@wildorder/nightshift 0.13.0 → 0.15.0

package/dist/permits.d.ts

@@ -0,0 +1,135 @@
+import type { AgentConfig, NightshiftConfig, PermitsConfig } from "./config.js";
+/**
+ * The permission posture nightshift derives for each agent spawn — from the
+ * agent's role, the provider it runs, and the host it runs on — replacing
+ * the hand-written `--permission-mode`/`--allowedTools` flags an operator
+ * used to maintain by hand. See docs/programs's WS-01 spec for the full
+ * design: this module builds no judge of its own, it only chooses among
+ * containments the providers already ship (claude's `auto` classifier and
+ * OS sandbox, codex's workspace-write sandbox).
+ */
+/** The five spawn seats; postures are fixed, never configured. */
+export type AgentRole = "agent" | "recoveryAgent" | "authorAgent" | "deciderAgent" | "reviewerAgent";
+export type Posture = "workspace" | "read-only";
+/**
+ * Fixed per-role postures — mirrors the write/exec split `agent-probe.ts`
+ * already encoded as WRITE_ROLES/EXEC_ROLES. Exported so the probe sources
+ * its write/read split from here rather than keeping a second copy that can
+ * drift.
+ */
+export declare const ROLE_POSTURE: Record<AgentRole, Posture>;
+/**
+ * The containment/mode label rendered on the `permissions:` startup line and
+ * the doctor probe. `unmanaged` covers a provider this module has no flag
+ * vocabulary for (gemini, cursor-agent, …) — SC-07's seven labels are all
+ * claude/codex-specific; this is the honest label for everything else.
+ */
+export type ContainmentLabel = "ephemeral" | "auto+sandbox" | "auto" | "read-only" | "operator-configured" | "fallback (acceptEdits+verify)" | "fallback (detection failed)" | "read-only fallback (default+verify)" | "read-only fallback (detection failed)" | "unmanaged";
+export interface DerivedInvocation {
+    /** Same command/promptMode; args carry the derived flags appended, or are untouched when operator-configured. */
+    agent: AgentConfig;
+    label: ContainmentLabel;
+    operatorConfigured: boolean;
+    /** The settings file this invocation reads, when one applies (claude only). */
+    settingsPath?: string;
+    /** An extra sentence for the startup line — e.g. codex's deny-rules caveat. */
+    note?: string;
+}
+/**
+ * True when the agent's own args already carry a permission-bearing flag —
+ * `--flag value` and `--flag=value` both match. An agent that trips this is
+ * spawned untouched and labeled operator-configured; rewriting an operator's
+ * authored flags is the override the charter forbids.
+ */
+export declare function hasExplicitPermissionFlag(agent: AgentConfig): boolean;
+/** One `--allowedTools`/settings allow entry per configured verify command. Relocated from verify-allowlist.ts. */
+export declare function claudeVerifyAllowedTools(verify: Record<string, string>): string[];
+/** The workspace settings file: verify rules + permits.allow/deny, plus a sandbox block on darwin/linux. */
+export declare function workspaceSettingsContent(verify: Record<string, string>, permits: PermitsConfig | undefined, platform: NodeJS.Platform): string;
+/** The read-only settings file: same allow/deny lists, never a sandbox block. */
+export declare function readOnlySettingsContent(verify: Record<string, string>, permits: PermitsConfig | undefined): string;
+export interface ClaudeCapabilities {
+    /** False when `--help` could not be run at all (not on PATH, spawn error). */
+    detected: boolean;
+    autoMode: boolean;
+    dontAskMode: boolean;
+    permissionPrompts: boolean;
+}
+/** Injectable boundary: resolves to the CLI's `--help` text, rejects on spawn failure. */
+export type ClaudeHelpRunner = (command: string) => Promise<string>;
+/**
+ * Turns a finished `--help` spawn into its text or a rejection. Exported so
+ * the nonzero-exit-code case (a `claude` on PATH that fails, rather than a
+ * missing command) is unit-testable without an actual child process: a
+ * nonzero exit must be reported as a detection failure, never parsed as if
+ * it were successful help output.
