@neurcode-ai/cli 0.9.66 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.telemetry-bundle/dist/__tests__/harvest-verify.test.d.ts +1 -0
- package/.telemetry-bundle/dist/__tests__/harvest-verify.test.js +86 -0
- package/.telemetry-bundle/dist/contracts.d.ts +58 -0
- package/.telemetry-bundle/dist/contracts.js +8 -0
- package/.telemetry-bundle/dist/harvest-verify.d.ts +9 -0
- package/.telemetry-bundle/dist/harvest-verify.js +128 -0
- package/.telemetry-bundle/dist/index.d.ts +10 -0
- package/.telemetry-bundle/dist/index.js +22 -0
- package/.telemetry-bundle/dist/precision/leaderboards.d.ts +20 -0
- package/.telemetry-bundle/dist/precision/leaderboards.js +72 -0
- package/.telemetry-bundle/dist/reader.d.ts +5 -0
- package/.telemetry-bundle/dist/reader.js +46 -0
- package/.telemetry-bundle/dist/stable-json.d.ts +5 -0
- package/.telemetry-bundle/dist/stable-json.js +24 -0
- package/.telemetry-bundle/dist/store.d.ts +10 -0
- package/.telemetry-bundle/dist/store.js +52 -0
- package/.telemetry-bundle/dist/trust-scoring.d.ts +20 -0
- package/.telemetry-bundle/dist/trust-scoring.js +58 -0
- package/.telemetry-bundle/package.json +8 -0
- package/dist/commands/governance.d.ts +3 -0
- package/dist/commands/governance.d.ts.map +1 -0
- package/dist/commands/governance.js +390 -0
- package/dist/commands/governance.js.map +1 -0
- package/dist/commands/quickstart.js +3 -3
- package/dist/commands/quickstart.js.map +1 -1
- package/dist/commands/remediate-export.d.ts +5 -0
- package/dist/commands/remediate-export.d.ts.map +1 -1
- package/dist/commands/remediate-export.js +803 -14
- package/dist/commands/remediate-export.js.map +1 -1
- package/dist/commands/replay.d.ts.map +1 -1
- package/dist/commands/replay.js +14 -0
- package/dist/commands/replay.js.map +1 -1
- package/dist/commands/session.d.ts +7 -0
- package/dist/commands/session.d.ts.map +1 -1
- package/dist/commands/session.js +156 -0
- package/dist/commands/session.js.map +1 -1
- package/dist/commands/start-intent.d.ts.map +1 -1
- package/dist/commands/start-intent.js +61 -11
- package/dist/commands/start-intent.js.map +1 -1
- package/dist/commands/verify-guidance.d.ts +5 -0
- package/dist/commands/verify-guidance.d.ts.map +1 -0
- package/dist/commands/verify-guidance.js +49 -0
- package/dist/commands/verify-guidance.js.map +1 -0
- package/dist/commands/verify-output.d.ts +37 -0
- package/dist/commands/verify-output.d.ts.map +1 -0
- package/dist/commands/verify-output.js +572 -0
- package/dist/commands/verify-output.js.map +1 -0
- package/dist/commands/verify-render.d.ts +41 -0
- package/dist/commands/verify-render.d.ts.map +1 -0
- package/dist/commands/verify-render.js +457 -0
- package/dist/commands/verify-render.js.map +1 -0
- package/dist/commands/verify.d.ts.map +1 -1
- package/dist/commands/verify.js +278 -1081
- package/dist/commands/verify.js.map +1 -1
- package/dist/commands/workspace.d.ts.map +1 -1
- package/dist/commands/workspace.js +3 -14
- package/dist/commands/workspace.js.map +1 -1
- package/dist/context-engine/graph.d.ts.map +1 -1
- package/dist/context-engine/graph.js +69 -7
- package/dist/context-engine/graph.js.map +1 -1
- package/dist/context-engine/scanner.d.ts.map +1 -1
- package/dist/context-engine/scanner.js +9 -2
- package/dist/context-engine/scanner.js.map +1 -1
- package/dist/daemon/compatibility/execution.d.ts +42 -0
- package/dist/daemon/compatibility/execution.d.ts.map +1 -0
