approval-md 0.0.1 → 0.2.0

package/dist/src/cli/setup-service.js

@@ -0,0 +1,308 @@
+/**
+ * `approval setup service` — the login service that runs the ambient runtime
+ * (SPEC.md §10.2, APRV-110).
+ *
+ * `approval up` is a foreground process. This verb writes the one file that
+ * makes it start at login and stay started: a launchd user agent on macOS, or a
+ * systemd user unit on Linux. It is the fifth member of the `setup` family and
+ * it obeys the family's rules — interactive by refusal, human-only, appending
+ * nothing to the log, editing no policy — with two of its own.
+ *
+ * ## It never copies a value
+ *
+ * A unit file is world-readable configuration that survives reboots and gets
+ * backed up. A bot token in one is a bot token in a backup. So the unit NAMES
+ * where the environment comes from and never carries it:
+ *
+ * - by default it runs a WRAPPER the human reads in the printed unit —
+ *   `eval "$(approval env)"` and then `exec approval up` — so the keystore
+ *   references stay in the keystore and `approval env` stays the only thing
+ *   that resolves them (SPEC.md §11.1 invariant 7: nothing loads that file
+ *   implicitly, and here it is a human's line in a file they approved);
+ * - or, with `--env-file`, it points at a file THE OPERATOR AUTHORED, which
+ *   this verb neither writes nor reads.
+ *
+ * ## It prints the unit before it writes it, and it does not arm it
+ *
+ * The whole file goes to stdout first, and nothing is written until the operator
+ * confirms. Loading it is a separate act: this verb prints the exact
+ * `launchctl` or `systemctl` line and stops there. A login service is a standing
+ * capability on someone's machine — it will start a process that holds a
+ * credential and can put prompts on a phone — and a wizard that armed one as a
+ * side effect of writing a file would be making that decision on the operator's
+ * behalf. Printing the command costs one paste and buys an explicit act.
+ *
+ * ## Logs never go into `.approval/`
+ *
+ * The service's stdout and stderr go where the operator chooses, defaulting to
+ * the platform's own log home. A path inside the approval home is REFUSED:
+ * `.approval/` holds the log, the queue projection, the payload store, the
+ * vault and the environment source map, and a service that appended its console
+ * output beside them would put unverifiable text in the one directory whose
+ * contents are supposed to mean something.
+ */
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, sep } from "node:path";
+import { envFilePathFor } from "../core/env-file.js";
+import { telegramChatEnvFor, telegramTokenEnvFor } from "../core/telegram-config.js";
+import { passphraseEnvFor } from "../core/vault.js";
+import { HUMAN_ACTOR_ENV } from "../core/attest.js";
+import { stringFlag, boolFlag } from "./args.js";
+import { EXIT_IO, EXIT_OK } from "./exit-codes.js";
+import { SETUP_SERVICE_HELP } from "./help.js";
+import { absolute, front, requireHuman, usageError, } from "./setup-common.js";
+const SERVICE_FLAGS = {
+    "--platform": "string",
+    "--label": "string",
+    "--logs": "string",
+    "--env-file": "string",
+    "--exec": "string",
+    "--out": "string",
+    "--uninstall": "boolean",
+};
+/** The conventional names. `--label` overrides both. */
+export const LAUNCHD_LABEL = "md.approval.up";
+export const SYSTEMD_UNIT = "approval-up";
+/** Which manager this machine has, or `null` when it has neither. */
+export function platformFor(platform) {
+    if (platform === "darwin")
+        return "launchd";
+    if (platform === "linux")
+        return "systemd";
+    return null;
+}
+/** Where the unit file belongs, for a platform and a label. */
+export function unitPathFor(platform, label, home) {
+    return platform === "launchd"
+        ? join(home, "Library", "LaunchAgents", `${label}.plist`)
+        : join(home, ".config", "systemd", "user", `${label}.service`);
+}
+/** Where the platform keeps a user's own logs. */
+export function defaultLogsDir(platform, home) {
+    return platform === "launchd"
+        ? join(home, "Library", "Logs", "approval")
+        : join(home, ".local", "state", "approval");
+}
+/** The command that arms the written unit, printed and never run. */
+export function armCommand(platform, label, path) {
+    return platform === "launchd"
+        ? `launchctl bootstrap gui/$(id -u) ${path}`
+        : `systemctl --user daemon-reload && systemctl --user enable --now ${label}.service`;
+}
+/**
+ * The command that disarms it, printed before the file is removed.
