approval-md 0.0.1 → 0.2.0

package/dist/src/core/dark-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dark-session.js","sourceRoot":"","sources":["../../../src/core/dark-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,IAAI,IAAI,SAAS,EAAc,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,UAAU,EAA0B,MAAM,kBAAkB,CAAC;AACtE,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,aAAa,GAId,MAAM,2BAA2B,CAAC;AAGnC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,eAAe;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAU,CAAC;AAI3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,0EAA0E;IAC1E,YAAY;IACZ,4EAA4E;IAC5E,aAAa;IACb,sEAAsE;IACtE,kBAAkB;IAClB,yDAAyD;IACzD,iBAAiB;IACjB,kEAAkE;IAClE,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,+DAA+D;IAC/D,iBAAiB;IACjB,mFAAmF;IACnF,sBAAsB;IACtB,+DAA+D;IAC/D,kBAAkB;CACV,CAAC;AAiIX,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAwB,EAAE,IAAmB;IAC3F,OAAO,GAAG,OAAO,IAAI,SAAS,IAAI,WAAW,IAAI,IAAI,IAAI,eAAe,EAAE,CAAC;AAC7E,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,MAAmB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,MAAmB;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3E,CAAC,CAAE,QAAoC,CAAC,SAAS,CAAC;QAClD,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC5D,MAAM,IAAI,GAAI,MAAkC,CAAC,cAAc,CAAC,CAAC;YACjE,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,SAAS,OAAO,CAAC,QAAiB;IAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5F,MAAM,GAAG,GAAG,QAAmC,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,+CAA+C;AAC/C,SAAS,QAAQ,CACf,OAA+B,EAC/B,MAAyB;IAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,SAAS,CAChB,QAA0B,EAC1B,QAAgC,EAChC,UAA4C;IAE5C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAErD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS;QAErD,qEAAqE;QACrE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM;YACR,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,0EAA0E;AAC1E,SAAS,mBAAmB,CAAC,MAAsB;IACjD,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,mFAAmF;AACnF,MAAM,YAAY,GAChB,gIAAgI,CAAC;AAEnI;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,MAAM,QAAQ,GACZ,wFAAwF;QACxF,wFAAwF;QACxF,2FAA2F;QAC3F,oFAAoF,CAAC;IAEvF,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC;QAC3D,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC;QACxE,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,QAA0B,EAC1B,OAA2B,EAC3B,IAA4B,EAC5B,YAA+B,EAC/B,UAA6B,EAC7B,MAAc;IAEd,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAoB,CAAC,GAAG,CAAC;IACrG,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,IAAI;QACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,IAAI;QACJ,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;QAChC,YAAY;QACZ,UAAU;QACV,SAAS;QACT,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC5D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,QAA0B,EAAE,KAAuB;IAChE,MAAM,KAAK,GAAG,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,GAC9C,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,MAAM,EAC5E,GAAG,CAAC;IAEJ,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,IAAI,CACT,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,EAAE,EACF,EAAE,EACF,GAAG,KAAK,gDAAgD,KAAK,CAAC,QAAQ,CAAC,WAAW,+FAA+F,CAClL,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,IAAI,CACT,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,EAAE,EACF,EAAE,EACF,GAAG,KAAK,8BAA8B,KAAK,CAAC,SAAS,IAAI,WAAW,sJAAsJ,CAC3N,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CACzC,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CACjG,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAC9D,CAAC;QACF,OAAO,IAAI,CACT,QAAQ,EACR,QAAQ,EACR,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EACvD,EAAE,EACF,EAAE,EACF,cAAc;YACZ,CAAC,CAAC,GAAG,KAAK,sBAAsB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,yIAAyI;YACxM,CAAC,CAAC,GAAG,KAAK,sBAAsB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,6DAA6D,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,8FAA8F,CACvP,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,yDAAyD;IACzD,wEAAwE;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,oBAAoB,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;QAClD,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;oBACpF,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAc;YAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,OAAO,CAAC,CAAC,CAAiB,CAAC,GAAG;YACvE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAiB,CAAC,GAAG;YACvF,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,OAAO,CAAC,CAAC,CAAiB,CAAC,EAAE;YACrE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAiB,CAAC,EAAE;YACrF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACvB,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAK,WAAW,CAAC,CAAC,CAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAChF,CAAC;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,0DAA0D;QAC1D,qEAAqE;QACrE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;QACxD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAsB,EAAE;YACpD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACpF,IAAI,KAAK,GAAuB,IAAI,CAAC;YACrC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,GAAI,MAAM,CAAC,CAAC,CAAoB,CAAC,GAAG,GAAG,CAAC;gBACxD,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAoB,CAAC,GAAG,CAAC;gBAClE,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE;oBACtC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC/E,OAAO,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBACtD,CAAC,CAAC;gBACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE;oBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC7D,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxC,CAAC,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChD,MAAM,UAAU,GACd,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC;oBAC9B,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC;oBAC9B,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAClD,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACrD,IAAI,CAAC,UAAU;oBAAE,KAAK,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC9D,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,YAAY,EAAE,YAAY;YAC1B,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,IAAI;YACf,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,kBAAkB,EAAE,KAAK,CAAC,YAAY;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;YACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YAC3E,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAE3F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CACT,QAAQ,EACR,MAAM,EACN,aAAa,EACb,YAAY,EACZ,WAAW,CAAC,IAAI,EAChB,GAAG,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oCAAoC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,4DAA4D,QAAQ;aAC9K,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;aACtD,IAAI,CAAC,KAAK,CAAC,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,wCAAwC;IACxC,wEAAwE;IACxE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CACT,QAAQ,EACR,QAAQ,EACR,kBAAkB,EAClB,YAAY,EACZ,WAAW,CAAC,IAAI,EAChB,GAAG,KAAK,qQAAqQ,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,gCAAgC,YAAY,EAAE,CACvV,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CACT,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,YAAY,EACZ,WAAW,CAAC,IAAI,EAChB,GAAG,KAAK,mBAAmB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,0FAA0F,CAC3J,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CACT,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,YAAY,EACZ,WAAW,CAAC,IAAI,EAChB,GAAG,KAAK,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,iCAAiC,MAAM,CAC5E,WAAW,CAAC,IAAI,CAAC,MAAM,CACxB,gEAAgE,WAAW,CAAC,IAAI;aAC9E,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAChF,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,OAAO,IAAI,CACT,QAAQ,EACR,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,EAAE,EACF,GAAG,KAAK,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,gVAAgV,CACxX,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CACT,QAAQ,EACR,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,EAAE,EACF,GAAG,KAAK,kBAAkB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,6EAA6E,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,wEAAwE,CAC/O,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CACT,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,EAAE,EACF,GAAG,KAAK,mBACN,WAAW,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,wCAAwC,QAAQ,CAAC,IAAI,IAAI,oBAAoB,oBAAoB;QACnG,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,mDAC3B,WAAW,CAAC,CAAC,CACd,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAQ,WAAW,CAAC,CAAC,CAAoB,CAAC,MAAM,GACxE,iBAAiB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,4SAA4S,CACzY,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,uBAAuB,CAAC,MAAyB;IAC/D,MAAM,KAAK,GAAa,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,KAAK,GACT,OAAO,CAAC,OAAO,KAAK,MAAM;YACxB,CAAC,CAAC,UAAU,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,GAAG,GAAG;YACtD,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc;gBAClC,CAAC,CAAC,kBAAkB,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,GAAG,GAAG;gBAC9D,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,GACpE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAChD,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,KAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BACjD,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E;;;;;;GAMG;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1D,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,+BAA+B,CAAC,CAAC;AAU3F;;;;;;;;GAQG;AACH,MAAM,EAAE,GAAG,QAAQ,CAAC;AACpB,MAAM,EAAE,GAAG,QAAQ,CAAC;AAQpB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,MAAM,GAAG,GAAsB,EAAE,GAAG,gBAAgB,EAAE,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC;IACvF,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,iBAAiB,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,SAAS,CAChB,IAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,mCAAmC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE;SAC3F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO;QAC1B,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrD,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,KAAK,EAAE,CAAC;YACR,