@futdevpro/fsm-dynamo 1.20.2 → 1.20.6

package/README.md

@@ -401,9 +401,28 @@ const decrypted = DyFM_Crypto.decrypt(encrypted, 'my-secret-key');
 For publication authenticity, `DyFM_ArtifactSignature_ControlService` signs exact caller-provided bytes with a
 PKCS#8 private key and verifies them with a public P-256 JWK. Private material belongs in the consuming server's
 FDP Keystore configuration and is never returned in signature evidence or sent to a browser. The verifier works
-through Web Crypto in secure browser contexts and supported Node.js runtimes.
-
-### 9. Custom Data Module
+through Web Crypto in secure browser contexts and supported Node.js runtimes.
+
+### Deployment Contract Module
+
+**Import:** `@futdevpro/fsm-dynamo/deployment`
+
+Shared, content-free deployment target contracts for FDP operational tooling.
+
+**Key Features:**
+- Strict `fdp-atomic-rollback-manifest/1` parsing with unknown-field rejection
+- Canonical, order-independent target checksum generation
+- Immutable image reference, digest and mutable promotion-target validation
+- Configuration revision, compatibility-policy and authority-evidence validation
+- Safe post-check endpoint validation and bounded gap-code evidence
+
+The module validates only operational metadata. Application data, workbook content, secrets and credentials do not
+belong in the manifest and are rejected when supplied as additional fields.
+
+Use `DyFM_AtomicRollbackManifest_Util.validate(value)` for strict parsing and
+`DyFM_AtomicRollbackManifest_Util.computeTargetChecksum(manifest)` for canonical target checksums.
+
+### 9. Custom Data Module
 
 **Import:** `@futdevpro/fsm-dynamo/custom-data`
 
@@ -649,9 +668,10 @@ import { ... } from '@futdevpro/fsm-dynamo/data-handler';
 import { ... } from '@futdevpro/fsm-dynamo/location';
 import { ... } from '@futdevpro/fsm-dynamo/messaging';
 import { ... } from '@futdevpro/fsm-dynamo/socket';
-import { ... } from '@futdevpro/fsm-dynamo/pipe';
-import { ... } from '@futdevpro/fsm-dynamo/crypto';
-import { ... } from '@futdevpro/fsm-dynamo/custom-data';
+import { ... } from '@futdevpro/fsm-dynamo/pipe';
+import { ... } from '@futdevpro/fsm-dynamo/crypto';
+import { ... } from '@futdevpro/fsm-dynamo/deployment';
+import { ... } from '@futdevpro/fsm-dynamo/custom-data';
 import { ... } from '@futdevpro/fsm-dynamo/test';
 import { ... } from '@futdevpro/fsm-dynamo/usage';
 import { ... } from '@futdevpro/fsm-dynamo/ci-tools';
@@ -661,10 +681,10 @@ For detailed API documentation, refer to the [Dynamo FSM Documentation](https://
 
 ## Requirements
 
-- **TypeScript**: 5.5.4 or higher
+- **TypeScript**: 5.9.3 or higher
 - **Node.js**: Compatible with Node.js LTS versions
 - **Peer Dependencies**:
-  - `rxjs`: 7.8.1
+  - `rxjs`: 7.8.2
 
