approval-md 0.2.0 → 0.4.0

package/dist/src/cli/channel-telegram-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-telegram-webhook.js","sourceRoot":"","sources":["../../../src/cli/channel-telegram-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,sBAAsB,GAEvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,UAAU,EAAE,aAAa,EAA0B,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,WAAW,CAAC;AAC5E,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,aAAa,EACb,WAAW,EACX,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,aAAa,GAA6B;IAC9C,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,sBAAsB,EAAE,SAAS;IACjC,sFAAsF;IACtF,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,QAAQ;IACtB,wBAAwB,EAAE,SAAS;IACnC,SAAS,EAAE,SAAS;IACpB,YAAY,EAAE,SAAS;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,4EAA4E;AAC5E,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,sDAAsD;IACtD,wBAAwB;IACxB,4DAA4D;IAC5D,qBAAqB;IACrB,yEAAyE;IACzE,wBAAwB;IACxB,2EAA2E;IAC3E,qBAAqB;IACrB,0DAA0D;IAC1D,sBAAsB;IACtB,yDAAyD;IACzD,kBAAkB;IAClB;;;;;;;;OAQG;IACH,sBAAsB;IACtB;;;OAGG;IACH,sBAAsB;IACtB;;;;;;;;;;OAUG;IACH,uBAAuB;IACvB,oCAAoC;IACpC,eAAe;IACf;;;;;;;;OAQG;IACH,6BAA6B;CACrB,CAAC;AA8EX,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAClE,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC/E,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IAC/D,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CACnB,OAAgB,EAChB,IAAa,EACb,IAAwB,EACxB,OAAe;IAEf,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QACtE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB,EAAE,IAAa,EAAE,OAAe;IACtE,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;;QACnF,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,CAAC,CAAC;IAC3C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,yEAAyE;QACzE,gEAAgE;QAChE,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAE/C,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACjF,MAAM,GAAG,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,MAAM,2BAA2B,+IAA+I,sBAAsB,+LAA+L;SAC/Y,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,GAAG,2BAA2B,8LAA8L;SACtO,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,2BAA2B,oBAAoB,MAAM,CAAC,yBAAyB,CAAC,6LAA6L;SAC1R,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EACL,gMAAgM;SACnM,CAAC;IACJ,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;SAC7D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oLAAoL;SAClO,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,6CAA6C,CAAC,GAAG,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mHAAmH;SACnP,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,oEAAoE;QACpE,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,4BAA4B;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,2CAA2C,GAAG,CAAC,MAAM,4VAA4V;SAC3Z,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,0EAA0E;IAC1E,eAAe;IACf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,4JAA4J,GAAG,CAAC,QAAQ,GAAG;aACvN,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,iCAAiC,GAAG,CAAC,QAAQ,sQAAsQ;aAC/V,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GACX,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,sEAAsE;QACtE,2EAA2E;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,gDAAgD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;SACzF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,MAAM;YACN,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,yEAAyE;YACzE,wEAAwE;YACxE,wBAAwB;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/C,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,IAAI,MAAM,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAyBD,MAAM,UAAU,kBAAkB,CAChC,UAAyB,EACzB,QAAuB,EACvB,gBAAyB;IAEzB,IAAI,UAAU,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,4HAA4H;SAC/H,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,6BAA6B,CAAC;IACzC,IAAI,IAAI,GAAG,6BAA6B,CAAC;IACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClG,CAAC;QACD,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,+RAA+R,MAAM,CAAC,6BAA6B,CAAC,GAAG;SACjV,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sPAAsP;SAChS,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,IAAY;IACjE,OAAO;QACL,EAAE;QACF,4EAA4E;QAC5E,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,uDAAuD;QAChF,6EAA6E;QAC7E,SAAS,sBAAsB,2CAA2C;QAC1E,8EAA8E;QAC9E,+EAA+E;QAC/E,EAAE;QACF,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAmB,EAAE,OAAgB;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,iEAAiE;IACjE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C;;;;;;OAMG;IACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,uDAAuD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACzF,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE;QACvF,UAAU,EAAE,KAAK,CAAC,GAAG;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE5C,4EAA4E;QAC5E,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,6BAA6B