approval-md 0.2.0 → 0.4.0

package/dist/src/cli/attest.js

@@ -35,14 +35,24 @@
  * above hold there too — bytes not parse, declared identity, an agent actor
  * refused at exit 2 — and two refusals are added, both usage errors, for a path
  * that is the policy file and for a path that is not an organ at all.
+ *
+ * **`--path <path>` signs off an ordinary PROTECTED path (APRV-338)**, and
+ * appends a third event (`gate.path.signed_off`) for a third reason: SPEC.md's
+ * amendment-provenance rule says text that reached a protected file without a
+ * grant is pending until a human ratifies it, and nothing recorded the
+ * ratification. This is that record. It is whole-file evidence and therefore
+ * weaker than the hunk a grant binds, which is why the protected-path guard
+ * reads it only after its grant search has failed; the verb's own job is
+ * simply to refuse every path that is not a `policy.edit` surface.
  */
 import { accessSync, constants, statSync } from "node:fs";
 import { isAbsolute, join, relative, resolve as resolvePathSegments } from "node:path";
-import { HUMAN_ACTOR_ENV, appendAttestation, appendOrganAttestation, resolveHumanActor, } from "../core/attest.js";
-import { normalizePathSpelling } from "../core/command-class.js";
-import { POLICY_FILENAMES } from "../core/policy-load.js";
+import { appendBootstrapAttestation } from "../core/attest-bootstrap.js";
+import { HUMAN_ACTOR_ENV, appendAttestation, appendOrganAttestation, appendPathSignOff, resolveHumanActor, } from "../core/attest.js";
+import { normalizePathSpelling, } from "../core/command-class.js";
+import { POLICY_FILENAMES, loadPolicy } from "../core/policy-load.js";
 import { boolFlag, parseFlags, stringFlag } from "./args.js";
-import { EXIT_IO, EXIT_OK, EXIT_TORN_TAIL, EXIT_USAGE } from "./exit-codes.js";
+import { EXIT_INTEGRITY, EXIT_IO, EXIT_OK, EXIT_TORN_TAIL, EXIT_USAGE, } from "./exit-codes.js";
 import { POLICY_ATTEST_HELP } from "./help.js";
 import { DEFAULT_LOG_PATH, resolvePath } from "./paths.js";
 import { usageErrorText } from "./usage.js";
@@ -50,8 +60,10 @@ const FLAGS = {
     "--policy": "string",
     "--dir": "string",
     "--organ": "string",
+    "--path": "string",
     "--as": "string",
     "--log": "string",
+    "--bootstrap": "boolean",
     "--json": "boolean",
     "--help": "boolean",
     "-h": "boolean",
@@ -62,8 +74,14 @@ function detail(cause) {
 function absolute(value, cwd) {
     return isAbsolute(value) ? value : resolvePathSegments(cwd, value);
 }
-/** Relativize an organ path against the root whose bytes it names. */
-function organRelativePath(value, root) {
+/**
+ * Relativize a flag's path against the root whose bytes it names.
+ *
+ * Shared by `--organ` and `--path` (APRV-338) because the rule is one rule: the
+ * record names a path a reader on another machine resolves against their own
+ * checkout, so it must sit under the checkout the record was written in.
+ */
+function flagRelativePath(flag, value, root, what) {
     // An absolute path is accepted and reduced, because a human tab-completing a
     // path at a terminal produces one and refusing it would be pedantry. What is
     // NOT accepted is one that leaves the root: the record names a path a reader
@@ -74,7 +92,7 @@ function organRelativePath(value, root) {
     if (normalized.length === 0 || normalized.split("/").includes("..")) {
         return {
             ok: false,
-            message: `--organ ${JSON.stringify(value)} does not name a path inside ${root}; an organ attestation records a repository-relative path, so it must sit under the checkout it is attested in (pass --dir to name a different one)`,
+            message: `${flag} ${JSON.stringify(value)} does not name a path inside ${root}; ${what} records a repository-relative path, so it must sit under the checkout it is written in (pass --dir to name a different one)`,
         };
     }
     return { ok: true, path: normalized };
@@ -178,7 +196,7 @@ function attestOrgan(organFlag, run) {
     if (run.policyFlag !== null) {
         return usageError(streams, json, "--policy and --organ name two different files to hash; pass one of them (the policy file is attested by `approval policy attest` with no --organ)");
     }
-    const resolved = organRelativePath(organFlag, run.dir);
+    const resolved = flagRelativePath("--organ", organFlag, run.dir, "an organ attestation");
     if (!resolved.ok)
         return usageError(streams, json, resolved.message);
     // The file is NOT stat'd here: `core/attest.ts` decides the path rules before
@@ -228,6 +246,102 @@ function attestOrgan(organFlag, run) {
             return EXIT_IO;
     }
 }
+/**
+ * `policy.protected_paths` as the live policy declares it, or `[]`.
