skillscript-runtime 0.19.15 → 0.20.0

package/README.md

@@ -1,6 +1,16 @@
-# Skillscript
+<p align="center">
+  <img src="assets/skillscript_logo.png" alt="Skillscript" width="400">
+</p>
 
+<p align="center">
 *A language for agents to write themselves in.*
+</p>
+
+<p align="center">
+  <a href="https://skillscript.ai">skillscript.ai</a>&nbsp; • &nbsp;
+  <a href="https://skillscript.mintlify.app/docs">docs</a>&nbsp;
+  </p>
+
 
 [![npm version](https://img.shields.io/npm/v/skillscript-runtime.svg)](https://www.npmjs.com/package/skillscript-runtime)
 [![tests](https://img.shields.io/badge/tests-passing-green)](#)
@@ -259,8 +269,31 @@ docker run -p 7878:7878 -v $(pwd)/skills:/skills \
   ghcr.io/sshwarts/skillscript-runtime:latest
 ```
 
-**Running side-by-side with another instance?** Skip the global install — `npm install skillscript-runtime` (no `-g`) inside your project, then launch via `npx skillfile dashboard --port 7879 --connectors ~/.skillscript/adopter-connectors.json`. Pin a different port + a separate connectors.json + distinct sqlite `dbPath`s under [docs/configuration.md](docs/configuration.md). Global install puts a single `skillfile` binary on PATH and complicates dev iteration against a parallel daemon.
+Then add the MCP to your agent. The simplest path on Claude Code (and similar hosts) is to just ask: *"Add the skillscript MCP server at `http://localhost:7878/rpc`"* — the host writes the config for you. Or wire it manually:
+
+```json
+{
+  "mcpServers": {
+    "skillscript": {
+      "type": "http",
+      "url": "http://localhost:7878/rpc"
+    }
+  }
+}
+```
 
+For stdio-only clients, bridge it the same way you'd bridge any HTTP MCP — via `mcp-remote`:
+
+```json
+{
+  "mcpServers": {
+    "skillscript": {
+      "command": "npx",
+      "args": ["mcp-remote", "http://localhost:7878/rpc"]
+    }
+  }
+}
+```
 ### A canonical autonomous skill
 
 The hello example is a single static target. A more representative shape is a cron-fired skill that pulls data, processes it, and delivers via file. The example below uses only runtime-intrinsic ops (`shell`, `file_write`, `emit`) — no adopter-wired connectors required, so it runs against a fresh install:

package/dist/approval.d.ts

@@ -1,67 +1,87 @@
 /**
- * v0.9.0 — skill-approval mechanism.
+ * Skill-approval mechanism (v1.0 Gate #7).
  *
- * Canonical model (per thread 29b6208e):
- *   - Draft  : authored, lint+compile+view ok, cannot execute
- *   - Approved + valid hash-token : can execute (manual / trigger / composition)
+ * Canonical model:
+ *   - Draft / Disabled : cannot execute (lint + compile + view still ok).
+ *   - Approved         : executes. The runtime MODE decides whether that
+ *     approval must be cryptographically KEYED:
+ *       • unsecured — UNKEYED. A bare `# Status: Approved` is sufficient; no
+ *         token, no signature. (No tamper-evidence — that's the keyless cost.)
+ *       • secured   — KEYED. The body must carry a valid `v3:<sig>` Ed25519
+ *         signature (sign with the operator's private key at approve-time;
+ *         verify with the public key at runtime — the private key never reaches
+ *         the runtime). Unforgeable without the private key.
  *
- * Approval token = `vN:<hex>` where N picks the hash function:
- *   v0 — reserved, rejected (naked "Approved" fails fast)
- *   v1 — CRC32 (bundled default; discipline-barrier strength)
- *   v2 — reserved for HMAC-SHA256
- *   v3 — reserved for Ed25519 signature
- *   adopter-extensible past v3 via `registerApprovalFn`
+ * Only v3 exists. The legacy symmetric hash-token scheme (v1 CRC32 + the
+ * per-version `registerApprovalFn` registry) is retired — pre-1.0 it had no
+ * install base, and unsecured mode no longer uses tokens at all.
