approval-md 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +63 -24
- package/SPEC.md +57 -11
- package/dist/src/channels/contract.d.ts +34 -1
- package/dist/src/channels/contract.js +200 -7
- package/dist/src/channels/contract.js.map +1 -1
- package/dist/src/channels/telegram.d.ts +123 -11
- package/dist/src/channels/telegram.js +218 -23
- package/dist/src/channels/telegram.js.map +1 -1
- package/dist/src/channels/web.d.ts +9 -0
- package/dist/src/channels/web.js +17 -0
- package/dist/src/channels/web.js.map +1 -1
- package/dist/src/cli/amend.js +214 -30
- package/dist/src/cli/amend.js.map +1 -1
- package/dist/src/cli/attest.d.ts +9 -0
- package/dist/src/cli/attest.js +134 -7
- package/dist/src/cli/attest.js.map +1 -1
- package/dist/src/cli/channel-telegram.d.ts +99 -26
- package/dist/src/cli/channel-telegram.js +311 -13
- package/dist/src/cli/channel-telegram.js.map +1 -1
- package/dist/src/cli/channel.d.ts +9 -0
- package/dist/src/cli/channel.js +9 -0
- package/dist/src/cli/channel.js.map +1 -1
- package/dist/src/cli/codex-bridge.d.ts +819 -0
- package/dist/src/cli/codex-bridge.js +1607 -0
- package/dist/src/cli/codex-bridge.js.map +1 -0
- package/dist/src/cli/codex.d.ts +1 -1
- package/dist/src/cli/codex.js +304 -7
- package/dist/src/cli/codex.js.map +1 -1
- package/dist/src/cli/daemon.js +4 -1
- package/dist/src/cli/daemon.js.map +1 -1
- package/dist/src/cli/doctor.js +467 -12
- package/dist/src/cli/doctor.js.map +1 -1
- package/dist/src/cli/execute.js +25 -2
- package/dist/src/cli/execute.js.map +1 -1
- package/dist/src/cli/help.d.ts +6 -2
- package/dist/src/cli/help.js +165 -60
- package/dist/src/cli/help.js.map +1 -1
- package/dist/src/cli/hook-codex.d.ts +49 -1
- package/dist/src/cli/hook-codex.js +60 -1
- package/dist/src/cli/hook-codex.js.map +1 -1
- package/dist/src/cli/hook.d.ts +459 -3
- package/dist/src/cli/hook.js +1062 -114
- package/dist/src/cli/hook.js.map +1 -1
- package/dist/src/cli/import.js +1 -1
- package/dist/src/cli/import.js.map +1 -1
- package/dist/src/cli/main.js +5 -3
- package/dist/src/cli/main.js.map +1 -1
- package/dist/src/cli/policy-apply.d.ts +195 -0
- package/dist/src/cli/policy-apply.js +573 -0
- package/dist/src/cli/policy-apply.js.map +1 -0
- package/dist/src/cli/policy.js +14 -1
- package/dist/src/cli/policy.js.map +1 -1
- package/dist/src/cli/preflight.d.ts +151 -13
- package/dist/src/cli/preflight.js +398 -41
- package/dist/src/cli/preflight.js.map +1 -1
- package/dist/src/cli/sandbox.js +17 -1
- package/dist/src/cli/sandbox.js.map +1 -1
- package/dist/src/cli/scaffold.d.ts +1 -1
- package/dist/src/cli/scaffold.js +1 -1
- package/dist/src/cli/setup-channel.d.ts +9 -0
- package/dist/src/cli/setup-channel.js +28 -1
- package/dist/src/cli/setup-channel.js.map +1 -1
- package/dist/src/cli/setup-common.d.ts +3 -1
- package/dist/src/cli/setup-common.js +3 -2
- package/dist/src/cli/setup-common.js.map +1 -1
- package/dist/src/cli/setup.d.ts +2 -0
- package/dist/src/cli/setup.js +94 -2
- package/dist/src/cli/setup.js.map +1 -1
- package/dist/src/cli/up.js +115 -51
- package/dist/src/cli/up.js.map +1 -1
- package/dist/src/cli/values.js +3 -4
- package/dist/src/cli/values.js.map +1 -1
- package/dist/src/cli/verb-registry.js +174 -9
- package/dist/src/cli/verb-registry.js.map +1 -1
- package/dist/src/cli/wordmark.d.ts +2 -2
- package/dist/src/cli/wordmark.js +2 -2
- package/dist/src/codex/broker.d.ts +229 -0
- package/dist/src/codex/broker.js +548 -0
- package/dist/src/codex/broker.js.map +1 -0
- package/dist/src/codex/runner.d.ts +178 -0
- package/dist/src/codex/runner.js +231 -0
- package/dist/src/codex/runner.js.map +1 -0
- package/dist/src/codex/serve.d.ts +56 -0
- package/dist/src/codex/serve.js +98 -0
- package/dist/src/codex/serve.js.map +1 -0
- package/dist/src/codex/workspace-commit.d.ts +219 -0
- package/dist/src/codex/workspace-commit.js +549 -0
- package/dist/src/codex/workspace-commit.js.map +1 -0
- package/dist/src/core/advance-cycle.d.ts +51 -0
- package/dist/src/core/advance-cycle.js +66 -2
