@jeger-ai/opengantry 3.2.5 → 3.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -3
- package/dist/cli/commands/deps.d.ts +18 -0
- package/dist/cli/commands/deps.d.ts.map +1 -0
- package/dist/cli/commands/deps.js +63 -0
- package/dist/cli/commands/deps.js.map +1 -0
- package/dist/cli/commands/doctor.d.ts +3 -6
- package/dist/cli/commands/doctor.d.ts.map +1 -1
- package/dist/cli/commands/doctor.js +8 -1
- package/dist/cli/commands/doctor.js.map +1 -1
- package/dist/cli/commands/events-push.d.ts +9 -0
- package/dist/cli/commands/events-push.d.ts.map +1 -0
- package/dist/cli/commands/events-push.js +84 -0
- package/dist/cli/commands/events-push.js.map +1 -0
- package/dist/cli/commands/interrogate.js +3 -3
- package/dist/cli/commands/interrogate.js.map +1 -1
- package/dist/cli/commands/ledger.d.ts +24 -0
- package/dist/cli/commands/ledger.d.ts.map +1 -0
- package/dist/cli/commands/ledger.js +88 -0
- package/dist/cli/commands/ledger.js.map +1 -0
- package/dist/cli/commands/mission.d.ts +6 -0
- package/dist/cli/commands/mission.d.ts.map +1 -1
- package/dist/cli/commands/mission.js +43 -3
- package/dist/cli/commands/mission.js.map +1 -1
- package/dist/cli/commands/perimeter.d.ts.map +1 -1
- package/dist/cli/commands/perimeter.js +4 -0
- package/dist/cli/commands/perimeter.js.map +1 -1
- package/dist/cli/commands/policy.d.ts +10 -0
- package/dist/cli/commands/policy.d.ts.map +1 -0
- package/dist/cli/commands/policy.js +49 -0
- package/dist/cli/commands/policy.js.map +1 -0
- package/dist/cli/commands/report.d.ts +8 -0
- package/dist/cli/commands/report.d.ts.map +1 -0
- package/dist/cli/commands/report.js +23 -0
- package/dist/cli/commands/report.js.map +1 -0
- package/dist/cli/commands/tmvc-guard.d.ts.map +1 -1
- package/dist/cli/commands/tmvc-guard.js +20 -0
- package/dist/cli/commands/tmvc-guard.js.map +1 -1
- package/dist/cli/commands/triage.d.ts.map +1 -1
- package/dist/cli/commands/triage.js +2 -1
- package/dist/cli/commands/triage.js.map +1 -1
- package/dist/cli/commands/verify.d.ts.map +1 -1
- package/dist/cli/commands/verify.js +30 -11
- package/dist/cli/commands/verify.js.map +1 -1
- package/dist/cli/kernel.d.ts +10 -3
- package/dist/cli/kernel.d.ts.map +1 -1
- package/dist/cli/kernel.js +18 -2
- package/dist/cli/kernel.js.map +1 -1
- package/dist/cli/lib/adapter-preflight-checks.d.ts +55 -0
- package/dist/cli/lib/adapter-preflight-checks.d.ts.map +1 -0
- package/dist/cli/lib/adapter-preflight-checks.js +275 -0
- package/dist/cli/lib/adapter-preflight-checks.js.map +1 -0
- package/dist/cli/lib/atomic-fs.d.ts +3 -0
- package/dist/cli/lib/atomic-fs.d.ts.map +1 -1
- package/dist/cli/lib/atomic-fs.js +39 -0
- package/dist/cli/lib/atomic-fs.js.map +1 -1
- package/dist/cli/lib/attest-mission.d.ts.map +1 -1
- package/dist/cli/lib/attest-mission.js +7 -0
- package/dist/cli/lib/attest-mission.js.map +1 -1
- package/dist/cli/lib/break-glass.d.ts +1 -1
- package/dist/cli/lib/break-glass.d.ts.map +1 -1
- package/dist/cli/lib/break-glass.js +6 -0
- package/dist/cli/lib/break-glass.js.map +1 -1
- package/dist/cli/lib/command-boundary.d.ts +7 -3
- package/dist/cli/lib/command-boundary.d.ts.map +1 -1
- package/dist/cli/lib/command-boundary.js +20 -4
- package/dist/cli/lib/command-boundary.js.map +1 -1
- package/dist/cli/lib/constants.d.ts +15 -0
- package/dist/cli/lib/constants.d.ts.map +1 -1
- package/dist/cli/lib/constants.js +15 -0
- package/dist/cli/lib/constants.js.map +1 -1
- package/dist/cli/lib/context-feed-remediation.d.ts +2 -2
- package/dist/cli/lib/context-feed-remediation.d.ts.map +1 -1
- package/dist/cli/lib/context-feed-remediation.js +28 -26
- package/dist/cli/lib/context-feed-remediation.js.map +1 -1
- package/dist/cli/lib/context-feed-store.d.ts +10 -2
- package/dist/cli/lib/context-feed-store.d.ts.map +1 -1
- package/dist/cli/lib/context-feed-store.js +8 -28
- package/dist/cli/lib/context-feed-store.js.map +1 -1
- package/dist/cli/lib/defensive-profile-presets.d.ts +6 -0
- package/dist/cli/lib/defensive-profile-presets.d.ts.map +1 -1
- package/dist/cli/lib/defensive-profile-presets.js +15 -1
- package/dist/cli/lib/defensive-profile-presets.js.map +1 -1
- package/dist/cli/lib/deps/deps-fetch.d.ts +4 -0
- package/dist/cli/lib/deps/deps-fetch.d.ts.map +1 -0
- package/dist/cli/lib/deps/deps-fetch.js +16 -0
- package/dist/cli/lib/deps/deps-fetch.js.map +1 -0
- package/dist/cli/lib/deps/deps-resolve.d.ts +18 -0
- package/dist/cli/lib/deps/deps-resolve.d.ts.map +1 -0
- package/dist/cli/lib/deps/deps-resolve.js +66 -0
- package/dist/cli/lib/deps/deps-resolve.js.map +1 -0
- package/dist/cli/lib/deps/deps-slug.d.ts +5 -0
- package/dist/cli/lib/deps/deps-slug.d.ts.map +1 -0
- package/dist/cli/lib/deps/deps-slug.js +44 -0
- package/dist/cli/lib/deps/deps-slug.js.map +1 -0
- package/dist/cli/lib/doctor-adapter-preflight.d.ts +24 -0
- package/dist/cli/lib/doctor-adapter-preflight.d.ts.map +1 -0
- package/dist/cli/lib/doctor-adapter-preflight.js +98 -0
- package/dist/cli/lib/doctor-adapter-preflight.js.map +1 -0
- package/dist/cli/lib/doctor-core.d.ts +7 -1
- package/dist/cli/lib/doctor-core.d.ts.map +1 -1
- package/dist/cli/lib/doctor-core.js +36 -5
- package/dist/cli/lib/doctor-core.js.map +1 -1
- package/dist/cli/lib/doctor-integration.d.ts +2 -0
- package/dist/cli/lib/doctor-integration.d.ts.map +1 -1
- package/dist/cli/lib/doctor-integration.js +4 -2
- package/dist/cli/lib/doctor-integration.js.map +1 -1
- package/dist/cli/lib/doctor-preflight/eslint.d.ts +4 -0
- package/dist/cli/lib/doctor-preflight/eslint.d.ts.map +1 -0
- package/dist/cli/lib/doctor-preflight/eslint.js +41 -0
- package/dist/cli/lib/doctor-preflight/eslint.js.map +1 -0
- package/dist/cli/lib/doctor-preflight/index.d.ts +3 -0
- package/dist/cli/lib/doctor-preflight/index.d.ts.map +1 -0
- package/dist/cli/lib/doctor-preflight/index.js +3 -0
- package/dist/cli/lib/doctor-preflight/index.js.map +1 -0
- package/dist/cli/lib/doctor-preflight/tsc.d.ts +4 -0
- package/dist/cli/lib/doctor-preflight/tsc.d.ts.map +1 -0
- package/dist/cli/lib/doctor-preflight/tsc.js +42 -0
- package/dist/cli/lib/doctor-preflight/tsc.js.map +1 -0
- package/dist/cli/lib/doctor-substrate.d.ts +2 -2
- package/dist/cli/lib/doctor-substrate.d.ts.map +1 -1
- package/dist/cli/lib/doctor-types.d.ts +4 -4
- package/dist/cli/lib/doctor-types.d.ts.map +1 -1
- package/dist/cli/lib/draft-token.d.ts +3 -0
- package/dist/cli/lib/draft-token.d.ts.map +1 -1
- package/dist/cli/lib/draft-token.js +7 -0
- package/dist/cli/lib/draft-token.js.map +1 -1
- package/dist/cli/lib/event-spool.d.ts +17 -0
- package/dist/cli/lib/event-spool.d.ts.map +1 -0
- package/dist/cli/lib/event-spool.js +57 -0
- package/dist/cli/lib/event-spool.js.map +1 -0
- package/dist/cli/lib/gate-adapters/adapter-findings.d.ts +41 -0
- package/dist/cli/lib/gate-adapters/adapter-findings.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/adapter-findings.js +99 -0
- package/dist/cli/lib/gate-adapters/adapter-findings.js.map +1 -0
- package/dist/cli/lib/gate-adapters/eslint-json-adapter.d.ts +14 -0
- package/dist/cli/lib/gate-adapters/eslint-json-adapter.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/eslint-json-adapter.js +63 -0
- package/dist/cli/lib/gate-adapters/eslint-json-adapter.js.map +1 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-id.d.ts +10 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-id.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-id.js +12 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-id.js.map +1 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-types.d.ts +17 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-types.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-types.js +2 -0
- package/dist/cli/lib/gate-adapters/gate-adapter-types.js.map +1 -0
- package/dist/cli/lib/gate-adapters/generic-spawn-adapter.d.ts +4 -0
- package/dist/cli/lib/gate-adapters/generic-spawn-adapter.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/generic-spawn-adapter.js +12 -0
- package/dist/cli/lib/gate-adapters/generic-spawn-adapter.js.map +1 -0
- package/dist/cli/lib/gate-adapters/parsing-adapter.d.ts +5 -0
- package/dist/cli/lib/gate-adapters/parsing-adapter.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/parsing-adapter.js +13 -0
