@switchboard-mcp/core 0.1.0

package/README.md

@@ -0,0 +1,9 @@
+# @switchboard-mcp/core
+
+Core TypeScript primitives for Switchboard config loading, provider safety
+templates, local mandates, approval requests, client install helpers, audit
+logs, and secret references.
+
+Most users should install and run `@switchboard-mcp/cli`.
+
+Project docs: https://github.com/woverfield/switchboard

package/dist/approvals/approval-requests.d.ts

@@ -0,0 +1,151 @@
+import * as z from "zod";
+import type { PathResolutionOptions } from "../config/paths.js";
+export type ApprovalRequestStatus = "pending" | "approved" | "denied" | "stale";
+export type ApprovalRequestRuntimeStatus = ApprovalRequestStatus | "expired";
+export declare const approvalRequestSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    id: z.ZodString;
+    mandateId: z.ZodString;
+    mandateUid: z.ZodOptional<z.ZodString>;
+    parentMandateId: z.ZodOptional<z.ZodString>;
+    parentMandateUid: z.ZodOptional<z.ZodString>;
+    delegatedBy: z.ZodOptional<z.ZodString>;
+    delegationPath: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    delegationUids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    repoPath: z.ZodString;
+    branch: z.ZodString;
+    toolName: z.ZodString;
+    approvalGateId: z.ZodString;
+    approvalGatePattern: z.ZodString;
+    approvalGateReason: z.ZodOptional<z.ZodString>;
+    approvalGateRisk: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        critical: "critical";
+    }>>;
+    approvalGateLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    status: z.ZodEnum<{
+        pending: "pending";
+        approved: "approved";
+        denied: "denied";
+        stale: "stale";
+    }>;
+    createdAt: z.ZodString;
+    expiresAt: z.ZodString;
+    decidedAt: z.ZodOptional<z.ZodString>;
+    decisionReason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const approvalRequestStoreSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    requests: z.ZodArray<z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        id: z.ZodString;
+        mandateId: z.ZodString;
+        mandateUid: z.ZodOptional<z.ZodString>;
+        parentMandateId: z.ZodOptional<z.ZodString>;
+        parentMandateUid: z.ZodOptional<z.ZodString>;
+        delegatedBy: z.ZodOptional<z.ZodString>;
+        delegationPath: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        delegationUids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        repoPath: z.ZodString;
+        branch: z.ZodString;
+        toolName: z.ZodString;
+        approvalGateId: z.ZodString;
+        approvalGatePattern: z.ZodString;
+        approvalGateReason: z.ZodOptional<z.ZodString>;
+        approvalGateRisk: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>>;
+        approvalGateLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        status: z.ZodEnum<{
+            pending: "pending";
+            approved: "approved";
+            denied: "denied";
+            stale: "stale";
+        }>;
+        createdAt: z.ZodString;
+        expiresAt: z.ZodString;
+        decidedAt: z.ZodOptional<z.ZodString>;
+        decisionReason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ApprovalRequest = z.infer<typeof approvalRequestSchema>;
+export type ApprovalRequestStore = z.infer<typeof approvalRequestStoreSchema>;
+export type ApprovalRequestWithStatus = ApprovalRequest & {
+    runtimeStatus: ApprovalRequestRuntimeStatus;
+};
+export interface CreateApprovalRequestOptions {
+    mandateId: string;
+    mandateUid?: string;
+    parentMandateId?: string;
+    parentMandateUid?: string;
+    delegatedBy?: string;
+    delegationPath?: string[];
+    delegationUids?: string[];
+    repoPath: string;
+    branch: string;
+    toolName: string;
+    approvalGateId: string;
+    approvalGatePattern: string;
+    approvalGateReason?: string;
+    approvalGateRisk?: "low" | "medium" | "high" | "critical";
+    approvalGateLabels?: string[];
+    expiresAt: string;
+    path?: string;
+    now?: () => Date;
+}
+export interface ListApprovalRequestsOptions {
+    path?: string;
+    repoPath?: string;
+    mandateId?: string;
+    mandateUid?: string;
+    rootMandateUid?: string;
+    status?: ApprovalRequestRuntimeStatus;
+    now?: () => Date;
+}
+export interface DecideApprovalRequestOptions {
+    id: string;
+    status: "approved" | "denied";
+    reason?: string;
+    path?: string;
+    now?: () => Date;
+}
+export interface MarkApprovalRequestStaleOptions {
+    id: string;
+    reason?: string;
+    path?: string;
