approval-md 0.0.1 → 0.2.0

package/dist/src/core/task-file.js

@@ -0,0 +1,464 @@
+/**
+ * The task-file writer: round-trip rewriting that preserves everything it does
+ * not own (SPEC.md §6, APRV-61).
+ *
+ * SPEC.md §6 is a MUST: "Implementations MUST preserve unknown frontmatter keys
+ * when rewriting files." `core/frontmatter.ts` is the reader and is read-only in
+ * the strongest sense; this module is its counterpart, and the only place in the
+ * codebase that produces new task-file bytes.
+ *
+ * The bar is not "preserve the keys we can think of". Backlog.md 1.49.3 itself
+ * fails this MUST — the `envelope-edit-before` / `envelope-edit-after` fixtures
+ * record it dropping our whole `approval:` key on an unrelated `task edit` — and
+ * we extend that convention rather than fork it, so the writer that has to be
+ * trustworthy is ours.
+ *
+ * ## Why lines, not a YAML document
+ *
+ * The obvious implementation reserialises the frontmatter through the `yaml`
+ * library's Document API. It preserves more than a naive `parse`/`stringify`
+ * round trip, but it does not preserve *bytes*: quoting style, intra-line
+ * spacing, comment placement, and blank-line runs are all reconstructed from the
+ * library's own defaults. Every one of those is a spurious diff in a user's git
+ * history, and a diff nobody can explain is how a board tool's metadata gets
+ * quietly eaten.
+ *
+ * So this module treats the frontmatter as **lines with their terminators**, and
+ * the parsed YAML only as an oracle:
+ *
+ *   - the hardened parser decides whether the block is *structurally* valid at
+ *     all (and, being hardened, rejects duplicate keys, tags, and unbounded
+ *     aliases before any of them can reach a rewrite);
+ *   - a column-0 line scan finds the `approval:` key's line range;
+ *   - only that range is rewritten, and for a state-only edit only the single
+ *     `state:` line inside it;
+ *   - every other line — every other key, its order, its quoting, its comments,
+ *     the blank lines between them, both `---` delimiters, and the entire body
+ *     after the closing delimiter — is re-emitted as the exact bytes that came
+ *     in, terminator included.
+ *
+ * Byte-identity is therefore a property of the construction, not of a
+ * comparison performed afterwards: untouched lines are never parsed and never
+ * rebuilt. The corpus test (`tests/task-file.test.ts`) still asserts it against
+ * every real Backlog.md fixture, because a construction argument that is not
+ * checked is a construction argument that has already drifted.
+ *
+ * ## What "unknown key" means here
+ *
+ * Every frontmatter key except `approval:` is unknown to this writer, and that
+ * is deliberate. `id`, `title`, `status`, `milestone`, `ordinal`,
+ * `parent_task_id` and the rest belong to Backlog.md; a key some future board
+ * tool invents belongs to it. This module has no allow-list of keys it tolerates
+ * — it has one key it owns and rewrites, and it cannot express a change to
+ * anything else. There is no edit in {@link TaskFileEdit} that removes a key,
+ * reorders keys, or touches the body.
+ *
+ * ## This writer never touches the log
+ *
+ * A task file is a **projection** (SPEC.md §6.3): the daemon writes `state:`
+ * into the file *after* the event is appended, never the reverse. Nothing here
+ * opens `.approval/`, appends to `events.jsonl`, or computes a hash chain.
+ * {@link rewriteTaskFile} is a pure function of (bytes, edit) with no clock, no
+ * network, and no filesystem access at all; {@link writeTaskFileAtomic} writes
+ * exactly the one path it is handed.
+ *
+ * Determinism: same input bytes and same edit, same output bytes, always. Never
+ * throws — every failure is a structured result carrying one of the codes in
+ * {@link TaskFileErrorCode}.
