@msn-control/liftoff 0.9.9 → 0.10.1

package/dist/governance-activation/graph.js

@@ -0,0 +1,441 @@
+import { canonicalJson, canonicalSha256, sha256Hex } from './canonical-json.js';
+import { activationContractVersion, approvalEnvelopeSchemaVersion, buildActivationCompatibilityMap, createActivationIdentity, evidenceHeaderSchemaVersion, governanceActivationPolicyVersion, liftoffActivationPackageVersion, phaseGraphSchemaVersion } from './identity.js';
+const terminalVerified = ['verified', 'failed'];
+const terminalApproved = ['approved', 'failed'];
+const terminalConditional = ['verified', 'failed', 'inapplicable'];
+function dep(anyOf, description) {
+    return { anyOf, accepts: ['approved', 'verified', 'inapplicable', 'retained', 'disposed'], description };
+}
+function mutations(local, remote = ['none']) {
+    const normalizedLocal = [...local];
+    if (normalizedLocal.includes('write-evidence') &&
+        !normalizedLocal.includes('write-activation-state')) {
+        normalizedLocal.push('write-activation-state');
+    }
+    return { local: normalizedLocal, remote };
+}
+function evidence(schema, required = true, liveReadbackProviders = []) {
+    return { schema, required, headerSchemaVersion: evidenceHeaderSchemaVersion, liveReadbackProviders };
+}
+function approval(kind, required) {
+    return { kind, required, envelopeSchemaVersion: approvalEnvelopeSchemaVersion };
+}
+function rollback(kind, target, description) {
+    return { kind, target, description };
+}
+export const canonicalPhaseGraph = {
+    schemaVersion: phaseGraphSchemaVersion,
+    versions: {
+        liftoffVersion: liftoffActivationPackageVersion,
+        policyVersion: governanceActivationPolicyVersion,
+        activationContractVersion,
+        phaseGraphSchemaVersion
+    },
+    phases: [
+        {
+            id: 'seed-valid',
+            label: 'Generated bootstrap seed is strict-valid',
+            dependencies: [],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['read-worktree', 'write-evidence']),
+            evidence: evidence('seed-valid.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['project-files', 'policy', 'activation-identity'],
+            rollback: rollback('none', null, 'No mutation is authorized by seed validation.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'seed-verified',
+            label: 'Generated bootstrap baseline checks are verified',
+            dependencies: [dep(['seed-valid'], 'Seed strict validation must pass first.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['read-worktree', 'write-evidence']),
+            evidence: evidence('seed-verified.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['project-files', 'activation-identity'],
+            rollback: rollback('none', null, 'A failed baseline leaves the seed active.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'seed-archived',
+            label: 'Generated bootstrap seed is synced and archived',
+            dependencies: [dep(['seed-verified'], 'Only a verified seed may be archived.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-openspec-seed', 'write-evidence']),
+            evidence: evidence('seed-archived.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['project-files', 'activation-identity'],
+            rollback: rollback('none', null, 'Archive failures keep the seed active.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'committed',
+            label: 'Initial repository baseline is committed',
+            dependencies: [dep(['seed-archived'], 'Generated seed must be complete before commit guidance.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['read-worktree', 'git-commit', 'write-evidence']),
+            evidence: evidence('committed.v1'),
+            approvalGate: approval('repository-publish', true),
+            invalidationInputs: ['baseline-sha', 'project-files', 'approval-envelope'],
+            rollback: rollback('none', null, 'Never rewrite a committed user history automatically.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'pushed',
+            label: 'Initial repository baseline is pushed',
+            dependencies: [dep(['committed'], 'Commit evidence precedes initial push.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['read-worktree', 'write-evidence'], ['git-push', 'github-read']),
+            evidence: evidence('pushed.v1'),
+            approvalGate: approval('repository-publish', true),
+            invalidationInputs: ['baseline-sha', 'approval-envelope'],
+            rollback: rollback('none', null, 'Never force-push, delete, or rewrite refs.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'phase-0-complete',
+            label: 'Read-only Phase 0 discovery is complete',
+            dependencies: [dep(['pushed'], 'Remote repository identity must be resolvable.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read', 'azure-read']),
+            evidence: evidence('phase-0-complete.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['baseline-sha', 'policy', 'live-readback'],
+            rollback: rollback('none', null, 'Discovery is read-only and can be refreshed.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'activation-approved',
+            label: 'Governance activation plan is approved',
+            dependencies: [dep(['phase-0-complete'], 'Approval reviews Phase 0 evidence.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-activation-state', 'write-evidence']),
+            evidence: evidence('activation-approved.v1', false),
+            approvalGate: approval('activation-plan', true),
+            invalidationInputs: ['baseline-sha', 'approval-envelope', 'policy'],
+            rollback: rollback('none', null, 'Approval expiry returns descendants to blocked.'),
+            terminalStates: terminalApproved
+        },
+        {
+            id: 'credential-ready',
+            label: 'Runner preflight credential policy is ready when required',
+            dependencies: [dep(['activation-approved'], 'Credential enrollment follows approved activation scope.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'credential-required',
+                when: 'credentialRequired=true',
+                inapplicableWhen: 'credentialRequired=false',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['github-secret-write', 'github-read']),
+            evidence: evidence('credential-ready.v1', true, ['github']),
+            approvalGate: approval('credential-enrollment', true),
+            invalidationInputs: ['credentials', 'approval-envelope', 'activation-identity'],
+            rollback: rollback('none', null, 'Leaked or expired credentials block use and require rotation.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'provider-ready',
+            label: 'Azure provider namespaces are terminal ready',
+            dependencies: [
+                dep(['activation-approved'], 'Provider readiness belongs to approved infrastructure scope.'),
+                dep(['credential-ready'], 'Runner preflight credential readiness or inapplicability precedes provider work.')
