@aviaratech/ai-delivery 0.1.0

package/dist/delivery/delivery.test.js

@@ -0,0 +1,234 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'vitest';
+import { classifyRepositoryExactRange, createRepositoryDeliveryEvidence, createRepositoryStageAggregate, createRepositoryStageInput, createRepositoryStageReceipt, digestBytes, digestValue, loadRepositoryStageCheckpoint, loadSelectedRepositoryPolicy, loadValidRepositoryDeliveryEvidence, writeRepositoryCommandOutput, writeRepositoryDeliveryEvidence, writeRepositoryStageCheckpoint, } from './index.js';
+function git(root, ...args) {
+    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim();
+}
+function setup() {
+    const root = mkdtempSync(join(tmpdir(), 'ai-delivery-test-'));
+    git(root, 'init', '-q');
+    git(root, 'config', 'user.email', 'delivery@example.test');
+    git(root, 'config', 'user.name', 'Delivery Test');
+    writeFileSync(join(root, 'policy.mjs'), `export default { schemaVersion: 'RepositoryDeliveryPolicy@1', classifyExactRange() {}, validateBoundary() {} };\n`);
+    writeFileSync(join(root, 'artifact.txt'), 'proof');
+    writeFileSync(join(root, 'output.txt'), 'stage artifact');
+    git(root, 'add', '.');
+    git(root, 'commit', '-qm', 'base');
+    const base = { sha: git(root, 'rev-parse', 'HEAD'), tree: git(root, 'rev-parse', 'HEAD^{tree}') };
+    writeFileSync(join(root, 'change.txt'), 'changed');
+    git(root, 'add', '.');
+    git(root, 'commit', '-qm', 'head');
+    const head = { sha: git(root, 'rev-parse', 'HEAD'), tree: git(root, 'rev-parse', 'HEAD^{tree}') };
+    const policyDigest = digestBytes(readFileSync(join(root, 'policy.mjs')));
+    const configDigest = digestValue({ repository: 'example/delivery', policy: 'policy.mjs' });
+    const gitCommonDir = join(root, '.git');
+    const cleanup = () => rmSync(root, { recursive: true, force: true });
+    return { root, base, head, policyDigest, configDigest, gitCommonDir, cleanup };
+}
+function makePolicy(state, risk = 'standard') {
+    const hash = digestValue;
+    const definition = {
+        commands: [{ argv: ['node', '--version'], label: 'check' }],
+        dependsOn: [],
+        id: 'check',
+        resourceClass: 'source_only',
+        semanticInputKeys: ['source'],
+    };
+    return {
+        schemaVersion: 'RepositoryDeliveryPolicy@1',
+        classifyExactRange(input) {
+            const content = {
+                artifacts: [
+                    {
+                        digest: digestBytes(readFileSync(join(state.root, 'artifact.txt'))),
+                        path: 'artifact.txt',
+                        producer: 'synthetic',
+                    },
+                ],
+                base: { sha: input.baseSha, tree: input.baseTree },
+                configDigest: input.configDigest,
+                head: { sha: input.headSha, tree: input.headTree },
+                opaquePayload: 'synthetic proof',
+                policyDigest: state.policyDigest,
+                producer: 'synthetic',
+                repository: input.repository,
+                schemaVersion: 'ai-delivery.policy-evidence@1',
+            };
+            return {
+                policyDigest: state.policyDigest,
+                policyEvidence: { ...content, evidenceId: hash(content) },
+                requiredStages: [definition],
+                risk,
+            };
+        },
+        validateBoundary(input) {
+            const content = {
+                additionalConstraints: { exactBaseHeadLease: true, requiredAttestationIds: [] },
+                classificationReceiptId: input.classificationReceiptId,
+                configDigest: input.configDigest,
+                currentBase: input.currentBase,
+                currentHead: input.currentHead,
+                phase: input.phase,
+                policyEvidenceId: input.policyEvidence.evidenceId,
+                schemaVersion: 'ai-delivery.policy-boundary@1',
+                stageReceiptSetHash: hash(input.stageReceiptIds),
+            };
+            return { ...content, boundaryId: hash(content) };
+        },
+    };
+}
