approval-md 0.0.1 → 0.2.0

package/dist/src/core/policy-load.js

@@ -0,0 +1,536 @@
+/**
+ * Policy loading: find `APPROVAL.md`, extract its single
+ * ` ```yaml approval-policy ` fenced block, parse it, validate it, and resolve
+ * its duration strings to milliseconds.
+ *
+ * SPEC.md §5: the policy file is "prose for humans plus exactly one fenced
+ * block for machines". Implementations MUST parse the fenced block, MUST
+ * ignore surrounding prose, and MUST accept `APPROVALS.md` as a fallback
+ * filename with `APPROVAL.md` winning when both exist.
+ *
+ * ## Fail-closed contract (SPEC.md §5.2)
+ *
+ * Every failure mode of this module returns `{ ok: false, code, message }` —
+ * nothing throws, and nothing returns a partially-understood policy. A not-ok
+ * result places a hard obligation on the consumer (the APRV-11 class matcher
+ * and everything downstream of it): **treat every class as `manual`.** There
+ * is no "load what we could" path, because a policy the runtime only half
+ * understood is a policy whose author believes constraints are in force that
+ * are not. A missing file is not permission to run unattended; it is the
+ * absence of any grant, which is `manual` for everything.
+ *
+ * ## YAML version stance
+ *
+ * The `yaml` package parses **YAML 1.2** by default and this module keeps that
+ * default, additionally pinning `schema: "core"` — the YAML 1.2 core schema.
+ * Consequences that matter for a policy file:
+ *
+ * - YAML 1.1-isms are **not** honored. `yes`, `no`, `on`, `off`, `y`, `n` parse
+ *   as the plain strings `"yes"`, `"no"`, … and **not** as booleans; sexagesimal
+ *   (`1:30`) is a string, not a number. This is deliberate. A policy file is a
+ *   permission document: the difference between the string `"no"` and the
+ *   boolean `false` must never depend on which YAML dialect an implementation
+ *   happens to ship. Under YAML 1.2 core, only `true`/`false` are booleans, so
+ *   a policy that writes `autonomy: no` yields the string `"no"`, fails the
+ *   closed `autonomy` enum in `policy.schema.json`, and the whole policy fails
+ *   closed to all-`manual` — a loud rejection instead of a silent coercion.
+ * - No custom or implicit-typed tags are accepted. Any node carrying an
+ *   explicit tag (`!!timestamp`, `!!binary`, `!Anything`) is rejected as
+ *   `yaml-error`, so a policy value can only ever be a string, number, boolean,
+ *   null, map, or sequence. Tag-driven type coercion (and any tag-driven
+ *   construction in a future `yaml` release) can therefore never reach the
+ *   schema validator.
+ * - Anchors and aliases are permitted but bounded: {@link MAX_ALIAS_COUNT}
+ *   caps alias expansion so a billion-laughs document fails closed as
+ *   `yaml-error` instead of exhausting memory.
+ * - Duplicate mapping keys are parse errors (the `yaml` default), not
+ *   last-one-wins.
+ *
+ * Any parser error **or warning** fails the load closed. Warnings in `yaml`
+ * flag constructs the parser recovered from (unsupported directives, deprecated
+ * syntax); "recovered from" is exactly the silent reinterpretation a policy
+ * file must not tolerate.
+ *
+ * ## Determinism
+ *
+ * `loadPolicy` is a pure function of the file bytes on disk plus the schema
+ * directory. No clock, no network, no randomness, no cross-call caching.
+ */
+import { readFileSync } from "node:fs";
+import { basename, join } from "node:path";
+import { isNode, parseDocument, visit } from "yaml";
+import { builtinProtectedPathClass, parseProtectedEntry, } from "./command-class.js";
+import { scanFences } from "./md-fence.js";
+// The routing floor (APRV-266) needs the resolver's own strictness table and
+// its own resolution of two classes, so this module imports the matcher that
+// imports this module's TYPES. The cycle is type-only in the other direction
+// and erased at build, so nothing circular exists at runtime — and the
+// alternative, a private strictness table here, is exactly the drift a floor
+// must never have from the resolution it floors.