 ## Support & Contributing
 

package/__documentations/2026-08-22-angular-20-phase1-release.md

@@ -1,39 +1,39 @@
-# Angular 20 fleet Phase 1 release evidence
-
-Date: 2026-08-22
-Scope: `@futdevpro/fsm-dynamo` 1.20 generation bootstrap for BFR-CTM-006
-
-## Outcome
-
-The package is aligned with the fleet Angular 20 shared-runtime baseline without changing its public API:
-
-- package generation normalized from `01.16.x` to `1.20.x`;
-- TypeScript upgraded to `~5.9.3`;
-- RxJS peer upgraded to `~7.8.2`;
-- `tslib`, Node types and UUID aligned with the fleet version matrix;
-- TypeScript 5.9's `Uint8Array<ArrayBufferLike>` Web Crypto incompatibility was resolved by preserving
-  the concrete `ArrayBuffer` backing type at every cryptographic boundary.
-
-The typed-array change is compile-time precision only. Signing, verification, checksum comparison,
-private-key zeroing and content-free error codes retain their existing runtime behavior.
-
-## Verification
-
-- clean dependency installation completed with pnpm 11.22.0;
-- TypeScript 5.9 build completed successfully;
-- build completeness: all 326 source TypeScript files have emitted JavaScript;
-- Jasmine: 1563 specifications, 0 failures, 72 explicitly pending;
-- production dependency audit: no known vulnerabilities;
-- no public export was removed and the `./ngx-models` subpath remains present.
-
-## Bootstrap note
-
-The pre-release install reports one temporary peer finding through the old
-`@futdevpro/dynamo-eslint@1.15.x` development dependency: that package still pulls
-`@futdevpro/fsm-dynamo@1.15.21`, whose peer is RxJS 7.8.1. Phase 2 replaces that lint package with the
-1.20 generation immediately after this publish. The final post-Phase-2 verification must therefore
-repeat a fresh install and peer check before the Angular package is released.
-
-The legacy import and naming validators also expose existing repository-wide debt and a flat-config
-runtime incompatibility in the 1.15 lint package. These findings are not attributed to the TypeScript
-or RxJS change; the flat-config runtime failure is a Phase 2 release gate.
+# Angular 20 fleet Phase 1 release evidence
+
+Date: 2026-08-22
+Scope: `@futdevpro/fsm-dynamo` 1.20 generation bootstrap for BFR-CTM-006
+
+## Outcome
+
+The package is aligned with the fleet Angular 20 shared-runtime baseline without changing its public API:
+
+- package generation normalized from `01.16.x` to `1.20.x`;
+- TypeScript upgraded to `~5.9.3`;
+- RxJS peer upgraded to `~7.8.2`;
+- `tslib`, Node types and UUID aligned with the fleet version matrix;
+- TypeScript 5.9's `Uint8Array<ArrayBufferLike>` Web Crypto incompatibility was resolved by preserving
+  the concrete `ArrayBuffer` backing type at every cryptographic boundary.
+
+The typed-array change is compile-time precision only. Signing, verification, checksum comparison,
+private-key zeroing and content-free error codes retain their existing runtime behavior.
+
+## Verification
+
+- clean dependency installation completed with pnpm 11.22.0;
+- TypeScript 5.9 build completed successfully;
+- build completeness: all 326 source TypeScript files have emitted JavaScript;
+- Jasmine: 1563 specifications, 0 failures, 72 explicitly pending;
+- production dependency audit: no known vulnerabilities;
+- no public export was removed and the `./ngx-models` subpath remains present.
+
+## Bootstrap note
+
+The pre-release install reports one temporary peer finding through the old
+`@futdevpro/dynamo-eslint@1.15.x` development dependency: that package still pulls
+`@futdevpro/fsm-dynamo@1.15.21`, whose peer is RxJS 7.8.1. Phase 2 replaces that lint package with the
+1.20 generation immediately after this publish. The final post-Phase-2 verification must therefore
+repeat a fresh install and peer check before the Angular package is released.
+
+The legacy import and naming validators also expose existing repository-wide debt and a flat-config
+runtime incompatibility in the 1.15 lint package. These findings are not attributed to the TypeScript
+or RxJS change; the flat-config runtime failure is a Phase 2 release gate.

package/__documentations/2026-08-23-atomic-rollback-manifest-contract.md

@@ -0,0 +1,53 @@
+# Atomic rollback manifest contract release evidence
+
+Date: 2026-08-23
+Scope: `@futdevpro/fsm-dynamo/deployment` 1.20.6 for BFR-CTM-022
+
+## Outcome
+
+The reusable, content-free atomic rollout and rollback target contract is now owned by Dynamo FSM instead of a
+single application or deployment host:
+
+- `fdp-atomic-rollback-manifest/1` describes the exact environment, authority evidence, source revision,
+  configuration revision and checksum, compatibility policy, immutable image targets, mutable promotion targets,
+  expected digests and post-deployment probes;
+- strict parsing rejects unknown fields, invalid cardinalities, duplicated services or checks, non-targeted checks,
+  unsafe endpoints and all image, configuration, authority or checksum substitutions;
+- canonical target checksums are stable when image and post-check sets arrive in a different order;
+- validation evidence is bounded and content-free: it never returns registry references, endpoints, arbitrary input
+  fields or their values;
+- the feature is additive and available only through the new `@futdevpro/fsm-dynamo/deployment` secondary entry
+  point; no existing export was removed or changed.
+
+The wire-level contract and gap-code namespace deliberately remain `FDP|ATOMIC_ROLLBACK|...` because the same
+manifest crosses the FDP CLI, FDP DevOps and deployment-host boundaries. TypeScript symbols follow the Dynamo FSM
+`DyFM_` prefix.
+
+## Cross-runtime checksum evidence
+
+The representative two-service Company Toolmaker target has this fixed SHA-256 checksum:
+
+`2b416434a8d36c5b3305383eb1f2ecebae4057d30d2f46d986d04728225b58df`
+
+The new CryptoJS-backed Dynamo implementation and the original Node `crypto` implementation produced the exact
+same value. The fixed vector is asserted in the shared contract test so a future canonicalization drift fails the
+release gate.
+
+## Verification
+
+- TypeScript 5.9 build completed successfully;
+- build completeness verified: all 329 source TypeScript files have emitted JavaScript;
+- focused Jasmine contract suite: 7 specifications, 0 failures;
+- full Jasmine regression suite: 1570 specifications, 0 failures, 72 explicitly pending legacy specifications;
+- deployment-module ESLint: 0 errors and 0 warnings;
+- full regression suite also passed with the lower supported RxJS 7.8.1 peer installed;
+- production dependency audit: no known vulnerabilities;
+- package manifest JSON and the new secondary export resolve from the emitted build;
+- `git diff --check` found no source or package whitespace errors.
+
+## Consumer migration gate
+
+FDP DevOps and FDP CLI must consume this exact secondary entry point before their local copies or partial validators
+are removed. BFR-CTM-022 remains active until the Company Toolmaker test environment completes the required
+preflight and induced-failure compensation rehearsal; publishing this contract alone does not claim that deployment
+evidence.

