@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/pack-rule-validator.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Pack Rule Validator — schema gate before publish.
+ *
+ * Customer-facing safety net for the live pack editor (W3.3). Before any
+ * pack version is persisted via PackVersionStore.publishVersion (W1.4),
+ * validate the rule list so malformed inputs never become an active pack.
+ *
+ * Validation surface:
+ *   - Capability class IDs must be recognised by the runtime
+ *   - Governance actions must be in the supported set
+ *   - Per-agent overrides must have non-empty approver + justification
+ *   - Rules must not duplicate the same (capability, action) pair
+ *   - Pack id / version / orgId required
+ *
+ * Returns a structured ValidationReport rather than throwing — the UI
+ * surfaces issues inline, the customer fixes, then re-validates.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-COMPANY-PACK-CLASS (validator)
+ */
+export interface PackInputForValidation {
+    id?: string;
+    version?: string;
+    orgId?: string;
+    rules?: ReadonlyArray<unknown>;
+    isolation?: unknown;
+}
+export type ValidationSeverity = 'ERROR' | 'WARN';
+export interface ValidationIssue {
+    severity: ValidationSeverity;
+    field: string;
+    code: 'MISSING' | 'INVALID_FORMAT' | 'UNKNOWN_CAPABILITY' | 'UNKNOWN_ACTION' | 'DUPLICATE_RULE' | 'INVALID_ISOLATION' | 'EMPTY_RULE_LIST';
+    message: string;
+}
+export interface ValidationReport {
+    ok: boolean;
+    errors: ValidationIssue[];
+    warnings: ValidationIssue[];
+}
+export declare function validatePackInput(input: PackInputForValidation): ValidationReport;
+//# sourceMappingURL=pack-rule-validator.d.ts.map

package/dist/governance/pack-rule-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-rule-validator.d.ts","sourceRoot":"","sources":["../../src/governance/pack-rule-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,MAAM,WAAW,sBAAsB;IACrC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EACA,SAAS,GACT,gBAAgB,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAKD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,gBAAgB,CAuHjF"}

package/dist/governance/pack-rule-validator.js

@@ -0,0 +1,142 @@
+"use strict";
+/**
+ * Pack Rule Validator — schema gate before publish.
+ *
+ * Customer-facing safety net for the live pack editor (W3.3). Before any
+ * pack version is persisted via PackVersionStore.publishVersion (W1.4),
+ * validate the rule list so malformed inputs never become an active pack.
+ *
+ * Validation surface:
+ *   - Capability class IDs must be recognised by the runtime
+ *   - Governance actions must be in the supported set
+ *   - Per-agent overrides must have non-empty approver + justification
+ *   - Rules must not duplicate the same (capability, action) pair
+ *   - Pack id / version / orgId required
+ *
+ * Returns a structured ValidationReport rather than throwing — the UI
+ * surfaces issues inline, the customer fixes, then re-validates.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-COMPANY-PACK-CLASS (validator)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePackInput = validatePackInput;
+const capability_classes_js_1 = require("./capability-classes.js");
+const VALID_ACTIONS = new Set(['ALLOW', 'LOG', 'WARN', 'REQUIRE_APPROVAL', 'BLOCK']);
+const VALID_ISOLATION = new Set(['none', 'sourced-only', 'strict']);
+const VERSION_RE = /^v?\d+(\.\d+){0,2}(-[A-Za-z0-9.-]+)?$/;
+const ID_RE = /^[a-zA-Z0-9._:-]+$/;
+function validatePackInput(input) {
+    const errors = [];
+    const warnings = [];
+    if (!input.id || typeof input.id !== 'string' || input.id.trim() === '') {
+        errors.push({ severity: 'ERROR', field: 'id', code: 'MISSING', message: 'pack id is required' });
+    }
+    else if (!ID_RE.test(input.id)) {
+        errors.push({
+            severity: 'ERROR',
+            field: 'id',
+            code: 'INVALID_FORMAT',
+            message: `pack id '${input.id}' contains invalid characters (allowed: a-z, A-Z, 0-9, ._:-)`,
+        });
+    }
+    if (!input.version || typeof input.version !== 'string') {
+        errors.push({ severity: 'ERROR', field: 'version', code: 'MISSING', message: 'pack version is required' });
+    }
+    else if (!VERSION_RE.test(input.version)) {
+        errors.push({
+            severity: 'ERROR',
+            field: 'version',
+            code: 'INVALID_FORMAT',
+            message: `pack version '${input.version}' must be semver-ish (e.g. '1', '1.0', '1.2.3', '2.0.0-rc1')`,
+        });
+    }
+    if (!input.orgId || typeof input.orgId !== 'string' || input.orgId.trim() === '') {
+        errors.push({ severity: 'ERROR', field: 'orgId', code: 'MISSING', message: 'orgId is required' });
+    }
+    if (input.isolation !== undefined && typeof input.isolation === 'string' && !VALID_ISOLATION.has(input.isolation)) {