+function proof(state, policy = makePolicy(state)) {
+    const classification = classifyRepositoryExactRange({
+        repoRoot: state.root,
+        repository: 'example/delivery',
+        base: state.base,
+        head: state.head,
+        changedPaths: ['change.txt'],
+        configDigest: state.configDigest,
+        policySourcePath: './policy.mjs',
+        policy,
+    });
+    const stageInput = createRepositoryStageInput({
+        classification,
+        environmentDigest: digestValue('environment'),
+        semanticInputs: [{ digest: digestValue(state.head.tree), key: 'source' }],
+        stageId: 'check',
+        upstream: [],
+    });
+    const outputDigest = writeRepositoryCommandOutput({
+        bytes: Buffer.from('node 22'),
+        gitCommonDir: state.gitCommonDir,
+    });
+    const receipt = createRepositoryStageReceipt({
+        classification,
+        stageInput,
+        artifacts: [{ digest: digestBytes(readFileSync(join(state.root, 'output.txt'))), path: 'output.txt' }],
+        commands: [{ exitCode: 0, label: 'check', outputDigest }],
+        startedAt: '2026-01-01T00:00:00.000Z',
+        completedAt: '2026-01-01T00:00:01.000Z',
+    });
+    const aggregate = createRepositoryStageAggregate({ classification, receipts: [receipt] });
+    const input = {
+        aggregate,
+        classification,
+        approvalRoles: { authorIdentity: 'author', reviewerIdentity: 'reviewer' },
+        configDigest: state.configDigest,
+        currentBase: state.base,
+        currentHead: state.head,
+        gitCommonDir: state.gitCommonDir,
+        phase: 'verify',
+        policy,
+        policySourcePath: './policy.mjs',
+        repoRoot: state.root,
+        stageReceipts: [receipt],
+    };
+    return { classification, stageInput, receipt, aggregate, input };
+}
+test('synthetic exact delivery, private checkpoint resume and phase evidence', async () => {
+    const state = setup();
+    try {
+        const selected = await loadSelectedRepositoryPolicy({ repoRoot: state.root, policySourcePath: './policy.mjs' });
+        assert.equal(selected.policyDigest, state.policyDigest);
+        const p = proof(state);
+        writeRepositoryStageCheckpoint({ gitCommonDir: state.gitCommonDir, receipt: p.receipt, repoRoot: state.root });
+        assert.equal(loadRepositoryStageCheckpoint({
+            gitCommonDir: state.gitCommonDir,
+            stageInput: p.stageInput,
+            classification: p.classification,
+            repoRoot: state.root,
+            configDigest: state.configDigest,
+            policySourcePath: './policy.mjs',
+        })?.receiptId, p.receipt.receiptId);
+        const evidence = createRepositoryDeliveryEvidence(p.input);
+        writeRepositoryDeliveryEvidence({ evidence, gitCommonDir: state.gitCommonDir });
+        assert.equal(loadValidRepositoryDeliveryEvidence({ createInput: p.input, evidenceId: evidence.evidenceId }).evidenceId, evidence.evidenceId);
+    }
+    finally {
+        state.cleanup();
+    }
+});
+test('missing policy, wrong repository, changed config and stale head fail closed', async () => {
+    const state = setup();
+    try {
+        await assert.rejects(loadSelectedRepositoryPolicy({ repoRoot: state.root, policySourcePath: 'missing.mjs' }));
+        const policy = makePolicy(state);
+        assert.throws(() => classifyRepositoryExactRange({
+            repoRoot: state.root,
+            repository: 'wrong/repository',
+            base: state.base,
+            head: state.head,
+            changedPaths: ['change.txt'],
+            configDigest: state.configDigest,
+            policySourcePath: './policy.mjs',
+            policy: {
+                ...policy,
+                classifyExactRange: (input) => policy.classifyExactRange({ ...input, repository: 'example/delivery' }),
+            },
+        }));
+        const p = proof(state, policy);
+        assert.throws(() => createRepositoryDeliveryEvidence({ ...p.input, configDigest: digestValue('drift') }));
+        assert.throws(() => createRepositoryDeliveryEvidence({ ...p.input, currentHead: { ...state.head, tree: state.base.tree } }));
