@msn-control/liftoff 0.9.8 → 0.10.0

package/dist/governance-activation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance-activation/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC"}

package/dist/governance-activation/migration.d.ts

@@ -0,0 +1,44 @@
+import { type HistoricalActivationStateMigration } from './compatibility.js';
+import { type ActivationCompatibilityMap } from './identity.js';
+import type { ActivationIdentity, PhaseId } from './types.js';
+import { type ProjectFileMutation, type ProjectFileSnapshot } from '../file-system.js';
+export declare const updateFailureInjectionEnv: 'LIFTOFF_UPDATE_INJECT_FAILURE';
+export type ActivationStateMigrationPlan = {
+    status: 'not-present' | 'current';
+    mutations: readonly ProjectFileMutation[];
+    preconditions: readonly ProjectFileSnapshot[];
+    report: ActivationStateMigrationReport;
+} | {
+    status: 'migrate';
+    mutations: readonly ProjectFileMutation[];
+    preconditions: readonly ProjectFileSnapshot[];
+    report: ActivationStateMigrationReport & {
+        fromIdentity: ActivationIdentity;
+        toIdentity: ActivationIdentity;
+        reconciliationPath: string;
+        preservedPhaseIds: readonly PhaseId[];
+        invalidPhaseIds: readonly PhaseId[];
+    };
+} | {
+    status: 'blocked';
+    mutations: readonly ProjectFileMutation[];
+    preconditions: readonly ProjectFileSnapshot[];
+    report: ActivationStateMigrationReport & {
+        reasonCode: 'ad-hoc-state' | 'future-state-schema' | 'unsupported-activation-identity' | 'malformed-state' | 'reconciliation-conflict';
+        issues: readonly string[];
+    };
+};
+export interface ActivationStateMigrationReport {
+    path: string;
+    status: 'not-present' | 'current' | 'migrate' | 'blocked';
+    checkModeWritesBytes: 0;
+    evidencePolicy: 'preserve-bytes';
+    unversionedImport: 'requires-explicit-import-mapping';
+    issues: readonly string[];
+}
+export interface ActivationStateMigrationMappingInput {
+    compatibility?: ActivationCompatibilityMap;
+    historicalStateMigrations?: readonly HistoricalActivationStateMigration[];
+}
+export declare function planHistoricalActivationStateMigration(projectRoot: string, nowIso?: string, mappingInput?: ActivationStateMigrationMappingInput): Promise<ActivationStateMigrationPlan>;
+export declare function activationStateMigrationFingerprint(content: string | Buffer): string;