- package/dist/daemon/compatibility/execution.js +183 -0
- package/dist/daemon/compatibility/execution.js.map +1 -0
- package/dist/daemon/compatibility/mutation.d.ts +24 -0
- package/dist/daemon/compatibility/mutation.d.ts.map +1 -0
- package/dist/daemon/compatibility/mutation.js +724 -0
- package/dist/daemon/compatibility/mutation.js.map +1 -0
- package/dist/daemon/routes.d.ts +19 -0
- package/dist/daemon/routes.d.ts.map +1 -0
- package/dist/daemon/routes.js +123 -0
- package/dist/daemon/routes.js.map +1 -0
- package/dist/daemon/runtime/execution-bus.d.ts +217 -0
- package/dist/daemon/runtime/execution-bus.d.ts.map +1 -0
- package/dist/daemon/runtime/execution-bus.js +1420 -0
- package/dist/daemon/runtime/execution-bus.js.map +1 -0
- package/dist/daemon/runtime/workspace-runtime.d.ts +280 -0
- package/dist/daemon/runtime/workspace-runtime.d.ts.map +1 -0
- package/dist/daemon/runtime/workspace-runtime.js +1473 -0
- package/dist/daemon/runtime/workspace-runtime.js.map +1 -0
- package/dist/daemon/server.d.ts.map +1 -1
- package/dist/daemon/server.js +171 -874
- package/dist/daemon/server.js.map +1 -1
- package/dist/daemon/shaping.d.ts +11 -0
- package/dist/daemon/shaping.d.ts.map +1 -0
- package/dist/daemon/shaping.js +240 -0
- package/dist/daemon/shaping.js.map +1 -0
- package/dist/governance/canonical-pipeline.d.ts +2 -1
- package/dist/governance/canonical-pipeline.d.ts.map +1 -1
- package/dist/governance/canonical-pipeline.js +259 -84
- package/dist/governance/canonical-pipeline.js.map +1 -1
- package/dist/governance/structural-cache.d.ts.map +1 -1
- package/dist/governance/structural-cache.js +2 -7
- package/dist/governance/structural-cache.js.map +1 -1
- package/dist/index.js +230 -66
- package/dist/index.js.map +1 -1
- package/dist/utils/active-engineering-context.d.ts +12 -0
- package/dist/utils/active-engineering-context.d.ts.map +1 -0
- package/dist/utils/active-engineering-context.js +67 -0
- package/dist/utils/active-engineering-context.js.map +1 -0
- package/dist/utils/artifact-io.d.ts +33 -0
- package/dist/utils/artifact-io.d.ts.map +1 -0
- package/dist/utils/artifact-io.js +183 -0
- package/dist/utils/artifact-io.js.map +1 -0
- package/dist/utils/change-contract.d.ts +6 -2
- package/dist/utils/change-contract.d.ts.map +1 -1
- package/dist/utils/change-contract.js +175 -0
- package/dist/utils/change-contract.js.map +1 -1
- package/dist/utils/context-pack.d.ts +12 -0
- package/dist/utils/context-pack.d.ts.map +1 -0
- package/dist/utils/context-pack.js +147 -0
- package/dist/utils/context-pack.js.map +1 -0
- package/dist/utils/control-plane.d.ts +18 -0
- package/dist/utils/control-plane.d.ts.map +1 -1
- package/dist/utils/control-plane.js +31 -4
- package/dist/utils/control-plane.js.map +1 -1
- package/dist/utils/drift-intelligence.d.ts +47 -0
- package/dist/utils/drift-intelligence.d.ts.map +1 -0
- package/dist/utils/drift-intelligence.js +2099 -0
- package/dist/utils/drift-intelligence.js.map +1 -0
- package/dist/utils/execution-actions.d.ts +22 -0
- package/dist/utils/execution-actions.d.ts.map +1 -0
- package/dist/utils/execution-actions.js +103 -0
- package/dist/utils/execution-actions.js.map +1 -0
- package/dist/utils/execution-bus.d.ts +1 -214
- package/dist/utils/execution-bus.d.ts.map +1 -1
- package/dist/utils/execution-bus.js +15 -1359
- package/dist/utils/execution-bus.js.map +1 -1
- package/dist/utils/git.d.ts +1 -0
- package/dist/utils/git.d.ts.map +1 -1