+ *
+ * Takes no path, unlike {@link armCommand}: launchd boots a service OUT by its
+ * label, and the plist it was booted in from may already be gone.
+ */
+export function disarmCommand(platform, label) {
+    return platform === "launchd"
+        ? `launchctl bootout gui/$(id -u)/${label}`
+        : `systemctl --user disable --now ${label}.service`;
+}
+/**
+ * XML text, escaped. A plist is XML, and a working directory with an `&` in it
+ * would otherwise produce a file launchd refuses to parse.
+ */
+function xml(text) {
+    return text
+        .replaceAll("&", "&")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;");
+}
+/** One `sh -lc` script: the wrapper the operator reads inside the unit. */
+export function wrapperScript(plan) {
+    const exec = plan.exec.join(" ");
+    const source = plan.envFile === null
+        ? `eval "$(${exec} env)"`
+        : `set -a; . '${plan.envFile}'; set +a`;
+    return `cd '${plan.workingDir}' && ${source} && exec ${exec} up --json`;
+}
+/** The whole unit file, as the operator will read it and as it will be written. */
+export function renderUnit(plan) {
+    const names = plan.variables.join(", ");
+    if (plan.platform === "launchd") {
+        return [
+            `<?xml version="1.0" encoding="UTF-8"?>`,
+            `<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">`,
+            `<!-- approval.md: the ambient runtime (approval up) at login.`,
+            `     No credential value appears in this file. The wrapper below resolves`,
+            `     ${names}`,
+            `     through \`approval env\`, which reads .approval/env and the OS keystore. -->`,
+            `<plist version="1.0">`,
+            `<dict>`,
+            `  <key>Label</key><string>${xml(plan.label)}</string>`,
+            `  <key>ProgramArguments</key>`,
+            `  <array>`,
+            `    <string>/bin/sh</string>`,
+            `    <string>-lc</string>`,
+            `    <string>${xml(wrapperScript(plan))}</string>`,
+            `  </array>`,
+            `  <key>WorkingDirectory</key><string>${xml(plan.workingDir)}</string>`,
+            `  <key>RunAtLoad</key><true/>`,
+            `  <key>KeepAlive</key><true/>`,
+            `  <key>StandardOutPath</key><string>${xml(plan.outLog)}</string>`,
+            `  <key>StandardErrorPath</key><string>${xml(plan.errLog)}</string>`,
+            `</dict>`,
+            `</plist>`,
+            ``,
+        ].join("\n");
+    }
+    return [
+        `# approval.md: the ambient runtime (approval up) at login.`,
+        `# No credential value appears in this file. The environment is resolved`,
+        `# for ${names}`,
+        plan.envFile === null
+            ? `# through \`approval env\` in the ExecStart wrapper below.`
+            : `# from the EnvironmentFile below, which you wrote and this verb never read.`,
+        `[Unit]`,
+        `Description=approval.md ambient runtime (daemon and channels)`,
+        `After=default.target`,
+        ``,
+        `[Service]`,
+        `Type=simple`,
+        `WorkingDirectory=${plan.workingDir}`,
+        ...(plan.envFile === null ? [] : [`EnvironmentFile=${plan.envFile}`]),
+        `ExecStart=/bin/sh -lc '${wrapperScript(plan).replaceAll("'", `'\\''`)}'`,
+        `Restart=always`,
+        `RestartSec=5`,
+        `StandardOutput=append:${plan.outLog}`,
+        `StandardError=append:${plan.errLog}`,
+        ``,
+        `[Install]`,
+        `WantedBy=default.target`,
+        ``,
+    ].join("\n");
+}
+const SERVICE_HINT = (where) => `  # write the unit yourself; \`approval setup service\` only generates it:\n  approval setup service --platform launchd|systemd   # from a terminal\n\n  # whatever you write, it must name variables and never values:\n  #   ${where.tokenEnv}, ${where.chatEnv}, ${where.passphraseEnv}, ${HUMAN_ACTOR_ENV}\n  # resolved by \`eval "$(approval env)"\` in the unit's own wrapper.`;
+/**
+ * The approval invocation this process was started as.