package/dist/governance-activation/migration.js

@@ -0,0 +1,268 @@
+import { activationStateContentHash, activationStateFilePathParts, loadActivationState } from './activation-state.js';
+import { canonicalJson } from './canonical-json.js';
+import { graphReconciliationRecordFromMapping } from './compatibility.js';
+import { activationCompatibility, currentActivationIdentity } from './graph.js';
+import { activationStateSchemaVersion, resolveActivationCompatibility } from './identity.js';
+import { phaseIds } from './types.js';
+import { validateGraphReconciliationRecord, validateUserActivationState } from './validators.js';
+import { captureProjectFileSnapshot, readProjectFile } from '../file-system.js';
+export const updateFailureInjectionEnv = 'LIFTOFF_UPDATE_INJECT_FAILURE';
+const identityFields = [
+    'liftoffVersion',
+    'manifestArtifactVersion',
+    'policyVersion',
+    'activationContractVersion',
+    'phaseGraphSchemaVersion',
+    'phaseGraphHash',
+    'activationStateSchemaVersion',
+    'evidenceHeaderSchemaVersion',
+    'approvalEnvelopeSchemaVersion',
+    'supersessionSchemaVersion',
+    'credentialPolicySchemaVersion'
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function sameIdentity(left, right) {
+    return identityFields.every((field) => left[field] === right[field]);
+}
+function looseIdentity(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    for (const field of identityFields) {
+        if (!Object.hasOwn(value, field)) {
+            return undefined;
+        }
+    }
+    const identity = value;
+    if (typeof identity.liftoffVersion !== 'string' ||
+        typeof identity.manifestArtifactVersion !== 'number' ||
+        typeof identity.policyVersion !== 'string' ||
+        typeof identity.activationContractVersion !== 'number' ||
+        typeof identity.phaseGraphSchemaVersion !== 'number' ||
+        typeof identity.phaseGraphHash !== 'string' ||
+        typeof identity.activationStateSchemaVersion !== 'number' ||
+        typeof identity.evidenceHeaderSchemaVersion !== 'number' ||
+        typeof identity.approvalEnvelopeSchemaVersion !== 'number' ||
+        typeof identity.supersessionSchemaVersion !== 'number' ||
+        typeof identity.credentialPolicySchemaVersion !== 'number') {
+        return undefined;
+    }
+    return {
+        liftoffVersion: identity.liftoffVersion,
+        manifestArtifactVersion: identity.manifestArtifactVersion,
+        policyVersion: identity.policyVersion,
+        activationContractVersion: identity.activationContractVersion,
+        phaseGraphSchemaVersion: identity.phaseGraphSchemaVersion,
+        phaseGraphHash: identity.phaseGraphHash,
+        activationStateSchemaVersion: identity.activationStateSchemaVersion,
+        evidenceHeaderSchemaVersion: identity.evidenceHeaderSchemaVersion,
+        approvalEnvelopeSchemaVersion: identity.approvalEnvelopeSchemaVersion,
+        supersessionSchemaVersion: identity.supersessionSchemaVersion,
+        credentialPolicySchemaVersion: identity.credentialPolicySchemaVersion
+    };
+}
+function blocked(reasonCode, issues) {
+    return {
+        status: 'blocked',
+        mutations: [],
+        preconditions: [],
+        report: {
+            path: activationStateFilePathParts.join('/'),
+            status: 'blocked',
+            checkModeWritesBytes: 0,
+            evidencePolicy: 'preserve-bytes',
+            unversionedImport: 'requires-explicit-import-mapping',
+            reasonCode,
+            issues
+        }
+    };
+}
+function unchanged(status) {
+    return {
+        status,
+        mutations: [],
+        preconditions: [],
+        report: {
+            path: activationStateFilePathParts.join('/'),
+            status,
+            checkModeWritesBytes: 0,
+            evidencePolicy: 'preserve-bytes',
+            unversionedImport: 'requires-explicit-import-mapping',
+            issues: []
+        }
+    };
+}
+function phaseImpact(record) {
+    const preserved = record.phaseMappings
+        .filter((mapping) => mapping.preserveEvidence && mapping.fromContractDigest === mapping.toContractDigest)
+        .map((mapping) => mapping.phaseId);
+    const invalid = phaseIds.filter((phaseId) => !preserved.includes(phaseId));
+    return { preservedPhaseIds: preserved, invalidPhaseIds: invalid };
+}
+function matchingHistoricalStateMigration(identity, migrations) {
+    return migrations.find((migration) => sameIdentity(migration.fromIdentity, identity) &&
+        sameIdentity(migration.toIdentity, currentActivationIdentity));
+}
+export async function planHistoricalActivationStateMigration(projectRoot, nowIso = new Date().toISOString(), mappingInput = {}) {
+    const bytes = await readProjectFile(projectRoot, [...activationStateFilePathParts]);
+    if (bytes === undefined) {
+        return unchanged('not-present');
+    }
+    const content = bytes.toString('utf8');
+    const snapshot = await captureProjectFileSnapshot(projectRoot, [...activationStateFilePathParts]);
+    try {
+        await loadActivationState(projectRoot);
+        return unchanged('current');
+    }
+    catch {
+        // Re-parse below to distinguish supported historical state from ad hoc files.
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch (error) {
+        return blocked('malformed-state', [
+            `Unable to parse governance/activation-state.json: ${errorMessage(error)}. Restore a valid versioned state or provide an explicit import mapping.`
+        ]);
+    }
+    if (!isRecord(parsed)) {
+        return blocked('ad-hoc-state', [
+            'governance/activation-state.json is not a JSON object; checkboxes, filenames, and prose are not evidence. Provide an explicit import mapping.'
+        ]);
+    }
+    if (!Object.hasOwn(parsed, 'schemaVersion') || !Object.hasOwn(parsed, 'identity')) {
+        return blocked('ad-hoc-state', [
+            'governance/activation-state.json lacks explicit schemaVersion or identity. Unversioned/ad hoc state requires an explicit import mapping; checkboxes, filenames, and prose are not evidence.'
+        ]);
+    }