package/build/_modules/deployment/_collections/atomic-rollback-manifest.util.d.ts

@@ -0,0 +1,9 @@
+import { DyFM_AtomicRollbackLocalValidation_Interface, DyFM_AtomicRollbackManifest_Interface } from '../_models/atomic-rollback-manifest.interface';
+/** Canonical manifest checksum and strict content-free local validation. */
+export declare class DyFM_AtomicRollbackManifest_Util {
+    /** Calculates the canonical SHA-256 target checksum for a typed manifest. */
+    static computeTargetChecksum(manifest: DyFM_AtomicRollbackManifest_Interface): string;
+    /** Validates an unknown manifest without reflecting rejected content. */
+    static validate(value: unknown): DyFM_AtomicRollbackLocalValidation_Interface;
+}
+//# sourceMappingURL=atomic-rollback-manifest.util.d.ts.map

package/build/_modules/deployment/_collections/atomic-rollback-manifest.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-rollback-manifest.util.d.ts","sourceRoot":"","sources":["../../../../src/_modules/deployment/_collections/atomic-rollback-manifest.util.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,4CAA4C,EAC5C,qCAAqC,EAEtC,MAAM,+CAA+C,CAAC;AA0UvD,4EAA4E;AAC5E,qBAAa,gCAAgC;IAC3C,6EAA6E;WAC/D,qBAAqB,CAAC,QAAQ,EAAE,qCAAqC,GAAG,MAAM;IAI5F,yEAAyE;WAC3D,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,4CAA4C;CA0GrF"}

