@empire-builder-kit/nx 1.0.0-beta.5 → 1.0.0-beta.7

package/src/repository-policy/policy.js

@@ -0,0 +1,274 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REPOSITORY_MODE_PRESETS = exports.SLICE_PRODUCTION_STATUSES = exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE = exports.PRODUCTION_FOUNDATION_PROFILES = exports.PRODUCTION_APPROVAL_MODES = exports.PRODUCTION_ACCESS_VALUES = exports.REPOSITORY_POLICY_SCHEMA_URL = exports.REPOSITORY_POLICY_SCHEMA_VERSION = exports.REPOSITORY_POLICY_FILE = void 0;
+exports.validateRepositoryOperatingPolicy = validateRepositoryOperatingPolicy;
+exports.formatRepositoryPolicyIssues = formatRepositoryPolicyIssues;
+exports.parseRepositoryOperatingPolicy = parseRepositoryOperatingPolicy;
+exports.readRepositoryOperatingPolicy = readRepositoryOperatingPolicy;
+exports.createIncubationRepositoryPolicy = createIncubationRepositoryPolicy;
+exports.applyRepositoryPolicyChange = applyRepositoryPolicyChange;
+exports.evaluateRepositoryPolicyRequest = evaluateRepositoryPolicyRequest;
+exports.assertRepositoryPolicyRequest = assertRepositoryPolicyRequest;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const validation_js_1 = require("../validation.js");
+exports.REPOSITORY_POLICY_FILE = 'ebk.repository-policy.json';
+exports.REPOSITORY_POLICY_SCHEMA_VERSION = 1;
+exports.REPOSITORY_POLICY_SCHEMA_URL = './node_modules/@empire-builder-kit/nx/schemas/repository-policy-v1.json';
+exports.PRODUCTION_ACCESS_VALUES = ['disabled', 'controlled'];
+exports.PRODUCTION_APPROVAL_MODES = [
+    'promotion-pr',
+    'environment-reviewer',
+];
+exports.PRODUCTION_FOUNDATION_PROFILES = [
+    'cost-optimized',
+    'standard',
+];
+exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE = 'standard';
+exports.SLICE_PRODUCTION_STATUSES = ['blocked', 'pilot', 'ready'];
+exports.REPOSITORY_MODE_PRESETS = [
+    'incubation',
+    'controlled-production',
+    'operational',
+];
+const SLICE_NAME_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+const POLICY_PROPERTIES = new Set([
+    '$schema',
+    'productionAccess',
+    'productionApproval',
+    'productionFoundation',
+    'schemaVersion',
+    'slices',
+]);
+function rejectUnknownProperties(value, allowed, path, issues) {
+    for (const property of Object.keys(value)) {
+        if (!allowed.has(property)) {
+            issues.push({
+                message: 'is not an allowed property',
+                path: `${path}.${property}`,
+            });
+        }
+    }
+}
+function isOneOf(value, values) {
+    return typeof value === 'string' && values.includes(value);
+}
+function validateRepositoryOperatingPolicy(value) {
+    if (!(0, validation_js_1.isRecord)(value)) {
+        return {
+            issues: [{ message: 'must be an object', path: 'policy' }],
+            valid: false,
+        };
+    }
+    const issues = [];
+    rejectUnknownProperties(value, POLICY_PROPERTIES, 'policy', issues);
+    if (value.schemaVersion !== exports.REPOSITORY_POLICY_SCHEMA_VERSION) {
+        issues.push({ message: 'must equal 1', path: 'policy.schemaVersion' });
+    }
+    if (value.$schema !== undefined &&
+        (typeof value.$schema !== 'string' || value.$schema.trim() === '')) {
+        issues.push({
+            message: 'must be a non-empty string',
+            path: 'policy.$schema',
+        });
+    }
+    if (!isOneOf(value.productionAccess, exports.PRODUCTION_ACCESS_VALUES)) {
+        issues.push({
+            message: `must equal ${exports.PRODUCTION_ACCESS_VALUES.join(' or ')}`,
+            path: 'policy.productionAccess',
+        });
+    }
+    if (!(0, validation_js_1.isRecord)(value.productionApproval)) {
+        issues.push({
+            message: 'must be an object with an explicit promotion-pr or environment-reviewer mode',
+            path: 'policy.productionApproval',
+        });
+    }
+    else {
+        rejectUnknownProperties(value.productionApproval, new Set(['mode']), 'policy.productionApproval', issues);
