approval-md 0.1.0 → 0.2.0

package/dist/src/core/policy-match.d.ts

@@ -0,0 +1,281 @@
+/**
+ * Class matching and autonomy resolution (SPEC.md §5.2, §7).
+ *
+ * Given a loaded policy and an action class, decide the autonomy level that
+ * governs the action, and say *why* — which rule matched, which rules were
+ * considered, and whether the irreversibility floor overrode the match.
+ *
+ * This module is pure and deterministic: no I/O, no clock, no randomness, no
+ * caching. The same `(load, actionClass, options)` always yields a deeply equal
+ * `Resolution`. Every ordering decision below is total, so candidate order and
+ * winner selection never depend on object key insertion order beyond what is
+ * explicitly documented.
+ *
+ * ## Matching grammar (SPEC.md §5.2, `schema/policy.schema.json` `classPattern`)
+ *
+ * Patterns and classes are dot-separated segments. Within a pattern:
+ *
+ * - a literal segment matches exactly that segment;
+ * - `*` in a non-final position matches exactly one segment;
+ * - a **trailing** `.*` matches **one or more** remaining segments of any depth.
+ *
+ * The "one or more" is a deliberate choice: `read.*` matches `read.web` and
+ * `read.web.page` but **not** the bare class `read`. The schema's
+ * `classPattern` admits `read` and `read.*` as two distinct keys a policy may
+ * list separately with different autonomy, so they must not be aliases of one
+ * another; and §7 introduces `read.*` as a *namespace*, i.e. the things under
+ * `read`, not `read` itself. A policy that wants the bare class covered writes
+ * it as its own rule (or relies on `defaults.autonomy`).
+ *
+ * A bare `*` pattern is a single-segment pattern whose only segment is a
+ * wildcard, and it is not "trailing `.*`" — it matches any single-segment class
+ * (`read`, `deploy`) and nothing deeper. `*.*` is a wildcard followed by a
+ * trailing wildcard, so it matches any class of TWO OR MORE segments. (APRV-137
+ * corrects this line, which read "exactly two". The trailing `.*` consumes one
+ * or more, so `*.*` matches `a.b` and `a.b.c` alike. `matchesPattern` always
+ * behaved this way; only the comment was wrong.)
+ *
+ * ## Specificity (SPEC.md §5.2, Specificity bullet)
+ *
+ * Candidates are ordered by the two-part key
+ * `(literalSegments DESC, wildcardSegments ASC)`. A trailing `.*` counts as one
+ * wildcard segment and contributes no literals. Patterns still tied are equally
+ * specific, and then "deny beats allow" decides: the strictest autonomy among
+ * the tied rules wins.
+ *
+ * ## Fail-closed
+ *
+ * ## The autonomy split (amended SPEC.md §5.2, APRV-127)
+ *
+ * A rule may declare `supervised-live` (with a `live_rate`) or `supervised-retro`
+ * as well as the pre-split `supervised`. Both collapse onto the one enforced
+ * `supervised` autonomy, and the difference travels beside it as
+ * `Resolution.supervision`: `"live"` means a `live_rate` fraction of the class's
+ * actions stop at the human gate BEFORE executing, `"retro"` means every action
+ * proceeds and a fraction is reviewed AFTERWARDS. Bare `supervised` is `"retro"`,
+ * with a load-time note from `policy-load.ts` naming the alias.
+ *
+ * Nothing about the SELECTION lives here: this module is pure, and selection
+ * needs an operator-held secret. `core/sampler.ts` derives it, and `core/gate.ts`
+ * applies it at intake.
+ *
+ * A not-ok {@link PolicyLoadResult} resolves **every** class to `manual` with
+ * provenance `"fail-closed"` — see `policy-load.ts`. An absent
+ * `defaults.autonomy` is likewise `manual` (provenance `"default"`): the schema
+ * permits omitting `defaults`, and the absence of a grant is not a grant.
+ *
+ * ## `human-only` (amended SPEC.md §5.2, APRV-185)
+ *
+ * A fourth level, and the strictest: an action reserved to human hands, taken
+ * outside agent execution entirely. It resolves like any other level and
+ * nothing here refuses anything — this module is pure — but every enforcement
+ * path downstream refuses it with the code `class-human-only`, so a resolution
+ * carrying it authorizes no request, no decision, no token and no run.
+ *
+ * The fail-closed target stays `manual` and deliberately does not follow the
+ * new head of the strictness table. A policy that cannot be parsed must remain
+ * recoverable through its own gate, and a broken file whose every class became
+ * `human-only` would put the repair behind a level that admits no gated repair.
+ * Failing closed raises the scrutiny an action gets; it does not remove the
+ * path by which a human fixes the file.