package/build/_modules/deployment/_collections/atomic-rollback-manifest.util.js

@@ -0,0 +1,354 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyFM_AtomicRollbackManifest_Util = void 0;
+const tslib_1 = require("tslib");
+const CryptoJS = tslib_1.__importStar(require("crypto-js"));
+const dyfm_exactManifestKeys = [
+    'authority',
+    'configuration',
+    'contractVersion',
+    'environment',
+    'images',
+    'operationId',
+    'postChecks',
+    'sourceRevision',
+    'targetChecksum',
+].join(',');
+const dyfm_exactAuthorityKeys = 'evidenceId,principalId';
+const dyfm_exactConfigurationKeys = 'compatibilityVersion,policyChecksum,revision,sha256';
+const dyfm_exactImageKeys = 'digest,immutableReference,mutableReference,service,version';
+const dyfm_exactPostCheckKeys = 'checkId,endpoint,expectedProbeContract,service';
+const dyfm_revisionPattern = /^[0-9a-f]{40}$/u;
+const dyfm_sha256Pattern = /^[0-9a-f]{64}$/u;
+const dyfm_digestPattern = /^sha256:[0-9a-f]{64}$/u;
+const dyfm_operationPattern = /^rollback_[0-9a-f]{32}$/u;
+const dyfm_safeIdPattern = /^[a-z0-9][a-z0-9._-]{0,127}$/u;
+const dyfm_versionPattern = /^[0-9A-Za-z][0-9A-Za-z._-]{0,63}$/u;
+const dyfm_compatibilityPattern = /^[a-z0-9][a-z0-9-]{1,63}\/[1-9][0-9]{0,8}$/u;
+const dyfm_contractPattern = /^[a-z0-9][a-z0-9-]{1,63}\/[1-9][0-9]{0,8}$/u;
+const dyfm_imageReferencePattern = /^(?:[a-z0-9]+(?:[._-][a-z0-9]+)*(?::[0-9]+)?\/)+[a-z0-9]+(?:[._-][a-z0-9]+)*:[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u;
+/** Determines whether an unknown value is a non-array object. */
+function dyfm_isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Compares an object's sorted keys with one exact key signature. */
+function dyfm_hasExactKeys(value, expected) {
+    return Object.keys(value).sort().join(',') === expected;
+}
+/** Narrows a value to a deployment environment supported by the contract. */
+function dyfm_isEnvironment(value) {
+    return value === 'test' || value === 'production';
+}
+/** Allows bounded HTTPS probes and service-local HTTP probes without credentials or query data. */
+function dyfm_isSafePostCheckEndpoint(value, service) {
+    if (value.length > 2048) {
+        return false;
+    }
+    try {
+        const endpoint = new URL(value);
+        if (endpoint.username
+            || endpoint.password
+            || endpoint.search
+            || endpoint.hash
+            || !/^\/[A-Za-z0-9/_-]{0,127}$/u.test(endpoint.pathname)) {
+            return false;
+        }
+        if (endpoint.protocol === 'https:') {
+            return true;
+        }
+        return endpoint.protocol === 'http:'
+            && [service, '127.0.0.1', 'localhost'].includes(endpoint.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/** Parses bounded deployment authority evidence without returning rejected content. */
+function dyfm_parseAuthority(value, gapCodes) {
+    if (!dyfm_isRecord(value) || !dyfm_hasExactKeys(value, dyfm_exactAuthorityKeys)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|AUTHORITY_SHAPE_INVALID');
+        return undefined;
+    }
+    if (typeof value.principalId !== 'string' || !dyfm_safeIdPattern.test(value.principalId)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|AUTHORITY_PRINCIPAL_INVALID');
+    }
+    if (typeof value.evidenceId !== 'string' || !dyfm_sha256Pattern.test(value.evidenceId)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|AUTHORITY_EVIDENCE_INVALID');
+    }
+    if (typeof value.principalId !== 'string'
+        || typeof value.evidenceId !== 'string'
+        || gapCodes.some((code) => code.startsWith('FDP|ATOMIC_ROLLBACK|AUTHORITY_'))) {
+        return undefined;
+    }
+    return { principalId: value.principalId, evidenceId: value.evidenceId };
+}
+/** Parses an exact configuration and compatibility target. */
+function dyfm_parseConfiguration(value, gapCodes) {
+    if (!dyfm_isRecord(value) || !dyfm_hasExactKeys(value, dyfm_exactConfigurationKeys)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|CONFIGURATION_SHAPE_INVALID');
+        return undefined;
+    }
+    if (typeof value.revision !== 'string' || !dyfm_revisionPattern.test(value.revision)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|CONFIGURATION_REVISION_INVALID');
+    }
+    if (typeof value.sha256 !== 'string' || !dyfm_sha256Pattern.test(value.sha256)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|CONFIGURATION_CHECKSUM_INVALID');
+    }
+    if (typeof value.compatibilityVersion !== 'string'
+        || !dyfm_compatibilityPattern.test(value.compatibilityVersion)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|CONFIGURATION_COMPATIBILITY_INVALID');
+    }
+    if (typeof value.policyChecksum !== 'string' || !dyfm_sha256Pattern.test(value.policyChecksum)) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|CONFIGURATION_POLICY_CHECKSUM_INVALID');
+    }
+    if (typeof value.revision !== 'string'
+        || typeof value.sha256 !== 'string'
+        || typeof value.compatibilityVersion !== 'string'
+        || typeof value.policyChecksum !== 'string'
+        || gapCodes.some((code) => code.startsWith('FDP|ATOMIC_ROLLBACK|CONFIGURATION_'))) {
+        return undefined;
+    }
+    return {
+        revision: value.revision,
+        sha256: value.sha256,
+        compatibilityVersion: value.compatibilityVersion,
+        policyChecksum: value.policyChecksum,
+    };
+}
+/** Parses the complete immutable image promotion set. */
+function dyfm_parseImages(value, gapCodes) {
+    if (!Array.isArray(value) || value.length < 1 || value.length > 16) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|IMAGE_SET_CARDINALITY_INVALID');
+        return [];
+    }
+    const images = [];
+    for (const candidate of value) {
+        if (!dyfm_isRecord(candidate) || !dyfm_hasExactKeys(candidate, dyfm_exactImageKeys)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|IMAGE_SHAPE_INVALID');
+            continue;
+        }
+        const service = typeof candidate.service === 'string' ? candidate.service : undefined;
+        const version = typeof candidate.version === 'string' ? candidate.version : undefined;
+        const immutableReference = typeof candidate.immutableReference === 'string'
+            ? candidate.immutableReference
+            : undefined;
+        const mutableReference = typeof candidate.mutableReference === 'string'
+            ? candidate.mutableReference
+            : undefined;
+        const digest = typeof candidate.digest === 'string' ? candidate.digest : undefined;
+        if (!service || !dyfm_safeIdPattern.test(service)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|IMAGE_SERVICE_INVALID');
+            continue;
+        }
+        if (!version || !dyfm_versionPattern.test(version)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|IMAGE_VERSION_INVALID|${service}`);
+            continue;
+        }
+        if (!immutableReference
+            || immutableReference.length > 512
+            || !dyfm_imageReferencePattern.test(immutableReference)
+            || !immutableReference.endsWith(`/${service}:release-${version}`)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|IMAGE_IMMUTABLE_REFERENCE_INVALID|${service}`);
+            continue;
+        }
+        if (!mutableReference
+            || mutableReference.length > 512
+            || !dyfm_imageReferencePattern.test(mutableReference)
+            || !mutableReference.endsWith(`/${service}:release`)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|IMAGE_MUTABLE_REFERENCE_INVALID|${service}`);
+            continue;
+        }
+        if (immutableReference.slice(0, immutableReference.lastIndexOf(':'))
+            !== mutableReference.slice(0, mutableReference.lastIndexOf(':'))) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|IMAGE_REPOSITORY_MISMATCH|${service}`);
+            continue;
+        }
+        if (!digest || !dyfm_digestPattern.test(digest)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|IMAGE_DIGEST_INVALID|${service}`);
+            continue;
+        }
+        images.push({
+            service: service,
+            version: version,
+            immutableReference: immutableReference,
+            mutableReference: mutableReference,
+            digest: digest,
+        });
+    }
+    const services = images.map((image) => image.service);
