@titan-design/authority 0.1.0 → 0.2.0

package/README.md

@@ -20,10 +20,26 @@ canResolve(DEFAULT_TABLE, "MRG-CO", { class: "coordinator", tainted: false }); /
 - `evaluate(table, request)`: the decision for one request. No matching rule means deny.
   A tainted actor on a rule marked `taintEscalates` gets a gate only the owner at a
   terminal resolves.
+- A rule with `when` (only MRG-AU-RV today) applies only when every condition holds on
+  `request.facts` and `request.tainted` is an own property set to exactly `false`; otherwise the pair's unconditional rule
+  decides and the reason names what was unmet. `unmetConditions(when, facts)` lists the failing conditions.
+  `evaluate` reads each request field once, then copies the facts with `structuredClone`
+  and rebuilds them as plain data on null-prototype objects. Facts holding a function, a `toJSON` method, a Proxy, a Map, a Set, a Date, a BigInt, a cycle or a throwing getter fail every condition instead of
+  throwing, and so does a sparse array (a hole would read through to the prototype).
+  The rebuild reads own properties only. A class instance is copied as its own
+  data, without its prototype. An inherited or getter-supplied `tainted` still escalates
+  a `taintEscalates` row when truthy, but never unlocks a conditional row; inherited
+  `facts` are ignored. `evaluate` trusts the request object itself: a Proxy request whose traps report an own `tainted: false` is treated as untainted, because a caller that builds such a request is asserting that value.
+  A missing or wrongly typed fact fails its condition (booleans must be exactly `true` or
+  `false`, ids non-empty strings, lists arrays), and so does a check run missing any field.
+  A non-canonical or non-ASCII changed path, or one with a segment ending in a space or a
+  dot, counts as protected.
+  `allowedApps` is caller-supplied; Shepherd must pin GitHub Actions (app id 15368) itself.
 - `canResolve(table, ruleId, resolver)`: false for any agent or automation class and for
   any tainted resolver.
-- `policyTableSchema`: rejects a table that misses or repeats an action by actor pair, or
-  names anyone but `owner-terminal` or `owner-remote` as a resolver.
+- `policyTableSchema`: rejects a table that misses or repeats the unconditional rule for
+  an action by actor pair, or names anyone but `owner-terminal` or `owner-remote` as a
+  resolver.
 - `DEFAULT_TABLE`: the approved table, also shipped as `@titan-design/authority/table.json`
   for plain-node hooks.
 

package/dist/index.d.ts

@@ -6,12 +6,51 @@ declare const RESOLVER_CLASSES: readonly ["owner-terminal", "owner-remote"];
 declare const ACTION_CLASSES: readonly ["merge", "release", "secret-read", "untrusted-ingest", "private-to-public", "private-egress", "hardware-actuate", "hardware-stop", "destructive-remote", "destructive-local", "destructive-foreign", "spawn", "spend-over-cap", "authority-config", "human-verb"];
 declare const VERDICTS: readonly ["allow", "gate", "deny"];
 /** Codes for the record each rule expects to leave behind, from a decision record to a device read-back. */
-declare const EVIDENCE_KINDS: readonly ["E-dec", "E-gate", "E-ref", "E-byp", "E-gh", "E-npm", "E-spn", "E-prin", "E-dev"];
+declare const EVIDENCE_KINDS: readonly ["E-dec", "E-gate", "E-ref", "E-byp", "E-gh", "E-npm", "E-spn", "E-prin", "E-dev", "E-rev"];
+/** Facts a conditional rule checks on the request; the rule applies only when every one holds. */
+declare const CONDITION_KINDS: readonly ["resolver-is-dispatched-reviewer", "verdict-merge-at-head", "required-contexts-green", "no-non-green-run", "merge-tree-clean", "repo-not-frozen", "no-protected-path-change", "seat-grants-merge-on-green-approve"];
 type ActorClass = (typeof ACTOR_CLASSES)[number];
 type ResolverClass = (typeof RESOLVER_CLASSES)[number];
 type ActionClass = (typeof ACTION_CLASSES)[number];
 type Verdict = (typeof VERDICTS)[number];
 type EvidenceKind = (typeof EVIDENCE_KINDS)[number];
+type ConditionKind = (typeof CONDITION_KINDS)[number];
+
+interface AgentIdentity {
+    agentId: string;
+    sessionId: string;
+}
+interface CheckRunFact {
+    name: string;
+    appId: number;
+    headSha: string;
+    /** GitHub's conclusion; `null` while the run is queued or in progress. */
+    conclusion: string | null;
+}
+/** What the caller observed about a pull request it wants to merge. The evaluator re-derives every condition from these. */
+interface MergeFacts {
+    head: string;
+    resolver: AgentIdentity;
+    dispatchedReviewer: AgentIdentity;
+    verdict: {
+        value: string;
+        head: string;
+    };
+    requiredContexts: string[];
+    /** Check-run app ids the caller trusts; the package pins none. */
+    allowedApps: number[];
+    checkRuns: CheckRunFact[];
+    mergeTreeClean: boolean;
+    repoFrozen: boolean;
+    /** Every path the pull request touches, including both sides of a rename. */
+    changedPaths: string[];
+    seatGrants: string[];
+}
+interface ConditionFacts {
+    merge?: MergeFacts;
+}
+/** The conditions that do not hold. Missing or non-plain facts fail every condition, so a caller that observed nothing gets nothing. */
+declare function unmetConditions(conditions: readonly ConditionKind[], facts: ConditionFacts | undefined): ConditionKind[];
 
 declare const ruleSchema: z.ZodObject<{
     id: z.ZodString;
@@ -51,6 +90,16 @@ declare const ruleSchema: z.ZodObject<{
     }>>>;
     taintEscalates: z.ZodOptional<z.ZodBoolean>;
     condition: z.ZodOptional<z.ZodString>;
+    when: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "resolver-is-dispatched-reviewer": "resolver-is-dispatched-reviewer";
+        "verdict-merge-at-head": "verdict-merge-at-head";
+        "required-contexts-green": "required-contexts-green";
+        "no-non-green-run": "no-non-green-run";
+        "merge-tree-clean": "merge-tree-clean";
+        "repo-not-frozen": "repo-not-frozen";
+        "no-protected-path-change": "no-protected-path-change";
+        "seat-grants-merge-on-green-approve": "seat-grants-merge-on-green-approve";
+    }>>>;
     evidence: z.ZodArray<z.ZodEnum<{
         "E-dec": "E-dec";
         "E-gate": "E-gate";
@@ -61,6 +110,7 @@ declare const ruleSchema: z.ZodObject<{
         "E-spn": "E-spn";
         "E-prin": "E-prin";
         "E-dev": "E-dev";
+        "E-rev": "E-rev";
     }>>;
 }, z.core.$strip>;
 type Rule = z.infer<typeof ruleSchema>;
@@ -68,7 +118,7 @@ interface PolicyTable {
     version: string;
     rules: Rule[];
 }
-/** Validates a table: every (action, actor) pair exactly once, and only owner classes as gate resolvers. */
+/** Validates a table: every (action, actor) pair has exactly one unconditional rule, and only owner classes resolve gates. */
 declare const policyTableSchema: z.ZodType<PolicyTable>;
 
 interface AuthorityRequest {
@@ -79,6 +129,8 @@ interface AuthorityRequest {
     };
     tainted: boolean;
     subject: Record<string, string>;
+    /** Observed facts that a conditional rule (one with `when`) checks before it applies. */
+    facts?: ConditionFacts;
 }
 type Decision = {
     verdict: "allow";
@@ -104,4 +156,4 @@ declare function canResolve(table: PolicyTable, ruleId: string, resolver: {
 /** The owner-approved decision table, validated on load. The same data ships as `@titan-design/authority/table.json`. */
 declare const DEFAULT_TABLE: PolicyTable;
 
-export { ACTION_CLASSES, ACTOR_CLASSES, type ActionClass, type ActorClass, type AuthorityRequest, DEFAULT_TABLE, type Decision, EVIDENCE_KINDS, type EvidenceKind, type PolicyTable, RESOLVER_CLASSES, type ResolverClass, type Rule, VERDICTS, type Verdict, canResolve, evaluate, policyTableSchema };
+export { ACTION_CLASSES, ACTOR_CLASSES, type ActionClass, type ActorClass, type AgentIdentity, type AuthorityRequest, CONDITION_KINDS, type CheckRunFact, type ConditionFacts, type ConditionKind, DEFAULT_TABLE, type Decision, EVIDENCE_KINDS, type EvidenceKind, type MergeFacts, type PolicyTable, RESOLVER_CLASSES, type ResolverClass, type Rule, VERDICTS, type Verdict, canResolve, evaluate, policyTableSchema, unmetConditions };

package/dist/index.js

@@ -19,7 +19,129 @@ var ACTION_CLASSES = [
   "human-verb"
 ];
 var VERDICTS = ["allow", "gate", "deny"];
-var EVIDENCE_KINDS = ["E-dec", "E-gate", "E-ref", "E-byp", "E-gh", "E-npm", "E-spn", "E-prin", "E-dev"];
+var EVIDENCE_KINDS = ["E-dec", "E-gate", "E-ref", "E-byp", "E-gh", "E-npm", "E-spn", "E-prin", "E-dev", "E-rev"];
+var CONDITION_KINDS = [
+  "resolver-is-dispatched-reviewer",
+  "verdict-merge-at-head",
+  "required-contexts-green",
+  "no-non-green-run",
+  "merge-tree-clean",
+  "repo-not-frozen",
+  "no-protected-path-change",
+  "seat-grants-merge-on-green-approve"
+];
+
+// src/conditions.ts
+var GREEN_CONCLUSIONS = /* @__PURE__ */ new Set(["success", "neutral", "skipped"]);
+var FULL_SHA = /^[0-9a-f]{40}$/;
+var PRINTABLE_ASCII = /^[\x20-\x7e]+$/;
+var PROTECTED_DIRS = /* @__PURE__ */ new Set([".github"]);
+var PROTECTED_FILES = /* @__PURE__ */ new Set(["codeowners", "docs/codeowners", ".gitmodules"]);
+var NON_CANONICAL_SEGMENTS = /* @__PURE__ */ new Set(["", ".", ".."]);
+var TRAILING_SPACE_OR_DOT = /[ .]$/;
+function isId(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function sameAgent(a, b) {
+  return isId(a.agentId) && isId(a.sessionId) && a.agentId === b.agentId && a.sessionId === b.sessionId;
+}
+function verdictMergeAtHead(facts) {
+  const { head } = facts;
+  return facts.verdict.value === "MERGE" && typeof head === "string" && FULL_SHA.test(head) && facts.verdict.head === head;
+}
+function isNonCanonicalSegment(segment) {
+  return NON_CANONICAL_SEGMENTS.has(segment) || TRAILING_SPACE_OR_DOT.test(segment);
+}
+function isNonCanonical(path) {
+  return !PRINTABLE_ASCII.test(path) || path.includes("\\") || path.split("/").some(isNonCanonicalSegment);
+}
+function isProtectedPath(path) {
+  if (typeof path !== "string" || isNonCanonical(path)) return true;
+  const folded = path.toLowerCase();
