@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/governance-activation/transition-records.js

@@ -0,0 +1,208 @@
+import { validateArtifactPathParts } from '../domain/project/paths.js';
+import { operation, transitionDestination } from '../domain/governance/activation/operations.js';
+import { detectCredentialLeaks } from './credentials.js';
+import { canonicalJson, canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
+import { validateSavedTransitionPlan, validateEvidenceHeader, validateUserActivationState } from '../domain/governance/activation/validators.js';
+import { readProjectFile } from '../adapters/filesystem/project-files.js';
+import { applyProjectFileTransaction, captureProjectFileSnapshot } from '../adapters/filesystem/project-transaction.js';
+import { phaseContractDigests } from '../domain/governance/activation/graph.js';
+import { evidenceBodyDigest, evidenceHeaderDigest } from '../domain/governance/activation/evidence.js';
+import { remoteBindingDigest } from '../domain/governance/activation/inputs.js';
+import { stateWithSelectedActiveChange } from './source-of-truth.js';
+import { activationStateContentHash } from './activation-state.js';
+import { randomUUID } from 'node:crypto';
+export const governancePlanDirectoryPathParts = ['governance', 'plans'];
+const engineProducer = 'liftoff-governance-transition-engine';
+export function safeTimestamp(value) {
+    return value.replace(/[^0-9A-Za-z]/g, '');
+}
+export function transitionPlanPathParts(plan) {
+    return validateArtifactPathParts([
+        ...governancePlanDirectoryPathParts,
+        `${plan.phaseId}-${safeTimestamp(plan.createdAt)}-${plan.planDigest.slice(0, 12)}.json`
+    ], 'Governance transition plan path');
+}
+export function evidencePathParts(evidenceId) {
+    return validateArtifactPathParts(['governance', 'evidence', `${evidenceId}.json`], 'Governance evidence path');
+}
+export function activationStatePathParts() {
+    return validateArtifactPathParts(['governance', 'activation-state.json'], 'Activation state path');
+}
+export function cloneState(state) {
+    return JSON.parse(JSON.stringify(state));
+}
+export async function initializeExecutionAnchor(inspection, now) {
+    const state = cloneState(inspection.state);
+    state.repository.id = `local:${randomUUID()}`;
+    state.createdAt = now.toISOString();
+    state.updatedAt = state.createdAt;
+    const pathParts = activationStatePathParts();
+    await applyProjectFileTransaction(inspection.projectRoot, [{
+            type: 'write', pathParts, content: `${canonicalJson(validateUserActivationState(state))}\n`
+        }], { preconditions: [{ pathParts }] });
+}
+export function evidenceWriteOperation(phase, pathParts) {
+    return operation({
+        adapter: 'local-evidence',
+        actionId: 'governance.evidence.write',
+        mutationClass: 'write-evidence',
+        phaseId: phase.id,
+        inputs: { pathParts },
+        destination: transitionDestination('local', pathParts.join('/'), { pathParts }),
+        remote: false,
+        destructive: false
+    });
+}
+export function stateWriteOperation(phase) {
+    return operation({
+        adapter: 'local-evidence',
+        actionId: 'governance.activation-state.write',
+        mutationClass: 'write-activation-state',
+        phaseId: phase.id,
+        inputs: { pathParts: activationStatePathParts() },
+        destination: transitionDestination('local', 'governance/activation-state.json', { pathParts: activationStatePathParts() }),
+        remote: false,
+        destructive: false
+    });
+}
+export function assertNoSecrets(plan) {
+    const scan = detectCredentialLeaks([{
+            source: 'generated-artifact',
+            label: 'governance transition plan',
+            text: canonicalJson(plan)
+        }]);
+    if (scan.status === 'compromised') {
+        throw new Error(`Governance transition plan contains credential-shaped content: ${scan.leaks.map((leak) => leak.pattern).join(', ')}.`);
+    }
+}
+export async function saveTransitionPlan(projectRoot, plan) {
+    const validated = validateSavedTransitionPlan(plan);
+    assertNoSecrets(validated);
+    const pathParts = transitionPlanPathParts(validated);
+    const existing = await readProjectFile(projectRoot, pathParts);
+    if (existing !== undefined) {
+        throw new Error(`Refusing to overwrite existing governance transition plan ${pathParts.join('/')}.`);
+    }
+    const content = `${canonicalJson(validated)}\n`;
+    await applyProjectFileTransaction(projectRoot, [{ type: 'write', pathParts, content }], {
+        preconditions: [{ pathParts: [...pathParts] }]
+    });
+    return { pathParts, digest: canonicalSha256(validated) };
+}
+export function evidenceHeaderFor(input) {
+    const context = input.inspection.contexts[input.phase.id];
+    return validateEvidenceHeader({
+        schemaVersion: input.inspection.state.identity.evidenceHeaderSchemaVersion,
