@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/application/update/protected-source.js

@@ -0,0 +1,81 @@
+import { createHash } from 'node:crypto';
+import { lstat, readdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveProjectPath } from '../../adapters/filesystem/project-paths.js';
+import { canonicalSha256 } from '../../domain/governance/activation/canonical-json.js';
+import { isProjectMutationReservationName } from '../../domain/governance/activation/inputs.js';
+import { reviewedUpdateTransactionPathParts } from '../../domain/project/reviewed-update-artifacts.js';
+const dependencyCaches = new Set([
+    '.git', 'node_modules', '.venv', 'venv', '.terraform',
+    '__pycache__', '.pytest_cache', '.mypy_cache', '.ruff_cache'
+]);
+const mutableRecords = new Set([
+    'governance/plans', 'governance/evidence',
+    'governance/activation-state.json', 'governance/migration-state.json',
+    reviewedUpdateTransactionPathParts.join('/')
+]);
+export const localValidationOutputPolicy = [
+    { executable: 'npm', cwd: ['backend'], outputs: [['backend', 'dist'], ['backend', 'build'], ['backend', 'out'], ['backend', 'coverage'], ['backend', '.cache']] },
+    { executable: 'npm', cwd: ['frontend'], outputs: [['frontend', 'dist'], ['frontend', 'build'], ['frontend', 'out'], ['frontend', 'coverage'], ['frontend', '.next'], ['frontend', '.cache']] },
+    { executable: 'uv', cwd: [], outputs: [['.coverage'], ['coverage.xml'], ['htmlcov']] }
+];
+export function isRetainedProjectInput(parts) {
+    if (parts.some((part) => dependencyCaches.has(part) || isProjectMutationReservationName(part)))
+        return false;
+    for (let length = 1; length <= parts.length; length++) {
+        if (mutableRecords.has(parts.slice(0, length).join('/')))
+            return false;
+    }
+    return true;
+}
+export async function captureRetainedProjectInputs(projectRoot) {
+    const result = [];
+    async function visit(parts) {
+        const directory = parts.length ? await resolveProjectPath(projectRoot, parts) : projectRoot;
+        for (const entry of (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name, 'en'))) {
+            const child = [...parts, entry.name];
+            if (!isRetainedProjectInput(child))
+                continue;
+            const absolute = await resolveProjectPath(projectRoot, child);
+            const details = await lstat(absolute);
+            if (entry.isDirectory() && details.isDirectory()) {
+                await visit(child);
+            }
+            else if (entry.isFile() && details.isFile()) {
+                result.push({
+                    pathParts: child,
+                    digest: createHash('sha256').update(await readFile(absolute)).digest('hex'),
+                    mode: details.mode & 0o7777
+                });
+            }
+            else {
+                throw new Error(`Protected update source ${child.join('/')} must not be a link or special file.`);
+            }
+        }
+    }
+    await visit([]);
+    return result.sort((a, b) => a.pathParts.join('/').localeCompare(b.pathParts.join('/'), 'en'));
+}
+export function changedRetainedProjectInputs(expected, actual) {
+    const before = new Map(expected.map((entry) => [entry.pathParts.join('/'), canonicalSha256(entry)]));
+    const after = new Map(actual.map((entry) => [entry.pathParts.join('/'), canonicalSha256(entry)]));
+    return [...new Set([...before.keys(), ...after.keys()])]
+        .filter((key) => before.get(key) !== after.get(key)).sort();
+}
+export function outputsForLocalCommand(projectRoot, command, options) {
+    const cwd = path.resolve(options?.cwd ?? projectRoot);
+    const policy = localValidationOutputPolicy.find((entry) => command.executable === entry.executable && cwd === path.resolve(projectRoot, ...entry.cwd));
+    return policy?.outputs ?? [];
+}
+export function acceptDeclaredCommandOutputs(expected, actual, outputs) {
+    const permitted = (name) => outputs.some((parts) => {
+        const root = parts.join('/');
+        return name === root || name.startsWith(`${root}/`);
+    });
+    const changed = changedRetainedProjectInputs(expected, actual).filter((name) => !permitted(name));
+    if (changed.length) {
+        throw new Error(`Protected source changed during validation: ${changed.join(', ')}. Edits were preserved; obtain a fresh preview.`);
+    }
+    return actual.map((entry) => ({ ...entry, pathParts: [...entry.pathParts] }));
+}
+//# sourceMappingURL=protected-source.js.map

