+}
+export function flagString(flags, name) {
+    const value = flags.get(name);
+    if (typeof value === "string" && value.length > 0) {
+        return value;
+    }
+    return null;
+}
+//# sourceMappingURL=argv.js.map

package/dist/cli/argv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.js","sourceRoot":"","sources":["../../src/cli/argv.ts"],"names":[],"mappings":"AAOA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAEnD,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAA;IACjD,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAA;YACV,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YACzC,MAAK;QACP,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACZ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBAC5B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;oBACrB,KAAK,IAAI,CAAC,CAAA;gBACZ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;gBACvB,CAAC;YACH,CAAC;YACD,KAAK,IAAI,CAAC,CAAA;YACV,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACvB,CAAC;YACD,KAAK,IAAI,CAAC,CAAA;YACV,SAAQ;QACV,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxB,CAAC;QACD,KAAK,IAAI,CAAC,CAAA;IACZ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAoC,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,EAAE,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAoC,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/cli/commands/apply-format.d.ts

@@ -0,0 +1,12 @@
+import type { PatchApplyPlan } from "../../runtime/patch-apply.js";
+export declare function buildApplyConfirmationPhrase(artifactDigest: string): string;
+export declare function matchesApplyConfirmation(input: string, artifactDigest: string): boolean;
+export declare function formatApplyPreviewLines(input: {
+    artifactDigest: string;
+    previewDigest: string;
+    objective: string;
+    plans: PatchApplyPlan[];
+}): string[];
+export declare function formatApplyCancelled(): string[];
+export declare function formatApplyWrongConfirmation(expected: string): string[];
+//# sourceMappingURL=apply-format.d.ts.map

package/dist/cli/commands/apply-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-format.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/apply-format.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAElE,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAYvF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,cAAc,EAAE,CAAA;CACxB,GAAG,MAAM,EAAE,CAoBX;AAED,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAE/C;AAED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAOvE"}

package/dist/cli/commands/apply-format.js

@@ -0,0 +1,50 @@
+import { maskDigest } from "../../runtime/digest-mask.js";
+export function buildApplyConfirmationPhrase(artifactDigest) {
+    return `APPLY ${maskDigest(artifactDigest)}`;
+}
+export function matchesApplyConfirmation(input, artifactDigest) {
+    const trimmed = input.trim();
+    if (!trimmed) {
+        return false;
+    }
+    if (trimmed === buildApplyConfirmationPhrase(artifactDigest)) {
+        return true;
+    }
+    if (trimmed === `APPLY ${artifactDigest}`) {
+        return true;
+    }
+    return false;
+}
+export function formatApplyPreviewLines(input) {
+    return [
+        "Patze gated apply (interactive confirmation required)",
+        "",
+        `artifact_digest: ${input.artifactDigest}`,
+        `preview_digest: ${input.previewDigest}`,
+        `objective: ${input.objective}`,
+        "",
+        "Files to change",
+        ...input.plans.map((plan) => `  - ${plan.relativePath} [${plan.action}]`),
+        "",
+        "Safety",
+        "  Apply uses the approved server patch proposal only.",
+        "  No shell commands will run.",
+        "  No files modified until confirmation succeeds.",
+        "",
+        "Confirmation",
+        `  Type ${buildApplyConfirmationPhrase(input.artifactDigest)} to continue`,
+        "  Any other input cancels apply without changes.",
+    ];
+}
+export function formatApplyCancelled() {
+    return ["Apply cancelled.", "No files modified."];
+}
+export function formatApplyWrongConfirmation(expected) {
+    return [
+        "Apply confirmation failed (fail-closed).",
+        "",
+        `Expected: ${expected}`,
+        "No files modified.",
+    ];
+}
+//# sourceMappingURL=apply-format.js.map

package/dist/cli/commands/apply-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-format.js","sourceRoot":"","sources":["../../../src/cli/commands/apply-format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAGzD,MAAM,UAAU,4BAA4B,CAAC,cAAsB;IACjE,OAAO,SAAS,UAAU,CAAC,cAAc,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,cAAsB;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,KAAK,4BAA4B,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,cAAc,EAAE,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,OAAO;QACL,uDAAuD;QACvD,EAAE;QACF,oBAAoB,KAAK,CAAC,cAAc,EAAE;QAC1C,mBAAmB,KAAK,CAAC,aAAa,EAAE;QACxC,cAAc,KAAK,CAAC,SAAS,EAAE;QAC/B,EAAE;QACF,iBAAiB;QACjB,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QACzE,EAAE;QACF,QAAQ;QACR,uDAAuD;QACvD,+BAA+B;QAC/B,kDAAkD;QAClD,EAAE;QACF,cAAc;QACd,UAAU,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,cAAc;QAC1E,kDAAkD;KACnD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,OAAO;QACL,0CAA0C;QAC1C,EAAE;QACF,aAAa,QAAQ,EAAE;QACvB,oBAAoB;KACrB,CAAA;AACH,CAAC"}

