@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/governance-activation/phase-publication.js

@@ -0,0 +1,318 @@
+import { parseGitIgnore, ignoredByRules } from './git-ignore.js';
+import { readProjectFile } from '../adapters/filesystem/project-files.js';
+import { readdir, lstat } from 'node:fs/promises';
+import { isProjectMutationReservationName, remoteRepository, githubRepositoryFromPushUrl } from '../domain/governance/activation/inputs.js';
+import path from 'node:path';
+import { validateArtifactPathParts } from '../domain/project/paths.js';
+import { canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
+import { runGit, commandSucceeded, commandFailure } from './transition-process.js';
+import { operation, transitionDestination } from '../domain/governance/activation/operations.js';
+import { canonicalApprovalEnvelopeHash } from '../domain/governance/activation/approvals.js';
+import { readbackProof } from './transition-records.js';
+async function allProjectFiles(projectRoot) {
+    const files = [];
+    async function visit(current, relative, inherited = []) {
+        const ignoreBytes = await readProjectFile(projectRoot, [...relative.split('/').filter(Boolean), '.gitignore']);
+        const rules = [...inherited, ...parseGitIgnore(ignoreBytes?.toString('utf8') ?? '', relative)];
+        const entries = await readdir(current, { withFileTypes: true });
+        for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name, 'en'))) {
+            if (entry.name === '.git' ||
+                isProjectMutationReservationName(entry.name) ||
+                entry.name === 'node_modules' ||
+                entry.name === '.venv' ||
+                entry.name === '.terraform' ||
+                entry.name.startsWith('.env') && !entry.name.endsWith('.example') ||
+                entry.name === '.cache' ||
+                (relative === '' && entry.name === 'governance'))
+                continue;
+            const child = path.join(current, entry.name);
+            const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+            if (ignoredByRules(childRelative, entry.isDirectory(), rules))
+                continue;
+            if (entry.isDirectory())
+                await visit(child, childRelative, rules);
+            else if (entry.isFile())
+                files.push(childRelative);
+        }
+    }
+    await visit(projectRoot, '');
+    return files;
+}
+async function stagedPayloadDigest(projectRoot, files) {
+    const entries = [];
+    for (const file of [...files].sort()) {
+        const bytes = await readProjectFile(projectRoot, validateArtifactPathParts(file.split('/'), 'Reviewed Git path'));
+        if (!bytes)
+            throw new Error(`Reviewed Git payload ${file} disappeared.`);
+        entries.push({ path: file, digest: canonicalSha256(bytes.toString('base64')) });
+    }
+    return canonicalSha256(entries);
+}
+function parsePorcelainStatus(output) {
+    const entries = output.split('\0').filter(Boolean);
+    const parsed = [];
+    for (const entry of entries) {
+        const index = entry.slice(0, 1);
+        const worktree = entry.slice(1, 2);
+        const rawPath = entry.slice(3);
+        const renamed = rawPath.includes('\0') ? rawPath.split('\0').at(-1) : rawPath;
+        parsed.push({ index, worktree, path: renamed });
+    }
+    return parsed.filter((entry) => !entry.path.startsWith('governance/'));
+}
+export async function inspectGitRepository(projectRoot, runner) {
+    const rootResult = await runGit(runner, projectRoot, ['rev-parse', '--show-toplevel']);
+    if (!commandSucceeded(rootResult)) {
+        let markerPresent = true;
+        try {
+            await lstat(path.join(projectRoot, '.git'));
+        }
+        catch (error) {
+            if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'ENOENT')
+                markerPresent = false;
+            else
+                throw error;
+        }
+        return {
+            insideWorkTree: false, root: null, branch: null, head: null, upstream: null, status: [], remotes: [],
+            issues: markerPresent || rootResult.status !== 128 || rootResult.errorCode || rootResult.timedOut
+                ? ['Git discovery failed; refusing to reinterpret an unsafe, inaccessible, or invalid repository as a new repository.']
