approval-md 0.0.1 → 0.2.0

package/dist/src/cli/payload.d.ts

@@ -0,0 +1,58 @@
+/**
+ * `approval payload …` — the bytes an approval binds to (SPEC.md §6.2;
+ * APRV-29, APRV-223).
+ *
+ * Two subcommands, and one argument between them: a grant is over CONTENT.
+ * `hash` prints the binding for bytes a caller already holds;
+ * `agentmail-draft` produces the bytes for material only the provider holds,
+ * by snapshotting one AgentMail draft as the payload the adapter will re-read
+ * it against. Neither reads the log, writes a file, or spends anything.
+ *
+ * ## `payload hash <file|->` — print the content binding for a payload
+ *
+ * The hash was already the whole mechanism of content binding, and until now the
+ * only way to obtain one outside the runtime was to import `core/payload.js` by
+ * hand. That is a bad instruction to publish: it puts an internal module path in
+ * a demo, it drifts the moment the build layout changes, and — worse — it invites
+ * an operator to reimplement "SHA-256 of the JSON" with `JSON.stringify`, which
+ * agrees with the runtime right up until a key order changes and then binds to
+ * bytes the gate will refuse. One verb, calling the same {@link payloadHash} the
+ * gate calls, removes the invitation.
+ *
+ * **No logic lives here either.** The hash is `core/payload.ts`; this file reads
+ * bytes at the edge, parses them, and maps the outcome onto the frozen exit
+ * table.
+ *
+ * ## Why the input must parse
+ *
+ * §6.2 defines `payload_hash` over the RFC 8785 canonical serialization of the
+ * *value*, not over the bytes a file happens to hold. Non-JSON input therefore
+ * has no defined hash at all: hashing the raw bytes would produce a plausible
+ * 64-hex string that no gate, adapter or second implementation would ever
+ * reproduce. So a parse failure is a usage error (exit 2) that says why, and
+ * nothing is printed on stdout.
+ *
+ * ## This verb is the fallback, not the main road
+ *
+ * `approval request --payload <file>` both stores the bytes in
+ * `.approval/payloads/` (APRV-28) and verifies their hash against the declared
+ * binding, so a flow that uses it never hashes anything by hand. This verb is for
+ * the step *before* that: writing the `payload_hash` into the task file in the
+ * first place, and for adapters that must present a binding for material the
+ * runtime is not holding.
+ *
+ * Reads no log, writes no file, appends nothing.
+ */
+import { type AgentmailFetch } from "../adapters/agentmail.js";
+import type { Streams } from "./main.js";
+/** The agent's own AgentMail key. Read here and in no other verb. */
+export declare const AGENTMAIL_API_KEY_ENV = "AGENTMAIL_API_KEY";
+/** The API root override, for a deployment that fronts AgentMail. */
+export declare const AGENTMAIL_API_BASE_ENV = "AGENTMAIL_API_BASE";
+/** Test seam: the environment and the transport, both `undefined` in production. */
+export interface AgentmailDraftDeps {
+    env?: NodeJS.ProcessEnv;
+    fetch?: AgentmailFetch;
+}
+/** `approval payload …` — dispatch to a subcommand, or print the help. */
+export declare function commandPayload(argv: string[], streams: Streams, cwd: string, deps?: AgentmailDraftDeps): number | Promise<number>;

package/dist/src/cli/payload.js

@@ -0,0 +1,253 @@
+/**
+ * `approval payload …` — the bytes an approval binds to (SPEC.md §6.2;
+ * APRV-29, APRV-223).
+ *
+ * Two subcommands, and one argument between them: a grant is over CONTENT.
+ * `hash` prints the binding for bytes a caller already holds;
+ * `agentmail-draft` produces the bytes for material only the provider holds,
+ * by snapshotting one AgentMail draft as the payload the adapter will re-read
+ * it against. Neither reads the log, writes a file, or spends anything.