+        writeFileSync(join(state.root, 'policy.mjs'), 'export default {};\n');
+        assert.throws(() => createRepositoryDeliveryEvidence(p.input));
+    }
+    finally {
+        state.cleanup();
+    }
+});
+test('missing stage, corrupt artifact/output and blocked merge or wrong approval fail closed', () => {
+    const state = setup();
+    try {
+        const p = proof(state);
+        assert.throws(() => createRepositoryStageAggregate({ classification: p.classification, receipts: [] }));
+        const approval = {
+            authorIdentity: 'author',
+            reviewerIdentity: 'author',
+            diffScopeHash: digestValue(['change.txt']),
+            head: state.head,
+            result: 'approved',
+            reviewReceiptId: digestValue('review'),
+        };
+        assert.throws(() => createRepositoryDeliveryEvidence({ ...p.input, phase: 'merge', approval }));
+        const validApproval = { ...approval, reviewerIdentity: 'reviewer' };
+        assert.throws(() => createRepositoryDeliveryEvidence({
+            ...p.input,
+            phase: 'merge',
+            approval: { ...validApproval, reviewerIdentity: 'outsider' },
+        }));
+        assert.throws(() => createRepositoryDeliveryEvidence({
+            ...p.input,
+            phase: 'merge',
+            approval: validApproval,
+            now: () => new Date('2026-01-01T00:00:10.000Z'),
+            mergeReadback: {
+                blockedBy: [17],
+                checksPassed: true,
+                head: state.head,
+                mergeable: true,
+                observedAt: '2026-01-01T00:00:00.000Z',
+            },
+        }));
+        writeFileSync(join(state.root, 'artifact.txt'), 'tampered');
+        assert.throws(() => createRepositoryDeliveryEvidence(p.input));
+        writeFileSync(join(state.root, 'artifact.txt'), 'proof');
+        writeFileSync(join(state.root, 'output.txt'), 'tampered stage artifact');
+        assert.throws(() => createRepositoryDeliveryEvidence(p.input));
+        writeFileSync(join(state.root, 'output.txt'), 'stage artifact');
+        const outputPath = join(state.gitCommonDir, 'ai-delivery', 'verification@1', 'command-output', `${p.receipt.commands[0].outputDigest.slice(7)}.bin`);
+        writeFileSync(outputPath, 'corrupt command output');
+        assert.throws(() => createRepositoryDeliveryEvidence(p.input));
+        const bad = {
+            ...p.receipt,
+            commands: [{ ...p.receipt.commands[0], outputDigest: digestValue('absent') }],
+        };
+        assert.throws(() => createRepositoryDeliveryEvidence({ ...p.input, stageReceipts: [bad] }));
+    }
+    finally {
+        state.cleanup();
+    }
+});
+//# sourceMappingURL=delivery.test.js.map

package/dist/delivery/delivery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.test.js","sourceRoot":"","sources":["../../src/delivery/delivery.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,EAChC,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,WAAW,EACX,WAAW,EACX,6BAA6B,EAC7B,4BAA4B,EAC5B,mCAAmC,EACnC,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AAGpB,SAAS,GAAG,CAAC,IAAY,EAAE,GAAG,IAAc;IAC1C,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AACD,SAAS,KAAK;IACZ,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAClD,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EACxB,mHAAmH,CACpH,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACnD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC1D,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACtB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;IAClG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IACnD,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACtB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;IAClG,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,KAA+B,EAAE,OAA4B,UAAU;IACzF,MAAM,IAAI,GAAG,WAAW,CAAC;IACzB,MAAM,UAAU,GAAG;QACjB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC3D,SAAS,EAAE,EAAE;QACb,EAAE,EAAE,OAAO;QACX,aAAa,EAAE,aAAsB;QACrC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;KAC9B,CAAC;IACF,OAAO;QACL,aAAa,EAAE,4BAA4B