ctxr-cli 0.24.0 → 0.25.0

package/dist/core/approval/decision.d.ts

@@ -0,0 +1,73 @@
+import type { IssueComment, Review } from '../forge/github.js';
+/**
+ * change-approval spec (design.md D3): a decision lives on the forge, as a
+ * review by the recording login whose body carries a sentence for people and
+ * a marker for this module. The landing path's own records (a block, a
+ * resolved conflict awaiting a new decision) are comments by the same login
+ * with a marker of their own. Nothing else — no local file — holds either.
+ *
+ * Marker values never contain spaces (commit ids, emails, ISO times, slugs),
+ * so a marker is `key=value` tokens separated by single spaces.
+ */
+export declare const DECISION_MARKER = "ctxr-decision";
+export declare const LANDING_MARKER = "ctxr-land";
+export type DecisionKind = 'approve' | 'request-changes';
+export interface Decision {
+    decision: DecisionKind;
+    head: string;
+    by: string;
+    at: string;
+    /** Set on a carry-over (design.md D5): the head the person approved, which this head carries over from. */
+    carriedFrom: string | null;
+    /** The comment of a request for changes; null for an approval. */
+    comment: string | null;
+}
+export type LandingRecordState = 'blocked' | 'needs-reapproval';
+export interface LandingMark {
+    state: LandingRecordState;
+    reason: string;
+    head: string;
+    at: string;
+}
+/** The review body for a decision: one sentence, the comment when there is one, then the marker. */
+export declare function decisionBody(decision: Decision): string;
+export declare function parseDecision(body: string): Decision | null;
+/** The comment body for a landing record: a sentence for people, then the marker. */
+export declare function landingBody(mark: LandingMark, sentence: string): string;
+export declare function parseLandingMark(body: string): LandingMark | null;
+export type ReviewStateName = 'awaiting' | 'approved' | 'changes-requested' | 'needs-reapproval' | 'blocked';
+export interface ReviewState {
+    state: ReviewStateName;
+    /** The latest decision by the recording login, if any. */
+    decision: Decision | null;
+    /** The latest landing record by the recording login, when it is what decides the state. */
+    landing: LandingMark | null;
+    /**
+     * True when the latest decision approves a head other than the current one and no landing record
+     * overrides it: the caller decides, by patch identity, whether the current head carries it over.
+     */
+    approvalNeedsCarryCheck: boolean;
+}
+/**
+ * change-approval spec ("Only reviews by the recording identity count"): the
+ * latest well-formed decision by `recordingLogin` decides, and the latest
+ * landing record by the same login overrides it when it was posted later and
+ * is about the current head. Anything by any other login is not read at all.
+ *
+ * "Latest" is the forge's own posting time (stable-sorted, so the forge's order
+ * breaks ties), never the marker's `at`: a carry-over keeps the time the person
+ * decided (design.md D5) while being the newer record.
+ *
+ * An approval of a different head is reported as `needs-reapproval` with
+ * `approvalNeedsCarryCheck` set; whether a clean rebase carries it over is a
+ * git question this module does not ask (write-lifecycle spec).
+ */
+export declare function resolveReviewState(input: {
+    reviews: readonly Review[];
+    comments: readonly IssueComment[];
+    recordingLogin: string;
+    head: string;
+}): ReviewState;
+/** change-approval spec: an exact email, or an `@domain` entry matching that domain exactly. */
+export declare function isDecider(email: string, deciders: readonly string[]): boolean;
+//# sourceMappingURL=decision.d.ts.map

package/dist/core/approval/decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../../src/core/approval/decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE/D;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAC/C,eAAO,MAAM,cAAc,cAAc,CAAC;AAG1C,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAEzD,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,2GAA2G;IAC3G,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kEAAkE;IAClE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,kBAAkB,CAAC;AAEhE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAgCD,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAevD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAe3D;AAED,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAOjE;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,UAAU,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAE7G,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,eAAe,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1B,2FAA2F;IAC3F,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAOD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,WAAW,CAiCd;AAED,gGAAgG;AAChG,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAS7E"}