+ *
+ * ## `payload hash <file|->` — print the content binding for a payload
+ *
+ * The hash was already the whole mechanism of content binding, and until now the
+ * only way to obtain one outside the runtime was to import `core/payload.js` by
+ * hand. That is a bad instruction to publish: it puts an internal module path in
+ * a demo, it drifts the moment the build layout changes, and — worse — it invites
+ * an operator to reimplement "SHA-256 of the JSON" with `JSON.stringify`, which
+ * agrees with the runtime right up until a key order changes and then binds to
+ * bytes the gate will refuse. One verb, calling the same {@link payloadHash} the
+ * gate calls, removes the invitation.
+ *
+ * **No logic lives here either.** The hash is `core/payload.ts`; this file reads
+ * bytes at the edge, parses them, and maps the outcome onto the frozen exit
+ * table.
+ *
+ * ## Why the input must parse
+ *
+ * §6.2 defines `payload_hash` over the RFC 8785 canonical serialization of the
+ * *value*, not over the bytes a file happens to hold. Non-JSON input therefore
+ * has no defined hash at all: hashing the raw bytes would produce a plausible
+ * 64-hex string that no gate, adapter or second implementation would ever
+ * reproduce. So a parse failure is a usage error (exit 2) that says why, and
+ * nothing is printed on stdout.
+ *
+ * ## This verb is the fallback, not the main road
+ *
+ * `approval request --payload <file>` both stores the bytes in
+ * `.approval/payloads/` (APRV-28) and verifies their hash against the declared
+ * binding, so a flow that uses it never hashes anything by hand. This verb is for
+ * the step *before* that: writing the `payload_hash` into the task file in the
+ * first place, and for adapters that must present a binding for material the
+ * runtime is not holding.
+ *
+ * Reads no log, writes no file, appends nothing.
+ */
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve as resolvePathSegments } from "node:path";
+import { draftSnapshot, readAgentmailDraft, } from "../adapters/agentmail.js";
+import { canonicalize } from "../core/jcs.js";
+import { payloadHash } from "../core/payload.js";
+import { boolFlag, parseFlags, stringFlag } from "./args.js";
+import { EXIT_INTEGRITY, EXIT_IO, EXIT_OK, EXIT_USAGE } from "./exit-codes.js";
+import { PAYLOAD_AGENTMAIL_DRAFT_HELP, PAYLOAD_HASH_HELP, PAYLOAD_HELP, } from "./help.js";
+import { usageErrorText } from "./usage.js";
+const HASH_FLAGS = {
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+function wantsJson(argv) {
+    return argv.includes("--json");
+}
+function usageError(streams, json, message, helpText) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "usage", message } })}\n`);
+    else
+        streams.err(usageErrorText(message, helpText));
+    return EXIT_USAGE;
+}
+function ioError(streams, json, message) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "io", message } })}\n`);
+    else
+        streams.err(`approval: ${message}\n`);
+    return EXIT_IO;
+}
+function detail(cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+}
+function absolute(value, cwd) {
+    return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
+}
+/** `approval payload hash <file|->`. */
+function commandPayloadHash(argv, streams, cwd) {
+    const json = wantsJson(argv);
+    const parsed = parseFlags(argv, HASH_FLAGS);
+    if (!parsed.ok)
+        return usageError(streams, json, parsed.message, PAYLOAD_HASH_HELP);
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${PAYLOAD_HASH_HELP}\n`);
+        return EXIT_OK;
+    }
+    const source = parsed.positionals[0];
+    if (source === undefined) {
+        return usageError(streams, json, "missing <file> argument (use - to read the payload from stdin)", PAYLOAD_HASH_HELP);
+    }
+    const extra = parsed.positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, PAYLOAD_HASH_HELP);
+    }
+    const where = source === "-" ? "stdin" : absolute(source, cwd);
+    let raw;
+    try {
+        raw = readFileSync(source === "-" ? 0 : where, "utf8");
+    }
+    catch (cause) {
+        return ioError(streams, json, `${where} could not be read: ${detail(cause)}`);
+    }
+    // Empty input is a usage error, not an I/O one: the read succeeded and there
+    // is simply no payload. Hashing "" would be hashing the absence of a payload.
