things-api 0.19.0 → 0.19.2

package/dist/capability.js

@@ -57,14 +57,19 @@
  * already read that file. Where the row cannot be read the verdict is an honest
  * "unknown", which the write gate refuses on rather than resolving with a dialog.
  */
+import { execFileSync } from "node:child_process";
+import { homedir } from "node:os";
+import { join } from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { loadConfig } from "./config.js";
-import { deputyRouting, deputyRoutesDb, helpersExpected } from "./deputy/routing.js";
+import { readContainerFileSync } from "./deputy/files.js";
+import { deputyRouting, deputyRoutesDb, helpersExpected, settleDeputyAutomation, } from "./deputy/routing.js";
+import { THINGS_BUNDLE_ID, wakeSystemEvents, wakeThings } from "./deputy/wake.js";
 import { fdaGranted, hostApp, hostDisplayName, resetHostAccessForTests, tccDbPath, } from "./host-access.js";
 import { sessionGrantValid } from "./session-grant.js";
 export { fdaGranted, hostApp, hostDisplayName, tccDbPath, } from "./host-access.js";
 /** The Things application's bundle identifier — the Automation grant's target. */
-export const THINGS_BUNDLE_ID = "com.culturedcode.ThingsMac";
+export { THINGS_BUNDLE_ID } from "./deputy/wake.js";
 /** True when this verdict permits opening the live container. */
 export function readAllowed(capability) {
     return capability.mode !== "none" && capability.mode !== "helpers-unavailable";
@@ -73,9 +78,25 @@ export function readAllowed(capability) {
 export function uiAllowed(capability) {
     return capability.mode === "helpers" || capability.mode === "direct-escape";
 }
+/**
+ * True when a URL-scheme MUTATION may be dispatched.
+ *
+ * `unreadable` is permissive, and deliberately so — the asymmetry with the
+ * write gate is the point. There, an unknown standing is refused because
+ * resolving it means sending the Apple Event that IS the dialog. Here,
+ * dispatching costs nothing on a machine whose answer is already "enabled",
+ * which is every settled machine; only the two states we have positively READ
+ * as not-enabled are refused. What catches the unreadable case instead is the
+ * read-after-write verify plus its likely-cause hint (src/write/failure-hints.ts).
+ */
+export function urlSchemeAllowed(capability) {
+    return capability.mode === "enabled" || capability.mode === "unreadable";
+}
 /** True when app automation may be dispatched. */
 export function writeAllowed(capability) {
-    return capability.mode === "deputy" || capability.mode === "direct-granted";
+    return (capability.mode === "deputy" ||
+        capability.mode === "direct-granted" ||
+        capability.mode === "direct-escape");
 }
 // ── The prompt-free probes ───────────────────────────────────────────────────
 /**
@@ -108,6 +129,21 @@ function automationAuthValueDefault(env, client, target) {
         }
     }
 }
+// ── The lab escapes (not consumer surface) ───────────────────────────────────
+/**
+ * Is one of the lab's documented escapes set? ({@link UI_DIRECT_ESCAPE_ENV},
+ * {@link WRITE_DIRECT_ESCAPE_ENV}.)
+ *
+ * Both are read in exactly one place each — the capability function for the
+ * vector they cover — and both spell "on" the same way, as the literal `1`.
+ * Anything else is off, deliberately: an escape that answered to `true`, `yes`
+ * or a stray empty string would be a config surface, and these are neither
+ * config nor consumer surface. They are documented in docs/lab/harness.md and
+ * exported by the lab's guest environment; nothing shipped mentions them.
+ */
+function labEscapeSet(env, name) {
+    return (env[name] ?? "") === "1";
+}
 // ── Read capability (Article I + II) ─────────────────────────────────────────
 /**
  * Errnos that mean a plain "no" rather than something worth telling the user
@@ -117,12 +153,26 @@ function automationAuthValueDefault(env, client, target) {
  * into "you lack permission".
  */
 const ORDINARY_DENIALS = new Set(["EPERM", "EACCES", "ENOENT"]);
-/** The ways a machine can earn read capability, phrased for a human. */
+/**
+ * The ways a machine can earn read capability, phrased for a human.
