@msn-control/liftoff 0.11.2 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/DEVELOPER.md +26 -24
- package/README.md +18 -18
- package/assets/governance/single-maintainer-gitflow/activation-v2-graph.json +1583 -0
- package/dist/adapters/credentials/github-enrollment.d.ts +51 -0
- package/dist/adapters/credentials/github-enrollment.js +226 -0
- package/dist/adapters/credentials/github-enrollment.js.map +1 -0
- package/dist/adapters/credentials/protected-input.d.ts +7 -0
- package/dist/adapters/credentials/protected-input.js +68 -0
- package/dist/adapters/credentials/protected-input.js.map +1 -0
- package/dist/adapters/filesystem/executables.d.ts +2 -0
- package/dist/adapters/filesystem/executables.js +70 -0
- package/dist/adapters/filesystem/executables.js.map +1 -0
- package/dist/adapters/filesystem/update-previews.d.ts +9 -0
- package/dist/adapters/filesystem/update-previews.js +45 -2
- package/dist/adapters/filesystem/update-previews.js.map +1 -1
- package/dist/adapters/filesystem/workstation-attempts.d.ts +13 -0
- package/dist/adapters/filesystem/workstation-attempts.js +78 -0
- package/dist/adapters/filesystem/workstation-attempts.js.map +1 -0
- package/dist/adapters/github/activation-rest.d.ts +40 -0
- package/dist/adapters/github/activation-rest.js +272 -0
- package/dist/adapters/github/activation-rest.js.map +1 -0
- package/dist/adapters/process/shell-command.d.ts +1 -0
- package/dist/adapters/process/shell-command.js +5 -2
- package/dist/adapters/process/shell-command.js.map +1 -1
- package/dist/adapters/state/azure-blob.d.ts +43 -0
- package/dist/adapters/state/azure-blob.js +335 -0
- package/dist/adapters/state/azure-blob.js.map +1 -0
- package/dist/adapters/state/darwin-capabilities.d.ts +33 -0
- package/dist/adapters/state/darwin-capabilities.js +146 -0
- package/dist/adapters/state/darwin-capabilities.js.map +1 -0
- package/dist/adapters/state/darwin-native-host.d.ts +32 -0
- package/dist/adapters/state/darwin-native-host.js +294 -0
- package/dist/adapters/state/darwin-native-host.js.map +1 -0
- package/dist/adapters/state/darwin-profile.d.ts +6 -0
- package/dist/adapters/state/darwin-profile.js +56 -0
- package/dist/adapters/state/darwin-profile.js.map +1 -0
- package/dist/adapters/state/darwin-system-program.d.ts +1 -0
- package/dist/adapters/state/darwin-system-program.js +94 -0
- package/dist/adapters/state/darwin-system-program.js.map +1 -0
- package/dist/adapters/state/local-qualification.d.ts +16 -0
- package/dist/adapters/state/local-qualification.js +299 -0
- package/dist/adapters/state/local-qualification.js.map +1 -0
- package/dist/adapters/state/local.d.ts +25 -0
- package/dist/adapters/state/local.js +145 -0
- package/dist/adapters/state/local.js.map +1 -0
- package/dist/adapters/state/native-command.d.ts +21 -0
- package/dist/adapters/state/native-command.js +82 -0
- package/dist/adapters/state/native-command.js.map +1 -0
- package/dist/adapters/state/native-files.d.ts +2 -0
- package/dist/adapters/state/native-files.js +47 -0
- package/dist/adapters/state/native-files.js.map +1 -0
- package/dist/adapters/state/native-system.d.ts +38 -0
- package/dist/adapters/state/native-system.js +86 -0
- package/dist/adapters/state/native-system.js.map +1 -0
- package/dist/adapters/state/opentofu.d.ts +35 -0
- package/dist/adapters/state/opentofu.js +350 -0
- package/dist/adapters/state/opentofu.js.map +1 -0
- package/dist/adapters/state/owned-process.d.ts +43 -0
- package/dist/adapters/state/owned-process.js +252 -0
- package/dist/adapters/state/owned-process.js.map +1 -0
- package/dist/adapters/state/posix-lock-program.d.ts +1 -0
- package/dist/adapters/state/posix-lock-program.js +185 -0
- package/dist/adapters/state/posix-lock-program.js.map +1 -0
- package/dist/adapters/state/posix-native-lock.d.ts +15 -0
- package/dist/adapters/state/posix-native-lock.js +145 -0
- package/dist/adapters/state/posix-native-lock.js.map +1 -0
- package/dist/adapters/state/protected-workspace.d.ts +57 -0
- package/dist/adapters/state/protected-workspace.js +412 -0
- package/dist/adapters/state/protected-workspace.js.map +1 -0
- package/dist/application/context.d.ts +3 -0
- package/dist/application/diagnose/doctor.d.ts +5 -0
- package/dist/application/diagnose/doctor.js +21 -5
- package/dist/application/diagnose/doctor.js.map +1 -1
- package/dist/application/diagnose/generated-project.js +2 -7
- package/dist/application/diagnose/generated-project.js.map +1 -1
- package/dist/application/initialize/fixture.js +8 -1
- package/dist/application/initialize/fixture.js.map +1 -1
- package/dist/application/initialize/use-case.js +70 -36
- package/dist/application/initialize/use-case.js.map +1 -1
- package/dist/application/project/manifest.js +5 -4
- package/dist/application/project/manifest.js.map +1 -1
- package/dist/application/state-migration/execution.d.ts +32 -0
- package/dist/application/state-migration/execution.js +440 -0
- package/dist/application/state-migration/execution.js.map +1 -0
- package/dist/application/state-migration/index.d.ts +22 -0
- package/dist/application/state-migration/index.js +17 -0
- package/dist/application/state-migration/index.js.map +1 -0
- package/dist/application/state-migration/lifecycle.d.ts +3 -0
- package/dist/application/state-migration/lifecycle.js +149 -0
- package/dist/application/state-migration/lifecycle.js.map +1 -0
- package/dist/application/state-migration/planning.d.ts +7 -0
- package/dist/application/state-migration/planning.js +150 -0
- package/dist/application/state-migration/planning.js.map +1 -0
- package/dist/application/state-migration/recovery.d.ts +5 -0
- package/dist/application/state-migration/recovery.js +145 -0
- package/dist/application/state-migration/recovery.js.map +1 -0
- package/dist/application/state-migration/runtime.d.ts +32 -0
- package/dist/application/state-migration/runtime.js +188 -0
- package/dist/application/state-migration/runtime.js.map +1 -0
- package/dist/application/state-migration/service.d.ts +2 -0
- package/dist/application/state-migration/service.js +20 -0
- package/dist/application/state-migration/service.js.map +1 -0
- package/dist/application/update/command-guidance.d.ts +19 -2
- package/dist/application/update/command-guidance.js +20 -6
- package/dist/application/update/command-guidance.js.map +1 -1
- package/dist/application/update/guidance-context.d.ts +2 -0
- package/dist/application/update/guidance-context.js +35 -0
- package/dist/application/update/guidance-context.js.map +1 -0
- package/dist/application/update/inspection.d.ts +21 -4
- package/dist/application/update/inspection.js +88 -29
- package/dist/application/update/inspection.js.map +1 -1
- package/dist/application/update/migration-runtime.js +25 -13
- package/dist/application/update/migration-runtime.js.map +1 -1
- package/dist/application/update/output.d.ts +4 -1
- package/dist/application/update/output.js +14 -4
- package/dist/application/update/output.js.map +1 -1
- package/dist/application/update/preview.d.ts +10 -1
- package/dist/application/update/preview.js +26 -4
- package/dist/application/update/preview.js.map +1 -1
- package/dist/application/update/revalidation-plan.d.ts +1 -0
- package/dist/application/update/revalidation-plan.js +27 -15
- package/dist/application/update/revalidation-plan.js.map +1 -1
- package/dist/application/update/revalidation.d.ts +4 -1
- package/dist/application/update/revalidation.js +64 -23
- package/dist/application/update/revalidation.js.map +1 -1
- package/dist/application/update/use-case.js +50 -29
- package/dist/application/update/use-case.js.map +1 -1
- package/dist/cli/args/definitions.js +11 -3
- package/dist/cli/args/definitions.js.map +1 -1
- package/dist/cli/args/parser.js +29 -3
- package/dist/cli/args/parser.js.map +1 -1
- package/dist/domain/governance/activation/approvals.d.ts +264 -7
- package/dist/domain/governance/activation/approvals.js +166 -23
- package/dist/domain/governance/activation/approvals.js.map +1 -1
- package/dist/domain/governance/activation/capabilities.js +5 -2
- package/dist/domain/governance/activation/capabilities.js.map +1 -1
