approval-md 0.0.1 → 0.2.0

package/dist/src/cli/channel.d.ts

@@ -0,0 +1,71 @@
+/**
+ * `approval channel cli` (APRV-23) — the zero-config channel, driven over the
+ * plugin contract rather than around it.
+ *
+ * There is no second decision path in this codebase and this verb is not one.
+ * It builds the pending queue with `channels/tagging.ts`, hands each request to
+ * `channels/cli.ts` for rendering, and registers a decision handler whose entire
+ * body is a call to `recordChannelDecision` — which calls the human-only
+ * `decide()` in `core/gate.ts`. Every gate rule (human actor, TTL, budgets,
+ * attestation, idempotency, compare-and-append) applies here unchanged, because
+ * nothing here reimplements any of them.
+ *
+ * ## Interactive, and deliberately not by default
+ *
+ * A prompt that blocks is a prompt that hangs a pipeline. So the verb is
+ * interactive only when stdin is a TTY, or when `--interactive` says so
+ * explicitly; `--json` is never interactive. Anything else lists the queue and
+ * exits 0. That rule is in `--help` because an agent that shells out to this
+ * verb must be able to predict, before it spawns anything, whether the child
+ * will return.
+ *
+ * ## The reading aids (APRV-197)
+ *
+ * Two of them, and they are different in kind. The deterministic one is the
+ * `command_breakdown` line: derived by the classifier from the bound bytes,
+ * marked `[computed] (classifier)`, free, and always present for a command this
+ * runtime's own tokenizer can read. The other is the model gloss, which costs a
+ * subprocess and 10-15 seconds and is marked `(model, unverified)` on the line
+ * itself. Until APRV-197 only the Telegram listener attached the second, so an
+ * operator deciding here read the agent's raw summary and nothing else; the two
+ * surfaces now share `cli/gloss-attach.ts`. See {@link glossRunner} for when a
+ * model is asked at all — only under `--gloss`, and never on the `--json` path,
+ * which is not interactive and has nobody waiting at it.
+ *
+ * ## Identity is declared, not proved
+ *
+ * `--as human:<id>`, else `APPROVAL_HUMAN`. The trust boundary is the local
+ * machine: anyone who can set that variable and write to the log is inside it,
+ * so a decision recorded here proves that *someone with local control* answered,
+ * not *who*. Stated in `--help` rather than implied, because a reader who
+ * believes this authenticates anybody would be wrong in a way that matters. The
+ * identity is required only when a decision could be recorded — listing the
+ * queue asks nothing of anyone.
+ *
+ * ## Where the payload comes from
+ *
+ * v0.1's log records `payload_hash`, never the payload bytes, so the material to
+ * render comes from the payload store beside the log — `.approval/payloads/`,
+ * written by `approval request --payload` (APRV-28) — which is why this verb
+ * needs no flag at all in the ordinary case. `--payload-dir` remains as an
+ * override for an operator whose bytes live elsewhere: one JSON file per action
+ * key, consulted first. `channels/tagging.ts` hashes whatever it is given and refuses
+ * anything that does not match the recorded binding, so a wrong file is a
+ * refusal and never a rendering. A manual request with no material is *skipped*
+ * and reported — visibly, never silently, because a request missing from a queue
+ * is a request nobody will approve.
+ *
+ * ## The asynchronous exit code
+ *
+ * `main()` is synchronous by contract: `cli.js` assigns its return value to
+ * `process.exitCode`. The prompt loop is asynchronous (readline), so the
+ * interactive path returns {@link EXIT_OK} to `main` and assigns the real code
+ * to `process.exitCode` when the loop settles. Node exits with the last value
+ * assigned, so a refusal still exits 1. Every synchronous path — `--json`, a
+ * non-TTY listing, a usage error, an I/O fact — returns its code the ordinary
+ * way.
+ */
+import type { Streams } from "./main.js";
+export declare function commandChannelCli(argv: string[], streams: Streams, cwd: string): number;
+/** `approval channel <subcommand>` — `cli`, `web` (APRV-25), `telegram`. */
+export declare function commandChannel(argv: string[], streams: Streams, cwd: string): number | Promise<number>;

package/dist/src/cli/channel.js

@@ -0,0 +1,438 @@
+/**
+ * `approval channel cli` (APRV-23) — the zero-config channel, driven over the
+ * plugin contract rather than around it.