+import { resolve, STRICTNESS } from "./policy-match.js";
+import { promptBlockErrors } from "./prompt-layout.js";
+import { validate } from "./validate.js";
+/**
+ * Upper bound on alias expansions in one policy document.
+ *
+ * Anchors are legitimate in a hand-written policy (sharing an approver list
+ * across a few class rules), so aliases are not banned outright — but alias
+ * expansion is exponential in the number of nesting levels, which is the
+ * "billion laughs" resource-exhaustion attack. 32 is far above what any
+ * plausible hand-written APPROVAL.md needs and far below anything that costs
+ * measurable memory. Exceeding it is a hard `yaml-error`.
+ */
+export const MAX_ALIAS_COUNT = 32;
+/** Info string that marks the machine-readable policy block (SPEC.md §5). */
+export const POLICY_INFO_STRING = "yaml approval-policy";
+/** Policy filenames, in precedence order (SPEC.md §5). */
+export const POLICY_FILENAMES = ["APPROVAL.md", "APPROVALS.md"];
+/** Duration grammar from SPEC.md §5.2: `<positive integer><unit>`. */
+const DURATION_PATTERN = /^([1-9][0-9]*)(ms|s|m|h|d|w)$/;
+const MS_PER_UNIT = {
+    ms: 1,
+    s: 1_000,
+    m: 60_000,
+    h: 3_600_000,
+    d: 86_400_000,
+    w: 604_800_000,
+};
+/** The delivery mode in force. Fail-closed: anything unusable is `manual`. */
+export function tokenDeliveryOf(load) {
+    if (!load.ok)
+        return "manual";
+    return load.policy.defaults?.token_delivery === "sealed" ? "sealed" : "manual";
+}
+/** The defaults a policy that declares no `daemon` block is read under. */
+export const DEFAULT_POLICY_DAEMON_READ = Object.freeze({
+    readProof: "full",
+    fullReproofEvery: 50,
+    fullReproofAfterMs: 60_000,
+    declared: false,
+});
+/**
+ * Parse a SPEC.md §5.2 duration string to milliseconds.
+ *
+ * Accepts exactly `<positive integer><unit>` with unit in `ms|s|m|h|d|w`
+ * (`w` = 7 days). Returns `null` for **any** deviation: zero, leading zeros,
+ * negatives, fractions, compound forms (`1h30m`), surrounding whitespace,
+ * empty input, unknown units. Deterministic and total — never throws.
+ */
+export function parseDuration(text) {
+    if (typeof text !== "string")
+        return null;
+    const match = DURATION_PATTERN.exec(text);
+    if (match === null)
+        return null;
+    const digits = match[1];
+    const unit = match[2];
+    if (digits === undefined || unit === undefined)
+        return null;
+    const scale = MS_PER_UNIT[unit];
+    if (scale === undefined)
+        return null;
+    const value = Number(digits);
+    if (!Number.isSafeInteger(value))
+        return null;
+    return value * scale;
+}
+function failure(code, message, errors, raw) {
+    const base = errors === undefined
+        ? { ok: false, code, message }
+        : { ok: false, code, message, errors };
+    return raw === undefined ? base : { ...base, ok: false, code, message, raw };
+}
+function errorMessage(cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+}
+/**
+ * Scan this file's markdown for policy fences.
+ *
+ * A one-line wrapper since APRV-238. The CommonMark rules, and the doc comment
+ * arguing them, moved to {@link scanFences} in `core/md-fence.ts` so the values
+ * reader of SPEC.md §5.3 could ask the same question about its own info string
+ * without importing this module. Same rules, same results, one implementation.
+ */
+function scanPolicyFences(markdown) {
+    return scanFences(markdown, POLICY_INFO_STRING);
+}
+/**
+ * Parse YAML under the hardened settings described in the module header:
+ * YAML 1.2 core schema, warnings fatal, duplicate keys fatal, explicitly tagged
+ * nodes rejected, alias expansion bounded by {@link MAX_ALIAS_COUNT}.
+ *
+ * **This is the one implementation.** `core/frontmatter.ts` parses the *other*
+ * half of the same permission surface — the task envelope declares the class,
+ * cost, and reversibility that policy is matched against — and used to carry a
+ * replica of these settings. APRV-20 (finding S5) deleted the replica: a task
+ * envelope and a policy block are now hardened by the same code, so the two
+ * cannot drift apart, and a hardening fix lands in both at once.