package/dist/application/update/protected-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-source.js","sourceRoot":"","sources":["../../../src/application/update/protected-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAUvG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY;IACrD,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa;CAC7D,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,kBAAkB,EAAE,qBAAqB;IACzC,kCAAkC,EAAE,iCAAiC;IACrE,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE;IACjK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE;IAC9L,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE;CAC9E,CAAC;AAEX,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;QACtD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,UAAU,KAAK,CAAC,KAAe;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5F,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3H,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC;oBACV,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC3E,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,MAAM;iBAC5B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAyC,EACzC,MAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;SACrD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAwB,EACxB,OAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACxD,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAC3F,CAAC;IACF,OAAO,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAyC,EACzC,MAAuC,EACvC,OAAuC;IAEvC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/application/update/reporting.d.ts

@@ -0,0 +1,42 @@
+import type { ReconcileEntry } from '../../reconcile.js';
+import { type ActivationStateMigrationPlan } from '../../governance-activation/migration.js';
+import type { LiftoffManifest } from '../../domain/project/contracts.js';
+import type { UserActivationState } from '../../domain/governance/activation/types.js';
+export interface UpdateSummary {
+    new: number;
+    missing: number;
+    upgrade: number;
+    conflict: number;
+    moved: number;
+    orphan: number;
+    retired: number;
+    retiredRemoved: number;
+    retiredAbsent: number;
+    retiredConflict: number;
+    refresh: number;
+    unchanged: number;
+}
+export declare function summarizeEntries(entries: ReconcileEntry[]): UpdateSummary;
+export declare function entryMarker(entry: ReconcileEntry): string;
+export declare function entryDisplay(entry: ReconcileEntry): string;
+export declare function isDirtyGitWorktree(projectRoot: string): boolean;
+export interface ManifestChange {
+    field: string;
+    from: unknown;
+    to: unknown;
+}
+export interface ManagedUpdateReconciliationReport {
+    status: 'not-required' | 'reconciliation-required' | 'blocked';
+    changedIdentityFields: readonly ManifestChange[];
+    phaseImpact: {
+        preservedPhaseIds: readonly string[];
+        invalidPhaseIds: readonly string[];
+    };
+    issues: readonly string[];
+    remedy?: string;
+}
+export declare function manifestChanges(manifest: LiftoffManifest, plannedManifest: LiftoffManifest): ManifestChange[];
+export declare function stateMigrationReconciliation(stateMigration: ActivationStateMigrationPlan): ManagedUpdateReconciliationReport;
+export declare function activeChangeReconciliationReport(projectRoot: string, suppliedActiveChange?: UserActivationState['activeChange']): Promise<ManagedUpdateReconciliationReport>;
+export declare function combineReconciliationReports(reports: readonly ManagedUpdateReconciliationReport[]): ManagedUpdateReconciliationReport;
+export declare function maybeInjectUpdateFailure(env: NodeJS.ProcessEnv | undefined, stage: string): void;

package/dist/application/update/reporting.js

@@ -0,0 +1,326 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { manifestDisplayPath } from '../../domain/project/paths.js';
+import { readProjectFile } from '../../adapters/filesystem/project-files.js';
+import { loadActivationState as loadCurrentActivationState } from '../../governance-activation/activation-state.js';
+import { updateFailureInjectionEnv } from '../../governance-activation/migration.js';
+import { currentActivationIdentity } from '../../governance-activation/graph.js';
+import { governanceChangeMetadataFileName, reconcileActiveGovernanceChange, validateGovernanceChangeMetadata } from '../../governance-activation/source-of-truth.js';
+export function summarizeEntries(entries) {
+    const summary = {
+        new: 0,
+        missing: 0,
+        upgrade: 0,
+        conflict: 0,
+        moved: 0,
+        orphan: 0,
+        retired: 0,
+        retiredRemoved: 0,
+        retiredAbsent: 0,
+        retiredConflict: 0,
+        refresh: 0,
+        unchanged: 0
+    };
+    for (const entry of entries) {
+        if (entry.status === 'unchanged') {
+            if (entry.refreshHash) {
+                summary.refresh += 1;
+            }
+            else {
+                summary.unchanged += 1;
+            }
+            continue;
+        }