+  return PROTECTED_FILES.has(folded) || PROTECTED_DIRS.has(folded.split("/")[0]);
+}
+function isWellFormedRun(run) {
+  return isId(run.name) && Number.isInteger(run.appId) && isId(run.headSha) && (run.conclusion === null || typeof run.conclusion === "string");
+}
+function hasRunFacts(facts) {
+  return Array.isArray(facts.checkRuns) && Array.isArray(facts.allowedApps) && facts.allowedApps.every((app) => Number.isInteger(app));
+}
+function countedRuns(facts) {
+  return facts.checkRuns.filter((run) => isWellFormedRun(run) && run.headSha === facts.head && facts.allowedApps.includes(run.appId));
+}
+function requiredContextsGreen(facts) {
+  const contexts = facts.requiredContexts;
+  if (!hasRunFacts(facts) || !Array.isArray(contexts) || contexts.length === 0) return false;
+  const runs = countedRuns(facts);
+  return contexts.every((context) => isId(context) && runs.some((run) => run.name === context && run.conclusion === "success"));
+}
+function noNonGreenRun(facts) {
+  return hasRunFacts(facts) && facts.checkRuns.every(isWellFormedRun) && countedRuns(facts).every((run) => run.conclusion !== null && GREEN_CONCLUSIONS.has(run.conclusion));
+}
+function noProtectedPathChange(facts) {
+  const paths = facts.changedPaths;
+  return Array.isArray(paths) && paths.length > 0 && !paths.some(isProtectedPath);
+}
+var MERGE_CHECKS = {
+  "resolver-is-dispatched-reviewer": (facts) => sameAgent(facts.resolver, facts.dispatchedReviewer),
+  "verdict-merge-at-head": verdictMergeAtHead,
+  "required-contexts-green": requiredContextsGreen,
+  "no-non-green-run": noNonGreenRun,
+  "merge-tree-clean": (facts) => facts.mergeTreeClean === true,
+  "repo-not-frozen": (facts) => facts.repoFrozen === false,
+  "no-protected-path-change": noProtectedPathChange,
+  "seat-grants-merge-on-green-approve": (facts) => Array.isArray(facts.seatGrants) && facts.seatGrants.includes("merge-on-green-approve")
+};
+function holds(check, facts) {
+  try {
+    return check(facts);
+  } catch {
+    return false;
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var LEAF_TYPES = /* @__PURE__ */ new Set(["string", "number", "boolean", "undefined"]);
+function rebuildArray(value, ancestors) {
+  const copy = [];
+  for (let index = 0; index < value.length; index += 1) {
+    if (!Object.hasOwn(value, index)) throw new TypeError("fact lists must not be sparse");
+    const item = toPlainData(value[index], ancestors);
+    Object.defineProperty(copy, index, { value: item, writable: true, enumerable: true, configurable: true });
+  }
+  return copy;
+}
+function rebuildRecord(value, ancestors) {
+  if (Object.getPrototypeOf(value) !== Object.prototype) throw new TypeError("facts must be plain objects");
+  const copy = /* @__PURE__ */ Object.create(null);
+  for (const [key, field] of Object.entries(value)) copy[key] = toPlainData(field, ancestors);
+  return copy;
+}
+function toPlainData(value, ancestors) {
+  if (value === null || LEAF_TYPES.has(typeof value)) return value;
+  if (typeof value !== "object" || ancestors.has(value)) throw new TypeError("facts must be acyclic JSON-shaped data");
+  ancestors.add(value);
+  const copy = Array.isArray(value) ? rebuildArray(value, ancestors) : rebuildRecord(value, ancestors);
+  ancestors.delete(value);
+  return copy;
+}
+function plainMergeFacts(read) {
+  try {
+    const copy = toPlainData(structuredClone(read()), /* @__PURE__ */ new Set());
+    const merge = isRecord(copy) ? copy.merge : void 0;
+    return isRecord(merge) ? merge : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function unmetMergeConditions(conditions, merge) {
+  if (!merge) return [...conditions];
+  return conditions.filter((condition) => !holds(MERGE_CHECKS[condition], merge));
+}
+function unmetConditions(conditions, facts) {
+  return unmetMergeConditions(conditions, plainMergeFacts(() => facts));
+}
 
 // src/schema.ts
 import { z } from "zod";
@@ -31,20 +153,25 @@ var ruleSchema = z.object({
   resolvers: z.array(z.enum(RESOLVER_CLASSES)).min(1).optional(),
   taintEscalates: z.boolean().optional(),
   condition: z.string().min(1).optional(),
+  when: z.array(z.enum(CONDITION_KINDS)).min(1).optional(),
   evidence: z.array(z.enum(EVIDENCE_KINDS))
 }).refine((rule) => rule.verdict === "gate" === (rule.resolvers !== void 0), {
   message: "a gate rule needs resolvers, and only a gate rule may have them",
   path: ["resolvers"]
+}).refine((rule) => rule.when === void 0 || rule.verdict === "allow", {
+  message: "only an allow rule may carry when conditions",
+  path: ["when"]
 });
 function checkTotality(table, ctx) {
   const seenPairs = /* @__PURE__ */ new Set();
   const seenIds = /* @__PURE__ */ new Set();
   table.rules.forEach((rule, index) => {
     const pair = `${rule.action} by ${rule.actor}`;
-    if (seenPairs.has(pair)) ctx.addIssue({ code: "custom", message: `duplicate rule for ${pair}`, path: ["rules", index] });
     if (seenIds.has(rule.id)) ctx.addIssue({ code: "custom", message: `duplicate rule id ${rule.id}`, path: ["rules", index, "id"] });
-    seenPairs.add(pair);
     seenIds.add(rule.id);
+    if (rule.when) return;
+    if (seenPairs.has(pair)) ctx.addIssue({ code: "custom", message: `duplicate rule for ${pair}`, path: ["rules", index] });
+    seenPairs.add(pair);
   });
   for (const action of ACTION_CLASSES) {
     for (const actor of ACTOR_CLASSES) {
@@ -56,19 +183,44 @@ var policyTableSchema = z.object({ version: z.string().min(1), rules: z.array(ru
 
 // src/evaluate.ts
 var TAINT_RESOLVERS = ["owner-terminal"];
-function findRule(table, action, actor) {
-  return table.rules.find((rule) => rule.action === action && rule.actor === actor);
+function snapshotOf(request) {
+  const tainted = request.tainted;
+  return {
+    action: request.action,
+    actor: request.actor.class,
+    tainted,
+    ownUntainted: Object.hasOwn(request, "tainted") && tainted === false,
+    merge: plainMergeFacts(() => Object.hasOwn(request, "facts") ? request.facts : void 0)
+  };
+}
+function findRule(table, snapshot) {
+  const forPair = table.rules.filter((rule) => rule.action === snapshot.action && rule.actor === snapshot.actor);
+  const unmet = [];
+  for (const rule of forPair.filter((candidate) => candidate.when)) {
+    if (!snapshot.ownUntainted) {
+      unmet.push(`${rule.id} skipped: tainted is not false`);
+      continue;
+    }
+    const failed = unmetMergeConditions(rule.when ?? [], snapshot.merge);
+    if (failed.length === 0) return { rule, unmet: [] };
+    unmet.push(`${rule.id} unmet: ${failed.join(", ")}`);
+  }
+  return { rule: forPair.find((candidate) => !candidate.when), unmet };
+}
+function withUnmet(reason, unmet) {
+  return unmet.length === 0 ? reason : `${reason}; ${unmet.join("; ")}`;
 }
 function evaluate(table, request) {
-  const { action } = request;
-  const actor = request.actor.class;
-  const rule = findRule(table, action, actor);
+  const snapshot = snapshotOf(request);
+  const { action, actor } = snapshot;
+  const { rule, unmet } = findRule(table, snapshot);
   if (!rule) return { verdict: "deny", ruleId: null, reason: `no rule for ${action} by ${actor}` };
-  if (rule.verdict === "deny") return { verdict: "deny", ruleId: rule.id, reason: `${rule.id} denies ${action} by ${actor}` };
+  if (rule.verdict === "deny") return { verdict: "deny", ruleId: rule.id, reason: withUnmet(`${rule.id} denies ${action} by ${actor}`, unmet) };
   if (rule.verdict === "gate") {
-    return { verdict: "gate", ruleId: rule.id, resolvers: [...rule.resolvers ?? []], reason: `${rule.id} gates ${action} by ${actor}` };
+    const reason = withUnmet(`${rule.id} gates ${action} by ${actor}`, unmet);
+    return { verdict: "gate", ruleId: rule.id, resolvers: [...rule.resolvers ?? []], reason };
   }
-  if (request.tainted && rule.taintEscalates) {
+  if (snapshot.tainted && rule.taintEscalates) {
     return { verdict: "gate", ruleId: rule.id, resolvers: [...TAINT_RESOLVERS], reason: `${rule.id} gates ${action} by a tainted ${actor}` };
   }
   return { verdict: "allow", ruleId: rule.id };
@@ -161,6 +313,28 @@ var table_default = {
         "E-gh"
       ]
     },
+    {
+      id: "MRG-AU-RV",
+      action: "merge",
+      actor: "automation",
+      verdict: "allow",
+      condition: "Owner decision D-A, all seats: the run-dispatched reviewer's MERGE verdict at the exact head, with required check runs green from the allowed apps, stands in for the owner's tap. A trusted collector, never the requester, observes the facts; its changed paths include both sides of every rename. A tainted request never matches. Otherwise MRG-AU gates.",
+      when: [
+        "resolver-is-dispatched-reviewer",
+        "verdict-merge-at-head",
+        "required-contexts-green",
+        "no-non-green-run",
+        "merge-tree-clean",
+        "repo-not-frozen",
+        "no-protected-path-change",
+        "seat-grants-merge-on-green-approve"
+      ],
+      evidence: [
+        "E-gate",
+        "E-gh",
+        "E-rev"
+      ]
+    },
     {
       id: "REL-OT",
       action: "release",
@@ -961,12 +1135,14 @@ var DEFAULT_TABLE = policyTableSchema.parse(table_default);
 export {
   ACTION_CLASSES,
   ACTOR_CLASSES,
+  CONDITION_KINDS,
   DEFAULT_TABLE,
   EVIDENCE_KINDS,
   RESOLVER_CLASSES,
   VERDICTS,
   canResolve,
   evaluate,
-  policyTableSchema
+  policyTableSchema,
+  unmetConditions