+    if (parsed.schemaVersion !== activationStateSchemaVersion) {
+        if (typeof parsed.schemaVersion === 'number' &&
+            parsed.schemaVersion > activationStateSchemaVersion) {
+            return blocked('future-state-schema', [
+                `Unsupported activationState.schemaVersion: found ${JSON.stringify(parsed.schemaVersion)}; supported values are ${activationStateSchemaVersion}. Upgrade Liftoff before writing.`
+            ]);
+        }
+        return blocked('unsupported-activation-identity', [
+            `Unsupported activationState.schemaVersion: found ${JSON.stringify(parsed.schemaVersion)}; supported values are ${activationStateSchemaVersion}. Explicit migration metadata is required.`
+        ]);
+    }
+    const identity = looseIdentity(parsed.identity);
+    if (!identity) {
+        return blocked('ad-hoc-state', [
+            'activationState.identity is absent or malformed. Explicit import mapping is required; task checkboxes, filenames, and prose cannot be imported as evidence.'
+        ]);
+    }
+    if (sameIdentity(identity, currentActivationIdentity)) {
+        return blocked('malformed-state', [
+            'Activation state uses the current identity but failed strict validation; preserve the bytes and repair the malformed state before writing.'
+        ]);
+    }
+    const migration = matchingHistoricalStateMigration(identity, mappingInput.historicalStateMigrations ?? []);
+    if (!migration) {
+        const compatibility = resolveActivationCompatibility(identity, mappingInput.compatibility ?? activationCompatibility);
+        const issue = compatibility.compatible
+            ? `Activation state identity is compatible but has no explicit historical migration mapping: found ${identity.phaseGraphHash}.`
+            : compatibility.reason;
+        return blocked('unsupported-activation-identity', [
+            `${issue} Production Liftoff 0.10.0 declares no historical activation-state mappings; provide an explicit compatibility/migration mapping or upgrade to a Liftoff release that declares one.`
+        ]);
+    }
+    if (migration.stateSchemaVersion !== activationStateSchemaVersion ||
+        migration.transaction !== 'managed-update-write-set' ||
+        migration.evidence !== 'preserve-bytes' ||
+        migration.unversionedImport !== 'requires-explicit-import-mapping' ||
+        migration.graphMapping.fromGraphHash !== migration.fromIdentity.phaseGraphHash ||
+        migration.graphMapping.toGraphHash !== migration.toIdentity.phaseGraphHash ||
+        !sameIdentity(migration.graphMapping.fromIdentity, migration.fromIdentity) ||
+        !sameIdentity(migration.graphMapping.toIdentity, migration.toIdentity)) {
+        return blocked('unsupported-activation-identity', [
+            'Explicit historical activation-state migration mapping is internally inconsistent. Provide schema-valid compatibility metadata before writing.'
+        ]);
+    }
+    const migratedCandidate = {
+        ...parsed,
+        identity: migration.toIdentity
+    };
+    let migrated;
+    try {
+        migrated = validateUserActivationState(migratedCandidate);
+    }
+    catch (error) {
+        return blocked('malformed-state', [
+            `Supported historical activation state failed strict migration validation: ${errorMessage(error)}.`
+        ]);
+    }
+    const mapping = migration.graphMapping;
+    const reconciliationCandidate = graphReconciliationRecordFromMapping(mapping, nowIso);
+    let reconciliation;
+    try {
+        reconciliation = validateGraphReconciliationRecord(reconciliationCandidate, new Set([mapping.fromGraphHash, mapping.toGraphHash]));
+    }
+    catch (error) {
+        return blocked('unsupported-activation-identity', [
+            `Explicit historical activation-state migration mapping is invalid: ${errorMessage(error)}.`
+        ]);
+    }
+    const reconciliationPathParts = [
+        'governance',
+        'reconciliation',
+        `${mapping.fromGraphHash.slice(0, 12)}-to-${mapping.toGraphHash.slice(0, 12)}.json`
+    ];
+    const reconciliationContent = `${canonicalJson(reconciliation)}\n`;
+    const existingReconciliation = await readProjectFile(projectRoot, reconciliationPathParts);
+    if (existingReconciliation !== undefined &&
+        existingReconciliation.toString('utf8') !== reconciliationContent) {
+        return blocked('reconciliation-conflict', [
+            `${reconciliationPathParts.join('/')} already exists with different bytes; preserve it and reconcile manually.`
+        ]);
+    }
+    const migratedContent = `${canonicalJson(migrated)}\n`;
+    const mutations = [
+        {
+            type: 'write',
+            pathParts: [...activationStateFilePathParts],
+            content: migratedContent
+        },
+        ...(existingReconciliation === undefined
+            ? [{
+                    type: 'write',
+                    pathParts: reconciliationPathParts,
+                    content: reconciliationContent
+                }]
+            : [])
+    ];
+    const impact = phaseImpact(reconciliation);
+    return {
+        status: 'migrate',
+        mutations,
+        preconditions: [
+            snapshot,
+            ...(existingReconciliation === undefined
+                ? [{ pathParts: reconciliationPathParts }]
+                : [{ pathParts: reconciliationPathParts, content: existingReconciliation }])
+        ],
+        report: {
+            path: activationStateFilePathParts.join('/'),
+            status: 'migrate',
+            checkModeWritesBytes: 0,
+            evidencePolicy: 'preserve-bytes',
+            unversionedImport: 'requires-explicit-import-mapping',
+            issues: [],
+            fromIdentity: migration.fromIdentity,
+            toIdentity: migration.toIdentity,
+            reconciliationPath: reconciliationPathParts.join('/'),
+            preservedPhaseIds: impact.preservedPhaseIds,
+            invalidPhaseIds: impact.invalidPhaseIds
+        }
+    };
+}
+export function activationStateMigrationFingerprint(content) {
+    return activationStateContentHash(content);
+}
+//# sourceMappingURL=migration.js.map