+    if (new Set(services).size !== services.length) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|IMAGE_SERVICE_DUPLICATED');
+    }
+    return images;
+}
+/** Parses bounded post-deployment checks targeting manifest services only. */
+function dyfm_parsePostChecks(value, gapCodes) {
+    if (!Array.isArray(value) || value.length < 1 || value.length > 32) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|POST_CHECK_SET_CARDINALITY_INVALID');
+        return [];
+    }
+    const postChecks = [];
+    for (const candidate of value) {
+        if (!dyfm_isRecord(candidate) || !dyfm_hasExactKeys(candidate, dyfm_exactPostCheckKeys)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|POST_CHECK_SHAPE_INVALID');
+            continue;
+        }
+        const checkId = typeof candidate.checkId === 'string' ? candidate.checkId : undefined;
+        const service = typeof candidate.service === 'string' ? candidate.service : undefined;
+        const endpoint = typeof candidate.endpoint === 'string' ? candidate.endpoint : undefined;
+        const expectedProbeContract = typeof candidate.expectedProbeContract === 'string'
+            ? candidate.expectedProbeContract
+            : undefined;
+        if (!checkId || !dyfm_safeIdPattern.test(checkId)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|POST_CHECK_ID_INVALID');
+            continue;
+        }
+        if (!service || !dyfm_safeIdPattern.test(service)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|POST_CHECK_SERVICE_INVALID|${checkId}`);
+            continue;
+        }
+        if (!endpoint || !dyfm_isSafePostCheckEndpoint(endpoint, service)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|POST_CHECK_ENDPOINT_INVALID|${checkId}`);
+            continue;
+        }
+        if (!expectedProbeContract || !dyfm_contractPattern.test(expectedProbeContract)) {
+            gapCodes.push(`FDP|ATOMIC_ROLLBACK|POST_CHECK_CONTRACT_INVALID|${checkId}`);
+            continue;
+        }
+        postChecks.push({
+            checkId: checkId,
+            service: service,
+            endpoint: endpoint,
+            expectedProbeContract: expectedProbeContract,
+        });
+    }
+    if (new Set(postChecks.map((check) => check.checkId)).size
+        !== postChecks.length) {
+        gapCodes.push('FDP|ATOMIC_ROLLBACK|POST_CHECK_ID_DUPLICATED');
+    }
+    return postChecks;
+}
+/** Creates the exact, insertion-order-independent JSON value hashed by every producer and consumer. */
+function dyfm_canonicalTarget(manifest) {
+    return JSON.stringify({
+        contractVersion: manifest.contractVersion,
+        operationId: manifest.operationId,
+        environment: manifest.environment,
+        authority: {
+            principalId: manifest.authority.principalId,
+            evidenceId: manifest.authority.evidenceId,
+        },
+        sourceRevision: manifest.sourceRevision,
+        configuration: {
+            revision: manifest.configuration.revision,
+            sha256: manifest.configuration.sha256,
+            compatibilityVersion: manifest.configuration.compatibilityVersion,
+            policyChecksum: manifest.configuration.policyChecksum,
+        },
+        images: [...manifest.images].sort((left, right) => left.service
+            .localeCompare(right.service)).map((image) => ({
+            service: image.service,
+            version: image.version,
+            immutableReference: image.immutableReference,
+            mutableReference: image.mutableReference,
+            digest: image.digest,
+        })),
+        postChecks: [...manifest.postChecks].sort((left, right) => left
+            .checkId.localeCompare(right.checkId)).map((check) => ({
+            checkId: check.checkId,
+            service: check.service,
+            endpoint: check.endpoint,
+            expectedProbeContract: check.expectedProbeContract,
+        })),
+    });
+}
+/** Canonical manifest checksum and strict content-free local validation. */
+class DyFM_AtomicRollbackManifest_Util {
+    /** Calculates the canonical SHA-256 target checksum for a typed manifest. */
+    static computeTargetChecksum(manifest) {
+        return CryptoJS.SHA256(dyfm_canonicalTarget(manifest)).toString();
+    }
+    /** Validates an unknown manifest without reflecting rejected content. */
+    static validate(value) {
+        if (!dyfm_isRecord(value) || !dyfm_hasExactKeys(value, dyfm_exactManifestKeys)) {
+            return {
+                contractVersion: 'fdp-atomic-rollback-local-validation/1',
+                valid: false,
+                environment: 'invalid',
+                operationId: 'invalid',
+                targetChecksum: 'invalid',
+                serviceCount: 0,
+                postCheckCount: 0,
+                gapCodes: ['FDP|ATOMIC_ROLLBACK|MANIFEST_SHAPE_INVALID'],
+            };
+        }
+        const gapCodes = [];
+        if (value.contractVersion !== 'fdp-atomic-rollback-manifest/1') {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|CONTRACT_VERSION_INVALID');
+        }
+        if (typeof value.operationId !== 'string' || !dyfm_operationPattern.test(value.operationId)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|OPERATION_ID_INVALID');
+        }
+        if (!dyfm_isEnvironment(value.environment)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|ENVIRONMENT_INVALID');
+        }
+        if (typeof value.sourceRevision !== 'string' || !dyfm_revisionPattern.test(value.sourceRevision)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|SOURCE_REVISION_INVALID');
+        }
+        const authority = dyfm_parseAuthority(value.authority, gapCodes);
+        const configuration = dyfm_parseConfiguration(value.configuration, gapCodes);
+        const images = dyfm_parseImages(value.images, gapCodes);
+        const postChecks = dyfm_parsePostChecks(value.postChecks, gapCodes);
+        const imageServices = new Set(images.map((image) => image.service));
+        if (postChecks.some((check) => !imageServices.has(check.service))) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|POST_CHECK_SERVICE_NOT_TARGETED');
+        }
+        if (typeof value.targetChecksum !== 'string' || !dyfm_sha256Pattern.test(value.targetChecksum)) {
+            gapCodes.push('FDP|ATOMIC_ROLLBACK|TARGET_CHECKSUM_INVALID');
+        }
+        let manifest;
+        if (!gapCodes.length
+            && typeof value.operationId === 'string'
+            && dyfm_isEnvironment(value.environment)
+            && authority
+            && typeof value.sourceRevision === 'string'
+            && configuration
+            && images.length > 0
+            && postChecks.length > 0
+            && typeof value.targetChecksum === 'string') {
+            manifest = {
+                contractVersion: 'fdp-atomic-rollback-manifest/1',
+                operationId: value.operationId,
+                environment: value.environment,
+                authority: authority,
+                sourceRevision: value.sourceRevision,
+                configuration: configuration,
+                images: images,
+                postChecks: postChecks,
+                targetChecksum: value.targetChecksum,
+            };
+            if (this.computeTargetChecksum(manifest) !== value.targetChecksum) {
+                gapCodes.push('FDP|ATOMIC_ROLLBACK|TARGET_CHECKSUM_MISMATCH');
+                manifest = undefined;
+            }
+        }
+        const normalizedGapCodes = [...new Set(gapCodes)].sort();
+        return {
+            contractVersion: 'fdp-atomic-rollback-local-validation/1',
+            valid: !normalizedGapCodes.length,
+            environment: dyfm_isEnvironment(value.environment) ? value.environment : 'invalid',
+            operationId: !normalizedGapCodes.length && typeof value.operationId === 'string'
+                ? value.operationId
+                : 'invalid',
+            targetChecksum: !normalizedGapCodes.length && typeof value.targetChecksum === 'string'
+                ? value.targetChecksum
+                : 'invalid',
+            serviceCount: images.length,
+            postCheckCount: postChecks.length,
+            gapCodes: normalizedGapCodes,
+            ...(manifest ? { manifest: manifest } : {}),
+        };
+    }
+}
+exports.DyFM_AtomicRollbackManifest_Util = DyFM_AtomicRollbackManifest_Util;
+//# sourceMappingURL=atomic-rollback-manifest.util.js.map