+ *
+ * Loaded so a project that widened its own protected surface can sign off the
+ * files it added: without it `--path design/decisions.md` would refuse in a
+ * repository whose policy protects `design/`. A policy that will not load
+ * yields `[]`, which is the BUILT-IN set alone and therefore the narrower
+ * answer — the fail-closed direction for a verb whose list decides what may be
+ * signed, and the same direction `classifyCommand` takes when the list is
+ * omitted.
+ */
+function policyProtectedPaths(policyFlag, dir, cwd) {
+    const load = loadPolicy(policyFlag === null ? { dir } : { file: absolute(policyFlag, cwd) });
+    return load.ok ? (load.policy.protected_paths ?? []) : [];
+}
+/**
+ * `approval policy attest --path <path>` (APRV-338) — the human route for
+ * ratifying a protected file's current bytes.
+ *
+ * One path per call, for the reason `--organ` takes one: the checker's question
+ * is always about one path, and a set attested in one record would have to be
+ * unpicked by whoever asks "what did I sign off".
+ *
+ * `--organ` alongside `--path` is a usage error rather than a precedence
+ * puzzle. The two flags name two different records about two different kinds of
+ * surface, and a caller who passed both has not decided which claim they are
+ * making. `--policy` alongside either is refused for the same reason it is
+ * refused beside `--organ`.
+ *
+ * Everything that decides is in `core/attest.ts`: the human-actor rule, the
+ * three path refusals, and the digest. This function resolves a path, loads the
+ * policy's protected list, picks an exit code, and prints.
+ */
+function signOffPath(pathFlag, run) {
+    const { streams, json } = run;
+    if (run.organFlag !== null) {
+        return usageError(streams, json, "--organ and --path name two different records about two different surfaces; pass one of them (an organ is policy.core and has no grant available to it, an ordinary protected path does)");
+    }
+    if (run.policyFlag !== null) {
+        return usageError(streams, json, "--policy and --path name two different files to hash; pass one of them (the policy file is attested by `approval policy attest` with no --path)");
+    }
+    const resolved = flagRelativePath("--path", pathFlag, run.dir, "a sign-off");
+    if (!resolved.ok)
+        return usageError(streams, json, resolved.message);
+    // Not stat'd here, for the reason the organ route is not: `core/attest.ts`
+    // decides every path rule before it reads anything, so `--path src/core/gate.ts`
+    // is a usage error whether or not it exists, and an absent protected file
+    // comes back as that module's `io` refusal with the path and the root named.
+    const onDisk = join(run.dir, resolved.path);
+    // No timestamp is passed: `gate.path.signed_off` carries the `gate.` prefix,
+    // so amended SPEC.md §8 (A2) has core stamp it at the write boundary.
+    const result = appendPathSignOff(run.logPath, {
+        path: resolved.path,
+        root: run.dir,
+        protectedPaths: policyProtectedPaths(run.policyFlag, run.dir, run.cwd),
+    }, run.actor);
+    if (result.ok) {
+        const sha256 = result.record.payload["sha256"];
+        if (json) {
+            streams.out(`${JSON.stringify({
+                ok: true,
+                seq: result.record.seq,
+                sha256,
+                path: onDisk,
+                signed_path: resolved.path,
+            })}\n`);
+        }
+        else {
+            streams.out(`signed off ${resolved.path} at seq ${result.record.seq}: sha256 ${sha256}\n`);
+        }
+        return EXIT_OK;
+    }
+    if (json) {
+        streams.err(`${JSON.stringify({ ok: false, error: { code: result.error.code, message: result.error.message } })}\n`);
+    }
+    else {
+        streams.err(`approval: ${result.error.message}\n`);
+    }
+    switch (result.error.code) {
+        // A path this verb will not sign off, and an actor who may not sign one,
+        // are both bad invocations: the caller has to change what they typed, not
+        // retry. The three path codes stay distinct in the payload because the
+        // repairs differ — `approval policy attest` with no flag, `--organ`, and
+        // nothing at all.
