@msn-control/liftoff 0.10.4 → 0.11.1

package/dist/governance-activation/graph.d.ts

@@ -1,397 +1 @@
-import type { ActivationIdentity, ManagedPhaseGraph, PhaseGraphNode, PhaseId } from './types.js';
-export declare const canonicalPhaseGraph: {
-    readonly schemaVersion: 1;
-    readonly versions: {
-        readonly liftoffVersion: "0.10.0";
-        readonly policyVersion: "6";
-        readonly activationContractVersion: 1;
-        readonly phaseGraphSchemaVersion: 1;
-    };
-    readonly phases: readonly [{
-        readonly id: 'seed-valid';
-        readonly label: 'Generated bootstrap seed is strict-valid';
-        readonly dependencies: readonly [];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["project-files", "policy", "activation-identity"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'seed-verified';
-        readonly label: 'Generated bootstrap baseline checks are verified';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["project-files", "activation-identity"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'seed-archived';
-        readonly label: 'Generated bootstrap seed is synced and archived';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["project-files", "activation-identity"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'committed';
-        readonly label: 'Initial repository baseline is committed';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["baseline-sha", "project-files", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'pushed';
-        readonly label: 'Initial repository baseline is pushed';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["baseline-sha", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'phase-0-complete';
-        readonly label: 'Read-only Phase 0 discovery is complete';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["baseline-sha", "policy", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'activation-approved';
-        readonly label: 'Governance activation plan is approved';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["baseline-sha", "approval-envelope", "policy"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["approved", "failed"];
-    }, {
-        readonly id: 'credential-ready';
-        readonly label: 'Runner preflight credential policy is ready when required';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'credential-required';
-            readonly when: 'credentialRequired=true';
-            readonly inapplicableWhen: 'credentialRequired=false';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["credentials", "approval-envelope", "activation-identity"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'provider-ready';
-        readonly label: 'Azure provider namespaces are terminal ready';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency, import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'private-staging-dast';
-            readonly when: 'privateStagingDast=true';
-            readonly inapplicableWhen: 'privateStagingDast=false';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["provider-inventory", "approval-envelope", "policy"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable", "retained"];
-    }, {
-        readonly id: 'state-path-selected';
-        readonly label: 'Private state path is selected';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'private-staging-dast';
-            readonly when: 'privateStagingDast=true';
-            readonly inapplicableWhen: 'privateStagingDast=false';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["remote-state", "provider-inventory", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'existing-private-path';
-        readonly label: 'Existing private backend management path is verified';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=existing-private';
-            readonly inapplicableWhen: 'statePath!=existing-private';
-            readonly exclusiveWith: readonly ["bootstrap-local"];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["remote-state", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'bootstrap-local';
-        readonly label: 'Bounded local bootstrap creates access-establishing resources';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency, import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=bootstrap-local';
-            readonly inapplicableWhen: 'statePath!=bootstrap-local';
-            readonly exclusiveWith: readonly ["existing-private-path"];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["approval-envelope", "provider-inventory", "remote-state"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'runner-ready';
-        readonly label: 'Restricted larger runner is assigned and ready';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=bootstrap-local';
-            readonly inapplicableWhen: 'statePath!=bootstrap-local';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["runner-inventory", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'private-backend-proof';
-        readonly label: 'Private backend is reachable from runner';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=bootstrap-local';
-            readonly inapplicableWhen: 'statePath!=bootstrap-local';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["runner-inventory", "remote-state", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'remote-import-verified';
-        readonly label: 'Declarative remote import and no-change plan are verified';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=bootstrap-local';
-            readonly inapplicableWhen: 'statePath!=bootstrap-local';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["remote-state", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable"];
-    }, {
-        readonly id: 'remote-ready';
-        readonly label: 'Remote state is ready and local bootstrap state is frozen';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'private-staging-dast';
-            readonly when: 'privateStagingDast=true';
-            readonly inapplicableWhen: 'privateStagingDast=false';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["remote-state", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed", "inapplicable", "retained"];
-    }, {
-        readonly id: 'application-foundation';
-        readonly label: 'Application infrastructure foundation is reconciled';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["project-files", "remote-state", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'workflow-source-ready';
-        readonly label: 'Workflow source and ruleset payloads are ready';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["project-files", "policy"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'dev-proof';
-        readonly label: 'Development proof is green';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["workflow-source", "project-files"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'staging-qualified';
-        readonly label: 'Staging release qualification is complete';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["workflow-source", "security-evidence", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'production-rehearsed';
-        readonly label: 'Production promotion and rollback are rehearsed';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["live-readback", "workflow-source"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'green-red-proof';
-        readonly label: 'Required checks are proven green and deliberately red';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["security-evidence", "workflow-source"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'enforcement-approved';
-        readonly label: 'Final ruleset enforcement is approved';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["approval-envelope", "ruleset-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["approved", "failed"];
-    }, {
-        readonly id: 'rulesets-applied';
-        readonly label: 'Repository rulesets are applied idempotently last';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["approval-envelope", "ruleset-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'live-readback';
-        readonly label: 'Live enforcement readback matches source';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'always';
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["ruleset-readback", "live-readback"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["verified", "failed"];
-    }, {
-        readonly id: 'bootstrap-state-disposed';
-        readonly label: 'Retained local bootstrap state is disposed after day 30';
-        readonly dependencies: readonly [import("./types.js").PhaseDependency];
-        readonly applicability: {
-            readonly kind: 'conditional';
-            readonly discriminator: 'state-path';
-            readonly when: 'statePath=bootstrap-local';
-            readonly inapplicableWhen: 'statePath!=bootstrap-local';
-            readonly exclusiveWith: readonly [];
-        };
-        readonly allowedMutations: import("./types.js").AllowedMutations;
-        readonly evidence: import("./types.js").EvidenceRequirement;
-        readonly approvalGate: import("./types.js").ApprovalGate;
-        readonly invalidationInputs: readonly ["remote-state", "approval-envelope"];
-        readonly rollback: import("./types.js").RollbackBehavior;
-        readonly terminalStates: readonly ["disposed", "failed", "inapplicable"];
-    }];
-};
-export type CanonicalPhaseGraph = typeof canonicalPhaseGraph;
-export declare function phaseContractDigest(node: PhaseGraphNode): string;
-export declare function phaseContractDigests(graph?: ManagedPhaseGraph): Record<PhaseId, string>;
-export declare const canonicalPhaseGraphJson: string;
-export declare const canonicalPhaseGraphHash: string;
-export declare const canonicalPhaseContractDigests: Record<"activation-approved" | "application-foundation" | "bootstrap-local" | "bootstrap-state-disposed" | "committed" | "credential-ready" | "dev-proof" | "enforcement-approved" | "existing-private-path" | "green-red-proof" | "live-readback" | "phase-0-complete" | "private-backend-proof" | "production-rehearsed" | "provider-ready" | "pushed" | "remote-import-verified" | "remote-ready" | "rulesets-applied" | "runner-ready" | "seed-archived" | "seed-valid" | "seed-verified" | "staging-qualified" | "state-path-selected" | "workflow-source-ready", string>;
-export declare const currentActivationIdentity: ActivationIdentity;
-export declare const activationCompatibility: import("./identity.js").ActivationCompatibilityMap;
+export * from '../domain/governance/activation/graph.js';