package/dist/governance-activation/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/governance-activation/migration.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,oCAAoC,EAErC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAE5B,8BAA8B,EAC/B,MAAM,eAAe,CAAC;AAOvB,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,iCAAiC,EACjC,2BAA2B,EAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,eAAe,EAGhB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAAwC,CAAC;AA6ClF,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,yBAAyB;IACzB,eAAe;IACf,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,KAAyB;IACvE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAyD,CAAC;IAC3E,IACE,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,OAAO,QAAQ,CAAC,uBAAuB,KAAK,QAAQ;QACpD,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;QAC1C,OAAO,QAAQ,CAAC,yBAAyB,KAAK,QAAQ;QACtD,OAAO,QAAQ,CAAC,uBAAuB,KAAK,QAAQ;QACpD,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,OAAO,QAAQ,CAAC,4BAA4B,KAAK,QAAQ;QACzD,OAAO,QAAQ,CAAC,2BAA2B,KAAK,QAAQ;QACxD,OAAO,QAAQ,CAAC,6BAA6B,KAAK,QAAQ;QAC1D,OAAO,QAAQ,CAAC,yBAAyB,KAAK,QAAQ;QACtD,OAAO,QAAQ,CAAC,6BAA6B,KAAK,QAAQ,EAC1D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;QAC7D,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;QACzD,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B;QACnE,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;QACjE,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;QACrE,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;QAC7D,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,UAAgG,EAChG,MAAyB;IAEzB,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,SAAS;YACjB,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,UAAU;YACV,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAiC;IAClD,OAAO;QACL,MAAM;QACN,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM;YACN,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,MAAM,EAAE,EAAE;SACX;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAiC;IAIpD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;SACnC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;SACxG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,gCAAgC,CACvC,QAA4B,EAC5B,UAAyD;IAEzD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC9C,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,WAAmB,EACnB,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACjC,YAAY,GAAyC,EAAE;IAEvD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,4BAA4B,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,WAAW,EAAE,CAAC,GAAG,4BAA4B,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,qDAAqD,YAAY,CAAC,KAAK,CAAC,0EAA0E;SACnJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,+IAA+I;SAChJ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,6LAA6L;SAC9L,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,4BAA4B,EAAE,CAAC;QAC1D,IACE,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,MAAM,CAAC,aAAa,GAAG,4BAA4B,EACnD,CAAC;YACD,OAAO,OAAO,CAAC,qBAAqB,EAAE;gBACpC,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,0BAA0B,4BAA4B,mCAAmC;aAClL,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,0BAA0B,4BAA4B,4CAA4C;SAC3L,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,cAAc,EAAE;YAC7B,6JAA6J;SAC9J,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACtD,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,4IAA4I;SAC7I,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,gCAAgC,CAChD,QAAQ,EACR,YAAY,CAAC,yBAAyB,IAAI,EAAE,CAC7C,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,8BAA8B,CAClD,QAAQ,EACR,YAAY,CAAC,aAAa,IAAI,uBAAuB,CACtD,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU;YACpC,CAAC,CAAC,mGAAmG,QAAQ,CAAC,cAAc,GAAG;YAC/H,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QACzB,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,GAAG,KAAK,qLAAqL;SAC9L,CAAC,CAAC;IACL,CAAC;IACD,IACE,SAAS,CAAC,kBAAkB,KAAK,4BAA4B;QAC7D,SAAS,CAAC,WAAW,KAAK,0BAA0B;QACpD,SAAS,CAAC,QAAQ,KAAK,gBAAgB;QACvC,SAAS,CAAC,iBAAiB,KAAK,kCAAkC;QAClE,SAAS,CAAC,YAAY,CAAC,aAAa,KAAK,SAAS,CAAC,YAAY,CAAC,cAAc;QAC9E,SAAS,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS,CAAC,UAAU,CAAC,cAAc;QAC1E,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC;QAC1E,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EACtE,CAAC;QACD,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,gJAAgJ;SACjJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG;QACxB,GAAG,MAAM;QACT,QAAQ,EAAE,SAAS,CAAC,UAAU;KAC/B,CAAC;IACF,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iBAAiB,EAAE;YAChC,6EAA6E,YAAY,CAAC,KAAK,CAAC,GAAG;SACpG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC;IACvC,MAAM,uBAAuB,GAAG,oCAAoC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,cAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,cAAc,GAAG,iCAAiC,CAChD,uBAAuB,EACvB,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,iCAAiC,EAAE;YAChD,sEAAsE,YAAY,CAAC,KAAK,CAAC,GAAG;SAC7F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,uBAAuB,GAAG;QAC9B,YAAY;QACZ,gBAAgB;QAChB,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;KACpF,CAAC;IACF,MAAM,qBAAqB,GAAG,GAAG,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC;IACnE,MAAM,sBAAsB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC3F,IACE,sBAAsB,KAAK,SAAS;QACpC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,qBAAqB,EACjE,CAAC;QACD,OAAO,OAAO,CAAC,yBAAyB,EAAE;YACxC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,2EAA2E;SAChH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvD,MAAM,SAAS,GAA0B;QACvC;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,CAAC,GAAG,4BAA4B,CAAC;YAC5C,OAAO,EAAE,eAAe;SACzB;QACD,GAAG,CAAC,sBAAsB,KAAK,SAAS;YACtC,CAAC,CAAC,CAAC;oBACC,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,uBAAuB;oBAClC,OAAO,EAAE,qBAAqB;iBAC/B,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,SAAS;QACT,aAAa,EAAE;YACb,QAAQ;YACR,GAAG,CAAC,sBAAsB,KAAK,SAAS;gBACtC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAgC,CAAC;gBACxE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,OAAO,EAAE,sBAAsB,EAAgC,CAAC,CAAC;SAC7G;QACD,MAAM,EAAE;YACN,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,MAAM,EAAE,SAAS;YACjB,oBAAoB,EAAE,CAAC;YACvB,cAAc,EAAE,gBAAgB;YAChC,iBAAiB,EAAE,kCAAkC;YACrD,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,kBAAkB,EAAE,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,OAAwB;IAC1E,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC"}