;QAC3C,kBAAkB,CAAC,KAAK;YACtB,MAAM,OAAO,GAAG;gBACd,SAAS,EAAE;oBACT;wBACE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;wBACnE,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,WAAW;qBACtB;iBACF;gBACD,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE;gBAClD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE;gBAClD,aAAa,EAAE,iBAAiB;gBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,+BAAwC;aACxD,CAAC;YACF,OAAO;gBACL,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,cAAc,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBACzD,cAAc,EAAE,CAAC,UAAU,CAAC;gBAC5B,IAAI;aACL,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,KAAK;YACpB,MAAM,OAAO,GAAG;gBACd,qBAAqB,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE;gBAC/E,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;gBACtD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU;gBACjD,aAAa,EAAE,+BAAwC;gBACvD,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;aACjD,CAAC;YACF,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAA+B,EAAE,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACxE,MAAM,cAAc,GAAG,4BAA4B,CAAC;QAClD,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,UAAU,EAAE,kBAAkB;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,CAAC,YAAY,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EAAE,cAAc;QAChC,MAAM;KACP,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC5C,cAAc;QACd,iBAAiB,EAAE,WAAW,CAAC,aAAa,CAAC;QAC7C,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,4BAA4B,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC3C,cAAc;QACd,UAAU;QACV,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACtG,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QACzD,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,0BAA0B;KACxC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,8BAA8B,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG;QACZ,SAAS;QACT,cAAc;QACd,aAAa,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE;QACzE,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,QAAiB;QACxB,MAAM;QACN,gBAAgB,EAAE,cAAc;QAChC,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB,CAAC;IACF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACnE,CAAC;AAED,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,8BAA8B,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,KAAK,CACV,6BAA6B,CAAC;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,cAAc;SACjC,CAAC,EAAE,SAAS,EACb,CAAC,CAAC,OAAO,CAAC,SAAS,CACpB,CAAC;QACF,MAAM,QAAQ,GAAG,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3D,+BAA+B,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CACV,mCAAmC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EACzG,QAAQ,CAAC,UAAU,CACpB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,4BAA4B,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,UAAU,EAAE,kBAAkB;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,YAAY,CAAC;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,cAAc;YAChC,MAAM,EAAE;gBACN,GAAG,MAAM;gBACT,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;aACvG;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,gCAAgC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CACxG,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,GAAG,EAAE;IAClG,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG;YACf,cAAc,EAAE,QAAQ;YACxB,gBAAgB,EAAE,QAAQ;YAC1B,aAAa,EAAE,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,UAAmB;YAC3B,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC;SACvC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,gCAAgC,CAAC;YAC/B,GAAG,CAAC,CAAC,KAAK;YACV,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,EAAE,GAAG,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE;SAC7D,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,gCAAgC,CAAC;YAC/B,GAAG,CAAC,CAAC,KAAK;YACV,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,aAAa;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC;YAC/C,aAAa,EAAE;gBACb,SAAS,EAAE,CAAC,EAAE,CAAC;gBACf,YAAY,EAAE,IAAI;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,0BAA0B;aACvC;SACF,CAAC,CACH,CAAC;QACF,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CACrB,KAAK,CAAC,YAAY,EAClB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CACtD,CAAC;QACF,aAAa,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAA2B;YAClC,GAAG,CAAC,CAAC,OAAO;YACZ,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;SAC/E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/delivery/evidence.d.ts