+ */
+export declare function helpRunnerOutcome(code: number | null, output: string): string;
+export declare const defaultClaudeHelpRunner: ClaudeHelpRunner;
+/** Parses `claude --help` text into capabilities. Exported for fixture-driven tests. */
+export declare function parseClaudeHelp(helpText: string): ClaudeCapabilities;
+export declare function detectClaudeCapabilities(command: string, helpRunner?: ClaudeHelpRunner): Promise<ClaudeCapabilities>;
+/** Test-only: clears the process-wide capability cache between fixture scenarios. */
+export declare function resetClaudeCapabilityCacheForTests(): void;
+export interface DerivationInput {
+    role: AgentRole;
+    agent: AgentConfig;
+    /** Raw `NIGHTSHIFT_CONTAINMENT` value; only `"ephemeral"` has meaning. */
+    containmentEnv: string | undefined;
+    platform: NodeJS.Platform;
+    /** Undefined for a non-claude command — capabilities are claude-specific. */
+    claudeCapabilities: ClaudeCapabilities | undefined;
+    workspaceSettingsPath: string;
+    readOnlySettingsPath: string;
+}
+/**
+ * The whole derivation, pure: role + posture + containment + capabilities +
+ * the agent's existing args -> the flags to spawn with. No I/O — capability
+ * detection and the settings-file write happen in the context builder below.
+ */
+export declare function deriveAgentInvocation(input: DerivationInput): DerivedInvocation;
+export interface PermitsContext {
+    workspaceSettingsPath: string;
+    readOnlySettingsPath: string;
+    derive(role: AgentRole, agent: AgentConfig): Promise<DerivedInvocation>;
+    /**
+     * Removes the settings files this context wrote. The owner of a context
+     * (the command that built it) calls this when its spawns are done; a
+     * process-exit hook removes whatever an owner never got to, so a crash or
+     * an early return does not leave the pair behind in the OS temp directory.
+     * Optional so a test fake that only implements `derive` stays a valid
+     * context; owners call it as `permits.dispose?.()`.
+     */
+    dispose?(): Promise<void>;
+}
+/** Injectable filesystem boundary for the settings-file write and removal. */
+export interface PermitsFs {
+    writeFile(path: string, content: string): Promise<void>;
+    /** Optional so a write-capturing fake stays valid; removal is then a no-op. */
+    rm?(path: string): Promise<void>;
+}
+export interface BuildPermitsContextOptions {
+    config: NightshiftConfig;
+    platform?: NodeJS.Platform;
+    /** Defaults to `process.env.NIGHTSHIFT_CONTAINMENT`. */
+    containmentEnv?: string | undefined;
+    helpRunner?: ClaudeHelpRunner;
+    fs?: PermitsFs;
+}
+/**
+ * Builds the run's (or doctor probe's, or as-built refresh's) one
+ * `PermitsContext`: writes the two settings files once under `os.tmpdir()`
+ * and returns a `derive` function that detects claude's capabilities on
+ * first use per command string and applies the pure derivation above.
+ */
+export declare function buildPermitsContext(options: BuildPermitsContextOptions): Promise<PermitsContext>;
+/**
+ * A context that appends nothing and detects nothing — the injectable
+ * default for options that accept `permits` optionally, so a test exercising
+ * unrelated logic spawns exactly as it did before this workstream. Every
+ * real entry point (`run`, `doctor --agents`, `nightshift author`,
+ * `nightshift as-built`/`publish`) builds and passes a real context instead
+ * of relying on this default.
+ */
+export declare const NOOP_PERMITS_CONTEXT: PermitsContext;
+//# sourceMappingURL=permits.d.ts.map

package/dist/permits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permits.d.ts","sourceRoot":"","sources":["../src/permits.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhF;;;;;;;;GAQG;AAEH,kEAAkE;AAClE,MAAM,MAAM,SAAS,GACjB,OAAO,GACP,eAAe,GACf,aAAa,GACb,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,MAAM,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAMnD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,cAAc,GACd,MAAM,GACN,WAAW,GACX,qBAAqB,GACrB,+BAA+B,GAC/B,6BAA6B,GAC7B,qCAAqC,GACrC,uCAAuC,GACvC,WAAW,CAAC;AAEhB,MAAM,WAAW,iBAAiB;IAChC,iHAAiH;IACjH,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAkDD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAOrE;AAMD,mHAAmH;AACnH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAEjF;AAYD,4GAA4G;AAC5G,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB,MAAM,CAOR;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,EAAE,aAAa,GAAG,SAAS,GACjC,MAAM,CAGR;AAMD,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AASD,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED,eAAO,MAAM,uBAAuB,EAAE,gBAmBlC,CAAC;AAWL,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAQpE;AAUD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,gBAA0C,GACrD,OAAO,CAAC,kBAAkB,CAAC,CAO7B;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAMD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;IACnB,0EAA0E;IAC1E,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,6EAA6E;IAC7E,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACnD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAkHD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB,CAS/E;AAMD,MAAM,WAAW,cAAc;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxE;;;;;;;OAOG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,+EAA+E;IAC/E,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAgCD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,EAAE,CAAC,EAAE,SAAS,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAkDzB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,cASlC,CAAC"}

package/dist/permits.js

@@ -0,0 +1,397 @@
+import { randomBytes } from "node:crypto";
+import { rmSync } from "node:fs";
+import { rm as nodeRm, writeFile as nodeWriteFile } from "node:fs/promises";
+import { platform as osPlatform, tmpdir } from "node:os";
+import { join } from "node:path";
+import crossSpawn from "cross-spawn";
+/**
+ * Fixed per-role postures — mirrors the write/exec split `agent-probe.ts`
+ * already encoded as WRITE_ROLES/EXEC_ROLES. Exported so the probe sources
+ * its write/read split from here rather than keeping a second copy that can
+ * drift.