- package/dist/domain/governance/activation/evidence.d.ts +2 -1
- package/dist/domain/governance/activation/evidence.js +64 -11
- package/dist/domain/governance/activation/evidence.js.map +1 -1
- package/dist/domain/governance/activation/graph.d.ts +11 -384
- package/dist/domain/governance/activation/graph.js +424 -379
- package/dist/domain/governance/activation/graph.js.map +1 -1
- package/dist/domain/governance/activation/inputs.d.ts +3 -1
- package/dist/domain/governance/activation/inputs.js +47 -6
- package/dist/domain/governance/activation/inputs.js.map +1 -1
- package/dist/domain/governance/activation/operations.d.ts +4 -1
- package/dist/domain/governance/activation/operations.js +110 -22
- package/dist/domain/governance/activation/operations.js.map +1 -1
- package/dist/domain/governance/activation/readiness.d.ts +10 -0
- package/dist/domain/governance/activation/readiness.js +77 -38
- package/dist/domain/governance/activation/readiness.js.map +1 -1
- package/dist/domain/governance/activation/types.d.ts +151 -9
- package/dist/domain/governance/activation/types.js +23 -1
- package/dist/domain/governance/activation/types.js.map +1 -1
- package/dist/domain/governance/activation/validators.d.ts +4 -1
- package/dist/domain/governance/activation/validators.js +419 -26
- package/dist/domain/governance/activation/validators.js.map +1 -1
- package/dist/domain/governance/policy/identity.d.ts +55 -13
- package/dist/domain/governance/policy/identity.js +28 -8
- package/dist/domain/governance/policy/identity.js.map +1 -1
- package/dist/domain/project/artifact-lifecycle.d.ts +2 -1
- package/dist/domain/project/artifact-lifecycle.js +7 -1
- package/dist/domain/project/artifact-lifecycle.js.map +1 -1
- package/dist/domain/project/catalog.d.ts +50 -1
- package/dist/domain/project/catalog.js +104 -4
- package/dist/domain/project/catalog.js.map +1 -1
- package/dist/domain/project/contracts.d.ts +9 -1
- package/dist/domain/project/infrastructure-layout.d.ts +1 -1
- package/dist/domain/project/infrastructure-layout.js +3 -1
- package/dist/domain/project/infrastructure-layout.js.map +1 -1
- package/dist/domain/project/manifest/governance.d.ts +1 -1
- package/dist/domain/project/manifest/governance.js +9 -10
- package/dist/domain/project/manifest/governance.js.map +1 -1
- package/dist/domain/project/planning.js +4 -5
- package/dist/domain/project/planning.js.map +1 -1
- package/dist/domain/repair/stateful-bounded.d.ts +1 -0
- package/dist/domain/repair/stateful-bounded.js +37 -0
- package/dist/domain/repair/stateful-bounded.js.map +1 -0
- package/dist/domain/repair/stateful-invariants.d.ts +28 -0
- package/dist/domain/repair/stateful-invariants.js +278 -0
- package/dist/domain/repair/stateful-invariants.js.map +1 -0
- package/dist/domain/repair/stateful.d.ts +690 -0
- package/dist/domain/repair/stateful.js +26 -0
- package/dist/domain/repair/stateful.js.map +1 -0
- package/dist/domain/workstation/constraints.d.ts +1 -0
- package/dist/domain/workstation/constraints.js.map +1 -1
- package/dist/domain/workstation/contracts.d.ts +42 -0
- package/dist/domain/workstation/contracts.js +2 -0
- package/dist/domain/workstation/contracts.js.map +1 -0
- package/dist/domain/workstation/executables.d.ts +19 -0
- package/dist/domain/workstation/executables.js +68 -0
- package/dist/domain/workstation/executables.js.map +1 -0
- package/dist/domain/workstation/versions.d.ts +8 -0
- package/dist/domain/workstation/versions.js +145 -0
- package/dist/domain/workstation/versions.js.map +1 -0
- package/dist/framework-adapters.d.ts +2 -0
- package/dist/framework-adapters.js +148 -22
- package/dist/framework-adapters.js.map +1 -1
- package/dist/framework-validation.d.ts +6 -0
- package/dist/framework-validation.js +89 -24
- package/dist/framework-validation.js.map +1 -1
- package/dist/generators/common/base.js +57 -17
- package/dist/generators/common/base.js.map +1 -1
- package/dist/governance-activation/activation-state.js +39 -7
- package/dist/governance-activation/activation-state.js.map +1 -1
- package/dist/governance-activation/authority-records.d.ts +4 -0
- package/dist/governance-activation/authority-records.js +24 -0
- package/dist/governance-activation/authority-records.js.map +1 -0
- package/dist/governance-activation/commands.d.ts +9 -1
- package/dist/governance-activation/commands.js +392 -97
- package/dist/governance-activation/commands.js.map +1 -1
- package/dist/governance-activation/compatibility.d.ts +11 -8
- package/dist/governance-activation/compatibility.js +37 -23
- package/dist/governance-activation/compatibility.js.map +1 -1
- package/dist/governance-activation/doctor.js +40 -16
- package/dist/governance-activation/doctor.js.map +1 -1
- package/dist/governance-activation/github-config.d.ts +17 -0
- package/dist/governance-activation/github-config.js +88 -0
- package/dist/governance-activation/github-config.js.map +1 -0
- package/dist/governance-activation/github-discovery.d.ts +18 -0
- package/dist/governance-activation/github-discovery.js +229 -0
- package/dist/governance-activation/github-discovery.js.map +1 -0
- package/dist/governance-activation/github-ports.d.ts +12 -0
- package/dist/governance-activation/github-ports.js +4 -0
- package/dist/governance-activation/github-ports.js.map +1 -0
- package/dist/governance-activation/github-publication.d.ts +3 -0
- package/dist/governance-activation/github-publication.js +190 -0
- package/dist/governance-activation/github-publication.js.map +1 -0
- package/dist/governance-activation/historical-common.d.ts +98 -0
- package/dist/governance-activation/historical-common.js +269 -0
- package/dist/governance-activation/historical-common.js.map +1 -0
- package/dist/governance-activation/historical-credential-policy.d.ts +3 -0
- package/dist/governance-activation/historical-credential-policy.js +91 -0
- package/dist/governance-activation/historical-credential-policy.js.map +1 -0
- package/dist/governance-activation/historical-inputs.d.ts +6 -0
- package/dist/governance-activation/historical-inputs.js +57 -0
- package/dist/governance-activation/historical-inputs.js.map +1 -0
- package/dist/governance-activation/historical-safety.d.ts +9 -0
- package/dist/governance-activation/historical-safety.js +102 -0
- package/dist/governance-activation/historical-safety.js.map +1 -0
- package/dist/governance-activation/historical-source-metadata.d.ts +31 -0
- package/dist/governance-activation/historical-source-metadata.js +55 -0
- package/dist/governance-activation/historical-source-metadata.js.map +1 -0
- package/dist/governance-activation/historical-state.d.ts +12 -50
- package/dist/governance-activation/historical-state.js +195 -308
- package/dist/governance-activation/historical-state.js.map +1 -1
- package/dist/governance-activation/historical-v1-auxiliary.d.ts +1 -0
- package/dist/governance-activation/historical-v1-auxiliary.js +43 -0
- package/dist/governance-activation/historical-v1-auxiliary.js.map +1 -0
- package/dist/governance-activation/historical-v1-phase-contracts.d.ts +31 -0
- package/dist/governance-activation/historical-v1-phase-contracts.js +46 -0
- package/dist/governance-activation/historical-v1-phase-contracts.js.map +1 -0
- package/dist/governance-activation/historical-v2.d.ts +53 -0
- package/dist/governance-activation/historical-v2.js +313 -0
- package/dist/governance-activation/historical-v2.js.map +1 -0
- package/dist/governance-activation/history-contracts.d.ts +21 -12
- package/dist/governance-activation/history-contracts.js +99 -27
- package/dist/governance-activation/history-contracts.js.map +1 -1
- package/dist/governance-activation/inputs.d.ts +8 -2
- package/dist/governance-activation/inputs.js +41 -6
- package/dist/governance-activation/inputs.js.map +1 -1
- package/dist/governance-activation/migration-history.d.ts +43 -5
- package/dist/governance-activation/migration-history.js +231 -50
- package/dist/governance-activation/migration-history.js.map +1 -1
- package/dist/governance-activation/migration.d.ts +7 -4
- package/dist/governance-activation/migration.js +53 -252
- package/dist/governance-activation/migration.js.map +1 -1
- package/dist/governance-activation/phase-azure.d.ts +3 -0