+ *
+ * The ask-again line is deliberately CONDITIONAL, because of what this process
+ * can and cannot know. A container that will not open carries no cause: "this
+ * host app was never asked" and "this host app was asked and the human clicked
+ * Don't Allow" are the same observation from here, and the app-data class
+ * cannot be told apart without opening the container — which is the very act
+ * that raises the dialog (Article I corollary). What IS measured is the price
+ * of a refusal (APDP1, docs/lab/apdp1-grant-pinning.md): it stands for the
+ * whole life of that host-app instance, every later open failing instantly and
+ * silently, and macOS never re-asks inside it. So the line names the relaunch
+ * as the way to be asked again without asserting that anyone refused anything.
+ */
 function readRemediation(hostName) {
     return [
         "run `things helpers setup` — reads then flow through a helper that holds its own durable grant",
+        "or run `things setup` — it asks for read access once, while you are at the machine",
+        `if that dialog was already refused, quit and reopen ${hostName} first — macOS does not ask a second time inside one run of an app`,
         `or grant Full Disk Access to ${hostName} in System Settings ▸ Privacy & Security ▸ Full Disk Access`,
-        "or run `things setup`, which walks through both",
     ];
 }
 /**
@@ -188,9 +238,15 @@ export function readCapability(options = {}, deps = {}) {
     // app instance. Only consulted when FDA has already said no.
     const session = sessionGrantValid(host.bundleId, deps);
     if (session.valid) {
+        const name = hostDisplayName(deps);
         return {
             mode: "session-grant",
-            detail: `${hostDisplayName(deps)} was granted access to the Things data folder for as long as it stays open`,
+            // MEASURED (APDP1): the grant belongs to the host app INSTANCE, so it
+            // covers every process under it — this command, other tabs and windows,
+            // anything they spawn — and it ends when that app quits. The copy states
+            // both halves, because the reach is the part that is worth knowing and
+            // the expiry is the part that must never read as durable.
+            detail: `${name} holds access to the Things data folder — every command running under ${name}, in any tab or window, reads it without a dialog until ${name} quits`,
             remediation: [],
             host,
         };
@@ -231,6 +287,27 @@ function classifyAuthValue(value) {
         return "granted";
     return "unknown";
 }
+/**
+ * The LAB's escape hatch for the AppleScript vector — the write-side twin of
+ * {@link UI_DIRECT_ESCAPE_ENV}, and just as deliberately not consumer surface.
+ *
+ * A guest shell in a golden clone descends from sshd, not from an application
+ * bundle, so `hostApp()` finds no `__CFBundleIdentifier` and macOS has no
+ * identity to have recorded an Automation grant against. The verdict is
+ * therefore `direct-unknown` in every clone, which blocks every AppleScript-
+ * vector verb and every composite carrying an AppleScript leg. What the clone
+ * actually has is an in-guest Automation grant on the runner's own processes
+ * (the same AXVM1 layer the ui escape leans on), so the block is an artefact of
+ * UNKNOWABILITY, not of a missing grant. Setting this to `1` says so.
+ *
+ * Bounded, and the bound is the point: it is consulted ONLY on the
+ * bundle-id-less path. A host that has an identity is answered from its TCC row
+ * as it always was, so the escape can never mask a recorded refusal
+ * (`direct-denied`) or manufacture a grant for a real user's terminal.
+ * Documented in docs/lab/harness.md and exported by the lab's guest
+ * environment; nothing consumer-facing mentions it.
+ */
+export const WRITE_DIRECT_ESCAPE_ENV = "THINGS_API_WRITE_DIRECT";
 /**
  * May this process drive Things over Apple Events, and on whose authority?
  *
@@ -240,11 +317,49 @@ function classifyAuthValue(value) {
  * last state is deliberately NOT resolved here: resolving it means sending a
  * real Apple Event, which is what raises the dialog, and Article I reserves
  * that for `things setup`.
+ *
+ * LIVENESS BEFORE AUTHORIZATION (#617). The deputy's `not-running` is the
+ * ask-false determination having no answer for a CLOSED Things — a fact about
+ * the app's process, not about the grant. Two rules follow, and both matter:
+ *
+ *  - while the deputy is standing, that value NEVER falls through to the direct
+ *    host branch. A silent direct engagement would put consent back on the
+ *    terminal (the routing doctrine's no-fallback rule), and on a machine with
+ *    no host record it would refuse a fully onboarded user with "run
+ *    `things setup`" — the #610 false-onboarding loop, one vector over;
+ *  - a `dispatch` caller resolves it by STARTING Things (a background
+ *    LaunchServices dispatch, never an Apple Event) and re-reading the
+ *    standing. Only what comes back is an authorization fact.