+        if (!isOneOf(value.productionApproval.mode, exports.PRODUCTION_APPROVAL_MODES)) {
+            issues.push({
+                message: `must equal ${exports.PRODUCTION_APPROVAL_MODES.join(' or ')}`,
+                path: 'policy.productionApproval.mode',
+            });
+        }
+    }
+    if (value.productionFoundation !== undefined) {
+        if (!(0, validation_js_1.isRecord)(value.productionFoundation)) {
+            issues.push({
+                message: 'must be an object',
+                path: 'policy.productionFoundation',
+            });
+        }
+        else {
+            rejectUnknownProperties(value.productionFoundation, new Set(['profile']), 'policy.productionFoundation', issues);
+            if (!isOneOf(value.productionFoundation.profile, exports.PRODUCTION_FOUNDATION_PROFILES)) {
+                issues.push({
+                    message: `must equal ${exports.PRODUCTION_FOUNDATION_PROFILES.join(' or ')}`,
+                    path: 'policy.productionFoundation.profile',
+                });
+            }
+        }
+    }
+    if (!(0, validation_js_1.isRecord)(value.slices)) {
+        issues.push({ message: 'must be an object', path: 'policy.slices' });
+    }
+    else {
+        for (const [slice, entry] of Object.entries(value.slices)) {
+            const path = `policy.slices.${slice}`;
+            if (!SLICE_NAME_PATTERN.test(slice)) {
+                issues.push({
+                    message: 'name must use lowercase letters, numbers, and hyphens',
+                    path,
+                });
+            }
+            if (!(0, validation_js_1.isRecord)(entry)) {
+                issues.push({ message: 'must be an object', path });
+                continue;
+            }
+            rejectUnknownProperties(entry, new Set(['productionStatus']), path, issues);
+            if (!isOneOf(entry.productionStatus, exports.SLICE_PRODUCTION_STATUSES)) {
+                issues.push({
+                    message: `must equal ${exports.SLICE_PRODUCTION_STATUSES.join(', ')}`,
+                    path: `${path}.productionStatus`,
+                });
+            }
+        }
+    }
+    return (0, validation_js_1.validationResult)(value, issues);
+}
+function formatRepositoryPolicyIssues(issues) {
+    return issues.map(({ message, path }) => `- ${path}: ${message}`).join('\n');
+}
+function parseRepositoryOperatingPolicy(contents, source = exports.REPOSITORY_POLICY_FILE) {
+    let value;
+    try {
+        value = JSON.parse(contents);
+    }
+    catch (error) {
+        throw new Error(`Repository Operating Policy at ${source} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const result = validateRepositoryOperatingPolicy(value);
+    if (!result.valid) {
+        throw new Error(`Repository Operating Policy at ${source} is invalid:\n${formatRepositoryPolicyIssues(result.issues)}`);
+    }
+    return result.value;
+}
+function readRepositoryOperatingPolicy(workspaceRoot) {
+    const path = (0, node_path_1.join)(workspaceRoot, exports.REPOSITORY_POLICY_FILE);
+    let contents;
+    try {
+        contents = (0, node_fs_1.readFileSync)(path, 'utf8');
+    }
+    catch (error) {
+        throw new Error(`Repository Operating Policy is required at ${path}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return parseRepositoryOperatingPolicy(contents, path);
+}
+function createIncubationRepositoryPolicy() {
+    return {
+        $schema: exports.REPOSITORY_POLICY_SCHEMA_URL,
+        productionAccess: 'disabled',
+        productionApproval: { mode: 'promotion-pr' },
+        productionFoundation: {
+            profile: exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE,
+        },
+        schemaVersion: exports.REPOSITORY_POLICY_SCHEMA_VERSION,
+        slices: {},
+    };
+}
+function applyRepositoryPolicyChange(current, change) {
+    const next = structuredClone(current);
+    if (change.preset === 'incubation') {
+        next.productionAccess = 'disabled';
