@msn-control/liftoff 0.9.9 → 0.10.1

package/dist/process-runner.d.ts

@@ -2,11 +2,13 @@ import type { ExternalCommand } from './types.js';
 export interface RunCommandOptions {
     cwd?: string;
     env?: NodeJS.ProcessEnv;
+    stdin?: string | Uint8Array;
     timeoutMs?: number;
     stream?: boolean;
     stdout?: NodeJS.WritableStream;
     stderr?: NodeJS.WritableStream;
     redactArgIndices?: number[];
+    redactValues?: readonly string[];
 }
 export interface CommandResult {
     command: ExternalCommand;
@@ -23,6 +25,7 @@ export interface CommandRunner {
     run(command: ExternalCommand, options?: RunCommandOptions): Promise<CommandResult>;
 }
 export declare function formatCommand(command: ExternalCommand, redactArgIndices?: number[]): string;
+export declare function redactSensitiveText(value: string, sensitiveValues?: readonly string[]): string;
 export declare class NodeCommandRunner implements CommandRunner {
     run(command: ExternalCommand, options?: RunCommandOptions): Promise<CommandResult>;
 }

package/dist/process-runner.js

@@ -13,6 +13,29 @@ export function formatCommand(command, redactArgIndices = []) {
         ...command.args.map((argument, index) => redacted.has(index) ? '<redacted>' : displayArgument(argument))
     ].join(' ');
 }
+export function redactSensitiveText(value, sensitiveValues = []) {
+    return sensitiveValues
+        .filter((entry) => entry.length > 0)
+        .reduce((current, entry) => current.split(entry).join('<redacted-sensitive-value>'), value);
+}
+function createStreamRedactor(sensitiveValues) {
+    const values = sensitiveValues.filter((entry) => entry.length > 0);
+    let pending = '';
+    return {
+        push(chunk) {
+            if (values.length === 0) {
+                return chunk;
+            }
+            pending += chunk;
+            return '';
+        },
+        flush() {
+            const emit = redactSensitiveText(pending, values);
+            pending = '';
+            return emit;
+        }
+    };
+}
 export class NodeCommandRunner {
     async run(command, options = {}) {
         const displayCommand = formatCommand(command, options.redactArgIndices);
@@ -25,13 +48,18 @@ export class NodeCommandRunner {
             let errorMessage;
             const stdoutDecoder = new StringDecoder('utf8');
             const stderrDecoder = new StringDecoder('utf8');
+            const stdoutRedactor = createStreamRedactor(options.redactValues ?? []);
+            const stderrRedactor = createStreamRedactor(options.redactValues ?? []);
             const child = spawn(command.executable, command.args, {
                 cwd: options.cwd,
                 env: options.env ? { ...process.env, ...options.env } : process.env,
                 shell: false,
-                stdio: ['ignore', 'pipe', 'pipe'],
+                stdio: [options.stdin === undefined ? 'ignore' : 'pipe', 'pipe', 'pipe'],
                 windowsHide: true
             });
+            if (options.stdin !== undefined) {
+                child.stdin?.end(options.stdin);
+            }
             const finish = (status, signal) => {
                 if (settled) {
                     return;
@@ -40,30 +68,60 @@ export class NodeCommandRunner {
                 if (timer) {
                     clearTimeout(timer);
                 }
-                stdout += stdoutDecoder.end();
-                stderr += stderrDecoder.end();
+                const stdoutEnd = stdoutDecoder.end();
+                const stderrEnd = stderrDecoder.end();
+                stdout += stdoutEnd;
+                stderr += stderrEnd;
+                if (options.stream && (options.redactValues?.length ?? 0) > 0) {
+                    const stdoutTail = `${stdoutRedactor.push(stdoutEnd)}${stdoutRedactor.flush()}`;
+                    const stderrTail = `${stderrRedactor.push(stderrEnd)}${stderrRedactor.flush()}`;
+                    if (stdoutTail) {
+                        (options.stdout ?? process.stdout).write(stdoutTail);
+                    }
+                    if (stderrTail) {
+                        (options.stderr ?? process.stderr).write(stderrTail);
+                    }
+                }
                 resolve({
                     command,
                     displayCommand,
                     status,
                     signal,
-                    stdout,
-                    stderr,
+                    stdout: redactSensitiveText(stdout, options.redactValues),
+                    stderr: redactSensitiveText(stderr, options.redactValues),
                     timedOut,
                     ...(errorCode ? { errorCode } : {}),
-                    ...(errorMessage ? { errorMessage } : {})
+                    ...(errorMessage ? { errorMessage: redactSensitiveText(errorMessage, options.redactValues) } : {})
                 });
             };
             child.stdout?.on('data', (chunk) => {
-                stdout += typeof chunk === 'string' ? chunk : stdoutDecoder.write(chunk);
+                const decoded = typeof chunk === 'string' ? chunk : stdoutDecoder.write(chunk);
+                stdout += decoded;
                 if (options.stream) {
-                    (options.stdout ?? process.stdout).write(chunk);
+                    if ((options.redactValues?.length ?? 0) > 0) {
+                        const safe = stdoutRedactor.push(decoded);
+                        if (safe) {
+                            (options.stdout ?? process.stdout).write(safe);
+                        }
+                    }
+                    else {
+                        (options.stdout ?? process.stdout).write(chunk);
+                    }
                 }
             });
             child.stderr?.on('data', (chunk) => {
-                stderr += typeof chunk === 'string' ? chunk : stderrDecoder.write(chunk);
+                const decoded = typeof chunk === 'string' ? chunk : stderrDecoder.write(chunk);
+                stderr += decoded;
                 if (options.stream) {
-                    (options.stderr ?? process.stderr).write(chunk);
+                    if ((options.redactValues?.length ?? 0) > 0) {
+                        const safe = stderrRedactor.push(decoded);
+                        if (safe) {
+                            (options.stderr ?? process.stderr).write(safe);
+                        }
+                    }
+                    else {
+                        (options.stderr ?? process.stderr).write(chunk);
+                    }
                 }
             });
             child.on('error', (error) => {