package/dist/governance-activation/readiness.d.ts

@@ -0,0 +1,23 @@
+import { type EvidenceFreshnessContext } from './evidence.js';
+import type { ActivationIdentity, ApprovalEnvelope, EvidenceHeader, ManagedPhaseGraph, PhaseEvidenceRecord, PhaseId, PhaseState, UserActivationState } from './types.js';
+export type PhaseReadiness = {
+    phaseId: PhaseId;
+    state: PhaseState | 'identity-incompatible';
+    blockers: readonly string[];
+};
+export interface ReadinessResult {
+    identityCompatible: boolean;
+    identityBlocker?: string;
+    phases: Record<PhaseId, PhaseReadiness>;
+    nextReadyPhase: PhaseId | null;
+}
+export interface ReadinessInput {
+    graph?: ManagedPhaseGraph;
+    state: UserActivationState;
+    approvals: readonly ApprovalEnvelope[];
+    evidence: readonly (EvidenceHeader | PhaseEvidenceRecord)[];
+    transitionContexts?: Partial<Record<PhaseId, EvidenceFreshnessContext>>;
+    identity?: ActivationIdentity;
+    now?: Date;
+}
+export declare function calculatePhaseReadiness(input: ReadinessInput): ReadinessResult;

package/dist/governance-activation/readiness.js

@@ -0,0 +1,158 @@
+import { activationCompatibility, canonicalPhaseGraph } from './graph.js';
+import { evidenceContextForPhase, requiredLiveReadbackProviders, selectLatestPhaseEvidence } from './evidence.js';
+import { resolveActivationCompatibility } from './identity.js';
+import { evaluateApprovalForTransitionPlan, transitionPlanForPhase } from './approvals.js';
+import { validateApprovalEnvelope } from './validators.js';
+function phaseMap(graph) {
+    return Object.fromEntries(graph.phases.map((phase) => [phase.id, phase]));
+}
+function applicabilityApplies(node, state) {
+    if (node.applicability.kind === 'always') {
+        return true;
+    }
+    if (node.applicability.discriminator === 'state-path') {
+        if (node.applicability.when === 'statePath=existing-private') {
+            return state.applicability.statePath === 'existing-private';
+        }
+        if (node.applicability.when === 'statePath=bootstrap-local') {
+            return state.applicability.statePath === 'bootstrap-local';
+        }
+        return state.applicability.statePath !== 'none';
+    }
+    if (node.applicability.discriminator === 'private-staging-dast') {
+        return state.applicability.privateStagingDast;
+    }
+    return state.applicability.credentialRequired;
+}
+function isPhaseEvidenceRecord(value) {
+    return typeof value === 'object' && value !== null && 'header' in value && 'evidenceId' in value;
+}
+function evidenceRecord(entry, index) {
+    if (isPhaseEvidenceRecord(entry)) {
+        return entry;
+    }
+    return {
+        evidenceId: `inline-${index}`,
+        header: entry
+    };
+}
+function rawRecordPhaseId(record) {
+    return typeof record.header.phaseId === 'string' ? record.header.phaseId : undefined;
+}
+function dependencySatisfied(dependency, calculated) {
+    return dependency.anyOf.some((phaseId) => {
+        const result = calculated[phaseId];
+        return result !== undefined &&
+            dependency.accepts.includes(result.state);
+    });
+}
+export function calculatePhaseReadiness(input) {
+    const graph = input.graph ?? canonicalPhaseGraph;
+    const identity = input.identity ?? input.state.identity;
+    const compatibility = resolveActivationCompatibility(identity, activationCompatibility);
+    const phases = {};
+    if (!compatibility.compatible) {
+        for (const phase of graph.phases) {
+            phases[phase.id] = {
+                phaseId: phase.id,
+                state: 'identity-incompatible',
+                blockers: [compatibility.reason]
+            };
+        }
+        return {
+            identityCompatible: false,
+            identityBlocker: compatibility.reason,
+            phases,
+            nextReadyPhase: null
+        };
+    }
+    const now = input.now ?? new Date();
+    const approvals = input.approvals.map((approval) => validateApprovalEnvelope(approval));