+        repositoryId: input.inspection.state.repository.id,
+        identity: input.inspection.state.identity,
+        phaseGraphHash: input.inspection.state.identity.phaseGraphHash,
+        phaseId: input.phase.id,
+        phaseContractDigest: phaseContractDigests(input.inspection.graph)[input.phase.id],
+        inputDigest: input.plan.inputDigest,
+        baselineSha: input.plan.baselineDigest,
+        transition: context.transition,
+        producedAt: input.now.toISOString(),
+        producer: engineProducer,
+        bodyDigest: evidenceBodyDigest(input.payload, input.liveReadback),
+        ...(input.inspection.state.remoteBinding && !input.phase.id.startsWith('seed-') && input.phase.id !== 'committed' ? {
+            remoteBindingDigest: remoteBindingDigest(input.inspection.state.remoteBinding)
+        } : {}),
+        result: input.result
+    });
+}
+function appendUnique(values, value) {
+    return value === null || values.includes(value) ? [...values] : [...values, value];
+}
+export function nextStateForOutcome(input) {
+    const base = cloneState(input.override ?? input.inspection.state);
+    if (input.inspection.sourceOfTruth.status === 'selected' && input.inspection.sourceOfTruth.recordActiveChangeOnNextMutation) {
+        const selected = stateWithSelectedActiveChange(base, input.inspection.sourceOfTruth.selected);
+        base.activeChange = selected.activeChange;
+    }
+    const phaseState = input.resultState === 'approved' ? 'approved' : input.resultState;
+    base.phases[input.phase.id] = {
+        state: phaseState,
+        updatedAt: input.now.toISOString(),
+        evidence: input.evidenceReference ? [...base.phases[input.phase.id].evidence, input.evidenceReference] : base.phases[input.phase.id].evidence,
+        approvals: appendUnique(base.phases[input.phase.id].approvals, input.plan.approval.envelopeId),
+        blockers: input.blocker ? [input.blocker] : []
+    };
+    base.updatedAt = input.now.toISOString();
+    return validateUserActivationState(base);
+}
+export function blockedState(input) {
+    const base = cloneState(input.inspection.state);
+    base.phases[input.phase.id] = {
+        state: 'blocked',
+        updatedAt: input.now.toISOString(),
+        evidence: base.phases[input.phase.id].evidence,
+        approvals: appendUnique(base.phases[input.phase.id].approvals, input.plan.approval.envelopeId),
+        blockers: [input.blocker]
+    };
+    base.updatedAt = input.now.toISOString();
+    return validateUserActivationState(base);
+}
+async function assertLoadedStateHash(projectRoot, expectedHash) {
+    const snapshot = await captureProjectFileSnapshot(projectRoot, activationStatePathParts());
+    const currentHash = snapshot.content === undefined ? null : activationStateContentHash(snapshot.content);
+    if (currentHash !== expectedHash) {
+        throw new Error(`Activation state changed after inspection: expected ${expectedHash ?? 'absent'}, found ${currentHash ?? 'absent'}.`);
+    }
+    return snapshot;
+}
+export async function writeOutcomeTransaction(input) {
+    if (input.evidenceRecord) {
+        const scan = detectCredentialLeaks([{
+                source: 'imported-evidence',
+                label: input.evidencePathParts?.join('/') ?? 'governance evidence',
+                text: canonicalJson(input.evidenceRecord)
+            }]);
+        if (scan.status === 'compromised') {
+            throw new Error(`Governance evidence contains credential-shaped content: ${scan.leaks.map((leak) => leak.pattern).join(', ')}.`);
+        }
+    }
+    const statePrecondition = await assertLoadedStateHash(input.projectRoot, input.plan.stateHash);
+    const stateContent = `${canonicalJson(validateUserActivationState(input.nextState))}\n`;
+    const mutations = [
+        ...(input.fileMutations ?? []).map((mutation) => ({
+            ...mutation,
+            pathParts: validateArtifactPathParts([...mutation.pathParts], 'Governance transition file mutation path')
+        })),
+        ...(input.evidenceRecord && input.evidencePathParts ? [{
+                type: 'write',
+                pathParts: [...input.evidencePathParts],
+                content: `${canonicalJson(input.evidenceRecord)}\n`
+            }] : []),
+        { type: 'write', pathParts: activationStatePathParts(), content: stateContent }
+    ];
+    if (input.evidencePathParts) {
+        const existing = await readProjectFile(input.projectRoot, [...input.evidencePathParts]);
+        if (existing !== undefined)
+            throw new Error(`Refusing to overwrite existing governance evidence ${input.evidencePathParts.join('/')}.`);
+    }
+    await applyProjectFileTransaction(input.projectRoot, mutations, {
+        preconditions: [statePrecondition, ...(input.filePreconditions ?? []),
+            ...(input.evidencePathParts ? [{ pathParts: [...input.evidencePathParts] }] : [])]
+    });
+    return {
