@msn-control/liftoff 0.11.2 → 0.12.0

package/dist/governance-activation/historical-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-common.js","sourceRoot":"","sources":["../../src/governance-activation/historical-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,QAAQ,EAAE,MAAM,mDAAmD,CAAC;AAO9F,OAAO,EACe,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAC1F,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAC5F,cAAc,EAAE,gBAAgB,EACjC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAA0B,MAAM,oCAAoC,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU;CAC1G,CAAC;AACX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AACzG,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM,EAAE,eAAe,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,qBAAqB;IAC1F,2BAA2B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB;IACzF,sBAAsB,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc;IAC/E,qBAAqB,EAAE,YAAY,EAAE,yBAAyB,EAAE,yBAAyB;IACzF,oBAAoB,EAAE,0BAA0B,EAAE,sBAAsB;CAChE,CAAC;AACX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,MAAM,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,qBAAqB;IAC/F,aAAa,EAAE,sBAAsB,EAAE,kBAAkB;CACjD,CAAC;AACX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,yCAAyC,EAAE,uBAAuB;IAClE,qDAAqD,EAAE,mBAAmB;IAC1E,uBAAuB,EAAE,kBAAkB;CACnC,CAAC;AACX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AACtH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,CAAU,CAAC;AAClI,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM;IACtE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM;IACzF,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB;IACrF,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,qBAAqB;IACrF,uBAAuB,EAAE,MAAM,EAAE,iBAAiB,EAAE,qBAAqB;IACzE,cAAc,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM;IACtE,wBAAwB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM;IACvE,wBAAwB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM;IAChF,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM;IAChF,iBAAiB,EAAE,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa;IACnG,eAAe,EAAE,MAAM,EAAE,0BAA0B,EAAE,sBAAsB;CACnE,CAAC;AAkDX,MAAM,UAAU,OAAO,CAAC,KAAc,EAAE,KAAa;IACnD,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA6C;IAE7C,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,WAAW,CAAC,UAAU,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc,EAAE,KAAa;IAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7F,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QAClD,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC;QACnE,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC;QACvE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,KAAK,SAAS,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc,EAAE,KAAa;IAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,QAAQ,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,YAAY,EAAE,cAAc;QAC9F,yBAAyB,EAAE,wBAAwB;KACpD,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACnF,WAAW,CAAC,KAAK,EAAE,wDAAwD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC;QAAE,WAAW,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAClI,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,eAAe,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,KAAK,yBAAyB,CAAC;QACvG,0BAA0B,EAAE,aAAa,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,KAAK,6BAA6B,CAAC;QACjH,UAAU,EAAE,YAAY;QACxB,uBAAuB,EAAE,YAAY,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,KAAK,0BAA0B,CAAC;aACpG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,KAAK,0BAA0B,CAAC,CAAC;QAC9E,sBAAsB,EAAE,YAAY,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,KAAK,yBAAyB,CAAC;aACjG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,eAAe,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,KAAK,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrJ,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc,EAAE,KAAa;IAC5E,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,CAAC;IACvG,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QAClD,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;QACpE,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;QACpE,gBAAgB,EAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC;KACpF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAAc,EAAE,KAAa;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,+BAA+B,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IAChG,CAAC;SAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;gBACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5I,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;;oBAC/G,gBAAgB,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;;gBAAM,+BAA+B,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAI,MAAW,EAAE,GAAyB,EAAE,KAAa;IACnF,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,WAAW,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAC7G,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAa;IAC1D,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,KAAK,GAAG,4BAA4B,CAAC;IAC3C,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW;QAClG,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU;KAC5H,EAAE,KAAK,CAAC,CAAC;IACV,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACtF,IAAI,QAAQ,KAAK,oBAAoB,CAAC,EAAE,CAAC;QAAE,WAAW,CAAC,KAAK,EAAE,oDAAoD,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC5H,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACxF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,KAAK,cAAc,KAAK,GAAG,CAAC,CAAC;QAC3F,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,KAAK,cAAc,KAAK,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,KAAK,cAAc,KAAK,YAAY,CAAC,EAAE,CAAC;IACxL,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjG,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,EAAE,GAAG,KAAK,iBAAiB,KAAK,GAAG,CAAC,CAAC;QACjI,OAAO;YACL,IAAI,EAAE,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