approval-md 0.3.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +83 -914
- package/SPEC.md +98 -13
- package/cli.js +66 -7
- package/dist/src/adapters/smtp.d.ts +18 -0
- package/dist/src/adapters/smtp.js +24 -3
- package/dist/src/adapters/smtp.js.map +1 -1
- package/dist/src/channels/contract.d.ts +19 -0
- package/dist/src/channels/contract.js +105 -1
- package/dist/src/channels/contract.js.map +1 -1
- package/dist/src/channels/relay-server.d.ts +90 -0
- package/dist/src/channels/relay-server.js +295 -0
- package/dist/src/channels/relay-server.js.map +1 -0
- package/dist/src/channels/relay.d.ts +273 -0
- package/dist/src/channels/relay.js +564 -0
- package/dist/src/channels/relay.js.map +1 -0
- package/dist/src/channels/tagging.js +6 -1
- package/dist/src/channels/tagging.js.map +1 -1
- package/dist/src/channels/telegram-webhook.d.ts +273 -0
- package/dist/src/channels/telegram-webhook.js +536 -0
- package/dist/src/channels/telegram-webhook.js.map +1 -0
- package/dist/src/channels/telegram.d.ts +271 -1
- package/dist/src/channels/telegram.js +403 -45
- package/dist/src/channels/telegram.js.map +1 -1
- package/dist/src/cli/amend.js +350 -4
- package/dist/src/cli/amend.js.map +1 -1
- package/dist/src/cli/attest.js +43 -6
- package/dist/src/cli/attest.js.map +1 -1
- package/dist/src/cli/channel-relay.d.ts +108 -0
- package/dist/src/cli/channel-relay.js +334 -0
- package/dist/src/cli/channel-relay.js.map +1 -0
- package/dist/src/cli/channel-telegram-webhook.d.ts +273 -0
- package/dist/src/cli/channel-telegram-webhook.js +709 -0
- package/dist/src/cli/channel-telegram-webhook.js.map +1 -0
- package/dist/src/cli/channel-telegram.d.ts +272 -26
- package/dist/src/cli/channel-telegram.js +478 -41
- package/dist/src/cli/channel-telegram.js.map +1 -1
- package/dist/src/cli/channel.d.ts +1 -1
- package/dist/src/cli/channel.js +5 -1
- package/dist/src/cli/channel.js.map +1 -1
- package/dist/src/cli/daemon.js +37 -5
- package/dist/src/cli/daemon.js.map +1 -1
- package/dist/src/cli/doctor.d.ts +63 -0
- package/dist/src/cli/doctor.js +856 -111
- package/dist/src/cli/doctor.js.map +1 -1
- package/dist/src/cli/execute.d.ts +17 -1
- package/dist/src/cli/execute.js +341 -20
- package/dist/src/cli/execute.js.map +1 -1
- package/dist/src/cli/exit-codes.d.ts +12 -0
- package/dist/src/cli/exit-codes.js +13 -0
- package/dist/src/cli/exit-codes.js.map +1 -1
- package/dist/src/cli/gate.d.ts +2 -0
- package/dist/src/cli/gate.js +233 -2
- package/dist/src/cli/gate.js.map +1 -1
- package/dist/src/cli/help.d.ts +9 -1
- package/dist/src/cli/help.js +246 -38
- package/dist/src/cli/help.js.map +1 -1
- package/dist/src/cli/hook.d.ts +371 -3
- package/dist/src/cli/hook.js +1926 -44
- package/dist/src/cli/hook.js.map +1 -1
- package/dist/src/cli/init.js +16 -7
- package/dist/src/cli/init.js.map +1 -1
- package/dist/src/cli/instructions.js +24 -3
- package/dist/src/cli/instructions.js.map +1 -1
- package/dist/src/cli/log-anchor.d.ts +55 -0
- package/dist/src/cli/log-anchor.js +199 -60
- package/dist/src/cli/log-anchor.js.map +1 -1
- package/dist/src/cli/main.d.ts +0 -12
- package/dist/src/cli/main.js +51 -0
- package/dist/src/cli/main.js.map +1 -1
- package/dist/src/cli/muse.d.ts +2 -0
- package/dist/src/cli/muse.js +62 -0
- package/dist/src/cli/muse.js.map +1 -0
- package/dist/src/cli/payload.js +79 -1
- package/dist/src/cli/payload.js.map +1 -1
- package/dist/src/cli/scaffold.js +6 -0
- package/dist/src/cli/scaffold.js.map +1 -1
- package/dist/src/cli/serve.d.ts +53 -0
- package/dist/src/cli/serve.js +270 -0
- package/dist/src/cli/serve.js.map +1 -0
- package/dist/src/cli/up.js +21 -2
- package/dist/src/cli/up.js.map +1 -1
- package/dist/src/cli/verb-registry.d.ts +2 -0
- package/dist/src/cli/verb-registry.js +337 -39
- package/dist/src/cli/verb-registry.js.map +1 -1
- package/dist/src/cli/wordmark.d.ts +2 -2
- package/dist/src/cli/wordmark.js +2 -2
- package/dist/src/core/attest-bootstrap.d.ts +95 -0
- package/dist/src/core/attest-bootstrap.js +135 -0
- package/dist/src/core/attest-bootstrap.js.map +1 -0
- package/dist/src/core/attest.d.ts +20 -3
- package/dist/src/core/attest.js +25 -0
- package/dist/src/core/attest.js.map +1 -1
- package/dist/src/core/audit.d.ts +55 -3
- package/dist/src/core/audit.js +52 -5
- package/dist/src/core/audit.js.map +1 -1
- package/dist/src/core/channel-lease.d.ts +322 -0
- package/dist/src/core/channel-lease.js +663 -0
- package/dist/src/core/channel-lease.js.map +1 -0
- package/dist/src/core/command-class.d.ts +51 -0
- package/dist/src/core/command-class.js +760 -8
- package/dist/src/core/command-class.js.map +1 -1
- package/dist/src/core/daemon-host.d.ts +178 -0
- package/dist/src/core/daemon-host.js +228 -0
- package/dist/src/core/daemon-host.js.map +1 -0
- package/dist/src/core/daemon-identity.d.ts +238 -0
- package/dist/src/core/daemon-identity.js +252 -0
- package/dist/src/core/daemon-identity.js.map +1 -0
- package/dist/src/core/gate.d.ts +306 -5
- package/dist/src/core/gate.js +772 -24
- package/dist/src/core/gate.js.map +1 -1
- package/dist/src/core/harness-version.d.ts +128 -4
- package/dist/src/core/harness-version.js +179 -12
- package/dist/src/core/harness-version.js.map +1 -1
- package/dist/src/core/harness-wait.d.ts +82 -3
- package/dist/src/core/harness-wait.js +89 -3
- package/dist/src/core/harness-wait.js.map +1 -1
- package/dist/src/core/log-subscribe.d.ts +21 -0
- package/dist/src/core/log-subscribe.js +16 -6
- package/dist/src/core/log-subscribe.js.map +1 -1
- package/dist/src/core/log-write-layer.d.ts +55 -0
- package/dist/src/core/log-write-layer.js +91 -0
- package/dist/src/core/log-write-layer.js.map +1 -0
- package/dist/src/core/log.d.ts +50 -21
- package/dist/src/core/log.js +197 -19
- package/dist/src/core/log.js.map +1 -1
- package/dist/src/core/payload-census.d.ts +51 -0
- package/dist/src/core/payload-census.js +125 -2
- package/dist/src/core/payload-census.js.map +1 -1
- package/dist/src/core/payload-store.d.ts +31 -0
- package/dist/src/core/payload-store.js +113 -8
- package/dist/src/core/payload-store.js.map +1 -1
- package/dist/src/core/payload.d.ts +18 -3