  */
-export function writeCapability(deps = {}) {
+export function writeCapability(options = {}, deps = {}) {
     const env = deps.env ?? process.env;
     const host = hostApp(deps);
-    const deputyThings = (deps.deputyAutomation ?? (() => deputyRouting(env).hello?.automation?.things))();
+    const handshake = (deps.deputyAutomation ?? (() => deputyRouting(env).hello?.automation?.things))();
+    let deputyThings = handshake;
+    if (handshake === "not-running") {
+        let wake = null;
+        if (options.purpose === "dispatch") {
+            wake = (deps.wakeThings ?? (() => wakeThings(env)))();
+            deputyThings = wake.standing;
+        }
+        if (deputyThings === undefined || deputyThings === "not-running") {
+            return {
+                mode: "deputy-target-dormant",
+                detail: wake === null
+                    ? "Things is not running, so app control for it cannot be read — macOS answers for a " +
+                        "running app only, and whatever the helpers hold is unreadable while it is down"
+                    : `Things is not running and ${wake.detail} — app control for it cannot be read while it is down`,
+                remediation: [
+                    "open Things, then rerun this command",
+                    `or start it in the background with \`open -g -b ${THINGS_BUNDLE_ID}\``,
+                ],
+                host,
+            };
+        }
+        // A real standing at last: hand it to the routing layer, whose own
+        // onboarding gate deferred on the same non-answer (./deputy/routing.ts).
+        (deps.settleDeputyAutomation ?? settleDeputyAutomation)(deputyThings);
+    }
     if (deputyThings === "granted") {
         return {
             mode: "deputy",
@@ -254,6 +369,14 @@ export function writeCapability(deps = {}) {
         };
     }
     if (host.bundleId === null) {
+        if (labEscapeSet(env, WRITE_DIRECT_ESCAPE_ENV)) {
+            return {
+                mode: "direct-escape",
+                detail: `${WRITE_DIRECT_ESCAPE_ENV}=1 — Apple Events are sent directly under this process (lab escape)`,
+                remediation: [],
+                host,
+            };
+        }
         return {
             mode: "direct-unknown",
             detail: "this process does not descend from an application bundle, so macOS has no identity " +
@@ -310,7 +433,8 @@ export class WriteCapabilityError extends Error {
 }
 // ── UI capability (Article IV) ───────────────────────────────────────────────
 /**
- * The LAB's escape hatch, and deliberately not consumer surface. The VM lab and
+ * The LAB's escape hatch for the ui vector, and deliberately not consumer
+ * surface (its write-side twin is {@link WRITE_DIRECT_ESCAPE_ENV}). The VM lab and
  * the guest e2e bundle drive the UI vector DIRECT — the in-guest Accessibility
  * grant is held by the runner's own processes (the AXVM1 layer), there is no
  * helper bundle in a disposable clone, and there is nobody to answer a dialog
@@ -340,7 +464,11 @@ function deputyGuiStandingDefault(env) {
  *
  * Every answer is prompt-free: the config key is a file read, and the deputy's
  * `hello` carries `AXIsProcessTrusted()` plus its own `AEDeterminePermission`
- * verdict for System Events.
+ * verdict for System Events. The one state that needs more than a read is a
+ * DORMANT System Events, which macOS reaps whenever it has been idle: the
+ * target is started in the background — never by sending it an event — and the
+ * determination re-read, so `not-running` resolves to the truth instead of
+ * masquerading as a missing grant (./deputy/wake.ts).
  */
 export function uiCapability(deps = {}) {
     const env = deps.env ?? process.env;
@@ -357,7 +485,7 @@ export function uiCapability(deps = {}) {
             host,
         };
     }
-    if ((env[UI_DIRECT_ESCAPE_ENV] ?? "") === "1") {
+    if (labEscapeSet(env, UI_DIRECT_ESCAPE_ENV)) {
         return {
             mode: "direct-escape",
             detail: `${UI_DIRECT_ESCAPE_ENV}=1 — GUI-driving runs directly under this process (lab escape)`,
@@ -374,14 +502,38 @@ export function uiCapability(deps = {}) {
             host,
         };
     }
+    // LIVENESS BEFORE AUTHORIZATION (#610). System Events is an on-demand agent
+    // macOS reaps when idle, and the ask-false determination cannot answer for a
+    // target that is down — so the deputy's `not-running` describes the PROCESS,
+    // not the grant, and treating it as a missing grant sends a fully onboarded
+    // machine back through onboarding. Start it (a background launch raises no
+    // dialog; waking it with an Apple event would), then re-read the
+    // determination. Only after that is the standing an authorization fact.