+ */
+export const ROLE_POSTURE = {
+    agent: "workspace",
+    recoveryAgent: "workspace",
+    authorAgent: "workspace",
+    deciderAgent: "read-only",
+    reviewerAgent: "read-only",
+};
+// ---------------------------------------------------------------------------
+// Explicit flags win (SC-05)
+// ---------------------------------------------------------------------------
+const CLAUDE_PERMISSION_FLAGS = [
+    "--permission-mode",
+    "--allowedTools",
+    "--allowed-tools",
+    "--disallowedTools",
+    "--dangerously-skip-permissions",
+    "--settings",
+];
+const CODEX_SANDBOX_FLAG = "--sandbox";
+function permissionFlagsFor(command) {
+    if (command === "claude")
+        return CLAUDE_PERMISSION_FLAGS;
+    if (command === "codex")
+        return [CODEX_SANDBOX_FLAG];
+    return [];
+}
+// ---------------------------------------------------------------------------
+// Command transcript observability (WS-02)
+// ---------------------------------------------------------------------------
+const OUTPUT_FORMAT_FLAG = "--output-format";
+/** True when the agent's own args already pin an output format — an operator
+ *  who chose one (stream-json or otherwise) keeps it untouched. */
+function hasOutputFormatFlag(agent) {
+    return agent.args.some((arg) => {
+        const token = arg.includes("=") ? arg.slice(0, arg.indexOf("=")) : arg;
+        return token === OUTPUT_FORMAT_FLAG;
+    });
+}
+/**
+ * The two flags that turn a Claude spawn's stdout into the NDJSON stream
+ * `src/agent-runner.ts`'s demultiplexer reads (WS-02). `--verbose` is
+ * required alongside `--output-format stream-json`: in print mode the CLI
+ * emits only the final result event unless `--verbose` is set, and the
+ * demultiplexer needs the intermediate `tool_use` events. Empty when the
+ * agent already pins its own output format — this derivation only adds
+ * flags, it never overrides one an operator wrote.
+ */
+function observabilityFlags(agent) {
+    return hasOutputFormatFlag(agent) ? [] : [OUTPUT_FORMAT_FLAG, "stream-json", "--verbose"];
+}
+/**
+ * True when the agent's own args already carry a permission-bearing flag —
+ * `--flag value` and `--flag=value` both match. An agent that trips this is
+ * spawned untouched and labeled operator-configured; rewriting an operator's
+ * authored flags is the override the charter forbids.
