approval-md 0.0.1 → 0.2.0

package/dist/src/adapters/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../../src/adapters/email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,wBAAwB,EACxB,aAAa,GAMd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,cAAc,EACd,QAAQ,GAET,MAAM,WAAW,CAAC;AAiBnB,iEAAiE;AACjE,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAU,CAAC;AAE7F;;;;;;;;;;;GAWG;AACH,MAAM,SAAS,GAAG,+EAA+E,CAAC;AAElG,gFAAgF;AAChF,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAMD,SAAS,YAAY,CAAC,KAAa,EAAE,MAA0B;IAC7D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,GAAG,KAAK,uLAAuL,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;QACnP,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC;IAErB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACxC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,YAAkC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC5D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,uBAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gQAAgQ,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9W,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,CAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,+CAA+C,EAAE,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACrD,KAAK,CAAC,KAAK,CAAC,GAAG,IAAgB,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC3F,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,8JAA8J;SACjK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAErF,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,IACE,WAAW,KAAK,SAAS;QACzB,WAAW,KAAK,YAAY;QAC5B,WAAW,KAAK,WAAW,EAC3B,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,wEAAwE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE;SAC/G,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACnE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,IAAI;YACJ,EAAE,EAAE,EAAc;YAClB,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACtD,OAAO;YACP,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;SACpE;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACpG,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAE/D,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,IAAU;IACpC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO;QACL,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,KAAK,GAAG;QACrC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK;QACnC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7B,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE;QACtF,OAAO;KACR,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAY,EAAE,IAAY;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,2BAA2B,SAAS,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC;SAC/D,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,MAAM,IAAI,MAAM,GAAG,CAAC;AACjC,CAAC;AAED,4DAA4D;AAC5D,SAAS,WAAW,CAAC,IAAY;IAC/B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,IAAK,SAAS,CAAC,WAAW,CAAC,CAAC,CAAY,GAAG,IAAI,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAW,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;iBACvF,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,KAAK,CAAC;iBACpC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;gBAAE,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;;gBACvE,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,OAAe;IAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC;IACpB,yEAAyE;IACzE,2CAA2C;IAC3C,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;YAC5D,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IAClF,6EAA6E;IAC7E,yEAAyE;IACzE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,SAAS,MAAM,CAAC,IAAY,EAAE,KAAa;IACzC,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC;IACzB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;QAC7D,IAAI,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,CAAC;;YAAM,OAAO,GAAG,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,KAAkB;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnF,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG;QACd,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;YACrD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC;QACrC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;QAC7B,MAAM,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC;QACvD,MAAM,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;KAC7E,CAAC;IAEF,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAExD,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,eAAe;IACzB,QAAQ,EAAE,eAAe;CACjB,CAAC;AAIX,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,eAAe,IAAI,qCAAqC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,eAAe,IAAI,8HAA8H,CAAC;AAC3J,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,mBAAmB,IAAI,YAAY,OAAO,8IAA8I,CAAC;AAClM,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA8B;IAC/D;QACE,IAAI,EAAE,wBAAwB,CAAC,IAAI;QACnC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,gDAAgD;QAC1D,QAAQ,EAAE,IAAI;QACd,QAAQ,CAAC,KAAa;YACpB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC7E,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB,CAAC,IAAI;QACnC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,iEAAiE;QAC3E,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,KAAK;QACd,QAAQ,CAAC,KAAa;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB,CAAC,QAAQ;QACvC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,gEAAgE;QAC1E,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,qDAAqD,EAAE;YACtF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,yDAAyD,EAAE;YAC1F,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,2DAA2D,EAAE;SACzF;QACD,QAAQ,CAAC,KAAa;YACpB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB,CAAC,IAAI;QACnC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,iFAAiF;QAC3F,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB,CAAC,QAAQ;QACvC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,6DAA6D;QACvE,QAAQ,EAAE,KAAK;KAChB;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAK,GAAyB,wBAAwB;IAEtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7D,KAAK;QACL,GAAiC;KAClC,CAAC,CACH,CAAC;IACF,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClF,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA0C,EAC1C,KAAK,GAAyB,wBAAwB,EACtD,IAAI,GAAsB,EAAE;IAE5B,4EAA4E;IAC5E,0EAA0E;IAC1E,mBAAmB;IACnB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAW,EAAE;QACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,wEAAwE;IACxE,uBAAuB;IACvB,yEAAyE;IACzE,sBAAsB;IACtB,GAAG,wBAAwB;IAC3B,GAAG,4BAA4B;CACvB,CAAC;AAIX,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,CACJ,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9F,CAAC;AACJ,CAAC;AAwCD,SAAS,cAAc,CAAC,WAA+B,EAAE,IAAY;IACnE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAClD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE;QACzF,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,wBAAwB;KAC9C,CAAC;AACJ,CAAC;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAA+B,EAC/B,KAAK,GAAyB,wBAAwB;IAEtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAW,EAAE;QACrC,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAsB,EAAE,OAAe,EAAsB,EAAE,CAAC,CAAC;QAC7E,EAAE,EAAE,KAAK;QACT,IAAI;QACJ,OAAO;QACP,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAEtE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,wBAAwB;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,uBAAuB,CACzC;QACE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC9C,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC3D,EACD,KAAK,CACN,CAAC;IACF,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;IAE3E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAO,GAAwB,EAAE;IAC5D,MAAM,KAAK,GAAyB,EAAE,GAAG,wBAAwB,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAExD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO;QACP,mBAAmB,EAAE,wBAAwB,CAAC,KAAK,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,KAAe;YACvB,yEAAyE;YACzE,yEAAyE;YACzE,iBAAiB;YACjB,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,gCAAgC,SAAS,CAAC,OAAO,iDAAiD;iBACvJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAElC,wEAAwE;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,iEAAiE;YACjE,qEAAqE;YACrE,uBAAuB;YACvB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YACrF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,sEAAsE;gBACtE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3E,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;YAC1E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;YAE7C,+CAA+C;YAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,KAAK,GAAgB;gBACzB,IAAI,EAAE,KAAK,EAAE;gBACb,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;aACvE,CAAC;YACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAE/C,gBAAgB;YAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CACzB;gBACE,IAAI;gBACJ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,SAAS;gBACnB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAC/C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,uBAAuB;gBACvD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC/E,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;gBAC5D,MAAM,EAAE,KAAK;aACd,EACD,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,EAClC,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,CAAC;YAED,wEAAwE;YACxE,qDAAqD;YACrD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE;oBACN,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,YAAY,EAAE,IAAI;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;oBAC9B,UAAU,EAAE,UAAU,CAAC,MAAM;oBAC7B,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;oBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,IAAI,EAAE,IAAI,CAAC,aAAa;oBACxB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;oBAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/adapters/env-passphrase.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The vault passphrase, resolved from `.approval/env` inside a granted window
+ * (SPEC.md §10.4, §5.2; APRV-168).
+ *
+ * ## Why this narrows a load-bearing rule, and how far
+ *
+ * `core/env-file.ts` states the rule this module bends, and states it as the
+ * reason the file exists at all: **no verb in this runtime reads `.approval/env`
+ * into its own environment.** The argument there is `APPROVAL_HUMAN`. A
+ * working-tree file that could set human identity would move SPEC.md §11's trust
+ * boundary from "the local machine" to "anyone who can write a file in the
+ * repository", and every agent that can edit source can write a file in the
+ * repository. So the file is inert, one verb resolves it, and a human evaluates
+ * that verb's output in their own shell.
+ *
+ * The narrowing here keeps every part of that argument intact:
+ *
+ * 1. **One variable, named by the policy.** What this module resolves is the
+ *    `vault.passphrase_env` variable and nothing else. It cannot be asked for
+ *    `APPROVAL_HUMAN`, so it cannot be used to claim an identity, attest a
+ *    policy, or grant a request. The whole human-only gate is untouched.