+    const evidence = input.evidence.map((entry, index) => evidenceRecord(entry, index));
+    const byId = phaseMap(graph);
+    for (const node of graph.phases) {
+        const stored = input.state.phases[node.id];
+        const blockers = [];
+        if (!applicabilityApplies(node, input.state)) {
+            phases[node.id] = { phaseId: node.id, state: 'inapplicable', blockers: [] };
+            continue;
+        }
+        const recordsForPhase = evidence.filter((record) => rawRecordPhaseId(record) === node.id);
+        const context = input.transitionContexts?.[node.id] ?? evidenceContextForPhase(node.id, {
+            repositoryId: input.state.repository.id,
+            identity,
+            liveReadbackProviders: requiredLiveReadbackProviders(node),
+            now
+        });
+        const selectedEvidence = selectLatestPhaseEvidence(recordsForPhase, context);
+        if (selectedEvidence.selected?.header.result === 'failed' || stored.state === 'failed') {
+            phases[node.id] = {
+                phaseId: node.id,
+                state: 'failed',
+                blockers: selectedEvidence.selected?.header.result === 'failed' ? [] : stored.blockers
+            };
+            continue;
+        }
+        if (selectedEvidence.selected) {
+            const foundEvidence = selectedEvidence.selected.header;
+            phases[node.id] = {
+                phaseId: node.id,
+                state: foundEvidence.result === 'retained' ? 'retained' : foundEvidence.result,
+                blockers: []
+            };
+            continue;
+        }
+        if (recordsForPhase.length > 0 && selectedEvidence.issues.length > 0) {
+            phases[node.id] = {
+                phaseId: node.id,
+                state: 'blocked',
+                blockers: selectedEvidence.issues.map((entry) => entry.message)
+            };
+            continue;
+        }
+        if (stored.state === 'running') {
+            phases[node.id] = { phaseId: node.id, state: 'running', blockers: [] };
+            continue;
+        }
+        if (stored.state === 'blocked' && stored.blockers.length > 0) {
+            phases[node.id] = { phaseId: node.id, state: 'blocked', blockers: stored.blockers };
+            continue;
+        }
+        if (node.id === 'bootstrap-state-disposed' &&
+            input.state.bootstrapState?.status === 'retained' &&
+            Date.parse(input.state.bootstrapState.disposeAfter) > now.getTime()) {
+            phases[node.id] = {
+                phaseId: node.id,
+                state: 'blocked',
+                blockers: [`Retained bootstrap state is not disposable until ${input.state.bootstrapState.disposeAfter}.`]
+            };
+            continue;
+        }
+        for (const dependency of node.dependencies) {
+            if (!dependencySatisfied(dependency, phases)) {
+                blockers.push(dependency.description);
+            }
+        }
+        if (node.approvalGate.required) {
+            const approval = evaluateApprovalForTransitionPlan(transitionPlanForPhase(byId[node.id], input.state, context.transition), approvals, { now });
+            if (approval.approvalRequired) {
+                blockers.push(`Approval gate ${node.approvalGate.kind} is not satisfied: ${approval.reasons.join('; ')}`);
+            }
+        }
+        if (blockers.length > 0) {
+            phases[node.id] = { phaseId: node.id, state: 'blocked', blockers };
+            continue;
+        }
+        if (stored.state === 'approved' && node.terminalStates.includes('approved')) {
+            phases[node.id] = { phaseId: node.id, state: 'approved', blockers: [] };
+            continue;
+        }
+        phases[node.id] = { phaseId: node.id, state: 'ready', blockers: [] };
+    }
+    return {
+        identityCompatible: true,
+        phases,
+        nextReadyPhase: graph.phases.find((phase) => phases[phase.id].state === 'ready')?.id ?? null
+    };
+}
+//# sourceMappingURL=readiness.js.map