- package/dist/src/core/advance-cycle.js.map +1 -1
- package/dist/src/core/agents-md.d.ts +20 -18
- package/dist/src/core/agents-md.js +33 -31
- package/dist/src/core/agents-md.js.map +1 -1
- package/dist/src/core/attest.d.ts +215 -0
- package/dist/src/core/attest.js +317 -7
- package/dist/src/core/attest.js.map +1 -1
- package/dist/src/core/audit.d.ts +18 -0
- package/dist/src/core/audit.js +13 -0
- package/dist/src/core/audit.js.map +1 -1
- package/dist/src/core/channel-owner.d.ts +213 -0
- package/dist/src/core/channel-owner.js +358 -0
- package/dist/src/core/channel-owner.js.map +1 -0
- package/dist/src/core/command-class.d.ts +154 -0
- package/dist/src/core/command-class.js +673 -20
- package/dist/src/core/command-class.js.map +1 -1
- package/dist/src/core/commit-guard.d.ts +272 -0
- package/dist/src/core/commit-guard.js +424 -0
- package/dist/src/core/commit-guard.js.map +1 -0
- package/dist/src/core/daemon-actor.d.ts +45 -0
- package/dist/src/core/daemon-actor.js +54 -0
- package/dist/src/core/daemon-actor.js.map +1 -0
- package/dist/src/core/dark-session.d.ts +109 -8
- package/dist/src/core/dark-session.js +266 -82
- package/dist/src/core/dark-session.js.map +1 -1
- package/dist/src/core/decision-refusal.d.ts +23 -2
- package/dist/src/core/decision-refusal.js +24 -2
- package/dist/src/core/decision-refusal.js.map +1 -1
- package/dist/src/core/env-file.d.ts +5 -0
- package/dist/src/core/env-file.js +60 -1
- package/dist/src/core/env-file.js.map +1 -1
- package/dist/src/core/execute.d.ts +15 -2
- package/dist/src/core/execute.js +15 -2
- package/dist/src/core/execute.js.map +1 -1
- package/dist/src/core/gate.d.ts +86 -1
- package/dist/src/core/gate.js +81 -1
- package/dist/src/core/gate.js.map +1 -1
- package/dist/src/core/gesture-refusal.d.ts +166 -0
- package/dist/src/core/gesture-refusal.js +188 -0
- package/dist/src/core/gesture-refusal.js.map +1 -0
- package/dist/src/core/harness-version.d.ts +1 -1
- package/dist/src/core/harness-version.js +3 -1
- package/dist/src/core/harness-version.js.map +1 -1
- package/dist/src/core/instance.d.ts +59 -2
- package/dist/src/core/instance.js +113 -0
- package/dist/src/core/instance.js.map +1 -1
- package/dist/src/core/log.d.ts +39 -1
- package/dist/src/core/log.js.map +1 -1
- package/dist/src/core/policy-explain.d.ts +10 -0
- package/dist/src/core/policy-explain.js +32 -0
- package/dist/src/core/policy-explain.js.map +1 -1
- package/dist/src/core/policy-load.d.ts +41 -1
- package/dist/src/core/policy-load.js +21 -3
- package/dist/src/core/policy-load.js.map +1 -1
- package/dist/src/core/policy-match.d.ts +43 -0
- package/dist/src/core/policy-match.js +52 -0
- package/dist/src/core/policy-match.js.map +1 -1
- package/dist/src/core/policy-proposal.d.ts +52 -0
- package/dist/src/core/policy-proposal.js +102 -2
- package/dist/src/core/policy-proposal.js.map +1 -1
- package/dist/src/core/protected-path-guard.d.ts +117 -4
- package/dist/src/core/protected-path-guard.js +362 -48
- package/dist/src/core/protected-path-guard.js.map +1 -1
- package/dist/src/core/question-preempted.d.ts +141 -0
- package/dist/src/core/question-preempted.js +152 -0
- package/dist/src/core/question-preempted.js.map +1 -0
- package/dist/src/core/read-scope.d.ts +172 -0
- package/dist/src/core/read-scope.js +252 -0
- package/dist/src/core/read-scope.js.map +1 -0
- package/dist/src/core/sandbox.d.ts +81 -0
- package/dist/src/core/sandbox.js +190 -1
- package/dist/src/core/sandbox.js.map +1 -1
- package/dist/src/core/sender-identity.d.ts +476 -0
- package/dist/src/core/sender-identity.js +572 -0
- package/dist/src/core/sender-identity.js.map +1 -0
- package/dist/src/core/shlex.d.ts +102 -0
- package/dist/src/core/shlex.js +159 -0
- package/dist/src/core/shlex.js.map +1 -0
- package/dist/src/core/values.d.ts +18 -8
- package/dist/src/core/values.js +36 -1
- package/dist/src/core/values.js.map +1 -1
- package/dist/src/daemon/advance.d.ts +10 -0
- package/dist/src/daemon/advance.js +25 -4
- package/dist/src/daemon/advance.js.map +1 -1