+        if (entry.status === 'retired-conflict') {
+            summary.retiredConflict += 1;
+            continue;
+        }
+        if (entry.status === 'retired') {
+            summary.retired += 1;
+            if (entry.destinationOccupied === false) {
+                summary.retiredAbsent += 1;
+            }
+            else {
+                summary.retiredRemoved += 1;
+            }
+            continue;
+        }
+        if (entry.status === 'moved' && !entry.cleanMove) {
+            summary.conflict += 1;
+            continue;
+        }
+        summary[entry.status] += 1;
+    }
+    return summary;
+}
+export function entryMarker(entry) {
+    switch (entry.status) {
+        case 'new':
+        case 'missing':
+            return '+';
+        case 'upgrade':
+            return '~';
+        case 'conflict':
+            return '!';
+        case 'moved':
+            return entry.cleanMove ? '>' : '!';
+        case 'orphan':
+        case 'retired':
+            return '-';
+        case 'retired-conflict':
+            return '!';
+        default:
+            return '~';
+    }
+}
+export function entryDisplay(entry) {
+    if (entry.status === 'moved' && entry.previousPathParts) {
+        return `${manifestDisplayPath(entry.previousPathParts)} => ${manifestDisplayPath(entry.pathParts)}`;
+    }
+    return manifestDisplayPath(entry.pathParts);
+}
+export function isDirtyGitWorktree(projectRoot) {
+    if (!existsSync(path.join(projectRoot, '.git'))) {
+        return false;
+    }
+    const result = spawnSync('git', ['status', '--porcelain'], { cwd: projectRoot, encoding: 'utf8' });
+    return result.status === 0 && result.stdout.trim().length > 0;
+}
+function identityFieldChanges(from, to = currentActivationIdentity) {
+    return Object.keys(to)
+        .filter((field) => from[field] !== undefined && from[field] !== to[field])
+        .map((field) => ({
+        field: `activationIdentity.${field}`,
+        from: from[field],
+        to: to[field]
+    }));
+}
+export function manifestChanges(manifest, plannedManifest) {
+    const changes = [];
+    if (manifest.artifactVersion !== plannedManifest.artifactVersion) {
+        changes.push({
+            field: 'artifactVersion',
+            from: manifest.artifactVersion,
+            to: plannedManifest.artifactVersion
+        });
+    }
+    if (manifest.liftoffVersion !== plannedManifest.liftoffVersion) {
+        changes.push({
+            field: 'liftoffVersion',
+            from: manifest.liftoffVersion,
+            to: plannedManifest.liftoffVersion
+        });
+    }
+    if (manifest.governance.profile !== 'none' &&
+        manifest.governance.profile !== 'unspecified' &&
+        plannedManifest.governance.profile !== 'none' &&
+        plannedManifest.governance.profile !== 'unspecified') {
+        if (manifest.governance.policyVersion !== plannedManifest.governance.policyVersion) {
+            changes.push({
+                field: 'governance.policyVersion',
+                from: manifest.governance.policyVersion,
+                to: plannedManifest.governance.policyVersion
+            });
+        }
+        const fromIdentity = manifest.governance.activationIdentity;
+        const toIdentity = plannedManifest.governance.activationIdentity;
+        if (toIdentity) {
+            if (!fromIdentity) {
+                changes.push({
+                    field: 'governance.activationIdentity',
+                    from: null,
+                    to: toIdentity
+                });
+            }
+            else {
+                changes.push(...identityFieldChanges(fromIdentity, toIdentity));
+            }
+        }
+    }
+    return changes;
+}
+export function stateMigrationReconciliation(stateMigration) {
+    if (stateMigration.status === 'blocked') {
+        if (stateMigration.report.diagnosticOnly === true) {
+            return {
+                status: 'reconciliation-required',
+                changedIdentityFields: [],
+                phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+                issues: stateMigration.report.issues,
+                remedy: 'Managed-core maintenance may continue, but historical activation v1 state and evidence remain diagnostic-only and byte-preserved. No activation migration or execution is authorized.'
+            };
+        }
+        return {
+            status: 'blocked',
+            changedIdentityFields: [],
+            phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+            issues: stateMigration.report.issues,
+            remedy: 'Preserve governance/activation-state.json byte-for-byte and provide an explicit versioned import mapping; checkboxes, filenames, and prose cannot become evidence.'