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAExD,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,gBAAgB;gBACjD,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,gCAAgC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACtC,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACxD,WAAW,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QAChG,CAAC,CAAC;QAEF,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,oBAAoB,CAAC;gBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC;gBAC7C,uEAAuE;gBACvE,wEAAwE;gBACxE,uEAAuE;gBACvE,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CACZ,OAAO,EACP,IAAI,EACJ,mCAAmC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KACjE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,yEAAyE;YACzE,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,+DAA+D;YAC/D,MAAM,GAAG,GAAG,KAAK,YAAY,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,MAAM,MAAM,GACV,GAAG,KAAK,IAAI;gBACV,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACjB,CAAC,CAAC;oBACE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;oBACzD,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO;iBAC/B;qBACE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;qBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,YAAY,CACjB,OAAO,EACP,IAAI,EACJ,6BAA6B,EAC7B,uCAAuC,QAAQ,KAAK,MAAM,4DAA4D,CACvH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,OAAO,GAAG,yCAAyC,QAAQ,qBAAqB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,OAAO,MAAM,CAAC,KAAK,4BAA4B,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,4BAA4B,sBAAsB,yEAAyE,CAAC;QACtV,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChB,KAAK,EAAE,iBAAiB;gBACxB,+DAA+D;gBAC/D,oEAAoE;gBACpE,uDAAuD;gBACvD,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,8DAA8D;gBAC9D,uDAAuD;gBACvD,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,8DAA8D;gBAC9D,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;aACxB,CAAC,IAAI,CACP,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QAE5B,2EAA2E;QAC3E,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACpD,OAAO,CAAC,GAAG,CACT,qDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,0BAA0B,CAC3B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClB,iEAAiE;QACjE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,MAAM,EAAE,EAAE;YAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,CAAC,KAAK,IAAI,EAAE;oBACf,gEAAgE;oBAChE,oEAAoE;oBACpE,qEAAqE;oBACrE,kEAAkE;oBAClE,qEAAqE;oBACrE,oEAAoE;oBACpE,8CAA8C;oBAC9C,EAAE;oBACF,iEAAiE;oBACjE,mEAAmE;oBACnE,4DAA4D;oBAC5D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBAErB,+DAA+D;oBAC/D,oEAAoE;oBACpE,+BAA+B;oBAC/B,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC;oBACrE,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,GAAG,CACT,4CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,qFAAqF,CACtF,CAAC;oBACJ,CAAC;oBACD,IAAI,IAAI,EAAE,CAAC;wBACT,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;4BAChB,KAAK,EAAE,SAAS;4BAChB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;4BACzB,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE;yBACxB,CAAC,IAAI,CACP,CAAC;oBACJ,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAC7B,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAc,EACd,OAAgB,EAChB,GAAW;IAEX,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAqB,IAAI,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAE/E,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,0BAA0B;IAC1B,MAAM,IAAI,GAAG,kBAAkB,CAC7B,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,EAC7B,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAC3B,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC,CACxC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GACV,UAAU,KAAK,IAAI;QACjB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;QACrC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC;QACvE,MAAM;QACN,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC;QACpE,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC;QACxC,IAAI;QACJ,kBAAkB,EAAE,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;QAC7D,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;QACnC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;QACrC,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC;QACrD,GAAG,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE;YAC1D,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,4BAA4B,CAAC;SACxF,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,2EAA2E;QAC3E,yEAAyE;QACzE,2DAA2D;QAC3D,OAAO,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB;YAClF,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC1C,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC"}

package/dist/src/cli/channel-telegram.d.ts

@@ -14,12 +14,18 @@
  *    are read here and passed to the channel as values (SPEC.md §5.1: policy
  *    carries the env-var *names*, never the secrets). Nothing in `channels/`
  *    touches `process.env`.