  *
- * Token is computed over the body *excluding* the `# Status:` line, so
+ * The signature is computed over the body *excluding* its `# Status:` line, so
  * stamping the token doesn't perturb its own input.
  */
-/**
- * Set the version used by `stampApprovalToken(body)` when no explicit
- * version is passed. Adopter bootstraps that register `v2` HMAC (or
- * stronger) call this to make the dashboard's approval flow stamp with
- * the upgraded function. Default stays `v1` (bundled CRC32).
- */
-export declare function setPreferredApprovalVersion(version: string): void;
-export declare function getPreferredApprovalVersion(): string;
+/** The asymmetric (Ed25519) version slot — the only approval credential. */
+export declare const ED25519_VERSION = "v3";
+export declare function setSecuredMode(on: boolean): void;
+export declare function isSecuredMode(): boolean;
+/** Configure the Ed25519 PUBLIC key (PEM) used to verify v3 tokens. The private
+ * key is never set here — it lives in the operator's keyfile, read only by the
+ * approve flow, never by the runtime. */
+export declare function setApprovalPublicKey(pem: string | null): void;
+export declare function hasApprovalPublicKey(): boolean;
 export interface ApprovalToken {
     version: string;
     token: string;
 }
 export type ApprovalVerification = {
     ok: true;
-    token: ApprovalToken;
+    token?: ApprovalToken;
 } | {
     ok: false;
     reason: string;
 };
-/**
- * Register an approval function for a version slot. Adopter-extension API;
- * intended for substituting cryptographic strength (HMAC, Ed25519) without
- * touching language internals. `v0` is reserved and cannot be registered.
- */
-export declare function registerApprovalFn(version: string, fn: (body: string) => string): void;
-export declare function getApprovalFn(version: string): ((body: string) => string) | null;
-export declare function registeredApprovalVersions(): string[];
 /**
  * Strip the `# Status:` header line from a skill body. The hash input is the
  * body MINUS this line — renaming or re-versioning a skill doesn't invalidate
  * approval, only body edits do. Per spec point 3 in 29b6208e.
  */
 export declare function stripStatusLineForHashing(body: string): string;
+/**
+ * Canonical form signed/verified by the asymmetric (v3) scheme.
+ *
+ * STRUCTURAL whitespace only (per Perry's confirm): normalize line endings to
+ * `\n` and exclude the `# Status:` line (where the signature lives — solves the
+ * sign-its-own-input chicken-egg). It deliberately does NOT strip or collapse
+ * trailing/interior whitespace — that could alter content INSIDE a string-literal
+ * value (e.g. `$set X = "a   b"`), letting two distinct bodies canonicalize the
+ * same or breaking a legitimate re-sign. Only `\r\n`/`\r` → `\n` is normalized,
+ * so a body signed on one platform verifies on another; every real edit still
+ * invalidates the signature (re-approval required — tamper-evidence preserved).
+ */
+export declare function canonicalizeForSigning(body: string): string;
+/**
+ * Sign a body with the operator's Ed25519 private key (PEM). Returns the
+ * `v3:<base64url>` token the dashboard/CLI approve flow stamps. APPROVE-TIME
+ * ONLY — the private key never enters the runtime's verification path.
+ */
+export declare function signApprovalEd25519(body: string, privateKeyPem: string): ApprovalToken;
+/**
+ * Generate a fresh Ed25519 keypair for first-run provisioning. Returns PEM
+ * strings: the private key goes to the operator's keyfile (never the runtime),
+ * the public key into runtime config.
+ */
+export declare function generateApprovalKeypair(): {
+    publicKeyPem: string;
+    privateKeyPem: string;
+};
 /**
  * Parse a token string of the form `vN:<token>` into its parts. Returns
  * null on shape mismatch — caller surfaces a clear error to the operator.
  */
 export declare function parseApprovalToken(raw: string): ApprovalToken | null;
 /**
- * Compute the canonical approval token for a body at a given version. The
- * dashboard calls this when stamping `# Status: Approved <token>`.