+        };
+    }
+    if (stateMigration.status === 'migrate') {
+        return {
+            status: 'reconciliation-required',
+            changedIdentityFields: identityFieldChanges(stateMigration.report.fromIdentity, stateMigration.report.toIdentity),
+            phaseImpact: {
+                preservedPhaseIds: stateMigration.report.preservedPhaseIds,
+                invalidPhaseIds: stateMigration.report.invalidPhaseIds
+            },
+            issues: [
+                `Historical activation state will be migrated with the managed update transaction; evidence bytes are preserved and ${stateMigration.report.reconciliationPath} records the explicit graph mapping.`
+            ],
+            remedy: 'Run governance status/verify after update and acknowledge the reconciliation record before executing affected phases.'
+        };
+    }
+    return {
+        status: 'not-required',
+        changedIdentityFields: [],
+        phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+        issues: []
+    };
+}
+function activeChangePathParts(stateKind, changeId) {
+    return stateKind === 'openspec'
+        ? ['openspec', 'changes', changeId]
+        : ['specs', changeId];
+}
+export async function activeChangeReconciliationReport(projectRoot, suppliedActiveChange) {
+    let activeChange = suppliedActiveChange;
+    if (activeChange === undefined) {
+        try {
+            activeChange = (await loadCurrentActivationState(projectRoot))?.state.activeChange;
+        }
+        catch {
+            return {
+                status: 'not-required',
+                changedIdentityFields: [],
+                phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+                issues: []
+            };
+        }
+    }
+    if (!activeChange) {
+        return {
+            status: 'not-required',
+            changedIdentityFields: [],
+            phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+            issues: []
+        };
+    }
+    const metadataPathParts = [
+        ...activeChangePathParts(activeChange.kind, activeChange.id),
+        governanceChangeMetadataFileName
+    ];
+    const bytes = await readProjectFile(projectRoot, metadataPathParts);
+    if (bytes === undefined) {
+        return {
+            status: 'blocked',
+            changedIdentityFields: [],
+            phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+            issues: [
+                `${metadataPathParts.join('/')} is missing for active change ${activeChange.id}; no update mode can infer it from tasks or prose.`
+            ],
+            remedy: 'Restore schema-valid governance metadata or record an explicit supersession before continuing setup.'
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(bytes.toString('utf8'));
+    }
+    catch (error) {
+        return {
+            status: 'blocked',
+            changedIdentityFields: [],
+            phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+            issues: [`Unable to parse ${metadataPathParts.join('/')}: ${error instanceof Error ? error.message : String(error)}`],
+            remedy: 'Restore schema-valid governance metadata; no update mode can infer active governance from checkboxes, filenames, or prose.'
+        };
+    }
+    let reconciliation;
+    try {
+        const metadata = validateGovernanceChangeMetadata(parsed);
+        reconciliation = reconcileActiveGovernanceChange({ metadata, evidence: [] });
+    }
+    catch (error) {
+        return {
+            status: 'blocked',
+            changedIdentityFields: [],
+            phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+            issues: [`Invalid ${metadataPathParts.join('/')}: ${error instanceof Error ? error.message : String(error)}`],
+            remedy: 'Restore schema-valid governance metadata; no update mode can infer active governance from checkboxes, filenames, or prose.'
+        };
+    }
+    if (reconciliation.status === 'not-required') {
+        return {
+            status: 'not-required',
+            changedIdentityFields: [],
+            phaseImpact: {
+                preservedPhaseIds: reconciliation.preservedPhaseIds,
+                invalidPhaseIds: reconciliation.invalidPhaseIds
+            },
+            issues: []
+        };
+    }
+    if (reconciliation.status === 'blocked') {
+        return {
+            status: 'blocked',
+            changedIdentityFields: [],
+            phaseImpact: {
+                preservedPhaseIds: reconciliation.preservedPhaseIds,
+                invalidPhaseIds: reconciliation.invalidPhaseIds
+            },
+            issues: reconciliation.issues,
+            remedy: 'Upgrade Liftoff or add an explicit compatibility mapping before executing affected governance phases.'