package/dist/core/approval/decision.js

@@ -0,0 +1,166 @@
+/**
+ * change-approval spec (design.md D3): a decision lives on the forge, as a
+ * review by the recording login whose body carries a sentence for people and
+ * a marker for this module. The landing path's own records (a block, a
+ * resolved conflict awaiting a new decision) are comments by the same login
+ * with a marker of their own. Nothing else — no local file — holds either.
+ *
+ * Marker values never contain spaces (commit ids, emails, ISO times, slugs),
+ * so a marker is `key=value` tokens separated by single spaces.
+ */
+export const DECISION_MARKER = 'ctxr-decision';
+export const LANDING_MARKER = 'ctxr-land';
+const MARKER_VERSION = 'v1';
+function marker(name, fields) {
+    const tokens = Object.entries(fields).map(([key, value]) => `${key}=${value}`);
+    return `<!-- ${name} ${MARKER_VERSION} ${tokens.join(' ')} -->`;
+}
+/**
+ * Only a marker that ends the body counts. The body is built with the marker
+ * last, and a comment above it is the decider's own text — which must never be
+ * able to carry a marker that reads as a different decision, head or decider.
+ */
+function parseMarker(name, body) {
+    const pattern = new RegExp(`<!-- ${name} ${MARKER_VERSION} ([^>]*?) -->\\s*$`);
+    const found = pattern.exec(body);
+    if (found === null)
+        return null;
+    const fields = {};
+    for (const token of found[1].split(' ')) {
+        const eq = token.indexOf('=');
+        if (eq <= 0)
+            return null;
+        fields[token.slice(0, eq)] = token.slice(eq + 1);
+    }
+    return fields;
+}
+const SHA = /^[0-9a-f]{40}$/;
+const NO_SPACE = /^\S+$/;
+function neutralizeComment(comment) {
+    return comment.replace(/<!--/g, '<! --').replace(/-->/g, '-- >');
+}
+/** The review body for a decision: one sentence, the comment when there is one, then the marker. */
+export function decisionBody(decision) {
+    const short = decision.head.slice(0, 7);
+    const sentence = decision.carriedFrom !== null
+        ? `Carried over from ${decision.carriedFrom.slice(0, 7)} to ${short} by a clean rebase (patches unchanged). Approved by ${decision.by}.`
+        : decision.decision === 'approve'
+            ? `Approved by ${decision.by} on the review page, for commit ${short}.`
+            : `Changes requested by ${decision.by} on the review page, for commit ${short}.`;
+    const fields = { decision: decision.decision, head: decision.head, by: decision.by, at: decision.at };
+    if (decision.carriedFrom !== null)
+        fields['carried-from'] = decision.carriedFrom;
+    const parts = [sentence];
+    // A comment cannot open an HTML comment of its own, so it can neither hide text on the forge nor imitate a marker.
+    if (decision.comment !== null)
+        parts.push(neutralizeComment(decision.comment.trim()));
+    parts.push(marker(DECISION_MARKER, fields));
+    return parts.join('\n\n');
+}
+export function parseDecision(body) {
+    const fields = parseMarker(DECISION_MARKER, body);
+    if (fields === null)
+        return null;
+    const { decision, head, by, at } = fields;
+    if (decision !== 'approve' && decision !== 'request-changes')
+        return null;
+    if (head === undefined || !SHA.test(head))
+        return null;
+    if (by === undefined || !NO_SPACE.test(by) || at === undefined || !NO_SPACE.test(at))
+        return null;
+    const carriedFrom = fields['carried-from'] ?? null;
+    if (carriedFrom !== null && !SHA.test(carriedFrom))
+        return null;
+    let comment = null;
+    if (decision === 'request-changes') {
+        const paragraphs = body.slice(0, body.lastIndexOf(`<!-- ${DECISION_MARKER}`)).split('\n\n');
+        comment = paragraphs.slice(1).join('\n\n').trim();
+    }