- */
-export declare function computeApprovalToken(body: string, version?: string): ApprovalToken;
-/**
- * Verify a stored token against the current body. Called by runtime at every
- * execution entry point. A mismatch means the body was edited since approval,
- * so the human-approval gate must run again.
+ * Verify a stored token against the current body. Called in secured mode at
+ * every execution entry point. Only a v3 Ed25519 signature is accepted; an
+ * invalid signature (edited body, wrong key) or any other version is refused.
  */
 export declare function verifyApprovalToken(body: string, rawToken: string): ApprovalVerification;
 /**
@@ -81,28 +101,34 @@ export declare function extractStatusFromBody(body: string): {
 /**
  * Universal execution-time gate. Called at every dispatch entry point
  * (scheduler.dispatchSkill, MCP execute_skill handler, in-skill
- * `$ execute_skill` op, compile-time `&` data-skill inline). Returns ok
- * iff status is Approved AND the body's stamped token re-computes correctly.
+ * `$ execute_skill` op, compile-time `&` data-skill inline).
+ *
+ * The Draft-vs-Approved status gate applies in BOTH modes — only an Approved
+ * skill runs. The mode decides whether that approval must be KEYED:
+ *
+ *   • unsecured — approval is UNKEYED. A bare `# Status: Approved` header is
+ *     sufficient: a co-located human/agent marked it Approved, with no
+ *     signature. (No tamper-evidence — that's the cost of running keyless;
+ *     adopters who want tamper-evidence run secured mode.)
+ *   • secured — approval must be a valid v3 signature minted by the operator's
+ *     key. A bare, unsigned, or legacy (v1) Approved is refused → re-approve
+ *     with the key (`skillfile approve` / the dashboard).
  *
- * v0.9.0 — supersedes the v0.8.x "status === Approved" check; that check
- * remains the first gate, but a stamped + verified token is now required.
+ * v1.0 Gate #7 — supersedes the v0.9.0 "stamped v1 token required in both
+ * modes" model. v1 hash-stamps are retired: unsecured no longer mints or
+ * requires them; secured requires v3. (Pre-1.0, the only v1 skills are our own
+ * harness + examples, so there's no install base to preserve — `reapprove`
+ * re-blesses any that move into a secured runtime.)
  */
 export declare function evaluateApprovalGate(body: string): ApprovalVerification;
 /**
- * Stamp `# Status: Approved <token>` into a skill body. Called by the
- * dashboard's approval flow + by test helpers that need to produce a
- * runnable fixture body programmatically. The function recomputes the
- * token over the body MINUS its `# Status:` line so the stamp is
- * idempotent regardless of the body's current header state.
+ * Stamp `# Status: Approved v3:<sig>` into a body, signing with the operator's
+ * Ed25519 private key — APPROVE-TIME ONLY (dashboard / `skillfile approve`).
  *
- * v0.15.0 — only replaces a `# Status:` line in the HEADER BLOCK (lines
- * from start until the first blank line or first non-`#`-comment line).
- * Pre-v0.15.0 the unbounded `/^# Status:/m` regex matched any line in
- * the body — including `# Status:` text inside string literals (e.g.
- * a parent skill that writes a child via `$ skill_write source="...# Status: Approved..."`).
- * Bug surfaced by the skill-store-roundtrip demo (cold-adopter probe,
- * 2026-06-01): the stamper mutated the inner string content + skipped
- * stamping the parent.
+ * Only the HEADER-BLOCK `# Status:` line is rewritten (lines from the start
+ * until the first blank or non-`#` line), so `# Status:` text inside a string
+ * literal (e.g. a parent that writes a child via `$ skill_write source="..."`)
+ * is left untouched.
  */
-export declare function stampApprovalToken(body: string, version?: string): string;
+export declare function stampApprovalEd25519(body: string, privateKeyPem: string): string;
 //# sourceMappingURL=approval.d.ts.map

package/dist/approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAUjE;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAClC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAQtF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,IAAI,CAEhF;AAED,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAIpE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAa,GAAG,aAAa,CAWxF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CA0BxF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAatI;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAkBvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAczE"}
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,4EAA4E;AAC5E,eAAO,MAAM,eAAe,OAAO,CAAC;AASpC,wBAAgB,cAAc,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAEhD;AACD,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AACD;;yCAEyC;AACzC,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE7D;AACD,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,oBAAoB,GAG5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG3D;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa,CAItF;AAoBD;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAMzF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CAgCxF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAatI;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CA8BvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAEhF"}

package/dist/approval.js

@@ -1,59 +1,47 @@
 /**
- * v0.9.0 — skill-approval mechanism.