+        };
+    }
+    return {
+        status: 'reconciliation-required',
+        changedIdentityFields: identityFieldChanges(reconciliation.fromIdentity, reconciliation.toIdentity),
+        phaseImpact: {
+            preservedPhaseIds: reconciliation.preservedPhaseIds,
+            invalidPhaseIds: reconciliation.invalidPhaseIds
+        },
+        issues: reconciliation.issues,
+        remedy: 'Managed definitions and manifest may be updated, but governance status/verify will block affected execution until the active change acknowledges the installed identity.'
+    };
+}
+export function combineReconciliationReports(reports) {
+    if (reports.some((report) => report.status === 'blocked')) {
+        return {
+            status: 'blocked',
+            changedIdentityFields: reports.flatMap((report) => report.changedIdentityFields),
+            phaseImpact: {
+                preservedPhaseIds: [],
+                invalidPhaseIds: [...new Set(reports.flatMap((report) => report.phaseImpact.invalidPhaseIds))]
+            },
+            issues: reports.flatMap((report) => report.issues),
+            remedy: reports.find((report) => report.remedy)?.remedy
+        };
+    }
+    if (reports.some((report) => report.status === 'reconciliation-required')) {
+        return {
+            status: 'reconciliation-required',
+            changedIdentityFields: reports.flatMap((report) => report.changedIdentityFields),
+            phaseImpact: {
+                preservedPhaseIds: [...new Set(reports.flatMap((report) => report.phaseImpact.preservedPhaseIds))],
+                invalidPhaseIds: [...new Set(reports.flatMap((report) => report.phaseImpact.invalidPhaseIds))]
+            },
+            issues: reports.flatMap((report) => report.issues),
+            remedy: reports.find((report) => report.remedy)?.remedy
+        };
+    }
+    return {
+        status: 'not-required',
+        changedIdentityFields: [],
+        phaseImpact: { preservedPhaseIds: [], invalidPhaseIds: [] },
+        issues: []
+    };
+}
+export function maybeInjectUpdateFailure(env, stage) {
+    const requested = env?.[updateFailureInjectionEnv] ?? process.env[updateFailureInjectionEnv];
+    if (requested === stage) {
+        throw new Error(`Injected managed-update failure at ${stage}.`);
+    }
+}
+//# sourceMappingURL=reporting.js.map

package/dist/application/update/reporting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporting.js","sourceRoot":"","sources":["../../../src/application/update/reporting.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACX,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EAChB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,EACL,mBAAmB,IAAI,0BAA0B,EAClD,MAAM,iDAAiD,CAAC;AACzD,OAAO,EACL,yBAAyB,EAE1B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAC/B,gCAAgC,EAEjC,MAAM,gDAAgD,CAAC;AAwBxD,MAAM,UAAU,gBAAgB,CAAC,OAAyB;IACxD,MAAM,OAAO,GAAkB;QAC7B,GAAG,EAAE,CAAC;QACN,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,CAAC;QACjB,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC;KACb,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACxC,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrB,IAAI,KAAK,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;gBACxC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACjD,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAqB;IAC/C,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACrC,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAqB;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACxD,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAoBD,SAAS,oBAAoB,CAC3B,IAAsE,EACtE,EAAE,GAAG,yBAAyB;IAE9B,OAAQ,MAAM,CAAC,IAAI,CAAC,EAAE,CAAgD;SACnE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;SACzE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,KAAK,EAAE,sBAAsB,KAAK,EAAE;QACpC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QACjB,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAyB,EACzB,eAAgC;IAEhC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,eAAe,KAAK,eAAe,CAAC,eAAe,EAAE,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,QAAQ,CAAC,eAAe;YAC9B,EAAE,EAAE,eAAe,CAAC,eAAe;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,KAAK,eAAe,CAAC,cAAc,EAAE,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,gBAAgB;YACvB,IAAI,EAAE,QAAQ,CAAC,cAAc;YAC7B,EAAE,EAAE,eAAe,CAAC,cAAc;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IACE,QAAQ,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM;QACtC,QAAQ,CAAC,UAAU,CAAC,OAAO,KAAK,aAAa;QAC7C,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM;QAC7C,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,aAAa,EACpD,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,KAAK,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,aAAa;gBACvC,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC,aAAa;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACjE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,+BAA+B;oBACtC,IAAI,EAAE,IAAI;oBACV,EAAE,EAAE,UAAU;iBACf,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,cAA4C;IAE5C,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