approval-md 0.0.1 → 0.2.0

package/dist/src/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAExE,0EAA0E;AAC1E,MAAM,UAAU,GAAG;;;;;0EAKuD,CAAC;AAE3E,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,MAAM,WAAW,GAAG;8BACU,CAAC;AAE/B,uDAAuD;AACvD,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO,8BAA8B,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+SvB,UAAU;;;;;;;;;;;EAWV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAmC8D,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;EAiB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;sCAqBc,kBAAkB;EACtD,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;EAoBzB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBvB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,GAAG,kBAAkB;;;;yDAIU,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,6EAA6E,CAAC;AAE5G,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;EAiBzB,qBAAqB;;EAErB,iBAAiB;EACjB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAuB;IACrE,OAAO,mBAAmB,IAAI;;;oBAGZ,IAAI;;;;;;;;6BAQK,KAAK;;EAEhC,qBAAqB;;;;EAIrB,iBAAiB;EACjB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG;EACzB,kBAAkB;qEACiD,CAAC;AAEtE,wEAAwE;AACxE,MAAM,mBAAmB,GAAG;EAC1B,kBAAkB;qEACiD,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,SAAS,YAAY,CAAC,IAAmC;IACvD,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1F,MAAM,IAAI,GACR,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;;iFAEyE;QAC3E,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC;;oEAE0D;YAC5D,CAAC,CAAC;;gDAEsC,CAAC;IAE/C,OAAO,YAAY,IAAI,qBAAqB,IAAI;;;aAGrC,IAAI,gCACb,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAC3C;;;;iEAKE,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,EACN;;;;;;EAMA,IAAI;;oCAE8B,IAAI;EACtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;EAkBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;2DAY2B,gBAAgB;;;;;;;;;;;EAWzE,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;EAmBxB,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;EAmBvB,kBAAkB;;;EAGlB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuBxB,kBAAkB;EAClB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;EAmB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;EAkBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB5B,kBAAkB;EAClB,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB9B,kBAAkB;EAClB,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;6DAYoC,gBAAgB;IACzE,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;;;;;;;;EAQ/C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB7B,kBAAkB;EAClB,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsBvB,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;EAUzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;EAc1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;EAoB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;EAmB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;EAiB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;EAWzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAEd,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,YAAY,GAAG;iEAC4C,CAAC;AAElE,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,YAAY;;EAEZ,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;EAoB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;EAoB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAE;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;EAejC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;EAkB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;EAiBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;EAcpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;EAmBhC,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;EAezC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;EAmBxB,kBAAkB;EAClB,WAAW;yDAC4C,CAAC;AAE1D,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC"}

package/dist/src/cli/hook-codex.d.ts

@@ -0,0 +1,78 @@
+/**
+ * The Codex-specific edge of `approval hook codex` (APRV-311).
+ *
+ * Codex currently uses the same outer hook envelope as Claude Code, but its
+ * input and outcome contracts are independent. Keeping the readings here
+ * prevents a Claude event name or a Claude tool-response shape from becoming
+ * evidence about a Codex execution.
+ */
+/** The only Codex events this adapter understands. */
+export declare const CODEX_PRE_TOOL_EVENT = "PreToolUse";
+export declare const CODEX_POST_TOOL_EVENT = "PostToolUse";
+export interface CodexHookInput {
+    sessionId: string;
+    sessionIdPresent: boolean;
+    cwd: string;
+    toolName: string;
+    toolInput: Record<string, unknown>;
+    toolUseId: string | null;
+    hookEventName: string | null;
+    /** Preserved verbatim so a future native reading does not inherit Claude's object-only parse. */
+    toolResponseRaw: unknown;
+}
+export type CodexInputCheck = {
+    ok: true;
+    phase: "pre" | "post";
+} | {
+    ok: false;
+    detail: string;
+};
+/**
+ * Validate the closed Codex hook surface before it reaches shared gate code.