+ */
+import { closeSync, mkdirSync, openSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { stringify } from "yaml";
+import { FRONTMATTER_DELIMITER, parseFrontmatter } from "./frontmatter.js";
+import { parseHardenedYaml } from "./policy-load.js";
+import { validate } from "./validate.js";
+/** The frontmatter key this module owns. Everything else is preserved verbatim. */
+export const ENVELOPE_KEY = "approval";
+/** The schema id (`schema/envelope.schema.json`) the result is validated against. */
+export const ENVELOPE_SCHEMA_ID = "envelope";
+function failure(code, message) {
+    return { ok: false, code, message };
+}
+function detail(cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+}
+/** Split into {@link SourceLine}s such that concatenating them restores `input`. */
+function splitLines(input) {
+    const lines = [];
+    const pattern = /\r\n|\n|\r/gu;
+    let start = 0;
+    let match = pattern.exec(input);
+    while (match !== null) {
+        lines.push({ text: input.slice(start, match.index), term: match[0] });
+        start = pattern.lastIndex;
+        match = pattern.exec(input);
+    }
+    lines.push({ text: input.slice(start), term: "" });
+    return lines;
+}
+function joinLines(lines) {
+    let out = "";
+    for (const line of lines)
+        out += line.text + line.term;
+    return out;
+}
+/** A column-0 `approval:` key line. Nested keys are indented and never match. */
+const ENVELOPE_KEY_LINE = /^approval[ \t]*:/u;
+/**
+ * Find the frontmatter, parse it under the hardened settings, and locate the
+ * `approval:` block's line range.
+ *
+ * The delimiter rules are the reader's, character for character: the file must
+ * begin with a line that is exactly `---`, and the block ends at the *first*
+ * following line that is exactly `---`. A `---` inside the markdown body is
+ * therefore never mistaken for the closing delimiter — it lies after the close
+ * and is part of the suffix this writer copies verbatim.
+ */
+function locate(text) {
+    const lines = splitLines(text);
+    const first = lines[0];
+    if (first === undefined || first.text !== FRONTMATTER_DELIMITER) {
+        return failure("no-frontmatter", `the file does not begin with a ${FRONTMATTER_DELIMITER} line, so it carries no frontmatter to rewrite. This writer never invents a frontmatter block: adding one would change a file whose shape it does not understand (SPEC.md §6 requires tolerating tasks with no envelope, not manufacturing one).`);
+    }
+    let close = -1;
+    for (let index = 1; index < lines.length; index += 1) {
+        if (lines[index]?.text === FRONTMATTER_DELIMITER) {
+            close = index;
+            break;
+        }
+    }
+    if (close === -1) {
+        return failure("unterminated", `frontmatter opened with ${FRONTMATTER_DELIMITER} but no closing ${FRONTMATTER_DELIMITER} line was found; a truncated frontmatter block is indistinguishable from a complete one and is refused`);
+    }
+    const source = lines
+        .slice(1, close)
+        .map((line) => line.text)
+        .join("\n");
+    const parsed = parseHardenedYaml(source, {
+        subject: "frontmatter YAML",
+        tagContext: "a task envelope",
+    });
+    if (!parsed.ok)
+        return failure("yaml-error", parsed.message);
+    const value = parsed.value;
+    let data;
+    if (value === null || value === undefined) {
+        data = {};
+    }
+    else if (typeof value !== "object" || Array.isArray(value)) {
+        return failure("not-a-map", `frontmatter must be a YAML mapping, got ${Array.isArray(value) ? "a sequence" : typeof value}`);
+    }
+    else {
+        data = value;
+    }
+    let envelopeStart = -1;
+    for (let index = 1; index < close; index += 1) {
+        if (ENVELOPE_KEY_LINE.test(lines[index]?.text ?? "")) {
+            envelopeStart = index;
+            break;
+        }
+    }
+    // A second column-0 `approval:` would be a duplicate key, which the hardened
+    // parser already refused above, so the first match is the only match.
+    let envelopeEnd = envelopeStart;
+    if (envelopeStart !== -1) {
+        for (let index = envelopeStart + 1; index < close; index += 1) {
+            const line = lines[index]?.text ?? "";
+            // Blank lines neither extend the block nor end it: a run of blanks before
+            // the next top-level key belongs to that key, not to the envelope.
+            if (line.trim() === "")
+                continue;
+            // Anything at column 0 starts a new top-level construct (a key, or a
+            // comment introducing one). Indented lines are the envelope's own.
