approval-md 0.1.0 → 0.2.0

package/dist/src/cli/prompt.d.ts

@@ -0,0 +1,209 @@
+/**
+ * Terminal prompts — the one place this CLI reads from a human (APRV-74).
+ *
+ * Two of these three functions existed already, privately, inside
+ * `cli/amend.ts`: a synchronous line reader and the `[y/N]` question built on
+ * it. `approval setup` needs both, plus a third that `amend` never needed — a
+ * reader that does not echo — and three copies of a raw-mode byte loop is two
+ * too many. So they live here, `amend` imports the line reader, and the
+ * no-echo one is written once, in the open, where it can be read.
+ *
+ * ## Synchronous, on purpose
+ *
+ * `readSync(0, …)` rather than `readline/promises`. Every verb in this CLI
+ * returns an exit code from a synchronous function, and the two that do not
+ * (`channel`, `daemon`) are asynchronous because they hold a socket open, not
+ * because they ask a question. A prompt that forced `setup identity` to become
+ * a promise would be an async CLI shape adopted for the sake of one line of
+ * input.
+ *
+ * ## The no-echo reader, and what it is worth
+ *
+ * {@link readSecret} puts the terminal in raw mode and reads one byte at a
+ * time, printing nothing — not even asterisks, which leak a length. It restores
+ * the terminal in a `finally`, including on the abort paths, because a shell
+ * left in raw mode after a Ctrl-C is a broken session and the operator's next
+ * act would be to close the window.
+ *
+ * What it defends is a secret in a scrollback buffer, a `script` capture, or a
+ * screen share. What it does not defend is a compromised terminal, a keylogger,
+ * or the process itself: the value is a `string` in this process's heap the
+ * instant it is complete, exactly as `approval vault set`'s stdin value is. The
+ * design point that matters more is upstream of this file — wherever a secret
+ * can be collected by a helper's OWN prompt, `setup` delegates to that helper
+ * and this function is never called (see `cli/setup.ts`, "the token never
+ * enters our process").
+ *
+ * **Ctrl-C is a distinct result, not an exception and not an empty string.** An
+ * aborted prompt must be distinguishable from an empty answer by the caller, so
+ * that "the human changed their mind" stores nothing and exits, while "the
+ * human pressed Enter" is an ordinary validation failure. Collapsing the two is
+ * how a half-configured keystore entry gets written.
+ *
+ * Nothing here throws, and nothing here ever writes the value it read to any
+ * stream.
+ *
+ * ## A bad answer is a question asked again, not a mangled command line (APRV-90)
+ *
+ * {@link askUntil} is the loop every typed question in `setup` runs through. It
+ * exists because the first shipped build treated a wrong answer to a PROMPT the
+ * way it treats a wrong flag on an argv: exit 2 with the whole help page under
+ * it. Observed on 2026-08-18, `setup identity` printed `human identity
+ * (human:<id>):`, the operator typed `carter`, and forty lines of help came
+ * back. A prompt has already told the human what it wants; when the answer does
+ * not fit, the useful reply is one line saying which part did not fit, followed
+ * by the same question.
+ *
+ * Three ends, and they are different on purpose:
+ *
+ * - **accepted** — the validator's parsed value, which may be a NORMALISED form
+ *   of what was typed (`carter` → `human:carter`) rather than the bytes;
+ * - **aborted** — `readLine` returned `null`, which is Ctrl-D (and, for the
+ *   scripted prompter, the modelled Ctrl-C). Nothing is stored, and the caller
+ *   exits with a one-line reason and NO help page, because there was no command
+ *   line for a help page to be about;
+ * - **exhausted** — {@link DEFAULT_MAX_ATTEMPTS} answers in a row failed
+ *   validation. Bounded rather than infinite so that a prompt driven by
+ *   something that is not a person (a stuck script, a terminal replaying bytes)
+ *   terminates instead of looping forever.
+ *
+ * ## EAGAIN is "not yet", never "end of input" (APRV-84)
+ *
+ * Every caller checks `process.stdin.isTTY` before it prompts, and merely
+ * touching `process.stdin` on a terminal has libuv put fd 0 into non-blocking
+ * mode. From then on a `readSync(0, …)` issued before the human has typed
+ * fails with EAGAIN instead of waiting. The first shipped line reader treated
+ * every error as EOF, so `approval setup identity` on a macOS terminal printed
+ * "no identity was entered" the instant the prompt appeared. Both readers now
+ * go through {@link readByteBlocking}, which sleeps a few milliseconds on
+ * EAGAIN and tries again, and treats nothing else as "wait".