- package/dist/cli/lib/gate-adapters/parsing-adapter.js.map +1 -0
- package/dist/cli/lib/gate-adapters/registry.d.ts +6 -0
- package/dist/cli/lib/gate-adapters/registry.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/registry.js +13 -0
- package/dist/cli/lib/gate-adapters/registry.js.map +1 -0
- package/dist/cli/lib/gate-adapters/spawn-stream-core.d.ts +36 -0
- package/dist/cli/lib/gate-adapters/spawn-stream-core.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/spawn-stream-core.js +99 -0
- package/dist/cli/lib/gate-adapters/spawn-stream-core.js.map +1 -0
- package/dist/cli/lib/gate-adapters/tsc-adapter.d.ts +16 -0
- package/dist/cli/lib/gate-adapters/tsc-adapter.d.ts.map +1 -0
- package/dist/cli/lib/gate-adapters/tsc-adapter.js +51 -0
- package/dist/cli/lib/gate-adapters/tsc-adapter.js.map +1 -0
- package/dist/cli/lib/gate-log-writer.d.ts +13 -0
- package/dist/cli/lib/gate-log-writer.d.ts.map +1 -0
- package/dist/cli/lib/gate-log-writer.js +64 -0
- package/dist/cli/lib/gate-log-writer.js.map +1 -0
- package/dist/cli/lib/gate.d.ts +2 -0
- package/dist/cli/lib/gate.d.ts.map +1 -1
- package/dist/cli/lib/gate.js +2 -2
- package/dist/cli/lib/gate.js.map +1 -1
- package/dist/cli/lib/git-metrics.d.ts +12 -0
- package/dist/cli/lib/git-metrics.d.ts.map +1 -1
- package/dist/cli/lib/git-metrics.js +34 -11
- package/dist/cli/lib/git-metrics.js.map +1 -1
- package/dist/cli/lib/git.d.ts +8 -2
- package/dist/cli/lib/git.d.ts.map +1 -1
- package/dist/cli/lib/git.js +14 -7
- package/dist/cli/lib/git.js.map +1 -1
- package/dist/cli/lib/gxt-config.d.ts +9 -0
- package/dist/cli/lib/gxt-config.d.ts.map +1 -1
- package/dist/cli/lib/gxt-config.js +16 -0
- package/dist/cli/lib/gxt-config.js.map +1 -1
- package/dist/cli/lib/gxt-error-codes.d.ts +13 -0
- package/dist/cli/lib/gxt-error-codes.d.ts.map +1 -1
- package/dist/cli/lib/gxt-error-codes.js +13 -0
- package/dist/cli/lib/gxt-error-codes.js.map +1 -1
- package/dist/cli/lib/ingest-wait.d.ts +21 -0
- package/dist/cli/lib/ingest-wait.d.ts.map +1 -0
- package/dist/cli/lib/ingest-wait.js +24 -0
- package/dist/cli/lib/ingest-wait.js.map +1 -0
- package/dist/cli/lib/init-tutorial.js +3 -4
- package/dist/cli/lib/init-tutorial.js.map +1 -1
- package/dist/cli/lib/kpi-scan.js +5 -1
- package/dist/cli/lib/kpi-scan.js.map +1 -1
- package/dist/cli/lib/ledger/ledger-append.d.ts +14 -0
- package/dist/cli/lib/ledger/ledger-append.d.ts.map +1 -0
- package/dist/cli/lib/ledger/ledger-append.js +63 -0
- package/dist/cli/lib/ledger/ledger-append.js.map +1 -0
- package/dist/cli/lib/ledger/ledger-chain.d.ts +24 -0
- package/dist/cli/lib/ledger/ledger-chain.d.ts.map +1 -0
- package/dist/cli/lib/ledger/ledger-chain.js +101 -0
- package/dist/cli/lib/ledger/ledger-chain.js.map +1 -0
- package/dist/cli/lib/ledger/ledger-entry.d.ts +79 -0
- package/dist/cli/lib/ledger/ledger-entry.d.ts.map +1 -0
- package/dist/cli/lib/ledger/ledger-entry.js +36 -0
- package/dist/cli/lib/ledger/ledger-entry.js.map +1 -0
- package/dist/cli/lib/ledger/ledger-export.d.ts +28 -0
- package/dist/cli/lib/ledger/ledger-export.d.ts.map +1 -0
- package/dist/cli/lib/ledger/ledger-export.js +36 -0
- package/dist/cli/lib/ledger/ledger-export.js.map +1 -0
- package/dist/cli/lib/legislate-gate-options.d.ts +3 -4
- package/dist/cli/lib/legislate-gate-options.d.ts.map +1 -1
- package/dist/cli/lib/legislate-gate-options.js +9 -4
- package/dist/cli/lib/legislate-gate-options.js.map +1 -1
- package/dist/cli/lib/legislate-policy-warn.d.ts +3 -0
- package/dist/cli/lib/legislate-policy-warn.d.ts.map +1 -0
- package/dist/cli/lib/legislate-policy-warn.js +17 -0
- package/dist/cli/lib/legislate-policy-warn.js.map +1 -0
- package/dist/cli/lib/legislate.d.ts +3 -1
- package/dist/cli/lib/legislate.d.ts.map +1 -1
- package/dist/cli/lib/legislate.js +14 -12
- package/dist/cli/lib/legislate.js.map +1 -1
- package/dist/cli/lib/mcp-doctor.d.ts +18 -0
- package/dist/cli/lib/mcp-doctor.d.ts.map +1 -0
- package/dist/cli/lib/mcp-doctor.js +35 -0
- package/dist/cli/lib/mcp-doctor.js.map +1 -0
- package/dist/cli/lib/mcp-draft-legislation.d.ts.map +1 -1
- package/dist/cli/lib/mcp-draft-legislation.js +12 -7
- package/dist/cli/lib/mcp-draft-legislation.js.map +1 -1
- package/dist/cli/lib/mcp-execute-legislation.d.ts.map +1 -1
- package/dist/cli/lib/mcp-execute-legislation.js +1 -0
- package/dist/cli/lib/mcp-execute-legislation.js.map +1 -1
- package/dist/cli/lib/mcp-governance-shared.d.ts +3 -1
- package/dist/cli/lib/mcp-governance-shared.d.ts.map +1 -1
- package/dist/cli/lib/mcp-governance-shared.js.map +1 -1
- package/dist/cli/lib/mcp-interrogate.js +3 -3
- package/dist/cli/lib/mcp-interrogate.js.map +1 -1
- package/dist/cli/lib/mcp-org.d.ts +19 -0
- package/dist/cli/lib/mcp-org.d.ts.map +1 -0
- package/dist/cli/lib/mcp-org.js +51 -0
- package/dist/cli/lib/mcp-org.js.map +1 -0
- package/dist/cli/lib/mcp-runtime.d.ts +1 -1
- package/dist/cli/lib/mcp-runtime.d.ts.map +1 -1
- package/dist/cli/lib/mcp-runtime.js +1 -1
- package/dist/cli/lib/mcp-runtime.js.map +1 -1
- package/dist/cli/lib/mcp-start-orchestration.d.ts.map +1 -1
- package/dist/cli/lib/mcp-start-orchestration.js +1 -0
- package/dist/cli/lib/mcp-start-orchestration.js.map +1 -1
- package/dist/cli/lib/mcp-tools-register.d.ts.map +1 -1
- package/dist/cli/lib/mcp-tools-register.js +90 -17
- package/dist/cli/lib/mcp-tools-register.js.map +1 -1
- package/dist/cli/lib/mission-changed.d.ts +27 -0
- package/dist/cli/lib/mission-changed.d.ts.map +1 -0
- package/dist/cli/lib/mission-changed.js +107 -0
- package/dist/cli/lib/mission-changed.js.map +1 -0
- package/dist/cli/lib/missions/formatter.d.ts +1 -1
- package/dist/cli/lib/missions/formatter.d.ts.map +1 -1
- package/dist/cli/lib/missions/formatter.js +3 -0
- package/dist/cli/lib/missions/formatter.js.map +1 -1
- package/dist/cli/lib/missions/parser.d.ts +3 -1
- package/dist/cli/lib/missions/parser.d.ts.map +1 -1
- package/dist/cli/lib/missions/parser.js +16 -0
- package/dist/cli/lib/missions/parser.js.map +1 -1
- package/dist/cli/lib/msn-allocate.d.ts.map +1 -1
- package/dist/cli/lib/msn-allocate.js +17 -24
- package/dist/cli/lib/msn-allocate.js.map +1 -1
- package/dist/cli/lib/planner-signature.d.ts +7 -0
- package/dist/cli/lib/planner-signature.d.ts.map +1 -1
- package/dist/cli/lib/planner-signature.js +18 -1
- package/dist/cli/lib/planner-signature.js.map +1 -1
- package/dist/cli/lib/policy/policy-bundle.d.ts +6 -0
- package/dist/cli/lib/policy/policy-bundle.d.ts.map +1 -0
- package/dist/cli/lib/policy/policy-bundle.js +62 -0
- package/dist/cli/lib/policy/policy-bundle.js.map +1 -0
- package/dist/cli/lib/policy/policy-doctor.d.ts +4 -0
- package/dist/cli/lib/policy/policy-doctor.d.ts.map +1 -0
- package/dist/cli/lib/policy/policy-doctor.js +34 -0
- package/dist/cli/lib/policy/policy-doctor.js.map +1 -0
- package/dist/cli/lib/policy/policy-fetch.d.ts +10 -0
- package/dist/cli/lib/policy/policy-fetch.d.ts.map +1 -0
- package/dist/cli/lib/policy/policy-fetch.js +78 -0
- package/dist/cli/lib/policy/policy-fetch.js.map +1 -0
- package/dist/cli/lib/policy/policy-resolve.d.ts +38 -0
- package/dist/cli/lib/policy/policy-resolve.d.ts.map +1 -0
- package/dist/cli/lib/policy/policy-resolve.js +194 -0
- package/dist/cli/lib/policy/policy-resolve.js.map +1 -0
- package/dist/cli/lib/policy/policy-types.d.ts +76 -0
- package/dist/cli/lib/policy/policy-types.d.ts.map +1 -0
- package/dist/cli/lib/policy/policy-types.js +3 -0
- package/dist/cli/lib/policy/policy-types.js.map +1 -0
- package/dist/cli/lib/policy-digest-doctor.d.ts +1 -0
- package/dist/cli/lib/policy-digest-doctor.d.ts.map +1 -1
- package/dist/cli/lib/policy-digest-doctor.js +4 -2
- package/dist/cli/lib/policy-digest-doctor.js.map +1 -1
- package/dist/cli/lib/report-demo-fixtures.d.ts +8 -0
- package/dist/cli/lib/report-demo-fixtures.d.ts.map +1 -0
- package/dist/cli/lib/report-demo-fixtures.js +48 -0
- package/dist/cli/lib/report-demo-fixtures.js.map +1 -0
- package/dist/cli/lib/report-demo-mode.d.ts +8 -0
- package/dist/cli/lib/report-demo-mode.d.ts.map +1 -0
- package/dist/cli/lib/report-demo-mode.js +33 -0
- package/dist/cli/lib/report-demo-mode.js.map +1 -0
