@msn-control/liftoff 0.10.3 → 0.11.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/DEVELOPER.md +364 -20
- package/README.md +29 -29
- package/assets/governance/single-maintainer-gitflow/assessment-controls.json +39 -0
- package/assets/supported-stack.json +7 -138
- package/dist/adapters/azure/governance-assessment.d.ts +2 -0
- package/dist/adapters/azure/governance-assessment.js +21 -0
- package/dist/adapters/azure/governance-assessment.js.map +1 -0
- package/dist/adapters/filesystem/atomic-write.d.ts +2 -0
- package/dist/adapters/filesystem/atomic-write.js +74 -0
- package/dist/adapters/filesystem/atomic-write.js.map +1 -0
- package/dist/adapters/filesystem/errors.d.ts +2 -0
- package/dist/adapters/filesystem/errors.js +8 -0
- package/dist/adapters/filesystem/errors.js.map +1 -0
- package/dist/adapters/filesystem/manifest-file.d.ts +1 -0
- package/dist/adapters/filesystem/manifest-file.js +21 -0
- package/dist/adapters/filesystem/manifest-file.js.map +1 -0
- package/dist/adapters/filesystem/project-config.d.ts +4 -0
- package/dist/adapters/filesystem/project-config.js +157 -0
- package/dist/adapters/filesystem/project-config.js.map +1 -0
- package/dist/adapters/filesystem/project-discovery.d.ts +2 -0
- package/dist/adapters/filesystem/project-discovery.js +30 -0
- package/dist/adapters/filesystem/project-discovery.js.map +1 -0
- package/dist/adapters/filesystem/project-files.d.ts +6 -0
- package/dist/adapters/filesystem/project-files.js +68 -0
- package/dist/adapters/filesystem/project-files.js.map +1 -0
- package/dist/adapters/filesystem/project-lock.d.ts +8 -0
- package/dist/adapters/filesystem/project-lock.js +164 -0
- package/dist/adapters/filesystem/project-lock.js.map +1 -0
- package/dist/adapters/filesystem/project-paths.d.ts +2 -0
- package/dist/adapters/filesystem/project-paths.js +60 -0
- package/dist/adapters/filesystem/project-paths.js.map +1 -0
- package/dist/adapters/filesystem/project-transaction.d.ts +23 -0
- package/dist/adapters/filesystem/project-transaction.js +158 -0
- package/dist/adapters/filesystem/project-transaction.js.map +1 -0
- package/dist/adapters/git/governance-assessment.d.ts +22 -0
- package/dist/adapters/git/governance-assessment.js +161 -0
- package/dist/adapters/git/governance-assessment.js.map +1 -0
- package/dist/adapters/github/governance-assessment.d.ts +2 -0
- package/dist/adapters/github/governance-assessment.js +18 -0
- package/dist/adapters/github/governance-assessment.js.map +1 -0
- package/dist/adapters/packaged-assets/package-root.d.ts +3 -0
- package/dist/adapters/packaged-assets/package-root.js +21 -0
- package/dist/adapters/packaged-assets/package-root.js.map +1 -0
- package/dist/adapters/packaged-assets/supported-stack.d.ts +4 -0
- package/dist/adapters/packaged-assets/supported-stack.js +18 -0
- package/dist/adapters/packaged-assets/supported-stack.js.map +1 -0
- package/dist/adapters/packaged-assets/template-assets.d.ts +23 -0
- package/dist/adapters/packaged-assets/template-assets.js +36 -0
- package/dist/adapters/packaged-assets/template-assets.js.map +1 -0
- package/dist/adapters/process/shell-command.d.ts +5 -0
- package/dist/adapters/process/shell-command.js +21 -0
- package/dist/adapters/process/shell-command.js.map +1 -0
- package/dist/application/context.d.ts +20 -0
- package/dist/application/context.js +2 -0
- package/dist/application/context.js.map +1 -0
- package/dist/application/diagnose/doctor.d.ts +21 -0
- package/dist/application/diagnose/doctor.js +586 -0
- package/dist/application/diagnose/doctor.js.map +1 -0
- package/dist/application/diagnose/generated-project.d.ts +1 -0
- package/dist/application/diagnose/generated-project.js +105 -0
- package/dist/application/diagnose/generated-project.js.map +1 -0
- package/dist/application/diagnose/validate.d.ts +6 -0
- package/dist/application/diagnose/validate.js +27 -0
- package/dist/application/diagnose/validate.js.map +1 -0
- package/dist/application/initialize/fixture.d.ts +2 -0
- package/dist/application/initialize/fixture.js +39 -0
- package/dist/application/initialize/fixture.js.map +1 -0
- package/dist/application/initialize/inputs.d.ts +3 -0
- package/dist/application/initialize/inputs.js +35 -0
- package/dist/application/initialize/inputs.js.map +1 -0
- package/dist/application/initialize/use-case.d.ts +23 -0
- package/dist/application/initialize/use-case.js +360 -0
- package/dist/application/initialize/use-case.js.map +1 -0
- package/dist/application/migrate/use-case.d.ts +7 -0
- package/dist/application/migrate/use-case.js +378 -0
- package/dist/application/migrate/use-case.js.map +1 -0
- package/dist/application/project/catalog.d.ts +46 -0
- package/dist/application/project/catalog.js +12 -0
- package/dist/application/project/catalog.js.map +1 -0
- package/dist/application/project/manifest.d.ts +2 -0
- package/dist/application/project/manifest.js +29 -0
- package/dist/application/project/manifest.js.map +1 -0
- package/dist/application/project/planning.d.ts +6 -0
- package/dist/application/project/planning.js +12 -0
- package/dist/application/project/planning.js.map +1 -0
- package/dist/application/update/planning.d.ts +40 -0
- package/dist/application/update/planning.js +293 -0
- package/dist/application/update/planning.js.map +1 -0
- package/dist/application/update/reporting.d.ts +42 -0
- package/dist/application/update/reporting.js +325 -0
- package/dist/application/update/reporting.js.map +1 -0
- package/dist/application/update/use-case.d.ts +8 -0
- package/dist/application/update/use-case.js +600 -0
- package/dist/application/update/use-case.js.map +1 -0
- package/dist/application/upgrade/use-case.d.ts +6 -0
- package/dist/application/upgrade/use-case.js +82 -0
- package/dist/application/upgrade/use-case.js.map +1 -0
- package/dist/args.d.ts +5 -65
- package/dist/args.js +4 -441
- package/dist/args.js.map +1 -1
- package/dist/artifact-lifecycle.d.ts +1 -21
- package/dist/artifact-lifecycle.js +1 -73
- package/dist/artifact-lifecycle.js.map +1 -1
- package/dist/catalogs.d.ts +1 -50
- package/dist/catalogs.js +1 -472
- package/dist/catalogs.js.map +1 -1
- package/dist/cli/args/contracts.d.ts +51 -0
- package/dist/cli/args/contracts.js +2 -0
- package/dist/cli/args/contracts.js.map +1 -0
- package/dist/cli/args/definitions.d.ts +6 -0
- package/dist/cli/args/definitions.js +187 -0
- package/dist/cli/args/definitions.js.map +1 -0
- package/dist/cli/args/help.d.ts +5 -0
- package/dist/cli/args/help.js +130 -0
- package/dist/cli/args/help.js.map +1 -0
- package/dist/cli/args/parser.d.ts +5 -0
- package/dist/cli/args/parser.js +145 -0
- package/dist/cli/args/parser.js.map +1 -0
- package/dist/cli/args/readers.d.ts +4 -0
- package/dist/cli/args/readers.js +19 -0
- package/dist/cli/args/readers.js.map +1 -0
- package/dist/cli/commands/diagnose.d.ts +4 -0
- package/dist/cli/commands/diagnose.js +12 -0
- package/dist/cli/commands/diagnose.js.map +1 -0
- package/dist/cli/commands/dispatch.d.ts +3 -0
- package/dist/cli/commands/dispatch.js +94 -0
- package/dist/cli/commands/dispatch.js.map +1 -0
- package/dist/cli/commands/help.d.ts +3 -0
- package/dist/cli/commands/help.js +32 -0
- package/dist/cli/commands/help.js.map +1 -0
- package/dist/cli/commands/helpers.d.ts +8 -0
- package/dist/cli/commands/helpers.js +97 -0
- package/dist/cli/commands/helpers.js.map +1 -0
- package/dist/cli/commands/initialize.d.ts +3 -0
- package/dist/cli/commands/initialize.js +7 -0
- package/dist/cli/commands/initialize.js.map +1 -0
- package/dist/cli/commands/migrate.d.ts +3 -0
- package/dist/cli/commands/migrate.js +8 -0
- package/dist/cli/commands/migrate.js.map +1 -0
- package/dist/cli/commands/plan.d.ts +3 -0
- package/dist/cli/commands/plan.js +34 -0
- package/dist/cli/commands/plan.js.map +1 -0
- package/dist/cli/commands/reference.d.ts +5 -0
- package/dist/cli/commands/reference.js +43 -0
- package/dist/cli/commands/reference.js.map +1 -0
- package/dist/cli/commands/update.d.ts +3 -0
- package/dist/cli/commands/update.js +9 -0
- package/dist/cli/commands/update.js.map +1 -0
- package/dist/cli/commands/upgrade.d.ts +3 -0
- package/dist/cli/commands/upgrade.js +7 -0
- package/dist/cli/commands/upgrade.js.map +1 -0
- package/dist/cli/context.d.ts +1 -0
- package/dist/cli/context.js +2 -0
- package/dist/cli/context.js.map +1 -0
- package/dist/cli/project-options.d.ts +3 -0
- package/dist/cli/project-options.js +41 -0
- package/dist/cli/project-options.js.map +1 -0
- package/dist/cli.d.ts +3 -3
- package/dist/cli.js +4 -3
- package/dist/cli.js.map +1 -1
- package/dist/commands.d.ts +4 -35
- package/dist/commands.js +3 -2812
- package/dist/commands.js.map +1 -1
- package/dist/container-validation.d.ts +1 -1
- package/dist/domain/governance/activation/approvals.d.ts +351 -0
- package/dist/domain/governance/activation/approvals.js +528 -0
- package/dist/domain/governance/activation/approvals.js.map +1 -0
- package/dist/domain/governance/activation/canonical-json.d.ts +4 -0
- package/dist/domain/governance/activation/canonical-json.js +39 -0
- package/dist/domain/governance/activation/canonical-json.js.map +1 -0
- package/dist/domain/governance/activation/capabilities.d.ts +7 -0
- package/dist/domain/governance/activation/capabilities.js +33 -0
- package/dist/domain/governance/activation/capabilities.js.map +1 -0
- package/dist/domain/governance/activation/evidence.d.ts +63 -0
- package/dist/domain/governance/activation/evidence.js +444 -0
- package/dist/domain/governance/activation/evidence.js.map +1 -0
- package/dist/domain/governance/activation/graph.d.ts +397 -0
- package/dist/domain/governance/activation/graph.js +441 -0
- package/dist/domain/governance/activation/graph.js.map +1 -0
- package/dist/domain/governance/activation/inputs.d.ts +25 -0
- package/dist/domain/governance/activation/inputs.js +63 -0
- package/dist/domain/governance/activation/inputs.js.map +1 -0
- package/dist/domain/governance/activation/operations.d.ts +19 -0
- package/dist/domain/governance/activation/operations.js +181 -0
