@gate-forge/core 0.12.0 → 0.13.0

package/dist/baselines/adoption.d.ts

@@ -1,4 +1,4 @@
-import { type AdoptionRecord } from '../schemas/adoption.js';
+import { type AdoptionFamily, type AdoptionRecord } from '../schemas/adoption.js';
 /** The adoption record's fixed file name, beside the baseline document. */
 export declare const ADOPTION_RECORD_FILENAME = "adoption.json";
 /**
@@ -21,12 +21,21 @@ export declare function loadAdoptionRecord(path: string): AdoptionRecord | null;
  * needed. Serialized sorted 2-space JSON with a trailing newline
  * (reviewable in diffs, like the baseline document).
  *
+ * The receipt is the ONE sanction record a repository cannot regenerate,
+ * so the write is validated BEFORE any filesystem mutation and then
+ * ATOMIC: the serialized bytes go to a same-directory temporary file and
+ * `rename` over the destination. A crash or a failed write can never
+ * leave the receipt truncated or half-written — the previous receipt
+ * stays intact and in force, and the temporary file is removed on any
+ * failure (cleanup errors never mask the write error).
+ *
  * Args:
  *   path: destination file path.
- *   record: the validated adoption record.
+ *   record: the adoption record to persist.
  *
  * Throws:
- *   GateforgeBaselineError: when the file cannot be written.
+ *   GateforgeBaselineError: when the record fails validation or the file
+ *   cannot be written (the previous receipt, if any, is untouched).
  */
 export declare function writeAdoptionRecord(path: string, record: AdoptionRecord): void;
 /**
@@ -73,4 +82,62 @@ export declare function adoptClassificationBlocked(resourceIds: readonly string[
  *   non-strict-subset update (naming the added ids).
  */
 export declare function shrinkClassificationBlocked(current: AdoptionRecord, resourceIds: readonly string[]): AdoptionRecord;
+/**
+ * Builds one family's permanent marker (0.13): the named, dated,
+ * commit-referenced slice a post-adoption migration records in the
+ * EXISTING receipt. `fingerprintsById` must already contain EVERY
+ * initial family obligation id — proven obligations included — keyed by
+ * obligation id with its pin-#2 fingerprint; `forgiven` names the
+ * sanctioned subset (only what was missing/unproven). Input order is
+ * irrelevant: the marker is normalized to sorted keys and a sorted,
+ * duplicate-free `forgiven` list, so the receipt bytes are deterministic
+ * (and with them the trusted-policy digest that binds the marker).
+ *
+ * Args:
+ *   input.adoptedAt: the family adoption instant (run's injected clock).
+ *   input.gitSha: HEAD sha of the adopting commit, or null outside git.
+ *   input.fingerprintsById: every initial family obligation id → fingerprint.
+ *   input.forgiven: the sanctioned (missing/unproven) subset to forgive.
+ *
+ * Returns:
+ *   AdoptionFamily: the validated marker for the receipt's `families` map.
+ *
+ * Throws:
+ *   GateforgeBaselineError: when a forgiven fingerprint is not one of the
+ *   recorded ones, a fingerprint is malformed, or an id is empty (fail
+ *   closed — a marker that forgives beyond its own record is never built).
+ */
+export declare function adoptFamily(input: {
+    adoptedAt: string;
+    gitSha: string | null;
+    fingerprintsById: Record<string, string>;
+    forgiven: readonly string[];
+}): AdoptionFamily;
+/**
+ * A family's ONLY mutation after adoption (the shrink path, mirroring
+ * `updateBaseline`'s GF-07/08 semantics and the classification set's):
+ * replaces the named family's `forgiven` list with the given
+ * fingerprints, which must be a STRICT SUBSET of the current ones —
+ * every fingerprint kept must exist today AND at least one must be
+ * removed. The marker itself is retained untouched (adoptedAt, gitSha,
+ * every recorded fingerprint), so a repeat migration can never re-arm
+ * and a resolved debt can never re-enter: the sanctioned set can only
+ * shrink.