+ */
+export function hasExplicitPermissionFlag(agent) {
+    const flags = permissionFlagsFor(agent.command);
+    if (flags.length === 0)
+        return false;
+    return agent.args.some((arg) => {
+        const token = arg.includes("=") ? arg.slice(0, arg.indexOf("=")) : arg;
+        return flags.includes(token);
+    });
+}
+// ---------------------------------------------------------------------------
+// permits config -> settings file content
+// ---------------------------------------------------------------------------
+/** One `--allowedTools`/settings allow entry per configured verify command. Relocated from verify-allowlist.ts. */
+export function claudeVerifyAllowedTools(verify) {
+    return Object.values(verify).map((command) => `Bash(${command}:*)`);
+}
+function baseAllowDeny(verify, permits) {
+    return {
+        allow: [...claudeVerifyAllowedTools(verify), ...(permits?.allow ?? [])],
+        deny: [...(permits?.deny ?? [])],
+    };
+}
+/** The workspace settings file: verify rules + permits.allow/deny, plus a sandbox block on darwin/linux. */
+export function workspaceSettingsContent(verify, permits, platform) {
+    const { allow, deny } = baseAllowDeny(verify, permits);
+    const settings = { permissions: { allow, deny } };
+    if (platform === "darwin" || platform === "linux") {
+        settings.sandbox = { enabled: true, autoAllowBashIfSandboxed: true };
+    }
+    return JSON.stringify(settings, null, 2);
+}
+/** The read-only settings file: same allow/deny lists, never a sandbox block. */
+export function readOnlySettingsContent(verify, permits) {
+    const { allow, deny } = baseAllowDeny(verify, permits);
+    return JSON.stringify({ permissions: { allow, deny } }, null, 2);
+}
+const UNDETECTED_CAPABILITIES = {
+    detected: false,
+    autoMode: false,
+    dontAskMode: false,
+    permissionPrompts: false,
+};
+/**
+ * Turns a finished `--help` spawn into its text or a rejection. Exported so
+ * the nonzero-exit-code case (a `claude` on PATH that fails, rather than a
+ * missing command) is unit-testable without an actual child process: a
+ * nonzero exit must be reported as a detection failure, never parsed as if
+ * it were successful help output.
+ */
+export function helpRunnerOutcome(code, output) {
+    if (code === 0)
+        return output;
+    throw new Error(`claude --help exited with code ${code ?? "null"}: ${output.slice(0, 500)}`);
+}
+export const defaultClaudeHelpRunner = (command) => new Promise((resolvePromise, rejectPromise) => {
+    let output = "";
+    const child = crossSpawn(command, ["--help"], {
+        windowsHide: true,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    child.stdout?.setEncoding("utf8");
+    child.stderr?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => (output += chunk));
+    child.stderr?.on("data", (chunk) => (output += chunk));
+    child.on("error", rejectPromise);
+    child.on("close", (code) => {
+        try {
+            resolvePromise(helpRunnerOutcome(code, output));
+        }
+        catch (error) {
+            rejectPromise(error);
+        }
+    });
+});
+/** The `--permission-mode` option's own text, up to the next `--flag` line. */
+function optionBlock(helpText, flag) {
+    const idx = helpText.indexOf(flag);
+    if (idx === -1)
+        return "";
+    const rest = helpText.slice(idx + flag.length);
+    const stop = rest.match(/\n[^\S\r\n]*--/u);
+    return stop?.index === undefined ? rest : rest.slice(0, stop.index);
+}
+/** Parses `claude --help` text into capabilities. Exported for fixture-driven tests. */
+export function parseClaudeHelp(helpText) {
+    const modeBlock = optionBlock(helpText, "--permission-mode");
+    return {
+        detected: true,
+        autoMode: /"auto"/u.test(modeBlock),
+        dontAskMode: /"dontAsk"/u.test(modeBlock),
+        permissionPrompts: /--permission-prompts\b/u.test(helpText),
+    };
+}
+/**
+ * Detects once per process per resolved command string, caching the promise
+ * so concurrent derivations for the same command share one spawn. Detection
+ * failure (not on PATH, a throwing help runner) is reported as
+ * `detected: false`, never thrown — the derivation then takes the fallback.