+ * Skill-approval mechanism (v1.0 Gate #7).
  *
- * Canonical model (per thread 29b6208e):
- *   - Draft  : authored, lint+compile+view ok, cannot execute
- *   - Approved + valid hash-token : can execute (manual / trigger / composition)
+ * Canonical model:
+ *   - Draft / Disabled : cannot execute (lint + compile + view still ok).
+ *   - Approved         : executes. The runtime MODE decides whether that
+ *     approval must be cryptographically KEYED:
+ *       • unsecured — UNKEYED. A bare `# Status: Approved` is sufficient; no
+ *         token, no signature. (No tamper-evidence — that's the keyless cost.)
+ *       • secured   — KEYED. The body must carry a valid `v3:<sig>` Ed25519
+ *         signature (sign with the operator's private key at approve-time;
+ *         verify with the public key at runtime — the private key never reaches
+ *         the runtime). Unforgeable without the private key.
  *
- * Approval token = `vN:<hex>` where N picks the hash function:
- *   v0 — reserved, rejected (naked "Approved" fails fast)
- *   v1 — CRC32 (bundled default; discipline-barrier strength)
- *   v2 — reserved for HMAC-SHA256
- *   v3 — reserved for Ed25519 signature
- *   adopter-extensible past v3 via `registerApprovalFn`
+ * Only v3 exists. The legacy symmetric hash-token scheme (v1 CRC32 + the
+ * per-version `registerApprovalFn` registry) is retired — pre-1.0 it had no
+ * install base, and unsecured mode no longer uses tokens at all.
  *
- * Token is computed over the body *excluding* the `# Status:` line, so
+ * The signature is computed over the body *excluding* its `# Status:` line, so
  * stamping the token doesn't perturb its own input.
  */
-const APPROVAL_FNS = new Map();
-let PREFERRED_VERSION = "v1";
-/**
- * Set the version used by `stampApprovalToken(body)` when no explicit
- * version is passed. Adopter bootstraps that register `v2` HMAC (or
- * stronger) call this to make the dashboard's approval flow stamp with
- * the upgraded function. Default stays `v1` (bundled CRC32).
- */
-export function setPreferredApprovalVersion(version) {
-    if (version === "v0") {
-        throw new Error(`approval version 'v0' is reserved`);
-    }
-    if (!APPROVAL_FNS.has(version)) {
-        throw new Error(`approval version '${version}' is not registered; call registerApprovalFn first`);
-    }
-    PREFERRED_VERSION = version;
-}
-export function getPreferredApprovalVersion() {
-    return PREFERRED_VERSION;
+import { sign as edSign, verify as edVerify, generateKeyPairSync } from "node:crypto";
+/** The asymmetric (Ed25519) version slot — the only approval credential. */
+export const ED25519_VERSION = "v3";
+// ─── Secured-mode config (process-wide, set at boot) ─────────────────────────
+// When secured mode is ON, the gate requires a valid v3 signature for an
+// Approved skill to execute effectfully. The public key verifies v3; the
+// runtime never holds the private key. Set from runtime config in bootstrap.
+let SECURED_MODE = false;
+let APPROVAL_PUBLIC_KEY_PEM = null;
+export function setSecuredMode(on) {
+    SECURED_MODE = on;
 }
-/**
- * Register an approval function for a version slot. Adopter-extension API;
- * intended for substituting cryptographic strength (HMAC, Ed25519) without
- * touching language internals. `v0` is reserved and cannot be registered.