- package/dist/domain/governance/activation/operations.js.map +1 -0
- package/dist/domain/governance/activation/readiness.d.ts +27 -0
- package/dist/domain/governance/activation/readiness.js +269 -0
- package/dist/domain/governance/activation/readiness.js.map +1 -0
- package/dist/domain/governance/activation/types.d.ts +399 -0
- package/dist/domain/governance/activation/types.js +109 -0
- package/dist/domain/governance/activation/types.js.map +1 -0
- package/dist/domain/governance/activation/validators.d.ts +22 -0
- package/dist/domain/governance/activation/validators.js +1347 -0
- package/dist/domain/governance/activation/validators.js.map +1 -0
- package/dist/domain/governance/assessment/catalog.d.ts +14 -0
- package/dist/domain/governance/assessment/catalog.js +105 -0
- package/dist/domain/governance/assessment/catalog.js.map +1 -0
- package/dist/domain/governance/assessment/errors.d.ts +10 -0
- package/dist/domain/governance/assessment/errors.js +22 -0
- package/dist/domain/governance/assessment/errors.js.map +1 -0
- package/dist/domain/governance/assessment/index.d.ts +8 -0
- package/dist/domain/governance/assessment/index.js +9 -0
- package/dist/domain/governance/assessment/index.js.map +1 -0
- package/dist/domain/governance/assessment/live-normalize.d.ts +19 -0
- package/dist/domain/governance/assessment/live-normalize.js +403 -0
- package/dist/domain/governance/assessment/live-normalize.js.map +1 -0
- package/dist/domain/governance/assessment/predicates.d.ts +36 -0
- package/dist/domain/governance/assessment/predicates.js +545 -0
- package/dist/domain/governance/assessment/predicates.js.map +1 -0
- package/dist/domain/governance/assessment/report.d.ts +23 -0
- package/dist/domain/governance/assessment/report.js +266 -0
- package/dist/domain/governance/assessment/report.js.map +1 -0
- package/dist/domain/governance/assessment/sanitize.d.ts +8 -0
- package/dist/domain/governance/assessment/sanitize.js +60 -0
- package/dist/domain/governance/assessment/sanitize.js.map +1 -0
- package/dist/domain/governance/assessment/types.d.ts +174 -0
- package/dist/domain/governance/assessment/types.js +13 -0
- package/dist/domain/governance/assessment/types.js.map +1 -0
- package/dist/domain/governance/assessment/yaml.d.ts +6 -0
- package/dist/domain/governance/assessment/yaml.js +30 -0
- package/dist/domain/governance/assessment/yaml.js.map +1 -0
- package/dist/domain/governance/policy/identity.d.ts +64 -0
- package/dist/domain/governance/policy/identity.js +112 -0
- package/dist/domain/governance/policy/identity.js.map +1 -0
- package/dist/domain/migration/dependencies.d.ts +7 -0
- package/dist/domain/migration/dependencies.js +221 -0
- package/dist/domain/migration/dependencies.js.map +1 -0
- package/dist/domain/migration/inventory.d.ts +3 -0
- package/dist/domain/migration/inventory.js +15 -0
- package/dist/domain/migration/inventory.js.map +1 -0
- package/dist/domain/project/artifact-lifecycle.d.ts +69 -0
- package/dist/domain/project/artifact-lifecycle.js +137 -0
- package/dist/domain/project/artifact-lifecycle.js.map +1 -0
- package/dist/domain/project/catalog.d.ts +48 -0
- package/dist/domain/project/catalog.js +507 -0
- package/dist/domain/project/catalog.js.map +1 -0
- package/dist/domain/project/contracts.d.ts +247 -0
- package/dist/domain/project/contracts.js +2 -0
- package/dist/domain/project/contracts.js.map +1 -0
- package/dist/domain/project/errors.d.ts +3 -0
- package/dist/domain/project/errors.js +7 -0
- package/dist/domain/project/errors.js.map +1 -0
- package/dist/domain/project/infrastructure-layout.d.ts +26 -0
- package/dist/domain/project/infrastructure-layout.js +124 -0
- package/dist/domain/project/infrastructure-layout.js.map +1 -0
- package/dist/domain/project/inputs.d.ts +21 -0
- package/dist/domain/project/inputs.js +41 -0
- package/dist/domain/project/inputs.js.map +1 -0
- package/dist/domain/project/manifest/artifacts.d.ts +8 -0
- package/dist/domain/project/manifest/artifacts.js +150 -0
- package/dist/domain/project/manifest/artifacts.js.map +1 -0
- package/dist/domain/project/manifest/context.d.ts +13 -0
- package/dist/domain/project/manifest/context.js +2 -0
- package/dist/domain/project/manifest/context.js.map +1 -0
- package/dist/domain/project/manifest/fields.d.ts +6 -0
- package/dist/domain/project/manifest/fields.js +36 -0
- package/dist/domain/project/manifest/fields.js.map +1 -0
- package/dist/domain/project/manifest/governance.d.ts +8 -0
- package/dist/domain/project/manifest/governance.js +161 -0
- package/dist/domain/project/manifest/governance.js.map +1 -0
- package/dist/domain/project/manifest/project-identity.d.ts +6 -0
- package/dist/domain/project/manifest/project-identity.js +273 -0
- package/dist/domain/project/manifest/project-identity.js.map +1 -0
- package/dist/domain/project/manifest/reader.d.ts +9 -0
- package/dist/domain/project/manifest/reader.js +141 -0
- package/dist/domain/project/manifest/reader.js.map +1 -0
- package/dist/domain/project/paths.d.ts +2 -0
- package/dist/domain/project/paths.js +29 -0
- package/dist/domain/project/paths.js.map +1 -0
- package/dist/domain/project/planning.d.ts +19 -0
- package/dist/domain/project/planning.js +329 -0
- package/dist/domain/project/planning.js.map +1 -0
- package/dist/domain/project/retired-workload.d.ts +4 -0
- package/dist/domain/project/retired-workload.js +18 -0
- package/dist/domain/project/retired-workload.js.map +1 -0
- package/dist/domain/project/supported-stack.d.ts +113 -0
- package/dist/domain/project/supported-stack.js +426 -0
- package/dist/domain/project/supported-stack.js.map +1 -0
- package/dist/domain/workstation/constraints.d.ts +6 -0
- package/dist/domain/workstation/constraints.js +8 -0
- package/dist/domain/workstation/constraints.js.map +1 -0
- package/dist/file-system.d.ts +10 -41
- package/dist/file-system.js +9 -1204
- package/dist/file-system.js.map +1 -1
- package/dist/framework-adapters.d.ts +1 -1
- package/dist/framework-validation.d.ts +1 -1
- package/dist/framework-validation.js +1 -1
- package/dist/framework-validation.js.map +1 -1
- package/dist/genai-templates.d.ts +2 -9
- package/dist/genai-templates.js +4 -5
- package/dist/genai-templates.js.map +1 -1
- package/dist/generators/common/artifacts.d.ts +6 -0
- package/dist/generators/common/artifacts.js +30 -0
- package/dist/generators/common/artifacts.js.map +1 -0
- package/dist/generators/common/base.d.ts +17 -0
- package/dist/generators/common/base.js +421 -0
- package/dist/generators/common/base.js.map +1 -0
- package/dist/generators/common/dotenv-validation.d.ts +2 -0
- package/dist/generators/common/dotenv-validation.js +80 -0
- package/dist/generators/common/dotenv-validation.js.map +1 -0
- package/dist/generators/common/environments.d.ts +3 -0
- package/dist/generators/common/environments.js +15 -0
- package/dist/generators/common/environments.js.map +1 -0
- package/dist/generators/common/frontend.d.ts +15 -0
- package/dist/generators/common/frontend.js +166 -0
- package/dist/generators/common/frontend.js.map +1 -0
- package/dist/generators/common/python-settings.d.ts +2 -0
- package/dist/generators/common/python-settings.js +70 -0
- package/dist/generators/common/python-settings.js.map +1 -0
- package/dist/generators/common/spec-workflow.d.ts +28 -0
- package/dist/generators/common/spec-workflow.js +567 -0
- package/dist/generators/common/spec-workflow.js.map +1 -0
- package/dist/generators/common/values.d.ts +13 -0
- package/dist/generators/common/values.js +16 -0
- package/dist/generators/common/values.js.map +1 -0
- package/dist/generators/containers/compose.d.ts +7 -0
- package/dist/generators/containers/compose.js +196 -0
- package/dist/generators/containers/compose.js.map +1 -0
- package/dist/generators/containers/context.d.ts +1 -0
- package/dist/generators/containers/context.js +43 -0
- package/dist/generators/containers/context.js.map +1 -0
- package/dist/generators/containers/images.d.ts +7 -0
- package/dist/generators/containers/images.js +119 -0
- package/dist/generators/containers/images.js.map +1 -0
- package/dist/generators/context.d.ts +42 -0
- package/dist/generators/context.js +38 -0
- package/dist/generators/context.js.map +1 -0
- package/dist/generators/genai/backend.d.ts +20 -0
- package/dist/generators/genai/backend.js +667 -0
- package/dist/generators/genai/backend.js.map +1 -0
- package/dist/generators/genai/configuration.d.ts +3 -0
- package/dist/generators/genai/configuration.js +43 -0
- package/dist/generators/genai/configuration.js.map +1 -0
- package/dist/generators/genai/database.d.ts +7 -0
- package/dist/generators/genai/database.js +71 -0
- package/dist/generators/genai/database.js.map +1 -0
- package/dist/generators/genai/functions.d.ts +15 -0
- package/dist/generators/genai/functions.js +156 -0
- package/dist/generators/genai/functions.js.map +1 -0
- package/dist/generators/genai/index.d.ts +8 -0
- package/dist/generators/genai/index.js +11 -0
- package/dist/generators/genai/index.js.map +1 -0
- package/dist/generators/genai/patterns.d.ts +9 -0
- package/dist/generators/genai/patterns.js +309 -0
- package/dist/generators/genai/patterns.js.map +1 -0
- package/dist/generators/infrastructure/azure.d.ts +18 -0
- package/dist/generators/infrastructure/azure.js +655 -0
- package/dist/generators/infrastructure/azure.js.map +1 -0
- package/dist/generators/infrastructure/names.d.ts +23 -0
- package/dist/generators/infrastructure/names.js +51 -0
- package/dist/generators/infrastructure/names.js.map +1 -0
- package/dist/generators/standard/configuration.d.ts +3 -0
- package/dist/generators/standard/configuration.js +26 -0
- package/dist/generators/standard/configuration.js.map +1 -0
- package/dist/generators/standard/go.d.ts +17 -0
- package/dist/generators/standard/go.js +338 -0
- package/dist/generators/standard/go.js.map +1 -0
- package/dist/generators/standard/index.d.ts +12 -0
- package/dist/generators/standard/index.js +12 -0