+                : []
+        };
+    }
+    const root = path.resolve(rootResult.stdout.trim());
+    if (root !== path.resolve(projectRoot)) {
+        return {
+            insideWorkTree: true, root, branch: null, head: null, upstream: null, status: [], remotes: [],
+            issues: [`Git repository root ${root} does not match Liftoff project root ${projectRoot}.`]
+        };
+    }
+    const branchResult = await runGit(runner, projectRoot, ['symbolic-ref', '--quiet', '--short', 'HEAD']);
+    const branch = commandSucceeded(branchResult) ? branchResult.stdout.trim() : null;
+    const headResult = await runGit(runner, projectRoot, ['rev-parse', '--verify', 'HEAD']);
+    const head = commandSucceeded(headResult) ? headResult.stdout.trim() : null;
+    const upstreamResult = await runGit(runner, projectRoot, ['rev-parse', '--abbrev-ref', '--symbolic-full-name', '@{u}']);
+    const upstream = commandSucceeded(upstreamResult) ? upstreamResult.stdout.trim() : null;
+    const statusResult = await runGit(runner, projectRoot, ['status', '--porcelain=v1', '-z', '--untracked-files=all']);
+    const status = commandSucceeded(statusResult) ? parsePorcelainStatus(statusResult.stdout) : [];
+    const remoteResult = await runGit(runner, projectRoot, ['remote', '-v']);
+    const remotes = commandSucceeded(remoteResult) ? parseRemotes(remoteResult.stdout) : [];
+    for (const remote of remotes) {
+        const pushUrls = await runGit(runner, projectRoot, ['remote', 'get-url', '--push', '--all', remote.name]);
+        remote.pushUrls = commandSucceeded(pushUrls) ? pushUrls.stdout.trim().split(/\r?\n/).filter(Boolean) : [];
+    }
+    const issues = [];
+    if (!branch)
+        issues.push('Detached HEAD or unborn branch cannot be reviewed for deterministic governance commit/push.');
+    if (!commandSucceeded(statusResult))
+        issues.push(commandFailure(statusResult));
+    if (status.some((entry) => entry.index === 'D' || entry.worktree === 'D')) {
+        issues.push('Unknown file deletion is outside the reviewed initial commit plan.');
+    }
+    return { insideWorkTree: true, root, branch, head, upstream, status, remotes, issues };
+}
+function parseRemotes(output) {
+    const remotes = new Map();
+    for (const line of output.split(/\r?\n/u)) {
+        const match = line.match(/^(\S+)\s+(\S+)\s+\((fetch|push)\)$/u);
+        if (match) {
+            const entry = remotes.get(match[1]) ?? { name: match[1], url: '', pushUrls: [] };
+            if (match[3] === 'fetch')
+                entry.url = match[2];
+            else
+                entry.pushUrls = [...entry.pushUrls, match[2]];
+            remotes.set(entry.name, entry);
+        }
+    }
+    return [...remotes.values()].sort((left, right) => left.name.localeCompare(right.name, 'en'));
+}
+function gitStatusDigest(inspection) {
+    return canonicalSha256({ branch: inspection.branch, head: inspection.head, status: inspection.status, remotes: inspection.remotes });
+}
+async function remoteHead(runner, projectRoot, remote, branch) {
+    const result = await runGit(runner, projectRoot, ['ls-remote', '--heads', remote, branch]);
+    if (!commandSucceeded(result))
+        throw new Error(commandFailure(result));
+    const first = result.stdout.trim().split(/\s+/u)[0];
+    return first && /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(first) ? first : null;
+}
+async function isAncestor(runner, projectRoot, ancestor, descendant) {
+    return (await runGit(runner, projectRoot, ['merge-base', '--is-ancestor', ancestor, descendant])).status === 0;
+}
+function defaultBranch(state) {
+    return remoteRepository(state).defaultBranch || 'develop';
+}
+export function reviewedPushUrl(git) {
+    const origin = git.remotes[0];
+    if (git.remotes.length !== 1 || origin?.name !== 'origin' ||
+        origin.pushUrls.length !== 1 || origin.pushUrls[0] !== origin.url) {
+        throw new Error('Publication requires one resolved origin push URL matching its reviewed fetch destination; differing or multiple push destinations are unreviewed.');
+    }
+    const url = origin.pushUrls[0];
+    if (/https?:\/\/[^/]*@/i.test(url))
+        throw new Error('Credential-bearing Git destinations cannot be reviewed or persisted.');
+    return url;
+}
+export async function gitCommitOperations(inspection, phase, runner) {
+    const git = await inspectGitRepository(inspection.projectRoot, runner);
+    if (git.issues.length > 0)
+        throw new Error(git.issues.join(' '));
+    const branch = defaultBranch(inspection.state);
+    if (!git.insideWorkTree) {
+        const files = await allProjectFiles(inspection.projectRoot);
+        return [
+            operation({
+                adapter: 'git', actionId: 'git.init', mutationClass: 'git-commit', phaseId: phase.id,
+                inputs: { branch }, destination: transitionDestination('local', '.git'), remote: false, destructive: false
