@agent-teams/engineering-foundation 0.4.1 → 0.6.0

package/dist/capabilities/governance-architecture-decisions/adapters/outbound/filesystem/filesystem-architecture-decision-baseline-repository.js

@@ -0,0 +1,285 @@
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, open, realpath, rename, rm, stat } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { lock } from "proper-lockfile";
+import { CapabilityInputError } from "../../../../../capability-runtime.js";
+import { ContainedFileReadError, pathTraversesSymbolicLink, readContainedRegularFile } from "../../../../../filesystem-path-safety.js";
+import { assertNotCancelled } from "../../../../../strict-yaml.js";
+import { parseAcceptedArchitectureDecisionBaseline } from "../../../application/policies/accepted-architecture-decision-baseline.js";
+const MAX_BASELINE_BYTES = 4 * 1024 * 1024;
+const WRITE_PHASE = "architecture-decision-baseline-write";
+const BASELINE_LOCK_OPTIONS = Object.freeze({
+    realpath: false,
+    retries: {
+        factor: 1.2,
+        maxTimeout: 100,
+        minTimeout: 25,
+        retries: 30
+    },
+    stale: 30_000,
+    update: 10_000
+});
+function contained(root, candidate) {
+    const relation = relative(root, candidate);
+    return (relation === "" ||
+        (!isAbsolute(relation) && relation !== ".." && !relation.startsWith(`..${sep}`)));
+}
+function revision(source) {
+    return `sha256:${createHash("sha256").update(source).digest("hex")}`;
+}
+function serializedBaseline(baseline) {
+    return `${JSON.stringify({
+        schemaVersion: baseline.schemaVersion,
+        algorithm: baseline.algorithm,
+        decisions: baseline.decisions.map((entry) => ({
+            id: entry.id,
+            path: entry.path,
+            immutableDigest: entry.immutableDigest
+        }))
+    }, null, 2)}\n`;
+}
+function hasEquivalentSerializedBaseline(observed, expected) {
+    return observed?.replaceAll("\r\n", "\n") === expected;
+}
+function writeError(code, message) {
+    throw new CapabilityInputError({
+        code,
+        message,
+        phase: WRITE_PHASE,
+        retryable: false
+    });
+}
+async function canonicalRoot(consumerRoot) {
+    try {
+        const root = await realpath(consumerRoot);
+        return (await stat(root)).isDirectory() ? root : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function targetFor(consumerRoot, repositoryPath) {
+    const root = await canonicalRoot(consumerRoot);
+    if (root === undefined) {
+        return { kind: "unsafe", message: "Consumer root is not available." };
+    }
+    const candidate = resolve(root, repositoryPath);
+    if (!contained(root, candidate)) {
+        return {
+            kind: "unsafe",
+            message: "Accepted-decision baseline path escapes the consumer repository."
+        };
+    }
+    if (await pathTraversesSymbolicLink(root, candidate)) {
+        return {
+            kind: "unsafe",
+            message: "Accepted-decision baseline path traverses a symbolic link."
+        };
+    }
+    return { candidate, parent: dirname(candidate), root };
+}
+function targetIsReadResult(value) {
+    return "kind" in value;
+}
+async function inspectBaseline(input) {
+    assertNotCancelled(input.signal);
+    const target = await targetFor(input.consumerRoot, input.path);
+    if (targetIsReadResult(target)) {
+        return { result: target };
+    }
+    let bytes;
+    try {
+        bytes = await readContainedRegularFile({
+            candidate: target.candidate,
+            maxBytes: MAX_BASELINE_BYTES,
+            root: target.root
+        });
+    }
+    catch (error) {
+        if (error instanceof ContainedFileReadError) {
+            if (error.failure === "missing") {
+                return { result: { kind: "missing" }, target };
+            }
+            if (error.failure === "invalid") {
+                return {
+                    result: {
+                        kind: "invalid",
+                        message: `Accepted-decision baseline must be a regular JSON file no larger than ${MAX_BASELINE_BYTES} bytes.`
+                    },
+                    target
+                };
+            }
+            return {
+                result: {
+                    kind: "unsafe",
+                    message: "Accepted-decision baseline is unavailable, unsafe, or changed while reading."
+                },
+                target
+            };
+        }
+        throw error;
+    }
+    try {
+        const source = bytes.toString("utf8");
+        assertNotCancelled(input.signal);
+        return {
+            result: {
+                kind: "valid",
+                revision: revision(source),
+                value: JSON.parse(source)
+            },
+            source,
+            target
+        };
+    }
+    catch (error) {
+        if (error instanceof CapabilityInputError) {
+            throw error;
+        }
+        return {
+            result: {
+                kind: "invalid",
+                message: "Accepted-decision baseline is not valid JSON."
+            },
+            target
+        };
+    }
+}
+function assertExpectedState(current, expected) {
+    if (current.kind === "unsafe") {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_UNSAFE_TARGET", `Accepted-decision baseline target is unsafe: ${current.message}`);
+    }
+    if (current.kind === "invalid") {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_INVALID_TARGET", `Accepted-decision baseline target is invalid: ${current.message}`);
+    }
+    if (expected.kind === "missing" && current.kind === "missing") {
+        return;
+    }
+    if (expected.kind === "valid" &&
+        current.kind === "valid" &&
+        current.revision === expected.revision) {
+        return;
+    }
+    writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_CONFLICT", "Accepted-decision baseline changed, appeared, or became unavailable during promotion. Re-run promotion from the current repository state.");