+    now?: () => Date;
+}
+export interface MarkPendingApprovalRequestsStaleOptions {
+    repoPath?: string;
+    mandateId?: string;
+    mandateUid?: string;
+    reason?: string;
+    path?: string;
+    now?: () => Date;
+}
+export interface FindApprovedApprovalRequestOptions {
+    mandateId: string;
+    mandateUid?: string;
+    repoPath: string;
+    toolName: string;
+    approvalGateId: string;
+    path?: string;
+    now?: () => Date;
+}
+export declare function resolveApprovalRequestStorePath(options?: PathResolutionOptions): string;
+export declare function approvalRequestRuntimeStatus(request: Pick<ApprovalRequest, "status" | "expiresAt">, now?: Date): ApprovalRequestRuntimeStatus;
+export declare function createApprovalRequest(options: CreateApprovalRequestOptions): Promise<ApprovalRequestWithStatus>;
+export declare function listApprovalRequests(options?: ListApprovalRequestsOptions): Promise<ApprovalRequestWithStatus[]>;
+export declare function findApprovedApprovalRequest(options: FindApprovedApprovalRequestOptions): Promise<ApprovalRequestWithStatus | undefined>;
+export declare function decideApprovalRequest(options: DecideApprovalRequestOptions): Promise<ApprovalRequestWithStatus>;
+export declare function markApprovalRequestStale(options: MarkApprovalRequestStaleOptions): Promise<ApprovalRequestWithStatus>;
+export declare function markPendingApprovalRequestsStale(options?: MarkPendingApprovalRequestsStaleOptions): Promise<ApprovalRequestWithStatus[]>;
+export declare function readApprovalRequestStore(options?: {
+    path?: string;
+}): Promise<ApprovalRequestStore>;
+//# sourceMappingURL=approval-requests.d.ts.map

package/dist/approvals/approval-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-requests.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-requests.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAChF,MAAM,MAAM,4BAA4B,GACpC,qBAAqB,GACrB,SAAS,CAAC;AAKd,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuBhC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGrC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,eAAe,GAAG;IACxD,aAAa,EAAE,4BAA4B,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1D,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,4BAA4B,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,kCAAkC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAQR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,GAAG,WAAW,CAAC,EACtD,GAAG,GAAE,IAAiB,GACrB,4BAA4B,CAe9B;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,yBAAyB,CAAC,CA4DpC;AAED,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAyBtC;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAmBhD;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAuCpC;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAkCpC;AAED,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,uCAA4C,GACpD,OAAO,CAAC,yBAAyB,EAAE,CAAC,CA8CtC;AAaD,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;CACV,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsBrC"}

package/dist/approvals/approval-requests.js

@@ -0,0 +1,393 @@
+import { chmod, mkdir, open, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import * as z from "zod";
+const approvalStoreLockTimeoutMs = 5_000;
+const approvalStoreStaleLockMs = 30_000;
+export const approvalRequestSchema = z.object({
+    version: z.literal(1),
+    id: z.string().min(1),
+    mandateId: z.string().min(1),
+    mandateUid: z.string().min(1).optional(),
+    parentMandateId: z.string().min(1).optional(),
+    parentMandateUid: z.string().min(1).optional(),
+    delegatedBy: z.string().min(1).optional(),
+    delegationPath: z.array(z.string().min(1)).optional(),
+    delegationUids: z.array(z.string().min(1)).optional(),
+    repoPath: z.string().min(1),
+    branch: z.string().min(1),
+    toolName: z.string().min(1),
+    approvalGateId: z.string().min(1),
+    approvalGatePattern: z.string().min(1),
+    approvalGateReason: z.string().min(1).optional(),
+    approvalGateRisk: z.enum(["low", "medium", "high", "critical"]).optional(),
+    approvalGateLabels: z.array(z.string().min(1)).optional(),
+    status: z.enum(["pending", "approved", "denied", "stale"]),
+    createdAt: z.string().min(1),
+    expiresAt: z.string().min(1),
+    decidedAt: z.string().min(1).optional(),
+    decisionReason: z.string().min(1).optional()
+});
+export const approvalRequestStoreSchema = z.object({
+    version: z.literal(1),
+    requests: z.array(approvalRequestSchema)
+});
+export function resolveApprovalRequestStorePath(options = {}) {
+    const env = options.env ?? process.env;