+ */
+import type { Streams } from "./main.js";
+/** The result of a no-echo read. `aborted` is Ctrl-C or Ctrl-D, distinctly. */
+export type SecretRead = {
+    ok: true;
+    value: string;
+} | {
+    ok: false;
+    reason: "aborted";
+};
+/**
+ * One line from stdin, synchronously. `null` at EOF.
+ *
+ * Hoisted verbatim from `cli/amend.ts` (APRV-74), which is why it reads bytes
+ * rather than using a stream: it is called from inside a synchronous command
+ * function, after output has already been written, and it must not consume more
+ * of stdin than the line it was asked for.
+ */
+export declare function readLineFromStdin(read?: ByteReader): string | null;
+/** One byte of stdin into `buffer[0]`; returns the count read (0 at EOF). */
+export type ByteReader = (buffer: Buffer) => number;
+/**
+ * One byte from fd 0, blocking, whatever mode libuv left the descriptor in.
+ *
+ * EAGAIN means the terminal has nothing yet: nap and retry (`Atomics.wait` is
+ * the one synchronous sleep JavaScript has, and it keeps the wait from being a
+ * hot loop). Every other error propagates, and 0 bytes is EOF, exactly as with
+ * `readSync` itself.
+ */
+export declare function readByteBlocking(buffer: Buffer): number;
+/**
+ * Read a secret with no echo. See the module doc for what this is worth.
+ *
+ * The byte loop, in full: `\r` or `\n` ends the read; DEL (0x7f) and BS (0x08)
+ * remove the last character and echo nothing (no cursor movement — there is
+ * nothing on screen to erase); Ctrl-C aborts always; Ctrl-D aborts only on an
+ * empty buffer, which is EOF's meaning everywhere else in a shell and which
+ * leaves the "Ctrl-D at the end of a typed line" case as an ordinary end. Every
+ * other byte accumulates.
+ *
+ * Raw mode is restored in a `finally`, and a newline is printed after, so the
+ * caller's next output starts on its own line whichever way the read ended.
+ */
+export declare function readSecret(streams: Streams, prompt: string, read?: ByteReader): SecretRead;
+/**
+ * The three ways `setup` talks to a human, as an interface.
+ *
+ * A seam, for the reason every other seam in this codebase exists: the
+ * alternative is a test suite that needs a terminal. Tests pass a scripted
+ * prompter and assert on what was asked as well as on what was done, which is
+ * how "Ctrl-C mid-secret stores nothing" becomes a test rather than a claim.
+ */
+export interface Prompter {
+    /** A question with a typed answer. `null` at EOF. */
+    readLine(prompt: string): string | null;
+    /** A question whose answer is not echoed. */
+    readSecret(prompt: string): SecretRead;
+    /** `[y/N]` (or `[Y/n]`). Anything unrecognised takes the default. */
+    confirm(prompt: string, defaultNo?: boolean): boolean;
+}
+/**
+ * The real prompter, or `null` when stdin is not a terminal.
+ *
+ * Refusing to construct is deliberate: a prompter that fell back to reading a
+ * pipe would let a CI job answer `setup`'s confirmations by feeding it a
+ * heredoc, and "a human was asked" is the entire content of these questions.
+ * Callers check `process.stdin.isTTY` themselves and print the non-interactive
+ * alternative; this is the second lock on the same door.
+ */
+export declare function createPrompter(streams: Streams): Prompter | null;
+/**
+ * How many failed answers to one question before the loop gives up. See the
+ * module doc: bounded so that a prompt nobody is answering terminates.
+ */
+export declare const DEFAULT_MAX_ATTEMPTS = 5;
+/**
+ * A validator's verdict on one typed answer.
+ *
+ * `value` is the PARSED form, not the bytes: a validator is where `carter`
+ * becomes `human:carter` and `"2"` becomes the second choice, so the caller
+ * never re-derives from the string what the validator already decided.
+ * `reason` is the single line the operator is shown before the question comes
+ * back, so it names what was wrong and nothing else.