package/build/_modules/deployment/_collections/atomic-rollback-manifest.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-rollback-manifest.util.js","sourceRoot":"","sources":["../../../../src/_modules/deployment/_collections/atomic-rollback-manifest.util.ts"],"names":[],"mappings":";;;;AAAA,4DAAsC;AAYtC,MAAM,sBAAsB,GAAW;IACrC,WAAW;IACX,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,MAAM,uBAAuB,GAAW,wBAAwB,CAAC;AACjE,MAAM,2BAA2B,GAAW,qDAAqD,CAAC;AAClG,MAAM,mBAAmB,GAAW,4DAA4D,CAAC;AACjG,MAAM,uBAAuB,GAAW,gDAAgD,CAAC;AACzF,MAAM,oBAAoB,GAAW,iBAAiB,CAAC;AACvD,MAAM,kBAAkB,GAAW,iBAAiB,CAAC;AACrD,MAAM,kBAAkB,GAAW,wBAAwB,CAAC;AAC5D,MAAM,qBAAqB,GAAW,0BAA0B,CAAC;AACjE,MAAM,kBAAkB,GAAW,+BAA+B,CAAC;AACnE,MAAM,mBAAmB,GAAW,oCAAoC,CAAC;AACzE,MAAM,yBAAyB,GAAW,6CAA6C,CAAC;AACxF,MAAM,oBAAoB,GAAW,6CAA6C,CAAC;AACnF,MAAM,0BAA0B,GAC9B,iHAAiH,CAAC;AAEpH,iEAAiE;AACjE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,qEAAqE;AACrE,SAAS,iBAAiB,CAAC,KAA8B,EAAE,QAAgB;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY,CAAC;AACpD,CAAC;AAED,mGAAmG;AACnG,SAAS,4BAA4B,CAAC,KAAa,EAAE,OAAe;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAErC,IACE,QAAQ,CAAC,QAAQ;eACd,QAAQ,CAAC,QAAQ;eACjB,QAAQ,CAAC,MAAM;eACf,QAAQ,CAAC,IAAI;eACb,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC,QAAQ,KAAK,OAAO;eAC/B,CAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,mBAAmB,CAC1B,KAAc,EACd,QAAkB;IAElB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAE7D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,QAAQ,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAClE,CAAC;IAED,IACE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;WAClC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;WACpC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,EAC9F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,8DAA8D;AAC9D,SAAS,uBAAuB,CAC9B,KAAc,EACd,QAAkB;IAElB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAEjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACtE,CAAC;IAED,IACE,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ;WAC3C,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAC9D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/F,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC7E,CAAC;IAED,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;WAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;WAChC,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ;WAC9C,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;WACxC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC,EAClG,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,KAAc,EAAE,QAAkB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAEnE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAyC,EAAE,CAAC;IAExD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAuB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,OAAO,GAAuB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,kBAAkB,GAAuB,OAAO,SAAS,CAAC,kBAAkB,KAAK,QAAQ;YAC7F,CAAC,CAAC,SAAS,CAAC,kBAAkB;YAC9B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,gBAAgB,GAAuB,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ;YACzF,CAAC,CAAC,SAAS,CAAC,gBAAgB;YAC5B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAuB,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAEvG,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,6CAA6C,OAAO,EAAE,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QAED,IACE,CAAC,kBAAkB;eAChB,kBAAkB,CAAC,MAAM,GAAG,GAAG;eAC/B,CAAC,0BAA0B,CAAC,IAAI,CAAC,kBAAkB,CAAC;eACpD,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC,EACjE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,yDAAyD,OAAO,EAAE,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QAED,IACE,CAAC,gBAAgB;eACd,gBAAgB,CAAC,MAAM,GAAG,GAAG;eAC7B,CAAC,0BAA0B,CAAC,IAAI,CAAC,gBAAgB,CAAC;eAClD,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,OAAO,UAAU,CAAC,EACpD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,uDAAuD,OAAO,EAAE,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QAED,IACE,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC5D,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAChE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,iDAAiD,OAAO,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;YAChB,kBAAkB,EAAE,kBAAkB;YACtC,gBAAgB,EAAE,gBAAgB;YAClC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAa,MAAM,CAAC,GAAG,CAAC,CAAC,KAAyC,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE5G,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAAc,EAAE,QAAkB;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAExE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,UAAU,GAA6C,EAAE,CAAC;IAEhE,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACxF,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAuB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,OAAO,GAAuB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,QAAQ,GAAuB,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,MAAM,qBAAqB,GAAuB,OAAO,SAAS,CAAC,qBAAqB,KAAK,QAAQ;YACnG,CAAC,CAAC,SAAS,CAAC,qBAAqB;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,4BAA4B,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,mDAAmD,OAAO,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,IAAI,CAAC,qBAAqB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC,mDAAmD,OAAO,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,QAAQ;YAClB,qBAAqB,EAAE,qBAAqB;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAA6C,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAClG,UAAU,CAAC,MAAM,EACrB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,uGAAuG;AACvG,SAAS,oBAAoB,CAAC,QAA+C;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE;YACT,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW;YAC3C,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;SAC1C;QACD,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,aAAa,EAAE;YACb,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ;YACzC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM;YACrC,oBAAoB,EAAE,QAAQ,CAAC,aAAa,CAAC,oBAAoB;YACjE,cAAc,EAAE,QAAQ,CAAC,aAAa,CAAC,cAAc;SACtD;QACD,MAAM,EAAE,CAAE,GAAG,QAAQ,CAAC,MAAM,CAAE,CAAC,IAAI,CACjC,CAAC,IAAwC,EAAE,KAAyC,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO;aAC1G,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC,GAAG,CAAC,CAAC,KAAyC,EAAsC,EAAE,CAAC,CAAC;YACxF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,UAAU,EAAE,CAAE,GAAG,QAAQ,CAAC,UAAU,CAAE,CAAC,IAAI,CACzC,CAAC,IAA4C,EAAE,KAA6C,EAAU,EAAE,CAAC,IAAI;aAC1G,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CACxC,CAAC,GAAG,CAAC,CAAC,KAA6C,EAA0C,EAAE,CAAC,CAAC;YAChG,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;SACnD,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAa,gCAAgC;IAC3C,6EAA6E;IACtE,MAAM,CAAC,qBAAqB,CAAC,QAA+C;QACjF,OAAO,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED,yEAAyE;IAClE,MAAM,CAAC,QAAQ,CAAC,KAAc;QACnC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC/E,OAAO;gBACL,eAAe,EAAE,wCAAwC;gBACzD,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,SAAS;gBACzB,YAAY,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC;gBACjB,QAAQ,EAAE,CAAE,4CAA4C,CAAE;aAC3D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,KAAK,CAAC,eAAe,KAAK,gCAAgC,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5F,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACjG,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,GAAuD,mBAAmB,CACvF,KAAK,CAAC,SAAS,EACf,QAAQ,CACT,CAAC;QACF,MAAM,aAAa,GAA2D,uBAAuB,CACnG,KAAK,CAAC,aAAa,EACnB,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAyC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9F,MAAM,UAAU,GAA6C,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9G,MAAM,aAAa,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CACnD,CAAC,KAAyC,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CACrE,CAAC,CAAC;QAEH,IACE,UAAU,CAAC,IAAI,CACb,CAAC,KAA6C,EAAW,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAC9F,EACD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/F,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAA2D,CAAC;QAEhE,IACE,CAAC,QAAQ,CAAC,MAAM;eACb,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;eACrC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;eACrC,SAAS;eACT,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;eACxC,aAAa;eACb,MAAM,CAAC,MAAM,GAAG,CAAC;eACjB,UAAU,CAAC,MAAM,GAAG,CAAC;eACrB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAC3C,CAAC;YACD,QAAQ,GAAG;gBACT,eAAe,EAAE,gCAAgC;gBACjD,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,SAAS;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,aAAa,EAAE,aAAa;gBAC5B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,UAAU;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;YAEF,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;gBAClE,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBAC9D,QAAQ,GAAG,SAAS,CAAC;YACvB,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAa,CAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAErE,OAAO;YACL,eAAe,EAAE,wCAAwC;YACzD,KAAK,EAAE,CAAC,kBAAkB,CAAC,MAAM;YACjC,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAClF,WAAW,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC9E,CAAC,CAAC,KAAK,CAAC,WAAW;gBACnB,CAAC,CAAC,SAAS;YACb,cAAc,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;gBACpF,CAAC,CAAC,KAAK,CAAC,cAAc;gBACtB,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,QAAQ,EAAE,kBAAkB;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;CACF;AAjHD,4EAiHC"}