- package/dist/governance-activation/phase-azure.js +205 -0
- package/dist/governance-activation/phase-azure.js.map +1 -0
- package/dist/governance-activation/phase-bootstrap-state.js +3 -0
- package/dist/governance-activation/phase-bootstrap-state.js.map +1 -1
- package/dist/governance-activation/phase-github.d.ts +3 -0
- package/dist/governance-activation/phase-github.js +192 -0
- package/dist/governance-activation/phase-github.js.map +1 -0
- package/dist/governance-activation/phase-governance.js +8 -2
- package/dist/governance-activation/phase-governance.js.map +1 -1
- package/dist/governance-activation/public-plans.d.ts +36 -0
- package/dist/governance-activation/public-plans.js +100 -0
- package/dist/governance-activation/public-plans.js.map +1 -0
- package/dist/governance-activation/read-only.d.ts +3 -1
- package/dist/governance-activation/read-only.js +7 -3
- package/dist/governance-activation/read-only.js.map +1 -1
- package/dist/governance-activation/reconciliation.js +10 -0
- package/dist/governance-activation/reconciliation.js.map +1 -1
- package/dist/governance-activation/seed-lifecycle.js +14 -25
- package/dist/governance-activation/seed-lifecycle.js.map +1 -1
- package/dist/governance-activation/source-of-truth.d.ts +21 -5
- package/dist/governance-activation/source-of-truth.js +102 -13
- package/dist/governance-activation/source-of-truth.js.map +1 -1
- package/dist/governance-activation/task-projection.d.ts +4 -1
- package/dist/governance-activation/task-projection.js +32 -3
- package/dist/governance-activation/task-projection.js.map +1 -1
- package/dist/governance-activation/task-writes.d.ts +42 -0
- package/dist/governance-activation/task-writes.js +250 -0
- package/dist/governance-activation/task-writes.js.map +1 -0
- package/dist/governance-activation/transition-files.d.ts +12 -0
- package/dist/governance-activation/transition-files.js +109 -0
- package/dist/governance-activation/transition-files.js.map +1 -0
- package/dist/governance-activation/transition-planning.d.ts +3 -1
- package/dist/governance-activation/transition-planning.js +158 -20
- package/dist/governance-activation/transition-planning.js.map +1 -1
- package/dist/governance-activation/transition-ports.d.ts +31 -3
- package/dist/governance-activation/transition-records.d.ts +11 -1
- package/dist/governance-activation/transition-records.js +52 -6
- package/dist/governance-activation/transition-records.js.map +1 -1
- package/dist/governance-activation/transitions.d.ts +5 -0
- package/dist/governance-activation/transitions.js +271 -37
- package/dist/governance-activation/transitions.js.map +1 -1
- package/dist/governance-assessment/engine.js +22 -15
- package/dist/governance-assessment/engine.js.map +1 -1
- package/dist/governance-assessment/project.d.ts +2 -0
- package/dist/governance-assessment/project.js +2 -1
- package/dist/governance-assessment/project.js.map +1 -1
- package/dist/interactive.d.ts +0 -1
- package/dist/interactive.js +3 -22
- package/dist/interactive.js.map +1 -1
- package/dist/openspec-profile.d.ts +2 -1
- package/dist/openspec-profile.js +11 -41
- package/dist/openspec-profile.js.map +1 -1
- package/dist/repository-governance.d.ts +10 -5
- package/dist/repository-governance.js +178 -92
- package/dist/repository-governance.js.map +1 -1
- package/dist/telemetry/contract.d.ts +1 -1
- package/dist/telemetry/contract.js +3 -0
- package/dist/telemetry/contract.js.map +1 -1
- package/dist/workstation-catalog.d.ts +13 -1
- package/dist/workstation-catalog.js +122 -0
- package/dist/workstation-catalog.js.map +1 -1
- package/dist/workstation.d.ts +69 -14
- package/dist/workstation.js +600 -215
- package/dist/workstation.js.map +1 -1
- package/docs/cli-reference.md +94 -23
- package/docs/configuration-and-manifests.md +11 -10
- package/docs/prerequisites.md +93 -18
- package/docs/repository-governance.md +68 -40
- package/docs/spec-workflows-and-agents.md +132 -13
- package/docs/troubleshooting.md +28 -0
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"phase-bootstrap-state.js","sourceRoot":"","sources":["../../src/governance-activation/phase-bootstrap-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;
|
|
1
|
+
{"version":3,"file":"phase-bootstrap-state.js","sourceRoot":"","sources":["../../src/governance-activation/phase-bootstrap-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAE3F,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAC5D,MAAM,iCAAiC,GAAG,6BAA6B,CAAC;AAExE,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gEAAgE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gFAAgF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QACnJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE;YACzE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC3J,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mGAAmG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtK,CAAC;IACD,MAAM,uBAAuB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IACvH,MAAM,sBAAsB,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,YAAY,CAAC,UAAU;QACnE,0BAA0B,EAAE,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC;QACrE,UAAU,EAAE,YAAY,EAAE,uBAAuB,EAAE,sBAAsB;KAC1E,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE;QAC7E,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,2BAA2B,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAAiC;IACnF,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mFAAmF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc;YAChD,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,6BAA6B,EAAE;YACnG,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACtF,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU;YAC5C,eAAe,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,IAAI,IAAI,EAAE;YAClJ,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oDAAoD,SAAS,CAAC,YAAY,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAChJ,CAAC;IACD,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,sBAAsB;QAC/E,YAAY,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,0BAA0B,EAAE,CAAC;QAClI,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,4GAA4G,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC/K,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,+EAA+E,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACtH,eAAe,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qEAAqE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACxI,CAAC;IACD,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACrE,MAAM,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnE,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACzF,OAAO,kBAAkB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uFAAuF,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC1J,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,uBAAuB,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAAC;SACzF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG;QACrB,GAAG,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACrE,kBAAkB,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,iBAAiB;KACrG,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtI,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK;QAClE,eAAe,EAAE;YACf,IAAI,EAAE,iCAAiC,EAAE,gBAAgB,EAAE,QAAQ;YACnE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI;SAC9E;QACD,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,iBAAiB;QACjB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,+BAA+B,CAAC;QAC1G,eAAe,EAAE,iBAAiB;KACnC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
import type { PhaseAdapterExecutionInput, PhaseAdapterOutcome, PhasePlanBuild, PhasePlanningInput } from './transition-ports.js';
|
|
2
|
+
export declare function planGitHubPhase(input: PhasePlanningInput): Promise<PhasePlanBuild | null>;
|
|
3
|
+
export declare function executeGitHubPhase(input: PhaseAdapterExecutionInput): Promise<PhaseAdapterOutcome | null>;
|
|
@@ -0,0 +1,192 @@
|
|
|
1
|
+
import { planGitHubPublication, executeGitHubPublication } from './github-publication.js';
|
|
2
|
+
import { planGitHubDiscovery } from './github-discovery.js';
|
|
3
|
+
import { discoverPhase0 } from './phase-discovery.js';