+ *
+ * The process directory is the directory the hook can establish itself. The
+ * event's `cwd` is self-reported, so it may agree with that directory but may
+ * not select a different payload binding. Both paths are resolved through the
+ * filesystem so a symlink spelling of the same directory does not create a
+ * false mismatch.
+ */
+export declare function checkCodexHookInput(input: CodexHookInput, processCwd: string): CodexInputCheck;
+export type CodexOutcomeReading = {
+    ok: true;
+    outcome: "completed" | "failed";
+} | {
+    ok: false;
+    detail: string;
+};
+/**
+ * Read a Codex outcome only from a native-observed, closed contract.
+ *
+ * The native 0.152.1 probe observed the same empty-string `tool_response` for
+ * successful and non-zero Bash calls, and the documented value remains
+ * arbitrary JSON with no stable status key. Its raw value is intentionally
+ * accepted and ignored. Until a native probe records a discriminating
+ * contract, appending either outcome would fabricate it.
+ */
+export declare function readCodexReportedOutcome(_input: CodexHookInput): CodexOutcomeReading;
+export interface CodexBinding {
+    /** Exact bytes the gate and a future counterpart both bind. */
+    payload: {
+        tool: "Bash" | "apply_patch";
+        command: string;
+        cwd: string;
+    };
+    /** Passed to the legacy finish helper; reconstructs the four-segment task. */
+    finishSessionId: string;
+    finishToolUseId: string;
+    task: string;
+}
+/**
+ * Build the one Codex tool-call identity used by both pre and post phases.
+ *
+ * Native ids may contain colons, so they never enter the colon-delimited task
+ * directly. The session digest preserves per-session loop scope; the call
+ * digest additionally binds tool semantics, command bytes, and established
+ * process directory. Fixed-width digests make the encoding injective at the
+ * task grammar boundary.
+ */
+export declare function codexBinding(input: CodexHookInput, processCwd: string): CodexBinding;

package/dist/src/cli/hook-codex.js

@@ -0,0 +1,167 @@
+/**
+ * The Codex-specific edge of `approval hook codex` (APRV-311).
+ *
+ * Codex currently uses the same outer hook envelope as Claude Code, but its
+ * input and outcome contracts are independent. Keeping the readings here
+ * prevents a Claude event name or a Claude tool-response shape from becoming
+ * evidence about a Codex execution.
+ */
+import { realpathSync } from "node:fs";
+import { resolve } from "node:path";
+import { payloadHash } from "../core/payload.js";
+/** The only Codex events this adapter understands. */
+export const CODEX_PRE_TOOL_EVENT = "PreToolUse";
+export const CODEX_POST_TOOL_EVENT = "PostToolUse";
+/** Stable correlation ids are log material, so bound their shape and size. */
+const STABLE_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u;
+function stableId(name, value) {
+    if (value === null || !STABLE_ID.test(value)) {
+        return `${name} must be a non-empty stable id of at most 256 safe characters`;
+    }
+    return null;
+}
+/**
+ * Validate the closed Codex hook surface before it reaches shared gate code.
+ *
+ * The process directory is the directory the hook can establish itself. The
+ * event's `cwd` is self-reported, so it may agree with that directory but may
+ * not select a different payload binding. Both paths are resolved through the
+ * filesystem so a symlink spelling of the same directory does not create a
+ * false mismatch.