+    let systemEvents = standing.systemEvents;
+    let wake = null;
+    if (systemEvents === "not-running") {
+        wake = (deps.wakeSystemEvents ?? (() => wakeSystemEvents(env)))();
+        systemEvents = wake.standing;
+    }
+    if (wake !== null && (systemEvents === undefined || systemEvents === "not-running")) {
+        return {
+            mode: "target-unreachable",
+            detail: `System Events is not running and ${wake.detail} — the Things window is driven through it`,
+            remediation: [
+                'start it with `open -g -a "System Events"`, then rerun this command',
+                "or log out and back in — System Events is a macOS component of your login session",
+            ],
+            host,
+        };
+    }
     const missing = [];
     if (standing.axTrusted !== true) {
         missing.push(standing.axTrusted === undefined
             ? "Accessibility (these helpers predate the permission handshake — rebuild)"
             : "Accessibility");
     }
-    if (standing.systemEvents !== "granted") {
-        missing.push(`automation → System Events (${standing.systemEvents ?? "unknown"})`);
+    if (systemEvents !== "granted") {
+        missing.push(`automation → System Events (${systemEvents ?? "unknown"})`);
     }
     if (missing.length === 0) {
         return {
@@ -398,6 +550,133 @@ export function uiCapability(deps = {}) {
         host,
     };
 }
+// ── URL-scheme capability (Things' own in-app authorization) ─────────────────
+/**
+ * Where the app records the answer. MEASURED (URLEN1, Things 3.23): this is the
+ * ONLY home — the un-TCC'd user domain `~/Library/Preferences/
+ * com.culturedcode.ThingsMac.plist` carries window frames and Sparkle keys and
+ * nothing else, under any spelling of the name, so there is no consent-free
+ * copy to prefer. The authoritative one lives inside the group container.
+ */
+const THINGS_PREFS_PLIST = join("Library/Group Containers/JLMPQHK86H.com.culturedcode.ThingsMac", "Library/Preferences/JLMPQHK86H.com.culturedcode.ThingsMac.plist");
+/**
+ * Read standings that ALREADY cover the Things group container, so opening a
+ * file inside it adds no consent class that is not already settled.
+ *
+ * `explicit-db` is deliberately absent: a caller-supplied database path says
+ * nothing about the container, and opening it to find out is the "try it and
+ * see" the Article I corollary forbids. Such a caller gets `unreadable`, which
+ * is permissive — exactly the right direction for a path outside the doctrine.
+ */
+const CONTAINER_REACHABLE = new Set([
+    "helpers",
+    "direct-fda",
+    "session-grant",
+]);
+function extractUriSchemeEnabledDefault(plistBytes) {
+    return execFileSync("plutil", ["-extract", "uriSchemeEnabled", "raw", "-o", "-", "--", "-"], {
+        input: plistBytes,
+        encoding: "utf8",
+        timeout: 5000,
+    });
+}
+/** The one line every not-enabled verdict ends with. */
+const URL_SETTINGS_PATH = "Things ▸ Settings ▸ General ▸ Enable Things URLs";
+/**
+ * Has Things been authorized to act on `things:///` commands, and how do we know?
+ *
+ * Stateless per invocation, like every other verdict here: the setting is the
+ * user's to flip at any moment, and a cached "yes" would be a stored onboarding
+ * flag by another name. The common case costs one file read plus one `plutil`.
+ *
+ * WHY THIS IS GATED ON THE READ STANDING. The plist lives inside the Things
+ * group container, which is the same `kTCCServiceSystemPolicyAppData` class as
+ * the database — so the open is itself what would raise the app-data modal on a
+ * machine that holds no standing. This function therefore never opens it
+ * speculatively: it asks {@link readCapability} first and reports `unreadable`
+ * unless the container is already reachable (helpers, FDA, or a live session
+ * grant). Where the helpers are serving, the read rides the reader's own
+ * security-scoped bookmark over the container, so the prefs plist is inside the
+ * granted subtree and no host grant is involved at all.
+ *
+ * MEASURED, all three states (URLEN1, golden-v4 / Things 3.23):
+ *
+ *  - `1` — URL mutations execute.