+ */
+export type AnswerVerdict<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: string;
+};
+/** How {@link askUntil} ended. `attempts` is how many answers were read. */
+export type AskOutcome<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: "aborted" | "exhausted";
+    attempts: number;
+};
+/**
+ * Ask until the answer validates, the human gives up, or the attempts run out.
+ *
+ * The reason line goes to STDOUT, indented, because it is part of the
+ * conversation and not a diagnostic about a command: it is read by the person
+ * at the terminal, in between their answer and the next prompt. A caller turns
+ * an `aborted` or `exhausted` outcome into its own one-line refusal; nothing
+ * here prints a help page (see the module doc).
+ */
+export declare function askUntil<T>(streams: Streams, prompter: Prompter, question: string, validate: (answer: string) => AnswerVerdict<T>, options?: {
+    maxAttempts?: number;
+}): AskOutcome<T>;
+/**
+ * A yes/no question that asks AGAIN when the answer is neither (APRV-99).
+ *
+ * {@link Prompter.confirm} takes the default for anything it does not
+ * recognise, which is the right reading for a question whose default is the
+ * safe answer: a stray keystroke declines. It is the wrong reading for a
+ * question whose default is YES and whose subject is a check the operator
+ * asked for, where a typo would silently skip the proof and report it as a
+ * decision. APRV-90's answer to that class of question is that every question
+ * loops, so this is {@link askUntil} over a yes/no validator: the same bounded
+ * loop, the same indented reason line, the same abort handling.
+ *
+ * Existing `confirm` calls are deliberately untouched — their output is pinned
+ * byte for byte — so this is an addition to the vocabulary, not a replacement.
+ * A withdrawal (Ctrl-D) or an exhausted loop reads as NO, which is the
+ * fail-closed direction for a question that offers to do something.
+ */
+export declare function confirmUntil(streams: Streams, prompter: Prompter, question: string, defaultYes: boolean): boolean;

package/dist/src/cli/quickstart.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `approval quickstart` (APRV-309): one human ceremony for a small, operative
+ * policy. The command is terminal-only, displays the exact bytes it will
+ * attest, and leaves any interrupted setup unattested.
+ */
+import { spawn } from "node:child_process";
+import { type SourceRunner } from "../core/env-file.js";
+import type { Streams } from "./main.js";
+import { type Prompter } from "./prompt.js";
+import type { SetupDeps } from "./setup-common.js";
+export declare const QUICKSTART_CLASSES: readonly [{
+    readonly pattern: "communicate.*";
+    readonly label: "send a message or email";
+}, {
+    readonly pattern: "financial.*";
+    readonly label: "spend money";
+}, {
+    readonly pattern: "files.delete.*";
+    readonly label: "delete files";
+}, {
+    readonly pattern: "public.*";
+    readonly label: "post publicly";
+}, {
+    readonly pattern: "vcs.push.main";
+    readonly label: "push to main";
+}];
+type Channel = "cli" | "telegram";
+export interface QuickstartDeps {
+    prompter?: Prompter | null;
+    setup?: SetupDeps;
+    sourceRunner?: SourceRunner;
+    doctor?: (dir: string, actor: string, resolvedEnv: Readonly<Record<string, string>>, apiBase: string | null) => Promise<DoctorRun>;
+}
+interface DoctorRun {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export declare function renderSoloPolicy(humanId: string, channel: Channel, patterns: readonly string[]): string;
+export declare function runQuickstartDoctor(dir: string, actor: string, resolvedEnv: Readonly<Record<string, string>>, apiBase: string | null, options?: {
+    timeoutMs?: number;
+    outputLimitBytes?: number;
+    spawnChild?: typeof spawn;
+}): Promise<DoctorRun>;
+export declare function commandQuickstart(argv: string[], streams: Streams, cwd: string, deps?: QuickstartDeps): Promise<number>;
+export {};

package/dist/src/cli/quickstart.js

@@ -0,0 +1,297 @@
+/**
+ * `approval quickstart` (APRV-309): one human ceremony for a small, operative
+ * policy. The command is terminal-only, displays the exact bytes it will
+ * attest, and leaves any interrupted setup unattested.