- package/dist/src/daemon/daemon.js +9 -0
- package/dist/src/daemon/daemon.js.map +1 -1
- package/dist/src/daemon/git-evidence.d.ts +2 -2
- package/dist/src/daemon/git-evidence.js +1 -1
- package/dist/src/mcp/server.js +8 -0
- package/dist/src/mcp/server.js.map +1 -1
- package/docs/cli-reference.md +932 -32
- package/docs/codex-enforced-session.md +75 -2
- package/docs/codex-workspace-broker.md +118 -0
- package/package.json +3 -1
- package/schema/event.schema.json +538 -9
- package/schema/fixtures/event/invalid/approval-granted-sender-hashed-false.json +20 -0
- package/schema/fixtures/event/invalid/approval-granted-sender-hashed-raw-id.json +20 -0
- package/schema/fixtures/event/invalid/audit-gesture-refused-human-actor.json +16 -0
- package/schema/fixtures/event/invalid/audit-gesture-refused-no-actor-no-sender.json +15 -0
- package/schema/fixtures/event/invalid/audit-gesture-refused-unknown-gesture.json +16 -0
- package/schema/fixtures/event/invalid/audit-question-preempted-agent-actor.json +16 -0
- package/schema/fixtures/event/invalid/audit-question-preempted-no-question-id.json +16 -0
- package/schema/fixtures/event/invalid/audit-question-preempted-unknown-source.json +15 -0
- package/schema/fixtures/event/invalid/gate-path-signed-off-absolute-path.json +14 -0
- package/schema/fixtures/event/invalid/gate-path-signed-off-agent-actor.json +14 -0
- package/schema/fixtures/event/invalid/gate-path-signed-off-missing-path.json +13 -0
- package/schema/fixtures/event/valid/approval-granted-sender-hashed.json +20 -0
- package/schema/fixtures/event/valid/audit-gesture-refused-review-note.json +21 -0
- package/schema/fixtures/event/valid/audit-gesture-refused-sender-key-unavailable.json +19 -0
- package/schema/fixtures/event/valid/audit-gesture-refused.json +19 -0
- package/schema/fixtures/event/valid/audit-question-preempted-no-verdict.json +16 -0
- package/schema/fixtures/event/valid/audit-question-preempted.json +20 -0
- package/schema/fixtures/event/valid/gate-path-signed-off.json +14 -0
- package/schema/fixtures/event/valid/harness-kind-claude-code.json +23 -0
- package/schema/fixtures/event/valid/harness-kind-codex.json +23 -0
- package/schema/fixtures/event/valid/harness-kind-cursor.json +23 -0
- package/schema/fixtures/event/valid/harness-kind-grok.json +23 -0
- package/schema/fixtures/event/valid/harness-kind-muse.json +23 -0
- package/schema/fixtures/policy/invalid/senders-half-keyed.json +20 -0
- package/schema/fixtures/policy/valid/canonical.json +1 -1
- package/schema/fixtures/policy/valid/senders-keyed.json +24 -0
- package/schema/fixtures/policy-md/valid/canonical.md +1 -1
- package/schema/fixtures/policy-md/valid/with-values.md +5 -7
- package/schema/fixtures/values/invalid/class-shaped.json +1 -1
- package/schema/fixtures/values/invalid/duplicate-entry.json +1 -1
- package/schema/fixtures/values/invalid/non-string-item.json +1 -1
- package/schema/fixtures/values/invalid/over-cap.json +1 -1
- package/schema/fixtures/values/invalid/unknown-key.json +1 -1
- package/schema/fixtures/values/invalid/version-float.json +1 -0
- package/schema/fixtures/values/invalid/version-integer.json +1 -0
- package/schema/fixtures/values/invalid/version-wrong-string.json +1 -0
- package/schema/fixtures/values/valid/empty-lists.json +2 -3
- package/schema/fixtures/values/valid/full.json +5 -7
- package/schema/fixtures/values/valid/minimal.json +1 -1
- package/schema/fixtures/values-md/invalid/schema-invalid.md +5 -3
- package/schema/fixtures/values-md/invalid/two-blocks.md +3 -3
- package/schema/fixtures/values-md/invalid/unterminated.md +2 -2
- package/schema/fixtures/values-md/invalid/version-1.md +69 -0
- package/schema/fixtures/values-md/invalid/version-unquoted.md +64 -0
- package/schema/fixtures/values-md/invalid/yaml-error.md +2 -2
- package/schema/fixtures/values-md/valid/absent.md +1 -1
- package/schema/fixtures/values-md/valid/with-values.md +5 -7
- package/schema/policy.schema.json +54 -2
- package/schema/values.schema.json +7 -11