+ *
+ * There is no second decision path in this codebase and this verb is not one.
+ * It builds the pending queue with `channels/tagging.ts`, hands each request to
+ * `channels/cli.ts` for rendering, and registers a decision handler whose entire
+ * body is a call to `recordChannelDecision` — which calls the human-only
+ * `decide()` in `core/gate.ts`. Every gate rule (human actor, TTL, budgets,
+ * attestation, idempotency, compare-and-append) applies here unchanged, because
+ * nothing here reimplements any of them.
+ *
+ * ## Interactive, and deliberately not by default
+ *
+ * A prompt that blocks is a prompt that hangs a pipeline. So the verb is
+ * interactive only when stdin is a TTY, or when `--interactive` says so
+ * explicitly; `--json` is never interactive. Anything else lists the queue and
+ * exits 0. That rule is in `--help` because an agent that shells out to this
+ * verb must be able to predict, before it spawns anything, whether the child
+ * will return.
+ *
+ * ## The reading aids (APRV-197)
+ *
+ * Two of them, and they are different in kind. The deterministic one is the
+ * `command_breakdown` line: derived by the classifier from the bound bytes,
+ * marked `[computed] (classifier)`, free, and always present for a command this
+ * runtime's own tokenizer can read. The other is the model gloss, which costs a
+ * subprocess and 10-15 seconds and is marked `(model, unverified)` on the line
+ * itself. Until APRV-197 only the Telegram listener attached the second, so an
+ * operator deciding here read the agent's raw summary and nothing else; the two
+ * surfaces now share `cli/gloss-attach.ts`. See {@link glossRunner} for when a
+ * model is asked at all — only under `--gloss`, and never on the `--json` path,
+ * which is not interactive and has nobody waiting at it.
+ *
+ * ## Identity is declared, not proved
+ *
+ * `--as human:<id>`, else `APPROVAL_HUMAN`. The trust boundary is the local
+ * machine: anyone who can set that variable and write to the log is inside it,
+ * so a decision recorded here proves that *someone with local control* answered,
+ * not *who*. Stated in `--help` rather than implied, because a reader who
+ * believes this authenticates anybody would be wrong in a way that matters. The
+ * identity is required only when a decision could be recorded — listing the
+ * queue asks nothing of anyone.
+ *
+ * ## Where the payload comes from
+ *
+ * v0.1's log records `payload_hash`, never the payload bytes, so the material to
+ * render comes from the payload store beside the log — `.approval/payloads/`,
+ * written by `approval request --payload` (APRV-28) — which is why this verb
+ * needs no flag at all in the ordinary case. `--payload-dir` remains as an
+ * override for an operator whose bytes live elsewhere: one JSON file per action
+ * key, consulted first. `channels/tagging.ts` hashes whatever it is given and refuses
+ * anything that does not match the recorded binding, so a wrong file is a
+ * refusal and never a rendering. A manual request with no material is *skipped*
+ * and reported — visibly, never silently, because a request missing from a queue
+ * is a request nobody will approve.
+ *
+ * ## The asynchronous exit code
+ *
+ * `main()` is synchronous by contract: `cli.js` assigns its return value to
+ * `process.exitCode`. The prompt loop is asynchronous (readline), so the
+ * interactive path returns {@link EXIT_OK} to `main` and assigns the real code
+ * to `process.exitCode` when the loop settles. Node exits with the last value
+ * assigned, so a refusal still exits 1. Every synchronous path — `--json`, a
+ * non-TTY listing, a usage error, an I/O fact — returns its code the ordinary
+ * way.