+ *
+ * Args:
+ *   current: the adopted record on disk.
+ *   name: the family to shrink (only `pages` exists today).
+ *   fingerprints: the fingerprints to KEEP (duplicates are an error, as
+ *     in `updateBaseline`; an empty list keeps none).
+ *
+ * Returns:
+ *   AdoptionRecord: the next record — identical to `current` except for
+ *   the named family's shrunk `forgiven` list.
+ *
+ * Throws:
+ *   GateforgeBaselineError: when the record carries no such family
+ *   marker, on duplicate input, on schema-invalid fingerprints, or on a
+ *   non-strict-subset update (naming the unknown or added fingerprints).
+ */
+export declare function shrinkFamilyForgiven(current: AdoptionRecord, name: string, fingerprints: readonly string[]): AdoptionRecord;
 //# sourceMappingURL=adoption.d.ts.map

package/dist/baselines/adoption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adoption.d.ts","sourceRoot":"","sources":["../../src/baselines/adoption.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAEhC,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,kBAAkB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAkBtE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAS9E;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,cAAc,CA8BhB"}
+{"version":3,"file":"adoption.d.ts","sourceRoot":"","sources":["../../src/baselines/adoption.ts"],"names":[],"mappings":"AAgBA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAEhC,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,kBAAkB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAkBtE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAwB9E;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,cAAc,CA8BhB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,GAAG,cAAc,CA4BjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,cAAc,CAmChB"}

package/dist/baselines/adoption.js

@@ -10,11 +10,11 @@
  * schema-violating record throws — the gate must never guess whether an
  * unreadable adoption record does or does not sanction the baseline.
  */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { compareStrings } from '../graph/util.js';
 import { GateforgeBaselineError } from './index.js';
-import { AdoptionRecordSchema, ClassificationBlockedIdsSchema, } from '../schemas/adoption.js';
+import { AdoptionFamilySchema, AdoptionRecordSchema, ClassificationBlockedIdsSchema, } from '../schemas/adoption.js';
 /** The adoption record's fixed file name, beside the baseline document. */
 export const ADOPTION_RECORD_FILENAME = 'adoption.json';
 /**
@@ -55,19 +55,43 @@ export function loadAdoptionRecord(path) {
  * needed. Serialized sorted 2-space JSON with a trailing newline
  * (reviewable in diffs, like the baseline document).
  *
+ * The receipt is the ONE sanction record a repository cannot regenerate,
+ * so the write is validated BEFORE any filesystem mutation and then
+ * ATOMIC: the serialized bytes go to a same-directory temporary file and
+ * `rename` over the destination. A crash or a failed write can never
+ * leave the receipt truncated or half-written — the previous receipt
+ * stays intact and in force, and the temporary file is removed on any
+ * failure (cleanup errors never mask the write error).
+ *
  * Args:
  *   path: destination file path.
- *   record: the validated adoption record.
+ *   record: the adoption record to persist.
  *
  * Throws:
- *   GateforgeBaselineError: when the file cannot be written.
+ *   GateforgeBaselineError: when the record fails validation or the file
+ *   cannot be written (the previous receipt, if any, is untouched).
  */
 export function writeAdoptionRecord(path, record) {
+    let serialized;
+    try {
+        serialized = `${JSON.stringify(AdoptionRecordSchema.parse(record), null, 2)}\n`;
+    }
+    catch (error) {
+        throw new GateforgeBaselineError(`adoption record '${path}' failed validation before write: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const temporary = `${path}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
     try {
         mkdirSync(dirname(path), { recursive: true });
-        writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, 'utf8');
+        writeFileSync(temporary, serialized, 'utf8');
+        renameSync(temporary, path);
     }
     catch (error) {
+        try {
+            rmSync(temporary, { force: true });
+        }
+        catch {
+            // A failed cleanup must never mask the write failure itself.