- */
-export function registerApprovalFn(version, fn) {
-    if (version === "v0") {
-        throw new Error(`approval version 'v0' is reserved and cannot be registered`);
-    }
-    if (!/^v\d+$/.test(version)) {
-        throw new Error(`approval version must match /^v\\d+$/ (got '${version}')`);
-    }
-    APPROVAL_FNS.set(version, fn);
+export function isSecuredMode() {
+    return SECURED_MODE;
 }
-export function getApprovalFn(version) {
-    return APPROVAL_FNS.get(version) ?? null;
+/** Configure the Ed25519 PUBLIC key (PEM) used to verify v3 tokens. The private
+ * key is never set here — it lives in the operator's keyfile, read only by the
+ * approve flow, never by the runtime. */
+export function setApprovalPublicKey(pem) {
+    APPROVAL_PUBLIC_KEY_PEM = pem;
 }
-export function registeredApprovalVersions() {
-    return [...APPROVAL_FNS.keys()].sort();
+export function hasApprovalPublicKey() {
+    return APPROVAL_PUBLIC_KEY_PEM !== null;
 }
 /**
  * Strip the `# Status:` header line from a skill body. The hash input is the
@@ -66,6 +54,66 @@ export function stripStatusLineForHashing(body) {
         .filter((line) => !/^\s*#\s*Status\s*:/i.test(line))
         .join("\n");
 }
+/**
+ * Canonical form signed/verified by the asymmetric (v3) scheme.
+ *
+ * STRUCTURAL whitespace only (per Perry's confirm): normalize line endings to
+ * `\n` and exclude the `# Status:` line (where the signature lives — solves the
+ * sign-its-own-input chicken-egg). It deliberately does NOT strip or collapse
+ * trailing/interior whitespace — that could alter content INSIDE a string-literal
+ * value (e.g. `$set X = "a   b"`), letting two distinct bodies canonicalize the
+ * same or breaking a legitimate re-sign. Only `\r\n`/`\r` → `\n` is normalized,
+ * so a body signed on one platform verifies on another; every real edit still
+ * invalidates the signature (re-approval required — tamper-evidence preserved).
+ */
+export function canonicalizeForSigning(body) {
+    const lf = body.replace(/\r\n?/g, "\n");
+    return stripStatusLineForHashing(lf);
+}
+// ─── v3: Ed25519 asymmetric signature ─────────────────────────────────────────
+/**
+ * Sign a body with the operator's Ed25519 private key (PEM). Returns the
+ * `v3:<base64url>` token the dashboard/CLI approve flow stamps. APPROVE-TIME
+ * ONLY — the private key never enters the runtime's verification path.
+ */
+export function signApprovalEd25519(body, privateKeyPem) {
+    const canonical = canonicalizeForSigning(body);
+    const sig = edSign(null, Buffer.from(canonical, "utf8"), privateKeyPem);
+    return { version: ED25519_VERSION, token: sig.toString("base64url") };
+}
+/** Verify a v3 token against the body using the configured public key. */
+function verifyEd25519(body, tokenB64url) {
+    if (APPROVAL_PUBLIC_KEY_PEM === null)
+        return false;
+    const canonical = canonicalizeForSigning(body);
+    let sig;
+    try {
+        sig = Buffer.from(tokenB64url, "base64url");
+    }
+    catch {
+        return false;
+    }
+    if (sig.length === 0)
+        return false;
+    try {
+        return edVerify(null, Buffer.from(canonical, "utf8"), APPROVAL_PUBLIC_KEY_PEM, sig);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Generate a fresh Ed25519 keypair for first-run provisioning. Returns PEM
+ * strings: the private key goes to the operator's keyfile (never the runtime),
+ * the public key into runtime config.
+ */
+export function generateApprovalKeypair() {
+    const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+    return {
+        publicKeyPem: publicKey.export({ type: "spki", format: "pem" }),
+        privateKeyPem: privateKey.export({ type: "pkcs8", format: "pem" }),
+    };
+}
 /**
  * Parse a token string of the form `vN:<token>` into its parts. Returns
  * null on shape mismatch — caller surfaces a clear error to the operator.
@@ -77,23 +125,9 @@ export function parseApprovalToken(raw) {
     return { version: m[1], token: m[2] };
 }
 /**
- * Compute the canonical approval token for a body at a given version. The
- * dashboard calls this when stamping `# Status: Approved <token>`.