+ */
+import { readFileSync } from "node:fs";
+import { isAbsolute, join, resolve as resolvePathSegments } from "node:path";
+import { CliChannel } from "../channels/cli.js";
+import { recordChannelDecision, refusedDecisionLine, } from "../channels/contract.js";
+import { buildPendingQueue } from "../channels/tagging.js";
+import { checkpointOfferFor, checkpointPromptLines, checkpointSignedLines, signCheckpointOffer, } from "./checkpoint-tap.js";
+import { HUMAN_ACTOR_ENV, resolveHumanActor } from "../core/attest.js";
+import { loadPolicy } from "../core/policy-load.js";
+import { promptLayoutFor } from "../core/prompt-layout.js";
+import { passphraseEnvFor } from "../core/vault.js";
+import { boolFlag, parseFlags, stringFlag } from "./args.js";
+import { GLOSS_TIMEOUT_MS } from "./gloss.js";
+import { attachGloss, glossAbsenceLine } from "./gloss-attach.js";
+import { glossRunnerFromOptions, parseGlossOptions, } from "./gloss-options.js";
+import { EXIT_INTEGRITY, EXIT_IO, EXIT_OK, EXIT_TORN_TAIL, EXIT_USAGE, } from "./exit-codes.js";
+import { CHANNEL_CLI_HELP, CHANNEL_HELP } from "./help.js";
+import { DEFAULT_LOG_PATH, preflightLog, resolvePath } from "./paths.js";
+import { commandTelegram } from "./channel-telegram.js";
+import { commandWeb } from "./channel-web.js";
+import { refusal as renderRefusal, style, tokenPanel, TOKEN_NOTICE } from "./style.js";
+import { usageErrorText } from "./usage.js";
+const FLAGS = {
+    "--log": "string",
+    "--policy-dir": "string",
+    "--policy": "string",
+    "--payload-dir": "string",
+    "--as": "string",
+    "--interactive": "boolean",
+    "--gloss": "boolean",
+    "--gloss-provider": "string",
+    "--gloss-model": "string",
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+function absolute(value, cwd) {
+    return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
+}
+function usageError(streams, json, message, help) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "usage", message } })}\n`);
+    else
+        streams.err(usageErrorText(message, help));
+    return EXIT_USAGE;
+}
+function ioError(streams, json, message) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "io", message } })}\n`);
+    else
+        streams.err(`approval: ${message}\n`);
+    return EXIT_IO;
+}
+/**
+ * Payload material for one action key, from `--payload-dir`.
+ *
+ * Two filenames are accepted — the key verbatim and its percent-encoding — so a
+ * key containing a path separator cannot name a file outside the directory and
+ * an operator is not forced to guess an encoding. Unparseable or unreadable
+ * material yields `undefined`, which the tagger turns into a *visible* skip
+ * rather than a rendering; the parse failure itself is reported on stderr.
+ */
+function payloadSource(dir, streams) {
+    return (actionKey) => {
+        for (const name of [`${encodeURIComponent(actionKey)}.json`, `${actionKey}.json`]) {
+            if (name.includes("/") || name.includes("\\"))
+                continue;
+            let raw;
+            try {
+                raw = readFileSync(join(dir, name), "utf8");
+            }
+            catch {
+                continue;
+            }
+            try {
+                return JSON.parse(raw);
+            }
+            catch (cause) {
+                streams.err(`approval: payload material for ${actionKey} (${join(dir, name)}) is not valid JSON: ${cause instanceof Error ? cause.message : String(cause)}; the request will be skipped rather than rendered from bytes nobody could bind\n`);
+                return undefined;
+            }
+        }
+        return undefined;
+    };
+}
+/** The queue refusal codes, mapped onto the frozen exit table. */
+function refusalExit(code) {
+    switch (code) {
+        case "log-unreadable":
+            return EXIT_IO;
+        case "log-torn-tail":
+            return EXIT_TORN_TAIL;
+        default:
+            return EXIT_INTEGRITY;
+    }
+}
+/**
+ * One line of human-readable outcome per decision.
+ *
+ * A refusal since APRV-235 leads with the sentence the Telegram message edit
+ * shows, from the one helper both surfaces share, and keeps the gate's own
+ * message after it. The person at this terminal and the person holding the
+ * phone are usually the same person, and they were reading two different
+ * accounts of one refused tap. The gate's message stays because a terminal can
+ * afford the detail a chat bubble cannot, and because it is the text that names
+ * the hashes.