- * 2. **It declares who is approving.** The decision is recorded against the
- *    human actor from `--as` / `APPROVAL_HUMAN`, never against anything the
- *    callback carried. SPEC.md §11: identity in v0.1 is config-declared, the
- *    trust boundary is the local machine, and everyone who can reach the
- *    configured chat can approve as that actor. This is stated in `--help`
- *    because an operator has to be able to see it without reading the source.
+ * 2. **It declares the identity the process itself acts under.** `--as` /
+ *    `APPROVAL_HUMAN` is what this listener is, and it is what a decision is
+ *    recorded as whenever the policy maps no sender for this channel: SPEC.md
+ *    §11's config-declared identity, where the trust boundary is the local
+ *    machine and everyone who can reach the configured chat can approve as that
+ *    actor. Since APRV-324 a policy MAY map Telegram account ids to approvers,
+ *    and then the decision is recorded against the person the operator attested
+ *    the tapping account to, and an unmapped account is refused rather than
+ *    recorded as this listener. Either way the choosing happens in
+ *    `channels/contract.ts` against the attested policy, never here and never
+ *    in the channel. Both settings are stated in `--help` because an operator
+ *    has to be able to see which one they are in without reading the source.
  * 3. **It holds the token.** A grant mints a single-use execution token;
  *    `recordChannelDecision` returns it to *this* handler, which prints it on
  *    **stdout** and never hands it back to the channel. It is never sent to
@@ -101,12 +107,15 @@
  * a send failure: an operator who has just mistyped a chat id or a token should
  * learn it immediately rather than watch a listener retry forever.
  */
-import type { DecideOptions } from "../core/gate.js";
+import { type DecideOptions } from "../core/gate.js";
 import { type ChannelRequest, type DeliveryId } from "../channels/contract.js";
 import { type ChannelTagRefusalCode, type TagOptions } from "../channels/tagging.js";
 import { type CheckpointTap } from "./checkpoint-tap.js";
 import { TelegramChannel, type CheckpointTapResponse, type ReviewCard, type ReviewTapResponse, type TelegramCommand, type TelegramTerminalState } from "../channels/telegram.js";
 import { type TelegramDelivery } from "../core/telegram-config.js";
+import { type ChannelLease, type ChannelLeaseMode } from "../core/channel-lease.js";
+import { type InstanceFinding } from "../core/instance.js";
+import { type ChannelSender } from "../core/sender-identity.js";
 import { type ParsedFlags } from "./args.js";
 import { type GlossRunner } from "./gloss.js";
 import { type GlossRunnerFactoryOptions } from "./gloss-options.js";
@@ -151,6 +160,32 @@ export interface ListenSetup {
      * `core/telegram-config.ts` beside the other Telegram policy readings.
      */
     delivery: TelegramDelivery;
+    /**
+     * Cross-instance findings `--allow-cross-instance` let through (APRV-390).
+     *
+     * Empty on every ordinary start, because a finding without the flag is a
+     * refusal. Carried on the setup rather than printed inside `prepareListen`
+     * for the reason that function prints nothing at all: `approval up` and
+     * `approval channel telegram listen` choose their own stream, and this is
+     * the one thing an overridden refusal still owes the operator.
+     */
+    crossInstance: readonly InstanceFinding[];
+    /**
+     * `--allow-cross-instance` as passed (APRV-390).
+     *
+     * Carried as well as applied, because the flag overrides TWO refusals and
+     * only one of them can be decided synchronously. The credential check is
+     * `prepareListen`'s; the bot-ownership claim needs a `getMe`, so it happens
+     * later and has to be able to ask whether the operator already said yes.
+     */
+    allowCrossInstance: boolean;
+    /**
+     * The Bot API base this listener talks to (APRV-390).
+     *
+     * Part of the bot's identity in the ownership registry, because a bot id is
+     * unique within one Bot API deployment and nothing more.
+     */
+    apiBase: string;
     /**
      * How the one-sentence model gloss is obtained (APRV-144).