package/dist/cli/commands/apply.d.ts

@@ -0,0 +1,14 @@
+import type { InteractiveSession } from "../interactive/session.js";
+export type ApplyCommandResult = {
+    exitCode: number;
+    lines: string[];
+    needsConfirmation?: boolean;
+};
+export type ApplyCommandOptions = {
+    confirmation?: string;
+    now?: () => string;
+};
+export declare function runApplyCommand(session: InteractiveSession, options?: ApplyCommandOptions): ApplyCommandResult;
+export declare function runApplyConfirmationLine(session: InteractiveSession, confirmation: string, options?: ApplyCommandOptions): ApplyCommandResult;
+export declare function formatApplyDisabledReport(): string[];
+//# sourceMappingURL=apply.d.ts.map

package/dist/cli/commands/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/apply.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAWnE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAoHpB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAEpB;AA4JD,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAWpD"}

package/dist/cli/commands/apply.js

@@ -0,0 +1,256 @@
+import { loadConfig } from "../../config/config.js";
+import { maskDigest } from "../../runtime/digest-mask.js";
+import { applyApprovedPatch, buildPatchApplyPlans } from "../../runtime/patch-apply.js";
+import { permissionAllowsApply, } from "../../runtime/permissions.js";
+import { resolvePatchProposal } from "../../runtime/patch-proposal.js";
+import { buildApplyConfirmationPhrase, formatApplyCancelled, formatApplyPreviewLines, formatApplyWrongConfirmation, matchesApplyConfirmation, } from "./apply-format.js";
+import { formatVerifyDriftBlockedLines } from "./verify-drift-guard.js";
+export function runApplyCommand(session, options = {}) {
+    const permissionMode = session.getPermissionMode();
+    if (!permissionAllowsApply(permissionMode)) {
+        return fail([
+            "Apply failed (fail-closed).",
+            "",
+            `Permission mode "${permissionMode}" does not allow apply.`,
+            "Switch to edit-with-approval: /permissions edit-with-approval",
+            "No files modified.",
+        ]);
+    }
+    if (session.isVerifyDriftBlocked()) {
+        return fail(formatVerifyDriftBlockedLines());
+    }
+    const gate = session.getApprovalGate();
+    const diffReview = session.getDiffReviewState();
+    const pendingConfirmation = session.getPendingApplyConfirmation();
+    if (pendingConfirmation && !options.confirmation?.trim()) {
+        return fail([
+            "Apply confirmation already pending.",
+            "",
+            `Type: ${pendingConfirmation.expectedPhrase}`,
+            "Or type: cancel",
+            "No files modified.",
+        ]);
+    }
+    const readiness = validateApplyReadiness(session, gate, diffReview);
+    if (!readiness.ok) {
+        return fail(readiness.lines);
+    }
+    const proposal = resolveApprovedProposal(session, gate, diffReview);
+    if (!proposal.ok) {
+        return fail(proposal.lines);
+    }
+    const config = loadConfig(session.cwd);
+    const plans = buildPatchApplyPlans(proposal.value, session.cwd, config.defaultDeny);
+    if (!plans.ok) {
+        return fail(["Apply failed (fail-closed).", "", plans.reason, "", "No files modified."]);
+    }
+    const expectedPhrase = buildApplyConfirmationPhrase(gate.artifactDigest);
+    const confirmation = options.confirmation?.trim();
+    if (!confirmation) {
+        session.setPendingApplyConfirmation({
+            artifactDigest: gate.artifactDigest,
+            previewDigest: gate.previewDigest,
+            expectedPhrase,
+        });
+        return {
+            exitCode: 0,
+            needsConfirmation: true,
+            lines: formatApplyPreviewLines({
+                artifactDigest: gate.artifactDigest,
+                previewDigest: gate.previewDigest,
+                objective: gate.objective,
+                plans: plans.plans,
+            }),
+        };
+    }
+    session.clearPendingApplyConfirmation();
+    if (confirmation.toLowerCase() === "cancel" || confirmation.toLowerCase() === "esc") {
+        return { exitCode: 0, lines: formatApplyCancelled() };
+    }
+    if (!matchesApplyConfirmation(confirmation, gate.artifactDigest)) {
+        return {
+            exitCode: 2,
+            lines: formatApplyWrongConfirmation(expectedPhrase),
+        };
+    }
+    const applied = applyApprovedPatch(proposal.value, session.cwd);
+    if (!applied.ok) {
+        return { exitCode: applied.exitCode, lines: applied.lines };
+    }
+    const appliedAt = options.now?.() ?? new Date().toISOString();
+    session.markGateConsumed(gate.artifactDigest, gate.previewDigest);
+    session.setLastApplyResult({
+        artifactDigest: gate.artifactDigest,
+        previewDigest: gate.previewDigest,