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/vocabulary.ts","../src/schema.ts","../src/evaluate.ts","../src/table.json","../src/table.ts"],"sourcesContent":["export const ACTOR_CLASSES = [\"owner-terminal\", \"owner-remote\", \"coordinator\", \"worker\", \"headless\", \"automation\"] as const;\n\n/** The only classes that may resolve a gate: the owner, at a terminal or through a verified remote channel. */\nexport const RESOLVER_CLASSES = [\"owner-terminal\", \"owner-remote\"] as const;\n\nexport const ACTION_CLASSES = [\n  \"merge\",\n  \"release\",\n  \"secret-read\",\n  \"untrusted-ingest\",\n  \"private-to-public\",\n  \"private-egress\",\n  \"hardware-actuate\",\n  \"hardware-stop\",\n  \"destructive-remote\",\n  \"destructive-local\",\n  \"destructive-foreign\",\n  \"spawn\",\n  \"spend-over-cap\",\n  \"authority-config\",\n  \"human-verb\",\n] as const;\n\nexport const VERDICTS = [\"allow\", \"gate\", \"deny\"] as const;\n\n/** Codes for the record each rule expects to leave behind, from a decision record to a device read-back. */\nexport const EVIDENCE_KINDS = [\"E-dec\", \"E-gate\", \"E-ref\", \"E-byp\", \"E-gh\", \"E-npm\", \"E-spn\", \"E-prin\", \"E-dev\"] as const;\n\nexport type ActorClass = (typeof ACTOR_CLASSES)[number];\nexport type ResolverClass = (typeof RESOLVER_CLASSES)[number];\nexport type ActionClass = (typeof ACTION_CLASSES)[number];\nexport type Verdict = (typeof VERDICTS)[number];\nexport type EvidenceKind = (typeof EVIDENCE_KINDS)[number];\n","import { z } from \"zod\";\nimport { ACTION_CLASSES, ACTOR_CLASSES, EVIDENCE_KINDS, RESOLVER_CLASSES, VERDICTS } from \"./vocabulary.js\";\n\nconst ruleSchema = z\n  .object({\n    id: z.string().min(1),\n    action: z.enum(ACTION_CLASSES),\n    actor: z.enum(ACTOR_CLASSES),\n    verdict: z.enum(VERDICTS),\n    resolvers: z.array(z.enum(RESOLVER_CLASSES)).min(1).optional(),\n    taintEscalates: z.boolean().optional(),\n    condition: z.string().min(1).optional(),\n    evidence: z.array(z.enum(EVIDENCE_KINDS)),\n  })\n  .refine((rule) => (rule.verdict === \"gate\") === (rule.resolvers !== undefined), {\n    message: \"a gate rule needs resolvers, and only a gate rule may have them\",\n    path: [\"resolvers\"],\n  });\n\nexport type Rule = z.infer<typeof ruleSchema>;\n\nexport interface PolicyTable {\n  version: string;\n  rules: Rule[];\n}\n\nfunction checkTotality(table: PolicyTable, ctx: z.RefinementCtx): void {\n  const seenPairs = new Set<string>();\n  const seenIds = new Set<string>();\n  table.rules.forEach((rule, index) => {\n    const pair = `${rule.action} by ${rule.actor}`;\n    if (seenPairs.has(pair)) ctx.addIssue({ code: \"custom\", message: `duplicate rule for ${pair}`, path: [\"rules\", index] });\n    if (seenIds.has(rule.id)) ctx.addIssue({ code: \"custom\", message: `duplicate rule id ${rule.id}`, path: [\"rules\", index, \"id\"] });\n    seenPairs.add(pair);\n    seenIds.add(rule.id);\n  });\n  for (const action of ACTION_CLASSES) {\n    for (const actor of ACTOR_CLASSES) {\n      if (!seenPairs.has(`${action} by ${actor}`)) ctx.addIssue({ code: \"custom\", message: `no rule for ${action} by ${actor}`, path: [\"rules\"] });\n    }\n  }\n}\n\n/** Validates a table: every (action, actor) pair exactly once, and only owner classes as gate resolvers. */\nexport const policyTableSchema: z.ZodType<PolicyTable> = z\n  .object({ version: z.string().min(1), rules: z.array(ruleSchema) })\n  .superRefine(checkTotality);\n","import type { PolicyTable, Rule } from \"./schema.js\";\nimport type { ActionClass, ActorClass, ResolverClass } from \"./vocabulary.js\";\nimport { RESOLVER_CLASSES } from \"./vocabulary.js\";\n\nexport interface AuthorityRequest {\n  action: ActionClass;\n  actor: { class: ActorClass; id: string };\n  tainted: boolean;\n  subject: Record<string, string>;\n}\n\nexport type Decision =\n  | { verdict: \"allow\"; ruleId: string }\n  | { verdict: \"gate\"; ruleId: string; resolvers: ResolverClass[]; reason: string }\n  | { verdict: \"deny\"; ruleId: string | null; reason: string };\n\nconst TAINT_RESOLVERS: ResolverClass[] = [\"owner-terminal\"];\n\nfunction findRule(table: PolicyTable, action: string, actor: string): Rule | undefined {\n  return table.rules.find((rule) => rule.action === action && rule.actor === actor);\n}\n\n/** Decides one request against a table. Pure: no clock, no environment, and no match means deny. */\nexport function evaluate(table: PolicyTable, request: AuthorityRequest): Decision {\n  const { action } = request;\n  const actor = request.actor.class;\n  const rule = findRule(table, action, actor);\n  if (!rule) return { verdict: \"deny\", ruleId: null, reason: `no rule for ${action} by ${actor}` };\n  if (rule.verdict === \"deny\") return { verdict: \"deny\", ruleId: rule.id, reason: `${rule.id} denies ${action} by ${actor}` };\n  if (rule.verdict === \"gate\") {\n    return { verdict: \"gate\", ruleId: rule.id, resolvers: [...(rule.resolvers ?? [])], reason: `${rule.id} gates ${action} by ${actor}` };\n  }\n  if (request.tainted && rule.taintEscalates) {\n    return { verdict: \"gate\", ruleId: rule.id, resolvers: [...TAINT_RESOLVERS], reason: `${rule.id} gates ${action} by a tainted ${actor}` };\n  }\n  return { verdict: \"allow\", ruleId: rule.id };\n}\n\nfunction gateResolvers(rule: Rule): readonly ResolverClass[] {\n  if (rule.verdict === \"gate\") return rule.resolvers ?? [];\n  if (rule.verdict === \"allow\" && rule.taintEscalates) return TAINT_RESOLVERS;\n  return [];\n}\n\nfunction isResolverClass(actorClass: ActorClass): actorClass is ResolverClass {\n  return (RESOLVER_CLASSES as readonly string[]).includes(actorClass);\n}\n\n/** Whether a resolver may resolve the gate a rule opens. Agents, automation and tainted sessions never may. */\nexport function canResolve(table: PolicyTable, ruleId: string, resolver: { class: ActorClass; tainted: boolean }): boolean {\n  if (resolver.tainted || !isResolverClass(resolver.class)) return false;\n  const rule = table.rules.find((candidate) => candidate.id === ruleId);\n  return rule !== undefined && gateResolvers(rule).includes(resolver.class);\n}\n","{\n  \"version\": \"1.0.0\",\n  \"rules\": [\n    {\n      \"id\": \"MRG-OT\",\n      \"action\": \"merge\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"MRG-OR\",\n      \"action\": \"merge\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-remote\"\n      ],\n      \"condition\": \"Read-back of repo, pull request number, head SHA and title. Resolves a coordinator or automation merge gate; no direct door.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"MRG-CO\",\n      \"action\": \"merge\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\",\n        \"owner-remote\"\n      ],\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"MRG-WK\",\n      \"action\": \"merge\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"MRG-HD\",\n      \"action\": \"merge\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"MRG-AU\",\n      \"action\": \"merge\",\n      \"actor\": \"automation\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\",\n        \"owner-remote\"\n      ],\n      \"condition\": \"Merge on green plus owner approval.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"REL-OT\",\n      \"action\": \"release\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Includes the first hand publish of a new package.\",\n      \"evidence\": [\n        \"E-npm\"\n      ]\n    },\n    {\n      \"id\": \"REL-OR\",\n      \"action\": \"release\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-CO\",\n      \"action\": \"release\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\"\n      ],\n      \"condition\": \"A Version Packages pull request merge and a Worker deploy are releases.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"REL-WK\",\n      \"action\": \"release\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-HD\",\n      \"action\": \"release\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-AU\",\n      \"action\": \"release\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only the release workflow on main after a merged Version Packages pull request.\",\n      \"evidence\": [\n        \"E-npm\"\n      ]\n    },\n    {\n      \"id\": \"SEC-OT\",\n      \"action\": \"secret-read\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Secret values are never logged.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"SEC-OR\",\n      \"action\": \"secret-read\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-CO\",\n      \"action\": \"secret-read\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-WK\",\n      \"action\": \"secret-read\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-HD\",\n      \"action\": \"secret-read\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-AU\",\n      \"action\": \"secret-read\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Its own scoped credential only.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-OT\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The receiving session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-OR\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The message arrives human-endorsed, never as from the human; forwarded third-party text taints.\",\n      \"evidence\": [\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"UNT-CO\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-WK\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-HD\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only fenced as data with no authority tools; the run is tainted from the start.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-AU\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only into a fenced field that a consumer treats as tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"PUB-OT\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"PUB-OR\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-CO\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-WK\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-HD\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-AU\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"condition\": \"The CI check fails.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-OT\",\n      \"action\": \"private-egress\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"EXT-OR\",\n      \"action\": \"private-egress\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Read-back of open queue items to the owner's own device.