,iBAAiB,KAAK,QAAQ,CAAC;YAC7F,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,iBAAiB,KAAK,YAAY,CAAC;YACzF,UAAU,EAAE,cAAc,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,KAAK,iBAAiB,KAAK,cAAc,CAAC;YAChG,cAAc,EAAE,cAAc,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,KAAK,kBAAkB,CAAC;SAC7G,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ;QAClE,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;QACpE,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC;QACjE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,YAAY,CAAC;QACtG,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,eAAe,CAAC;QAC/G,WAAW,EAAE,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,cAAc,CAAC;QACjK,WAAW,EAAE;YACX,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,uBAAuB,CAAC;YACvE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1E,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;SAC3E;QACD,gBAAgB,EAAE,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,mBAAmB,CAAC;QACjJ,gBAAgB,EAAE,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,mBAAmB,CAAC;QACjJ,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC;QACjE,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC;QACpE,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,KAAa;IAChE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;IACpH,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,OAAO,CAAC;QAC/D,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAc,EAAE,KAAa,EAC7B,eAAe,GAAoD,yBAAyB;IAE5F,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/I,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC7D,+BAA+B,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC3D,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,UAAU,CAAC;QAClE,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC;QAC3D,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK,gBAAgB,CAAC;QACzF,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,MAAM;QAC1D,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;QAC3E,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;KAC9H,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB;KACjI,EAAE,KAAK,CAAC,CAAC;IACV,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QAClD,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,WAAW,CAAC;QAC9E,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,EAAE,GAAG,KAAK,eAAe,CAAC;QAClI,gBAAgB,EAAE,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC;QACpF,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,SAAS,CAAC;QAC9H,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC;QACrG,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,CAAC;QAC3G,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,gBAAgB,EAAE,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC;KAChJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAc,EAAE,KAAa,EAC7B,eAAe,GAAoD,yBAAyB;IAE5F,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACxH,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QAClD,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,WAAW,CAAC;QACtG,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;QAC7E,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,eAAe,KAAK,GAAG,EAAE,eAAe,CAAC,CAAC;QAC1J,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,KAAK,kBAAkB,CAAC;KAChJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EAAE,cAAyC;IAEzD,MAAM,KAAK,GAAG,0BAA0B,CAAC;IACzC,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;QAC1F,gBAAgB,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY;QAClG,UAAU,EAAE,cAAc,EAAE,WAAW;KACxC,EAAE,KAAK,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACpE,MAAM,sBAAsB,GAAG,QAAQ,CAAC,yBAAyB,KAAK,CAAC;QACrE,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,GAAG,yBAAyB,EAAE,kBAAkB,CAAU,CAAC;IAC5F,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACtE,IAAI,SAAS,KAAK,QAAQ,CAAC,cAAc;QAAE,WAAW,CAAC,KAAK,EAAE,gDAAgD,CAAC,CAAC;IAChH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,eAAe,KAAK,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACzK,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC;QAAE,WAAW,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IACnH,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,GAAG,KAAK,kBAAkB,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACxI,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC9H,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpI,IAAI,QAAQ,KAAK,oBAAoB,CAAC,EAAE,CAAC,IAAI,QAAQ,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;QAC7E,kBAAkB,CAAC,OAAO,KAAK,EAAE,IAAI,kBAAkB,CAAC,QAAQ,KAAK,QAAQ;QAC7E,kBAAkB,CAAC,UAAU,KAAK,UAAU,IAAI,kBAAkB,CAAC,YAAY,KAAK,YAAY;QAChG,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,WAAW,CAAC,KAAK,EAAE,8DAA8D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,KAAK,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAClG,IAAI,QAAQ,CAAC,OAAO,KAAK,EAAE;QAAE,WAAW,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACjF,OAAO;QACL,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE;QAC3F,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC;QACjE,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,EAAE,QAAQ,EAAE,SAAS;QACtF,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC;QAC/F,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC;QAC7E,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC;QACpE,gBAAgB,EAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC;QACnF,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,aAAa,CAAC;QACjE,eAAe,EAAE;YACf,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;YACrK,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;SAC1K;QACD,UAAU;QACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE;QAC1F,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,YAAY,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/governance-activation/historical-credential-policy.d.ts

