@msn-control/liftoff 0.9.9 → 0.10.0

package/dist/governance-activation/approvals.d.ts

@@ -0,0 +1,188 @@
+import type { ApprovalCostCeiling, ApprovalDestinationScope, ApprovalEnvelope, ApprovalEvaluation, ApprovalGateKind, ApprovalResourceScope, EvidenceTransitionIdentity, HumanAuthorityQuestionKind, PhaseGraphNode, RequestedTransitionPlan, UserActivationState } from './types.js';
+type ApprovalScope = ApprovalEnvelope | RequestedTransitionPlan;
+export declare const approvalEnvelopeV1Schema: {
+    readonly $schema: 'https://json-schema.org/draft/2020-12/schema';
+    readonly $id: 'https://mission-control.local/liftoff/governance/approval-envelope.schema.v1.json';
+    readonly title: 'Liftoff governance approval envelope v1';
+    readonly type: 'object';
+    readonly additionalProperties: false;
+    readonly required: readonly ['schemaVersion', 'id', 'phaseId', 'gateKind', 'identity', 'baselineSha', 'planDigest', 'resources', 'destinations', 'permissions', 'costCeiling', 'policyExceptions', 'destructiveScope', 'expiresAt', 'approvedAt', 'approver'];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: number;
+        };
+        readonly id: {
+            readonly type: 'string';
+            readonly minLength: 1;
+        };
+        readonly phaseId: {
+            readonly type: 'string';
+        };
+        readonly gateKind: {
+            readonly type: 'string';
+        };
+        readonly identity: {
+            readonly type: 'object';
+            readonly additionalProperties: false;
+            readonly required: string[];
+            readonly properties: {
+                liftoffVersion: {
+                    const: string;
+                };
+                manifestArtifactVersion: {
+                    const: number;
+                };
+                policyVersion: {
+                    const: string;
+                };
+                activationContractVersion: {
+                    const: number;
+                };
+                phaseGraphSchemaVersion: {
+                    const: number;
+                };
+                phaseGraphHash: {
+                    const: string;
+                };
+                activationStateSchemaVersion: {
+                    const: number;
+                };
+                evidenceHeaderSchemaVersion: {
+                    const: number;
+                };
+                approvalEnvelopeSchemaVersion: {
+                    const: number;
+                };
+                supersessionSchemaVersion: {
+                    const: number;
+                };
+                credentialPolicySchemaVersion: {
+                    const: number;
+                };
+            };
+        };
+        readonly baselineSha: {
+            readonly type: 'string';
+            readonly pattern: '^[a-f0-9]{64}$';
+        };
+        readonly planDigest: {
+            readonly type: 'string';
+            readonly pattern: '^[a-f0-9]{64}$';
+        };
+        readonly resources: {
+            readonly type: 'array';
+            readonly items: {
+                readonly type: 'object';
+                readonly additionalProperties: false;
+                readonly required: readonly ['type', 'identity'];
+                readonly properties: {
+                    readonly type: {
+                        readonly type: 'string';
+                        readonly minLength: 1;
+                    };
+                    readonly identity: {
+                        readonly type: 'string';
+                        readonly minLength: 1;
+                    };
+                };
+            };
+        };
+        readonly destinations: {
+            readonly type: 'array';
+            readonly items: {
+                readonly type: 'object';
+                readonly additionalProperties: false;
+                readonly required: readonly ['type', 'identity', 'repository', 'subscriptionId'];
+                readonly properties: {
+                    readonly type: {
+                        readonly enum: readonly ['repository', 'subscription', 'environment', 'tenant', 'local', 'external'];
+                    };
+                    readonly identity: {
+                        readonly type: 'string';
+                        readonly minLength: 1;
+                    };
+                    readonly repository: {
+                        readonly type: readonly ['string', 'null'];
+                    };
+                    readonly subscriptionId: {
+                        readonly type: readonly ['string', 'null'];
+                    };
+                };
+            };
+        };
+        readonly permissions: {
+            readonly type: 'array';
+            readonly items: {
+                readonly type: 'string';
+                readonly minLength: 1;
+            };
+        };
+        readonly costCeiling: {
+            readonly type: 'object';
+            readonly additionalProperties: false;
+            readonly required: readonly ['currency', 'fixedMonthlyCents', 'usageMonthlyCents'];
+            readonly properties: {
+                readonly currency: {
+                    readonly type: 'string';
+                    readonly pattern: '^[A-Z]{3}$';
+                };
+                readonly fixedMonthlyCents: {
+                    readonly type: 'integer';
+                    readonly minimum: 0;
+                };
+                readonly usageMonthlyCents: {
+                    readonly type: 'integer';
+                    readonly minimum: 0;
+                };
+            };
+        };
+        readonly policyExceptions: {
+            readonly type: 'array';
+            readonly items: {
+                readonly type: 'string';
+                readonly minLength: 1;
+            };
+        };
+        readonly destructiveScope: {
+            readonly type: 'array';
+            readonly items: {
+                readonly type: 'string';
+                readonly minLength: 1;
+            };
+        };
+        readonly expiresAt: {
+            readonly type: 'string';
+            readonly format: 'date-time';
+        };
+        readonly approvedAt: {
+            readonly type: 'string';
+            readonly format: 'date-time';
+        };
+        readonly approver: {
+            readonly type: 'string';
+            readonly minLength: 1;
+        };
+    };
+};
+export declare function normalizeApprovalCostCeiling(cost: ApprovalCostCeiling): ApprovalCostCeiling;
+export declare function normalizeApprovalResources(resources: readonly ApprovalResourceScope[]): ApprovalResourceScope[];
+export declare function normalizeApprovalDestinations(destinations: readonly ApprovalDestinationScope[]): ApprovalDestinationScope[];
+export declare function normalizeApprovalPermissions(permissions: readonly string[]): string[];
+export declare function normalizeApprovalPolicyExceptions(exceptions: readonly string[]): string[];
+export declare function normalizeApprovalDestructiveScope(scope: readonly string[]): string[];
+export declare function normalizeApprovalScope(scope: ApprovalScope): RequestedTransitionPlan;
+/**
+ * Returns the hashable approval scope. Explicit approver, approval time, and
+ * envelope id are audit metadata and are intentionally excluded; changing them
+ * cannot force an implementation/API-shape retry to ask again.
+ */
+export declare function canonicalApprovalEnvelopeScope(envelope: ApprovalEnvelope): Record<string, unknown>;
+export declare function canonicalApprovalEnvelopeHash(envelope: ApprovalEnvelope): string;
+export declare const approvalEnvelopeHash: typeof canonicalApprovalEnvelopeHash;
+export declare function questionKindForApprovalGate(gateKind: ApprovalGateKind): HumanAuthorityQuestionKind | null;
+export declare function determineHumanAuthorityQuestion(plan: RequestedTransitionPlan): HumanAuthorityQuestionKind | null;
+export declare function evaluateApprovalForTransitionPlan(plan: RequestedTransitionPlan, envelopes: readonly ApprovalEnvelope[], options?: {
+    now?: Date;
+}): ApprovalEvaluation;
+export declare function transitionPlanForPhase(phase: PhaseGraphNode, state: UserActivationState, transition: EvidenceTransitionIdentity, _projectRoot?: string): RequestedTransitionPlan;
+export {};