,cAAc,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO;gBACL,MAAM,EAAE,yBAAyB;gBACjC,qBAAqB,EAAE,EAAE;gBACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC3D,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM;gBACpC,MAAM,EAAE,uLAAuL;aAChM,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC3D,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM;YACpC,MAAM,EAAE,oKAAoK;SAC7K,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,yBAAyB;YACjC,qBAAqB,EAAE,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;YACjH,WAAW,EAAE;gBACX,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC,iBAAiB;gBAC1D,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,eAAe;aACvD;YACD,MAAM,EAAE;gBACN,sHAAsH,cAAc,CAAC,MAAM,CAAC,kBAAkB,sCAAsC;aACrM;YACD,MAAM,EAAE,uHAAuH;SAChI,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,qBAAqB,EAAE,EAAE;QACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC3D,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAkC,EAAE,QAAgB;IACjF,OAAO,SAAS,KAAK,UAAU;QAC7B,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;QACnC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB,EACnB,oBAA0D;IAE1D,IAAI,YAAY,GAAG,oBAAoB,CAAC;IACxC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,0BAA0B,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,qBAAqB,EAAE,EAAE;gBACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC3D,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC3D,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG;QACxB,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5D,gCAAgC;KACjC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC3D,MAAM,EAAE;gBACN,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,iCAAiC,YAAY,CAAC,EAAE,oDAAoD;aACnI;YACD,MAAM,EAAE,sGAAsG;SAC/G,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC3D,MAAM,EAAE,CAAC,mBAAmB,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrH,MAAM,EAAE,4HAA4H;SACrI,CAAC;IACJ,CAAC;IACD,IAAI,cAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAC1D,cAAc,GAAG,+BAA+B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC3D,MAAM,EAAE,CAAC,WAAW,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,MAAM,EAAE,4HAA4H;SACrI,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE;gBACX,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;gBACnD,eAAe,EAAE,cAAc,CAAC,eAAe;aAChD;YACD,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE;gBACX,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;gBACnD,eAAe,EAAE,cAAc,CAAC,eAAe;aAChD;YACD,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,MAAM,EAAE,uGAAuG;SAChH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,yBAAyB;QACjC,qBAAqB,EAAE,oBAAoB,CAAC,cAAc,CAAC,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC;QACnG,WAAW,EAAE;YACX,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;YACnD,eAAe,EAAE,cAAc,CAAC,eAAe;SAChD;QACD,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,MAAM,EAAE,0KAA0K;KACnL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAqD;IAErD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAChF,WAAW,EAAE;gBACX,iBAAiB,EAAE,EAAE;gBACrB,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;aAC/F;YACD,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAClD,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM;SACxD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,yBAAyB,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,MAAM,EAAE,yBAAyB;YACjC,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAChF,WAAW,EAAE;gBACX,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAClG,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;aAC/F;YACD,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAClD,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,qBAAqB,EAAE,EAAE;QACzB,WAAW,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC3D,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAkC,EAClC,KAAa;IAEb,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,yBAAyB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC7F,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/application/update/revalidation-plan.d.ts

@@ -0,0 +1,22 @@
+import { type ActivationInputSnapshot } from '../../governance-activation/inputs.js';
+import type { CommandRunner } from '../../process-runner.js';
+import type { ExternalCommand } from '../../domain/project/contracts.js';
+import type { RunCommandOptions } from '../../process-runner.js';
+import { type RetainedProjectInput } from './protected-source.js';
+import { type UpdateInspection } from './inspection.js';
+import { type LocalRevalidationPreview } from './revalidation.js';
+import type { UpdateWritePlan } from './write-plan.js';
+export interface PreparedUpdateRevalidation {
+    preview: LocalRevalidationPreview;
+    expectedInputSnapshot: ActivationInputSnapshot;
+    expectedRetainedSource: RetainedProjectInput[];
+}
+export declare function prepareUpdateRevalidation(inspection: UpdateInspection, writePlan: UpdateWritePlan, options?: {
+    runner?: CommandRunner;
+    now?: Date;
+}): Promise<PreparedUpdateRevalidation | undefined>;