+ */
+import type { Autonomy, DeclaredAutonomy, PolicyClassRule, PolicyLoadResult, SupervisionMode } from "./policy-load.js";
+/** Where a {@link Resolution}'s autonomy came from. */
+export type Provenance = 
+/** A `classes` rule matched. */
+"rule"
+/** No rule matched; `defaults.autonomy` (or its absent-means-manual form). */
+ | "default"
+/**
+ * Amended SPEC.md §5.2 (APRV-266): no rule matched a `policy.edit` sub-class,
+ * so the `policy.edit` line itself decided it. Distinct from `"rule"` because
+ * the pattern that decided does not MATCH this class — a reader of the trace
+ * has to be able to see that the class inherited rather than matched — and
+ * distinct from `"default"` because `defaults.autonomy` did not decide it.
+ */
+ | "inherited"
+/** The policy failed to load; everything is `manual`. */
+ | "fail-closed"
+/** The §7 irreversibility floor overrode the resolved autonomy. */
+ | "floor";
+/**
+ * Specificity key: `[literalSegments, wildcardSegments, totalSegments]`.
+ * Ordered on the first two elements only, as literals DESC then wildcards ASC.
+ * `totalSegments` is the sum of the other two, so it can never break a tie they
+ * did not already break; it is carried for the explain trace, which reports it.
+ */
+export type Specificity = [number, number, number];
+/** A rule whose pattern matched the action class, with its specificity key. */
+export interface Candidate {
+    pattern: string;
+    rule: PolicyClassRule;
+    specificity: Specificity;
+}
+/**
+ * Outcome of {@link resolve}.
+ *
+ * `candidates` is every matching rule in descending specificity order, so a
+ * decision trace (APRV-12 `explain`) can be rendered without re-deriving the
+ * match.
+ */
+export interface Resolution {
+    autonomy: Autonomy;
+    /**
+     * Amended SPEC.md §5.2 (APRV-127): what the winning rule (or the default)
+     * actually WROTE, before the split was collapsed onto {@link Autonomy}. A
+     * reader that wants to echo the policy's own word — `explain`, the amendment
+     * differ, a channel's provenance line — uses this; a reader that wants to
+     * know what is enforced uses `autonomy`.
+     */
+    declaredAutonomy: DeclaredAutonomy;
+    /**
+     * `"live"` or `"retro"` when `autonomy` is `supervised`, `null` otherwise.
+     * Bare `supervised` is `"retro"` — see `policy-load.ts`'s alias note.
+     */
+    supervision: SupervisionMode | null;
+    /**
+     * The declared `live_rate` for a `supervised-live` class, else `null`.
+     *
+     * Never `null` for a live class that reached here through the schema, which
+     * requires the key. A live class that somehow carries no usable rate resolves
+     * to `1` rather than to `null`: see {@link supervisionOf} for why the missing
+     * rate is read as "gate all of them".
+     */
+    liveRate: number | null;
+    /**
+     * The declared `retro_rate` for a supervised class, else `null` (amended
+     * SPEC.md §5.2, APRV-183).
+     *
+     * `null` is not "do not sample": it is "this class declared no rate of its
+     * own", and the retrospective sampler reads it as the instruction to fall back
+     * to `audit.supervised_sample_rate`. A rate the schema would have rejected
+     * cannot arrive here, and one that somehow does is read as absent, which puts
+     * the class back on the global rate rather than on a number nobody wrote.
+     */
+    retroRate: number | null;
+    provenance: Provenance;
+    matched: {
+        pattern: string;
+        rule: PolicyClassRule;
+    } | null;
+    approvers: string[] | null;
+    limits: Record<string, number> | null;
+    floorApplied: boolean;
+    /** Whether every equally most-specific rule explicitly permits irreversibility. */
+    allowIrreversible: boolean;
+    /** The maximum-specificity rule group governing that permission. */
+    irreversiblePatterns: string[];
+    candidates: Candidate[];
+}
+/** Options for {@link resolve}. */
+export interface ResolveOptions {
+    /**
+     * Whether the action can be undone. `false` engages the SPEC.md §7
+     * irreversibility floor; `true` and `undefined` do not.
+     */
+    reversible?: boolean;
+}
+/**
+ * Strictness order, strictest first (SPEC.md §5.2 "deny beats allow"), over the
+ * DECLARED vocabulary.
+ *
+ * `supervised-live` sits between `manual` and the retrospective modes because it
+ * is the only supervised mode that can stop an action before it happens: at rate
+ * 1 it is `manual`, at any lower rate it is strictly more scrutiny than review
+ * after the fact. `supervised` and `supervised-retro` share a rank because they
+ * are the same level under two spellings; the lexicographic tie-break in
+ * {@link compareCandidates} then decides between two equally specific rules that
+ * spell it differently, deterministically and without preferring either word.