+ */
+const capabilityCache = new Map();
+export function detectClaudeCapabilities(command, helpRunner = defaultClaudeHelpRunner) {
+    let cached = capabilityCache.get(command);
+    if (!cached) {
+        cached = helpRunner(command).then(parseClaudeHelp).catch(() => UNDETECTED_CAPABILITIES);
+        capabilityCache.set(command, cached);
+    }
+    return cached;
+}
+/** Test-only: clears the process-wide capability cache between fixture scenarios. */
+export function resetClaudeCapabilityCacheForTests() {
+    capabilityCache.clear();
+}
+function deriveClaude(input) {
+    const { agent, role, containmentEnv, platform, claudeCapabilities, workspaceSettingsPath, readOnlySettingsPath } = input;
+    const posture = ROLE_POSTURE[role];
+    const caps = claudeCapabilities ?? UNDETECTED_CAPABILITIES;
+    const observability = observabilityFlags(agent);
+    if (posture === "read-only") {
+        if (caps.dontAskMode) {
+            const args = [...agent.args, "--permission-mode", "dontAsk", "--settings", readOnlySettingsPath];
+            if (caps.permissionPrompts)
+                args.push("--permission-prompts", "none");
+            args.push(...observability);
+            return {
+                agent: { ...agent, args },
+                label: "read-only",
+                operatorConfigured: false,
+                settingsPath: readOnlySettingsPath,
+            };
+        }
+        const args = [
+            ...agent.args,
+            "--permission-mode",
+            "default",
+            "--settings",
+            readOnlySettingsPath,
+            ...observability,
+        ];
+        return {
+            agent: { ...agent, args },
+            label: caps.detected ? "read-only fallback (default+verify)" : "read-only fallback (detection failed)",
+            operatorConfigured: false,
+            settingsPath: readOnlySettingsPath,
+        };
+    }
+    // workspace posture
+    if (containmentEnv === "ephemeral") {
+        const args = [
+            ...agent.args,
+            "--dangerously-skip-permissions",
+            "--settings",
+            workspaceSettingsPath,
+            ...observability,
+        ];
+        return {
+            agent: { ...agent, args },
+            label: "ephemeral",
+            operatorConfigured: false,
+            settingsPath: workspaceSettingsPath,
+        };
+    }
+    if (caps.autoMode) {
+        const args = [...agent.args, "--permission-mode", "auto", "--settings", workspaceSettingsPath];
+        if (caps.permissionPrompts)
+            args.push("--permission-prompts", "none");
+        args.push(...observability);
+        const sandboxed = platform === "darwin" || platform === "linux";
+        return {
+            agent: { ...agent, args },
+            label: sandboxed ? "auto+sandbox" : "auto",
+            operatorConfigured: false,
+            settingsPath: workspaceSettingsPath,
+        };
+    }
+    const args = [
+        ...agent.args,
+        "--permission-mode",
+        "acceptEdits",
+        "--settings",
+        workspaceSettingsPath,
+        ...observability,
+    ];
+    return {
+        agent: { ...agent, args },
+        label: caps.detected ? "fallback (acceptEdits+verify)" : "fallback (detection failed)",
+        operatorConfigured: false,
+        settingsPath: workspaceSettingsPath,
+    };
+}
+const CODEX_DENY_NOTE = "codex has no per-command deny rules; permits.deny does not bind on this seat.";
+function deriveCodex(input) {
+    const { agent, role, containmentEnv, platform } = input;
+    const posture = ROLE_POSTURE[role];
+    if (posture === "read-only") {
+        // Said explicitly, never assumed: `codex exec` ships read-only by
+        // default, but a user config can widen that default (a Windows
+        // `sandbox = "elevated"` setting, a trusted-project entry), and a seat
+        // labeled read-only that can write is the legibility failure this
+        // module exists to prevent. Independent of containment — a read-only
+        // seat has no reason to escalate on an ephemeral host either.
+        const args = [...agent.args, "--sandbox", "read-only"];
+        return { agent: { ...agent, args }, label: "read-only", operatorConfigured: false, note: CODEX_DENY_NOTE };
+    }
+    if (containmentEnv === "ephemeral") {
+        // Left at its own sandbox — an ephemeral host has no reason to escalate
+        // codex further, and codex ships no skip-permissions equivalent.
+        return { agent, label: "ephemeral", operatorConfigured: false, note: CODEX_DENY_NOTE };
+    }
+    const args = [...agent.args, "--sandbox", "workspace-write"];
+    const sandboxed = platform === "darwin" || platform === "linux";
+    return {
+        agent: { ...agent, args },
+        label: sandboxed ? "auto+sandbox" : "auto",
+        operatorConfigured: false,
+        note: CODEX_DENY_NOTE,
+    };
+}
+/**
+ * The whole derivation, pure: role + posture + containment + capabilities +
+ * the agent's existing args -> the flags to spawn with. No I/O — capability
+ * detection and the settings-file write happen in the context builder below.
+ */
+export function deriveAgentInvocation(input) {
+    if (hasExplicitPermissionFlag(input.agent)) {
+        return { agent: input.agent, label: "operator-configured", operatorConfigured: true };
+    }
+    if (input.agent.command === "claude")
+        return deriveClaude(input);
+    if (input.agent.command === "codex")
+        return deriveCodex(input);
+    // Any other provider: no known flag vocabulary — deriving the wrong flag
+    // is worse than deriving none.
+    return { agent: input.agent, label: "unmanaged", operatorConfigured: false };
+}
+const realPermitsFs = {
+    writeFile: (path, content) => nodeWriteFile(path, content, "utf8"),
+    rm: (path) => nodeRm(path, { force: true }),
+};
+/**
+ * Settings files written by contexts that have not been disposed yet. One
+ * exit hook, registered on first use, removes them synchronously — the only
+ * kind of work an `exit` handler can do — so a run that crashes mid-way, a
+ * test process, or a command that never reaches its own dispose still leaves
+ * the temp directory as it found it.