+ */
+export function checkCodexHookInput(input, processCwd) {
+    const phase = input.hookEventName === CODEX_PRE_TOOL_EVENT
+        ? "pre"
+        : input.hookEventName === CODEX_POST_TOOL_EVENT
+            ? "post"
+            : null;
+    if (phase === null) {
+        return {
+            ok: false,
+            detail: `hook_event_name must be ${CODEX_PRE_TOOL_EVENT} or ${CODEX_POST_TOOL_EVENT}`,
+        };
+    }
+    const session = stableId("session_id", input.sessionIdPresent ? input.sessionId : null);
+    if (session !== null)
+        return { ok: false, detail: session };
+    const toolUse = stableId("tool_use_id", input.toolUseId);
+    if (toolUse !== null)
+        return { ok: false, detail: toolUse };
+    if (input.toolName !== "Bash" && input.toolName !== "apply_patch") {
+        return {
+            ok: false,
+            detail: `${JSON.stringify(input.toolName)} is not a supported Codex tool; expected exact Bash or apply_patch`,
+        };
+    }
+    if (typeof input.toolInput["command"] !== "string" || input.toolInput["command"].length === 0) {
+        return { ok: false, detail: `${input.toolName} tool_input.command must be a non-empty string` };
+    }
+    const knownInput = new Set(["command", "description", "cwd", "workdir"]);
+    const unexpected = Object.keys(input.toolInput).find((key) => !knownInput.has(key));
+    if (unexpected !== undefined) {
+        return {
+            ok: false,
+            detail: `${input.toolName} tool_input contains unsupported execution-affecting field ${JSON.stringify(unexpected)}`,
+        };
+    }
+    if (input.toolInput["description"] !== undefined &&
+        typeof input.toolInput["description"] !== "string") {
+        return { ok: false, detail: "Bash tool_input.description must be a string when present" };
+    }
+    if (input.cwd.length === 0)
+        return { ok: false, detail: "hook input has no cwd" };
+    let eventCwd;
+    let actualCwd;
+    try {
+        eventCwd = realpathSync(input.cwd);
+        actualCwd = realpathSync(processCwd);
+    }
+    catch {
+        return {
+            ok: false,
+            detail: "hook cwd could not be resolved against the hook process directory",
+        };
+    }
+    if (eventCwd !== actualCwd) {
+        return {
+            ok: false,
+            detail: `hook cwd ${JSON.stringify(input.cwd)} does not identify the hook process directory`,
+        };
+    }
+    for (const key of ["cwd", "workdir"]) {
+        const stated = input.toolInput[key];
+        if (stated === undefined)
+            continue;
+        if (typeof stated !== "string") {
+            return { ok: false, detail: `Bash tool_input.${key} must be a string when present` };
+        }
+        let resolved;
+        try {
+            resolved = realpathSync(resolve(processCwd, stated));
+        }
+        catch {
+            return { ok: false, detail: `Bash tool_input.${key} could not be resolved` };
+        }
+        if (resolved !== actualCwd) {
+            return {
+                ok: false,
+                detail: `Bash tool_input.${key} does not identify the hook process directory`,
+            };
+        }
+    }
+    return { ok: true, phase };
+}
+/**
+ * Read a Codex outcome only from a native-observed, closed contract.
+ *
+ * The native 0.152.1 probe observed the same empty-string `tool_response` for
+ * successful and non-zero Bash calls, and the documented value remains
+ * arbitrary JSON with no stable status key. Its raw value is intentionally
+ * accepted and ignored. Until a native probe records a discriminating
+ * contract, appending either outcome would fabricate it.
+ */
+export function readCodexReportedOutcome(_input) {
+    return {
+        ok: false,
+        detail: "Codex PostToolUse does not yet expose a native-verified success or failure reading; tool_response is arbitrary JSON, so the execution remains open",
+    };
+}
+/**
+ * Build the one Codex tool-call identity used by both pre and post phases.
+ *
+ * Native ids may contain colons, so they never enter the colon-delimited task
+ * directly. The session digest preserves per-session loop scope; the call
+ * digest additionally binds tool semantics, command bytes, and established
+ * process directory. Fixed-width digests make the encoding injective at the
+ * task grammar boundary.