+        }
         throw new GateforgeBaselineError(`adoption record '${path}' could not be written: ${error instanceof Error ? error.message : String(error)}`);
     }
 }
@@ -160,4 +184,119 @@ export function shrinkClassificationBlocked(current, resourceIds) {
         : { ...current, classificationBlocked: [] };
     return AdoptionRecordSchema.parse(next);
 }
+/**
+ * Builds one family's permanent marker (0.13): the named, dated,
+ * commit-referenced slice a post-adoption migration records in the
+ * EXISTING receipt. `fingerprintsById` must already contain EVERY
+ * initial family obligation id — proven obligations included — keyed by
+ * obligation id with its pin-#2 fingerprint; `forgiven` names the
+ * sanctioned subset (only what was missing/unproven). Input order is
+ * irrelevant: the marker is normalized to sorted keys and a sorted,
+ * duplicate-free `forgiven` list, so the receipt bytes are deterministic
+ * (and with them the trusted-policy digest that binds the marker).
+ *
+ * Args:
+ *   input.adoptedAt: the family adoption instant (run's injected clock).
+ *   input.gitSha: HEAD sha of the adopting commit, or null outside git.
+ *   input.fingerprintsById: every initial family obligation id → fingerprint.
+ *   input.forgiven: the sanctioned (missing/unproven) subset to forgive.
+ *
+ * Returns:
+ *   AdoptionFamily: the validated marker for the receipt's `families` map.
+ *
+ * Throws:
+ *   GateforgeBaselineError: when a forgiven fingerprint is not one of the
+ *   recorded ones, a fingerprint is malformed, or an id is empty (fail
+ *   closed — a marker that forgives beyond its own record is never built).
+ */
+export function adoptFamily(input) {
+    const seen = {};
+    const unique = [];
+    for (const fingerprint of input.forgiven) {
+        if (fingerprint in seen)
+            continue;
+        seen[fingerprint] = true;
+        unique.push(fingerprint);
+    }
+    unique.sort(compareStrings);
+    const recorded = {};
+    for (const id of Object.keys(input.fingerprintsById).sort(compareStrings)) {
+        recorded[id] = input.fingerprintsById[id];
+    }
+    const candidate = {
+        schemaVersion: 1,
+        adoptedAt: input.adoptedAt,
+        gitSha: input.gitSha,
+        fingerprintsById: recorded,
+        forgiven: unique,
+    };
+    const result = AdoptionFamilySchema.safeParse(candidate);
+    if (!result.success) {
+        const issues = result.error.issues
+            .map((issue) => `${issue.path.join('.') || '<family>'}: ${issue.message}`)
+            .join('; ');
+        throw new GateforgeBaselineError(`adoption family marker failed validation: ${issues}`);
+    }
+    return result.data;
+}
+/**
+ * A family's ONLY mutation after adoption (the shrink path, mirroring
+ * `updateBaseline`'s GF-07/08 semantics and the classification set's):
+ * replaces the named family's `forgiven` list with the given
+ * fingerprints, which must be a STRICT SUBSET of the current ones —
+ * every fingerprint kept must exist today AND at least one must be
+ * removed. The marker itself is retained untouched (adoptedAt, gitSha,
+ * every recorded fingerprint), so a repeat migration can never re-arm
+ * and a resolved debt can never re-enter: the sanctioned set can only
+ * shrink.
+ *
+ * Args:
+ *   current: the adopted record on disk.
+ *   name: the family to shrink (only `pages` exists today).
+ *   fingerprints: the fingerprints to KEEP (duplicates are an error, as
+ *     in `updateBaseline`; an empty list keeps none).
+ *
+ * Returns:
+ *   AdoptionRecord: the next record — identical to `current` except for
+ *   the named family's shrunk `forgiven` list.
+ *
+ * Throws:
+ *   GateforgeBaselineError: when the record carries no such family
+ *   marker, on duplicate input, on schema-invalid fingerprints, or on a
+ *   non-strict-subset update (naming the unknown or added fingerprints).