- package/dist/generators/standard/index.js.map +1 -0
- package/dist/generators/standard/node.d.ts +20 -0
- package/dist/generators/standard/node.js +314 -0
- package/dist/generators/standard/node.js.map +1 -0
- package/dist/generators/standard/python.d.ts +18 -0
- package/dist/generators/standard/python.js +191 -0
- package/dist/generators/standard/python.js.map +1 -0
- package/dist/go-template-assets.js +3 -3
- package/dist/go-template-assets.js.map +1 -1
- package/dist/governance-activation/activation-state.d.ts +1 -1
- package/dist/governance-activation/activation-state.js +46 -9
- package/dist/governance-activation/activation-state.js.map +1 -1
- package/dist/governance-activation/approvals.d.ts +1 -188
- package/dist/governance-activation/approvals.js +1 -507
- package/dist/governance-activation/approvals.js.map +1 -1
- package/dist/governance-activation/canonical-json.d.ts +1 -3
- package/dist/governance-activation/canonical-json.js +1 -35
- package/dist/governance-activation/canonical-json.js.map +1 -1
- package/dist/governance-activation/commands.d.ts +1 -1
- package/dist/governance-activation/commands.js +107 -103
- package/dist/governance-activation/commands.js.map +1 -1
- package/dist/governance-activation/compatibility.d.ts +11 -3
- package/dist/governance-activation/compatibility.js +31 -4
- package/dist/governance-activation/compatibility.js.map +1 -1
- package/dist/governance-activation/credentials.d.ts +3 -3
- package/dist/governance-activation/credentials.js +5 -5
- package/dist/governance-activation/credentials.js.map +1 -1
- package/dist/governance-activation/doctor.d.ts +1 -1
- package/dist/governance-activation/doctor.js +28 -96
- package/dist/governance-activation/doctor.js.map +1 -1
- package/dist/governance-activation/evidence.d.ts +1 -49
- package/dist/governance-activation/evidence.js +1 -245
- package/dist/governance-activation/evidence.js.map +1 -1
- package/dist/governance-activation/git-ignore.d.ts +9 -0
- package/dist/governance-activation/git-ignore.js +76 -0
- package/dist/governance-activation/git-ignore.js.map +1 -0
- package/dist/governance-activation/graph.d.ts +1 -397
- package/dist/governance-activation/graph.js +1 -440
- package/dist/governance-activation/graph.js.map +1 -1
- package/dist/governance-activation/identity.d.ts +1 -35
- package/dist/governance-activation/identity.js +1 -88
- package/dist/governance-activation/identity.js.map +1 -1
- package/dist/governance-activation/index.d.ts +3 -0
- package/dist/governance-activation/index.js +3 -0
- package/dist/governance-activation/index.js.map +1 -1
- package/dist/governance-activation/inputs.d.ts +8 -0
- package/dist/governance-activation/inputs.js +146 -0
- package/dist/governance-activation/inputs.js.map +1 -0
- package/dist/governance-activation/migration.d.ts +4 -3
- package/dist/governance-activation/migration.js +14 -6
- package/dist/governance-activation/migration.js.map +1 -1
- package/dist/governance-activation/phase-bootstrap-state.d.ts +3 -0
- package/dist/governance-activation/phase-bootstrap-state.js +128 -0
- package/dist/governance-activation/phase-bootstrap-state.js.map +1 -0
- package/dist/governance-activation/phase-discovery.d.ts +2 -0
- package/dist/governance-activation/phase-discovery.js +88 -0
- package/dist/governance-activation/phase-discovery.js.map +1 -0
- package/dist/governance-activation/phase-governance.d.ts +4 -0
- package/dist/governance-activation/phase-governance.js +141 -0
- package/dist/governance-activation/phase-governance.js.map +1 -0
- package/dist/governance-activation/phase-publication.d.ts +8 -0
- package/dist/governance-activation/phase-publication.js +318 -0
- package/dist/governance-activation/phase-publication.js.map +1 -0
- package/dist/governance-activation/read-only.d.ts +30 -0
- package/dist/governance-activation/read-only.js +93 -0
- package/dist/governance-activation/read-only.js.map +1 -0
- package/dist/governance-activation/readiness.d.ts +1 -24
- package/dist/governance-activation/readiness.js +1 -220
- package/dist/governance-activation/readiness.js.map +1 -1
- package/dist/governance-activation/reconciliation.d.ts +1 -1
- package/dist/governance-activation/reconciliation.js +3 -3
- package/dist/governance-activation/reconciliation.js.map +1 -1
- package/dist/governance-activation/release-integrity.d.ts +1 -1
- package/dist/governance-activation/release-integrity.js +2 -2
- package/dist/governance-activation/release-integrity.js.map +1 -1
- package/dist/governance-activation/seed-lifecycle.d.ts +10 -2
- package/dist/governance-activation/seed-lifecycle.js +244 -66
- package/dist/governance-activation/seed-lifecycle.js.map +1 -1
- package/dist/governance-activation/source-of-truth.d.ts +5 -3
- package/dist/governance-activation/source-of-truth.js +32 -52
- package/dist/governance-activation/source-of-truth.js.map +1 -1
- package/dist/governance-activation/spec-kit-seed.d.ts +9 -0
- package/dist/governance-activation/spec-kit-seed.js +43 -0
- package/dist/governance-activation/spec-kit-seed.js.map +1 -0
- package/dist/governance-activation/task-projection.d.ts +1 -1
- package/dist/governance-activation/transition-planning.d.ts +15 -0
- package/dist/governance-activation/transition-planning.js +250 -0
- package/dist/governance-activation/transition-planning.js.map +1 -0
- package/dist/governance-activation/transition-ports.d.ts +150 -0
- package/dist/governance-activation/transition-ports.js +2 -0
- package/dist/governance-activation/transition-ports.js.map +1 -0
- package/dist/governance-activation/transition-process.d.ts +7 -0
- package/dist/governance-activation/transition-process.js +21 -0
- package/dist/governance-activation/transition-process.js.map +1 -0
- package/dist/governance-activation/transition-records.d.ts +56 -0
- package/dist/governance-activation/transition-records.js +208 -0
- package/dist/governance-activation/transition-records.js.map +1 -0
- package/dist/governance-activation/transitions.d.ts +6 -157
- package/dist/governance-activation/transitions.js +143 -2045
- package/dist/governance-activation/transitions.js.map +1 -1
- package/dist/governance-activation/types.d.ts +1 -390
- package/dist/governance-activation/types.js +1 -107
- package/dist/governance-activation/types.js.map +1 -1
- package/dist/governance-activation/validators.d.ts +1 -17
- package/dist/governance-activation/validators.js +1 -1304
- package/dist/governance-activation/validators.js.map +1 -1
- package/dist/governance-assessment/catalog.d.ts +7 -0
- package/dist/governance-assessment/catalog.js +31 -0
- package/dist/governance-assessment/catalog.js.map +1 -0
- package/dist/governance-assessment/command.d.ts +10 -0
- package/dist/governance-assessment/command.js +77 -0
- package/dist/governance-assessment/command.js.map +1 -0
- package/dist/governance-assessment/engine.d.ts +14 -0
- package/dist/governance-assessment/engine.js +935 -0
- package/dist/governance-assessment/engine.js.map +1 -0
- package/dist/governance-assessment/index.d.ts +5 -0
- package/dist/governance-assessment/index.js +6 -0
- package/dist/governance-assessment/index.js.map +1 -0
- package/dist/governance-assessment/live-normalize.d.ts +1 -0
- package/dist/governance-assessment/live-normalize.js +2 -0
- package/dist/governance-assessment/live-normalize.js.map +1 -0
- package/dist/governance-assessment/live-transport.d.ts +34 -0
- package/dist/governance-assessment/live-transport.js +455 -0
- package/dist/governance-assessment/live-transport.js.map +1 -0
- package/dist/governance-assessment/live.d.ts +2 -0
- package/dist/governance-assessment/live.js +689 -0
- package/dist/governance-assessment/live.js.map +1 -0
- package/dist/governance-assessment/predicates.d.ts +1 -0
- package/dist/governance-assessment/predicates.js +2 -0
- package/dist/governance-assessment/predicates.js.map +1 -0
- package/dist/governance-assessment/project.d.ts +33 -0
- package/dist/governance-assessment/project.js +178 -0
- package/dist/governance-assessment/project.js.map +1 -0
- package/dist/governance-assessment/readers.d.ts +14 -0
- package/dist/governance-assessment/readers.js +122 -0
- package/dist/governance-assessment/readers.js.map +1 -0
- package/dist/governance-assessment/report.d.ts +1 -0
- package/dist/governance-assessment/report.js +2 -0
- package/dist/governance-assessment/report.js.map +1 -0
- package/dist/governance-assessment/sanitize.d.ts +1 -0
- package/dist/governance-assessment/sanitize.js +2 -0
- package/dist/governance-assessment/sanitize.js.map +1 -0
- package/dist/governance-assessment/types.d.ts +6 -0
- package/dist/governance-assessment/types.js +2 -0
- package/dist/governance-assessment/types.js.map +1 -0
- package/dist/governance-assessment/yaml.d.ts +1 -0
- package/dist/governance-assessment/yaml.js +2 -0
- package/dist/governance-assessment/yaml.js.map +1 -0
- package/dist/init-filesystem.d.ts +1 -1
- package/dist/init-filesystem.js +126 -174
- package/dist/init-filesystem.js.map +1 -1
- package/dist/interactive.d.ts +2 -2
- package/dist/interactive.js +42 -41
- package/dist/interactive.js.map +1 -1
- package/dist/migrate-plan.d.ts +5 -1
- package/dist/migrate-plan.js +87 -10
- package/dist/migrate-plan.js.map +1 -1
- package/dist/npm-template-assets.js +5 -4
- package/dist/npm-template-assets.js.map +1 -1
- package/dist/openspec-profile.d.ts +1 -1
- package/dist/opentofu-template-assets.js +3 -3
- package/dist/opentofu-template-assets.js.map +1 -1
- package/dist/package-identity.d.ts +3 -0
- package/dist/package-identity.js +13 -2
- package/dist/package-identity.js.map +1 -1
- package/dist/planner.d.ts +1 -19
- package/dist/planner.js +1 -565
- package/dist/planner.js.map +1 -1
- package/dist/process-runner.d.ts +5 -1
- package/dist/process-runner.js +164 -8
- package/dist/process-runner.js.map +1 -1
- package/dist/project-dependencies.d.ts +5 -3
- package/dist/project-dependencies.js +74 -63
- package/dist/project-dependencies.js.map +1 -1
- package/dist/published-verifier.js +67 -30