|
|
4
|
+
import { githubOperation, repositoryConfiguration } from './github-config.js';
|
|
5
|
+
import { executeCredentialReady, executeRulesetPhase } from './phase-governance.js';
|
|
6
|
+
import { readbackProof } from './transition-records.js';
|
|
7
|
+
import { writeProjectFile } from '../adapters/filesystem/project-files.js';
|
|
8
|
+
import { credentialPolicyPathParts, buildFineGrainedPatCredentialPolicy, canonicalCredentialRepository } from './credentials.js';
|
|
9
|
+
import { runnerPreflightSecretName } from '../domain/governance/activation/types.js';
|
|
10
|
+
import { protectedStdinCredentialChannel, privateTtyCredentialChannel } from '../adapters/credentials/protected-input.js';
|
|
11
|
+
import { githubCliSecretWriter } from '../adapters/credentials/github-enrollment.js';
|
|
12
|
+
import { canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
|
|
13
|
+
export async function planGitHubPhase(input) {
|
|
14
|
+
const repository = repositoryConfiguration(input.inspection).name;
|
|
15
|
+
switch (input.phase.id) {
|
|
16
|
+
case 'pushed':
|
|
17
|
+
if (input.inspection.activationInputs?.repository?.create) {
|
|
18
|
+
return planGitHubPublication(input);
|
|
19
|
+
}
|
|
20
|
+
return null;
|
|
21
|
+
case 'phase-0-complete':
|
|
22
|
+
return await planGitHubDiscovery(input);
|
|
23
|
+
case 'bootstrap-workflow-source-ready':
|
|
24
|
+
return {
|
|
25
|
+
operations: [
|
|
26
|
+
{
|
|
27
|
+
phaseId: input.phase.id, adapter: 'local-state', actionId: 'local.workflow-source.write',
|
|
28
|
+
mutationClass: 'write-workflows', inputs: { path: '.github/workflows' },
|
|
29
|
+
destination: { type: 'local', identity: '.github/workflows', pathParts: ['.github', 'workflows'] },
|
|
30
|
+
remote: false, destructive: false
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
phaseId: input.phase.id, adapter: 'git', actionId: 'git.commit-reviewed',
|
|
34
|
+
mutationClass: 'git-commit', inputs: { message: 'Bootstrap verification workflows' },
|
|
35
|
+
destination: { type: 'local', identity: '.git' },
|
|
36
|
+
remote: false, destructive: false
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
phaseId: input.phase.id, adapter: 'git', actionId: 'git.push-approved-ref',
|
|
40
|
+
mutationClass: 'git-push', inputs: { branch: 'develop' },
|
|
41
|
+
destination: { type: 'repository', identity: repository, repository },
|
|
42
|
+
remote: true, destructive: false
|
|
43
|
+
},
|
|
44
|
+
githubOperation(input, 'github.bootstrap-local.configure', 'github-write', { repository })
|
|
45
|
+
]
|
|
46
|
+
};
|
|
47
|
+
case 'credential-ready':
|
|
48
|
+
return {
|
|
49
|
+
operations: [
|
|
50
|
+
githubOperation(input, 'github.credential.verify-policy', 'github-read', { repository })
|
|
51
|
+
]
|
|
52
|
+
};
|
|
53
|
+
case 'runner-ready':
|
|
54
|
+
return {
|
|
55
|
+
operations: [
|
|
56
|
+
githubOperation(input, 'github.runner.ensure-ready', 'github-write', { repository })
|
|
57
|
+
]
|
|
58
|
+
};
|
|
59
|
+
case 'private-backend-proof':
|
|
60
|
+
return {
|
|
61
|
+
operations: [
|
|
62
|
+
githubOperation(input, 'github.runner.backend-proof', 'github-workflow-dispatch', { repository })
|
|
63
|
+
]
|
|
64
|
+
};
|
|
65
|
+
case 'application-artifact-ready':
|
|
66
|
+
return {
|
|
67
|
+
operations: [
|
|
68
|
+
githubOperation(input, 'github.artifact.build-dispatch', 'github-workflow-dispatch', { repository })
|
|
69
|
+
]
|
|
70
|
+
};
|
|
71
|
+
case 'workflow-source-ready':
|
|
72
|
+
return {
|
|
73
|
+
operations: [
|
|
74
|
+
{
|
|
75
|
+
phaseId: input.phase.id, adapter: 'local-state', actionId: 'local.workflow-source.write',
|
|
76
|
+
mutationClass: 'write-workflows', inputs: { path: '.github/workflows' },
|
|
77
|
+
destination: { type: 'local', identity: '.github/workflows', pathParts: ['.github', 'workflows'] },
|
|
78
|
+
remote: false, destructive: false
|
|
79
|
+
},
|
|
80
|
+
{
|
|
81
|
+
phaseId: input.phase.id, adapter: 'local-state', actionId: 'local.ruleset-source.write',
|
|
82
|
+
mutationClass: 'write-ruleset-source', inputs: { path: '.github/rulesets' },
|
|
83
|
+
destination: { type: 'local', identity: '.github/rulesets', pathParts: ['.github', 'rulesets'] },
|
|
84
|
+
remote: false, destructive: false
|
|
85
|
+
}
|
|
86
|
+
]
|
|
87
|
+
};
|
|
88
|
+
case 'dev-proof':
|
|
89
|
+
return {
|
|
90
|
+
operations: [
|
|
91
|
+
githubOperation(input, 'github.checks.dev-proof', 'github-workflow-dispatch', { repository })
|
|
92
|
+
]
|
|
93
|
+
};
|
|
94
|
+
case 'staging-qualified':
|
|
95
|
+
return {
|
|
96
|
+
operations: [
|
|
97
|
+
githubOperation(input, 'github.checks.staging', 'github-workflow-dispatch', { repository })
|
|
98
|
+
]
|
|
99
|
+
};
|
|
100
|
+
case 'production-rehearsed':
|
|
101
|
+
return {
|
|
102
|
+
operations: [
|
|
103
|
+
githubOperation(input, 'github.checks.production-rehearsal', 'github-workflow-dispatch', { repository })
|
|
104
|
+
]
|
|
105
|
+
};
|
|
106
|
+
case 'green-red-proof':
|
|
107
|
+
return {
|
|
108
|
+
operations: [
|
|
109
|
+
githubOperation(input, 'github.checks.green-red-proof', 'github-workflow-dispatch', { repository })
|
|
110
|
+
]
|
|
111
|
+
};
|
|
112
|
+
case 'rulesets-applied':
|
|
113
|
+
return {
|
|
114
|
+
operations: [
|
|
115
|
+
githubOperation(input, 'github.ruleset.apply', 'github-ruleset-write', { repository }),
|
|
116
|
+
githubOperation(input, 'github.ruleset.readback', 'github-read', { repository })
|
|
117
|
+
]
|
|
118
|
+
};
|
|
119
|
+
case 'live-readback':
|
|
120
|
+
return {
|
|
121
|
+
operations: [
|
|
122
|
+
githubOperation(input, 'github.ruleset.readback', 'github-read', { repository })
|
|
123
|
+
]
|
|
124
|
+
};
|
|
125
|
+
default:
|
|
126
|
+
return null;
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
export async function executeGitHubPhase(input) {
|
|
130
|
+
const repository = repositoryConfiguration(input.inspection).name;
|
|
131
|
+
switch (input.phase.id) {
|
|
132
|
+
case 'pushed':
|
|
133
|
+
if (input.inspection.activationInputs?.repository?.create) {
|
|
134
|
+
return executeGitHubPublication(input);
|
|
135
|
+
}
|
|
136
|
+
return null;
|
|
137
|
+
case 'phase-0-complete':
|
|
138
|
+
return discoverPhase0(input);
|
|
139
|
+
case 'credential-ready': {
|
|
140
|
+
if (input.credentialEnrollment) {
|
|
141
|
+
try {
|
|
142
|
+
const channel = input.credentialEnrollment.protectedStdin
|
|
143
|
+
? protectedStdinCredentialChannel(true)
|
|
144
|
+
: privateTtyCredentialChannel();
|
|
145
|
+
const secretBytes = await channel.read('fine-grained PAT');
|
|
146
|
+
const writer = githubCliSecretWriter(input.runner, input.inspection.projectRoot);
|
|
147
|
+
await writer.write(repository, runnerPreflightSecretName, secretBytes);
|
|
148
|
+
const [owner, name] = repository.split('/');
|
|
149
|
+
const policy = buildFineGrainedPatCredentialPolicy({
|
|
150
|
+
repository: canonicalCredentialRepository({ id: input.inspection.state.repository.id, owner, name }),
|
|
151
|
+
allowedWorkflows: [{ path: '.github/workflows/bootstrap-import-preflight.yml', jobs: ['bootstrap-import-preflight'] }],
|
|
152
|
+
createdAt: input.now,
|
|
153
|
+
proof: {
|
|
154
|
+
verifiedAt: input.now.toISOString(),
|
|
155
|
+
readbackDigest: canonicalSha256(secretBytes),
|
|
156
|
+
readbackProvider: 'github-api',
|
|
157
|
+
payloadFree: true
|
|
158
|
+
}
|
|
159
|
+
});
|
|
160
|
+
secretBytes.fill(0);
|
|
161
|
+
await writeProjectFile(input.inspection.projectRoot, [...credentialPolicyPathParts], `${JSON.stringify(policy, null, 2)}\n`);
|
|
162
|
+
const resourceId = `/repos/${repository}/actions/secrets/${runnerPreflightSecretName}`;
|
|
163
|
+
return {
|
|
164
|
+
status: 'completed',
|
|
165
|
+
resultState: 'verified',
|
|
166
|
+
evidencePayload: {
|
|
167
|
+
kind: 'credential-ready.v1',
|
|
168
|
+
policyDigest: canonicalSha256(policy),
|
|
169
|
+
secretName: runnerPreflightSecretName
|
|
170
|
+
},
|
|
171
|
+
liveReadback: [readbackProof(input, 'github', 'secret', resourceId, { enrolled: true })],
|
|
172
|
+
completedOperations: input.plan.operations.filter((op) => op.actionId.startsWith('github.credential.'))