+}
+async function ensureSafeParent(target) {
+    if (!contained(target.root, target.parent)) {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_ESCAPE", "Accepted-decision baseline parent escapes the consumer repository.");
+    }
+    if (await pathTraversesSymbolicLink(target.root, target.parent)) {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_SYMLINK_PROHIBITED", "Accepted-decision baseline parent traverses a symbolic link.");
+    }
+    try {
+        await mkdir(target.parent, { mode: 0o755, recursive: true });
+        if (await pathTraversesSymbolicLink(target.root, target.parent)) {
+            writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_SYMLINK_PROHIBITED", "Accepted-decision baseline parent traverses a symbolic link.");
+        }
+        const canonicalParent = await realpath(target.parent);
+        if (!contained(target.root, canonicalParent) || !(await stat(canonicalParent)).isDirectory()) {
+            writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_ESCAPE", "Accepted-decision baseline parent is not a contained directory.");
+        }
+    }
+    catch (error) {
+        if (error instanceof CapabilityInputError) {
+            throw error;
+        }
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_UNAVAILABLE", "Accepted-decision baseline parent cannot be created safely.");
+    }
+}
+async function acquireBaselineWriteLock(target) {
+    try {
+        // This is a cooperative lock. The repeated revision check below still detects
+        // direct filesystem mutation that does not participate in the protocol.
+        return await lock(target.candidate, BASELINE_LOCK_OPTIONS);
+    }
+    catch {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_LOCK_UNAVAILABLE", "Accepted-decision baseline is currently being promoted by another writer. Re-run promotion from the current repository state.");
+    }
+}
+async function writeAndFlushTemporaryBaseline(input) {
+    const handle = await open(input.path, "w", 0o644);
+    try {
+        await handle.writeFile(input.source, "utf8");
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function flushParentDirectory(parent) {
+    if (process.platform === "win32") {
+        return;
+    }
+    try {
+        const handle = await open(parent, "r");
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch {
+        writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_DURABILITY_FAILED", "Accepted-decision baseline was replaced but its parent directory could not be flushed. Reconcile the baseline before retrying.");
+    }
+}
+export class FilesystemArchitectureDecisionBaselineRepository {
+    async read(input) {
+        return (await inspectBaseline(input)).result;
+    }
+    async write(input) {
+        assertNotCancelled(input.signal);
+        const validatedBaseline = parseAcceptedArchitectureDecisionBaseline(input.baseline);
+        if (validatedBaseline === undefined) {
+            writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_INVALID_INPUT", "Accepted-decision baseline does not match the required immutable baseline shape.");
+        }
+        const source = serializedBaseline(validatedBaseline);
+        if (Buffer.byteLength(source, "utf8") > MAX_BASELINE_BYTES) {
+            writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_TOO_LARGE", `Accepted-decision baseline must serialize to no more than ${MAX_BASELINE_BYTES} bytes.`);
+        }
+        const firstRead = await inspectBaseline(input);
+        assertExpectedState(firstRead.result, input.expected);
+        const target = firstRead.target;
+        if (target === undefined) {
+            writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_UNAVAILABLE", "Accepted-decision baseline target is unavailable.");
+        }
+        await ensureSafeParent(target);
+        const release = await acquireBaselineWriteLock(target);
+        try {
+            // The lock is held across the final revision check and atomic replacement.
+            // Otherwise two cooperative writers can both pass the check, then one
+            // silently replaces the other while both report success.
+            await ensureSafeParent(target);
+            const secondRead = await inspectBaseline(input);
+            assertExpectedState(secondRead.result, input.expected);
+            if (hasEquivalentSerializedBaseline(secondRead.source, source)) {
+                return "unchanged";
+            }
+            assertNotCancelled(input.signal);
+            const temporaryDirectory = await mkdtemp(join(target.parent, ".architecture-decision-baseline-"));
+            try {
+                const temporaryPath = join(temporaryDirectory, "baseline.json");
+                await writeAndFlushTemporaryBaseline({ path: temporaryPath, source });
+                assertNotCancelled(input.signal);
+                const finalRead = await inspectBaseline(input);
+                assertExpectedState(finalRead.result, input.expected);
+                if (hasEquivalentSerializedBaseline(finalRead.source, source)) {
+                    return "unchanged";
+                }
+                if (await pathTraversesSymbolicLink(target.root, target.candidate)) {
+                    writeError("ARCHITECTURE_DECISION_BASELINE_WRITE_SYMLINK_PROHIBITED", "Accepted-decision baseline target traverses a symbolic link.");
+                }
+                await rename(temporaryPath, target.candidate);
+                await flushParentDirectory(target.parent);
+                return input.expected.kind === "missing" ? "created" : "updated";
+            }
+            finally {
+                await rm(temporaryDirectory, { force: true, recursive: true });
+            }
+        }
+        finally {
+            await release();
+        }
+    }
+}
+//# sourceMappingURL=filesystem-architecture-decision-baseline-repository.js.map