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import type { Coordinate } from './common.js';
+import type { RepositoryClassificationReceipt, RepositoryDeliveryPolicy } from './policy.js';
+import type { RepositoryStageAggregate, RepositoryStageReceipt } from './stage.js';
+export declare const RepositoryApprovalBindingSchema: z.ZodObject<{
+    authorIdentity: z.ZodString;
+    diffScopeHash: z.ZodString;
+    head: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    result: z.ZodLiteral<"approved">;
+    reviewerIdentity: z.ZodString;
+    reviewReceiptId: z.ZodString;
+}, z.core.$strict>;
+export type RepositoryApprovalBinding = z.infer<typeof RepositoryApprovalBindingSchema>;
+export declare const RepositoryMergeReadbackSchema: z.ZodObject<{
+    blockedBy: z.ZodArray<z.ZodNumber>;
+    checksPassed: z.ZodBoolean;
+    head: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    mergeable: z.ZodBoolean;
+    observedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type RepositoryMergeReadback = z.infer<typeof RepositoryMergeReadbackSchema>;
+export declare const RepositoryDeliveryEvidenceSchema: z.ZodObject<{
+    aggregateId: z.ZodString;
+    approval: z.ZodNullable<z.ZodObject<{
+        authorIdentity: z.ZodString;
+        diffScopeHash: z.ZodString;
+        head: z.ZodObject<{
+            sha: z.ZodString;
+            tree: z.ZodString;
+        }, z.core.$strict>;
+        result: z.ZodLiteral<"approved">;
+        reviewerIdentity: z.ZodString;
+        reviewReceiptId: z.ZodString;
+    }, z.core.$strict>>;
+    base: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    boundaryId: z.ZodString;
+    classificationReceiptId: z.ZodString;
+    configDigest: z.ZodString;
+    evidenceId: z.ZodString;
+    head: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    phase: z.ZodEnum<{
+        verify: "verify";
+        publish: "publish";
+        merge: "merge";
+    }>;
+    policyDigest: z.ZodString;
+    repository: z.ZodString;
+    result: z.ZodLiteral<"passed">;
+    schemaVersion: z.ZodLiteral<"ai-delivery.delivery-evidence@1">;
+}, z.core.$strict>;
+export type RepositoryDeliveryEvidence = z.infer<typeof RepositoryDeliveryEvidenceSchema>;
+export interface RepositoryDeliveryEvidenceInput {
+    aggregate: RepositoryStageAggregate;
+    approval?: RepositoryApprovalBinding;
+    approvalRoles: {
+        authorIdentity: string;
+        reviewerIdentity: string;
+    };
+    classification: RepositoryClassificationReceipt;
+    configDigest: string;
+    currentBase: Coordinate;
+    currentHead: Coordinate;
+    gitCommonDir: string;
+    mergeReadback?: RepositoryMergeReadback;
+    now?: () => Date;
+    phase: 'verify' | 'publish' | 'merge';
+    policy: RepositoryDeliveryPolicy;
+    policySourcePath: string;
+    repoRoot: string;
+    stageReceipts: readonly RepositoryStageReceipt[];
+}
+export declare function createRepositoryDeliveryEvidence(input: RepositoryDeliveryEvidenceInput): RepositoryDeliveryEvidence;
+export declare function writeRepositoryDeliveryEvidence(input: {
+    evidence: RepositoryDeliveryEvidence;
+    gitCommonDir: string;
+}): string;
+export declare function loadValidRepositoryDeliveryEvidence(input: {
+    createInput: RepositoryDeliveryEvidenceInput;
+    evidenceId: string;
+}): RepositoryDeliveryEvidence;

package/dist/delivery/evidence.js

@@ -0,0 +1,126 @@
+import { join } from 'node:path';
+import { z } from 'zod';
+import { assertPrivateFile, CoordinateSchema, DigestSchema, digestValue, RepositorySchema, stableJson, writeCreateOnly, } from './common.js';
+import { RepositoryClassificationReceiptSchema, validateRepositoryPolicyBoundary } from './policy.js';
+import { assertRepositoryStageProof, createRepositoryStageAggregate, RepositoryStageAggregateSchema, RepositoryStageReceiptSchema, } from './stage.js';