+ */
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { isAbsolute, join, resolve as resolvePathSegments } from "node:path";
+import { fileURLToPath } from "node:url";
+import { appendAttestation, HUMAN_ACTOR_ENV, policyBytesHash } from "../core/attest.js";
+import { SECRET_ENV_PREFIXES } from "../core/child-env.js";
+import { defaultSourceRunner, envFilePathFor, resolveEnvironment, upsertEnvFileEntries, } from "../core/env-file.js";
+import { loadPolicy, loadPolicyText } from "../core/policy-load.js";
+import { parseFlags, boolFlag, stringFlag } from "./args.js";
+import { EXIT_INTEGRITY, EXIT_IO, EXIT_OK, EXIT_TORN_TAIL, EXIT_USAGE } from "./exit-codes.js";
+import { QUICKSTART_HELP } from "./help.js";
+import { commandInit } from "./init.js";
+import { DEFAULT_LOG_PATH } from "./paths.js";
+import { askUntil, createPrompter } from "./prompt.js";
+import { commandSetupChannel } from "./setup-channel.js";
+import { identityFromAnswer } from "./setup.js";
+import { usageErrorText } from "./usage.js";
+const FLAGS = {
+    "--dir": "string",
+    "--api-base": "string",
+    "--json": "boolean",
+    "--help": "boolean",
+    "-h": "boolean",
+};
+export const QUICKSTART_CLASSES = [
+    { pattern: "communicate.*", label: "send a message or email" },
+    { pattern: "financial.*", label: "spend money" },
+    { pattern: "files.delete.*", label: "delete files" },
+    { pattern: "public.*", label: "post publicly" },
+    { pattern: "vcs.push.main", label: "push to main" },
+];
+const DOCTOR_TIMEOUT_MS = 20_000;
+const DOCTOR_OUTPUT_LIMIT_BYTES = 256 * 1024;
+function absolute(value, cwd) {
+    return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
+}
+function refusal(streams, message) {
+    streams.err(usageErrorText(message, QUICKSTART_HELP));
+    return EXIT_USAGE;
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function nonInteractive(streams, json) {
+    const message = "quickstart needs a human at a terminal and has no JSON mode. Non-interactive equivalent: run `approval init`, write and review APPROVAL.md, run `approval setup identity`, optionally run `approval setup channel telegram`, then run `approval policy attest --as human:<id>`.";
+    if (json)
+        streams.err(`${JSON.stringify({ error: { code: "usage", message } })}\n`);
+    else
+        streams.err(usageErrorText(message, QUICKSTART_HELP));
+    return EXIT_USAGE;
+}
+function channelAnswer(answer) {
+    switch (answer.trim().toLowerCase()) {
+        case "1":
+        case "terminal":
+        case "cli":
+            return { ok: true, value: "cli" };
+        case "2":
+        case "telegram":
+            return { ok: true, value: "telegram" };
+        default:
+            return { ok: false, reason: "choose 1 for this terminal or 2 for Telegram" };
+    }
+}
+function classesAnswer(answer) {
+    const typed = answer.trim().toLowerCase();
+    if (typed.length === 0 || typed === "all") {
+        return { ok: true, value: QUICKSTART_CLASSES.map((entry) => entry.pattern) };
+    }
+    if (typed === "none")
+        return { ok: true, value: [] };
+    const indexes = typed.split(",").map((part) => Number(part.trim()));
+    if (indexes.some((index) => !Number.isInteger(index) || index < 1 || index > QUICKSTART_CLASSES.length)) {
+        return { ok: false, reason: "enter comma-separated numbers 1-5, all, none, or press Enter for all" };
+    }
+    return {
+        ok: true,
+        value: [...new Set(indexes)].map((index) => QUICKSTART_CLASSES[index - 1]?.pattern),
+    };
+}
+function quickstartIdentity(answer) {
+    const parsed = identityFromAnswer(answer);
+    if (!parsed.ok)
+        return parsed;
+    const humanId = parsed.value.slice("human:".length);
+    return /^[a-z0-9][a-z0-9_-]*$/u.test(humanId)
+        ? parsed
+        : { ok: false, reason: "the id must start with a lowercase letter or digit and contain only lowercase letters, digits, _ or -" };
+}
+export function renderSoloPolicy(humanId, channel, patterns) {
+    const rules = patterns
+        .map((pattern) => `  ${pattern}:\n    autonomy: manual\n    approvers: [${humanId}]`)
+        .join("\n");
+    const channelBlock = channel === "telegram"
+        ? "\nchannels:\n  telegram:\n    chat_id_env: APPROVAL_TG_CHAT\n    token_env: APPROVAL_TG_TOKEN\n"
+        : "";