package/build/_modules/deployment/_models/atomic-rollback-manifest.interface.d.ts

@@ -0,0 +1,54 @@
+/** Deployment environments accepted by the shared atomic rollback contract. */
+export type DyFM_AtomicRollbackEnvironment_Type = 'test' | 'production';
+/** Content-free authority reference supplied by the deployment control plane. */
+export interface DyFM_AtomicRollbackAuthority_Interface {
+    principalId: string;
+    evidenceId: string;
+}
+/** Exact version-controlled configuration and database compatibility target. */
+export interface DyFM_AtomicRollbackConfiguration_Interface {
+    revision: string;
+    sha256: string;
+    compatibilityVersion: string;
+    policyChecksum: string;
+}
+/** One immutable image target and its mutable release promotion destination. */
+export interface DyFM_AtomicRollbackImage_Interface {
+    service: string;
+    version: string;
+    immutableReference: string;
+    mutableReference: string;
+    digest: string;
+}
+/** One bounded post-deployment probe tied to a service in the image set. */
+export interface DyFM_AtomicRollbackPostCheck_Interface {
+    checkId: string;
+    service: string;
+    endpoint: string;
+    expectedProbeContract: string;
+}
+/** Complete versioned target for an atomic multi-service rollout or rollback. */
+export interface DyFM_AtomicRollbackManifest_Interface {
+    contractVersion: 'fdp-atomic-rollback-manifest/1';
+    operationId: string;
+    environment: DyFM_AtomicRollbackEnvironment_Type;
+    authority: DyFM_AtomicRollbackAuthority_Interface;
+    sourceRevision: string;
+    configuration: DyFM_AtomicRollbackConfiguration_Interface;
+    images: DyFM_AtomicRollbackImage_Interface[];
+    postChecks: DyFM_AtomicRollbackPostCheck_Interface[];
+    targetChecksum: string;
+}
+/** Bounded content-free validation evidence for an unknown manifest value. */
+export interface DyFM_AtomicRollbackLocalValidation_Interface {
+    contractVersion: 'fdp-atomic-rollback-local-validation/1';
+    valid: boolean;
+    environment: DyFM_AtomicRollbackEnvironment_Type | 'invalid';
+    operationId: string | 'invalid';
+    targetChecksum: string | 'invalid';
+    serviceCount: number;
+    postCheckCount: number;
+    gapCodes: string[];
+    manifest?: DyFM_AtomicRollbackManifest_Interface;
+}
+//# sourceMappingURL=atomic-rollback-manifest.interface.d.ts.map