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjF,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,wFAAwF;AACxF,SAAS,OAAO,CAAC,IAAY;IAC3B,KAAK,MAAM,SAAS,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3E,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,IAAY,EAAE,GAAW;IAC7C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,EAAE,EAAE,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACnD,MAAM,EAAE,MAAM,IAAI,EAAE;YACpB,WAAW,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACxC,YAAY,EAAE,KAAK;YACnB,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAChB,QAA0B,EAC1B,KAAoB,EACpB,IAAY,EACZ,EAAU;IAEV,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,GAAG,CACb;QACE,KAAK;QACL,GAAG,KAAK;QACR,WAAW,IAAI,EAAE;QACjB,WAAW,EAAE,EAAE;QACf,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK;QACvD,aAAa;KACd,EACD,QAAQ,CAAC,IAAI,CACd,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,yBAAyB,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE;SACvF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,EAAU;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAEtE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACpE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAmBD,0EAA0E;AAC1E,SAAS,WAAW,CAAC,OAAgC;IAKnD,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QAC/B,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,4EAA4E;IAC5E,6EAA6E;IAC7E,6BAA6B;IAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5F,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgC;IAIjE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAkB,EAAE;QAClD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,oBAAoB,EAAE,KAAK,CAAC,cAAc;QAC1C,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,UAAU;QACV,YAAY,EAAE,sBAAsB;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE;KAC1B,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/dist/src/core/decision-refusal.d.ts

@@ -0,0 +1,185 @@
+/**
+ * What the log says when a human decided and the gate could not take it
+ * (APRV-235, amended SPEC.md §5.2).
+ *
+ * ## The fact this module is about
+ *
+ * Seen live on 2026-09-02, after the seq 13704 ceremony. Carter tapped approve
+ * on a request that had been asked under the previous policy. The gate refused
+ * `policy-drift`, which is right: the rules the approver was shown are not the
+ * rules in force, so a grant recorded there would claim a decision under a
+ * policy nobody put in front of them. But the refusal went to the operator's
+ * terminal and nowhere else. Nothing was appended, the request stayed pending
+ * in `QUEUE.md` and on Telegram, and the person who had tapped saw no reaction
+ * at all.
+ *
+ * Three things were wrong and this module fixes two of them (the third, the
+ * message edit, belongs to the channels).
+ *
+ * ## 1. A human's decision is a fact even when the gate cannot honour it
+ *
+ * The log is the truth. SPEC.md §11 makes human attention the audit budget, and
+ * an approver's tap SPENDS it whether or not an authorization comes out the
+ * other end. A reader looking at that log later found a request sitting
+ * unanswered with nothing to say a person had answered it, which is a question
+ * the log is supposed to be able to settle.
+ *
+ * So {@link recordRefusedDecision} appends one `audit.decision_refused`. It is
+ * an **audit-tier** record in the strict sense:
+ *
+ * - it grants nothing and mints no token;
+ * - `core/state.ts` does not settle a request on it, so no verdict moves;
+ * - `core/budgets.ts` charges nothing for it, so no budget moves;
+ * - `core/audit.ts` does not sample it and no streak counts it.
+ *
+ * `tests/decision-refusal.test.ts` asserts that last group by construction: the
+ * derived request state, the budget verdicts and the sampling draw are taken
+ * before and after and compared, and they are identical.
+ *
+ * ## The asymmetry: humans yes, agents no
+ *
+ * Gate-side refusals handed to an AGENT stay unlogged, and that is a choice
+ * rather than an omission. An agent that is refused reads the code, stops or
+ * asks again, and nothing was spent that a record could account for. A human
+ * who is refused has already spent the scarce thing, and cannot be asked to
+ * spend it again without the log saying the first spend happened. Recording
+ * every agent-side refusal would also put the busiest path in the runtime — a
+ * hook classifying every shell command — into the append path, which is a cost
+ * with no reader.
+ *
+ * ## 2. A request the gate calls void must stop being offered
+ *
+ * `policy-drift` is the one refusal where the gate does not merely decline this
+ * decision, it declares the REQUEST dead: "the pending request is void and the
+ * action must be requested again". Leaving it pending afterwards offers every
+ * approver on every channel a tap that cannot be honoured, forever, until the
+ * TTL lapses. So a drift refusal also appends `approval.withdrawn` with the
+ * runtime's own reason, `policy-drift` (APRV-106 gave the event; the schema's
+ * cross-rule makes that reason `system:`-only and `system:` that-reason-only).