+    return `# Approval Policy\n\nThis is a solo policy. The selected class families ask the person below.\nOther classified reversible actions use the autonomous default. Runtime safety\nfloors and unclassified-command refusals still apply.\n\n\`\`\`yaml approval-policy\nversion: "0.1"\n\ndefaults:\n  autonomy: autonomous       # Tighten to manual to make every unnamed class ask.\n  channel: ${channel}\n  approval_ttl: 24h\n  on_expiry: reject\n\napprovers:\n  ${humanId}:\n    channels: [${channel}]\n\nclasses:\n${rules.length === 0 ? "  {}" : rules}\n${channelBlock}\`\`\`\n\nNo audit block means retrospective sampling is off. Add one only through a\nhuman-reviewed policy amendment; see \`approval policy amend --help\`.\n`;
+}
+function appendBounded(current, chunk, limit) {
+    const remaining = limit - Buffer.byteLength(current);
+    if (remaining <= 0)
+        return { text: current, overflow: true };
+    const bytes = Buffer.from(chunk);
+    if (bytes.byteLength <= remaining)
+        return { text: current + chunk, overflow: false };
+    return { text: current + bytes.subarray(0, remaining).toString("utf8"), overflow: true };
+}
+export function runQuickstartDoctor(dir, actor, resolvedEnv, apiBase, options = {}) {
+    return new Promise((resolve) => {
+        const env = { ...process.env };
+        // The check must not borrow identity or credentials from another instance.
+        // Only values explicitly resolved from this quickstart's source map return.
+        for (const name of Object.keys(env)) {
+            if (SECRET_ENV_PREFIXES.some((prefix) => name.startsWith(prefix)))
+                delete env[name];
+        }
+        Object.assign(env, resolvedEnv, { [HUMAN_ACTOR_ENV]: actor });
+        const cliEntry = fileURLToPath(new URL("./main.js", import.meta.url));
+        const childArgs = [cliEntry, "doctor", "--json", "--dir", dir];
+        if (apiBase !== null)
+            childArgs.push("--api-base", apiBase);
+        const child = (options.spawnChild ?? spawn)(process.execPath, childArgs, {
+            cwd: dir,
+            env,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        let settled = false;
+        const outputLimit = options.outputLimitBytes ?? DOCTOR_OUTPUT_LIMIT_BYTES;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(result);
+        };
+        const abortForOutput = () => {
+            child.kill("SIGTERM");
+            finish({ code: EXIT_IO, stdout, stderr: `${stderr}approval doctor output exceeded ${String(outputLimit)} bytes and was stopped\n` });
+        };
+        child.stdout.setEncoding("utf8");
+        child.stderr.setEncoding("utf8");
+        child.stdout.on("data", (text) => {
+            const next = appendBounded(stdout, text, outputLimit);
+            stdout = next.text;
+            if (next.overflow)
+                abortForOutput();
+        });
+        child.stderr.on("data", (text) => {
+            const next = appendBounded(stderr, text, outputLimit);
+            stderr = next.text;
+            if (next.overflow)
+                abortForOutput();
+        });
+        child.once("error", (cause) => finish({ code: EXIT_IO, stdout, stderr: `${stderr}${cause.message}\n` }));
+        child.once("close", (code) => finish({ code: code ?? EXIT_IO, stdout, stderr }));
+        const timer = setTimeout(() => {
+            child.kill("SIGTERM");
+            finish({ code: EXIT_IO, stdout, stderr: `${stderr}approval doctor exceeded ${String(options.timeoutMs ?? DOCTOR_TIMEOUT_MS)}ms and was stopped\n` });
+        }, options.timeoutMs ?? DOCTOR_TIMEOUT_MS);
+        timer.unref();
+    });
+}
+function doctorPreflight(run) {
+    if (run.code === EXIT_OK)
+        return { ok: true };
+    if (run.code === EXIT_INTEGRITY) {
+        try {
+            const report = JSON.parse(run.stdout);
+            const failed = report.checks?.filter((check) => check.status === "fail") ?? [];
+            if (failed.length === 1 &&
+                failed[0]?.check === "attestation" &&
+                typeof failed[0].detail === "string" &&
+                failed[0].detail.includes("has never been attested"))
+                return { ok: true };
+        }
+        catch {
+            // The diagnostic's malformed output is reported below with its exit.