+ *  - `0` — every mutating verb (`add`, token-bearing `update`, the `json`
+ *    batch) is dropped in TOTAL SILENCE: zero row delta, no dialog, no window
+ *    of any kind, and nothing to wait for. Navigation URLs (`things:///show`)
+ *    still work, so this gate covers mutations only.
+ *  - absent — nobody has answered the app's own first-use "Things URL Scheme"
+ *    dialog (Cancel / Enable). The dispatched request PARKS behind that dialog
+ *    rather than being dropped, which is what #611 saw: with nobody at the
+ *    machine, the verify window expired and the write reported a silent no-op.
+ */
+export function urlSchemeCapability(deps = {}) {
+    const host = hostApp(deps);
+    const standing = (deps.readStanding ?? (() => readCapability({}, deps)))();
+    if (!CONTAINER_REACHABLE.has(standing.mode)) {
+        return {
+            mode: "unreadable",
+            detail: "the app's preferences are inside the Things data folder, which this process has no " +
+                `standing to open (${standing.mode}) — whether ${URL_SETTINGS_PATH} is on is unknown`,
+            remediation: [],
+            host,
+        };
+    }
+    let bytes;
+    try {
+        bytes = (deps.readPrefsPlist ?? (() => readContainerFileSync(join(homedir(), THINGS_PREFS_PLIST))))();
+    }
+    catch {
+        return {
+            mode: "unreadable",
+            detail: `the app's preferences file could not be read — whether ${URL_SETTINGS_PATH} is on is unknown`,
+            remediation: [],
+            host,
+        };
+    }
+    let raw;
+    try {
+        raw = (deps.extractUriSchemeEnabled ?? extractUriSchemeEnabledDefault)(bytes).trim();
+    }
+    catch {
+        // The file was readable and carries no such key. An unparseable file lands
+        // here too, and that is the safe direction: the refusal names a setting the
+        // human can flip, and flipping it rewrites the file and clears the verdict.
+        return {
+            mode: "never-asked",
+            detail: "nobody has answered Things' own 'Things URL Scheme' dialog on this machine — the app " +
+                "holds the first URL command behind it, and a command dispatched now waits there " +
+                "instead of running",
+            remediation: [
+                `turn on ${URL_SETTINGS_PATH}, then retry`,
+                "or send one `things:///` command while you are at the machine and click Enable",
+            ],
+            host,
+        };
+    }
+    if (raw === "1" || raw === "true") {
+        return { mode: "enabled", detail: `${URL_SETTINGS_PATH} is on`, remediation: [], host };
+    }
+    if (raw === "0" || raw === "false") {
+        return {
+            mode: "disabled",
+            detail: `${URL_SETTINGS_PATH} is off — the app puts URL commands in an alert on its own ` +
+                "window and holds them there instead of running them",
+            remediation: [`turn on ${URL_SETTINGS_PATH}, then retry`],
+            host,
+        };
+    }
+    // A shape we have never seen. Reporting it verbatim beats guessing which way
+    // the app would read it, and `unreadable` lets the write proceed and be judged
+    // by the verify rather than refused on a value nobody has measured.
+    return {
+        mode: "unreadable",
+        detail: `the app records an unrecognized value for ${URL_SETTINGS_PATH} (${raw})`,
+        remediation: [],
+        host,
+    };
+}
 /** Thrown when GUI-driving is refused for want of capability (Article IV). */
 export class UiCapabilityError extends Error {
     remediation;
@@ -409,6 +688,17 @@ export class UiCapabilityError extends Error {
         this.capability = capability;
     }
 }
+/** Thrown when a URL-scheme mutation is refused for want of the app's own authorization. */
+export class UrlSchemeCapabilityError extends Error {
+    remediation;
+    capability;
+    constructor(capability) {
+        super(`Things will not act on URL commands: ${capability.detail}. ${capability.remediation.join("; ")}.`);
+        this.name = "UrlSchemeCapabilityError";
+        this.remediation = capability.remediation;
+        this.capability = capability;
+    }
+}
 /** Test seam: forget the one memo this module keeps (the host's display name). */
 export function resetCapabilityForTests() {