+ *
+ * Never throws; every failure is a message. Pure function of the source text.
+ */
+export function parseHardenedYaml(source, labels) {
+    const { subject, tagContext } = labels;
+    let document;
+    try {
+        document = parseDocument(source, {
+            schema: "core",
+            logLevel: "silent",
+            prettyErrors: false,
+        });
+    }
+    catch (cause) {
+        return { ok: false, message: `${subject} could not be parsed: ${errorMessage(cause)}` };
+    }
+    if (document.errors.length > 0) {
+        return {
+            ok: false,
+            message: `${subject} could not be parsed: ${document.errors
+                .map((error) => error.message)
+                .join("; ")}`,
+        };
+    }
+    if (document.warnings.length > 0) {
+        return {
+            ok: false,
+            message: `${subject} parsed with warnings, which fail closed: ${document.warnings
+                .map((warning) => warning.message)
+                .join("; ")}`,
+        };
+    }
+    // Reject explicitly tagged nodes outright: a value must only ever be a plain
+    // string, number, boolean, null, map, or sequence.
+    let taggedTag = null;
+    visit(document, (_key, node) => {
+        if (taggedTag === null && isNode(node) && typeof node.tag === "string") {
+            taggedTag = node.tag;
+        }
+        return undefined;
+    });
+    if (taggedTag !== null) {
+        return {
+            ok: false,
+            message: `${subject} uses an explicit tag (${String(taggedTag)}); tags are not accepted in ${tagContext}`,
+        };
+    }
+    let value;
+    try {
+        // Alias expansion happens here, so this is where the bound belongs
+        // (`maxAliasCount` is a ToJSOptions field): exceeding it throws.
+        value = document.toJS({ maxAliasCount: MAX_ALIAS_COUNT });
+    }
+    catch (cause) {
+        return { ok: false, message: `${subject} could not be materialised: ${errorMessage(cause)}` };
+    }
+    return { ok: true, value };
+}
+/** {@link parseHardenedYaml} with this module's labels and error code. */
+function parsePolicyYaml(source) {
+    const parsed = parseHardenedYaml(source, {
+        subject: "policy YAML",
+        tagContext: "a policy block",
+    });
+    return parsed.ok ? { value: parsed.value } : failure("yaml-error", parsed.message);
+}
+function resolveFile(options) {
+    if (options.file !== undefined) {
+        try {
+            return { path: options.file, text: readFileSync(options.file, "utf8") };
+        }
+        catch (cause) {
+            return failure("file-missing", `policy file ${options.file} could not be read: ${errorMessage(cause)}`);
+        }
+    }
+    const dir = options.dir ?? process.cwd();
+    for (const filename of POLICY_FILENAMES) {
+        const candidate = join(dir, filename);
+        try {
+            return { path: candidate, text: readFileSync(candidate, "utf8") };
+        }
+        catch {
+            continue;
+        }
+    }
+    return failure("file-missing", `no policy file found in ${dir} (looked for ${POLICY_FILENAMES.join(", ")})`);
+}
+/**
+ * The fail-closed result for policy bytes that could not be read at all.
+ *
+ * Exported for callers that read the file themselves and still need a
+ * {@link PolicyLoadResult} to hand `resolve` (APRV-142): a caller must never
+ * have to invent one, because an invented result is where a permissive default
+ * would creep in. `file-missing` is the same code {@link loadPolicy} reports
+ * for the same fact.
+ */
+export function policyUnreadable(path, cause) {
+    return failure("file-missing", `policy file ${path} could not be read: ${cause}`);
+}
+/**
+ * Extract, parse, and validate the policy block of an already-read policy file.
+ *
+ * The bytes-in form of {@link loadPolicy}, split out for APRV-142: a gate
+ * operation reads `APPROVAL.md` **once** and feeds the same buffer to both the
+ * attestation hash check and this parse, so no mid-operation file swap can
+ * attest one policy and enforce another. `path` is used for messages and for
+ * {@link PolicySource}; nothing here touches the filesystem.
+ *
+ * Fails closed on every error path and never throws, exactly as
+ * {@link loadPolicy} does — it is the same code.
