approval-md 0.1.0 → 0.3.0

package/dist/src/cli/setup-common.d.ts

@@ -0,0 +1,277 @@
+/**
+ * What every `approval setup` subcommand shares (SPEC.md §5.2, §10.1; APRV-79).
+ *
+ * `setup` began as one file with four subcommands in it. APRV-78 added
+ * `setup adapter <name>` in a file of its own, and it had to reach back into
+ * `cli/setup.ts` for the front matter — which made a cycle: `setup.ts` imports
+ * the adapter verb to dispatch it, and the adapter verb imports `front`,
+ * `requireHuman` and `SetupDeps` back. ESM tolerates that until the day an
+ * initialisation order changes and a `const` at module scope is `undefined` in
+ * one direction only. APRV-79 adds a THIRD such file (`setup-channel.ts`), so
+ * the cycle is broken by extraction rather than tolerated a second time.
+ *
+ * The rule this file exists to enforce, asserted in `tests/layering.test.ts`:
+ *
+ * ```
+ * setup.ts ──┬─> setup-adapter.ts ──┐
+ *            └─> setup-channel.ts ──┴─> setup-common.ts   (and no arrow back)
+ * ```
+ *
+ * What lives here is what more than one of those three needs: the dependency
+ * bag, the keystore seam, the flag table, the front matter (`--help`, the paths,
+ * the policy, the terminal check), the human-only gate, the `.approval/env`
+ * refusal mapping, the service names, and the plaintext-literal offer. What does
+ * NOT live here is anything one subcommand alone uses: the chat picker is
+ * `setup-channel.ts`'s, the manifest hint generator is `setup-adapter.ts`'s, and
+ * the generated-secret path (`storeGeneratedSecret`) stays with `vault` and
+ * `sampling` in `setup.ts`.
+ *
+ * The reasoning for each decision this file encodes — why the token is never
+ * handled by this process, why a generated value may reach an argv and an
+ * operator's own may not, why every subcommand refuses a non-terminal stdin —
+ * is in `cli/setup.ts`'s module doc, which is the family's front page. It is not
+ * repeated here; this file is the mechanism.
+ */
+import { type EnvFileRefusal } from "../core/env-file.js";
+import { type PolicyLoadResult } from "../core/policy-load.js";
+import type { CredentialProvider } from "../adapters/contract.js";
+import type { probeSmtp } from "../adapters/smtp.js";
+import { type TelegramFetch } from "../channels/telegram.js";
+import { type FlagKind } from "./args.js";
+import type { Streams } from "./main.js";
+import { type Prompter } from "./prompt.js";
+/**
+ * The keystore item names, one per secret, SCOPED TO THIS INSTANCE (APRV-178).
+ *
+ * They were three fixed strings until a demo gate in another directory stored
+ * its bot token over the production gate's item, read the production token
+ * back, and had a human's approval tap consumed by the wrong listener. A
+ * keystore is machine-global and the filesystem scoping every other part of an
+ * instance has was simply missing here; `core/instance.ts` carries the whole
+ * reasoning and the shape of the suffix.
+ *
+ * Still not a flag. An operator reading `.approval/env` sees the service name
+ * in the file itself (`keychain:approval-tg-token-3f2a9c11`), so the name is
+ * discoverable, and a `--service-prefix` would add a way for two checkouts to
+ * disagree about which item is which — which is the bug, not the fix.
+ */
+export interface ServiceNames {
+    telegramToken: string;
+    vaultPassphrase: string;
+    samplingSecret: string;
+    /** The key that hashes channel sender ids (APRV-370). */
+    senderKey: string;
+}
+/** The four item names the instance owning `logPath` reads and writes. */
+export declare function servicesFor(logPath: string): ServiceNames;
+/**
+ * The variable a sampling secret goes into when the policy names none. The
+ * value is stored either way; what the operator is then told to do is add the
+ * `audit.sampling_secret_env` line, because until the POLICY names a variable
+ * the sampler stays off (SPEC.md §5.2) and no amount of environment fixes that.
+ */
+export declare const DEFAULT_SAMPLING_ENV = "APPROVAL_SAMPLING_SECRET";
+/** The long-poll `getUpdates` asks for, in seconds. */
+export declare const POLL_TIMEOUT_SECONDS = 10;
+/** doctor's probe timeout, for the calls that answer immediately. */
+export declare const PROBE_TIMEOUT_MS = 10000;
+/** The flags every subcommand accepts. One table, so none of them drifts. */
+export declare const FLAGS: Record<string, FlagKind>;
+/** Which credential store this machine has, as a closed set. */
+export type KeystoreKind = "keychain" | "secret-service" | "none";
+/** What a store attempt did. `viaArgv` is reported, never hidden. */
+export type StoreOutcome = {
+    ok: true;
+    /**
+     * The value passed through the helper's argv rather than its stdin. True
+     * only on the generated-secret fallback path; see `cli/setup.ts`.