- */
-export function computeApprovalToken(body, version = "v1") {
-    if (version === "v0") {
-        throw new Error(`approval version 'v0' is reserved`);
-    }
-    const fn = APPROVAL_FNS.get(version);
-    if (!fn) {
-        throw new Error(`approval version '${version}' is not registered (available: ${registeredApprovalVersions().join(", ") || "none"})`);
-    }
-    return { version, token: fn(stripStatusLineForHashing(body)) };
-}
-/**
- * Verify a stored token against the current body. Called by runtime at every
- * execution entry point. A mismatch means the body was edited since approval,
- * so the human-approval gate must run again.
+ * Verify a stored token against the current body. Called in secured mode at
+ * every execution entry point. Only a v3 Ed25519 signature is accepted; an
+ * invalid signature (edited body, wrong key) or any other version is refused.
  */
 export function verifyApprovalToken(body, rawToken) {
     const parsed = parseApprovalToken(rawToken);
@@ -106,21 +140,25 @@ export function verifyApprovalToken(body, rawToken) {
     if (parsed.version === "v0") {
         return { ok: false, reason: `approval version 'v0' is reserved` };
     }
-    const fn = APPROVAL_FNS.get(parsed.version);
-    if (!fn) {
-        return {
-            ok: false,
-            reason: `approval version '${parsed.version}' is not registered (available: ${registeredApprovalVersions().join(", ") || "none"})`,
-        };
-    }
-    const expected = fn(stripStatusLineForHashing(body));
-    if (expected !== parsed.token) {
+    // v3 — asymmetric Ed25519 (the secured-mode credential). Verify the signature
+    // with the configured public key; the private key never reaches this path.
+    if (parsed.version === ED25519_VERSION) {
+        if (verifyEd25519(body, parsed.token)) {
+            return { ok: true, token: parsed };
+        }
         return {
             ok: false,
-            reason: `approval token mismatch — skill body has been edited since approval; re-approve via dashboard`,
+            reason: APPROVAL_PUBLIC_KEY_PEM === null
+                ? `approval signature cannot be verified — no approval public key is configured`
+                : `approval signature is invalid — the body was edited since approval, or signed with a different key; re-approve via the dashboard`,
         };
     }
-    return { ok: true, token: parsed };
+    // Only v3 is accepted. Any other version (a retired v1, or a forged scheme)
+    // is refused — re-approve with the operator's key.
+    return {
+        ok: false,
+        reason: `approval token version '${parsed.version}' is not accepted — a v3 signed approval is required; re-approve via the dashboard`,
+    };
 }
 /**
  * Extract the status + (optional) approval token from a skill body's
@@ -154,11 +192,24 @@ export function extractStatusFromBody(body) {
 /**
  * Universal execution-time gate. Called at every dispatch entry point
  * (scheduler.dispatchSkill, MCP execute_skill handler, in-skill
- * `$ execute_skill` op, compile-time `&` data-skill inline). Returns ok
- * iff status is Approved AND the body's stamped token re-computes correctly.
+ * `$ execute_skill` op, compile-time `&` data-skill inline).
  *
- * v0.9.0 — supersedes the v0.8.x "status === Approved" check; that check
- * remains the first gate, but a stamped + verified token is now required.
+ * The Draft-vs-Approved status gate applies in BOTH modes — only an Approved
+ * skill runs. The mode decides whether that approval must be KEYED:
+ *
+ *   • unsecured — approval is UNKEYED. A bare `# Status: Approved` header is
+ *     sufficient: a co-located human/agent marked it Approved, with no
+ *     signature. (No tamper-evidence — that's the cost of running keyless;
+ *     adopters who want tamper-evidence run secured mode.)
+ *   • secured — approval must be a valid v3 signature minted by the operator's
+ *     key. A bare, unsigned, or legacy (v1) Approved is refused → re-approve
+ *     with the key (`skillfile approve` / the dashboard).
+ *
+ * v1.0 Gate #7 — supersedes the v0.9.0 "stamped v1 token required in both
+ * modes" model. v1 hash-stamps are retired: unsecured no longer mints or
+ * requires them; secured requires v3. (Pre-1.0, the only v1 skills are our own
+ * harness + examples, so there's no install base to preserve — `reapprove`
+ * re-blesses any that move into a secured runtime.)