- package/dist/src/core/payload.js +20 -4
- package/dist/src/core/payload.js.map +1 -1
- package/dist/src/core/policy-diff.d.ts +10 -0
- package/dist/src/core/policy-diff.js +10 -2
- package/dist/src/core/policy-diff.js.map +1 -1
- package/dist/src/core/policy-explain.d.ts +7 -1
- package/dist/src/core/policy-explain.js +16 -1
- package/dist/src/core/policy-explain.js.map +1 -1
- package/dist/src/core/policy-load.d.ts +24 -0
- package/dist/src/core/policy-load.js.map +1 -1
- package/dist/src/core/policy-match.d.ts +38 -0
- package/dist/src/core/policy-match.js +35 -0
- package/dist/src/core/policy-match.js.map +1 -1
- package/dist/src/core/policy-proposal.d.ts +23 -0
- package/dist/src/core/policy-proposal.js +8 -2
- package/dist/src/core/policy-proposal.js.map +1 -1
- package/dist/src/core/read-scope.d.ts +10 -0
- package/dist/src/core/read-scope.js +4 -0
- package/dist/src/core/read-scope.js.map +1 -1
- package/dist/src/core/run-payload.d.ts +160 -0
- package/dist/src/core/run-payload.js +304 -0
- package/dist/src/core/run-payload.js.map +1 -0
- package/dist/src/core/sender-identity.d.ts +35 -10
- package/dist/src/core/sender-identity.js +48 -11
- package/dist/src/core/sender-identity.js.map +1 -1
- package/dist/src/core/state.d.ts +52 -1
- package/dist/src/core/state.js +52 -6
- package/dist/src/core/state.js.map +1 -1
- package/dist/src/core/telegram-config.d.ts +79 -0
- package/dist/src/core/telegram-config.js +108 -0
- package/dist/src/core/telegram-config.js.map +1 -1
- package/dist/src/core/verify.d.ts +23 -1
- package/dist/src/core/verify.js +20 -2
- package/dist/src/core/verify.js.map +1 -1
- package/dist/src/daemon/audit.d.ts +80 -5
- package/dist/src/daemon/audit.js +126 -6
- package/dist/src/daemon/audit.js.map +1 -1
- package/dist/src/daemon/daemon.d.ts +174 -2
- package/dist/src/daemon/daemon.js +298 -7
- package/dist/src/daemon/daemon.js.map +1 -1
- package/dist/src/daemon/git-evidence.d.ts +2 -2
- package/dist/src/daemon/git-evidence.js +1 -1
- package/dist/src/daemon/projection.d.ts +13 -2
- package/dist/src/daemon/projection.js +39 -6
- package/dist/src/daemon/projection.js.map +1 -1
- package/dist/src/mcp/server.d.ts +39 -3
- package/dist/src/mcp/server.js +22 -3
- package/dist/src/mcp/server.js.map +1 -1
- package/dist/src/muse/server.d.ts +16 -0
- package/dist/src/muse/server.js +238 -0
- package/dist/src/muse/server.js.map +1 -0
- package/dist/src/serve/archive.d.ts +158 -0
- package/dist/src/serve/archive.js +354 -0
- package/dist/src/serve/archive.js.map +1 -0
- package/dist/src/serve/arguments.d.ts +93 -0
- package/dist/src/serve/arguments.js +228 -0
- package/dist/src/serve/arguments.js.map +1 -0
- package/dist/src/serve/credentials.d.ts +91 -0
- package/dist/src/serve/credentials.js +143 -0
- package/dist/src/serve/credentials.js.map +1 -0
- package/dist/src/serve/follow.d.ts +86 -0
- package/dist/src/serve/follow.js +101 -0
- package/dist/src/serve/follow.js.map +1 -0
- package/dist/src/serve/hook-thread.d.ts +134 -0
- package/dist/src/serve/hook-thread.js +333 -0
- package/dist/src/serve/hook-thread.js.map +1 -0
- package/dist/src/serve/hook-worker.d.ts +134 -0
- package/dist/src/serve/hook-worker.js +173 -0
- package/dist/src/serve/hook-worker.js.map +1 -0
- package/dist/src/serve/server.d.ts +412 -0
- package/dist/src/serve/server.js +1251 -0
- package/dist/src/serve/server.js.map +1 -0
- package/docs/README-extended.md +766 -0
- package/docs/cli-reference.md +1633 -43
- package/package.json +4 -2
- package/schema/event.schema.json +59 -2
- package/schema/fixtures/event/invalid/daemon-id-malformed.json +15 -0
- package/schema/fixtures/event/invalid/execution-started-truncated-policy-sha256.json +18 -0
- package/schema/fixtures/event/invalid/harness-cap-at-margin.json +16 -0
- package/schema/fixtures/event/invalid/harness-cap-fractional.json +16 -0
- package/schema/fixtures/event/invalid/harness-cap-negative.json +16 -0
- package/schema/fixtures/event/invalid/harness-cap-string.json +16 -0
- package/schema/fixtures/event/invalid/harness-cap-without-harness-execution.json +16 -0
- package/schema/fixtures/event/invalid/harness-cap-zero.json +16 -0
- package/schema/fixtures/event/valid/approval-requested-harness-cap.json +18 -0
- package/schema/fixtures/event/valid/daemon-identity-declared.json +17 -0
- package/schema/fixtures/event/valid/daemon-identity.json +15 -0
- package/schema/fixtures/event/valid/execution-started-policy-sha256.json +18 -0
- package/schema/fixtures/event/valid/harness-kind-hermes.json +23 -0
- package/schema/fixtures/policy/invalid/daemons-malformed-id.json +10 -0
- package/schema/fixtures/policy/valid/daemons-allowlist.json +19 -0
- package/schema/fixtures/policy-md/invalid/schema-invalid-agent-may-request.md +21 -0
- package/schema/fixtures/policy-md/valid/agent-may-request.md +24 -0
- package/schema/policy.schema.json +50 -6
package/dist/src/cli/help.js
CHANGED
|
@@ -47,6 +47,10 @@ Usage:
|
|
|
47
47
|
[--yes] [--json]
|
|
48
48
|
approval register <task-file> [--as <id>] [--log <path>] [--json]
|
|
49
49
|
approval request <task> --action <key> [--as <id>] [--json]
|
|
50
|
+
approval propose --class <c> --key <k> --summary <s> --payload-json <j>
|
|
51
|
+
[--as <id>] [--json]
|
|
52
|
+
approval start <task> --action <key> --payload-json <j> [--as <id>]
|
|
53
|
+
[--json]
|
|
50
54
|
approval grant|reject|revoke <action-key> [--note <text>] [--as human:<id>] [--json]
|
|
51
55
|
approval expire <action-key> [--json]
|
|
52
56
|
approval token <action-key> [--policy <path>] [--dir <path>] [--json]
|
|
@@ -93,6 +97,7 @@ Usage:
|
|
|
93
97
|
approval doctor [--log <path>] [--policy <path>] [--dir <path>]
|
|
94
98
|
[--api-base <url>] [--json]
|
|
95
99
|
approval payload hash <file|-> [--json]
|
|
100
|
+
approval payload run [--cwd <dir>] [--hash] [--json] -- <cmd…>
|
|
96
101
|
approval payload agentmail-draft <inbox-id> <draft-id> [--api-base <url>]
|
|
97
102
|
[--json]
|
|
98
103
|
approval journal write --message "<text>" | - [--task <id>] [--session <id>]
|
|
@@ -121,6 +126,11 @@ Usage:
|
|
|
121
126
|
approval codex prepare|setup|doctor|start|serve (strict host workflow)