+ */
+export function loadPolicyText(path, text, options = {}) {
+    const resolved = { path, text };
+    const scan = scanPolicyFences(resolved.text);
+    if (scan.unterminated) {
+        // CommonMark would close an unterminated fence at EOF; a policy file must
+        // not be that forgiving, because the truncated tail of a policy is
+        // indistinguishable from a complete one.
+        return failure("no-block", `${resolved.path}: unterminated \`\`\`${POLICY_INFO_STRING} fence (no closing fence before end of file)`);
+    }
+    if (scan.blocks.length === 0) {
+        return failure("no-block", `${resolved.path}: no \`\`\`${POLICY_INFO_STRING} fenced block found`);
+    }
+    if (scan.blocks.length > 1) {
+        return failure("multiple-blocks", `${resolved.path}: found ${scan.blocks.length} \`\`\`${POLICY_INFO_STRING} fenced blocks; SPEC.md §5 allows exactly one`);
+    }
+    const parsed = parsePolicyYaml(scan.blocks[0] ?? "");
+    if ("ok" in parsed)
+        return parsed;
+    const validation = validate("policy", parsed.value, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!validation.ok) {
+        return failure("schema-invalid", `${resolved.path}: policy block failed schema validation`, validation.errors, parsed.value);
+    }
+    const policy = parsed.value;
+    // `channels.<name>.prompt` (APRV-218), checked once here for every channel
+    // name including the untyped ones the schema admits as free-form objects.
+    // Same fail direction as every other semantic check on this path: the WHOLE
+    // policy fails closed to all-`manual` rather than one channel quietly
+    // rendering a layout its author did not write. See `core/prompt-layout.ts`
+    // for why both nets exist.
+    const promptErrors = promptBlockErrors(policy);
+    if (promptErrors.length > 0) {
+        return failure("schema-invalid", `${resolved.path}: channel prompt layout is not usable`, promptErrors, parsed.value);
+    }
+    const ttlText = policy.defaults?.approval_ttl;
+    let approvalTtlMs = null;
+    if (ttlText !== undefined) {
+        approvalTtlMs = parseDuration(ttlText);
+        if (approvalTtlMs === null) {
+            // Unreachable while the schema's duration pattern and the grammar here
+            // agree; kept as a fail-closed backstop rather than an assertion.
+            return failure("schema-invalid", `${resolved.path}: defaults.approval_ttl "${ttlText}" is not a valid duration`, [
+                {
+                    path: "/defaults/approval_ttl",
+                    keyword: "duration",
+                    message: "expected <positive integer><unit> with unit in ms|s|m|h|d|w",
+                },
+            ], parsed.value);
+        }
+    }
+    // The same treatment, for the same reason: one parse of the grammar, one
+    // number every reader shares, and an unparseable duration fails the whole
+    // policy rather than leaving one key quietly unread (APRV-58).
+    const skewText = policy.audit?.skew_tolerance;
+    let skewToleranceMs = null;
+    if (skewText !== undefined) {
+        skewToleranceMs = parseDuration(skewText);
+        if (skewToleranceMs === null) {
+            return failure("schema-invalid", `${resolved.path}: audit.skew_tolerance "${skewText}" is not a valid duration`, [
+                {
+                    path: "/audit/skew_tolerance",
+                    keyword: "duration",
+                    message: "expected <positive integer><unit> with unit in ms|s|m|h|d|w",
+                },
+            ], parsed.value);
+        }
+    }
+    // And once more for the checkpoint cadence (APRV-220). Report-only like the
+    // skew tolerance, and parsed the same strict way for the same reason: an
+    // operator who wrote `1 day` should be told, not quietly given no cadence at
+    // all and left believing one is in force.
+    const checkpointText = policy.audit?.checkpoint_every;
+    let checkpointEveryMs = null;
+    if (checkpointText !== undefined) {
+        checkpointEveryMs = parseDuration(checkpointText);
+        if (checkpointEveryMs === null) {
+            return failure("schema-invalid", `${resolved.path}: audit.checkpoint_every "${checkpointText}" is not a valid duration`, [
+                {
+                    path: "/audit/checkpoint_every",
+                    keyword: "duration",
+                    message: "expected <positive integer><unit> with unit in ms|s|m|h|d|w",
+                },
+            ], parsed.value);
+        }
+    }
+    // The `daemon` block (APRV-217), read the same way: one parse here, defaults
+    // applied once, and an unparseable duration fails the WHOLE policy rather
+    // than leaving a key the author believed was in force quietly unread.