+            ],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'private-staging-dast',
+                when: 'privateStagingDast=true',
+                inapplicableWhen: 'privateStagingDast=false',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['azure-read', 'azure-provider-register']),
+            evidence: evidence('provider-ready.v1', true, ['azure']),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['provider-inventory', 'approval-envelope', 'policy'],
+            rollback: rollback('retain', null, 'Provider registrations are retained subscription capabilities.'),
+            terminalStates: ['verified', 'failed', 'inapplicable', 'retained']
+        },
+        {
+            id: 'state-path-selected',
+            label: 'Private state path is selected',
+            dependencies: [dep(['provider-ready'], 'Provider readiness precedes private state path selection.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'private-staging-dast',
+                when: 'privateStagingDast=true',
+                inapplicableWhen: 'privateStagingDast=false',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-activation-state', 'write-evidence'], ['azure-read']),
+            evidence: evidence('state-path-selected.v1'),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['remote-state', 'provider-inventory', 'approval-envelope'],
+            rollback: rollback('none', null, 'A changed path selection invalidates mutually exclusive descendants.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'existing-private-path',
+            label: 'Existing private backend management path is verified',
+            dependencies: [dep(['state-path-selected'], 'State path selection chooses this branch.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=existing-private',
+                inapplicableWhen: 'statePath!=existing-private',
+                exclusiveWith: ['bootstrap-local']
+            },
+            allowedMutations: mutations(['write-evidence'], ['azure-read']),
+            evidence: evidence('existing-private-path.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['remote-state', 'live-readback'],
+            rollback: rollback('none', null, 'Existing path verification is read-only.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'bootstrap-local',
+            label: 'Bounded local bootstrap creates access-establishing resources',
+            dependencies: [
+                dep(['provider-ready'], 'Provider readiness precedes local bootstrap.'),
+                dep(['state-path-selected'], 'State path selection precedes local bootstrap.')
+            ],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=bootstrap-local',
+                inapplicableWhen: 'statePath!=bootstrap-local',
+                exclusiveWith: ['existing-private-path']
+            },
+            allowedMutations: mutations(['write-local-state', 'write-evidence'], ['azure-network-provision', 'github-write']),
+            evidence: evidence('bootstrap-local.v1', true, ['github', 'azure']),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['approval-envelope', 'provider-inventory', 'remote-state'],
+            rollback: rollback('reverse-to', 'provider-ready', 'Remove only repository-owned bootstrap resources in dependency order.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'runner-ready',
+            label: 'Restricted larger runner is assigned and ready',
+            dependencies: [dep(['bootstrap-local'], 'Local bootstrap must establish runner networking before runner proof.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=bootstrap-local',
+                inapplicableWhen: 'statePath!=bootstrap-local',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['github-read', 'github-write']),
+            evidence: evidence('runner-ready.v1', true, ['github']),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['runner-inventory', 'approval-envelope'],
+            rollback: rollback('reverse-to', 'bootstrap-local', 'Remove repository runner assignment before network resources.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'private-backend-proof',
+            label: 'Private backend is reachable from runner',
+            dependencies: [dep(['runner-ready'], 'Runner readiness precedes private backend proof.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=bootstrap-local',
+                inapplicableWhen: 'statePath!=bootstrap-local',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['github-read', 'azure-read']),
+            evidence: evidence('private-backend-proof.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['runner-inventory', 'remote-state', 'live-readback'],
+            rollback: rollback('reverse-to', 'runner-ready', 'Failed proof keeps remote import blocked.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'remote-import-verified',
+            label: 'Declarative remote import and no-change plan are verified',
+            dependencies: [dep(['private-backend-proof'], 'Private backend proof precedes remote import.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=bootstrap-local',
+                inapplicableWhen: 'statePath!=bootstrap-local',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['azure-state-import']),
+            evidence: evidence('remote-import-verified.v1', true, ['azure']),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['remote-state', 'approval-envelope'],
+            rollback: rollback('reverse-to', 'private-backend-proof', 'Failed import leaves local state retained for remediation.'),