+ */
+export function shrinkFamilyForgiven(current, name, fingerprints) {
+    const family = current.families?.[name];
+    if (family === undefined) {
+        throw new GateforgeBaselineError(`family shrink rejected: the adoption record carries no '${name}' family marker ` +
+            '(the family is adopted exactly once, by `gateforge adopt --family <name> --confirm`) — ' +
+            'there is nothing to shrink');
+    }
+    const seen = {};
+    const unique = [];
+    for (const fingerprint of fingerprints) {
+        if (fingerprint in seen)
+            continue;
+        seen[fingerprint] = true;
+        unique.push(fingerprint);
+    }
+    if (unique.length !== fingerprints.length) {
+        throw new GateforgeBaselineError(`family '${name}' shrink input contains duplicate fingerprints`);
+    }
+    const known = {};
+    for (const fingerprint of family.forgiven)
+        known[fingerprint] = true;
+    const unknown = unique.filter((fingerprint) => !(fingerprint in known));
+    if (unique.length >= family.forgiven.length || unknown.length > 0) {
+        throw new GateforgeBaselineError(`family '${name}' shrink rejected: not a strict subset of the forgiven set ` +
+            '(the family set is shrink-only) — unknown or added fingerprint(s): ' +
+            `${(unknown.length > 0 ? unknown : unique).join(', ') || '<none>'}`);
+    }
+    const families = {};
+    for (const key of Object.keys(current.families ?? {}).sort(compareStrings)) {
+        families[key] = key === name ? { ...family, forgiven: unique.sort(compareStrings) } : current.families[key];
+    }
+    const next = { ...current, families };
+    return AdoptionRecordSchema.parse(next);
+}
 //# sourceMappingURL=adoption.js.map

package/dist/baselines/adoption.js.map

@@ -1 +1 @@
-{"version":3,"file":"adoption.js","sourceRoot":"","sources":["../../src/baselines/adoption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,8BAA8B,GAE/B,MAAM,wBAAwB,CAAC;AAEhC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3E,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,IAAI,wBAAwB,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAsB;IACtE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAA8B;IACvE,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,yBAAyB,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACxF,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,sBAAsB,CAC9B,kDAAkD,MAAM,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAuB,EACvB,WAA8B;IAE9B,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,sBAAsB,CAC9B,yEAAyE;YACvE,4EAA4E;YAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE;QAClD,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;IAChD,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"adoption.js","sourceRoot":"","sources":["../../src/baselines/adoption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,GAG/B,MAAM,wBAAwB,CAAC;AAEhC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3E,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,IAAI,wBAAwB,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAsB;IACtE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtH,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,IAAI,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAA8B;IACvE,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,yBAAyB,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACxF,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,sBAAsB,CAC9B,kDAAkD,MAAM,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAuB,EACvB,WAA8B;IAE9B,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,IAAI,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACvD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,sBAAsB,CAC9B,yEAAyE;YACvE,4EAA4E;YAC5E,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE;QAClD,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;IAChD,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,WAAW,CAAC,KAK3B;IACC,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,WAAW,IAAI,IAAI;YAAE,SAAS;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1E,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAE,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG;QAChB,aAAa,EAAE,CAAU;QACzB