- package/dist/utils/git.js +13 -3
- package/dist/utils/git.js.map +1 -1
- package/dist/utils/governance-decisions.d.ts +75 -0
- package/dist/utils/governance-decisions.d.ts.map +1 -0
- package/dist/utils/governance-decisions.js +412 -0
- package/dist/utils/governance-decisions.js.map +1 -0
- package/dist/utils/governance-provenance.d.ts +1 -1
- package/dist/utils/governance-provenance.d.ts.map +1 -1
- package/dist/utils/governance-provenance.js +5 -7
- package/dist/utils/governance-provenance.js.map +1 -1
- package/dist/utils/governance.d.ts +108 -0
- package/dist/utils/governance.d.ts.map +1 -1
- package/dist/utils/governance.js +209 -7
- package/dist/utils/governance.js.map +1 -1
- package/dist/utils/intelligence-runtime-common.d.ts +30 -0
- package/dist/utils/intelligence-runtime-common.d.ts.map +1 -0
- package/dist/utils/intelligence-runtime-common.js +156 -0
- package/dist/utils/intelligence-runtime-common.js.map +1 -0
- package/dist/utils/intent-contract-diagnostics.d.ts +9 -0
- package/dist/utils/intent-contract-diagnostics.d.ts.map +1 -0
- package/dist/utils/intent-contract-diagnostics.js +322 -0
- package/dist/utils/intent-contract-diagnostics.js.map +1 -0
- package/dist/utils/intent-pack.d.ts +15 -0
- package/dist/utils/intent-pack.d.ts.map +1 -0
- package/dist/utils/intent-pack.js +196 -0
- package/dist/utils/intent-pack.js.map +1 -0
- package/dist/utils/plan-sync.d.ts +1 -0
- package/dist/utils/plan-sync.d.ts.map +1 -1
- package/dist/utils/plan-sync.js +23 -0
- package/dist/utils/plan-sync.js.map +1 -1
- package/dist/utils/policy-decision.d.ts +5 -0
- package/dist/utils/policy-decision.d.ts.map +1 -0
- package/dist/utils/policy-decision.js +17 -0
- package/dist/utils/policy-decision.js.map +1 -0
- package/dist/utils/replay-custody.d.ts +43 -0
- package/dist/utils/replay-custody.d.ts.map +1 -0
- package/dist/utils/replay-custody.js +168 -0
- package/dist/utils/replay-custody.js.map +1 -0
- package/dist/utils/replay-runtime.d.ts +13 -0
- package/dist/utils/replay-runtime.d.ts.map +1 -1
- package/dist/utils/replay-runtime.js +96 -9
- package/dist/utils/replay-runtime.js.map +1 -1
- package/dist/utils/repository-intelligence.d.ts +9 -0
- package/dist/utils/repository-intelligence.d.ts.map +1 -0
- package/dist/utils/repository-intelligence.js +372 -0
- package/dist/utils/repository-intelligence.js.map +1 -0
- package/dist/utils/runtime-events.d.ts.map +1 -1
- package/dist/utils/runtime-events.js +25 -6
- package/dist/utils/runtime-events.js.map +1 -1
- package/dist/utils/semantic-contract-intelligence.d.ts +20 -0
- package/dist/utils/semantic-contract-intelligence.d.ts.map +1 -0
- package/dist/utils/semantic-contract-intelligence.js +825 -0
- package/dist/utils/semantic-contract-intelligence.js.map +1 -0
- package/dist/utils/session-continuity.d.ts +56 -0
- package/dist/utils/session-continuity.d.ts.map +1 -0
- package/dist/utils/session-continuity.js +318 -0
- package/dist/utils/session-continuity.js.map +1 -0
- package/dist/utils/verification-evidence.d.ts.map +1 -1
- package/dist/utils/verification-evidence.js +4 -1
- package/dist/utils/verification-evidence.js.map +1 -1
- package/dist/utils/workspace-runtime.d.ts +1 -266
- package/dist/utils/workspace-runtime.d.ts.map +1 -1
- package/dist/utils/workspace-runtime.js +15 -1412
- package/dist/utils/workspace-runtime.js.map +1 -1
- package/package.json +13 -11
- package/LICENSE +0 -201
|