+ */
+function describeOutcome(outcome) {
+    if (outcome.ok) {
+        return `${outcome.decision === "grant" ? "granted" : "rejected"} ${outcome.action_key} -> ${outcome.state} at seq ${outcome.record.seq}`;
+    }
+    return `refused: ${outcome.code}: ${refusedDecisionLine(outcome.code)}\n  ${outcome.message}`;
+}
+export function commandChannelCli(argv, streams, cwd) {
+    const json = argv.includes("--json");
+    const parsed = parseFlags(argv, FLAGS);
+    if (!parsed.ok)
+        return usageError(streams, json, parsed.message, CHANNEL_CLI_HELP);
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${CHANNEL_CLI_HELP}\n`);
+        return EXIT_OK;
+    }
+    const extra = parsed.positionals[0];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, CHANNEL_CLI_HELP);
+    }
+    const flags = parsed.flags;
+    const selectedGloss = parseGlossOptions(flags, false);
+    if (!selectedGloss.ok) {
+        return usageError(streams, json, selectedGloss.message, CHANNEL_CLI_HELP);
+    }
+    const logPath = resolvePath(stringFlag(flags, "--log"), DEFAULT_LOG_PATH, cwd);
+    const policyFile = stringFlag(flags, "--policy");
+    const policyDir = stringFlag(flags, "--policy-dir");
+    const policy = policyFile !== null
+        ? { file: absolute(policyFile, cwd) }
+        : { dir: policyDir === null ? cwd : absolute(policyDir, cwd) };
+    const payloadDir = stringFlag(flags, "--payload-dir");
+    const tagOptions = {
+        policy,
+        ...(payloadDir === null
+            ? {}
+            : { payload: payloadSource(absolute(payloadDir, cwd), streams) }),
+    };
+    const check = preflightLog(logPath);
+    if (!check.ok)
+        return ioError(streams, json, check.message);
+    const queue = buildPendingQueue(logPath, tagOptions, new Date().toISOString());
+    if (!queue.ok) {
+        if (json) {
+            streams.err(`${JSON.stringify({ ok: false, error: { code: queue.code, message: queue.message } })}\n`);
+        }
+        else {
+            streams.err(`${renderRefusal(style({ json }), queue.code, queue.message)}\n`);
+        }
+        return refusalExit(queue.code);
+    }
+    // Never interactive with --json: a prompt has nowhere to go in a machine
+    // shape, and a caller that asked for one object must get one object.
+    const interactive = !json && (boolFlag(flags, "--interactive") || process.stdin.isTTY === true);
+    if (!interactive) {
+        return listOnly(queue.requests, queue.skipped, streams, json, promptLayoutFor(loadPolicy(policy), "cli"));
+    }
+    const asFlag = stringFlag(flags, "--as");
+    const actor = resolveHumanActor(asFlag === null ? {} : { actor: asFlag });
+    if (actor === null) {
+        // Checked BEFORE anything is rendered: asking a human to read a payload and
+        // then telling them their answer cannot be recorded wastes the one resource
+        // this whole system is spending.
+        return usageError(streams, json, asFlag === null
+            ? `no human identity: set ${HUMAN_ACTOR_ENV}=human:<id> or pass --as human:<id>; a decision collected here is recorded by the human-only gate and cannot be attributed to nobody`
+            : `--as expects a human identity matching human:<id>, got ${JSON.stringify(asFlag)}; approval decisions are human-only and an agent: or system: actor cannot record one`, CHANNEL_CLI_HELP);
+    }
+    // APRV-257. Resolved BEFORE the empty-queue exit, because an empty queue is
+    // exactly when a checkpoint is the only thing owed: the operator who opens
+    // this verb on a quiet gate is the one who should be asked, and a verb that
+    // had already returned could not ask them.
+    const tap = { logPath, policy, keyFile: null, vault: null };
+    const checkpoint = checkpointOfferFor(tap);
+    if (queue.requests.length === 0 && checkpoint === null) {
+        reportSkipped(queue.skipped, streams);
+        streams.out("queue: empty — no requests awaiting a decision\n");
+        return EXIT_OK;
+    }
+    // See the module header: the prompt loop is asynchronous, so its exit code is
+    // assigned to process.exitCode when it settles.
+    void interactiveLoop(queue.requests, logPath, policy, actor, streams, glossRunner(selectedGloss.options, policy, streams), checkpoint === null ? null : { tap, offer: checkpoint }).then((code) => {
+        process.exitCode = code;
+    }, (cause) => {
+        streams.err(`approval: the prompt loop failed: ${cause instanceof Error ? cause.message : String(cause)}\n`);
+        process.exitCode = EXIT_IO;
+    });
+    reportSkipped(queue.skipped, streams);
+    return EXIT_OK;
+}
+/**
+ * Whether this walk asks a model for a gloss, and with what (APRV-197).