+    const home = options.homeDir ?? homedir();
+    const stateRoot = env.XDG_STATE_HOME
+        ? resolve(env.XDG_STATE_HOME)
+        : join(home, ".local", "state");
+    return join(stateRoot, "switchboard", "approvals", "approvals.json");
+}
+export function approvalRequestRuntimeStatus(request, now = new Date()) {
+    if (request.status === "stale") {
+        return "stale";
+    }
+    const expiresAtMs = Date.parse(request.expiresAt);
+    if (Number.isNaN(expiresAtMs)) {
+        return "expired";
+    }
+    if (expiresAtMs <= now.getTime()) {
+        return "expired";
+    }
+    return request.status;
+}
+export async function createApprovalRequest(options) {
+    const now = options.now ?? (() => new Date());
+    const createdAt = now();
+    const repoPath = resolve(options.repoPath);
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    const approvalGateRisk = normalizeApprovalGateRisk(options.approvalGateRisk);
+    const approvalGateLabels = normalizeApprovalGateLabels(options.approvalGateLabels ?? []);
+    return withApprovalStoreLock(path, async () => {
+        const store = await readApprovalRequestStore({ path });
+        const existing = store.requests.find((request) => approvalRequestMatchesMandate(request, {
+            mandateId: options.mandateId,
+            ...(options.mandateUid ? { mandateUid: options.mandateUid } : {})
+        }) &&
+            request.repoPath === repoPath &&
+            request.toolName === options.toolName &&
+            request.approvalGateId === options.approvalGateId &&
+            approvalRequestRuntimeStatus(request, createdAt) === "pending");
+        if (existing) {
+            return withRuntimeStatus(existing, createdAt);
+        }
+        const request = {
+            version: 1,
+            id: nextApprovalRequestId(store),
+            mandateId: options.mandateId,
+            ...(options.mandateUid ? { mandateUid: options.mandateUid } : {}),
+            ...optionalTextField("parentMandateId", options.parentMandateId),
+            ...optionalTextField("parentMandateUid", options.parentMandateUid),
+            ...optionalTextField("delegatedBy", options.delegatedBy),
+            ...optionalTextListField("delegationPath", options.delegationPath ?? []),
+            ...optionalTextListField("delegationUids", options.delegationUids ?? []),
+            repoPath,
+            branch: options.branch.trim(),
+            toolName: options.toolName.trim(),
+            approvalGateId: options.approvalGateId.trim(),
+            approvalGatePattern: options.approvalGatePattern.trim(),
+            ...(options.approvalGateReason?.trim()
+                ? { approvalGateReason: options.approvalGateReason.trim() }
+                : {}),
+            ...(approvalGateRisk
+                ? { approvalGateRisk }
+                : {}),
+            ...(approvalGateLabels.length > 0
+                ? { approvalGateLabels }
+                : {}),
+            status: "pending",
+            createdAt: createdAt.toISOString(),
+            expiresAt: options.expiresAt
+        };
+        store.requests.push(request);
+        await writeApprovalRequestStore(store, { path });
+        return withRuntimeStatus(request, createdAt);
+    });
+}
+export async function listApprovalRequests(options = {}) {
+    const now = options.now?.() ?? new Date();
+    const store = await readApprovalRequestStore(options.path ? { path: options.path } : {});
+    const repoPath = options.repoPath ? resolve(options.repoPath) : undefined;
+    return store.requests
+        .filter((request) => (repoPath ? request.repoPath === repoPath : true))
+        .filter((request) => options.mandateId ? request.mandateId === options.mandateId : true)
+        .filter((request) => options.mandateUid ? request.mandateUid === options.mandateUid : true)
+        .filter((request) => options.rootMandateUid
+        ? request.delegationUids?.[0] === options.rootMandateUid ||
+            request.mandateUid === options.rootMandateUid
+        : true)
+        .map((request) => withRuntimeStatus(request, now))
+        .filter((request) => options.status ? request.runtimeStatus === options.status : true);
+}
+export async function findApprovedApprovalRequest(options) {
+    const now = options.now?.() ?? new Date();
+    const repoPath = resolve(options.repoPath);
+    const store = await readApprovalRequestStore(options.path ? { path: options.path } : {});
+    const request = store.requests.find((item) => item.mandateId === options.mandateId &&