+    return { decision, head, by, at, carriedFrom, comment };
+}
+/** The comment body for a landing record: a sentence for people, then the marker. */
+export function landingBody(mark, sentence) {
+    return `${sentence}\n\n${marker(LANDING_MARKER, { state: mark.state, reason: mark.reason, head: mark.head, at: mark.at })}`;
+}
+export function parseLandingMark(body) {
+    const fields = parseMarker(LANDING_MARKER, body);
+    if (fields === null)
+        return null;
+    const { state, reason, head, at } = fields;
+    if (state !== 'blocked' && state !== 'needs-reapproval')
+        return null;
+    if (reason === undefined || head === undefined || !SHA.test(head) || at === undefined)
+        return null;
+    return { state, reason, head, at };
+}
+function timeOf(value) {
+    const t = value === null ? Number.NaN : Date.parse(value);
+    return Number.isNaN(t) ? 0 : t;
+}
+/**
+ * change-approval spec ("Only reviews by the recording identity count"): the
+ * latest well-formed decision by `recordingLogin` decides, and the latest
+ * landing record by the same login overrides it when it was posted later and
+ * is about the current head. Anything by any other login is not read at all.
+ *
+ * "Latest" is the forge's own posting time (stable-sorted, so the forge's order
+ * breaks ties), never the marker's `at`: a carry-over keeps the time the person
+ * decided (design.md D5) while being the newer record.
+ *
+ * An approval of a different head is reported as `needs-reapproval` with
+ * `approvalNeedsCarryCheck` set; whether a clean rebase carries it over is a
+ * git question this module does not ask (write-lifecycle spec).
+ */
+export function resolveReviewState(input) {
+    let decision = null;
+    let decisionTime = -1;
+    for (const review of input.reviews) {
+        if (review.author !== input.recordingLogin)
+            continue;
+        const parsed = parseDecision(review.body);
+        if (parsed === null)
+            continue;
+        const t = timeOf(review.submittedAt);
+        if (t >= decisionTime) {
+            decision = parsed;
+            decisionTime = t;
+        }
+    }
+    let landing = null;
+    let landingTime = -1;
+    for (const comment of input.comments) {
+        if (comment.author !== input.recordingLogin)
+            continue;
+        const parsed = parseLandingMark(comment.body);
+        if (parsed === null)
+            continue;
+        const t = timeOf(comment.createdAt);
+        if (t >= landingTime) {
+            landing = parsed;
+            landingTime = t;
+        }
+    }
+    if (landing !== null && landing.head === input.head && landingTime >= decisionTime) {
+        return { state: landing.state, decision, landing, approvalNeedsCarryCheck: false };
+    }
+    if (decision === null)
+        return { state: 'awaiting', decision, landing: null, approvalNeedsCarryCheck: false };
+    if (decision.decision === 'request-changes')
+        return { state: 'changes-requested', decision, landing: null, approvalNeedsCarryCheck: false };
+    if (decision.head === input.head)
+        return { state: 'approved', decision, landing: null, approvalNeedsCarryCheck: false };
+    return { state: 'needs-reapproval', decision, landing: null, approvalNeedsCarryCheck: true };
+}
+/** change-approval spec: an exact email, or an `@domain` entry matching that domain exactly. */
+export function isDecider(email, deciders) {
+    const normalized = email.toLowerCase();
+    const at = normalized.lastIndexOf('@');
+    if (at <= 0)
+        return false;
+    const domain = normalized.slice(at);
+    return deciders.some((entry) => {
+        const e = entry.toLowerCase();
+        return e.startsWith('@') ? domain === e : normalized === e;
+    });
+}
+//# sourceMappingURL=decision.js.map