+ *
+ * `--gloss`, and nothing else. The VERB is the only place a subprocess is
+ * wired, so every other caller of the prompt loop — the conformance harness,
+ * the test suite, any programmatic driver — gets `undefined` and spawns
+ * nothing. Three surfaces now carry the same flag under the same rule
+ * (`channel cli`, `channel telegram listen`, `up`).
+ *
+ * Opt-in rather than on-by-default because the cost is measured and it is not
+ * small: 10-15 seconds per request (see {@link GLOSS_TIMEOUT_MS}), spent while
+ * a human waits at a prompt. The reading aid that is always there is the
+ * deterministic one — `command_breakdown`, derived by the classifier from the
+ * bound bytes, free, and marked `[computed]`. A sentence from a model that no
+ * party vouches for is worth asking for, and worth asking for ON PURPOSE.
+ *
+ * The policy is read for one thing only (APRV-207): the NAME of its passphrase
+ * variable, so the scrub that starves the subprocess removes a renamed one too.
+ */
+function glossRunner(selection, policy, streams) {
+    if (!selection.enabled)
+        return undefined;
+    return glossRunnerFromOptions(selection, {
+        passphraseEnv: passphraseEnvFor(loadPolicy(policy)),
+        diagnostic: (reason) => streams.err(`approval: Codex gloss unavailable (${reason}); continuing without it\n`),
+    });
+}
+function reportSkipped(skipped, streams) {
+    for (const entry of skipped) {
+        // APRV-102: the shared refusal shape. The action key leads the message
+        // because a skip is ABOUT one request, and the reader is scanning for which.
+        streams.err(`${renderRefusal(style(), entry.code, `skipped ${entry.action_key}: ${entry.message}`)}\n`);
+    }
+}
+/**
+ * The non-interactive answer: the queue, and then nothing. It must not read
+ * stdin at all — a listing that blocked on a closed pipe would hang every CI
+ * step that ever called it.
+ */
+function listOnly(requests, skipped, streams, json, layout) {
+    if (json) {
+        // FROZEN SHAPE: the tagged queue, verbatim. Every field keeps its
+        // kind/value/source|author markers, so a machine reader sees the same
+        // computed/claimed split a human does.
+        streams.out(`${JSON.stringify({
+            ok: true,
+            channel: "cli",
+            interactive: false,
+            pending: requests,
+            skipped,
+        })}\n`);
+        return EXIT_OK;
+    }
+    reportSkipped(skipped, streams);
+    if (requests.length === 0) {
+        streams.out("queue: empty — no requests awaiting a decision\n");
+        return EXIT_OK;
+    }
+    const channel = new CliChannel({ output: { write: (text) => streams.out(text) }, layout });
+    channel.notify({ requests });
+    streams.out(`\n${requests.length} request(s) awaiting a decision. stdin is not a terminal, so nothing was asked and nothing was recorded; re-run with a terminal (or --interactive) to decide.\n`);
+    return EXIT_OK;
+}
+/**
+ * Walk the queue: notify, prompt, record, report.
+ *
+ * The grant token is printed exactly once, here, by the runtime — never by the
+ * channel, which is handed a {@link DecisionOutcome} that does not carry it.
+ */
+async function interactiveLoop(requests, logPath, policy, actor, streams, gloss, 
+/**
+ * The checkpoint this log is owed, when one is (APRV-257). Asked FIRST, and
+ * once: it is a question about the whole log rather than about any request in
+ * the queue, so leaving it until the end would be asking it of whoever
+ * happened to still be at the terminal.
+ */
+checkpoint) {
+    // APRV-218: which rows this walk shows, from `channels.cli.prompt`. Resolved
+    // HERE, at the verb, because the channel neither reads a policy file nor holds
+    // an opinion about what an operator should see. A policy that did not load
+    // yields the default layout and nothing else: a layout is not a permission.
+    const channel = new CliChannel({
+        output: { write: (text) => streams.out(text) },
+        layout: promptLayoutFor(loadPolicy(policy), "cli"),
+    });
+    let token;
+    channel.onDecision((decision) => {
+        const result = recordChannelDecision(logPath, decision, { actor, channel: channel.name }, { policy });
+        token = result.token;
+        return result.outcome;
+    });
+    let refused = false;
+    const tally = { asked: 0, absent: 0 };
+    try {
+        // APRV-257, first and once. Declining costs nothing and refuses nothing, so
+        // a `false` here is not an outcome the exit code reads; a signature that
+        // was ATTEMPTED and failed is reported and does set `refused`, because the
+        // operator asked for a record and did not get one.