+            if (!/^[ \t]/u.test(line))
+                break;
+            envelopeEnd = index;
+        }
+    }
+    return { lines, close, data, envelopeStart, envelopeEnd };
+}
+// ---------------------------------------------------------------------------
+// Serialising an envelope
+// ---------------------------------------------------------------------------
+/**
+ * Render `{ approval: envelope }` as block YAML lines.
+ *
+ * `lineWidth: 0` disables folding, so a long summary stays on one line and the
+ * output does not depend on the length of neighbouring keys.
+ * `aliasDuplicateObjects: false` keeps the serialiser from emitting `&anchor` /
+ * `*alias` when the same object appears twice in the envelope: aliases are a
+ * thing the hardened parser bounds and distrusts on the way in, so this writer
+ * does not produce them on the way out.
+ */
+function serialiseEnvelope(envelope, term) {
+    let rendered;
+    try {
+        rendered = stringify({ [ENVELOPE_KEY]: envelope }, { indent: 2, lineWidth: 0, aliasDuplicateObjects: false });
+    }
+    catch (cause) {
+        return failure("serialize-failed", `the envelope could not be serialised to YAML: ${detail(cause)}`);
+    }
+    const texts = rendered.split("\n");
+    // `stringify` terminates its last line; drop the empty tail it leaves behind.
+    if (texts[texts.length - 1] === "")
+        texts.pop();
+    if (texts.length === 0) {
+        return failure("serialize-failed", "the envelope serialised to nothing, which cannot be spliced into frontmatter");
+    }
+    return { ok: true, lines: texts.map((text) => ({ text, term })) };
+}
+// ---------------------------------------------------------------------------
+// The state line
+// ---------------------------------------------------------------------------
+/**
+ * A direct child `state:` line: leading indent, the key, and an optional
+ * trailing comment. The value is captured so it can be replaced without
+ * disturbing the indent, the spacing around the colon, or the comment.
+ */
+const STATE_LINE = /^([ \t]+state[ \t]*:[ \t]*)([^#]*?)([ \t]*#.*)?$/u;
+/** The indent string of the envelope block's direct children, or null. */
+function childIndent(lines, start, end) {
+    for (let index = start + 1; index <= end; index += 1) {
+        const text = lines[index]?.text ?? "";
+        if (text.trim() === "")
+            continue;
+        return /^[ \t]*/u.exec(text)?.[0] ?? "";
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// rewriteTaskFile
+// ---------------------------------------------------------------------------
+/**
+ * Rewrite a task file's `approval:` subtree, preserving everything else byte for
+ * byte.
+ *
+ * Returns the new bytes, plus `changed` so a caller can skip a pointless write.
+ * On any refusal the input is untouched and nothing has been written anywhere:
+ * this function does not touch the filesystem at all.
+ *
+ * Insertion position (`set-envelope` on a file with no `approval:` key): the key
+ * is appended as the **last** top-level key, immediately before the closing
+ * delimiter. The corpus is the reason this needed a decision rather than a
+ * default. Backlog.md does not append its own new keys — in `milestone-assign/`
+ * the CLI put `milestone:` between `labels:` and `dependencies:`, because it
+ * rewrites frontmatter from its own model in its own canonical order — and at
+ * 1.49.3 it does not preserve unknown keys at all, so no position we pick
+ * survives its next edit. Given that no position is safe from the CLI, the
+ * choice is made on the diff: last keeps a multi-line block out of the middle of
+ * the board's short scalar keys, so inserting it moves no existing line, and it
+ * matches where the hand-written `envelope-edit-before` fixture put the envelope.
+ */
+export function rewriteTaskFile(text, edit, options = {}) {
+    try {
+        return rewriteInner(text, edit, options);
+    }
+    catch (cause) {
+        // A rewrite must never throw into a caller mid-write. Anything unforeseen
+        // becomes a refusal, and a refusal leaves the file alone.