+ */
+export function codexBinding(input, processCwd) {
+    const command = input.toolInput["command"];
+    if ((input.toolName !== "Bash" && input.toolName !== "apply_patch") || typeof command !== "string") {
+        throw new Error("codexBinding requires a validated Bash or apply_patch input");
+    }
+    if (input.toolUseId === null)
+        throw new Error("codexBinding requires a validated tool_use_id");
+    const tool = input.toolName;
+    const payload = { tool, command, cwd: realpathSync(processCwd) };
+    const sessionDigest = payloadHash({
+        domain: "approval.md/codex-hook-session/v1",
+        harness: "codex",
+        session_id: input.sessionId,
+    });
+    const callDigest = payloadHash({
+        domain: "approval.md/codex-hook-call/v1",
+        harness: "codex",
+        session_id: input.sessionId,
+        tool_use_id: input.toolUseId,
+        payload_hash: payloadHash(payload),
+    });
+    const finishSessionId = `codex:${sessionDigest}`;
+    return {
+        payload,
+        finishSessionId,
+        finishToolUseId: callDigest,
+        task: `hook:${finishSessionId}:${callDigest}`,
+    };
+}
+//# sourceMappingURL=hook-codex.js.map

package/dist/src/cli/hook-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-codex.js","sourceRoot":"","sources":["../../../src/cli/hook-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,sDAAsD;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAkBzD,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAoB;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,IAAI,+DAA+D,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB,EAAE,UAAkB;IAC3E,MAAM,KAAK,GACT,KAAK,CAAC,aAAa,KAAK,oBAAoB;QAC1C,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,qBAAqB;YAC7C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2BAA2B,oBAAoB,OAAO,qBAAqB,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAE5D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,oEAAoE;SAC9G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,gDAAgD,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,8DAA8D,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;SACpH,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,SAAS;QAC5C,OAAO,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,QAAQ,EAClD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClF,IAAI,QAAgB,CAAC;IACrB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mEAAmE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,+CAA+C;SAC7F,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,CAAU,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,gCAAgC,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,wBAAwB,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,mBAAmB,GAAG,+CAA+C;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAMD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAsB;IAC7D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,oJAAoJ;KACvJ,CAAC;AACJ,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAqB,EAAE,UAAkB;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/F,MAAM,IAAI,GAA2B,KAAK,CAAC,QAAQ,CAAC;IACpD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;IACjE,MAAM,aAAa,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,mCAAmC;QAC3C,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC;QAC7B,MAAM,EAAE,gCAAgC;QACxC,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,WAAW,EAAE,KAAK,CAAC,SAAS;QAC5B,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,SAAS,aAAa,EAAE,CAAC;IACjD,OAAO;QACL,OAAO;QACP,eAAe;QACf,eAAe,EAAE,UAAU;QAC3B,IAAI,EAAE,QAAQ,eAAe,IAAI,UAAU,EAAE;KAC9C,CAAC;AACJ,CAAC"}

package/dist/src/cli/hook.d.ts

@@ -0,0 +1,331 @@
+/**
+ * `approval hook` — harness adapters that put the gate in front of the commands
+ * an agent's harness runs directly (APRV-82 Claude Code, APRV-133 Cursor).
+ *
+ * The problem it closes. Until this verb, the runtime gated what went through
+ * `approval run`. Everything the harness executed on its own — `git push`, `gh
+ * pr create`, `npm install`, `curl` — bypassed APPROVAL.md entirely, so the
+ * enforcement of those classes was the prose in CLAUDE.md and an agent's
+ * willingness to read it. That is exactly the AGENTS.md failure SPEC.md §2
+ * critiques, reproduced inside the repository that critiques it.
+ *
+ * As everywhere else in this CLI, **no logic lives here.** Classification is
+ * `core/command-class.ts` (pure, fixture-tested); registration, policy
+ * resolution and intake are `core/gate.ts`; the decision is derived from the
+ * verified log by `core/state.ts`. This file reads one JSON object from stdin,
+ * calls those, and prints one JSON object back.
+ *
+ * Four choices are load-bearing enough to state plainly.
+ *
+ * **It exits 0 with a verdict, or 2 with nothing.** Claude Code reads a hook's
+ * stdout as a decision only on exit 0; a hook that exits 2 is a *block* with the
+ * stderr text as the reason, and any other non-zero code is a non-blocking
+ * error. So every classified or decided outcome — allow and deny alike — is an
+ * exit 0 with `hookSpecificOutput` on stdout, and the only exit 2 is a
+ * misconfigured hook (an unknown flag, a bad identity), where blocking is the
+ * correct failure mode. No new exit code is added to the frozen table.