+ * 2. **One caller, inside a token window.** Reaching this function requires an
+ *    {@link ExecutionGrant}, which `adapters/contract.ts` mints and no other
+ *    module can construct: its brand is a `unique symbol` that is never
+ *    exported, so a call site outside the contract's execution path does not
+ *    type-check. A generic vault verb, `approval doctor`, `approval setup` and
+ *    every other caller of `vaultCredentialProvider` have no way to produce one,
+ *    which is the "no verb reads `.approval/env`" rule holding everywhere except
+ *    the one path named here.
+ *
+ *    The contract mints a grant in two phases and both are honoured, for a
+ *    reason worth stating: the credential resolution APRV-169 moved AHEAD of the
+ *    token spend runs in the `presented` phase, so a fallback that insisted on
+ *    `consumed` would refuse the very execution it exists to enable. A
+ *    `presented` grant is minted only when the caller's token matches the digest
+ *    the log's `approval.granted` recorded for this action, so it is still proof
+ *    that a human approved this action and that the caller holds the token that
+ *    approval minted. What it does not prove is that the token may still be
+ *    spent (TTL, revocation, single use), and it does not have to: those are
+ *    checked in `startExecution` before anything is appended, and no side effect
+ *    happens on the strength of this phase.
+ * 3. **The authority is the token, not the file.** A human looked at the
+ *    payload on their phone, tapped Approve, and a token was minted, delivered,
+ *    verified and consumed for exactly this action key and exactly these bytes.
+ *    The question this module answers is narrower than "may this process act":
+ *    that was already answered, by a person. It is "the action a human approved
+ *    is about to run, and the credential it needs is described in the
+ *    instance's own configuration; may the runtime read that description".
+ * 4. **Nothing is loaded into an environment.** The value is returned to the
+ *    vault provider and used to derive one key. It is never written to
+ *    `process.env`, never placed in an argv (`core/env-file.ts`'s helper
+ *    lookups already pass a service NAME and take the secret on stdout), never
+ *    logged, and never put in a message, a refusal, or a thrown error.
+ *
+ * What the demo case looks like, since it is the one that produced this task:
+ * the web-agent runner scrubs the agent child's environment of everything
+ * matching `APPROVAL|VAULT|TELEGRAM`, deliberately, because the server itself
+ * must hold no vault passphrase. The child then holds a granted token for one
+ * approved email and no way to open the vault that token is the key to. Before
+ * this module the only answers were to weaken the scrub or to send the mail by
+ * hand.
+ *
+ * ## What it does not defend
+ *
+ * Exactly what SPEC.md §10.4 and §11 already say the vault does not defend: a
+ * compromised host, and an agent that can read the passphrase. An agent that can
+ * read `.approval/env` and run the same helper lookups needs no adapter and no
+ * token; it decrypts the file directly. This module does not widen that
+ * exposure, because it reads what such an agent could already read. What it
+ * changes is that a process which holds a HUMAN'S GRANT and no passphrase can
+ * complete the action the human approved.
+ *
+ * Total and synchronous, like everything on the credential path: nothing here
+ * throws, and every failure is `null`. A `null` carries no detail on purpose;
+ * the caller's own refusal names the variable and the vault, and a diagnostic
+ * that quoted a keychain error would be the one string in this system that
+ * describes where a passphrase lives.
+ */
+import { type SourceRunner } from "../core/env-file.js";
+import type { ExecutionGrant } from "./contract.js";
+/**
+ * Resolve `variable` from the source map at `envFilePath`, under `grant`.
+ *
+ * Returns the value, or `null` for every other outcome: no grant, a `consumed`
+ * grant from a path where no token was spent, no file, a file this runtime will
+ * not read (wrong mode, unparseable), no line for this variable, an `env:` line
+ * (which asserts the value comes from the shell and resolves to nothing on its
+ * own), a helper that is missing or declined, or an empty result.