+        return failure("internal-error", `the rewrite failed unexpectedly and produced nothing: ${detail(cause)}`);
+    }
+}
+function rewriteInner(text, edit, options) {
+    const located = locate(text);
+    if ("ok" in located)
+        return located;
+    const { lines, close, data, envelopeStart, envelopeEnd } = located;
+    if (edit.kind === "none") {
+        // Nothing is reserialised, so there is nothing that could differ. The parse
+        // above still ran: a caller asking for a no-op rewrite is asking whether
+        // this file is one the writer could edit, and a corrupt one is not.
+        return { ok: true, bytes: text, changed: false };
+    }
+    const existing = Object.hasOwn(data, ENVELOPE_KEY) ? data[ENVELOPE_KEY] : undefined;
+    const hasEnvelopeKey = envelopeStart !== -1;
+    if (hasEnvelopeKey && !isPlainObject(existing)) {
+        return failure("envelope-not-a-map", `the \`${ENVELOPE_KEY}:\` key holds ${describe(existing)}, not a mapping. This writer will not overwrite a key whose contents it cannot recognise as an envelope (SPEC.md §6.1); a human resolves that, deliberately, before the runtime writes over it.`);
+    }
+    // What the envelope will be once the edit lands. Validated before any bytes
+    // are produced, so an invalid edit never reaches the splice.
+    let intended;
+    if (edit.kind === "set-envelope") {
+        intended = edit.envelope;
+    }
+    else {
+        if (!hasEnvelopeKey) {
+            return failure("no-envelope", `a state edit needs an existing envelope and this file has no \`${ENVELOPE_KEY}:\` key. SPEC.md §6 requires tolerating tasks with no envelope; such a task simply cannot request side-effecting execution, and its state is not a thing to set.`);
+        }
+        intended = { ...existing, state: edit.state };
+    }
+    // `set-state` rewrites one field of an envelope an earlier write boundary
+    // already accepted, so the fields it preserves validate at the read boundary:
+    // refusing the pre-APRV-121 monetary form here would leave a historical file
+    // in permanent, unrepairable drift (APRV-148). `set-envelope` authors the
+    // whole claim and stays strict.
+    const mode = edit.kind === "set-state" ? "historical" : "write";
+    const schemaCheck = validate(ENVELOPE_SCHEMA_ID, intended, options.schemaDir === undefined
+        ? { mode }
+        : { schemaDir: options.schemaDir, mode });
+    if (!schemaCheck.ok) {
+        return failure("invalid-envelope", `the envelope this edit would write does not validate against ${ENVELOPE_SCHEMA_ID}.schema.json: ${schemaCheck.errors
+            .map((error) => `${error.path === "" ? "<root>" : error.path} ${error.message}`)
+            .join("; ")}`);
+    }
+    const out = [...lines];
+    if (edit.kind === "set-state") {
+        const inline = inlineValueOf(lines[envelopeStart]?.text ?? "");
+        if (inline !== "") {
+            return failure("unsupported-shape", `the \`${ENVELOPE_KEY}:\` key carries its value inline (${JSON.stringify(inline)}) rather than as an indented block. A state-only edit rewrites exactly one line, which a flow-style envelope does not have; rewrite the whole subtree with a set-envelope edit instead.`);
+        }
+        const indent = childIndent(lines, envelopeStart, envelopeEnd);
+        if (indent === null) {
+            return failure("unsupported-shape", `the \`${ENVELOPE_KEY}:\` key has no indented block beneath it, so there is no \`state:\` line to edit`);
+        }
+        let stateIndex = -1;
+        let match = null;
+        for (let index = envelopeStart + 1; index <= envelopeEnd; index += 1) {
+            const line = lines[index]?.text ?? "";
+            const candidate = STATE_LINE.exec(line);
+            if (candidate === null)
+                continue;
+            if (candidate[1]?.startsWith(indent) !== true)
+                continue;
+            // A direct child, not a `state:` nested deeper inside the envelope.