+    if (raw.trim().length === 0) {
+        return usageError(streams, json, `${where} is empty; there is no payload to hash`, PAYLOAD_HASH_HELP);
+    }
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch (cause) {
+        return usageError(streams, json, `${where} is not valid JSON: ${detail(cause)}. payload_hash is defined over the RFC 8785 canonical serialization of the payload VALUE, so bytes that do not parse have no defined hash and none was printed`, PAYLOAD_HASH_HELP);
+    }
+    let hash;
+    try {
+        hash = payloadHash(value);
+    }
+    catch (cause) {
+        return usageError(streams, json, `${where} could not be canonicalized: ${detail(cause)}. A payload that RFC 8785 cannot serialize cannot be bound to`, PAYLOAD_HASH_HELP);
+    }
+    if (json)
+        streams.out(`${JSON.stringify({ ok: true, hash })}\n`);
+    else
+        streams.out(`${hash}\n`);
+    return EXIT_OK;
+}
+// ---------------------------------------------------------------------------
+// `payload agentmail-draft` (APRV-223)
+// ---------------------------------------------------------------------------
+/** The agent's own AgentMail key. Read here and in no other verb. */
+export const AGENTMAIL_API_KEY_ENV = "AGENTMAIL_API_KEY";
+/** The API root override, for a deployment that fronts AgentMail. */
+export const AGENTMAIL_API_BASE_ENV = "AGENTMAIL_API_BASE";
+const AGENTMAIL_DRAFT_FLAGS = {
+    "--api-base": "string",
+    "--timeout": "string",
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+/** A refusal with a code of its own: exit 1, and a shape an agent can branch on. */
+function refusal(streams, json, code, message) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code, message } })}\n`);
+    else
+        streams.err(`approval: ${code}: ${message}\n`);
+    return EXIT_INTEGRITY;
+}
+/**
+ * `approval payload agentmail-draft <inbox-id> <draft-id>`.
+ *
+ * The step BEFORE an approval exists: the agent has composed a draft, and what a
+ * human should be asked about is the words in it, not the id of a mutable
+ * server-side object. This verb reads the draft with the AGENT's key and prints
+ * the canonical payload `approval adapter agentmail` will re-read that draft
+ * against, so a draft edited between the request and the grant is refused
+ * `agentmail-draft-drifted` rather than sent.
+ *
+ * **It is the one verb in this CLI that reads `AGENTMAIL_API_KEY`**, and that is
+ * deliberate: the agent's key composes and cannot send, the vault's key sends
+ * and answers only to a grant, and nothing here touches the vault. It appends
+ * nothing, spends no token, and puts no message anywhere.
+ */
+async function commandPayloadAgentmailDraft(argv, streams, deps = {}) {
+    const json = wantsJson(argv);
+    const parsed = parseFlags(argv, AGENTMAIL_DRAFT_FLAGS);
+    if (!parsed.ok)
+        return usageError(streams, json, parsed.message, PAYLOAD_AGENTMAIL_DRAFT_HELP);
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${PAYLOAD_AGENTMAIL_DRAFT_HELP}\n`);
+        return EXIT_OK;
+    }
+    const inboxId = parsed.positionals[0];
+    const draftId = parsed.positionals[1];
+    if (inboxId === undefined || draftId === undefined) {
+        return usageError(streams, json, "missing <inbox-id> <draft-id> arguments", PAYLOAD_AGENTMAIL_DRAFT_HELP);
+    }
+    const extra = parsed.positionals[2];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, PAYLOAD_AGENTMAIL_DRAFT_HELP);
+    }
+    const timeoutFlag = stringFlag(parsed.flags, "--timeout");
+    let timeoutMs = null;
+    if (timeoutFlag !== null) {
+        const value = Number(timeoutFlag);
+        if (!Number.isInteger(value) || value <= 0) {
+            return usageError(streams, json, `--timeout expects a whole number of milliseconds, got ${JSON.stringify(timeoutFlag)}`, PAYLOAD_AGENTMAIL_DRAFT_HELP);
+        }
+        timeoutMs = value;
+    }
+    const env = deps.env ?? process.env;
+    const apiKey = (env[AGENTMAIL_API_KEY_ENV] ?? "").trim();
+    if (apiKey.length === 0) {
+        // A usage error and not a refusal: the command is unrunnable as written,
+        // and the repair is in the caller's environment. The CODE is what an agent
+        // branches on, so it is the adapter's vocabulary and not the word "usage".