+            }),
+            operation({
+                adapter: 'git', actionId: 'git.add-reviewed', mutationClass: 'git-commit', phaseId: phase.id,
+                inputs: { paths: files, statusDigest: canonicalSha256(files), payloadDigest: await stagedPayloadDigest(inspection.projectRoot, files) },
+                destination: transitionDestination('local', 'git-index'), remote: false, destructive: false
+            }),
+            operation({
+                adapter: 'git', actionId: 'git.commit-reviewed', mutationClass: 'git-commit', phaseId: phase.id,
+                inputs: { message: 'Initial Liftoff baseline', branch, paths: files },
+                destination: transitionDestination('local', branch, { ref: branch }), remote: false, destructive: false
+            })
+        ];
+    }
+    if (git.branch !== branch)
+        throw new Error(`Expected branch ${branch}, found ${git.branch ?? 'detached'}.`);
+    if (git.upstream) {
+        const divergence = await runGit(runner, inspection.projectRoot, ['rev-list', '--left-right', '--count', `${git.upstream}...HEAD`]);
+        if (!commandSucceeded(divergence))
+            throw new Error(commandFailure(divergence));
+        const [behind, ahead] = divergence.stdout.trim().split(/\s+/u).map((value) => Number.parseInt(value, 10));
+        if ((behind ?? 0) > 0 || (ahead ?? 0) > 0) {
+            throw new Error(`Branch ${branch} diverges from ${git.upstream}; refusing commit before explicit reconciliation.`);
+        }
+    }
+    if (git.status.length === 0 && git.head) {
+        return [operation({
+                adapter: 'git', actionId: 'git.verify-existing-commit', mutationClass: 'read-worktree', phaseId: phase.id,
+                inputs: { head: git.head, branch, statusDigest: gitStatusDigest(git) },
+                destination: transitionDestination('local', branch, { ref: branch }), remote: false, destructive: false
+            })];
+    }
+    const paths = git.status.map((entry) => entry.path).sort((left, right) => left.localeCompare(right, 'en'));
+    return [
+        operation({
+            adapter: 'git', actionId: 'git.add-reviewed', mutationClass: 'git-commit', phaseId: phase.id,
+            inputs: { paths, statusDigest: gitStatusDigest(git), payloadDigest: await stagedPayloadDigest(inspection.projectRoot, paths) },
+            destination: transitionDestination('local', 'git-index'), remote: false, destructive: false
+        }),
+        operation({
+            adapter: 'git', actionId: 'git.commit-reviewed', mutationClass: 'git-commit', phaseId: phase.id,
+            inputs: { message: 'Initial Liftoff baseline', branch, paths },
+            destination: transitionDestination('local', branch, { ref: branch }), remote: false, destructive: false
+        })
+    ];
+}
+export async function gitPushOperations(inspection, phase, runner) {
+    const git = await inspectGitRepository(inspection.projectRoot, runner);
+    if (git.issues.length > 0)
+        throw new Error(git.issues.join(' '));
+    if (!git.insideWorkTree || !git.head)
+        throw new Error('A reviewed local commit is required before push.');
+    const branch = defaultBranch(inspection.state);
+    if (git.branch !== branch)
+        throw new Error(`Expected branch ${branch}, found ${git.branch ?? 'detached'}.`);
+    if (git.status.length > 0) {
+        throw new Error(`Worktree has unreviewed changes outside governance/plans: ${git.status.map((entry) => entry.path).join(', ')}.`);
+    }
+    const remoteNames = new Set(git.remotes.map((remote) => remote.name));
+    if (!remoteNames.has('origin') || git.remotes.length !== 1) {
+        throw new Error(`Expected exactly one approved origin remote; found ${git.remotes.map((remote) => remote.name).join(', ') || 'none'}.`);
+    }
+    const pushUrl = reviewedPushUrl(git);
+    const remoteSha = await remoteHead(runner, inspection.projectRoot, pushUrl, branch);
+    if (remoteSha && remoteSha !== git.head && !(await isAncestor(runner, inspection.projectRoot, remoteSha, git.head))) {
+        throw new Error('Remote branch is not a fast-forward target; force, reset, rebase, and non-fast-forward push are forbidden.');
+    }
+    return [operation({
+            adapter: 'git',
+            actionId: remoteSha === git.head ? 'git.verify-existing-push' : 'git.push-approved-ref',
+            mutationClass: remoteSha === git.head ? 'github-read' : 'git-push',
+            phaseId: phase.id,
+            inputs: { remote: 'origin', branch, localHead: git.head, remoteHead: remoteSha, statusDigest: gitStatusDigest(git), pushUrl },
+            destination: transitionDestination('repository', pushUrl, {
+                repository: githubRepositoryFromPushUrl(pushUrl), ref: `refs/heads/${branch}`
+            }),
+            remote: true, destructive: false
+        })];
+}