+        case "path-is-policy":
+        case "path-is-core":
+        case "path-not-protected":
+        case "actor-not-human":
+        case "validation":
+            return EXIT_USAGE;
+        case "corrupt-tail":
+            return EXIT_TORN_TAIL;
+        default:
+            return EXIT_IO;
+    }
+}
 /** `approval policy attest …` — hash the live policy file and log the human's sign-off. */
 export function commandPolicyAttest(argv, streams, cwd) {
     const json = argv.includes("--json");
@@ -252,8 +366,38 @@ export function commandPolicyAttest(argv, streams, cwd) {
     }
     const dirFlag = stringFlag(parsed.flags, "--dir");
     const dir = dirFlag === null ? cwd : absolute(dirFlag, cwd);
-    const logPath = resolvePath(stringFlag(parsed.flags, "--log"), DEFAULT_LOG_PATH, cwd);
+    const bootstrap = boolFlag(parsed.flags, "--bootstrap");
+    const logFlag = stringFlag(parsed.flags, "--log");
+    // APRV-449 review. With --bootstrap the log is the STORE's, so it resolves
+    // under --dir (as `approval serve --dir` resolves it) unless --log names one.
+    // A provisioning step run from another directory with `--dir $STORE` would
+    // otherwise attest into a stray log beside its own cwd, and the store it
+    // meant would stay unattested. The plain verb keeps its cwd-relative default.
+    const logPath = bootstrap && logFlag === null
+        ? join(dir, DEFAULT_LOG_PATH)
+        : resolvePath(logFlag, DEFAULT_LOG_PATH, cwd);
     const organFlag = stringFlag(parsed.flags, "--organ");
+    const pathFlag = stringFlag(parsed.flags, "--path");
+    // APRV-449. The bootstrap is a rule about the POLICY attestation (a store's
+    // first one), so beside a route that appends a different event it would be a
+    // flag nobody read. Refused rather than ignored.
+    if (bootstrap && (organFlag !== null || pathFlag !== null)) {
+        return usageError(streams, json, `--bootstrap attests a store's first POLICY and cannot be combined with ${organFlag !== null ? "--organ" : "--path"}, which appends a different record`);
+    }
+    // `--path` is decided first so that passing both flags reports the conflict
+    // rather than silently running the organ route with a `--path` nobody read.
+    if (pathFlag !== null) {
+        return signOffPath(pathFlag, {
+            streams,
+            json,
+            actor,
+            dir,
+            cwd,
+            logPath,
+            policyFlag: stringFlag(parsed.flags, "--policy"),
+            organFlag,
+        });
+    }
     if (organFlag !== null) {
         return attestOrgan(organFlag, {
             streams,
@@ -269,7 +413,13 @@ export function commandPolicyAttest(argv, streams, cwd) {
         return ioError(streams, json, policy.message);
     // No timestamp is passed: `policy.updated` is gate-typed, so amended SPEC.md
     // §8 (A2) has core stamp it at the write boundary from its own clock.
-    const result = appendAttestation(logPath, policy.path, actor);
+    //
+    // `--bootstrap` (APRV-449) reads the verified log first and attests only a
+    // store that has never been attested; a re-run is `policy-already-attested`
+    // and changed bytes are `policy-amendment-required`, both appending nothing.
+    const result = bootstrap
+        ? appendBootstrapAttestation(logPath, policy.path, actor)
+        : appendAttestation(logPath, policy.path, actor);
     if (result.ok) {
         const sha256 = result.record.payload["sha256"];
         if (json) {
@@ -280,13 +430,17 @@ export function commandPolicyAttest(argv, streams, cwd) {
         }
         return EXIT_OK;
     }
+    const error = result.error;
     if (json) {
-        streams.err(`${JSON.stringify({ ok: false, error: { code: result.error.code, message: result.error.message } })}\n`);
+        // `seq` and `attested_by` ride only on the two bootstrap refusals, which is
+        // the one place they are facts: the attestation in force, and who made it.