+        errors.push({
+            severity: 'ERROR',
+            field: 'isolation',
+            code: 'INVALID_ISOLATION',
+            message: `isolation must be one of: ${[...VALID_ISOLATION].join(' / ')}`,
+        });
+    }
+    // Rule list validation
+    const rules = input.rules;
+    if (!Array.isArray(rules)) {
+        errors.push({
+            severity: 'ERROR',
+            field: 'rules',
+            code: 'MISSING',
+            message: 'rules must be an array (empty is allowed but conveys an inert pack)',
+        });
+        return { ok: false, errors, warnings };
+    }
+    if (rules.length === 0) {
+        warnings.push({
+            severity: 'WARN',
+            field: 'rules',
+            code: 'EMPTY_RULE_LIST',
+            message: 'pack has zero rules — it will not gate any tool call',
+        });
+    }
+    const seen = new Set();
+    for (let i = 0; i < rules.length; i++) {
+        const rule = rules[i];
+        const fieldBase = `rules[${i}]`;
+        if (!rule || typeof rule !== 'object') {
+            errors.push({
+                severity: 'ERROR',
+                field: fieldBase,
+                code: 'INVALID_FORMAT',
+                message: 'rule must be an object',
+            });
+            continue;
+        }
+        if (typeof rule.capability !== 'string' || rule.capability === '') {
+            errors.push({
+                severity: 'ERROR',
+                field: `${fieldBase}.capability`,
+                code: 'MISSING',
+                message: 'capability is required',
+            });
+            continue;
+        }
+        if (!capability_classes_js_1.ALL_CAPABILITY_CLASS_IDS.includes(rule.capability)) {
+            errors.push({
+                severity: 'ERROR',
+                field: `${fieldBase}.capability`,
+                code: 'UNKNOWN_CAPABILITY',
+                message: `unknown capability '${rule.capability}'. Allowed: ${capability_classes_js_1.ALL_CAPABILITY_CLASS_IDS.join(' / ')}`,
+            });
+            continue;
+        }
+        if (typeof rule.action !== 'string' || !VALID_ACTIONS.has(rule.action)) {
+            errors.push({
+                severity: 'ERROR',
+                field: `${fieldBase}.action`,
+                code: 'UNKNOWN_ACTION',
+                message: `unknown action '${rule.action}'. Allowed: ${[...VALID_ACTIONS].join(' / ')}`,
+            });
+            continue;
+        }
+        const key = `${rule.capability}::${rule.action}`;
+        if (seen.has(key)) {
+            errors.push({
+                severity: 'ERROR',
+                field: fieldBase,
+                code: 'DUPLICATE_RULE',
+                message: `duplicate rule (${rule.capability}, ${rule.action}) — keep one`,
+            });
+        }
+        else {
+            seen.add(key);
+        }
+    }
+    return {
+        ok: errors.length === 0,
+        errors,
+        warnings,
+    };
+}
+//# sourceMappingURL=pack-rule-validator.js.map

package/dist/governance/pack-rule-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-rule-validator.js","sourceRoot":"","sources":["../../src/governance/pack-rule-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AAyCH,8CAuHC;AA9JD,mEAAmE;AAGnE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;AACrF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;AAgCpE,MAAM,UAAU,GAAG,uCAAuC,CAAC;AAC3D,MAAM,KAAK,GAAG,oBAAoB,CAAC;AAEnC,SAAgB,iBAAiB,CAAC,KAA6B;IAC7D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,YAAY,KAAK,CAAC,EAAE,8DAA8D;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC7G,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,iBAAiB,KAAK,CAAC,OAAO,8DAA8D;SACtG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClH,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,6BAA6B,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,qEAAqE;SAC/E,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAA4B,CAAC;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAK,IAAI,CAAC,UAAqB,KAAK,EAAE,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,GAAG,SAAS,aAAa;gBAChC,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAE,gDAAkD,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,GAAG,SAAS,aAAa;gBAChC,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,uBAAuB,IAAI,CAAC,UAAU,eAAe,gDAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;aACrG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,GAAG,SAAS,SAAS;gBAC5B,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;aACvF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mBAAmB,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,cAAc;aAC1E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/governance/pack-rule-validator.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * RED-GREEN tests for the pack rule validator.