+        (options.mandateUid ? item.mandateUid === options.mandateUid : true) &&
+        item.repoPath === repoPath &&
+        item.toolName === options.toolName &&
+        item.approvalGateId === options.approvalGateId &&
+        item.status === "approved" &&
+        approvalRequestRuntimeStatus(item, now) === "approved");
+    return request ? withRuntimeStatus(request, now) : undefined;
+}
+export async function decideApprovalRequest(options) {
+    const now = options.now ?? (() => new Date());
+    const decidedAt = now();
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    return withApprovalStoreLock(path, async () => {
+        const store = await readApprovalRequestStore({ path });
+        const index = store.requests.findIndex((request) => request.id === options.id);
+        if (index < 0) {
+            throw new Error(`approval request "${options.id}" was not found`);
+        }
+        const current = store.requests[index];
+        if (!current) {
+            throw new Error(`approval request "${options.id}" was not found`);
+        }
+        if (approvalRequestRuntimeStatus(current, decidedAt) === "expired") {
+            throw new Error(`approval request "${options.id}" is expired`);
+        }
+        if (approvalRequestRuntimeStatus(current, decidedAt) === "stale") {
+            throw new Error(`approval request "${options.id}" is stale`);
+        }
+        if (current.status !== "pending") {
+            throw new Error(`approval request "${options.id}" is already ${current.status}`);
+        }
+        const reason = options.reason?.trim();
+        const updated = {
+            ...current,
+            status: options.status,
+            decidedAt: decidedAt.toISOString(),
+            ...(reason ? { decisionReason: reason } : {})
+        };
+        store.requests[index] = updated;
+        await writeApprovalRequestStore(store, { path });
+        return withRuntimeStatus(updated, decidedAt);
+    });
+}
+export async function markApprovalRequestStale(options) {
+    const now = options.now ?? (() => new Date());
+    const decidedAt = now();
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    return withApprovalStoreLock(path, async () => {
+        const store = await readApprovalRequestStore({ path });
+        const index = store.requests.findIndex((request) => request.id === options.id);
+        if (index < 0) {
+            throw new Error(`approval request "${options.id}" was not found`);
+        }
+        const current = store.requests[index];
+        if (!current) {
+            throw new Error(`approval request "${options.id}" was not found`);
+        }
+        if (approvalRequestRuntimeStatus(current, decidedAt) === "expired") {
+            return withRuntimeStatus(current, decidedAt);
+        }
+        if (current.status === "denied" || current.status === "stale") {
+            return withRuntimeStatus(current, decidedAt);
+        }
+        const reason = options.reason?.trim();
+        const updated = {
+            ...current,
+            status: "stale",
+            decidedAt: decidedAt.toISOString(),
+            ...(reason ? { decisionReason: reason } : {})
+        };
+        store.requests[index] = updated;
+        await writeApprovalRequestStore(store, { path });
+        return withRuntimeStatus(updated, decidedAt);
+    });
+}
+export async function markPendingApprovalRequestsStale(options = {}) {
+    const now = options.now ?? (() => new Date());
+    const decidedAt = now();
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    const repoPath = options.repoPath ? resolve(options.repoPath) : undefined;
+    return withApprovalStoreLock(path, async () => {
+        const store = await readApprovalRequestStore({ path });
+        const staleRequests = [];
+        let changed = false;
+        const reason = options.reason?.trim();
+        store.requests = store.requests.map((request) => {
+            const matchesRepo = repoPath ? request.repoPath === repoPath : true;
+            const matchesMandate = options.mandateId
+                ? request.mandateId === options.mandateId
+                : true;
+            const matchesMandateUid = options.mandateUid
+                ? request.mandateUid === options.mandateUid
+                : true;
+            if (!matchesRepo ||
+                !matchesMandate ||
+                !matchesMandateUid ||
+                approvalRequestRuntimeStatus(request, decidedAt) !== "pending") {
+                return request;
+            }
+            changed = true;
+            const updated = {