- package/dist/cli/lib/report-overview-projector.d.ts +53 -0
- package/dist/cli/lib/report-overview-projector.d.ts.map +1 -0
- package/dist/cli/lib/report-overview-projector.js +179 -0
- package/dist/cli/lib/report-overview-projector.js.map +1 -0
- package/dist/cli/lib/report-projector.d.ts +60 -0
- package/dist/cli/lib/report-projector.d.ts.map +1 -0
- package/dist/cli/lib/report-projector.js +166 -0
- package/dist/cli/lib/report-projector.js.map +1 -0
- package/dist/cli/lib/report-server.d.ts +20 -0
- package/dist/cli/lib/report-server.d.ts.map +1 -0
- package/dist/cli/lib/report-server.js +221 -0
- package/dist/cli/lib/report-server.js.map +1 -0
- package/dist/cli/lib/report-template-css.d.ts +4 -0
- package/dist/cli/lib/report-template-css.d.ts.map +1 -0
- package/dist/cli/lib/report-template-css.js +196 -0
- package/dist/cli/lib/report-template-css.js.map +1 -0
- package/dist/cli/lib/report-template-html.d.ts +6 -0
- package/dist/cli/lib/report-template-html.d.ts.map +1 -0
- package/dist/cli/lib/report-template-html.js +189 -0
- package/dist/cli/lib/report-template-html.js.map +1 -0
- package/dist/cli/lib/report-template-overview.d.ts +3 -0
- package/dist/cli/lib/report-template-overview.d.ts.map +1 -0
- package/dist/cli/lib/report-template-overview.js +200 -0
- package/dist/cli/lib/report-template-overview.js.map +1 -0
- package/dist/cli/lib/report-template-shared.d.ts +8 -0
- package/dist/cli/lib/report-template-shared.d.ts.map +1 -0
- package/dist/cli/lib/report-template-shared.js +52 -0
- package/dist/cli/lib/report-template-shared.js.map +1 -0
- package/dist/cli/lib/runtime-exec.d.ts.map +1 -1
- package/dist/cli/lib/runtime-exec.js +1 -1
- package/dist/cli/lib/runtime-exec.js.map +1 -1
- package/dist/cli/lib/start-orchestration.d.ts +2 -1
- package/dist/cli/lib/start-orchestration.d.ts.map +1 -1
- package/dist/cli/lib/start-orchestration.js +5 -3
- package/dist/cli/lib/start-orchestration.js.map +1 -1
- package/dist/cli/lib/surgeons/banned-import.js +1 -1
- package/dist/cli/lib/surgeons/banned-import.js.map +1 -1
- package/dist/cli/lib/surgeons/import-layer.d.ts.map +1 -1
- package/dist/cli/lib/surgeons/import-layer.js +1 -1
- package/dist/cli/lib/surgeons/import-layer.js.map +1 -1
- package/dist/cli/lib/surgeons/registry.d.ts.map +1 -1
- package/dist/cli/lib/surgeons/registry.js +2 -4
- package/dist/cli/lib/surgeons/registry.js.map +1 -1
- package/dist/cli/lib/telemetry-log.d.ts +1 -1
- package/dist/cli/lib/telemetry-log.d.ts.map +1 -1
- package/dist/cli/lib/telemetry-log.js +14 -1
- package/dist/cli/lib/telemetry-log.js.map +1 -1
- package/dist/cli/lib/types.d.ts +23 -0
- package/dist/cli/lib/types.d.ts.map +1 -1
- package/dist/cli/lib/types.js +5 -1
- package/dist/cli/lib/types.js.map +1 -1
- package/dist/cli/lib/verify-engine.d.ts +7 -3
- package/dist/cli/lib/verify-engine.d.ts.map +1 -1
- package/dist/cli/lib/verify-engine.js +83 -181
- package/dist/cli/lib/verify-engine.js.map +1 -1
- package/dist/cli/lib/verify-evidence-snippet.d.ts +7 -0
- package/dist/cli/lib/verify-evidence-snippet.d.ts.map +1 -0
- package/dist/cli/lib/verify-evidence-snippet.js +29 -0
- package/dist/cli/lib/verify-evidence-snippet.js.map +1 -0
- package/dist/cli/lib/verify-export.d.ts.map +1 -1
- package/dist/cli/lib/verify-export.js +18 -2
- package/dist/cli/lib/verify-export.js.map +1 -1
- package/dist/cli/lib/verify-failure-normalize.d.ts.map +1 -1
- package/dist/cli/lib/verify-failure-normalize.js +20 -4
- package/dist/cli/lib/verify-failure-normalize.js.map +1 -1
- package/dist/cli/lib/verify-failure.d.ts +24 -5
- package/dist/cli/lib/verify-failure.d.ts.map +1 -1
- package/dist/cli/lib/verify-finding-fingerprint.d.ts +26 -0
- package/dist/cli/lib/verify-finding-fingerprint.d.ts.map +1 -0
- package/dist/cli/lib/verify-finding-fingerprint.js +117 -0
- package/dist/cli/lib/verify-finding-fingerprint.js.map +1 -0
- package/dist/cli/lib/verify-finding-gate-projector.d.ts +4 -0
- package/dist/cli/lib/verify-finding-gate-projector.d.ts.map +1 -0
- package/dist/cli/lib/verify-finding-gate-projector.js +31 -0
- package/dist/cli/lib/verify-finding-gate-projector.js.map +1 -0
- package/dist/cli/lib/verify-finding.d.ts +17 -4
- package/dist/cli/lib/verify-finding.d.ts.map +1 -1
- package/dist/cli/lib/verify-finding.js +9 -3
- package/dist/cli/lib/verify-finding.js.map +1 -1
- package/dist/cli/lib/verify-hints.d.ts.map +1 -1
- package/dist/cli/lib/verify-hints.js +14 -3
- package/dist/cli/lib/verify-hints.js.map +1 -1
- package/dist/cli/lib/verify-options.d.ts +6 -0
- package/dist/cli/lib/verify-options.d.ts.map +1 -1
- package/dist/cli/lib/verify-org-phases.d.ts +18 -0
- package/dist/cli/lib/verify-org-phases.d.ts.map +1 -0
- package/dist/cli/lib/verify-org-phases.js +61 -0
- package/dist/cli/lib/verify-org-phases.js.map +1 -0
- package/dist/cli/lib/verify-payload.d.ts +5 -4
- package/dist/cli/lib/verify-payload.d.ts.map +1 -1
- package/dist/cli/lib/verify-payload.js +59 -38
- package/dist/cli/lib/verify-payload.js.map +1 -1
- package/dist/cli/lib/verify-phase-clock.d.ts +17 -0
- package/dist/cli/lib/verify-phase-clock.d.ts.map +1 -0
- package/dist/cli/lib/verify-phase-clock.js +52 -0
- package/dist/cli/lib/verify-phase-clock.js.map +1 -0
- package/dist/cli/lib/verify-phase-steps.d.ts +61 -0
- package/dist/cli/lib/verify-phase-steps.d.ts.map +1 -0
- package/dist/cli/lib/verify-phase-steps.js +167 -0
- package/dist/cli/lib/verify-phase-steps.js.map +1 -0
- package/dist/cli/lib/verify-presenters.d.ts +3 -0
- package/dist/cli/lib/verify-presenters.d.ts.map +1 -1
- package/dist/cli/lib/verify-presenters.js +102 -18
- package/dist/cli/lib/verify-presenters.js.map +1 -1
- package/dist/cli/lib/verify-remediation-pipeline.d.ts +36 -0
- package/dist/cli/lib/verify-remediation-pipeline.d.ts.map +1 -0
- package/dist/cli/lib/verify-remediation-pipeline.js +99 -0
- package/dist/cli/lib/verify-remediation-pipeline.js.map +1 -0
- package/dist/cli/lib/verify-run-ring.d.ts +56 -0
- package/dist/cli/lib/verify-run-ring.d.ts.map +1 -0
- package/dist/cli/lib/verify-run-ring.js +165 -0
- package/dist/cli/lib/verify-run-ring.js.map +1 -0
- package/dist/cli/lib/verify-run.d.ts +2 -2
- package/dist/cli/lib/verify-run.d.ts.map +1 -1
- package/dist/cli/lib/verify-run.js +63 -19
- package/dist/cli/lib/verify-run.js.map +1 -1
- package/dist/cli/lib/version.gen.d.ts +1 -1
- package/dist/cli/lib/version.gen.js +1 -1
- package/dist/cli/lib/virtual-scratch-store.d.ts.map +1 -1
- package/dist/cli/lib/virtual-scratch-store.js +2 -16
- package/dist/cli/lib/virtual-scratch-store.js.map +1 -1
- package/dist/cli/program-core.d.ts +1 -1
- package/dist/cli/program-core.d.ts.map +1 -1
- package/dist/cli/program-core.js +79 -5
- package/dist/cli/program-core.js.map +1 -1
- package/dist/cli/program-mission.d.ts.map +1 -1
- package/dist/cli/program-mission.js +59 -35
- package/dist/cli/program-mission.js.map +1 -1
- package/dist/cli/program-org.d.ts +3 -0
- package/dist/cli/program-org.d.ts.map +1 -0
- package/dist/cli/program-org.js +119 -0
- package/dist/cli/program-org.js.map +1 -0
- package/dist/cli/program-workflow.d.ts +2 -1
- package/dist/cli/program-workflow.d.ts.map +1 -1
- package/dist/cli/program-workflow.js +54 -3
- package/dist/cli/program-workflow.js.map +1 -1
- package/dist/cli/program.d.ts.map +1 -1
- package/dist/cli/program.js +11 -0
- package/dist/cli/program.js.map +1 -1
- package/package.json +2 -1
- package/templates/.gitagent/config.json +4 -0
- package/templates/.gitagent/foreman/MANIFEST.json +1 -0
- package/templates/.gitagent/foreman/PLANNER.signing.pub +3 -0
- package/templates/.gitagent/foreman/POLICY.pointer.json +11 -0
- package/templates/.gitagent/foreman/SUBSTRATE.version.json +1 -1
- package/templates/.gitagent/planner/MISSION.schema.yaml +51 -0
- package/templates/.gitagent/planner/ORG-POLICY.schema.yaml +174 -0
- package/templates/.gitagent/planner/RULES.md +36 -2
- package/templates/.github/workflows/gxt-attest-ingest.yml +82 -6
- package/templates/.github/workflows/gxt-validate.yml +33 -0
- package/templates/.gitignore.gxt +1 -0
- package/templates/integrations/asset-catalog.json +2 -0
- package/templates/integrations/compatibility.json +1 -1
