@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/governance-activation/evidence.js

@@ -1,246 +1,2 @@
-import { canonicalPhaseContractDigests, canonicalPhaseGraph, canonicalPhaseGraphHash, currentActivationIdentity } from './graph.js';
-import { canonicalSha256 } from './canonical-json.js';
-import { phaseIds } from './types.js';
-import { validateEvidenceHeader, validateLiveReadbackProof } from './validators.js';
-const identityFields = [
-    'liftoffVersion',
-    'manifestArtifactVersion',
-    'policyVersion',
-    'activationContractVersion',
-    'phaseGraphSchemaVersion',
-    'phaseGraphHash',
-    'activationStateSchemaVersion',
-    'evidenceHeaderSchemaVersion',
-    'approvalEnvelopeSchemaVersion',
-    'supersessionSchemaVersion',
-    'credentialPolicySchemaVersion'
-];
-export function evidenceHeaderDigest(header) {
-    return canonicalSha256(header);
-}
-function issue(field, message, expected, actual, evidenceId) {
-    return { field, message, expected, actual, evidenceId };
-}
-function compareIdentity(actual, expected, evidenceId) {
-    const issues = [];
-    for (const field of identityFields) {
-        if (actual[field] !== expected[field]) {
-            issues.push(issue(`identity.${field}`, `Evidence activation identity field ${field} is stale or mismatched.`, expected[field], actual[field], evidenceId));
-        }
-    }
-    return issues;
-}
-function compareTransition(actual, expected, path, evidenceId) {
-    const issues = [];
-    if (actual.phaseId !== expected.phaseId) {
-        issues.push(issue(`${path}.phaseId`, 'Evidence transition phase does not match the current transition.', expected.phaseId, actual.phaseId, evidenceId));
-    }
-    if (actual.baselineSha !== expected.baselineSha) {
-        issues.push(issue(`${path}.baselineSha`, 'Evidence transition baseline SHA does not match the current transition.', expected.baselineSha, actual.baselineSha, evidenceId));
-    }
-    if (actual.inputDigest !== expected.inputDigest) {
-        issues.push(issue(`${path}.inputDigest`, 'Evidence transition input digest does not match the current transition.', expected.inputDigest, actual.inputDigest, evidenceId));
-    }
-    if (actual.transitionDigest !== expected.transitionDigest) {
-        issues.push(issue(`${path}.transitionDigest`, 'Evidence transition digest does not match the current transition.', expected.transitionDigest, actual.transitionDigest, evidenceId));
-    }
-    return issues;
-}
-export function validateEvidenceFreshness(record, context) {
-    const issues = [];
-    let header;
-    try {
-        header = validateEvidenceHeader(record.header);
-    }
-    catch (error) {
-        return {
-            valid: false,
-            issues: [issue('schema', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId)]
-        };
-    }
-    if (header.repositoryId !== context.repositoryId) {
-        issues.push(issue('repositoryId', 'Evidence repository ID does not match the active repository.', context.repositoryId, header.repositoryId, record.evidenceId));
-    }
-    issues.push(...compareIdentity(header.identity, context.identity, record.evidenceId));
-    if (header.phaseGraphHash !== context.phaseGraphHash) {
-        issues.push(issue('phaseGraphHash', 'Evidence phase graph hash is stale or mismatched.', context.phaseGraphHash, header.phaseGraphHash, record.evidenceId));
-    }
-    if (header.phaseId !== context.phaseId) {
-        issues.push(issue('phaseId', 'Evidence phase ID does not match the requested phase.', context.phaseId, header.phaseId, record.evidenceId));
-    }
-    if (header.phaseContractDigest !== context.phaseContractDigest) {
-        issues.push(issue('phaseContractDigest', 'Evidence phase contract digest is stale or mismatched.', context.phaseContractDigest, header.phaseContractDigest, record.evidenceId));
-    }
-    if (header.baselineSha !== context.baselineSha) {
-        issues.push(issue('baselineSha', 'Evidence baseline SHA is stale or mismatched.', context.baselineSha, header.baselineSha, record.evidenceId));
-    }
-    if (header.inputDigest !== context.inputDigest) {
-        issues.push(issue('inputDigest', 'Evidence phase input digest is stale or mismatched.', context.inputDigest, header.inputDigest, record.evidenceId));
-    }
-    issues.push(...compareTransition(header.transition, context.transition, 'transition', record.evidenceId));
-    const producedAtEpochMs = Date.parse(header.producedAt);
-    if (Number.isNaN(producedAtEpochMs)) {
-        issues.push(issue('producedAt', 'Evidence timestamp is not a valid ISO timestamp.', undefined, header.producedAt, record.evidenceId));