\",\n      \"evidence\": [\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"EXT-CO\",\n      \"action\": \"private-egress\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"taintEscalates\": true,\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-WK\",\n      \"action\": \"private-egress\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-HD\",\n      \"action\": \"private-egress\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-AU\",\n      \"action\": \"private-egress\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Through a registered pipe with redaction and minimization.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"HW-OT\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HW-OR\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Engaging or raising load; hardware-stop covers stop and unload.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-CO\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\"\n      ],\n      \"condition\": \"The owner at the device confirms each engage step; a forced takeover of an engaged device is always gated.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HW-WK\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-HD\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-AU\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HWS-OT\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-OR\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-CO\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-WK\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-HD\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-AU\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"DSR-OT\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Through the git-safety bypass or a command the owner typed.\",\n      \"evidence\": [\n        \"E-byp\"\n      ]\n    },\n    {\n      \"id\": \"DSR-OR\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-CO\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-WK\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-HD\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-AU\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"DSL-OT\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-OR\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSL-CO\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own checkout.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"DSL-WK\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own worktree.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-HD\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own worktree.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-AU\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own workspace.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSX-OT\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Includes retire --force and a broker restart, which are terminal-only.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"DSX-OR\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-CO\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-WK\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-HD\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-AU\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-OT\",\n      \"action\": \"spawn\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-spn\"\n      ]\n    },\n    {\n      \"id\": \"SPN-OR\",\n      \"action\": \"spawn\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Within service limits, which are never lifted; the owner is recorded as the principal.\",\n      \"evidence\": [\n        \"E-spn\",\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"SPN-CO\",\n      \"action\": \"spawn\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"taintEscalates\": true,\n      \"condition\": \"Within the spawn escalation, depth, rate, cwd and slot limits.\",\n      \"evidence\": [\n        \"E-spn\",\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-WK\",\n      \"action\": \"spawn\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-HD\",\n      \"action\": \"spawn\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-AU\",\n      \"action\": \"spawn\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Within service limits, with no principal recorded.\",\n      \"evidence\": [\n        \"E-spn\"\n      ]\n    },\n    {\n      \"id\": \"SPD-OT\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-OR\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"condition\": \"There is no cap to raise remotely.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPD-CO\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-WK\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-HD\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-AU\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"CFG-OT\",\n      \"action\": \"authority-config\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"CFG-OR\",\n      \"action\": \"authority-config\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-CO\",\n      \"action\": \"authority-config\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"condition\": \"A repository CLAUDE.md change goes through a pull request under merge, flagged as a sensitive path.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-WK\",\n      \"action\": \"authority-config\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-HD\",\n      \"action\": \"authority-config\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-AU\",\n      \"action\": \"authority-config\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-OT\",\n      \"action\": \"human-verb\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-gate\"\n      ]\n    },\n    {\n      \"id\": \"HV-OR\",\n      \"action\": \"human-verb\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-remote\"\n      ],\n      \"condition\": \"Read-back of what is answered; voice caps an endorsement at 600 characters and a permission preview at 300.\",\n      \"evidence\": [\n        \"E-prin\",\n        \"E-gate\"\n      ]\n    },\n    {\n      \"id\": \"HV-CO\",\n      \"action\": \"human-verb\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-WK\",\n      \"action\": \"human-verb\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-HD\",\n      \"action\": \"human-verb\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-AU\",\n      \"action\": \"human-verb\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"condition\": \"A queue mirror applying a verdict the owner gave remotely acts as owner-remote, not as automation.\",\n      \"evidence\": [\n        \"E-gate\"\n      ]\n    }\n  ]\n}\n","import tableJson from \"./table.json\" with { type: \"json\" };\nimport type { PolicyTable } from \"./schema.js\";\nimport { policyTableSchema } from \"./schema.js\";\n\n/** The owner-approved decision table, validated on load. The same data ships as `@titan-design/authority/table.json`. */\nexport const DEFAULT_TABLE: PolicyTable = policyTableSchema.parse(tableJson);\n"],"mappings":";AAAO,IAAM,gBAAgB,CAAC,kBAAkB,gBAAgB,eAAe,UAAU,YAAY,YAAY;AAG1G,IAAM,mBAAmB,CAAC,kBAAkB,cAAc;AAE1D,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,WAAW,CAAC,SAAS,QAAQ,MAAM;AAGzC,IAAM,iBAAiB,CAAC,SAAS,UAAU,SAAS,SAAS,QAAQ,SAAS,SAAS,UAAU,OAAO;;;AC1B/G,SAAS,SAAS;AAGlB,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,QAAQ,EAAE,KAAK,cAAc;AAAA,EAC7B,OAAO,EAAE,KAAK,aAAa;AAAA,EAC3B,SAAS,EAAE,KAAK,QAAQ;AAAA,EACxB,WAAW,EAAE,MAAM,EAAE,KAAK,gBAAgB,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7D,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,MAAM,EAAE,KAAK,cAAc,CAAC;AAC1C,CAAC,EACA,OAAO,CAAC,SAAU,KAAK,YAAY,YAAa,KAAK,cAAc,SAAY;AAAA,EAC9E,SAAS;AAAA,EACT,MAAM,CAAC,WAAW;AACpB,CAAC;AASH,SAAS,cAAc,OAAoB,KAA4B;AACrE,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,MAAM,QAAQ,CAAC,MAAM,UAAU;AACnC,UAAM,OAAO,GAAG,KAAK,MAAM,OAAO,KAAK,KAAK;AAC5C,QAAI,UAAU,IAAI,IAAI,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,sBAAsB,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;AACvH,QAAI,QAAQ,IAAI,KAAK,EAAE,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,qBAAqB,KAAK,EAAE,IAAI,MAAM,CAAC,SAAS,OAAO,IAAI,EAAE,CAAC;AAChI,cAAU,IAAI,IAAI;AAClB,YAAQ,IAAI,KAAK,EAAE;AAAA,EACrB,CAAC;AACD,aAAW,UAAU,gBAAgB;AACnC,eAAW,SAAS,eAAe;AACjC,UAAI,CAAC,UAAU,IAAI,GAAG,MAAM,OAAO,KAAK,EAAE,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,eAAe,MAAM,OAAO,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AAAA,IAC7I;AAAA,EACF;AACF;AAGO,IAAM,oBAA4C,EACtD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,CAAC,EACjE,YAAY,aAAa;;;AC9B5B,IAAM,kBAAmC,CAAC,gBAAgB;AAE1D,SAAS,SAAS,OAAoB,QAAgB,OAAiC;AACrF,SAAO,MAAM,MAAM,KAAK,CAAC,SAAS,KAAK,WAAW,UAAU,KAAK,UAAU,KAAK;AAClF;AAGO,SAAS,SAAS,OAAoB,SAAqC;AAChF,QAAM,EAAE,OAAO,IAAI;AACnB,QAAM,QAAQ,QAAQ,MAAM;AAC5B,QAAM,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC1C,MAAI,CAAC,KAAM,QAAO,EAAE,SAAS,QAAQ,QAAQ,MAAM,QAAQ,eAAe,MAAM,OAAO,KAAK,GAAG;AAC/F,MAAI,KAAK,YAAY,OAAQ,QAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,QAAQ,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,GAAG;AAC1H,MAAI,KAAK,YAAY,QAAQ;AAC3B,WAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,WAAW,CAAC,GAAI,KAAK,aAAa,CAAC,CAAE,GAAG,QAAQ,GAAG,KAAK,EAAE,UAAU,MAAM,OAAO,KAAK,GAAG;AAAA,EACtI;AACA,MAAI,QAAQ,WAAW,KAAK,gBAAgB;AAC1C,WAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,WAAW,CAAC,GAAG,eAAe,GAAG,QAAQ,GAAG,KAAK,EAAE,UAAU,MAAM,iBAAiB,KAAK,GAAG;AAAA,EACzI;AACA,SAAO,EAAE,SAAS,SAAS,QAAQ,KAAK,GAAG;AAC7C;AAEA,SAAS,cAAc,MAAsC;AAC3D,MAAI,KAAK,YAAY,OAAQ,QAAO,KAAK,aAAa,CAAC;AACvD,MAAI,KAAK,YAAY,WAAW,KAAK,eAAgB,QAAO;AAC5D,SAAO,CAAC;AACV;AAEA,SAAS,gBAAgB,YAAqD;AAC5E,SAAQ,iBAAuC,SAAS,UAAU;AACpE;AAGO,SAAS,WAAW,OAAoB,QAAgB,UAA4D;AACzH,MAAI,SAAS,WAAW,CAAC,gBAAgB,SAAS,KAAK,EAAG,QAAO;AACjE,QAAM,OAAO,MAAM,MAAM,KAAK,CAAC,cAAc,UAAU,OAAO,MAAM;AACpE,SAAO,SAAS,UAAa,cAAc,IAAI,EAAE,SAAS,SAAS,KAAK;AAC1E;;;ACrDA;AAAA,EACE,SAAW;AAAA,EACX,OAAS;AAAA,IACP;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MACA,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,gBAAkB;AAAA,MAClB,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,gBAAkB;AAAA,MAClB,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC71BO,IAAM,gBAA6B,kBAAkB,MAAM,aAAS;","names":[]}