- package/templates/scripts/validate-mcp-dogfood.mjs +5 -0
- package/templates/scripts/verify-pr-missions.sh +20 -41
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Poll plane ingest request until chained or rejected.
|
|
3
|
+
*/
|
|
4
|
+
export interface IngestPollOptions {
|
|
5
|
+
baseUrl: string;
|
|
6
|
+
token: string;
|
|
7
|
+
requestId: string;
|
|
8
|
+
timeoutMs?: number;
|
|
9
|
+
intervalMs?: number;
|
|
10
|
+
}
|
|
11
|
+
export type IngestRequestStatus = "accepted" | "chaining" | "chained" | "rejected";
|
|
12
|
+
export interface IngestStatusResponse {
|
|
13
|
+
request_id: string;
|
|
14
|
+
status: IngestRequestStatus;
|
|
15
|
+
error_code?: string;
|
|
16
|
+
ledger_seq?: number;
|
|
17
|
+
entry_hash?: string;
|
|
18
|
+
signature_verdict?: string;
|
|
19
|
+
}
|
|
20
|
+
export declare function pollIngestRequest(options: IngestPollOptions): Promise<IngestStatusResponse>;
|
|
21
|
+
//# sourceMappingURL=ingest-wait.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ingest-wait.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/ingest-wait.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AAEnF,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CA2B/B"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
export async function pollIngestRequest(options) {
|
|
2
|
+
const timeoutMs = options.timeoutMs ?? 60_000;
|
|
3
|
+
const intervalMs = options.intervalMs ?? 500;
|
|
4
|
+
const base = options.baseUrl.replace(/\/$/, "");
|
|
5
|
+
const deadline = Date.now() + timeoutMs;
|
|
6
|
+
while (Date.now() < deadline) {
|
|
7
|
+
const res = await fetch(`${base}/api/v1/ingest/requests/${encodeURIComponent(options.requestId)}`, {
|
|
8
|
+
headers: { Authorization: `Bearer ${options.token}` },
|
|
9
|
+
});
|
|
10
|
+
const text = await res.text();
|
|
11
|
+
if (!res.ok) {
|
|
12
|
+
throw new Error(`ingest status: HTTP ${res.status}: ${text}`);
|
|
13
|
+
}
|
|
14
|
+
const body = JSON.parse(text);
|
|
15
|
+
if (body.status === "chained")
|
|
16
|
+
return body;
|
|
17
|
+
if (body.status === "rejected") {
|
|
18
|
+
throw new Error(`ingest rejected: ${body.error_code ?? "unknown"} (request_id=${options.requestId})`);
|
|
19
|
+
}
|
|
20
|
+
await new Promise((r) => setTimeout(r, intervalMs));
|
|
21
|
+
}
|
|
22
|
+
throw new Error(`ingest poll timeout (request_id=${options.requestId})`);
|
|
23
|
+
}
|
|
24
|
+
//# sourceMappingURL=ingest-wait.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ingest-wait.js","sourceRoot":"","sources":["../../../src/cli/lib/ingest-wait.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,2BAA2B,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EACzE;YACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE;SACtD,CACF,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,CAAC,UAAU,IAAI,SAAS,gBAAgB,OAAO,CAAC,SAAS,GAAG,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;AAC3E,CAAC"}
|
|
@@ -7,12 +7,11 @@ import { plannerMissionStamped } from "./git-proof.js";
|
|
|
7
7
|
import { ONBOARDING_ADOPTION_DOC, onboardingRuntimeEnvHint, onboardingStatusHint, onboardingVerifyHint, tutorialTeacherStampBlock, TUTORIAL_INTENT, TUTORIAL_MSN_ID, } from "./onboarding-flow.js";
|
|
8
8
|
import { runStartOrchestration } from "./start-orchestration.js";
|
|
9
9
|
import { loadWorkspace } from "./workspace.js";
|
|
10
|
+
import { listMissionFiles } from "./missions/parser.js";
|
|
10
11
|
import { runVerifyCore } from "./verify-run.js";
|
|
11
12
|
function findExistingTutorialMission(repoRoot) {
|
|
12
|
-
const
|
|
13
|
-
|
|
14
|
-
return null;
|
|
15
|
-
for (const name of fs.readdirSync(missionsDir)) {
|
|
13
|
+
for (const abs of listMissionFiles(repoRoot)) {
|
|
14
|
+
const name = path.basename(abs);
|
|
16
15
|
if (name.startsWith(`${TUTORIAL_MSN_ID}.`) && name.endsWith(".yaml")) {
|
|
17
16
|
return `.gitagent/missions/${name}`;
|
|
18
17
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init-tutorial.js","sourceRoot":"","sources":["../../../src/cli/lib/init-tutorial.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,SAAS,2BAA2B,CAAC,QAAgB;IACnD,MAAM,
|
|
1
|
+
{"version":3,"file":"init-tutorial.js","sourceRoot":"","sources":["../../../src/cli/lib/init-tutorial.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,SAAS,2BAA2B,CAAC,QAAgB;IACnD,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,eAAe,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,OAAO,sBAAsB,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAmB;IAC/C,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC1C,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,UAAkB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,WAAmB;IAEnB,OAAO,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,yBAAyB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YAC5B,OAAO,EACL,mFAAmF;YACrF,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAE9C,IAAI,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;YACxG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,IAAI,CACR,oGAAoG,CACrG,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YAC5B,OAAO,EAAE,+DAA+D;YACxE,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,QAAgB,EAChB,QAAgB;IAEhB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC;QAClC,MAAM,EAAE,eAAe;QACvB,GAAG,EAAE,eAAe;QACpB,QAAQ;QACR,WAAW,EAAE,cAAc;QAC3B,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC1C,QAAQ,CAAC,mEAAmE,CAAC,CAAC;QAC9E,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,iBAAiB,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,WAAmB;IAEnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;QACnC,OAAO,EAAE,yFAAyF;QAClG,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC;QACvC,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,IAAI;QACT,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CACxB,WAAmB,EACnB,QAAiB,EACjB,SAAkB,EAClB,cAAuB;IAEvB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,WAAW,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,KAAK,CACL,2EAA2E,WAAW,UAAU,uBAAuB,EAAE,CAC1H,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,CAAC,CAAC,KAAK,CACL,gEAAgE,WAAW,UAAU,uBAAuB,EAAE,CAC/G,CAAC;QACF,OAAO;IACT,CAAC;IACD,CAAC,CAAC,KAAK,CAAC,kCAAkC,uBAAuB,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAClF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,yEAAyE,CAAC,CAAC;QACpF,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,CAAC,CAAC,KAAK,CAAC,GAAG,QAAQ,iDAAiD,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,yEAAyE;QAClF,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAC/C,QAAQ,EACR,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACxD,CAAC,CAAC,IAAI,CACJ,2EAA2E,GAAG,WAAW,EACzF,QAAQ,CACT,CAAC;QACF,CAAC,CAAC,KAAK,CAAC,yBAAyB,uBAAuB,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,wBAAwB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACtD,OAAO,CACL,wGAAwG,CACzG,CAAC;IACF,OAAO,CACL,oHAAoH,CACrH,CAAC;IAEF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACzF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,oBAAoB,EAAE,EAAE,CAAC,CAAC;IACvC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC"}
|
package/dist/cli/lib/kpi-scan.js
CHANGED
|
@@ -118,7 +118,11 @@ export function runKpiScan(root, mission, options = {}) {
|
|
|
118
118
|
return { reportPath, report };
|
|
119
119
|
}
|
|
120
120
|
function runSingleVerifier(workDir, verifier) {
|
|
121
|
-
const result = runGate(workDir, {
|
|
121
|
+
const result = runGate(workDir, {
|
|
122
|
+
command: verifier.command,
|
|
123
|
+
successSubstring: null,
|
|
124
|
+
adapter: "generic",
|
|
125
|
+
});
|
|
122
126
|
const exitCode = result.exitCode ?? 1;
|
|
123
127
|
const fragment = parseVerifierStdout(result.stdout);
|
|
124
128
|