+ *
+ * Not re-exported anywhere. `adapters/vault-provider.ts` is its only caller, and
+ * `tests/vault-provider.test.ts` pins that.
+ */
+export declare function passphraseUnderGrant(grant: ExecutionGrant | null, envFilePath: string, variable: string, runner?: SourceRunner): string | null;

package/dist/src/adapters/env-passphrase.js

@@ -0,0 +1,132 @@
+/**
+ * The vault passphrase, resolved from `.approval/env` inside a granted window
+ * (SPEC.md §10.4, §5.2; APRV-168).
+ *
+ * ## Why this narrows a load-bearing rule, and how far
+ *
+ * `core/env-file.ts` states the rule this module bends, and states it as the
+ * reason the file exists at all: **no verb in this runtime reads `.approval/env`
+ * into its own environment.** The argument there is `APPROVAL_HUMAN`. A
+ * working-tree file that could set human identity would move SPEC.md §11's trust
+ * boundary from "the local machine" to "anyone who can write a file in the
+ * repository", and every agent that can edit source can write a file in the
+ * repository. So the file is inert, one verb resolves it, and a human evaluates
+ * that verb's output in their own shell.
+ *
+ * The narrowing here keeps every part of that argument intact:
+ *
+ * 1. **One variable, named by the policy.** What this module resolves is the
+ *    `vault.passphrase_env` variable and nothing else. It cannot be asked for
+ *    `APPROVAL_HUMAN`, so it cannot be used to claim an identity, attest a
+ *    policy, or grant a request. The whole human-only gate is untouched.
+ * 2. **One caller, inside a token window.** Reaching this function requires an
+ *    {@link ExecutionGrant}, which `adapters/contract.ts` mints and no other
+ *    module can construct: its brand is a `unique symbol` that is never
+ *    exported, so a call site outside the contract's execution path does not
+ *    type-check. A generic vault verb, `approval doctor`, `approval setup` and
+ *    every other caller of `vaultCredentialProvider` have no way to produce one,
+ *    which is the "no verb reads `.approval/env`" rule holding everywhere except
+ *    the one path named here.
+ *
+ *    The contract mints a grant in two phases and both are honoured, for a
+ *    reason worth stating: the credential resolution APRV-169 moved AHEAD of the
+ *    token spend runs in the `presented` phase, so a fallback that insisted on
+ *    `consumed` would refuse the very execution it exists to enable. A
+ *    `presented` grant is minted only when the caller's token matches the digest
+ *    the log's `approval.granted` recorded for this action, so it is still proof
+ *    that a human approved this action and that the caller holds the token that
+ *    approval minted. What it does not prove is that the token may still be
+ *    spent (TTL, revocation, single use), and it does not have to: those are
+ *    checked in `startExecution` before anything is appended, and no side effect
+ *    happens on the strength of this phase.
+ * 3. **The authority is the token, not the file.** A human looked at the
+ *    payload on their phone, tapped Approve, and a token was minted, delivered,
+ *    verified and consumed for exactly this action key and exactly these bytes.
+ *    The question this module answers is narrower than "may this process act":
+ *    that was already answered, by a person. It is "the action a human approved
+ *    is about to run, and the credential it needs is described in the
+ *    instance's own configuration; may the runtime read that description".
+ * 4. **Nothing is loaded into an environment.** The value is returned to the
+ *    vault provider and used to derive one key. It is never written to
+ *    `process.env`, never placed in an argv (`core/env-file.ts`'s helper
+ *    lookups already pass a service NAME and take the secret on stdout), never
+ *    logged, and never put in a message, a refusal, or a thrown error.
+ *
+ * What the demo case looks like, since it is the one that produced this task:
+ * the web-agent runner scrubs the agent child's environment of everything
+ * matching `APPROVAL|VAULT|TELEGRAM`, deliberately, because the server itself
+ * must hold no vault passphrase. The child then holds a granted token for one
+ * approved email and no way to open the vault that token is the key to. Before
+ * this module the only answers were to weaken the scrub or to send the mail by
+ * hand.