+        }
+    }
+    return {
+        ok: false,
+        code: run.code,
+        message: `approval doctor preflight reported a setup problem; the policy remains unattested:\n${run.stderr}${run.stdout}`,
+    };
+}
+export async function commandQuickstart(argv, streams, cwd, deps = {}) {
+    const json = argv.includes("--json");
+    const parsed = parseFlags(argv, FLAGS);
+    if (!parsed.ok)
+        return refusal(streams, parsed.message);
+    if (boolFlag(parsed.flags, "--help") || boolFlag(parsed.flags, "-h")) {
+        streams.out(`${QUICKSTART_HELP}\n`);
+        return EXIT_OK;
+    }
+    if (parsed.positionals.length > 0)
+        return refusal(streams, `unexpected argument ${JSON.stringify(parsed.positionals[0])}`);
+    const prompter = deps.prompter === undefined ? createPrompter(streams) : deps.prompter;
+    if (json || prompter === null)
+        return nonInteractive(streams, json);
+    const dirFlag = stringFlag(parsed.flags, "--dir");
+    const dir = dirFlag === null ? cwd : absolute(dirFlag, cwd);
+    const apiBase = stringFlag(parsed.flags, "--api-base");
+    if (existsSync(join(dir, "APPROVAL.md")) ||
+        existsSync(join(dir, "APPROVALS.md")) ||
+        existsSync(join(dir, ".approval"))) {
+        streams.err(`approval: setup artifacts already exist in ${dir}; quickstart only initializes a fresh instance and changed nothing\n`);
+        return EXIT_IO;
+    }
+    streams.out("approval quickstart — three decisions to make a solo gate operative.\n\n");
+    const identity = askUntil(streams, prompter, "1/3 your name (for human:<id>): ", quickstartIdentity);
+    if (!identity.ok)
+        return refusal(streams, "no valid human identity was entered; nothing was written");
+    const actor = identity.value;
+    const humanId = actor.slice("human:".length);
+    const channel = askUntil(streams, prompter, "2/3 button location (1 terminal, 2 Telegram): ", channelAnswer);
+    if (!channel.ok)
+        return refusal(streams, "no channel was chosen; nothing was written");
+    streams.out(`${QUICKSTART_CLASSES.map((entry, index) => `  ${String(index + 1)}. ${entry.label}`).join("\n")}\n`);
+    const selected = askUntil(streams, prompter, "3/3 always ask (numbers, Enter for all): ", classesAnswer);
+    if (!selected.ok)
+        return refusal(streams, "no valid checklist was entered; nothing was written");
+    const policy = renderSoloPolicy(humanId, channel.value, selected.value);
+    const loaded = loadPolicyText(join(dir, "APPROVAL.md"), policy);
+    if (!loaded.ok) {
+        streams.err(`approval: generated policy failed validation: ${loaded.message}\n`);
+        return EXIT_IO;
+    }
+    let initOut = "";
+    let initErr = "";
+    const initCode = commandInit([], { out: (text) => { initOut += text; }, err: (text) => { initErr += text; } }, dir, { policyText: policy });
+    if (initCode !== EXIT_OK) {
+        streams.err(`${initErr}${initOut}`);
+        return initCode;
+    }
+    const envPath = envFilePathFor(join(dir, DEFAULT_LOG_PATH));
+    const envWrite = upsertEnvFileEntries(envPath, [{ key: HUMAN_ACTOR_ENV, value: actor }]);
+    if (!envWrite.ok) {
+        streams.err(`approval: ${envWrite.message}\n`);
+        return EXIT_IO;
+    }
+    if (channel.value === "telegram") {
+        const setupArgs = ["telegram", "--as", actor, "--dir", dir];
+        if (apiBase !== null)
+            setupArgs.push("--api-base", apiBase);
+        const setupCode = await commandSetupChannel(setupArgs, streams, dir, { ...deps.setup, prompter });
+        if (setupCode !== EXIT_OK)
+            return setupCode;
+    }
+    const onDisk = loadPolicy({ dir });
+    if (!onDisk.ok) {
+        streams.err(`approval: generated policy could not be reloaded for preflight: ${onDisk.message}\n`);
+        return EXIT_IO;
+    }
+    const resolution = resolveEnvironment(onDisk, envPath, deps.sourceRunner ?? defaultSourceRunner, {});
+    if (!resolution.ok) {
+        streams.err(`approval: quickstart environment could not be resolved: ${resolution.message}\n`);
+        return EXIT_IO;
+    }
+    const resolvedEnv = {};
+    for (const variable of resolution.variables) {
+        if (variable.value !== undefined)
+            resolvedEnv[variable.name] = variable.value;
+        else if (variable.declared) {
+            streams.err(`approval: ${variable.name} could not be resolved from this instance (${variable.source}); the policy remains unattested\n`);
+            return EXIT_IO;
+        }
+    }
+    const doctor = await (deps.doctor ?? runQuickstartDoctor)(dir, actor, resolvedEnv, apiBase);
+    const preflight = doctorPreflight(doctor);
+    if (!preflight.ok) {