+{"version":3,"sources":["../src/vocabulary.ts","../src/conditions.ts","../src/schema.ts","../src/evaluate.ts","../src/table.json","../src/table.ts"],"sourcesContent":["export const ACTOR_CLASSES = [\"owner-terminal\", \"owner-remote\", \"coordinator\", \"worker\", \"headless\", \"automation\"] as const;\n\n/** The only classes that may resolve a gate: the owner, at a terminal or through a verified remote channel. */\nexport const RESOLVER_CLASSES = [\"owner-terminal\", \"owner-remote\"] as const;\n\nexport const ACTION_CLASSES = [\n  \"merge\",\n  \"release\",\n  \"secret-read\",\n  \"untrusted-ingest\",\n  \"private-to-public\",\n  \"private-egress\",\n  \"hardware-actuate\",\n  \"hardware-stop\",\n  \"destructive-remote\",\n  \"destructive-local\",\n  \"destructive-foreign\",\n  \"spawn\",\n  \"spend-over-cap\",\n  \"authority-config\",\n  \"human-verb\",\n] as const;\n\nexport const VERDICTS = [\"allow\", \"gate\", \"deny\"] as const;\n\n/** Codes for the record each rule expects to leave behind, from a decision record to a device read-back. */\nexport const EVIDENCE_KINDS = [\"E-dec\", \"E-gate\", \"E-ref\", \"E-byp\", \"E-gh\", \"E-npm\", \"E-spn\", \"E-prin\", \"E-dev\", \"E-rev\"] as const;\n\n/** Facts a conditional rule checks on the request; the rule applies only when every one holds. */\nexport const CONDITION_KINDS = [\n  \"resolver-is-dispatched-reviewer\",\n  \"verdict-merge-at-head\",\n  \"required-contexts-green\",\n  \"no-non-green-run\",\n  \"merge-tree-clean\",\n  \"repo-not-frozen\",\n  \"no-protected-path-change\",\n  \"seat-grants-merge-on-green-approve\",\n] as const;\n\nexport type ActorClass = (typeof ACTOR_CLASSES)[number];\nexport type ResolverClass = (typeof RESOLVER_CLASSES)[number];\nexport type ActionClass = (typeof ACTION_CLASSES)[number];\nexport type Verdict = (typeof VERDICTS)[number];\nexport type EvidenceKind = (typeof EVIDENCE_KINDS)[number];\nexport type ConditionKind = (typeof CONDITION_KINDS)[number];\n","import type { ConditionKind } from \"./vocabulary.js\";\n\nexport interface AgentIdentity {\n  agentId: string;\n  sessionId: string;\n}\n\nexport interface CheckRunFact {\n  name: string;\n  appId: number;\n  headSha: string;\n  /** GitHub's conclusion; `null` while the run is queued or in progress. */\n  conclusion: string | null;\n}\n\n/** What the caller observed about a pull request it wants to merge. The evaluator re-derives every condition from these. */\nexport interface MergeFacts {\n  head: string;\n  resolver: AgentIdentity;\n  dispatchedReviewer: AgentIdentity;\n  verdict: { value: string; head: string };\n  requiredContexts: string[];\n  /** Check-run app ids the caller trusts; the package pins none. */\n  allowedApps: number[];\n  checkRuns: CheckRunFact[];\n  mergeTreeClean: boolean;\n  repoFrozen: boolean;\n  /** Every path the pull request touches, including both sides of a rename. */\n  changedPaths: string[];\n  seatGrants: string[];\n}\n\nexport interface ConditionFacts {\n  merge?: MergeFacts;\n}\n\nconst GREEN_CONCLUSIONS = new Set([\"success\", \"neutral\", \"skipped\"]);\nconst FULL_SHA = /^[0-9a-f]{40}$/;\nconst PRINTABLE_ASCII = /^[\\x20-\\x7e]+$/;\nconst PROTECTED_DIRS = new Set([\".github\"]);\nconst PROTECTED_FILES = new Set([\"codeowners\", \"docs/codeowners\", \".gitmodules\"]);\nconst NON_CANONICAL_SEGMENTS = new Set([\"\", \".\", \"..\"]);\nconst TRAILING_SPACE_OR_DOT = /[ .]$/;\n\nfunction isId(value: unknown): value is string {\n  return typeof value === \"string\" && value.length > 0;\n}\n\nfunction sameAgent(a: AgentIdentity, b: AgentIdentity): boolean {\n  return isId(a.agentId) && isId(a.sessionId) && a.agentId === b.agentId && a.sessionId === b.sessionId;\n}\n\nfunction verdictMergeAtHead(facts: MergeFacts): boolean {\n  const { head } = facts;\n  return facts.verdict.value === \"MERGE\" && typeof head === \"string\" && FULL_SHA.test(head) && facts.verdict.head === head;\n}\n\nfunction isNonCanonicalSegment(segment: string): boolean {\n  return NON_CANONICAL_SEGMENTS.has(segment) || TRAILING_SPACE_OR_DOT.test(segment);\n}\n\n// A path we cannot compare exactly could alias a protected one, so it counts as protected.\nfunction isNonCanonical(path: string): boolean {\n  return !PRINTABLE_ASCII.test(path) || path.includes(\"\\\\\") || path.split(\"/\").some(isNonCanonicalSegment);\n}\n\nfunction isProtectedPath(path: unknown): boolean {\n  if (typeof path !== \"string\" || isNonCanonical(path)) return true;\n  const folded = path.toLowerCase();\n  return PROTECTED_FILES.has(folded) || PROTECTED_DIRS.has(folded.split(\"/\")[0]!);\n}\n\nfunction isWellFormedRun(run: CheckRunFact): boolean {\n  return isId(run.name) && Number.isInteger(run.appId) && isId(run.headSha) &&\n    (run.conclusion === null || typeof run.conclusion === \"string\");\n}\n\nfunction hasRunFacts(facts: MergeFacts): boolean {\n  return Array.isArray(facts.checkRuns) && Array.isArray(facts.allowedApps) &&\n    facts.allowedApps.every((app) => Number.isInteger(app));\n}\n\nfunction countedRuns(facts: MergeFacts): CheckRunFact[] {\n  return facts.checkRuns.filter((run) => isWellFormedRun(run) && run.headSha === facts.head && facts.allowedApps.includes(run.appId));\n}\n\nfunction requiredContextsGreen(facts: MergeFacts): boolean {\n  const contexts = facts.requiredContexts;\n  if (!hasRunFacts(facts) || !Array.isArray(contexts) || contexts.length === 0) return false;\n  const runs = countedRuns(facts);\n  return contexts.every((context) => isId(context) && runs.some((run) => run.name === context && run.conclusion === \"success\"));\n}\n\n// A run we cannot attribute to a head or an app might be a failure at this head, so it gates.\nfunction noNonGreenRun(facts: MergeFacts): boolean {\n  return hasRunFacts(facts) && facts.checkRuns.every(isWellFormedRun) &&\n    countedRuns(facts).every((run) => run.conclusion !== null && GREEN_CONCLUSIONS.has(run.conclusion));\n}\n\nfunction noProtectedPathChange(facts: MergeFacts): boolean {\n  const paths = facts.changedPaths;\n  return Array.isArray(paths) && paths.length > 0 && !paths.some(isProtectedPath);\n}\n\nconst MERGE_CHECKS: Record<ConditionKind, (facts: MergeFacts) => boolean> = {\n  \"resolver-is-dispatched-reviewer\": (facts) => sameAgent(facts.resolver, facts.dispatchedReviewer),\n  \"verdict-merge-at-head\": verdictMergeAtHead,\n  \"required-contexts-green\": requiredContextsGreen,\n  \"no-non-green-run\": noNonGreenRun,\n  \"merge-tree-clean\": (facts) => facts.mergeTreeClean === true,\n  \"repo-not-frozen\": (facts) => facts.repoFrozen === false,\n  \"no-protected-path-change\": noProtectedPathChange,\n  \"seat-grants-merge-on-green-approve\": (facts) => Array.isArray(facts.seatGrants) && facts.seatGrants.includes(\"merge-on-green-approve\"),\n};\n\n// Facts arrive from outside the type system, so a malformed fact fails its condition instead of throwing.\nfunction holds(check: (facts: MergeFacts) => boolean, facts: MergeFacts): boolean {\n  try {\n    return check(facts);\n  } catch {\n    return false;\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nconst LEAF_TYPES = new Set([\"string\", \"number\", \"boolean\", \"undefined\"]);\n\n// A hole would read through to a possibly polluted prototype, and no fact list has a use for one.\nfunction rebuildArray(value: unknown[], ancestors: Set<object>): unknown[] {\n  const copy: unknown[] = [];\n  for (let index = 0; index < value.length; index += 1) {\n    if (!Object.hasOwn(value, index)) throw new TypeError(\"fact lists must not be sparse\");\n    const item = toPlainData(value[index], ancestors);\n    Object.defineProperty(copy, index, { value: item, writable: true, enumerable: true, configurable: true });\n  }\n  return copy;\n}\n\n// Copies onto null-prototype objects, so a polluted Object.prototype cannot supply a missing fact.\nfunction rebuildRecord(value: object, ancestors: Set<object>): Record<string, unknown> {\n  if (Object.getPrototypeOf(value) !== Object.prototype) throw new TypeError(\"facts must be plain objects\");\n  const copy: Record<string, unknown> = Object.create(null);\n  for (const [key, field] of Object.entries(value)) copy[key] = toPlainData(field, ancestors);\n  return copy;\n}\n\nfunction toPlainData(value: unknown, ancestors: Set<object>): unknown {\n  if (value === null || LEAF_TYPES.has(typeof value)) return value;\n  if (typeof value !== \"object\" || ancestors.has(value)) throw new TypeError(\"facts must be acyclic JSON-shaped data\");\n  ancestors.add(value);\n  const copy = Array.isArray(value) ? rebuildArray(value, ancestors) : rebuildRecord(value, ancestors);\n  ancestors.delete(value);\n  return copy;\n}\n\n/**\n * The merge facts as fresh plain data, read once, or undefined when they are not plain data.\n * structuredClone rejects functions (so no toJSON can speak for a value), Proxies and throwing getters;\n * the rebuild then reads own properties only and rejects Map, Set, Date, BigInt, cycles and sparse arrays.\n */\nexport function plainMergeFacts(read: () => unknown): MergeFacts | undefined {\n  try {\n    const copy = toPlainData(structuredClone(read()), new Set());\n    const merge = isRecord(copy) ? copy.merge : undefined;\n    return isRecord(merge) ? (merge as unknown as MergeFacts) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** The conditions that do not hold on facts already made plain by `plainMergeFacts`. */\nexport function unmetMergeConditions(conditions: readonly ConditionKind[], merge: MergeFacts | undefined): ConditionKind[] {\n  if (!merge) return [...conditions];\n  return conditions.filter((condition) => !holds(MERGE_CHECKS[condition], merge));\n}\n\n/** The conditions that do not hold. Missing or non-plain facts fail every condition, so a caller that observed nothing gets nothing. */\nexport function unmetConditions(conditions: readonly ConditionKind[], facts: ConditionFacts | undefined): ConditionKind[] {\n  return unmetMergeConditions(conditions, plainMergeFacts(() => facts));\n}\n","import { z } from \"zod\";\nimport { ACTION_CLASSES, ACTOR_CLASSES, CONDITION_KINDS, EVIDENCE_KINDS, RESOLVER_CLASSES, VERDICTS } from \"./vocabulary.js\";\n\nconst ruleSchema = z\n  .object({\n    id: z.string().min(1),\n    action: z.enum(ACTION_CLASSES),\n    actor: z.enum(ACTOR_CLASSES),\n    verdict: z.enum(VERDICTS),\n    resolvers: z.array(z.enum(RESOLVER_CLASSES)).min(1).optional(),\n    taintEscalates: z.boolean().optional(),\n    condition: z.string().min(1).optional(),\n    when: z.array(z.enum(CONDITION_KINDS)).min(1).optional(),\n    evidence: z.array(z.enum(EVIDENCE_KINDS)),\n  })\n  .refine((rule) => (rule.verdict === \"gate\") === (rule.resolvers !