+     */
+    viaArgv: boolean;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * The keystore operations `setup` needs, injectable for exactly the reason
+ * {@link defaultSourceRunner}'s seam exists: no test in this repository may
+ * touch a real Keychain or a real secret service, and the way to guarantee that
+ * is for the tests to hand over a fake rather than for the runtime to grow a
+ * test-only flag.
+ */
+export interface KeystoreRunner {
+    /** What is available here. Consulted once per run. */
+    kind(): KeystoreKind;
+    /**
+     * Store a value THIS PROCESS GENERATED. Prefers the helper's stdin; may fall
+     * back to its argv, and says which it did.
+     */
+    storeGenerated(service: string, value: string): StoreOutcome;
+    /**
+     * Have the HELPER'S OWN no-echo prompt collect the value from the terminal.
+     * The value never enters this process. macOS and `secret-tool` both support
+     * this; there is no such thing on a machine with neither.
+     */
+    storePrompted(service: string): StoreOutcome;
+    /** Read a stored value back. The value arrives on stdout, never in an argv. */
+    read(service: string): {
+        ok: true;
+        value: string;
+    } | {
+        ok: false;
+        message: string;
+    };
+}
+/** A thrown thing, as a sentence. */
+export declare function detail(cause: unknown): string;
+/** The real one. Nothing in the test suite constructs it. */
+export declare const defaultKeystoreRunner: KeystoreRunner;
+/** The `.approval/env` scheme a backend writes. */
+export declare function schemeFor(kind: KeystoreKind, service: string): string | null;
+/** The command an operator runs by hand to see that the item is really there. */
+export declare function retrievalCommand(kind: KeystoreKind, service: string): string;
+/** The command an operator runs by hand to STORE the item, with no value in it. */
+export declare function storageCommand(kind: KeystoreKind, service: string): string;
+/** Everything this verb reaches the world through. Defaults are the real ones. */
+export interface SetupDeps {
+    prompter?: Prompter | null;
+    keystore?: KeystoreRunner;
+    fetch?: TelegramFetch;
+    apiBase?: string;
+    /** Overridable so a test can assert on a value it chose. */
+    generate?: () => string;
+    /**
+     * The `getUpdates` long poll, in seconds. Overridable for one reason: the
+     * "nobody messaged the bot" path polls three times, and a suite that spent
+     * thirty seconds proving a refusal is a suite people stop running. Not a
+     * flag — no operator has a reason to change it.
+     */
+    pollTimeoutSeconds?: number;
+    /**
+     * The environment the passphrase is read from. `process.env` by default.
+     *
+     * A seam and not a back door: it is read through `passphraseFrom`, which is
+     * the same function `approval vault set` uses, and it never resolves
+     * `.approval/env` (§11.1 invariant 7). Injectable so a test can prove both
+     * the unset refusal and the happy path without mutating the suite's own
+     * environment, which is shared by every other test in the process.
+     */
+    env?: NodeJS.ProcessEnv;
+    /**
+     * The SMTP probe `setup adapter email` verifies with. The real one by
+     * default; a test injects a wrapper so that the only TLS relaxation in this
+     * repository stays inside the test that needs it (`tests/smtp-mock.ts`'s
+     * self-signed fixture on 127.0.0.1).
+     */
+    probe?: typeof probeSmtp;
+    /**
+     * The vault read `setup adapter email` probes a partial re-run through
+     * (APRV-99). The real {@link vaultCredentialProvider} by default — the same
+     * provider `approval adapter email` hands to `act` — and injectable for one
+     * reason: the fallback for a vault that will not open is unreachable
+     * otherwise, because the flow proved the passphrase at its preflight and the
+     * writes have already landed by the time verification runs.
+     */
+    credentials?: CredentialProvider;
+}
+export declare function usageError(streams: Streams, json: boolean, message: string, helpText: string): number;
+/**
+ * A refused PROMPT, as one line and no help page (APRV-90).
+ *
+ * The distinction this function exists to draw: {@link usageError} answers a
+ * mangled command line, so it names the shape that line should have had, which
+ * is the thing the operator got wrong. A prompt that was aborted or answered
+ * wrongly five times is not a command line at all — the operator was in a
+ * conversation, the question was on screen, and a usage block under it teaches
+ * nothing. Same exit code (the frozen table is unchanged), one line of output,
+ * and not even the `--help` pointer a usage error carries.