+export async function executeGitOperations(input) {
+    if (input.phase.id !== 'committed' && input.phase.id !== 'pushed')
+        return null;
+    const completed = [];
+    for (const op of input.plan.operations.filter((entry) => entry.adapter === 'git')) {
+        if (op.actionId === 'git.verify-existing-commit' || op.actionId === 'git.verify-existing-push') {
+            completed.push(op);
+            continue;
+        }
+        await input.lease?.assertHeld();
+        const currentTime = (input.clock?.() ?? input.now).getTime();
+        const envelope = input.inspection.approvals.find((approval) => approval.id === input.plan.approval.envelopeId);
+        if (Date.parse(input.plan.expiresAt) <= currentTime || !envelope ||
+            Date.parse(envelope.approvedAt) > currentTime || Date.parse(envelope.expiresAt) <= currentTime ||
+            canonicalApprovalEnvelopeHash(envelope) !== input.plan.approval.envelopeHash) {
+            return { status: 'blocked', blocker: 'Publication approval or reviewed plan is no longer valid immediately before mutation.', completedOperations: completed };
+        }
+        if (op.actionId === 'git.init') {
+            const result = await runGit(input.runner, input.inspection.projectRoot, ['init', '-b', String(op.inputs.branch)]);
+            if (!commandSucceeded(result))
+                return { status: 'blocked', blocker: commandFailure(result), completedOperations: completed };
+            completed.push(op);
+        }
+        else if (op.actionId === 'git.add-reviewed') {
+            const paths = Array.isArray(op.inputs.paths) ? op.inputs.paths.map(String) : [];
+            if (paths.length === 0) {
+                completed.push(op);
+                continue;
+            }
+            if (await stagedPayloadDigest(input.inspection.projectRoot, paths) !== op.inputs.payloadDigest) {
+                return { status: 'blocked', blocker: 'Reviewed initial staging payload changed before git add.', completedOperations: completed };
+            }
+            const result = await runGit(input.runner, input.inspection.projectRoot, ['add', '--', ...paths]);
+            if (!commandSucceeded(result))
+                return { status: 'blocked', blocker: commandFailure(result), completedOperations: completed };
+            completed.push(op);
+        }
+        else if (op.actionId === 'git.commit-reviewed') {
+            const result = await runGit(input.runner, input.inspection.projectRoot, ['commit', '-m', String(op.inputs.message)]);
+            if (!commandSucceeded(result))
+                return { status: 'blocked', blocker: commandFailure(result), completedOperations: completed };
+            completed.push(op);
+        }
+        else if (op.actionId === 'git.push-approved-ref') {
+            const branch = String(op.inputs.branch);
+            const git = await inspectGitRepository(input.inspection.projectRoot, input.runner);
+            if (reviewedPushUrl(git) !== op.inputs.pushUrl || git.head !== op.inputs.localHead || git.status.length > 0) {
+                return { status: 'blocked', blocker: 'Reviewed push destination or actual Git payload changed before publication.', completedOperations: completed };
+            }
+            const result = await runGit(input.runner, input.inspection.projectRoot, ['push', String(op.inputs.pushUrl), `HEAD:refs/heads/${branch}`]);
+            if (!commandSucceeded(result))
+                return { status: 'blocked', blocker: commandFailure(result), completedOperations: completed };
+            completed.push(op);
+        }
+    }
+    const verified = await inspectGitRepository(input.inspection.projectRoot, input.runner);
+    if (!verified.head)
+        return { status: 'blocked', blocker: 'Publication did not produce a verifiable Git HEAD.', completedOperations: completed };
+    if (input.phase.id === 'pushed') {
+        const pushUrl = reviewedPushUrl(verified);
+        if (await remoteHead(input.runner, input.inspection.projectRoot, pushUrl, defaultBranch(input.inspection.state)) !== verified.head) {
+            return { status: 'blocked', blocker: 'Independent push destination readback does not match the reviewed commit.', completedOperations: completed };
+        }
+    }
+    return {
+        status: 'completed', resultState: 'verified',
+        evidencePayload: { kind: `${input.phase.id}.v1`, head: verified.head, ...(input.phase.id === 'pushed' ? { pushUrl: reviewedPushUrl(verified) } : {}) },
+        ...(input.phase.id === 'pushed' ? { liveReadback: [readbackProof(input, 'github', 'git-ref', reviewedPushUrl(verified), {
+                    head: verified.head, ref: defaultBranch(input.inspection.state), pushUrl: reviewedPushUrl(verified)
+                })] } : {}),
+        completedOperations: completed
+    };
+}
+//# sourceMappingURL=phase-publication.js.map