@@ -0,0 +1,412 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.GOVERNANCE_DECISIONS_SCHEMA_VERSION = void 0;
|
|
4
|
+
exports.getGovernanceDecisionsPath = getGovernanceDecisionsPath;
|
|
5
|
+
exports.isGovernanceDecisionState = isGovernanceDecisionState;
|
|
6
|
+
exports.isDriftIntelligenceCategory = isDriftIntelligenceCategory;
|
|
7
|
+
exports.listDriftIntelligenceCategories = listDriftIntelligenceCategories;
|
|
8
|
+
exports.isGovernanceDecisionExpired = isGovernanceDecisionExpired;
|
|
9
|
+
exports.isGovernanceDecisionOverride = isGovernanceDecisionOverride;
|
|
10
|
+
exports.readGovernanceDecisionRegistry = readGovernanceDecisionRegistry;
|
|
11
|
+
exports.writeGovernanceDecisionRegistry = writeGovernanceDecisionRegistry;
|
|
12
|
+
exports.resolveGovernanceActor = resolveGovernanceActor;
|
|
13
|
+
exports.resolveGovernanceDecisionExpiry = resolveGovernanceDecisionExpiry;
|
|
14
|
+
exports.buildGovernanceDecision = buildGovernanceDecision;
|
|
15
|
+
exports.addGovernanceDecision = addGovernanceDecision;
|
|
16
|
+
exports.summarizeGovernanceDecisionHygiene = summarizeGovernanceDecisionHygiene;
|
|
17
|
+
const child_process_1 = require("child_process");
|
|
18
|
+
const crypto_1 = require("crypto");
|
|
19
|
+
const fs_1 = require("fs");
|
|
20
|
+
const path_1 = require("path");
|
|
21
|
+
const intelligence_runtime_common_1 = require("./intelligence-runtime-common");
|
|
22
|
+
exports.GOVERNANCE_DECISIONS_SCHEMA_VERSION = 'neurcode.governance-decisions.v1';
|
|
23
|
+
const DRIFT_CATEGORIES = new Set([
|
|
24
|
+
'scope-expansion',
|
|
25
|
+
'cross-service',
|
|
26
|
+
'dependency-spread',
|
|
27
|
+
'infra-leakage',
|
|
28
|
+
'sensitive-boundary',
|
|
29
|
+
'blast-radius',
|
|
30
|
+
'rollout-risk',
|
|
31
|
+
'runtime-coupling',
|
|
32
|
+
'architectural-leakage',
|
|
33
|
+
'layer-violation',
|
|
34
|
+
'contract-misuse',
|
|
35
|
+
'ownership-inversion',
|
|
36
|
+
'responsibility-drift',
|
|
37
|
+
'invariant-violation',
|
|
38
|
+
'behavioral-drift',
|
|
39
|
+
'deployment-coupling',
|
|
40
|
+
'state-ownership-risk',
|
|
41
|
+
]);
|
|
42
|
+
const KNOWN_DECISION_FIELDS = new Set([
|
|
43
|
+
'id',
|
|
44
|
+
'state',
|
|
45
|
+
'findingId',
|
|
46
|
+
'category',
|
|
47
|
+
'file',
|
|
48
|
+
'module',
|
|
49
|
+
'service',
|
|
50
|
+
'reason',
|
|
51
|
+
'actor',
|
|
52
|
+
'decidedAt',
|
|
53
|
+
'expiresAt',
|
|
54
|
+
'temporary',
|
|
55
|
+
]);
|
|
56
|
+
function getGovernanceDecisionsPath(projectRoot) {
|
|
57
|
+
return (0, path_1.join)(projectRoot, '.neurcode', 'governance-decisions.json');
|
|
58
|
+
}
|
|
59
|
+
function isGovernanceDecisionState(value) {
|
|
60
|
+
return value === 'acknowledged'
|
|
61
|
+
|| value === 'review-required'
|
|
62
|
+
|| value === 'accepted-risk'
|
|
63
|
+
|| value === 'rollout-approved'
|
|
64
|
+
|| value === 'rollout-blocked'
|
|
65
|
+
|| value === 'advisory-dismissed'
|
|
66
|
+
|| value === 'temporary-exception';
|
|
67
|
+
}
|
|
68
|
+
function isDriftIntelligenceCategory(value) {
|
|
69
|
+
return typeof value === 'string' && DRIFT_CATEGORIES.has(value);
|
|
70
|
+
}
|
|
71
|
+
function listDriftIntelligenceCategories() {
|
|
72
|
+
return [...DRIFT_CATEGORIES].sort((left, right) => left.localeCompare(right));
|
|
73
|
+
}
|
|
74
|
+
function isGovernanceDecisionExpired(decision, now = Date.now()) {
|
|
75
|
+
if (!decision.expiresAt)
|
|
76
|
+
return false;
|
|
77
|
+