+            terminalStates: terminalConditional
+        },
+        {
+            id: 'remote-ready',
+            label: 'Remote state is ready and local bootstrap state is frozen',
+            dependencies: [dep(['existing-private-path', 'remote-import-verified'], 'Remote readiness follows either existing private path or verified remote import.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'private-staging-dast',
+                when: 'privateStagingDast=true',
+                inapplicableWhen: 'privateStagingDast=false',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['write-evidence'], ['azure-read']),
+            evidence: evidence('remote-ready.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['remote-state', 'live-readback'],
+            rollback: rollback('retain', null, 'Retain local bootstrap state read-only for exactly 30 days when used.'),
+            terminalStates: ['verified', 'failed', 'inapplicable', 'retained']
+        },
+        {
+            id: 'application-foundation',
+            label: 'Application infrastructure foundation is reconciled',
+            dependencies: [dep(['remote-ready'], 'Application resources wait for remote state readiness or inapplicability.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence', 'write-openspec-governance'], ['azure-resource-provision']),
+            evidence: evidence('application-foundation.v1', true, ['azure']),
+            approvalGate: approval('infrastructure-cost', true),
+            invalidationInputs: ['project-files', 'remote-state', 'approval-envelope'],
+            rollback: rollback('reverse-to', 'remote-ready', 'Application resources are removed without unregistering providers.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'workflow-source-ready',
+            label: 'Workflow source and ruleset payloads are ready',
+            dependencies: [dep(['application-foundation'], 'Workflow source targets the reconciled application foundation.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-workflows', 'write-ruleset-source', 'write-evidence']),
+            evidence: evidence('workflow-source-ready.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['project-files', 'policy'],
+            rollback: rollback('reverse-to', 'application-foundation', 'Remove or repair only workflow/ruleset source changes.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'dev-proof',
+            label: 'Development proof is green',
+            dependencies: [dep(['workflow-source-ready'], 'Workflow source must exist before proving checks.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read']),
+            evidence: evidence('dev-proof.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['workflow-source', 'project-files'],
+            rollback: rollback('none', null, 'A failed check blocks descendants until fixed.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'staging-qualified',
+            label: 'Staging release qualification is complete',
+            dependencies: [dep(['dev-proof'], 'Development proof precedes staging qualification.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read', 'azure-read']),
+            evidence: evidence('staging-qualified.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['workflow-source', 'security-evidence', 'live-readback'],
+            rollback: rollback('none', null, 'Qualification failures keep production blocked.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'production-rehearsed',
+            label: 'Production promotion and rollback are rehearsed',
+            dependencies: [dep(['staging-qualified'], 'Only a staging-qualified candidate may be rehearsed.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read', 'azure-read']),
+            evidence: evidence('production-rehearsed.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['live-readback', 'workflow-source'],
+            rollback: rollback('none', null, 'Rollback remains ungated and documented.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'green-red-proof',
+            label: 'Required checks are proven green and deliberately red',
+            dependencies: [dep(['production-rehearsed'], 'Promotion rehearsal precedes final context proof.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read']),
+            evidence: evidence('green-red-proof.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['security-evidence', 'workflow-source'],
+            rollback: rollback('none', null, 'Missing red proof prevents enforcement.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'enforcement-approved',
+            label: 'Final ruleset enforcement is approved',
+            dependencies: [dep(['green-red-proof'], 'Only exact green/red evidence may request enforcement.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-activation-state', 'write-evidence']),
+            evidence: evidence('enforcement-approved.v1', false),
+            approvalGate: approval('enforcement', true),
+            invalidationInputs: ['approval-envelope', 'ruleset-readback'],
+            rollback: rollback('none', null, 'Approval expiry blocks ruleset application.'),
+            terminalStates: terminalApproved
+        },
+        {
+            id: 'rulesets-applied',
+            label: 'Repository rulesets are applied idempotently last',
+            dependencies: [dep(['enforcement-approved'], 'Final enforcement approval precedes ruleset mutation.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-ruleset-write', 'github-read']),