package/dist/core/approval/decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.js","sourceRoot":"","sources":["../../../src/core/approval/decision.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAC/C,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,cAAc,GAAG,IAAI,CAAC;AAwB5B,SAAS,MAAM,CAAC,IAAY,EAAE,MAA8B;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/E,OAAO,QAAQ,IAAI,IAAI,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,cAAc,oBAAoB,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GACZ,QAAQ,CAAC,WAAW,KAAK,IAAI;QAC3B,CAAC,CAAC,qBAAqB,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,uDAAuD,QAAQ,CAAC,EAAE,GAAG;QACxI,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAC/B,CAAC,CAAC,eAAe,QAAQ,CAAC,EAAE,mCAAmC,KAAK,GAAG;YACvE,CAAC,CAAC,wBAAwB,QAAQ,CAAC,EAAE,mCAAmC,KAAK,GAAG,CAAC;IACvF,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC9H,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI;QAAE,MAAM,CAAC,cAAc,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;IACjF,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,mHAAmH;IACnH,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;IACnD,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,eAAe,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5F,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,IAAiB,EAAE,QAAgB;IAC7D,OAAO,GAAG,QAAQ,OAAO,MAAM,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAiBD,SAAS,MAAM,CAAC,KAAoB;IAClC,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAKlC;IACC,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc;YAAE,SAAS;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;YACtB,QAAQ,GAAG,MAAM,CAAC;YAClB,YAAY,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAuB,IAAI,CAAC;IACvC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;YACrB,OAAO,GAAG,MAAM,CAAC;YACjB,WAAW,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;QACnF,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAC7G,IAAI,QAAQ,CAAC,QAAQ,KAAK,iBAAiB;QAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAC5I,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IACxH,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,QAA2B;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/approval/file-diff.d.ts

@@ -0,0 +1,32 @@
+import type { GitRunner } from '../git/exec.js';
+/**
+ * change-approval spec ("The approval page shows the change itself"): every
+ * file under the store root that differs between the base and the pull
+ * request's head, as removed and added lines. Read from git's object store
+ * with a three-dot range, so the base is the merge base and the worktree's
+ * uncommitted work never enters it; derived cache paths are excluded.
+ */
+export interface DiffLine {
+    kind: 'add' | 'del' | 'ctx';
+    text: string;
+}
+export interface FileDiff {
+    path: string;
+    /** Set when git detected a rename. */
+    oldPath: string | null;
+    status: 'added' | 'removed' | 'modified' | 'moved';
+    binary: boolean;
+    hunks: {
+        header: string;
+        lines: DiffLine[];
+    }[];
+}
+export declare function readFileDiffs(git: GitRunner, storeRoot: string, base: string, head: string, derivedPaths: readonly string[]): Promise<FileDiff[]>;
+/** Parses `git diff` output. Exported for tests. */
+export declare function parseUnifiedDiff(text: string): FileDiff[];
+/** Each file as a heading and a block of marked lines — readable with no script and no colour. */
+export declare function renderFileDiffs(files: readonly FileDiff[], labels: {
+    binary: string;
+    noFiles: string;
+}): string;
+//# sourceMappingURL=file-diff.d.ts.map

package/dist/core/approval/file-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.d.ts","sourceRoot":"","sources":["../../../src/core/approval/file-diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;IACnD,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAOvJ;AAOD,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,CAoCzD;AAKD,kGAAkG;AAClG,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,EAAE,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAkB/G"}