+        streams.err(preflight.message);
+        return preflight.code;
+    }
+    streams.out(`\nReview the exact policy that will become operative:\n\n${policy}\n`);
+    const understood = askUntil(streams, prompter, "type understood to attest these exact bytes: ", (answer) => answer.trim() === "understood"
+        ? { ok: true, value: true }
+        : { ok: false, reason: "type understood exactly, or Ctrl-D to leave the policy unattested" });
+    if (!understood.ok)
+        return refusal(streams, "policy left unattested");
+    const attestation = appendAttestation(join(dir, DEFAULT_LOG_PATH), join(dir, "APPROVAL.md"), actor, { expectedSha256: policyBytesHash(Buffer.from(policy, "utf8")) });
+    if (!attestation.ok) {
+        streams.err(`approval: ${attestation.error.message}\n`);
+        return attestation.error.code === "corrupt-tail" ? EXIT_TORN_TAIL : EXIT_IO;
+    }
+    streams.out(`ready: ${String(selected.value.length)} selected class families ask ${actor} on ${channel.value}; other classified reversible actions use the autonomous default\n`);
+    streams.out(`activate: eval "$(approval env --dir ${shellQuote(dir)})"\n`);
+    streams.out("try: approval hook classify -- curl -X POST https://api.example.com/apply\n");
+    return EXIT_OK;
+}
+//# sourceMappingURL=quickstart.js.map

package/dist/src/cli/quickstart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickstart.js","sourceRoot":"","sources":["../../../src/cli/quickstart.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAqC,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,KAAK,GAA6B;IACtC,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC9D,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;IAChD,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE;IACpD,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;IAC/C,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE;CAC3C,CAAC;AAkBX,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE7C,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,OAAe;IAChD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB,EAAE,IAAa;IACrD,MAAM,OAAO,GACX,iRAAiR,CAAC;IACpR,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACpC,KAAK,GAAG,CAAC;QACT,KAAK,UAAU,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,GAAG,CAAC;QACT,KAAK,UAAU;YACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACzC;YACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACxG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,CAAC;IACvG,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,OAAiB,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uGAAuG,EAAE,CAAC;AACrI,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,OAAgB,EAAE,QAA2B;IAC7F,MAAM,KAAK,GAAG,QAAQ;SACnB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,4CAA4C,OAAO,GAAG,CAAC;SACpF,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,YAAY,GAAG,OAAO,KAAK,UAAU;QACzC,CAAC,CAAC,iGAAiG;QACnG,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,kYAAkY,OAAO,+DAA+D,OAAO,qBAAqB,OAAO,kBAAkB,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,gKAAgK,CAAC;AAC3tB,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa,EAAE,KAAa;IAClE,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,UAAU,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,KAAa,EACb,WAA6C,EAC7C,OAAsB,EACtB,OAAO,GAIH,EAAE;IAEN,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,2EAA2E;QAC3E,4EAA4E;QAC5E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE;YACvE,GAAG,EAAE,GAAG;YACR,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;QAC1E,MAAM,MAAM,GAAG,CAAC,MAAiB,EAAQ,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,mCAAmC,MAAM,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAAC;QACvI,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACnB,IAAI,IAAI,CAAC,QAAQ;gBAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACnB,IAAI,IAAI,CAAC,QAAQ;gBAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACzG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,4BAA4B,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,sBAAsB,EAAE,CAAC,CAAC;QACvJ,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,GAAc;IACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAEnC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAC/E,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;gBACnB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,aAAa;gBAClC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ;gBACpC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,uFAAuF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE;KAC1H,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EAAE,OAAgB,EAAE,GAAW,EAAE,IAAI,GAAmB,EAAE;IAExE