package/dist/governance-activation/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/governance-activation/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,uBAAuB,EAEvB,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,iCAAiC,EACjC,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AAYxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAyB3D,SAAS,QAAQ,CAAC,KAAwB;IACxC,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAoC,CAAC;AAC/G,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAoB,EAAE,KAA0B;IAC5E,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,KAAK,kBAAkB,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,KAAK,iBAAiB,CAAC;QAC7D,CAAC;QACD,OAAO,KAAK,CAAC,aAAa,CAAC,SAAS,KAAK,MAAM,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,sBAAsB,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA2C;IACxE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,YAAY,IAAI,KAAK,CAAC;AACnG,CAAC;AAED,SAAS,cAAc,CAAC,KAA2C,EAAE,KAAa;IAChF,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO;QACL,UAAU,EAAE,UAAU,KAAK,EAAE;QAC7B,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA2B;IACnD,OAAO,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAkD,EAClD,UAA0C;IAE1C,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,MAAM,KAAK,SAAS;YACxB,UAAU,CAAC,OAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxD,MAAM,aAAa,GAAG,8BAA8B,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,EAAqC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG;gBACjB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,KAAK,EAAE,uBAAuB;gBAC9B,QAAQ,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;aACjC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,kBAAkB,EAAE,KAAK;YACzB,eAAe,EAAE,aAAa,CAAC,MAAM;YACrC,MAAM;YACN,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE;YACtF,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;YACvC,QAAQ;YACR,qBAAqB,EAAE,6BAA6B,CAAC,IAAI,CAAC;YAC1D,GAAG;SACJ,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;aACvF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,KAAK,EAAE,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;gBAC9E,QAAQ,EAAE,EAAE;aACb,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAChE,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACvE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpF,SAAS;QACX,CAAC;QACD,IACE,IAAI,CAAC,EAAE,KAAK,0BAA0B;YACtC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,KAAK,UAAU;YACjD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,EACnE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;gBAChB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,CAAC,oDAAoD,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,GAAG,CAAC;aAC3G,CAAC;YACF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,iCAAiC,CAChD,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,EACtE,SAAS,EACT,EAAE,GAAG,EAAE,CACR,CAAC;YACF,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CACX,iBAAiB,IAAI,CAAC,YAAY,CAAC,IAAI,sBAAsB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAK,IAAI,CAAC,cAAoC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACxE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,OAAO;QACL,kBAAkB,EAAE,IAAI;QACxB,MAAM;QACN,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,EAAE,IAAI,IAAI;KAC7F,CAAC;AACJ,CAAC"}

package/dist/governance-activation/reconciliation.d.ts

@@ -0,0 +1,11 @@
+import type { GraphReconciliationRecord, ManagedPhaseGraph, PhaseId } from './types.js';
+export interface GraphReconciliationResult {
+    record: GraphReconciliationRecord;
+    preservedPhaseIds: readonly PhaseId[];
+    invalidPhaseIds: readonly PhaseId[];
+}
+export declare function calculateGraphReconciliation(value: unknown, options?: {
+    fromGraph?: ManagedPhaseGraph;
+    toGraph?: ManagedPhaseGraph;
+    recognizedGraphHashes?: ReadonlySet<string>;
+}): GraphReconciliationResult;