+        const message = `${AGENTMAIL_API_KEY_ENV} is unset or empty: this verb reads the AGENT's AgentMail key from that variable and from nowhere else. It never reads the vault, whose key is the one that can send`;
+        if (json) {
+            streams.err(`${JSON.stringify({ error: { code: "agentmail-api-key-unset", message } })}\n`);
+            return EXIT_USAGE;
+        }
+        return usageError(streams, json, message, PAYLOAD_AGENTMAIL_DRAFT_HELP);
+    }
+    const apiBase = stringFlag(parsed.flags, "--api-base") ?? env[AGENTMAIL_API_BASE_ENV] ?? null;
+    const read = await readAgentmailDraft({
+        apiKey,
+        inboxId,
+        draftId,
+        ...(deps.fetch === undefined ? {} : { fetch: deps.fetch }),
+        ...(apiBase === null ? {} : { apiBase }),
+        ...(timeoutMs === null ? {} : { timeoutMs }),
+    });
+    if (!read.ok)
+        return refusal(streams, json, read.code, read.message);
+    const snapshot = draftSnapshot(inboxId, draftId, read.draft);
+    if (!snapshot.ok) {
+        return refusal(streams, json, "agentmail-draft-unusable", snapshot.message);
+    }
+    // The canonical serialization itself, because the hash is defined over it and
+    // a re-serialization by any other printer is a second answer about what these
+    // bytes are. `--json` prints the same bytes: there is no envelope to add,
+    // since the payload IS the machine-readable result.
+    streams.out(`${canonicalize(snapshot.payload)}\n`);
+    return EXIT_OK;
+}
+/** `approval payload …` — dispatch to a subcommand, or print the help. */
+export function commandPayload(argv, streams, cwd, deps = {}) {
+    const sub = argv[0];
+    const rest = argv.slice(1);
+    if (sub === undefined) {
+        return usageError(streams, wantsJson(argv), "missing subcommand for `approval payload`", PAYLOAD_HELP);
+    }
+    if (sub === "--help" || sub === "-h" || sub === "help") {
+        streams.out(`${PAYLOAD_HELP}\n`);
+        return EXIT_OK;
+    }
+    switch (sub) {
+        case "hash":
+            return commandPayloadHash(rest, streams, cwd);
+        case "agentmail-draft":
+            return commandPayloadAgentmailDraft(rest, streams, deps);
+        default:
+            return usageError(streams, wantsJson(argv), `unknown subcommand ${JSON.stringify(sub)} for \`approval payload\``, PAYLOAD_HELP);
+    }
+}
+//# sourceMappingURL=payload.js.map

package/dist/src/cli/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/cli/payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EACL,aAAa,EACb,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,UAAU,GAA6B;IAC3C,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,SAAS,SAAS,CAAC,IAAc;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe,EAAE,QAAgB;IACpF,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,wCAAwC;AACxC,SAAS,kBAAkB,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,iBAAiB,IAAI,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,gEAAgE,EAChE,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAC9C,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,GAAG,KAAK,wCAAwC,EAChD,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,GAAG,KAAK,uBAAuB,MAAM,CACnC,KAAK,CACN,gKAAgK,EACjK,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,GAAG,KAAK,gCAAgC,MAAM,CAC5C,KAAK,CACN,+DAA+D,EAChE,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,MAAM,qBAAqB,GAA6B;IACtD,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,oFAAoF;AACpF,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,IAAY,EAAE,OAAe;IAC7E,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QACtE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC;IACpD,OAAO,cAAc,CAAC;AACxB,CAAC;AAQD;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,4BAA4B,CACzC,IAAc,EACd,OAAgB,EAChB,IAAI,GAAuB,EAAE;IAE7B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;IAC/F,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,4BAA4B,IAAI,