+        const extra = error.seq === undefined ? {} : { seq: error.seq, attested_by: error.attested_by ?? null };
+        streams.err(`${JSON.stringify({ ok: false, error: { code: error.code, message: error.message, ...extra } })}\n`);
     }
     else {
-        streams.err(`approval: ${result.error.message}\n`);
+        streams.err(`approval: ${error.message}\n`);
     }
-    switch (result.error.code) {
+    switch (error.code) {
         case "actor-not-human":
             // The actor rule, re-refused by core with its own code since APRV-20 pass
             // two. Reachable only if this layer's check and core's ever disagree; it
@@ -297,9 +451,19 @@ export function commandPolicyAttest(argv, streams, cwd) {
             // different fact from the actor rule, and no longer spelled the same way.
             return EXIT_USAGE;
         case "corrupt-tail":
+        case "log-torn-tail":
             // A torn tail has its own code in the frozen table, and calling it I/O
             // would misreport a crashed write as a permission problem.
             return EXIT_TORN_TAIL;
+        case "policy-already-attested":
+        case "policy-amendment-required":
+        case "head-moved":
+        case "log-corrupt":
+            // APRV-449. Decisions the runtime made from the log (and a chain it will
+            // not decide from), on the split the gate verbs draw: a well-formed
+            // command the runtime said no to is 1, not 2. A provisioning step branches
+            // on `error.code`; `policy-already-attested` is its expected re-run answer.
+            return EXIT_INTEGRITY;
         default:
             return EXIT_IO;
     }

package/dist/src/cli/attest.js.map

@@ -1 +1 @@
-{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../../src/cli/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvF,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,KAAK,GAA6B;IACtC,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,sEAAsE;AACtE,SAAS,iBAAiB,CACxB,KAAa,EACb,IAAY;IAEZ,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gCAAgC,IAAI,qJAAqJ;SACnO,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAClE,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAID;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,oCAAoC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,UAAyB,EAAE,GAAW,EAAE,GAAW;IAC5E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,2BAA2B,GAAG,gBAAgB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;KACxH,CAAC;AACJ,CAAC;AAaD;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,GAAa;IACnD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC9B,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAErE,8EAA8E;IAC9E,0EAA0E;IAC1E,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,MAAM,GAAG,sBAAsB,CACnC,GAAG,CAAC,OAAO,EACX,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,EACtC,GAAG,CAAC,KAAK,CACV,CAAC;IAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,GAAI,MAAM,CAAC,MAAM,CAAC,OAAmC,CAAC,QAAQ,CAAW,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;gBACtB,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;aAC1B,CAAC,IAAI,CACP,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,uBAAuB,QAAQ,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,MAAM,IAAI,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CACxG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,yEAAyE;QACzE,sEAAsE;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,0CAA0C;QAC1C,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,kBAAkB,IAAI,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,8EAA8E,CAC/J,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0BAA0B,eAAe,qCAAqC,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAEtF,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,SAAS,EAAE;YAC5B,OAAO;YACP,IAAI;YACJ,KAAK;YACL,GAAG;YACH,OAAO;YACP,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9D,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE9D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,GAAI,MAAM,CAAC,MAAM,CAAC,OAAmC,CAAC,QAAQ,CAAW,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CACvF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,MAAM,IAAI,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CACxG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,iBAAiB;YACpB,0EAA0E;YAC1E,yEAAyE;YACzE,6CAA6C;YAC7C,OAAO,UAAU,CAAC;QACpB,KAAK,YAAY;YACf,yEAAyE;YACzE,0EAA0E;YAC1E,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../../src/cli/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvF,OAAO,EAAE,0BAA0B,EAAuB,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,OAAO,EACP,OAAO,EACP,cAAc,EACd,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,KAAK,GAA6B;IACtC,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,aAAa,EAAE,SAAS;IACxB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,IAAY,EACZ,KAAa,EACb,IAAY,EACZ,IAAY;IAEZ,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gCAAgC,IAAI,KAAK,IAAI,8HAA8H;SACrN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAClE,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAID;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,oCAAoC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,UAAyB,EAAE,GAAW,EAAE,GAAW;IAC5E,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,2BAA2B,GAAG,gBAAgB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;KACxH,CAAC;AACJ,CAAC;AAaD;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,GAAa;IACnD