+        filesWritten: applied.filesWritten,
+        appliedAt,
+        gateConsumed: true,
+        files: applied.fileOutcomes.map((file) => ({
+            relativePath: file.relativePath,
+            action: file.action,
+            beforeHash: file.beforeHash,
+            afterHash: file.afterHash,
+        })),
+    });
+    session.clearReviewAndApprovalState();
+    return {
+        exitCode: 0,
+        lines: [
+            ...applied.lines,
+            "",
+            `artifact: ${maskDigest(gate.artifactDigest)}`,
+            `applied_at: ${appliedAt}`,
+            "",
+            "Next",
+            "  /verify — check applied files",
+            "  /status",
+            "  /exit",
+        ],
+    };
+}
+export function runApplyConfirmationLine(session, confirmation, options = {}) {
+    return runApplyCommand(session, { ...options, confirmation });
+}
+function validateApplyReadiness(session, gate, diffReview) {
+    if (!gate) {
+        const lastApply = session.getLastApplyResult();
+        if (lastApply?.gateConsumed) {
+            return {
+                ok: false,
+                lines: [
+                    "Apply failed (fail-closed).",
+                    "",
+                    "This approval gate was already applied in this session.",
+                    "Run /diff and /approve for a new patch before /apply.",
+                    "Use /verify to check the last apply result.",
+                    "No files modified.",
+                ],
+            };
+        }
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "No approval gate is active. Run /diff then /approve first.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (session.isApprovalGateConsumed(gate)) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "This approval gate was already consumed by a prior /apply.",
+                "Run /diff and /approve for a new patch.",
+                "Use /verify to check the last apply result.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (!diffReview) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "No /diff review recorded for this session.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (!diffReview.hasPatchBody) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "Latest /diff did not include a patch proposal body.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (gate.artifactDigest !== diffReview.artifactDigest ||
+        gate.previewDigest !== diffReview.previewDigest) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "Approval gate does not match the latest /diff review.",
+                "Re-run /diff and /approve before /apply.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (!gate.artifactDigest || !gate.previewDigest) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "Approval gate is missing server digests.",
+                "No files modified.",
+            ],
+        };
+    }
+    return { ok: true };
+}
+function resolveApprovedProposal(session, gate, diffReview) {
+    const preview = session.getLastPreviewResult();
+    const resolution = resolvePatchProposal({
+        previewSource: preview?.source ?? null,
+        previewStatus: preview?.status,
+        serverResponse: preview?.server
+            ? {
+                artifact_digest: preview.server.artifact_digest,
+                preview_digest: preview.server.preview_digest,
+                patch_proposal: preview.server.patch_proposal ?? null,
+            }
+            : undefined,
+        objective: gate.objective,
+    });
+    if (resolution.state !== "patch_available") {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "Approved patch proposal is no longer available in session preview.",
+                "No files modified.",
+            ],
+        };
+    }
+    if (resolution.proposal.artifactDigest !== gate.artifactDigest ||
+        resolution.proposal.previewDigest !== gate.previewDigest ||
+        resolution.proposal.artifactDigest !== diffReview.artifactDigest) {
+        return {
+            ok: false,
+            lines: [
+                "Apply failed (fail-closed).",
+                "",
+                "Session preview digests do not match the approval gate.",
+                "No files modified.",
+            ],
+        };
+    }
+    return { ok: true, value: resolution.proposal };
+}
+function fail(lines) {
+    return { exitCode: 2, lines };
+}
+export function formatApplyDisabledReport() {
+    return [
+        "Patze code apply (non-interactive)",
+        "",
+        "patze code apply remains disabled.",
+        "Use interactive /apply inside `patze` after:",
+        "  1. /permissions suggest → /diff → /approve",
+        "  2. /permissions edit-with-approval → /apply",
+        "",
+        "No --yes path. No files modified.",
+    ];
+}
+//# sourceMappingURL=apply.js.map