+ *
+ * @connexum/ai-governance  pack-rule-validator
+ */
+export {};
+//# sourceMappingURL=pack-rule-validator.test.d.ts.map

package/dist/governance/pack-rule-validator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-rule-validator.test.d.ts","sourceRoot":"","sources":["../../src/governance/pack-rule-validator.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/governance/pack-rule-validator.test.js

@@ -0,0 +1,153 @@
+"use strict";
+/**
+ * RED-GREEN tests for the pack rule validator.
+ *
+ * @connexum/ai-governance  pack-rule-validator
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert/strict"));
+const pack_rule_validator_1 = require("./pack-rule-validator");
+const capability_classes_1 = require("./capability-classes");
+const validInput = () => ({
+    id: 'co-pack-1',
+    version: '1.0.0',
+    orgId: 'org-x',
+    rules: [{ capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'BLOCK' }],
+    isolation: 'none',
+});
+(0, node_test_1.describe)('pack-rule-validator', () => {
+    (0, node_test_1.it)('valid input passes with ok=true and no errors', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)(validInput());
+        assert.equal(r.ok, true);
+        assert.equal(r.errors.length, 0);
+        assert.equal(r.warnings.length, 0);
+    });
+    (0, node_test_1.it)('missing id is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), id: undefined });
+        assert.equal(r.ok, false);
+        assert.ok(r.errors.some((e) => e.field === 'id' && e.code === 'MISSING'));
+    });
+    (0, node_test_1.it)('invalid id format is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), id: 'has spaces and !' });
+        assert.equal(r.ok, false);
+        assert.ok(r.errors.some((e) => e.field === 'id' && e.code === 'INVALID_FORMAT'));
+    });
+    (0, node_test_1.it)('missing version is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), version: undefined });
+        assert.ok(r.errors.some((e) => e.field === 'version' && e.code === 'MISSING'));
+    });
+    (0, node_test_1.it)('invalid version is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), version: 'banana' });
+        assert.ok(r.errors.some((e) => e.field === 'version' && e.code === 'INVALID_FORMAT'));
+    });
+    (0, node_test_1.it)('missing orgId is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), orgId: '' });
+        assert.ok(r.errors.some((e) => e.field === 'orgId' && e.code === 'MISSING'));
+    });
+    (0, node_test_1.it)('invalid isolation is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), isolation: 'super-strict' });
+        assert.ok(r.errors.some((e) => e.field === 'isolation' && e.code === 'INVALID_ISOLATION'));
+    });
+    (0, node_test_1.it)('valid isolation values pass', () => {
+        for (const iso of ['none', 'sourced-only', 'strict']) {
+            const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), isolation: iso });
+            assert.equal(r.ok, true, `isolation=${iso} should pass`);
+        }
+    });
+    (0, node_test_1.it)('non-array rules is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), rules: 'not an array' });
+        assert.ok(r.errors.some((e) => e.field === 'rules' && e.code === 'MISSING'));
+    });
+    (0, node_test_1.it)('empty rules array is a WARN, not an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({ ...validInput(), rules: [] });
+        assert.equal(r.ok, true);
+        assert.ok(r.warnings.some((w) => w.field === 'rules' && w.code === 'EMPTY_RULE_LIST'));
+    });
+    (0, node_test_1.it)('unknown capability is an ERROR with the allowed list in the message', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({
+            ...validInput(),
+            rules: [{ capability: 'capability:nonexistent', action: 'BLOCK' }],
+        });
+        assert.ok(r.errors.some((e) => e.code === 'UNKNOWN_CAPABILITY'));
+        const err = r.errors.find((e) => e.code === 'UNKNOWN_CAPABILITY');
+        assert.match(err.message, /Allowed:/);
+    });
+    (0, node_test_1.it)('unknown action is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({
+            ...validInput(),
+            rules: [{ capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'EXPLODE' }],
+        });
+        assert.ok(r.errors.some((e) => e.code === 'UNKNOWN_ACTION'));
+    });