+ *
+ * ## What it does not defend
+ *
+ * Exactly what SPEC.md §10.4 and §11 already say the vault does not defend: a
+ * compromised host, and an agent that can read the passphrase. An agent that can
+ * read `.approval/env` and run the same helper lookups needs no adapter and no
+ * token; it decrypts the file directly. This module does not widen that
+ * exposure, because it reads what such an agent could already read. What it
+ * changes is that a process which holds a HUMAN'S GRANT and no passphrase can
+ * complete the action the human approved.
+ *
+ * Total and synchronous, like everything on the credential path: nothing here
+ * throws, and every failure is `null`. A `null` carries no detail on purpose;
+ * the caller's own refusal names the variable and the vault, and a diagnostic
+ * that quoted a keychain error would be the one string in this system that
+ * describes where a passphrase lives.
+ */
+import { readEnvFile, defaultSourceRunner } from "../core/env-file.js";
+/**
+ * Resolve `variable` from the source map at `envFilePath`, under `grant`.
+ *
+ * Returns the value, or `null` for every other outcome: no grant, a `consumed`
+ * grant from a path where no token was spent, no file, a file this runtime will
+ * not read (wrong mode, unparseable), no line for this variable, an `env:` line
+ * (which asserts the value comes from the shell and resolves to nothing on its
+ * own), a helper that is missing or declined, or an empty result.
+ *
+ * Not re-exported anywhere. `adapters/vault-provider.ts` is its only caller, and
+ * `tests/vault-provider.test.ts` pins that.
+ */
+export function passphraseUnderGrant(grant, envFilePath, variable, runner = defaultSourceRunner) {
+    // The window is the whole authorization. No grant at all, or a spent-phase
+    // grant from a path where no human was asked (supervised, autonomous: no
+    // token was spent), and this function has nothing to offer.
+    if (grant === null)
+        return null;
+    if (grant.phase === "consumed") {
+        if (typeof grant.tokenSha256 !== "string" || grant.tokenSha256.length === 0)
+            return null;
+    }
+    if (variable.length === 0)
+        return null;
+    const file = readEnvFile(envFilePath);
+    if (!file.ok || !file.present)
+        return null;
+    const entry = file.entries.find((candidate) => candidate.key === variable);
+    if (entry === undefined)
+        return null;
+    if (entry.kind === "literal") {
+        return entry.argument.length === 0 ? null : entry.argument;
+    }
+    if (entry.kind === "env") {
+        // `env:` says "this one comes from the shell that launched you". The shell
+        // that launched this one did not carry it, which is why we are here.
+        return null;
+    }
+    let outcome;
+    try {
+        outcome =
+            entry.kind === "keychain"
+                ? runner.keychain(entry.argument)
+                : runner.secretService(entry.argument);
+    }
+    catch {
+        return null;
+    }
+    if (!outcome.ok || outcome.value.length === 0)
+        return null;
+    return outcome.value;
+}
+//# sourceMappingURL=env-passphrase.js.map

package/dist/src/adapters/env-passphrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-passphrase.js","sourceRoot":"","sources":["../../../src/adapters/env-passphrase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,EAAE,WAAW,EAAqB,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1F;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA4B,EAC5B,WAAmB,EACnB,QAAgB,EAChB,MAAM,GAAiB,mBAAmB;IAE1C,2EAA2E;IAC3E,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO;YACL,KAAK,CAAC,IAAI,KAAK,UAAU;gBACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC"}

package/dist/src/adapters/public.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The supported adapter-author API.
+ *
+ * Keep this barrel deliberately small. Every name exported here is a package
+ * compatibility commitment; the surrounding adapter and core modules remain
+ * implementation details.