package/dist/core/approval/file-diff.js

@@ -0,0 +1,83 @@
+import { escapeHtml } from '../browse/render.js';
+export async function readFileDiffs(git, storeRoot, base, head, derivedPaths) {
+    const excludes = derivedPaths.map((p) => `:(exclude)${p.replace(/\/+$/, '')}`);
+    const { stdout } = await git.run(['diff', '--no-color', '--no-ext-diff', '-M', '--relative', `${base}...${head}`, '--', '.', ...excludes], { cwd: storeRoot });
+    return parseUnifiedDiff(stdout);
+}
+function unquote(raw) {
+    if (!raw.startsWith('"'))
+        return raw;
+    return JSON.parse(raw.replace(/\\([0-7]{3})/g, (_m, oct) => `\\u00${Number.parseInt(oct, 8).toString(16).padStart(2, '0')}`));
+}
+/** Parses `git diff` output. Exported for tests. */
+export function parseUnifiedDiff(text) {
+    const files = [];
+    let current = null;
+    let hunk = null;
+    for (const line of text.split('\n')) {
+        if (line.startsWith('diff --git ')) {
+            const match = /^diff --git a\/(.*) b\/(.*)$/.exec(line);
+            current = { path: unquote(match?.[2] ?? line), oldPath: null, status: 'modified', binary: false, hunks: [] };
+            hunk = null;
+            files.push(current);
+            continue;
+        }
+        if (current === null)
+            continue;
+        if (hunk === null) {
+            if (line.startsWith('new file mode'))
+                current.status = 'added';
+            else if (line.startsWith('deleted file mode'))
+                current.status = 'removed';
+            else if (line.startsWith('rename from ')) {
+                current.oldPath = unquote(line.slice('rename from '.length));
+                current.status = 'moved';
+            }
+            else if (line.startsWith('rename to '))
+                current.path = unquote(line.slice('rename to '.length));
+            else if (line.startsWith('Binary files '))
+                current.binary = true;
+            else if (line.startsWith('@@')) {
+                hunk = { header: line, lines: [] };
+                current.hunks.push(hunk);
+            }
+            continue;
+        }
+        if (line.startsWith('@@')) {
+            hunk = { header: line, lines: [] };
+            current.hunks.push(hunk);
+        }
+        else if (line.startsWith('+'))
+            hunk.lines.push({ kind: 'add', text: line.slice(1) });
+        else if (line.startsWith('-'))
+            hunk.lines.push({ kind: 'del', text: line.slice(1) });
+        else if (line.startsWith(' '))
+            hunk.lines.push({ kind: 'ctx', text: line.slice(1) });
+        // "" and the trailing empty line carry nothing to show.
+    }
+    return files;
+}
+const MARK = { add: '+', del: '−', ctx: ' ' };
+const LABEL = { add: 'added', del: 'removed', ctx: 'unchanged' };
+/** Each file as a heading and a block of marked lines — readable with no script and no colour. */
+export function renderFileDiffs(files, labels) {
+    if (files.length === 0)
+        return `<p class="ctxr-empty">${escapeHtml(labels.noFiles)}</p>`;
+    return files
+        .map((file) => {
+        const title = file.oldPath === null ? file.path : `${file.oldPath} → ${file.path}`;
+        const body = file.binary
+            ? `<p class="ctxr-empty">${escapeHtml(labels.binary)}</p>`
+            : file.hunks
+                .map((h) => {
+                const rows = h.lines
+                    .map((l) => `<span class="ctxr-diff-${l.kind}" title="${LABEL[l.kind]}">${MARK[l.kind]} ${escapeHtml(l.text)}</span>`)
+                    .join('\n');
+                return `<pre class="ctxr-diff"><span class="ctxr-diff-hunk">${escapeHtml(h.header)}</span>\n${rows}</pre>`;
+            })
+                .join('\n');
+        return `<section class="ctxr-diff-file"><h3><code>${escapeHtml(title)}</code> <span class="ctxr-diff-status">${escapeHtml(file.status)}</span></h3>\n${body}</section>`;
+    })
+        .join('\n');
+}
+//# sourceMappingURL=file-diff.js.map