+    (0, node_test_1.it)('duplicate (capability, action) is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({
+            ...validInput(),
+            rules: [
+                { capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'BLOCK' },
+                { capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'BLOCK' },
+            ],
+        });
+        assert.ok(r.errors.some((e) => e.code === 'DUPLICATE_RULE'));
+    });
+    (0, node_test_1.it)('different actions on same capability are NOT duplicates (strictest-wins handles)', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({
+            ...validInput(),
+            rules: [
+                { capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'BLOCK' },
+                { capability: capability_classes_1.CAPABILITY_CLASS.MCP, action: 'WARN' },
+            ],
+        });
+        assert.equal(r.ok, true);
+    });
+    (0, node_test_1.it)('rule that is not an object is an ERROR', () => {
+        const r = (0, pack_rule_validator_1.validatePackInput)({
+            ...validInput(),
+            rules: ['not-an-object'],
+        });
+        assert.ok(r.errors.some((e) => e.field === 'rules[0]' && e.code === 'INVALID_FORMAT'));
+    });
+    (0, node_test_1.it)('all 5 valid actions pass', () => {
+        for (const action of ['ALLOW', 'LOG', 'WARN', 'REQUIRE_APPROVAL', 'BLOCK']) {
+            const r = (0, pack_rule_validator_1.validatePackInput)({
+                ...validInput(),
+                rules: [{ capability: capability_classes_1.CAPABILITY_CLASS.MCP, action }],
+            });
+            assert.equal(r.ok, true, `action=${action} should pass`);
+        }
+    });
+});
+//# sourceMappingURL=pack-rule-validator.test.js.map

package/dist/governance/pack-rule-validator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-rule-validator.test.js","sourceRoot":"","sources":["../../src/governance/pack-rule-validator.test.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAyC;AACzC,2DAA6C;AAE7C,+DAA0D;AAC1D,6DAAwD;AAExD,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC;IACxB,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9D,SAAS,EAAE,MAAe;CAC3B,CAAC,CAAC;AAEH,IAAA,oBAAQ,EAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAA,cAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,UAAU,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,cAAqB,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,KAAK,EAAE,cAAqB,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC,EAAE,GAAG,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;YAC1B,GAAG,UAAU,EAAE;YACf,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAQ;SAC1E,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAE,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;YAC1B,GAAG,UAAU,EAAE;YACf,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAQ;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;YAC1B,GAAG,UAAU,EAAE;YACf,KAAK,EAAE;gBACL,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;gBACrD,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;aACtD;SACF,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;YAC1B,GAAG,UAAU,EAAE;YACf,KAAK,EAAE;gBACL,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;gBACrD,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;aACrD;SACF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;YAC1B,GAAG,UAAU,EAAE;YACf,KAAK,EAAE,CAAC,eAAe,CAAQ;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,GAAG,IAAA,uCAAiB,EAAC;gBAC1B,GAAG,UAAU,EAAE;gBACf,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,qCAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAQ;aAC7D,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,MAAM,cAAc,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/pack-versioning.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Pack Versioning + Rollback (W1.4 of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Lets a customer publish a new version of a company pack, run it in
+ * shadow-mode (record what it WOULD have decided without gating real
+ * traffic), then promote to active. One-click rollback to the prior active
+ * version. Every transition is an audit event.
+ *
+ * Storage substrate: in-process Map per-pack. A persistence adapter is a
+ * follow-up slice (would wire to Prisma; the API surface is identical).