+            if ((/^[ \t]*/u.exec(line)?.[0] ?? "") !== indent)
+                continue;
+            stateIndex = index;
+            match = candidate;
+            break;
+        }
+        if (stateIndex === -1 || match === null) {
+            return failure("unsupported-shape", `the envelope has no direct \`state:\` line in block style. The parsed envelope does carry a state (it validated), so the value is expressed in a form this line editor does not rewrite (flow mapping, anchor, or block scalar); use a set-envelope edit.`);
+        }
+        const value = (match[2] ?? "").trim();
+        if (value === "" || /^[|>&*]/u.test(value)) {
+            return failure("unsupported-shape", `the envelope's \`state:\` value is not a plain scalar on its own line (${JSON.stringify(value)}); use a set-envelope edit`);
+        }
+        const previous = lines[stateIndex];
+        // The prefix (indent, key, spacing) and any trailing comment are re-emitted
+        // verbatim: only the value's bytes change, and only on this line.
+        out[stateIndex] = { text: `${match[1] ?? ""}${edit.state}${match[3] ?? ""}`, term: previous.term };
+    }
+    else if (hasEnvelopeKey) {
+        const term = lines[envelopeStart].term;
+        const serialised = serialiseEnvelope(intended, term);
+        if (!serialised.ok)
+            return serialised;
+        out.splice(envelopeStart, envelopeEnd - envelopeStart + 1, ...serialised.lines);
+    }
+    else {
+        // Insert as the last top-level key, immediately before the closing `---`.
+        // The terminator comes from the last frontmatter line, which always exists
+        // and always has one (a line before the close is a line something follows).
+        const term = lines[close - 1].term;
+        const serialised = serialiseEnvelope(intended, term);
+        if (!serialised.ok)
+            return serialised;
+        out.splice(close, 0, ...serialised.lines);
+    }
+    const bytes = joinLines(out);
+    const verified = verify(text, bytes, close, lines, data, intended);
+    if (verified !== null)
+        return verified;
+    return { ok: true, bytes, changed: bytes !== text };
+}
+/** Text after the `approval:` colon, minus a trailing comment. `""` when block-style. */
+function inlineValueOf(line) {
+    const colon = line.indexOf(":");
+    if (colon === -1)
+        return "";
+    const after = line.slice(colon + 1).trim();
+    if (after.startsWith("#"))
+        return "";
+    return after;
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function describe(value) {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "a sequence";
+    return `a ${typeof value}`;
+}
+/**
+ * Self-check on the produced bytes. Returns null when they are sound.
+ *
+ * Byte preservation is a property of the construction — untouched lines are
+ * copied, never rebuilt — but the construction rests on a line scan for the
+ * envelope's range, and a line scan is exactly the kind of thing that is subtly
+ * wrong on a shape nobody tried. So the output is read back through the ordinary
+ * reader and checked three ways: the markdown body must be the same trailing
+ * bytes, every non-`approval` key must survive with the same value *and the same
+ * position*, and the envelope must be the one the edit intended. A failure here
+ * is a bug in this module, and it fails closed: the caller gets a refusal rather
+ * than bytes nobody verified.
+ */
+function verify(input, output, close, lines, before, intended) {
+    const suffix = joinLines(lines.slice(close));
+    if (!output.endsWith(suffix) || !input.endsWith(suffix)) {
+        return failure("round-trip-failed", "the rewritten file does not end in the same bytes as the original: the closing delimiter or the markdown body was disturbed");
+    }
+    const reread = parseFrontmatter(output);
+    if (!reread.ok) {
+        return failure("round-trip-failed", `the rewritten frontmatter no longer parses (${reread.code}: ${reread.message}); nothing was written`);
+    }
+    const keysBefore = Object.keys(before).filter((key) => key !== ENVELOPE_KEY);
+    const keysAfter = Object.keys(reread.data).filter((key) => key !== ENVELOPE_KEY);
+    if (!isDeepStrictEqual(keysBefore, keysAfter)) {
+        return failure("round-trip-failed", `the rewrite changed the frontmatter's other keys or their order (${keysBefore.join(", ")} became ${keysAfter.join(", ")}); nothing was written`);
+    }
+    for (const key of keysBefore) {
+        if (!isDeepStrictEqual(before[key], reread.data[key])) {
+            return failure("round-trip-failed", `the rewrite changed the value of the unrelated frontmatter key \`${key}\`; nothing was written`);
+        }
+    }
+    if (!isDeepStrictEqual(reread.data[ENVELOPE_KEY], intended)) {
+        return failure("round-trip-failed", `the rewritten \`${ENVELOPE_KEY}:\` subtree does not read back as the envelope the edit asked for; nothing was written`);
+    }
+    return null;
+}
+/** Distinguishes concurrent writers' temp files within one process. */
+let tempCounter = 0;
+/**
+ * Write task-file bytes atomically: temp file in the destination directory, then
+ * rename.