|
|
173
|
+
};
|
|
174
|
+
}
|
|
175
|
+
catch (error) {
|
|
176
|
+
return {
|
|
177
|
+
status: 'blocked',
|
|
178
|
+
blocker: error instanceof Error ? error.message : String(error),
|
|
179
|
+
completedOperations: []
|
|
180
|
+
};
|
|
181
|
+
}
|
|
182
|
+
}
|
|
183
|
+
return executeCredentialReady(input);
|
|
184
|
+
}
|
|
185
|
+
case 'rulesets-applied':
|
|
186
|
+
case 'live-readback':
|
|
187
|
+
return executeRulesetPhase(input);
|
|
188
|
+
default:
|
|
189
|
+
return null;
|
|
190
|
+
}
|
|
191
|
+
}
|
|
192
|
+
//# sourceMappingURL=phase-github.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"phase-github.js","sourceRoot":"","sources":["../../src/governance-activation/phase-github.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAa,eAAe,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAc,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,mCAAmC,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AAC1H,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AAEpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAyB;IAC7D,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAClE,QAAQ,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,QAAQ;YACX,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;gBAC1D,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,OAAO,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,iCAAiC;YACpC,OAAO;gBACL,UAAU,EAAE;oBACV;wBACE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,6BAA6B;wBACxF,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;wBACvE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;wBAClG,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;qBAClC;oBACD;wBACE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,qBAAqB;wBACxE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE;wBACpF,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;wBAChD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;qBAClC;oBACD;wBACE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB;wBAC1E,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;wBACxD,WAAW,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;wBACrE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK;qBACjC;oBACD,eAAe,CAAC,KAAK,EAAE,kCAAkC,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,CAAC;iBAC3F;aACF,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,iCAAiC,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC;iBACzF;aACF,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,4BAA4B,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,CAAC;iBACrF;aACF,CAAC;QACJ,KAAK,uBAAuB;YAC1B,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBAClG;aACF,CAAC;QACJ,KAAK,4BAA4B;YAC/B,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBACrG;aACF,CAAC;QACJ,KAAK,uBAAuB;YAC1B,OAAO;gBACL,UAAU,EAAE;oBACV;wBACE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,6BAA6B;wBACxF,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;wBACvE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;wBAClG,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;qBAClC;oBACD;wBACE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,4BAA4B;wBACvF,aAAa,EAAE,sBAAsB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;wBAC3E,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;wBAChG,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;qBAClC;iBACF;aACF,CAAC;QACJ,KAAK,WAAW;YACd,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBAC9F;aACF,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBAC5F;aACF,CAAC;QACJ,KAAK,sBAAsB;YACzB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,oCAAoC,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBACzG;aACF,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC;iBACpG;aACF,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,CAAC;oBACtF,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC;iBACjF;aACF,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,UAAU,EAAE;oBACV,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC;iBACjF;aACF,CAAC;QACJ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAiC;IACxE,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAClE,QAAQ,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,QAAQ;YACX,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;gBAC1D,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,kBAAkB,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC,cAAc;wBACvD,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC;wBACvC,CAAC,CAAC,2BAA2B,EAAE,CAAC;oBAClC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;oBACjF,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,yBAAyB,EAAE,WAAW,CAAC,CAAC;oBACvE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;oBAChE,MAAM,MAAM,GAAG,mCAAmC,CAAC;wBACjD,UAAU,EAAE,6BAA6B,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;wBACpG,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,kDAAkD,EAAE,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;wBACtH,SAAS,EAAE,KAAK,CAAC,GAAG;wBACpB,KAAK,EAAE;4BACL,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;4BACnC,cAAc,EAAE,eAAe,CAAC,WAAW,CAAC;4BAC5C,gBAAgB,EAAE,YAAY;4BAC9B,WAAW,EAAE,IAAI;yBAClB;qBACF,CAAC,CAAC;oBACH,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACpB,MAAM,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,yBAAyB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC7H,MAAM,UAAU,GAAG,UAAU,UAAU,oBAAoB,yBAAyB,EAAE,CAAC;oBACvF,OAAO;wBACL,MAAM,EAAE,WAAW;wBACnB,WAAW,EAAE,UAAU;wBACvB,eAAe,EAAE;4BACf,IAAI,EAAE,qBAAqB;4BAC3B,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;4BACrC,UAAU,EAAE,yBAAyB;yBACtC;wBACD,YAAY,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;wBACxF,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;qBACxG,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,MAAM,EAAE,SAAS;wBACjB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC/D,mBAAmB,EAAE,EAAE;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,kBAAkB,CAAC;QACxB,KAAK,eAAe;YAClB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}
|
|
@@ -10,6 +10,10 @@ import { evaluateApprovalForTransitionPlan, transitionPlanForPhase } from '../do
|
|
|
10
10
|
export async function executeActivationApproval(input) {
|
|
11
11
|
if (input.phase.id !== 'activation-approved')
|
|
12
12
|
return null;
|
|
13
|
+
const { taskProjectionContract } = await import('../domain/governance/activation/operations.js');
|
|
14
|
+
if (!taskProjectionContract(input.plan.operations)) {
|
|
15
|
+
return { status: 'blocked', blocker: 'Activation source approval requires its exact reviewed current-task projection contract.', completedOperations: [] };
|
|
16
|
+
}
|
|
13
17
|
const state = cloneState(input.inspection.state);
|
|
14
18
|
const fileMutations = [];
|
|
15
19
|
if (input.inspection.sourceOfTruth.status === 'none') {
|
|
@@ -18,7 +22,8 @@ export async function executeActivationApproval(input) {
|
|
|
18
22
|
return { status: 'blocked', blocker: input.inspection.sourceOfTruth.createPlan.reason, completedOperations: [] };
|
|
19
23
|
}
|
|
20
24
|
const writePlan = renderGovernanceChangeWritePlan(facts);
|
|
21
|
-
|
|
25
|
+
const { governanceSourceFilesWithoutTasks } = await import('./task-writes.js');
|
|
26
|
+
for (const file of governanceSourceFilesWithoutTasks(writePlan)) {
|
|
22
27
|
if (await readProjectFile(input.inspection.projectRoot, [...file.pathParts]) !== undefined) {
|
|
23
28
|
return { status: 'blocked', blocker: `Refusing to overwrite existing governance artifact ${file.pathParts.join('/')}.`, completedOperations: [] };
|
|
24
29
|
}
|
|
@@ -110,7 +115,8 @@ export async function executeRulesetPhase(input) {
|
|
|
110
115
|
return { status: 'blocked', blocker: 'The reviewed ruleset plan expired before provider access.', completedOperations: [] };
|
|
111
116
|
}
|
|
112
117
|
if (input.phase.approvalGate.required) {
|
|
113
|
-
const
|
|
118
|
+
const requested = transitionPlanForPhase(input.phase, input.inspection.state, input.inspection.contexts[input.phase.id].transition, input.inspection.projectRoot, undefined, { operations: input.plan.operations, configuration: input.plan.configuration, fileChanges: input.plan.fileChanges });
|
|
119
|
+
const authorization = evaluateApprovalForTransitionPlan(requested, input.inspection.approvals, { now: executionTime });
|
|
114
120
|
if (authorization.approvalRequired || authorization.envelopeHash !== input.plan.approval.envelopeHash) {
|
|
115
121
|
return { status: 'blocked', blocker: 'Ruleset approval is no longer valid immediately before provider access.', completedOperations: [] };
|
|
116
122
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"phase-governance.js","sourceRoot":"","sources":["../../src/governance-activation/phase-governance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,
|
|
1
|
+