+export declare function postUpdateProtectedInputs(inspection: UpdateInspection, writePlan: UpdateWritePlan, prepared: PreparedUpdateRevalidation, runner?: CommandRunner): {
+    binding: string;
+    assertUnchanged: () => Promise<readonly RetainedProjectInput[]>;
+    afterCommand: (command: ExternalCommand, options?: RunCommandOptions) => Promise<readonly RetainedProjectInput[]>;
+};

package/dist/application/update/revalidation-plan.js

@@ -0,0 +1,108 @@
+import { createHash } from 'node:crypto';
+import { canonicalSha256 } from '../../domain/governance/activation/canonical-json.js';
+import { activationBaselineDigest, activationInputPathIsObserved, activationInputTextDigest, readActivationInputSnapshot } from '../../governance-activation/inputs.js';
+import { inspectGovernanceTransition } from '../../governance-activation/commands.js';
+import { reviewedUpdateTargetMode } from '../../adapters/filesystem/reviewed-update-transaction.js';
+import { activationHistoryIndexPathParts } from '../../governance-activation/history-contracts.js';
+import { acceptDeclaredCommandOutputs, captureRetainedProjectInputs, changedRetainedProjectInputs, isRetainedProjectInput, outputsForLocalCommand } from './protected-source.js';
+import { UpdatePlanError } from './inspection.js';
+import { previewLocalRevalidation } from './revalidation.js';
+import { formatUpdateCommand } from './command-guidance.js';
+function rawDigest(content) {
+    return createHash('sha256').update(content).digest('hex');
+}
+function expectedInputSnapshot(source, plan) {
+    const files = new Map(source.files.map((file) => [file.path, file.digest]));
+    for (const mutation of plan.mutations) {
+        if (!activationInputPathIsObserved(mutation.pathParts))
+            continue;
+        const name = mutation.pathParts.join('/');
+        if (mutation.type === 'delete')
+            files.delete(name);
+        else
+            files.set(name, activationInputTextDigest(typeof mutation.content === 'string' ? mutation.content : mutation.content.toString('utf8')));
+    }
+    const project = {
+        project: plan.nextManifest.project,
+        framework: plan.nextManifest.framework,
+        governance: plan.nextManifest.governance.profile
+    };
+    const inventory = [...files].sort(([left], [right]) => left.localeCompare(right, 'en'))
+        .map(([filePath, digest]) => ({ path: filePath, digest }));
+    return {
+        ...source,
+        project,
+        files: inventory,
+        baselineSha: activationBaselineDigest(project, inventory)
+    };
+}
+export async function prepareUpdateRevalidation(inspection, writePlan, options = {}) {
+    if (!inspection.revalidationSource)
+        return undefined;
+    const expected = expectedInputSnapshot(inspection.revalidationSource, writePlan);
+    const retained = new Map((inspection.retainedSource ?? []).map((entry) => [entry.pathParts.join('/'), entry]));
+    for (const mutation of writePlan.mutations) {
+        if (!isRetainedProjectInput(mutation.pathParts))
+            continue;
+        const key = mutation.pathParts.join('/');
+        if (mutation.type === 'delete')
+            retained.delete(key);
+        else
+            retained.set(key, {
+                pathParts: [...mutation.pathParts], digest: rawDigest(mutation.content),
+                mode: reviewedUpdateTargetMode(mutation.mode, retained.get(key)?.mode)
+            });
+    }
+    if (inspection.historyMigration.status === 'eligible') {
+        const history = inspection.historyMigration;
+        for (const file of history.index.files) {
+            retained.set(file.copyPathParts.join('/'), {
+                pathParts: [...file.copyPathParts], digest: file.digest,
+                mode: reviewedUpdateTargetMode(history.semanticPlan.targetModes.historyCopy)
+            });
+        }
+        const indexPath = activationHistoryIndexPathParts(history.index.snapshotId);
+        retained.set(indexPath.join('/'), {
+            pathParts: indexPath, digest: history.indexDigest,
+            mode: reviewedUpdateTargetMode(history.semanticPlan.targetModes.historyIndex)
+        });
+        for (const retirement of history.requiredRetirements)
+            retained.delete(retirement.pathParts.join('/'));
+    }
+    const expectedRetainedSource = [...retained.values()].sort((a, b) => a.pathParts.join('/').localeCompare(b.pathParts.join('/'), 'en'));
+    const currentInspection = inspection.historyMigration.status === 'current' &&
+        inspection.historyMigration.history.status === 'committed' &&
+        writePlan.mutations.length === 0 && writePlan.skipped.length === 0
+        ? await inspectGovernanceTransition(inspection.projectRoot, options)
+        : undefined;
+    const preview = await previewLocalRevalidation({
+        projectRoot: inspection.projectRoot,
+        targetManifest: writePlan.nextManifest,
+        protectedInputBinding: canonicalSha256({ activation: expected, retained: expectedRetainedSource }),
+        inspection: currentInspection
+    });
+    return { preview, expectedInputSnapshot: expected, expectedRetainedSource };
+}