+ *
+ * `node dist/src/cli/main.js` and the installed `approval` bin are both
+ * legitimate, and a unit that named the wrong one would fail at login rather
+ * than here. `--exec` overrides for the case neither guess fits.
+ */
+export function execWords(override, argv) {
+    if (override !== null)
+        return [override];
+    const entry = argv[1];
+    if (entry === undefined)
+        return ["approval"];
+    return entry.endsWith(".js") || entry.endsWith(".mjs") ? [argv[0] ?? "node", entry] : [entry];
+}
+/** A path a single-quoted shell word cannot carry safely. */
+function unquotable(path) {
+    return path.includes("'") || path.includes("\n");
+}
+/** `approval setup service` — write the login unit. HUMAN-ONLY, INTERACTIVE. */
+export function commandSetupService(argv, streams, cwd, deps = {}) {
+    const outcome = front("service", argv, streams, cwd, deps, SETUP_SERVICE_HELP, SERVICE_HINT, SERVICE_FLAGS);
+    if (outcome.kind === "handled")
+        return outcome.code;
+    const context = outcome;
+    const human = requireHuman(context.flags, streams, SETUP_SERVICE_HELP, "service");
+    if (!human.ok)
+        return human.code;
+    const extra = context.positionals[0];
+    if (extra !== undefined) {
+        return usageError(streams, false, `unexpected argument ${JSON.stringify(extra)}`, SETUP_SERVICE_HELP);
+    }
+    const platformFlag = stringFlag(context.flags, "--platform");
+    if (platformFlag !== null && platformFlag !== "launchd" && platformFlag !== "systemd") {
+        return usageError(streams, false, `--platform expects launchd or systemd, got ${JSON.stringify(platformFlag)}`, SETUP_SERVICE_HELP);
+    }
+    const platform = platformFlag ?? platformFor(process.platform);
+    if (platform === null) {
+        return usageError(streams, false, `no login service manager is known for ${process.platform}: this verb writes a launchd plist (macOS) or a systemd user unit (Linux). Run \`approval up\` under whatever supervisor this machine has, or pass --platform to generate a unit for another machine`, SETUP_SERVICE_HELP);
+    }
+    const home = homedir();
+    const label = stringFlag(context.flags, "--label") ??
+        (platform === "launchd" ? LAUNCHD_LABEL : SYSTEMD_UNIT);
+    const outFlag = stringFlag(context.flags, "--out");
+    const unitPath = outFlag === null ? unitPathFor(platform, label, home) : absolute(outFlag, cwd);
+    // -------------------------------------------------------------------------
+    // Uninstall
+    // -------------------------------------------------------------------------
+    if (boolFlag(context.flags, "--uninstall")) {
+        if (!existsSync(unitPath)) {
+            streams.out(`nothing to remove: ${unitPath} does not exist\n`);
+            return EXIT_OK;
+        }
+        streams.out(`approval setup service --uninstall — removes ${unitPath}.\n\nSTOP IT FIRST, or the running process outlives the file that describes it:\n\n  ${disarmCommand(platform, label)}\n\n`);
+        if (!context.prompter.confirm(`remove ${unitPath}?`)) {
+            streams.out("aborted: nothing was removed\n");
+            return EXIT_OK;
+        }
+        try {
+            unlinkSync(unitPath);
+        }
+        catch (cause) {
+            streams.err(`approval: ${unitPath} could not be removed: ${cause instanceof Error ? cause.message : String(cause)}\n`);
+            return EXIT_IO;
+        }
+        streams.out(`removed ${unitPath}\n`);
+        streams.out(`\nThe log, the policy and .approval/ are untouched: this verb only ever wrote\nthe unit file. Nothing was appended anywhere.\n`);
+        return EXIT_OK;
+    }
+    // -------------------------------------------------------------------------
+    // The plan
+    // -------------------------------------------------------------------------
+    const workingDir = absolute(stringFlag(context.flags, "--dir") ?? cwd, cwd);
+    const approvalHome = dirname(envFilePathFor(context.logPath));
+    const logsFlag = stringFlag(context.flags, "--logs");
+    const logsDir = logsFlag === null ? defaultLogsDir(platform, home) : absolute(logsFlag, cwd);
+    if (logsDir === approvalHome || logsDir.startsWith(`${approvalHome}${sep}`)) {
+        return usageError(streams, false, `--logs ${logsDir} is inside ${approvalHome}, and a service's console output never goes there: that directory holds the log, the queue projection, the payload store and the environment source map, and unverifiable text beside them is exactly what makes a directory stop meaning something`, SETUP_SERVICE_HELP);
+    }