  */
 export function evaluateApprovalGate(body) {
     const extracted = extractStatusFromBody(body);
@@ -169,35 +220,43 @@ export function evaluateApprovalGate(body) {
         return { ok: false, reason: `skill status is 'Disabled' — execution refused` };
     }
     if (extracted.status === "Draft") {
-        return { ok: false, reason: `skill status is 'Draft' — approve via dashboard before executing` };
+        return {
+            ok: false,
+            reason: SECURED_MODE
+                ? `skill status is 'Draft' — this is an intentional safety gate, not an error to work around. A human must review and approve it via the dashboard before it can execute. Preview it with mechanical mode, or keep iterating as a Draft.`
+                : `skill status is 'Draft' — approve via dashboard before executing`,
+        };
+    }
+    // Approved. Unsecured: unkeyed approval — the status header alone is enough.
+    if (!SECURED_MODE) {
+        return { ok: true };
     }
+    // Secured: a valid v3 signature is required.
     if (extracted.approvalToken === null) {
+        // Deliberately does NOT disclose the token format (an attacker who learns
+        // `vN:<token>` gets the exact shape to forge).
         return {
             ok: false,
-            reason: `skill is Approved but missing approval token — re-approve via dashboard to stamp '# Status: Approved v1:<token>'`,
+            reason: `skill is marked Approved but carries no valid approval signature — re-approve via the dashboard`,
         };
     }
     return verifyApprovalToken(body, extracted.approvalToken);
 }
 /**
- * Stamp `# Status: Approved <token>` into a skill body. Called by the
- * dashboard's approval flow + by test helpers that need to produce a
- * runnable fixture body programmatically. The function recomputes the
- * token over the body MINUS its `# Status:` line so the stamp is
- * idempotent regardless of the body's current header state.
+ * Stamp `# Status: Approved v3:<sig>` into a body, signing with the operator's
+ * Ed25519 private key — APPROVE-TIME ONLY (dashboard / `skillfile approve`).
  *
- * v0.15.0 — only replaces a `# Status:` line in the HEADER BLOCK (lines
- * from start until the first blank line or first non-`#`-comment line).
- * Pre-v0.15.0 the unbounded `/^# Status:/m` regex matched any line in
- * the body — including `# Status:` text inside string literals (e.g.
- * a parent skill that writes a child via `$ skill_write source="...# Status: Approved..."`).
- * Bug surfaced by the skill-store-roundtrip demo (cold-adopter probe,
- * 2026-06-01): the stamper mutated the inner string content + skipped
- * stamping the parent.
+ * Only the HEADER-BLOCK `# Status:` line is rewritten (lines from the start
+ * until the first blank or non-`#` line), so `# Status:` text inside a string
+ * literal (e.g. a parent that writes a child via `$ skill_write source="..."`)
+ * is left untouched.