== undefined), {\n    message: \"a gate rule needs resolvers, and only a gate rule may have them\",\n    path: [\"resolvers\"],\n  })\n  .refine((rule) => rule.when === undefined || rule.verdict === \"allow\", {\n    message: \"only an allow rule may carry when conditions\",\n    path: [\"when\"],\n  });\n\nexport type Rule = z.infer<typeof ruleSchema>;\n\nexport interface PolicyTable {\n  version: string;\n  rules: Rule[];\n}\n\nfunction checkTotality(table: PolicyTable, ctx: z.RefinementCtx): void {\n  const seenPairs = new Set<string>();\n  const seenIds = new Set<string>();\n  table.rules.forEach((rule, index) => {\n    const pair = `${rule.action} by ${rule.actor}`;\n    if (seenIds.has(rule.id)) ctx.addIssue({ code: \"custom\", message: `duplicate rule id ${rule.id}`, path: [\"rules\", index, \"id\"] });\n    seenIds.add(rule.id);\n    if (rule.when) return;\n    if (seenPairs.has(pair)) ctx.addIssue({ code: \"custom\", message: `duplicate rule for ${pair}`, path: [\"rules\", index] });\n    seenPairs.add(pair);\n  });\n  for (const action of ACTION_CLASSES) {\n    for (const actor of ACTOR_CLASSES) {\n      if (!seenPairs.has(`${action} by ${actor}`)) ctx.addIssue({ code: \"custom\", message: `no rule for ${action} by ${actor}`, path: [\"rules\"] });\n    }\n  }\n}\n\n/** Validates a table: every (action, actor) pair has exactly one unconditional rule, and only owner classes resolve gates. */\nexport const policyTableSchema: z.ZodType<PolicyTable> = z\n  .object({ version: z.string().min(1), rules: z.array(ruleSchema) })\n  .superRefine(checkTotality);\n","import type { ConditionFacts, MergeFacts } from \"./conditions.js\";\nimport { plainMergeFacts, unmetMergeConditions } from \"./conditions.js\";\nimport type { PolicyTable, Rule } from \"./schema.js\";\nimport type { ActionClass, ActorClass, ResolverClass } from \"./vocabulary.js\";\nimport { RESOLVER_CLASSES } from \"./vocabulary.js\";\n\nexport interface AuthorityRequest {\n  action: ActionClass;\n  actor: { class: ActorClass; id: string };\n  tainted: boolean;\n  subject: Record<string, string>;\n  /** Observed facts that a conditional rule (one with `when`) checks before it applies. */\n  facts?: ConditionFacts;\n}\n\nexport type Decision =\n  | { verdict: \"allow\"; ruleId: string }\n  | { verdict: \"gate\"; ruleId: string; resolvers: ResolverClass[]; reason: string }\n  | { verdict: \"deny\"; ruleId: string | null; reason: string };\n\nconst TAINT_RESOLVERS: ResolverClass[] = [\"owner-terminal\"];\n\ninterface RuleMatch {\n  rule: Rule | undefined;\n  unmet: string[];\n}\n\ninterface RequestSnapshot {\n  action: ActionClass;\n  actor: ActorClass;\n  tainted: unknown;\n  ownUntainted: boolean;\n  merge: MergeFacts | undefined;\n}\n\n// Each field is read exactly once; a value the caller did not set as an own property may restrict a decision, never relax it.\nfunction snapshotOf(request: AuthorityRequest): RequestSnapshot {\n  const tainted: unknown = request.tainted;\n  return {\n    action: request.action,\n    actor: request.actor.class,\n    tainted,\n    ownUntainted: Object.hasOwn(request, \"tainted\") && tainted === false,\n    merge: plainMergeFacts(() => (Object.hasOwn(request, \"facts\") ? request.facts : undefined)),\n  };\n}\n\nfunction findRule(table: PolicyTable, snapshot: RequestSnapshot): RuleMatch {\n  const forPair = table.rules.filter((rule) => rule.action === snapshot.action && rule.actor === snapshot.actor);\n  const unmet: string[] = [];\n  for (const rule of forPair.filter((candidate) => candidate.when)) {\n    if (!snapshot.ownUntainted) {\n      unmet.push(`${rule.id} skipped: tainted is not false`);\n      continue;\n    }\n    const failed = unmetMergeConditions(rule.when ?? [], snapshot.merge);\n    if (failed.length === 0) return { rule, unmet: [] };\n    unmet.push(`${rule.id} unmet: ${failed.join(\", \")}`);\n  }\n  return { rule: forPair.find((candidate) => !candidate.when), unmet };\n}\n\nfunction withUnmet(reason: string, unmet: string[]): string {\n  return unmet.length === 0 ? reason : `${reason}; ${unmet.join(\"; \")}`;\n}\n\n/** Decides one request against a table. Pure: no clock, no environment, and no match means deny. */\nexport function evaluate(table: PolicyTable, request: AuthorityRequest): Decision {\n  const snapshot = snapshotOf(request);\n  const { action, actor } = snapshot;\n  const { rule, unmet } = findRule(table, snapshot);\n  if (!rule) return { verdict: \"deny\", ruleId: null, reason: `no rule for ${action} by ${actor}` };\n  if (rule.verdict === \"deny\") return { verdict: \"deny\", ruleId: rule.id, reason: withUnmet(`${rule.id} denies ${action} by ${actor}`, unmet) };\n  if (rule.verdict === \"gate\") {\n    const reason = withUnmet(`${rule.id} gates ${action} by ${actor}`, unmet);\n    return { verdict: \"gate\", ruleId: rule.id, resolvers: [...(rule.resolvers ?? [])], reason };\n  }\n  if (snapshot.tainted && rule.taintEscalates) {\n    return { verdict: \"gate\", ruleId: rule.id, resolvers: [...TAINT_RESOLVERS], reason: `${rule.id} gates ${action} by a tainted ${actor}` };\n  }\n  return { verdict: \"allow\", ruleId: rule.id };\n}\n\nfunction gateResolvers(rule: Rule): readonly ResolverClass[] {\n  if (rule.verdict === \"gate\") return rule.resolvers ?? [];\n  if (rule.verdict === \"allow\" && rule.taintEscalates) return TAINT_RESOLVERS;\n  return [];\n}\n\nfunction isResolverClass(actorClass: ActorClass): actorClass is ResolverClass {\n  return (RESOLVER_CLASSES as readonly string[]).includes(actorClass);\n}\n\n/** Whether a resolver may resolve the gate a rule opens. Agents, automation and tainted sessions never may. */\nexport function canResolve(table: PolicyTable, ruleId: string, resolver: { class: ActorClass; tainted: boolean }): boolean {\n  if (resolver.tainted || !isResolverClass(resolver.class)) return false;\n  const rule = table.rules.find((candidate) => candidate.id === ruleId);\n  return rule !== undefined && gateResolvers(rule).includes(resolver.class);\n}\n","{\n  \"version\": \"1.0.0\",\n  \"rules\": [\n    {\n      \"id\": \"MRG-OT\",\n      \"action\": \"merge\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"MRG-OR\",\n      \"action\": \"merge\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-remote\"\n      ],\n      \"condition\": \"Read-back of repo, pull request number, head SHA and title. Resolves a coordinator or automation merge gate; no direct door.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"MRG-CO\",\n      \"action\": \"merge\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\",\n        \"owner-remote\"\n      ],\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"MRG-WK\",\n      \"action\": \"merge\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"MRG-HD\",\n      \"action\": \"merge\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"MRG-AU\",\n      \"action\": \"merge\",\n      \"actor\": \"automation\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\",\n        \"owner-remote\"\n      ],\n      \"condition\": \"Merge on green plus owner approval.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"MRG-AU-RV\",\n      \"action\": \"merge\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Owner decision D-A, all seats: the run-dispatched reviewer's MERGE verdict at the exact head, with required check runs green from the allowed apps, stands in for the owner's tap. A trusted collector, never the requester, observes the facts; its changed paths include both sides of every rename. A tainted request never matches. Otherwise MRG-AU gates.\",\n      \"when\": [\n        \"resolver-is-dispatched-reviewer\",\n        \"verdict-merge-at-head\",\n        \"required-contexts-green\",\n        \"no-non-green-run\",\n        \"merge-tree-clean\",\n        \"repo-not-frozen\",\n        \"no-protected-path-change\",\n        \"seat-grants-merge-on-green-approve\"\n      ],\n      \"evidence\": [\n        \"E-gate\",\n        \"E-gh\",\n        \"E-rev\"\n      ]\n    },\n    {\n      \"id\": \"REL-OT\",\n      \"action\": \"release\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Includes the first hand publish of a new package.\",\n      \"evidence\": [\n        \"E-npm\"\n      ]\n    },\n    {\n      \"id\": \"REL-OR\",\n      \"action\": \"release\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-CO\",\n      \"action\": \"release\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\"\n      ],\n      \"condition\": \"A Version Packages pull request merge and a Worker deploy are releases.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"REL-WK\",\n      \"action\": \"release\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-HD\",\n      \"action\": \"release\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"REL-AU\",\n      \"action\": \"release\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only the release workflow on main after a merged Version Packages pull request.\",\n      \"evidence\": [\n        \"E-npm\"\n      ]\n    },\n    {\n      \"id\": \"SEC-OT\",\n      \"action\": \"secret-read\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Secret values are never logged.