package/dist/governance-activation/reconciliation.js

@@ -0,0 +1,58 @@
+import { canonicalPhaseGraph, canonicalPhaseGraphHash, phaseContractDigests } from './graph.js';
+import { phaseIds } from './types.js';
+import { validateGraphReconciliationRecord } from './validators.js';
+function descendantsOf(graph, changed) {
+    const descendants = new Set(changed);
+    let changedDuringPass = true;
+    while (changedDuringPass) {
+        changedDuringPass = false;
+        for (const node of graph.phases) {
+            if (descendants.has(node.id)) {
+                continue;
+            }
+            if (node.dependencies.some((dependency) => dependency.anyOf.some((phaseId) => descendants.has(phaseId)))) {
+                descendants.add(node.id);
+                changedDuringPass = true;
+            }
+        }
+    }
+    return descendants;
+}
+function assertMappingMatchesGraph(record, fromGraph, toGraph) {
+    const fromDigests = phaseContractDigests(fromGraph);
+    const toDigests = phaseContractDigests(toGraph);
+    for (const mapping of record.phaseMappings) {
+        if (fromDigests[mapping.phaseId] !== mapping.fromContractDigest) {
+            throw new Error(`graphReconciliation phase ${mapping.phaseId} fromContractDigest does not match the recognized source graph.`);
+        }
+        if (toDigests[mapping.phaseId] !== mapping.toContractDigest) {
+            throw new Error(`graphReconciliation phase ${mapping.phaseId} toContractDigest does not match the recognized target graph.`);
+        }
+    }
+}
+export function calculateGraphReconciliation(value, options = {}) {
+    const fromGraph = options.fromGraph ?? canonicalPhaseGraph;
+    const toGraph = options.toGraph ?? canonicalPhaseGraph;
+    const recognizedGraphHashes = options.recognizedGraphHashes ?? new Set([canonicalPhaseGraphHash]);
+    const record = validateGraphReconciliationRecord(value, recognizedGraphHashes);
+    assertMappingMatchesGraph(record, fromGraph, toGraph);
+    const directlyChanged = new Set(record.phaseMappings
+        .filter((mapping) => !mapping.preserveEvidence || mapping.fromContractDigest !== mapping.toContractDigest)
+        .map((mapping) => mapping.phaseId));
+    const invalid = descendantsOf(toGraph, directlyChanged);
+    const preserved = phaseIds.filter((phaseId) => {
+        if (invalid.has(phaseId)) {
+            return false;
+        }
+        const mapping = record.phaseMappings.find((entry) => entry.phaseId === phaseId);
+        return mapping !== undefined &&
+            mapping.preserveEvidence &&
+            mapping.fromContractDigest === mapping.toContractDigest;
+    });
+    return {
+        record,
+        preservedPhaseIds: preserved,
+        invalidPhaseIds: phaseIds.filter((phaseId) => invalid.has(phaseId))
+    };
+}
+//# sourceMappingURL=reconciliation.js.map

package/dist/governance-activation/reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.js","sourceRoot":"","sources":["../../src/governance-activation/reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAMhG,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAQpE,SAAS,aAAa,CAAC,KAAwB,EAAE,OAA6B;IAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAU,OAAO,CAAC,CAAC;IAC9C,IAAI,iBAAiB,GAAG,IAAI,CAAC;IAC7B,OAAO,iBAAiB,EAAE,CAAC;QACzB,iBAAiB,GAAG,KAAK,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAiC,EACjC,SAA4B,EAC5B,OAA0B;IAE1B,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,iEAAiE,CAAC,CAAC;QACjI,CAAC;QACD,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,OAAO,+DAA+D,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAAO,GAIH,EAAE;IAEN,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC;IACvD,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC/E,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,aAAa;SACjB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;SACzG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CACrC,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAChF,OAAO,OAAO,KAAK,SAAS;YAC1B,OAAO,CAAC,gBAAgB;YACxB,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,gBAAgB,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,iBAAiB,EAAE,SAAS;QAC5B,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/governance-activation/release-integrity.d.ts

@@ -0,0 +1,11 @@
+import type { ActivationIdentity, ManagedPhaseGraph } from './types.js';
+export interface ReleaseIntegrityInput {
+    previousGraph: ManagedPhaseGraph;
+    currentGraph: ManagedPhaseGraph;
+    previousIdentity: ActivationIdentity;
+    currentIdentity: ActivationIdentity & {
+        setupSkillVersion?: string;
+    };
+    compatibleGraphHashes: ReadonlyMap<string, string>;
+}
+export declare function validateReleaseIntegrity(input: ReleaseIntegrityInput): void;