+            evidence: evidence('rulesets-applied.v1', true, ['github']),
+            approvalGate: approval('enforcement', true),
+            invalidationInputs: ['approval-envelope', 'ruleset-readback'],
+            rollback: rollback('reverse-to', 'green-red-proof', 'Rulesets can be disabled or repaired without approval-gating rollback.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'live-readback',
+            label: 'Live enforcement readback matches source',
+            dependencies: [dep(['rulesets-applied'], 'Live readback follows ruleset application.')],
+            applicability: { kind: 'always' },
+            allowedMutations: mutations(['write-evidence'], ['github-read']),
+            evidence: evidence('live-readback.v1'),
+            approvalGate: approval('none', false),
+            invalidationInputs: ['ruleset-readback', 'live-readback'],
+            rollback: rollback('reverse-to', 'rulesets-applied', 'Mismatched live readback blocks completion.'),
+            terminalStates: terminalVerified
+        },
+        {
+            id: 'bootstrap-state-disposed',
+            label: 'Retained local bootstrap state is disposed after day 30',
+            dependencies: [dep(['live-readback'], 'Disposal is scheduled only after live enforcement readback.')],
+            applicability: {
+                kind: 'conditional',
+                discriminator: 'state-path',
+                when: 'statePath=bootstrap-local',
+                inapplicableWhen: 'statePath!=bootstrap-local',
+                exclusiveWith: []
+            },
+            allowedMutations: mutations(['delete-local-state', 'write-evidence']),
+            evidence: evidence('bootstrap-state-disposed.v1'),
+            approvalGate: approval('destructive-disposal', true),
+            invalidationInputs: ['remote-state', 'approval-envelope'],
+            rollback: rollback('dispose', null, 'Deletion destroys only the local encryption key and records no payload.'),
+            terminalStates: ['disposed', 'failed', 'inapplicable']
+        }
+    ]
+};
+function phaseBehavior(node) {
+    return {
+        id: node.id,
+        dependencies: node.dependencies,
+        applicability: node.applicability,
+        allowedMutations: node.allowedMutations,
+        evidence: node.evidence,
+        approvalGate: node.approvalGate,
+        invalidationInputs: node.invalidationInputs,
+        rollback: node.rollback,
+        terminalStates: node.terminalStates
+    };
+}
+export function phaseContractDigest(node) {
+    return sha256Hex(canonicalJson(phaseBehavior(node)));
+}
+export function phaseContractDigests(graph = canonicalPhaseGraph) {
+    return Object.fromEntries(graph.phases.map((node) => [node.id, phaseContractDigest(node)]));
+}
+export const canonicalPhaseGraphJson = canonicalJson(canonicalPhaseGraph);
+export const canonicalPhaseGraphHash = canonicalSha256(canonicalPhaseGraph);
+export const canonicalPhaseContractDigests = phaseContractDigests(canonicalPhaseGraph);
+export const currentActivationIdentity = createActivationIdentity(canonicalPhaseGraphHash);
+export const activationCompatibility = buildActivationCompatibilityMap([
+    currentActivationIdentity
+]);
+//# sourceMappingURL=graph.js.map

package/dist/governance-activation/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../src/governance-activation/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,wBAAwB,EACxB,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,eAAe,CAAC;AAWvB,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAkD,CAAC;AACjG,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAkD,CAAC;AACjG,MAAM,mBAAmB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAkD,CAAC;AAEpH,SAAS,GAAG,CAAC,KAAyB,EAAE,WAAmB;IACzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;AAC3G,CAAC;AAED,SAAS,SAAS,CAChB,KAA+B,EAC/B,MAAM,GAA6B,CAAC,MAAM,CAAC;IAE3C,MAAM,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACnC,IACE,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,CAAC,eAAe,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACnD,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CACf,MAAc,EACd,QAAQ,GAAG,IAAI,EACf,qBAAqB,GAAoC,EAAE;IAE3D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,QAAQ,CAAC,IAA4C,EAAE,QAAiB;IAC/E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAwC,EAAE,MAAsB,EAAE,WAAmB;IACrG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,aAAa,EAAE,uBAAuB;IACtC,QAAQ,EAAE;QACR,cAAc,EAAE,+BAA+B;QAC/C,aAAa,EAAE,iCAAiC;QAChD,yBAAyB;QACzB,uBAAuB;KACxB;IACD,MAAM,EAAE;QACN;YACE,EAAE,EAAE,YAAY;YAChB,KAAK,EAAE,0CAA0C;YACjD,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;YAChE,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC;YACnC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,qBAAqB,CAAC;YACtE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,+CAA+C,CAAC;YACjF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,kDAAkD;YACzD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC;YAC9E,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;YAChE,QAAQ,EAAE,QAAQ,CAAC,kBAAkB,CAAC;YACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC;YAC5D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,2CAA2C,CAAC;YAC7E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,iDAAiD;YACxD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,uCAAuC,CAAC,CAAC;YAC/E,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;YACtE,QAAQ,EAAE,QAAQ,CAAC,kBAAkB,CAAC;YACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,eAAe,EAAE,qBAAqB,CAAC;YAC5D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC;YAC1E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,0CAA0C;YACjD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,yDAAyD,CAAC,CAAC;YACjG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC;YAClC,YAAY,EAAE,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;YAClD,kBAAkB,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,mBAAmB,CAAC;YAC1E,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,uDAAuD,CAAC;YACzF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,uCAAuC;YAC9C,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,wCAAwC,CAAC,CAAC;YAC5E,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC7F,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC;YAC/B,YAAY,EAAE,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;YAClD,kBAAkB,EAAE,CAAC,cAAc,EAAE,mBAAmB,CAAC;YACzD,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,4CAA4C,CAAC;YAC9E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,yCAAyC;YAChD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,gDAAgD,CAAC,CAAC;YACjF,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,CAAC;YACzC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC;YAC/D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,8CAA8C,CAAC;YAChF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,wCAAwC;YAC/C,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,EAAE,oCAAoC,CAAC,CAAC;YAC/E,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;YACzE,QAAQ,EAAE,QAAQ,CAAC,wBAAwB,EAAE,KAAK,CAAC;YACnD,YAAY,EAAE,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC;YAC/C,kBAAkB,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,QAAQ,CAAC;YACnE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,iDAAiD,CAAC;YACnF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,2DAA2D;YAClE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,EAAE,0DAA0D,CAAC,CAAC;YACxG,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,qBAAqB;gBACpC,IAAI,EAAE,yBAAyB;gBAC/B,gBAAgB,EAAE,0BAA0B;gBAC5C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;YACvF,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC3D,YAAY,EAAE,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAC;YACrD,kBAAkB,EAAE,CAAC,aAAa,EAAE,mBAAmB,EAAE,qBAAqB,CAAC;YAC/E,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,+DAA+D,CAAC;YACjG,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,8CAA8C;YACrD,YAAY,EAAE;gBACZ,GAAG,CAAC,CAAC,qBAAqB,CAAC,EAAE,8DAA8D,CAAC;gBAC5F,GAAG,CAAC,CAAC,kBAAkB,CAAC,EAAE,kFAAkF,CAAC;aAC9G;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,sBAAsB;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,gBAAgB,EAAE,0BAA0B;gBAC5C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;YAC1F,QAAQ,EAAE,QAAQ,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;YACxD,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,QAAQ,CAAC;YACzE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,gEAAgE,CAAC;YACpG,cAAc,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC;SACnE;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,gCAAgC;YACvC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,EAAE,2DAA2D,CAAC,CAAC;YACpG,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,sBAAsB;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,gBAAgB,EAAE,0BAA0B;gBAC5C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;YACzF,QAAQ,EAAE,QAAQ,CAAC,wBAAwB,CAAC;YAC5C,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;YAC/E,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,sEAAsE,CAAC;YACxG,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,KAAK,EAAE,sDAAsD;YAC7D,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,EAAE,2CAA2C,CAAC,CAAC;YACzF,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,4BAA4B;gBAClC,gBAAgB,EAAE,6BAA6B;gBAC/C,aAAa,EAAE,CAAC,iBAAiB,CAAC;aACnC;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;YAC/D,QAAQ,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAC9C,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACrD,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,0CAA0C,CAAC;YAC5E,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,+DAA+D;YACtE,YAAY,EAAE;gBACZ,GAAG,CAAC,CAAC,gBAAgB,CAAC,EAAE,8CAA8C,CAAC;gBACvE,GAAG,CAAC,CAAC,qBAAqB,CAAC,EAAE,gDAAgD,CAAC;aAC/E;YACD,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,2BAA2B;gBACjC,gBAAgB,EAAE,4BAA4B;gBAC9C,aAAa,EAAE,CAAC,uBAAuB,CAAC;aACzC;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EAAE,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;YACjH,QAAQ,EAAE,QAAQ,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnE,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,CAAC;YAC/E,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,gBAAgB,EAAE,uEAAuE,CAAC;YAC3H,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,cAAc;YAClB,KAAK,EAAE,gDAAgD;YACvD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,uEAAuE,CAAC,CAAC;YACjH,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,2BAA2B;gBACjC,gBAAgB,EAAE,4BAA4B;gBAC9C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YAChF,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YACvD,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;YAC7D,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,iBAAiB,EAAE,+DAA+D,CAAC;YACpH,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,KAAK,EAAE,0CAA0C;YACjD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,kDAAkD,CAAC,CAAC;YACzF,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,2BAA2B;gBACjC,gBAAgB,EAAE,4BAA4B;gBAC9C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAC9C,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,eAAe,CAAC;YACzE,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,2CAA2C,CAAC;YAC7F,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,KAAK,EAAE,2DAA2D;YAClE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,uBAAuB,CAAC,EAAE,+CAA+C,CAAC,CAAC;YAC/F,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,2BAA2B;gBACjC,gBAAgB,EAAE,4BAA4B;gBAC9C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACvE,QAAQ,EAAE,QAAQ,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;YAChE,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,cAAc,EAAE,mBAAmB,CAAC;YACzD,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,uBAAuB,EAAE,4DAA4D,CAAC;YACvH,cAAc,EAAE,mBAAmB;SACpC;QACD;YACE,EAAE,EAAE,cAAc;YAClB,KAAK,EAAE,2DAA2D;YAClE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,EAAE,kFAAkF,CAAC,CAAC;YAC5J,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,sBAAsB;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,gBAAgB,EAAE,0BAA0B;gBAC5C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;YAC/D,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YACrC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;YACrD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,uEAAuE,CAAC;YAC3G,cAAc,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC;SACnE;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,KAAK,EAAE,qDAAqD;YAC5D,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,2EAA2E,CAAC,CAAC;YAClH,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC;YAC1G,QAAQ,EAAE,QAAQ,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;YAChE,YAAY,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACnD,kBAAkB,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,mBAAmB,CAAC;YAC1E,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,oEAAoE,CAAC;YACtH,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,uBAAuB;YAC3B,KAAK,EAAE,gDAAgD;YACvD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,EAAE,gEAAgE,CAAC,CAAC;YACjH,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;YAC1F,QAAQ,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAC9C,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC;YAC/C,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,wBAAwB,EAAE,wDAAwD,CAAC;YACpH,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,4BAA4B;YACnC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,uBAAuB,CAAC,EAAE,mDAAmD,CAAC,CAAC;YACnG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YAChE,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC;YAClC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;YACxD,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,gDAAgD,CAAC;YAClF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,2CAA2C;YAClD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,mDAAmD,CAAC,CAAC;YACvF,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,sBAAsB,CAAC;YAC1C,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,eAAe,CAAC;YAC7E,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,iDAAiD,CAAC;YACnF,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,sBAAsB;YAC1B,KAAK,EAAE,iDAAiD;YACxD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,EAAE,sDAAsD,CAAC,CAAC;YAClG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC9E,QAAQ,EAAE,QAAQ,CAAC,yBAAyB,CAAC;YAC7C,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;YACxD,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,0CAA0C,CAAC;YAC5E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,uDAAuD;YAC9D,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,EAAE,mDAAmD,CAAC,CAAC;YAClG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YAChE,QAAQ,EAAE,QAAQ,CAAC,oBAAoB,CAAC;YACxC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;YAC5D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,yCAAyC,CAAC;YAC3E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,sBAAsB;YAC1B,KAAK,EAAE,uCAAuC;YAC9C,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,EAAE,wDAAwD,CAAC,CAAC;YAClG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;YACzE,QAAQ,EAAE,QAAQ,CAAC,yBAAyB,EAAE,KAAK,CAAC;YACpD,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;YAC3C,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;YAC7D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,6CAA6C,CAAC;YAC/E,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,mDAAmD;YAC1D,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,EAAE,uDAAuD,CAAC,CAAC;YACtG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;YACxF,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC3D,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;YAC3C,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;YAC7D,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,iBAAiB,EAAE,wEAAwE,CAAC;YAC7H,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,0CAA0C;YACjD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,EAAE,4CAA4C,CAAC,CAAC;YACvF,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,gBAAgB,EAAE,SAAS,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YAChE,QAAQ,EAAE,QAAQ,CAAC,kBAAkB,CAAC;YACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACrC,kBAAkB,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC;YACzD,QAAQ,EAAE,QAAQ,CAAC,YAAY,EAAE,kBAAkB,EAAE,6CAA6C,CAAC;YACnG,cAAc,EAAE,gBAAgB;SACjC;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,KAAK,EAAE,yDAAyD;YAChE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,6DAA6D,CAAC,CAAC;YACrG,aAAa,EAAE;gBACb,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