approval-md 0.0.1 → 0.2.0

package/dist/src/channels/contract.js

@@ -0,0 +1,494 @@
+/**
+ * The channel plugin contract (SPEC.md §9, §10.3, §10.4, §11).
+ *
+ * A channel is **transport**. It takes a render-ready request from the runtime,
+ * puts it in front of a human, and hands back the gesture the human made. It
+ * holds no state (§10.3: "Decisions become log events; channels hold no state"),
+ * it never reads the log, it never writes the log, and it never decides
+ * anything. Everything a channel could get wrong about *authority* is therefore
+ * removed from a channel by construction:
+ *
+ * - **It cannot invent a field.** Every displayable datum on {@link
+ *   ChannelRequest} is a {@link TaggedField}: either `computed` (the runtime
+ *   derived it, and `source` names the derivation) or `claimed` (the party under
+ *   oversight authored it, and `author` names them). There is no untagged
+ *   member, so "render this string" is not a thing a channel can do without
+ *   first knowing which side of the verification boundary the string came from.
+ *   SPEC.md §9 and §10.3 both say the same sentence twice: rendering claimed
+ *   fields with the visual authority of computed fields is a conformance
+ *   failure. This type makes the mistake require deliberate effort.
+ * - **It cannot approve anything.** {@link ChannelDecision} is a *report* of a
+ *   human gesture. Turning it into an `approval.granted` is
+ *   {@link recordChannelDecision}'s job, and that function does exactly one
+ *   thing: call `core/gate.ts`'s human-only `decide()`. Every gate rule — human
+ *   actor, attestation on grant, TTL lapse, budget re-check, compare-and-append,
+ *   idempotency — applies unchanged, because there is no second path.
+ * - **It cannot hold a secret.** A grant mints a single-use execution token.
+ *   {@link recordChannelDecision} returns it to *its caller* (the runtime) in a
+ *   field that is deliberately not part of {@link DecisionOutcome}, which is the
+ *   only value handed back to the channel. A channel that logged its own
+ *   outcomes would log nothing sensitive.
+ *
+ * ## Manual requests and the full payload (SPEC.md §10.4)
+ *
+ * > For `manual` actions, channels MUST present the full payload or a faithful
+ * > rendering of it, clearly delineated from any agent-written summary, before
+ * > collecting a decision.
+ *
+ * {@link createChannelRequest} refuses to build a `manual` request whose
+ * `fullPayload` is null. A channel therefore cannot be handed a manual request
+ * that has nothing to show; the failure surfaces at construction, inside the
+ * runtime, rather than as a channel silently rendering a summary alone.
+ *
+ * ## What is deliberately not here
+ *
+ * No I/O beyond {@link recordChannelDecision}'s delegation to the gate; no
+ * clock; no rendering. Building a {@link ChannelRequest} from a log is
+ * `channels/tagging.ts`, batching is `channels/batch.ts`, and the shared
+ * pass/fail suite every channel implementation must survive is
+ * `channels/conformance.ts`.
+ */
+import { recordRefusedDecision } from "../core/decision-refusal.js";
+import { decide } from "../core/gate.js";
+import { attestationKeySha256, decideAttestation, isAttestationActionKey, openProposalFor, proposalPolicyPath, } from "../core/policy-proposal.js";
+import { readVerifiedRecords } from "../core/state.js";
+import { tick } from "../core/clock.js";
+// ---------------------------------------------------------------------------
+// Truth labelling
+// ---------------------------------------------------------------------------
+/**
+ * The canonical `source` values the runtime tagger stamps on computed fields.
+ *
+ * `TaggedField`'s `source` is typed `string` rather than this union on purpose:
+ * an adapter or a satellite runtime may derive a field from a derivation this
+ * repo has not named, and forcing it to lie about the provenance would be worse
+ * than admitting a name we do not recognize. These are the names
+ * `channels/tagging.ts` uses, and the ones a reviewer should expect to see.