+    const reproofText = policy.daemon?.full_reproof_after;
+    let fullReproofAfterMs = DEFAULT_POLICY_DAEMON_READ.fullReproofAfterMs;
+    if (reproofText !== undefined) {
+        const parsedMs = parseDuration(reproofText);
+        if (parsedMs === null) {
+            return failure("schema-invalid", `${resolved.path}: daemon.full_reproof_after "${reproofText}" is not a valid duration`, [
+                {
+                    path: "/daemon/full_reproof_after",
+                    keyword: "duration",
+                    message: "expected <positive integer><unit> with unit in ms|s|m|h|d|w",
+                },
+            ], parsed.value);
+        }
+        fullReproofAfterMs = parsedMs;
+    }
+    const daemonRead = {
+        readProof: policy.daemon?.read_proof ?? DEFAULT_POLICY_DAEMON_READ.readProof,
+        fullReproofEvery: policy.daemon?.full_reproof_every ?? DEFAULT_POLICY_DAEMON_READ.fullReproofEvery,
+        fullReproofAfterMs,
+        declared: policy.daemon !== undefined,
+    };
+    const loaded = {
+        ok: true,
+        policy,
+        source: { path: resolved.path, filename: basename(resolved.path) },
+        durations: { approvalTtlMs, skewToleranceMs, checkpointEveryMs },
+        daemon: daemonRead,
+        notes: aliasNotes(policy),
+    };
+    // APRV-266: the routing floor is the LAST gate on a load, because it is the
+    // only check here that needs the resolved policy rather than the parsed one.
+    const floor = checkProtectedRouteFloor(loaded);
+    if (floor !== null) {
+        return failure("protected-route-floor", `${resolved.path}: ${floor}`, undefined, parsed.value);
+    }
+    return loaded;
+}
+/**
+ * The routing floor (amended SPEC.md §5.2, APRV-266): a `protected_paths`
+ * routing may make a BUILT-IN protected path stricter and never weaker.
+ *
+ * `protected_paths` has been additive-only since APRV-107 for a reason that
+ * routing does not repeal: a policy that could shrink its own protected surface
+ * is a policy an agent can edit its way out of. Routing is a new way to try —
+ * `{path: CLAUDE.md, class: policy.edit.docs}` with `policy.edit.docs:
+ * autonomous` would take the agent instruction files out of the gate without
+ * removing a single path from any list, and every surface downstream would
+ * report the policy as widened.
+ *
+ * So: for each entry that routes a path the runtime protects on its own, the
+ * sub-class must resolve at least as strictly as the `policy.edit` line does.
+ * Strictness is `policy-match.ts`'s own table, so the floor and the resolver
+ * cannot come to different conclusions about which of two levels is stricter,
+ * and a tie on the level compares the live RATE: `supervised-live 0.01` under a
+ * `policy.edit` of `supervised-live 0.1` gates one tenth as often as the line it
+ * replaces, which is a weakening whatever the level says.
+ *
+ * A route aimed at a `policy.core` or `log.mutate` path is refused outright
+ * rather than allowed to sit inert. It never fires — `protectedPathClass` tier 2
+ * answers before the routed tier, which is §11.1 invariant 9 holding — but an
+ * author reading their own file would believe a rule is in force that the
+ * runtime will never consult, and a policy nobody can read correctly is the
+ * failure this project exists to prevent.
+ *
+ * The consequence of a failure is that the policy does not load AT ALL, and a
+ * policy that does not load resolves every class to `manual`. That is the
+ * strictest available answer and the one this file has always given: an author
+ * who wrote a weakening they did not intend gets everything gated, plus a
+ * message naming the entry, rather than the weakening.
+ *
+ * `null` when the policy is clear; otherwise the message.