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,yCAAyC,EACzC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAC9C,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,yDAAyD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,EACtF,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,GAAG,qBAAqB,sKAAsK,CAAC;QAC/M,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5F,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;QACpC,MAAM;QACN,OAAO;QACP,OAAO;QACP,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QACxC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,oDAAoD;IACpD,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAC5B,IAAc,EACd,OAAgB,EAChB,GAAW,EACX,IAAI,GAAuB,EAAE;IAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,UAAU,CACf,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,EACf,2CAA2C,EAC3C,YAAY,CACb,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,KAAK,iBAAiB;YACpB,OAAO,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D;YACE,OAAO,UAAU,CACf,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,EACf,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,EACpE,YAAY,CACb,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/src/cli/policy.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `approval policy check|test <class>` (SPEC.md §10.1) — print the decision
+ * trace for a hypothetical action class.
+ *
+ * As everywhere else in the CLI, this file holds no policy logic: loading lives
+ * in `core/policy-load.ts`, matching in `core/policy-match.ts`, and the trace in
+ * `core/policy-explain.ts`. What is decided *here* is the exit code, and one
+ * choice in that mapping is load-bearing enough to state plainly.
+ *
+ * ## A broken policy is an answer, not an error (exit 0)
+ *
+ * The question this command answers is "what would policy do with this class".
+ * When `APPROVAL.md` is missing, unparseable, or schema-invalid, that question
+ * still has a complete and correct answer: **manual, everything, because the
+ * policy failed to load**. Reporting that as a non-zero exit would push every
+ * caller into treating a fail-closed answer as "no answer", and the predictable
+ * repair is a caller that retries, falls back, or skips the check — i.e. that
+ * routes around the safest possible outcome because the exit code called it a
+ * failure. So the fail-closed answer exits 0 like any other, carrying
+ * `provenance: "fail-closed"` and `manualBecause: "load-failure"` for callers
+ * that need to distinguish a deliberate manual from a broken file. Agents must
+ * branch on those fields, never on the exit code.
+ *
+ * Exit 4 is reserved for its usual meaning: a path that exists and cannot be
+ * read. That is a fact about the filesystem, not about the policy, and — as in
+ * `paths.ts` — its messages never use the word "corrupt".
+ */
+import { type Explanation } from "../core/policy-explain.js";
+import type { Streams } from "./main.js";
+import { type Style } from "./style.js";
+/**
+ * The decision trace, dressed (APRV-93 #2).
+ *
+ * The trace lines themselves are the SAME STRINGS `--json` publishes in
+ * `decisionPath`, which is a frozen shape, so nothing here rewrites one — the
+ * only edit is `relPath` on the discovery line, because "the same 70-character
+ * absolute path" was half of the original complaint and the human reader has a
+ * cwd to resolve against. The trace is `muted` and the answer is not: an
+ * operator wants the verdict first and the reasoning when they ask for it.
+ */
+export declare function renderExplainHuman(explanation: Explanation, cwd: string, st?: Style): string;
+/** `approval policy …` — dispatch to `check` / `test`, or print the help. */
+export declare function commandPolicy(argv: string[], streams: Streams, cwd: string): number;

package/dist/src/cli/policy.js

@@ -0,0 +1,229 @@
+/**
+ * `approval policy check|test <class>` (SPEC.md §10.1) — print the decision
+ * trace for a hypothetical action class.
