@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/governance-activation/phase-bootstrap-state.js

@@ -0,0 +1,128 @@
+import { latestRecordWithPayload, evidenceHeaderDigest } from '../domain/governance/activation/evidence.js';
+import { isRecord, canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
+import { cloneState, safeTimestamp } from './transition-records.js';
+import { validateArtifactPathParts } from '../domain/project/paths.js';
+import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
+import { stat } from 'node:fs/promises';
+import { errorMessage } from './transition-process.js';
+const dayMs = 24 * 60 * 60 * 1000;
+const remoteImportPayloadKind = 'remote-import-verified.v1';
+const bootstrapStateDisposedPayloadKind = 'bootstrap-state-disposed.v1';
+export function remoteImportRetention(input) {
+    if (input.phase.id !== 'remote-ready')
+        return null;
+    const statePath = input.inspection.state.applicability.statePath;
+    if (statePath === 'none') {
+        return { status: 'blocked', blocker: 'Remote readiness requires an explicitly selected backend path.', completedOperations: [] };
+    }
+    if (statePath === 'existing-private') {
+        if (latestRecordWithPayload(input.inspection, 'existing-private-path')?.header.result !== 'verified') {
+            return { status: 'blocked', blocker: 'The selected existing-private backend path has no current authoritative proof.', completedOperations: [] };
+        }
+        return {
+            status: 'completed', resultState: 'verified',
+            evidencePayload: { kind: 'remote-ready.v1', retention: 'not-applicable' },
+            completedOperations: input.plan.operations.filter((op) => op.actionId === 'azure.remote-ready.verify')
+        };
+    }
+    const importRecord = latestRecordWithPayload(input.inspection, 'remote-import-verified');
+    if (!importRecord || importRecord.header.result !== 'verified' || !isRecord(importRecord.payload) || importRecord.payload.kind !== remoteImportPayloadKind) {
+        return { status: 'blocked', blocker: 'Remote import retention requires immutable remote-import evidence with state and key identifiers.', completedOperations: [] };
+    }
+    const encryptedStatePathParts = pathPartLists(importRecord.payload.encryptedStatePathParts, 'encryptedStatePathParts');
+    const encryptionKeyPathParts = pathPartLists(importRecord.payload.encryptionKeyPathParts, 'encryptionKeyPathParts');
+    const retainedAt = input.now.toISOString();
+    const disposeAfter = new Date(input.now.getTime() + 30 * dayMs).toISOString();
+    const state = cloneState(input.inspection.state);
+    state.bootstrapState = {
+        status: 'retained', remoteImportEvidenceId: importRecord.evidenceId,
+        remoteImportEvidenceDigest: evidenceHeaderDigest(importRecord.header),
+        retainedAt, disposeAfter, encryptedStatePathParts, encryptionKeyPathParts
+    };
+    return {
+        status: 'completed', resultState: 'retained', stateOverride: state,
+        evidencePayload: { kind: 'remote-ready.v1', retention: state.bootstrapState },
+        completedOperations: input.plan.operations.filter((op) => op.actionId === 'azure.remote-ready.verify')
+    };
+}
+function pathPartLists(value, label) {
+    if (!Array.isArray(value))
+        throw new Error(`${label} must be an array of path-part arrays.`);
+    return value.map((entry, index) => validateArtifactPathParts(entry, `${label}[${index}]`));
+}
+export async function executeBootstrapStateDisposal(input) {
+    if (input.phase.id !== 'bootstrap-state-disposed')
+        return null;
+    const retention = input.inspection.state.bootstrapState;
+    const statePath = input.inspection.state.applicability.statePath;
+    if (statePath === 'none' || statePath === 'bootstrap-local' && !retention) {
+        return { status: 'blocked', blocker: 'Bootstrap disposal requires a selected path and its recorded retention inventory.', completedOperations: [] };
+    }
+    if (statePath !== 'bootstrap-local') {
+        return {
+            status: 'completed', resultState: 'inapplicable',