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,QAAQ;QAC1B,QAAQ,EAAE,MAAM;KACjB,CAAC;IACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACzE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,sBAAsB,CAAC,6CAA6C,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,IAAY,EACZ,YAA+B;IAE/B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAsB,CAC9B,2DAA2D,IAAI,kBAAkB;YAC/E,yFAAyF;YACzF,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,WAAW,IAAI,IAAI;YAAE,SAAS;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,sBAAsB,CAAC,WAAW,IAAI,gDAAgD,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,sBAAsB,CAC9B,WAAW,IAAI,6DAA6D;YAC1E,qEAAqE;YACrE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3E,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAS,CAAC,GAAG,CAAE,CAAC;IAChH,CAAC;IACD,MAAM,IAAI,GAAmB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtD,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/classifier/classify.d.ts

@@ -127,6 +127,7 @@ export declare const RULES: {
     readonly exposurePositive: "EXPOSURE_POSITIVE_SIGNAL";
     readonly exposureInternalCertificate: "EXPOSURE_INTERNAL_CERTIFICATE";
     readonly exposureDefault: "EXPOSURE_DEFAULT_USER_FACING";
+    readonly exposurePageAudience: "EXPOSURE_PAGE_AUDIENCE";
     readonly exposureOperationalProbe: "EXPOSURE_OPERATIONAL_PROBE";
     readonly lifecyclePositive: "LIFECYCLE_POSITIVE_SIGNAL";
     readonly lifecycleDeclaredSupported: "LIFECYCLE_DECLARED_SUPPORTED";
@@ -138,6 +139,8 @@ export declare const RULES: {
     readonly deleteOwnerRule: "DELETE_SEMANTICS_OWNER_RULE";
     readonly planeEvidence: "PLANE_DETECTOR_EVIDENCE";
     readonly lifecycleEndpointHttp: "LIFECYCLE_ENDPOINT_HTTP";
+    readonly lifecyclePageObservation: "LIFECYCLE_PAGE_OBSERVATION";
+    readonly identityPageRoute: "IDENTITY_PAGE_ROUTE";
     readonly identityEvidence: "IDENTITY_DETECTOR_EVIDENCE";
     readonly adapterNameMatch: "ADAPTER_NAME_MATCH";
     readonly orgInternalRule: "ORGANIZATION_INTERNAL_RULE";

package/dist/classifier/classify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/classifier/classify.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAwB,KAAK,cAAc,EAAkB,MAAM,8BAA8B,CAAC;AAKzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAY,KAAK,oBAAoB,EAAwB,MAAM,qCAAqC,CAAC;AAChH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,2BAA2B,EAEjC,MAAM,aAAa,CAAC;AAIrB,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,2BAA2B;IAC3B,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;yDACqD;IACrD,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC;IACzD,0EAA0E;IAC1E,UAAU,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CAC3C;AACD,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC;;;;;;OAMG;IACH,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,2EAA2E;IAC3E,MAAM,EAAE,gBAAgB,CAAC;IACzB,oDAAoD;IACpD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uFAAuF;IACvF,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,mFAAmF;IACnF,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;;;;OAOG;IACH,cAAc,EAAE,CAAC,cAAc,GAAG,2BAA2B,CAAC,GAAG,IAAI,CAAC;IACtE,oEAAoE;IACpE,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,sBAAsB,EAAE,CAAC;IACpC,gEAAgE;IAChE,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,yEAAyE;IACzE,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC;;;;;OAKG;IACH,uBAAuB,EAAE,eAAe,EAAE,CAAC;CAC5C;AAED,iEAAiE;AACjE,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;CAkBR,CAAC;AAkiBX;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,oBAAoB,CA6IrF"}
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/classifier/classify.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAwB,KAAK,cAAc,EAAkB,MAAM,8BAA8B,CAAC;AAKzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAY,KAAK,oBAAoB,EAAwB,MAAM,qCAAqC,CAAC;AAChH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,2BAA2B,EAEjC,MAAM,aAAa,CAAC;AAMrB,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,2BAA2B;IAC3B,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;yDACqD;IACrD,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC;IACzD,0EAA0E;IAC1E,UAAU,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CAC3C;AACD,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC;;;;;;OAMG;IACH,