package/dist/capabilities/governance-architecture-decisions/adapters/outbound/filesystem/filesystem-architecture-decision-baseline-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-architecture-decision-baseline-repository.js","sourceRoot":"","sources":["../../../../../../src/capabilities/governance-architecture-decisions/adapters/outbound/filesystem/filesystem-architecture-decision-baseline-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,EAAE,EACF,IAAI,EACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,yCAAyC,EAAE,MAAM,0EAA0E,CAAC;AASrI,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAC3D,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE;QACP,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,EAAE;KACZ;IACD,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,MAAM;CACf,CAAC,CAAC;AAcH,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA8C;IACxE,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED,SAAS,+BAA+B,CACtC,QAA4B,EAC5B,QAAgB;IAEhB,OAAO,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC/C,MAAM,IAAI,oBAAoB,CAAC;QAC7B,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,YAAoB,EACpB,cAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kEAAkE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,yBAAyB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,4DAA4D;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA8D;IAE9D,OAAO,MAAM,IAAI,KAAK,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAI9B;IACC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;YACjD,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO;oBACL,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,yEAAyE,kBAAkB,SAAS;qBAC9G;oBACD,MAAM;iBACP,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,8EAA8E;iBACxF;gBACD,MAAM;aACP,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY;aACrC;YACD,MAAM;YACN,MAAM;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,+CAA+C;aACzD;YACD,MAAM;SACP,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA+C,EAC/C,QAAmD;IAEnD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,UAAU,CACR,oDAAoD,EACpD,gDAAgD,OAAO,CAAC,OAAO,EAAE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CACR,qDAAqD,EACrD,iDAAiD,OAAO,CAAC,OAAO,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,IACE,QAAQ,CAAC,IAAI,KAAK,OAAO;QACzB,OAAO,CAAC,IAAI,KAAK,OAAO;QACxB,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,UAAU,CACR,+CAA+C,EAC/C,2IAA2I,CAC5I,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAsB;IACpD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,UAAU,CACR,6CAA6C,EAC7C,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,UAAU,CACR,yDAAyD,EACzD,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,UAAU,CACR,yDAAyD,EACzD,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7F,UAAU,CACR,6CAA6C,EAC7C,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,UAAU,CACR,kDAAkD,EAClD,6DAA6D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAsB;IAEtB,IAAI,CAAC;QACH,8EAA8E;QAC9E,wEAAwE;QACxE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CACR,uDAAuD,EACvD,+HAA+H,CAChI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAG7C;IACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAc;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CACR,wDAAwD,EACxD,gIAAgI,CACjI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,gDAAgD;IAG3D,KAAK,CAAC,IAAI,CAAC,KAIV;QACC,OAAO,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAMX;QACC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,iBAAiB,GAAG,yCAAyC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,UAAU,CACR,oDAAoD,EACpD,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;YAC3D,UAAU,CACR,gDAAgD,EAChD,6DAA6D,kBAAkB,SAAS,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/C,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,UAAU,CACR,kDAAkD,EAClD,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,2EAA2E;YAC3E,sEAAsE;YACtE,yDAAyD;YACzD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAChD,mBAAmB,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,+BAA+B,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/D,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,kBAAkB,GAAG,MAAM,OAAO,CACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,CAAC,CACxD,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;gBAChE,MAAM,8BAA8B,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC/C,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,+BAA+B,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC9D,OAAO,WAAW,CAAC;gBACrB,CAAC;gBACD,IAAI,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnE,UAAU,CACR,yDAAyD,EACzD,8DAA8D,CAC/D,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/capabilities/governance-architecture-decisions/application/model/architecture-decision.d.ts