+ *
+ * As everywhere else in the CLI, this file holds no policy logic: loading lives
+ * in `core/policy-load.ts`, matching in `core/policy-match.ts`, and the trace in
+ * `core/policy-explain.ts`. What is decided *here* is the exit code, and one
+ * choice in that mapping is load-bearing enough to state plainly.
+ *
+ * ## A broken policy is an answer, not an error (exit 0)
+ *
+ * The question this command answers is "what would policy do with this class".
+ * When `APPROVAL.md` is missing, unparseable, or schema-invalid, that question
+ * still has a complete and correct answer: **manual, everything, because the
+ * policy failed to load**. Reporting that as a non-zero exit would push every
+ * caller into treating a fail-closed answer as "no answer", and the predictable
+ * repair is a caller that retries, falls back, or skips the check — i.e. that
+ * routes around the safest possible outcome because the exit code called it a
+ * failure. So the fail-closed answer exits 0 like any other, carrying
+ * `provenance: "fail-closed"` and `manualBecause: "load-failure"` for callers
+ * that need to distinguish a deliberate manual from a broken file. Agents must
+ * branch on those fields, never on the exit code.
+ *
+ * Exit 4 is reserved for its usual meaning: a path that exists and cannot be
+ * read. That is a fact about the filesystem, not about the policy, and — as in
+ * `paths.ts` — its messages never use the word "corrupt".
+ */
+import { accessSync, constants, statSync } from "node:fs";
+import { isAbsolute, join, resolve as resolvePathSegments } from "node:path";
+import { explain, isActionClass } from "../core/policy-explain.js";
+import { loadPolicy, POLICY_FILENAMES } from "../core/policy-load.js";
+import { commandPolicyAmend } from "./amend.js";
+import { boolFlag, parseFlags, stringFlag } from "./args.js";
+import { commandPolicyAttest } from "./attest.js";
+import { EXIT_IO, EXIT_OK, EXIT_USAGE } from "./exit-codes.js";
+import { POLICY_CHECK_HELP, POLICY_HELP, POLICY_TEST_HELP } from "./help.js";
+import { relPath, style } from "./style.js";
+import { usageErrorText } from "./usage.js";
+/**
+ * `--reversible` takes an explicit `true|false` rather than being a bare
+ * boolean, because this command has three distinct states and a bare flag can
+ * only express two. "The caller did not say whether this is reversible"
+ * (`reversible: null`, no floor — the policy answers on its own terms) is not
+ * the same claim as "the caller says it is reversible", and neither is
+ * `--reversible false`, which is the only way to ask the question that matters:
+ * what does policy do with an action that cannot be undone? A bare `--reversible`
+ * would leave the SPEC §7 floor unreachable from the CLI.
+ */
+const FLAGS = {
+    "--reversible": "string",
+    "--policy": "string",
+    "--dir": "string",
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+function wantsJson(argv) {
+    return argv.includes("--json");
+}
+function usageError(streams, json, message, helpText) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "usage", message } })}\n`);
+    else
+        streams.err(usageErrorText(message, helpText));
+    return EXIT_USAGE;
+}
+function ioError(streams, json, message) {
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "io", message } })}\n`);
+    else
+        streams.err(`approval: ${message}\n`);
+    return EXIT_IO;
+}
+function absolute(value, cwd) {
+    return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
+}
+/**
+ * Readability preflight for a policy path.
+ *
+ * Absent is deliberately **not** an I/O error: a missing policy file is the
+ * fail-closed answer, delivered by `loadPolicy` as `file-missing`. A path that
+ * exists but cannot be read (permission bit, or a directory where a file
+ * belongs) is a filesystem problem, and reporting it as "manual, policy
+ * missing" would tell an operator their policy is absent when it is merely
+ * locked.