+ *
+ * Exported because `core/policy-explain.ts` needs the same order to name the
+ * tie-break in its trace, and a private mirror of this table there is exactly
+ * the drift a decision trace must never have from the decision.
+ *
+ * The RATE is not part of the order. A tie between `supervised-live 0.5` and
+ * `supervised-live 0.01` is a tie between two equally specific rules that
+ * disagree about a fraction, and ordering by rate would let a policy author move
+ * a rule's precedence by editing a number they were only tuning. The
+ * lexicographic tie-break settles it, exactly as it settles every other tie.
+ *
+ * APRV-185 puts `human-only` above `manual` at the head of the table, and this
+ * table is the one place the ordering exists: the tie-break below,
+ * `core/policy-explain.ts`'s trace, and `core/agents-md.ts`'s draft merge all
+ * read it and hold no copy. It sits above `manual` because it is strictly more
+ * scrutiny — `manual` says a human decides and an agent then acts, `human-only`
+ * says the human acts — so a tie between the two must resolve to the level that
+ * lets no agent execute.
+ */
+export declare const STRICTNESS: Readonly<Record<DeclaredAutonomy, number>>;
+/**
+ * Collapse a declared level onto the enforced {@link Autonomy} plus its
+ * supervision mode and live rate.
+ *
+ * Pure and total. A `supervised-live` rule whose `live_rate` is absent, or is
+ * not a usable proportion, resolves to **1** — every action in the class is
+ * gated. `policy.schema.json` requires the key, so this branch is unreachable
+ * for a policy that loaded; it is here as the fail-closed backstop, and the
+ * direction is the one the rest of this runtime takes everywhere else. The
+ * alternative reading, "a rate we could not understand means gate none of them",
+ * would turn a typo into a silently disabled control, which is the failure this
+ * project exists to prevent.
+ *
+ * `human-only` (APRV-185) collapses onto itself carrying nothing, exactly as
+ * `manual` and `autonomous` do. It names no supervision because it describes no
+ * agent execution to supervise, and the schema forbids both rates on it, so
+ * there is no fraction here for a reader to misread as live.
+ */
+export declare function supervisionOf(declared: DeclaredAutonomy, rule: PolicyClassRule | null): {
+    autonomy: Autonomy;
+    supervision: SupervisionMode | null;
+    liveRate: number | null;
+    retroRate: number | null;
+};
+/**
+ * The refusal every enforcement path prints for a `human-only` class (APRV-185).
+ *
+ * One text, in one place, for the same reason `STRICTNESS` is one table: the
+ * code `class-human-only` is frozen in four separate unions (`core/gate.ts`,
+ * `core/token.ts`, `core/execute.ts`, and the hook's own), and four hand-written
+ * explanations of one condition would disagree about what a caller should do the
+ * first time one of them was edited.
+ *
+ * `whatWasRefused` is the verb's own half of the sentence, so the message names
+ * the thing that did not happen as well as the reason it cannot.
+ */
+export declare function humanOnlyRefusal(actionClass: string, whatWasRefused: string): string;
+/**
+ * Does `pattern` match `actionClass`?
+ *
+ * See the module header for the grammar. Both are split on `.`; the pattern's
+ * final segment is the only one that may span more than one class segment, and
+ * only when the pattern has more than one segment (a bare `*` is single-span).
+ */
+export declare function matchesPattern(pattern: string, actionClass: string): boolean;
+/**
+ * Specificity key of a pattern (SPEC.md §5.2). A trailing `.*` is one wildcard
+ * segment contributing no literals — which is exactly how it is already counted
+ * by segment splitting, so no special case is needed here.
+ */
+export declare function specificityOf(pattern: string): Specificity;
+/**
+ * Resolve the autonomy governing `actionClass` under `load`.
+ *
+ * 1. A not-ok load resolves `manual` / `"fail-closed"` for every class.
+ * 2. Otherwise collect matching `classes` rules, order them by specificity, and
+ *    take the most specific; among a full specificity tie the strictest
+ *    autonomy wins, and among equally strict tied rules the lexicographically
+ *    smallest pattern is chosen so the outcome is deterministic.
+ * 3. With no matching rule, a class in the `policy.edit.*` namespace (APRV-266)
+ *    inherits the `policy.edit` line when that line is a rule, with provenance
+ *    `"inherited"`; otherwise the result is `defaults.autonomy` — or `manual`
+ *    when `defaults` or `defaults.autonomy` is absent — with provenance
+ *    `"default"`.
+ * 4. Finally, `options.reversible === false` engages the §7 floor: a resolved
+ *    `autonomous` or `supervised` becomes `manual` with `floorApplied: true`
+ *    and provenance `"floor"`. An already-`manual` outcome is untouched, and
+ *    keeps its original provenance, because the floor did not decide it.