- package/dist/published-verifier.js.map +1 -1
- package/dist/python-template-assets.js +6 -9
- package/dist/python-template-assets.js.map +1 -1
- package/dist/reconcile.d.ts +1 -1
- package/dist/reconcile.js +2 -2
- package/dist/reconcile.js.map +1 -1
- package/dist/release-identity.js +19 -0
- package/dist/release-identity.js.map +1 -1
- package/dist/repository-governance.d.ts +10 -2
- package/dist/repository-governance.js +240 -99
- package/dist/repository-governance.js.map +1 -1
- package/dist/runtime.js +1 -1
- package/dist/runtime.js.map +1 -1
- package/dist/scan.d.ts +6 -2
- package/dist/scan.js +78 -30
- package/dist/scan.js.map +1 -1
- package/dist/self-upgrade.d.ts +1 -1
- package/dist/self-upgrade.js +20 -7
- package/dist/self-upgrade.js.map +1 -1
- package/dist/stable-release.js +7 -1
- package/dist/stable-release.js.map +1 -1
- package/dist/standard-templates.d.ts +2 -2
- package/dist/standard-templates.js +6 -841
- package/dist/standard-templates.js.map +1 -1
- package/dist/supported-stack.d.ts +3 -115
- package/dist/supported-stack.js +4 -438
- package/dist/supported-stack.js.map +1 -1
- package/dist/telemetry/contract.d.ts +2 -0
- package/dist/telemetry/contract.js +7 -0
- package/dist/telemetry/contract.js.map +1 -1
- package/dist/telemetry/index.d.ts +1 -1
- package/dist/templates.d.ts +10 -20
- package/dist/templates.js +52 -3238
- package/dist/templates.js.map +1 -1
- package/dist/types.d.ts +1 -263
- package/dist/types.js +1 -1
- package/dist/types.js.map +1 -1
- package/dist/version.js +2 -6
- package/dist/version.js.map +1 -1
- package/dist/workstation-catalog.d.ts +5 -2
- package/dist/workstation-catalog.js +33 -2
- package/dist/workstation-catalog.js.map +1 -1
- package/dist/workstation.d.ts +4 -3
- package/dist/workstation.js +86 -32
- package/dist/workstation.js.map +1 -1
- package/docs/assets/liftoff-terminal.svg +3 -3
- package/docs/azure-deployment.md +107 -10
- package/docs/cli-reference.md +127 -11
- package/docs/configuration-and-manifests.md +150 -35
- package/docs/existing-repositories.md +33 -6
- package/docs/getting-started.md +44 -31
- package/docs/prerequisites.md +34 -35
- package/docs/project-structure.md +45 -47
- package/docs/repository-governance.md +207 -24
- package/docs/safety-and-consent.md +65 -12
- package/docs/spec-workflows-and-agents.md +31 -28
- package/docs/supported-stack.md +11 -9
- package/docs/telemetry.md +9 -3
- package/docs/troubleshooting.md +107 -49
- package/docs/workloads.md +53 -62
- package/package.json +6 -8
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/UPSTREAM_LICENSE.txt +0 -21
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/catalog.json +0 -520
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/packaged/gitignore +0 -27
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/README.md +0 -25
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/components.json +0 -22
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/eslint.config.js +0 -23
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/index.html +0 -13
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/package-lock.json +0 -6156
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/package.json +0 -60
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/public/power-apps.svg +0 -55
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/App.tsx +0 -17
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/assets/react.svg +0 -1
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/mode-toggle.tsx +0 -37
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/badge.tsx +0 -46
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/button.tsx +0 -60
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/calendar.tsx +0 -211
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/card.tsx +0 -92
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/chart.tsx +0 -355
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/checkbox.tsx +0 -32
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/command.tsx +0 -184
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/dialog.tsx +0 -141
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/dropdown-menu.tsx +0 -257
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/input.tsx +0 -21
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/label.tsx +0 -22
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/popover.tsx +0 -46
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/progress.tsx +0 -29
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/select.tsx +0 -185
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/separator.tsx +0 -26
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/skeleton.tsx +0 -13
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/table.tsx +0 -114
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/tabs.tsx +0 -66
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/textarea.tsx +0 -18
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/components/ui/tooltip.tsx +0 -61
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/hooks/use-theme.ts +0 -11
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/index.css +0 -131
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/lib/utils.ts +0 -6
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/main.tsx +0 -10
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/pages/_layout.tsx +0 -31
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/pages/home.tsx +0 -59
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/pages/not-found.tsx +0 -14
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/providers/query-provider.tsx +0 -26
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/providers/sonner-provider.tsx +0 -23
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/providers/theme-provider.tsx +0 -64
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/src/router.tsx +0 -24
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/tsconfig.app.json +0 -34
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/tsconfig.json +0 -13
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/tsconfig.node.json +0 -26
- package/assets/power-apps-code-app/3438c352483e40982f6c5c0fc36fd71f8e7adbbb/starter/vite.config.ts +0 -19
- package/assets/power-apps-code-app/README.md +0 -27
- package/dist/code-apps-plugin.d.ts +0 -13
- package/dist/code-apps-plugin.js +0 -69
- package/dist/code-apps-plugin.js.map +0 -1
- package/dist/power-apps-assets.d.ts +0 -30
- package/dist/power-apps-assets.js +0 -131
- package/dist/power-apps-assets.js.map +0 -1
- package/dist/power-apps-templates.d.ts +0 -3
- package/dist/power-apps-templates.js +0 -173
- package/dist/power-apps-templates.js.map +0 -1
- package/dist/power-apps-validation.d.ts +0 -1
- package/dist/power-apps-validation.js +0 -79
- package/dist/power-apps-validation.js.map +0 -1
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { type CommandRunner } from '../process-runner.js';
|
|
2
|
+
import type { LiftoffManifest } from '../domain/project/contracts.js';
|
|
3
|
+
import { type ActivationInputSnapshot } from '../domain/governance/activation/inputs.js';
|
|
4
|
+
import { type EvidenceFreshnessContext } from '../domain/governance/activation/evidence.js';
|
|
5
|
+
import type { ManagedPhaseGraph, PhaseId, UserActivationState } from '../domain/governance/activation/types.js';
|
|
6
|
+
export * from '../domain/governance/activation/inputs.js';
|
|
7
|
+
export declare function readActivationInputSnapshot(projectRoot: string, manifest: LiftoffManifest, runner?: CommandRunner): Promise<ActivationInputSnapshot>;
|
|
8
|
+
export declare function activationEvidenceContexts(graph: ManagedPhaseGraph, state: UserActivationState, snapshot: ActivationInputSnapshot, now?: Date): Record<PhaseId, EvidenceFreshnessContext>;
|
|
@@ -0,0 +1,146 @@
|
|
|
1
|
+
import { lstat, readdir } from 'node:fs/promises';
|
|
2
|
+
import path from 'node:path';
|
|
3
|
+
import { readProjectFile } from '../adapters/filesystem/project-files.js';
|
|
4
|
+
import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
|
|
5
|
+
import { NodeCommandRunner } from '../process-runner.js';
|
|
6
|
+
import { activationBaselineDigest, normalizedSeedInput, normalizedPublicEnvironment, isProjectMutationReservationName, phaseInputDigest, remoteBindingDigest } from '../domain/governance/activation/inputs.js';
|
|
7
|
+
import { canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
|
|
8
|
+
import { evidenceContextForPhase } from '../domain/governance/activation/evidence.js';
|
|
9
|
+
import { phaseContractDigests } from '../domain/governance/activation/graph.js';
|
|
10
|
+
import { toSafeProjectName } from '../domain/project/planning.js';
|
|
11
|
+
export * from '../domain/governance/activation/inputs.js';
|
|
12
|
+
const sourceRoots = ['backend', 'frontend', 'functions', 'src', 'database', 'infrastructure', '.github/workflows', '.github/actions', '.github/rulesets', 'governance/rulesets', '.specify'];
|
|
13
|
+
const publicFiles = ['.gitignore', '.dockerignore', '.env.example', 'runtime.config.example.json', 'Dockerfile', 'compose.yaml', 'compose.yml', 'docker-compose.yml', 'docker-compose.yaml', 'package.json', 'package-lock.json', 'pyproject.toml', 'uv.lock', 'go.mod', 'go.sum', '.liftoff/governance/policy.md', '.liftoff/governance/context.json', '.liftoff/governance/phase-graph.json'];
|
|
14
|
+
const excludedDirectories = new Set(['node_modules', '.venv', 'venv', '.terraform', '.git', 'dist', 'build', 'out', '.next', 'coverage', '__pycache__', '.pytest_cache', '.mypy_cache', '.ruff_cache', '.cache']);
|
|
15
|
+
const excludedFile = /(?:^\.env(?:\.|$)(?!example$|sample$)|\.tfstate(?:\.|$)|\.tfplan$|\.pem$|\.key$|\.pfx$|\.p12$|\.pyc$|\.log$|^\.liftoff.*(?:tmp|bak)$|^\.npmrc$|^terraform\.rc$|^credentials(?:\.|$)|^local\.settings\.json$)/i;
|
|
16
|
+
function code(error) {
|
|
17
|
+
return typeof error === 'object' && error !== null && 'code' in error ? error.code : undefined;
|
|
18
|
+
}
|
|
19
|
+