+    const envFileFlag = stringFlag(context.flags, "--env-file");
+    const envFile = envFileFlag === null ? null : absolute(envFileFlag, cwd);
+    const exec = execWords(stringFlag(context.flags, "--exec"), process.argv);
+    for (const path of [workingDir, logsDir, ...(envFile === null ? [] : [envFile]), ...exec]) {
+        if (unquotable(path)) {
+            return usageError(streams, false, `${JSON.stringify(path)} carries a quote or a newline, which cannot be placed in the unit's shell wrapper safely. Move it, or write the unit by hand`, SETUP_SERVICE_HELP);
+        }
+    }
+    const plan = {
+        platform,
+        label,
+        path: unitPath,
+        workingDir,
+        exec,
+        envFile,
+        outLog: join(logsDir, "approval-up.out.log"),
+        errLog: join(logsDir, "approval-up.err.log"),
+        variables: [
+            HUMAN_ACTOR_ENV,
+            telegramTokenEnvFor(context.load),
+            telegramChatEnvFor(context.load),
+            passphraseEnvFor(context.load),
+        ],
+    };
+    const unit = renderUnit(plan);
+    streams.out(`approval setup service — writes the ${platform === "launchd" ? "launchd user agent" : "systemd user unit"} that runs\n\`approval up\` in ${workingDir} at login.\n\nNO CREDENTIAL VALUE APPEARS IN IT. ${envFile === null
+        ? "The wrapper below evaluates `approval env`, which\nresolves the keystore references in .approval/env at start time."
+        : `The unit reads ${envFile}, which you wrote\nand this verb has neither read nor written.`}\nIts console output goes to ${logsDir}, never into ${approvalHome}.\n\nRead it before it exists:\n\n`);
+    streams.out(`${unit}\n`);
+    if (existsSync(unitPath)) {
+        streams.out(`WARNING: ${unitPath} already exists and would be REPLACED. If a service is\nloaded from it, stop it first:\n\n  ${disarmCommand(platform, label)}\n\n`);
+    }
+    if (!context.prompter.confirm(`write it to ${unitPath}?`)) {
+        streams.out("aborted: nothing was written\n");
+        return EXIT_OK;
+    }
+    try {
+        mkdirSync(dirname(unitPath), { recursive: true });
+        mkdirSync(logsDir, { recursive: true });
+        writeFileSync(unitPath, unit, { encoding: "utf8", mode: 0o644 });
+    }
+    catch (cause) {
+        streams.err(`approval: ${unitPath} could not be written: ${cause instanceof Error ? cause.message : String(cause)}\n`);
+        return EXIT_IO;
+    }
+    streams.out(`wrote ${unitPath}\n  logs -> ${plan.outLog}\n  logs -> ${plan.errLog}\n`);
+    streams.out(`\nIT IS NOT RUNNING YET, and this verb will not start it: a service that starts\nat login is a standing capability on this machine, so arming it is your act and\nnot a side effect of writing a file. One command:\n\n  ${armCommand(platform, label, unitPath)}\n\nUndo the whole thing with \`approval setup service --uninstall\`, which prints\nthe stop command and removes the file.\n`);
+    return EXIT_OK;
+}
+//# sourceMappingURL=setup-service.js.map

package/dist/src/cli/setup-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-service.js","sourceRoot":"","sources":["../../../src/cli/setup-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAiB,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EACL,QAAQ,EACR,KAAK,EACL,YAAY,EACZ,UAAU,GAGX,MAAM,mBAAmB,CAAC;AAK3B,MAAM,aAAa,GAA6B;IAC9C,YAAY,EAAE,QAAQ;IACtB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,QAAQ;IAClB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,QAAQ;IACjB,aAAa,EAAE,SAAS;CACzB,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAC9C,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC;AAE1C,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,QAAyB;IACnD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,QAAyB,EAAE,KAAa,EAAE,IAAY;IAChF,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,IAAY;IACpE,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU,CAAC,QAAyB,EAAE,KAAa,EAAE,IAAY;IAC/E,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,oCAAoC,IAAI,EAAE;QAC5C,CAAC,CAAC,mEAAmE,KAAK,UAAU,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB,EAAE,KAAa;IACpE,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,kCAAkC,KAAK,EAAE;QAC3C,CAAC,CAAC,kCAAkC,KAAK,UAAU,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAI;SACR,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAoBD,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GACV,IAAI,CAAC,OAAO,KAAK,IAAI;QACnB,CAAC,CAAC,WAAW,IAAI,QAAQ;QACzB,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,WAAW,CAAC;IAC5C,OAAO,OAAO,IAAI,CAAC,UAAU,QAAQ,MAAM,YAAY,IAAI,YAAY,CAAC;AAC1E