+ */
+export const COMPUTED_SOURCES = [
+    /** Read from a verified log record (`core/state.ts`). */
+    "log",
+    /** Resolved against the attested policy (`core/policy-match.ts`, `policy-explain.ts`). */
+    "policy-match",
+    /** Evaluated by `core/budgets.ts` at display time. */
+    "budgets",
+    /** Compared against the latest attestation (`core/attest.ts`). */
+    "attestation",
+    /**
+     * Loaded and validated by `core/policy-load.ts` at display time (APRV-109) —
+     * the advisory on an attestation prompt, recomputed from the live policy
+     * bytes rather than read back off the proposal that recorded one.
+     */
+    "policy-load",
+    /** Recomputed from the payload bytes and checked against the bound hash. */
+    "payload-binding",
+    /**
+     * Re-derived from the hash-checked payload bytes by `core/command-class.ts`
+     * — the same module whose answer selected the class (APRV-143).
+     *
+     * Distinct from `payload-binding`, which names the hash agreement itself.
+     * This names the classifier's reading OF those bytes, which is a second
+     * derivation over the same material and can be wrong in ways the hash cannot
+     * catch: a channel that labelled it `payload-binding` would be borrowing the
+     * binding's authority for an answer the binding does not cover.
+     */
+    "classifier",
+    /** Arithmetic on the display-time instant (TTL remaining). */
+    "clock",
+];
+/**
+ * The words that ride beside a rendered `gloss`, on every channel that renders
+ * one (APRV-144 for Telegram, APRV-197 for the terminal).
+ *
+ * Belt and braces with the `(author)` parenthetical: a reader skimming a wall
+ * of lines sees the word "model" inside the sentence they are about to believe,
+ * not only in the small print at the end of it. It lives here, next to the
+ * field it labels, because two channels rendering the same field under two
+ * different labels is how one of them ends up looking authoritative.
+ */
+export const GLOSS_UNVERIFIED_SUFFIX = "(model, unverified)";
+/**
+ * What a person is told, in one line, when the gate would not take their
+ * decision (APRV-235).
+ *
+ * One function, every surface. A Telegram message edit, a web page and a
+ * terminal are three renderings of one fact, and before this they were three
+ * sentences — or, on the terminal that watched a `policy-drift` refusal on
+ * 2026-09-02, one sentence in a place the person who had tapped could not see.
+ * A human who taps on their phone and then reads the operator's terminal should
+ * find the same words in both, because the alternative is deciding which one to
+ * believe.
+ *
+ * Written to the approver, not to the log: it says what happened to THEIR
+ * answer and what, if anything, they should do next. The machine-readable fact
+ * is `code`, which every caller has and none of them should be paraphrasing.
+ * The wording of the first three is APRV-206's, moved here unchanged.
+ */
+export function refusedDecisionLine(code) {
+    if (code === "already-decided") {
+        return "Already decided — the first answer stands; nothing was recorded.";
+    }
+    // APRV-106. The tap that races the withdrawal, or lands on a message whose
+    // edit did not go through. Nothing is appended and the human is told why in
+    // the terms that matter to them: the asker is gone, so there is nothing their
+    // answer could do.
+    if (code === "request-withdrawn") {
+        return "Withdrawn — the requester took this back and is no longer waiting; nothing was recorded.";
+    }
+    if (code === "expired")
+        return "Expired — the approval window has closed.";
+    // APRV-235, and the reason this helper exists. The distinction the line has to
+    // carry is that nothing is wrong with the ACTION: the policy was re-attested
+    // after the question was asked, so the rules on the approver's screen are not
+    // the rules in force, and the answer cannot be recorded under either. The
+    // request is void and has been withdrawn, so this is not a "try again" — the
+    // caller asks again, and a fresh question arrives under the current rules.