@@ -0,0 +1,3 @@
+/** Schema 1 was unchanged between v1 and v2; the wrappers still require their exact family. */
+export declare function validateHistoricalV2CredentialPolicy(value: unknown): void;
+export declare function validateHistoricalV1CredentialPolicy(value: unknown): void;

package/dist/governance-activation/historical-credential-policy.js

@@ -0,0 +1,91 @@
+import { canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
+import { historyArray, historyDigest, historyEnum, historyExact, historyFail, historyLiteral, historyPathParts, historyString, historyStrings, historyTimestamp, historicalV1Identity, historicalV2Identity } from './history-contracts.js';
+import { assertSafeHistoricalRecord } from './historical-safety.js';
+/** Schema 1 was unchanged between v1 and v2; the wrappers still require their exact family. */
+export function validateHistoricalV2CredentialPolicy(value) {
+    readHistoricalCredentialPolicy(value, historicalV2Identity, 'historicalV2CredentialPolicy');
+}
+export function validateHistoricalV1CredentialPolicy(value) {
+    readHistoricalCredentialPolicy(value, historicalV1Identity, 'historicalV1CredentialPolicy');
+}
+function readHistoricalCredentialPolicy(value, identityReader, label) {
+    assertSafeHistoricalRecord(value, label);
+    const item = historyExact(value, [
+        'schemaVersion', 'identity', 'repository', 'owner', 'authKind', 'displayNameTemplate', 'displayName',
+        'secretName', 'createdAt', 'expiresAt', 'rotationLeadDays', 'rotationDueAt', 'permissions', 'allowedWorkflows',
+        'nonForwarding', 'status', 'proof', 'app', 'pat'
+    ], label);
+    historyLiteral(item.schemaVersion, 1, `${label}.schemaVersion`);
+    identityReader(item.identity, `${label}.identity`);
+    const repository = historyExact(item.repository, ['id', 'owner', 'name', 'fullName'], `${label}.repository`);
+    for (const key of ['id', 'owner', 'name', 'fullName'])
+        historyString(repository[key], `${label}.repository.${key}`);
+    historyLiteral(repository.fullName, `${repository.owner}/${repository.name}`, `${label}.repository.fullName`);
+    historyLiteral(item.owner, historyString(repository.owner, label), `${label}.owner`);
+    historyLiteral(item.displayNameTemplate, '<repo>-runner-preflight-read', `${label}.displayNameTemplate`);
+    historyLiteral(item.displayName, `${historyString(repository.name, label).toLowerCase()}-runner-preflight-read`, `${label}.displayName`);
+    historyLiteral(item.secretName, 'RUNNER_CONFIGURATION_READ_TOKEN', `${label}.secretName`);
+    historyLiteral(item.nonForwarding, true, `${label}.nonForwarding`);
+    const createdAt = historyTimestamp(item.createdAt, `${label}.createdAt`);
+    const expiresAt = historyTimestamp(item.expiresAt, `${label}.expiresAt`);
+    historyLiteral(item.rotationLeadDays, 7, `${label}.rotationLeadDays`);
+    historyLiteral(item.rotationDueAt, new Date(Date.parse(expiresAt) - 7 * 86_400_000).toISOString(), `${label}.rotationDueAt`);
+    historyEnum(item.status, ['active', 'expiring', 'expired', 'compromised'], `${label}.status`);
+    const permissions = historyExact(item.permissions, ['repository', 'organization'], `${label}.permissions`);
+    for (const [key, expected] of [
+        ['repository', ['metadata:read']],
+        ['organization', ['hosted-runners:read', 'network-configurations:read']]
+    ]) {
+        const found = historyStrings(permissions[key], `${label}.permissions.${key}`);
+        if (canonicalSha256([...found].sort()) !== canonicalSha256([...expected].sort()))
+            historyFail(label, 'permissions differ from the published bounded policy.');
+    }
+    const paths = new Set();
+    for (const entry of historyArray(item.allowedWorkflows, `${label}.allowedWorkflows`)) {
+        const workflow = historyExact(entry, ['path', 'jobs'], `${label}.allowedWorkflows`);
+        const name = historyString(workflow.path, `${label}.allowedWorkflows.path`);
+        const parts = historyPathParts(name.split('/'), `${label}.allowedWorkflows.path`);
+        if (parts.length !== 3 || parts[0] !== '.github' || parts[1] !== 'workflows' || paths.has(name.toLowerCase())) {
+            historyFail(label, 'requires unique portable GitHub workflow identities.');
+        }
+        paths.add(name.toLowerCase());
+        const jobs = historyStrings(workflow.jobs, `${label}.allowedWorkflows.jobs`);
+        if (!jobs.length || new Set(jobs).size !== jobs.length)
+            historyFail(label, 'requires nonempty unique workflow jobs.');
+    }
+    if (!paths.size)
+        historyFail(label, 'requires a nonempty workflow allowlist.');
+    const proof = historyExact(item.proof, ['verifiedAt', 'readbackDigest', 'readbackProvider', 'payloadFree'], `${label}.proof`);
+    historyTimestamp(proof.verifiedAt, `${label}.proof.verifiedAt`);
+    historyDigest(proof.readbackDigest, `${label}.proof.readbackDigest`);
+    historyEnum(proof.readbackProvider, ['github-api', 'adapter-fixture'], `${label}.proof.readbackProvider`);
+    historyLiteral(proof.payloadFree, true, `${label}.proof.payloadFree`);
+    const authKind = historyEnum(item.authKind, ['github-app', 'fine-grained-pat'], `${label}.authKind`);
+    if (authKind === 'github-app') {
+        if (item.pat !== null)
+            historyFail(`${label}.pat`, 'App policy cannot contain PAT metadata.');
+        const app = historyExact(item.app, ['installationId', 'appSlug', 'selection', 'repositoryFullName', 'permissionsVerifiedAt', 'token'], `${label}.app`);
+        if (typeof app.installationId !== 'number' || !Number.isSafeInteger(app.installationId) || app.installationId <= 0)
+            historyFail(label, 'requires a positive App installation ID.');
+        historyString(app.appSlug, `${label}.app.appSlug`);
+        historyLiteral(app.selection, 'selected-repository', `${label}.app.selection`);
+        historyLiteral(app.repositoryFullName, historyString(repository.fullName, label), `${label}.app.repositoryFullName`);
+        historyTimestamp(app.permissionsVerifiedAt, `${label}.app.permissionsVerifiedAt`);
+        const token = historyExact(app.token, ['strategy', 'ttlSeconds', 'generatedBy'], `${label}.app.token`);
+        historyLiteral(token.strategy, 'installation-token', `${label}.app.token.strategy`);
+        historyLiteral(token.generatedBy, 'github-app', `${label}.app.token.generatedBy`);
+        if (typeof token.ttlSeconds !== 'number' || !Number.isSafeInteger(token.ttlSeconds) || token.ttlSeconds <= 0 || token.ttlSeconds > 3600)
+            historyFail(label, 'requires the bounded installation-token lifetime.');
+    }
+    else {
+        if (item.app !== null)
+            historyFail(`${label}.app`, 'PAT policy cannot contain App metadata.');
+        const pat = historyExact(item.pat, ['lifetimeDays', 'selectedRepositoryOnly', 'createdBy'], `${label}.pat`);
+        historyLiteral(pat.lifetimeDays, 30, `${label}.pat.lifetimeDays`);
+        historyLiteral(pat.selectedRepositoryOnly, true, `${label}.pat.selectedRepositoryOnly`);
+        historyLiteral(pat.createdBy, 'manual-masked-entry', `${label}.pat.createdBy`);
+        if (Date.parse(expiresAt) - Date.parse(createdAt) !== 30 * 86_400_000)
+            historyFail(label, 'requires the original 30-day PAT lifetime.');
+    }
+}
+//# sourceMappingURL=historical-credential-policy.js.map