+ * `approval queue`, `QUEUE.md` and every channel then read the request as
+ * settled, because they all derive state from `core/state.ts` and it settles on
+ * `approval.withdrawn` without looking at who wrote it or why.
+ *
+ * The action is not stranded: its caller requests it again, and the new request
+ * is routed, budgeted and displayed under the policy actually in force. That is
+ * what the refusal message already told them to do.
+ *
+ * ## Order, and what an interrupted write leaves behind
+ *
+ * The audit record is appended first and the withdrawal second, naming it in
+ * `payload.refused_seq`. Two appends are two records — the log never batches —
+ * so a crash between them is a state this code can reach, and the order is
+ * chosen for which half is safe to have alone. The explanation without the
+ * withdrawal leaves the request pending exactly as it is today, and a reader can
+ * see why. The withdrawal without the explanation would take a request out of a
+ * human's queue with nothing on the record saying who tapped, or why it was
+ * refused, which is the failure this task exists to end.
+ *
+ * ## Invariants
+ *
+ * - **Gate-typed events never accept caller timestamps** (§11.1). `ts` comes
+ *   from the injected clock at the write boundary; there is no parameter.
+ * - **Every check-then-append passes through compare-and-append** (§11.1(5)).
+ *   Both writes state the head they were derived against, and the whole cycle
+ *   re-enters from a fresh read on `head-moved` through
+ *   {@link withHeadRetry} — the same bounded retry APRV-236 gave `decide`.
+ * - **Self-reported fields never reduce scrutiny** (§11.1). Everything here only
+ *   ADDS to what a reviewer sees. The approver's identity comes from the
+ *   decision surface's configured actor, the same source a grant's does, and the
+ *   record's own actor is `system:` so that neither party to the refusal is its
+ *   author.
+ * - **Refusals stay machine-readable and distinct** (§11.1). The gate's code is
+ *   copied verbatim; nothing here invents, merges or softens one.
+ *
+ * ## No attestation check, deliberately
+ *
+ * Nothing here asks whether the policy is attested, for the reason `reject` and
+ * `revoke` do not: this write confers no authority. Refusing to record a refusal
+ * because a file changed would be the strict direction pointing the wrong way,
+ * and the case where it would bite hardest is `policy-not-attested` itself —
+ * exactly the refusal an operator most needs the log to remember. The write
+ * boundary still validates every record, so what lands is still constrained.
+ */
+import { type AppendError, type EventRecord } from "./log.js";
+import { type Decision } from "./state.js";
+import type { GateOptions } from "./gate.js";
+/**
+ * The actor every record here carries. `system:`, and the same id the runtime's
+ * other unprompted writes use: this is the gate stating what the gate did.
+ */
+export declare const DECISION_REFUSAL_ACTOR = "system:gate";
+/** The runtime's withdrawal reason, closed to requesters by the event schema. */
+export declare const POLICY_DRIFT_REASON = "policy-drift";
+/** Who decided what, on which surface — everything the record needs about the tap. */
+export interface RefusedDecision {
+    /** The action whose decision was refused. */
+    actionKey: string;
+    /** Which of the three human-only verbs was attempted. */
+    decision: Decision;
+    /** The approver, `human:<id>`, from the surface's configured identity. */
+    actor: string;
+    /** The surface that collected the gesture: `telegram`, `web`, `cli`. */
+    channel: string;
+}
+/** The gate refusal being recorded. Only these fields are ever read. */
+export interface RefusalFacts {
+    /** The gate's code, verbatim. */
+    code: string;
+    /** The gate's message, verbatim. */
+    message: string;
+    /**
+     * The two policy hashes the gate compared, on `policy-drift` alone. Supplied
+     * by the refusal that made the comparison rather than re-derived here: a
+     * second derivation could disagree with the one that actually refused, and
+     * then the record would describe a comparison nobody made.