- package/schema/fixtures/values/invalid/version-string.json +0 -1
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 94,
|
|
3
|
+
"ts": "2026-09-19T21:20:03Z",
|
|
4
|
+
"event": "approval.granted",
|
|
5
|
+
"task": "task-370",
|
|
6
|
+
"action_key": "task-370:chaser:2026-09-19",
|
|
7
|
+
"actor": "human:carter",
|
|
8
|
+
"channel": "telegram",
|
|
9
|
+
"payload": {
|
|
10
|
+
"sender": {
|
|
11
|
+
"channel": "telegram",
|
|
12
|
+
"id": "5551234567",
|
|
13
|
+
"hashed": false
|
|
14
|
+
},
|
|
15
|
+
"sender_source": "policy"
|
|
16
|
+
},
|
|
17
|
+
"alg": "sha256/jcs",
|
|
18
|
+
"prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
|
|
19
|
+
"hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
|
|
20
|
+
}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 93,
|
|
3
|
+
"ts": "2026-09-19T21:18:55Z",
|
|
4
|
+
"event": "approval.granted",
|
|
5
|
+
"task": "task-370",
|
|
6
|
+
"action_key": "task-370:chaser:2026-09-19",
|
|
7
|
+
"actor": "human:carter",
|
|
8
|
+
"channel": "telegram",
|
|
9
|
+
"payload": {
|
|
10
|
+
"sender": {
|
|
11
|
+
"channel": "telegram",
|
|
12
|
+
"id": "5551234567",
|
|
13
|
+
"hashed": true
|
|
14
|
+
},
|
|
15
|
+
"sender_source": "policy"
|
|
16
|
+
},
|
|
17
|
+
"alg": "sha256/jcs",
|
|
18
|
+
"prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
|
|
19
|
+
"hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
|
|
20
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 74,
|
|
3
|
+
"ts": "2026-09-17T19:02:11Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "human:carter",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"actor": "human:carter",
|
|
9
|
+
"gesture": "checkpoint-signature",
|
|
10
|
+
"code": "sender-unmapped",
|
|
11
|
+
"message": "a record of a refusal authored by either party to it is a record neither party can be held to"
|
|
12
|
+
},
|
|
13
|
+
"alg": "sha256/jcs",
|
|
14
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
15
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
16
|
+
}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 74,
|
|
3
|
+
"ts": "2026-09-17T19:02:11Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"gesture": "review",
|
|
9
|
+
"code": "sender-unmapped",
|
|
10
|
+
"message": "a record naming neither the person nor the account it could not name says nothing about who spent the attention"
|
|
11
|
+
},
|
|
12
|
+
"alg": "sha256/jcs",
|
|
13
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
14
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
15
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 74,
|
|
3
|
+
"ts": "2026-09-17T19:02:11Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"actor": "human:carter",
|
|
9
|
+
"gesture": "policy-attestation",
|
|
10
|
+
"code": "sender-unmapped",
|
|
11
|
+
"message": "an attestation tap is a decision and is recorded as one; the gesture vocabulary is closed"
|
|
12
|
+
},
|
|
13
|
+
"alg": "sha256/jcs",
|
|
14
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
15
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
16
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 91,
|
|
3
|
+
"ts": "2026-09-19T16:20:44Z",
|
|
4
|
+
"event": "audit.question_preempted",
|
|
5
|
+
"actor": "agent:codex",
|
|
6
|
+
"payload": {
|
|
7
|
+
"source": "codex-auto-reviewer",
|
|
8
|
+
"question": {
|
|
9
|
+
"id": "item_01H9"
|
|
10
|
+
},
|
|
11
|
+
"detail": "a record of an event authored by either party to it is a record neither party can be held to"
|
|
12
|
+
},
|
|
13
|
+
"alg": "sha256/jcs",
|
|
14
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
15
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
16
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 91,
|
|
3
|
+
"ts": "2026-09-19T16:20:44Z",
|
|
4
|
+
"event": "audit.question_preempted",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"payload": {
|
|
7
|
+
"source": "codex-auto-reviewer",
|
|
8
|
+
"question": {
|
|
9
|
+
"method": "item/autoApprovalReview/completed"
|
|
10
|
+
},
|