+                ...request,
+                status: "stale",
+                decidedAt: decidedAt.toISOString(),
+                ...(reason ? { decisionReason: reason } : {})
+            };
+            staleRequests.push(withRuntimeStatus(updated, decidedAt));
+            return updated;
+        });
+        if (changed) {
+            await writeApprovalRequestStore(store, { path });
+        }
+        return staleRequests;
+    });
+}
+function approvalRequestMatchesMandate(request, mandate) {
+    if (mandate.mandateUid) {
+        return request.mandateUid === mandate.mandateUid;
+    }
+    return request.mandateId === mandate.mandateId;
+}
+export async function readApprovalRequestStore(options = {}) {
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    const raw = await readFile(path, "utf8").catch((error) => {
+        if (isNodeErrorCode(error, "ENOENT")) {
+            return "";
+        }
+        throw error;
+    });
+    if (!raw.trim()) {
+        return { version: 1, requests: [] };
+    }
+    const parsed = JSON.parse(raw);
+    const result = approvalRequestStoreSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new Error(`invalid Switchboard approval request store at ${path}: ${z.prettifyError(result.error)}`);
+    }
+    return result.data;
+}
+async function writeApprovalRequestStore(store, options = {}) {
+    const path = options.path ?? resolveApprovalRequestStorePath();
+    const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(tempPath, `${JSON.stringify(store, null, 2)}\n`, {
+        mode: 0o600
+    });
+    await chmod(tempPath, 0o600);
+    await rename(tempPath, path);
+    await chmod(path, 0o600);
+}
+async function withApprovalStoreLock(path, fn) {
+    const lockPath = `${path}.lock`;
+    const startedAt = Date.now();
+    while (true) {
+        try {
+            await mkdir(dirname(lockPath), { recursive: true, mode: 0o700 });
+            const handle = await open(lockPath, "wx", 0o600);
+            try {
+                await handle.writeFile(JSON.stringify({ pid: process.pid, createdAt: new Date().toISOString() }));
+            }
+            finally {
+                await handle.close();
+            }
+            break;
+        }
+        catch (error) {
+            if (!isNodeErrorCode(error, "EEXIST")) {
+                throw error;
+            }
+            await removeStaleLock(lockPath);
+            if (Date.now() - startedAt > approvalStoreLockTimeoutMs) {
+                throw new Error(`timed out waiting for approval store lock at ${lockPath}`);
+            }
+            await sleep(25);
+        }
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        await rm(lockPath, { force: true });
+    }
+}
+async function removeStaleLock(lockPath) {
+    const lockStat = await stat(lockPath).catch((error) => {
+        if (isNodeErrorCode(error, "ENOENT")) {
+            return undefined;
+        }
+        throw error;
+    });
+    if (lockStat && Date.now() - lockStat.mtimeMs > approvalStoreStaleLockMs) {
+        await rm(lockPath, { force: true });
+    }
+}
+function nextApprovalRequestId(store) {
+    return `approval-${store.requests.length + 1}`;
+}
+function optionalTextField(key, value) {
+    const trimmed = value?.trim();
+    return trimmed ? { [key]: trimmed } : {};
+}
+function optionalTextListField(key, values) {
+    const normalized = uniqueTrimmed(values);
+    return normalized.length > 0 ? { [key]: normalized } : {};
+}
+function uniqueTrimmed(values) {
+    const seen = new Set();
+    const result = [];
+    for (const value of values) {
+        const trimmed = value.trim();
+        if (!trimmed || seen.has(trimmed)) {
+            continue;
+        }
+        seen.add(trimmed);
+        result.push(trimmed);
+    }
+    return result;
+}
+function normalizeApprovalGateRisk(value) {
+    const risk = value?.trim().toLowerCase();
+    if (!risk) {
+        return undefined;
+    }
+    if (risk !== "low" &&
+        risk !== "medium" &&
+        risk !== "high" &&
+        risk !== "critical") {
+        throw new Error("approval gate risk must be one of: low, medium, high, critical");
+    }
+    return risk;
+}
+function normalizeApprovalGateLabels(labels) {
+    const seen = new Set();
+    const result = [];
+    for (const rawLabel of labels) {
+        const label = rawLabel.trim().toLowerCase();
+        if (!label || seen.has(label)) {
+            continue;
+        }
+        if (!/^[a-z0-9][a-z0-9_.:-]*$/.test(label)) {