+ */
+export declare function promptRefusal(streams: Streams, message: string): number;
+export declare function absolute(value: string, cwd: string): string;
+export declare function refusalExitCode(refusal: EnvFileRefusal): number;
+export declare function emitRefusal(streams: Streams, refusal: EnvFileRefusal): number;
+export interface Context {
+    flags: Record<string, string | boolean>;
+    positionals: string[];
+    prompter: Prompter;
+    keystore: KeystoreRunner;
+    /**
+     * Which keystore this machine has. Named `backend` rather than `kind` because
+     * the outcome union around this context already discriminates on `kind`.
+     */
+    backend: KeystoreKind;
+    load: PolicyLoadResult;
+    logPath: string;
+    envPath: string;
+    /** This instance's keystore item names (APRV-178). */
+    services: ServiceNames;
+    apiBase: string;
+    generate: () => string;
+    pollTimeoutSeconds: number;
+}
+export type FrontOutcome = {
+    kind: "handled";
+    code: number;
+} | ({
+    kind: "run";
+} & Context);
+/**
+ * What a non-interactive hint needs: where the map lives, which keystore is
+ * present, and the variable NAMES the loaded policy resolves to. The hints
+ * must print the names the interactive path would write, or an operator on a
+ * renamed policy copies a line the runtime never reads.
+ */
+export interface HintContext {
+    envPath: string;
+    kind: KeystoreKind;
+    /**
+     * The instance's item names. A hint that printed the unscoped legacy name
+     * would teach the operator to create by hand exactly the shared item
+     * APRV-178 exists to stop.
+     */
+    services: ServiceNames;
+    passphraseEnv: string;
+    samplingEnv: string;
+    tokenEnv: string;
+    chatEnv: string;
+}
+/** The policy's `audit.sampling_secret_env`, or `null`. */
+export declare function samplingEnvName(load: PolicyLoadResult): string | null;
+export declare function hintContextFor(load: PolicyLoadResult, envPath: string, kind: KeystoreKind, services: ServiceNames): HintContext;
+/**
+ * `--help`, the paths, the policy, the terminal check.
+ *
+ * The terminal check has no `process.stdin.isTTY` in it, deliberately: the real
+ * prompter refuses to construct without one ({@link createPrompter}), so "there
+ * is no prompter" IS "there is no terminal", and a test that injects one has
+ * not bypassed a check that a CI job could also bypass — it has supplied the
+ * human's side of the conversation, which is the only thing a test can honestly
+ * do here.
+ */
+export declare function front(subcommand: string, argv: string[], streams: Streams, cwd: string, deps: SetupDeps, helpText: string, nonInteractiveHint: (context: HintContext) => string, 
+/**
+ * Flags this subcommand accepts on top of the shared table (APRV-110).
+ *
+ * `setup service` is the first subcommand whose subject is not a credential,
+ * so it needs words the other four have no use for (a platform, a unit label,
+ * a log directory). They are passed in rather than added to {@link FLAGS},
+ * because a flag every subcommand silently accepts is a flag an operator will
+ * eventually pass to the one that ignores it.
+ */
+extraFlags?: Record<string, FlagKind>): FrontOutcome;
+/** The human-only rule, spelled exactly as `vault set` spells it. */
+export declare function requireHuman(flags: Record<string, string | boolean>, streams: Streams, helpText: string, verb: string): {
+    ok: true;
+    actor: string;
+} | {
+    ok: false;
+    code: number;
+};
+/**
+ * The plaintext-literal offer, for a machine with no keystore.
+ *
+ * An explicit typed `yes` — not `y`, not Enter — because the whole content of
+ * this question is that the operator understood it. The warning is worded to
+ * match what `approval env --check` will print at them on every run afterwards,
+ * so the two never read as different claims about the same file.