package/dist/governance-activation/historical-credential-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-credential-policy.js","sourceRoot":"","sources":["../../src/governance-activation/historical-credential-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACpF,OAAO,EACL,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EACnF,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,EAE9G,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,+FAA+F;AAC/F,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,8BAA8B,CAAC,KAAK,EAAE,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,8BAA8B,CAAC,KAAK,EAAE,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAc,EAAE,cAAyC,EAAE,KAAa;IAC9G,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,aAAa;QACpG,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB;QAC9G,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;KACjD,EAAE,KAAK,CAAC,CAAC;IACV,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAChE,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC7G,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QAAE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,eAAe,GAAG,EAAE,CAAC,CAAC;IACpH,cAAc,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC9G,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACrF,cAAc,CAAC,IAAI,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,GAAG,KAAK,sBAAsB,CAAC,CAAC;IACzG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IACzI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,iCAAiC,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC1F,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;IACzE,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACtE,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAC7H,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC9F,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IAC3G,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI;QAC5B,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,CAAC;QACjC,CAAC,cAAc,EAAE,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;KAChE,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,eAAe,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,eAAe,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,uDAAuD,CAAC,CAAC;IAChK,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,EAAE,CAAC;QACrF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9G,WAAW,CAAC,KAAK,EAAE,sDAAsD,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;YAAE,WAAW,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,WAAW,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC9H,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChE,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACrE,WAAW,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;IAC1G,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC;IACrG,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI;YAAE,WAAW,CAAC,GAAG,KAAK,MAAM,EAAE,yCAAyC,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;QACvJ,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,cAAc,IAAI,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;QACnL,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;QACnD,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC/E,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACrH,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,KAAK,4BAA4B,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC;QACvG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;QACpF,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;QAClF,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI;YAAE,WAAW,CAAC,KAAK,EAAE,mDAAmD,CAAC,CAAC;IACnN,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI;YAAE,WAAW,CAAC,GAAG,KAAK,MAAM,EAAE,yCAAyC,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,WAAW,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;QAC5G,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;QAClE,cAAc,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,GAAG,KAAK,6BAA6B,CAAC,CAAC;QACxF,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,UAAU;YAAE,WAAW,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAC1I,CAAC;AACH,CAAC"}

package/dist/governance-activation/historical-inputs.d.ts

@@ -0,0 +1,6 @@
+import { type RetainedProjectInput } from '../application/update/protected-source.js';
+import type { ActivationHistoryMigrationPlan } from './migration-history.js';
+export declare function migrationSensitivePathExclusions(plan: ActivationHistoryMigrationPlan): readonly (readonly string[])[];
+export declare function isMigrationPublicInputPath(parts: readonly string[], sensitivePathParts?: readonly (readonly string[])[]): boolean;
+/** Metadata migration never hashes protected state/key contents, even to form a preview binding. */
+export declare function captureMigrationRetainedProjectInputs(projectRoot: string, sensitivePathParts?: readonly (readonly string[])[]): Promise<RetainedProjectInput[]>;

package/dist/governance-activation/historical-inputs.js

@@ -0,0 +1,57 @@
+import { createHash } from 'node:crypto';
+import { lstat, readdir, readFile } from 'node:fs/promises';
+import { isRetainedProjectInput } from '../application/update/protected-source.js';
+import { resolveProjectPath } from '../adapters/filesystem/project-paths.js';
+import { historyCaseKey, historyPathParts } from './history-contracts.js';
+const sensitiveFileName = /(?:^\.env(?:\.|$)(?!example$|sample$)|\.tfstate(?:\.|$)|\.tfplan(?:\.|$)|\.pem$|\.key$|\.pfx$|\.p12$|\.enc$|\.age$|\.gpg$|^\.npmrc$|^terraform\.rc$|^credentials(?:\.|$)|^local\.settings\.json$)/iu;
+const privateDirectories = new Set(['.git', '.terraform', 'node_modules', '.venv', 'venv', '.azure', '.aws', '.ssh', '.gnupg']);
+export function migrationSensitivePathExclusions(plan) {
+    const obligations = plan.status === 'eligible'
+        ? plan.semanticPlan.lifecycleObligations
+        : plan.status === 'current' && plan.history.status === 'committed' ? plan.history.lifecycleObligations : [];
+    return obligations.flatMap((obligation) => [
+        ...obligation.retention.encryptedStatePathParts, ...obligation.retention.encryptionKeyPathParts
+    ]).map((parts) => historyPathParts(parts, 'historical protected material reference'));
+}
+export function isMigrationPublicInputPath(parts, sensitivePathParts = []) {
+    const publicCredentialMetadata = (index) => parts[index] === 'credentials' &&
+        (index === 1 && parts[0] === 'governance' ||
+            index === 5 && parts[0] === 'governance' && parts[1] === 'history' &&
+                /^[a-f0-9]{64}$/u.test(parts[2]) && parts[3] === 'files' && parts[4] === 'governance') &&
+        (parts.length === index + 1 || parts.length === index + 2 && parts[index + 1] === 'preflight-policy.json');
+    if (!isRetainedProjectInput(parts) || parts.some((part) => privateDirectories.has(part.toLowerCase())) ||
+        parts.some((part, index) => sensitiveFileName.test(part) && !publicCredentialMetadata(index)))
+        return false;
+    const key = historyCaseKey(parts);
+    return !sensitivePathParts.some((sensitive) => {
+        const excluded = historyCaseKey(sensitive);
+        return key === excluded || key.startsWith(`${excluded}/`);
+    });
+}
+/** Metadata migration never hashes protected state/key contents, even to form a preview binding. */
+export async function captureMigrationRetainedProjectInputs(projectRoot, sensitivePathParts = []) {
+    const exclusions = sensitivePathParts.map((parts) => historyPathParts(parts, 'protected input exclusion'));
+    const result = [];
+    async function visit(parts) {
+        const directory = parts.length ? await resolveProjectPath(projectRoot, parts) : projectRoot;
+        for (const entry of (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name, 'en'))) {
+            const child = [...parts, entry.name];
+            if (!isMigrationPublicInputPath(child, exclusions))
+                continue;
+            historyPathParts(child, 'migration public input path');
+            const absolute = await resolveProjectPath(projectRoot, child);
+            const details = await lstat(absolute);
+            if (entry.isDirectory() && details.isDirectory())
+                await visit(child);
+            else if (entry.isFile() && details.isFile() && !details.isSymbolicLink() && details.nlink === 1) {
+                result.push({ pathParts: child, digest: createHash('sha256').update(await readFile(absolute)).digest('hex'), mode: details.mode & 0o7777 });
+            }
+            else {
+                throw new Error(`Protected update source ${child.join('/')} must not be a link or special file.`);
+            }
+        }
+    }
+    await visit([]);
+    return result.sort((a, b) => a.pathParts.join('/').localeCompare(b.pathParts.join('/'), 'en'));
+}
+//# sourceMappingURL=historical-inputs.js.map