+        next.productionFoundation ??= {
+            profile: exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE,
+        };
+        for (const entry of Object.values(next.slices)) {
+            entry.productionStatus = 'blocked';
+        }
+    }
+    else if (change.preset === 'controlled-production') {
+        next.productionAccess = 'controlled';
+        next.productionFoundation = { profile: 'cost-optimized' };
+    }
+    else if (change.preset === 'operational') {
+        next.productionAccess = 'controlled';
+        next.productionFoundation = { profile: 'standard' };
+    }
+    if (change.productionAccess !== undefined) {
+        next.productionAccess = change.productionAccess;
+    }
+    if (change.productionApprovalMode !== undefined) {
+        next.productionApproval = { mode: change.productionApprovalMode };
+    }
+    if (change.productionFoundationProfile !== undefined) {
+        next.productionFoundation = {
+            profile: change.productionFoundationProfile,
+        };
+    }
+    for (const [slice, productionStatus] of Object.entries(change.slices ?? {})) {
+        if (!SLICE_NAME_PATTERN.test(slice)) {
+            throw new Error(`Product Slice name ${slice} must use lowercase letters, numbers, and hyphens.`);
+        }
+        next.slices[slice] = { productionStatus };
+    }
+    const result = validateRepositoryOperatingPolicy(next);
+    if (!result.valid) {
+        throw new Error(`Repository Operating Policy change is invalid:\n${formatRepositoryPolicyIssues(result.issues)}`);
+    }
+    return result.value;
+}
+function evaluateRepositoryPolicyRequest(policy, request) {
+    const reasons = [];
+    const projectNames = new Set();
+    for (const project of request.projects) {
+        if (projectNames.has(project.name)) {
+            reasons.push(`Project ${project.name} is selected more than once.`);
+        }
+        projectNames.add(project.name);
+    }
+    if (request.stage !== 'production') {
+        return { allowed: reasons.length === 0, reasons };
+    }
+    if (request.action === 'dev') {
+        reasons.push('Production development mode is prohibited.');
+    }
+    // Removal and unlock are dedicated protected recovery paths. The policy must
+    // still parse, but a blocked or disabled posture must not strand resources.
+    const recoveryAction = request.action === 'remove' || request.action === 'unlock';
+    if (!recoveryAction && policy.productionAccess !== 'controlled') {
+        reasons.push('Repository production access is disabled.');
+    }
+    const configuredProfile = policy.productionFoundation?.profile;
+    const profile = recoveryAction
+        ? (configuredProfile ?? exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE)
+        : configuredProfile;
+    if (!recoveryAction && !profile) {
+        reasons.push('Production Foundation profile is not explicitly configured.');
+    }
+    if (!recoveryAction) {
+        for (const project of request.projects) {
+            if (project.kind !== 'slice')
+                continue;
+            const status = policy.slices[project.name]?.productionStatus ?? 'blocked';
+            if (status === 'blocked') {
+                reasons.push(`Product Slice ${project.name} is blocked for production deployment.`);
+            }
+        }
+    }
+    return {
+        allowed: reasons.length === 0,
+        ...(profile ? { effectiveProductionProfile: profile } : {}),
+        reasons,
+    };
+}
+function assertRepositoryPolicyRequest(workspaceRoot, request) {
+    const policy = readRepositoryOperatingPolicy(workspaceRoot);
+    const decision = evaluateRepositoryPolicyRequest(policy, request);
+    if (!decision.allowed) {
+        throw new Error(`Repository Operating Policy rejected ${request.action} for ${request.stage}:\n${decision.reasons.map((reason) => `- ${reason}`).join('\n')}`);
+    }
+    return decision;
+}
+//# sourceMappingURL=policy.js.map