      *
@@ -178,6 +213,103 @@ export interface ListenSetup {
      */
     checkpoint: CheckpointTap;
 }
+/**
+ * Claim this listener's bot before it polls (APRV-390, extended by APRV-424).
+ *
+ * Three questions, in order, and each one has its own authority:
+ *
+ * 1. **Does anything else in THIS gate already hold the Telegram transport?**
+ *    A lockfile in the gate's own `daemon/` directory (`core/channel-lease.ts`)
+ *    answers it, and the answer is per PROCESS. This is the check the review of
+ *    APRV-424 added, and the hole it closes is the one neither of the other two
+ *    could see: an `approval up` long-polling and an `approval channel telegram
+ *    webhook` started in the same project pass both of them — `getWebhookInfo`
+ *    is empty while the poller is the one running, and the ownership registry
+ *    compares instance ids, which are equal because it IS the same instance —
+ *    and then each runs its own dispatch cycle over its own state against one
+ *    log, so every request reaches the phone twice under two nonces and only
+ *    one copy can resolve a tap.
+ * 2. **What is the Bot API delivering this bot's updates to?** `getWebhookInfo`
+ *    answers it, and it is the only thing that can see a webhook registered
+ *    from another machine. A webhook beats a poller outright — `getUpdates` is
+ *    refused while one is set — so any registration refuses a poller.
+ * 3. **Does another INSTANCE on this machine hold this bot?** `getMe` plus the
+ *    per-machine registry answers it (APRV-390's incident: two gates, one
+ *    token, two names, a 409 on every poll).
+ *
+ * ## An unreachable Bot API: fail-soft for a poller, fail-closed for a webhook
+ *
+ * A `getMe` or a `getWebhookInfo` that fails says nothing about ownership. The
+ * machine may be behind a captive portal, the API may be rate-limiting, the
+ * network may be down for four seconds. For a POLLER, refusing on that would
+ * mean a transient network fault took the phone channel down until somebody
+ * noticed, in exchange for no safety: an unreachable Bot API is also a
+ * `getUpdates` that cannot conflict with anything, and the HTTP 409 the loop
+ * already reports is the backstop. So the poller says what happened and starts.
+ *
+ * For the WEBHOOK VERB there is no such backstop, and the review of APRV-424
+ * turned this direction around. Its next act is `setWebhook`, which overwrites
+ * whatever registration exists without asking, so proceeding on an unknown
+ * answer is proceeding to take another host's taps with no error anywhere. A
+ * probe it could not make is therefore a refusal (`webhook-probe-failed`), and
+ * the operator retries or passes `--reclaim` deliberately.
+ */
+export declare function claimListenerBot(setup: ListenSetup, report: (message: string) => void, options?: {
+    /**
+     * The webhook URL THIS process is about to register, when it is a webhook
+     * runner rather than a poller (APRV-424).
+     *
+     * Absent for a poller. Present for the webhook verb, and then it is the
+     * url a `--reclaim` is measured against: `setWebhook` is idempotent, so a
+     * restart re-registering its own url is the ordinary case, while a
+     * DIFFERENT url is a second host about to take the first host's taps.
+     */
+    webhookUrl?: string;
+    /**
+     * Register over an existing webhook (`--reclaim`, APRV-424 review finding
+     * 6).
+     *
+     * Without it, ANY registration refuses — including one at the same url,
+     * which used to be waved through on a bare string compare. Two hosts
+     * sharing one configuration both passed that check, the second overwrote
+     * the first's `secret_token`, and from then on every real tap arrived at
+     * the first host with a secret it did not recognise: a forgery, as far as
+     * it could tell, on every press of a button that had worked an hour
+     * earlier. So taking over is now a thing the operator says out loud.
+     */
+    reclaim?: boolean;
+    /**
+     * Which transport this process is about to run, for the lease.
+     *
+     * Derived from {@link webhookUrl} when it is not given, because the two
+     * callers that pass a url are the two that run a webhook.