@@ -0,0 +1,32 @@
+import { type MarkdownDocumentObservation } from "../../../../documentation-observation/application/model/markdown-document.js";
+export declare const ARCHITECTURE_DECISION_STATUSES: readonly ["proposed", "accepted", "superseded"];
+export type ArchitectureDecisionStatus = (typeof ARCHITECTURE_DECISION_STATUSES)[number];
+export interface ArchitectureDecisionIndexPolicy {
+    readonly path: string;
+    readonly sections: Readonly<Record<ArchitectureDecisionStatus, string>>;
+}
+export interface ArchitectureDecisionPolicy {
+    readonly acceptedBaselinePath: string;
+    readonly adrRoots: readonly string[];
+    readonly index: ArchitectureDecisionIndexPolicy;
+}
+export interface ArchitectureDecision {
+    readonly document: MarkdownDocumentObservation;
+    readonly id: string;
+    readonly metadata: Readonly<Record<string, unknown>>;
+    readonly status: ArchitectureDecisionStatus;
+    readonly supersededBy: readonly string[];
+    readonly supersedes: readonly string[];
+}
+export interface AcceptedArchitectureDecisionBaselineEntry {
+    readonly id: string;
+    readonly immutableDigest: string;
+    readonly path: string;
+}
+export interface AcceptedArchitectureDecisionBaseline {
+    readonly algorithm: "sha256";
+    readonly decisions: readonly AcceptedArchitectureDecisionBaselineEntry[];
+    readonly schemaVersion: 1;
+}
+export declare function immutableArchitectureDecisionPayload(decision: ArchitectureDecision): string;
+//# sourceMappingURL=architecture-decision.d.ts.map

package/dist/capabilities/governance-architecture-decisions/application/model/architecture-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-decision.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/model/architecture-decision.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,8EAA8E,CAAC;AAEtF,eAAO,MAAM,8BAA8B,YACzC,UAAU,EACV,UAAU,EACV,YAAY,CACJ,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,yCAAyC,EAAE,CAAC;IACzE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;CAC3B;AAgBD,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,oBAAoB,GAC7B,MAAM,CAUR"}

package/dist/capabilities/governance-architecture-decisions/application/model/architecture-decision.js