+ */
+export declare function offerLiteral(streams: Streams, prompter: Prompter, envPath: string, what: string): boolean;

package/dist/src/cli/setup-common.js

@@ -38,7 +38,7 @@ import { userInfo } from "node:os";
 import { isAbsolute, resolve as resolvePathSegments } from "node:path";
 import { HUMAN_ACTOR_ENV, resolveHumanActor } from "../core/attest.js";
 import { defaultSourceRunner, envFilePathFor, } from "../core/env-file.js";
-import { LEGACY_SERVICE_SAMPLING_SECRET, LEGACY_SERVICE_TELEGRAM_TOKEN, LEGACY_SERVICE_VAULT_PASSPHRASE, scopedService, } from "../core/instance.js";
+import { LEGACY_SERVICE_SAMPLING_SECRET, SERVICE_SENDER_KEY, LEGACY_SERVICE_TELEGRAM_TOKEN, LEGACY_SERVICE_VAULT_PASSPHRASE, scopedService, } from "../core/instance.js";
 import { loadPolicy } from "../core/policy-load.js";
 import { telegramChatEnvFor, telegramTokenEnvFor } from "../core/telegram-config.js";
 import { passphraseEnvFor } from "../core/vault.js";
@@ -49,12 +49,13 @@ import { DEFAULT_LOG_PATH, resolvePath } from "./paths.js";
 import { createPrompter } from "./prompt.js";
 import { refusal as renderRefusal, style } from "./style.js";
 import { usageErrorText } from "./usage.js";
-/** The three item names the instance owning `logPath` reads and writes. */
+/** The four item names the instance owning `logPath` reads and writes. */
 export function servicesFor(logPath) {
     return {
         telegramToken: scopedService(LEGACY_SERVICE_TELEGRAM_TOKEN, logPath),
         vaultPassphrase: scopedService(LEGACY_SERVICE_VAULT_PASSPHRASE, logPath),
         samplingSecret: scopedService(LEGACY_SERVICE_SAMPLING_SECRET, logPath),
+        senderKey: scopedService(SERVICE_SENDER_KEY, logPath),
     };
 }
 /**

package/dist/src/cli/setup-common.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-common.js","sourceRoot":"","sources":["../../../src/cli/setup-common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAA2C,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,+BAA+B,EAC/B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAyB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,yBAAyB,EAAsB,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA2B5C,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,6BAA6B,EAAE,OAAO,CAAC;QACpE,eAAe,EAAE,aAAa,CAAC,+BAA+B,EAAE,OAAO,CAAC;QACxE,cAAc,EAAE,aAAa,CAAC,8BAA8B,EAAE,OAAO,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAA6B;IAC7C,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AA8CF,4EAA4E;AAC5E,SAAS,MAAM,CAAC,MAAc,EAAE,SAAmB;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,OAAQ,MAAM,CAAC,KAA2C,EAAE,IAAI,KAAK,QAAQ,CAAC;AAChF,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,IAAI;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC;QACrF,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;YAAE,OAAO,gBAAgB,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAClD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CACnC,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAE1E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,EAAE;QACF,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,yCAAyC;QACzC,MAAM,YAAY,GAA+D;YAC/E,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,GAAG,KAAK,KAAK,KAAK,IAAI;YAC7B,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,8DAA8D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yHAAyH;aACxN,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,wCAAwC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;SAC9G,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAC3D,0EAA0E;YAC1E,sEAAsE;YACtE,MAAM,MAAM,GAAG,SAAS,CACtB,UAAU,EACV,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAClE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACtF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAwC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAClD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GACX,OAAO,KAAK,UAAU;YACpB,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACnG,CAAC;CACF,CAAC;AAEF,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,IAAkB,EAAE,OAAe;IAC3D,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,OAAO,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,kBAAkB,OAAO,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAkB,EAAE,OAAe;IAClE,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,gDAAgD,OAAO,KAAK;QAC9D,CAAC,CAAC,+BAA+B,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAkB,EAAE,OAAe;IAChE,OAAO,IAAI,KAAK,gBAAgB;QAC9B,CAAC,CAAC,6BAA6B,OAAO,aAAa,OAAO,EAAE;QAC5D,CAAC,CAAC,+CAA+C,OAAO,QAAQ,CAAC;AACrE,CAAC;AAiDD,MAAM,UAAU,UAAU,CACxB,OAAgB,EAChB,IAAa,EACb,OAAe,EACf,QAAgB;IAEhB,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,OAAe;IAC7D,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAW;IACjD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;QACvE,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,cAAc,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,OAAuB;IACnE,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AA6CD,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACxD,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAsB,EACtB,OAAe,EACf,IAAkB,EAClB,QAAsB;IAEtB,OAAO;QACL,OAAO;QACP,IAAI;QACJ,QAAQ;QACR,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACrC,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,oBAAoB;QAC1D,QAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,KAAK,CACnB,UAAkB,EAClB,IAAc,EACd,OAAgB,EAChB,GAAW,EACX,IAAe,EACf,QAAgB,EAChB,kBAAoD;AACpD;;;;;;;;GAQG;AACH,UAAU,GAA6B,EAAE;IAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,UAAU,CACrB,UAAU,KAAK,IAAI;QACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAC7D,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,qBAAqB,CAAC;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,8BAA8B,UAAU,yBACtC,IAAI;YACF,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,yBACN,6PAA6P,kBAAkB,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,4EAA4E,CAC3Y,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ;QACR,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO;QACP,OAAO;QACP,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,yBAAyB;QAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,oBAAoB;KACpE,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAC1B,KAAuC,EACvC,OAAgB,EAChB,QAAgB,EAChB,IAAY;IAEZ,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,UAAU,CACd,OAAO,EACP,KAAK,EACL,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,0BAA0B,eAAe,uJAAuJ;YAClM,CAAC,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,IAAI,0CAA0C,EACxJ,QAAQ,CACT;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,QAAkB,EAClB,OAAe,EACf,IAAY;IAEZ,OAAO,CAAC,GAAG,CACT,2KAA2K,IAAI,WAAW,OAAO,sZAAsZ,CACxlB,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"setup-common.js","sourceRoot":"","sources":["../../../src/cli/setup-common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAA2C,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,6BAA6B,EAC7B,+BAA+B,EAC/B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAyB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EAAE,yBAAyB,EAAsB,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA6B5C,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO;QACL,aAAa,EAAE,aAAa,CAAC,6BAA6B,EAAE,OAAO,CAAC;QACpE,eAAe,EAAE,aAAa,CAAC,+BAA+B,EAAE,OAAO,CAAC;QACxE,cAAc,EAAE,aAAa,CAAC,8BAA8B,EAAE,OAAO,CAAC;QACtE,SAAS,EAAE,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAA6B;IAC7C,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AA8CF,4EAA4E;AAC5E,SAAS,MAAM,CAAC,MAAc,EAAE,SAAmB;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,OAAQ,MAAM,CAAC,KAA2C,EAAE,IAAI,KAAK,QAAQ,CAAC;AAChF,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,IAAI;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC;QACrF,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;YAAE,OAAO,gBAAgB,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAClD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CACnC,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAE1E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,EAAE;QACF,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,yCAAyC;QACzC,MAAM,YAAY,GAA+D;YAC/E,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,GAAG,KAAK,KAAK,KAAK,IAAI;YAC7B,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,8DAA8D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yHAAyH;aACxN,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,wCAAwC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;SAC9G,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;YAC3D,0EAA0E;YAC1E,sEAAsE;YACtE,MAAM,MAAM,GAAG,SAAS,CACtB,UAAU,EACV,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAClE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACtF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAwC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAClD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;gBACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GACX,OAAO,KAAK,UAAU;YACpB,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACnG,CAAC;CACF,CAAC;AAEF,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,IAAkB,EAAE,OAAe;IAC3D,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,OAAO,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,kBAAkB,OAAO,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAkB,EAAE,OAAe;IAClE,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,gDAAgD,OAAO,KAAK;QAC9D,CAAC,CAAC,+BAA+B,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAkB,EAAE,OAAe;IAChE,OAAO,IAAI,KAAK,gBAAgB;QAC9B,CAAC,CAAC,6BAA6B,OAAO,aAAa,OAAO,EAAE;QAC5D,CAAC,CAAC,+CAA+C,OAAO,QAAQ,CAAC;AACrE,CAAC;AAiDD,MAAM,UAAU,UAAU,CACxB,OAAgB,EAChB,IAAa,EACb,OAAe,EACf,QAAgB;IAEhB,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,OAAe;IAC7D,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAW;IACjD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;QACvE,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,cAAc,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,OAAuB;IACnE,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AA6CD,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACxD,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAsB,EACtB,OAAe,EACf,IAAkB,EAClB,QAAsB;IAEtB,OAAO;QACL,OAAO;QACP,IAAI;QACJ,QAAQ;QACR,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACrC,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,oBAAoB;QAC1D,QAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,KAAK,CACnB,UAAkB,EAClB,IAAc,EACd,OAAgB,EAChB,GAAW,EACX,IAAe,EACf,QAAgB,EAChB,kBAAoD;AACpD;;;;;;;;GAQG;AACH,UAAU,GAA6B,EAAE;IAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,UAAU,CACrB,UAAU,KAAK,IAAI;QACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAC7D,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,qBAAqB,CAAC;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,8BAA8B,UAAU,yBACtC,IAAI;YACF,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,yBACN,6PAA6P,kBAAkB,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,4EAA4E,CAC3Y,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ;QACR,QAAQ;QACR,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO;QACP,OAAO;QACP,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,yBAAyB;QAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,oBAAoB;KACpE,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAC1B,KAAuC,EACvC,OAAgB,EAChB,QAAgB,EAChB,IAAY;IAEZ,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,UAAU,CACd,OAAO,EACP,KAAK,EACL,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,0BAA0B,eAAe,uJAAuJ;YAClM,CAAC,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,IAAI,0CAA0C,EACxJ,QAAQ,CACT;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,QAAkB,EAClB,OAAe,EACf,IAAY;IAEZ,OAAO,CAAC,GAAG,CACT,2KAA2K,IAAI,WAAW,OAAO,sZAAsZ,CACxlB,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/cli/setup-flow.d.ts

@@ -0,0 +1,287 @@
+/**
+ * The credential-collection flow (SPEC.md §5.2, §10.1, §10.4; APRV-78).