+export const RepositoryApprovalBindingSchema = z
+    .object({
+    authorIdentity: z.string().min(1),
+    diffScopeHash: DigestSchema,
+    head: CoordinateSchema,
+    result: z.literal('approved'),
+    reviewerIdentity: z.string().min(1),
+    reviewReceiptId: DigestSchema,
+})
+    .strict()
+    .refine((value) => value.authorIdentity !== value.reviewerIdentity, 'Approval requires a distinct reviewer identity.');
+export const RepositoryMergeReadbackSchema = z
+    .object({
+    blockedBy: z.array(z.number().int().positive()),
+    checksPassed: z.boolean(),
+    head: CoordinateSchema,
+    mergeable: z.boolean(),
+    observedAt: z.iso.datetime(),
+})
+    .strict();
+export const RepositoryDeliveryEvidenceSchema = z
+    .object({
+    aggregateId: DigestSchema,
+    approval: RepositoryApprovalBindingSchema.nullable(),
+    base: CoordinateSchema,
+    boundaryId: DigestSchema,
+    classificationReceiptId: DigestSchema,
+    configDigest: DigestSchema,
+    evidenceId: DigestSchema,
+    head: CoordinateSchema,
+    phase: z.enum(['verify', 'publish', 'merge']),
+    policyDigest: DigestSchema,
+    repository: RepositorySchema,
+    result: z.literal('passed'),
+    schemaVersion: z.literal('ai-delivery.delivery-evidence@1'),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { evidenceId, ...content } = value;
+    if (evidenceId !== digestValue(content) || (value.phase === 'merge' && value.approval === null))
+        ctx.addIssue({ code: 'custom', message: 'Delivery evidence identity or approval is invalid.' });
+});
+export function createRepositoryDeliveryEvidence(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    const aggregate = RepositoryStageAggregateSchema.parse(input.aggregate);
+    const receipts = input.stageReceipts.map((x) => RepositoryStageReceiptSchema.parse(x));
+    const expected = createRepositoryStageAggregate({ classification, receipts });
+    if (aggregate.aggregateId !== expected.aggregateId)
+        throw new Error('Delivery evidence requires complete GREEN stage aggregate.');
+    for (const receipt of receipts)
+        assertRepositoryStageProof({ gitCommonDir: input.gitCommonDir, receipt, repoRoot: input.repoRoot });
+    const boundary = validateRepositoryPolicyBoundary({
+        classification,
+        configDigest: input.configDigest,
+        currentBase: input.currentBase,
+        currentHead: input.currentHead,
+        phase: input.phase,
+        policy: input.policy,
+        policySourcePath: input.policySourcePath,
+        repoRoot: input.repoRoot,
+        stageReceiptIds: aggregate.stages.map((stage) => ({ receiptId: stage.receiptId, stageId: stage.stageId })),
+    });
+    const approval = input.approval === undefined ? null : RepositoryApprovalBindingSchema.parse(input.approval);
+    if (input.approvalRoles.authorIdentity === input.approvalRoles.reviewerIdentity ||
+        !input.approvalRoles.authorIdentity ||
+        !input.approvalRoles.reviewerIdentity)
+        throw new Error('Delivery requires distinct configured author and reviewer roles.');
+    if ((classification.risk === 'high' || input.phase === 'merge') && approval === null)
+        throw new Error('Delivery boundary requires independent exact-head approval.');
+    if (approval !== null &&
+        (stableJson(approval.head) !== stableJson(classification.head) ||
+            approval.diffScopeHash !== digestValue(classification.changedPaths) ||
+            approval.authorIdentity !== input.approvalRoles.authorIdentity ||
+            approval.reviewerIdentity !== input.approvalRoles.reviewerIdentity))
+        throw new Error('Approval does not cover configured roles, exact head and changed paths.');
+    if (input.phase === 'merge') {
+        const readback = RepositoryMergeReadbackSchema.parse(input.mergeReadback);
+        const age = (input.now ?? (() => new Date()))().getTime() - Date.parse(readback.observedAt);
+        if (stableJson(readback.head) !== stableJson(classification.head) ||
+            !readback.mergeable ||
+            !readback.checksPassed ||
+            readback.blockedBy.length !== 0 ||