@@ -0,0 +1,26 @@
+import { compareBinaryStrings } from "../../../../binary-string-comparator.js";
+import { markdownSourceWithoutFrontmatter } from "../../../../documentation-observation/application/model/markdown-document.js";
+export const ARCHITECTURE_DECISION_STATUSES = [
+    "proposed",
+    "accepted",
+    "superseded"
+];
+function canonicalize(value) {
+    if (Array.isArray(value)) {
+        return value.map(canonicalize);
+    }
+    if (typeof value === "object" && value !== null) {
+        return Object.fromEntries(Object.entries(value)
+            .toSorted(([left], [right]) => compareBinaryStrings(left, right))
+            .map(([key, nested]) => [key, canonicalize(nested)]));
+    }
+    return value;
+}
+export function immutableArchitectureDecisionPayload(decision) {
+    const immutableMetadata = Object.fromEntries(Object.entries(decision.metadata).filter(([key]) => key !== "status" && key !== "superseded_by"));
+    return JSON.stringify({
+        body: markdownSourceWithoutFrontmatter(decision.document).replace(/\r\n/g, "\n"),
+        metadata: canonicalize(immutableMetadata)
+    });
+}
+//# sourceMappingURL=architecture-decision.js.map

package/dist/capabilities/governance-architecture-decisions/application/model/architecture-decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-decision.js","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/model/architecture-decision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,gCAAgC,EAEjC,MAAM,8EAA8E,CAAC;AAEtF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,UAAU;IACV,YAAY;CACJ,CAAC;AAqCX,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,QAA8B;IAE9B,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CACtC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,eAAe,CACvD,CACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,gCAAgC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;QAChF,QAAQ,EAAE,YAAY,CAAC,iBAAiB,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.d.ts

@@ -0,0 +1,32 @@
+import { type AcceptedArchitectureDecisionBaseline, type ArchitectureDecision } from "../model/architecture-decision.js";
+import type { ArchitectureDecisionFingerprint } from "../ports/architecture-decision-fingerprint.js";
+export type HistoricalArchitectureDecisionBaselineViolation = {
+    readonly id: string;
+    readonly kind: "missing";
+    readonly path: string;
+} | {
+    readonly actualPath: string;
+    readonly expectedPath: string;
+    readonly id: string;
+    readonly kind: "path-mismatch";
+} | {
+    readonly actualDigest: string;
+    readonly expectedDigest: string;
+    readonly id: string;
+    readonly kind: "digest-mismatch";
+};
+/**
+ * Parses the persisted baseline strictly enough for immutable-history checks.
+ * The JSON Schema remains the external contract; this parser keeps policy code
+ * synchronous and defensive when a consumer has malformed historical input.
+ */
+export declare function parseAcceptedArchitectureDecisionBaseline(value: unknown): AcceptedArchitectureDecisionBaseline | undefined;
+export declare function buildAcceptedArchitectureDecisionBaseline(input: {
+    readonly decisions: readonly ArchitectureDecision[];
+    readonly fingerprint: ArchitectureDecisionFingerprint;
+}): AcceptedArchitectureDecisionBaseline;
+export declare function findHistoricalArchitectureDecisionBaselineViolation(input: {
+    readonly existing: AcceptedArchitectureDecisionBaseline;
+    readonly next: AcceptedArchitectureDecisionBaseline;
+}): HistoricalArchitectureDecisionBaselineViolation | undefined;
+//# sourceMappingURL=accepted-architecture-decision-baseline.d.ts.map

package/dist/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accepted-architecture-decision-baseline.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,oCAAoC,EAEzC,KAAK,oBAAoB,EAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAGrG,MAAM,MAAM,+CAA+C,GACvD;IACE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAYN;;;;GAIG;AACH,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,OAAO,GACb,oCAAoC,GAAG,SAAS,CAElD;AAED,wBAAgB,yCAAyC,CAAC,KAAK,EAAE;IAC/D,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,+BAA+B,CAAC;CACvD,GAAG,oCAAoC,CAkBvC;AAED,wBAAgB,mDAAmD,CAAC,KAAK,EAAE;IACzE,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC;CACrD,GAAG,+CAA+C,GAAG,SAAS,CAiC9D"}