{"version":3,"file":"phase-governance.js","sourceRoot":"","sources":["../../src/governance-activation/phase-governance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAA6B,MAAM,6CAA6C,CAAC;AAClJ,OAAO,EAAE,QAAQ,EAAE,MAAM,mDAAmD,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAEzH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAiC;IAC/E,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,+CAA+C,CAAC,CAAC;IACjG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0FAA0F,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC7J,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,aAAa,GAA0B,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,iCAAiC,CAC7C,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC5H,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,SAAS,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,iCAAiC,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,iCAAiC,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC3F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sDAAsD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;YACpJ,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACzH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChE,KAAK,CAAC,YAAY,GAAG;YACnB,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ;YACpD,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;SACpG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,iGAAiG;YAC1G,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa;QACjF,iBAAiB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5F,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;KAC5G,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAiC;IAC5E,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC;IACnG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,mLAAmL;YAC5L,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjJ,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC3H,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,wIAAwI;QACjJ,mBAAmB,EAAE,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAiC;IAC5D,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,eAAe,GAAG,KAAK,EAAE,UAAU,CAAC;IAC1C,MAAM,aAAa,GAAG,GAAG,EAAE,UAAU,CAAC;IACtC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1H,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,eAAe,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAiC;IACzE,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,CAAC;QACH,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,YAAY,GAAG,+BAA+B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,iGAAiG,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IACpK,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0GAA0G,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC7K,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,MAAM,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,2DAA2D,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,sBAAsB,CACtC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,EACzF,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EACvC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CACpH,CAAC;QACF,MAAM,aAAa,GAAG,iCAAiC,CACrD,SAAS,EACT,KAAK,CAAC,UAAU,CAAC,SAAS,EAC1B,EAAE,GAAG,EAAE,aAAa,EAAE,CACvB,CAAC;QACF,IAAI,aAAa,CAAC,gBAAgB,IAAI,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QACjD,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC/J,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3G,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,kBAAkB;QAC1F,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,sBAAsB,IAAI,EAAE,CAAC,QAAQ,KAAK,yBAAyB;QACrF,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,yBAAyB,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY,EAAE,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,yEAAyE,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;IACnJ,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7I,MAAM,YAAY,GAAsB;QACtC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B;QAC1E,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;QACnG,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;QACzF,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ;QACtF,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI;KACzH,CAAC;IACF,OAAO;QACL,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC;QAC1E,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;QACnI,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { type UpdatePreviewOptions } from '../adapters/filesystem/update-previews.js';
|
|
2
|
+
import type { ApprovalEnvelope, SavedTransitionPlan } from '../domain/governance/activation/types.js';
|
|
3
|
+
import type { CommandRunner } from '../process-runner.js';
|
|
4
|
+
import type { GovernanceTransitionInspection } from './transition-ports.js';
|
|
5
|
+
export { assertGovernanceApprovalIssued } from './authority-records.js';
|
|
6
|
+
export interface GovernancePlanPreview {
|
|
7
|
+
schemaVersion: 1;
|
|
8
|
+
kind: 'liftoff-governance-preview';
|
|
9
|
+
projectRoot: string;
|
|
10
|
+
fingerprint: string;
|
|
11
|
+
plan: SavedTransitionPlan;
|
|
12
|
+
}
|
|
13
|
+
export declare function saveGovernancePreview(inspection: GovernanceTransitionInspection, options?: {
|
|
14
|
+
runner?: CommandRunner;
|
|
15
|
+
now?: Date;
|
|
16
|
+
storage?: UpdatePreviewOptions;
|
|
17
|
+
}): Promise<{
|
|
18
|
+
preview: GovernancePlanPreview;
|
|
19
|
+
path: string;
|
|
20
|
+
} | null>;
|
|
21
|
+
export declare function loadGovernancePreview(projectRoot: string, fingerprint: string, options?: {
|
|
22
|
+
now?: Date;
|
|
23
|
+
storage?: UpdatePreviewOptions;
|
|
24
|
+
}): Promise<GovernancePlanPreview>;
|
|
25
|
+
export declare function approveGovernancePreview(input: {
|
|
26
|
+
projectRoot: string;
|
|
27
|
+
fingerprint: string;
|
|
28
|
+
inspect: () => Promise<GovernanceTransitionInspection>;
|
|
29
|
+
runner?: CommandRunner;
|
|
30
|
+
now?: Date;
|
|
31
|
+
storage?: UpdatePreviewOptions;
|
|
32
|
+
}): Promise<{
|
|
33
|
+
envelope: ApprovalEnvelope;
|
|
34
|
+
plan: SavedTransitionPlan;
|
|
35
|
+
pathParts: readonly string[];
|
|
36
|
+
}>;
|
|
@@ -0,0 +1,100 @@
|
|
|
1
|
+
import { randomUUID } from 'node:crypto';
|
|
2
|
+
import { realpath } from 'node:fs/promises';
|
|
3
|
+
import { createScopedUserLocalRecordStore } from '../adapters/filesystem/update-previews.js';
|
|
4
|
+
import { withProjectMutationLock } from '../adapters/filesystem/project-lock.js';
|
|
5
|
+
import { applyProjectFileTransaction, captureProjectFileSnapshot } from '../adapters/filesystem/project-transaction.js';
|
|
6
|
+
import { canonicalJson, canonicalSha256, isRecord } from '../domain/governance/activation/canonical-json.js';
|
|
7
|
+
import { approvalRequestForSavedPlan, evaluateApprovalForTransitionPlan } from '../domain/governance/activation/approvals.js';
|
|
8
|
+
import { validateApprovalEnvelope, validateSavedTransitionPlan } from '../domain/governance/activation/validators.js';
|
|
9
|
+
import { phaseById } from '../domain/governance/activation/operations.js';
|
|
10
|
+
import { buildSavedTransitionPlan } from './transition-planning.js';
|
|
11
|
+
import { assertNoSecrets, transitionPlanPathParts } from './transition-records.js';
|
|
12
|
+
import { assertGovernanceApprovalIssued, writeGovernanceApprovalAuthority } from './authority-records.js';
|
|
13
|
+
export { assertGovernanceApprovalIssued } from './authority-records.js';
|
|
14
|
+
function fingerprintFor(projectRoot, plan) {
|
|
15
|
+
return canonicalSha256({ schemaVersion: 1, kind: 'liftoff-governance-preview', projectRoot, plan });
|
|
16
|
+
}
|
|
17
|
+
export async function saveGovernancePreview(inspection, options = {}) {
|
|
18
|
+
const plan = await buildSavedTransitionPlan({ inspection, runner: options.runner, now: options.now });
|
|
19
|
+
if (!plan)
|
|
20
|
+
return null;
|
|
21
|
+
assertNoSecrets(plan);
|
|
22
|
+
const projectRoot = await realpath(inspection.projectRoot);
|
|
23
|
+
const fingerprint = fingerprintFor(projectRoot, plan);
|
|
24
|
+
const preview = {
|
|
25
|
+
schemaVersion: 1, kind: 'liftoff-governance-preview', projectRoot, fingerprint, plan
|
|
26
|
+
};
|
|
27
|
+
const stored = await createScopedUserLocalRecordStore(projectRoot, 'governance-preview', options.storage).write(fingerprint, preview);
|
|
28
|
+
return { preview, path: stored.path };
|
|
29
|
+
}
|
|
30
|
+
export async function loadGovernancePreview(projectRoot, fingerprint, options = {}) {
|
|
31
|
+
const stored = await createScopedUserLocalRecordStore(projectRoot, 'governance-preview', options.storage).read(fingerprint);
|
|
32
|
+
if (!stored)
|
|
33
|
+
throw new Error('No matching external governance preview exists for this project; run governance plan first.');
|
|
34
|
+
const value = stored.value;
|
|
35
|
+