+            throw new Error("approval gate labels must use lowercase letters, digits, dots, colons, underscores, or hyphens");
+        }
+        seen.add(label);
+        result.push(label);
+    }
+    return result;
+}
+function withRuntimeStatus(request, now) {
+    return {
+        ...request,
+        runtimeStatus: approvalRequestRuntimeStatus(request, now)
+    };
+}
+function sleep(ms) {
+    return new Promise((resolveSleep) => {
+        setTimeout(resolveSleep, ms);
+    });
+}
+function isNodeErrorCode(error, code) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === code);
+}
+//# sourceMappingURL=approval-requests.js.map

package/dist/approvals/approval-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-requests.js","sourceRoot":"","sources":["../../src/approvals/approval-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAQzB,MAAM,0BAA0B,GAAG,KAAK,CAAC;AACzC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACzC,CAAC,CAAC;AAyEH,MAAM,UAAU,+BAA+B,CAC7C,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc;QAClC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAElC,OAAO,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAsD,EACtD,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAC/D,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7E,MAAM,kBAAkB,GAAG,2BAA2B,CACpD,OAAO,CAAC,kBAAkB,IAAI,EAAE,CACjC,CAAC;IAEF,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,OAAO,EAAE,EAAE,CACV,6BAA6B,CAAC,OAAO,EAAE;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;YACF,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC7B,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;YACrC,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YACjD,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS,CACjE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,OAAO,GAAoB;YAC/B,OAAO,EAAE,CAAC;YACV,EAAE,EAAE,qBAAqB,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC;YAChE,GAAG,iBAAiB,CAAC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,CAAC;YAClE,GAAG,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC;YACxD,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;YACxE,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;YACxE,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE;YAC7C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE;YACvD,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,EAAE;gBACpC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,gBAAgB;gBAClB,CAAC,CAAC,EAAE,gBAAgB,EAAE;gBACtB,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,EAAE,kBAAkB,EAAE;gBACxB,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,yBAAyB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAuC,EAAE;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,OAAO,KAAK,CAAC,QAAQ;SAClB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACtE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CACnE;SACA,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CACtE;SACA,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,CAAC,cAAc;QACpB,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,cAAc;YACtD,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,cAAc;QAC/C,CAAC,CAAC,IAAI,CACT;SACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACjE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAA2C;IAE3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACpC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QAClC,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAC9C,IAAI,CAAC,MAAM,KAAK,UAAU;QAC1B,4BAA4B,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,UAAU,CACzD,CAAC;IAEF,OAAO,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAE/D,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,CAAC,EAAE,gBAAgB,OAAO,CAAC,MAAM,EAAE,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAoB;YAC/B,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QACF,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;QAChC,MAAM,yBAAyB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAwC;IAExC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAE/D,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9D,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAoB;YAC/B,GAAG,OAAO;YACV,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QACF,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;QAChC,MAAM,yBAAyB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAmD,EAAE;IAErD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,aAAa,GAAgC,EAAE,CAAC;QACtD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAEtC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS;gBACtC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBACzC,CAAC,CAAC,IAAI,CAAC;YACT,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU;gBAC1C,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;gBAC3C,CAAC,CAAC,IAAI,CAAC;YACT,IACE,CAAC,WAAW;gBACZ,CAAC,cAAc;gBACf,CAAC,iBAAiB;gBAClB,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,SAAS,EAC9D,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,OAAO,GAAoB;gBAC/B,GAAG,OAAO;gBACV,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;gBAClC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,yBAAyB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CACpC,OAA0D,EAC1D,OAAmD;IAEnD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC;IACnD,CAAC;IAED,OAAO,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,UAE3C,EAAE;IACJ,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAChE,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,iDAAiD,IAAI,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAA2B,EAC3B,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAA+B,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC5D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC/D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,EAAoB;IAEpB,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CACpB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAC1E,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,MAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,0BAA0B,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC7D,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,wBAAwB,EAAE,CAAC;QACzE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA2B;IACxD,OAAO,YAAY,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CACxB,GAA2D,EAC3D,KAAyB;IAMzB,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAwC,EACxC,MAAgB;IAIhB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,QAAQ;QACjB,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,UAAU,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAgB;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAwB,EACxB,GAAS;IAET,OAAO;QACL,GAAG,OAAO;QACV,aAAa,EAAE,4BAA4B,CAAC,OAAO,EAAE,GAAG,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QAClC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY;IACnD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,IAAI,CACpB,CAAC;AACJ,CAAC"}

package/dist/audit/audit-log.d.ts

@@ -0,0 +1,45 @@
+import type { PathResolutionOptions } from "../config/paths.js";
+export type AuditAction = "profile_test" | "tool_call" | "approval_elicitation";
+export type AuditStatus = "ok" | "error";
+export interface AuditLogEntry {
+    version: 1;
+    timestamp: string;
+    action: AuditAction;
+    status: AuditStatus;
+    profileName?: string;
+    namespace?: string;
+    toolName?: string;
+    upstreamName?: string;
+    mandateId?: string;
+    mandateUid?: string;
+    repoPath?: string;
+    worktreePath?: string;
+    branch?: string;
+    approvalRequestId?: string;
+    approvalGateId?: string;
+    approvalGatePattern?: string;
+    approvalDecision?: "approved" | "denied" | "declined" | "cancelled" | "failed";
+    durationMs?: number;
+    error?: string;
+}
+export interface AuditLogger {
+    log(entry: Omit<AuditLogEntry, "version" | "timestamp">): Promise<void>;
+}
+export interface JsonlAuditLoggerOptions extends PathResolutionOptions {
+    path?: string;
+    now?: () => Date;
+}
+export interface ReadAuditLogOptions {
+    path?: string;
+    limit?: number;
+    mandateId?: string;
+}
+export interface SafeAuditLogOptions {
+    onError?: (error: unknown) => void;
+}
+export declare function resolveAuditLogPath(options?: PathResolutionOptions): string;
+export declare function createJsonlAuditLogger(options?: JsonlAuditLoggerOptions): AuditLogger;
+export declare const noopAuditLogger: AuditLogger;
+export declare function safeAuditLog(logger: AuditLogger, entry: Omit<AuditLogEntry, "version" | "timestamp">, options?: SafeAuditLogOptions): Promise<void>;
+export declare function readAuditLogEntries(options?: ReadAuditLogOptions): Promise<AuditLogEntry[]>;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/audit/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/audit/audit-log.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,WAAW,GAAG,sBAAsB,CAAC;AAChF,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAED,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAQR;AAED,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAA4B,GACpC,WAAW,CAmBb;AAED,eAAO,MAAM,eAAe,EAAE,WAI7B,CAAC;AAEF,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,WAAW,CAAC,EACnD,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,aAAa,EAAE,CAAC,CA2B1B"}