const ts = Date.parse(decision.expiresAt);
|
|
78
|
+
return !Number.isFinite(ts) || ts <= now;
|
|
79
|
+
}
|
|
80
|
+
function isGovernanceDecisionOverride(state) {
|
|
81
|
+
return state === 'accepted-risk'
|
|
82
|
+
|| state === 'rollout-approved'
|
|
83
|
+
|| state === 'advisory-dismissed'
|
|
84
|
+
|| state === 'temporary-exception';
|
|
85
|
+
}
|
|
86
|
+
function asDecisionString(value, fallback) {
|
|
87
|
+
return typeof value === 'string' && value.trim().length > 0 ? value.trim() : fallback;
|
|
88
|
+
}
|
|
89
|
+
function asNullableDecisionString(value) {
|
|
90
|
+
return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null;
|
|
91
|
+
}
|
|
92
|
+
function normalizeNullablePath(value) {
|
|
93
|
+
const raw = asNullableDecisionString(value);
|
|
94
|
+
return raw ? (0, intelligence_runtime_common_1.normalizeRepoPath)(raw) : null;
|
|
95
|
+
}
|
|
96
|
+
function decisionHash(parts) {
|
|
97
|
+
return (0, crypto_1.createHash)('sha256').update(parts.join('|')).digest('hex').slice(0, 14);
|
|
98
|
+
}
|
|
99
|
+
function diagnoseUnsupportedFields(record, decisionId) {
|
|
100
|
+
return Object.keys(record)
|
|
101
|
+
.filter((key) => !KNOWN_DECISION_FIELDS.has(key))
|
|
102
|
+
.sort((left, right) => left.localeCompare(right))
|
|
103
|
+
.map((field) => ({
|
|
104
|
+
severity: 'warning',
|
|
105
|
+
code: 'unsupported-field',
|
|
106
|
+
decisionId,
|
|
107
|
+
message: `Decision contains unsupported field '${field}'.`,
|
|
108
|
+
remediation: 'Remove unsupported fields so governance artifacts stay portable and deterministic.',
|
|
109
|
+
}));
|
|
110
|
+
}
|
|
111
|
+
function readGovernanceDecisionRegistry(projectRoot) {
|
|
112
|
+
const sourcePath = getGovernanceDecisionsPath(projectRoot);
|
|
113
|
+
if (!(0, fs_1.existsSync)(sourcePath)) {
|
|
114
|
+
return { sourcePath, decisions: [], invalidEntries: 0, rawDecisionCount: 0, diagnostics: [] };
|
|
115
|
+
}
|
|
116
|
+
let parsed;
|
|
117
|
+
try {
|
|
118
|
+
parsed = JSON.parse((0, fs_1.readFileSync)(sourcePath, 'utf-8'));
|
|
119
|
+
}
|
|
120
|
+
catch {
|
|
121
|
+
return {
|
|
122
|
+
sourcePath,
|
|
123
|
+
decisions: [],
|
|
124
|
+
invalidEntries: 1,
|
|
125
|
+
rawDecisionCount: 0,
|
|
126
|
+
diagnostics: [{
|
|
127
|
+
severity: 'error',
|
|
128
|
+
code: 'invalid-json',
|
|
129
|
+
decisionId: null,
|
|
130
|
+
message: 'Governance decisions artifact is not valid JSON.',
|
|
131
|
+
remediation: 'Repair .neurcode/governance-decisions.json or regenerate decisions with neurcode governance commands.',
|
|
132
|
+
}],
|
|
133
|
+
};
|
|
134
|
+
}
|
|
135
|
+
const records = Array.isArray(parsed.decisions)
|
|
136
|
+
? parsed.decisions
|
|
137
|
+
: [];
|
|
138
|
+
let invalidEntries = 0;
|
|
139
|
+
const decisions = [];
|
|
140
|
+
const diagnostics = [];
|
|
141
|
+
if (!Array.isArray(parsed.decisions)) {
|
|
142
|
+
diagnostics.push({
|
|
143
|
+
severity: 'error',
|
|
144
|
+
code: 'missing-decisions-array',
|
|
145
|
+
decisionId: null,
|
|
146
|
+
message: 'Governance decisions artifact must contain a decisions array.',
|
|
147
|
+
remediation: 'Use neurcode governance accept-risk, temporary-exception, or review to author decisions.',
|
|
148
|
+
});
|
|
149
|
+
}
|
|
150
|
+
records.forEach((entry, index) => {
|
|
151
|
+
if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
|
|
152
|
+
invalidEntries += 1;
|
|
153
|
+
diagnostics.push({
|
|
154
|
+
severity: 'error',