+ *
+ * **Never `ask`.** The permission decision vocabulary includes `ask`, which
+ * hands the question to the harness's own prompt. Using it would answer an
+ * approval question outside the log: no request, no record, no audit trail, and
+ * a human deciding in a UI the policy never named. The hook allows or denies,
+ * and every deny carries a machine-readable code.
+ *
+ * **Fail closed on every axis.** An unreadable policy, an unreachable log, a
+ * command the classifier cannot read, a wait that times out: all deny. A hook
+ * that fell back to allow when it could not reach the gate would be worst
+ * precisely when it mattered. Since APRV-139 that includes an unattested
+ * policy: a verdict nobody is asked about is checked against the verified log
+ * first, exactly as `core/execute.ts` checks one (see `unattendedGuard`).
+ *
+ * **The harness executes, not the runtime.** The hook decides *before* the tool
+ * runs and never spawns anything, so it never writes an `execution.completed`
+ * or `execution.failed`: the runtime does not run the command and never learns
+ * how it went. It does write one `execution.started`, and only where a verdict
+ * of `allow` rests on a human's grant — that record is the *consumption* of the
+ * grant (APRV-117), which a harness request needs because it mints no token
+ * that could be spent instead. `core/gate.ts`'s `consumeHarnessGrant` is where
+ * that lives and why. What the log records is otherwise the approval lifecycle:
+ * `task.registered`, `approval.requested`, and the human's decision.
+ *
+ * **A decision outlives the invocation that asked for it (APRV-117).** Requests
+ * are matched by the payload hash of `{command, cwd}`, so the answer to "may I
+ * run these bytes, here" belongs to the bytes rather than to one tool-use id.
+ * A retry while the question is pending adopts it instead of asking twice; a
+ * retry after a grant lands proceeds on it, once, inside the TTL. That is why
+ * the wait no longer ends in an immediate withdrawal: a late tap authorizes
+ * something. It ends in one once the RETRY GRACE has run out (APRV-287): past
+ * that window nothing is coming back to adopt the question, and a request left
+ * standing is one more dead message a restarted listener re-delivers.
+ *
+ * **An allow follows its record, and says which window it sits in (APRV-200).**
+ * The harness executes and never sees this process's return value, so what
+ * authorizes the tool call is the record and not the verdict. Every allow that
+ * rests on a grant therefore spends it, RE-READS the verified log to establish
+ * that the `execution.started` is in the chain, and only then prints — a
+ * `hook-grant-unverified` deny where it cannot. The record itself carries
+ * `grant_origin`: `direct` where the tool call that spent the grant is the tool
+ * call that asked for it, `carried` where a later one spent it under the
+ * carryover above. Only `direct` states an ordering this runtime observed;
+ * `carried` is the window in which a grant can be a ratification of a write the
+ * harness already applied, and naming it is what makes that visible to an
+ * auditor holding the log alone. See `docs/claude-code-hook.md`.
+ */
+import { type ClassifiedSegment, type CommandClassification, type ProtectedPathEntry } from "../core/command-class.js";
+import type { Streams } from "./main.js";
+import { type Style } from "./style.js";
+/**
+ * How much of the command line goes in the (claimed) summary field.
+ *
+ * A HEADLINE, and only that (APRV-124). What the approver is bound to is the
+ * payload, which carries the whole command (or the whole change) and is never
+ * shortened; this is the one-line label above it. Exported because the tests
+ * pin the distinction.
+ */
+export declare const SUMMARY_LIMIT = 160;
+/**
+ * The closed set of hook denial codes, frozen in the sense
+ * `GATE_REFUSAL_CODES` is: the reason string a human reads and an agent
+ * branches on starts with one of these.
+ *
+ * `hook-gate-refused` is a family: the emitted code is
+ * `hook-gate-refused:<gate refusal code>`, so the gate's own frozen vocabulary
+ * reaches the caller unflattened.
+ */
+export declare const HOOK_DENY_CODES: readonly [
+/** No rule covers some segment of the command line. */
+"hook-unclassified", 
+/**
+ * Some class of the command resolves to `human-only` (APRV-185, amended
+ * SPEC.md §5.2): the policy reserves it to human hands, so the command is
+ * denied outright and no gate lifecycle is opened for it.