+            age < 0 ||
+            age > 30_000)
+            throw new Error('Merge requires current clean native blocker and check readback.');
+    }
+    const content = {
+        aggregateId: aggregate.aggregateId,
+        approval,
+        base: classification.base,
+        boundaryId: boundary.boundaryId,
+        classificationReceiptId: classification.receiptId,
+        configDigest: classification.configDigest,
+        head: classification.head,
+        phase: input.phase,
+        policyDigest: classification.policyDigest,
+        repository: classification.repository,
+        result: 'passed',
+        schemaVersion: 'ai-delivery.delivery-evidence@1',
+    };
+    return RepositoryDeliveryEvidenceSchema.parse({ ...content, evidenceId: digestValue(content) });
+}
+function evidencePath(gitCommonDir, head, evidenceId) {
+    return join(gitCommonDir, 'ai-delivery', 'receipts', 'delivery@1', head.sha, `${DigestSchema.parse(evidenceId).slice(7)}.json`);
+}
+export function writeRepositoryDeliveryEvidence(input) {
+    const evidence = RepositoryDeliveryEvidenceSchema.parse(input.evidence);
+    return writeCreateOnly(evidencePath(input.gitCommonDir, evidence.head, evidence.evidenceId), Buffer.from(stableJson(evidence), 'utf8'));
+}
+export function loadValidRepositoryDeliveryEvidence(input) {
+    const path = evidencePath(input.createInput.gitCommonDir, input.createInput.currentHead, input.evidenceId);
+    const bytes = assertPrivateFile(path);
+    const stored = RepositoryDeliveryEvidenceSchema.parse(JSON.parse(bytes.toString('utf8')));
+    const current = createRepositoryDeliveryEvidence(input.createInput);
+    if (!bytes.equals(Buffer.from(stableJson(stored), 'utf8')) ||
+        current.evidenceId !== stored.evidenceId ||
+        stored.evidenceId !== input.evidenceId)
+        throw new Error('Delivery evidence is stale, foreign or corrupt.');
+    return stored;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/delivery/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/delivery/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qCAAqC,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAEtG,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAGpB,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,aAAa,EAAE,YAAY;IAC3B,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,eAAe,EAAE,YAAY;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,gBAAgB,EAC1D,iDAAiD,CAClD,CAAC;AAGJ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,IAAI,EAAE,gBAAgB;IACtB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,WAAW,EAAE,YAAY;IACzB,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,gBAAgB;IACtB,UAAU,EAAE,YAAY;IACxB,uBAAuB,EAAE,YAAY;IACrC,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;CAC5D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,UAAU,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC7F,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAqBL,MAAM,UAAU,gCAAgC,CAAC,KAAsC;IACrF,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAChD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,KAAK,MAAM,OAAO,IAAI,QAAQ;QAC5B,0BAA0B,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAChD,cAAc;QACd,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;KAC3G,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7G,IACE,KAAK,CAAC,aAAa,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa,CAAC,gBAAgB;QAC3E,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc;QACnC,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB;QAErC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,QAAQ,KAAK,IAAI;QAClF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;YAC5D,QAAQ,CAAC,aAAa,KAAK,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC;YACnE,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa,CAAC,cAAc;YAC9D,QAAQ,CAAC,gBAAgB,KAAK,KAAK,CAAC,aAAa,CAAC,gBAAgB,CAAC;QAErE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5F,IACE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;YAC7D,CAAC,QAAQ,CAAC,SAAS;YACnB,CAAC,QAAQ,CAAC,YAAY;YACtB,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC/B,GAAG,GAAG,CAAC;YACP,GAAG,GAAG,MAAM;