+    if (code === "policy-drift") {
+        return "Policy changed after this was asked — the rules you were shown are no longer in force, so your answer could not be recorded. The request has been withdrawn; the caller will ask again under the current policy.";
+    }
+    return `Refused by the runtime: ${code}.`;
+}
+/** Tag `value` as runtime-derived, naming the derivation that produced it. */
+export function computed(value, source) {
+    return { kind: "computed", value, source };
+}
+/** Tag `value` as authored by `author`, the party under oversight. */
+export function claimed(value, author) {
+    return { kind: "claimed", value, author };
+}
+/** Is `value` a well-formed {@link TaggedField}? Used by the conformance suite. */
+export function isTaggedField(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const field = value;
+    if (!("value" in field))
+        return false;
+    if (field["kind"] === "computed")
+        return typeof field["source"] === "string";
+    if (field["kind"] === "claimed")
+        return typeof field["author"] === "string";
+    return false;
+}
+/** Refusals {@link createChannelRequest} can return. Frozen, per §11.1(6). */
+export const CHANNEL_REQUEST_REFUSAL_CODES = [
+    /** A `manual` request was built with no full payload to present (§10.4). */
+    "manual-payload-required",
+    /** A member arrived that is not a {@link TaggedField}. */
+    "untagged-field",
+];
+/**
+ * Build a {@link ChannelRequest}, enforcing the two invariants a type alone
+ * cannot.
+ *
+ * 1. **§10.4**: a `manual` request MUST carry a full payload. A manual request
+ *    with `fullPayload.value === null` is refused `manual-payload-required` and
+ *    no object is produced, so no channel can be handed one.
+ * 2. **§9**: every member is tagged. The interface says so, but a JavaScript
+ *    caller (a satellite runtime, a test, an adapter compiled from looser
+ *    sources) can still hand over a bare value; that is refused
+ *    `untagged-field` rather than passed through to a renderer that would
+ *    display it with unearned authority.
+ */
+export function createChannelRequest(fields) {
+    for (const [name, field] of Object.entries(fields)) {
+        if (field === undefined)
+            continue;
+        if (!isTaggedField(field)) {
+            return {
+                ok: false,
+                code: "untagged-field",
+                message: `channel request field ${JSON.stringify(name)} is not a tagged field. SPEC.md §9 requires every displayed field to be visibly computed or claimed; an untagged value would be rendered with whatever authority the channel's stylesheet happens to give it.`,
+            };
+        }
+    }
+    if (fields.autonomy.value === "manual" && fields.fullPayload.value === null) {
+        return {
+            ok: false,
+            code: "manual-payload-required",
+            message: `action ${fields.action_key.value} resolves to manual and carries no full payload. SPEC.md §10.4: for manual actions a channel MUST present the full payload or a faithful rendering of it, clearly delineated from any agent-written summary, before collecting a decision. A request with nothing to present would put a human's decision behind an agent's summary alone, so it is refused here rather than rendered.`,
+        };
+    }
+    return { ok: true, request: fields };
+}
+/**
+ * Every displayable member of `request` is a {@link TaggedField}.
+ *
+ * The runtime half of "untagged fields are unrepresentable": the type says it
+ * at compile time, this says it at run time, and `channels/conformance.ts`
+ * calls it on both the request handed to a channel and the split the channel
+ * reports having rendered. Throws (rather than returning) because it is an
+ * assertion helper used inside test suites.
+ */
+export function assertTagged(request) {
+    for (const [name, field] of Object.entries(request)) {
+        if (field === undefined)
+            continue;
+        if (!isTaggedField(field)) {
+            throw new Error(`channel request field ${JSON.stringify(name)} is not tagged computed/claimed (SPEC.md §9)`);
+        }
+    }
+}
+/**
+ * The event payload field carrying a batch's channel delivery id (SPEC.md
+ * §10.3: each event carries "the batch's channel delivery id in its payload").
+ *
+ * First-class since APRV-38: `decide()` takes `batchDeliveryId` and writes this
+ * field on `approval.granted` / `approval.rejected`, and the event schema
+ * constrains it. What it replaced is described at
+ * {@link BATCH_DELIVERY_NOTE_PREFIX}.
+ */
+export const BATCH_DELIVERY_ID_FIELD = "batch_delivery_id";
+/**
+ * The legacy `note` prefix that carried a batch delivery id before APRV-38.