package/dist/governance-activation/phase-publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-publication.js","sourceRoot":"","sources":["../../src/governance-activation/phase-publication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAC5I,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAKpF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,KAAK,UAAU,eAAe,CAAC,WAAmB;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,UAAU,KAAK,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAS,GAA6B,EAAE;QAC9F,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,IACE,KAAK,CAAC,IAAI,KAAK,MAAM;gBACrB,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5C,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC7B,KAAK,CAAC,IAAI,KAAK,OAAO;gBACtB,KAAK,CAAC,IAAI,KAAK,YAAY;gBAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACjE,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACvB,CAAC,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;gBAChD,SAAS;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1E,IAAI,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC;gBAAE,SAAS;YACxE,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;iBAC7D,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAwB;IAC9E,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,eAAe,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,MAAqB;IACnF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACpD,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,aAAa,GAAG,KAAK,CAAC;;gBAChH,MAAM,KAAK,CAAC;QACnB,CAAC;QACD,OAAO;YACL,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACpG,MAAM,EAAE,aAAa,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,QAAQ;gBAC/F,CAAC,CAAC,CAAC,mHAAmH,CAAC;gBACvH,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YAC7F,MAAM,EAAE,CAAC,uBAAuB,IAAI,wCAAwC,WAAW,GAAG,CAAC;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC;IACxH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;IACxH,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACnF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO;gBAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;;gBAC3C,KAAK,CAAC,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,eAAe,CAAC,UAAmC;IAC1D,OAAO,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AACvI,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAqB,EAAE,WAAmB,EAAE,MAAc,EAAE,MAAc;IAClG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAqB,EAAE,WAAmB,EAAE,QAAgB,EAAE,UAAkB;IACxG,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,aAAa,CAAC,KAA0B;IAC/C,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oJAAoJ,CAAC,CAAC;IACxK,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;IAChC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5H,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA0C,EAC1C,KAAqB,EACrB,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO;YACL,SAAS,CAAC;gBACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;gBACpF,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;aAC3G,CAAC;YACF,SAAS,CAAC;gBACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;gBAC5F,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE;gBACvI,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;aAC5F,CAAC;YACF,SAAS,CAAC;gBACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;gBAC/F,MAAM,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;gBACrE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;aACxG,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,QAAQ,SAAS,CAAC,CAAC,CAAC;QACnI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,kBAAkB,GAAG,CAAC,QAAQ,mDAAmD,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,SAAS,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,4BAA4B,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;gBACzG,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE;gBACtE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;aACxG,CAAC,CAAC,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3G,OAAO;QACL,SAAS,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;YAC5F,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE;YAC9H,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;SAC5F,CAAC;QACF,SAAS,CAAC;YACR,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;YAC/F,MAAM,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,EAAE;YAC9D,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;SACxG,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA0C,EAC1C,KAAqB,EACrB,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;IAC1I,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpF,IAAI,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,CAAC,SAAS,CAAC;YAChB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,SAAS,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,uBAAuB;YACvF,aAAa,EAAE,SAAS,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;YAClE,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;YAC7H,WAAW,EAAE,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE;gBACxD,UAAU,