+ */
+function preflightPolicyFile(path) {
+    let stats;
+    try {
+        stats = statSync(path);
+    }
+    catch (cause) {
+        if (cause.code === "ENOENT")
+            return { ok: true };
+        return { ok: false, message: `policy ${path} could not be opened: ${detail(cause)}` };
+    }
+    if (stats.isDirectory()) {
+        return { ok: false, message: `policy ${path} is a directory, not a policy file` };
+    }
+    try {
+        accessSync(path, constants.R_OK);
+    }
+    catch (cause) {
+        return { ok: false, message: `policy ${path} is not readable: ${detail(cause)}` };
+    }
+    return { ok: true };
+}
+function detail(cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+}
+/** The final human line: the answer, plus the marker that qualifies it. */
+function finalLine(explanation) {
+    const autonomy = explanation.outcome.autonomy;
+    if (explanation.loadFailure !== null) {
+        return `-> ${autonomy} (fail-closed: ${explanation.loadFailure.code})`;
+    }
+    if (explanation.overridden !== null) {
+        const source = explanation.overridden.pattern ?? "defaults.autonomy";
+        return `-> ${autonomy} (floor applied over ${source}: ${explanation.overridden.autonomy})`;
+    }
+    return `-> ${autonomy}`;
+}
+/** Autonomy as a role. `manual` is a decision, never a failure, so it is `warn`. */
+function autonomyRole(autonomy) {
+    if (autonomy === "autonomous")
+        return "ok";
+    if (autonomy === "supervised")
+        return "warn";
+    return "fail";
+}
+/**
+ * The decision trace, dressed (APRV-93 #2).
+ *
+ * The trace lines themselves are the SAME STRINGS `--json` publishes in
+ * `decisionPath`, which is a frozen shape, so nothing here rewrites one — the
+ * only edit is `relPath` on the discovery line, because "the same 70-character
+ * absolute path" was half of the original complaint and the human reader has a
+ * cwd to resolve against. The trace is `muted` and the answer is not: an
+ * operator wants the verdict first and the reasoning when they ask for it.
+ */
+export function renderExplainHuman(explanation, cwd, st = style()) {
+    const trace = explanation.decisionPath.map((line) => st.muted(line.startsWith("policy loaded from ")
+        ? `policy loaded from ${relPath(line.slice("policy loaded from ".length), cwd)}`
+        : line));
+    const autonomy = explanation.outcome.autonomy;
+    const final = finalLine(explanation);
+    // The answer word wears the role; everything around it is left plain so the
+    // line still reads as one sentence in a pipe.
+    const painted = final.replace(autonomy, st.paint(autonomyRole(autonomy), autonomy));
+    return `${[...trace, painted].join("\n")}\n`;
+}
+/** One verb's worth of work; `check` and `test` differ only in their help text. */
+function runVerb(argv, streams, cwd, helpText) {
+    const json = wantsJson(argv);
+    const parsed = parseFlags(argv, FLAGS);
+    if (!parsed.ok)
+        return usageError(streams, json, parsed.message, helpText);
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${helpText}\n`);
+        return EXIT_OK;
+    }
+    const actionClass = parsed.positionals[0];
+    if (actionClass === undefined) {
+        return usageError(streams, json, "missing <class> argument", helpText);
+    }
+    const extra = parsed.positionals[1];
+    if (extra !== undefined) {
+        return usageError(streams, json, `unexpected argument ${JSON.stringify(extra)}`, helpText);
+    }
+    if (!isActionClass(actionClass)) {
+        return usageError(streams, json, `${JSON.stringify(actionClass)} is not a valid action class (lowercase dot-separated segments, no wildcards)`, helpText);
+    }
+    const reversibleFlag = stringFlag(parsed.flags, "--reversible");
+    if (reversibleFlag !== null && reversibleFlag !== "true" && reversibleFlag !== "false") {
+        return usageError(streams, json, `--reversible expects true or false, got ${JSON.stringify(reversibleFlag)}`, helpText);
+    }
+    const policyFlag = stringFlag(parsed.flags, "--policy");
+    const dirFlag = stringFlag(parsed.flags, "--dir");
+    const dir = dirFlag === null ? cwd : absolute(dirFlag, cwd);
+    // `--policy` wins over discovery, exactly as `loadPolicy` treats `file` vs
+    // `dir`; the preflight follows the same precedence so the path reported as
+    // unreadable is the path that would have been read.