package/src/repository-policy/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../packages/nx/src/repository-policy/policy.ts"],"names":[],"mappings":";;;AAsHA,8EA+GC;AAED,oEAIC;AAED,wEAmBC;AAED,sEAaC;AAED,4EAWC;AAED,kEAgDC;AAED,0EAqDC;AAED,sEAYC;AAnZD,qCAAuC;AACvC,yCAAiC;AACjC,oDAK0B;AAEb,QAAA,sBAAsB,GAAG,4BAAqC,CAAC;AAC/D,QAAA,gCAAgC,GAAG,CAAU,CAAC;AAC9C,QAAA,4BAA4B,GACvC,yEAAkF,CAAC;AAExE,QAAA,wBAAwB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAC/D,QAAA,yBAAyB,GAAG;IACvC,cAAc;IACd,sBAAsB;CACd,CAAC;AACE,QAAA,8BAA8B,GAAG;IAC5C,gBAAgB;IAChB,UAAU;CACF,CAAC;AACE,QAAA,8CAA8C,GACzD,UAAmB,CAAC;AACT,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACnE,QAAA,uBAAuB,GAAG;IACrC,YAAY;IACZ,uBAAuB;IACvB,aAAa;CACL,CAAC;AAuDX,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAC9B,KAA8B,EAC9B,OAA4B,EAC5B,IAAY,EACZ,MAAyB;IAEzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,KAAc,EACd,MAAoB;IAEpB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,KAAK,CAAC,aAAa,KAAK,wCAAgC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,gCAAwB,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,cAAc,gCAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9D,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,8EAA8E;YAChF,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EACjB,2BAA2B,EAC3B,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,iCAAyB,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC/D,IAAI,EAAE,gCAAgC;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,6BAA6B;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,uBAAuB,CACrB,KAAK,CAAC,oBAAoB,EAC1B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EACpB,6BAA6B,EAC7B,MAAM,CACP,CAAC;YACF,IACE,CAAC,OAAO,CACN,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAClC,sCAA8B,CAC/B,EACD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc,sCAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;oBACpE,IAAI,EAAE,qCAAqC;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,iBAAiB,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,uDAAuD;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,uBAAuB,CACrB,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAC7B,IAAI,EACJ,MAAM,CACP,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,iCAAyB,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC7D,IAAI,EAAE,GAAG,IAAI,mBAAmB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAA,gCAAgB,EAA4B,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,4BAA4B,CAC1C,MAAsC;IAEtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,8BAA8B,CAC5C,QAAgB,EAChB,SAAiB,8BAAsB;IAEvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,iBAAiB,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB;IAErB,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,8BAAsB,CAAC,CAAC;IACzD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,gCAAgC;IAC9C,OAAO;QACL,OAAO,EAAE,oCAA4B;QACrC,gBAAgB,EAAE,UAAU;QAC5B,kBAAkB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;QAC5C,oBAAoB,EAAE;YACpB,OAAO,EAAE,sDAA8C;SACxD;QACD,aAAa,EAAE,wCAAgC;QAC/C,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAAkC,EAClC,MAA8B;IAE9B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,IAAI,CAAC,oBAAoB,KAAK;YAC5B,OAAO,EAAE,sDAA8C;SACxD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5D,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG;YAC1B,OAAO,EAAE,MAAM,CAAC,2BAA2B;SAC5C,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sBAAsB,KAAK,oDAAoD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,mDAAmD,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,MAAiC,EACjC,OAAgC;IAEhC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,8BAA8B,CAAC,CAAC;QACtE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC7D,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC7D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc;QAC5B,CAAC,CAAC,CAAC,iBAAiB,IAAI,sDAA8C,CAAC;QACvE,CAAC,CAAC,iBAAiB,CAAC;IACtB,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,IAAI,SAAS,CAAC;YAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CACV,iBAAiB,OAAO,CAAC,IAAI,wCAAwC,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB,EACrB,OAAgC;IAEhC,MAAM,MAAM,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/src/schemas/repository-policy-v1.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://empirebuilderkit.dev/schemas/repository-policy-v1.json",
+  "title": "Empire Builder Kit repository operating policy v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "productionAccess",
+    "productionApproval",
+    "slices"
+  ],
+  "properties": {
+    "$schema": { "type": "string", "minLength": 1 },
+    "schemaVersion": { "const": 1 },
+    "productionAccess": {
+      "type": "string",
+      "enum": ["disabled", "controlled"]
+    },
+    "productionApproval": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode"],
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["promotion-pr", "environment-reviewer"]
+        }
+      }
+    },
+    "productionFoundation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["profile"],
+      "properties": {
+        "profile": {
+          "type": "string",
+          "enum": ["cost-optimized", "standard"]
+        }
+      }
+    },
+    "slices": {
+      "type": "object",
+      "propertyNames": { "pattern": "^[a-z0-9][a-z0-9-]*$" },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["productionStatus"],
+        "properties": {
+          "productionStatus": {
+            "type": "string",
+            "enum": ["blocked", "pilot", "ready"]
+          }
+        }
+      }
+    }
+  }
+}