+            evidencePayload: { kind: bootstrapStateDisposedPayloadKind, reason: 'no retained bootstrap state' },
+            completedOperations: []
+        };
+    }
+    if (!retention)
+        throw new Error('Selected bootstrap retention inventory is missing.');
+    if (retention.status === 'disposed') {
+        return {
+            status: 'completed', resultState: 'disposed',
+            evidencePayload: { kind: bootstrapStateDisposedPayloadKind, reason: 'already disposed', deletionEvidenceId: retention.deletionEvidenceId ?? null },
+            completedOperations: []
+        };
+    }
+    if (Date.parse(retention.disposeAfter) > input.now.getTime()) {
+        return { status: 'blocked', blocker: `Retained bootstrap state is not disposable until ${retention.disposeAfter}.`, completedOperations: [] };
+    }
+    const importRecord = latestRecordWithPayload(input.inspection, 'remote-import-verified');
+    if (!importRecord || importRecord.evidenceId !== retention.remoteImportEvidenceId ||
+        importRecord.header.result !== 'verified' || evidenceHeaderDigest(importRecord.header) !== retention.remoteImportEvidenceDigest) {
+        return { status: 'blocked', blocker: 'Destructive disposal requires the immutable remote-import evidence referenced by retained bootstrap state.', completedOperations: [] };
+    }
+    if (!isRecord(importRecord.payload) || importRecord.payload.kind !== remoteImportPayloadKind) {
+        return { status: 'blocked', blocker: 'Destructive disposal requires verified remote backend and no-change evidence.', completedOperations: [] };
+    }
+    if (canonicalSha256(retention.encryptedStatePathParts) !== canonicalSha256(importRecord.payload.encryptedStatePathParts) ||
+        canonicalSha256(retention.encryptionKeyPathParts) !== canonicalSha256(importRecord.payload.encryptionKeyPathParts)) {
+        return { status: 'blocked', blocker: 'Disposal paths differ from the immutable verified import inventory.', completedOperations: [] };
+    }
+    const remoteBackendDigest = importRecord.payload.remoteBackendDigest;
+    const noChangePlanDigest = importRecord.payload.noChangePlanDigest;
+    if (typeof remoteBackendDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(remoteBackendDigest) ||
+        typeof noChangePlanDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(noChangePlanDigest)) {
+        return { status: 'blocked', blocker: 'Destructive disposal requires payload-free remote backend and no-change plan digests.', completedOperations: [] };
+    }
+    const allPaths = [...retention.encryptedStatePathParts, ...retention.encryptionKeyPathParts]
+        .map((parts) => validateArtifactPathParts([...parts], 'Bootstrap disposal path'));
+    const incompleteCleanup = [];
+    for (const parts of allPaths) {
+        try {
+            const target = await resolveProjectPath(input.inspection.projectRoot, parts);
+            const details = await stat(target);
+            if (!details.isFile())
+                incompleteCleanup.push(`${parts.join('/')} is not a regular file.`);
+        }
+        catch (error) {
+            incompleteCleanup.push(`${parts.join('/')} was already absent before disposal: ${errorMessage(error)}`);
+        }
+    }
+    const state = cloneState(input.inspection.state);
+    state.bootstrapState = {
+        ...retention, status: 'disposed', disposedAt: input.now.toISOString(),
+        deletionEvidenceId: `${input.phase.id}-${safeTimestamp(input.now.toISOString())}`, incompleteCleanup
+    };
+    return {
+        status: 'completed', resultState: 'disposed', stateOverride: state,
+        evidencePayload: {
+            kind: bootstrapStateDisposedPayloadKind, deletedPathParts: allPaths,
+            remoteBackendDigest, noChangePlanDigest, incompleteCleanup, payloadFree: true
+        },
+        fileMutations: allPaths.map((parts) => ({ type: 'delete', pathParts: parts })),
+        completedOperations: input.plan.operations.filter((op) => op.actionId === 'local.bootstrap-state.dispose'),
+        cleanupWarnings: incompleteCleanup
+    };
+}
+//# sourceMappingURL=phase-bootstrap-state.js.map