const failed = !verifierOutputSucceeded(exitCode, fragment);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"kpi-scan.js","sourceRoot":"","sources":["../../../src/cli/lib/kpi-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAoB/C,SAAS,gBAAgB,CACvB,UAAkB,EAClB,OAAyC;IAEzC,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,UAAU,KAAK,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,QAAyB;IACjF,OAAO,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAyC,EACzC,WAAqC;IAErC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,MAAM;YACR,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,WAAW,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,OAAsB,EACtB,UAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,wBAAwB,EACxB,qCAAqC,EACrC,gCAAgC,EAChC,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC;IACvC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,sDAAsD,EACtD,qEAAqE,EACrE,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QAC/C,GAAG,sBAAsB,IAAI,KAAK,OAAO,CAAC;IAE5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,aAAa,GAAqC,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAiB,EAAE,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,mCAAmC,QAAQ,CAAC,EAAE,kBAAkB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAC3F,+EAA+E,EAC/E,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,iBAAiB,CAAC,GAAG,KAAK,CAAC;YACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;gBAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,iBAAiB,CAAC,GAAG,IAAI,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;YACjF,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAc;QACxB,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,YAAY;QACvB,OAAO,EAAE,YAAY;QACrB,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IAEF,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3C,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAe,EACf,QAAyB;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"kpi-scan.js","sourceRoot":"","sources":["../../../src/cli/lib/kpi-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAoB/C,SAAS,gBAAgB,CACvB,UAAkB,EAClB,OAAyC;IAEzC,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,UAAU,KAAK,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,QAAyB;IACjF,OAAO,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAyC,EACzC,WAAqC;IAErC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,KAAK;gBACR,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,MAAM;YACR,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,WAAW,GAAU,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,WAAW,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,OAAsB,EACtB,UAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,wBAAwB,EACxB,qCAAqC,EACrC,gCAAgC,EAChC,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC;IACvC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,sDAAsD,EACtD,qEAAqE,EACrE,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QAC/C,GAAG,sBAAsB,IAAI,KAAK,OAAO,CAAC;IAE5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,aAAa,GAAqC,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAiB,EAAE,CAAC;IACxC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,mCAAmC,QAAQ,CAAC,EAAE,kBAAkB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAC3F,+EAA+E,EAC/E,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,iBAAiB,CAAC,GAAG,KAAK,CAAC;YACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;gBAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,aAAa,CAAC,GAAG,QAAQ,CAAC,EAAE,iBAAiB,CAAC,GAAG,IAAI,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;YACjF,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAc;QACxB,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,YAAY;QACvB,OAAO,EAAE,YAAY;QACrB,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IAEF,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3C,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAe,EACf,QAAyB;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import { type LedgerEntry, type LedgerEntryKind, type LedgerPayloadFor } from "./ledger-entry.js";
|
|
2
|
+
export declare function appendLedgerEntry<K extends LedgerEntryKind>(root: string, input: {
|
|
3
|
+
kind: K;
|
|
4
|
+
msn_id: string;
|
|
5
|
+
payload: LedgerPayloadFor<K>;
|
|
6
|
+
sign?: boolean;
|
|
7
|
+
issued_at?: string;
|
|
8
|
+
}): Extract<LedgerEntry, {
|
|
9
|
+
entry_kind: K;
|
|
10
|
+
}>;
|
|
11
|
+
export declare function appendLedgerIfEnabled<K extends LedgerEntryKind>(root: string, kind: K, msnId: string, payload: LedgerPayloadFor<K>): Extract<LedgerEntry, {
|
|
12
|
+
entry_kind: K;
|
|
13
|
+
}> | null;
|
|
14
|
+
//# sourceMappingURL=ledger-append.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-append.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-append.ts"],"names":[],"mappings":"AAQA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAgB3B,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,eAAe,EACzD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IACL,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,WAAW,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CA0CzC;AAED,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,eAAe,EAC7D,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,EACP,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,WAAW,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,GAAG,IAAI,CAShD"}
|
|
@@ -0,0 +1,63 @@
|
|
|
1
|
+
import path from "node:path";
|
|
2
|
+
import { errorMessage, logWarn } from "../cli-io.js";
|
|
3
|
+
import { GantryUserError, isGantryUserError } from "../errors.js";
|
|
4
|
+
import { loadGxtConfig, resolveLedgerMode, resolveLedgerSignatureTier } from "../gxt-config.js";
|
|
5
|
+
import { gitRevParse } from "../git.js";
|
|
6
|
+
import { GXT_ERROR } from "../gxt-error-codes.js";
|
|
7
|
+
import { resolveOrgExportConfig } from "../org-export-config.js";
|
|
8
|
+
import { resolveRepositoryHash } from "../receipt-attribution.js";
|
|
9
|
+
import { buildLedgerEntry, entryHash, genesisPrevHash, } from "./ledger-entry.js";
|
|
10
|
+
import { casUpdateLedgerRef, commitLedgerEntry, LEDGER_CAS_MAX_ATTEMPTS, readLedgerEntryAt, readLedgerTip, sleepJitter, } from "./ledger-chain.js";
|
|
11
|
+
function ledgerSignRequested(root, explicit) {
|
|
12
|
+
if (explicit === true)
|
|
13
|
+
return true;
|
|
14
|
+
const tier = resolveLedgerSignatureTier(loadGxtConfig(root));
|
|
15
|
+
return tier === "warn" || tier === "require";
|
|
16
|
+
}
|
|
17
|
+
export function appendLedgerEntry(root, input) {
|
|
18
|
+
const abs = path.resolve(root);
|
|
19
|
+
const org = resolveOrgExportConfig(abs);
|
|
20
|
+
const sign = ledgerSignRequested(abs, input.sign);
|
|
21
|
+
for (let attempt = 0; attempt < LEDGER_CAS_MAX_ATTEMPTS; attempt++) {
|
|
22
|
+
const tip = readLedgerTip(abs);
|
|
23
|
+
let prev = genesisPrevHash();
|
|
24
|
+
if (tip) {
|
|
25
|
+
try {
|
|
26
|
+
prev = entryHash(readLedgerEntryAt(abs, tip));
|
|
27
|
+
}
|
|
28
|
+
catch (e) {
|
|
29
|
+
const detail = e instanceof Error ? e.message : String(e);
|
|
30
|
+
throw new GantryUserError(GXT_ERROR.LEDGER_CHAIN_BROKEN, `ledger tip ${tip} is unreadable: ${detail}`, undefined, 1);
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
const entry = buildLedgerEntry({
|
|
34
|
+
kind: input.kind,
|
|
35
|
+
org_id: org.org_id,
|
|
36
|
+
repository_hash: resolveRepositoryHash(abs, org),
|
|
37
|
+
msn_id: input.msn_id,
|
|
38
|
+
git_head: gitRevParse(abs, "HEAD") ?? "no-head",
|
|
39
|
+
payload: input.payload,
|
|
40
|
+
prev_entry_hash: prev,
|
|
41
|
+
issued_at: input.issued_at,
|
|
42
|
+
});
|
|
43
|
+
const commit = commitLedgerEntry(abs, entry, tip, sign);
|
|
44
|
+
if (casUpdateLedgerRef(abs, commit, tip)) {
|
|
45
|
+
return entry;
|
|
46
|
+
}
|
|
47
|
+
sleepJitter(attempt);
|
|
48
|
+
}
|
|
49
|
+
throw new GantryUserError(GXT_ERROR.LEDGER_CAS_EXHAUSTED, "ledger CAS exhausted: parallel appenders could not agree on refs/gxt/ledger tip", "retry gantry ledger append", 1);
|
|
50
|
+
}
|
|
51
|
+
export function appendLedgerIfEnabled(root, kind, msnId, payload) {
|
|
52
|
+
if (resolveLedgerMode(loadGxtConfig(root)) !== "local")
|
|
53
|
+
return null;
|
|
54
|
+
try {
|
|
55
|
+
return appendLedgerEntry(root, { kind, msn_id: msnId, payload });
|
|
56
|
+
}
|
|
57
|
+
catch (e) {
|
|
58
|
+
const code = isGantryUserError(e) ? e.gxtCode : GXT_ERROR.LEDGER_CHAIN_BROKEN;
|
|
59
|
+
logWarn(`ledger append failed (${code}): ${errorMessage(e)}`);
|
|
60
|
+
return null;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