+ *
+ * ## The dual-read window (amended SPEC.md §10.3)
+ *
+ * APRV-22 had no gate parameter and no schema entry to work with, so the id
+ * rode inside the one caller-controlled payload field there was: `note`, whose
+ * first line read `batch_delivery_id=<id>`, optionally followed by a newline
+ * and the human's own words. Logs written by those builds exist and are
+ * append-only, so the encoding cannot be migrated away: it can only stop being
+ * written. That is exactly what happens now. {@link recordChannelDecision}
+ * writes the first-class field and leaves `note` to the human, while
+ * {@link batchDeliveryIdOf} reads both and prefers the field. Readers MUST
+ * accept both encodings for the life of v0.1.
+ *
+ * {@link batchNote} is retained so a caller with a v0.1-era log to reproduce
+ * can still produce the old shape. Nothing in this repository calls it on the
+ * write path.
+ */
+export const BATCH_DELIVERY_NOTE_PREFIX = "batch_delivery_id=";
+/**
+ * Encode `batchDeliveryId` (and an optional human note) into a `note` string.
+ *
+ * The pre-APRV-38 encoding, kept for round-trip fidelity with logs that carry
+ * it. New decisions use the first-class payload field instead.
+ */
+export function batchNote(batchDeliveryId, note) {
+    const head = `${BATCH_DELIVERY_NOTE_PREFIX}${batchDeliveryId}`;
+    return note === undefined ? head : `${head}\n${note}`;
+}
+/**
+ * The batch delivery id recorded on `record`, or `null` for a unit decision.
+ *
+ * Reads both encodings (see {@link BATCH_DELIVERY_NOTE_PREFIX}), preferring the
+ * first-class `batch_delivery_id` field. The fallback is what keeps audit
+ * granularity intact across a log that spans the change: a batch grant written
+ * last month and one written today resolve to the same id here.
+ */
+export function batchDeliveryIdOf(record) {
+    const payload = record.payload;
+    if (typeof payload !== "object" || payload === null)
+        return null;
+    const field = payload[BATCH_DELIVERY_ID_FIELD];
+    if (typeof field === "string" && field.length > 0)
+        return field;
+    const note = payload["note"];
+    if (typeof note !== "string")
+        return null;
+    const first = note.split("\n", 1)[0] ?? "";
+    if (!first.startsWith(BATCH_DELIVERY_NOTE_PREFIX))
+        return null;
+    const id = first.slice(BATCH_DELIVERY_NOTE_PREFIX.length);
+    return id.length === 0 ? null : id;
+}
+/** Is this channel introspectable by the conformance suite? */
+export function isTestableChannel(channel) {
+    return typeof channel.lastRendered === "function";
+}
+/**
+ * Turn a reported gesture into a log event — by calling the gate, and by doing
+ * nothing else.
+ *
+ * There is no second decision path in this codebase and this function is not
+ * one: it is a translation from {@link ChannelDecision} to `decide()`'s
+ * arguments. Every gate rule therefore still holds, and every gate refusal code
+ * still surfaces verbatim in {@link DecisionOutcome}:
+ *
+ * - `actor-not-human` — the configured actor is not `human:…`. A channel cannot
+ *   escalate itself by claiming to be one, because the actor comes from the
+ *   runtime's configuration, not from the {@link ChannelDecision}.
+ * - `already-decided` — the duplicate-callback case every push channel has
+ *   (a Telegram button pressed twice, a webhook redelivered). It refuses, and
+ *   the log keeps the first human answer.
+ * - `expired`, `budget-exceeded`, `policy-not-attested`, `append-failed`
+ *   (`head-moved`) — unchanged, all of them.
+ *
+ * `batchDeliveryId`, when present, is passed to the gate as such and lands in
+ * the event payload as `batch_delivery_id` (amended SPEC.md §10.3). The human's
+ * `note` is left carrying the human's words alone. See
+ * {@link BATCH_DELIVERY_NOTE_PREFIX} for the encoding this replaced and for the
+ * dual-read window readers stay inside for the life of v0.1.