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"SEC-OR\",\n      \"action\": \"secret-read\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-CO\",\n      \"action\": \"secret-read\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-WK\",\n      \"action\": \"secret-read\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-HD\",\n      \"action\": \"secret-read\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SEC-AU\",\n      \"action\": \"secret-read\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Its own scoped credential only.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-OT\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The receiving session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-OR\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The message arrives human-endorsed, never as from the human; forwarded third-party text taints.\",\n      \"evidence\": [\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"UNT-CO\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-WK\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"The session becomes tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-HD\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only fenced as data with no authority tools; the run is tainted from the start.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"UNT-AU\",\n      \"action\": \"untrusted-ingest\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Only into a fenced field that a consumer treats as tainted.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"PUB-OT\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"PUB-OR\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-CO\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-WK\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-HD\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"PUB-AU\",\n      \"action\": \"private-to-public\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"condition\": \"The CI check fails.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-OT\",\n      \"action\": \"private-egress\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"EXT-OR\",\n      \"action\": \"private-egress\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Read-back of open queue items to the owner's own device.\",\n      \"evidence\": [\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"EXT-CO\",\n      \"action\": \"private-egress\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"taintEscalates\": true,\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-WK\",\n      \"action\": \"private-egress\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-HD\",\n      \"action\": \"private-egress\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Outside registered pipes.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"EXT-AU\",\n      \"action\": \"private-egress\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Through a registered pipe with redaction and minimization.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"HW-OT\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HW-OR\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"condition\": \"Engaging or raising load; hardware-stop covers stop and unload.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-CO\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-terminal\"\n      ],\n      \"condition\": \"The owner at the device confirms each engage step; a forced takeover of an engaged device is always gated.\",\n      \"evidence\": [\n        \"E-gate\",\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HW-WK\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-HD\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HW-AU\",\n      \"action\": \"hardware-actuate\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HWS-OT\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-OR\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-CO\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-WK\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-HD\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"HWS-AU\",\n      \"action\": \"hardware-stop\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dev\"\n      ]\n    },\n    {\n      \"id\": \"DSR-OT\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Through the git-safety bypass or a command the owner typed.\",\n      \"evidence\": [\n        \"E-byp\"\n      ]\n    },\n    {\n      \"id\": \"DSR-OR\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-CO\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-WK\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-HD\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSR-AU\",\n      \"action\": \"destructive-remote\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-gh\"\n      ]\n    },\n    {\n      \"id\": \"DSL-OT\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-OR\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSL-CO\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own checkout.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"DSL-WK\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own worktree.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-HD\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own worktree.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSL-AU\",\n      \"action\": \"destructive-local\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Inside its own workspace.\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"DSX-OT\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Includes retire --force and a broker restart, which are terminal-only.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"DSX-OR\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-CO\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-WK\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-HD\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"DSX-AU\",\n      \"action\": \"destructive-foreign\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-OT\",\n      \"action\": \"spawn\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-spn\"\n      ]\n    },\n    {\n      \"id\": \"SPN-OR\",\n      \"action\": \"spawn\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Within service limits, which are never lifted; the owner is recorded as the principal.\",\n      \"evidence\": [\n        \"E-spn\",\n        \"E-prin\"\n      ]\n    },\n    {\n      \"id\": \"SPN-CO\",\n      \"action\": \"spawn\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"taintEscalates\": true,\n      \"condition\": \"Within the spawn escalation, depth, rate, cwd and slot limits.\",\n      \"evidence\": [\n        \"E-spn\",\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-WK\",\n      \"action\": \"spawn\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-HD\",\n      \"action\": \"spawn\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPN-AU\",\n      \"action\": \"spawn\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Within service limits, with no principal recorded.\",\n      \"evidence\": [\n        \"E-spn\"\n      ]\n    },\n    {\n      \"id\": \"SPD-OT\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-OR\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"condition\": \"There is no cap to raise remotely.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"SPD-CO\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-WK\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"worker\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-HD\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"headless\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"SPD-AU\",\n      \"action\": \"spend-over-cap\",\n      \"actor\": \"automation\",\n      \"verdict\": \"allow\",\n      \"condition\": \"Spend is recorded and crossing the notice threshold notifies the owner; the run continues.\",\n      \"evidence\": [\n        \"E-dec\"\n      ]\n    },\n    {\n      \"id\": \"CFG-OT\",\n      \"action\": \"authority-config\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": []\n    },\n    {\n      \"id\": \"CFG-OR\",\n      \"action\": \"authority-config\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-CO\",\n      \"action\": \"authority-config\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"condition\": \"A repository CLAUDE.md change goes through a pull request under merge, flagged as a sensitive path.\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-WK\",\n      \"action\": \"authority-config\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-HD\",\n      \"action\": \"authority-config\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"CFG-AU\",\n      \"action\": \"authority-config\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-OT\",\n      \"action\": \"human-verb\",\n      \"actor\": \"owner-terminal\",\n      \"verdict\": \"allow\",\n      \"evidence\": [\n        \"E-gate\"\n      ]\n    },\n    {\n      \"id\": \"HV-OR\",\n      \"action\": \"human-verb\",\n      \"actor\": \"owner-remote\",\n      \"verdict\": \"gate\",\n      \"resolvers\": [\n        \"owner-remote\"\n      ],\n      \"condition\": \"Read-back of what is answered; voice caps an endorsement at 600 characters and a permission preview at 300.\",\n      \"evidence\": [\n        \"E-prin\",\n        \"E-gate\"\n      ]\n    },\n    {\n      \"id\": \"HV-CO\",\n      \"action\": \"human-verb\",\n      \"actor\": \"coordinator\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-WK\",\n      \"action\": \"human-verb\",\n      \"actor\": \"worker\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-HD\",\n      \"action\": \"human-verb\",\n      \"actor\": \"headless\",\n      \"verdict\": \"deny\",\n      \"evidence\": [\n        \"E-ref\"\n      ]\n    },\n    {\n      \"id\": \"HV-AU\",\n      \"action\": \"human-verb\",\n      \"actor\": \"automation\",\n      \"verdict\": \"deny\",\n      \"condition\": \"A queue mirror applying a verdict the owner gave remotely acts as owner-remote, not as automation.