+ *
+ * The same idiom as `core/payload-store.ts` and `channels/render-queue.ts`, for
+ * the same reason: a reader — a board tool, an editor, the next agent — sees
+ * either the previous complete file or the new one, never a half-written task.
+ * The temp name is the only non-deterministic thing here and it never reaches
+ * the file's contents; it is removed on every failure path, so a failed write
+ * leaves no debris beside the task.
+ *
+ * Writes this one path and nothing else. It does not open the log.
+ */
+export function writeTaskFileAtomic(path, bytes) {
+    const directory = dirname(path);
+    tempCounter += 1;
+    const temp = join(directory, `.${basename(path)}.tmp-${String(process.pid)}-${String(tempCounter)}`);
+    try {
+        mkdirSync(directory, { recursive: true });
+        const handle = openSync(temp, "wx");
+        try {
+            writeSync(handle, bytes, 0, "utf8");
+        }
+        finally {
+            closeSync(handle);
+        }
+        renameSync(temp, path);
+    }
+    catch (cause) {
+        try {
+            unlinkSync(temp);
+        }
+        catch {
+            // The temp file may never have been created; nothing to clean up.
+        }
+        return failure("write-failed", `task file ${path} could not be written: ${detail(cause)}. Nothing was written and the log was not touched.`);
+    }
+    return { ok: true, path, bytes: Buffer.byteLength(bytes, "utf8") };
+}
+//# sourceMappingURL=task-file.js.map

package/dist/src/core/task-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-file.js","sourceRoot":"","sources":["../../../src/core/task-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAA6C,MAAM,eAAe,CAAC;AAOpF,mFAAmF;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AAEvC,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AA8D7C,SAAS,OAAO,CAAC,IAAuB,EAAE,OAAe;IACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAwBD,oFAAoF;AACpF,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,cAAc,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;QAC1B,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAA4B;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C;;;;;;;;;GASG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAChE,OAAO,OAAO,CACZ,gBAAgB,EAChB,kCAAkC,qBAAqB,kPAAkP,CAC1S,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC;YACd,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,OAAO,CACZ,cAAc,EACd,2BAA2B,qBAAqB,mBAAmB,qBAAqB,wGAAwG,CACjM,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK;SACjB,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE;QACvC,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,iBAAiB;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,IAA6B,CAAC;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,OAAO,CACZ,WAAW,EACX,2CAA2C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAChG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAgC,CAAC;IAC1C,CAAC;IAED,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACrD,aAAa,GAAG,KAAK,CAAC;YACtB,MAAM;QACR,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,sEAAsE;IAEtE,IAAI,WAAW,GAAG,aAAa,CAAC;IAChC,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,KAAK,GAAG,aAAa,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACtC,0EAA0E;YAC1E,mEAAmE;YACnE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACjC,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM;YACjC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CACxB,QAAiC,EACjC,IAAY;IAEZ,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAClB,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAC5B,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAC1D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,kBAAkB,EAAE,iDAAiD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,8EAA8E;IAC9E,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,kBAAkB,EAAE,8EAA8E,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,GAAG,mDAAmD,CAAC;AAEvE,0EAA0E;AAC1E,SAAS,WAAW,CAAC,KAA4B,EAAE,KAAa,EAAE,GAAW;IAC3E,KAAK,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,GAAG,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,IAAkB,EAClB,OAAO,GAAmB,EAAE;IAE5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,0DAA0D;QAC1D,OAAO,OAAO,CAAC,gBAAgB,EAAE,yDAAyD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAkB,EAAE,OAAuB;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IACpC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEnE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,cAAc,GAAG,aAAa,KAAK,CAAC,CAAC,CAAC;IAC5C,IAAI,cAAc,