|
|
155
|
+
code: 'invalid-entry',
|
|
156
|
+
decisionId: null,
|
|
157
|
+
message: `Decision entry ${index + 1} is not an object.`,
|
|
158
|
+
});
|
|
159
|
+
return;
|
|
160
|
+
}
|
|
161
|
+
const record = entry;
|
|
162
|
+
const id = asDecisionString(record.id, `decision-${index + 1}`);
|
|
163
|
+
diagnostics.push(...diagnoseUnsupportedFields(record, id));
|
|
164
|
+
if (!isGovernanceDecisionState(record.state)) {
|
|
165
|
+
invalidEntries += 1;
|
|
166
|
+
diagnostics.push({
|
|
167
|
+
severity: 'error',
|
|
168
|
+
code: 'invalid-state',
|
|
169
|
+
decisionId: id,
|
|
170
|
+
message: `Decision ${id} has an unsupported governance state.`,
|
|
171
|
+
});
|
|
172
|
+
return;
|
|
173
|
+
}
|
|
174
|
+
const reason = asDecisionString(record.reason, '');
|
|
175
|
+
if (reason.length < 8) {
|
|
176
|
+
invalidEntries += 1;
|
|
177
|
+
diagnostics.push({
|
|
178
|
+
severity: 'error',
|
|
179
|
+
code: 'missing-justification',
|
|
180
|
+
decisionId: id,
|
|
181
|
+
message: `Decision ${id} must include a justification of at least 8 characters.`,
|
|
182
|
+
});
|
|
183
|
+
return;
|
|
184
|
+
}
|
|
185
|
+
const category = asNullableDecisionString(record.category);
|
|
186
|
+
if (category && !isDriftIntelligenceCategory(category)) {
|
|
187
|
+
diagnostics.push({
|
|
188
|
+
severity: 'warning',
|
|
189
|
+
code: 'unknown-category',
|
|
190
|
+
decisionId: id,
|
|
191
|
+
message: `Decision ${id} references unknown drift category '${category}'.`,
|
|
192
|
+
remediation: 'Use neurcode governance decisions --json to inspect known category values before authoring category-scoped decisions.',
|
|
193
|
+
});
|
|
194
|
+
}
|
|
195
|
+
const decidedAt = asDecisionString(record.decidedAt, new Date(0).toISOString());
|
|
196
|
+
if (!Number.isFinite(Date.parse(decidedAt))) {
|
|
197
|
+
diagnostics.push({
|
|
198
|
+
severity: 'warning',
|
|
199
|
+
code: 'invalid-decided-at',
|
|
200
|
+
decisionId: id,
|
|
201
|
+
message: `Decision ${id} has a non-ISO decidedAt value.`,
|
|
202
|
+
});
|
|
203
|
+
}
|
|
204
|
+
const expiresAt = asNullableDecisionString(record.expiresAt);
|
|
205
|
+
if (expiresAt && !Number.isFinite(Date.parse(expiresAt))) {
|
|
206
|
+
diagnostics.push({
|
|
207
|
+
severity: 'warning',
|
|
208
|
+
code: 'invalid-expiry',
|
|
209
|
+
decisionId: id,
|
|
210
|
+
message: `Decision ${id} has a non-ISO expiresAt value and will be treated as expired.`,
|
|
211
|
+
});
|
|
212
|
+
}
|
|
213
|
+
decisions.push({
|
|
214
|
+
id,
|
|
215
|
+
state: record.state,
|
|
216
|
+
findingId: asNullableDecisionString(record.findingId),
|
|
217
|
+
category: isDriftIntelligenceCategory(category) ? category : null,
|
|
218
|
+
file: normalizeNullablePath(record.file),
|
|
219
|
+
module: normalizeNullablePath(record.module),
|
|
220
|
+
service: asNullableDecisionString(record.service),
|
|
221
|
+
reason,
|
|
222
|
+
actor: asDecisionString(record.actor, 'unknown'),
|
|
223
|
+
decidedAt,
|
|
224
|
+
expiresAt,
|
|
225
|
+
temporary: record.temporary === true || record.state === 'temporary-exception',
|
|
226
|
+
});
|
|
227
|
+
});
|
|
228
|
+
return { sourcePath, decisions, invalidEntries, rawDecisionCount: records.length, diagnostics };
|
|
229
|
+
}
|
|
230
|
+
function writeGovernanceDecisionRegistry(projectRoot, decisions) {
|
|
231
|
+
const sourcePath = getGovernanceDecisionsPath(projectRoot);
|
|
232
|
+