-    }
-    else if (context.now && producedAtEpochMs > context.now.getTime()) {
-        issues.push(issue('producedAt', 'Evidence timestamp is in the future.', context.now.toISOString(), header.producedAt, record.evidenceId));
-    }
-    const requiredProviders = context.liveReadbackProviders ?? [];
-    const liveReadback = record.liveReadback ?? [];
-    const validatedProofs = [];
-    for (const proof of liveReadback) {
-        try {
-            validatedProofs.push(validateLiveReadbackProof(proof));
-        }
-        catch (error) {
-            issues.push(issue('liveReadback', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId));
-        }
-    }
-    for (const provider of requiredProviders) {
-        const matchingProof = validatedProofs.find((proof) => proof.provider === provider);
-        if (!matchingProof) {
-            issues.push(issue('liveReadback', `Evidence for ${context.phaseId} requires ${provider} live readback proof.`, provider, undefined, record.evidenceId));
-            continue;
-        }
-        if (matchingProof.repositoryId !== header.repositoryId) {
-            issues.push(issue('liveReadback.repositoryId', 'Live readback repository ID must match evidence.', header.repositoryId, matchingProof.repositoryId, record.evidenceId));
-        }
-        issues.push(...compareIdentity(matchingProof.identity, header.identity, record.evidenceId).map((entry) => ({
-            ...entry,
-            field: `liveReadback.${entry.field}`
-        })));
-        if (matchingProof.phaseGraphHash !== header.phaseGraphHash) {
-            issues.push(issue('liveReadback.phaseGraphHash', 'Live readback graph hash must match evidence.', header.phaseGraphHash, matchingProof.phaseGraphHash, record.evidenceId));
-        }
-        if (matchingProof.phaseId !== header.phaseId) {
-            issues.push(issue('liveReadback.phaseId', 'Live readback phase must match evidence.', header.phaseId, matchingProof.phaseId, record.evidenceId));
-        }
-        if (matchingProof.baselineSha !== header.baselineSha) {
-            issues.push(issue('liveReadback.baselineSha', 'Live readback baseline must match evidence.', header.baselineSha, matchingProof.baselineSha, record.evidenceId));
-        }
-        if (matchingProof.inputDigest !== header.inputDigest) {
-            issues.push(issue('liveReadback.inputDigest', 'Live readback input digest must match evidence.', header.inputDigest, matchingProof.inputDigest, record.evidenceId));
-        }
-        issues.push(...compareTransition(matchingProof.transition, header.transition, 'liveReadback.transition', record.evidenceId));
-        if (!matchingProof.matches) {
-            issues.push(issue('liveReadback.matches', 'Live readback must match the reviewed source or plan.', true, false, record.evidenceId));
-        }
-    }
-    if (issues.length > 0 || Number.isNaN(producedAtEpochMs)) {
-        return { valid: false, issues };
-    }
-    return {
-        valid: true,
-        record: {
-            evidenceId: record.evidenceId,
-            header,
-            headerDigest: evidenceHeaderDigest(header),
-            producedAtEpochMs,
-            liveReadback: validatedProofs
-        }
-    };
-}
-function sortEvidence(left, right) {
-    if (left.producedAtEpochMs !== right.producedAtEpochMs) {
-        return right.producedAtEpochMs - left.producedAtEpochMs;
-    }
-    const evidenceId = right.evidenceId.localeCompare(left.evidenceId);
-    if (evidenceId !== 0) {
-        return evidenceId;
-    }
-    return right.headerDigest.localeCompare(left.headerDigest);
-}
-export function selectLatestPhaseEvidence(records, context) {
-    const issues = [];
-    const validRecords = [];
-    const seen = new Set();
-    for (const record of records) {
-        const validation = validateEvidenceFreshness(record, context);
-        if (!validation.valid) {
-            issues.push(...validation.issues);
-            continue;
-        }
-        const duplicateKey = `${validation.record.evidenceId}\0${validation.record.headerDigest}`;
-        if (seen.has(duplicateKey)) {
-            continue;
-        }
-        seen.add(duplicateKey);
-        validRecords.push(validation.record);
-    }
-    if (validRecords.length === 0) {
-        return { selected: null, issues, ignoredOlderContradictions: [] };
-    }
-    validRecords.sort(sortEvidence);
-    const latestTimestamp = validRecords[0].producedAtEpochMs;
-    const latestTies = validRecords.filter((record) => record.producedAtEpochMs === latestTimestamp);