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,2EAA2E;IAC3E,MAAM,EAAE,gBAAgB,CAAC;IACzB,oDAAoD;IACpD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uFAAuF;IACvF,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,mFAAmF;IACnF,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;;;;OAOG;IACH,cAAc,EAAE,CAAC,cAAc,GAAG,2BAA2B,CAAC,GAAG,IAAI,CAAC;IACtE,oEAAoE;IACpE,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,sBAAsB,EAAE,CAAC;IACpC,gEAAgE;IAChE,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,yEAAyE;IACzE,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC;;;;;OAKG;IACH,uBAAuB,EAAE,eAAe,EAAE,CAAC;CAC5C;AAED,iEAAiE;AACjE,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;CAqBR,CAAC;AAkiBX;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,oBAAoB,CA6IrF"}

package/dist/classifier/classify.js

@@ -23,11 +23,13 @@ import { signalId } from '../schemas/classification-signal.js';
 import { BLOCK_DIMENSIONS, } from './schema.js';
 import { globMatch } from './glob.js';
 import { HTTP_ENDPOINT_RESOURCE_KIND } from '../graph/schema.js';
+const UI_PAGE_RESOURCE_KIND = 'ui.page';
 /** Stable rule ids rendered in decision traces (ADR 0003 D2). */
 export const RULES = {
     exposurePositive: 'EXPOSURE_POSITIVE_SIGNAL',
     exposureInternalCertificate: 'EXPOSURE_INTERNAL_CERTIFICATE',
     exposureDefault: 'EXPOSURE_DEFAULT_USER_FACING',
+    exposurePageAudience: 'EXPOSURE_PAGE_AUDIENCE',
     exposureOperationalProbe: 'EXPOSURE_OPERATIONAL_PROBE',
     lifecyclePositive: 'LIFECYCLE_POSITIVE_SIGNAL',
     lifecycleDeclaredSupported: 'LIFECYCLE_DECLARED_SUPPORTED',
@@ -39,6 +41,8 @@ export const RULES = {
     deleteOwnerRule: 'DELETE_SEMANTICS_OWNER_RULE',
     planeEvidence: 'PLANE_DETECTOR_EVIDENCE',
     lifecycleEndpointHttp: 'LIFECYCLE_ENDPOINT_HTTP',
+    lifecyclePageObservation: 'LIFECYCLE_PAGE_OBSERVATION',
+    identityPageRoute: 'IDENTITY_PAGE_ROUTE',
     identityEvidence: 'IDENTITY_DETECTOR_EVIDENCE',
     adapterNameMatch: 'ADAPTER_NAME_MATCH',
     orgInternalRule: 'ORGANIZATION_INTERNAL_RULE',
@@ -816,6 +820,12 @@ function classifyOne(resource, pool, ctx) {
     // -- Plane ----------------------------------------------------------------
     const planeCandidates = new Set();
     const attributePlane = resource.attributes['plane'];
+    if (resource.kind === UI_PAGE_RESOURCE_KIND &&
+        (typeof resource.attributes['audience'] !== 'string' ||
+            resource.attributes['audience'] === '' ||
+            resource.attributes['audience'] === 'unknown')) {
+        return blocked(resource, [planeUnresolvedBlock(resource, 'page audience is unresolved by pages.audiences')]);
+    }
     if (attributePlane === 'tenant' || attributePlane === 'master' || attributePlane === 'global') {
         planeCandidates.add(attributePlane);
     }
@@ -869,7 +879,11 @@ function classifyOne(resource, pool, ctx) {
         identityKeys.add(joinKeys(signal.assertion));
     }
     let primaryKey;
-    if (identityKeys.size === 1) {
+    if (resource.kind === UI_PAGE_RESOURCE_KIND) {
+        primaryKey = ['path'];
+        rules.push(RULES.identityPageRoute);
+    }
+    else if (identityKeys.size === 1) {
         const only = [...identityKeys][0];
         primaryKey = splitKeys(only);
         rules.push(RULES.identityEvidence);
@@ -910,7 +924,11 @@ function classifyOne(resource, pool, ctx) {
         (rule.match.resourceKind === undefined || rule.match.resourceKind === resource.kind));
     const hasInternalIntent = internalDeclarations.length > 0 || matchedInternalRules.length > 0;
     let exposure;
-    if (isOperationalEndpoint(resource)) {
+    if (resource.kind === UI_PAGE_RESOURCE_KIND) {
+        exposure = 'user-facing';
+        rules.push(RULES.exposurePageAudience);
+    }
+    else if (isOperationalEndpoint(resource)) {
         // Operational probes (plan §6 "Health/operations") resolve through an
         // engine-issued exposure lane, NOT the user-facing default and NOT an
         // internality certificate: the class itself is positive compiler
@@ -1060,7 +1078,14 @@ function classifyOne(resource, pool, ctx) {
     // contracts) have no honest meaning here and would only demand
     // delete-semantics evidence no route can carry.