+ *
+ * `setup identity|vault|sampling|telegram` each hand-rolled their own
+ * conversation, and that was right while there were four of them and each was
+ * different. `setup adapter <name>` was the first verb whose conversation is
+ * DERIVED — from a manifest of {@link CredentialSpec}s an adapter declares — so
+ * the conversation itself becomes a function, and this file is that function.
+ * APRV-79 made it the second caller's too: `setup channel telegram` runs this
+ * flow over the Telegram channel's manifest, into `.approval/env` instead of
+ * into the vault, which is what the destination seam was built for.
+ *
+ * It knows nothing about email, SMTP, Telegram, or the vault's file format. It
+ * is handed a list of specs, somewhere to put the values
+ * ({@link FlowDestination}), and up to four hooks, and it runs one fixed order:
+ *
+ * 1. the title and the prerequisite line;
+ * 2. **the checklist** — one line per spec, before a single question is asked,
+ *    so an operator can see the whole shape of what is about to be demanded and
+ *    where it will land, and abandon at zero cost if it is the wrong vault;
+ * 3. **the preflight** ({@link FlowDestination.present}), which for a vault
+ *    means OPENING it. This is why it is step three and not step six: a wrong
+ *    passphrase must refuse before the operator has typed a password, not
+ *    after. The set it returns is also what step four reads;
+ * 4. **the replacement plan** ({@link planWrites}), asked up front for the same
+ *    reason `setup`'s own does: a confirmation asked after the value had been
+ *    replaced is a question whose "no" no longer means anything. A name the
+ *    operator declines is never even asked for;
+ * 5. **collection**, in manifest order;
+ * 6. **the cross-field check** ({@link FlowHooks.check}), before any write, so
+ *    a half-configured pair costs nothing;
+ * 7. **the writes**, in manifest order — which is why an adapter puts its
+ *    secret last: a destination that refuses half way reports exactly which
+ *    names landed and stops. **There is no rollback**, deliberately: deleting
+ *    credentials in response to a write failure is a destructive act taken by a
+ *    wizard on its own authority, over a store whose previous contents it
+ *    cannot restore;
+ * 8. **verification** ({@link FlowHooks.verify}), after the write, because the
+ *    thing being verified is the stored configuration; and
+ * 9. **the report** — where, how many, which names — and the next steps.
+ *
+ * **Values are held in this process and printed by nothing.** The flow must
+ * hold them: it collected them and it is about to write them. Every line it
+ * emits names a CREDENTIAL NAME, a kind, a count, or a path, and the suite in
+ * `tests/cli-setup.test.ts` sweeps every captured byte for the fixture secrets
+ * with no exemption on this path.
+ */
+import type { CredentialSpec } from "../core/credential-spec.js";
+import { envFilePathFor } from "../core/env-file.js";
+import type { Streams } from "./main.js";
+import { type Prompter } from "./prompt.js";
+/**
+ * A refusal from a destination, already carrying its exit code.
+ *
+ * The code is decided by the destination and not by this file, because the
+ * frozen exit table's split (4 is a filesystem fact, 1 is the runtime deciding
+ * no) is a property of the STORE's vocabulary — `cli/vault.ts` and
+ * `cli/setup.ts` each already map their own refusals that way, and a flow that
+ * re-derived the mapping would be a third opinion about the same table.
+ */
+export interface FlowRefusal {
+    code: string;
+    message: string;
+    exitCode: number;
+}
+/** Where a flow puts what it collected. Two implementations live below. */
+export interface FlowDestination {
+    kind: "vault" | "env-file";
+    /** The path, for the checklist and the report. Never a value. */
+    where(): string;
+    /**
+     * Which of the names are ALREADY there — and, for a store that must be
+     * unlocked, the act of unlocking it. Called once, before anything is asked.