-    const latestResults = new Set(latestTies.map((record) => record.header.result));
-    if (latestResults.size > 1) {
-        return {
-            selected: null,
-            issues: [
-                ...issues,
-                issue('producedAt', `Latest evidence for ${context.phaseId} has a contradictory deterministic tie at ${latestTies[0].header.producedAt}.`, undefined, Array.from(latestResults).sort().join(','))
-            ],
-            ignoredOlderContradictions: []
-        };
-    }
-    const selected = validRecords[0];
-    const ignoredOlderContradictions = validRecords
-        .filter((record) => record.producedAtEpochMs < selected.producedAtEpochMs &&
-        record.header.result !== selected.header.result)
-        .map((record) => record.evidenceId);
-    return { selected, issues, ignoredOlderContradictions };
-}
-export function evidenceContextForPhase(phaseId, overrides = {}) {
-    const baselineSha = overrides.baselineSha ?? '0'.repeat(64);
-    const inputDigest = overrides.inputDigest ?? '1'.repeat(64);
-    const transition = {
-        phaseId,
-        baselineSha,
-        inputDigest,
-        transitionDigest: overrides.transitionDigest ?? canonicalSha256({
-            baselineSha,
-            inputDigest,
-            phaseId
-        })
-    };
-    return {
-        repositoryId: overrides.repositoryId ?? 'R_123',
-        identity: overrides.identity ?? currentActivationIdentity,
-        phaseGraphHash: overrides.phaseGraphHash ?? canonicalPhaseGraphHash,
-        phaseId,
-        phaseContractDigest: canonicalPhaseContractDigests[phaseId],
-        baselineSha,
-        inputDigest,
-        transition,
-        now: overrides.now,
-        liveReadbackProviders: overrides.liveReadbackProviders
-    };
-}
-export function requiredLiveReadbackProviders(node) {
-    return node.evidence.liveReadbackProviders;
-}
-export function phaseRequiresLiveReadback(node) {
-    return requiredLiveReadbackProviders(node).length > 0;
-}
-export function phaseNode(graph, phaseId) {
-    const node = graph.phases.find((candidate) => candidate.id === phaseId);
-    if (!node) {
-        throw new Error(`Unknown phase ${phaseId}.`);
-    }
-    return node;
-}
-export function canonicalEvidenceContextForPhase(phaseId) {
-    const node = phaseNode(canonicalPhaseGraph, phaseId);
-    return evidenceContextForPhase(phaseId, {
-        liveReadbackProviders: requiredLiveReadbackProviders(node)
-    });
-}
-export function emptyEvidenceRecordsByPhase() {
-    const records = {};
-    for (const phaseId of phaseIds) {
-        records[phaseId] = [];
-    }
-    return records;
-}
+export * from '../domain/governance/activation/evidence.js';
 //# sourceMappingURL=evidence.js.map

package/dist/governance-activation/evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/governance-activation/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAYtD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAEpF,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,yBAAyB;IACzB,eAAe;IACf,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AAqCX,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CACZ,KAAa,EACb,OAAe,EACf,QAAoC,EACpC,MAAkC,EAClC,UAAmB;IAEnB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACtB,MAA0B,EAC1B,QAA4B,EAC5B,UAAmB;IAEnB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,YAAY,KAAK,EAAE,EACnB,sCAAsC,KAAK,0BAA0B,EACrE,QAAQ,CAAC,KAAK,CAAC,EACf,MAAM,CAAC,KAAK,CAAC,EACb,UAAU,CACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAkC,EAClC,QAAoC,EACpC,IAAY,EACZ,UAAmB;IAEnB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE,kEAAkE,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1J,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE,yEAAyE,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7K,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE,yEAAyE,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7K,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,mBAAmB,EAAE,mEAAmE,EAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACtL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA2B,EAC3B,OAAiC;IAEjC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;SAC3H,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,8DAA8D,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACnK,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,mDAAmD,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9J,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,uDAAuD,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,qBAAqB,EACrB,wDAAwD,EACxD,OAAO,CAAC,mBAAmB,EAC3B,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,UAAU,CAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,+CAA+C,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACjJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,qDAAqD,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1G,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,kDAAkD,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACxI,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,IAAI,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,sCAAsC,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,OAAO,CAAC,OAAO,aAAa,QAAQ,uBAAuB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACxJ,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,kDAAkD,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1K,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzG,GAAG,KAAK;YACR,KAAK,EAAE,gBAAgB,KAAK,CAAC,KAAK,EAAE;SACrC,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,aAAa,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,+CAA+C,EAAE,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7K,CAAC;QACD,IAAI,aAAa,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,0CAA0C,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,6CAA6C,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClK,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,iDAAiD,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtK,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,yBAAyB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,uDAAuD,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE;YACN,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM;YACN,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC;YAC1C,iBAAiB;YACjB,YAAY,EAAE,eAAe;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAkC,EAAE,KAAmC;IAC3F,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAuC,EACvC,OAAiC;IAEjC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAmC,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1F,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,iBAAiB,CAAC;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC;IACjG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,GAAG,MAAM;gBACT,KAAK,CACH,YAAY,EACZ,uBAAuB,OAAO,CAAC,OAAO,6CAA6C,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,UAAU,GAAG,EACtH,SAAS,EACT,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAC3C;aACF;YACD,0BAA0B,EAAE,EAAE;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;IAClC,MAAM,0BAA0B,GAAG,YAAY;SAC5C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAChD;SACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAgB,EAChB,SAAS,GAEL,EAAE;IAEN,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,UAAU,GAA+B;QAC7C,OAAO;QACP,WAAW;QACX,WAAW;QACX,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,eAAe,CAAC;YAC9D,WAAW;YACX,WAAW;YACX,OAAO;SACR,CAAC;KACH,CAAC;IACF,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,OAAO;QAC/C,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,yBAAyB;QACzD,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,uBAAuB;QACnE,OAAO;QACP,mBAAmB,EAAE,6BAA6B,CAAC,OAAO,CAAC;QAC3D,WAAW;QACX,WAAW;QACX,UAAU;QACV,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAoB;IAChE,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAoB;IAC5D,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAwB,EAAE,OAAgB;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAgB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,uBAAuB,CAAC,OAAO,EAAE;QACtC,qBAAqB,EAAE,6BAA6B,CAAC,IAAI,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,OAAO,GAAG,EAAqD,CAAC;IACtE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/governance-activation/evidence.ts"],"names":[],"mappings":"AAAA,cAAc,6CAA6C,CAAC"}

package/dist/governance-activation/git-ignore.d.ts

@@ -0,0 +1,9 @@
+export interface GitIgnoreRule {
+    root: string;
+    pattern: string;
+    negate: boolean;
+    directoriesOnly: boolean;
+    anchored: boolean;
+}
+export declare function parseGitIgnore(text: string, root: string): GitIgnoreRule[];
+export declare function ignoredByRules(relative: string, directory: boolean, rules: readonly GitIgnoreRule[]): boolean;

package/dist/governance-activation/git-ignore.js

@@ -0,0 +1,76 @@
+export function parseGitIgnore(text, root) {
+    return text.split(/\r?\n/).flatMap((raw) => {
+        const line = raw.replace(/(?<!\\) +$/, '');
+        if (!line || line.startsWith('#'))
+            return [];
+        const negate = line.startsWith('!');
+        let pattern = negate ? line.slice(1) : line;
+        const directoriesOnly = pattern.endsWith('/');
+        if (directoriesOnly)
+            pattern = pattern.slice(0, -1);
+        const anchored = pattern.startsWith('/') || pattern.includes('/');