export async function readActivationInputSnapshot(projectRoot, manifest, runner = new NodeCommandRunner()) {
|
|
20
|
+
const files = new Map();
|
|
21
|
+
async function include(parts, logicalPath = parts.join('/'), seed = false) {
|
|
22
|
+
const bytes = await readProjectFile(projectRoot, [...parts]);
|
|
23
|
+
if (bytes === undefined)
|
|
24
|
+
return;
|
|
25
|
+
const text = bytes.toString('utf8');
|
|
26
|
+
const digest = canonicalSha256(seed ? normalizedSeedInput(text) : text.replace(/\r\n/g, '\n'));
|
|
27
|
+
const prior = files.get(logicalPath);
|
|
28
|
+
if (prior !== undefined && prior !== digest)
|
|
29
|
+
throw new Error(`Conflicting activation input copies for ${logicalPath}.`);
|
|
30
|
+
files.set(logicalPath, digest);
|
|
31
|
+
}
|
|
32
|
+
async function walk(parts, logicalRoot = parts.join('/'), seed = false) {
|
|
33
|
+
const root = await resolveProjectPath(projectRoot, [...parts]);
|
|
34
|
+
let entries;
|
|
35
|
+
try {
|
|
36
|
+
entries = await readdir(root, { withFileTypes: true });
|
|
37
|
+
}
|
|
38
|
+
catch (error) {
|
|
39
|
+
if (code(error) === 'ENOENT')
|
|
40
|
+
return;
|
|
41
|
+
throw error;
|
|
42
|
+
}
|
|
43
|
+
for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name, 'en'))) {
|
|
44
|
+
if (isProjectMutationReservationName(entry.name) || excludedDirectories.has(entry.name) || excludedFile.test(entry.name))
|
|
45
|
+
continue;
|
|
46
|
+
const child = [...parts, entry.name];
|
|
47
|
+
const logical = `${logicalRoot}/${entry.name}`;
|
|
48
|
+
if (entry.isDirectory())
|
|
49
|
+
await walk(child, logical, seed);
|
|
50
|
+
else if (entry.isFile())
|
|
51
|
+
await include(child, logical, seed);
|
|
52
|
+
else
|
|
53
|
+
throw new Error(`Activation input ${child.join('/')} must not be a symlink or special file.`);
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
for (const root of sourceRoots)
|
|
57
|
+
await walk(root.split('/'));
|
|
58
|
+
for (const file of publicFiles)
|
|
59
|
+
await include(file.split('/'));
|
|
60
|
+
const localEnvironment = await readProjectFile(projectRoot, ['.env']);
|
|
61
|
+
if (localEnvironment) {
|
|
62
|
+
const values = normalizedPublicEnvironment(localEnvironment.toString('utf8'));
|
|
63
|
+
if (Object.keys(values).length > 0)
|
|
64
|
+
files.set('public-local-environment', canonicalSha256(values));
|
|
65
|
+
}
|
|
66
|
+
const seedName = `bootstrap-${toSafeProjectName(manifest.project.name)}`;
|
|
67
|
+
let workflowSpecDigest;
|
|
68
|
+
if (manifest.project.specWorkflow === 'spec-kit') {
|
|
69
|
+
await walk(['specs', '000-liftoff-bootstrap'], 'seed', true);
|
|
70
|
+
}
|
|
71
|
+
else {
|
|
72
|
+
await walk(['openspec', 'changes', seedName], 'seed', true);
|
|
73
|
+
const archive = await resolveProjectPath(projectRoot, ['openspec', 'changes', 'archive']);
|
|
74
|
+
let entries;
|
|
75
|
+
try {
|
|
76
|
+
entries = await readdir(archive, { withFileTypes: true });
|
|
77
|
+
}
|
|
78
|
+
catch (error) {
|
|
79
|
+
if (code(error) !== 'ENOENT')
|
|
80
|
+
throw error;
|
|
81
|
+
entries = [];
|
|
82
|
+
}
|
|
83
|
+
for (const entry of entries) {
|
|
84
|
+
if (entry.name === seedName || entry.name.endsWith(`-${seedName}`)) {
|
|
85
|
+
await walk(['openspec', 'changes', 'archive', entry.name], 'seed', true);
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
await include(['openspec', 'config.yaml']);
|
|
89
|
+
const workload = manifest.project.workload;
|
|
90
|
+
const capability = `${workload.kind === 'standard' ? workload.apiStack : workload.pattern}-application-baseline`;
|
|
91
|
+
const mainSpec = await readProjectFile(projectRoot, ['openspec', 'specs', capability, 'spec.md']);
|
|
92
|
+
if (mainSpec !== undefined)
|
|
93
|
+
workflowSpecDigest = canonicalSha256(mainSpec.toString('utf8').replace(/\r\n/g, '\n'));
|
|
94
|
+
}
|
|
95
|
+
async function git(args, allowedMissing = false) {
|
|
96
|
+
const result = await runner.run({ executable: 'git', args }, { cwd: projectRoot });
|
|
97
|
+
if (result.status === 0 && !result.errorCode && !result.timedOut)
|
|
98
|
+
return result.stdout.trim() || null;
|
|
99
|
+
if (allowedMissing && (result.status === 1 || result.status === 128))
|
|
100
|
+
return null;
|
|
101
|
+
throw new Error(`Unable to inspect allowed Git metadata: git ${args.join(' ')}.`);
|
|
102
|
+
}
|
|
103
|
+
let hasGit = false;
|
|
104
|
+
try {
|
|
105
|
+
const marker = await lstat(path.join(projectRoot, '.git'));
|
|
106
|
+
if (marker.isSymbolicLink() || (!marker.isFile() && !marker.isDirectory()))
|
|
107
|
+
throw new Error('Activation Git marker must be a regular file or directory, not a symlink.');
|
|
108
|
+
hasGit = true;
|
|
109
|
+
}
|
|
110
|
+
catch (error) {
|
|
111
|
+
if (code(error) !== 'ENOENT')
|
|
112
|
+
throw error;
|
|
113
|
+
}
|
|
114
|
+
const foundRoot = hasGit ? await git(['rev-parse', '--show-toplevel']) : null;
|
|
115
|
+
const root = foundRoot && path.resolve(foundRoot) === path.resolve(projectRoot) ? foundRoot : null;
|
|
116
|
+
const head = root ? await git(['rev-parse', '--verify', 'HEAD'], true) : null;
|
|
117
|
+
const branch = root ? await git(['symbolic-ref', '--quiet', '--short', 'HEAD'], true) : null;
|
|
118
|
+
const remotes = root ? (await git(['remote']))?.split(/\r?\n/).filter(Boolean) ?? [] : [];
|
|
119
|
+
const pushUrls = remotes.includes('origin') ? (await git(['remote', 'get-url', '--push', '--all', 'origin']))?.split(/\r?\n/).filter(Boolean).sort() ?? [] : [];
|
|
120
|
+
if (pushUrls.some((url) => /https?:\/\/[^/]*@/i.test(url)))
|
|
121
|
+
throw new Error('Credential-bearing Git remote URLs cannot be activation inputs.');
|
|
122
|
+
const project = { project: manifest.project, framework: manifest.framework, governance: manifest.governance.profile };
|
|
123
|
+
const inventory = [...files].sort(([a], [b]) => a.localeCompare(b, 'en')).map(([path, digest]) => ({ path, digest }));
|
|
124
|
+
return { schemaVersion: 2, project, files: inventory, git: { head, branch, pushUrls }, baselineSha: activationBaselineDigest(project, inventory),
|
|
125
|
+
...(workflowSpecDigest ? { workflowSpecDigest } : {}) };
|
|
126
|
+
}
|
|
127
|
+
export function activationEvidenceContexts(graph, state, snapshot, now = new Date()) {
|
|
128
|
+
const digests = phaseContractDigests(graph);
|
|
129
|
+
return Object.fromEntries(graph.phases.map((phase) => [phase.id, {
|
|
130
|
+
...evidenceContextForPhase(phase.id, {
|
|
131
|
+
repositoryId: state.repository.id,
|
|
132
|
+
identity: state.identity,
|
|
133
|
+
phaseGraphHash: state.identity.phaseGraphHash,
|
|
134
|
+
baselineSha: snapshot.baselineSha,
|
|
135
|
+
inputDigest: phaseInputDigest(phase.id, snapshot),
|
|
136
|
+
liveReadbackProviders: phase.evidence.liveReadbackProviders,
|
|
137
|
+
remoteBindingDigest: remoteBindingDigest(state.remoteBinding),
|
|
138
|
+
now
|
|
139
|
+
}),
|
|
140
|
+
evidenceReferences: state.phases[phase.id].evidence,
|
|
141
|
+
...(phase.id === 'seed-archived' && snapshot.workflowSpecDigest ? { workflowSpecDigest: snapshot.workflowSpecDigest } : {}),
|
|
142
|
+
...(phase.id === 'pushed' && snapshot.git.pushUrls.length === 1 ? { publicationDestination: snapshot.git.pushUrls[0] } : {}),
|
|
143
|
+
phaseContractDigest: digests[phase.id]
|
|
144
|
+
}]));
|
|
145
|
+
}
|
|
146
|
+
//# sourceMappingURL=inputs.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"inputs.js","sourceRoot":"","sources":["../../src/governance-activation/inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAsB,MAAM,sBAAsB,CAAC;AAE7E,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAC3B,gCAAgC,EAChC,gBAAgB,EAChB,mBAAmB,EAGpB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAiC,MAAM,6CAA6C,CAAC;AACrH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,cAAc,2CAA2C,CAAC;AAE1D,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,UAAU,CAAU,CAAC;AACtM,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,6BAA6B,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,+BAA+B,EAAE,kCAAkC,EAAE,sCAAsC,CAAU,CAAC;AACzY,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClN,MAAM,YAAY,GAAG,+MAA+M,CAAC;AAErO,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,QAAyB,EACzB,MAAM,GAAkB,IAAI,iBAAiB,EAAE;IAE/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,UAAU,OAAO,CAAC,KAAwB,EAAE,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK;QAC1F,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,WAAW,GAAG,CAAC,CAAC;QACxH,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,UAAU,IAAI,CAAC,KAAwB,EAAE,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK;QACvF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC/D,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,OAAO;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,IAAI,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnI,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,GAAG,WAAW,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;iBACrD,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;;gBACxD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IACzE,IAAI,kBAAsC,CAAC;IAC3C,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAClE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;QAC1E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3C,MAAM,UAAU,GAAG,GAAG,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,uBAAuB,CAAC;QACjH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAClG,IAAI,QAAQ,KAAK,SAAS;YAAE,kBAAkB,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,cAAc,GAAG,KAAK;QACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACtG,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACzK,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,IAAI,GAAG,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnG,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACtH,MAAM,SAAS,GAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7I,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC;QAC9I,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAwB,EACxB,KAA0B,EAC1B,QAAiC,EACjC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE;YAC/D,GAAG,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE;gBACnC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;gBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;gBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC;gBACjD,qBAAqB,EAAE,KAAK,CAAC,QAAQ,CAAC,qBAAqB;gBAC3D,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC7D,GAAG;aACJ,CAAC;YACF,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ;YACnD,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe,IAAI,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3H,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5H,mBAAmB,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;SACvC,CAAC,CAAC,CAA8C,CAAC;AACpD,CAAC"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { type HistoricalActivationStateMigration } from './compatibility.js';