|
|
122
127
|
approval mcp serve --as agent:<id> [--dir <path>] [--log <path>]
|
|
123
128
|
[--policy <path>] (MCP over stdio; foreground)
|
|
129
|
+
approval serve --as agent:<id> [--dir <path>] [--log <path>]
|
|
130
|
+
[--policy <path>] [--port <n> | --listen <host:port>
|
|
131
|
+
| --listen unix:<path>]
|
|
132
|
+
[--allow-non-loopback] (HTTP; foreground)
|
|
133
|
+
approval muse [--dir <path>] [--port <n>] (local prototype; foreground)
|
|
124
134
|
approval reindex [--log <path>] [--index <path>] [--force] [--json]
|
|
125
135
|
approval render [--log <path>] [--out <path>] [--policy <path>]
|
|
126
136
|
[--dir <path>] [--json]
|
|
@@ -184,6 +194,12 @@ Ask — an agent declares an action and acts on the answer:
|
|
|
184
194
|
request ask the gate to admit a declared action (manual classes append
|
|
185
195
|
approval.requested; supervised/autonomous append nothing and
|
|
186
196
|
proceed straight to execution, per amended SPEC.md §6.3)
|
|
197
|
+
propose register and request one action in one call, payload inline as
|
|
198
|
+
JSON, in a class the policy declares by name and opens to agents
|
|
199
|
+
(agent_may_request); retry-safe on the same class, key and bytes
|
|
200
|
+
start record execution.started for a proposed action its requester is
|
|
201
|
+
carrying out: spends the harness grant, or records the policy's
|
|
202
|
+
own authorization for a non-manual class. REQUESTER-ONLY
|
|
187
203
|
token report whether a live single-use execution token exists for an
|
|
188
204
|
action (the RAW token is printed once, by grant, and stored nowhere)
|
|
189
205
|
consume spend a token and append execution.started (internal plumbing;
|
|
@@ -204,7 +220,10 @@ Ask — an agent declares an action and acts on the answer:
|
|
|
204
220
|
draft the agent composed, refused if the draft changed after the
|
|
205
221
|
snapshot a human approved
|
|
206
222
|
wait block until a task's requests are decided; the exit code IS the
|
|
207
|
-
decision (0 granted, 1 rejected/revoked/
|
|
223
|
+
decision (0 granted or nothing-to-wait-for, 1 rejected/revoked/
|
|
224
|
+
withdrawn/not-registered, 3 expired, 6 timeout, 7 void: a
|
|
225
|
+
re-attest voided it, ask again); run only on --json status
|
|
226
|
+
"granted", which means an unspent grant
|
|
208
227
|
withdraw take back your OWN pending request (timeout, cancelled, superseded);
|
|
209
228
|
terminal, requester-only, and a late grant then authorizes nothing
|
|
210
229
|
hook put the gate in front of an agent HARNESS. "hook claude-code" and
|
|
@@ -245,6 +264,15 @@ Ask — an agent declares an action and acts on the answer:
|
|
|
245
264
|
channels are not published, because an MCP client is an agent's
|
|
246
265
|
harness and SPEC.md §11 makes the agent the untrusted policy. It
|
|
247
266
|
runs as ONE agent identity, fixed at startup, that nothing changes
|
|
267
|
+
serve the same agent-facing surface over HTTP, for a harness in a sandbox
|
|
268
|
+
with no local log and no local policy. It adds the three things MCP
|
|
269
|
+
withheld for transport reasons: hook <harness> taking the harness
|
|
270
|
+
envelope as the request body, log follow paged by an exclusive
|
|
271
|
+
(seq, hash) cursor, and the store as an archive. TWO CREDENTIALS
|
|
272
|
+
from the launch environment, and authorization is per verb: the
|
|
273
|
+
agent one opens the hook and an allowlist of what a harness under
|
|
274
|
+
oversight needs to ask and to act on a grant, the tenant one opens
|
|
275
|
+
everything else, so the agent never reads the log it is judged by
|
|
248
276
|
|
|
249
277
|
Decide — a human answers, and only a human can:
|
|
250
278
|
queue the pending-decision INBOX: requests awaiting a human, inside their
|
|
@@ -300,6 +328,9 @@ Inspect — what the log says, and whether anything needs repair:
|
|
|
300
328
|
over its RFC 8785 canonical serialization), the value a declaration
|
|
301
329
|
carries and a grant binds to. Most flows never need it: "request
|
|
302
330
|
--payload" hashes, verifies and stores the bytes in one step.
|
|
331
|
+
"payload run" prints the payload a gated command binds to: its
|
|
332
|
+
argv, its cwd, and the digest of the script that argv names, so a
|
|
333
|
+
grant over a script binds the script and not its path.
|
|
303
334
|
"payload agentmail-draft" snapshots one AgentMail draft with the
|
|
304
335
|
AGENT's key, so a human approves the words and not a draft id
|
|
305
336
|
daemon "daemon run" is the watch loop of SPEC.md §10.2, in the FOREGROUND:
|
|
@@ -677,21 +708,21 @@ export const POLICY_TEST_HELP = policyVerbHelp("test", "check");
|
|
|
677
708
|
export const POLICY_ATTEST_HELP = `approval policy attest — record a human's sign-off on the policy file
|
|
678
709
|
|
|
679
710
|
Usage:
|
|
680
|
-
approval policy attest [--policy
|
|
681
|
-
[--
|
|
711
|
+
approval policy attest [--policy|--dir <path>] [--organ|--path <path>]
|
|
712
|
+
[--bootstrap] [--as human:<id>] [--log <path>] [--json]
|
|
682
713
|
|
|
683
714
|
Flags:
|
|
684
715
|
--policy <path> / --dir <path> the policy file, or where to discover it
|
|
685
716
|
--organ <path> attest a GATE ORGAN instead; one path per call, under --dir
|
|
686
717
|
--path <path> sign off a PROTECTED path's current bytes; one path per call
|
|
718
|
+
--bootstrap a store's FIRST policy only; re-run: policy-already-attested
|
|
687
719
|
--as human:<id> the human attesting; overrides APPROVAL_HUMAN
|
|
688
720
|
--log <path> log file to append to (default .approval/log/events.jsonl)
|
|
689
721
|
--json / -h, --help machine-readable output / this text
|
|
690
722
|
|
|
691
|
-
Appends
|
|
692
|
-
|
|
693
|
-
|
|
694
|
-
trust boundary is the local machine, so someone with local control, not who.
|
|
723
|
+
Appends policy.updated with the file's exact SHA-256; gates refuse while it
|
|
724
|
+
differs ("policy-not-attested"). Bytes, not parse. Human-only, CONFIG-DECLARED:
|
|
725
|
+
the trust boundary is the local machine (local control, not who). No TTY needed.
|
|
695
726
|
--organ appends gate.organ.attested (policy.core); --path gate.path.signed_off.