     resetHostAccessForTests();

package/dist/capability.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,UAAU,EAGV,OAAO,EACP,eAAe,EACf,uBAAuB,EACvB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,UAAU,EAGV,OAAO,EACP,eAAe,EACf,SAAS,GACV,MAAM,kBAAkB,CAAC;AAE1B,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AA0D7D,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,UAA0B;IACpD,OAAO,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,CAAC;AACjF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,UAAwB;IAChD,OAAO,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,UAA2B;IACtD,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,CAAC;AAC9E,CAAC;AAmCD,gFAAgF;AAEhF;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAsB,EACtB,MAAc,EACd,MAAc;IAEd,IAAI,EAA4B,CAAC;IACjC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,yEAAyE;YACvE,2DAA2D,CAC9D;aACA,GAAG,CAAC,MAAM,EAAE,MAAM,CAAwC,CAAC;QAC9D,MAAM,KAAK,GAAG,GAAG,EAAE,UAAU,CAAC;QAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,EAAE,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhE,wEAAwE;AACxE,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO;QACL,gGAAgG;QAChG,gCAAgC,QAAQ,6DAA6D;QACrG,iDAAiD;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA+B,EAAE,EACjC,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,yEAAyE;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qEAAqE;YAC7E,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,mDAAmD;YAC3D,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,oEACN,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAC/B,EAAE;YACF,WAAW,EAAE;gBACX,sDAAsD;gBACtD,2DAA2D;gBAC3D,gEAAgE;aACjE;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,+BAA+B,eAAe,CAAC,IAAI,CAAC,GAC1D,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EACnD,EAAE;YACF,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,4EAA4E;YAC5G,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EACJ,GAAG,eAAe,CAAC,IAAI,CAAC,yCAAyC,OAAO,CAAC,MAAM,EAAE;YACjF,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBACnD,CAAC,CAAC,+BAA+B,GAAG,CAAC,IAAI,GAAG;gBAC5C,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,WAAW,CAAW;IACtB,UAAU,CAAiB;IACpC,YAAY,UAA0B;QACpC,KAAK,CACH,uCAAuC,UAAU,CAAC,MAAM,IAAI;YAC1D,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,CACnB,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAC9E,EAAE,CAAC;IACJ,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,0DAA0D;YAClE,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EACJ,qFAAqF;gBACrF,+BAA+B;YACjC,WAAW,EAAE;gBACX,gGAAgG;aACjG;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,CAChB,IAAI,CAAC,mBAAmB;QACxB,CAAC,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CACtF,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,QAAQ,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,GAAG,QAAQ,KAAK,IAAI,CAAC,QAAQ,gCAAgC;gBACrE,WAAW,EAAE,EAAE;gBACf,IAAI;aACL,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,8CAA8C,QAAQ,KAAK,IAAI,CAAC,QAAQ,2BAA2B;gBAC3G,WAAW,EAAE;oBACX,uBAAuB,QAAQ,0DAA0D;oBACzF,0DAA0D,IAAI,CAAC,QAAQ,+BAA+B;iBACvG;gBACD,IAAI;aACL,CAAC;QACJ;YACE,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,uCAAuC,QAAQ,KAAK,IAAI,CAAC,QAAQ,OAAO;gBAChF,WAAW,EAAE;oBACX,iFAAiF;oBACjF,uEAAuE;iBACxE;gBACD,IAAI;aACL,CAAC;IACN,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,WAAW,CAAW;IACtB,UAAU,CAAkB;IACrC,YAAY,UAA2B;QACrC,KAAK,CAAC,4BAA4B,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,sEAAsE,CAAC;AAEjG,SAAS,wBAAwB,CAC/B,GAAsB;IAEtB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,qEAAqE;YAC7E,WAAW,EAAE;gBACX,mDAAmD;gBACnD,QAAQ,iBAAiB,EAAE;aAC5B;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,GAAG,oBAAoB,gEAAgE;YAC/F,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EACJ,wFAAwF;YAC1F,WAAW,EAAE,CAAC,iBAAiB,EAAE,2DAA2D,CAAC;YAC7F,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CACV,QAAQ,CAAC,SAAS,KAAK,SAAS;YAC9B,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,eAAe,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,kEAAkE;YAC1E,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,8EAA8E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1G,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,IAAI;KACL,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,WAAW,CAAW;IACtB,UAAU,CAAe;IAClC,YAAY,UAAwB;QAClC,KAAK,CACH,uCAAuC