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACvF,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvD,IACE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACrC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAClC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,8CAA8C,GAAG,sEAAsE,CAAC,CAAC;QACrI,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAExF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,kCAAkC,EAAE,kBAAkB,CAAC,CAAC;IACrG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,0DAA0D,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,gDAAgD,EAAE,aAAa,CAAC,CAAC;IAC7G,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,4CAA4C,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,2CAA2C,EAAE,aAAa,CAAC,CAAC;IACzG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iDAAiD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACjF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5I,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,OAAO,EAAE,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClG,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mEAAmE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CACnC,MAAM,EACN,OAAO,EACP,IAAI,CAAC,YAAY,IAAI,mBAAmB,EACxC,EAAE,CACH,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,2DAA2D,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/F,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC;aACzE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,IAAI,8CAA8C,QAAQ,CAAC,MAAM,oCAAoC,CAAC,CAAC;YACzI,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4DAA4D,MAAM,IAAI,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,+CAA+C,EAAE,CAAC,MAAM,EAAE,EAAE,CACzG,MAAM,CAAC,IAAI,EAAE,KAAK,YAAY;QAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAEtE,MAAM,WAAW,GAAG,iBAAiB,CACnC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAC3B,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EACxB,KAAK,EACL,EAAE,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CACjE,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,KAAK,OAAO,OAAO,CAAC,KAAK,oEAAoE,CAAC,CAAC;IAClL,OAAO,CAAC,GAAG,CAAC,wCAAwC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/cli/records.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Reading stored lines back out of the log, for `tail` and `export`.
+ *
+ * Read-only in the strictest sense: this module opens the file once for
+ * reading and returns the *stored bytes* of each complete line. It never
+ * re-serializes, never normalizes, never repairs. `export` is required to be
+ * byte-faithful, and the cheapest way to guarantee that is never to have a
+ * parsed object on the write path at all.
+ *
+ * Called only after {@link verify} has passed over the same file, so `count` is
+ * the number of complete lines verification vouched for. If the file no longer
+ * has that many lines, something is writing underneath us; that is reported as
+ * an I/O condition rather than papered over.
+ */
+export type ReadResult = {
+    ok: true;
+    lines: string[];
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * The first `count` complete (newline-terminated) lines of the log, exactly as
+ * stored, without their terminators.
+ */
+export declare function readCompleteLines(logPath: string, count: number): ReadResult;
+/** Parse stored lines back into records for `--json` output. */
+export declare function parseLines(logPath: string, lines: string[]): {
+    ok: true;
+    records: unknown[];
+} | {
+    ok: false;
+    message: string;
+};

package/dist/src/cli/render.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `approval render` — regenerate `.approval/QUEUE.md` from the log (SPEC.md
+ * §9.1, §10.1).
+ *
+ * As everywhere else in this CLI, no logic lives here. The projection is
+ * `channels/render-queue.ts`; this file splits argv, resolves paths, reads the
+ * clock **once at the edge** and hands the instant to core, and maps a result
+ * onto the frozen exit table.
+ *
+ * The clock is the point worth stating. The renderer is a pure function of
+ * (verified log, policy, `now`), which is what makes an identical log render to
+ * identical bytes. That property survives only if exactly one place reads a real
+ * clock, and this is it.
+ *
+ * `render` writes one file and never the log. A corrupt log refuses (exit 1)
+ * rather than producing a queue: a projection of a log that does not verify
+ * would be a screenshot of something nobody should be reading.
+ */
+import type { Streams } from "./main.js";
+/** SPEC.md §9.1: where the queue projection lives. */
+export declare const DEFAULT_QUEUE_PATH = ".approval/QUEUE.md";
+export declare function commandRender(argv: string[], streams: Streams, cwd: string): number;