|
|
696
727
|
|
|
697
728
|
JSON shape: docs/cli-reference.md#policy-attest
|
|
@@ -779,6 +810,45 @@ JSON shape: docs/cli-reference.md#request
|
|
|
779
810
|
${GATE_CODES_POINTER}
|
|
780
811
|
${JSON_ERRORS}
|
|
781
812
|
${why("request")}`;
|
|
813
|
+
export const PROPOSE_HELP = `approval propose — register and request one action, payload inline
|
|
814
|
+
|
|
815
|
+
Usage:
|
|
816
|
+
approval propose --class <c> --key <k> --summary <text> --payload-json <json>
|
|
817
|
+
[--as <id>] [--policy <p>] [--dir <p>] [--log <p>] [--json]
|
|
818
|
+
|
|
819
|
+
Flags:
|
|
820
|
+
--class <c> an EXACT key of the policy's classes, opened to agents by
|
|
821
|
+
agent_may_request: true on it or a <prefix>.* family
|
|
822
|
+
--key <k> "<class>:<id>", recorded verbatim as action_key (≤1 KiB)
|
|
823
|
+
--summary <text> the line the approver reads (in the log, in cleartext)
|
|
824
|
+
--payload-json <j> the payload, a JSON object of at most 262144 bytes
|
|
825
|
+
--as <id> human:<id> or agent:<id>; else APPROVAL_HUMAN
|
|
826
|
+
|
|
827
|
+
decision "requested": poll \`approval wait <task> --timeout 0\` (7 void or 3
|
|
828
|
+
expired: propose again). "autonomous"/"supervised": act, then \`approval start\`.
|
|
829
|
+
A retry appends nothing (idempotent:true) unless the answer can't be used.
|
|
830
|
+
|
|
831
|
+
${GATE_CODES_POINTER}
|
|
832
|
+
${JSON_ERRORS}
|
|
833
|
+
${why("propose")}`;
|
|
834
|
+
export const START_HELP = `approval start — record that you are carrying out a proposed action
|
|
835
|
+
|
|
836
|
+
Usage:
|
|
837
|
+
approval start <task> --action <key> --payload-json <json> [--as <id>]
|
|
838
|
+
[--policy <p>] [--dir <p>] [--log <p>] [--json]
|
|
839
|
+
|
|
840
|
+
Flags:
|
|
841
|
+
--action <key> the action's idempotency key (required)
|
|
842
|
+
--payload-json <j> the bytes you act on; must hash to the registered binding
|
|
843
|
+
--as <id> human:<id> or agent:<id>; else APPROVAL_HUMAN
|
|
844
|
+
|
|
845
|
+
Appends one execution.started, once per key. REQUESTER-ONLY. A key with a
|
|
846
|
+
request spends its harness grant; a key with none is recorded as authorized by
|
|
847
|
+
the policy, and a manual class is refused.
|
|
848
|
+
|
|
849
|
+
${GATE_CODES_POINTER}
|
|
850
|
+
${JSON_ERRORS}
|
|
851
|
+
${why("start")}`;
|
|
782
852
|
function decisionHelp(verb) {
|
|
783
853
|
const noun = verb === "grant" ? "approval" : verb === "reject" ? "refusal" : "withdrawal";
|
|
784
854
|
const body = verb === "grant"
|
|
@@ -1012,7 +1082,7 @@ Usage:
|
|
|
1012
1082
|
[--as <id>] [--policy <p>] [--dir <p>] [--log <p>] [--json]
|
|
1013
1083
|
|
|
1014
1084
|
Flags:
|
|
1015
|
-
--timeout <d> how long to wait
|
|
1085
|
+
--timeout <d> how long to wait (e.g. 6h; 0 reads the state once). Required
|
|
1016
1086
|
--interval <d> poll interval (default 500ms)
|
|
1017
1087
|
--withdraw-on-timeout on timeout, withdraw the requests THIS actor opened
|
|
1018
1088
|
--as <id> the withdrawing actor; read only with the flag above
|
|
@@ -1020,12 +1090,12 @@ Flags:
|
|
|
1020
1090
|
--json machine-readable output; -h, --help this text
|
|
1021
1091
|
|
|
1022
1092
|
Polls until every approval.requested of the task has a decision, or the timeout
|
|
1023
|
-
elapses. WRITES NOTHING unless --withdraw-on-timeout. Only the MANUAL path
|
|
1024
|
-
|
|
1093
|
+
elapses. WRITES NOTHING unless --withdraw-on-timeout. Only the MANUAL path makes
|
|
1094
|
+
requests; none left to wait on is exit 0, nothing-to-wait-for, never granted.
|
|
1025
1095
|
|
|
1026
1096
|
JSON shape: docs/cli-reference.md#wait
|
|
1027
|
-
${EXIT_CODES_POINTER}. THE CODE IS THE DECISION: 0 granted
|
|
1028
|
-
|
|
1097
|
+
${EXIT_CODES_POINTER}. THE CODE IS THE DECISION: 0 granted or nothing-to-wait-for,
|
|
1098
|
+
1 rejected/revoked/withdrawn/not-registered (--json says which), 3 expired, 4 I/O, 7 VOID, and
|
|
1029
1099
|
6 TIMEOUT — the wait elapsed with request(s) still undecided.
|
|
1030
1100
|
${JSON_ERRORS}
|
|
1031
1101
|
${why("wait")}`;
|
|
@@ -1066,9 +1136,9 @@ Flags:
|
|
|
1066
1136
|
|
|
1067
1137
|
THIS IS NOT "approval queue": queue is what a human must answer, status is what
|
|
1068
1138
|
an operator must fix. Writes nothing, and reports in one object: attestation,
|
|
1069
|
-
verification, dangling executions, budget headroom
|
|
1070
|
-
|
|
1071
|
-
when there are any. The
|
|
1139
|
+
verification, dangling executions, budget headroom, loop_escalations,
|
|
1140
|
+
harness_outcomes, payload_store, git coverage, the daemon id, plus anomalies and
|
|
1141
|
+
refusals when there are any. The last three report rather than judge.