+    const options = policyFlag === null ? { dir } : { file: absolute(policyFlag, cwd) };
+    const probes = options.file === undefined
+        ? POLICY_FILENAMES.map((filename) => join(dir, filename))
+        : [options.file];
+    for (const probe of probes) {
+        const check = preflightPolicyFile(probe);
+        if (!check.ok)
+            return ioError(streams, json, check.message);
+    }
+    const explanation = explain(loadPolicy(options), actionClass, reversibleFlag === null ? {} : { reversible: reversibleFlag === "true" });
+    if (json) {
+        streams.out(`${JSON.stringify(explanation)}\n`);
+    }
+    else {
+        streams.out(renderExplainHuman(explanation, cwd, style({ json })));
+    }
+    return EXIT_OK;
+}
+/** `approval policy …` — dispatch to `check` / `test`, or print the help. */
+export function commandPolicy(argv, streams, cwd) {
+    const sub = argv[0];
+    const rest = argv.slice(1);
+    if (sub === undefined) {
+        return usageError(streams, wantsJson(argv), "missing subcommand for `approval policy`", POLICY_HELP);
+    }
+    if (sub === "--help" || sub === "-h" || sub === "help") {
+        streams.out(`${POLICY_HELP}\n`);
+        return EXIT_OK;
+    }
+    switch (sub) {
+        case "check":
+            return runVerb(rest, streams, cwd, POLICY_CHECK_HELP);
+        case "test":
+            return runVerb(rest, streams, cwd, POLICY_TEST_HELP);
+        // The one policy verb that writes: it lives in `attest.ts` because nothing
+        // it does — hashing, identity, appending — belongs to the explain path.
+        case "attest":
+            return commandPolicyAttest(rest, streams, cwd);
+        // The amendment ceremony (APRV-30): diff, advise, confirm, attest, commit.
+        // It writes too, and for the same reason it lives in its own file.
+        case "amend":
+            return commandPolicyAmend(rest, streams, cwd);
+        default:
+            return usageError(streams, wantsJson(argv), `unknown subcommand ${JSON.stringify(sub)} for \`approval policy\``, POLICY_HELP);
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/cli/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cli/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAoB,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA0B,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAyB,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,KAAK,GAA6B;IACtC,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,SAAS,SAAS,CAAC,IAAc;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe,EAAE,QAAgB;IACpF,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,oCAAoC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS,CAAC,WAAwB;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9C,IAAI,WAAW,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,MAAM,QAAQ,kBAAkB,WAAW,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,mBAAmB,CAAC;QACrE,OAAO,MAAM,QAAQ,wBAAwB,MAAM,KAAK,WAAW,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAwB,EACxB,GAAW,EACX,EAAE,GAAU,KAAK,EAAE;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,EAAE,CAAC,KAAK,CACN,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;QACpC,CAAC,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE;QAChF,CAAC,CAAC,IAAI,CACT,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW,EAAE,QAAgB;IAC9E,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,+EAA+E,EAC7G,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,2CAA2C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,EAC3E,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE5D,2EAA2E;IAC3E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,OAAO,GACX,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;IAEtE,MAAM,MAAM,GACV,OAAO,CAAC,IAAI,KAAK,SAAS;QACxB,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CACzB,UAAU,CAAC,OAAO,CAAC,EACnB,WAAW,EACX,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,KAAK,MAAM,EAAE,CACzE,CAAC;IAEF,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,UAAU,CACf,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,EACf,0CAA0C,EAC1C,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACxD,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACvD,2EAA2E;QAC3E,wEAAwE;QACxE,KAAK,QAAQ;YACX,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,2EAA2E;QAC3E,mEAAmE;QACnE,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD;YACE,OAAO,UAAU,CACf,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,EACf,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0BAA0B,EACnE,WAAW,CACZ,CAAC;IACN,CAAC;AACH,CAAC"}