package/dist/governance-activation/historical-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-inputs.js","sourceRoot":"","sources":["../../src/governance-activation/historical-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACvB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1E,MAAM,iBAAiB,GAAG,qMAAqM,CAAC;AAChO,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhI,MAAM,UAAU,gCAAgC,CAC9C,IAAoC;IAEpC,MAAM,WAAW,GAA6C,IAAI,CAAC,MAAM,KAAK,UAAU;QACtF,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,oBAAoB;QACxC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;QACzC,GAAG,UAAU,CAAC,SAAS,CAAC,uBAAuB,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,sBAAsB;KAChG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAwB,EAAE,kBAAkB,GAAmC,EAAE;IAEjF,MAAM,wBAAwB,GAAG,CAAC,KAAa,EAAE,EAAE,CACjD,KAAK,CAAC,KAAK,CAAC,KAAK,aAAa;QAC9B,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;YACvC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;gBAChE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;QAC1F,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,uBAAuB,CAAC,CAAC;IAC7G,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,WAAmB,EAAE,kBAAkB,GAAmC,EAAE;IAE5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3G,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,UAAU,KAAK,CAAC,KAAe;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5F,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3H,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,UAAU,CAAC;gBAAE,SAAS;YAC7D,gBAAgB,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;iBAChE,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChG,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YAC9I,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/governance-activation/historical-safety.d.ts

@@ -0,0 +1,9 @@
+export declare class ActivationHistoryError extends Error {
+    readonly code: string;
+    readonly location: string;
+    constructor(code: string, location: string, detail: string);
+}
+export declare function historyFail(location: string, detail: string, code?: string): never;
+/** Reject rather than redact: redacted bytes cannot be called an immutable source snapshot. */
+export declare function assertSafeHistoricalRecord(value: unknown, label: string): void;
+export declare function assertSafeHistoricalBytes(content: Buffer, label: string): void;

package/dist/governance-activation/historical-safety.js

@@ -0,0 +1,102 @@
+import { stripVTControlCharacters } from 'node:util';
+import { isRecord } from '../domain/governance/activation/canonical-json.js';
+function historyDiagnosticText(text) {
+    const plain = stripVTControlCharacters(text).replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/gu, '');
+    return plain.length > 4096 ? `${plain.slice(0, 4080)} [truncated]` : plain;
+}
+export class ActivationHistoryError extends Error {
+    code;
+    location;
+    constructor(code, location, detail) {
+        super(`${historyDiagnosticText(location)}: ${historyDiagnosticText(detail)}`);
+        this.code = code;
+        this.location = location;
+        this.location = historyDiagnosticText(location);
+        this.name = 'ActivationHistoryError';
+    }
+}
+export function historyFail(location, detail, code = 'invalid-history-record') {
+    throw new ActivationHistoryError(code, location, detail);
+}
+const credentialText = [
+    /\bgh[oprsu]_[A-Za-z0-9_]{20,}\b/u,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/u,
+    /\bAccountKey=[^;\s]+/iu,
+    /-----BEGIN (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/u,
+    /\bBearer\s+[A-Za-z0-9_.~-]{16,}/iu,
+    /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/u,
+    /https?:\/\/[^\s/@:]+:[^\s/@]+@/iu,
+    /https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/]+/u,
+    /[?&]sig=[A-Za-z0-9%+/=]{16,}/iu
+];
+const sensitiveKeys = new Set([
+    'password', 'passwd', 'secret', 'secretvalue', 'credentialvalue', 'tokenvalue',
+    'accesstoken', 'refreshtoken', 'clientsecret', 'privatekey', 'encryptionkey',
+    'accountkey', 'connectionstring', 'rawstate', 'statepayload', 'terraformstate',
+    'tfstate', 'savedplan', 'planpayload', 'sensitiveplan'
+]);
+/** Reject rather than redact: redacted bytes cannot be called an immutable source snapshot. */
+export function assertSafeHistoricalRecord(value, label) {
+    let nodes = 0;
+    const fail = () => historyFail(label, 'historical preservation is blocked by prohibited sensitive content or an unsafe payload; source bytes were not copied or modified.', 'unsafe-historical-payload');
+    function visit(entry, depth) {
+        if (++nodes > 200_000 || depth > 64)
+            fail();
+        if (typeof entry === 'string') {
+            if (entry.length > 8 * 1024 * 1024 || credentialText.some((pattern) => pattern.test(entry)))
+                fail();
+            // Payloads serialized inside another JSON string are still payloads.
+            let parsedJson = false;
+            if (/^\s*[{[]/u.test(entry)) {
+                try {
+                    const parsed = JSON.parse(entry);
+                    visit(parsed, depth + 1);
+                    parsedJson = true;
+                }
+                catch (error) {
+                    if (!(error instanceof SyntaxError))
+                        throw error;
+                }
+            }
+            if (!parsedJson && (/"(?:terraform_version|planned_values|resource_changes|prior_state)"\s*:/u.test(entry) ||
+                /"serial"\s*:/u.test(entry) && /"lineage"\s*:/u.test(entry) && /"(?:resources|outputs)"\s*:/u.test(entry)))
+                fail();
+        }
+        else if (Array.isArray(entry)) {
+            entry.forEach((item) => visit(item, depth + 1));
+        }
+        else if (isRecord(entry)) {
+            if ((Object.hasOwn(entry, 'serial') && Object.hasOwn(entry, 'lineage') &&
+                (Object.hasOwn(entry, 'resources') || Object.hasOwn(entry, 'outputs'))) ||
+                Object.hasOwn(entry, 'terraform_version') && (Object.hasOwn(entry, 'values') || Object.hasOwn(entry, 'resources')) ||
+                Object.hasOwn(entry, 'planned_values') || Object.hasOwn(entry, 'resource_changes') ||
+                Object.hasOwn(entry, 'prior_state') || Object.hasOwn(entry, 'root_module'))
+                fail();
+            for (const [key, item] of Object.entries(entry)) {
+                const normalized = key.replace(/[-_]/gu, '').toLowerCase();
+                if ((sensitiveKeys.has(normalized) || normalized === 'token' && typeof item === 'string') &&
+                    item !== null && item !== false && item !== '')
+                    fail();
+                visit(key, depth + 1);
+                visit(item, depth + 1);
+            }
+        }
+    }
+    visit(value, 0);
+}
+export function assertSafeHistoricalBytes(content, label) {
+    if (content.length > 8 * 1024 * 1024) {
+        historyFail(label, 'historical record exceeds the bounded metadata preservation size.', 'unsafe-historical-payload');
+    }
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(content);
+    }
+    catch {
+        historyFail(label, 'historical metadata must be UTF-8 text; binary payloads were not copied.', 'unsafe-historical-payload');
+    }
+    if (text.includes('\u0000'))
+        historyFail(label, 'binary payloads are not historical control metadata.', 'unsafe-historical-payload');
+    assertSafeHistoricalRecord(text, label);
+}
+//# sourceMappingURL=historical-safety.js.map