package/dist/governance-activation/phase-bootstrap-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-bootstrap-state.js","sourceRoot":"","sources":["../../src/governance-activation/phase-bootstrap-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAC5D,MAAM,iCAAiC,GAAG,6BAA6B,CAAC;AAExE,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gEAAgE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gFAAgF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QACnJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE;YACzE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC3J,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mGAAmG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtK,CAAC;IACD,MAAM,uBAAuB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IACvH,MAAM,sBAAsB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,YAAY,CAAC,UAAU;QACnE,0BAA0B,EAAE,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC;QACrE,UAAU,EAAE,YAAY,EAAE,uBAAuB,EAAE,sBAAsB;KAC1E,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE;QAC7E,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAAiC;IACnF,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mFAAmF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc;YAChD,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,6BAA6B,EAAE;YACnG,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,IAAI,EAAE;YAClJ,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oDAAoD,SAAS,CAAC,YAAY,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAChJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,sBAAsB;QAC/E,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,0BAA0B,EAAE,CAAC;QAClI,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,4GAA4G,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,+EAA+E,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACtH,eAAe,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qEAAqE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACxI,CAAC;IACD,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACrE,MAAM,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnE,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACzF,OAAO,kBAAkB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uFAAuF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC1J,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,uBAAuB,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAAC;SACzF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,GAAG,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACrE,kBAAkB,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,iBAAiB;KACrG,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE;YACf,IAAI,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,QAAQ;YACnE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI;SAC9E;QACD,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,+BAA+B,CAAC;QAC1G,eAAe,EAAE,iBAAiB;KACnC,CAAC;AACJ,CAAC"}

package/dist/governance-activation/phase-discovery.d.ts

@@ -0,0 +1,2 @@
+import type { PhaseAdapterExecutionInput, PhaseAdapterOutcome } from './transition-ports.js';
+export declare function discoverPhase0(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;