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC9B,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,SAAS,EACT,SAAS,EACT,GAAG,CAAC,GAAG,EACP,sBAAsB,CACvB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAErE,8EAA8E;IAC9E,0EAA0E;IAC1E,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,MAAM,GAAG,sBAAsB,CACnC,GAAG,CAAC,OAAO,EACX,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,EACtC,GAAG,CAAC,KAAK,CACV,CAAC;IAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,GAAI,MAAM,CAAC,MAAM,CAAC,OAAmC,CAAC,QAAQ,CAAW,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;gBACtB,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;aAC1B,CAAC,IAAI,CACP,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,uBAAuB,QAAQ,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,MAAM,IAAI,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CACxG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,yEAAyE;QACzE,sEAAsE;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,0CAA0C;QAC1C,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB,CAC3B,UAAyB,EACzB,GAAW,EACX,GAAW;IAEX,MAAM,IAAI,GAAG,UAAU,CACrB,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CACpE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAeD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAe;IACpD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC9B,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0LAA0L,CAC3L,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,iJAAiJ,CAClJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAErE,2EAA2E;IAC3E,iFAAiF;IACjF,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE5C,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,CAAC,OAAO,EACX;QACE,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,GAAG,CAAC,GAAG;QACb,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;KACvE,EACD,GAAG,CAAC,KAAK,CACV,CAAC;IAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,GAAI,MAAM,CAAC,MAAM,CAAC,OAAmC,CAAC,QAAQ,CAAW,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;gBACtB,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,QAAQ,CAAC,IAAI;aAC3B,CAAC,IAAI,CACP,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,cAAc,QAAQ,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,MAAM,IAAI,CAC9E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CACxG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,kBAAkB;QAClB,KAAK,gBAAgB,CAAC;QACtB,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,iBAAiB,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,OAAgB,EAAE,GAAW;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,kBAAkB,IAAI,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,8EAA8E,CAC/J,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0BAA0B,eAAe,qCAAqC,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,OAAO,GACX,SAAS,IAAI,OAAO,KAAK,IAAI;QAC3B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC;QAC7B,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,4EAA4E;IAC5E,6EAA6E;IAC7E,iDAAiD;IACjD,IAAI,SAAS,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,UAAU,CACf,OAAO,EACP,IAAI,EACJ,0EAA0E,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,oCAAoC,CACxJ,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC,QAAQ,EAAE;YAC3B,OAAO;YACP,IAAI;YACJ,KAAK;YACL,GAAG;YACH,GAAG;YACH,OAAO;YACP,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;YAChD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,SAAS,EAAE;YAC5B,OAAO;YACP,IAAI;YACJ,KAAK;YACL,GAAG;YACH,OAAO;YACP,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9D,6EAA6E;IAC7E,sEAAsE;IACtE,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,SAAS;QACtB,CAAC,CAAC,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;QACzD,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,MAAM,GAAI,MAAM,CAAC,MAAM,CAAC,OAAmC,CAAC,QAAQ,CAAW,CAAC;QACtF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CACvF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,MAAM,IAAI,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAmB,MAAM,CAAC,KAAK,CAAC;IAC3C,IAAI,IAAI,EAAE,CAAC;QACT,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,KAAK,GACT,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;QAC5F,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,IAAI,CACpG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,0EAA0E;YAC1E,yEAAyE;YACzE,6CAA6C;YAC7C,OAAO,UAAU,CAAC;QACpB,KAAK,YAAY;YACf,yEAAyE;YACzE,0EAA0E;YAC1E,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO,cAAc,CAAC;QACxB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,2BAA2B,CAAC;QACjC,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YAChB,yEAAyE;YACzE,oEAAoE;YACpE,2EAA2E;YAC3E,4EAA4E;YAC5E,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/src/cli/channel-relay.d.ts

@@ -0,0 +1,108 @@
+/**
+ * `approval channel relay` — gestures an operator's authenticated relay
+ * carries (SPEC.md §10.3, APRV-455).
+ *
+ * The third arrival of a human gesture, beside a Telegram tap and a terminal.
+ * An operator's control plane holds an EdgeOS session for the person, shows
+ * them a request or their policy, and posts what they did here: the gesture,
+ * the EdgeOS `/humans/me` id of the session that made it, the hash or the key
+ * it answers, and a nonce. `channels/relay-server.ts` authenticates the post
+ * and `channels/relay.ts` turns it into a log event through the one function a
+ * Telegram tap goes through. This file resolves configuration, refuses what it
+ * must refuse, binds a port and reports; it decides nothing.