|
|
2
|
-
import { type ActivationCompatibilityMap } from '
|
|
3
|
-
import type { ActivationIdentity, PhaseId } from '
|
|
4
|
-
import { type ProjectFileMutation, type ProjectFileSnapshot } from '../
|
|
2
|
+
import { type ActivationCompatibilityMap } from '../domain/governance/policy/identity.js';
|
|
3
|
+
import type { ActivationIdentity, PhaseId } from '../domain/governance/activation/types.js';
|
|
4
|
+
import { type ProjectFileMutation, type ProjectFileSnapshot } from '../adapters/filesystem/project-transaction.js';
|
|
5
5
|
export declare const updateFailureInjectionEnv: 'LIFTOFF_UPDATE_INJECT_FAILURE';
|
|
6
6
|
export type ActivationStateMigrationPlan = {
|
|
7
7
|
status: 'not-present' | 'current';
|
|
@@ -35,6 +35,7 @@ export interface ActivationStateMigrationReport {
|
|
|
35
35
|
evidencePolicy: 'preserve-bytes';
|
|
36
36
|
unversionedImport: 'requires-explicit-import-mapping';
|
|
37
37
|
issues: readonly string[];
|
|
38
|
+
diagnosticOnly?: boolean;
|
|
38
39
|
}
|
|
39
40
|
export interface ActivationStateMigrationMappingInput {
|
|
40
41
|
compatibility?: ActivationCompatibilityMap;
|
|
@@ -1,11 +1,12 @@
|
|
|
1
1
|
import { activationStateContentHash, activationStateFilePathParts, loadActivationState } from './activation-state.js';
|
|
2
|
-
import { canonicalJson } from '
|
|
2
|
+
import { canonicalJson } from '../domain/governance/activation/canonical-json.js';
|
|
3
3
|
import { graphReconciliationRecordFromMapping } from './compatibility.js';
|
|
4
|
-
import { activationCompatibility, currentActivationIdentity } from '
|
|
5
|
-
import { activationStateSchemaVersion, resolveActivationCompatibility } from '
|
|
6
|
-
import { phaseIds } from '
|
|
7
|
-
import { validateGraphReconciliationRecord, validateUserActivationState } from '
|
|
8
|
-
import { captureProjectFileSnapshot
|
|
4
|
+
import { activationCompatibility, currentActivationIdentity } from '../domain/governance/activation/graph.js';
|
|
5
|
+
import { activationStateSchemaVersion, resolveActivationCompatibility, isHistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
|
|
6
|
+
import { phaseIds } from '../domain/governance/activation/types.js';
|
|
7
|
+
import { validateGraphReconciliationRecord, validateUserActivationState } from '../domain/governance/activation/validators.js';
|
|
8
|
+
import { captureProjectFileSnapshot } from '../adapters/filesystem/project-transaction.js';
|
|
9
|
+
import { readProjectFile } from '../adapters/filesystem/project-files.js';
|
|
9
10
|
export const updateFailureInjectionEnv = 'LIFTOFF_UPDATE_INJECT_FAILURE';
|
|
10
11
|
const identityFields = [
|
|
11
12
|
'liftoffVersion',
|
|
@@ -142,6 +143,13 @@ export async function planHistoricalActivationStateMigration(projectRoot, nowIso
|
|
|
142
143
|
]);
|
|
143
144
|
}
|
|
144
145
|
if (parsed.schemaVersion !== activationStateSchemaVersion) {
|
|
146
|
+
if (parsed.schemaVersion === 1 && isHistoricalActivationIdentity(parsed.identity)) {
|
|
147
|
+
const result = blocked('unsupported-activation-identity', [
|
|
148
|
+
'Known historical activation v1 is diagnostic-only; migration to v2 is unsupported. Preserve all original state and evidence bytes; supported managed-core maintenance does not authorize activation execution.'
|
|
149
|
+
]);
|
|
150
|
+
result.report.diagnosticOnly = true;
|
|
151
|
+
return result;
|
|
152
|
+
}
|
|
145
153
|
if (typeof parsed.schemaVersion === 'number' &&
|
|
146
154
|
parsed.schemaVersion > activationStateSchemaVersion) {
|
|
147
155
|
return blocked('future-state-schema', [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/governance-activation/migration.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,
|
|
1
|
+
{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/governance-activation/migration.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,mDAAmD,CAAC;AAClF,OAAO,EACL,oCAAoC,EAErC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,4BAA4B,EAE5B,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,yCAAyC,CAAC;AAOjD,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EACL,iCAAiC,EACjC,2BAA2B,EAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,0BAA0B,EAG3B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAAwC,CAAC;AA8ClF,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,yBAAyB;IACzB,eAAe;IACf,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,KAAyB;IACvE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAyD,CAAC;IAC3E,IACE,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,OAAO,QAAQ,CAAC,uBAAuB,KAAK,QAAQ;QACpD,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;QAC1C,OAAO,QAAQ,CAAC,yBAAyB,KAAK,QAAQ;QACtD,OAAO,QAAQ,CAAC,uBAAuB,KAAK,QAAQ;QACpD,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,OAAO,QAAQ,CAAC,4BAA4B,KAAK,QAAQ;QACzD,OAAO,QAAQ,CAAC,2BAA2B,KAAK,QAAQ;QACxD,OAAO,QAAQ,CAAC,6BAA6B,KAAK,QAAQ;QAC1D,OAAO,QAAQ,CAAC,yBAAyB,KAAK,QAAQ;QACtD,OAAO,QAAQ,CAAC,6BAA6B,KAAK,QAAQ,EAC1D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;QAC7D,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B;QACnE,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;QACjE,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;QACrE,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;QAC7D,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,UAAgG,EAChG,MAAyB;IAEzB,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,SAAS;YACjB,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,UAAU;YACV,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAiC;IAClD,OAAO;QACL,MAAM;QACN,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM;YACN,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,MAAM,EAAE,EAAE;SACX;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAiC;IAIpD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;SACnC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;SACxG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,gCAAgC,CACvC,QAA4B,EAC5B,UAAyD;IAEzD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC9C,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,WAAmB,EACnB,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACjC,YAAY,GAAyC,EAAE;IAEvD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,4BAA4B,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,CAAC,GAAG,4BAA4B,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,qDAAqD,YAAY,CAAC,KAAK,CAAC,0EAA0E;SACnJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,+IAA+I;SAChJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,6LAA6L;SAC9L,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,4BAA4B,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,MAAM,GAAG,OAAO,CAAC,iCAAiC,EAAE;gBACxD,gNAAgN;aACjN,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IACE,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,MAAM,CAAC,aAAa,GAAG,4BAA4B,EACnD,CAAC;YACD,OAAO,OAAO,CAAC,qBAAqB,EAAE;gBACpC,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,0BAA0B,4BAA4B,mCAAmC;aAClL,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,0BAA0B,4BAA4B,4CAA4C;SAC3L,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,6JAA6J;SAC9J,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACtD,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,4IAA4I;SAC7I,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,gCAAgC,CAChD,QAAQ,EACR,YAAY,CAAC,yBAAyB,IAAI,EAAE,CAC7C,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,8BAA8B,CAClD,QAAQ,EACR,YAAY,CAAC,aAAa,IAAI,uBAAuB,CACtD,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU;YACpC,CAAC,CAAC,mGAAmG,QAAQ,CAAC,cAAc,GAAG;YAC/H,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QACzB,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,GAAG,KAAK,qLAAqL;SAC9L,CAAC,CAAC;IACL,CAAC;IACD,IACE,SAAS,CAAC,kBAAkB,KAAK,4BAA4B;QAC7D,SAAS,CAAC,WAAW,KAAK,0BAA0B;QACpD,SAAS,CAAC,QAAQ,KAAK,gBAAgB;QACvC,SAAS,CAAC,iBAAiB,KAAK,kCAAkC;QAClE,SAAS,CAAC,YAAY,CAAC,aAAa,KAAK,SAAS,CAAC,YAAY,CAAC,cAAc;QAC9E,SAAS,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS,CAAC,UAAU,CAAC,cAAc;QAC1E,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC;QAC1E,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EACtE,CAAC;QACD,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,gJAAgJ;SACjJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG;QACxB,GAAG,MAAM;QACT,QAAQ,EAAE,SAAS,CAAC,UAAU;KAC/B,CAAC;IACF,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,6EAA6E,YAAY,CAAC,KAAK,CAAC,GAAG;SACpG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC;IACvC,MAAM,uBAAuB,GAAG,oCAAoC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,cAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,cAAc,GAAG,iCAAiC,CAChD,uBAAuB,EACvB,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,sEAAsE,YAAY,CAAC,KAAK,CAAC,GAAG;SAC7F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,uBAAuB,GAAG;QAC9B,YAAY;QACZ,gBAAgB;QAChB,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;KACpF,CAAC;IACF,MAAM,qBAAqB,GAAG,GAAG,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;IACnE,MAAM,sBAAsB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC3F,IACE,sBAAsB,KAAK,SAAS;QACpC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,qBAAqB,EACjE,CAAC;QACD,OAAO,OAAO,CAAC,yBAAyB,EAAE;YACxC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,2EAA2E;SAChH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvD,MAAM,SAAS,GAA0B;QACvC;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,CAAC,GAAG,4BAA4B,CAAC;YAC5C,OAAO,EAAE,eAAe;SACzB;QACD,GAAG,CAAC,sBAAsB,KAAK,SAAS;YACtC,CAAC,CAAC,CAAC;oBACC,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,uBAAuB;oBAClC,OAAO,EAAE,qBAAqB;iBAC/B,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,SAAS;QACT,aAAa,EAAE;YACb,QAAQ;YACR,GAAG,CAAC,sBAAsB,KAAK,SAAS;gBACtC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAgC,CAAC;gBACxE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAgC,CAAC,CAAC;SAC7G;QACD,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,SAAS;YACjB,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,kBAAkB,EAAE,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAAwB;IAC1E,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC"}