package/dist/core/approval/file-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.js","sourceRoot":"","sources":["../../../src/core/approval/file-diff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAuBjD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,IAAY,EAAE,YAA+B;IAChI,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAC9B,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,EACxG,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAC;IACF,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAW,CAAC;AAClJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAoB,IAAI,CAAC;IACpC,IAAI,IAAI,GAAqC,IAAI,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC7G,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;iBAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;gBAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;iBACrE,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YAC3B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;iBAC7F,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;iBAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAClF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAChF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,mFAAmF;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAA+C,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1F,MAAM,KAAK,GAA+C,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAE7G,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,MAA2C;IACrG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,yBAAyB,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACzF,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;YACtB,CAAC,CAAC,yBAAyB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;YAC1D,CAAC,CAAC,IAAI,CAAC,KAAK;iBACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK;qBACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,IAAI,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;qBACrH,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,uDAAuD,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC;YAC7G,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,6CAA6C,UAAU,CAAC,KAAK,CAAC,0CAA0C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,YAAY,CAAC;IAC1K,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/core/approval/identity.d.ts

@@ -0,0 +1,34 @@
+import type { ChangeApprovalConfig } from '../../config/schema.js';
+/**
+ * change-approval spec ("Every approval route requires a verified identity
+ * assertion", design.md D2): the signed token the access proxy in front of
+ * `ctxr serve` forwards on every request, verified here for every request —
+ * signature against the configured key set, then issuer, audience, expiry and
+ * an email claim. It fails closed: a missing header, an unknown key, a key set
+ * that cannot be fetched, or any claim out of line is a refusal, never a pass.
+ *
+ * Only RS256 and ES256, the algorithms access proxies sign with. `none` and
+ * every HMAC algorithm are refused outright, so a token cannot choose to be
+ * checked against a secret this server does not hold.
+ */
+export type IdentityResult = {
+    ok: true;
+    email: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface IdentityVerifier {
+    verify(headerValue: string | string[] | undefined): Promise<IdentityResult>;
+}
+type FetchLike = (url: string) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+export declare function createIdentityVerifier(identity: ChangeApprovalConfig['identity'], opts?: {
+    fetch?: FetchLike;
+    now?: () => Date;
+}): IdentityVerifier;
+export {};
+//# sourceMappingURL=identity.d.ts.map

package/dist/core/approval/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/core/approval/identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7E;AAED,KAAK,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAgBrG,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,EAC1C,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAAO,GACjD,gBAAgB,CA+ElB"}