+ *
+ * `approvers` and `limits` are carried from the matched rule only; they are
+ * `null` when the rule omits them or when no rule matched.
+ */
+export declare function resolve(load: PolicyLoadResult, actionClass: string, options?: ResolveOptions): Resolution;

package/dist/src/core/policy-match.js

@@ -264,6 +264,8 @@ const FAIL_CLOSED = {
     approvers: null,
     limits: null,
     floorApplied: false,
+    allowIrreversible: false,
+    irreversiblePatterns: [],
     candidates: [],
 };
 /**
@@ -365,6 +367,8 @@ function fromDefaults(load, candidates) {
         approvers: null,
         limits: null,
         floorApplied: false,
+        allowIrreversible: false,
+        irreversiblePatterns: [],
         candidates,
     };
 }
@@ -379,9 +383,11 @@ function fromRules(candidates) {
     // lexicographically smallest strictest — deterministic regardless of the
     // policy file's key order.
     let winner = best;
+    const governing = [];
     for (const candidate of candidates) {
         if (compareSpecificity(candidate.specificity, best.specificity) !== 0)
             break;
+        governing.push(candidate);
         if (STRICTNESS[candidate.rule.autonomy] < STRICTNESS[winner.rule.autonomy]) {
             winner = candidate;
         }
@@ -394,23 +400,26 @@ function fromRules(candidates) {
         approvers: winner.rule.approvers ?? null,
         limits: winner.rule.limits ?? null,
         floorApplied: false,
+        // APRV-317: lexicographic order and strictness still select the ordinary
+        // winner, but neither may silently discard a tied rule's refusal to waive
+        // the floor. The capability is the intersection of the governing group.
+        allowIrreversible: governing.every((candidate) => candidate.rule.allow_irreversible === true),
+        irreversiblePatterns: governing.map((candidate) => candidate.pattern),
         candidates,
     };
 }
 /**
  * SPEC.md §7 irreversibility floor, applied *after* class resolution: an action
- * declared `reversible: false` MUST NOT execute under `autonomous` or
- * `supervised`. Retrospective sampling cannot undo an irreversible action, so
- * the floor resolves to `manual` and records that it, rather than the matched
- * rule, determined the outcome.
+ * declared `reversible: false` resolves to `manual` unless the attested class
+ * rule group explicitly permits it. When no permission exists, the resolution
+ * records that the floor, rather than the matched rule, determined the outcome.
  *
  * ## The floor is a floor, not a proof (amended SPEC.md §7, APRV-127)
  *
- * This is the enforcement point for APRV-127's rule that `supervised-retro`
- * REFUSES an action declaring `reversible: false`: such an action never resolves
- * supervised at all, in either mode, so there is no retrospective path for it to
- * take. Retrospective review of an irreversible action is regret with a paper
- * trail, and the grammar must not offer it.
+ * This remains the enforcement point for APRV-127's default: a supervised rule
+ * with no APRV-317 opt-in sends a truthful irreversible action to manual. The
+ * only exception is the unanimous capability computed from operator policy
+ * above; action metadata has no field that can supply it.
  *
  * What the floor is NOT is evidence that anything else is reversible.
  * `reversible` is SELF-REPORTED by the action's own declaration. A truthful
@@ -445,6 +454,8 @@ function applyFloor(resolution, options) {
         return resolution;
     if (resolution.autonomy === "manual" || resolution.autonomy === "human-only")
         return resolution;
+    if (resolution.allowIrreversible)
+        return resolution;
     return {
         ...resolution,
         autonomy: "manual",

package/dist/src/core/policy-match.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-match.js","sourceRoot":"","sources":["../../../src/core/policy-match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AAuGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,UAAU,GAA+C;IACpE,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,CAAC;IACT,iBAAiB,EAAE,CAAC;IACpB,UAAU,EAAE,CAAC;IACb,kBAAkB,EAAE,CAAC;IACrB,UAAU,EAAE,CAAC;CACd,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,QAA0B,EAAE,IAA4B;IAMpF,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,+EAA+E;IAC/E,mEAAmE;IACnE,4EAA4E;IAC5E,+EAA+E;IAC/E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC;IAC/B,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,EAAE,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAC1F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,cAAsB;IAC1E,OAAO,CACL,SAAS,WAAW,gEAAgE,cAAc,IAAI;QACtG,yOAAyO;QACzO,sHAAsH;QACtH,8GAA8G,CAC/G,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,qDAAqD;AACrD,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,WAAmB;IACjE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GACvB,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;IAExE,IAAI,mBAAmB,EAAE,CAAC;QACxB,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,aAAa,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;SAAM,IAAI,aAAa,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;IAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,cAAc,KAAK,QAAQ;YAAE,SAAS;QAC1C,IAAI,cAAc,KAAK,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,QAAQ;YAAE,SAAS,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,CAAc,EAAE,CAAc;IACxD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;IAC/D,OAAO,CAAC,CAAC,CAAC,gEAAgE;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAY,EAAE,CAAY;IACnD,MAAM,aAAa,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAC9C,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,WAAW,GAAyB;IACxC,QAAQ,EAAE,QAAQ;IAClB,gBAAgB,EAAE,QAAQ;IAC1B,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,aAAa;IACzB,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,EAAE;CACf,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,OAAO,CACrB,IAAsB,EACtB,WAAmB,EACnB,OAAO,GAAmB,EAAE;IAE5B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC;YAAE,SAAS;QACpD,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEnC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE1B,OAAO,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,sEAAsE;AACtE,SAAS,oBAAoB,CAC3B,IAA6C,EAC7C,WAAmB,EACnB,UAAuB;IAEvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,oCAAoC;IACpC,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,WAAW;QACvB,wEAAwE;QACxE,wEAAwE;QACxE,iDAAiD;QACjD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,SAAS,YAAY,CACnB,IAA6C,EAC7C,UAAuB;IAEvB,qEAAqE;IACrE,yEAAyE;IACzE,wBAAwB;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC5D,OAAO;QACL,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;QAChC,gBAAgB,EAAE,QAAQ;QAC1B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,KAAK;QACnB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,UAAuB;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAE7E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,MAAM;QAC7E,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC;QACnD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QACtC,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QACvD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;QACxC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;QAClC,YAAY,EAAE,KAAK;QACnB,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,SAAS,UAAU,CAAC,UAAsB,EAAE,OAAuB;IACjE,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IAChG,OAAO;QACL,GAAG,UAAU;QACb,QAAQ,EAAE,QAAQ;QAClB,0EAA0E;QAC1E,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,0EAA0E;QAC1E,4BAA4B;QAC5B,gBAAgB,EAAE,QAAQ;QAC1B,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,2EAA2E;QAC3E,gCAAgC;QAChC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"policy-match.js","sourceRoot":"","sources":["../../../src/core/policy-match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;AA2GH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,UAAU,GAA+C;IACpE,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,CAAC;IACT,iBAAiB,EAAE,CAAC;IACpB,UAAU,EAAE,CAAC;IACb,kBAAkB,EAAE,CAAC;IACrB,UAAU,EAAE,CAAC;CACd,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,QAA0B,EAAE,IAA4B;IAMpF,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,+EAA+E;IAC/E,mEAAmE;IACnE,4EAA4E;IAC5E,+EAA+E;IAC/E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC;IAC/B,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,EAAE,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAC1F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,cAAsB;IAC1E,OAAO,CACL,SAAS,WAAW,gEAAgE,cAAc,IAAI;QACtG,yOAAyO;QACzO,sHAAsH;QACtH,8GAA8G,CAC/G,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,qDAAqD;AACrD,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,WAAmB;IACjE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GACvB,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;IAExE,IAAI,mBAAmB,EAAE,CAAC;QACxB,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,aAAa,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;SAAM,IAAI,aAAa,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;IAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,cAAc,KAAK,QAAQ;YAAE,SAAS;QAC1C,IAAI,cAAc,KAAK,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,QAAQ;YAAE,SAAS,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,CAAc,EAAE,CAAc;IACxD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;IAC/D,OAAO,CAAC,CAAC,CAAC,gEAAgE;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,CAAY,EAAE,CAAY;IACnD,MAAM,aAAa,GAAG,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAC9C,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,WAAW,GAAyB;IACxC,QAAQ,EAAE,QAAQ;IAClB,gBAAgB,EAAE,QAAQ;IAC1B,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,aAAa;IACzB,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,KAAK;IACnB,iBAAiB,EAAE,KAAK;IACxB,oBAAoB,EAAE,EAAE;IACxB,UAAU,EAAE,EAAE;CACf,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,OAAO,CACrB,IAAsB,EACtB,WAAmB,EACnB,OAAO,GAAmB,EAAE;IAE5B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC;YAAE,SAAS;QACpD,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEnC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE1B,OAAO,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,sEAAsE;AACtE,SAAS,oBAAoB,CAC3B,IAA6C,EAC7C,WAAmB,EACnB,UAAuB;IAEvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC5C,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,oCAAoC;IACpC,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,WAAW;QACvB,wEAAwE;QACxE,wEAAwE;QACxE,iDAAiD;QACjD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,SAAS,YAAY,CACnB,IAA6C,EAC7C,UAAuB;IAEvB,qEAAqE;IACrE,yEAAyE;IACzE,wBAAwB;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC;IAC5D,OAAO;QACL,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;QAChC,gBAAgB,EAAE,QAAQ;QAC1B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,KAAK;QACnB,iBAAiB,EAAE,KAAK;QACxB,oBAAoB,EAAE,EAAE;QACxB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,UAAuB;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAE7E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,MAAM;QAC7E,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC;QACnD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QACtC,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QACvD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;QACxC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI;QAClC,YAAY,EAAE,KAAK;QACnB,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAC1D;QACD,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;QACrE,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,SAAS,UAAU,CAAC,UAAsB,EAAE,OAAuB;IACjE,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IAChG,IAAI,UAAU,CAAC,iBAAiB;QAAE,OAAO,UAAU,CAAC;IACpD,OAAO;QACL,GAAG,UAAU;QACb,QAAQ,EAAE,QAAQ;QAClB,0EAA0E;QAC1E,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,0EAA0E;QAC1E,4BAA4B;QAC5B,gBAAgB,EAAE,QAAQ;QAC1B,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,2EAA2E;QAC3E,gCAAgC;QAChC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO;QACnB,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC"}

package/dist/src/core/policy-proposal.d.ts

@@ -0,0 +1,265 @@
+/**
+ * The attestation ceremony, collected through a channel (APRV-109, amended
+ * SPEC.md §10.1/§10.3/§11).