+ *
+ * This union's spelling of the gate's `class-human-only`, which the detail
+ * names in full. It wears the `hook-` prefix every other member wears rather
+ * than borrowing the gate's bare code, because a caller branching on this
+ * vocabulary branches on one shape; `hook-gate-refused:<c>` is the form
+ * reserved for a code the gate itself produced, and the gate is not asked
+ * here.
+ *
+ * Distinct from `hook-unclassified`, and the repairs are opposites. That one
+ * says the policy has nothing to say about this command, so the fix is to
+ * declare a class for it. This one says the policy has spoken as clearly as
+ * it can, and the fix is for a person to run the command themselves. Distinct
+ * from `hook-rejected` for the reason the gate's code is distinct from a
+ * rejection: nobody decided anything, so there is nothing to ask again.
+ */
+"hook-class-human-only", 
+/** A construct whose effect cannot be read off the text (`bash -c`, `eval`). */
+"hook-opaque", 
+/** The command line could not be tokenized at all. */
+"hook-unparseable", 
+/** A human rejected the request. */
+"hook-rejected", 
+/** A previously granted request was withdrawn. */
+"hook-revoked", 
+/** The request's TTL lapsed before a decision. */
+"hook-expired", 
+/**
+ * The request was withdrawn before a decision landed (APRV-106). Since
+ * APRV-117 the timeout no longer produces this: what does is a session that
+ * ended mid-wait (signal or failure) and an operator's `approval withdraw`.
+ * Terminal, and not a refusal by anyone.
+ */
+"hook-withdrawn", 
+/**
+ * The wait elapsed with the request still undecided. The request stays open
+ * for the RETRY GRACE (APRV-117, bounded by APRV-287): a decision inside that
+ * window authorizes a retry of the identical command in the identical
+ * directory, once. Past the grace the hook withdraws it (reason `timeout`),
+ * because a question nothing will adopt is a message on a phone that decides
+ * nothing.
+ */
+"hook-timeout", 
+/** The gate refused intake; the gate's own code follows a colon. */
+"hook-gate-refused", 
+/**
+ * The grant was spent and the VERIFIED log does not show it (APRV-200).
+ *
+ * Distinct from `hook-gate-refused:append-failed`, which says the write was
+ * refused and nothing landed. This one says the write reported success and the
+ * chain cannot be seen to carry it, which is a different fact with a different
+ * repair: nothing here is retried, the log is checked (`approval log verify`).
+ *
+ * On this surface the record IS the authorization — the harness executes and
+ * never sees the gate's return value — so a verdict is not printed until the
+ * verified chain carries the execution the harness is about to perform. The
+ * grant is spent by the time this fires, which is the fail-closed direction:
+ * one more prompt on the retry, and nothing authorized meanwhile.
+ */
+"hook-grant-unverified", 
+/**
+ * `APPROVAL_HOOK_REQUIRE_SANDBOX=1` is set and this command runs code the
+ * runtime did not author, unwrapped (APRV-193).
+ *
+ * The one deny in this union that names a spelling that would work rather
+ * than a decision or a fault: re-run it as `approval sandbox -- <cmd>` and it
+ * proceeds, classified exactly as it is now, with no way out to the network.
+ *
+ * It exists because the hook DECIDES and the harness EXECUTES. A verdict
+ * cannot rewrite a command into a wrapper, so the only way for this runtime
+ * to insist on the room is to refuse the spelling that does not ask for it.
+ * Off by default, and turning it on can only ever refuse more — which is why
+ * an environment variable is an acceptable home for it, and why nothing in
+ * the other direction is readable from one.
+ */
+"hook-sandbox-required", 
+/** The policy could not be loaded, so no class can be resolved. */
+"hook-policy-unavailable", 
+/**
+ * No log exists where the hook was pointed. The hook is a WRITER to an
+ * existing log, never an initializer: creating one where it happens to stand
+ * (an agent worktree, say) forks a chain off the real log's tail, and git
+ * merges do not reconcile hash chains (APRV-101).