package/dist/core/approval/identity.js

@@ -0,0 +1,105 @@
+import { createPublicKey, verify } from 'node:crypto';
+const ALGORITHMS = {
+    RS256: { hash: 'sha256' },
+    ES256: { hash: 'sha256', dsaEncoding: 'ieee-p1363' },
+};
+/** Seconds of clock skew allowed on `exp` and `nbf`. */
+const SKEW_SECONDS = 30;
+/** An unknown key id re-fetches the key set at most this often, so a stream of forged ids cannot turn into a stream of fetches. */
+const REFETCH_INTERVAL_MS = 10_000;
+function decodeSegment(segment) {
+    return JSON.parse(Buffer.from(segment, 'base64url').toString('utf8'));
+}
+export function createIdentityVerifier(identity, opts = {}) {
+    const fetchImpl = opts.fetch ?? ((url) => fetch(url));
+    const now = opts.now ?? (() => new Date());
+    let keys = new Map();
+    let lastFetch = 0;
+    async function refreshKeys() {
+        lastFetch = Date.now();
+        const response = await fetchImpl(identity.jwks_url);
+        if (!response.ok)
+            throw new Error(`key set fetch answered ${response.status}`);
+        const body = (await response.json());
+        const next = new Map();
+        for (const jwk of body.keys ?? []) {
+            if (typeof jwk.kid !== 'string')
+                continue;
+            try {
+                next.set(jwk.kid, createPublicKey({ key: jwk, format: 'jwk' }));
+            }
+            catch {
+                // A key this runtime cannot read verifies nothing.
+            }
+        }
+        keys = next;
+    }
+    async function keyFor(kid) {
+        const known = keys.get(kid);
+        if (known !== undefined)
+            return known;
+        if (Date.now() - lastFetch < REFETCH_INTERVAL_MS && keys.size > 0)
+            return null;
+        await refreshKeys();
+        return keys.get(kid) ?? null;
+    }
+    return {
+        async verify(headerValue) {
+            const token = Array.isArray(headerValue) ? headerValue[0] : headerValue;
+            if (token === undefined || token === '')
+                return { ok: false, reason: 'no identity assertion' };
+            const parts = token.split('.');
+            if (parts.length !== 3)
+                return { ok: false, reason: 'malformed assertion' };
+            const [headerPart, payloadPart, signaturePart] = parts;
+            let header;
+            let claims;
+            try {
+                header = decodeSegment(headerPart);
+                claims = decodeSegment(payloadPart);
+            }
+            catch {
+                return { ok: false, reason: 'malformed assertion' };
+            }
+            const algorithm = typeof header.alg === 'string' ? ALGORITHMS[header.alg] : undefined;
+            if (algorithm === undefined)
+                return { ok: false, reason: 'unsupported signing algorithm' };
+            if (typeof header.kid !== 'string')
+                return { ok: false, reason: 'assertion names no key' };
+            let key;
+            try {
+                key = await keyFor(header.kid);
+            }
+            catch (err) {
+                return { ok: false, reason: `key set unavailable: ${err instanceof Error ? err.message : String(err)}` };
+            }
+            if (key === null)
+                return { ok: false, reason: 'assertion signed by an unknown key' };
+            const signed = Buffer.from(`${headerPart}.${payloadPart}`, 'utf8');
+            const signature = Buffer.from(signaturePart, 'base64url');
+            let valid = false;
+            try {
+                valid = verify(algorithm.hash, signed, algorithm.dsaEncoding ? { key, dsaEncoding: algorithm.dsaEncoding } : key, signature);
+            }
+            catch {
+                valid = false;
+            }
+            if (!valid)
+                return { ok: false, reason: 'signature does not verify' };
+            if (claims.iss !== identity.issuer)
+                return { ok: false, reason: 'wrong issuer' };
+            const audiences = Array.isArray(claims.aud) ? claims.aud : [claims.aud];
+            if (!audiences.includes(identity.audience))
+                return { ok: false, reason: 'wrong audience' };
+            const nowSeconds = now().getTime() / 1000;
+            if (typeof claims.exp !== 'number' || claims.exp + SKEW_SECONDS < nowSeconds)
+                return { ok: false, reason: 'expired' };
+            if (typeof claims.nbf === 'number' && claims.nbf - SKEW_SECONDS > nowSeconds)
+                return { ok: false, reason: 'not yet valid' };
+            if (typeof claims.email !== 'string' || !/^[^@\s]+@[^@\s]+$/.test(claims.email))
+                return { ok: false, reason: 'no email claim' };
+            return { ok: true, email: claims.email };
+        },
+    };
+}
+//# sourceMappingURL=identity.js.map

package/dist/core/approval/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/core/approval/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAuBtE,MAAM,UAAU,GAA2E;IACzF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;CACrD,CAAC;AAEF,wDAAwD;AACxD,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,mIAAmI;AACnI,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAA0C,EAC1C,IAAI,GAA4C,EAAE;IAElD,MAAM,SAAS,GAAc,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,UAAU,WAAW;QACxB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;QACD,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAW;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,mBAAmB,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,WAAW;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YACxE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YAC/F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YAC5E,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,KAAiC,CAAC;YAEnF,IAAI,MAAwC,CAAC;YAC7C,IAAI,MAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CAAC,UAAU,CAAkB,CAAC;gBACpD,MAAM,GAAG,aAAa,CAAC,WAAW,CAA4B,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAC3F,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YAE3F,IAAI,GAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC3G,CAAC;YACD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;YAErF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAC1D,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/H,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;YAEtE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YACjF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAC3F,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;YAC1C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,YAAY,GAAG,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACtH,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,YAAY,GAAG,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAC5H,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAChI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/approval/landing-record.d.ts