|
11
|
+
"verdict": "approve"
|
|
12
|
+
},
|
|
13
|
+
"alg": "sha256/jcs",
|
|
14
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
15
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
16
|
+
}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 91,
|
|
3
|
+
"ts": "2026-09-19T16:20:44Z",
|
|
4
|
+
"event": "audit.question_preempted",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"payload": {
|
|
7
|
+
"source": "some-other-reviewer",
|
|
8
|
+
"question": {
|
|
9
|
+
"id": "item_01H9"
|
|
10
|
+
}
|
|
11
|
+
},
|
|
12
|
+
"alg": "sha256/jcs",
|
|
13
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
14
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
15
|
+
}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 61,
|
|
3
|
+
"ts": "2026-09-16T11:42:19Z",
|
|
4
|
+
"event": "gate.path.signed_off",
|
|
5
|
+
"actor": "human:carter",
|
|
6
|
+
"channel": "cli",
|
|
7
|
+
"payload": {
|
|
8
|
+
"path": "/Users/carter/dev/approval-md/SPEC.md",
|
|
9
|
+
"sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
|
|
10
|
+
},
|
|
11
|
+
"alg": "sha256/jcs",
|
|
12
|
+
"prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
|
|
13
|
+
"hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
|
|
14
|
+
}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 61,
|
|
3
|
+
"ts": "2026-09-16T11:42:19Z",
|
|
4
|
+
"event": "gate.path.signed_off",
|
|
5
|
+
"actor": "agent:claude-code",
|
|
6
|
+
"channel": "cli",
|
|
7
|
+
"payload": {
|
|
8
|
+
"path": "SPEC.md",
|
|
9
|
+
"sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
|
|
10
|
+
},
|
|
11
|
+
"alg": "sha256/jcs",
|
|
12
|
+
"prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
|
|
13
|
+
"hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
|
|
14
|
+
}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 61,
|
|
3
|
+
"ts": "2026-09-16T11:42:19Z",
|
|
4
|
+
"event": "gate.path.signed_off",
|
|
5
|
+
"actor": "human:carter",
|
|
6
|
+
"channel": "cli",
|
|
7
|
+
"payload": {
|
|
8
|
+
"sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
|
|
9
|
+
},
|
|
10
|
+
"alg": "sha256/jcs",
|
|
11
|
+
"prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
|
|
12
|
+
"hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
|
|
13
|
+
}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 91,
|
|
3
|
+
"ts": "2026-09-19T21:14:08Z",
|
|
4
|
+
"event": "approval.granted",
|
|
5
|
+
"task": "task-370",
|
|
6
|
+
"action_key": "task-370:chaser:2026-09-19",
|
|
7
|
+
"actor": "human:carter",
|
|
8
|
+
"channel": "telegram",
|
|
9
|
+
"payload": {
|
|
10
|
+
"sender": {
|
|
11
|
+
"channel": "telegram",
|
|
12
|
+
"id": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a",
|
|
13
|
+
"hashed": true
|
|
14
|
+
},
|
|
15
|
+
"sender_source": "policy"
|
|
16
|
+
},
|
|
17
|
+
"alg": "sha256/jcs",
|
|
18
|
+
"prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
|
|
19
|
+
"hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
|
|
20
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 75,
|
|
3
|
+
"ts": "2026-09-17T19:04:38Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"actor": "human:carter",
|
|
9
|
+
"gesture": "review-note",
|
|
10
|
+
"code": "policy-not-attested",
|
|
11
|
+
"sender": {
|
|
12
|
+
"channel": "telegram",
|
|
13
|
+
"id": "5559876543"
|
|
14
|
+
},
|
|
15
|
+
"sender_source": "policy",
|
|
16
|
+
"message": "the policy file has changed since it was attested at seq 44607; the sender mapping it declares is not in force, so nothing was recorded"
|
|
17
|
+
},
|
|
18
|
+
"alg": "sha256/jcs",
|
|
19
|
+
"prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
|
|
20
|
+
"hash": "8b40e27c5f1a936d04e8b2c6a1d3f5079e2b4c6d8a0f2e4160a8c2e406283bda"
|
|
21
|
+
}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 92,
|
|
3
|
+
"ts": "2026-09-19T21:16:40Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"gesture": "checkpoint-signature",
|
|
9
|
+
"code": "sender-key-unavailable",
|
|
10
|
+
"sender": {
|
|
11
|
+
"channel": "telegram",
|
|
12
|
+
