@msn-control/liftoff 0.9.8 → 0.10.0

package/dist/governance-activation/types.js

@@ -0,0 +1,108 @@
+export const phaseIds = [
+    'seed-valid',
+    'seed-verified',
+    'seed-archived',
+    'committed',
+    'pushed',
+    'phase-0-complete',
+    'activation-approved',
+    'credential-ready',
+    'provider-ready',
+    'state-path-selected',
+    'existing-private-path',
+    'bootstrap-local',
+    'runner-ready',
+    'private-backend-proof',
+    'remote-import-verified',
+    'remote-ready',
+    'application-foundation',
+    'workflow-source-ready',
+    'dev-proof',
+    'staging-qualified',
+    'production-rehearsed',
+    'green-red-proof',
+    'enforcement-approved',
+    'rulesets-applied',
+    'live-readback',
+    'bootstrap-state-disposed'
+];
+export const phaseStates = [
+    'pending',
+    'blocked',
+    'ready',
+    'approved',
+    'running',
+    'verified',
+    'failed',
+    'inapplicable',
+    'retained',
+    'disposed'
+];
+export const mutationClasses = [
+    'none',
+    'read-worktree',
+    'write-activation-state',
+    'write-evidence',
+    'write-openspec-seed',
+    'write-openspec-governance',
+    'write-local-state',
+    'delete-local-state',
+    'write-workflows',
+    'write-ruleset-source',
+    'git-commit',
+    'git-push',
+    'github-read',
+    'github-write',
+    'github-secret-write',
+    'azure-read',
+    'azure-provider-register',
+    'azure-network-provision',
+    'azure-state-import',
+    'azure-resource-provision',
+    'github-ruleset-write'
+];
+export const approvalGateKinds = [
+    'none',
+    'repository-publish',
+    'activation-plan',
+    'credential-enrollment',
+    'infrastructure-cost',
+    'enforcement',
+    'destructive-disposal',
+    'external-blocker'
+];
+export const humanAuthorityQuestionKinds = [
+    'repository-creation-initial-commit-push',
+    'credential-enrollment',
+    'billed-infrastructure-policy-exception-cost-ceiling',
+    'final-enforcement',
+    'destructive-operation',
+    'external-blocker'
+];
+export const invalidationInputKinds = [
+    'activation-identity',
+    'graph-hash',
+    'baseline-sha',
+    'project-files',
+    'policy',
+    'approval-envelope',
+    'credentials',
+    'provider-inventory',
+    'runner-inventory',
+    'remote-state',
+    'workflow-source',
+    'live-readback',
+    'security-evidence',
+    'ruleset-readback'
+];
+export const rollbackKinds = ['none', 'retain', 'reverse-to', 'dispose'];
+export const runnerPreflightDisplayNameTemplate = '<repo>-runner-preflight-read';
+export const runnerPreflightSecretName = 'RUNNER_CONFIGURATION_READ_TOKEN';
+export const runnerPreflightPatLifetimeDays = 30;
+export const runnerPreflightRotationLeadDays = 7;
+export const runnerPreflightRepositoryPermissions = ['metadata:read'];
+export const runnerPreflightOrganizationPermissions = [
+    'hosted-runners:read',
+    'network-configurations:read'
+];
+//# sourceMappingURL=types.js.map

package/dist/governance-activation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/governance-activation/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY;IACZ,eAAe;IACf,eAAe;IACf,WAAW;IACX,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,iBAAiB;IACjB,cAAc;IACd,uBAAuB;IACvB,wBAAwB;IACxB,cAAc;IACd,wBAAwB;IACxB,uBAAuB;IACvB,WAAW;IACX,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;IAClB,eAAe;IACf,0BAA0B;CAClB,CAAC;AAIX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS;IACT,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,QAAQ;IACR,cAAc;IACd,UAAU;IACV,UAAU;CACF,CAAC;AAQX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM;IACN,eAAe;IACf,wBAAwB;IACxB,gBAAgB;IAChB,qBAAqB;IACrB,2BAA2B;IAC3B,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,YAAY;IACZ,UAAU;IACV,aAAa;IACb,cAAc;IACd,qBAAqB;IACrB,YAAY;IACZ,yBAAyB;IACzB,yBAAyB;IACzB,oBAAoB;IACpB,0BAA0B;IAC1B,sBAAsB;CACd,CAAC;AAIX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,qBAAqB;IACrB,aAAa;IACb,sBAAsB;IACtB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,yCAAyC;IACzC,uBAAuB;IACvB,qDAAqD;IACrD,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,qBAAqB;IACrB,YAAY;IACZ,cAAc;IACd,eAAe;IACf,QAAQ;IACR,mBAAmB;IACnB,aAAa;IACb,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC;AAgWlF,MAAM,CAAC,MAAM,kCAAkC,GAAG,8BAAuC,CAAC;AAC1F,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAA0C,CAAC;AACpF,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAW,CAAC;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAU,CAAC;AAC1D,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,eAAe,CAAU,CAAC;AAC/E,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,qBAAqB;IACrB,6BAA6B;CACrB,CAAC"}

package/dist/governance-activation/validators.d.ts

@@ -0,0 +1,17 @@
+import type { ActivationIdentity, ApprovalEnvelope, CredentialPolicy, EvidenceHeader, GraphReconciliationRecord, LiveReadbackProof, ManagedPhaseGraph, SavedTransitionPlan, SupersessionRecord, UserActivationState } from './types.js';
+export declare function validateActivationIdentity(value: unknown): ActivationIdentity;
+export declare function validateManagedPhaseGraph(value: unknown): ManagedPhaseGraph;
+export declare function assertCanonicalGraphValid(): void;
+export declare function validateUserActivationState(value: unknown): UserActivationState;
+export declare function validateEvidenceHeader(value: unknown): EvidenceHeader;
+export declare function validateLiveReadbackProof(value: unknown): LiveReadbackProof;
+export declare function validateApprovalEnvelope(value: unknown, options?: {
+    expectedIdentity?: ActivationIdentity;
+    now?: Date;
+    requireUnexpired?: boolean;
+}): ApprovalEnvelope;
+export declare function validateSavedTransitionPlan(value: unknown): SavedTransitionPlan;
+export declare function validateSupersessionRecord(value: unknown): SupersessionRecord;
+export declare function validateGraphReconciliationRecord(value: unknown, recognizedGraphHashes?: ReadonlySet<string>): GraphReconciliationRecord;
+export declare function validateCredentialPolicy(value: unknown): CredentialPolicy;
+export declare function validFixtureIdentity(): ActivationIdentity;