+     */
+    drift?: {
+        requested: string;
+        attested: string;
+    };
+}
+/** What the module could not do. Never thrown; the caller carries on regardless. */
+export interface RefusalRecordFailure {
+    ok: false;
+    code: "log-unreadable" | "append-failed";
+    message: string;
+    append?: AppendError;
+}
+export type RecordRefusedDecisionResult = {
+    ok: true;
+    /**
+     * The `audit.decision_refused` record, or `null` when the refused actor
+     * was not a person and there was therefore nothing to record.
+     */
+    audit: EventRecord | null;
+    /** The `approval.withdrawn` record, on `policy-drift` alone; `null` otherwise. */
+    withdrawn: EventRecord | null;
+} | RefusalRecordFailure;
+/** Is this the refusal that declares the request itself void? */
+export declare function voidsTheRequest(code: string): boolean;
+/**
+ * Record that a human's decision was refused, and withdraw the request when the
+ * refusal was the gate declaring it void.
+ *
+ * Called by the decision SURFACES — `channels/contract.ts`'s
+ * `recordChannelDecision` and `cli/gate.ts`'s `commandDecide` — and never from
+ * inside `decide()`. That placement is deliberate twice over. `decide()`'s
+ * contract is that a refusal appends nothing, which is what lets a caller retry
+ * one without wondering what it wrote; and this record is about a HUMAN having
+ * decided, which is a fact only a surface that collected a human's gesture can
+ * assert.
+ *
+ * Best-effort by design: a failure here is returned, never thrown, and the
+ * caller shows the gate's refusal either way. The decision was already refused
+ * before this ran, and nothing about that outcome depends on this write landing.
+ *
+ * **Two writes, two retry cycles, and deliberately not one.** `head-retry.ts`
+ * asks that the unit of retry be a whole read-check-append cycle, and putting
+ * both appends inside one cycle would break that in the direction that matters:
+ * a moved head under the SECOND write would re-enter from the top and append a
+ * second `audit.decision_refused` for one tap. So each write has its own cycle,
+ * each re-reads and re-derives, and the withdrawal's cycle re-checks that the
+ * request is still pending — a decision or a withdrawal that landed in the
+ * window is the new verdict, and there is then nothing left to withdraw.
+ */
+export declare function recordRefusedDecision(logPath: string, decided: RefusedDecision, refusal: RefusalFacts, options?: GateOptions): RecordRefusedDecisionResult;

package/dist/src/core/decision-refusal.js

@@ -0,0 +1,265 @@
+/**
+ * What the log says when a human decided and the gate could not take it
+ * (APRV-235, amended SPEC.md §5.2).
+ *
+ * ## The fact this module is about
+ *
+ * Seen live on 2026-09-02, after the seq 13704 ceremony. Carter tapped approve
+ * on a request that had been asked under the previous policy. The gate refused
+ * `policy-drift`, which is right: the rules the approver was shown are not the
+ * rules in force, so a grant recorded there would claim a decision under a
+ * policy nobody put in front of them. But the refusal went to the operator's
+ * terminal and nowhere else. Nothing was appended, the request stayed pending
+ * in `QUEUE.md` and on Telegram, and the person who had tapped saw no reaction
+ * at all.
+ *
+ * Three things were wrong and this module fixes two of them (the third, the
+ * message edit, belongs to the channels).
+ *
+ * ## 1. A human's decision is a fact even when the gate cannot honour it
+ *
+ * The log is the truth. SPEC.md §11 makes human attention the audit budget, and
+ * an approver's tap SPENDS it whether or not an authorization comes out the
+ * other end. A reader looking at that log later found a request sitting
+ * unanswered with nothing to say a person had answered it, which is a question
+ * the log is supposed to be able to settle.
+ *
+ * So {@link recordRefusedDecision} appends one `audit.decision_refused`. It is
+ * an **audit-tier** record in the strict sense:
+ *
+ * - it grants nothing and mints no token;
+ * - `core/state.ts` does not settle a request on it, so no verdict moves;
+ * - `core/budgets.ts` charges nothing for it, so no budget moves;
+ * - `core/audit.ts` does not sample it and no streak counts it.
+ *
+ * `tests/decision-refusal.test.ts` asserts that last group by construction: the
+ * derived request state, the budget verdicts and the sampling draw are taken
+ * before and after and compared, and they are identical.