+        if (checkpoint !== null) {
+            const sign = await channel.collectCheckpoint(checkpointPromptLines(checkpoint.offer));
+            if (sign === true) {
+                const result = signCheckpointOffer(checkpoint.tap, checkpoint.offer.head, actor, channel.name, process.cwd());
+                for (const line of checkpointSignedLines(result))
+                    streams.out(`${line}\n`);
+                if (!result.ok)
+                    refused = true;
+            }
+        }
+        for (const original of requests) {
+            // APRV-197. Attached per request, immediately before it is rendered, and
+            // by the same function the Telegram listener uses. Per request rather
+            // than in one pass up front because the wait is 10-15s each: a human who
+            // walks away after the first decision should not have paid for glosses of
+            // requests they never read, and one who stays sees the pause land next to
+            // the prompt it belongs to.
+            let request = original;
+            if (gloss !== undefined) {
+                streams.err(`approval: asking a model to describe ${original.action_key.value} (up to ${GLOSS_TIMEOUT_MS}ms; drop --gloss to skip it)\n`);
+                const attached = attachGloss(original, gloss);
+                if (attached.outcome !== "opaque")
+                    tally.asked += 1;
+                if (attached.outcome === "absent")
+                    tally.absent += 1;
+                request = attached.request;
+            }
+            const deliveryId = channel.notify(request);
+            token = undefined;
+            const collected = await channel.collectDecision(request.action_key.value, deliveryId);
+            if (collected.kind === "aborted")
+                break;
+            if (collected.kind === "skipped")
+                continue;
+            streams.out(`${describeOutcome(collected.outcome)}\n`);
+            if (!collected.outcome.ok)
+                refused = true;
+            else if (token !== undefined) {
+                // APRV-102: the rule-boxed panel of APRV-91's brief, from the one helper
+                // every token surface shares. This terminal is the only place the raw
+                // value will ever exist.
+                streams.out(`${tokenPanel(style(), request.action_key.value, token, TOKEN_NOTICE)}\n`);
+            }
+        }
+    }
+    finally {
+        channel.close();
+    }
+    // APRV-197. Chronic silence becomes a visible line: an operator who asked for
+    // glosses and read none now learns that a model was asked and did not answer,
+    // instead of concluding the feature was never built (which is exactly what
+    // happened under APRV-144's ceiling).
+    if (tally.absent > 0) {
+        streams.err(glossAbsenceLine("channel cli", tally.absent, tally.asked, GLOSS_TIMEOUT_MS));
+    }
+    return refused ? EXIT_INTEGRITY : EXIT_OK;
+}
+/** `approval channel <subcommand>` — `cli`, `web` (APRV-25), `telegram`. */
+export function commandChannel(argv, streams, cwd) {
+    const sub = argv[0];
+    const rest = argv.slice(1);
+    const json = argv.includes("--json");
+    if (sub === undefined) {
+        return usageError(streams, json, "missing subcommand for `approval channel`", CHANNEL_HELP);
+    }
+    if (sub === "--help" || sub === "-h" || sub === "help") {
+        streams.out(`${CHANNEL_HELP}\n`);
+        return EXIT_OK;
+    }
+    if (sub === "cli")
+        return commandChannelCli(rest, streams, cwd);
+    // APRV-25: the local queue page. Long-lived, like `telegram listen`.