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,wCAAwC;YACxC,wGAAwG;YACxG,+DAA+D;YAC/D,2EAA2E;YAC3E,QAAQ,KAAK,EAAE;YACf,mFAAmF;YACnF,uBAAuB;YACvB,QAAQ;YACR,6BAA6B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;YACvD,+BAA+B;YAC/B,WAAW;YACX,8BAA8B;YAC9B,0BAA0B;YAC1B,eAAe,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW;YAClD,YAAY;YACZ,wCAAwC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW;YACvE,+BAA+B;YAC/B,+BAA+B;YAC/B,uCAAuC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YAClE,yCAAyC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACpE,SAAS;YACT,UAAU;YACV,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO;QACL,4DAA4D;QAC5D,yEAAyE;QACzE,SAAS,KAAK,EAAE;QAChB,IAAI,CAAC,OAAO,KAAK,IAAI;YACnB,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,6EAA6E;QACjF,QAAQ;QACR,+DAA+D;QAC/D,sBAAsB;QACtB,EAAE;QACF,WAAW;QACX,aAAa;QACb,oBAAoB,IAAI,CAAC,UAAU,EAAE;QACrC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,0BAA0B,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG;QACzE,gBAAgB;QAChB,cAAc;QACd,yBAAyB,IAAI,CAAC,MAAM,EAAE;QACtC,wBAAwB,IAAI,CAAC,MAAM,EAAE;QACrC,EAAE;QACF,WAAW;QACX,yBAAyB;QACzB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,KAAkB,EAAU,EAAE,CAClD,kOAAkO,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,aAAa,KAAK,eAAe,yEAAyE,CAAC;AAE1X;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,QAAuB,EAAE,IAAuB;IACxE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,IAAc,EACd,OAAgB,EAChB,GAAW,EACX,IAAI,GAAc,EAAE;IAEpB,MAAM,OAAO,GAAG,KAAK,CACnB,SAAS,EACT,IAAI,EACJ,OAAO,EACP,GAAG,EACH,IAAI,EACJ,kBAAkB,EAClB,YAAY,EACZ,aAAa,CACd,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC;IAExB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CACf,OAAO,EACP,KAAK,EACL,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAC9C,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtF,OAAO,UAAU,CACf,OAAO,EACP,KAAK,EACL,8CAA8C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAC5E,kBAAkB,CACnB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAI,YAAuC,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3F,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,UAAU,CACf,OAAO,EACP,KAAK,EACL,yCAAyC,OAAO,CAAC,QAAQ,sMAAsM,EAC/P,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,KAAK,GACT,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;QACpC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,QAAQ,GACZ,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEjF,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,mBAAmB,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,GAAG,CACT,gDAAgD,QAAQ,wFAAwF,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CACrL,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,aAAa,QAAQ,0BACnB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,IAAI,CACL,CAAC;YACF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,gIAAgI,CACjI,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAE5E,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7F,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5E,OAAO,UAAU,CACf,OAAO,EACP,KAAK,EACL,UAAU,OAAO,cAAc,YAAY,qPAAqP,EAChS,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1E,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAC1F,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,UAAU,CACf,OAAO,EACP,KAAK,EACL,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8HAA8H,EACrJ,kBAAkB,CACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,QAAQ;QACR,KAAK;QACL,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC;QAC5C,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC;QAC5C,SAAS,EAAE;YACT,eAAe;YACf,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC;SAC/B;KACF,CAAC;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,CAAC,GAAG,CACT,uCACE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAClD,kCAAkC,UAAU,oDAC1C,OAAO,KAAK,IAAI;QACd,CAAC,CAAC,qHAAqH;QACvH,CAAC,CAAC,kBAAkB,OAAO,gEAC/B,gCAAgC,OAAO,gBAAgB,YAAY,oCAAoC,CACxG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAEzB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,YAAY,QAAQ,+FAA+F,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CACxJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CACT,aAAa,QAAQ,0BACnB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,IAAI,CACL,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,eAAe,IAAI,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CACT,4NAA4N,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,8HAA8H,CAChY,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/cli/setup.d.ts

@@ -0,0 +1,202 @@
+/**
+ * `approval setup` — the interactive configuration family (SPEC.md §5.2, §10.1).