+ *
+ * ## The asymmetry: humans yes, agents no
+ *
+ * Gate-side refusals handed to an AGENT stay unlogged, and that is a choice
+ * rather than an omission. An agent that is refused reads the code, stops or
+ * asks again, and nothing was spent that a record could account for. A human
+ * who is refused has already spent the scarce thing, and cannot be asked to
+ * spend it again without the log saying the first spend happened. Recording
+ * every agent-side refusal would also put the busiest path in the runtime — a
+ * hook classifying every shell command — into the append path, which is a cost
+ * with no reader.
+ *
+ * ## 2. A request the gate calls void must stop being offered
+ *
+ * `policy-drift` is the one refusal where the gate does not merely decline this
+ * decision, it declares the REQUEST dead: "the pending request is void and the
+ * action must be requested again". Leaving it pending afterwards offers every
+ * approver on every channel a tap that cannot be honoured, forever, until the
+ * TTL lapses. So a drift refusal also appends `approval.withdrawn` with the
+ * runtime's own reason, `policy-drift` (APRV-106 gave the event; the schema's
+ * cross-rule makes that reason `system:`-only and `system:` that-reason-only).
+ * `approval queue`, `QUEUE.md` and every channel then read the request as
+ * settled, because they all derive state from `core/state.ts` and it settles on
+ * `approval.withdrawn` without looking at who wrote it or why.
+ *
+ * The action is not stranded: its caller requests it again, and the new request
+ * is routed, budgeted and displayed under the policy actually in force. That is
+ * what the refusal message already told them to do.
+ *
+ * ## Order, and what an interrupted write leaves behind
+ *
+ * The audit record is appended first and the withdrawal second, naming it in
+ * `payload.refused_seq`. Two appends are two records — the log never batches —
+ * so a crash between them is a state this code can reach, and the order is
+ * chosen for which half is safe to have alone. The explanation without the
+ * withdrawal leaves the request pending exactly as it is today, and a reader can
+ * see why. The withdrawal without the explanation would take a request out of a
+ * human's queue with nothing on the record saying who tapped, or why it was
+ * refused, which is the failure this task exists to end.
+ *
+ * ## Invariants
+ *
+ * - **Gate-typed events never accept caller timestamps** (§11.1). `ts` comes
+ *   from the injected clock at the write boundary; there is no parameter.
+ * - **Every check-then-append passes through compare-and-append** (§11.1(5)).
+ *   Both writes state the head they were derived against, and the whole cycle
+ *   re-enters from a fresh read on `head-moved` through
+ *   {@link withHeadRetry} — the same bounded retry APRV-236 gave `decide`.
+ * - **Self-reported fields never reduce scrutiny** (§11.1). Everything here only
+ *   ADDS to what a reviewer sees. The approver's identity comes from the
+ *   decision surface's configured actor, the same source a grant's does, and the
+ *   record's own actor is `system:` so that neither party to the refusal is its
+ *   author.
+ * - **Refusals stay machine-readable and distinct** (§11.1). The gate's code is
+ *   copied verbatim; nothing here invents, merges or softens one.
+ *
+ * ## No attestation check, deliberately
+ *
+ * Nothing here asks whether the policy is attested, for the reason `reject` and
+ * `revoke` do not: this write confers no authority. Refusing to record a refusal
+ * because a file changed would be the strict direction pointing the wrong way,
+ * and the case where it would bite hardest is `policy-not-attested` itself —
+ * exactly the refusal an operator most needs the log to remember. The write
+ * boundary still validates every record, so what lands is still constrained.
+ */
+import { tick } from "./clock.js";
+import { attemptsOf, withHeadRetry } from "./head-retry.js";
+import { appendEvent } from "./log.js";
+import { readVerifiedRecords, requestState } from "./state.js";
+/**
+ * The actor every record here carries. `system:`, and the same id the runtime's
+ * other unprompted writes use: this is the gate stating what the gate did.
+ */
+export const DECISION_REFUSAL_ACTOR = "system:gate";
+/** The runtime's withdrawal reason, closed to requesters by the event schema. */
+export const POLICY_DRIFT_REASON = "policy-drift";
+/**
+ * The decisions this module records: a person's, and nobody else's.