+     */
+    mode?: ChannelLeaseMode;
+}): Promise<ClaimedListenerBot>;
+/**
+ * What {@link claimListenerBot} answers.
+ *
+ * The lease travels with the success, because the caller is the only thing
+ * that knows when this process has stopped receiving: `runListener`,
+ * `approval up` and `runWebhook` each release it on their way out, and a
+ * refusal releases nothing because it took nothing.
+ */
+export type ClaimedListenerBot = {
+    ok: true;
+    lease: ChannelLease;
+} | {
+    ok: false;
+    code: ListenRefusalCode;
+    message: string;
+};
+/**
+ * What to append to a runtime 409, naming the other instance if one is known.
+ *
+ * Read at the moment of the conflict rather than captured at start-up, because
+ * the other gate may have claimed the bot in between: the registry is the only
+ * thing that knows, and it is cheap to re-read.
+ */
+export declare function conflictAdviceFor(setup: ListenSetup): () => string | null;
 /**
  * Why a listener could not be built. A closed union, because more than one
  * caller now branches on it: the verb turns each into an exit code, and
@@ -194,7 +326,70 @@ export declare const LISTEN_REFUSAL_CODES: readonly [
 /** The log could not be read (or its directory does not exist). */
 "log-unreadable", 
 /** `--payloads` did not hold a JSON object of action key -> payload. */
-"payloads-unreadable"];
+"payloads-unreadable", 
+/**
+ * A credential variable holds a value this instance did not configure
+ * (APRV-390): it was exported before the process started and is not this
+ * instance's own `approval env` export, or `.approval/env` names another
+ * instance's keystore item. Refused rather than warned since APRV-390 — the
+ * warning is what let a demo gate spend an evening on the production bot.
+ * `--allow-cross-instance` is the deliberate case.
+ */
+"cross-instance-credential", 
+/**
+ * `getMe` named a bot another instance on this machine has already claimed
+ * (APRV-390). Refused BEFORE the first `getUpdates`, so the operator reads
+ * which two gates are involved instead of an HTTP 409 loop.
+ */
+"bot-owned-elsewhere", 
+/**
+ * This bot's updates are being delivered to a webhook (APRV-424).
+ *
+ * The two transports are alternatives per bot: the Bot API refuses
+ * `getUpdates` outright while a webhook is set, so a listener that started
+ * here would print a 409 every few seconds and receive not one tap. Refused
+ * BEFORE the first poll, in the same preflight and for the same reason
+ * `bot-owned-elsewhere` is, so the operator reads which transport owns the
+ * bot instead of a status code.
+ *
+ * Since the review of APRV-424 it carries a second, local source: the
+ * transport lease in this gate's own `daemon/` directory, when the process
+ * holding it is a webhook runner. Same fact, same repair, so the same code.
+ */
+"webhook-registered", 
+/**
+ * A long-poll listener in THIS gate already holds the Telegram transport
+ * (APRV-424 review finding 1).
+ *
+ * The counterpart to `webhook-registered`, from the same lease. It is what
+ * the webhook verb meets when an `approval up` or an `approval channel
+ * telegram listen` is already running in the same project — the case
+ * `getWebhookInfo` cannot see (nothing is registered yet) and the ownership
+ * registry cannot see either (it is the same instance). Two of them on one
+ * log put every prompt on the phone twice, under two nonces, and only one
+ * copy can resolve a tap.
+ */
+"telegram-poller-running", 
+/**
+ * The transport lease could not be taken at all (APRV-424 review finding 1).
+ *
+ * A `daemon/` directory that cannot be created, a lockfile that cannot be
+ * written. Unlike the bot registry, whose absence is the status quo, this
+ * file is the only thing keeping one gate from running two transports, so a
+ * gate that cannot hold one does not start.
+ */
+"telegram-lease-unavailable", 
+/**
+ * The webhook verb could not learn what already holds this bot (APRV-424
+ * review finding 8).