package/dist/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.js

@@ -0,0 +1,65 @@
+import { compareBinaryStrings } from "../../../../binary-string-comparator.js";
+import { immutableArchitectureDecisionPayload } from "../model/architecture-decision.js";
+import { parseAcceptedArchitectureDecisionBaselineValue } from "./parse-accepted-architecture-decision-baseline.js";
+function entryComparison(left, right) {
+    return (compareBinaryStrings(left.id, right.id) ||
+        compareBinaryStrings(left.path, right.path));
+}
+/**
+ * Parses the persisted baseline strictly enough for immutable-history checks.
+ * The JSON Schema remains the external contract; this parser keeps policy code
+ * synchronous and defensive when a consumer has malformed historical input.
+ */
+export function parseAcceptedArchitectureDecisionBaseline(value) {
+    return parseAcceptedArchitectureDecisionBaselineValue(value);
+}
+export function buildAcceptedArchitectureDecisionBaseline(input) {
+    const decisions = input.decisions
+        .filter((decision) => decision.status !== "proposed")
+        .map((decision) => Object.freeze({
+        id: decision.id,
+        immutableDigest: input.fingerprint.digest(immutableArchitectureDecisionPayload(decision)),
+        path: decision.document.repositoryPath
+    }))
+        .toSorted(entryComparison);
+    return Object.freeze({
+        algorithm: "sha256",
+        decisions: Object.freeze(decisions),
+        schemaVersion: 1
+    });
+}
+export function findHistoricalArchitectureDecisionBaselineViolation(input) {
+    const nextById = new Map(input.next.decisions.map((entry) => [entry.id, entry]));
+    // Missing historical documents take precedence: no subsequent rewrite may hide
+    // their disappearance behind another current-document difference.
+    for (const existing of input.existing.decisions) {
+        const current = nextById.get(existing.id);
+        if (current === undefined) {
+            return { id: existing.id, kind: "missing", path: existing.path };
+        }
+    }
+    for (const existing of input.existing.decisions) {
+        const current = nextById.get(existing.id);
+        if (current === undefined) {
+            continue;
+        }
+        if (current.path !== existing.path) {
+            return {
+                actualPath: current.path,
+                expectedPath: existing.path,
+                id: existing.id,
+                kind: "path-mismatch"
+            };
+        }
+        if (current.immutableDigest !== existing.immutableDigest) {
+            return {
+                actualDigest: current.immutableDigest,
+                expectedDigest: existing.immutableDigest,
+                id: existing.id,
+                kind: "digest-mismatch"
+            };
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=accepted-architecture-decision-baseline.js.map

package/dist/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accepted-architecture-decision-baseline.js","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/policies/accepted-architecture-decision-baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,oCAAoC,EAIrC,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,8CAA8C,EAAE,MAAM,oDAAoD,CAAC;AAqBpH,SAAS,eAAe,CACtB,IAA+C,EAC/C,KAAgD;IAEhD,OAAO,CACL,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yCAAyC,CACvD,KAAc;IAEd,OAAO,8CAA8C,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,KAGzD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS;SAC9B,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC;SACpD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CACvC,oCAAoC,CAAC,QAAQ,CAAC,CAC/C;QACD,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc;KACvC,CAAC,CACH;SACA,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,aAAa,EAAE,CAAC;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mDAAmD,CAAC,KAGnE;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,+EAA+E;IAC/E,kEAAkE;IAClE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,IAAI;gBACxB,YAAY,EAAE,QAAQ,CAAC,IAAI;gBAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,eAAe;aACtB,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;YACzD,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,eAAe;gBACrC,cAAc,EAAE,QAAQ,CAAC,eAAe;gBACxC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,iBAAiB;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.d.ts