+        stateHash: activationStateContentHash(stateContent),
+        evidence: input.evidenceRecord && input.evidencePathParts ? {
+            evidenceId: input.evidenceRecord.evidenceId,
+            pathParts: input.evidencePathParts,
+            headerDigest: evidenceHeaderDigest(input.evidenceRecord.header),
+            result: input.evidenceRecord.header.result
+        } : null
+    };
+}
+export function readbackProof(input, provider, resourceType, resourceId, observed) {
+    const context = input.inspection.contexts[input.phase.id];
+    const digest = canonicalSha256(observed);
+    return {
+        schemaVersion: context.identity.evidenceHeaderSchemaVersion, repositoryId: context.repositoryId,
+        identity: context.identity, phaseGraphHash: context.phaseGraphHash, phaseId: input.phase.id,
+        baselineSha: context.baselineSha, inputDigest: context.inputDigest, transition: context.transition,
+        observedAt: input.now.toISOString(), provider, resourceType, resourceId,
+        sourceDigest: digest, readbackDigest: digest, matches: true
+    };
+}
+//# sourceMappingURL=transition-records.js.map

package/dist/governance-activation/transition-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transition-records.js","sourceRoot":"","sources":["../../src/governance-activation/transition-records.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACnG,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjJ,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAA4B,0BAA0B,EAClF,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAU,CAAC;AACjF,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAE9D,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,OAAO,yBAAyB,CAAC;QAC/B,GAAG,gCAAgC;QACnC,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;KACxF,EAAE,iCAAiC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,yBAAyB,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,UAAU,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,yBAAyB,CAAC,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAAE,uBAAuB,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0B;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAwB,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAA0C,EAAE,GAAS;IACnG,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;IAC9C,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACpC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,MAAM,2BAA2B,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACzD,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,IAAI;SAC5F,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,SAA4B;IACxF,OAAO,SAAS,CAAC;QACf,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,2BAA2B;QACrC,aAAa,EAAE,gBAAgB;QAC/B,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,MAAM,EAAE,EAAE,SAAS,EAAE;QACrB,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;QAC/E,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACvD,OAAO,SAAS,CAAC;QACf,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,mCAAmC;QAC7C,aAAa,EAAE,wBAAwB;QACvC,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,MAAM,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE;QACjD,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,kCAAkC,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,CAAC;QAC1H,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC;YAClC,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,4BAA4B;YACnC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1I,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,IAAyB;IAIrF,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACpD,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,6DAA6D,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC;IAChD,MAAM,2BAA2B,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QACtF,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAQjC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,sBAAsB,CAAC;QAC5B,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B;QAC1E,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;QAClD,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ;QACzC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc;QAC9D,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QACvB,mBAAmB,EAAE,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC;YAClH,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;SAC/E,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB,EAAE,KAAoB;IACnE,OAAO,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KASnC;IACC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,gCAAgC,EAAE,CAAC;QAC5H,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC5C,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAC5B,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QAClC,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ;QAC7I,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9F,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;KAC/C,CAAC;IACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAM5B;IACC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;QAC5B,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QAClC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ;QAC9C,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9F,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KAC1B,CAAC;IACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,WAAmB,EAAE,YAA2B;IACnF,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzG,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uDAAuD,YAAY,IAAI,QAAQ,WAAW,WAAW,IAAI,QAAQ,GAAG,CAAC,CAAC;IACxI,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAQ7C;IACC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC;gBAClC,MAAM,EAAE,mBAAmB;gBAC3B,KAAK,EAAE,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB;gBAClE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;aAC1C,CAAC,CAAC,CAAC;QACJ,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,GAAG,aAAa,CAAC,2BAA2B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;IACxF,MAAM,SAAS,GAA0B;QACvC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,QAAQ;YACX,SAAS,EAAE,yBAAyB,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,0CAA0C,CAAC;SAC1G,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,EAAE,OAAgB;gBACtB,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;gBACvC,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI;aACpD,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACR,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;KAChF,CAAC;IACF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxF,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1I,CAAC;IACD,MAAM,2BAA2B,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE;QAC9D,aAAa,EAAE,CAAC,iBAAiB,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACrF,CAAC,CAAC;IACH,OAAO;QACL,SAAS,EAAE,0BAA0B,CAAC,YAAY,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1D,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU;YAC3C,SAAS,EAAE,KAAK,CAAC,iBAAiB;YAClC,YAAY,EAAE,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;YAC/D,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM;SAC3C,CAAC,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAiC,EACjC,QAAuC,EACvC,YAAoB,EACpB,UAAkB,EAClB,QAAiB;IAEjB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,2BAA2B,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;QAC/F,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QAC3F,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;QAClG,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU;QACvE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI;KAC5D,CAAC;AACJ,CAAC"}

package/dist/governance-activation/transitions.d.ts

@@ -1,172 +1,19 @@
-import type { CommandRunner } from '../process-runner.js';
-import type { LiftoffManifest } from '../types.js';
-import { type ProjectFileMutation } from '../file-system.js';
-import { type EvidenceFreshnessContext } from './evidence.js';
-import { type GovernanceSourceOfTruthInspection } from './source-of-truth.js';
-import type { ApprovalEnvelope, EvidenceHeader, LiveReadbackProof, ManagedPhaseGraph, MutationClass, PhaseEvidenceRecord, PhaseGraphNode, PhaseId, SavedTransitionPlan, TransitionOperation, TransitionRollbackPlan, UserActivationState } from './types.js';
-import { type LoadedActivationState } from './activation-state.js';
-export declare const governancePlanDirectoryPathParts: readonly ['governance', 'plans'];
-export interface GovernanceTransitionInspection {
-    projectRoot: string;
-    manifest: LiftoffManifest;
-    graph: ManagedPhaseGraph;
-    graphHash: string;
-    loadedState?: LoadedActivationState;
-    state: UserActivationState;
-    approvals: readonly ApprovalEnvelope[];
-    evidence: readonly PhaseEvidenceRecord[];
-    contexts: Record<PhaseId, EvidenceFreshnessContext>;
-    readiness: {
-        nextReadyPhase: PhaseId | null;
-        phases: Record<PhaseId, {
-            state: string;
-            blockers: readonly string[];
-        }>;
-    };
-    sourceOfTruth: GovernanceSourceOfTruthInspection;
-}
-export interface GitRepositoryInspection {
-    insideWorkTree: boolean;
-    root: string | null;
-    branch: string | null;
-    head: string | null;
-    upstream: string | null;
-    status: readonly GitStatusEntry[];
-    remotes: readonly GitRemote[];
-    issues: readonly string[];
-}
-export interface GitStatusEntry {
-    index: string;
-    worktree: string;
-    path: string;
-}
-export interface GitRemote {
-    name: string;
-    url: string;
-}
-export interface Phase0DiscoveryFacts {
-    repositoryId: string;
-    repositoryName: string;
-    defaultBranch: string;
-    baselineDigest: string;
-    privateStagingDast: boolean;
-    credentialRequired: boolean;
-    statePath: UserActivationState['applicability']['statePath'];
-    approvedFacts: readonly {
-        id: string;
-        value: string | number | boolean | null;
-    }[];
-}
-export interface GitHubRulesetWriteResult {
-    resourceId: string;