+ *
+ * ## The problem
+ *
+ * Attestation is human-only (`core/attest.ts`), and identity is
+ * config-declared, so the two policy ceremonies — `policy attest` and `policy
+ * amend` — required the human to be at a terminal. Every other decision in this
+ * system had already been reduced to a tap on a phone; the one act that decides
+ * which rules are in force had not. This module is the missing half: an agent
+ * prepares the policy edit and appends a *proposal*, a channel puts it in front
+ * of the approver like any other manual prompt, and the tap appends the
+ * `policy.updated` attestation under the human identity the listener holds,
+ * exactly as a grant lands today.
+ *
+ * ## What is computed, and why it has to be
+ *
+ * A proposal carries three things a channel renders: the SHA-256 of the policy
+ * file's exact bytes, the semantic diff of what those bytes change about class
+ * resolution, and the load advisory. **All three are derived here from the
+ * bytes** — none is accepted from the proposing agent. {@link ProposeInput}
+ * has no field for a hash, a diff or a verdict, so the refusal of a
+ * caller-authored value is structural in the same way the refusal of a
+ * caller-supplied `ts` is (amended SPEC.md §8, A2). An agent that could author
+ * the diff summary could show an approver one story and attest another file.
+ *
+ * The BASELINE the diff is taken against is the one place a caller supplies
+ * material, and it is checked rather than trusted: bytes whose own SHA-256 is
+ * not the latest attested hash are refused as a baseline and the proposal falls
+ * to hash-only mode. That is `cli/amend.ts`'s rule ("a baseline nobody can
+ * verify is not a baseline"), enforced here so every caller inherits it.
+ *
+ * ## Fail closed, in this order
+ *
+ * - A policy file that cannot be read proposes nothing.
+ * - A live file that already matches its attestation proposes nothing: there is
+ *   no amendment to sign, and a prompt for one would ask a human to re-attest
+ *   bytes already in force.
+ * - A rendered diff larger than {@link ATTESTATION_DIFF_MAX_CHARS} REFUSES
+ *   (`diff-too-large`) rather than truncating. A phone that shows two thirds of
+ *   a policy change collects a signature for the third it did not show, and the
+ *   repair — read it at a terminal and run `approval policy amend` there — is a
+ *   real repair rather than a smaller lie.
+ * - A tap whose proposal's bytes are no longer the bytes on disk refuses
+ *   `proposal-stale` and attests nothing. The hash the human was shown is the
+ *   hash that gets attested, or nothing does.
+ * - A decline, a supersession and a lapsed deadline all attest nothing. Only
+ *   {@link decideAttestation}`(…, "attest", …)` ever appends a `policy.updated`.
+ *
+ * Everything that writes here goes through `core/log.ts`'s `appendEvent` with a
+ * compare-and-append precondition and a runtime-assigned timestamp, so the new
+ * records inherit the same write-boundary discipline as the rest of the gate.
+ */
+import { type ClockOptions } from "./clock.js";
+import { type AppendOptions, type EventRecord } from "./log.js";
+import type { GateRefusal } from "./gate.js";
+/**
+ * The event an agent appends to ask for an attestation.
+ *
+ * Named `proposed` rather than `requested` deliberately: `approval.requested`
+ * is the approval lifecycle, with its own TTL, its own budgets and its own
+ * grant. This is a different question with a different answer event, and giving
+ * it the same word would invite a reader — or a projection — to treat a policy
+ * attestation as an ordinary authorization.