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,OAAO,CACZ,oBAAoB,EACpB,SAAS,YAAY,iBAAiB,QAAQ,CAAC,QAAQ,CAAC,iMAAiM,CAC1P,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,QAAiC,CAAC;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,OAAO,CACZ,aAAa,EACb,kEAAkE,YAAY,kKAAkK,CACjP,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,EAAE,GAAI,QAAoC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,IAAI,GAAmB,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IAChF,MAAM,WAAW,GAAG,QAAQ,CAC1B,kBAAkB,EAClB,QAAQ,EACR,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAE,EAAE,IAAI,EAA6B;QACtC,CAAC,CAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAA6B,CACvE,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,OAAO,CACZ,kBAAkB,EAClB,gEAAgE,kBAAkB,iBAAiB,WAAW,CAAC,MAAM;aAClH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAEvB,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,OAAO,OAAO,CACZ,mBAAmB,EACnB,SAAS,YAAY,qCAAqC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,yLAAyL,CAC1Q,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;QAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,OAAO,CACZ,mBAAmB,EACnB,SAAS,YAAY,kFAAkF,CACxG,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;QACpB,IAAI,KAAK,GAA2B,IAAI,CAAC;QACzC,KAAK,IAAI,KAAK,GAAG,aAAa,GAAG,CAAC,EAAE,KAAK,IAAI,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,SAAS,KAAK,IAAI;gBAAE,SAAS;YACjC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,SAAS;YACxD,oEAAoE;YACpE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM;gBAAE,SAAS;YAC5D,UAAU,GAAG,KAAK,CAAC;YACnB,KAAK,GAAG,SAAS,CAAC;YAClB,MAAM;QACR,CAAC;QACD,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,OAAO,CACZ,mBAAmB,EACnB,2PAA2P,CAC5P,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CACZ,mBAAmB,EACnB,0EAA0E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,4BAA4B,CAC5H,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAe,CAAC;QACjD,4EAA4E;QAC5E,kEAAkE;QAClE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrG,CAAC;SAAM,IAAI,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAI,KAAK,CAAC,aAAa,CAAgB,CAAC,IAAI,CAAC;QACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,GAAG,aAAa,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,IAAI,GAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAgB,CAAC,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAEvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,MAAM,CACb,KAAa,EACb,MAAc,EACd,KAAa,EACb,KAA4B,EAC5B,MAA+B,EAC/B,QAAiC;IAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,OAAO,OAAO,CACZ,mBAAmB,EACnB,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,OAAO,CACZ,mBAAmB,EACnB,+CAA+C,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,wBAAwB,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACjF,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,OAAO,CACZ,mBAAmB,EACnB,oEAAoE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CACjJ,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,OAAO,CACZ,mBAAmB,EACnB,oEAAoE,GAAG,yBAAyB,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,OAAO,CACZ,mBAAmB,EACnB,mBAAmB,YAAY,wFAAwF,CACxH,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,uEAAuE;AACvE,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,WAAW,IAAI,CAAC,CAAC;IACjB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,OAAO,OAAO,CAAC,cAAc,EAAE,aAAa,IAAI,0BAA0B,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/I,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC"}

package/dist/src/core/telegram-config.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Telegram configuration NAMES (SPEC.md §5.1 `channels.telegram.token_env` /
+ * `chat_id_env`, amended §5.2 by APRV-72).
+ *
+ * Constants and resolvers live in core, not in `channels/`, because more than
+ * one layer needs them: the Telegram CLI, doctor, and `approval env` (APRV-73)
+ * all ask "which variable holds the token?" and none of them may answer it
+ * differently. Placing them here also keeps `core/` free of any import from
+ * `channels/`, in the spirit of `tests/layering.test.ts`.
+ *
+ * NAMES only, in both directions: a policy that carried the token would be a
+ * bot credential in a file agents may read, which is exactly what §5.1's
+ * name-indirection exists to prevent. A policy that failed to load names
+ * nothing, so the default applies: a variable name is not a permission, and
+ * treating it as one would mean an unrelated policy typo locked the operator
+ * out of their own channel. This is `passphraseEnvFor`'s argument, verbatim,
+ * for the same reason: these are the same kind of key.