//# sourceMappingURL=ledger-append.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-append.js","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-append.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,eAAe,GAIhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAE3B,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAkB;IAC3D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,0BAA0B,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAMC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,uBAAuB,EAAE,OAAO,EAAE,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;QAC7B,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,IAAI,GAAG,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,mBAAmB,EAC7B,cAAc,GAAG,mBAAmB,MAAM,EAAE,EAC5C,SAAS,EACT,CAAC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,eAAe,EAAE,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC;YAChD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,SAAS;YAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,WAAW,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,oBAAoB,EAC9B,iFAAiF,EACjF,4BAA4B,EAC5B,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,IAAO,EACP,KAAa,EACb,OAA4B;IAE5B,IAAI,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAC9E,OAAO,CAAC,yBAAyB,IAAI,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { type LedgerEntry } from "./ledger-entry.js";
|
|
2
|
+
export declare const LEDGER_CAS_MAX_ATTEMPTS = 8;
|
|
3
|
+
export declare function readLedgerTip(root: string, ref?: string): string | null;
|
|
4
|
+
export declare function readLedgerEntryAt(root: string, commit: string): LedgerEntry;
|
|
5
|
+
export declare function commitLedgerEntry(root: string, entry: LedgerEntry, parent: string | null, sign: boolean): string;
|
|
6
|
+
export declare function casUpdateLedgerRef(root: string, newCommit: string, expectedOld: string | null): boolean;
|
|
7
|
+
/** Sync CAS backoff (Atomics.wait parks the thread; not a busy-spin). */
|
|
8
|
+
export declare function sleepJitter(attempt: number): void;
|
|
9
|
+
export interface LedgerChainReport {
|
|
10
|
+
ok: boolean;
|
|
11
|
+
ref: string;
|
|
12
|
+
tip: string | null;
|
|
13
|
+
count: number;
|
|
14
|
+
errors: string[];
|
|
15
|
+
entries: LedgerEntry[];
|
|
16
|
+
}
|
|
17
|
+
export declare function verifyLedgerChain(root: string, ref?: string, opts?: {
|
|
18
|
+
requireSignatures?: boolean;
|
|
19
|
+
}): LedgerChainReport;
|
|
20
|
+
export declare function runLedgerDoctorChecks(root: string): {
|
|
21
|
+
level: "ok" | "warn" | "fail";
|
|
22
|
+
message: string;
|
|
23
|
+
}[];
|
|
24
|
+
//# sourceMappingURL=ledger-chain.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-chain.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-chain.ts"],"names":[],"mappings":"AAKA,OAAO,EAA8B,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEjF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AA2BzC,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI,CAEnF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAoB3E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,IAAI,EAAE,OAAO,GACZ,MAAM,CAoBR;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAKvG;AAED,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGjD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAmB,EACxB,IAAI,CAAC,EAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,iBAAiB,CA6BnB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CASxG"}
|
|
@@ -0,0 +1,101 @@
|
|
|
1
|
+
import path from "node:path";
|
|
2
|
+
import { LEDGER_REF } from "../constants.js";
|
|
3
|
+
import { gitRevParse, gitRun } from "../git.js";
|
|
4
|
+
import { GantryUserError } from "../errors.js";
|
|
5
|
+
import { GXT_ERROR } from "../gxt-error-codes.js";
|
|
6
|
+
import { entryHash, genesisPrevHash } from "./ledger-entry.js";
|
|
7
|
+
export const LEDGER_CAS_MAX_ATTEMPTS = 8;
|
|
8
|
+
function requireRoot(root) {
|
|
9
|
+
if (!root || !path.isAbsolute(root)) {
|
|
10
|
+
throw new GantryUserError(GXT_ERROR.INVALID_ARGUMENT, "ledger helpers require an absolute repo root (never implicit cwd)", undefined, 2);
|
|
11
|
+
}
|
|
12
|
+
return root;
|
|
13
|
+
}
|
|
14
|
+
function requireGitOk(result, verb, hint) {
|
|
15
|
+
const out = result.stdout.trim();
|
|
16
|
+
if (!result.ok || !out) {
|
|
17
|
+
throw new GantryUserError(GXT_ERROR.LEDGER_CHAIN_BROKEN, `git ${verb} failed: ${result.stderr.trim() || "no output"}`, hint, 1);
|
|
18
|
+
}
|
|
19
|
+
return out;
|
|
20
|
+
}
|
|
21
|
+
export function readLedgerTip(root, ref = LEDGER_REF) {
|
|
22
|
+
return gitRevParse(requireRoot(root), ref);
|
|
23
|
+
}
|
|
24
|
+
export function readLedgerEntryAt(root, commit) {
|
|
25
|
+
const show = gitRun(requireRoot(root), ["show", `${commit}:entry.json`]);
|
|
26
|
+
if (!show.ok) {
|
|
27
|
+
throw new GantryUserError(GXT_ERROR.LEDGER_CHAIN_BROKEN, `ledger commit ${commit} has no entry.json`, undefined, 1);
|
|
28
|
+
}
|
|
29
|
+
try {
|
|
30
|
+
return JSON.parse(show.stdout);
|
|
31
|
+
}
|
|
32
|
+
catch {
|
|
33
|
+
throw new GantryUserError(GXT_ERROR.LEDGER_CHAIN_BROKEN, `ledger commit ${commit} has invalid entry.json`, undefined, 1);
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
export function commitLedgerEntry(root, entry, parent, sign) {
|
|
37
|
+
const absRoot = requireRoot(root);
|
|
38
|
+
const body = `${JSON.stringify(entry, null, 2)}\n`;
|
|
39
|
+
const blob = requireGitOk(gitRun(absRoot, ["hash-object", "-w", "--stdin"], { input: body }), "hash-object");
|
|
40
|
+
const tree = requireGitOk(gitRun(absRoot, ["mktree"], { input: `100644 blob ${blob}\tentry.json\n` }), "mktree");
|
|
41
|
+
const subject = `[GXT-LEDGER] ${entry.entry_kind} ${entry.msn_id}`;
|
|
42
|
+
const commitArgs = ["commit-tree", tree, "-m", subject];
|
|
43
|
+
if (parent)
|
|
44
|
+
commitArgs.push("-p", parent);
|
|
45
|
+
if (sign)
|
|
46
|
+
commitArgs.splice(1, 0, "-S");
|
|
47
|
+
return requireGitOk(gitRun(absRoot, commitArgs), "commit-tree", sign ? "configure user.signingkey or set ledger.signature off" : undefined);
|
|
48
|
+
}
|
|
49
|
+
export function casUpdateLedgerRef(root, newCommit, expectedOld) {
|
|
50
|
+
const absRoot = requireRoot(root);
|
|
51
|
+
const old = expectedOld ?? "0000000000000000000000000000000000000000";
|
|
52
|
+
const r = gitRun(absRoot, ["update-ref", LEDGER_REF, newCommit, old]);
|
|
53
|
+
return r.ok;
|
|
54
|
+
}
|
|
55
|
+
/** Sync CAS backoff (Atomics.wait parks the thread; not a busy-spin). */
|
|
56
|
+
export function sleepJitter(attempt) {
|
|
57
|
+
const ms = Math.min(50 * 2 ** attempt, 400) + Math.floor(Math.random() * 25);
|
|
58
|
+
Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
|
|
59
|
+
}
|
|
60
|
+
export function verifyLedgerChain(root, ref = LEDGER_REF, opts) {
|
|
61
|
+
const tip = readLedgerTip(root, ref);
|
|
62
|
+
if (!tip) {
|
|
63
|
+
return { ok: true, ref, tip: null, count: 0, errors: [], entries: [] };
|
|
64
|
+
}
|
|
65
|
+
const log = gitRun(root, ["rev-list", "--reverse", tip]);
|
|
66
|
+
const commits = log.ok ? log.stdout.split("\n").map((s) => s.trim()).filter(Boolean) : [];
|
|
67
|
+
const errors = [];
|
|
68
|
+
const entries = [];
|
|
69
|
+
let expectedPrev = genesisPrevHash();
|
|
70
|
+
for (const commit of commits) {
|
|
71
|
+
try {
|
|
72
|
+
const entry = readLedgerEntryAt(root, commit);
|
|
73
|
+
entries.push(entry);
|
|
74
|
+
if (entry.prev_entry_hash !== expectedPrev) {
|
|
75
|
+
errors.push(`${GXT_ERROR.LEDGER_CHAIN_BROKEN}: ${commit} prev_entry_hash mismatch`);
|
|
76
|
+
}
|
|
77
|
+
if (opts?.requireSignatures === true) {
|
|
78
|
+
const verified = gitRun(root, ["verify-commit", commit]);
|
|
79
|
+
if (!verified.ok) {
|
|
80
|
+
errors.push(`${GXT_ERROR.LEDGER_UNSIGNED}: ${commit} failed git verify-commit`);
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
expectedPrev = entryHash(entry);
|
|
84
|
+
}
|
|
85
|
+
catch (e) {
|
|
86
|
+
errors.push(e instanceof Error ? e.message : String(e));
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
return { ok: errors.length === 0, ref, tip, count: entries.length, errors, entries };
|
|
90
|
+
}
|
|
91
|
+
export function runLedgerDoctorChecks(root) {
|
|
92
|
+
const report = verifyLedgerChain(root);
|
|
93
|
+
if (!report.tip) {
|
|
94
|
+