+ *
+ * Customer flow:
+ *   1. Author v1 of company pack -> publishVersion -> setActive(v1)
+ *   2. Author v2 with a new rule -> publishVersion -> setShadow(v2)
+ *   3. Observe shadow decisions for N hours -> setActive(v2) (auto-archives v1)
+ *   4. Something breaks -> rollback(packId, v1) -> v1 active again, v2 archived
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-PACK-VERSIONING-ROLLBACK
+ */
+import type { CompliancePackWithClassifiers } from '../classification/pack-driven-classifier.js';
+export type VersionState = 'draft' | 'shadow' | 'active' | 'archived';
+export interface PackVersionRecord {
+    packId: string;
+    version: string;
+    pack: CompliancePackWithClassifiers;
+    state: VersionState;
+    /** ISO 8601 publish time. */
+    publishedAt: string;
+    /** Employee who published this version. */
+    publishedBy: string;
+    /** Free-text changelog. */
+    changelog?: string;
+    /** ISO 8601 when state last transitioned. */
+    stateChangedAt: string;
+    /** Employee who triggered the last state transition. */
+    stateChangedBy?: string;
+}
+export type PackVersionEventKind = 'VERSION_PUBLISHED' | 'VERSION_ACTIVATED' | 'VERSION_SHADOW_ENABLED' | 'VERSION_ARCHIVED' | 'PACK_ROLLED_BACK';
+export interface PackVersionEvent {
+    kind: PackVersionEventKind;
+    packId: string;
+    version: string;
+    previousVersion?: string;
+    actor: string;
+    timestamp: string;
+    detail?: string;
+}
+export type PackVersionEventSink = (event: PackVersionEvent) => void;
+/**
+ * In-process store of pack versions. Tracks one active version + zero-or-one
+ * shadow version per packId, plus an arbitrary number of archived versions.
+ */
+export declare class PackVersionStore {
+    private readonly versions;
+    private readonly active;
+    private readonly shadow;
+    private readonly eventSink;
+    constructor(eventSink?: PackVersionEventSink);
+    publishVersion(pack: CompliancePackWithClassifiers, publishedBy: string, changelog?: string): PackVersionRecord;
+    setActive(packId: string, version: string, actor: string): PackVersionRecord;
+    setShadow(packId: string, version: string, actor: string): PackVersionRecord;
+    /**
+     * One-click rollback: promote `toVersion` to active and archive the
+     * current active version. Emits PACK_ROLLED_BACK plus the usual
+     * activation/archival events.
+     */
+    rollback(packId: string, toVersion: string, actor: string): PackVersionRecord;
+    getActiveVersion(packId: string): PackVersionRecord | undefined;
+    getShadowVersion(packId: string): PackVersionRecord | undefined;
+    getVersion(packId: string, version: string): PackVersionRecord | undefined;
+    listVersions(packId: string): PackVersionRecord[];
+    private findRecord;
+    private requireRecord;
+}
+//# sourceMappingURL=pack-versioning.d.ts.map

package/dist/governance/pack-versioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-versioning.d.ts","sourceRoot":"","sources":["../../src/governance/pack-versioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAEjG,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,YAAY,CAAC;IACpB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAYrE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+C;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;gBAErC,SAAS,GAAE,oBAAsC;IAI7D,cAAc,CACZ,IAAI,EAAE,6BAA6B,EACnC,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB,iBAAiB;IA4CpB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB;IA2C5E,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB;IA4B5E;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB;IAwB7E,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAK/D,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAK/D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI1E,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAIjD,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,aAAa;CAOtB"}

package/dist/governance/pack-versioning.js

@@ -0,0 +1,192 @@
+"use strict";
+/**
+ * Pack Versioning + Rollback (W1.4 of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Lets a customer publish a new version of a company pack, run it in
+ * shadow-mode (record what it WOULD have decided without gating real
+ * traffic), then promote to active. One-click rollback to the prior active
+ * version. Every transition is an audit event.
+ *
+ * Storage substrate: in-process Map per-pack. A persistence adapter is a
+ * follow-up slice (would wire to Prisma; the API surface is identical).