+ */
+export function checkProtectedRouteFloor(load) {
+    if (!load.ok)
+        return null;
+    const entries = load.policy.protected_paths ?? [];
+    if (!entries.some((entry) => typeof entry !== "string"))
+        return null;
+    const line = resolve(load, "policy.edit");
+    for (const entry of entries) {
+        if (typeof entry === "string")
+            continue;
+        const parsedEntry = parseProtectedEntry(entry);
+        if (parsedEntry === null || parsedEntry.routed === null) {
+            return `protected_paths entry ${JSON.stringify(entry.path)} routes to ${JSON.stringify(entry.class)}, which is not a \`policy.edit\` sub-class. A policy may name its own sub-classes under \`policy.edit\` and nothing else: the gate's own organs and the record of what happened are the runtime's to classify (SPEC.md §11.1 invariant 9).`;
+        }
+        const builtin = builtinProtectedPathClass(entry.path);
+        if (builtin === "log.mutate" || builtin === "policy.core") {
+            return `protected_paths entry ${JSON.stringify(entry.path)} routes a built-in ${builtin} path to ${JSON.stringify(parsedEntry.routed)}. That route can never fire — the runtime answers a path by the strictest surface it names, and ${builtin} is decided before any policy entry is read — so the policy is refused rather than loaded with a rule its author believes is in force.`;
+        }
+        if (builtin === null)
+            continue;
+        const routed = resolve(load, parsedEntry.routed);
+        const ordinaryWeaker = STRICTNESS[routed.declaredAutonomy] > STRICTNESS[line.declaredAutonomy] ||
+            (STRICTNESS[routed.declaredAutonomy] === STRICTNESS[line.declaredAutonomy] &&
+                routed.liveRate !== null &&
+                line.liveRate !== null &&
+                routed.liveRate < line.liveRate);
+        const irreversibleLine = resolve(load, "policy.edit", { reversible: false });
+        const irreversibleRouted = resolve(load, parsedEntry.routed, { reversible: false });
+        const irreversibleWeaker = STRICTNESS[irreversibleRouted.declaredAutonomy] >
+            STRICTNESS[irreversibleLine.declaredAutonomy] ||
+            (STRICTNESS[irreversibleRouted.declaredAutonomy] ===
+                STRICTNESS[irreversibleLine.declaredAutonomy] &&
+                irreversibleRouted.liveRate !== null &&
+                irreversibleLine.liveRate !== null &&
+                irreversibleRouted.liveRate < irreversibleLine.liveRate);
+        if (ordinaryWeaker || irreversibleWeaker) {
+            const comparison = ordinaryWeaker
+                ? `${describeLevel(routed.declaredAutonomy, routed.liveRate)} — weaker than the \`policy.edit\` line's own ${describeLevel(line.declaredAutonomy, line.liveRate)}`
+                : `${describeLevel(irreversibleRouted.declaredAutonomy, irreversibleRouted.liveRate)} for reversible: false — weaker than the \`policy.edit\` line's effective ${describeLevel(irreversibleLine.declaredAutonomy, irreversibleLine.liveRate)} for reversible: false`;
+            return `protected_paths entry ${JSON.stringify(entry.path)} routes a built-in policy.edit path to ${JSON.stringify(parsedEntry.routed)}, which resolves ${comparison}. \`protected_paths\` is additive: it may widen the protected surface and may never narrow it, and routing a built-in path to a looser sub-class would narrow it without removing anything from any list. Declare ${JSON.stringify(parsedEntry.routed)} at least as strictly as \`policy.edit\`, or route a path the runtime does not already protect.`;
+        }
+    }
+    return null;
+}
+/** A level and its rate, as the floor's message names them. */
+function describeLevel(declared, liveRate) {
+    return liveRate === null ? declared : `${declared} at ${String(liveRate)}`;
+}
+/**
+ * Amended SPEC.md §5.2 (APRV-127): one note per place a policy still writes the
+ * bare `supervised`.
+ *
+ * The alias keeps every pre-split policy meaning exactly what its author meant:
+ * `supervised` was retrospective sampling, and `supervised-retro` is that same
+ * behaviour under its honest name. What the alias must never be is quiet. An
+ * author reading the split for the first time can reasonably believe `supervised`
+ * now means "supervised somehow, possibly live"; the note says, in the one place
+ * a reader is already looking, that it does not.