+ *
+ * APRV-73 gave `.approval/env` a format and `approval env` a reader. This verb
+ * is the writer, and it is the only one: it establishes the things an operator
+ * must have before any gate operation works — a declared human identity, a
+ * vault passphrase, a sampling secret, a live Telegram bot and chat, and an
+ * adapter's credentials — by putting each VALUE where that kind of value
+ * belongs and each SOURCE in `.approval/env`.
+ *
+ * ## Who lives where
+ *
+ * This file holds the three subcommands whose subject is a value this runtime
+ * MINTS or a name it records, plus the dispatch:
+ *
+ * ```
+ * setup identity                 # APPROVAL_HUMAN, in this file
+ * setup vault                    # the vault passphrase, in this file
+ * setup sampling                 # the audit sampling secret, in this file
+ * setup checkpoint               # cli/setup-checkpoint.ts (the vault + a print)
+ * setup channel <name>           # cli/setup-channel.ts  (keystore + .approval/env)
+ * setup adapter <name>           # cli/setup-adapter.ts  (the vault)
+ * setup service                  # cli/setup-service.ts  (a launchd/systemd unit)
+ * ```
+ *
+ * The last two are **two nouns and not one list**, and the split is SPEC.md
+ * §4's: a CHANNEL surfaces requests and collects decisions and holds no state,
+ * so its setup fills the keystore and `.approval/env`; an ADAPTER executes side
+ * effects and holds credentials, so its setup fills the vault.
+ * An older build spelled the Telegram one without the `channel` noun, and that
+ * form is gone (APRV-79): the dispatch answers it with the new one and exits 2
+ * rather than aliasing it, because an alias would leave two spellings of a
+ * distinction the SPEC draws on purpose.
+ *
+ * Everything the three files share — the dependency bag, the keystore seam, the
+ * front matter, the human-only gate, the service names, the plaintext-literal
+ * offer — is `cli/setup-common.ts`, which imports from none of them. The
+ * conversation `setup channel|adapter` both run is `cli/setup-flow.ts`.
+ *
+ * ## The order these run in
+ *
+ * Nothing enforced it and nothing said it, which APRV-76 noticed the hard way.
+ * It is:
+ *
+ * ```
+ * approval init                       # the directory and the .gitignore
+ * (write APPROVAL.md)                 # the policy NAMES every variable below
+ * approval setup identity             # APPROVAL_HUMAN
+ * approval setup vault                # the passphrase, into the keystore
+ * eval "$(approval env)"              # the ONLY thing that puts them in a shell
+ * approval setup adapter <name>       # the adapter's credentials, into the vault
+ * ```
+ *
+ * The policy comes before every `setup`, because each of them reads variable
+ * NAMES out of it. The `eval` comes before `setup adapter`, because that
+ * subcommand needs the passphrase's VALUE in the environment and will not read
+ * `.approval/env` to get it (§11.1 invariant 7). `setup sampling` and
+ * `setup channel telegram` slot in anywhere after the policy.