-    sourceDigest: string;
-    readbackDigest: string;
-}
-export interface GitHubRulesetAdapter {
-    applyRuleset(input: {
-        repository: string;
-        sourceDigest: string;
-        approvalEnvelopeId: string;
-    }): Promise<GitHubRulesetWriteResult>;
-    readRuleset(input: {
-        repository: string;
-        sourceDigest: string;
-    }): Promise<GitHubRulesetWriteResult>;
-}
-export interface PhaseAdapterOutcome {
-    status: 'completed' | 'blocked';
-    resultState?: EvidenceHeader['result'] | 'approved';
-    blocker?: string;
-    evidencePayload?: unknown;
-    liveReadback?: readonly LiveReadbackProof[];
-    stateOverride?: UserActivationState;
-    fileMutations?: readonly ProjectFileMutation[];
-    completedOperations?: readonly TransitionOperation[];
-    cleanupWarnings?: readonly string[];
-    retryableWithoutStateMutation?: boolean;
-}
-export interface GovernancePhaseAdapter {
-    phaseId: PhaseId;
-    execute(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome>;
-}
-export interface PhaseAdapterExecutionInput {
-    inspection: GovernanceTransitionInspection;
-    plan: SavedTransitionPlan;
-    phase: PhaseGraphNode;
-    runner: CommandRunner;
-    adapters: GovernanceTransitionAdapters;
-    now: Date;
-}
-export interface GovernanceTransitionAdapters {
-    phases?: Partial<Record<PhaseId, GovernancePhaseAdapter>>;
-    githubRulesets?: GitHubRulesetAdapter;
-}
-export interface ApplyNextPreview {
-    schemaVersion: 1;
-    command: 'governance apply-next';
-    projectRoot: string;
-    execute: boolean;
-    applied: false;
-    authorized: boolean;
-    reason: string;
-    message: string;
-    selectedPhase: PhaseId | null;
-    nextReadyPhase: PhaseId | null;
-    approval: SavedTransitionPlan['approval'] | null;
-    proposedMutations: {
-        local: readonly MutationClass[];
-        remote: readonly MutationClass[];
-        operations: readonly TransitionOperation[];
-    };
-    savedPlan: null | {
-        pathParts: readonly string[];
-        digest: string;
-    };
-    noWrites: boolean;
-    blockers: readonly string[];
-}
-export interface ApplyNextExecutionResult extends Omit<ApplyNextPreview, 'applied' | 'savedPlan' | 'noWrites'> {
-    applied: boolean;
-    executedPhase: PhaseId | null;
-    savedPlan: {
-        pathParts: readonly string[];
-        digest: string;
-    } | null;
-    noWrites: false;
-    executedOperations: readonly TransitionOperation[];
-    evidence: {
-        evidenceId: string;
-        pathParts: readonly string[];
-        headerDigest: string;
-        result: EvidenceHeader['result'];
-    } | null;
-    stateHash: string | null;
-    rollbackPlan: TransitionRollbackPlan;
-    cleanupWarnings: readonly string[];
-}
-export declare function transitionPlanPathParts(plan: SavedTransitionPlan): string[];
-export declare function rollbackPlanFromCompletedOperations(phaseId: PhaseId, strategy: TransitionRollbackPlan['strategy'], target: PhaseId | null, completed: readonly TransitionOperation[]): TransitionRollbackPlan;
-export declare function planDigestFor(input: {
-    phase: PhaseGraphNode;
-    transitionDigest: string;
-    operations: readonly TransitionOperation[];
-    approvalPlanDigest: string;
-}): string;
-export declare function buildSavedTransitionPlan(input: {
-    inspection: GovernanceTransitionInspection;
-    runner?: CommandRunner;
-    now?: Date;
-}): Promise<SavedTransitionPlan | null>;
-export declare function previewApplyNext(input: {
-    inspection: GovernanceTransitionInspection;
-    runner?: CommandRunner;
-    now?: Date;
-    execute: boolean;
-}): Promise<ApplyNextPreview>;
-export declare function executeApplyNext(input: {
+import type { GovernanceTransitionInspection, GovernanceTransitionAdapters, ApplyNextExecutionResult } from './transition-ports.js';
+import type { SavedTransitionPlan } from '../domain/governance/activation/types.js';
+import { type CommandRunner } from '../process-runner.js';
+export type * from './transition-ports.js';
+export { governancePlanDirectoryPathParts, transitionPlanPathParts } from './transition-records.js';
+export { buildSavedTransitionPlan, previewApplyNext } from './transition-planning.js';
+export { rollbackPlanFromCompletedOperations, planDigestFor } from '../domain/governance/activation/operations.js';
+export interface ApplyNextExecutionInput {
     inspection: GovernanceTransitionInspection;
     reinspect: () => Promise<GovernanceTransitionInspection>;
     runner?: CommandRunner;
     adapters?: GovernanceTransitionAdapters;
     now?: Date;
-}): Promise<ApplyNextExecutionResult>;
+    clock?: () => Date;
+    localRevalidation?: boolean;
+    assertReviewedPlan?: (plan: SavedTransitionPlan) => void | Promise<void>;
+    assertProtectedInputs?: () => void | Promise<void>;
+}
+export declare function executeApplyNext(input: ApplyNextExecutionInput): Promise<ApplyNextExecutionResult>;