|
|
1072
1142
|
|
|
1073
1143
|
JSON shape: docs/cli-reference.md#status
|
|
1074
1144
|
${EXIT_CODES_POINTER} (1 when anything needs attention, including a torn tail)
|
|
@@ -1319,14 +1389,13 @@ Usage:
|
|
|
1319
1389
|
approval channel web [--port <n>] [--payload-dir <path>] [--as human:<id>]
|
|
1320
1390
|
[--policy <path>] [--dir <path>] [--log <path>] [--json]
|
|
1321
1391
|
approval channel telegram listen|health [--once] [--as human:<id>] [--json]
|
|
1392
|
+
approval channel relay [--listen [host:]port | --port <n>] [--proposer <a>] [--json]
|
|
1322
1393
|
|
|
1323
1394
|
Subcommands:
|
|
1324
|
-
cli render the pending queue
|
|
1325
|
-
|
|
1326
|
-
|
|
1327
|
-
|
|
1328
|
-
telegram deliver the queue to a Telegram chat and long-poll for
|
|
1329
|
-
Approve/Reject taps
|
|
1395
|
+
cli render the pending queue here; on a terminal, collect decisions
|
|
1396
|
+
web the queue as a page on 127.0.0.1 ONLY, with Grant/Reject forms
|
|
1397
|
+
telegram deliver the queue to a Telegram chat; collect Approve/Reject taps
|
|
1398
|
+
relay take gestures an operator's authenticated relay carries (EdgeOS)
|
|
1330
1399
|
|
|
1331
1400
|
A channel is TRANSPORT: it renders what the runtime derived and reports the
|
|
1332
1401
|
gesture a human made. Every decision collected here is recorded by the same
|
|
@@ -1435,7 +1504,7 @@ ${why("quickstart")}`;
|
|
|
1435
1504
|
export const HOOK_HELP = `approval hook — put the gate in front of an agent harness
|
|
1436
1505
|
|
|
1437
1506
|
Usage:
|
|
1438
|
-
approval hook claude-code|cursor|codex|grok|muse [--as agent:<id>] [--timeout <d>] [--interval <d>] [--retry-grace <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1507
|
+
approval hook claude-code|cursor|codex|grok|muse|hermes [--as agent:<id>] [--timeout <d>] [--interval <d>] [--retry-grace <d>] [--harness-cap <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1439
1508
|
approval hook classify [--json] [--policy <p>] [--dir <p>] -- <command…>
|
|
1440
1509
|
|
|
1441
1510
|
Commands:
|
|
@@ -1444,16 +1513,16 @@ Commands:
|
|
|
1444
1513
|
codex Codex synchronous Pre/Post JSON; Bash denied, direct apply_patch experimentally gated
|
|
1445
1514
|
grok Grok Build camelCase Pre/PostToolUse JSON in; {decision,reason} out, DENY IS EXIT 2. \`approval hook grok --help\` prints the config
|
|
1446
1515
|
muse Muse Code snake_case Pre/PostToolUse; ONE dialect out or it fails open. \`approval hook muse --help\` prints the config
|
|
1516
|
+
hermes Hermes Agent snake_case pre_tool_call/post_tool_call; {action,message} out, DENY IS EXIT 2, allow is {}. fail_closed: true BLOCKS a broken hook (observed on main 118984d7; default false, and v0.21.3 ignores it silently). \`approval hook hermes --help\` prints the YAML
|
|
1447
1517
|
classify print what the classifier makes of a command line and exit
|
|
1448
1518
|
--as <id> proposing identity (default agent:<harness>)
|
|
1449
|
-
--timeout/--interval/--retry-grace <d> wait / poll / hold for a retry (9m/1s/5m)
|
|
1519
|
+
--timeout/--interval/--retry-grace/--harness-cap <d> wait / poll / hold for a retry / the harness's OWN kill timeout (9m/1s/5m/none), which lapses the request 60s inside it so approval.expired lands first
|
|
1450
1520
|
--dir/--policy/--log <p> policy+log root; --dir sets BOTH, default primary
|
|
1451
1521
|
-h, --help this text
|
|
1452
|
-
|
|
1453
1522
|
Codex opt-in: register exact Bash|apply_patch synchronously with timeout 600s (default wait 9m). Bash is denied because native events hide per-call workdir; direct apply_patch is experimental. PostToolUse is diagnostic.
|
|
1454
1523
|
|
|
1455
|
-
Deny: hook-unclassified, hook-class-human-only, hook-harness-launch-unruled, hook-opaque, hook-unparseable, hook-rejected, hook-revoked, hook-expired, hook-withdrawn, hook-timeout,
|
|
1456
|
-
hook-gate-refused:<c>, hook-grant-unverified, hook-sandbox-required, hook-policy-unavailable, hook-log-unreachable, hook-unsupported-execution-context, hook-muse-contributor-model, hook-io.
|
|
1524
|
+
Deny: hook-unclassified, hook-class-human-only, hook-harness-launch-unruled, hook-opaque, hook-unparseable, hook-rejected, hook-revoked, hook-expired, hook-withdrawn, hook-timeout, hook-harness-cap-too-short,
|
|
1525
|
+
hook-gate-refused:<c>, hook-grant-unverified, hook-sandbox-required, hook-policy-unavailable, hook-log-unreachable, hook-unsupported-execution-context, hook-muse-contributor-model, hook-hermes-execute-code-unbound, hook-io.
|
|
1457
1526
|
|
|
1458
1527
|
${EXIT_CODES_POINTER} (harness verbs use 0 and 2 only; 0 is a verdict, never "ask")
|
|
1459
1528
|
${why("hook")}`;
|
|
@@ -1461,7 +1530,7 @@ export const HOOK_GROK_HELP = `approval hook grok — the gate in front of Grok
|
|
|
1461
1530
|
|
|
1462
1531
|
Usage:
|
|
1463
1532
|
approval hook grok [--as agent:<id>] [--timeout <d>] [--interval <d>]
|
|
1464
|
-
[--retry-grace <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1533
|
+
[--retry-grace <d>] [--harness-cap <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1465
1534
|
|
|
1466
1535
|
camelCase in (hookEventName, sessionId, cwd, workspaceRoot, toolName, toolInput);
|
|
1467
1536
|
{"decision":"allow"|"deny","reason":"…"} out, never "ask". DENY IS EXIT 2,
|
|
@@ -1486,7 +1555,7 @@ export const HOOK_MUSE_HELP = `approval hook muse — the gate in front of Meta
|
|
|
1486
1555
|
|
|
1487
1556
|
Usage:
|
|
1488
1557
|
approval hook muse [--as agent:<id>] [--timeout <d>] [--interval <d>]
|
|
1489
|
-
[--retry-grace <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1558
|
+
[--retry-grace <d>] [--harness-cap <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1490
1559
|
snake_case in (hook_event_name, tool_name, tool_input, cwd, model); ONE dialect
|
|
1491
1560
|
out, nested {"hookSpecificOutput":{"permissionDecision":…}} at exit 0, never
|
|
1492
1561
|
"ask". Tools: bash (per-call workdir), write_file, read_file, search.
|
|
@@ -1507,6 +1576,31 @@ That "timeout" MUST EXCEED --timeout (9m), or Muse abandons the call mid-wait
|
|
|
1507
1576
|
and, failing open, runs it while a human is still deciding.
|
|
1508
1577
|
${EXIT_CODES_POINTER} (0 for every verdict; deny is the body, not the code)
|
|
1509
1578
|
${why("hook")}`;
|
|
1579
|
+
export const HOOK_HERMES_HELP = `approval hook hermes — the gate in front of Hermes Agent (APRV-398)
|
|
1580
|
+
Usage:
|
|
1581
|
+
approval hook hermes [--as agent:<id>] [--timeout <d>] [--interval <d>]
|
|
1582
|
+
[--retry-grace <d>] [--harness-cap <d>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1583
|
+
snake_case in (hook_event_name pre_tool_call|post_tool_call, tool_name, tool_input).
|
|
1584
|
+
ONE dialect out: {"action":"block","message":"…"} AT EXIT 2 deny, {} at exit 0 allow
|
|
1585
|
+
(no allow directive; reason on stderr). Tools: terminal (command + ABSOLUTE workdir),
|
|
1586
|
+
write_file, patch, read_file, search_files. REFUSED: execute_code
|
|
1587
|
+
(hook-hermes-execute-code-unbound), and a call with no absolute workdir or a relative
|
|
1588
|
+
or missing path (hook-unsupported-execution-context): Hermes resolves those against a session directory no event reports.
|
|
1589
|
+
OBSERVED on main 118984d7: fail_closed: true BLOCKS hook crash, timeout and garbage.
|
|
1590
|
+
ITS DEFAULT IS false, and v0.21.3 (2026.9.14) fails open SILENTLY: run a 2026-09-20+ build.