     const lifecycle = { create: true, read: true, update: true, delete: true };
-    if (resource.kind === HTTP_ENDPOINT_RESOURCE_KIND) {
+    if (resource.kind === UI_PAGE_RESOURCE_KIND) {
+        lifecycle.create = false;
+        lifecycle.read = false;
+        lifecycle.update = false;
+        lifecycle.delete = false;
+        rules.push(RULES.lifecyclePageObservation);
+    }
+    else if (resource.kind === HTTP_ENDPOINT_RESOURCE_KIND) {
         // ADR 0004 D5/D8: HTTP endpoints carry no lifecycle lattice. Their
         // route semantics live in the compiled capabilities attribute, and
         // the policy engine never generates crud:*/persistence:* contracts
@@ -1286,20 +1311,12 @@ function classifyOne(resource, pool, ctx) {
         }
     }
     // -- Adapter binding -------------------------------------------------------
-    // The reviewed EntityAdapter demand is a BUSINESS-resource requirement,
-    // not a universal one (dogfood: 473/746 ADAPTER_MISSING blocks on pure
-    // endpoints). An `http.endpoint` resource is witnessed through the
-    // claims/witness-proxy lane (`http:frontend-request-observed` etc.);
-    // EntityAdapter's contract — read by id, normalize a body, deletion
-    // kind — is about business-entity persistence and has no honest meaning
-    // for a route, so demanding one for every user-facing endpoint was a
-    // category error that red the gate on evidence no route can carry.
-    // Endpoints therefore classify user-facing WITHOUT an adapter (the
-    // claims lane, recorded as `evidenceLane: 'claims'` so the schema and
-    // every downstream consumer see WHY no adapter is present). The demand
-    // is unchanged for business kinds: a user-facing table without a
-    // reviewed adapter still blocks (ADAPTER_MISSING).
-    const businessResource = resource.kind !== HTTP_ENDPOINT_RESOURCE_KIND;
+    // Reviewed EntityAdapters are required only for persisted business
+    // resources. HTTP endpoints use the claims/witness-proxy lane; ui.page
+    // resources are witness-observed routes with no persistence state.
+    // Neither route kind has an honest EntityAdapter contract, while the
+    // adapter demand remains unchanged for business kinds.
+    const businessResource = resource.kind !== HTTP_ENDPOINT_RESOURCE_KIND && resource.kind !== UI_PAGE_RESOURCE_KIND;
     let evidenceAdapter;
     if (exposure === 'user-facing' && businessResource) {
         const bound = bindAdapter(ctx.adapters, resource, signals);
@@ -1325,7 +1342,11 @@ function classifyOne(resource, pool, ctx) {
         plane,
         lifecycle,
         primaryKey,
-        ...(exposure === 'user-facing' && !businessResource ? { evidenceLane: 'claims' } : {}),
+        ...(exposure === 'user-facing' && resource.kind === UI_PAGE_RESOURCE_KIND
+            ? { evidenceLane: 'page-observation' }
+            : exposure === 'user-facing' && !businessResource
+                ? { evidenceLane: 'claims' }
+                : {}),
         ...(evidenceAdapter !== undefined ? { evidenceAdapter } : {}),
     };
     const signalIds = [...new Set(contributing.map((s) => signalId(s)))].sort(compareStrings);