+ *
+ * `getMe` or `getWebhookInfo` failed, and the next act would have been a
+ * `setWebhook` that overwrites a registration nobody saw. A poller keeps its
+ * fail-soft on the same failure, because an unreachable Bot API is also a
+ * `getUpdates` that cannot conflict and the HTTP 409 loop is its backstop;
+ * this verb has no backstop, so it refuses.
+ */
+"webhook-probe-failed"];
 export type ListenRefusalCode = (typeof LISTEN_REFUSAL_CODES)[number];
 /** Everything {@link prepareListen} needs, already resolved to absolute paths. */
 export interface ListenRequest {
@@ -215,6 +410,11 @@ export interface ListenRequest {
     pollTimeout: string | null;
     once: boolean;
     json: boolean;
+    /**
+     * `--allow-cross-instance` (APRV-390): start on a credential this instance
+     * did not configure, saying so, instead of refusing.
+     */
+    allowCrossInstance?: boolean;
     /** Where the channel's operational complaints go. Ordinarily stderr. */
     log(message: string): void;
     /** The gloss runner, if the caller wants one. See {@link ListenSetup.gloss}. */
@@ -353,9 +553,15 @@ export interface PacedState {
     /**
      * Every pending action key, in the order this process will show them.
      *
-     * Seeded from log order (oldest first, which is what `buildPendingQueue`
-     * returns) and rearranged by `/skip` alone. Keys the log no longer calls
-     * pending are dropped on every cycle, and newly pending ones join the back.
+     * Seeded from `orderPending`'s order (live newest first, then stale oldest
+     * first, attestation prompts last — APRV-425; it was log order before that)
+     * and rearranged by `/skip` alone. Keys the log no longer calls pending are
+     * dropped on every cycle, and newly pending ones join the back.
+     *
+     * The ordering reaches this only through the SEEDING, which is the property
+     * that matters for `/skip`: a key already in the list keeps the place the
+     * approver's own navigation gave it, and only keys this process has not seen
+     * before are inserted in the new order.
      */
     order: string[];
     /**
@@ -576,10 +782,12 @@ export interface DispatchResult {
      * Action keys dropped from the delivery bookkeeping this cycle (APRV-196),
      * with why. Neither kind can cost a re-send: the pending queue is the log's
      * answer, and a dropped key that is still pending is simply re-delivered.
+     * `released` (APRV-442) is the one kind that is dropped BECAUSE it is still
+     * pending: a refused tap disarmed its card, and this cycle re-offers it.
      */
     pruned: {
         action_key: string;
-        reason: "settled" | "stale";
+        reason: "settled" | "stale" | "released";
     }[];
     /**
      * The collapsed re-delivery this cycle sent, when it sent one (APRV-287):
@@ -658,33 +866,125 @@ export declare function dispatchPending(setup: ListenSetup, streams: Streams, st
  * it takes to say they are there.
  */
 export declare const COLLAPSE_STALE_AFTER_MS: number;
-/** The computed lines a collapsed re-delivery leads with (APRV-287). */
-export declare function staleLines(requests: ChannelRequest[], now: string): string[];
 /**
- * What a checkpoint tap does, on the machine the listener runs on (APRV-257).
+ * Pending requests a NEWER pending request has superseded (APRV-425).
+ *
+ * Two requests naming the same payload bytes and the same class are two askings
+ * of one question, and only the newer one has an asker. The shape that produces
+ * them is APRV-287's own: a hook whose wait ran out leaves its request open for
+ * the retry grace, the grace runs out, the hook withdraws it on its NEXT
+ * invocation — and if that next invocation never comes while a later session
+ * asks the same thing, both sit in the queue. Dogfooding produced exactly this
+ * complaint (APRV-118): a live prompt buried behind dead ones, and an approver
+ * rejecting the one they wanted.
+ *
+ * Keyed by `(payload_hash, class)` and not by task, because the task id a
+ * harness adapter mints is fresh per tool call (SPEC.md §10.2), so two askings
+ * of one command never share one. The bytes and the class are what a decision
+ * binds to, which is what makes them the right identity here.