+ *
+ * Customer flow:
+ *   1. Author v1 of company pack -> publishVersion -> setActive(v1)
+ *   2. Author v2 with a new rule -> publishVersion -> setShadow(v2)
+ *   3. Observe shadow decisions for N hours -> setActive(v2) (auto-archives v1)
+ *   4. Something breaks -> rollback(packId, v1) -> v1 active again, v2 archived
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-PACK-VERSIONING-ROLLBACK
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PackVersionStore = void 0;
+const VERSION_PATTERN = /^v?\d+(\.\d+){0,2}(-[A-Za-z0-9.-]+)?$/;
+function validateVersion(v) {
+    if (!VERSION_PATTERN.test(v)) {
+        throw new Error(`Invalid version '${v}'. Expected semver-ish (e.g. '1', '1.0', '1.2.3', '2.0.0-rc1').`);
+    }
+}
+/**
+ * In-process store of pack versions. Tracks one active version + zero-or-one
+ * shadow version per packId, plus an arbitrary number of archived versions.
+ */
+class PackVersionStore {
+    versions = new Map();
+    active = new Map();
+    shadow = new Map();
+    eventSink;
+    constructor(eventSink = () => undefined) {
+        this.eventSink = eventSink;
+    }
+    publishVersion(pack, publishedBy, changelog) {
+        if (!pack.version) {
+            throw new Error('publishVersion: pack must have a non-empty version field');
+        }
+        validateVersion(pack.version);
+        if (!publishedBy || publishedBy.trim() === '') {
+            throw new Error('publishVersion: publishedBy is required (audit)');
+        }
+        const list = this.versions.get(pack.id) ?? [];
+        if (list.some((r) => r.version === pack.version)) {
+            throw new Error(`publishVersion: pack '${pack.id}' already has version '${pack.version}'. ` +
+                'Versions are immutable once published.');
+        }
+        const now = new Date().toISOString();
+        const record = {
+            packId: pack.id,
+            version: pack.version,
+            pack,
+            state: 'draft',
+            publishedAt: now,
+            publishedBy,
+            changelog,
+            stateChangedAt: now,
+            stateChangedBy: publishedBy,
+        };
+        list.push(record);
+        this.versions.set(pack.id, list);
+        this.eventSink({
+            kind: 'VERSION_PUBLISHED',
+            packId: pack.id,
+            version: pack.version,
+            actor: publishedBy,
+            timestamp: now,
+            detail: changelog,
+        });
+        return record;
+    }
+    setActive(packId, version, actor) {
+        if (!actor || actor.trim() === '') {
+            throw new Error('setActive: actor is required (audit)');
+        }
+        const record = this.requireRecord(packId, version);
+        const previousActive = this.active.get(packId);
+        const now = new Date().toISOString();
+        // Archive previous active.
+        if (previousActive && previousActive !== version) {
+            const prev = this.requireRecord(packId, previousActive);
+            prev.state = 'archived';
+            prev.stateChangedAt = now;
+            prev.stateChangedBy = actor;
+            this.eventSink({
+                kind: 'VERSION_ARCHIVED',
+                packId,
+                version: previousActive,
+                actor,
+                timestamp: now,
+            });
+        }
+        // Clear shadow if same version is being promoted.
+        if (this.shadow.get(packId) === version)
+            this.shadow.delete(packId);
+        record.state = 'active';
+        record.stateChangedAt = now;
+        record.stateChangedBy = actor;
+        this.active.set(packId, version);
+        this.eventSink({
+            kind: 'VERSION_ACTIVATED',
+            packId,
+            version,
+            previousVersion: previousActive,
+            actor,
+            timestamp: now,
+        });
+        return record;
+    }
+    setShadow(packId, version, actor) {
+        if (!actor || actor.trim() === '') {
+            throw new Error('setShadow: actor is required (audit)');
+        }
+        const record = this.requireRecord(packId, version);
+        if (this.active.get(packId) === version) {
+            throw new Error(`setShadow: version '${version}' of pack '${packId}' is currently active. ` +
+                'A version cannot be both active and shadow.');
+        }
+        const now = new Date().toISOString();
+        record.state = 'shadow';
+        record.stateChangedAt = now;
+        record.stateChangedBy = actor;
+        this.shadow.set(packId, version);
+        this.eventSink({
+            kind: 'VERSION_SHADOW_ENABLED',
+            packId,
+            version,
+            actor,
+            timestamp: now,
+        });
+        return record;
+    }
+    /**
+     * One-click rollback: promote `toVersion` to active and archive the
+     * current active version. Emits PACK_ROLLED_BACK plus the usual
+     * activation/archival events.