package/dist/cli/commands/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/cli/commands/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACvF,OAAO,EACL,qBAAqB,GACtB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,oBAAoB,EAAgC,MAAM,iCAAiC,CAAA;AAGpG,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAA;AAavE,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,UAA+B,EAAE;IAEjC,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAA;IAClD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;YACV,6BAA6B;YAC7B,EAAE;YACF,oBAAoB,cAAc,yBAAyB;YAC3D,+DAA+D;YAC/D,oBAAoB;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,6BAA6B,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAA;IAE/C,MAAM,mBAAmB,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAA;IACjE,IAAI,mBAAmB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;YACV,qCAAqC;YACrC,EAAE;YACF,SAAS,mBAAmB,CAAC,cAAc,EAAE;YAC7C,iBAAiB;YACjB,oBAAoB;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACnE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAK,EAAE,UAAW,CAAC,CAAA;IACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IACnF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,CAAC,6BAA6B,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,MAAM,cAAc,GAAG,4BAA4B,CAAC,IAAK,CAAC,cAAc,CAAC,CAAA;IACzE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;IAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,2BAA2B,CAAC;YAClC,cAAc,EAAE,IAAK,CAAC,cAAc;YACpC,aAAa,EAAE,IAAK,CAAC,aAAa;YAClC,cAAc;SACf,CAAC,CAAA;QACF,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,iBAAiB,EAAE,IAAI;YACvB,KAAK,EAAE,uBAAuB,CAAC;gBAC7B,cAAc,EAAE,IAAK,CAAC,cAAc;gBACpC,aAAa,EAAE,IAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,IAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;SACH,CAAA;IACH,CAAC;IAED,OAAO,CAAC,6BAA6B,EAAE,CAAA;IAEvC,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,4BAA4B,CAAC,cAAc,CAAC;SACpD,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAC7D,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,OAAO,CAAC,gBAAgB,CAAC,IAAK,CAAC,cAAc,EAAE,IAAK,CAAC,aAAa,CAAC,CAAA;IACnE,OAAO,CAAC,kBAAkB,CAAC;QACzB,cAAc,EAAE,IAAK,CAAC,cAAc;QACpC,aAAa,EAAE,IAAK,CAAC,aAAa;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS;QACT,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;KACJ,CAAC,CAAA;IACF,OAAO,CAAC,2BAA2B,EAAE,CAAA;IAErC,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE;YACL,GAAG,OAAO,CAAC,KAAK;YAChB,EAAE;YACF,aAAa,UAAU,CAAC,IAAK,CAAC,cAAc,CAAC,EAAE;YAC/C,eAAe,SAAS,EAAE;YAC1B,EAAE;YACF,MAAM;YACN,iCAAiC;YACjC,WAAW;YACX,SAAS;SACV;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA2B,EAC3B,YAAoB,EACpB,UAA+B,EAAE;IAEjC,OAAO,eAAe,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA2B,EAC3B,IAAyB,EACzB,UAAkC;IAElC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAA;QAC9C,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,6BAA6B;oBAC7B,EAAE;oBACF,yDAAyD;oBACzD,uDAAuD;oBACvD,6CAA6C;oBAC7C,oBAAoB;iBACrB;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,4DAA4D;gBAC5D,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,4DAA4D;gBAC5D,yCAAyC;gBACzC,6CAA6C;gBAC7C,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,4CAA4C;gBAC5C,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,qDAAqD;gBACrD,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IACE,IAAI,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QACjD,IAAI,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa,EAC/C,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,uDAAuD;gBACvD,0CAA0C;gBAC1C,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,0CAA0C;gBAC1C,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAA2B,EAC3B,IAAkB,EAClB,UAA2B;IAE3B,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAA;IAC9C,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACtC,aAAa,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI;QACtC,aAAa,EAAE,OAAO,EAAE,MAAM;QAC9B,cAAc,EAAE,OAAO,EAAE,MAAM;YAC7B,CAAC,CAAC;gBACE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe;gBAC/C,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;gBAC7C,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI;aACtD;YACH,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAA;IAEF,IAAI,UAAU,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,oEAAoE;gBACpE,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,IACE,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAC1D,UAAU,CAAC,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;QACxD,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,EAChE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,EAAE;gBACF,yDAAyD;gBACzD,oBAAoB;aACrB;SACF,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,IAAI,CAAC,KAAe;IAC3B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,oCAAoC;QACpC,EAAE;QACF,oCAAoC;QACpC,8CAA8C;QAC9C,8CAA8C;QAC9C,+CAA+C;QAC/C,EAAE;QACF,mCAAmC;KACpC,CAAA;AACH,CAAC"}