package/dist/governance-activation/phase-discovery.js

@@ -0,0 +1,88 @@
+import { runCommand, commandSucceeded, commandFailure, errorMessage } from './transition-process.js';
+import { inspectGitRepository, reviewedPushUrl } from './phase-publication.js';
+import { githubRepositoryFromPushUrl } from '../domain/governance/activation/inputs.js';
+import { cloneState, readbackProof } from './transition-records.js';
+export async function discoverPhase0(input) {
+    if (input.phase.id !== 'phase-0-complete')
+        return null;
+    const gh = await runCommand(input.runner, {
+        executable: 'gh',
+        args: ['repo', 'view', String(input.plan.operations.find((operation) => operation.actionId === 'github.phase0.discover')?.inputs.repository),
+            '--json', 'id,nameWithOwner,defaultBranchRef,isPrivate']
+    }, input.inspection.projectRoot);
+    if (!commandSucceeded(gh)) {
+        return {
+            status: 'blocked',
+            blocker: `Phase 0 GitHub read-only discovery failed: ${commandFailure(gh)}`,
+            completedOperations: []
+        };
+    }
+    let repo;
+    try {
+        repo = JSON.parse(gh.stdout);
+    }
+    catch (error) {
+        return {
+            status: 'blocked',
+            blocker: `Phase 0 GitHub discovery returned invalid JSON: ${errorMessage(error)}`,
+            completedOperations: []
+        };
+    }
+    if (!repo.id || !repo.nameWithOwner || !repo.defaultBranchRef?.name) {
+        return {
+            status: 'blocked',
+            blocker: 'Phase 0 GitHub discovery did not return repository id, nameWithOwner, and default branch.',
+            completedOperations: []
+        };
+    }
+    const git = await inspectGitRepository(input.inspection.projectRoot, input.runner);
+    const pushUrl = reviewedPushUrl(git);
+    const remoteName = githubRepositoryFromPushUrl(pushUrl);
+    if (remoteName.toLowerCase() !== repo.nameWithOwner.toLowerCase()) {
+        return { status: 'blocked', blocker: 'Phase 0 repository readback differs from the actual reviewed Git push destination.', completedOperations: [] };
+    }
+    const facts = {
+        repositoryId: repo.id,
+        repositoryName: repo.nameWithOwner,
+        defaultBranch: repo.defaultBranchRef.name,
+        baselineDigest: input.plan.baselineDigest,
+        privateStagingDast: 'unknown',
+        credentialRequired: 'unknown',
+        statePath: 'none',
+        approvedFacts: [
+            { id: 'repository.id', value: repo.id },
+            { id: 'repository.nameWithOwner', value: repo.nameWithOwner },
+            { id: 'repository.defaultBranch', value: repo.defaultBranchRef.name },
+            { id: 'repository.isPrivate', value: repo.isPrivate ?? null },
+            { id: 'azure.accountReadable', value: null }
+        ]
+    };
+    const nextState = cloneState(input.inspection.state);
+    nextState.remoteBinding = {
+        id: facts.repositoryId,
+        name: facts.repositoryName,
+        defaultBranch: facts.defaultBranch,
+        pushUrl,
+        verifiedAt: input.now.toISOString()
+    };
+    nextState.applicability = {
+        statePath: facts.statePath,
+        privateStagingDast: facts.privateStagingDast,
+        credentialRequired: facts.credentialRequired
+    };
+    return {
+        status: 'completed',
+        resultState: 'verified',
+        evidencePayload: {
+            kind: 'phase-0-discovery.v1',
+            facts: facts.approvedFacts,
+            activationCreateChangePlan: { deterministic: true, graphHash: input.inspection.graphHash }
+        },
+        stateOverride: nextState,
+        liveReadback: [readbackProof(input, 'github', 'repository', repo.nameWithOwner, {
+                id: repo.id, nameWithOwner: repo.nameWithOwner, defaultBranch: repo.defaultBranchRef.name, isPrivate: repo.isPrivate ?? null
+            })],
+        completedOperations: input.plan.operations.filter((op) => op.actionId === 'github.phase0.discover' || op.actionId === 'azure.phase0.discover')
+    };
+}
+//# sourceMappingURL=phase-discovery.js.map

package/dist/governance-activation/phase-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-discovery.js","sourceRoot":"","sources":["../../src/governance-activation/phase-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiC;IACpE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;QACxC,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,wBAAwB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;YAC1I,QAAQ,EAAE,6CAA6C,CAAC;KAC3D,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,8CAA8C,cAAc,CAAC,EAAE,CAAC,EAAE;YAC3E,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAwG,CAAC;IAC7G,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAgB,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mDAAmD,YAAY,CAAC,KAAK,CAAC,EAAE;YACjF,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACpE,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,2FAA2F;YACpG,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oFAAoF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACvJ,CAAC;IACD,MAAM,KAAK,GAAyB;QAClC,YAAY,EAAE,IAAI,CAAC,EAAE;QACrB,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;QACzC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;QACzC,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,SAAS;QAC7B,SAAS,EAAE,MAAM;QACjB,aAAa,EAAE;YACb,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;YACvC,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;YAC7D,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;YACrE,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YAC7D,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;SAC7C;KACF,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,SAAS,CAAC,aAAa,GAAG;QACxB,EAAE,EAAE,KAAK,CAAC,YAAY;QACtB,IAAI,EAAE,KAAK,CAAC,cAAc;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO;QACP,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,SAAS,CAAC,aAAa,GAAG;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE;YACf,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,0BAA0B,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE;SAC3F;QACD,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC9E,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;aAC7H,CAAC,CAAC;QACH,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,wBAAwB,IAAI,EAAE,CAAC,QAAQ,KAAK,uBAAuB,CAAC;KAC/I,CAAC;AACJ,CAAC"}

package/dist/governance-activation/phase-governance.d.ts

@@ -0,0 +1,4 @@
+import type { PhaseAdapterExecutionInput, PhaseAdapterOutcome } from './transition-ports.js';
+export declare function executeActivationApproval(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
+export declare function executeCredentialReady(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
+export declare function executeRulesetPhase(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;