(0, fs_1.mkdirSync)((0, path_1.dirname)(sourcePath), { recursive: true });
|
|
233
|
+
const payload = {
|
|
234
|
+
schemaVersion: exports.GOVERNANCE_DECISIONS_SCHEMA_VERSION,
|
|
235
|
+
decisions,
|
|
236
|
+
};
|
|
237
|
+
(0, fs_1.writeFileSync)(sourcePath, `${JSON.stringify(payload, null, 2)}\n`, 'utf-8');
|
|
238
|
+
return sourcePath;
|
|
239
|
+
}
|
|
240
|
+
function resolveGovernanceActor(projectRoot, explicit) {
|
|
241
|
+
if (explicit && explicit.trim())
|
|
242
|
+
return explicit.trim();
|
|
243
|
+
if (process.env.NEURCODE_GOVERNANCE_ACTOR && process.env.NEURCODE_GOVERNANCE_ACTOR.trim()) {
|
|
244
|
+
return process.env.NEURCODE_GOVERNANCE_ACTOR.trim();
|
|
245
|
+
}
|
|
246
|
+
if (process.env.GITHUB_ACTOR && process.env.GITHUB_ACTOR.trim()) {
|
|
247
|
+
return process.env.GITHUB_ACTOR.trim();
|
|
248
|
+
}
|
|
249
|
+
try {
|
|
250
|
+
const gitEmail = (0, child_process_1.execFileSync)('git', ['config', 'user.email'], {
|
|
251
|
+
cwd: projectRoot,
|
|
252
|
+
encoding: 'utf-8',
|
|
253
|
+
stdio: ['ignore', 'pipe', 'ignore'],
|
|
254
|
+
}).trim();
|
|
255
|
+
if (gitEmail)
|
|
256
|
+
return gitEmail;
|
|
257
|
+
}
|
|
258
|
+
catch {
|
|
259
|
+
// Fall back below.
|
|
260
|
+
}
|
|
261
|
+
try {
|
|
262
|
+
const gitName = (0, child_process_1.execFileSync)('git', ['config', 'user.name'], {
|
|
263
|
+
cwd: projectRoot,
|
|
264
|
+
encoding: 'utf-8',
|
|
265
|
+
stdio: ['ignore', 'pipe', 'ignore'],
|
|
266
|
+
}).trim();
|
|
267
|
+
if (gitName)
|
|
268
|
+
return gitName;
|
|
269
|
+
}
|
|
270
|
+
catch {
|
|
271
|
+
// Fall back below.
|
|
272
|
+
}
|
|
273
|
+
return process.env.USER || 'unknown';
|
|
274
|
+
}
|
|
275
|
+
function resolveGovernanceDecisionExpiry(input) {
|
|
276
|
+
if (input.expiresAt && input.expiresAt.trim()) {
|
|
277
|
+
const parsed = Date.parse(input.expiresAt.trim());
|
|
278
|
+
if (!Number.isFinite(parsed)) {
|
|
279
|
+
throw new Error('expiresAt must be a valid ISO timestamp');
|
|
280
|
+
}
|
|
281
|
+
return new Date(parsed).toISOString();
|
|
282
|
+
}
|
|
283
|
+
if (input.expiresInDays !== undefined) {
|
|
284
|
+
const days = Number(input.expiresInDays);
|
|
285
|
+
if (!Number.isFinite(days) || days <= 0) {
|
|
286
|
+
throw new Error('days must be a positive number');
|
|
287
|
+
}
|
|
288
|
+
return new Date(Date.now() + Math.floor(days) * 24 * 60 * 60 * 1000).toISOString();
|
|
289
|
+
}
|
|
290
|
+
if (input.required) {
|
|
291
|
+
throw new Error('temporary exceptions require --expires <iso> or --days <n>');
|
|
292
|
+
}
|
|
293
|
+
return null;
|
|
294
|
+
}
|
|
295
|
+
function buildGovernanceDecision(input) {
|
|
296
|
+
const decidedAt = input.decidedAt || new Date().toISOString();
|
|
297
|
+
const file = input.file ? (0, intelligence_runtime_common_1.normalizeRepoPath)(input.file) : null;
|
|
298
|
+
const module = input.module ? (0, intelligence_runtime_common_1.normalizeRepoPath)(input.module) : null;
|
|
299
|
+
const service = input.service && input.service.trim() ? input.service.trim() : null;
|
|
300
|
+
const findingId = input.findingId && input.findingId.trim() ? input.findingId.trim() : null;
|
|
301
|
+
const reason = input.reason.trim();
|
|
302
|
+
if (reason.length < 8) {
|
|
303
|
+
throw new Error('decision reason must be at least 8 characters');
|
|
304
|
+
}
|
|
305
|
+
if (!findingId && !input.category) {
|
|
306
|
+
throw new Error('decision must target either --finding <id> or --category <category>');