+ *
+ * ## The refusals that are the point
+ *
+ * 1. **The secret comes from the launch environment, never from the tree.**
+ *    `APPROVAL_RELAY_SECRET`, refused when unset, when shorter than a value a
+ *    host would generate, and when it holds a character a header cannot carry
+ *    unambiguously (SPEC.md §11.1 invariant 7). It is a conventional name,
+ *    beside `APPROVAL_TG_WEBHOOK_SECRET`, for that variable's reason: the
+ *    policy decides WHETHER a channel exists, never the value that
+ *    authenticates it, and a second declaration would be a second place for
+ *    one fact to be wrong. Under the `APPROVAL_` prefix it is withheld from
+ *    every child `approval run` spawns (`core/child-env.ts`), and the hook
+ *    classifier holds this command line `policy.core`, so an agent session
+ *    cannot start a relay with a secret of its own.
+ * 2. **No human identity.** This verb takes no `--as` and reads no
+ *    `APPROVAL_HUMAN`. Every gesture is attributed to the account the attested
+ *    policy maps, or refused `sender-unmapped`.
+ * 3. **A post without the secret decides nothing and appends nothing.**
+ *
+ * ## Why there is no transport lease
+ *
+ * A Telegram bot admits one receiver, so its transports take a lease. A relay
+ * has no such constraint: two relays on one gate would each record through
+ * compare-and-append, the gate would answer a duplicate decision
+ * `already-decided`, and the nonce ledger is a directory of exclusively linked files that
+ * refuses a replay whichever relay it reaches. A second relay on the SAME port
+ * fails to bind and says so.
+ *
+ * ## Where TLS is
+ *
+ * Not here, exactly as for `approval serve` and the webhook. Loopback by
+ * default, behind whatever the operator puts in front of it; a routable bind
+ * takes two flags and prints a banner, because the secret travels in a header.
+ */
+import type { Streams } from "./main.js";
+/** The environment variable the shared secret is read from. */
+export declare const RELAY_SECRET_ENV = "APPROVAL_RELAY_SECRET";
+/** The shortest secret this verb starts with: `serve`'s floor, for its reason. */
+export declare const RELAY_MIN_SECRET_LENGTH = 24;
+/**
+ * Why the relay could not start. A closed union, distinct per repair (SPEC.md
+ * §11.1 invariant 6). Its per-request refusals are `RELAY_REFUSAL_CODES`.
+ */
+export declare const RELAY_START_REFUSAL_CODES: readonly [
+/** `APPROVAL_RELAY_SECRET` is unset or empty. */
+"relay-secret-missing", 
+/** It is shorter than {@link RELAY_MIN_SECRET_LENGTH}. */
+"relay-secret-weak", 
+/** It holds a character outside A-Z a-z 0-9 _ -, or is longer than 256. */
+"relay-secret-charset", 
+/** `--proposer` is not an `agent:` id. */
+"relay-proposer-invalid", 
+/** The bind flags do not name a usable loopback (or explicitly widened) address. */
+"relay-bind-invalid"];
+export type RelayStartRefusalCode = (typeof RELAY_START_REFUSAL_CODES)[number];
+export interface RelaySetup {
+    logPath: string;
+    policy: {
+        dir?: string;
+        file?: string;
+    };
+    secret: string;
+    host: string;
+    port: number;
+    proposer: string;
+    json: boolean;
+}
+export type RelayPreparation = {
+    ok: true;
+    setup: RelaySetup;
+} | {
+    ok: false;
+    code: RelayStartRefusalCode;
+    message: string;
+};
+export interface RelayRequest {
+    logPath: string;
+    policy: {
+        dir?: string;
+        file?: string;
+    };
+    listen: string | null;
+    port: string | null;
+    allowNonLoopback: boolean;
+    proposer: string | null;
+    json: boolean;
+    env?: NodeJS.ProcessEnv;
+}
+/** Everything that can fail without binding a port. Prints nothing. */
+export declare function prepareRelay(request: RelayRequest): RelayPreparation;
+/** The banner a routable bind prints, every time, on stderr. */
+export declare function relayNonLoopbackBanner(host: string, port: number): string;
+/** Run the relay until a signal stops it. */
+export declare function runRelay(setup: RelaySetup, streams: Streams): Promise<number>;
+/** `approval channel relay [flags]`. */
+export declare function commandChannelRelay(argv: string[], streams: Streams, cwd: string): Promise<number>;