package/dist/governance-activation/phase-governance.js

@@ -0,0 +1,141 @@
+import { cloneState, evidenceHeaderFor } from './transition-records.js';
+import { buildApprovedPhase0FactsFromState, renderGovernanceChangeWritePlan } from './source-of-truth.js';
+import { readProjectFile } from '../adapters/filesystem/project-files.js';
+import { credentialPolicyPathParts, detectCredentialLeaks } from './credentials.js';
+import { latestRecordWithPayload, rulesetSourceDigestFromEvidence } from '../domain/governance/activation/evidence.js';
+import { isRecord } from '../domain/governance/activation/canonical-json.js';
+import { errorMessage } from './transition-process.js';
+import { remoteRepository } from '../domain/governance/activation/inputs.js';
+import { evaluateApprovalForTransitionPlan, transitionPlanForPhase } from '../domain/governance/activation/approvals.js';
+export async function executeActivationApproval(input) {
+    if (input.phase.id !== 'activation-approved')
+        return null;
+    const state = cloneState(input.inspection.state);
+    const fileMutations = [];
+    if (input.inspection.sourceOfTruth.status === 'none') {
+        const facts = buildApprovedPhase0FactsFromState(input.inspection.manifest, input.inspection.state, input.inspection.evidence, input.inspection.contexts['phase-0-complete']);
+        if (!facts || input.inspection.sourceOfTruth.createPlan.status !== 'ready') {
+            return { status: 'blocked', blocker: input.inspection.sourceOfTruth.createPlan.reason, completedOperations: [] };
+        }
+        const writePlan = renderGovernanceChangeWritePlan(facts);
+        for (const file of writePlan.files) {
+            if (await readProjectFile(input.inspection.projectRoot, [...file.pathParts]) !== undefined) {
+                return { status: 'blocked', blocker: `Refusing to overwrite existing governance artifact ${file.pathParts.join('/')}.`, completedOperations: [] };
+            }
+            fileMutations.push({ type: 'write', pathParts: [...file.pathParts], content: file.content });
+        }
+        state.activeChange = { id: writePlan.changeId, kind: writePlan.workflowKind === 'openspec' ? 'openspec' : 'spec-kit' };
+    }
+    else if (input.inspection.sourceOfTruth.status === 'selected') {
+        state.activeChange = {
+            id: input.inspection.sourceOfTruth.selected.changeId,
+            kind: input.inspection.sourceOfTruth.selected.workflowKind === 'openspec' ? 'openspec' : 'spec-kit'
+        };
+    }
+    else {
+        return {
+            status: 'blocked',
+            blocker: 'A compatible governance source of truth is required before activation approval can be recorded.',
+            completedOperations: []
+        };
+    }
+    return {
+        status: 'completed', resultState: 'approved', stateOverride: state, fileMutations,
+        filePreconditions: fileMutations.map((mutation) => ({ pathParts: [...mutation.pathParts] })),
+        completedOperations: input.plan.operations.filter((op) => op.actionId.endsWith('governance.create-change'))
+    };
+}
+export async function executeCredentialReady(input) {
+    if (input.phase.id !== 'credential-ready')
+        return null;
+    const policy = await readProjectFile(input.inspection.projectRoot, [...credentialPolicyPathParts]);
+    if (policy === undefined) {
+        return {
+            status: 'blocked',
+            blocker: 'Public credential enrollment and independent credential readback are unavailable; no credential policy is present. Do not supply a token through setup or fabricate policy proof.',
+            completedOperations: []
+        };
+    }
+    const scan = detectCredentialLeaks([{ source: 'imported-evidence', label: credentialPolicyPathParts.join('/'), text: policy.toString('utf8') }]);
+    if (scan.status === 'compromised')
+        return { status: 'blocked', blocker: scan.guidance.join(' '), completedOperations: [] };
+    return {
+        status: 'blocked',
+        blocker: 'Independent credential readback and public credential enrollment are unavailable; a policy file cannot establish credential readiness.',
+        completedOperations: []
+    };
+}
+function assertGreenRedProof(input) {
+    const record = latestRecordWithPayload(input.inspection, 'green-red-proof');
+    if (!record || !isRecord(record.payload) || record.payload.kind !== 'green-red-proof.v1') {
+        throw new Error('Ruleset enforcement requires current green-red-proof evidence with typed proof payload.');
+    }
+    const green = isRecord(record.payload.green) ? record.payload.green : null;