+ *
+ * Computed from the pending set alone, which is re-derived from the verified log
+ * every cycle, so this decides nothing and remembers nothing. A superseded
+ * request is COLLAPSED, never closed: it stays pending in the log, listable, and
+ * decidable from any copy already delivered. Only a human's decision or the
+ * requester's own withdrawal ends it.
+ */
+export declare function supersededPending(requests: ChannelRequest[]): Set<string>;
+/**
+ * The pending set in the order an approver should meet it (APRV-425).
  *
- * The signing happens HERE, in the listener's process, and that is the whole
- * point of the tap: this process holds the vault passphrase because a HUMAN
- * exported it into the shell they started it from, and `core/child-env.ts`
- * strips that variable from every child an agent's session spawns. No agent can
- * arrange for a process that reaches this function with a key.
+ * Three rules, in this order, and each is a complaint from running the gate:
  *
- * Nothing about the head is re-derived. The `(seq, hash)` comes back from the
- * channel exactly as it was put on the screen, and
- * {@link ../core/checkpoint.js appendCheckpointAt} signs that and checks the
- * log still carries it. A handler that quietly re-read the head would be
- * putting a human's key over bytes nobody looked at.
+ * 1. **Attestation prompts last.** `buildPendingQueue` puts them there on
+ *    purpose: a policy amendment changes the rules every entry above it was
+ *    routed by, so an approver reading top to bottom answers the questions asked
+ *    under the current policy before changing what the current policy is. That
+ *    placement is not this function's to relitigate, so proposals are lifted
+ *    out, ordered among themselves by nothing at all (log order), and put back
+ *    at the end.
+ * 2. **Live requests first, newest first.** Live means younger than
+ *    {@link COLLAPSE_STALE_AFTER_MS}, the hook's wait plus its retry grace,
+ *    which is the same boundary the collapse uses — one number, one meaning of
+ *    "somebody may still be holding this". Newest first because the newest is
+ *    the one most likely to have a tool call blocked on it right now, and the
+ *    observed failure was a live prompt buried behind dead ones.
+ * 3. **Stale requests after them, oldest first.** They are what the collapse
+ *    takes on a first cycle, and where the collapse does not apply (fewer than
+ *    {@link COLLAPSE_MIN} of them) oldest-first is the order to work through a
+ *    backlog in.
  *
- * `Not now` appends nothing and says so. It is not a rejection: there is no
- * request here to reject, and a checkpoint that is owed is a warning at every
- * layer and a refusal at none.
+ * Stable inside each bucket, so log order breaks every tie and the result is
+ * deterministic for one log and one instant. It is an ORDER and nothing else:
+ * no request is dropped, none is decided, and the set that comes out is the set
+ * that went in.
  */
+export declare function orderPending(requests: ChannelRequest[], now: string): ChannelRequest[];
+/**
+ * The computed lines a collapsed re-delivery leads with (APRV-287).
+ *
+ * `superseded` is the subset a newer pending request replaced (APRV-425), and
+ * the first line states the split rather than claiming every member is old.
+ * Before this the line said "all older than the hook's wait plus its retry
+ * grace", which stopped being true the moment the collapse widened: a message
+ * that overstates what it collapsed is the stale-documentation failure in
+ * message form, and this one is read by the person deciding.
+ */
+export declare function staleLines(requests: ChannelRequest[], now: string, superseded?: ReadonlySet<string>): string[];
+/**
+ * Put the requests nobody is waiting on into ONE message, and hand back the
+ * ones that still get a message each (APRV-287, widened by APRV-425).
+ *
+ * Called on a process's first cycle only, which is exactly a daemon start or a
+ * listener reconnect. Everything it does is bookkeeping in the sense SPEC.md
+ * §10.3 fixes: the pending set is re-derived from the verified log every cycle,
+ * so a summary that fails to send, or a process that forgets it sent one,
+ * degrades to showing those requests again, and never to a pending request
+ * nobody is shown.