|
|
1591
|
+
No hooks_auto_accept and no TTY: Hermes SILENTLY SKIPS REGISTERING THE HOOK. --dir IS MANDATORY (a gateway session's cwd is the user HOME); docs/hermes-hook.md has the evidence.
|
|
1592
|
+
The file the human commits, $HERMES_HOME/config.yaml — the home's LAST SEGMENT must be .hermes or the classifier does not see the organ (export HERMES_HOME=/Users/you/dev/hermes/.hermes; policy.core):
|
|
1593
|
+
plugins: { hook_callback_timeout: 600 }
|
|
1594
|
+
hooks_auto_accept: true
|
|
1595
|
+
hooks:
|
|
1596
|
+
pre_tool_call:
|
|
1597
|
+
- { command: "approval hook hermes --dir <repo> --timeout 4m --harness-cap 300s", timeout: 300, fail_closed: true }
|
|
1598
|
+
post_tool_call:
|
|
1599
|
+
- { command: "approval hook hermes --dir <repo> --timeout 4m", timeout: 300 }
|
|
1600
|
+
The entry "timeout" caps at 300s; hook_callback_timeout (default 30s) fails closed
|
|
1601
|
+
by itself, so --timeout MUST BE UNDER 300s (4m). WITHOUT --harness-cap the hook assumes the 30s default and denies every manual call hook-harness-cap-too-short: raise hook_callback_timeout above the entry timeout, then pass --harness-cap <the smaller of the two>. The window is then cap-60s (240s above) or approval_ttl, whichever is shorter. Register BOTH events. Long form:
|
|
1602
|
+
${EXIT_CODES_POINTER} (0 allow, 2 deny; post_tool_call always 0; never "ask")
|
|
1603
|
+
${why("hook")}`;
|
|
1510
1604
|
export const IMPORT_HELP = `approval import — turn existing permissions prose into a draft policy
|
|
1511
1605
|
|
|
1512
1606
|
Usage:
|
|
@@ -1548,12 +1642,15 @@ export const PAYLOAD_HELP = `approval payload — work with the bytes an approva
|
|
|
1548
1642
|
|
|
1549
1643
|
Usage:
|
|
1550
1644
|
approval payload hash <file|-> [--json]
|
|
1645
|
+
approval payload run [--cwd <dir>] [--hash] [--json] -- <cmd…>
|
|
1551
1646
|
approval payload agentmail-draft <inbox-id> <draft-id> [--api-base <url>]
|
|
1552
1647
|
[--json]
|
|
1553
1648
|
|
|
1554
1649
|
Commands:
|
|
1555
1650
|
hash print the payload_hash of a JSON document: SHA-256 over its RFC 8785
|
|
1556
1651
|
canonical serialization (SPEC.md §6.2)
|
|
1652
|
+
run print the payload \`approval run\` will recompute for a command: its
|
|
1653
|
+
argv, its cwd, and the digest of the script that argv names
|
|
1557
1654
|
agentmail-draft
|
|
1558
1655
|
snapshot one AgentMail draft as the payload a grant can bind to,
|
|
1559
1656
|
read with the AGENT's key from AGENTMAIL_API_KEY
|
|
@@ -1585,6 +1682,30 @@ JSON shape (stdout, one object): {"ok":true,"hash":"<64hex>"}
|
|
|
1585
1682
|
${EXIT_CODES_POINTER}
|
|
1586
1683
|
${JSON_ERRORS}
|
|
1587
1684
|
${why("payload-hash")}`;
|
|
1685
|
+
export const PAYLOAD_RUN_HELP = `approval payload run — the payload a gated command binds to
|
|
1686
|
+
|
|
1687
|
+
Usage:
|
|
1688
|
+
approval payload run [--cwd <dir>] [--hash] [--json] -- <cmd…>
|
|
1689
|
+
|
|
1690
|
+
Flags:
|
|
1691
|
+
--cwd <dir> the directory the command will run in (default: this one)
|
|
1692
|
+
--hash print the payload_hash instead of the payload bytes
|
|
1693
|
+
--json / -h, --help machine-readable (with --hash) / this text
|
|
1694
|
+
|
|
1695
|
+
Prints what \`approval run\` recomputes before it spawns:
|
|
1696
|
+
{"argv":[…],"cwd":"…","script":{"argv_index":N,"path":…,bytes,sha256}}
|
|
1697
|
+
|
|
1698
|
+
THE SCRIPT IS THE POINT (APRV-401): a known interpreter followed by a path, or
|
|
1699
|
+
a path at argv[0], binds THAT FILE'S BYTES, so a script edited before the run is
|
|
1700
|
+
payload-mismatch rather than a silent substitution. An argv naming no script
|
|
1701
|
+
carries no "script" key and hashes as it always did. NOT bound: an inline
|
|
1702
|
+
program, the interpreter, an unlisted launcher, what the script itself runs.
|
|
1703
|
+
|
|
1704
|
+
approval payload run --hash -- bash install.sh # the declaration
|
|
1705
|
+
approval payload run -- bash install.sh | approval request … --payload -
|
|
1706
|
+
${EXIT_CODES_POINTER}
|
|
1707
|
+
${JSON_ERRORS}
|
|
1708
|
+
${why("payload-run")}`;
|
|
1588
1709
|
export const PAYLOAD_AGENTMAIL_DRAFT_HELP = `approval payload agentmail-draft — snapshot a draft as an approvable payload
|
|
1589
1710
|
|
|
1590
1711
|
Usage:
|
|
@@ -1754,22 +1875,23 @@ ${why("render")}`;
|
|
|
1754
1875
|
export const TELEGRAM_HELP = `approval channel telegram — the Telegram push channel
|
|
1755
1876
|
|
|
1756
1877
|
Usage:
|
|
1757
|
-
approval channel telegram listen
|
|
1758
|
-
|
|
1759
|
-
|
|
1760
|
-
|
|
1761
|
-
approval channel telegram health
|
|
1878
|
+
approval channel telegram listen [--once] [--as human:<id>] [--payloads <f>]
|
|
1879
|
+
[--policy <p>] [--dir <p>] [--log <p>] [--api-base <url>] [--poll-timeout <s>] [--json]
|
|
1880
|
+
approval channel telegram webhook --url <https://...> [--listen [host:]port]
|
|
1881
|
+
[--path <p>] [--cycle <d>] and every listen flag above
|
|
1882
|
+
approval channel telegram health [--dir <path>] [--log <path>] [--json]
|
|
1883
|
+
|
|
1884
|
+
Two transports, MUTUALLY EXCLUSIVE per bot: listen long-polls getUpdates;
|
|
1885
|
+
webhook has Telegram post each update to a url you register (no poller).
|
|
1762
1886
|
|
|
1763
1887
|
Configuration is ENVIRONMENT-ONLY: APPROVAL_TG_TOKEN holds the bot token and
|
|
1764
|
-
APPROVAL_TG_CHAT the approver chat id
|
|
1765
|
-
|
|
1766
|
-
there is no flag that would put a bot token into a shell history.
|
|
1888
|
+
APPROVAL_TG_CHAT the approver chat id; APPROVAL.md carries only those NAMES,
|
|
1889
|
+
and no flag puts a bot token into a shell history.
|
|
1767
1890
|
|
|
1768
1891
|
Anyone in the configured chat can approve as the actor this process was started
|
|
1769
1892
|
with, so the chat's membership is part of your trust boundary. Use a private
|
|
1770
1893
|
chat with the bot — or map senders: approvers.<id>.senders.telegram: "<id>"
|
|
1771
|
-
records each decision against the person
|
|
1772
|
-
and refuses a tap from an account the policy does not name.