"id": "5551234567"
|
|
13
|
+
},
|
|
14
|
+
"message": "the attested policy maps telegram senders in the keyed form and APPROVAL_SENDER_KEY is unset or empty in this process, so no account on this channel can be resolved and nothing was signed"
|
|
15
|
+
},
|
|
16
|
+
"alg": "sha256/jcs",
|
|
17
|
+
"prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
|
|
18
|
+
"hash": "9d4f1b73e0a6c58217f3b9d0e6a4c2815f7b3d9e1a0c6f48273b5d9e0a6c4f81"
|
|
19
|
+
}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 74,
|
|
3
|
+
"ts": "2026-09-17T19:02:11Z",
|
|
4
|
+
"event": "audit.gesture_refused",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"channel": "telegram",
|
|
7
|
+
"payload": {
|
|
8
|
+
"gesture": "checkpoint-signature",
|
|
9
|
+
"code": "sender-unmapped",
|
|
10
|
+
"sender": {
|
|
11
|
+
"channel": "telegram",
|
|
12
|
+
"id": "5551234567"
|
|
13
|
+
},
|
|
14
|
+
"message": "the attested policy maps no approver to telegram sender 5551234567, so this checkpoint was not signed and nothing was appended to the chain"
|
|
15
|
+
},
|
|
16
|
+
"alg": "sha256/jcs",
|
|
17
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
18
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
19
|
+
}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 92,
|
|
3
|
+
"ts": "2026-09-19T16:20:45Z",
|
|
4
|
+
"event": "audit.question_preempted",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"payload": {
|
|
7
|
+
"source": "codex-auto-reviewer",
|
|
8
|
+
"question": {
|
|
9
|
+
"id": "item_01HA",
|
|
10
|
+
"method": "item/autoApprovalReview/started"
|
|
11
|
+
}
|
|
12
|
+
},
|
|
13
|
+
"alg": "sha256/jcs",
|
|
14
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
15
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
16
|
+
}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 91,
|
|
3
|
+
"ts": "2026-09-19T16:20:44Z",
|
|
4
|
+
"event": "audit.question_preempted",
|
|
5
|
+
"actor": "system:gate",
|
|
6
|
+
"payload": {
|
|
7
|
+
"source": "codex-auto-reviewer",
|
|
8
|
+
"question": {
|
|
9
|
+
"id": "item_01H9",
|
|
10
|
+
"method": "item/autoApprovalReview/completed",
|
|
11
|
+
"thread": "thread_7f2",
|
|
12
|
+
"turn": "turn_3"
|
|
13
|
+
},
|
|
14
|
+
"verdict": "approve",
|
|
15
|
+
"detail": "approval codex bridge stopped the session under bridge-auto-reviewer-active"
|
|
16
|
+
},
|
|
17
|
+
"alg": "sha256/jcs",
|
|
18
|
+
"prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
|
|
19
|
+
"hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
|
|
20
|
+
}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 61,
|
|
3
|
+
"ts": "2026-09-16T11:42:19Z",
|
|
4
|
+
"event": "gate.path.signed_off",
|
|
5
|
+
"actor": "human:carter",
|
|
6
|
+
"channel": "cli",
|
|
7
|
+
"payload": {
|
|
8
|
+
"path": "SPEC.md",
|
|
9
|
+
"sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
|
|
10
|
+
},
|
|
11
|
+
"alg": "sha256/jcs",
|
|
12
|
+
"prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
|
|
13
|
+
"hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
|
|
14
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 51,
|
|
3
|
+
"ts": "2026-09-19T08:14:02Z",
|
|
4
|
+
"event": "task.registered",
|
|
5
|
+
"task": "hook:claude-sess-1:toolu-11",
|
|
6
|
+
"actor": "agent:claude-code",
|
|
7
|
+
"payload": {
|
|
8
|
+
"state": "proposed",
|
|
9
|
+
"actions": [
|
|
10
|
+
{
|
|
11
|
+
"class": "deps.add",
|
|
12
|
+
"summary": "npm install --save-dev oxlint",
|
|
13
|
+
"idempotency_key": "hook:claude-sess-1:toolu-11:deps.add",
|
|
14
|
+
"payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"harness": "claude-code",
|
|
18
|
+
"harness_version": "2.0.14 (Claude Code)"
|
|
19
|
+
},
|
|
20
|
+
"alg": "sha256/jcs",
|
|
21
|
+
"prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
|
|
22
|
+
"hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 53,
|
|
3
|
+
"ts": "2026-09-19T08:16:27Z",
|
|
4
|
+
"event": "task.registered",
|
|
5
|
+
"task": "hook:codex-sess-1:toolu-13",
|
|
6
|
+
"actor": "agent:codex",
|
|
7
|
+
"payload": {