+ *
+ * ## Two ways in, one exit (APRV-425)
+ *
+ * A request is collapsed when it is older than the hook's wait plus its retry
+ * grace (nobody is holding it), or when a NEWER pending request names the same
+ * payload bytes and class ({@link supersededPending} — the newer one is the live
+ * asking, whatever the age of either). The second is what answers the observed
+ * complaint that a live prompt arrives buried behind dead ones.
+ *
+ * ## This is where the sent-record is rebuilt from the log (AC3)
+ *
+ * Every collapsed member is written into `state.delivered` and `state.sentAtMs`
+ * below, and the set it is written from is the pending set re-derived from the
+ * verified log. That is the whole of the rebuilding, and it is deliberately not
+ * a second mechanism: the log is the only place the question "what is pending"
+ * is answered.
+ *
+ * What it is NOT is evidence of delivery, and the difference is load-bearing.
+ * Nothing reads this record to conclude that an approver saw anything: a
+ * collapsed request stays pending in the log, is listed by `/queue`, and is
+ * decidable from any copy already delivered, because APRV-196 made
+ * `callback_data` carry a restart-stable action ref so a button on a
+ * pre-restart copy still decides the request. Lose the record and the next
+ * cycle shows the requests again, which is the degradation SPEC.md §10.3
+ * requires and the one this code takes.
+ */
+/**
+ * The members a first-cycle collapse would put into one message: stale or
+ * superseded, and never a proposal (APRV-445 refutation, S2). Proposals are
+ * long-lived by design, so after a six-minute outage every one of them would
+ * otherwise land in one digest whose only bulk answer is reject-all.
+ */
+export declare function collapsibleStale(undecided: readonly ChannelRequest[], now: string, superseded?: ReadonlySet<string>): ChannelRequest[];
+/**
+ * Report a steady-state cycle's problems on stderr. Startup reports its own,
+ * as exit codes, in {@link runListener}.
+ */
+export declare function reportCycle(result: DispatchResult, streams: Streams): void;
 export declare function checkpointHandlerFor(setup: ListenSetup, streams: Streams): (tap: {
     sign: boolean;
     head: {
         seq: number;
         hash: string;
     };
+    sender?: ChannelSender;
 }) => CheckpointTapResponse;
 /**
  * What a review tap does: the human-only `reviewSample`, and nothing else
@@ -712,6 +1012,7 @@ export declare function reviewHandlerFor(setup: ListenSetup, streams: Streams):
     verdict: "ok" | "denied";
     reaction?: "disliked" | "indifferent" | "liked" | "loved";
     note?: string;
+    sender?: ChannelSender;
 }) => ReviewTapResponse;
 /**
  * `/queue`, `/skip`, `/next` — the paced walkthrough's three verbs (APRV-216).
@@ -784,6 +1085,24 @@ export interface RunningListener {
  * queue from the verified log and re-sends everything still pending, exactly as
  * a restarted process would. A duplicate on the phone, never a silence.
  */
+/**
+ * Give the channel every handler the runtime answers a gesture with, and hand
+ * back the fresh dispatch bookkeeping (APRV-424).
+ *
+ * Extracted from {@link startListener} so the webhook runner wires the SAME
+ * four handlers rather than a second set that looks like them. This is the
+ * CLI-side half of the property APRV-424 is about: the transport decides where
+ * an update arrives, and nothing else. A tap that arrives by webhook is
+ * recorded by `handlerFor`'s `recordChannelDecision` — the same actor, the
+ * same sender resolution, the same gate — because it is the same function
+ * object, registered here.
+ *
+ * A FRESH {@link DispatchState} per call, which is the whole of the restart
+ * story: a supervisor that restarts a fallen runner re-derives the pending
+ * queue from the verified log and re-sends everything still pending. A
+ * duplicate on the phone, never a silence.
+ */
+export declare function wireListener(setup: ListenSetup, streams: Streams): DispatchState;
 export declare function startListener(setup: ListenSetup, streams: Streams): RunningListener;
 /**
  * The listener verb. Returns a promise, which is why `main` treats `channel`