+ */
+"hook-log-unreachable", 
+/** Malformed hook input, or a log/filesystem fact that stopped the check. */
+"hook-io"];
+export type HookDenyCode = (typeof HOOK_DENY_CODES)[number];
+/** A classification plus a human-readable note for every segment refined. */
+export interface RefinedClassification {
+    result: CommandClassification;
+    /** One line per downgraded segment; empty when nothing was refined. */
+    notes: string[];
+}
+/**
+ * Downgrade local rewrites of unpublished history to `vcs.commit.branch`.
+ *
+ * IMPURE by design and by contract: it runs git in `cwd`. Both callers pass the
+ * same directory the hook itself resolves from, so what `hook classify` prints
+ * is what `hook claude-code` decides.
+ */
+export declare function refineRewrite(result: CommandClassification, cwd: string): RefinedClassification;
+/**
+ * Is a candidate deep enough, once resolved, to stand as a scratch root?
+ *
+ * The depth floor is the anti-poisoning guard (SPEC.md §11.1: self-reported
+ * fields never reduce scrutiny). A `TMPDIR` naming `/` resolves and exists, and
+ * a root of `/` would turn every absolute delete into a scratch delete, so a
+ * resolved root is refused below {@link MIN_ROOT_SEGMENTS}.
+ *
+ * The well-known system temp roots are the one exception, and they are one on
+ * every platform: on Linux `os.tmpdir()` is `/tmp`, a single segment, and
+ * refusing it would mean `files.delete.scratch` could never fire there, while
+ * on macOS the same directory resolves through the `/tmp` symlink to
+ * `/private/tmp` and clears the floor by accident of layout. The exemption is
+ * keyed on the RESOLVED value being one of the three compiled-in names, so
+ * nothing a caller reports widens it: a poisoned `TMPDIR` still has to resolve
+ * to `/tmp`, `/private/tmp` or `/var/tmp` to get in, and those are roots
+ * already. `/` is not among them, and every other one-segment directory
+ * (`/etc`, `/home`, `/usr`) stays refused.
+ */
+export declare function scratchRootDepthAccepted(resolved: string): boolean;
+/**
+ * The scratch roots this process may vouch for, resolved and guarded.
+ *
+ * `cwd` is the directory the hook itself resolved from; a candidate containing
+ * it is discarded, because a root that swallowed the checkout would make every
+ * delete in the repository a scratch delete.
+ */
+export declare function resolveScratchRoots(cwd: string, env?: NodeJS.ProcessEnv): string[];
+/**
+ * Tighten `files.delete.scratch` back to `files.delete.out_of_scope` wherever
+ * the disk disagrees with the text.
+ *
+ * IMPURE by design and by contract, exactly as {@link refineRewrite} is: it
+ * stats paths. It only ever moves a segment toward the stricter class, so a
+ * caller that skipped it would never be MORE permissive than one that runs it,
+ * which is what lets `hook classify` and `hook claude-code` share it without
+ * either becoming the authority.
+ */
+export declare function refineScratchDelete(result: CommandClassification, roots: readonly string[]): RefinedClassification;
+/**
+ * The classifier, its scratch context, and both impure refinements, in the one
+ * order every caller must use.
+ *
+ * `hook classify` printing a different class from the one `hook claude-code`
+ * decides would make the explainer a different program (APRV-108's note), and
+ * that stays true now there are two refinements in the chain.
+ */
+export declare function classifyForHook(command: string, protectedPaths: readonly ProtectedPathEntry[], cwd: string): RefinedClassification;
+/**
+ * What the classifier made of a command (APRV-91 #9).
+ *
+ * Human output is an aligned three-column table under a `key` header row; the
+ * command text and the rule name are copyable and stay undressed. `--json`
+ * emits the classification object unchanged, and asks for the style FIRST so
+ * that the `json` veto on colour is the answer this process memoizes.