+ *
+ * Pure, total, and ordered: `defaults` first, then class patterns in sorted
+ * order, so the notes of one policy are byte-stable across runs.
+ */
+function aliasNotes(policy) {
+    const notes = [];
+    const say = (where) => ({
+        code: "supervised-alias",
+        where,
+        message: `${where} declares the bare \`supervised\`, which parses as \`supervised-retro\`: the action executes immediately and is sampled for review AFTERWARDS. Nothing about it changed with the autonomy split — this is the same behaviour under its honest name. Write \`supervised-retro\` to say so explicitly, or \`supervised-live: <rate>\` to have a fraction of the class stop for a human FIRST.`,
+    });
+    if (policy.defaults?.autonomy === "supervised")
+        notes.push(say("defaults.autonomy"));
+    for (const pattern of Object.keys(policy.classes ?? {}).sort()) {
+        if (policy.classes?.[pattern]?.autonomy === "supervised") {
+            notes.push(say(`classes.${pattern}`));
+        }
+    }
+    return notes;
+}
+/**
+ * Load, extract, parse, and validate the policy block of an `APPROVAL.md`.
+ *
+ * Discovery: `options.file` when given, otherwise `APPROVAL.md` in
+ * `options.dir` (default cwd), falling back to `APPROVALS.md`. `APPROVAL.md`
+ * wins when both exist (SPEC.md §5).
+ *
+ * Fails closed on every error path — see {@link PolicyLoadResult}. Never
+ * throws; a thrown error would be a policy bypass.
+ *
+ * This is discovery plus {@link loadPolicyText}. A caller that has already read
+ * the bytes (the gate, since APRV-142) calls the latter directly rather than
+ * paying for a second read that could see different bytes.
+ */
+export function loadPolicy(options = {}) {
+    const resolved = resolveFile(options);
+    if ("ok" in resolved)
+        return resolved;
+    return loadPolicyText(resolved.path, resolved.text, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+}
+//# sourceMappingURL=policy-load.js.map

package/dist/src/core/policy-load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-load.js","sourceRoot":"","sources":["../../../src/core/policy-load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAEpD,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAkB,MAAM,eAAe,CAAC;AAC3D,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,iDAAiD;AACjD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAwB,MAAM,eAAe,CAAC;AAE/D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAEzD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAEzE,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,MAAM,WAAW,GAAqC;IACpD,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,WAAW;CACf,CAAC;AAuEF,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjF,CAAC;AAwMD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GAAqB,MAAM,CAAC,MAAM,CAAC;IACxE,SAAS,EAAE,MAAM;IACjB,gBAAgB,EAAE,EAAE;IACpB,kBAAkB,EAAE,MAAM;IAC1B,QAAQ,EAAE,KAAK;CAChB,CAAC,CAAC;AAsFH;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,KAAK,GAAG,KAAK,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CACd,IAAyB,EACzB,OAAe,EACf,MAA0B,EAC1B,GAAa;IAEb,MAAM,IAAI,GAAqB,MAAM,KAAK,SAAS;QACjD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;QAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACzC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAClD,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,MAA0B;IAE1B,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACvC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,yBAAyB,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,OAAO,yBAAyB,QAAQ,CAAC,MAAM;iBACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;iBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,OAAO,6CAA6C,QAAQ,CAAC,QAAQ;iBAC9E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;iBACjC,IAAI,CAAC,IAAI,CAAC,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,mDAAmD;IACnD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,OAAO,0BAA0B,MAAM,CAAC,SAAS,CAAC,+BAA+B,UAAU,EAAE;SAC1G,CAAC;IACJ,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,mEAAmE;QACnE,iEAAiE;QACjE,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,+BAA+B,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE;QACvC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,gBAAgB;KAC7B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B;IAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CACZ,cAAc,EACd,eAAe,OAAO,CAAC,IAAI,uBAAuB,YAAY,CAAC,KAAK,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CACZ,cAAc,EACd,2BAA2B,GAAG,gBAAgB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,OAAO,OAAO,CAAC,cAAc,EAAE,eAAe,IAAI,uBAAuB,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,IAAY,EACZ,OAAO,GAA2B,EAAE;IAEpC,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEhC,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,0EAA0E;QAC1E,mEAAmE;QACnE,yCAAyC;QACzC,OAAO,OAAO,CACZ,UAAU,EACV,GAAG,QAAQ,CAAC,IAAI,wBAAwB,kBAAkB,8CAA8C,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CACZ,UAAU,EACV,GAAG,QAAQ,CAAC,IAAI,cAAc,kBAAkB,qBAAqB,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CACZ,iBAAiB,EACjB,GAAG,QAAQ,CAAC,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,UAAU,kBAAkB,+CAA+C,CACzH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,UAAU,GAAG,QAAQ,CACzB,QAAQ,EACR,MAAM,CAAC,KAAK,EACZ,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,yCAAyC,EACzD,UAAU,CAAC,MAAM,EACjB,MAAM,CAAC,KAAK,CACb,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAe,CAAC;IAEtC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,uCAAuC,EACvD,YAAY,EACZ,MAAM,CAAC,KAAK,CACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC;IAC9C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kEAAkE;YAClE,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,4BAA4B,OAAO,2BAA2B,EAC9E;gBACE;oBACE,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,6DAA6D;iBACvE;aACF,EACD,MAAM,CAAC,KAAK,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC;IAC9C,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,2BAA2B,QAAQ,2BAA2B,EAC9E;gBACE;oBACE,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,6DAA6D;iBACvE;aACF,EACD,MAAM,CAAC,KAAK,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACtD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,iBAAiB,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,6BAA6B,cAAc,2BAA2B,EACtF;gBACE;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,6DAA6D;iBACvE;aACF,EACD,MAAM,CAAC,KAAK,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACtD,IAAI,kBAAkB,GAAG,0BAA0B,CAAC,kBAAkB,CAAC;IACvE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,OAAO,CACZ,gBAAgB,EAChB,GAAG,QAAQ,CAAC,IAAI,gCAAgC,WAAW,2BAA2B,EACtF;gBACE;oBACE,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,6DAA6D;iBACvE;aACF,EACD,MAAM,CAAC,KAAK,CACb,CAAC;QACJ,CAAC;QACD,kBAAkB,GAAG,QAAQ,CAAC;IAChC,CAAC;IACD,MAAM,UAAU,GAAqB;QACnC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,0BAA0B,CAAC,SAAS;QAC5E,gBAAgB,EACd,MAAM,CAAC,MAAM,EAAE,kBAAkB,IAAI,0BAA0B,CAAC,gBAAgB;QAClF,kBAAkB;QAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS;KACtC,CAAC;IAEF,MAAM,MAAM,GAAqB;QAC/B,EAAE,EAAE,IAAI;QACR,MAAM;QACN,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAClE,SAAS,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE;QAChE,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;KAC1B,CAAC;IAEF,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC,uBAAuB,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAsB;IAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,4OAA4O,CAAC;QAClV,CAAC;QACD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC1D,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,YAAY,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,mGAAmG,OAAO,wIAAwI,CAAC;QAC1X,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAE/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvE,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACxE,MAAM,CAAC,QAAQ,KAAK,IAAI;gBACxB,IAAI,CAAC,QAAQ,KAAK,IAAI;gBACtB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,kBAAkB,GACtB,UAAU,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;YAC7C,UAAU,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAC/C,CAAC,UAAU,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;gBAC9C,UAAU,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;gBAC7C,kBAAkB,CAAC,QAAQ,KAAK,IAAI;gBACpC,gBAAgB,CAAC,QAAQ,KAAK,IAAI;gBAClC,kBAAkB,CAAC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,cAAc,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,cAAc;gBAC/B,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,iDAAiD,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAClK,CAAC,CAAC,GAAG,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,6EAA6E,aAAa,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACvQ,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,oBAAoB,UAAU,qNAAqN,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,iGAAiG,CAAC;QAC/f,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,aAAa,CAAC,QAA0B,EAAE,QAAuB;IACxE,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,KAAa,EAAc,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,kBAAkB;QACxB,KAAK;QACL,OAAO,EAAE,GAAG,KAAK,6XAA6X;KAC/Y,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,QAAQ,KAAK,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,YAAY,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CAAC,OAAO,GAAsB,EAAE;IACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,cAAc,CACnB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,IAAI,EACb,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;AACJ,CAAC"}