+ *
+ * Matches `core/gate.ts`'s own `HUMAN_ACTOR`, and it is the FIRST thing checked
+ * rather than a schema refusal caught late. `actor-not-human` is a real gate
+ * refusal — a misconfigured channel claiming an `agent:` identity produces it —
+ * and it is precisely the case where no human decided anything, so there is no
+ * spent attention for a record to account for. Letting it through would also
+ * mean composing a record whose `payload.actor` the event schema then refuses,
+ * which is a failure discovered at the write boundary rather than a rule stated
+ * where it belongs.
+ */
+const HUMAN_ACTOR = /^human:.+/u;
+/** Is this the refusal that declares the request itself void? */
+export function voidsTheRequest(code) {
+    return code === "policy-drift";
+}
+/**
+ * Record that a human's decision was refused, and withdraw the request when the
+ * refusal was the gate declaring it void.
+ *
+ * Called by the decision SURFACES — `channels/contract.ts`'s
+ * `recordChannelDecision` and `cli/gate.ts`'s `commandDecide` — and never from
+ * inside `decide()`. That placement is deliberate twice over. `decide()`'s
+ * contract is that a refusal appends nothing, which is what lets a caller retry
+ * one without wondering what it wrote; and this record is about a HUMAN having
+ * decided, which is a fact only a surface that collected a human's gesture can
+ * assert.
+ *
+ * Best-effort by design: a failure here is returned, never thrown, and the
+ * caller shows the gate's refusal either way. The decision was already refused
+ * before this ran, and nothing about that outcome depends on this write landing.
+ *
+ * **Two writes, two retry cycles, and deliberately not one.** `head-retry.ts`
+ * asks that the unit of retry be a whole read-check-append cycle, and putting
+ * both appends inside one cycle would break that in the direction that matters:
+ * a moved head under the SECOND write would re-enter from the top and append a
+ * second `audit.decision_refused` for one tap. So each write has its own cycle,
+ * each re-reads and re-derives, and the withdrawal's cycle re-checks that the
+ * request is still pending — a decision or a withdrawal that landed in the
+ * window is the new verdict, and there is then nothing left to withdraw.
+ */
+export function recordRefusedDecision(logPath, decided, refusal, options = {}) {
+    // No person, no record. See {@link HUMAN_ACTOR}: `actor-not-human` is the
+    // refusal a misconfigured channel gets, and it is the one refusal that says
+    // nobody's attention was spent.
+    if (!HUMAN_ACTOR.test(decided.actor))
+        return { ok: true, audit: null, withdrawn: null };
+    const attempts = attemptsOf(options.retryOnHeadMoved);
+    const audit = withHeadRetry(attempts, () => appendAudit(logPath, decided, refusal, options));
+    if (!audit.ok)
+        return audit;
+    if (!voidsTheRequest(refusal.code))
+        return { ok: true, audit: audit.record, withdrawn: null };
+    const withdrawn = withHeadRetry(attempts, () => appendWithdrawal(logPath, decided, refusal, audit.record.seq, options));
+    if (!withdrawn.ok)
+        return withdrawn;
+    return { ok: true, audit: audit.record, withdrawn: withdrawn.record };
+}
+/** The audit record's whole cycle: a fresh read, the task off it, one append. */
+function appendAudit(logPath, decided, refusal, options) {
+    const ts = tick(options);
+    const read = readRecords(logPath, options);
+    if (!read.ok)
+        return read;
+    // The task the request named, off the verified log rather than off the
+    // caller: a surface holds a rendering, and the record should say what the log
+    // says. TTL is irrelevant here (nothing is being decided), so the derivation
+    // is asked for the task alone.
+    const derivation = requestState(read.records, decided.actionKey, ts, null);
+    const payload = {
+        actor: decided.actor,
+        decision: decided.decision,
+        code: refusal.code,
+        message: refusal.message,
+    };
+    if (refusal.drift !== undefined) {
+        payload["policy_sha256_requested"] = refusal.drift.requested;
+        payload["policy_sha256_attested"] = refusal.drift.attested;
+    }
+    return appendOne(logPath, {
+        ts,
+        event: "audit.decision_refused",
+        actor: DECISION_REFUSAL_ACTOR,
+        ...(derivation.task === null ? {} : { task: derivation.task }),
+        action_key: decided.actionKey,
+        channel: decided.channel,
+        payload,
+    }, options, read.head);
+}
+/**
+ * The withdrawal's whole cycle, run only for `policy-drift`.