package/dist/governance-activation/historical-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-safety.js","sourceRoot":"","sources":["../../src/governance-activation/historical-safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,mDAAmD,CAAC;AAE7E,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE7B,IAAI;IACJ,QAAQ;IAF1B,YACkB,IAAY,EACZ,QAAgB,EAChC,MAAc;QAEd,KAAK,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAJ9D,IAAI;wBACJ,QAAQ;QAIxB,IAAI,CAAC,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAI,GAAG,wBAAwB;IAC3F,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,kCAAkC;IAClC,mCAAmC;IACnC,wBAAwB;IACxB,+DAA+D;IAC/D,mCAAmC;IACnC,wDAAwD;IACxD,kCAAkC;IAClC,uDAAuD;IACvD,gCAAgC;CACjC,CAAC;AACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY;IAC9E,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe;IAC5E,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB;IAC9E,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe;CACvD,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,KAAa;IACtE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAClC,oIAAoI,EACpI,2BAA2B,CAAC,CAAC;IAC/B,SAAS,KAAK,CAAC,KAAc,EAAE,KAAa;QAC1C,IAAI,EAAE,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,EAAE,CAAC;YACpG,qEAAqE;YACrE,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1C,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBACzB,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACnD,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,CAAC,0EAA0E,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,EAAE,CAAC;QACvH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;gBACpE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;gBACvE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAClH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC;gBAClF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;gBAAE,IAAI,EAAE,CAAC;YACrF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,OAAO,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;oBACvF,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,EAAE;oBAAE,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACtB,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,KAAa;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACrC,WAAW,CAAC,KAAK,EAAE,mEAAmE,EAAE,2BAA2B,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,CAAC,KAAK,EAAE,0EAA0E,EAAE,2BAA2B,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,WAAW,CAAC,KAAK,EAAE,sDAAsD,EAAE,2BAA2B,CAAC,CAAC;IACrI,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC"}

package/dist/governance-activation/historical-source-metadata.d.ts

@@ -0,0 +1,31 @@
+import type { HistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
+import { type HistoricalPhaseId } from './historical-v1-phase-contracts.js';
+export interface HistoricalGovernanceChangeMetadata {
+    schemaVersion: 1;
+    marker: 'liftoff-governance-source-of-truth';
+    changeId: string;
+    workflowKind: 'openspec' | 'spec-kit';
+    activationIdentity: HistoricalActivationIdentity;
+    phaseGraphHash: string;
+    baselineSha: string;
+    phaseTaskMapping: readonly {
+        phaseId: HistoricalPhaseId;
+        taskId: string;
+        marker: string;
+        policy: 'evidence-projection-v1';
+    }[];
+    currentPolicy: {
+        phaseAuthority: 'managed-phase-graph';
+        taskCompletion: 'authoritative-evidence-projection';
+        approvalPolicy: 'approval-envelope-required-for-gated-phases';
+    };
+    createdFrom: {
+        kind: 'approved-phase-0-facts';
+        approvedFactDigest: string;
+        evidenceIds: string[];
+    };
+    acknowledgedAt: string;
+    owner: string;
+}
+/** The published schema-1 metadata used the same 26-phase mapping in both historical families. */
+export declare function validateHistoricalGovernanceChangeMetadata(value: unknown): HistoricalGovernanceChangeMetadata;