+ */
+export function recordChannelDecision(logPath, decision, actorOptions, gateOptions = {}) {
+    // APRV-109. A gesture becomes one of TWO human-only gate verbs, chosen by the
+    // request's own key and by nothing a channel says. An attestation prompt's key
+    // is `policy.attest:<sha256>` — derived from the policy bytes by
+    // `core/policy-proposal.ts` — so a channel cannot steer a gesture from one
+    // verb to the other, and neither can a caller: the key comes off the verified
+    // log with the request it was rendered from.
+    //
+    // The routing lives here rather than in each channel runner for the reason
+    // this function exists at all: there is one place a reported gesture becomes a
+    // log event, and adding a second would be adding a second decision path.
+    if (isAttestationActionKey(decision.action_key)) {
+        return recordAttestationDecision(logPath, decision, actorOptions, gateOptions);
+    }
+    const options = { ...gateOptions };
+    if (decision.note !== undefined)
+        options.note = decision.note;
+    if (decision.batchDeliveryId !== undefined) {
+        options.batchDeliveryId = decision.batchDeliveryId;
+    }
+    const result = decide(logPath, decision.action_key, decision.decision, actorOptions.actor, options);
+    if (!result.ok) {
+        // APRV-235. A human tapped and the gate would not take it. The gate itself
+        // appends nothing on a refusal, by design; this surface knows something the
+        // gate does not, which is that a PERSON produced the gesture, and that is
+        // the fact the log was missing. `core/decision-refusal.ts` states the
+        // argument in full, including why an agent's refusal is not recorded.
+        //
+        // Best effort, deliberately last, and it changes nothing about what the
+        // channel is handed back: the decision has already been refused, and a
+        // failed audit append must not turn one refusal into two.
+        noteRefusedDecision(logPath, decision, actorOptions, gateOptions, result);
+        return { outcome: result };
+    }
+    const outcome = {
+        ok: true,
+        action_key: decision.action_key,
+        decision: decision.decision,
+        state: result.state,
+        record: result.record,
+        tokenIssued: result.token !== undefined,
+    };
+    return result.token === undefined ? { outcome } : { outcome, token: result.token };
+}
+/**
+ * Append the audit trail of a refused human decision, and swallow whatever goes
+ * wrong doing it (APRV-235).
+ *
+ * The swallowing is the point. Every caller of {@link recordChannelDecision} is
+ * on a path that has already produced its answer — a Telegram listener about to
+ * edit a message, a web handler about to render one, a terminal about to print
+ * one — and an unreadable log or a lost append race here must not take that
+ * answer away from the human who is waiting for it. What a failure costs is the
+ * record, which is exactly what the caller had before this existed.
+ */
+function noteRefusedDecision(logPath, decision, actorOptions, gateOptions, refusal) {
+    try {
+        recordRefusedDecision(logPath, {
+            actionKey: decision.action_key,
+            decision: decision.decision,
+            actor: actorOptions.actor,
+            // Every surface in this repository names itself. The fallback is the
+            // local process, which is what a decision that reached the runtime
+            // through no channel at all came through.
+            channel: actorOptions.channel ?? "cli",
+        }, {
+            code: refusal.code,
+            message: refusal.message,
+            ...(refusal.drift === undefined ? {} : { drift: refusal.drift }),
+        }, gateOptions);
+    }
+    catch {
+        // Nothing in `core/decision-refusal.ts` throws; this is the belt on the
+        // braces, so that a surprise from the append path cannot become an
+        // exception on a decision path that had already finished deciding.
+    }
+}
+/**
+ * Turn a tap on an attestation prompt into the attestation itself (APRV-109).
+ *
+ * The half of {@link recordChannelDecision} that answers a `policy.proposed`.
+ * Approve appends `policy.updated` under the human identity the listener holds,
+ * which is the same identity, from the same configuration, that a grant lands
+ * under today: the trust boundary of SPEC.md §11 is unchanged, and what this
+ * adds is that the human act it collects is a tap rather than a terminal
+ * session. Reject appends `policy.declined` and attests nothing.