|
|
8
|
+
"state": "proposed",
|
|
9
|
+
"actions": [
|
|
10
|
+
{
|
|
11
|
+
"class": "deps.add",
|
|
12
|
+
"summary": "npm install --save-dev oxlint",
|
|
13
|
+
"idempotency_key": "hook:codex-sess-1:toolu-13:deps.add",
|
|
14
|
+
"payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"harness": "codex",
|
|
18
|
+
"harness_version": "codex-cli 0.155.0"
|
|
19
|
+
},
|
|
20
|
+
"alg": "sha256/jcs",
|
|
21
|
+
"prev": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7",
|
|
22
|
+
"hash": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846"
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 52,
|
|
3
|
+
"ts": "2026-09-19T08:15:11Z",
|
|
4
|
+
"event": "task.registered",
|
|
5
|
+
"task": "hook:cursor-sess-1:toolu-12",
|
|
6
|
+
"actor": "agent:cursor",
|
|
7
|
+
"payload": {
|
|
8
|
+
"state": "proposed",
|
|
9
|
+
"actions": [
|
|
10
|
+
{
|
|
11
|
+
"class": "deps.add",
|
|
12
|
+
"summary": "npm install --save-dev oxlint",
|
|
13
|
+
"idempotency_key": "hook:cursor-sess-1:toolu-12:deps.add",
|
|
14
|
+
"payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"harness": "cursor",
|
|
18
|
+
"harness_version": "cursor-agent 2026.08.19"
|
|
19
|
+
},
|
|
20
|
+
"alg": "sha256/jcs",
|
|
21
|
+
"prev": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f",
|
|
22
|
+
"hash": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7"
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 54,
|
|
3
|
+
"ts": "2026-09-19T08:17:44Z",
|
|
4
|
+
"event": "task.registered",
|
|
5
|
+
"task": "hook:grok-sess-1:toolu-14",
|
|
6
|
+
"actor": "agent:grok",
|
|
7
|
+
"payload": {
|
|
8
|
+
"state": "proposed",
|
|
9
|
+
"actions": [
|
|
10
|
+
{
|
|
11
|
+
"class": "deps.add",
|
|
12
|
+
"summary": "npm install --save-dev oxlint",
|
|
13
|
+
"idempotency_key": "hook:grok-sess-1:toolu-14:deps.add",
|
|
14
|
+
"payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"harness": "grok",
|
|
18
|
+
"harness_version": "grok 0.4.2"
|
|
19
|
+
},
|
|
20
|
+
"alg": "sha256/jcs",
|
|
21
|
+
"prev": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846",
|
|
22
|
+
"hash": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a"
|
|
23
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"seq": 55,
|
|
3
|
+
"ts": "2026-09-19T08:18:59Z",
|
|
4
|
+
"event": "task.registered",
|
|
5
|
+
"task": "hook:muse-sess-1:toolu-15",
|
|
6
|
+
"actor": "agent:muse",
|
|
7
|
+
"payload": {
|
|
8
|
+
"state": "proposed",
|
|
9
|
+
"actions": [
|
|
10
|
+
{
|
|
11
|
+
"class": "deps.add",
|
|
12
|
+
"summary": "npm install --save-dev oxlint",
|
|
13
|
+
"idempotency_key": "hook:muse-sess-1:toolu-15:deps.add",
|
|
14
|
+
"payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
|
|
15
|
+
}
|
|
16
|
+
],
|
|
17
|
+
"harness": "muse",
|
|
18
|
+
"harness_version": "muse-bin-1.3.0-R3233.1"
|
|
19
|
+
},
|
|
20
|
+
"alg": "sha256/jcs",
|
|
21
|
+
"prev": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a",
|
|
22
|
+
"hash": "7d925ec380b14fa6c05e971b3d4287ac6fb015e93c2a480df6b1e7c05a83942f"
|
|
23
|
+
}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
{
|
|
2
|
+
"version": "0.1",
|
|
3
|
+
"defaults": {
|
|
4
|
+
"autonomy": "manual",
|
|
5
|
+
"channel": "telegram",
|
|
6
|
+
"approval_ttl": "30m",
|
|
7
|
+
"on_expiry": "reject"
|
|
8
|
+
},
|
|
9
|
+
"approvers": {
|
|
10
|
+
"carter": {
|
|
11
|
+
"channels": ["telegram"],
|
|
12
|
+
"senders": {
|
|
13
|
+
"telegram": "sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
},
|
|
17
|
+
"classes": {
|
|
18
|
+
"communicate.email.external": { "autonomy": "manual" }
|
|
19
|
+
}
|
|
20
|
+
}
|
|
@@ -14,7 +14,7 @@
|
|
|
14
14
|
"classes": {
|
|
15
15
|
"read.*": { "autonomy": "autonomous" },
|
|
16
16
|
"files.write.workspace": { "autonomy": "autonomous" },
|
|
17
|
-
"calendar.write.own": { "autonomy": "supervised" },
|
|
17
|
+
"calendar.write.own": { "autonomy": "supervised-retro" },
|
|
18
18
|
"communicate.email.draft": { "autonomy": "autonomous" },
|
|
19
19
|
"communicate.email.external": {
|
|
20
20
|