return [{ level: "ok", message: `${LEDGER_REF}: absent` }];
|
|
95
|
+
}
|
|
96
|
+
if (!report.ok) {
|
|
97
|
+
return report.errors.map((message) => ({ level: "fail", message }));
|
|
98
|
+
}
|
|
99
|
+
return [{ level: "ok", message: `${LEDGER_REF}: ${report.count} entries, chain consistent` }];
|
|
100
|
+
}
|
|
101
|
+
//# sourceMappingURL=ledger-chain.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-chain.js","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-chain.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAqB,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAoB,MAAM,mBAAmB,CAAC;AAEjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,gBAAgB,EAC1B,mEAAmE,EACnE,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB,EAAE,IAAY,EAAE,IAAa;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,mBAAmB,EAC7B,OAAO,IAAI,YAAY,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,EAC5D,IAAI,EACJ,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc,UAAU;IAClE,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,mBAAmB,EAC7B,iBAAiB,MAAM,oBAAoB,EAC3C,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAgB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,mBAAmB,EAC7B,iBAAiB,MAAM,yBAAyB,EAChD,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAkB,EAClB,MAAqB,EACrB,IAAa;IAEb,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,YAAY,CACvB,MAAM,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAClE,aAAa,CACd,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CACvB,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,IAAI,gBAAgB,EAAE,CAAC,EAC3E,QAAQ,CACT,CAAC;IACF,MAAM,OAAO,GAAG,gBAAgB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI;QAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,OAAO,YAAY,CACjB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,EAC3B,aAAa,EACb,IAAI,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,SAAS,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAAiB,EAAE,WAA0B;IAC5F,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,WAAW,IAAI,0CAA0C,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC,EAAE,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAWD,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,MAAc,UAAU,EACxB,IAAsC;IAEtC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,YAAY,GAAG,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,mBAAmB,KAAK,MAAM,2BAA2B,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,IAAI,EAAE,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;gBACzD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,eAAe,KAAK,MAAM,2BAA2B,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YACD,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,KAAK,MAAM,CAAC,KAAK,4BAA4B,EAAE,CAAC,CAAC;AAChG,CAAC"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
import type { MissionDependencySpec } from "../types.js";
|
|
2
|
+
export declare const LEDGER_ENTRY_SCHEMA_VERSION: "1.0.0";
|
|
3
|
+
export declare const LEDGER_ENTRY_KINDS: readonly ["receipt", "verify_findings", "break_glass", "policy_pin", "dependency_check"];
|
|
4
|
+
export type LedgerEntryKind = (typeof LEDGER_ENTRY_KINDS)[number];
|
|
5
|
+
/** Digest-only receipt fields already allowed on the export path (ADR-0043). */
|
|
6
|
+
export interface ReceiptLedgerPayload {
|
|
7
|
+
verify_status?: string;
|
|
8
|
+
signed?: boolean;
|
|
9
|
+
receipt_sha256?: string;
|
|
10
|
+
source?: string;
|
|
11
|
+
envelope_sha?: string;
|
|
12
|
+
has_payload?: boolean;
|
|
13
|
+
}
|
|
14
|
+
export interface VerifyFindingsLedgerPayload {
|
|
15
|
+
failed_gate: string;
|
|
16
|
+
findings_digest?: string;
|
|
17
|
+
fingerprints?: string[];
|
|
18
|
+
message?: string;
|
|
19
|
+
}
|
|
20
|
+
export interface BreakGlassLedgerPayload {
|
|
21
|
+
reason_sha256: string;
|
|
22
|
+
error_code: string;
|
|
23
|
+
}
|
|
24
|
+
export interface PolicyPinLedgerPayload {
|
|
25
|
+
policy_id: string;
|
|
26
|
+
bundle_sha256: string;
|
|
27
|
+
pinned_commit: string;
|
|
28
|
+
}
|
|
29
|
+
export interface DependencyCheckLedgerPayload {
|
|
30
|
+
repo: string;
|
|
31
|
+
msn_id: string;
|
|
32
|
+
require?: MissionDependencySpec["require"];
|
|
33
|
+
result: string;
|
|
34
|
+
}
|
|
35
|
+
export type LedgerPayload = ReceiptLedgerPayload | VerifyFindingsLedgerPayload | BreakGlassLedgerPayload | PolicyPinLedgerPayload | DependencyCheckLedgerPayload;
|
|
36
|
+
export type LedgerPayloadFor<K extends LedgerEntryKind> = K extends "receipt" ? ReceiptLedgerPayload : K extends "verify_findings" ? VerifyFindingsLedgerPayload : K extends "break_glass" ? BreakGlassLedgerPayload : K extends "policy_pin" ? PolicyPinLedgerPayload : K extends "dependency_check" ? DependencyCheckLedgerPayload : never;
|
|
37
|
+
interface LedgerEntryBase {
|
|
38
|
+
schema_version: typeof LEDGER_ENTRY_SCHEMA_VERSION;
|
|
39
|
+
org_id: string;
|
|
40
|
+
repository_hash: string;
|
|
41
|
+
msn_id: string;
|
|
42
|
+
git_head: string;
|
|
43
|
+
payload_sha256: string;
|
|
44
|
+
prev_entry_hash: string;
|
|
45
|
+
issued_at: string;
|
|
46
|
+
}
|
|
47
|
+
export type LedgerEntry = (LedgerEntryBase & {
|
|
48
|
+
entry_kind: "receipt";
|
|
49
|
+
payload: ReceiptLedgerPayload;
|
|
50
|
+
}) | (LedgerEntryBase & {
|
|
51
|
+
entry_kind: "verify_findings";
|
|
52
|
+
payload: VerifyFindingsLedgerPayload;
|
|
53
|
+
}) | (LedgerEntryBase & {
|
|
54
|
+
entry_kind: "break_glass";
|
|
55
|
+
payload: BreakGlassLedgerPayload;
|
|
56
|
+
}) | (LedgerEntryBase & {
|
|
57
|
+
entry_kind: "policy_pin";
|
|
58
|
+
payload: PolicyPinLedgerPayload;
|
|
59
|
+
}) | (LedgerEntryBase & {
|
|
60
|
+
entry_kind: "dependency_check";
|
|
61
|
+
payload: DependencyCheckLedgerPayload;
|
|
62
|
+
});
|
|
63
|
+
export declare function sha256Utf8(text: string): string;
|
|
64
|
+
export declare function entryHash(entry: LedgerEntry): string;
|
|
65
|
+
export declare function genesisPrevHash(): string;
|
|
66
|
+
export declare function buildLedgerEntry<K extends LedgerEntryKind>(input: {
|
|
67
|
+
kind: K;
|
|
68
|
+
org_id: string;
|
|
69
|
+
repository_hash: string;
|
|
70
|
+
msn_id: string;
|
|
71
|
+
git_head: string;
|
|
72
|
+
payload: LedgerPayloadFor<K>;
|
|
73
|
+
prev_entry_hash: string;
|
|
74
|
+
issued_at?: string;
|
|
75
|
+
}): Extract<LedgerEntry, {
|
|
76
|
+
entry_kind: K;
|
|
77
|
+
}>;
|
|
78
|
+
export {};
|
|
79
|
+
//# sourceMappingURL=ledger-entry.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-entry.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-entry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,eAAO,MAAM,2BAA2B,EAAG,OAAgB,CAAC;AAE5D,eAAO,MAAM,kBAAkB,0FAMrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GACrB,oBAAoB,GACpB,2BAA2B,GAC3B,uBAAuB,GACvB,sBAAsB,GACtB,4BAA4B,CAAC;AAEjC,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,SAAS,SAAS,GACzE,oBAAoB,GACpB,CAAC,SAAS,iBAAiB,GACzB,2BAA2B,GAC3B,CAAC,SAAS,aAAa,GACrB,uBAAuB,GACvB,CAAC,SAAS,YAAY,GACpB,sBAAsB,GACtB,CAAC,SAAS,kBAAkB,GAC1B,4BAA4B,GAC5B,KAAK,CAAC;AAElB,UAAU,eAAe;IACvB,cAAc,EAAE,OAAO,2BAA2B,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GACnB,CAAC,eAAe,GAAG;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAAC,GAC5E,CAAC,eAAe,GAAG;IAAE,UAAU,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,2BAA2B,CAAA;CAAE,CAAC,GAC3F,CAAC,eAAe,GAAG;IAAE,UAAU,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,CAAC,GACnF,CAAC,eAAe,GAAG;IAAE,UAAU,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,GACjF,CAAC,eAAe,GAAG;IAAE,UAAU,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,4BAA4B,CAAA;CAAE,CAAC,CAAC;AAElG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAEpD;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE;IACjE,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,UAAU,EAAE,CAAC,CAAA;CAAE,CAAC,CAc1C"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import crypto from "node:crypto";
|
|
2
|
+
import { canonicalJson } from "../canonical-json.js";
|
|
3
|
+
import { LEDGER_GENESIS_HASH } from "../constants.js";
|
|
4
|
+
export const LEDGER_ENTRY_SCHEMA_VERSION = "1.0.0";
|
|
5
|
+
export const LEDGER_ENTRY_KINDS = [
|
|
6
|
+
"receipt",
|
|
7
|
+
"verify_findings",
|
|
8
|
+
"break_glass",
|
|
9
|
+