|
|
1894
|
+
records each decision against the attested person and refuses every other account.
|
|
1773
1895
|
|
|
1774
1896
|
${EXIT_CODES_POINTER}
|
|
1775
1897
|
${JSON_ERRORS}
|
|
@@ -1798,6 +1920,54 @@ JSON shape: docs/cli-reference.md#channel-telegram-listen
|
|
|
1798
1920
|
${EXIT_CODES_POINTER}
|
|
1799
1921
|
${JSON_ERRORS}
|
|
1800
1922
|
${why("channel-telegram-listen")}`;
|
|
1923
|
+
export const TELEGRAM_WEBHOOK_HELP = `approval channel telegram webhook — decisions arrive by webhook, no poller
|
|
1924
|
+
|
|
1925
|
+
Usage:
|
|
1926
|
+
approval channel telegram webhook --url <https://host/path> [--path <p>]
|
|
1927
|
+
[--listen [host:]port | --port <n>] [--allow-non-loopback] [--cycle <d>]
|
|
1928
|
+
[--reclaim] [--as human:<id>] [--policy <p>] [--dir <p>] [--log <p>]
|
|
1929
|
+
[--payloads <f>] [--api-base <url>] [--no-gloss] [--json]
|
|
1930
|
+
|
|
1931
|
+
Flags:
|
|
1932
|
+
--url <https://...> REQUIRED: the PUBLIC url registered with setWebhook. https only, on port 443, 80, 88 or 8443 (Telegram's list), and no user:password
|
|
1933
|
+
--port <n> / --listen <[host:]port> this process's own bind. LOOPBACK by default (4683); routable also needs --allow-non-loopback. Never 0
|
|
1934
|
+
--path <p> / --cycle <d> must equal the url's own path / dispatch period (30s)
|
|
1935
|
+
--reclaim register over the webhook already holding this bot
|
|
1936
|
+
-h, --help this text
|
|
1937
|
+
|
|
1938
|
+
APPROVAL_TG_WEBHOOK_SECRET is REQUIRED, from the launch environment: it is
|
|
1939
|
+
Telegram's secret_token, echoed on every delivery, and a post without the
|
|
1940
|
+
matching header is refused and never a decision. NO TLS HERE: plain HTTP
|
|
1941
|
+
behind a proxy or tunnel you own (--url names it); long polling then refuses.
|
|
1942
|
+
|
|
1943
|
+
JSON shape: docs/cli-reference.md#channel-telegram-webhook
|
|
1944
|
+
${EXIT_CODES_POINTER}
|
|
1945
|
+
${JSON_ERRORS}
|
|
1946
|
+
${why("channel-telegram-webhook")}`;
|
|
1947
|
+
export const CHANNEL_RELAY_HELP = `approval channel relay — gestures an operator's authenticated relay carries
|
|
1948
|
+
|
|
1949
|
+
Usage:
|
|
1950
|
+
approval channel relay [--listen [host:]port | --port <n>] [--allow-non-loopback]
|
|
1951
|
+
[--proposer agent:<id>] [--policy <p>] [--dir <p>] [--log <p>] [--json]
|
|
1952
|
+
|
|
1953
|
+
Flags:
|
|
1954
|
+
--port <n> / --listen <[host:]port> LOOPBACK by default (4684); routable also needs --allow-non-loopback
|
|
1955
|
+
--proposer <actor> who a propose gesture is recorded under (default agent:edgeos-relay)
|
|
1956
|
+
-h, --help this text
|
|
1957
|
+
|
|
1958
|
+
APPROVAL_RELAY_SECRET is REQUIRED, from the launch environment: the control
|
|
1959
|
+
plane sends it in x-approval-relay-secret, and a post without it is refused
|
|
1960
|
+
and never written to the log. POST /relay/gesture takes one closed JSON body:
|
|
1961
|
+
propose, attest or decline a policy by sha256, or grant or reject a request by
|
|
1962
|
+
action key, each with a nonce and issued_at. The sender is an EdgeOS id, and
|
|
1963
|
+
it is resolved against approvers.<id>.senders.edgeos in the policy in force:
|
|
1964
|
+
an unmapped account is refused sender-unmapped. This process holds NO human
|
|
1965
|
+
identity and NO TLS. Trust: the daemon trusts the relay's attribution.
|
|
1966
|
+
|
|
1967
|
+
JSON shape: docs/cli-reference.md#channel-relay
|
|
1968
|
+
${EXIT_CODES_POINTER}
|
|
1969
|
+
${JSON_ERRORS}
|
|
1970
|
+
${why("channel-relay")}`;
|
|
1801
1971
|
export const TELEGRAM_HEALTH_HELP = `approval channel telegram health — is this runtime configured for Telegram?
|
|
1802
1972
|
|
|
1803
1973
|
Usage:
|
|
@@ -2441,4 +2611,42 @@ SERIALLY, THIS SERVER READS NO .approval/env. POST-V1: tasks/elicitation.
|
|
|
2441
2611
|
${EXIT_CODES_POINTER} (2 is a startup refusal; 0 is a clean shutdown)
|
|
2442
2612
|
${JSON_ERRORS}
|
|
2443
2613
|
${why("mcp-serve")}`;
|
|
2614
|
+
export const MUSE_HELP = `approval muse — local synthetic Muse consumer prototype (FOREGROUND)
|
|
2615
|
+
|
|
2616
|
+
Usage:
|
|
2617
|
+
approval muse [--dir <path>] [--port <n>]
|
|
2618
|
+
|
|
2619
|
+
APPROVAL_MUSE_TENANT identifies one tenant per process. Distinct
|
|
2620
|
+
APPROVAL_MUSE_READ_TOKEN and APPROVAL_MUSE_PROPOSE_TOKEN (24+ characters) are
|
|
2621
|
+
required in the launch environment. Listens only on 127.0.0.1, port 4683 by
|
|
2622
|
+
default. This is a local prototype, not a verified native Muse protocol.
|
|
2623
|
+
Human decisions use the already configured Telegram listener. No decision,
|
|
2624
|
+
execution, export, or generic verb endpoint exists here.
|
|
2625
|
+
|
|
2626
|
+
${EXIT_CODES_POINTER} (2 is a startup refusal; 0 is a clean shutdown)
|
|
2627
|
+
${why("muse")}`;
|
|
2628
|
+
export const SERVE_HELP = `approval serve — the agent-facing surface over HTTP (FOREGROUND)
|
|
2629
|
+
|
|
2630
|
+
Usage:
|
|
2631
|
+
approval serve [--as agent:<id>] [--dir <p>] [--log <p>] [--policy <p>]
|
|
2632
|
+
[--port <n> | --listen <host:port>|unix:<path>]
|
|
2633
|
+
|
|
2634
|
+
Flags:
|
|
2635
|
+
--as agent:<id> the identity EVERY call is recorded under, or APPROVAL_AGENT
|
|
2636
|
+
--dir/--log/--policy <p> the store root, and the log and policy pinned
|
|
2637
|
+
--port <n>=4682 loopback. --listen <host:port> widens, non-loopback ALSO needs --allow-non-loopback; unix:<path> or APPROVAL_SERVE_LISTEN: a socket
|
|
2638
|
+
--hook-timeout/--hook-harness-cap <d> pinned on every hook call, as the stdin form's --timeout and --harness-cap (the CALLER's own kill timeout)
|
|
2639
|
+
--hook-threads <n>=16 / --hook-queue <n>=64 hook calls running at once (a thread each) / waiting; past both, refused serve-hook-saturated
|
|
2640
|
+
|
|
2641
|
+
For a harness in a sandbox with no local log and no policy. THE VERBS ARE mcp
|
|
2642
|
+
serve's: the registry less human_only, --as absent from every schema, the
|
|
2643
|
+
identity appended last, no grant. It adds hook/<harness> (envelope in, the
|
|
2644
|
+
bytes stdin prints out), log/follow (paged, exclusive (seq, hash) cursor) and
|
|
2645
|
+
export (the store, minus keys, env and vault). AUTHORIZATION IS PER VERB:
|
|
2646
|
+
APPROVAL_SERVE_AGENT_TOKEN opens the hook and an allowlist (ask, and act on a
|
|
2647
|
+
grant); APPROVAL_SERVE_TENANT_TOKEN opens the rest, records included. NO TLS.