+ */
+export declare function renderClassification(result: CommandClassification, json: boolean, st?: Style): string;
+/**
+ * Every line the counterpart can print, closed and machine-readable (§11.1
+ * invariant 7).
+ *
+ * A post-execution hook cannot deny anything — the tool has already run — so
+ * none of these is a verdict, and every one of them prints an EMPTY STDOUT: a
+ * decision object on that stream would be a second answer about a command the
+ * harness already ran. The line goes to stderr instead.
+ *
+ * ## The exit code decides whether anybody reads that line (APRV-303)
+ *
+ * Claude Code's hooks reference states it plainly: stderr from a hook that
+ * exits 0 "goes to the debug log only, never the transcript, and Claude never
+ * sees it", and a post-execution hook that exits 2 has its stderr shown, since
+ * there is nothing left to block. So a refusal reported at exit 0 is a refusal
+ * nobody receives, which is how 22052 unreported starts accumulated on this
+ * project's own log without a single visible complaint.
+ *
+ * Therefore: {@link POST_TOOL_REPORTED} exits 0, because a counterpart that
+ * landed is not news; every other code exits {@link POST_TOOL_SURFACE_EXIT},
+ * because every other code means the outcome of a tool call was not recorded
+ * and somebody has to know. Neither exit is a verdict, and neither blocks
+ * anything.
+ */
+export declare const POST_TOOL_CODES: readonly [
+/** One or more counterparts were appended. */
+"post-tool-reported", 
+/** The event names no tool-use id, so no task id can be reconstructed. */
+"post-tool-unidentified", 
+/** The tool is not one this hook gates, so no start exists to close. */
+"post-tool-not-gated", 
+/**
+ * The outcome could not be read from the event by the pinned set of readings,
+ * so NOTHING was appended. Recording a failure nobody observed trips an
+ * escalation on noise, and recording a completion nobody observed clears one
+ * on nothing.
+ */
+"post-tool-unreadable-outcome", 
+/** No log where the hook was pointed; the hook is a writer, never an initializer. */
+"post-tool-log-unreachable", 
+/** The gate refused the append; its own frozen code follows a colon. */
+"post-tool-gate-refused", 
+/** Malformed input, or a filesystem fact that stopped the report. */
+"post-tool-io"];
+export type PostToolCode = (typeof POST_TOOL_CODES)[number];
+/** The environment variable that turns the sandbox requirement on (APRV-193). */
+export declare const REQUIRE_SANDBOX_ENV = "APPROVAL_HOOK_REQUIRE_SANDBOX";
+/**
+ * Must this command have been written `approval sandbox -- …`? (APRV-193.)
+ *
+ * Returns the deny detail, or `null` to proceed. Four conditions, and every one
+ * of them is a narrowing, so the answer is `null` for everything the operator
+ * did not deliberately ask about:
+ *
+ * 1. the operator set `APPROVAL_HOOK_REQUIRE_SANDBOX=1`;
+ * 2. some segment runs code this runtime did not author
+ *    (`CODE_EXECUTING_RULES`: `npm test`, `node x.mjs`, `tsc`, `make`…);
+ * 3. that segment is not already inside the runtime's own wrapper. A
+ *    hand-written `sandbox-exec -f mine.sb` does NOT satisfy it, because a
+ *    profile a caller wrote can allow everything, and a requirement met by
+ *    writing your own permission is not a requirement;
+ * 4. no class of the command is manual. A manual command is going to a human,
+ *    and a human's grant over these exact bytes is the authority to reach the
+ *    world — the same line `approval run` draws at the token.
+ *
+ * The environment variable is read in the strict direction only: setting it can
+ * refuse commands that would otherwise run, and nothing an agent can set makes
+ * this function return `null` where it would otherwise deny (SPEC.md §11.1
+ * invariant 4).
+ */
+export declare function sandboxRequirement(segments: readonly ClassifiedSegment[] | undefined, autonomies: readonly string[], env?: NodeJS.ProcessEnv): string | null;
+export declare function commandHook(argv: string[], streams: Streams, cwd: string, readStdin?: () => string): number;