+ */
+const undisposedSettingsPaths = new Set();
+let exitHookRegistered = false;
+function registerExitCleanup() {
+    if (exitHookRegistered)
+        return;
+    exitHookRegistered = true;
+    process.on("exit", () => {
+        for (const path of undisposedSettingsPaths) {
+            try {
+                rmSync(path, { force: true });
+            }
+            catch {
+                // Best effort at exit; nothing useful can be reported from here.
+            }
+        }
+        undisposedSettingsPaths.clear();
+    });
+}
+/**
+ * Builds the run's (or doctor probe's, or as-built refresh's) one
+ * `PermitsContext`: writes the two settings files once under `os.tmpdir()`
+ * and returns a `derive` function that detects claude's capabilities on
+ * first use per command string and applies the pure derivation above.
+ */
+export async function buildPermitsContext(options) {
+    const platform = options.platform ?? osPlatform();
+    const containmentEnv = options.containmentEnv ?? process.env.NIGHTSHIFT_CONTAINMENT;
+    const helpRunner = options.helpRunner ?? defaultClaudeHelpRunner;
+    const fs = options.fs ?? realPermitsFs;
+    const nonce = randomBytes(4).toString("hex");
+    const workspaceSettingsPath = join(tmpdir(), `nightshift-permits-${nonce}-workspace.json`);
+    const readOnlySettingsPath = join(tmpdir(), `nightshift-permits-${nonce}-read-only.json`);
+    await fs.writeFile(workspaceSettingsPath, workspaceSettingsContent(options.config.verify, options.config.permits, platform));
+    await fs.writeFile(readOnlySettingsPath, readOnlySettingsContent(options.config.verify, options.config.permits));
+    // Only real files are tracked for exit cleanup; an injected fake fs wrote
+    // nowhere the hook could (or should) remove.
+    const tracked = options.fs === undefined;
+    if (tracked) {
+        registerExitCleanup();
+        undisposedSettingsPaths.add(workspaceSettingsPath);
+        undisposedSettingsPaths.add(readOnlySettingsPath);
+    }
+    return {
+        workspaceSettingsPath,
+        readOnlySettingsPath,
+        async dispose() {
+            for (const path of [workspaceSettingsPath, readOnlySettingsPath]) {
+                undisposedSettingsPaths.delete(path);
+                await fs.rm?.(path);
+            }
+        },
+        async derive(role, agent) {
+            const claudeCapabilities = agent.command === "claude" ? await detectClaudeCapabilities(agent.command, helpRunner) : undefined;
+            return deriveAgentInvocation({
+                role,
+                agent,
+                containmentEnv,
+                platform,
+                claudeCapabilities,
+                workspaceSettingsPath,
+                readOnlySettingsPath,
+            });
+        },
+    };
+}
+/**
+ * A context that appends nothing and detects nothing — the injectable
+ * default for options that accept `permits` optionally, so a test exercising
+ * unrelated logic spawns exactly as it did before this workstream. Every
+ * real entry point (`run`, `doctor --agents`, `nightshift author`,
+ * `nightshift as-built`/`publish`) builds and passes a real context instead
+ * of relying on this default.