YAEZ,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,QAAQ;QACR,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,uBAAuB,EAAE,cAAc,CAAC,SAAS;QACjD,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,MAAM,EAAE,QAAiB;QACzB,aAAa,EAAE,iCAA0C;KAC1D,CAAC;IACF,OAAO,gCAAgC,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,IAAgB,EAAE,UAAkB;IAC9E,OAAO,IAAI,CACT,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,IAAI,CAAC,GAAG,EACR,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAClD,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACC,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,eAAe,CACpB,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,EACpE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAC1C,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,mCAAmC,CAAC,KAGnD;IACC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,gCAAgC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,IACE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QACxC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QAEtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/delivery/index.d.ts

@@ -0,0 +1,8 @@
+export { digestBytes, digestValue, stableJson } from './common.js';
+export type { Coordinate } from './common.js';
+export { assertRepositoryClassificationCurrent, classifyRepositoryExactRange, loadSelectedRepositoryPolicy, validateRepositoryPolicyBoundary, RepositoryClassificationReceiptSchema, RepositoryPolicyBoundarySchema, RepositoryPolicyClassificationSchema, RepositoryPolicyEvidenceSchema, RepositoryStageDefinitionSchema, } from './policy.js';
+export type { RepositoryClassificationReceipt, RepositoryDeliveryPolicy, RepositoryPolicyBoundary, RepositoryPolicyClassification, RepositoryPolicyEvidence, RepositoryStageDefinition, } from './policy.js';
+export { assertRepositoryStageProof, createRepositoryStageAggregate, createRepositoryStageInput, createRepositoryStageReceipt, loadRepositoryStageCheckpoint, writeRepositoryCommandOutput, writeRepositoryStageAggregate, writeRepositoryStageCheckpoint, RepositoryStageAggregateSchema, RepositoryStageInputSchema, RepositoryStageReceiptSchema, } from './stage.js';
+export type { RepositoryStageAggregate, RepositoryStageInput, RepositoryStageReceipt } from './stage.js';
+export { createRepositoryDeliveryEvidence, loadValidRepositoryDeliveryEvidence, writeRepositoryDeliveryEvidence, RepositoryApprovalBindingSchema, RepositoryDeliveryEvidenceSchema, RepositoryMergeReadbackSchema, } from './evidence.js';
+export type { RepositoryApprovalBinding, RepositoryDeliveryEvidence, RepositoryDeliveryEvidenceInput, RepositoryMergeReadback, } from './evidence.js';

package/dist/delivery/index.js

@@ -0,0 +1,5 @@
+export { digestBytes, digestValue, stableJson } from './common.js';
+export { assertRepositoryClassificationCurrent, classifyRepositoryExactRange, loadSelectedRepositoryPolicy, validateRepositoryPolicyBoundary, RepositoryClassificationReceiptSchema, RepositoryPolicyBoundarySchema, RepositoryPolicyClassificationSchema, RepositoryPolicyEvidenceSchema, RepositoryStageDefinitionSchema, } from './policy.js';
+export { assertRepositoryStageProof, createRepositoryStageAggregate, createRepositoryStageInput, createRepositoryStageReceipt, loadRepositoryStageCheckpoint, writeRepositoryCommandOutput, writeRepositoryStageAggregate, writeRepositoryStageCheckpoint, RepositoryStageAggregateSchema, RepositoryStageInputSchema, RepositoryStageReceiptSchema, } from './stage.js';
+export { createRepositoryDeliveryEvidence, loadValidRepositoryDeliveryEvidence, writeRepositoryDeliveryEvidence, RepositoryApprovalBindingSchema, RepositoryDeliveryEvidenceSchema, RepositoryMergeReadbackSchema, } from './evidence.js';
+//# sourceMappingURL=index.js.map

package/dist/delivery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/delivery/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qCAAqC,EACrC,8BAA8B,EAC9B,oCAAoC,EACpC,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,aAAa,CAAC;AASrB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gCAAgC,EAChC,mCAAmC,EACnC,+BAA+B,EAC/B,+BAA+B,EAC/B,gCAAgC,EAChC,6BAA6B,GAC9B,MAAM,eAAe,CAAC"}