if (!isRecord(value) || Object.keys(value).sort().join(',') !== 'fingerprint,kind,plan,projectRoot,schemaVersion' ||
|
|
36
|
+
value.schemaVersion !== 1 || value.kind !== 'liftoff-governance-preview' ||
|
|
37
|
+
value.projectRoot !== stored.projectRoot || value.fingerprint !== fingerprint) {
|
|
38
|
+
throw new Error('Governance preview has an invalid contract or belongs to another project.');
|
|
39
|
+
}
|
|
40
|
+
const plan = validateSavedTransitionPlan(value.plan);
|
|
41
|
+
assertNoSecrets(plan);
|
|
42
|
+
if (fingerprintFor(stored.projectRoot, plan) !== fingerprint)
|
|
43
|
+
throw new Error('Governance preview fingerprint does not match its exact plan.');
|
|
44
|
+
const now = options.now ?? new Date();
|
|
45
|
+
if (Date.parse(plan.createdAt) > now.getTime() || Date.parse(plan.expiresAt) <= now.getTime()) {
|
|
46
|
+
throw new Error('Governance preview is expired or dated in the future; request a fresh plan.');
|
|
47
|
+
}
|
|
48
|
+
return { schemaVersion: 1, kind: 'liftoff-governance-preview', projectRoot: stored.projectRoot, fingerprint, plan };
|
|
49
|
+
}
|
|
50
|
+
export async function approveGovernancePreview(input) {
|
|
51
|
+
const now = input.now ?? new Date();
|
|
52
|
+
const preview = await loadGovernancePreview(input.projectRoot, input.fingerprint, { now, storage: input.storage });
|
|
53
|
+
return withProjectMutationLock(input.projectRoot, async (lease) => {
|
|
54
|
+
const inspection = await input.inspect();
|
|
55
|
+
const fresh = await buildSavedTransitionPlan({
|
|
56
|
+
inspection, runner: input.runner, now, createdAt: preview.plan.createdAt
|
|
57
|
+
});
|
|
58
|
+
if (!fresh || fresh.planDigest !== preview.plan.planDigest || fresh.stateHash !== preview.plan.stateHash ||
|
|
59
|
+
fresh.scope !== preview.plan.scope || canonicalSha256(fresh.fileChanges ?? []) !== canonicalSha256(preview.plan.fileChanges ?? [])) {
|
|
60
|
+
throw new Error('Governance plan inputs or exact operations changed after preview; no approval was written.');
|
|
61
|
+
}
|
|
62
|
+
const phase = phaseById(inspection.graph, fresh.phaseId);
|
|
63
|
+
if (!phase.approvalGate.required)
|
|
64
|
+
throw new Error('This phase needs explicit execution, not an approval envelope.');
|
|
65
|
+
const request = approvalRequestForSavedPlan(fresh, phase, inspection.state);
|
|
66
|
+
const existing = evaluateApprovalForTransitionPlan(request, inspection.approvals, { now });
|
|
67
|
+
if (!existing.approvalRequired) {
|
|
68
|
+
const envelope = inspection.approvals.find((entry) => entry.id === existing.envelopeId);
|
|
69
|
+
await assertGovernanceApprovalIssued(input.projectRoot, envelope, input.storage);
|
|
70
|
+
return { envelope, plan: fresh, pathParts: ['governance', 'approvals', `${envelope.id}.json`] };
|
|
71
|
+
}
|
|
72
|
+
const envelope = validateApprovalEnvelope({
|
|
73
|
+
...request,
|
|
74
|
+
schemaVersion: inspection.state.identity.approvalEnvelopeSchemaVersion,
|
|
75
|
+
id: randomUUID(),
|
|
76
|
+
approvedAt: now.toISOString(),
|
|
77
|
+
expiresAt: fresh.expiresAt,
|
|
78
|
+
approver: 'local-cli-explicit-plan-approval'
|
|
79
|
+
}, { expectedIdentity: inspection.state.identity, now, requireUnexpired: true });
|
|
80
|
+
const evaluation = evaluateApprovalForTransitionPlan(request, [envelope], { now });
|
|
81
|
+
const plan = validateSavedTransitionPlan({
|
|
82
|
+
...fresh,
|
|
83
|
+
approval: { ...fresh.approval, evaluation, envelopeId: envelope.id, envelopeHash: evaluation.envelopeHash }
|
|
84
|
+
});
|
|
85
|
+
const planPath = transitionPlanPathParts(plan);
|
|
86
|
+
const pathParts = ['governance', 'approvals', `${envelope.id}.json`];
|
|
87
|
+
const before = await captureProjectFileSnapshot(input.projectRoot, planPath);
|
|
88
|
+
if (before.content !== undefined && before.content.toString('utf8') !== `${canonicalJson(plan)}\n`) {
|
|
89
|
+
throw new Error('The approval target plan already contains different bytes; it was preserved.');
|
|
90
|
+
}
|
|
91
|
+
await writeGovernanceApprovalAuthority(input.projectRoot, input.fingerprint, envelope, input.storage);
|
|
92
|
+
await lease.assertHeld();
|
|
93
|
+
await applyProjectFileTransaction(input.projectRoot, [
|
|
94
|
+
...(before.content === undefined ? [{ type: 'write', pathParts: planPath, content: `${canonicalJson(plan)}\n` }] : []),
|
|
95
|
+
{ type: 'write', pathParts, content: `${canonicalJson(envelope)}\n` }
|
|
96
|
+
], { preconditions: [before, { pathParts }] });
|
|
97
|
+
return { envelope, plan, pathParts };
|
|
98
|
+
});
|
|
99
|
+
}
|
|
100
|
+
//# sourceMappingURL=public-plans.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"public-plans.js","sourceRoot":"","sources":["../../src/governance-activation/public-plans.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,gCAAgC,EACjC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AACxH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mDAAmD,CAAC;AAC7G,OAAO,EACL,2BAA2B,EAAiC,iCAAiC,EAC9F,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACtH,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAI1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAUxE,SAAS,cAAc,CAAC,WAAmB,EAAE,IAAyB;IACpE,OAAO,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA0C,EAC1C,OAAO,GAA2E,EAAE;IAEpF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,OAAO,GAA0B;QACrC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI;KACrF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,WAAW,EAAE,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACtI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAmB,EACnB,WAAmB,EACnB,OAAO,GAAmD,EAAE;IAE5D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,WAAW,EAAE,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5H,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,iDAAiD;QAC/G,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QACxE,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC/I,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC;YAC3C,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;SACzE,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS;YACtG,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YACrI,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpH,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,iCAAiC,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAE,CAAC;YACzF,MAAM,8BAA8B,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QAClG,CAAC;QACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC;YACxC,GAAG,OAAO;YACV,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,6BAA6B;YACtE,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,kCAAkC;SAC7C,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,iCAAiC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,2BAA2B,CAAC;YACvC,GAAG,KAAK;YACR,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE;SAC5G,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,gCAAgC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,2BAA2B,CAAC,KAAK,CAAC,WAAW,EAAE;YACnD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/H,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;SACtE,EAAE,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -12,16 +12,18 @@ export declare function inspectCurrentActivationEvidence(projectRoot: string, ma
|
|
|
12
12
|
contexts?: undefined;
|
|
13
13
|
records?: undefined;
|
|
14
14
|
selections?: undefined;
|
|
15
|
+
historicalLifecycleObligations?: undefined;
|
|
15
16
|
migration?: undefined;
|
|
16
17
|
} | {
|
|
17
18
|
status: 'inspected';
|
|
18
19
|
state: import("../domain/governance/activation/types.js").UserActivationState;
|
|
19
20
|
snapshot: import("./inputs.js").ActivationInputSnapshot;
|
|
20
|
-
contexts: Record<"activation-approved" | "application-foundation" | "bootstrap-local" | "bootstrap-state-disposed" | "committed" | "credential-ready" | "dev-proof" | "enforcement-approved" | "existing-private-path" | "green-red-proof" | "live-readback" | "phase-0-complete" | "private-backend-proof" | "production-rehearsed" | "provider-ready" | "pushed" | "remote-import-verified" | "remote-ready" | "rulesets-applied" | "runner-ready" | "seed-archived" | "seed-valid" | "seed-verified" | "staging-qualified" | "state-path-selected" | "workflow-source-ready", import("../domain/governance/activation/evidence.js").EvidenceFreshnessContext>;
|
|
21
|
+
contexts: Record<"activation-approved" | "application-artifact-ready" | "application-foundation" | "application-prerequisites-ready" | "bootstrap-local" | "bootstrap-state-disposed" | "bootstrap-workflow-source-ready" | "committed" | "credential-ready" | "dev-proof" | "enforcement-approved" | "existing-private-path" | "green-red-proof" | "live-readback" | "phase-0-complete" | "private-backend-proof" | "production-rehearsed" | "provider-ready" | "pushed" | "remote-import-verified" | "remote-ready" | "rulesets-applied" | "runner-ready" | "seed-archived" | "seed-valid" | "seed-verified" | "staging-qualified" | "state-path-selected" | "workflow-source-ready", import("../domain/governance/activation/evidence.js").EvidenceFreshnessContext>;