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB;IACrC,uBAAuB,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAmB,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnG,OAAO,EACL,UAAU,EAGV,OAAO,EACP,eAAe,EACf,uBAAuB,EACvB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EACL,UAAU,EAGV,OAAO,EACP,eAAe,EACf,SAAS,GACV,MAAM,kBAAkB,CAAC;AAE1B,kFAAkF;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAmFpD,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,UAA0B;IACpD,OAAO,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,CAAC;AACjF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,UAAwB;IAChD,OAAO,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA+B;IAC9D,OAAO,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,CAAC;AAC3E,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,UAA2B;IACtD,OAAO,CACL,UAAU,CAAC,IAAI,KAAK,QAAQ;QAC5B,UAAU,CAAC,IAAI,KAAK,gBAAgB;QACpC,UAAU,CAAC,IAAI,KAAK,eAAe,CACpC,CAAC;AACJ,CAAC;AA+DD,gFAAgF;AAEhF;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,GAAsB,EACtB,MAAc,EACd,MAAc;IAEd,IAAI,EAA4B,CAAC;IACjC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,yEAAyE;YACvE,2DAA2D,CAC9D;aACA,GAAG,CAAC,MAAM,EAAE,MAAM,CAAwC,CAAC;QAC9D,MAAM,KAAK,GAAG,GAAG,EAAE,UAAU,CAAC;QAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,EAAE,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,GAAsB,EAAE,IAAY;IACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC;AACnC,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO;QACL,gGAAgG;QAChG,oFAAoF;QACpF,uDAAuD,QAAQ,oEAAoE;QACnI,gCAAgC,QAAQ,6DAA6D;KACtG,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,UAA+B,EAAE,EACjC,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,yEAAyE;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qEAAqE;YAC7E,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,mDAAmD;YAC3D,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,oEACN,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAC/B,EAAE;YACF,WAAW,EAAE;gBACX,sDAAsD;gBACtD,2DAA2D;gBAC3D,gEAAgE;aACjE;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,+BAA+B,eAAe,CAAC,IAAI,CAAC,GAC1D,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EACnD,EAAE;YACF,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,sEAAsE;YACtE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,0DAA0D;YAC1D,MAAM,EAAE,GAAG,IAAI,yEAAyE,IAAI,2DAA2D,IAAI,QAAQ;YACnK,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EACJ,GAAG,eAAe,CAAC,IAAI,CAAC,yCAAyC,OAAO,CAAC,MAAM,EAAE;YACjF,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBACnD,CAAC,CAAC,+BAA+B,GAAG,CAAC,IAAI,GAAG;gBAC5C,CAAC,CAAC,EAAE,CAAC;QACT,WAAW,EAAE,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,WAAW,CAAW;IACtB,UAAU,CAAiB;IACpC,YAAY,UAA0B;QACpC,KAAK,CACH,uCAAuC,UAAU,CAAC,MAAM,IAAI;YAC1D,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAyBjE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAkC,EAAE,EACpC,OAAuB,EAAE;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,CAChB,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAC9E,EAAE,CAAC;IACJ,IAAI,YAAY,GAAG,SAAS,CAAC;IAC7B,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,IAAI,IAAI,GAAsB,IAAI,CAAC;QACnC,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACjE,OAAO;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EACJ,IAAI,KAAK,IAAI;oBACX,CAAC,CAAC,oFAAoF;wBACpF,gFAAgF;oBAClF,CAAC,CAAC,6BAA6B,IAAI,CAAC,MAAM,uDAAuD;gBACrG,WAAW,EAAE;oBACX,sCAAsC;oBACtC,mDAAmD,gBAAgB,IAAI;iBACxE;gBACD,IAAI;aACL,CAAC;QACJ,CAAC;QACD,mEAAmE;QACnE,yEAAyE;QACzE,CAAC,IAAI,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,0DAA0D;YAClE,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3B,IAAI,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,GAAG,uBAAuB,qEAAqE;gBACvG,WAAW,EAAE,EAAE;gBACf,IAAI;aACL,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EACJ,qFAAqF;gBACrF,+BAA+B;YACjC,WAAW,EAAE;gBACX,gGAAgG;aACjG;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,CAChB,IAAI,CAAC,mBAAmB;QACxB,CAAC,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CACtF,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,QAAQ,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,GAAG,QAAQ,KAAK,IAAI,CAAC,QAAQ,gCAAgC;gBACrE,WAAW,EAAE,EAAE;gBACf,IAAI;aACL,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,8CAA8C,QAAQ,KAAK,IAAI,CAAC,QAAQ,2BAA2B;gBAC3G,WAAW,EAAE;oBACX,uBAAuB,QAAQ,0DAA0D;oBACzF,0DAA0D,IAAI,CAAC,QAAQ,+BAA+B;iBACvG;gBACD,IAAI;aACL,CAAC;QACJ;YACE,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,uCAAuC,QAAQ,KAAK,IAAI,CAAC,QAAQ,OAAO;gBAChF,WAAW,EAAE;oBACX,iFAAiF;oBACjF,uEAAuE;iBACxE;gBACD,IAAI;aACL,CAAC;IACN,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,WAAW,CAAW;IACtB,UAAU,CAAkB;IACrC,YAAY,UAA2B;QACrC,KAAK,CAAC,4BAA4B,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,sEAAsE,CAAC;AAEjG,SAAS,wBAAwB,CAC/B,GAAsB;IAEtB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,qEAAqE;YAC7E,WAAW,EAAE;gBACX,mDAAmD;gBACnD,QAAQ,iBAAiB,EAAE;aAC5B;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,GAAG,oBAAoB,gEAAgE;YAC/F,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EACJ,wFAAwF;YAC1F,WAAW,EAAE,CAAC,iBAAiB,EAAE,2DAA2D,CAAC;YAC7F,IAAI;SACL,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,wEAAwE;IACxE,IAAI,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;IACzC,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,aAAa,CAAC,EAAE,CAAC;QACpF,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,oCAAoC,IAAI,CAAC,MAAM,2CAA2C;YAClG,WAAW,EAAE;gBACX,qEAAqE;gBACrE,mFAAmF;aACpF;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CACV,QAAQ,CAAC,SAAS,KAAK,SAAS;YAC9B,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,eAAe,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,+BAA+B,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,kEAAkE;YAC1E,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,8EAA8E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1G,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,IAAI;KACL,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,CAC7B,gEAAgE,EAChE,iEAAiE,CAClE,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAoC,IAAI,GAAG,CAAqB;IACvF,SAAS;IACT,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,8BAA8B,CAAC,UAAkB;IACxD,OAAO,YAAY,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE;QAC3F,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EACJ,qFAAqF;gBACrF,qBAAqB,QAAQ,CAAC,IAAI,eAAe,iBAAiB,mBAAmB;YACvF,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CACN,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAC1F,EAAE,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,0DAA0D,iBAAiB,mBAAmB;YACtG,WAAW,EAAE,EAAE;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,8BAA8B,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EACJ,uFAAuF;gBACvF,kFAAkF;gBAClF,oBAAoB;YACtB,WAAW,EAAE;gBACX,WAAW,iBAAiB,cAAc;gBAC1C,gFAAgF;aACjF;YACD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,iBAAiB,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EACJ,GAAG,iBAAiB,6DAA6D;gBACjF,qDAAqD;YACvD,WAAW,EAAE,CAAC,WAAW,iBAAiB,cAAc,CAAC;YACzD,IAAI;SACL,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,+EAA+E;IAC/E,oEAAoE;IACpE,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,6CAA6C,iBAAiB,KAAK,GAAG,GAAG;QACjF,WAAW,EAAE,EAAE;QACf,IAAI;KACL,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,WAAW,CAAW;IACtB,UAAU,CAAe;IAClC,YAAY,UAAwB;QAClC,KAAK,CACH,uCAAuC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,WAAW,CAAW;IACtB,UAAU,CAAsB;IACzC,YAAY,UAA+B;QACzC,KAAK,CACH,wCAAwC,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB;IACrC,uBAAuB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/cli/commands/doctor.d.ts

@@ -3,6 +3,18 @@
  * Exit codes: 0 healthy; 5 drift/unknown-version; 7 environment problems.
  */
 import type { Command } from "commander";
-import { type DiagnoseResult } from "../../index.ts";
+import { type DiagnoseReport, type DiagnoseResult } from "../../index.ts";
 export declare const runDoctor: (dbPath?: string) => DiagnoseResult;
+/**
+ * The `── Permissions ──` section: one row per vector, and for each the STATE,
+ * the PROVENANCE (which identity actually holds the grant — the question the
+ * three summary rows above cannot answer), and the remediation when it is
+ * missing (docs/design/permissions-doctrine.md, Article II).
+ *
+ * Every value here comes from the prompt-free verdict `diagnose` already took.
+ * Doctor was an Article I violation once — it opened the container to find out
+ * whether it could — and this section must never regress that: it renders, it
+ * does not probe.
+ */
+export declare function permissionLines(report: DiagnoseReport): string[];
 export declare function registerDoctor(program: Command): void;