+ *
+ * Every refusal `core/policy-proposal.ts` can make surfaces verbatim, and three
+ * of them are the fail-closed ones this ceremony turns on:
+ *
+ * - `proposal-stale` — the file changed after the prompt was rendered, so the
+ *   hash on the approver's screen is not the hash on disk. Nothing is attested.
+ * - `already-decided` — the duplicate-callback case every push channel has. The
+ *   first human answer stands.
+ * - `expired` — the proposer stopped waiting. Nothing is attested, and nothing
+ *   is appended: a lapsed prompt leaves the policy as unattested as it was.
+ *
+ * No token is minted on any path. An attestation authorizes no side effect; it
+ * says which rules are in force, so there is nothing for a token to be spent on
+ * and `tokenIssued` is always false.
+ */
+/**
+ * Where THIS process believes `APPROVAL.md` is (APRV-109).
+ *
+ * `policy.file` names it outright; `policy.dir` is discovery, run through the
+ * same walk `loadPolicy` uses so the attested file and the enforced file are
+ * never two different files. Neither present means the caller has not said, and
+ * `core/policy-proposal.ts` falls back to its own default.
+ */
+function listenerPolicyPath(options) {
+    const policy = options.policy;
+    if (policy === undefined)
+        return null;
+    if (policy.file !== undefined)
+        return policy.file;
+    return policy.dir === undefined ? null : proposalPolicyPath(policy.dir);
+}
+export function recordAttestationDecision(logPath, decision, actorOptions, gateOptions = {}) {
+    const sha256 = attestationKeySha256(decision.action_key);
+    if (sha256 === null) {
+        return {
+            outcome: {
+                ok: false,
+                code: "proposal-not-found",
+                message: `${JSON.stringify(decision.action_key)} is not a well-formed attestation key (policy.attest:<64 hex>); no attestation prompt could be resolved from it and nothing was appended`,
+            },
+        };
+    }
+    const now = tick(gateOptions);
+    const read = readVerifiedRecords(logPath, gateOptions.schemaDir === undefined ? {} : { schemaDir: gateOptions.schemaDir });
+    if (!read.ok)
+        return { outcome: { ok: false, code: read.code, message: read.message } };
+    const proposal = openProposalFor(read.records, sha256, now);
+    if (proposal === null) {
+        return {
+            outcome: {
+                ok: false,
+                code: "proposal-not-found",
+                message: `no open policy.proposed record proposes ${sha256}; the prompt was answered, superseded, or its proposer's deadline passed. Nothing was appended.`,
+            },
+        };
+    }
+    const options = { ...gateOptions };
+    if (decision.note !== undefined)
+        options.note = decision.note;
+    if (decision.batchDeliveryId !== undefined)
+        options.batchDeliveryId = decision.batchDeliveryId;
+    // The FILE the tap re-hashes, resolved from the listener's own policy
+    // location rather than from the proposal. A proposal records the policy's
+    // BASENAME (a log is meant to be copied, and an absolute path would name the
+    // proposer's home directory), so resolving from the record would make the
+    // check depend on this process's working directory. `core/policy-proposal.ts`
+    // refuses `proposal-stale` when it cannot read the file, so the wrong path
+    // fails closed either way; this is what makes it the RIGHT path.