package/dist/governance-activation/historical-source-metadata.js

@@ -0,0 +1,55 @@
+import { historicalPhaseIds } from './historical-v1-phase-contracts.js';
+import { historicalIdentity, historyArray, historyDigest, historyEnum, historyExact, historyFail, historyLiteral, historyRecordId, historyString, historyStrings, historyTimestamp } from './history-contracts.js';
+import { assertSafeHistoricalRecord } from './historical-safety.js';
+/** The published schema-1 metadata used the same 26-phase mapping in both historical families. */
+export function validateHistoricalGovernanceChangeMetadata(value) {
+    const label = 'historicalGovernanceChange';
+    assertSafeHistoricalRecord(value, label);
+    const item = historyExact(value, [
+        'schemaVersion', 'marker', 'changeId', 'workflowKind', 'activationIdentity', 'phaseGraphHash',
+        'baselineSha', 'phaseTaskMapping', 'currentPolicy', 'createdFrom', 'acknowledgedAt', 'owner'
+    ], label);
+    const identity = historicalIdentity(item.activationIdentity, `${label}.activationIdentity`);
+    historyLiteral(item.phaseGraphHash, identity.phaseGraphHash, `${label}.phaseGraphHash`);
+    const phases = new Set();
+    const tasks = new Set();
+    const mappings = historyArray(item.phaseTaskMapping, `${label}.phaseTaskMapping`).map((entry) => {
+        const mapping = historyExact(entry, ['phaseId', 'taskId', 'marker', 'policy'], `${label}.phaseTaskMapping`);
+        const phaseId = historyEnum(mapping.phaseId, historicalPhaseIds, `${label}.phaseId`);
+        const taskId = historyString(mapping.taskId, `${label}.taskId`);
+        if (phases.has(phaseId) || tasks.has(taskId))
+            historyFail(label, 'contains duplicate phase or task mappings.');
+        phases.add(phaseId);
+        tasks.add(taskId);
+        return {
+            phaseId, taskId,
+            marker: historyLiteral(mapping.marker, `<!-- liftoff-phase: ${phaseId} -->`, `${label}.marker`),
+            policy: historyLiteral(mapping.policy, 'evidence-projection-v1', `${label}.policy`)
+        };
+    });
+    if (phases.size !== historicalPhaseIds.length)
+        historyFail(label, 'requires every published historical phase mapping.');
+    const policy = historyExact(item.currentPolicy, ['phaseAuthority', 'taskCompletion', 'approvalPolicy'], `${label}.currentPolicy`);
+    const created = historyExact(item.createdFrom, ['kind', 'approvedFactDigest', 'evidenceIds'], `${label}.createdFrom`);
+    return {
+        schemaVersion: historyLiteral(item.schemaVersion, 1, `${label}.schemaVersion`),
+        marker: historyLiteral(item.marker, 'liftoff-governance-source-of-truth', `${label}.marker`),
+        changeId: historyRecordId(item.changeId, `${label}.changeId`),
+        workflowKind: historyEnum(item.workflowKind, ['openspec', 'spec-kit'], `${label}.workflowKind`),
+        activationIdentity: identity, phaseGraphHash: identity.phaseGraphHash,
+        baselineSha: historyDigest(item.baselineSha, `${label}.baselineSha`), phaseTaskMapping: mappings,
+        currentPolicy: {
+            phaseAuthority: historyLiteral(policy.phaseAuthority, 'managed-phase-graph', `${label}.currentPolicy.phaseAuthority`),
+            taskCompletion: historyLiteral(policy.taskCompletion, 'authoritative-evidence-projection', `${label}.currentPolicy.taskCompletion`),
+            approvalPolicy: historyLiteral(policy.approvalPolicy, 'approval-envelope-required-for-gated-phases', `${label}.currentPolicy.approvalPolicy`)
+        },
+        createdFrom: {
+            kind: historyLiteral(created.kind, 'approved-phase-0-facts', `${label}.createdFrom.kind`),
+            approvedFactDigest: historyDigest(created.approvedFactDigest, `${label}.createdFrom.approvedFactDigest`),
+            evidenceIds: historyStrings(created.evidenceIds, `${label}.createdFrom.evidenceIds`).map((id) => historyRecordId(id, `${label}.evidenceId`))
+        },
+        acknowledgedAt: historyTimestamp(item.acknowledgedAt, `${label}.acknowledgedAt`),
+        owner: historyString(item.owner, `${label}.owner`)
+    };
+}
+//# sourceMappingURL=historical-source-metadata.js.map

package/dist/governance-activation/historical-source-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-source-metadata.js","sourceRoot":"","sources":["../../src/governance-activation/historical-source-metadata.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAA0B,MAAM,oCAAoC,CAAC;AAChG,OAAO,EACL,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EACvG,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EACjE,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAuBpE,kGAAkG;AAClG,MAAM,UAAU,0CAA0C,CAAC,KAAc;IACvE,MAAM,KAAK,GAAG,4BAA4B,CAAC;IAC3C,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,oBAAoB,EAAE,gBAAgB;QAC7F,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO;KAC7F,EAAE,KAAK,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5F,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9F,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;QAC/G,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,OAAO,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;YAC/F,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,GAAG,KAAK,SAAS,CAAC;SACpF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,MAAM;QAAE,WAAW,CAAC,KAAK,EAAE,oDAAoD,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,GAAG,KAAK,gBAAgB,CAAC,CAAC;IAClI,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,aAAa,CAAC,EAAE,GAAG,KAAK,cAAc,CAAC,CAAC;IACtH,OAAO;QACL,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,gBAAgB,CAAC;QAC9E,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,oCAAoC,EAAE,GAAG,KAAK,SAAS,CAAC;QAC5F,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,WAAW,CAAC;QAC7D,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,GAAG,KAAK,eAAe,CAAC;QAC/F,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc;QACrE,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,CAAC,EAAE,gBAAgB,EAAE,QAAQ;QAChG,aAAa,EAAE;YACb,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,qBAAqB,EAAE,GAAG,KAAK,+BAA+B,CAAC;YACrH,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,mCAAmC,EAAE,GAAG,KAAK,+BAA+B,CAAC;YACnI,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,6CAA6C,EAAE,GAAG,KAAK,+BAA+B,CAAC;SAC9I;QACD,WAAW,EAAE;YACX,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,EAAE,GAAG,KAAK,mBAAmB,CAAC;YACzF,kBAAkB,EAAE,aAAa,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,KAAK,iCAAiC,CAAC;YACxG,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;SAC7I;QACD,cAAc,EAAE,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,iBAAiB,CAAC;QAChF,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/governance-activation/historical-state.d.ts