+ *
+ * Nothing here reads `process.env`. The CLI layer takes the name and looks
+ * the value up.
+ */
+import type { CredentialSpec } from "./credential-spec.js";
+import type { PolicyLoadResult } from "./policy-load.js";
+/**
+ * The environment variable the bot token is read from when the policy declares
+ * no `channels.telegram.token_env`. A DEFAULT, not a fixed name: see
+ * {@link telegramTokenEnvFor}.
+ */
+export declare const TELEGRAM_TOKEN_ENV = "APPROVAL_TG_TOKEN";
+/**
+ * The environment variable the approver chat id is read from when the policy
+ * declares no `channels.telegram.chat_id_env`. Also a default.
+ */
+export declare const TELEGRAM_CHAT_ENV = "APPROVAL_TG_CHAT";
+/** The NAME of the variable this policy says the bot token lives in. */
+export declare function telegramTokenEnvFor(load: PolicyLoadResult): string;
+/** The NAME of the variable this policy says the approver chat id lives in. */
+export declare function telegramChatEnvFor(load: PolicyLoadResult): string;
+/**
+ * How a listener puts the pending set in front of the approver (APRV-216).
+ *
+ * `paced` sends one summary line and the oldest pending request, and the next
+ * one only once that request is decided, skipped, or passed over. `burst` is
+ * the pre-APRV-216 behaviour: every pending request this process has not sent
+ * yet, on every cycle, behind the APRV-196 re-delivery banner.
+ *
+ * Not a credential and not a name, so it sits beside the two that are for one
+ * reason: it is the third thing a caller asks the policy about the Telegram
+ * channel, and a second resolver module would be a second place for the
+ * fallback rule to drift.
+ */
+export type TelegramDelivery = "paced" | "burst";
+/**
+ * What an absent `channels.telegram.delivery` means.
+ *
+ * Paced, since APRV-216. The incident behind it is the one APRV-196 softened
+ * rather than closed: a restart with six pending policy edits put six prompts
+ * on a phone at once, and an approver reading a wall of near-identical
+ * questions is an approver who taps rather than reads. A default is a claim
+ * about which failure is worse, and the worse one here is inattentive approval
+ * rather than a slower queue: pacing withholds nothing, because every request
+ * stays pending in the log whether or not it has been shown, and `/queue`
+ * lists the whole set on demand.
+ */
+export declare const TELEGRAM_DEFAULT_DELIVERY: TelegramDelivery;
+/**
+ * The delivery mode this policy declares, or the default.
+ *
+ * Fail-soft in the same direction as the two name resolvers above: a policy
+ * that did not load declares nothing, and a delivery mode is not a permission,
+ * so an unrelated policy typo must not decide how requests are shown. The
+ * schema closes the enum, so a policy that LOADED can only carry one of the
+ * two; anything else reaching here (a hand-built load result, a key from a
+ * later version) falls back rather than being guessed at.
+ */
+export declare function telegramDeliveryFor(load: PolicyLoadResult): TelegramDelivery;
+/**
+ * The Telegram channel's credential manifest (APRV-79).
+ *
+ * The same shape an adapter declares (`core/credential-spec.ts`), for the same
+ * reason: `approval setup channel telegram` runs the shared conversation in
+ * `cli/setup-flow.ts`, and that conversation is DERIVED from a manifest. What
+ * differs from an adapter's is the destination and not the vocabulary — a
+ * channel's two values go to the OS keystore and `.approval/env`, because a
+ * channel holds no state and its token is what unlocks the machine, while an
+ * adapter's go to the vault (SPEC.md §4, §10.3, §10.4).
+ *
+ * The NAMES are the policy's, resolved through the two functions above, so the
+ * checklist an operator reads names the variables their own policy declares.
+ * A spec carries no value and no default on either entry: the token is the
+ * operator's and the chat id is discovered.
+ */
+export declare function telegramCredentialSpecs(load: PolicyLoadResult): CredentialSpec[];