,2BAA2B;gBACjC,gBAAgB,EAAE,4BAA4B;gBAC9C,aAAa,EAAE,EAAE;aAClB;YACD,gBAAgB,EAAE,SAAS,CAAC,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;YACrE,QAAQ,EAAE,QAAQ,CAAC,6BAA6B,CAAC;YACjD,YAAY,EAAE,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC;YACpD,kBAAkB,EAAE,CAAC,cAAc,EAAE,mBAAmB,CAAC;YACzD,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,yEAAyE,CAAC;YAC9G,cAAc,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC;SACvD;KACF;CACmC,CAAC;AAIvC,SAAS,aAAa,CAAC,IAAoB;IACzC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACtD,OAAO,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAK,GAAsB,mBAAmB;IAE9C,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CACtC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAuB,wBAAwB,CAAC,uBAAuB,CAAC,CAAC;AAC/G,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;IACrE,yBAAyB;CAC1B,CAAC,CAAC"}

package/dist/governance-activation/identity.d.ts

@@ -0,0 +1,35 @@
+import type { ActivationIdentity } from './types.js';
+export declare const liftoffActivationPackageVersion: '0.10.0';
+export declare const liftoffManifestArtifactVersion: 7;
+export declare const governanceActivationPolicyVersion: '6';
+export declare const activationContractVersion: 1;
+export declare const phaseGraphSchemaVersion: 1;
+export declare const activationStateSchemaVersion: 1;
+export declare const evidenceHeaderSchemaVersion: 1;
+export declare const approvalEnvelopeSchemaVersion: 1;
+export declare const supersessionSchemaVersion: 1;
+export declare const credentialPolicySchemaVersion: 1;
+export declare const knownActivationVersions: {
+    readonly liftoffVersion: readonly ["0.10.0"];
+    readonly manifestArtifactVersion: readonly [7];
+    readonly policyVersion: readonly ['5', "6"];
+    readonly activationContractVersion: readonly [1];
+    readonly phaseGraphSchemaVersion: readonly [1];
+    readonly activationStateSchemaVersion: readonly [1];
+    readonly evidenceHeaderSchemaVersion: readonly [1];
+    readonly approvalEnvelopeSchemaVersion: readonly [1];
+    readonly supersessionSchemaVersion: readonly [1];
+    readonly credentialPolicySchemaVersion: readonly [1];
+};
+export type ActivationCompatibilityMap = ReadonlyMap<string, ActivationIdentity>;
+export declare function createActivationIdentity(phaseGraphHash: string): ActivationIdentity;
+export declare function activationCompatibilityKey(identity: ActivationIdentity): string;
+export declare function buildActivationCompatibilityMap(identities: readonly ActivationIdentity[]): ActivationCompatibilityMap;
+export type ActivationCompatibilityResult = {
+    compatible: true;
+    identity: ActivationIdentity;
+} | {
+    compatible: false;
+    reason: string;
+};
+export declare function resolveActivationCompatibility(identity: ActivationIdentity, compatibility: ActivationCompatibilityMap): ActivationCompatibilityResult;

package/dist/governance-activation/identity.js

@@ -0,0 +1,89 @@
+import { exactGlobalInstallCommand } from '../package-identity.js';
+export const liftoffActivationPackageVersion = '0.10.0';
+export const liftoffManifestArtifactVersion = 7;
+export const governanceActivationPolicyVersion = '6';
+export const activationContractVersion = 1;
+export const phaseGraphSchemaVersion = 1;
+export const activationStateSchemaVersion = 1;
+export const evidenceHeaderSchemaVersion = 1;
+export const approvalEnvelopeSchemaVersion = 1;
+export const supersessionSchemaVersion = 1;
+export const credentialPolicySchemaVersion = 1;
+export const knownActivationVersions = {
+    liftoffVersion: [liftoffActivationPackageVersion],
+    manifestArtifactVersion: [liftoffManifestArtifactVersion],
+    policyVersion: ['5', governanceActivationPolicyVersion],
+    activationContractVersion: [activationContractVersion],
+    phaseGraphSchemaVersion: [phaseGraphSchemaVersion],
+    activationStateSchemaVersion: [activationStateSchemaVersion],
+    evidenceHeaderSchemaVersion: [evidenceHeaderSchemaVersion],
+    approvalEnvelopeSchemaVersion: [approvalEnvelopeSchemaVersion],
+    supersessionSchemaVersion: [supersessionSchemaVersion],
+    credentialPolicySchemaVersion: [credentialPolicySchemaVersion]
+};
+const tupleFields = [
+    'liftoffVersion',
+    'manifestArtifactVersion',
+    'policyVersion',
+    'activationContractVersion',
+    'phaseGraphSchemaVersion',
+    'phaseGraphHash',
+    'activationStateSchemaVersion',
+    'evidenceHeaderSchemaVersion',
+    'approvalEnvelopeSchemaVersion',
+    'supersessionSchemaVersion',
+    'credentialPolicySchemaVersion'
+];
+export function createActivationIdentity(phaseGraphHash) {
+    return {
+        liftoffVersion: liftoffActivationPackageVersion,
+        manifestArtifactVersion: liftoffManifestArtifactVersion,
+        policyVersion: governanceActivationPolicyVersion,
+        activationContractVersion,
+        phaseGraphSchemaVersion,
+        phaseGraphHash,
+        activationStateSchemaVersion,
+        evidenceHeaderSchemaVersion,
+        approvalEnvelopeSchemaVersion,
+        supersessionSchemaVersion,
+        credentialPolicySchemaVersion
+    };
+}
+export function activationCompatibilityKey(identity) {
+    return tupleFields.map((field) => `${field}=${identity[field]}`).join('|');
+}
+export function buildActivationCompatibilityMap(identities) {
+    return new Map(identities.map((identity) => [activationCompatibilityKey(identity), identity]));
+}
+function knownVersion(field, value) {
+    return knownActivationVersions[field].includes(value);
+}