"autonomy": "manual",
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
{
|
|
2
|
+
"version": "0.1",
|
|
3
|
+
"defaults": {
|
|
4
|
+
"autonomy": "manual",
|
|
5
|
+
"channel": "telegram",
|
|
6
|
+
"approval_ttl": "30m",
|
|
7
|
+
"on_expiry": "reject"
|
|
8
|
+
},
|
|
9
|
+
"approvers": {
|
|
10
|
+
"carter": {
|
|
11
|
+
"channels": ["telegram", "cli"],
|
|
12
|
+
"senders": {
|
|
13
|
+
"telegram": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
|
|
14
|
+
}
|
|
15
|
+
},
|
|
16
|
+
"dana": {
|
|
17
|
+
"channels": ["telegram"],
|
|
18
|
+
"senders": { "telegram": "5551234567" }
|
|
19
|
+
}
|
|
20
|
+
},
|
|
21
|
+
"classes": {
|
|
22
|
+
"communicate.email.external": { "autonomy": "manual" }
|
|
23
|
+
}
|
|
24
|
+
}
|
|
@@ -19,7 +19,7 @@ approvers:
|
|
|
19
19
|
classes:
|
|
20
20
|
read.*: { autonomy: autonomous }
|
|
21
21
|
files.write.workspace: { autonomy: autonomous }
|
|
22
|
-
calendar.write.own: { autonomy: supervised }
|
|
22
|
+
calendar.write.own: { autonomy: supervised-retro }
|
|
23
23
|
communicate.email.draft: { autonomy: autonomous }
|
|
24
24
|
communicate.email.external:
|
|
25
25
|
autonomy: manual
|
|
@@ -19,7 +19,7 @@ approvers:
|
|
|
19
19
|
classes:
|
|
20
20
|
read.*: { autonomy: autonomous }
|
|
21
21
|
files.write.workspace: { autonomy: autonomous }
|
|
22
|
-
calendar.write.own: { autonomy: supervised }
|
|
22
|
+
calendar.write.own: { autonomy: supervised-retro }
|
|
23
23
|
communicate.email.draft: { autonomy: autonomous }
|
|
24
24
|
communicate.email.external:
|
|
25
25
|
autonomy: manual
|
|
@@ -55,7 +55,7 @@ The block below is guidance, never policy. Nothing in it grants anything, and
|
|
|
55
55
|
no part of the runtime reads it to decide.
|
|
56
56
|
|
|
57
57
|
```yaml approval-values
|
|
58
|
-
version:
|
|
58
|
+
version: "0.2"
|
|
59
59
|
|
|
60
60
|
love:
|
|
61
61
|
- seeing the real change, not a description of it
|
|
@@ -64,16 +64,14 @@ love:
|
|
|
64
64
|
like:
|
|
65
65
|
- success reported first, caveats after
|
|
66
66
|
- small reviewable commits
|
|
67
|
+
- honest opinions on the work, including when you think a task is wrong
|
|
68
|
+
- a journal entry of about five points per milestone
|
|
67
69
|
|
|
68
70
|
dislike:
|
|
69
71
|
- prose where a command would do
|
|
70
72
|
- being asked to approve something I cannot see
|
|
71
73
|
|
|
72
|
-
|
|
73
|
-
- honest opinions on the work, including when you think a task is wrong
|
|
74
|
-
- a journal entry of about five points per milestone
|
|
75
|
-
|
|
76
|
-
responds: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
|
|
74
|
+
communication: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
|
|
77
75
|
```
|
|
78
76
|
|
|
79
77
|
Prose again after the block, ignored by both readers.
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{ "version": 0.2 }
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{ "version": 1 }
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{ "version": "0.1" }
|
|
@@ -1,20 +1,18 @@
|
|
|
1
1
|
{
|
|
2
|
-
"version":
|
|
2
|
+
"version": "0.2",
|
|
3
3
|
"love": [
|
|
4
4
|
"seeing the real change, not a description of it",
|
|
5
5
|
"a runbook I can paste into a terminal"
|
|
6
6
|
],
|
|
7
7
|
"like": [
|
|
8
8
|
"success reported first, caveats after",
|
|
9
|
-
"small reviewable commits"
|
|
9
|
+
"small reviewable commits",
|
|
10
|
+
"honest opinions on the work, including when you think a task is wrong",
|
|
11
|
+
"a journal entry of about five points per milestone"
|
|
10
12
|
],
|
|
11
13
|
"dislike": [
|
|
12
14
|
"prose where a command would do",
|
|
13
15
|
"being asked to approve something I cannot see"
|
|
14
16
|
],
|
|
15
|
-
"
|
|
16
|
-
"honest opinions on the work, including when you think a task is wrong",
|
|
17
|
-
"a journal entry of about five points per milestone"
|
|
18
|
-
],
|
|
19
|
-
"responds": "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
|
|
17
|
+
"communication": "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
|
|
20
18
|
}
|