+    const policyPath = listenerPolicyPath(gateOptions);
+    if (policyPath !== null)
+        options.policyPath = policyPath;
+    const result = decideAttestation(logPath, proposal.seq, decision.decision === "grant" ? "attest" : "decline", actorOptions.actor, options);
+    if (!result.ok)
+        return { outcome: result };
+    return {
+        outcome: {
+            ok: true,
+            action_key: decision.action_key,
+            decision: decision.decision,
+            state: decision.decision === "grant" ? "granted" : "rejected",
+            record: result.record,
+            tokenIssued: false,
+        },
+    };
+}
+//# sourceMappingURL=contract.js.map

package/dist/src/channels/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/channels/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,MAAM,EAAwC,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,yDAAyD;IACzD,KAAK;IACL,0FAA0F;IAC1F,cAAc;IACd,sDAAsD;IACtD,SAAS;IACT,kEAAkE;IAClE,aAAa;IACb;;;;OAIG;IACH,aAAa;IACb,4EAA4E;IAC5E,iBAAiB;IACjB;;;;;;;;;OASG;IACH,YAAY;IACZ,8DAA8D;IAC9D,OAAO;CACC,CAAC;AAsBX;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,kEAAkE,CAAC;IAC5E,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,mBAAmB;IACnB,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,0FAA0F,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,2CAA2C,CAAC;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO,kNAAkN,CAAC;IAC5N,CAAC;IACD,OAAO,2BAA2B,IAAI,GAAG,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAI,KAAQ,EAAE,MAA+B;IACnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAI,KAAQ,EAAE,MAAc;IACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,OAAO,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AA2MD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,4EAA4E;IAC5E,yBAAyB;IACzB,0DAA0D;IAC1D,gBAAgB;CACR,CAAC;AAcX;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,+MAA+M;aACtQ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,KAAK,wXAAwX;SACna,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAsBD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,eAA2B,EAAE,IAAa;IAClE,MAAM,IAAI,GAAG,GAAG,0BAA0B,GAAG,eAAe,EAAE,CAAC;IAC/D,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,KAAK,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,0BAA0B,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AA2ID,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,OAAQ,OAA2B,CAAC,YAAY,KAAK,UAAU,CAAC;AACzE,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,QAAyB,EACzB,YAAiC,EACjC,WAAW,GAAkB,EAAE;IAE/B,8EAA8E;IAC9E,+EAA+E;IAC/E,iEAAiE;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,6CAA6C;IAC7C,EAAE;IACF,2EAA2E;IAC3E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,sBAAsB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,OAAO,yBAAyB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,GAAG,WAAW,EAAE,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9D,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CACnB,OAAO,EACP,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,QAAQ,EACjB,YAAY,CAAC,KAAK,EAClB,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,0DAA0D;QAC1D,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,EAAE,EAAE,IAAI;QACR,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS;KACxC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACrF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAC1B,OAAe,EACf,QAAyB,EACzB,YAAiC,EACjC,WAA0B,EAC1B,OAAoB;IAEpB,IAAI,CAAC;QACH,qBAAqB,CACnB,OAAO,EACP;YACE,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,qEAAqE;YACrE,mEAAmE;YACnE,0CAA0C;YAC1C,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,KAAK;SACvC,EACD;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,mEAAmE;QACnE,mEAAmE;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,OAAsB;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAClD,OAAO,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,QAAyB,EACzB,YAAiC,EACjC,WAAW,GAAkB,EAAE;IAE/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,0IAA0I;aAC1L;SACF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAChF,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAExF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,2CAA2C,MAAM,iGAAiG;aAC5J;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA6B,EAAE,GAAG,WAAW,EAAE,CAAC;IAC7D,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9D,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC/F,sEAAsE;IACtE,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;IAEzD,MAAM,MAAM,GAAG,iBAAiB,CAC9B,OAAO,EACP,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EACpD,YAAY,CAAC,KAAK,EAClB,OAAO,CACR,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE3C,OAAO;QACL,OAAO,EAAE;YACP,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YAC7D,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,KAAK;SACnB;KACF,CAAC;AACJ,CAAC"}

package/dist/src/channels/payload-view.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The channel-side facade over the canonical renderer (APRV-119).
+ *
+ * Everything this module used to hold — the email view (APRV-100), the diff view
+ * (APRV-124), the command view and its injective escape marking (APRV-126), the
+ * classifier-derived breakdown and protected-path lines (APRV-143, APRV-144) —
+ * now lives in `core/wysiwys.ts`, absorbed into {@link canonicalRender}. It
+ * moved because the gate consults it: `core/gate.ts` computes the
+ * `display_hash` a request records at the write boundary from the same function
+ * the channels render with, and core cannot import channels.