|
|
21
22
|
records: import("../domain/governance/activation/types.js").PhaseEvidenceRecord[];
|
|
22
23
|
selections: {
|
|
23
24
|
[k: string]: import("../domain/governance/activation/evidence.js").EvidenceSelectionResult;
|
|
24
25
|
};
|
|
26
|
+
historicalLifecycleObligations: import("./migration-history.js").HistoricalLifecycleObligation[];
|
|
25
27
|
migration: import("./history-contracts.js").MigrationJournal | null;
|
|
26
28
|
}>;
|
|
27
29
|
export { evidenceBodyDigest, evidenceHeaderDigest, selectLatestPhaseEvidence, validateEvidenceFreshness } from '../domain/governance/activation/evidence.js';
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { loadActivationState } from './activation-state.js';
|
|
2
|
-
import { activationEvidenceContexts, readActivationInputSnapshot } from './inputs.js';
|
|
2
|
+
import { activationEvidenceContexts, activationSensitivePathExclusions, readActivationInputSnapshot } from './inputs.js';
|
|
3
3
|
import { canonicalPhaseGraph } from '../domain/governance/activation/graph.js';
|
|
4
|
-
import { selectLatestPhaseEvidence } from '../domain/governance/activation/evidence.js';
|
|
4
|
+
import { assertPhaseOutputsBound, selectLatestPhaseEvidence } from '../domain/governance/activation/evidence.js';
|
|
5
5
|
import { validateManifestActivationForExecution } from '../domain/governance/activation/validators.js';
|
|
6
6
|
import { phaseIds } from '../domain/governance/activation/types.js';
|
|
7
7
|
import { readActivationEvidence, readReviewedTransitionPlans } from './proof-records.js';
|
|
@@ -14,16 +14,20 @@ export async function inspectCurrentActivationEvidence(projectRoot, manifest, op
|
|
|
14
14
|
if (!loaded)
|
|
15
15
|
return { status: 'not-started' };
|
|
16
16
|
const migration = await inspectActivationMigrationHistory(projectRoot);
|
|
17
|
-
const
|
|
17
|
+
const historicalLifecycleObligations = migration.status === 'committed' ? migration.lifecycleObligations : [];
|
|
18
|
+
const sensitivePathExclusions = activationSensitivePathExclusions(loaded.state, historicalLifecycleObligations.map((obligation) => obligation.retention));
|
|
19
|
+
const snapshot = await readActivationInputSnapshot(projectRoot, manifest, options.runner, { sensitivePathExclusions });
|
|
18
20
|
const contexts = activationEvidenceContexts(canonicalPhaseGraph, loaded.state, snapshot, options.now);
|
|
19
21
|
const plans = await readReviewedTransitionPlans(projectRoot);
|
|
20
22
|
const records = await readActivationEvidence(projectRoot);
|
|
23
|
+
assertPhaseOutputsBound(loaded.state, records);
|
|
21
24
|
for (const phaseId of phaseIds)
|
|
22
25
|
contexts[phaseId].reviewedPlans = plans;
|
|
23
26
|
const selections = Object.fromEntries(phaseIds.map((phaseId) => [phaseId,
|
|
24
27
|
selectLatestPhaseEvidence(records.filter((record) => record.header.phaseId === phaseId), contexts[phaseId])]));
|
|
25
28
|
return {
|
|
26
29
|
status: 'inspected', state: loaded.state, snapshot, contexts, records, selections,
|
|
30
|
+
historicalLifecycleObligations,
|
|
27
31
|
migration: migration.status === 'committed' ? migration.journal : null
|
|
28
32
|
};
|
|
29
33
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"read-only.js","sourceRoot":"","sources":["../../src/governance-activation/read-only.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"read-only.js","sourceRoot":"","sources":["../../src/governance-activation/read-only.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AACzH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACjH,OAAO,EAAE,sCAAsC,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEzF,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,WAAmB,EAAE,QAAyB,EAAE,OAAO,GAA2C,EAAE;IACzJ,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,8BAA8B,GAAG,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,MAAM,uBAAuB,GAAG,iCAAiC,CAAC,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1J,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACvH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC1D,uBAAuB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO;QACtE,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,OAAO;QACL,MAAM,EAAE,WAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU;QAC1F,8BAA8B;QAC9B,SAAS,EAAE,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;KACvE,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7J,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAEtF,OAAO,EAAE,aAAa,EAAwB,MAAM,+CAA+C,CAAC"}
|
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
import { canonicalPhaseGraph, canonicalPhaseGraphHash, phaseContractDigests } from '../domain/governance/activation/graph.js';
|
|
2
2
|
import { phaseIds } from '../domain/governance/activation/types.js';
|
|
3
3
|
import { validateGraphReconciliationRecord } from '../domain/governance/activation/validators.js';
|
|
4
|
+
import { canonicalSha256 } from '../domain/governance/activation/canonical-json.js';
|
|
5
|
+
import { isHistoricalActivationIdentity } from '../domain/governance/policy/identity.js';
|
|
4
6
|
function descendantsOf(graph, changed) {
|
|
5
7
|
const descendants = new Set(changed);
|
|
6
8
|
let changedDuringPass = true;
|
|
@@ -35,6 +37,14 @@ export function calculateGraphReconciliation(value, options = {}) {
|
|
|
35
37
|
const toGraph = options.toGraph ?? canonicalPhaseGraph;
|
|
36
38
|
const recognizedGraphHashes = options.recognizedGraphHashes ?? new Set([canonicalPhaseGraphHash]);
|
|
37
39
|
const record = validateGraphReconciliationRecord(value, recognizedGraphHashes);
|
|
40
|
+
if (isHistoricalActivationIdentity(record.fromIdentity) || isHistoricalActivationIdentity(record.toIdentity) ||
|
|
41
|
+
Object.keys(record.fromIdentity).some((field) => field !== 'phaseGraphHash' &&
|
|
42
|
+
record.fromIdentity[field] !== record.toIdentity[field])) {
|
|
43
|
+
throw new Error('Graph reconciliation cannot translate historical activation authority; use the declared history-preserving successor.');
|
|
44
|
+
}
|
|
45
|
+
if (canonicalSha256(fromGraph) !== record.fromGraphHash || canonicalSha256(toGraph) !== record.toGraphHash) {
|
|
46
|
+
throw new Error('Graph reconciliation must bind the actual independently recognized source and target graphs.');
|
|
47
|
+
}
|
|
38
48
|
assertMappingMatchesGraph(record, fromGraph, toGraph);
|
|
39
49
|
const directlyChanged = new Set(record.phaseMappings
|
|
40
50
|
.filter((mapping) => !mapping.preserveEvidence || mapping.fromContractDigest !== mapping.toContractDigest)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"reconciliation.js","sourceRoot":"","sources":["../../src/governance-activation/reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAM9H,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;
|
|
1
|
+
{"version":3,"file":"reconciliation.js","sourceRoot":"","sources":["../../src/governance-activation/reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAM9H,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,mDAAmD,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAQzF,SAAS,aAAa,CAAC,KAAwB,EAAE,OAA6B;IAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAU,OAAO,CAAC,CAAC;IAC9C,IAAI,iBAAiB,GAAG,IAAI,CAAC;IAC7B,OAAO,iBAAiB,EAAE,CAAC;QACzB,iBAAiB,GAAG,KAAK,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAiC,EACjC,SAA4B,EAC5B,OAA0B;IAE1B,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,iEAAiE,CAAC,CAAC;QACjI,CAAC;QACD,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,+DAA+D,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAAO,GAIH,EAAE;IAEN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC;IACvD,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC/E,IAAI,8BAA8B,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,8BAA8B,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1G,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,gBAAgB;YACzE,MAAM,CAAC,YAAY,CAAC,KAAyC,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,KAAuC,CAAC,CAAC,EAAE,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,aAAa,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,aAAa;SACjB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;SACzG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CACrC,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAChF,OAAO,OAAO,KAAK,SAAS;YAC1B,OAAO,CAAC,gBAAgB;YACxB,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,iBAAiB,EAAE,SAAS;QAC5B,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;AACJ,CAAC"}
|