|
|
2648
|
+
|
|
2649
|
+
${EXIT_CODES_POINTER} (2 is a startup refusal; 0 is a clean shutdown)
|
|
2650
|
+
${JSON_ERRORS}
|
|
2651
|
+
${why("serve")}`;
|
|
2444
2652
|
//# sourceMappingURL=help.js.map
|
package/dist/src/cli/help.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAExE,0EAA0E;AAC1E,MAAM,UAAU,GAAG;;;;;0EAKuD,CAAC;AAE3E,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,MAAM,WAAW,GAAG;8BACU,CAAC;AAE/B,uDAAuD;AACvD,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO,8BAA8B,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+SvB,UAAU;;;;;;;;;;;EAWV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAmC8D,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;EAiB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;sCAqBc,kBAAkB;EACtD,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;EAoBzB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBvB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,GAAG,kBAAkB;;;;yDAIU,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,6EAA6E,CAAC;AAE5G,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;uDAiB4B,qBAAqB;;EAE1E,iBAAiB;EACjB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB/B,kBAAkB;EAClB,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAuB;IACrE,OAAO,mBAAmB,IAAI;;;oBAGZ,IAAI;;;;;;;;6BAQK,KAAK;;EAEhC,qBAAqB;;;;EAIrB,iBAAiB;EACjB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG;EACzB,kBAAkB;qEACiD,CAAC;AAEtE,wEAAwE;AACxE,MAAM,mBAAmB,GAAG;EAC1B,kBAAkB;qEACiD,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,SAAS,YAAY,CAAC,IAAmC;IACvD,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1F,MAAM,IAAI,GACR,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;;iFAEyE;QAC3E,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC;;oEAE0D;YAC5D,CAAC,CAAC;;gDAEsC,CAAC;IAE/C,OAAO,YAAY,IAAI,qBAAqB,IAAI;;;aAGrC,IAAI,gCACb,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAC3C;;;;iEAKE,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,EACN;;;;;;EAMA,IAAI;;oCAE8B,IAAI;EACtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;EAkBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;2DAY2B,gBAAgB;;;;;;;;;;;EAWzE,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;EAmBxB,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;EAmBvB,kBAAkB;;;EAGlB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuBxB,kBAAkB;EAClB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;EAmB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;EAkBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB5B,kBAAkB;EAClB,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB9B,kBAAkB;EAClB,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;6DAYoC,gBAAgB;IACzE,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;;;;;;;;EAQ/C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB7B,kBAAkB;EAClB,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuBvB,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB5B,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB5B,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;EAUzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;EAc1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;EAoB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;EAmB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;EAoB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;EAWzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAEd,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,YAAY,GAAG;iEAC4C,CAAC;AAElE,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,YAAY;;EAEZ,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;EAoB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;EAoB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAE;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;EAejC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;EAkB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;EAiBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;EAmBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;EAcpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;EAmBhC,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;EAezC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;yDAC4C,CAAC;AAE1D,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC"}
|
|
1
|
+
{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAExE,0EAA0E;AAC1E,MAAM,UAAU,GAAG;;;;;0EAKuD,CAAC;AAE3E,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,MAAM,WAAW,GAAG;8BACU,CAAC;AAE/B,uDAAuD;AACvD,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO,8BAA8B,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8UvB,UAAU;;;;;;;;;;;EAWV,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAmC8D,CAAC;AAE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;EAiB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;sCAqBc,kBAAkB;EACtD,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;EAoBzB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBvB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,GAAG,kBAAkB;;;;yDAIU,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,6EAA6E,CAAC;AAE5G,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;uDAiB4B,qBAAqB;;EAE1E,iBAAiB;EACjB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB/B,kBAAkB;EAClB,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAuB;IACrE,OAAO,mBAAmB,IAAI;;;oBAGZ,IAAI;;;;;;;;6BAQK,KAAK;;EAEhC,qBAAqB;;;;EAIrB,iBAAiB;EACjB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG;EACzB,kBAAkB;qEACiD,CAAC;AAEtE,wEAAwE;AACxE,MAAM,mBAAmB,GAAG;EAC1B,kBAAkB;qEACiD,CAAC;AAEtE,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;EAkB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;EAexB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,SAAS,YAAY,CAAC,IAAmC;IACvD,MAAM,IAAI,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1F,MAAM,IAAI,GACR,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;;iFAEyE;QAC3E,CAAC,CAAC,IAAI,KAAK,QAAQ;YACjB,CAAC,CAAC;;oEAE0D;YAC5D,CAAC,CAAC;;gDAEsC,CAAC;IAE/C,OAAO,YAAY,IAAI,qBAAqB,IAAI;;;aAGrC,IAAI,gCACb,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAC3C;;;;iEAKE,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,EACN;;;;;;EAMA,IAAI;;oCAE8B,IAAI;EACtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;EAmB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;EAkBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;2DAY2B,gBAAgB;;;;;;;;;;;EAWzE,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;EAmBxB,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;EAmB1B,mBAAmB;EACnB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtB,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;EAmBvB,kBAAkB;;;EAGlB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuBxB,kBAAkB;EAClB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;EAmB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;EAkBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAE3B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB5B,kBAAkB;EAClB,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB1B,kBAAkB;EAClB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB9B,kBAAkB;EAClB,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;6DAYoC,gBAAgB;IACzE,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;;;;;;;;EAQ/C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;EAsB7B,kBAAkB;EAClB,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuBvB,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB5B,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB5B,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;EAuB9B,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;EAUzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;EAiB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;EAoB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;EAmB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;EAmBzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;AAElB,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB3B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,0BAA0B,CAAC,EAAE,CAAC;AAEpC,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBlC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;EAWzB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAEd,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,YAAY,GAAG;iEAC4C,CAAC;AAElE,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;EAkBxB,YAAY;;EAEZ,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB5B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;EAoB7B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;EAoB/B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,QAAQ,GAAE;;;;;;;;;;;;;;;;;;;;;EAqBrB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AAEf,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;EAejC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;EAkB9B,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;AAEvB,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;EAiBjC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAE1B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;EAmBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBnC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;EAoBtC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;EAqB1C,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;EAcpC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;EAmBhC,kBAAkB;;EAElB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;EAezC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBhC,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;AAEzB,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;yDAC4C,CAAC;AAE1D,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBtB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;EAYvB,kBAAkB;EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;EAqBxB,kBAAkB;EAClB,WAAW;EACX,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC"}
|