+ *
+ * ## What this verb is not allowed to do
+ *
+ * **It never appends to the log, never attests, and never edits `APPROVAL.md`.**
+ * Configuration is not an authorized action, and the log is the record of
+ * authorized actions; a "telegram configured" event would be a line in the one
+ * file this project promises never to rewrite, saying something the log has no
+ * business knowing. `tests/cli-setup.test.ts` byte-compares `events.jsonl`
+ * across a complete run of every subcommand to keep that true by assertion.
+ * When a policy line is needed (the sampling secret's name), this verb PRINTS
+ * the `approval policy amend` invocation and stops: an amendment is a human
+ * ceremony with an attestation at the end of it, and a setup wizard that
+ * silently edited an attested policy would be forging the sign-off.
+ *
+ * It writes exactly three things: lines in `.approval/env`, through a writer
+ * that preserves every other line and comment (`core/env-file.ts`), items in
+ * the OS keystore, and entries in the vault (`setup adapter` only).
+ *
+ * ## Interactive or nothing
+ *
+ * Every subcommand refuses when stdin is not a terminal, or when `--json` was
+ * given, and exits 2 printing THE EXACT NON-INTERACTIVE ALTERNATIVE — the
+ * `security add-generic-password` line to run, or the `.approval/env` line to
+ * add, or the `export` to put in a shell profile. This is not a wizard being
+ * precious about its terminal. A `setup` that could be driven from a pipe would
+ * be a way for a CI job or an agent to write `APPROVAL_HUMAN` and a keystore
+ * item, which is precisely the boundary §11 draws: identity is config-declared,
+ * so establishing it must be an act of the human at the machine. The refusal
+ * text is the documented scripted path, so nobody has to reverse-engineer one.
+ *
+ * `setup identity` is EXEMPT from the human-only `--as` gate that every other
+ * subcommand carries, and the exemption is not a hole: identity is what that
+ * gate reads. A verb that demanded `APPROVAL_HUMAN` before it would let you set
+ * `APPROVAL_HUMAN` could only ever be run by someone who did not need it. The
+ * control on this path is the terminal itself.
+ *
+ * ## Answers, and answering again (APRV-90)
+ *
+ * Every typed question in this family runs through `prompt.ts`'s `askUntil`: a
+ * wrong answer is one line saying what was wrong and the same question again,
+ * never an exit code with a help page under it. `setup identity` also
+ * NORMALISES what it is given — `carter` is recorded as `human:carter`, and
+ * `human:carter` is taken as it stands ({@link identityFromAnswer}). The prompt
+ * still prints the `human:` prefix, because the prefix is what distinguishes
+ * the actor kinds the human-only verbs refuse, but nobody has to retype a
+ * prefix the question already showed them. `agent:` and `system:` are refused
+ * with the sentence that names why, as a reason to answer again.
+ *
+ * ## Where a secret goes, and how it gets there
+ *
+ * Three service names, one per secret, documented so an operator can find them
+ * with `security find-generic-password` or `secret-tool lookup` by hand:
+ * `approval-tg-token`, `approval-vault-passphrase`, `approval-sampling-secret`.
+ *
+ * - **macOS** (`darwin` and `security` on PATH) → `keychain:<service>`;
+ * - **Linux with `secret-tool`** → `secret-service:<service>` (the same string
+ *   is the label, so the two platforms name one secret one way);
+ * - **neither** → the operator is OFFERED a plaintext literal in
+ *   `.approval/env`, and must type `yes` in full to take it, having been shown
+ *   the same warning `approval env --check` will print at them forever after.
+ *   §5.2 permits literals for a stated reason, and refusing here would only
+ *   move the value into a shell profile where nothing can see it to report it.
+ *
+ * **A value the operator already holds is never handled by this process.** The
+ * Telegram token on macOS is collected by `security`'s OWN no-echo prompt: we
+ * spawn `security add-generic-password … -w` WITH NO VALUE and with inherited
+ * stdio, Apple's prompt reads it from the terminal, and the token reaches this
+ * runtime only afterwards, on the stdout of a `find-generic-password -w` read
+ * that puts nothing in an argv either. Off macOS it comes through
+ * `Prompter.readSecret`, which at least keeps it off the screen.