+ */
+export { ADAPTER_REFUSAL_CODES, CREDENTIAL_REFUSAL_CODES, executeThroughAdapter, type ActInput, type ActOutcome, type Adapter, type AdapterExecuteOptions, type AdapterExecuteRequest, type AdapterExecuteResult, type AdapterExecuteSuccess, type AdapterRefusal, type AdapterRefusalCode, type CredentialProvider, type CredentialRefusalCode, type CredentialResult, type ExecutionGrant, type JsonValue, type PrecheckInput, type PrecheckOutcome, } from "./contract.js";
+export { runAdapterConformance, type AdapterConformanceCase, type AdapterConformanceHarness, type ConformanceContext, } from "./conformance.js";
+export { vaultCredentialProvider, type VaultLocation, type VaultProviderOptions, } from "./vault-provider.js";
+export type { CredentialKind, CredentialSpec } from "../core/credential-spec.js";

package/dist/src/adapters/public.js

@@ -0,0 +1,11 @@
+/**
+ * The supported adapter-author API.
+ *
+ * Keep this barrel deliberately small. Every name exported here is a package
+ * compatibility commitment; the surrounding adapter and core modules remain
+ * implementation details.
+ */
+export { ADAPTER_REFUSAL_CODES, CREDENTIAL_REFUSAL_CODES, executeThroughAdapter, } from "./contract.js";
+export { runAdapterConformance, } from "./conformance.js";
+export { vaultCredentialProvider, } from "./vault-provider.js";
+//# sourceMappingURL=public.js.map

package/dist/src/adapters/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../src/adapters/public.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,GAiBtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,qBAAqB,GAItB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,uBAAuB,GAGxB,MAAM,qBAAqB,CAAC"}

package/dist/src/adapters/registry.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The built-in adapters, keyed by the classes they serve (APRV-205).
+ *
+ * One question is asked of this module and one only: **which credential names
+ * did the adapters for this class declare they cannot act without?** `approval
+ * run` asks it before it spawns, because those names are the ones the scrub in
+ * `core/child-env.ts` lets through into the child's environment; everything
+ * else under the credential-bearing prefixes is withheld.
+ *
+ * The declaration is the adapter's own, static, and reached through no flag.
+ * That is the point: a caller-supplied list of variables to keep would be a
+ * caller-supplied way to get the token back, which is the hole this task
+ * closes rather than a feature of the fix. {@link declaredCredentialsForClass}
+ * therefore takes a class and nothing else, and reads {@link builtInAdapters}
+ * and nothing else.
+ *
+ * The list is deliberately tiny and deliberately here rather than in
+ * `src/core/`: core does not know about adapters and must not learn, so the
+ * lookup lives beside the adapters and the CLI does the joining.
+ *
+ * This roster is the build's answer to "which adapters exist". The CLI's own
+ * adapter table (`cli/adapter.ts`) answers a different question, "which
+ * adapters have a verb", and the two are kept side by side on purpose: an
+ * adapter with no CLI face still declares credentials, and this module must
+ * not depend on the CLI to know that.
+ */
+import type { Adapter } from "./contract.js";
+/**
+ * Every adapter this build ships. Since APRV-223 that is two, and both serve
+ * `communicate.email.external`: the union of their declared names is what the
+ * scrub lets through, which is the honest superset {@link
+ * unionRequiredCredentials} was written for rather than a collision to resolve.
+ *
+ * Constructed with defaults: the question asked
+ * here is about DECLARED names, and no default answers it differently from a
+ * configured instance except by renaming vault entries, which is a deployment's
+ * own business and not a reason to open a socket at lookup time.
+ */
+export declare function builtInAdapters(): readonly Adapter[];
+/**
+ * The credential names declared by `adapters` serving `cls`, deduplicated and
+ * in roster order.
+ *
+ * Every adapter that serves the class contributes, because "which adapter would
+ * have run this" is a question with no answer at this point in the flow, and
+ * the union of two adapters' declarations is the honest superset. Two adapters
+ * may serve one class, and when they do the scrub lets both sets of names
+ * through rather than guessing between them.