"policy_pin",
|
|
10
|
+
"dependency_check",
|
|
11
|
+
];
|
|
12
|
+
export function sha256Utf8(text) {
|
|
13
|
+
return crypto.createHash("sha256").update(text, "utf8").digest("hex");
|
|
14
|
+
}
|
|
15
|
+
export function entryHash(entry) {
|
|
16
|
+
return sha256Utf8(canonicalJson(entry));
|
|
17
|
+
}
|
|
18
|
+
export function genesisPrevHash() {
|
|
19
|
+
return LEDGER_GENESIS_HASH;
|
|
20
|
+
}
|
|
21
|
+
export function buildLedgerEntry(input) {
|
|
22
|
+
const payload_sha256 = sha256Utf8(canonicalJson(input.payload));
|
|
23
|
+
return {
|
|
24
|
+
schema_version: LEDGER_ENTRY_SCHEMA_VERSION,
|
|
25
|
+
entry_kind: input.kind,
|
|
26
|
+
org_id: input.org_id,
|
|
27
|
+
repository_hash: input.repository_hash,
|
|
28
|
+
msn_id: input.msn_id,
|
|
29
|
+
git_head: input.git_head,
|
|
30
|
+
payload_sha256,
|
|
31
|
+
payload: input.payload,
|
|
32
|
+
prev_entry_hash: input.prev_entry_hash,
|
|
33
|
+
issued_at: input.issued_at ?? new Date().toISOString(),
|
|
34
|
+
};
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=ledger-entry.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-entry.js","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-entry.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS;IACT,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,kBAAkB;CACV,CAAC;AA4EX,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAkB;IAC1C,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAA4B,KAS3D;IACC,MAAM,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,OAAO;QACL,cAAc,EAAE,2BAA2B;QAC3C,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACZ,CAAC;AAC/C,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
export declare const SOC2_CONTROL_MAP: readonly [{
|
|
2
|
+
readonly framework: "ISO 27001";
|
|
3
|
+
readonly control: "A.5.3";
|
|
4
|
+
readonly mapping: "Planner stamp + mission YAML + verify ledger entry";
|
|
5
|
+
}, {
|
|
6
|
+
readonly framework: "ISO 27001";
|
|
7
|
+
readonly control: "A.8.15";
|
|
8
|
+
readonly mapping: "refs/gxt/ledger + EXECUTOR_LOG.md quotes";
|
|
9
|
+
}, {
|
|
10
|
+
readonly framework: "ISO 27001";
|
|
11
|
+
readonly control: "A.8.28";
|
|
12
|
+
readonly mapping: "TMVC + policy floor (mandatory_gates, banned_imports)";
|
|
13
|
+
}, {
|
|
14
|
+
readonly framework: "ISO 42001";
|
|
15
|
+
readonly control: "AI boundaries";
|
|
16
|
+
readonly mapping: "Mission depends_on + interrogation record";
|
|
17
|
+
}, {
|
|
18
|
+
readonly framework: "SOC 2";
|
|
19
|
+
readonly control: "CC7";
|
|
20
|
+
readonly mapping: "Ledger chain verify + doctor ledger health";
|
|
21
|
+
}, {
|
|
22
|
+
readonly framework: "SOC 2";
|
|
23
|
+
readonly control: "CC8";
|
|
24
|
+
readonly mapping: "Planner git-proof + receipt / verify_findings entries";
|
|
25
|
+
}];
|
|
26
|
+
export declare function exportLedgerJson(root: string, outDir: string): string;
|
|
27
|
+
export declare function exportSoc2Pack(root: string, outDir: string): string;
|
|
28
|
+
//# sourceMappingURL=ledger-export.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-export.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-export.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;EAOnB,CAAC;AAEX,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAMrE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAmBnE"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import fs from "node:fs";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { REL_RECEIPTS_DIR } from "../constants.js";
|
|
4
|
+
import { verifyLedgerChain } from "./ledger-chain.js";
|
|
5
|
+
export const SOC2_CONTROL_MAP = [
|
|
6
|
+
{ framework: "ISO 27001", control: "A.5.3", mapping: "Planner stamp + mission YAML + verify ledger entry" },
|
|
7
|
+
{ framework: "ISO 27001", control: "A.8.15", mapping: "refs/gxt/ledger + EXECUTOR_LOG.md quotes" },
|
|
8
|
+
{ framework: "ISO 27001", control: "A.8.28", mapping: "TMVC + policy floor (mandatory_gates, banned_imports)" },
|
|
9
|
+
{ framework: "ISO 42001", control: "AI boundaries", mapping: "Mission depends_on + interrogation record" },
|
|
10
|
+
{ framework: "SOC 2", control: "CC7", mapping: "Ledger chain verify + doctor ledger health" },
|
|
11
|
+
{ framework: "SOC 2", control: "CC8", mapping: "Planner git-proof + receipt / verify_findings entries" },
|
|
12
|
+
];
|
|
13
|
+
export function exportLedgerJson(root, outDir) {
|
|
14
|
+
const report = verifyLedgerChain(root);
|
|
15
|
+
fs.mkdirSync(outDir, { recursive: true });
|
|
16
|
+
const dest = path.join(outDir, "ledger.json");
|
|
17
|
+
fs.writeFileSync(dest, `${JSON.stringify(report, null, 2)}\n`, "utf8");
|
|
18
|
+
return dest;
|
|
19
|
+
}
|
|
20
|
+
export function exportSoc2Pack(root, outDir) {
|
|
21
|
+
fs.mkdirSync(outDir, { recursive: true });
|
|
22
|
+
exportLedgerJson(root, outDir);
|
|
23
|
+
fs.writeFileSync(path.join(outDir, "control-map.json"), `${JSON.stringify({ schema_version: "1.0.0", controls: SOC2_CONTROL_MAP }, null, 2)}\n`, "utf8");
|
|
24
|
+
const receiptsDir = path.join(root, REL_RECEIPTS_DIR);
|
|
25
|
+
const destReceipts = path.join(outDir, "receipts");
|
|
26
|
+
if (fs.existsSync(receiptsDir)) {
|
|
27
|
+
fs.mkdirSync(destReceipts, { recursive: true });
|
|
28
|
+
for (const name of fs.readdirSync(receiptsDir)) {
|
|
29
|
+
if (name.endsWith(".json")) {
|
|
30
|
+
fs.copyFileSync(path.join(receiptsDir, name), path.join(destReceipts, name));
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
return outDir;
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=ledger-export.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ledger-export.js","sourceRoot":"","sources":["../../../../src/cli/lib/ledger/ledger-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oDAAoD,EAAE;IAC3G,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,0CAA0C,EAAE;IAClG,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,uDAAuD,EAAE;IAC/G,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,2CAA2C,EAAE;IAC1G,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC7F,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uDAAuD,EAAE;CAChG,CAAC;AAEX,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAc;IAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACzD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EACrC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvF,MAAM,CACP,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -1,9 +1,8 @@
|
|
|
1
|
+
import { type GateAdapterId, type GateSpec } from "./types.js";
|
|
1
2
|
/** Shared gate-command defaults for legislate, interrogate, and MCP draft flows. */
|
|
2
3
|
export declare function resolveLegislateGateOptions(options: {
|
|
3
4
|
gateCommand?: string;
|
|
4
5
|
gateSuccessSubstring?: string;
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
gateSuccessSubstring: string | null;
|
|
8
|
-
};
|
|
6
|
+
adapter?: GateAdapterId;
|
|
7
|
+
}): GateSpec;
|
|
9
8
|
//# sourceMappingURL=legislate-gate-options.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"legislate-gate-options.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/legislate-gate-options.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"legislate-gate-options.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/legislate-gate-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAEpB,oFAAoF;AACpF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GAAG,QAAQ,CAaX"}
|
|
@@ -1,11 +1,16 @@
|
|
|
1
|
+
import { DEFAULT_GATE_ADAPTER, } from "./types.js";
|
|
1
2
|
/** Shared gate-command defaults for legislate, interrogate, and MCP draft flows. */
|
|
2
3
|
export function resolveLegislateGateOptions(options) {
|
|
3
|
-
const
|
|
4
|
-
const
|
|
4
|
+
const command = options.gateCommand?.trim() || "echo OK";
|
|
5
|
+
const successSubstring = options.gateSuccessSubstring !== undefined
|
|
5
6
|
? options.gateSuccessSubstring.trim() || null
|
|
6
|
-
:
|
|
7
|
+
: command === "echo OK"
|
|
7
8
|
? "OK"
|
|
8
9
|
: null;
|
|
9
|
-
return {
|
|
10
|
+
return {
|
|
11
|
+
command,
|
|
12
|
+
successSubstring,
|
|
13
|
+
adapter: options.adapter ?? DEFAULT_GATE_ADAPTER,
|
|
14
|
+
};
|
|
10
15
|
}
|
|
11
16
|
//# sourceMappingURL=legislate-gate-options.js.map
|