+    const red = isRecord(record.payload.deliberateRed) ? record.payload.deliberateRed : null;
+    const greenConclusion = green?.conclusion;
+    const redConclusion = red?.conclusion;
+    if ([greenConclusion, redConclusion].some((value) => value === 'skipped' || value === 'cancelled' || value === 'neutral')) {
+        throw new Error('Skipped, cancelled, and neutral checks cannot satisfy green/red proof.');
+    }
+    if (!red || greenConclusion !== 'success' || redConclusion !== 'failure' || red.deliberate !== true) {
+        throw new Error('Ruleset enforcement requires green success and deliberate red failure proof.');
+    }
+    return record;
+}
+export async function executeRulesetPhase(input) {
+    if (input.phase.id !== 'rulesets-applied' && input.phase.id !== 'live-readback')
+        return null;
+    try {
+        assertGreenRedProof(input);
+    }
+    catch (error) {
+        return { status: 'blocked', blocker: errorMessage(error), completedOperations: [] };
+    }
+    const sourceDigest = rulesetSourceDigestFromEvidence(input.inspection);
+    if (!sourceDigest) {
+        return { status: 'blocked', blocker: 'Ruleset enforcement requires a saved ruleset source digest from workflow-source-ready evidence.', completedOperations: [] };
+    }
+    const adapter = input.adapters.githubRulesets;
+    if (!adapter) {
+        return { status: 'blocked', blocker: 'No injected GitHub ruleset adapter is configured; refusing live ruleset calls in this execution context.', completedOperations: [] };
+    }
+    const envelopeId = input.plan.approval.envelopeId;
+    if (input.phase.id === 'rulesets-applied' && !envelopeId) {
+        return { status: 'blocked', blocker: 'Ruleset enforcement requires a persisted enforcement approval envelope.', completedOperations: [] };
+    }
+    const completed = [];
+    await input.lease?.assertHeld();
+    const executionTime = input.clock?.() ?? input.now;
+    if (Date.parse(input.plan.expiresAt) <= executionTime.getTime()) {
+        return { status: 'blocked', blocker: 'The reviewed ruleset plan expired before provider access.', completedOperations: [] };
+    }
+    if (input.phase.approvalGate.required) {
+        const authorization = evaluateApprovalForTransitionPlan(transitionPlanForPhase(input.phase, input.inspection.state, input.inspection.contexts[input.phase.id].transition), input.inspection.approvals, { now: executionTime });
+        if (authorization.approvalRequired || authorization.envelopeHash !== input.plan.approval.envelopeHash) {
+            return { status: 'blocked', blocker: 'Ruleset approval is no longer valid immediately before provider access.', completedOperations: [] };
+        }
+    }
+    const write = input.phase.id === 'rulesets-applied'
+        ? await adapter.applyRuleset({ repository: remoteRepository(input.inspection.state).name, sourceDigest, approvalEnvelopeId: envelopeId ?? 'ungated-readback' })
+        : await adapter.readRuleset({ repository: remoteRepository(input.inspection.state).name, sourceDigest });
+    completed.push(...input.plan.operations.filter((op) => input.phase.id === 'rulesets-applied'
+        ? op.actionId === 'github.ruleset.apply' || op.actionId === 'github.ruleset.readback'
+        : op.actionId === 'github.ruleset.readback'));
+    if (write.sourceDigest !== sourceDigest || write.readbackDigest !== sourceDigest) {
+        return { status: 'blocked', blocker: 'Post-write live ruleset readback did not match the saved source digest.', completedOperations: completed };
+    }
+    const header = evidenceHeaderFor({ inspection: input.inspection, phase: input.phase, plan: input.plan, result: 'verified', now: input.now });
+    const liveReadback = {
+        schemaVersion: input.inspection.state.identity.evidenceHeaderSchemaVersion,
+        repositoryId: header.repositoryId, identity: header.identity, phaseGraphHash: header.phaseGraphHash,
+        phaseId: header.phaseId, baselineSha: header.baselineSha, inputDigest: header.inputDigest,
+        transition: header.transition, observedAt: input.now.toISOString(), provider: 'github',
+        resourceType: 'ruleset', resourceId: write.resourceId, sourceDigest, readbackDigest: write.readbackDigest, matches: true
+    };
+    return {
+        status: 'completed', resultState: 'verified', liveReadback: [liveReadback],
+        evidencePayload: { kind: `${input.phase.id}.v1`, sourceDigest, resourceId: write.resourceId, readbackDigest: write.readbackDigest },
+        completedOperations: completed
+    };
+}
+//# sourceMappingURL=phase-governance.js.map