+ */
+export declare const PROPOSAL_EVENT = "policy.proposed";
+/** The event a decline appends. An attestation appends `policy.updated`. */
+export declare const DECLINE_EVENT = "policy.declined";
+/**
+ * The idempotency key an attestation prompt is rendered under.
+ *
+ * `policy.attest:<sha256>` — derived from the proposed bytes and from nothing
+ * else, so two proposals of the same policy text carry the same key and a tap
+ * on either answers the same question. It is also what
+ * `channels/contract.ts` routes on: a gesture whose key starts with this prefix
+ * becomes an attestation, never a grant.
+ */
+export declare const ATTESTATION_KEY_PREFIX = "policy.attest:";
+/** The action class an attestation prompt is resolved and rendered under. */
+export declare const ATTESTATION_CLASS = "policy.edit";
+/** `policy.attest:<sha256>` for the given policy bytes. */
+export declare function attestationActionKey(sha256: string): string;
+/** Is this an attestation prompt's key rather than an ordinary action's? */
+export declare function isAttestationActionKey(actionKey: string): boolean;
+/** The proposed policy hash named by an attestation key, or `null`. */
+export declare function attestationKeySha256(actionKey: string): string | null;
+/**
+ * The largest rendered diff a channel prompt may carry, in characters.
+ *
+ * Telegram's hard limit is 4096 characters for one message and the prompt
+ * carries a dozen other lines besides the diff, so this is the budget the
+ * *smallest* supported channel can show whole. It is a refusal threshold and
+ * never a truncation point: see the module header.
+ */
+export declare const ATTESTATION_DIFF_MAX_CHARS = 2400;
+/** The same bound, in lines: a diff nobody will scroll is a diff nobody reads. */
+export declare const ATTESTATION_DIFF_MAX_LINES = 60;
+/** The load advisory a channel renders beside the diff. */
+export interface LoadAdvisory {
+    ok: boolean;
+    /** The load failure's machine-readable code, or `null` on a clean load. */
+    code: string | null;
+    message: string | null;
+}
+/** The semantic diff summary a channel renders, as the log records it. */
+export interface DiffSummary {
+    /** False in hash-only mode: no verifiable baseline, so no semantic diff. */
+    available: boolean;
+    /** Why the diff is unavailable; `null` when it is available. */
+    reason: string | null;
+    /** The rendered diff, line by line, exactly as a channel prints it. */
+    lines: string[];
+    /** The one-line headline (`3 class resolution(s), 1 default(s)`). */
+    headline: string;
+    /** The SHA-256 of the baseline the diff was taken against, when there was one. */
+    baseline_sha256: string | null;
+}
+/** What {@link proposeAttestation} was asked to propose. */
+export interface ProposeInput {
+    /** The policy file whose bytes are being proposed. */
+    policyPath: string;
+    /**
+     * The previously-attested policy TEXT, for the semantic diff.
+     *
+     * Checked, never trusted: bytes whose SHA-256 is not the latest attestation's
+     * are refused as a baseline and the proposal falls to hash-only mode with the
+     * reason recorded. Callers recover them from `HEAD:<path>` (`cli/amend.ts`);
+     * a caller with nothing to offer passes nothing.
+     */
+    baseline?: Uint8Array | null;
+    /**
+     * The proposer's own words about the amendment. CLAIMED, and rendered as
+     * such: it is the one field on the prompt the runtime does not stand behind.
+     */
+    note?: string;
+    /**
+     * When the proposing process stops waiting (RFC 3339). Display only, and it
+     * can only raise urgency: see `ChannelRequest.waiting`.
+     */
+    waitUntil?: string;
+}
+/** Options for both verbs: the append's, plus the clock and the schema dir. */
+export interface ProposalOptions extends ClockOptions {
+    schemaDir?: string;
+    append?: AppendOptions;
+    /** Where the full policy text is stored for the channel to display. */
+    payloadStoreDir?: string;
+}
+export type ProposeResult = {
+    ok: true;
+    record: EventRecord;
+    sha256: string;
+    diff: DiffSummary;
+    load: LoadAdvisory;
+} | GateRefusal;
+export type AttestationDecision = "attest" | "decline";
+export type DecideAttestationResult = {
+    ok: true;
+    decision: AttestationDecision;
+    record: EventRecord;
+    sha256: string;
+} | GateRefusal;
+/**
+ * The policy file a proposal concerns, discovered the way `loadPolicy` does so
+ * the proposed file and the enforced file are never two different files.
+ */
+export declare function proposalPolicyPath(dir: string): string;
+/** The load advisory for policy text, as a channel renders it. */
+export declare function adviseLoad(policyPath: string, text: string, schemaDir?: string): LoadAdvisory;
+/** The rendered size of a diff summary, as the channel budget counts it. */
+export declare function diffSize(summary: DiffSummary): {
+    chars: number;
+    lines: number;
+};
+/**
+ * The semantic diff between the attested baseline and the proposed bytes.