+export function postUpdateProtectedInputs(inspection, writePlan, prepared, runner) {
+    let retained = prepared.expectedRetainedSource;
+    return {
+        binding: prepared.preview.protectedInputBinding,
+        assertUnchanged: async () => {
+            const actual = await readActivationInputSnapshot(inspection.projectRoot, writePlan.nextManifest, runner);
+            if (canonicalSha256(actual) !== canonicalSha256(prepared.expectedInputSnapshot)) {
+                throw new UpdatePlanError('Protected application inputs changed after the reviewed update.', 'revalidation-inputs-changed', `Preserve the edits and run ${formatUpdateCommand(inspection.projectRoot, 'check')} again.`);
+            }
+            const observed = await captureRetainedProjectInputs(inspection.projectRoot);
+            const changed = changedRetainedProjectInputs(retained, observed);
+            if (changed.length) {
+                throw new UpdatePlanError(`Protected project scripts or sources changed after review: ${changed.join(', ')}`, 'revalidation-inputs-changed', `Preserve the edits and run ${formatUpdateCommand(inspection.projectRoot, 'check')} again.`);
+            }
+            return observed;
+        },
+        afterCommand: async (command, options) => {
+            retained = acceptDeclaredCommandOutputs(retained, await captureRetainedProjectInputs(inspection.projectRoot), outputsForLocalCommand(inspection.projectRoot, command, options));
+            return retained;
+        }
+    };
+}
+//# sourceMappingURL=revalidation-plan.js.map

package/dist/application/update/revalidation-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revalidation-plan.js","sourceRoot":"","sources":["../../../src/application/update/revalidation-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AACvF,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAE5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAItF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAAE,4BAA4B,EAAE,4BAA4B,EACxF,sBAAsB,EAAE,sBAAsB,EAC/C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAiC,MAAM,mBAAmB,CAAC;AAE5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAQ5D,SAAS,SAAS,CAAC,OAAwB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAA+B,EAC/B,IAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;YAC9C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAC5C,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO;QAClC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS;QACtC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;KACjD,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SACpF,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,MAAM;QACT,OAAO;QACP,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAA4B,EAC5B,SAA0B,EAC1B,OAAO,GAA2C,EAAE;IAEpD,IAAI,CAAC,UAAU,CAAC,kBAAkB;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/G,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;;YAChD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBACrB,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACvE,IAAI,EAAE,wBAAwB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;aACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACzC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACvD,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,WAAW,CAAC;aAC7E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,+BAA+B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAChC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW;YACjD,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC;SAC9E,CAAC,CAAC;QACH,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,mBAAmB;YAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,sBAAsB,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,KAAK,SAAS;QACxE,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW;QAC1D,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAClE,CAAC,CAAC,MAAM,2BAA2B,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC;QACpE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;QAC7C,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,cAAc,EAAE,SAAS,CAAC,YAAY;QACtC,qBAAqB,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;QAClG,UAAU,EAAE,iBAAiB;KAC9B,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAA4B,EAC5B,SAA0B,EAC1B,QAAoC,EACpC,MAAsB;IAMtB,IAAI,QAAQ,GAAG,QAAQ,CAAC,sBAAsB,CAAC;IAC/C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,qBAAqB;QAC/C,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1B,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACzG,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,eAAe,CACvB,iEAAiE,EACjE,6BAA6B,EAC7B,8BAA8B,mBAAmB,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAC5F,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,eAAe,CACvB,8DAA8D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAClF,6BAA6B,EAC7B,8BAA8B,mBAAmB,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAC5F,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YACvC,QAAQ,GAAG,4BAA4B,CACrC,QAAQ,EAAE,MAAM,4BAA4B,CAAC,UAAU,CAAC,WAAW,CAAC,EACpE,sBAAsB,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CACjE,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}