\",\n      \"evidence\": [\n        \"E-gate\"\n      ]\n    }\n  ]\n}\n","import tableJson from \"./table.json\" with { type: \"json\" };\nimport type { PolicyTable } from \"./schema.js\";\nimport { policyTableSchema } from \"./schema.js\";\n\n/** The owner-approved decision table, validated on load. The same data ships as `@titan-design/authority/table.json`. */\nexport const DEFAULT_TABLE: PolicyTable = policyTableSchema.parse(tableJson);\n"],"mappings":";AAAO,IAAM,gBAAgB,CAAC,kBAAkB,gBAAgB,eAAe,UAAU,YAAY,YAAY;AAG1G,IAAM,mBAAmB,CAAC,kBAAkB,cAAc;AAE1D,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,WAAW,CAAC,SAAS,QAAQ,MAAM;AAGzC,IAAM,iBAAiB,CAAC,SAAS,UAAU,SAAS,SAAS,QAAQ,SAAS,SAAS,UAAU,SAAS,OAAO;AAGjH,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACFA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,WAAW,WAAW,SAAS,CAAC;AACnE,IAAM,WAAW;AACjB,IAAM,kBAAkB;AACxB,IAAM,iBAAiB,oBAAI,IAAI,CAAC,SAAS,CAAC;AAC1C,IAAM,kBAAkB,oBAAI,IAAI,CAAC,cAAc,mBAAmB,aAAa,CAAC;AAChF,IAAM,yBAAyB,oBAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;AACtD,IAAM,wBAAwB;AAE9B,SAAS,KAAK,OAAiC;AAC7C,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS;AACrD;AAEA,SAAS,UAAU,GAAkB,GAA2B;AAC9D,SAAO,KAAK,EAAE,OAAO,KAAK,KAAK,EAAE,SAAS,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE;AAC9F;AAEA,SAAS,mBAAmB,OAA4B;AACtD,QAAM,EAAE,KAAK,IAAI;AACjB,SAAO,MAAM,QAAQ,UAAU,WAAW,OAAO,SAAS,YAAY,SAAS,KAAK,IAAI,KAAK,MAAM,QAAQ,SAAS;AACtH;AAEA,SAAS,sBAAsB,SAA0B;AACvD,SAAO,uBAAuB,IAAI,OAAO,KAAK,sBAAsB,KAAK,OAAO;AAClF;AAGA,SAAS,eAAe,MAAuB;AAC7C,SAAO,CAAC,gBAAgB,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,KAAK,qBAAqB;AACzG;AAEA,SAAS,gBAAgB,MAAwB;AAC/C,MAAI,OAAO,SAAS,YAAY,eAAe,IAAI,EAAG,QAAO;AAC7D,QAAM,SAAS,KAAK,YAAY;AAChC,SAAO,gBAAgB,IAAI,MAAM,KAAK,eAAe,IAAI,OAAO,MAAM,GAAG,EAAE,CAAC,CAAE;AAChF;AAEA,SAAS,gBAAgB,KAA4B;AACnD,SAAO,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,IAAI,KAAK,KAAK,KAAK,IAAI,OAAO,MACrE,IAAI,eAAe,QAAQ,OAAO,IAAI,eAAe;AAC1D;AAEA,SAAS,YAAY,OAA4B;AAC/C,SAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,MAAM,QAAQ,MAAM,WAAW,KACtE,MAAM,YAAY,MAAM,CAAC,QAAQ,OAAO,UAAU,GAAG,CAAC;AAC1D;AAEA,SAAS,YAAY,OAAmC;AACtD,SAAO,MAAM,UAAU,OAAO,CAAC,QAAQ,gBAAgB,GAAG,KAAK,IAAI,YAAY,MAAM,QAAQ,MAAM,YAAY,SAAS,IAAI,KAAK,CAAC;AACpI;AAEA,SAAS,sBAAsB,OAA4B;AACzD,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO;AACrF,QAAM,OAAO,YAAY,KAAK;AAC9B,SAAO,SAAS,MAAM,CAAC,YAAY,KAAK,OAAO,KAAK,KAAK,KAAK,CAAC,QAAQ,IAAI,SAAS,WAAW,IAAI,eAAe,SAAS,CAAC;AAC9H;AAGA,SAAS,cAAc,OAA4B;AACjD,SAAO,YAAY,KAAK,KAAK,MAAM,UAAU,MAAM,eAAe,KAChE,YAAY,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,eAAe,QAAQ,kBAAkB,IAAI,IAAI,UAAU,CAAC;AACtG;AAEA,SAAS,sBAAsB,OAA4B;AACzD,QAAM,QAAQ,MAAM;AACpB,SAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,eAAe;AAChF;AAEA,IAAM,eAAsE;AAAA,EAC1E,mCAAmC,CAAC,UAAU,UAAU,MAAM,UAAU,MAAM,kBAAkB;AAAA,EAChG,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,oBAAoB;AAAA,EACpB,oBAAoB,CAAC,UAAU,MAAM,mBAAmB;AAAA,EACxD,mBAAmB,CAAC,UAAU,MAAM,eAAe;AAAA,EACnD,4BAA4B;AAAA,EAC5B,sCAAsC,CAAC,UAAU,MAAM,QAAQ,MAAM,UAAU,KAAK,MAAM,WAAW,SAAS,wBAAwB;AACxI;AAGA,SAAS,MAAM,OAAuC,OAA4B;AAChF,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,IAAM,aAAa,oBAAI,IAAI,CAAC,UAAU,UAAU,WAAW,WAAW,CAAC;AAGvE,SAAS,aAAa,OAAkB,WAAmC;AACzE,QAAM,OAAkB,CAAC;AACzB,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,QAAI,CAAC,OAAO,OAAO,OAAO,KAAK,EAAG,OAAM,IAAI,UAAU,+BAA+B;AACrF,UAAM,OAAO,YAAY,MAAM,KAAK,GAAG,SAAS;AAChD,WAAO,eAAe,MAAM,OAAO,EAAE,OAAO,MAAM,UAAU,MAAM,YAAY,MAAM,cAAc,KAAK,CAAC;AAAA,EAC1G;AACA,SAAO;AACT;AAGA,SAAS,cAAc,OAAe,WAAiD;AACrF,MAAI,OAAO,eAAe,KAAK,MAAM,OAAO,UAAW,OAAM,IAAI,UAAU,6BAA6B;AACxG,QAAM,OAAgC,uBAAO,OAAO,IAAI;AACxD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,EAAG,MAAK,GAAG,IAAI,YAAY,OAAO,SAAS;AAC1F,SAAO;AACT;AAEA,SAAS,YAAY,OAAgB,WAAiC;AACpE,MAAI,UAAU,QAAQ,WAAW,IAAI,OAAO,KAAK,EAAG,QAAO;AAC3D,MAAI,OAAO,UAAU,YAAY,UAAU,IAAI,KAAK,EAAG,OAAM,IAAI,UAAU,wCAAwC;AACnH,YAAU,IAAI,KAAK;AACnB,QAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,aAAa,OAAO,SAAS,IAAI,cAAc,OAAO,SAAS;AACnG,YAAU,OAAO,KAAK;AACtB,SAAO;AACT;AAOO,SAAS,gBAAgB,MAA6C;AAC3E,MAAI;AACF,UAAM,OAAO,YAAY,gBAAgB,KAAK,CAAC,GAAG,oBAAI,IAAI,CAAC;AAC3D,UAAM,QAAQ,SAAS,IAAI,IAAI,KAAK,QAAQ;AAC5C,WAAO,SAAS,KAAK,IAAK,QAAkC;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,qBAAqB,YAAsC,OAAgD;AACzH,MAAI,CAAC,MAAO,QAAO,CAAC,GAAG,UAAU;AACjC,SAAO,WAAW,OAAO,CAAC,cAAc,CAAC,MAAM,aAAa,SAAS,GAAG,KAAK,CAAC;AAChF;AAGO,SAAS,gBAAgB,YAAsC,OAAoD;AACxH,SAAO,qBAAqB,YAAY,gBAAgB,MAAM,KAAK,CAAC;AACtE;;;ACtLA,SAAS,SAAS;AAGlB,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,QAAQ,EAAE,KAAK,cAAc;AAAA,EAC7B,OAAO,EAAE,KAAK,aAAa;AAAA,EAC3B,SAAS,EAAE,KAAK,QAAQ;AAAA,EACxB,WAAW,EAAE,MAAM,EAAE,KAAK,gBAAgB,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7D,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,MAAM,EAAE,MAAM,EAAE,KAAK,eAAe,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACvD,UAAU,EAAE,MAAM,EAAE,KAAK,cAAc,CAAC;AAC1C,CAAC,EACA,OAAO,CAAC,SAAU,KAAK,YAAY,YAAa,KAAK,cAAc,SAAY;AAAA,EAC9E,SAAS;AAAA,EACT,MAAM,CAAC,WAAW;AACpB,CAAC,EACA,OAAO,CAAC,SAAS,KAAK,SAAS,UAAa,KAAK,YAAY,SAAS;AAAA,EACrE,SAAS;AAAA,EACT,MAAM,CAAC,MAAM;AACf,CAAC;AASH,SAAS,cAAc,OAAoB,KAA4B;AACrE,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,MAAM,QAAQ,CAAC,MAAM,UAAU;AACnC,UAAM,OAAO,GAAG,KAAK,MAAM,OAAO,KAAK,KAAK;AAC5C,QAAI,QAAQ,IAAI,KAAK,EAAE,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,qBAAqB,KAAK,EAAE,IAAI,MAAM,CAAC,SAAS,OAAO,IAAI,EAAE,CAAC;AAChI,YAAQ,IAAI,KAAK,EAAE;AACnB,QAAI,KAAK,KAAM;AACf,QAAI,UAAU,IAAI,IAAI,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,sBAAsB,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;AACvH,cAAU,IAAI,IAAI;AAAA,EACpB,CAAC;AACD,aAAW,UAAU,gBAAgB;AACnC,eAAW,SAAS,eAAe;AACjC,UAAI,CAAC,UAAU,IAAI,GAAG,MAAM,OAAO,KAAK,EAAE,EAAG,KAAI,SAAS,EAAE,MAAM,UAAU,SAAS,eAAe,MAAM,OAAO,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AAAA,IAC7I;AAAA,EACF;AACF;AAGO,IAAM,oBAA4C,EACtD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,CAAC,EACjE,YAAY,aAAa;;;AChC5B,IAAM,kBAAmC,CAAC,gBAAgB;AAgB1D,SAAS,WAAW,SAA4C;AAC9D,QAAM,UAAmB,QAAQ;AACjC,SAAO;AAAA,IACL,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ,MAAM;AAAA,IACrB;AAAA,IACA,cAAc,OAAO,OAAO,SAAS,SAAS,KAAK,YAAY;AAAA,IAC/D,OAAO,gBAAgB,MAAO,OAAO,OAAO,SAAS,OAAO,IAAI,QAAQ,QAAQ,MAAU;AAAA,EAC5F;AACF;AAEA,SAAS,SAAS,OAAoB,UAAsC;AAC1E,QAAM,UAAU,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,WAAW,SAAS,UAAU,KAAK,UAAU,SAAS,KAAK;AAC7G,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,QAAQ,OAAO,CAAC,cAAc,UAAU,IAAI,GAAG;AAChE,QAAI,CAAC,SAAS,cAAc;AAC1B,YAAM,KAAK,GAAG,KAAK,EAAE,gCAAgC;AACrD;AAAA,IACF;AACA,UAAM,SAAS,qBAAqB,KAAK,QAAQ,CAAC,GAAG,SAAS,KAAK;AACnE,QAAI,OAAO,WAAW,EAAG,QAAO,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,UAAM,KAAK,GAAG,KAAK,EAAE,WAAW,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,EACrD;AACA,SAAO,EAAE,MAAM,QAAQ,KAAK,CAAC,cAAc,CAAC,UAAU,IAAI,GAAG,MAAM;AACrE;AAEA,SAAS,UAAU,QAAgB,OAAyB;AAC1D,SAAO,MAAM,WAAW,IAAI,SAAS,GAAG,MAAM,KAAK,MAAM,KAAK,IAAI,CAAC;AACrE;AAGO,SAAS,SAAS,OAAoB,SAAqC;AAChF,QAAM,WAAW,WAAW,OAAO;AACnC,QAAM,EAAE,QAAQ,MAAM,IAAI;AAC1B,QAAM,EAAE,MAAM,MAAM,IAAI,SAAS,OAAO,QAAQ;AAChD,MAAI,CAAC,KAAM,QAAO,EAAE,SAAS,QAAQ,QAAQ,MAAM,QAAQ,eAAe,MAAM,OAAO,KAAK,GAAG;AAC/F,MAAI,KAAK,YAAY,OAAQ,QAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,QAAQ,UAAU,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,IAAI,KAAK,EAAE;AAC5I,MAAI,KAAK,YAAY,QAAQ;AAC3B,UAAM,SAAS,UAAU,GAAG,KAAK,EAAE,UAAU,MAAM,OAAO,KAAK,IAAI,KAAK;AACxE,WAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,WAAW,CAAC,GAAI,KAAK,aAAa,CAAC,CAAE,GAAG,OAAO;AAAA,EAC5F;AACA,MAAI,SAAS,WAAW,KAAK,gBAAgB;AAC3C,WAAO,EAAE,SAAS,QAAQ,QAAQ,KAAK,IAAI,WAAW,CAAC,GAAG,eAAe,GAAG,QAAQ,GAAG,KAAK,EAAE,UAAU,MAAM,iBAAiB,KAAK,GAAG;AAAA,EACzI;AACA,SAAO,EAAE,SAAS,SAAS,QAAQ,KAAK,GAAG;AAC7C;AAEA,SAAS,cAAc,MAAsC;AAC3D,MAAI,KAAK,YAAY,OAAQ,QAAO,KAAK,aAAa,CAAC;AACvD,MAAI,KAAK,YAAY,WAAW,KAAK,eAAgB,QAAO;AAC5D,SAAO,CAAC;AACV;AAEA,SAAS,gBAAgB,YAAqD;AAC5E,SAAQ,iBAAuC,SAAS,UAAU;AACpE;AAGO,SAAS,WAAW,OAAoB,QAAgB,UAA4D;AACzH,MAAI,SAAS,WAAW,CAAC,gBAAgB,SAAS,KAAK,EAAG,QAAO;AACjE,QAAM,OAAO,MAAM,MAAM,KAAK,CAAC,cAAc,UAAU,OAAO,MAAM;AACpE,SAAO,SAAS,UAAa,cAAc,IAAI,EAAE,SAAS,SAAS,KAAK;AAC1E;;;AClGA;AAAA,EACE,SAAW;AAAA,EACX,OAAS;AAAA,IACP;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MACA,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,MAAQ;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA,UAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,gBAAkB;AAAA,MAClB,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,gBAAkB;AAAA,MAClB,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY,CAAC;AAAA,IACf;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,QACX;AAAA,MACF;AAAA,MACA,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAM;AAAA,MACN,QAAU;AAAA,MACV,OAAS;AAAA,MACT,SAAW;AAAA,MACX,WAAa;AAAA,MACb,UAAY;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACn3BO,IAAM,gBAA6B,kBAAkB,MAAM,aAAS;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@titan-design/authority",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The authority decision table as data: who may merge, release, read secrets, spawn or actuate hardware, with a pure evaluator",
   "type": "module",
   "main": "./dist/index.js",

package/src/table.json

@@ -71,6 +71,28 @@
         "E-gh"
       ]
     },
+    {
+      "id": "MRG-AU-RV",
+      "action": "merge",
+      "actor": "automation",
+      "verdict": "allow",
+      "condition": "Owner decision D-A, all seats: the run-dispatched reviewer's MERGE verdict at the exact head, with required check runs green from the allowed apps, stands in for the owner's tap. A trusted collector, never the requester, observes the facts; its changed paths include both sides of every rename. A tainted request never matches. Otherwise MRG-AU gates.",
+      "when": [
+        "resolver-is-dispatched-reviewer",
+        "verdict-merge-at-head",
+        "required-contexts-green",
+        "no-non-green-run",
+        "merge-tree-clean",
+        "repo-not-frozen",
+        "no-protected-path-change",
+        "seat-grants-merge-on-green-approve"
+      ],
+      "evidence": [
+        "E-gate",
+        "E-gh",
+        "E-rev"
+      ]
+    },
     {
       "id": "REL-OT",
       "action": "release",