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import type { PhaseAdapterExecutionInput, PhaseAdapterOutcome } from './transition-ports.js';
|
|
2
|
+
export declare function remoteImportRetention(input: PhaseAdapterExecutionInput): PhaseAdapterOutcome | null;
|
|
3
|
+
export declare function executeBootstrapStateDisposal(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
|
|
@@ -0,0 +1,128 @@
|
|
|
1
|
+
import { latestRecordWithPayload, evidenceHeaderDigest } from '../domain/governance/activation/evidence.js';
|
|
2
|
+
import { isRecord, canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
|
|
3
|
+
import { cloneState, safeTimestamp } from './transition-records.js';
|
|
4
|
+
import { validateArtifactPathParts } from '../domain/project/paths.js';
|
|
5
|
+
import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
|
|
6
|
+
import { stat } from 'node:fs/promises';
|
|
7
|
+
import { errorMessage } from './transition-process.js';
|
|
8
|
+
const dayMs = 24 * 60 * 60 * 1000;
|
|
9
|
+
const remoteImportPayloadKind = 'remote-import-verified.v1';
|
|
10
|
+
const bootstrapStateDisposedPayloadKind = 'bootstrap-state-disposed.v1';
|
|
11
|
+
export function remoteImportRetention(input) {
|
|
12
|
+
if (input.phase.id !== 'remote-ready')
|
|
13
|
+
return null;
|
|
14
|
+
const statePath = input.inspection.state.applicability.statePath;
|
|
15
|
+
if (statePath === 'none') {
|
|
16
|
+
return { status: 'blocked', blocker: 'Remote readiness requires an explicitly selected backend path.', completedOperations: [] };
|
|
17
|
+
}
|
|
18
|
+
if (statePath === 'existing-private') {
|
|
19
|
+
if (latestRecordWithPayload(input.inspection, 'existing-private-path')?.header.result !== 'verified') {
|
|
20
|
+
return { status: 'blocked', blocker: 'The selected existing-private backend path has no current authoritative proof.', completedOperations: [] };
|
|
21
|
+
}
|
|
22
|
+
return {
|
|
23
|
+
status: 'completed', resultState: 'verified',
|
|
24
|
+
evidencePayload: { kind: 'remote-ready.v1', retention: 'not-applicable' },
|
|
25
|
+
completedOperations: input.plan.operations.filter((op) => op.actionId === 'azure.remote-ready.verify')
|
|
26
|
+
};
|
|
27
|
+
}
|
|
28
|
+
const importRecord = latestRecordWithPayload(input.inspection, 'remote-import-verified');
|
|
29
|
+
if (!importRecord || importRecord.header.result !== 'verified' || !isRecord(importRecord.payload) || importRecord.payload.kind !== remoteImportPayloadKind) {
|
|
30
|
+
return { status: 'blocked', blocker: 'Remote import retention requires immutable remote-import evidence with state and key identifiers.', completedOperations: [] };
|
|
31
|
+
}
|
|
32
|
+
const encryptedStatePathParts = pathPartLists(importRecord.payload.encryptedStatePathParts, 'encryptedStatePathParts');
|
|
33
|
+
const encryptionKeyPathParts = pathPartLists(importRecord.payload.encryptionKeyPathParts, 'encryptionKeyPathParts');
|
|
34
|
+
const retainedAt = input.now.toISOString();
|
|
35
|
+
const disposeAfter = new Date(input.now.getTime() + 30 * dayMs).toISOString();
|
|
36
|
+
const state = cloneState(input.inspection.state);
|
|
37
|
+
state.bootstrapState = {
|
|
38
|
+
status: 'retained', remoteImportEvidenceId: importRecord.evidenceId,
|
|
39
|
+
remoteImportEvidenceDigest: evidenceHeaderDigest(importRecord.header),
|
|
40
|
+
retainedAt, disposeAfter, encryptedStatePathParts, encryptionKeyPathParts
|
|
41
|
+
};
|
|
42
|
+
return {
|
|
43
|
+
status: 'completed', resultState: 'retained', stateOverride: state,
|
|
44
|
+
evidencePayload: { kind: 'remote-ready.v1', retention: state.bootstrapState },
|
|
45
|
+
completedOperations: input.plan.operations.filter((op) => op.actionId === 'azure.remote-ready.verify')
|
|
46
|
+
};
|
|
47
|
+
}
|
|
48
|
+
function pathPartLists(value, label) {
|
|
49
|
+
if (!Array.isArray(value))
|
|
50
|
+
throw new Error(`${label} must be an array of path-part arrays.`);
|
|
51
|
+
return value.map((entry, index) => validateArtifactPathParts(entry, `${label}[${index}]`));
|
|
52
|
+
}
|
|
53
|
+
export async function executeBootstrapStateDisposal(input) {
|
|
54
|
+
if (input.phase.id !== 'bootstrap-state-disposed')
|
|
55
|
+
return null;
|
|
56
|
+
const retention = input.inspection.state.bootstrapState;
|
|
57
|
+
const statePath = input.inspection.state.applicability.statePath;
|
|
58
|
+
if (statePath === 'none' || statePath === 'bootstrap-local' && !retention) {
|
|
59
|
+
return { status: 'blocked', blocker: 'Bootstrap disposal requires a selected path and its recorded retention inventory.', completedOperations: [] };
|
|
60
|
+
}
|
|
61
|
+
if (statePath !== 'bootstrap-local') {
|
|
62
|
+
return {
|
|
63
|
+
status: 'completed', resultState: 'inapplicable',
|
|
64
|
+
evidencePayload: { kind: bootstrapStateDisposedPayloadKind, reason: 'no retained bootstrap state' },
|
|
65
|
+
completedOperations: []
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
if (!retention)
|
|
69
|
+
throw new Error('Selected bootstrap retention inventory is missing.');
|
|
70
|
+
if (retention.status === 'disposed') {
|
|
71
|
+
return {
|
|
72
|
+
status: 'completed', resultState: 'disposed',
|
|
73
|
+
evidencePayload: { kind: bootstrapStateDisposedPayloadKind, reason: 'already disposed', deletionEvidenceId: retention.deletionEvidenceId ?? null },
|
|
74
|
+
completedOperations: []
|
|
75
|
+
};
|
|
76
|
+
}
|
|
77
|
+
if (Date.parse(retention.disposeAfter) > input.now.getTime()) {
|
|
78
|
+
return { status: 'blocked', blocker: `Retained bootstrap state is not disposable until ${retention.disposeAfter}.`, completedOperations: [] };
|
|
79
|
+
}
|
|
80
|
+
const importRecord = latestRecordWithPayload(input.inspection, 'remote-import-verified');
|
|
81
|
+
if (!importRecord || importRecord.evidenceId !== retention.remoteImportEvidenceId ||
|
|
82
|
+
importRecord.header.result !== 'verified' || evidenceHeaderDigest(importRecord.header) !== retention.remoteImportEvidenceDigest) {
|
|
83
|
+
return { status: 'blocked', blocker: 'Destructive disposal requires the immutable remote-import evidence referenced by retained bootstrap state.', completedOperations: [] };
|
|
84
|
+
}
|
|
85
|
+
if (!isRecord(importRecord.payload) || importRecord.payload.kind !== remoteImportPayloadKind) {
|
|
86
|
+
return { status: 'blocked', blocker: 'Destructive disposal requires verified remote backend and no-change evidence.', completedOperations: [] };
|
|
87
|
+
}
|
|
88
|
+
if (canonicalSha256(retention.encryptedStatePathParts) !== canonicalSha256(importRecord.payload.encryptedStatePathParts) ||
|
|
89
|
+
canonicalSha256(retention.encryptionKeyPathParts) !== canonicalSha256(importRecord.payload.encryptionKeyPathParts)) {
|
|
90
|
+
return { status: 'blocked', blocker: 'Disposal paths differ from the immutable verified import inventory.', completedOperations: [] };
|
|
91
|
+
}
|
|
92
|
+
const remoteBackendDigest = importRecord.payload.remoteBackendDigest;
|
|
93
|
+
const noChangePlanDigest = importRecord.payload.noChangePlanDigest;
|
|
94
|
+
if (typeof remoteBackendDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(remoteBackendDigest) ||
|
|
95
|
+
typeof noChangePlanDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(noChangePlanDigest)) {
|
|
96
|
+
return { status: 'blocked', blocker: 'Destructive disposal requires payload-free remote backend and no-change plan digests.', completedOperations: [] };
|
|
97
|
+
}
|
|
98
|
+
const allPaths = [...retention.encryptedStatePathParts, ...retention.encryptionKeyPathParts]
|
|
99
|
+
.map((parts) => validateArtifactPathParts([...parts], 'Bootstrap disposal path'));
|
|
100
|
+
const incompleteCleanup = [];
|
|
101
|
+
for (const parts of allPaths) {
|
|
102
|
+
try {
|
|
103
|
+
const target = await resolveProjectPath(input.inspection.projectRoot, parts);
|
|
104
|
+
const details = await stat(target);
|
|
105
|
+
if (!details.isFile())
|
|
106
|
+
incompleteCleanup.push(`${parts.join('/')} is not a regular file.`);
|
|
107
|
+
}
|
|
108
|
+
catch (error) {
|
|
109
|
+
incompleteCleanup.push(`${parts.join('/')} was already absent before disposal: ${errorMessage(error)}`);
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
const state = cloneState(input.inspection.state);
|
|
113
|
+
state.bootstrapState = {
|
|
114
|
+
...retention, status: 'disposed', disposedAt: input.now.toISOString(),
|
|
115
|
+
deletionEvidenceId: `${input.phase.id}-${safeTimestamp(input.now.toISOString())}`, incompleteCleanup
|
|
116
|
+
};
|
|
117
|
+
return {
|
|
118
|
+
status: 'completed', resultState: 'disposed', stateOverride: state,
|
|
119
|
+
evidencePayload: {
|
|
120
|
+
kind: bootstrapStateDisposedPayloadKind, deletedPathParts: allPaths,
|
|
121
|
+
remoteBackendDigest, noChangePlanDigest, incompleteCleanup, payloadFree: true
|
|
122
|
+
},
|
|
123
|
+
fileMutations: allPaths.map((parts) => ({ type: 'delete', pathParts: parts })),
|
|
124
|
+
completedOperations: input.plan.operations.filter((op) => op.actionId === 'local.bootstrap-state.dispose'),