+ *
+ * **A value we generate ourselves is a different question**, and it is the one
+ * place this family makes a trade rather than following a rule. The vault
+ * passphrase and the sampling secret are `randomBytes(32)`, minted in this
+ * process, so they are already in this process and there is nobody to prompt.
+ * They reach the keystore by STDIN first: `security add-generic-password -w`
+ * with the value written to its stdin twice (the prompt asks for confirmation),
+ * and `secret-tool store`, which documents stdin as its input. Only if the
+ * stdin form FAILS does the fallback put the value in an argv (`-w <value>`),
+ * and then the outcome says so out loud. That residual exposure is a value
+ * minted one millisecond earlier, never used, visible in `ps` to the same user
+ * who is running the command and to root — which is the boundary §11 already
+ * declares undefended. It is accepted for generated values and for nothing
+ * else: no path in this family ever puts an operator's own token in an argv.
+ *
+ * **And there is one standing exception to the rule above, which
+ * `setup adapter <name>` takes.** A credential bound for the VAULT must pass
+ * through this process, because the vault is not a helper with a prompt: it is
+ * a file this runtime encrypts, so `setCredential` needs the bytes. There is
+ * nothing to delegate the typing to and no third party to hold the value. The
+ * secret is read with `Prompter.readSecret` (no echo), handed straight to the
+ * cipher, and never printed, logged, or placed in an argv — which is exactly
+ * what `approval vault set` already does when a human pastes a credential onto
+ * its stdin. The rule is "never handle a value someone else can hold for you";
+ * for the vault nobody can, so it is stated here rather than left to look like
+ * an oversight.
+ *
+ * ## Seams
+ *
+ * The prompter, the keystore, and `fetch` are injected. The alternative is a
+ * test suite that needs a terminal, writes to the developer's real Keychain,
+ * and talks to the real Bot API — and the third of those would put a real bot
+ * token in a test run. `tests/cli-setup.test.ts` drives all three through fakes
+ * and the mock Bot API on loopback, and the spawned-CLI cases never get past
+ * the terminal check, so nothing under `npm test` can reach a keystore at all.
+ */
+import { type SetupDeps } from "./setup-common.js";
+import type { Streams } from "./main.js";
+/**
+ * One typed answer to `human identity (human:<id>):`, as an identity (APRV-90).
+ *
+ * **A bare id is accepted and normalised.** The prompt prints the `human:`
+ * prefix because the prefix is load-bearing — actors are `human:`, `agent:` or
+ * `system:`, and the human-only verbs refuse the other two — so an operator who
+ * has never read SPEC.md §11 learns the shape from the question itself. Making
+ * them retype a prefix the prompt just printed adds a failure path and teaches
+ * nothing further, so `carter` becomes `human:carter` and `human:carter` is
+ * taken as it stands.
+ *
+ * An answer with a colon in it is taken as a FULL actor and validated as one,
+ * which is what makes `agent:claude` a refusal rather than `human:agent:claude`.
+ * That refusal is a reason handed back to {@link askUntil}, so the operator is
+ * asked again rather than dropped out of the verb.
+ */
+export declare function identityFromAnswer(answer: string): {
+    ok: true;
+    value: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * `approval setup identity` — declare who the human is.
+ *
+ * EXEMPT from the human-only gate, and the module doc says why: this is the
+ * verb that creates the thing the gate reads.
+ */
+export declare function commandSetupIdentity(argv: string[], streams: Streams, cwd: string, deps?: SetupDeps): number;
+/** `approval setup vault` — mint and store the vault passphrase. HUMAN-ONLY. */
+export declare function commandSetupVault(argv: string[], streams: Streams, cwd: string, deps?: SetupDeps): number;
+/** `approval setup sampling` — mint and store the audit sampling secret. HUMAN-ONLY. */
+export declare function commandSetupSampling(argv: string[], streams: Streams, cwd: string, deps?: SetupDeps): number;
+/** `approval setup <identity|vault|sampling|channel <name>|adapter <name>>`. */
+export declare function commandSetup(argv: string[], streams: Streams, cwd: string, deps?: SetupDeps): number | Promise<number>;