+export function resolveActivationCompatibility(identity, compatibility) {
+    for (const field of Object.keys(knownActivationVersions)) {
+        if (!knownVersion(field, identity[field])) {
+            const supported = knownActivationVersions[field]
+                .map((value) => JSON.stringify(value))
+                .join(', ');
+            return {
+                compatible: false,
+                reason: `Unsupported activation identity field ${field}: found ${JSON.stringify(identity[field])}; ` +
+                    `supported values are ${supported}. Minimum Liftoff ${liftoffActivationPackageVersion} is required; ` +
+                    `upgrade/remediate with ${exactGlobalInstallCommand(liftoffActivationPackageVersion)}.`
+            };
+        }
+    }
+    const found = compatibility.get(activationCompatibilityKey(identity));
+    if (!found) {
+        const supportedTuples = [...compatibility.keys()].join('; ');
+        const graphHashes = [...new Set([...compatibility.values()].map((entry) => entry.phaseGraphHash))].join(', ');
+        return {
+            compatible: false,
+            reason: `Activation identity tuple is not present in the explicit compatibility map: found ${activationCompatibilityKey(identity)}; ` +
+                `supported tuples are ${supportedTuples}; recognized graph hashes are ${graphHashes}. ` +
+                `Minimum Liftoff ${liftoffActivationPackageVersion} is required; upgrade/remediate with ` +
+                `${exactGlobalInstallCommand(liftoffActivationPackageVersion)}.`
+        };
+    }
+    return { compatible: true, identity: found };
+}
+//# sourceMappingURL=identity.js.map

package/dist/governance-activation/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/governance-activation/identity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,MAAM,CAAC,MAAM,+BAA+B,GAAG,QAAiB,CAAC;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAU,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAY,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAU,CAAC;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAU,CAAC;AACtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AACpD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AAExD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,cAAc,EAAE,CAAC,+BAA+B,CAAC;IACjD,uBAAuB,EAAE,CAAC,8BAA8B,CAAC;IACzD,aAAa,EAAE,CAAC,GAAG,EAAE,iCAAiC,CAAC;IACvD,yBAAyB,EAAE,CAAC,yBAAyB,CAAC;IACtD,uBAAuB,EAAE,CAAC,uBAAuB,CAAC;IAClD,4BAA4B,EAAE,CAAC,4BAA4B,CAAC;IAC5D,2BAA2B,EAAE,CAAC,2BAA2B,CAAC;IAC1D,6BAA6B,EAAE,CAAC,6BAA6B,CAAC;IAC9D,yBAAyB,EAAE,CAAC,yBAAyB,CAAC;IACtD,6BAA6B,EAAE,CAAC,6BAA6B,CAAC;CACtD,CAAC;AAEX,MAAM,WAAW,GAAG;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,eAAe;IACf,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AAIX,MAAM,UAAU,wBAAwB,CAAC,cAAsB;IAC7D,OAAO;QACL,cAAc,EAAE,+BAA+B;QAC/C,uBAAuB,EAAE,8BAA8B;QACvD,aAAa,EAAE,iCAAiC;QAChD,yBAAyB;QACzB,uBAAuB;QACvB,cAAc;QACd,4BAA4B;QAC5B,2BAA2B;QAC3B,6BAA6B;QAC7B,yBAAyB;QACzB,6BAA6B;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAA4B;IACrE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,UAAyC;IAEzC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,KAA2C,EAAE,KAAsB;IACvF,OAAQ,uBAAuB,CAAC,KAAK,CAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAMD,MAAM,UAAU,8BAA8B,CAC5C,QAA4B,EAC5B,aAAyC;IAEzC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAA6C,EAAE,CAAC;QACrG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAI,uBAAuB,CAAC,KAAK,CAAkC;iBAC/E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;iBACrC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EACJ,yCAAyC,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI;oBAC5F,wBAAwB,SAAS,qBAAqB,+BAA+B,gBAAgB;oBACrG,0BAA0B,yBAAyB,CAAC,+BAA+B,CAAC,GAAG;aAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,eAAe,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9G,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EACJ,qFAAqF,0BAA0B,CAAC,QAAQ,CAAC,IAAI;gBAC7H,wBAAwB,eAAe,iCAAiC,WAAW,IAAI;gBACvF,mBAAmB,+BAA+B,uCAAuC;gBACzF,GAAG,yBAAyB,CAAC,+BAA+B,CAAC,GAAG;SACnE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC"}

package/dist/governance-activation/index.d.ts

@@ -0,0 +1,18 @@
+export * from './activation-state.js';
+export * from './approvals.js';
+export * from './canonical-json.js';
+export * from './compatibility.js';
+export * from './credentials.js';
+export * from './evidence.js';
+export * from './graph.js';
+export * from './identity.js';
+export * from './migration.js';
+export * from './readiness.js';
+export * from './reconciliation.js';
+export * from './release-integrity.js';
+export * from './seed-lifecycle.js';
+export * from './source-of-truth.js';
+export * from './task-projection.js';
+export * from './transitions.js';
+export * from './types.js';
+export * from './validators.js';

package/dist/governance-activation/index.js

@@ -0,0 +1,19 @@
+export * from './activation-state.js';
+export * from './approvals.js';
+export * from './canonical-json.js';
+export * from './compatibility.js';
+export * from './credentials.js';
+export * from './evidence.js';
+export * from './graph.js';
+export * from './identity.js';
+export * from './migration.js';
+export * from './readiness.js';
+export * from './reconciliation.js';
+export * from './release-integrity.js';
+export * from './seed-lifecycle.js';
+export * from './source-of-truth.js';
+export * from './task-projection.js';
+export * from './transitions.js';
+export * from './types.js';
+export * from './validators.js';
+//# sourceMappingURL=index.js.map