@@ -0,0 +1,17 @@
+/**
+ * write-lifecycle spec: where `ctxr land` records a landing for the approval
+ * page to read once the worktree is gone. A derived cache path, beside the
+ * graph document's, written atomically and never staged.
+ */
+export declare const LANDINGS_RELATIVE_PATH = ".contexture/cache/landings";
+export interface LandingRecord {
+    worktree: string;
+    branch: string;
+    pull_request: number;
+    merged_commit: string | null;
+    landed_at: string;
+}
+export declare function writeLandingRecord(storeRoot: string, record: LandingRecord): Promise<void>;
+/** The record for `worktree`, or null — including for a name that is not a plain directory name. */
+export declare function readLandingRecord(storeRoot: string, worktree: string): Promise<LandingRecord | null>;
+//# sourceMappingURL=landing-record.d.ts.map

package/dist/core/approval/landing-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing-record.d.ts","sourceRoot":"","sources":["../../../src/core/approval/landing-record.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhG;AAED,oGAAoG;AACpG,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAQ1G"}

package/dist/core/approval/landing-record.js

@@ -0,0 +1,30 @@
+import { mkdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { writeFileAtomic } from '../fs/atomic.js';
+/**
+ * write-lifecycle spec: where `ctxr land` records a landing for the approval
+ * page to read once the worktree is gone. A derived cache path, beside the
+ * graph document's, written atomically and never staged.
+ */
+export const LANDINGS_RELATIVE_PATH = '.contexture/cache/landings';
+function recordPath(storeRoot, worktree) {
+    return path.join(storeRoot, LANDINGS_RELATIVE_PATH, `${worktree}.json`);
+}
+export async function writeLandingRecord(storeRoot, record) {
+    await mkdir(path.join(storeRoot, LANDINGS_RELATIVE_PATH), { recursive: true });
+    await writeFileAtomic(recordPath(storeRoot, record.worktree), `${JSON.stringify(record, null, 2)}\n`);
+}
+/** The record for `worktree`, or null — including for a name that is not a plain directory name. */
+export async function readLandingRecord(storeRoot, worktree) {
+    if (worktree === '' || worktree.includes('/') || worktree.includes('\\') || worktree.startsWith('.'))
+        return null;
+    try {
+        return JSON.parse(await readFile(recordPath(storeRoot, worktree), 'utf8'));
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+//# sourceMappingURL=landing-record.js.map

package/dist/core/approval/landing-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing-record.js","sourceRoot":"","sources":["../../../src/core/approval/landing-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAUnE,SAAS,UAAU,CAAC,SAAiB,EAAE,QAAgB;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,MAAqB;IAC/E,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,QAAgB;IACzE,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClH,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/core/approval/resolver.d.ts

@@ -0,0 +1,15 @@
+export declare function resolverPrompt(pullNumber: number, base: string, defaultBranch: string): string;
+/**
+ * design.md D6: the one place `ctxr land` spawns the store's configured
+ * conflict resolver — an argument vector, never a shell string, run in the
+ * checkout to resolve, with the prompt as its last argument. Its output goes to
+ * `output` (the command's stderr), so stdout keeps the one envelope.
+ */
+export declare function runResolver(input: {
+    argv: readonly string[];
+    prompt: string;
+    cwd: string;
+    env: Readonly<Record<string, string | undefined>>;
+    output: NodeJS.WritableStream;
+}): Promise<number>;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/core/approval/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/core/approval/resolver.ts"],"names":[],"mappings":"AAmBA,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAK9F;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE;IACjC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B,GAAG,OAAO,CAAC,MAAM,CAAC,CASlB"}