+        if (pattern.startsWith('/'))
+            pattern = pattern.slice(1);
+        pattern = pattern.replace(/\\([#! ])/g, '$1');
+        if (!pattern)
+            throw new Error('Empty Git ignore pattern cannot define a reviewed initial staging inventory.');
+        return [{ root, pattern, negate, directoriesOnly, anchored }];
+    });
+}
+export function ignoredByRules(relative, directory, rules) {
+    let ignored = false;
+    for (const rule of rules) {
+        if (rule.root && !relative.startsWith(`${rule.root}/`))
+            continue;
+        if (rule.directoriesOnly && !directory)
+            continue;
+        const local = rule.root ? relative.slice(rule.root.length + 1) : relative;
+        const target = rule.anchored ? local : local.split('/').at(-1);
+        if (gitWildmatch(target, rule.pattern))
+            ignored = !rule.negate;
+    }
+    return ignored;
+}
+function gitWildmatch(target, pattern) {
+    const escape = (character) => character.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    let regex = '^';
+    for (let index = 0; index < pattern.length; index += 1) {
+        const character = pattern[index];
+        if (character === '\\') {
+            if (++index >= pattern.length)
+                throw new Error('Trailing Git ignore escape is not a resolvable staging rule.');
+            regex += escape(pattern[index]);
+        }
+        else if (character === '*') {
+            const start = index;
+            while (pattern[index + 1] === '*')
+                index += 1;
+            const globstar = index > start && (start === 0 || pattern[start - 1] === '/') &&
+                (index === pattern.length - 1 || pattern[index + 1] === '/');
+            if (globstar && pattern[index + 1] === '/') {
+                regex += '(?:.*/)?';
+                index += 1;
+            }
+            else
+                regex += globstar ? '.*' : '[^/]*';
+        }
+        else if (character === '?') {
+            regex += '[^/]';
+        }
+        else if (character === '[') {
+            const end = pattern.indexOf(']', index + 1);
+            if (end < 0)
+                throw new Error('Unclosed Git ignore character class cannot define a reviewed staging inventory.');
+            const contents = pattern.slice(index + 1, end);
+            if (!contents || contents.includes('['))
+                throw new Error('Unsupported Git ignore character class; staging remains blocked rather than guessed.');
+            regex += `[${contents.startsWith('!') ? `^${contents.slice(1)}` : contents}]`;
+            index = end;
+        }
+        else
+            regex += escape(character);
+    }
+    // Unlike generic filesystem globs, Git wildmatch includes leading dot files.
+    return new RegExp(`${regex}$`).test(target);
+}
+//# sourceMappingURL=git-ignore.js.map

package/dist/governance-activation/git-ignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-ignore.js","sourceRoot":"","sources":["../../src/governance-activation/git-ignore.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAmB,EAAE;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,eAAe;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC9G,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,SAAkB,EAAE,KAA+B;IAClG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS;QACjE,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS;YAAE,SAAS;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAChE,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAe;IACnD,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvF,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAClC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,EAAE,KAAK,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAC/G,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC;YACpB,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAC3E,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC/D,IAAI,QAAQ,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC3C,KAAK,IAAI,UAAU,CAAC;gBACpB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;;gBAAM,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5C,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,IAAI,MAAM,CAAC;QAClB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;YAChH,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;YACjJ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC;YAC9E,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;;YAAM,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,6EAA6E;IAC7E,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC"}