+ */
+export const NOOP_PERMITS_CONTEXT = {
+    workspaceSettingsPath: "",
+    readOnlySettingsPath: "",
+    derive(_role, agent) {
+        return Promise.resolve({ agent, label: "operator-configured", operatorConfigured: true });
+    },
+    dispose() {
+        return Promise.resolve();
+    },
+};
+//# sourceMappingURL=permits.js.map

package/dist/permits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permits.js","sourceRoot":"","sources":["../src/permits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,UAAU,MAAM,aAAa,CAAC;AAuBrC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA+B;IACtD,KAAK,EAAE,WAAW;IAClB,aAAa,EAAE,WAAW;IAC1B,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,WAAW;IACzB,aAAa,EAAE,WAAW;CAC3B,CAAC;AA+BF,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,uBAAuB,GAAG;IAC9B,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,gCAAgC;IAChC,YAAY;CACb,CAAC;AACF,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAEvC,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IACzD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C;mEACmE;AACnE,SAAS,mBAAmB,CAAC,KAAkB;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,KAAK,KAAK,kBAAkB,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAkB;IAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,mHAAmH;AACnH,MAAM,UAAU,wBAAwB,CAAC,MAA8B;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CACpB,MAA8B,EAC9B,OAAkC;IAElC,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,wBAAwB,CACtC,MAA8B,EAC9B,OAAkC,EAClC,QAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAA4B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IAC3E,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClD,QAAQ,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CACrC,MAA8B,EAC9B,OAAkC;IAElC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAcD,MAAM,uBAAuB,GAAuB;IAClD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK;IAClB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAKF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,MAAc;IACnE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAqB,CAAC,OAAO,EAAE,EAAE,CACnE,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;IAC5C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC5C,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,cAAc,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,KAAc,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,+EAA+E;AAC/E,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3C,OAAO,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,iBAAiB,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEvE,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,aAA+B,uBAAuB;IAEtD,IAAI,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;QACxF,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kCAAkC;IAChD,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAkBD,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAC9G,KAAK,CAAC;IACR,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,kBAAkB,IAAI,uBAAuB,CAAC;IAC3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEhD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;YACjG,IAAI,IAAI,CAAC,iBAAiB;gBAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;gBACzB,KAAK,EAAE,WAAW;gBAClB,kBAAkB,EAAE,KAAK;gBACzB,YAAY,EAAE,oBAAoB;aACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,mBAAmB;YACnB,SAAS;YACT,YAAY;YACZ,oBAAoB;YACpB,GAAG,aAAa;SACjB,CAAC;QACF,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,uCAAuC;YACtG,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,oBAAoB;SACnC,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,gCAAgC;YAChC,YAAY;YACZ,qBAAqB;YACrB,GAAG,aAAa;SACjB,CAAC;QACF,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,WAAW;YAClB,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,qBAAqB;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,iBAAiB;YAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;YACzB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;YAC1C,kBAAkB,EAAE,KAAK;YACzB,YAAY,EAAE,qBAAqB;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,KAAK,CAAC,IAAI;QACb,mBAAmB;QACnB,aAAa;QACb,YAAY;QACZ,qBAAqB;QACrB,GAAG,aAAa;KACjB,CAAC;IACF,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,6BAA6B;QACtF,kBAAkB,EAAE,KAAK;QACzB,YAAY,EAAE,qBAAqB;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,+EAA+E,CAAC;AAExG,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,kEAAkE;QAClE,+DAA+D;QAC/D,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7G,CAAC;IAED,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,wEAAwE;QACxE,iEAAiE;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC;IAChE,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE;QACzB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;QAC1C,kBAAkB,EAAE,KAAK;QACzB,IAAI,EAAE,eAAe;KACtB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,IAAI,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/D,yEAAyE;IACzE,+BAA+B;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;AAC/E,CAAC;AA4BD,MAAM,aAAa,GAAc;IAC/B,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;IAClE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;CAC5C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;AAClD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,SAAS,mBAAmB;IAC1B,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,uBAAuB,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,uBAAuB,CAAC;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,aAAa,CAAC;IAEvC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAC3F,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,KAAK,iBAAiB,CAAC,CAAC;IAE1F,MAAM,EAAE,CAAC,SAAS,CAChB,qBAAqB,EACrB,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAClF,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAChB,oBAAoB,EACpB,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CACvE,CAAC;IACF,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,mBAAmB,EAAE,CAAC;QACtB,uBAAuB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnD,uBAAuB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,qBAAqB;QACrB,oBAAoB;QACpB,KAAK,CAAC,OAAO;YACX,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACjE,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK;YACtB,MAAM,kBAAkB,GACtB,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrG,OAAO,qBAAqB,CAAC;gBAC3B,IAAI;gBACJ,KAAK;gBACL,cAAc;gBACd,QAAQ;gBACR,kBAAkB;gBAClB,qBAAqB;gBACrB,oBAAoB;aACrB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,qBAAqB,EAAE,EAAE;IACzB,oBAAoB,EAAE,EAAE;IACxB,MAAM,CAAC,KAAK,EAAE,KAAK;QACjB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACL,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC"}

package/dist/publish.d.ts

@@ -55,6 +55,17 @@ export interface GhClient {
     updateComment(cwd: string, commentId: string, body: string): Promise<void>;
     /** Removes a now-stale nightshift-authored comment. */
     deleteComment(cwd: string, commentId: string): Promise<void>;
+    /**
+     * GitHub's mergeability computation for a PR, as raw gh strings. `mergeable`
+     * is one of MERGEABLE | CONFLICTING | UNKNOWN; `mergeStateStatus` is the
+     * fuller state (CLEAN | DIRTY | BLOCKED | BEHIND | DRAFT | UNSTABLE |
+     * HAS_HOOKS | UNKNOWN). Normalization and the UNKNOWN retry live in
+     * `publish`, not here, so the boundary stays thin and the retry is testable.