+ *
+ * What is left here is the one function that needs a channel type, plus the
+ * re-exports that keep every existing import path working. A channel imports
+ * this; nothing else does.
+ */
+import type { PayloadRendering } from "./contract.js";
+export * from "../core/wysiwys.js";
+/**
+ * The text a channel puts inside its payload region (SPEC.md §10.4, §9).
+ *
+ * For a whole payload this is {@link canonicalRender}'s text verbatim, so the
+ * three channels present the same reading of the same bytes and the log's
+ * `display_hash` names it. Claimed material — the summary, the estimate, the
+ * rationale, a model's gloss — is never inside this region; each channel renders
+ * it above, under its own claimed heading.
+ *
+ * A **truncated** rendering has no canonical form and does not get one. The
+ * tagging layer cut `text` short at the caller's `maxPayloadChars`, so the bytes
+ * on screen are not the bytes the token will execute, and giving a partial
+ * payload the canonical block's authority is exactly the substitution WYSIWYS
+ * forbids. The pre-existing truncated text is returned unchanged, the channel's
+ * own "TRUNCATED — do not grant on it" marker still surrounds it, and
+ * `channels/batch.ts` still refuses to fold such a member into a batch.
+ */
+export declare function payloadRegionText(rendering: PayloadRendering, actionClass: string): string;

package/dist/src/channels/payload-view.js

@@ -0,0 +1,43 @@
+/**
+ * The channel-side facade over the canonical renderer (APRV-119).
+ *
+ * Everything this module used to hold — the email view (APRV-100), the diff view
+ * (APRV-124), the command view and its injective escape marking (APRV-126), the
+ * classifier-derived breakdown and protected-path lines (APRV-143, APRV-144) —
+ * now lives in `core/wysiwys.ts`, absorbed into {@link canonicalRender}. It
+ * moved because the gate consults it: `core/gate.ts` computes the
+ * `display_hash` a request records at the write boundary from the same function
+ * the channels render with, and core cannot import channels.
+ *
+ * What is left here is the one function that needs a channel type, plus the
+ * re-exports that keep every existing import path working. A channel imports
+ * this; nothing else does.
+ */
+import { canonicalRender } from "../core/wysiwys.js";
+// The canonical renderer and every view it is built from. Re-exported rather
+// than re-implemented: a second definition of any of these would be a second
+// rendering of the same bytes, which is the failure APRV-119 exists to remove.
+export * from "../core/wysiwys.js";
+/**
+ * The text a channel puts inside its payload region (SPEC.md §10.4, §9).
+ *
+ * For a whole payload this is {@link canonicalRender}'s text verbatim, so the
+ * three channels present the same reading of the same bytes and the log's
+ * `display_hash` names it. Claimed material — the summary, the estimate, the
+ * rationale, a model's gloss — is never inside this region; each channel renders
+ * it above, under its own claimed heading.
+ *
+ * A **truncated** rendering has no canonical form and does not get one. The
+ * tagging layer cut `text` short at the caller's `maxPayloadChars`, so the bytes
+ * on screen are not the bytes the token will execute, and giving a partial
+ * payload the canonical block's authority is exactly the substitution WYSIWYS
+ * forbids. The pre-existing truncated text is returned unchanged, the channel's
+ * own "TRUNCATED — do not grant on it" marker still surrounds it, and
+ * `channels/batch.ts` still refuses to fold such a member into a batch.
+ */
+export function payloadRegionText(rendering, actionClass) {
+    if (rendering.truncated)
+        return rendering.text;
+    return canonicalRender(rendering.value, actionClass).text;
+}
+//# sourceMappingURL=payload-view.js.map

package/dist/src/channels/payload-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-view.js","sourceRoot":"","sources":["../../../src/channels/payload-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,cAAc,oBAAoB,CAAC;AAEnC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA2B,EAAE,WAAmB;IAChF,IAAI,SAAS,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC;IAC/C,OAAO,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC"}