+     */
+    rollback(packId, toVersion, actor) {
+        if (!actor || actor.trim() === '') {
+            throw new Error('rollback: actor is required (audit)');
+        }
+        const previousActive = this.active.get(packId);
+        if (previousActive === toVersion) {
+            throw new Error(`rollback: pack '${packId}' is already on version '${toVersion}'. Nothing to do.`);
+        }
+        const record = this.setActive(packId, toVersion, actor);
+        this.eventSink({
+            kind: 'PACK_ROLLED_BACK',
+            packId,
+            version: toVersion,
+            previousVersion: previousActive,
+            actor,
+            timestamp: new Date().toISOString(),
+        });
+        return record;
+    }
+    getActiveVersion(packId) {
+        const v = this.active.get(packId);
+        return v ? this.findRecord(packId, v) : undefined;
+    }
+    getShadowVersion(packId) {
+        const v = this.shadow.get(packId);
+        return v ? this.findRecord(packId, v) : undefined;
+    }
+    getVersion(packId, version) {
+        return this.findRecord(packId, version);
+    }
+    listVersions(packId) {
+        return [...(this.versions.get(packId) ?? [])];
+    }
+    findRecord(packId, version) {
+        const list = this.versions.get(packId);
+        if (!list)
+            return undefined;
+        return list.find((r) => r.version === version);
+    }
+    requireRecord(packId, version) {
+        const record = this.findRecord(packId, version);
+        if (!record) {
+            throw new Error(`pack '${packId}' has no published version '${version}'`);
+        }
+        return record;
+    }
+}
+exports.PackVersionStore = PackVersionStore;
+//# sourceMappingURL=pack-versioning.js.map

package/dist/governance/pack-versioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-versioning.js","sourceRoot":"","sources":["../../src/governance/pack-versioning.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AA0CH,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAEhE,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,iEAAiE,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAa,gBAAgB;IACV,QAAQ,GAAqC,IAAI,GAAG,EAAE,CAAC;IACvD,MAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;IACxC,MAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;IACxC,SAAS,CAAuB;IAEjD,YAAY,YAAkC,GAAG,EAAE,CAAC,SAAS;QAC3D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,cAAc,CACZ,IAAmC,EACnC,WAAmB,EACnB,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,EAAE,0BAA0B,IAAI,CAAC,OAAO,KAAK;gBACzE,wCAAwC,CAC3C,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAsB;YAChC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI;YACJ,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,GAAG;YAChB,WAAW;YACX,SAAS;YACT,cAAc,EAAE,GAAG;YACnB,cAAc,EAAE,WAAW;SAC5B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,OAAe,EAAE,KAAa;QACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,2BAA2B;QAC3B,IAAI,cAAc,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;YACxB,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;YAC1B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,kBAAkB;gBACxB,MAAM;gBACN,OAAO,EAAE,cAAc;gBACvB,KAAK;gBACL,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QAED,kDAAkD;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEpE,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC;QAC5B,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEjC,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,mBAAmB;YACzB,MAAM;YACN,OAAO;YACP,eAAe,EAAE,cAAc;YAC/B,KAAK;YACL,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,OAAe,EAAE,KAAa;QACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,cAAc,MAAM,yBAAyB;gBACzE,6CAA6C,CAChD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC;QAC5B,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEjC,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,wBAAwB;YAC9B,MAAM;YACN,OAAO;YACP,KAAK;YACL,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAc,EAAE,SAAiB,EAAE,KAAa;QACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,4BAA4B,SAAS,mBAAmB,CAClF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAExD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,kBAAkB;YACxB,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,eAAe,EAAE,cAAc;YAC/B,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAAe;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY,CAAC,MAAc;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,OAAe;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACjD,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,OAAe;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,+BAA+B,OAAO,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA7LD,4CA6LC"}