+     */
+    present(): {
+        ok: true;
+        names: ReadonlySet<string>;
+    } | ({
+        ok: false;
+    } & FlowRefusal);
+    /** Store one value. Called once per name, in manifest order. */
+    write(name: string, value: string): {
+        ok: true;
+    } | ({
+        ok: false;
+    } & FlowRefusal);
+}
+/**
+ * The encrypted credential store (SPEC.md §10.4).
+ *
+ * `present()` is where the passphrase is proved. A vault that does not exist
+ * yet holds nothing and refuses nothing: the first `write` creates it, which is
+ * what `approval vault set` does too. A vault that DOES exist is opened here
+ * and nowhere later, so a wrong passphrase costs the operator one line of
+ * output rather than five typed values.
+ */
+export declare function vaultDestination(vaultPath: string, passphrase: string): FlowDestination;
+/**
+ * The `.approval/env` source map (SPEC.md §5.2).
+ *
+ * Unused by `setup adapter` — an adapter's credentials go to the vault, never
+ * to this file — and used by `setup channel telegram`, which is what a channel's
+ * two values are: a source for the token and a literal chat id, both of them
+ * things that unlock the machine rather than things an adapter spends.
+ *
+ * The value written is whatever the caller collected, which on this path is a
+ * SOURCE (`keychain:<service>`), an identity, or a chat id. Nothing here decides
+ * that; {@link upsertEnvFileEntries} preserves every other line and comment.
+ */
+export declare function envFileDestination(envPath: string): FlowDestination;
+/** The env file for a log path, re-exported so a caller needs one import. */
+export { envFilePathFor };
+/** How a destination talks about what it already holds. */
+export interface PlanPhrases {
+    /** `<name> already has a line in <path> (its value is not printed here).` */
+    present(name: string, where: string): string;
+    /** The confirm question. Defaults to no, like every other one in `setup`. */
+    replace(name: string): string;
+    /** The "left alone" report, or `null` when nothing was left alone. */
+    leftAlone(names: string[], where: string): string;
+}
+/**
+ * The two phrasings, kept as data.
+ *
+ * The env-file wording is BYTE-FOR-BYTE what `setup identity|vault|sampling|
+ * telegram` printed before this file existed, because those sentences are
+ * asserted on and, more to the point, an operator who has run `setup` before
+ * should not be told the same fact in new words for no reason.
+ */
+export declare const PLAN_PHRASES: Record<FlowDestination["kind"], PlanPhrases>;
+/**
+ * Which names to ask for, given which are already there.
+ *
+ * Asked BEFORE any work is done, and no previous VALUE is ever printed — not
+ * even one that is not a secret. A store may legitimately hold anything under
+ * any name, the operator put it there, and a verb that echoed "replacing
+ * smtp.user (you@example.net)?" would publish it into a terminal on their
+ * behalf.
+ */
+export declare function planWrites(streams: Streams, prompter: Prompter, present: ReadonlySet<string>, where: string, names: readonly string[], phrases: PlanPhrases): {
+    write: string[];
+    skipped: string[];
+};
+/** Report what was left alone, so a re-run's "no" is visible in the output. */
+export declare function reportLeftAlone(streams: Streams, where: string, skipped: readonly string[], phrases: PlanPhrases): void;
+/**
+ * A numbered picker over a closed list.
+ *
+ * Extracted from the Telegram chat picker, which is the same conversation over
+ * different nouns: print the options with an index and read a number. Both
+ * callers use this one (APRV-79).
+ *
+ * **An unparseable answer is asked again** (APRV-90). It used to be a refusal,
+ * on the argument that a wizard which loops on one question and not the others
+ * is unpredictable — the answer to which turned out to be that every question
+ * loops, not that none of them does. The options are printed once; only the
+ * question repeats, under one line saying which number was not on the list.
+ * `ok: false` now means the human withdrew (Ctrl-D) or ran out of attempts, and
+ * the message says which.
+ */
+export declare function pickOne<T>(streams: Streams, prompter: Prompter, options: {
+    heading: string;
+    items: readonly T[];
+    label(item: T): string;
+    prompt: string;
+    /** Index of the item an empty answer takes, or `null` for no default. */
+    defaultIndex: number | null;
+}): {
+    ok: true;
+    item: T;
+} | {
+    ok: false;
+    message: string;
+};
+/** What a verification attempt reports back. Never carries a value. */
+export interface VerifyOutcome {
+    /** Did the far end accept the stored configuration? */
+    ok: boolean;
+    /** The operator declined to verify. `ok` is ignored when this is true. */
+    declined?: boolean;
+    /** Lines to print, already redacted by whoever built them. */
+    detail: string;
+}
+/** What the flow has done by the time {@link FlowHooks.verify} is called. */
+export interface FlowProgress {
+    /** Names stored this run, in the order they landed. */
+    written: readonly string[];
+    /** Names the operator declined to replace, so this run never saw them. */
+    skipped: readonly string[];
+}
+/**
+ * What a {@link FlowHooks.collect} or {@link FlowHooks.discover} attempt did.