package/build/_modules/deployment/_models/atomic-rollback-manifest.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-rollback-manifest.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/deployment/_models/atomic-rollback-manifest.interface.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,MAAM,mCAAmC,GAAG,MAAM,GAAG,YAAY,CAAC;AAExE,iFAAiF;AACjF,MAAM,WAAW,sCAAsC;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,WAAW,0CAA0C;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,kCAAkC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,sCAAsC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,iFAAiF;AACjF,MAAM,WAAW,qCAAqC;IACpD,eAAe,EAAE,gCAAgC,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mCAAmC,CAAC;IACjD,SAAS,EAAE,sCAAsC,CAAC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,0CAA0C,CAAC;IAC1D,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAC7C,UAAU,EAAE,sCAAsC,EAAE,CAAC;IACrD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,8EAA8E;AAC9E,MAAM,WAAW,4CAA4C;IAC3D,eAAe,EAAE,wCAAwC,CAAC;IAC1D,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,mCAAmC,GAAG,SAAS,CAAC;IAC7D,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,qCAAqC,CAAC;CAClD"}

package/build/_modules/deployment/_models/atomic-rollback-manifest.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=atomic-rollback-manifest.interface.js.map

package/build/_modules/deployment/_models/atomic-rollback-manifest.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-rollback-manifest.interface.js","sourceRoot":"","sources":["../../../../src/_modules/deployment/_models/atomic-rollback-manifest.interface.ts"],"names":[],"mappings":""}