+ *
+ * The pending-ness check is inside the cycle rather than carried from the audit
+ * record's read, which is what makes the retry safe: a request that was decided
+ * or withdrawn while this was writing is settled by that record, and appending
+ * a second terminal event for it would be this module overwriting an answer.
+ * `record: null` is that case, and it is a success — there was nothing to
+ * withdraw.
+ */
+function appendWithdrawal(logPath, decided, refusal, refusedSeq, options) {
+    const ts = tick(options);
+    const read = readRecords(logPath, options);
+    if (!read.ok)
+        return read;
+    const derivation = requestState(read.records, decided.actionKey, ts, null);
+    if (derivation.state !== "requested")
+        return { ok: true, record: null };
+    return appendOne(logPath, {
+        ts,
+        event: "approval.withdrawn",
+        actor: DECISION_REFUSAL_ACTOR,
+        ...(derivation.task === null ? {} : { task: derivation.task }),
+        action_key: decided.actionKey,
+        payload: {
+            action_key: decided.actionKey,
+            reason: POLICY_DRIFT_REASON,
+            note: driftNote(refusal),
+            refused_seq: refusedSeq,
+        },
+    }, options, read.head);
+}
+function readRecords(logPath, options) {
+    const read = readVerifiedRecords(logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    return read.ok ? read : { ok: false, code: "log-unreadable", message: read.message };
+}
+/**
+ * The withdrawal's note: both hashes, so a reader checks the runtime's verdict
+ * against the log instead of taking it.
+ */
+function driftNote(refusal) {
+    const drift = refusal.drift;
+    const hashes = drift === undefined
+        ? ""
+        : ` The request pinned policy ${drift.requested} and the attested policy is now ${drift.attested}.`;
+    return `withdrawn by the runtime: a human's decision was refused \`policy-drift\`, so the rules that routed this request are no longer in force and no decision can be recorded about it.${hashes} The action is not refused — request it again, and it is routed, budgeted and displayed under the policy actually in force.`;
+}
+function appendOne(logPath, input, options, expectedHead) {
+    const append = { ...options.append };
+    if (options.schemaDir !== undefined)
+        append.schemaDir = options.schemaDir;
+    const result = appendEvent(logPath, input, { ...append, expectedHead });
+    if (result.ok)
+        return { ok: true, record: result.record };
+    return {
+        ok: false,
+        code: "append-failed",
+        message: `${input.event} could not be appended: ${result.error.message}`,
+        append: result.error,
+    };
+}
+//# sourceMappingURL=decision-refusal.js.map

package/dist/src/core/decision-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-refusal.js","sourceRoot":"","sources":["../../../src/core/decision-refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAqE,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAiB,MAAM,YAAY,CAAC;AAG9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAAG,YAAY,CAAC;AAkDjC,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,cAAc,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAO,GAAgB,EAAE;IAEzB,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAExF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9F,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC7C,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CACvE,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AACxE,CAAC;AAQD,iFAAiF;AACjF,SAAS,WAAW,CAClB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,uEAAuE;IACvE,8EAA8E;IAC9E,6EAA6E;IAC7E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAE3E,MAAM,OAAO,GAA4B;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7D,OAAO,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;KACR,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,UAAkB,EAClB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAExE,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,UAAU;SACxB;KACF,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,OAAe,EACf,OAAoB;IAEpB,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAqB;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GACV,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,8BAA8B,KAAK,CAAC,SAAS,mCAAmC,KAAK,CAAC,QAAQ,GAAG,CAAC;IACxG,OAAO,oLAAoL,MAAM,6HAA6H,CAAC;AACjU,CAAC;AAED,SAAS,SAAS,CAChB,OAAe,EACf,KAAiB,EACjB,OAAoB,EACpB,YAA4B;IAE5B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACxE,MAAM,EAAE,MAAM,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}