+ *
+ * `refused` carries an exit code and nothing else, because the hook has already
+ * printed its own sentences. A channel's refusals are specific to the far end
+ * it just talked to — an invalid bot token, a 409 from a running listener, no
+ * message reaching the bot after three attempts, each with its own repair and
+ * its own code from the frozen table — and a flow that re-derived them from a
+ * message string would be a second opinion about what went wrong.
+ */
+export type HookOutcome = {
+    kind: "value";
+    value: string;
+}
+/** Nothing to store for this spec. A required spec may not do this. */
+ | {
+    kind: "skip";
+} | {
+    kind: "refused";
+    code: number;
+};
+export interface FlowHooks {
+    /**
+     * Collect one value, overriding the built-in prompts.
+     *
+     * Async because a hook may need to prove what it collected before the flow
+     * writes anything: `setup channel telegram` calls `getMe` at the end of its
+     * token collection, so an invalid token refuses at step five and no line is
+     * ever written. Handed what has been collected so far, in manifest order.
+     */
+    collect?(spec: CredentialSpec, state: Readonly<Record<string, string>>): Promise<HookOutcome>;
+    /**
+     * The cross-field rule, run over everything collected, before any write.
+     * Returns the refusal sentence, or `null`. `kept` names the values already
+     * in the store that the operator declined to replace this run (APRV-98): the
+     * flow never reads a value back, so a rule that needs to know whether a
+     * kept name is PRESENT gets that from here rather than from `values`.
+     */
+    check?(values: Record<string, string>, kept: readonly string[]): string | null;
+    /**
+     * Prove the stored configuration against the far end. Runs after the write.
+     *
+     * It is handed what the run DID as well as what it collected, because
+     * "verify" and "verify what is in the store" are different questions on a
+     * re-run: a hook that only saw the values would probe a partial
+     * configuration and report a failure about a deployment that is fine. The
+     * flow will not read the store back to complete the picture, and neither
+     * should a hook — there is no verb in this CLI that reads a credential out.
+     */
+    verify?(values: Record<string, string>, progress: FlowProgress): Promise<VerifyOutcome>;
+    /**
+     * Ask the SERVICE what a value is, rather than asking the human to type it.
+     *
+     * Called for one spec at a time, and only when {@link FlowHooks.collect}
+     * skipped it (or there is no `collect` and the spec is optional and empty),
+     * so the two compose: a manifest can have some values typed and some
+     * discovered without the flow knowing which is which. It is handed what has
+     * been collected so far, because discovery generally needs it — Telegram's
+     * chat discovery cannot happen before the token it polls with.
+     *
+     * APRV-78 reserved this hook and called nothing; APRV-79 is the caller.
+     */
+    discover?(spec: CredentialSpec, state: Readonly<Record<string, string>>): Promise<HookOutcome>;
+}
+export interface FlowLabels {
+    /** The first line: what this verb is about to do. */
+    title: string;
+    /** The prerequisite sentence, printed under the title. */
+    prereq?: string;
+    /** Printed last, after the report. One line each. */
+    nextSteps?: readonly string[];
+}
+export interface FlowResult {
+    /** The exit code, from the frozen table. */
+    code: number;
+    /** Names actually stored, in the order they landed. */
+    written: string[];
+    /** Names the operator declined to replace. */
+    skipped: string[];
+    verified: "passed" | "failed" | "declined" | "not-attempted";
+}
+export interface CredentialFlow {
+    streams: Streams;
+    prompter: Prompter;
+    specs: readonly CredentialSpec[];
+    destination: FlowDestination;
+    labels: FlowLabels;
+    hooks?: FlowHooks;
+}
+/**
+ * Run one credential conversation, start to finish. Never throws.
+ *
+ * The caller has already done everything that is its own business: flags, the
+ * terminal check, the human-only gate, and resolving the passphrase out of the
+ * environment. What arrives here is a manifest and somewhere to put it.
+ */
+export declare function runCredentialFlow(flow: CredentialFlow): Promise<FlowResult>;