  */
-export function stampApprovalToken(body, version) {
-    const v = version ?? PREFERRED_VERSION;
-    const token = computeApprovalToken(body, v);
+export function stampApprovalEd25519(body, privateKeyPem) {
+    return writeApprovedStatusLine(body, signApprovalEd25519(body, privateKeyPem));
+}
+/** Write `# Status: Approved <version>:<token>` into the header block, replacing
+ * an existing header `# Status:` line or inserting after `# Skill:`. */
+function writeApprovedStatusLine(body, token) {
     const line = `# Status: Approved ${token.version}:${token.token}`;
     const headerStatusLine = findHeaderStatusLine(body);
     if (headerStatusLine !== null) {
@@ -231,27 +290,4 @@ function findHeaderStatusLine(body) {
     }
     return null;
 }
-// ─── v1: CRC32 reference impl ─────────────────────────────────────────────────
-const CRC32_TABLE = (() => {
-    const table = new Array(256);
-    for (let i = 0; i < 256; i++) {
-        let c = i;
-        for (let k = 0; k < 8; k++) {
-            c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
-        }
-        table[i] = c >>> 0;
-    }
-    return table;
-})();
-function crc32Utf8(input) {
-    const bytes = new TextEncoder().encode(input);
-    let crc = 0xffffffff;
-    for (let i = 0; i < bytes.length; i++) {
-        const idx = (crc ^ (bytes[i] ?? 0)) & 0xff;
-        crc = (CRC32_TABLE[idx] ?? 0) ^ (crc >>> 8);
-    }
-    crc = (crc ^ 0xffffffff) >>> 0;
-    return crc.toString(16).padStart(8, "0");
-}
-registerApprovalFn("v1", crc32Utf8);
 //# sourceMappingURL=approval.js.map

package/dist/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,YAAY,GAAqD,IAAI,GAAG,EAAE,CAAC;AACjF,IAAI,iBAAiB,GAAG,IAAI,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,oDAAoD,CACjF,CAAC;IACJ,CAAC;IACD,iBAAiB,GAAG,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,EAA4B;IAC9E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,UAAkB,IAAI;IACvE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,mCAAmC,0BAA0B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kEAAkE,QAAQ,GAAG;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB,MAAM,CAAC,OAAO,mCAAmC,0BAA0B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;SACnI,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,+FAA+F;SACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,MAAyC,CAAC;IAC9C,IAAI,SAAS,KAAK,OAAO;QAAE,MAAM,GAAG,OAAO,CAAC;SACvC,IAAI,SAAS,KAAK,UAAU;QAAE,MAAM,GAAG,UAAU,CAAC;SAClD,IAAI,SAAS,KAAK,UAAU;QAAE,MAAM,GAAG,UAAU,CAAC;;QAClD,OAAO,IAAI,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0EAA0E,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kHAAkH;SAC3H,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB;IAC/D,MAAM,CAAC,GAAG,OAAO,IAAI,iBAAiB,CAAC;IACvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,sBAAsB,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,6DAA6D;QAC7D,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,MAAM,WAAW,GAAa,CAAC,GAAG,EAAE;IAClC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAS,GAAG,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3C,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,GAAG,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC"}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEtF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,gFAAgF;AAChF,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,uBAAuB,GAAkB,IAAI,CAAC;AAElD,MAAM,UAAU,cAAc,CAAC,EAAW;IACxC,YAAY,GAAG,EAAE,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AACD;;yCAEyC;AACzC,MAAM,UAAU,oBAAoB,CAAC,GAAkB;IACrD,uBAAuB,GAAG,GAAG,CAAC;AAChC,CAAC;AACD,MAAM,UAAU,oBAAoB;IAClC,OAAO,uBAAuB,KAAK,IAAI,CAAC;AAC1C,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,yBAAyB,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,aAAqB;IACrE,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACxE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,IAAY,EAAE,WAAmB;IACtD,IAAI,uBAAuB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;QACzE,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;KAC7E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kEAAkE,QAAQ,GAAG;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,KAAK,IAAI;gBACtC,CAAC,CAAC,8EAA8E;gBAChF,CAAC,CAAC,kIAAkI;SACvI,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,mDAAmD;IACnD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,2BAA2B,MAAM,CAAC,OAAO,oFAAoF;KACtI,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,MAAyC,CAAC;IAC9C,IAAI,SAAS,KAAK,OAAO;QAAE,MAAM,GAAG,OAAO,CAAC;SACvC,IAAI,SAAS,KAAK,UAAU;QAAE,MAAM,GAAG,UAAU,CAAC;SAClD,IAAI,SAAS,KAAK,UAAU;QAAE,MAAM,GAAG,UAAU,CAAC;;QAClD,OAAO,IAAI,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0EAA0E,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;gBAClB,CAAC,CAAC,uOAAuO;gBACzO,CAAC,CAAC,kEAAkE;SACvE,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,6CAA6C;IAC7C,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACrC,0EAA0E;QAC1E,+CAA+C;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iGAAiG;SAC1G,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,aAAqB;IACtE,OAAO,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;wEACwE;AACxE,SAAS,uBAAuB,CAAC,IAAY,EAAE,KAAoB;IACjE,MAAM,IAAI,GAAG,sBAAsB,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,6DAA6D;QAC7D,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}