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,MAAM,EAAE;aAC9E,CAAC;YACF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK;SACjC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAiC;IAC1E,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;QAClF,IAAI,EAAE,CAAC,QAAQ,KAAK,4BAA4B,IAAI,EAAE,CAAC,QAAQ,KAAK,0BAA0B,EAAE,CAAC;YAC/F,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/G,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,IAAI,CAAC,QAAQ;YAC9D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW;YAC9F,6BAA6B,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uFAAuF,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;QACjK,CAAC;QACD,IAAI,EAAE,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YAC7H,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,EAAE,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzD,IAAI,MAAM,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC/F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0DAA0D,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YACpI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YACjG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YAC7H,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,EAAE,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YAC7H,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,EAAE,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,6EAA6E,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YACvJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1I,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YAC7H,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oDAAoD,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;IAChJ,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnI,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,2EAA2E,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;QACrJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;QAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACtJ,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE;oBACtH,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC;iBACpG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACX,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}

package/dist/governance-activation/proof-records.d.ts

@@ -0,0 +1,3 @@
+import type { PhaseEvidenceRecord } from '../domain/governance/activation/types.js';
+export declare function readReviewedTransitionPlans(projectRoot: string): Promise<import("../domain/governance/activation/types.js").SavedTransitionPlan[]>;
+export declare function readActivationEvidence(projectRoot: string): Promise<PhaseEvidenceRecord[]>;

package/dist/governance-activation/proof-records.js

@@ -0,0 +1,78 @@
+import { readdir } from 'node:fs/promises';
+import { readProjectFile } from '../adapters/filesystem/project-files.js';
+import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
+import { isHistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
+import { validateEvidenceHeader, validateLiveReadbackProof, validateSavedTransitionPlan } from '../domain/governance/activation/validators.js';
+async function readJsonDirectory(projectRoot, parts) {
+    let entries;
+    try {
+        entries = await readdir(await resolveProjectPath(projectRoot, parts), { withFileTypes: true });
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    const results = [];
+    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name, 'en'))) {
+        if (!entry.name.endsWith('.json'))
+            continue;
+        if (!entry.isFile())
+            throw new Error(`Activation proof ${[...parts, entry.name].join('/')} must be a regular file.`);
+        const bytes = await readProjectFile(projectRoot, [...parts, entry.name]);
+        if (!bytes)
+            throw new Error('Activation proof changed during inspection.');
+        const source = [...parts, entry.name].join('/');
+        try {
+            results.push({ path: source, value: JSON.parse(bytes.toString('utf8')) });
+        }
+        catch (error) {
+            if (!(error instanceof SyntaxError))
+                throw error;
+            throw new Error(`Unable to parse ${source}: invalid JSON.`);
+        }
+    }
+    return results;
+}
+export async function readReviewedTransitionPlans(projectRoot) {
+    return (await readJsonDirectory(projectRoot, ['governance', 'plans'])).map(({ path, value }) => {
+        try {
+            return validateSavedTransitionPlan(value);
+        }
+        catch (error) {
+            throw new Error(`Invalid ${path}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    });
+}
+export async function readActivationEvidence(projectRoot) {
+    return (await readJsonDirectory(projectRoot, ['governance', 'evidence'])).map(({ path, value }) => {
+        try {
+            if (typeof value !== 'object' || value === null || !('header' in value) || !('evidenceId' in value) ||
+                typeof value.evidenceId !== 'string' || !value.evidenceId) {