package/dist/process-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-runner.js","sourceRoot":"","sources":["../src/process-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA6BpD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,gBAAgB,GAAa,EAAE;IACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC3C,OAAO;QACL,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;QACnC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;KACzG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,GAAG,CAAC,OAAwB,EAAE,OAAO,GAAsB,EAAE;QACjE,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,SAA6B,CAAC;YAClC,IAAI,YAAgC,CAAC;YACrC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;gBACpD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;gBACnE,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,MAA6B,EAAE,EAAE;gBACtE,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;gBACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,OAAO,CAAC;oBACN,OAAO;oBACP,cAAc;oBACd,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAClD,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAClD,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACjD,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvB,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC;gBACtD,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;gBACvB,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"process-runner.js","sourceRoot":"","sources":["../src/process-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA+BpD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,gBAAgB,GAAa,EAAE;IACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC3C,OAAO;QACL,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;QACnC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;KACzG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,eAAe,GAAsB,EAAE;IACxF,OAAO,eAAe;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,oBAAoB,CAAC,eAAkC;IAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,OAAO;QACL,IAAI,CAAC,KAAa;YAChB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,KAAK,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK;YACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,GAAG,CAAC,OAAwB,EAAE,OAAO,GAAsB,EAAE;QACjE,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,SAA6B,CAAC;YAClC,IAAI,YAAgC,CAAC;YACrC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;gBACpD,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;gBACnE,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBACxE,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,MAA6B,EAAE,EAAE;gBACtE,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;gBACD,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;gBACtC,MAAM,IAAI,SAAS,CAAC;gBACpB,MAAM,IAAI,SAAS,CAAC;gBACpB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,UAAU,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;oBAChF,MAAM,UAAU,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;oBAChF,IAAI,UAAU,EAAE,CAAC;wBACf,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACvD,CAAC;oBACD,IAAI,UAAU,EAAE,CAAC;wBACf,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC;oBACN,OAAO;oBACP,cAAc;oBACd,MAAM;oBACN,MAAM;oBACN,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC;oBACzD,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC;oBACzD,QAAQ;oBACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnG,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAClD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/E,MAAM,IAAI,OAAO,CAAC;gBAClB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1C,IAAI,IAAI,EAAE,CAAC;4BACT,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAClD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/E,MAAM,IAAI,OAAO,CAAC;gBAClB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5C,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1C,IAAI,IAAI,EAAE,CAAC;4BACT,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACjD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACjD,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvB,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC;gBACtD,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;gBACvB,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/repository-governance.d.ts

@@ -1,17 +1,27 @@
 import type { GeneratedArtifact, ProjectPlan } from './types.js';
 export declare const governancePolicySchemaVersion: 1;
-export declare const governancePolicyVersion: '5';
+export declare const governancePolicyVersion: '6';
 export declare const governanceContextSchemaVersion: 1;
 export declare const governanceArtifactPaths: {
     readonly policy: readonly ['.liftoff', 'governance', 'policy.md'];
     readonly context: readonly ['.liftoff', 'governance', 'context.json'];
     readonly guide: readonly ['.liftoff', 'governance', 'README.md'];
-    readonly 'github-copilot': readonly ['.github', 'prompts', 'liftoff-repository-governance.prompt.md'];
-    readonly claude: readonly ['.claude', 'commands', 'liftoff-repository-governance.md'];
+    readonly phaseGraph: readonly ['.liftoff', 'governance', 'phase-graph.json'];
+    readonly compatibility: readonly ['.liftoff', 'governance', 'compatibility.json'];
+    readonly credentialPolicySchema: readonly ['.liftoff', 'governance', 'credential-policy.schema.json'];
+    readonly setup: {
+        readonly 'github-copilot': readonly ['.github', 'prompts', 'liftoff-setup.prompt.md'];
+        readonly claude: readonly ['.claude', 'commands', 'liftoff-setup.md'];
+    };
+    readonly alias: {
+        readonly 'github-copilot': readonly ['.github', 'prompts', 'liftoff-repository-governance.prompt.md'];
+        readonly claude: readonly ['.claude', 'commands', 'liftoff-repository-governance.md'];
+    };
 };
 export declare function renderCanonicalGovernancePolicy(): string;
 export declare function validateGovernancePolicy(policy: string): void;
 export declare function assertGovernanceContentSafe(content: string): void;
+export declare function renderCredentialPolicySchema(): string;
 export declare function validateGovernanceContext(value: unknown): void;
 export declare function renderGovernanceContext(plan: ProjectPlan): string;
 export declare function buildRepositoryGovernanceArtifacts(plan: ProjectPlan): GeneratedArtifact[];