+    if (sub === "web")
+        return commandWeb(rest, streams, cwd);
+    if (sub === "telegram")
+        return commandTelegram(rest, streams, cwd);
+    return usageError(streams, json, `unknown subcommand ${JSON.stringify(sub)} for \`approval channel\``, CHANNEL_HELP);
+}
+//# sourceMappingURL=channel.js.map

package/dist/src/cli/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../../src/cli/channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GAGpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAmB,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAqB,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,OAAO,EACP,OAAO,EACP,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,KAAK,GAA6B;IACtC,OAAO,EAAE,QAAQ;IACjB,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,QAAQ;IACpB,eAAe,EAAE,QAAQ;IACzB,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,SAAS;IACpB,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe,EAAE,IAAY;IAChF,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,GAAW,EACX,OAAgB;IAEhB,OAAO,CAAC,SAAS,EAAE,EAAE;QACnB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,CAAC;YAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxD,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CACT,kCAAkC,SAAS,KAAK,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,wBAC7D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,mFAAmF,CACpF,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,SAAS,WAAW,CAAC,IAAY;IAC/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB;YACnB,OAAO,OAAO,CAAC;QACjB,KAAK,eAAe;YAClB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,OAAwB;IAC/C,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,OAAO,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC3I,CAAC;IACD,OAAO,YAAY,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAEnF,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAC9C,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAE/E,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,MAAM,GACV,UAAU,KAAK,IAAI;QACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;IAEnE,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAe;QAC7B,MAAM;QACN,GAAG,CAAC,UAAU,KAAK,IAAI;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;KACpE,CAAC;IAEF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAC1F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,WAAW,GACf,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,4EAA4E;QAC5E,4EAA4E;QAC5E,iCAAiC;QACjC,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,0BAA0B,eAAe,sIAAsI;YACjL,CAAC,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sFAAsF,EAC1K,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,GAAG,GAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACvD,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,gDAAgD;IAChD,KAAK,eAAe,CAClB,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,MAAM,EACN,KAAK,EACL,OAAO,EACP,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EACnD,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CACxD,CAAC,IAAI,CACJ,CAAC,IAAI,EAAE,EAAE;QACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,OAAO,CAAC,GAAG,CACT,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAChG,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC7B,CAAC,CACF,CAAC;IACF,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,WAAW,CAClB,SAAuB,EACvB,MAAuC,EACvC,OAAgB;IAEhB,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,sBAAsB,CAAC,SAAS,EAAE;QACvC,aAAa,EAAE,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,4BAA4B,CAAC;KACxF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CACpB,OAAgE,EAChE,OAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,uEAAuE;QACvE,6EAA6E;QAC7E,OAAO,CAAC,GAAG,CACT,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CACf,QAA0B,EAC1B,OAAgE,EAChE,OAAgB,EAChB,IAAa,EACb,MAAoB;IAEpB,IAAI,IAAI,EAAE,CAAC;QACT,kEAAkE;QAClE,sEAAsE;QACtE,uCAAuC;QACvC,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;YAChB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,QAAQ;YACjB,OAAO;SACR,CAAC,IAAI,CACP,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CACT,KAAK,QAAQ,CAAC,MAAM,iKAAiK,CACtL,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,QAA0B,EAC1B,OAAe,EACf,MAAuC,EACvC,KAAa,EACb,OAAgB,EAChB,KAA8B;AAC9B;;;;;GAKG;AACH,UAAiE;IAEjE,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;QAC7B,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC9C,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;KACnD,CAAC,CAAC;IAEH,IAAI,KAAyB,CAAC;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,qBAAqB,CAClC,OAAO,EACP,QAAQ,EACR,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAChC,EAAE,MAAM,EAAE,CACX,CAAC;QACF,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACrB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,mDAAmD;QACnD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACtF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,mBAAmB,CAChC,UAAU,CAAC,GAAG,EACd,UAAU,CAAC,KAAK,CAAC,IAAI,EACrB,KAAK,EACL,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,GAAG,EAAE,CACd,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,GAAG,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,yEAAyE;YACzE,sEAAsE;YACtE,yEAAyE;YACzE,0EAA0E;YAC1E,0EAA0E;YAC1E,4BAA4B;YAC5B,IAAI,OAAO,GAAG,QAAQ,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CACT,wCAAwC,QAAQ,CAAC,UAAU,CAAC,KAAK,WAAW,gBAAgB,gCAAgC,CAC7H,CAAC;gBACF,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC9C,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBACrD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC7B,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK,GAAG,SAAS,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACtF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM;YACxC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YAE3C,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,GAAG,IAAI,CAAC;iBACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,yEAAyE;gBACzE,sEAAsE;gBACtE,yBAAyB;gBACzB,OAAO,CAAC,GAAG,CACT,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,sCAAsC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,2CAA2C,EAAE,YAAY,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAChE,qEAAqE;IACrE,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,EACpE,YAAY,CACb,CAAC;AACJ,CAAC"}