package/src/work-markers/index.d.ts

@@ -0,0 +1 @@
+export * from './work-markers.js';

package/src/work-markers/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./work-markers.js"), exports);
+//# sourceMappingURL=index.js.map

package/src/work-markers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/nx/src/work-markers/index.ts"],"names":[],"mappings":";;;AAAA,4DAAkC"}

package/src/work-markers/work-markers.d.ts

@@ -0,0 +1,39 @@
+import { type GeneratedPathMode } from '../ownership/index.js';
+export declare const WORK_MARKER_KINDS: readonly ["TODO", "ASSUMPTION", "QUESTION", "SECURITY", "BLOCKER"];
+export type WorkMarkerKind = (typeof WORK_MARKER_KINDS)[number];
+export type WorkMarkerOwnership = GeneratedPathMode | 'user-owned';
+export type WorkMarkerCommentPrefix = '//' | '#' | '--' | '/*' | '<!--';
+export interface WorkMarkerCommentInput {
+    commentPrefix?: WorkMarkerCommentPrefix;
+    description: string;
+    kind: WorkMarkerKind;
+    reference: string;
+}
+export interface WorkMarker {
+    description: string;
+    kind: WorkMarkerKind;
+    line: number;
+    ownership: WorkMarkerOwnership;
+    path: string;
+    reference: string;
+}
+export type WorkMarkerIssueCode = 'invalid-marker-syntax' | 'invalid-ownership-record' | 'managed-file-marker' | 'ownership-conflict' | 'unreadable-path' | 'unknown-marker-kind';
+export interface WorkMarkerIssue {
+    code: WorkMarkerIssueCode;
+    line: number;
+    message: string;
+    path: string;
+}
+export interface WorkMarkerReport {
+    blockingMarkers: WorkMarker[];
+    issues: WorkMarkerIssue[];
+    markers: WorkMarker[];
+    root: string;
+}
+export interface WorkMarkerAssertionOptions {
+    protectedPromotion?: boolean;
+}
+export declare function scanWorkMarkers(root: string): WorkMarkerReport;
+export declare function formatWorkMarkerComment(input: WorkMarkerCommentInput): string;
+export declare function formatWorkMarkerReport(report: WorkMarkerReport): string;
+export declare function assertWorkMarkerReport(report: WorkMarkerReport, options?: WorkMarkerAssertionOptions): void;