package/dist/governance-activation/phase-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-governance.js","sourceRoot":"","sources":["../../src/governance-activation/phase-governance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AACvH,OAAO,EAAE,QAAQ,EAAE,MAAM,mDAAmD,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAiC;IAC/E,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,aAAa,GAA0B,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,iCAAiC,CAC7C,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC5H,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACzD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sDAAsD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;YACpJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACzH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChE,KAAK,CAAC,YAAY,GAAG;YACnB,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ;YACpD,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;SACpG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,iGAAiG;YAC1G,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa;QACjF,iBAAiB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5F,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;KAC5G,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAiC;IAC5E,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC;IACnG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mLAAmL;YAC5L,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC3H,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,wIAAwI;QACjJ,mBAAmB,EAAE,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAiC;IAC5D,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,eAAe,GAAG,KAAK,EAAE,UAAU,CAAC;IAC1C,MAAM,aAAa,GAAG,GAAG,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1H,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,eAAe,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAiC;IACzE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,CAAC;QACH,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,YAAY,GAAG,+BAA+B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,iGAAiG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACpK,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0GAA0G,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC7K,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,MAAM,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,2DAA2D,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,iCAAiC,CACrD,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,EACjH,KAAK,CAAC,UAAU,CAAC,SAAS,EAC1B,EAAE,GAAG,EAAE,aAAa,EAAE,CACvB,CAAC;QACF,IAAI,aAAa,CAAC,gBAAgB,IAAI,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QACjD,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC/J,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3G,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAC1F,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,sBAAsB,IAAI,EAAE,CAAC,QAAQ,KAAK,yBAAyB;QACrF,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,yBAAyB,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;IACnJ,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7I,MAAM,YAAY,GAAsB;QACtC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B;QAC1E,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;QACnG,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;QACzF,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ;QACtF,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI;KACzH,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC;QAC1E,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;QACnI,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}

package/dist/governance-activation/phase-publication.d.ts

@@ -0,0 +1,8 @@
+import type { GitRepositoryInspection, GovernanceTransitionInspection, PhaseAdapterExecutionInput, PhaseAdapterOutcome } from './transition-ports.js';
+import type { CommandRunner } from '../process-runner.js';
+import type { PhaseGraphNode, TransitionOperation } from '../domain/governance/activation/types.js';
+export declare function inspectGitRepository(projectRoot: string, runner: CommandRunner): Promise<GitRepositoryInspection>;
+export declare function reviewedPushUrl(git: GitRepositoryInspection): string;
+export declare function gitCommitOperations(inspection: GovernanceTransitionInspection, phase: PhaseGraphNode, runner: CommandRunner): Promise<TransitionOperation[]>;
+export declare function gitPushOperations(inspection: GovernanceTransitionInspection, phase: PhaseGraphNode, runner: CommandRunner): Promise<TransitionOperation[]>;
+export declare function executeGitOperations(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;