+                throw new Error('Activation v2 requires a body-bound evidence record; historical headers are diagnostic-only.');
+            }
+            const record = value;
+            const header = record.header;
+            if (typeof header === 'object' && header !== null && 'schemaVersion' in header &&
+                header.schemaVersion === 1 && 'identity' in header && isHistoricalActivationIdentity(header.identity)) {
+                throw new Error('Historical activation v1 evidence is diagnostic-only; its original bytes are preserved and cannot authorize current execution or read scope.');
+            }
+            if (Object.keys(record).some((key) => !['evidenceId', 'header', 'payload', 'liveReadback'].includes(key))) {
+                throw new Error('Unknown activation evidence fields.');
+            }
+            const rawReadback = record.liveReadback;
+            if (rawReadback !== undefined && !Array.isArray(rawReadback)) {
+                throw new Error('Evidence liveReadback must be an array.');
+            }
+            const liveReadback = rawReadback?.map(validateLiveReadbackProof) ?? [];
+            return {
+                evidenceId: value.evidenceId, header: validateEvidenceHeader(value.header),
+                payload: record.payload, liveReadback
+            };
+        }
+        catch (error) {
+            throw new Error(`Invalid ${path}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    });
+}
+//# sourceMappingURL=proof-records.js.map

package/dist/governance-activation/proof-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-records.js","sourceRoot":"","sources":["../../src/governance-activation/proof-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EACL,sBAAsB,EAAE,yBAAyB,EAAE,2BAA2B,EAC/E,MAAM,+CAA+C,CAAC;AAGvD,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,KAAe;IACnE,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACrH,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,WAAmB;IACnE,OAAO,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7F,IAAI,CAAC;YAAC,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAClD,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAClH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC9D,OAAO,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAChG,IAAI,CAAC;YACH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;gBACjG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,eAAe,IAAI,MAAM;gBAC5E,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,UAAU,IAAI,MAAM,IAAI,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxG,MAAM,IAAI,KAAK,CAAC,8IAA8I,CAAC,CAAC;YAClK,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1G,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;YACxC,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,YAAY,GAAG,WAAW,EAAE,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO;gBACL,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC1E,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/governance-activation/read-only.d.ts

@@ -0,0 +1,30 @@
+import type { LiftoffManifest } from '../domain/project/contracts.js';
+import type { CommandRunner } from '../process-runner.js';
+export { readActivationEvidence, readReviewedTransitionPlans } from './proof-records.js';
+/** Read-only proof boundary: returned values carry no executor, credential, or mutation port. */
+export declare function inspectCurrentActivationEvidence(projectRoot: string, manifest: LiftoffManifest, options?: {
+    runner?: CommandRunner;
+    now?: Date;
+}): Promise<{
+    status: 'not-started';
+    state?: undefined;
+    snapshot?: undefined;
+    contexts?: undefined;
+    records?: undefined;
+    selections?: undefined;
+    migration?: undefined;
+} | {
+    status: 'inspected';
+    state: import("../domain/governance/activation/types.js").UserActivationState;
+    snapshot: import("./inputs.js").ActivationInputSnapshot;
+    contexts: Record<"activation-approved" | "application-foundation" | "bootstrap-local" | "bootstrap-state-disposed" | "committed" | "credential-ready" | "dev-proof" | "enforcement-approved" | "existing-private-path" | "green-red-proof" | "live-readback" | "phase-0-complete" | "private-backend-proof" | "production-rehearsed" | "provider-ready" | "pushed" | "remote-import-verified" | "remote-ready" | "rulesets-applied" | "runner-ready" | "seed-archived" | "seed-valid" | "seed-verified" | "staging-qualified" | "state-path-selected" | "workflow-source-ready", import("../domain/governance/activation/evidence.js").EvidenceFreshnessContext>;
+    records: import("../domain/governance/activation/types.js").PhaseEvidenceRecord[];
+    selections: {
+        [k: string]: import("../domain/governance/activation/evidence.js").EvidenceSelectionResult;
+    };
+    migration: import("./history-contracts.js").MigrationJournal | null;
+}>;