+ *
+ * Hash-only mode (`available: false`) whenever the baseline cannot be *proved*
+ * to be the attested text: no baseline was offered, none was ever attested, or
+ * the offered bytes hash to something other than the attestation. The reason is
+ * recorded so a channel can print it instead of a diff, which is the honest
+ * rendering of "we cannot show you what this changes".
+ */
+export declare function summarizeDiff(policyPath: string, baseline: Uint8Array | null | undefined, live: Uint8Array, attestedSha256: string | null, schemaDir?: string): DiffSummary;
+/** The stored value a channel displays as the prompt's full payload. */
+export declare function proposalPayloadValue(policyPath: string, text: string): Record<string, unknown>;
+/**
+ * Append a `policy.proposed` asking a human to attest `policyPath`'s bytes.
+ *
+ * The record's payload is the prompt: `sha256`, `diff` and `load` are all
+ * derived here, `note` and `wait_until` are the proposer's and are labelled
+ * claimed by every channel. `payload_hash` binds the full policy text stored
+ * beside the log, so the approver can read the whole file rather than only the
+ * summary (SPEC.md §10.4).
+ *
+ * No attestation is required to append one. That is the point of the verb: the
+ * live policy is mid-amendment and therefore unattested, which is exactly the
+ * state in which every other gate operation refuses. This one asks a human to
+ * end that state.
+ */
+export declare function proposeAttestation(logPath: string, input: ProposeInput, actor: string, options?: ProposalOptions): ProposeResult;
+/** What became of a proposal, derived from the log and from nothing else. */
+export type ProposalState = 
+/** Nobody has answered, nothing supersedes it, and its deadline has not passed. */
+"open"
+/** A human attested these bytes: a `policy.updated` carries the same hash. */
+ | "attested"
+/** A human declined: a `policy.declined` names this proposal. */
+ | "declined"
+/** A newer proposal for the same policy path replaced it. */
+ | "superseded"
+/** Its `wait_until` passed with no answer. Nothing was attested. */
+ | "expired";
+export interface ProposalDerivation {
+    seq: number;
+    actionKey: string;
+    sha256: string;
+    state: ProposalState;
+    record: EventRecord;
+}
+/** Every `policy.proposed` record in the log, in append order. */
+export declare function proposalRecords(records: readonly EventRecord[]): EventRecord[];
+/**
+ * Derive one proposal's state at `now`.
+ *
+ * Terminal states are read off the log; `expired` is arithmetic on the
+ * proposer's own `wait_until` and materialises no event, because a lapsed
+ * attestation prompt has nothing to record: nothing was attested, and the
+ * proposal record already says everything a reader needs. That is the
+ * fail-closed reading — a prompt nobody answered leaves the policy exactly as
+ * unattested as it was.
+ */
+export declare function proposalState(records: readonly EventRecord[], seq: number, now: string): ProposalDerivation | null;
+/** Every proposal still awaiting a human answer at `now`, in log order. */
+export declare function openProposals(records: readonly EventRecord[], now: string): ProposalDerivation[];
+/** The open proposal whose bytes hash to `sha256`, or `null`. */
+export declare function openProposalFor(records: readonly EventRecord[], sha256: string, now: string): ProposalDerivation | null;
+/** Options for {@link decideAttestation}. */
+export interface DecideAttestationOptions extends ProposalOptions {
+    /** The approver's free-text note, recorded on the answer. */
+    note?: string;
+    /** Where `APPROVAL.md` lives, when it is not the proposal's own directory. */
+    policyPath?: string;
+    /** The channel delivery id this gesture answered, for audit. */
+    batchDeliveryId?: string;
+}
+/**
+ * Answer a proposal: attest the bytes the prompt displayed, or decline them.
+ *
+ * Human-only, in code — the same rule `core/attest.ts` enforces, restated here
+ * because this is a second door onto the same act and the rule must hold for
+ * every caller and not only for the CLI's.
+ *
+ * **The attested hash is the hash the prompt displayed.** Before anything is
+ * appended the live file is re-read and re-hashed, and any difference refuses
+ * `proposal-stale`: the human signed for bytes they were shown, and bytes that
+ * changed underneath the prompt are a different policy that has to be proposed
+ * again. This is the one check that makes "the phone shows the diff and the
+ * hash" mean anything.
+ *
+ * A decline appends `policy.declined` and attests nothing. So does a lapsed
+ * deadline, by appending nothing at all.
+ */
+export declare function decideAttestation(logPath: string, seq: number, decision: AttestationDecision, actor: string, options?: DecideAttestationOptions): DecideAttestationResult;