+     */
+    viewMergeability(cwd: string, prNumber: number): Promise<{
+        mergeable: string;
+        mergeStateStatus: string;
+    }>;
 }
 /**
  * Git operations `publish` needs beyond `program-branch.ts`'s derivation —
@@ -112,7 +123,23 @@ export interface PublishOptions {
     /** Passed straight through to the pre-publish as-built refresh; default reviewer runner. */
     agentRunner?: AgentRunner;
     log?: (line: string) => void;
+    /** Injected for tests so the UNKNOWN retry does not actually wait. */
+    sleep?: (ms: number) => Promise<void>;
 }
+/** GitHub's answer to "does this PR merge cleanly into its base?" */
+export type MergeableState = "mergeable" | "conflicting" | "unknown";
+/** What the pre-publish base sync did. */
+export type BaseSyncOutcome = {
+    status: "up-to-date";
+} | {
+    status: "merged";
+} | {
+    status: "conflict";
+    paths: string[];
+} | {
+    status: "skipped";
+    reason: string;
+};
 export interface PublishResult {
     prNumber: number;
     prUrl: string;
@@ -121,7 +148,15 @@ export interface PublishResult {
     escalationComments: number;
     /** Report-continuation comments upserted this publish (0 when the report fits). */
     continuationComments: number;
+    /** GitHub's mergeable state for the upserted PR (SC-07). */
+    mergeable: MergeableState;
+    /** What the pre-publish base sync did (SC-08). */
+    baseSync: BaseSyncOutcome;
 }
+/** The named `nightshift publish` / `nightshift run --publish` mergeability line (SC-07). */
+export declare function mergeabilityLine(mergeable: MergeableState): string;
+/** The named `nightshift publish` / `nightshift run --publish` base-sync line (SC-08). */
+export declare function baseSyncLine(baseSync: BaseSyncOutcome): string;
 interface ReportChunk {
     /** A verbatim, contiguous slice of the report — never rewritten or decorated. */
     payload: string;

package/dist/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAchE;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAa3C,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;OAKG;IACH,mBAAmB,CACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACtC,wEAAwE;IACxE,sBAAsB,CACpB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC7E,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,kFAAkF;IAClF,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,uDAAuD;IACvD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,8FAA8F;IAC9F,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;;;OAMG;IACH,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CACN;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,GACxB;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,GACpB;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAC1C,CAAC;IACF,yEAAyE;IACzE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,sFAAsF;IACtF,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,gEAAgE;IAChE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAsCD,eAAO,MAAM,iBAAiB,EAAE,UA6F/B,CAAC;AA0EF,eAAO,MAAM,eAAe,EAAE,QAiL7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,sDAAsD;IACtD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,4FAA4F;IAC5F,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAID,UAAU,WAAW;IACnB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,EAAE,OAAO,CAAC;CACxB;AA8FD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAmCnE;AAgPD,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAgH7E"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAchE;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAa3C,MAAM,WAAW,SAAS;IACxB,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpC,mEAAmE;IACnE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;OAKG;IACH,mBAAmB,CACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IACtC,wEAAwE;IACxE,sBAAsB,CACpB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC7E,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,kFAAkF;IAClF,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,uDAAuD;IACvD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;;;;OAMG;IACH,gBAAgB,CACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,8FAA8F;IAC9F,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;;;OAMG;IACH,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CACN;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,GACxB;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,GACpB;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAC1C,CAAC;IACF,yEAAyE;IACzE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,sFAAsF;IACtF,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,gEAAgE;IAChE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAsCD,eAAO,MAAM,iBAAiB,EAAE,UA6F/B,CAAC;AA0EF,eAAO,MAAM,eAAe,EAAE,QAgN7B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,sDAAsD;IACtD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,4FAA4F;IAC5F,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAErE,0CAA0C;AAC1C,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4DAA4D;IAC5D,SAAS,EAAE,cAAc,CAAC;IAC1B,kDAAkD;IAClD,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAmED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,cAAc,GAAG,MAAM,CAelE;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAc9D;AAID,UAAU,WAAW;IACnB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,aAAa,EAAE,OAAO,CAAC;CACxB;AA8FD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAmCnE;AA0PD,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAkI7E"}