@@ -0,0 +1,20 @@
+import type { FoundationDiagnostic } from "../../../../check-contract.js";
+import type { MarkdownObservationIssue } from "../../../../documentation-observation/application/model/markdown-document.js";
+import { type ArchitectureDecisionGovernanceRuleMetadata } from "../rules.js";
+interface ArchitectureDecisionDiagnosticInput {
+    readonly column?: number;
+    readonly evidence?: readonly {
+        readonly kind: string;
+        readonly value: string;
+    }[];
+    readonly line?: number;
+    readonly message: string;
+    readonly path: string;
+    readonly relatedPath?: string;
+    readonly rule: ArchitectureDecisionGovernanceRuleMetadata;
+    readonly subject: string;
+}
+export declare function architectureDecisionDiagnostic(input: ArchitectureDecisionDiagnosticInput): FoundationDiagnostic;
+export declare function architectureDecisionIssueDiagnostic(issue: MarkdownObservationIssue): FoundationDiagnostic;
+export {};
+//# sourceMappingURL=architecture-decision-diagnostic.d.ts.map

package/dist/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-decision-diagnostic.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8EAA8E,CAAC;AAC7H,OAAO,EAEL,KAAK,0CAA0C,EAChD,MAAM,aAAa,CAAC;AAErB,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,0CAA0C,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,oBAAoB,CAuBtB;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wBAAwB,GAC9B,oBAAoB,CAYtB"}

package/dist/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.js

@@ -0,0 +1,37 @@
+import { ARCHITECTURE_DECISION_GOVERNANCE_RULES } from "../rules.js";
+export function architectureDecisionDiagnostic(input) {
+    return {
+        evidence: input.evidence ?? [],
+        location: {
+            path: input.path,
+            ...(input.line === undefined
+                ? {}
+                : {
+                    start: {
+                        column: input.column ?? 1,
+                        line: input.line
+                    }
+                })
+        },
+        message: input.message,
+        relatedLocations: input.relatedPath === undefined ? [] : [{ path: input.relatedPath }],
+        remediation: input.rule.remediation,
+        requiresArchitectureReview: input.rule.requiresArchitectureReview,
+        ruleId: input.rule.id,
+        severity: input.rule.severity,
+        subject: input.subject
+    };
+}
+export function architectureDecisionIssueDiagnostic(issue) {
+    const rule = issue.kind === "symbolic-link"
+        ? ARCHITECTURE_DECISION_GOVERNANCE_RULES.symbolicLink
+        : ARCHITECTURE_DECISION_GOVERNANCE_RULES.sourceUnavailable;
+    return architectureDecisionDiagnostic({
+        evidence: [{ kind: "observation-issue", value: issue.kind }],
+        message: issue.message,
+        path: issue.repositoryPath,
+        rule,
+        subject: issue.repositoryPath
+    });
+}
+//# sourceMappingURL=architecture-decision-diagnostic.js.map

package/dist/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture-decision-diagnostic.js","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/policies/architecture-decision-diagnostic.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sCAAsC,EAEvC,MAAM,aAAa,CAAC;AAarB,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;QAC9B,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;wBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;iBACF,CAAC;SACP;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EACd,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACtE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,0BAA0B,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B;QACjE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QACrB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAA+B;IAE/B,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,eAAe;QAC5B,CAAC,CAAC,sCAAsC,CAAC,YAAY;QACrD,CAAC,CAAC,sCAAsC,CAAC,iBAAiB,CAAC;IAC/D,OAAO,8BAA8B,CAAC;QACpC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,cAAc;QAC1B,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,cAAc;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/capabilities/governance-architecture-decisions/application/policies/evaluate-architecture-decision-index.d.ts

@@ -0,0 +1,18 @@
+import type { FoundationDiagnostic } from "../../../../check-contract.js";
+import type { MarkdownDocumentObservation } from "../../../../documentation-observation/application/model/markdown-document.js";
+import type { ArchitectureDecision, ArchitectureDecisionPolicy } from "../model/architecture-decision.js";
+export interface ArchitectureDecisionIndexMembership {
+    readonly count: number;
+    readonly decisionId: string;
+    readonly sections: readonly string[];
+}
+interface IndexEvaluationInput {
+    readonly decisions: readonly ArchitectureDecision[];
+    readonly index: MarkdownDocumentObservation | undefined;
+    readonly memberships: readonly ArchitectureDecisionIndexMembership[];
+    readonly policy: ArchitectureDecisionPolicy;
+}
+export declare function normalizeArchitectureDecisionIndexSection(value: string): string;
+export declare function evaluateArchitectureDecisionIndex(input: IndexEvaluationInput): readonly FoundationDiagnostic[];
+export {};
+//# sourceMappingURL=evaluate-architecture-decision-index.d.ts.map