+ *
+ * Pure, and separated from {@link declaredCredentialsForClass} so the union can
+ * be tested over more adapters than a build happens to ship. It is not a seam
+ * for enforcement: nothing outside a test passes it a roster.
+ */
+export declare function unionRequiredCredentials(adapters: readonly Adapter[], cls: string): readonly string[];
+/**
+ * The credential names declared by the built-in adapters serving `cls`, or an
+ * empty list when no adapter serves it.
+ */
+export declare function declaredCredentialsForClass(cls: string): readonly string[];

package/dist/src/adapters/registry.js

@@ -0,0 +1,77 @@
+/**
+ * The built-in adapters, keyed by the classes they serve (APRV-205).
+ *
+ * One question is asked of this module and one only: **which credential names
+ * did the adapters for this class declare they cannot act without?** `approval
+ * run` asks it before it spawns, because those names are the ones the scrub in
+ * `core/child-env.ts` lets through into the child's environment; everything
+ * else under the credential-bearing prefixes is withheld.
+ *
+ * The declaration is the adapter's own, static, and reached through no flag.
+ * That is the point: a caller-supplied list of variables to keep would be a
+ * caller-supplied way to get the token back, which is the hole this task
+ * closes rather than a feature of the fix. {@link declaredCredentialsForClass}
+ * therefore takes a class and nothing else, and reads {@link builtInAdapters}
+ * and nothing else.
+ *
+ * The list is deliberately tiny and deliberately here rather than in
+ * `src/core/`: core does not know about adapters and must not learn, so the
+ * lookup lives beside the adapters and the CLI does the joining.
+ *
+ * This roster is the build's answer to "which adapters exist". The CLI's own
+ * adapter table (`cli/adapter.ts`) answers a different question, "which
+ * adapters have a verb", and the two are kept side by side on purpose: an
+ * adapter with no CLI face still declares credentials, and this module must
+ * not depend on the CLI to know that.
+ */
+import { agentmailAdapter } from "./agentmail.js";
+import { emailAdapter } from "./email.js";
+import { zzzAdapter } from "./zzz.js";
+/**
+ * Every adapter this build ships. Since APRV-223 that is two, and both serve
+ * `communicate.email.external`: the union of their declared names is what the
+ * scrub lets through, which is the honest superset {@link
+ * unionRequiredCredentials} was written for rather than a collision to resolve.
+ *
+ * Constructed with defaults: the question asked
+ * here is about DECLARED names, and no default answers it differently from a
+ * configured instance except by renaming vault entries, which is a deployment's
+ * own business and not a reason to open a socket at lookup time.
+ */
+export function builtInAdapters() {
+    return [emailAdapter(), agentmailAdapter(), zzzAdapter()];
+}
+/**
+ * The credential names declared by `adapters` serving `cls`, deduplicated and
+ * in roster order.
+ *
+ * Every adapter that serves the class contributes, because "which adapter would
+ * have run this" is a question with no answer at this point in the flow, and
+ * the union of two adapters' declarations is the honest superset. Two adapters
+ * may serve one class, and when they do the scrub lets both sets of names
+ * through rather than guessing between them.
+ *
+ * Pure, and separated from {@link declaredCredentialsForClass} so the union can
+ * be tested over more adapters than a build happens to ship. It is not a seam
+ * for enforcement: nothing outside a test passes it a roster.
+ */
+export function unionRequiredCredentials(adapters, cls) {
+    const names = [];
+    for (const adapter of adapters) {
+        if (!adapter.classes.includes(cls))
+            continue;
+        for (const name of adapter.requiredCredentials ?? []) {
+            if (!names.includes(name))
+                names.push(name);
+        }
+    }
+    return names;
+}
+/**
+ * The credential names declared by the built-in adapters serving `cls`, or an
+ * empty list when no adapter serves it.
+ */
+export function declaredCredentialsForClass(cls) {
+    return unionRequiredCredentials(builtInAdapters(), cls);
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/adapters/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAGtC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAC5B,GAAW;IAEX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,OAAO,wBAAwB,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC"}