@@ -1,54 +1,10 @@
-import type { ApprovalEnvelope, BootstrapStateRetention, EvidenceHeader, LiveReadbackProof, PhaseExecutionState, SavedTransitionPlan } from '../domain/governance/activation/types.js';
-import type { HistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
 import type { ProjectFileSnapshot } from '../adapters/filesystem/project-transaction.js';
 import type { LiftoffManifest } from '../domain/project/contracts.js';
-import { type HistoricalFileKind } from './history-contracts.js';
-export declare const historicalPhaseIds: readonly ['seed-valid', 'seed-verified', 'seed-archived', 'committed', 'pushed', 'phase-0-complete', 'activation-approved', 'credential-ready', 'provider-ready', 'state-path-selected', 'existing-private-path', 'bootstrap-local', 'runner-ready', 'private-backend-proof', 'remote-import-verified', 'remote-ready', 'application-foundation', 'workflow-source-ready', 'dev-proof', 'staging-qualified', 'production-rehearsed', 'green-red-proof', 'enforcement-approved', 'rulesets-applied', 'live-readback', 'bootstrap-state-disposed'];
-export type HistoricalPhaseId = typeof historicalPhaseIds[number];
-export interface HistoricalActivationState {
-    schemaVersion: 1;
-    identity: HistoricalActivationIdentity;
-    repository: {
-        id: string;
-        name: string;
-        defaultBranch: string;
-    };
-    activeChange: {
-        id: string;
-        kind: 'openspec' | 'spec-kit';
-    } | null;
-    applicability: {
-        statePath: 'existing-private' | 'bootstrap-local' | 'none';
-        privateStagingDast: boolean;
-        credentialRequired: boolean;
-    };
-    bootstrapState?: BootstrapStateRetention;
-    phases: Record<HistoricalPhaseId, PhaseExecutionState>;
-    createdAt: string;
-    updatedAt: string;
-}
-export type HistoricalEvidenceHeader = Omit<EvidenceHeader, 'schemaVersion' | 'identity' | 'bodyDigest' | 'remoteBindingDigest'> & {
-    schemaVersion: 1;
-    identity: HistoricalActivationIdentity;
-};
-export type HistoricalLiveReadbackProof = Omit<LiveReadbackProof, 'schemaVersion' | 'identity'> & {
-    schemaVersion: 1;
-    identity: HistoricalActivationIdentity;
-};
-export interface HistoricalEvidenceRecord {
-    evidenceId: string;
-    header: HistoricalEvidenceHeader;
-    payload?: unknown;
-    liveReadback?: HistoricalLiveReadbackProof[];
-}
-export type HistoricalApprovalEnvelope = Omit<ApprovalEnvelope, 'schemaVersion' | 'identity'> & {
-    schemaVersion: 1;
-    identity: HistoricalActivationIdentity;
-};
-export type HistoricalSavedTransitionPlan = Omit<SavedTransitionPlan, 'identity'> & {
-    identity: HistoricalActivationIdentity;
-};
-export declare function assertHistoricalPhasesComplete<T>(phases: Partial<Record<HistoricalPhaseId, T>>): asserts phases is Record<HistoricalPhaseId, T>;
+import { type HistoricalFileKind, type ActivationHistoryIndex, type HistoricalV2SourceMigrationJournal } from './history-contracts.js';
+import { type HistoricalGovernanceChangeMetadata } from './historical-source-metadata.js';
+import { type HistoricalV2ActivationState } from './historical-v2.js';
+export * from './historical-common.js';
+import { type HistoricalActivationState, type HistoricalEvidenceHeader, type HistoricalLiveReadbackProof, type HistoricalEvidenceRecord, type HistoricalApprovalEnvelope, type HistoricalSavedTransitionPlan } from './historical-common.js';
 export declare function validateHistoricalActivationState(value: unknown): HistoricalActivationState;
 export declare function validateHistoricalEvidenceHeader(value: unknown): HistoricalEvidenceHeader;
 export declare function validateHistoricalLiveReadback(value: unknown): HistoricalLiveReadbackProof;
@@ -64,9 +20,12 @@ export interface HistoricalSourceFile {
     digest: string;
     mode: number;
 }
+export type ReadableHistoricalActivationState = HistoricalActivationState | HistoricalV2ActivationState;
 export interface HistoricalActivationInventory {
     manifest: LiftoffManifest;
-    state: HistoricalActivationState;
+    state: ReadableHistoricalActivationState;
+    sourceMigration?: HistoricalV2SourceMigrationJournal;
+    sourceChangeMetadata?: HistoricalGovernanceChangeMetadata;
     files: HistoricalSourceFile[];
     unreviewedRecords: HistoricalSourceFile[];
     preconditions: ProjectFileSnapshot[];
@@ -78,4 +37,7 @@ export declare function resolveHistoryProjectPath(projectRoot: string, rawParts:
 export declare function captureHistoryFile(projectRoot: string, parts: readonly string[]): Promise<ProjectFileSnapshot>;
 export declare function validateHistoricalSourceManifest(value: unknown): LiftoffManifest;
 export declare function historicalActiveRecordPaths(projectRoot: string, directory: string): Promise<string[][]>;
+export declare function validateReadableHistoricalActivationState(value: unknown): ReadableHistoricalActivationState;
 export declare function readHistoricalActivationInventory(projectRoot: string, options?: HistoricalInventoryOptions): Promise<HistoricalActivationInventory>;
+/** Read only the exact stored copies in an index; never substitute current active files. */
+export declare function readHistoricalSnapshotInventory(projectRoot: string, index: ActivationHistoryIndex): Promise<HistoricalActivationInventory>;