+export { evidenceBodyDigest, evidenceHeaderDigest, selectLatestPhaseEvidence, validateEvidenceFreshness } from '../domain/governance/activation/evidence.js';
+export { activationEvidenceContexts, readActivationInputSnapshot } from './inputs.js';
+export type { EvidenceFreshnessContext, EvidenceSelectionResult } from '../domain/governance/activation/evidence.js';
+export { planDigestFor, type PlanDigestInput } from '../domain/governance/activation/operations.js';

package/dist/governance-activation/read-only.js

@@ -0,0 +1,33 @@
+import { loadActivationState } from './activation-state.js';
+import { activationEvidenceContexts, readActivationInputSnapshot } from './inputs.js';
+import { canonicalPhaseGraph } from '../domain/governance/activation/graph.js';
+import { selectLatestPhaseEvidence } from '../domain/governance/activation/evidence.js';
+import { validateManifestActivationForExecution } from '../domain/governance/activation/validators.js';
+import { phaseIds } from '../domain/governance/activation/types.js';
+import { readActivationEvidence, readReviewedTransitionPlans } from './proof-records.js';
+import { inspectActivationMigrationHistory } from './migration-history.js';
+export { readActivationEvidence, readReviewedTransitionPlans } from './proof-records.js';
+/** Read-only proof boundary: returned values carry no executor, credential, or mutation port. */
+export async function inspectCurrentActivationEvidence(projectRoot, manifest, options = {}) {
+    validateManifestActivationForExecution(manifest);
+    const loaded = await loadActivationState(projectRoot);
+    if (!loaded)
+        return { status: 'not-started' };
+    const migration = await inspectActivationMigrationHistory(projectRoot);
+    const snapshot = await readActivationInputSnapshot(projectRoot, manifest, options.runner);
+    const contexts = activationEvidenceContexts(canonicalPhaseGraph, loaded.state, snapshot, options.now);
+    const plans = await readReviewedTransitionPlans(projectRoot);
+    const records = await readActivationEvidence(projectRoot);
+    for (const phaseId of phaseIds)
+        contexts[phaseId].reviewedPlans = plans;
+    const selections = Object.fromEntries(phaseIds.map((phaseId) => [phaseId,
+        selectLatestPhaseEvidence(records.filter((record) => record.header.phaseId === phaseId), contexts[phaseId])]));
+    return {
+        status: 'inspected', state: loaded.state, snapshot, contexts, records, selections,
+        migration: migration.status === 'committed' ? migration.journal : null
+    };
+}
+export { evidenceBodyDigest, evidenceHeaderDigest, selectLatestPhaseEvidence, validateEvidenceFreshness } from '../domain/governance/activation/evidence.js';
+export { activationEvidenceContexts, readActivationInputSnapshot } from './inputs.js';
+export { planDigestFor } from '../domain/governance/activation/operations.js';
+//# sourceMappingURL=read-only.js.map

package/dist/governance-activation/read-only.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-only.js","sourceRoot":"","sources":["../../src/governance-activation/read-only.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEzF,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,WAAmB,EAAE,QAAyB,EAAE,OAAO,GAA2C,EAAE;IACzJ,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,0BAA0B,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO;QACtE,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,OAAO;QACL,MAAM,EAAE,WAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU;QAC1F,SAAS,EAAE,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;KACvE,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7J,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAEtF,OAAO,EAAE,aAAa,EAAwB,MAAM,+CAA+C,CAAC"}

package/dist/governance-activation/readiness.d.ts

@@ -1,25 +1 @@
-import { type EvidenceFreshnessContext } from './evidence.js';
-import type { ActivationIdentity, ApprovalEnvelope, EvidenceHeader, ManagedPhaseGraph, PhaseEvidenceRecord, PhaseId, PhaseState, UserActivationState } from './types.js';
-export type PhaseReadiness = {
-    phaseId: PhaseId;
-    state: PhaseState | 'identity-incompatible';
-    blockers: readonly string[];
-};
-export interface ReadinessResult {
-    identityCompatible: boolean;
-    identityBlocker?: string;
-    phases: Record<PhaseId, PhaseReadiness>;
-    nextReadyPhase: PhaseId | null;
-}
-export interface ReadinessInput {
-    graph?: ManagedPhaseGraph;
-    state: UserActivationState;
-    approvals: readonly ApprovalEnvelope[];
-    evidence: readonly (EvidenceHeader | PhaseEvidenceRecord)[];
-    transitionContexts?: Partial<Record<PhaseId, EvidenceFreshnessContext>>;
-    identity?: ActivationIdentity;
-    now?: Date;
-    phaseBlockers?: Partial<Record<PhaseId, readonly string[]>>;
-    retryArchivedSeedBaseline?: boolean;
-}
-export declare function calculatePhaseReadiness(input: ReadinessInput): ReadinessResult;
+export * from '../domain/governance/activation/readiness.js';