package/dist/cli/commands/approve-format.d.ts

@@ -0,0 +1,4 @@
+import type { ApprovalGate } from "../interactive/session-state.js";
+export declare function formatApprovalGateReport(gate: ApprovalGate): string[];
+export declare function formatApprovalGateContextSummary(gate: ApprovalGate): string;
+//# sourceMappingURL=approve-format.d.ts.map

package/dist/cli/commands/approve-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-format.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/approve-format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAGnE,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,EAAE,CA+BrE;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAO3E"}

package/dist/cli/commands/approve-format.js

@@ -0,0 +1,40 @@
+import { maskDigest } from "../../runtime/digest-mask.js";
+export function formatApprovalGateReport(gate) {
+    const fileLines = gate.filesChanged.length > 0
+        ? gate.filesChanged.map((file) => `  - ${file}`)
+        : ["  - (none listed)"];
+    return [
+        "Patze approval gate",
+        "",
+        "Approved action",
+        "  apply_patch",
+        "",
+        `artifact_digest: ${gate.artifactDigest}`,
+        `preview_digest: ${gate.previewDigest}`,
+        `objective: ${gate.objective}`,
+        "",
+        "Files changed",
+        ...fileLines,
+        "",
+        "Safety",
+        "  Approval recorded in session memory.",
+        "  No files modified yet.",
+        "  Switch to edit-with-approval before /apply.",
+        "",
+        "Next",
+        "  /permissions edit-with-approval — enable gated apply",
+        "  /apply — confirm and write approved patch",
+        "  /reject — clear approval and pending diff",
+        "  /diff — review patch again",
+        "  /exit — leave interactive mode",
+    ];
+}
+export function formatApprovalGateContextSummary(gate) {
+    return [
+        `action: ${gate.action}`,
+        `artifact: ${maskDigest(gate.artifactDigest)}`,
+        `preview: ${maskDigest(gate.previewDigest)}`,
+        `files: ${gate.filesChanged.length}`,
+    ].join(" · ");
+}
+//# sourceMappingURL=approve-format.js.map

package/dist/cli/commands/approve-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve-format.js","sourceRoot":"","sources":["../../../src/cli/commands/approve-format.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAEzD,MAAM,UAAU,wBAAwB,CAAC,IAAkB;IACzD,MAAM,SAAS,GACb,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;IAE3B,OAAO;QACL,qBAAqB;QACrB,EAAE;QACF,iBAAiB;QACjB,eAAe;QACf,EAAE;QACF,oBAAoB,IAAI,CAAC,cAAc,EAAE;QACzC,mBAAmB,IAAI,CAAC,aAAa,EAAE;QACvC,cAAc,IAAI,CAAC,SAAS,EAAE;QAC9B,EAAE;QACF,eAAe;QACf,GAAG,SAAS;QACZ,EAAE;QACF,QAAQ;QACR,wCAAwC;QACxC,0BAA0B;QAC1B,+CAA+C;QAC/C,EAAE;QACF,MAAM;QACN,wDAAwD;QACxD,6CAA6C;QAC7C,6CAA6C;QAC7C,8BAA8B;QAC9B,kCAAkC;KACnC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,IAAkB;IACjE,OAAO;QACL,WAAW,IAAI,CAAC,MAAM,EAAE;QACxB,aAAa,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;QAC9C,YAAY,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;QAC5C,UAAU,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;KACrC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACf,CAAC"}

package/dist/cli/commands/approve.d.ts

@@ -0,0 +1,19 @@
+import type { InteractiveSession } from "../interactive/session.js";
+import type { DiffReviewState } from "../interactive/session-state.js";
+export type ApproveCommandResult = {
+    exitCode: number;
+    output: string;
+};
+export type ApproveCommandOptions = {
+    now?: () => string;
+};
+export declare function runApproveCommand(session: InteractiveSession, options?: ApproveCommandOptions): ApproveCommandResult;
+export declare function buildDiffReviewState(input: {
+    reviewedAt: string;
+    artifactDigest: string;
+    previewDigest: string;
+    objective: string;
+    filesChanged: string[];
+    hasPatchBody: boolean;
+}): DiffReviewState;
+//# sourceMappingURL=approve.d.ts.map

package/dist/cli/commands/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/approve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,KAAK,EAAgB,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAIpF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAqFtB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,YAAY,EAAE,OAAO,CAAA;CACtB,GAAG,eAAe,CASlB"}