package/dist/capabilities/governance-architecture-decisions/application/policies/evaluate-architecture-decision-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate-architecture-decision-index.d.ts","sourceRoot":"","sources":["../../../../../src/capabilities/governance-architecture-decisions/application/policies/evaluate-architecture-decision-index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAChI,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAI3C,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,EAAE,SAAS,mCAAmC,EAAE,CAAC;IACrE,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;CAC7C;AAED,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/E;AAqDD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,oBAAoB,GAC1B,SAAS,oBAAoB,EAAE,CAqCjC"}

package/dist/capabilities/governance-architecture-decisions/application/policies/evaluate-architecture-decision-index.js

@@ -0,0 +1,71 @@
+import { ARCHITECTURE_DECISION_GOVERNANCE_RULES } from "../rules.js";
+import { architectureDecisionDiagnostic } from "./architecture-decision-diagnostic.js";
+export function normalizeArchitectureDecisionIndexSection(value) {
+    return value.trim().replace(/\s+/gu, " ").toLocaleLowerCase("en-US");
+}
+function missingSectionDiagnostics(input) {
+    const actualSections = new Set(input.index.headings
+        .filter((heading) => heading.depth === 2)
+        .map((heading) => normalizeArchitectureDecisionIndexSection(heading.text)));
+    return [...input.expectedSections]
+        .filter((expectedSection) => !actualSections.has(expectedSection))
+        .map((expectedSection) => architectureDecisionDiagnostic({
+        evidence: [{ kind: "expected-section", value: expectedSection }],
+        message: `ADR index is missing required lifecycle section ${expectedSection}.`,
+        path: input.index.repositoryPath,
+        rule: ARCHITECTURE_DECISION_GOVERNANCE_RULES.indexMembership,
+        subject: input.index.repositoryPath
+    }));
+}
+function membershipDiagnostic(input) {
+    const correct = input.membership !== undefined &&
+        input.membership.count === 1 &&
+        input.membership.sections.length === 1 &&
+        input.membership.sections[0] === input.expectedSection;
+    return correct
+        ? undefined
+        : architectureDecisionDiagnostic({
+            evidence: [
+                { kind: "expected-section", value: input.expectedSection },
+                {
+                    kind: "actual-sections",
+                    value: input.membership?.sections.join(", ") ?? "<none>"
+                }
+            ],
+            message: `ADR ${input.decision.id} must be listed exactly once under ${input.expectedSection} in the ADR index.`,
+            path: input.decision.document.repositoryPath,
+            relatedPath: input.index.repositoryPath,
+            rule: ARCHITECTURE_DECISION_GOVERNANCE_RULES.indexMembership,
+            subject: input.decision.id
+        });
+}
+export function evaluateArchitectureDecisionIndex(input) {
+    if (input.index === undefined) {
+        return [
+            architectureDecisionDiagnostic({
+                message: "Configured ADR index is missing from governed Markdown roots.",
+                path: input.policy.index.path,
+                rule: ARCHITECTURE_DECISION_GOVERNANCE_RULES.indexMissing,
+                subject: input.policy.index.path
+            })
+        ];
+    }
+    const memberships = new Map(input.memberships.map((membership) => [membership.decisionId, membership]));
+    const expectedSections = new Set(Object.values(input.policy.index.sections).map(normalizeArchitectureDecisionIndexSection));
+    const diagnostics = [
+        ...missingSectionDiagnostics({ expectedSections, index: input.index })
+    ];
+    for (const decision of input.decisions) {
+        const membership = membershipDiagnostic({
+            decision,
+            expectedSection: normalizeArchitectureDecisionIndexSection(input.policy.index.sections[decision.status]),
+            index: input.index,
+            membership: memberships.get(decision.id)
+        });
+        if (membership !== undefined) {
+            diagnostics.push(membership);
+        }
+    }
+    return diagnostics;
+}
+//# sourceMappingURL=evaluate-architecture-decision-index.js.map