|
|
125
|
+
cleanupWarnings: incompleteCleanup
|
|
126
|
+
};
|
|
127
|
+
}
|
|
128
|
+
//# sourceMappingURL=phase-bootstrap-state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"phase-bootstrap-state.js","sourceRoot":"","sources":["../../src/governance-activation/phase-bootstrap-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAC5D,MAAM,iCAAiC,GAAG,6BAA6B,CAAC;AAExE,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gEAAgE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gFAAgF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QACnJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE;YACzE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC3J,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mGAAmG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtK,CAAC;IACD,MAAM,uBAAuB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IACvH,MAAM,sBAAsB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,YAAY,CAAC,UAAU;QACnE,0BAA0B,EAAE,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC;QACrE,UAAU,EAAE,YAAY,EAAE,uBAAuB,EAAE,sBAAsB;KAC1E,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE;QAC7E,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAAiC;IACnF,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mFAAmF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc;YAChD,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,6BAA6B,EAAE;YACnG,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,IAAI,EAAE;YAClJ,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oDAAoD,SAAS,CAAC,YAAY,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAChJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,sBAAsB;QAC/E,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,0BAA0B,EAAE,CAAC;QAClI,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,4GAA4G,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,+EAA+E,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACtH,eAAe,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qEAAqE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACxI,CAAC;IACD,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACrE,MAAM,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnE,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACzF,OAAO,kBAAkB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uFAAuF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC1J,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,uBAAuB,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAAC;SACzF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,GAAG,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACrE,kBAAkB,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,iBAAiB;KACrG,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE;YACf,IAAI,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,QAAQ;YACnE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI;SAC9E;QACD,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,+BAA+B,CAAC;QAC1G,eAAe,EAAE,iBAAiB;KACnC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
import { runCommand, commandSucceeded, commandFailure, errorMessage } from './transition-process.js';
|
|
2
|
+
import { inspectGitRepository, reviewedPushUrl } from './phase-publication.js';
|
|
3
|
+
import { githubRepositoryFromPushUrl } from '../domain/governance/activation/inputs.js';
|
|
4
|
+
import { cloneState, readbackProof } from './transition-records.js';
|
|
5
|
+
export async function discoverPhase0(input) {
|
|
6
|
+
if (input.phase.id !== 'phase-0-complete')
|
|
7
|
+
return null;
|
|
8
|
+
const gh = await runCommand(input.runner, {
|
|
9
|
+
executable: 'gh',
|
|
10
|
+
args: ['repo', 'view', String(input.plan.operations.find((operation) => operation.actionId === 'github.phase0.discover')?.inputs.repository),
|
|
11
|
+
'--json', 'id,nameWithOwner,defaultBranchRef,isPrivate']
|
|
12
|
+
}, input.inspection.projectRoot);
|
|
13
|
+
if (!commandSucceeded(gh)) {
|
|
14
|
+
return {
|
|
15
|
+
status: 'blocked',
|
|
16
|
+
blocker: `Phase 0 GitHub read-only discovery failed: ${commandFailure(gh)}`,
|
|
17
|
+
completedOperations: []
|
|
18
|
+
};
|
|
19
|
+
}
|
|
20
|
+
let repo;
|
|
21
|
+
try {
|
|
22
|
+
repo = JSON.parse(gh.stdout);
|
|
23
|
+
}
|
|
24
|
+
catch (error) {
|
|
25
|
+
return {
|
|
26
|
+
status: 'blocked',
|
|
27
|
+
blocker: `Phase 0 GitHub discovery returned invalid JSON: ${errorMessage(error)}`,
|
|
28
|
+
completedOperations: []
|
|
29
|
+
};
|
|
30
|
+
}
|
|
31
|
+
if (!repo.id || !repo.nameWithOwner || !repo.defaultBranchRef?.name) {
|
|
32
|
+
return {
|
|
33
|
+
status: 'blocked',
|
|
34
|
+
blocker: 'Phase 0 GitHub discovery did not return repository id, nameWithOwner, and default branch.',
|
|
35
|
+
completedOperations: []
|
|
36
|
+
};
|
|
37
|
+
}
|
|
38
|
+
const git = await inspectGitRepository(input.inspection.projectRoot, input.runner);
|
|
39
|
+
const pushUrl = reviewedPushUrl(git);
|
|
40
|
+
const remoteName = githubRepositoryFromPushUrl(pushUrl);
|
|
41
|
+
if (remoteName.toLowerCase() !== repo.nameWithOwner.toLowerCase()) {
|
|
42
|
+
return { status: 'blocked', blocker: 'Phase 0 repository readback differs from the actual reviewed Git push destination.', completedOperations: [] };
|
|
43
|
+
}
|
|
44
|
+
const facts = {
|
|
45
|
+
repositoryId: repo.id,
|
|
46
|
+
repositoryName: repo.nameWithOwner,
|
|
47
|
+
defaultBranch: repo.defaultBranchRef.name,
|
|
48
|
+
baselineDigest: input.plan.baselineDigest,
|
|
49
|
+
privateStagingDast: 'unknown',
|
|
50
|
+
credentialRequired: 'unknown',
|
|
51
|
+
statePath: 'none',
|
|
52
|
+
approvedFacts: [
|
|
53
|
+
{ id: 'repository.id', value: repo.id },
|
|
54
|
+
{ id: 'repository.nameWithOwner', value: repo.nameWithOwner },
|
|
55
|
+
{ id: 'repository.defaultBranch', value: repo.defaultBranchRef.name },
|
|
56
|
+
{ id: 'repository.isPrivate', value: repo.isPrivate ?? null },
|
|
57
|
+
{ id: 'azure.accountReadable', value: null }
|
|
58
|
+
]
|
|
59
|
+
};
|
|
60
|
+
const nextState = cloneState(input.inspection.state);
|
|
61
|
+
nextState.remoteBinding = {
|
|
62
|
+
id: facts.repositoryId,
|
|
63
|
+
name: facts.repositoryName,
|
|
64
|
+
defaultBranch: facts.defaultBranch,
|
|
65
|
+
pushUrl,
|
|
66
|
+
verifiedAt: input.now.toISOString()
|
|
67
|
+
};
|
|
68
|
+
nextState.applicability = {
|
|
69
|
+
statePath: facts.statePath,
|
|
70
|
+
privateStagingDast: facts.privateStagingDast,
|
|
71
|
+
credentialRequired: facts.credentialRequired
|
|
72
|
+
};
|
|
73
|
+
return {
|
|
74
|
+
status: 'completed',
|
|
75
|
+
resultState: 'verified',
|
|
76
|
+
evidencePayload: {
|
|
77
|
+
kind: 'phase-0-discovery.v1',
|
|
78
|
+
facts: facts.approvedFacts,
|
|
79
|
+
activationCreateChangePlan: { deterministic: true, graphHash: input.inspection.graphHash }
|
|
80
|
+
},
|
|
81
|
+
stateOverride: nextState,
|
|
82
|
+
liveReadback: [readbackProof(input, 'github', 'repository', repo.nameWithOwner, {
|
|
83
|
+
id: repo.id, nameWithOwner: repo.nameWithOwner, defaultBranch: repo.defaultBranchRef.name, isPrivate: repo.isPrivate ?? null
|
|
84
|
+
})],
|
|
85
|
+
completedOperations: input.plan.operations.filter((op) => op.actionId === 'github.phase0.discover' || op.actionId === 'azure.phase0.discover')
|
|
86
|
+
};
|
|
87
|
+
}
|
|
88
|
+
//# sourceMappingURL=phase-discovery.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"phase-discovery.js","sourceRoot":"","sources":["../../src/governance-activation/phase-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiC;IACpE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;QACxC,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,wBAAwB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;YAC1I,QAAQ,EAAE,6CAA6C,CAAC;KAC3D,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,8CAA8C,cAAc,CAAC,EAAE,CAAC,EAAE;YAC3E,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAwG,CAAC;IAC7G,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAgB,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mDAAmD,YAAY,CAAC,KAAK,CAAC,EAAE;YACjF,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACpE,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,2FAA2F;YACpG,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oFAAoF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACvJ,CAAC;IACD,MAAM,KAAK,GAAyB;QAClC,YAAY,EAAE,IAAI,CAAC,EAAE;QACrB,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;QACzC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;QACzC,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,SAAS;QAC7B,SAAS,EAAE,MAAM;QACjB,aAAa,EAAE;YACb,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;YACvC,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;YAC7D,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;YACrE,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YAC7D,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;SAC7C;KACF,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,SAAS,CAAC,aAAa,GAAG;QACxB,EAAE,EAAE,KAAK,CAAC,YAAY;QACtB,IAAI,EAAE,KAAK,CAAC,cAAc;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO;QACP,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,SAAS,CAAC,aAAa,GAAG;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE;YACf,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,0BAA0B,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE;SAC3F;QACD,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC9E,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;aAC7H,CAAC,CAAC;QACH,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,wBAAwB,IAAI,EAAE,CAAC,QAAQ,KAAK,uBAAuB,CAAC;KAC/I,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import type { PhaseAdapterExecutionInput, PhaseAdapterOutcome } from './transition-ports.js';
|
|
2
|
+
export declare function executeActivationApproval(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
|
|
3
|
+
export declare function executeCredentialReady(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
|
|
4
|
+
export declare function executeRulesetPhase(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
|