|
|
307
|
+
}
|
|
308
|
+
if (input.category && !isDriftIntelligenceCategory(input.category)) {
|
|
309
|
+
throw new Error(`unsupported drift category '${input.category}'`);
|
|
310
|
+
}
|
|
311
|
+
const id = `gov-dec-${decisionHash([
|
|
312
|
+
input.state,
|
|
313
|
+
findingId || '',
|
|
314
|
+
input.category || '',
|
|
315
|
+
file || '',
|
|
316
|
+
module || '',
|
|
317
|
+
service || '',
|
|
318
|
+
reason,
|
|
319
|
+
input.actor,
|
|
320
|
+
decidedAt,
|
|
321
|
+
])}`;
|
|
322
|
+
return {
|
|
323
|
+
id,
|
|
324
|
+
state: input.state,
|
|
325
|
+
findingId,
|
|
326
|
+
category: input.category || null,
|
|
327
|
+
file,
|
|
328
|
+
module,
|
|
329
|
+
service,
|
|
330
|
+
reason,
|
|
331
|
+
actor: input.actor,
|
|
332
|
+
decidedAt,
|
|
333
|
+
expiresAt: input.expiresAt || null,
|
|
334
|
+
temporary: input.temporary === true || input.state === 'temporary-exception',
|
|
335
|
+
};
|
|
336
|
+
}
|
|
337
|
+
function addGovernanceDecision(projectRoot, decision) {
|
|
338
|
+
const registry = readGovernanceDecisionRegistry(projectRoot);
|
|
339
|
+
const blockingDiagnostics = registry.diagnostics.filter((item) => item.severity === 'error');
|
|
340
|
+
if (registry.invalidEntries > 0 || blockingDiagnostics.length > 0) {
|
|
341
|
+
throw new Error('governance decisions artifact has invalid entries; run `neurcode governance hygiene` and repair it before authoring new decisions');
|
|
342
|
+
}
|
|
343
|
+
const next = [
|
|
344
|
+
...registry.decisions.filter((item) => item.id !== decision.id),
|
|
345
|
+
decision,
|
|
346
|
+
];
|
|
347
|
+
const sourcePath = writeGovernanceDecisionRegistry(projectRoot, next);
|
|
348
|
+
return { decision, sourcePath, totalDecisions: next.length };
|
|
349
|
+
}
|
|
350
|
+
function summarizeGovernanceDecisionHygiene(registry) {
|
|
351
|
+
const issues = [...registry.diagnostics];
|
|
352
|
+
const now = Date.now();
|
|
353
|
+
let activeDecisions = 0;
|
|
354
|
+
let expiredDecisions = 0;
|
|
355
|
+
for (const decision of registry.decisions) {
|
|
356
|
+
const expired = isGovernanceDecisionExpired(decision, now);
|
|
357
|
+
if (expired) {
|
|
358
|
+
expiredDecisions += 1;
|
|
359
|
+
issues.push({
|
|
360
|
+
severity: 'warning',
|
|
361
|
+
code: 'expired-decision',
|
|
362
|
+
decisionId: decision.id,
|
|
363
|
+
message: `Decision ${decision.id} is expired and no longer changes rollout posture.`,
|
|
364
|
+
remediation: 'Remove expired decisions or author a fresh temporary exception with current justification.',
|
|
365
|
+
});
|
|
366
|
+
}
|
|
367
|
+
else {
|
|
368
|
+
activeDecisions += 1;
|
|
369
|
+
}
|
|
370
|
+
if (isGovernanceDecisionOverride(decision.state) && !decision.expiresAt && decision.state === 'temporary-exception') {
|
|
371
|
+
issues.push({
|
|
372
|
+
severity: 'error',
|
|
373
|
+
code: 'unbounded-temporary-exception',
|
|
374
|
+
decisionId: decision.id,
|
|
375
|
+
message: `Temporary exception ${decision.id} has no expiry.`,
|
|
376
|
+
remediation: 'Add expiresAt or recreate it with neurcode governance temporary-exception --days <n>.',
|
|
377
|
+
});
|
|
378
|
+
}
|
|
379
|
+
if (!decision.findingId && !decision.category) {
|
|
380
|
+
issues.push({
|
|
381
|
+
severity: 'error',
|
|
382
|
+
code: 'unmatched-decision-target',
|
|
383
|
+
decisionId: decision.id,
|
|
384
|
+
message: `Decision ${decision.id} cannot match findings because it has neither findingId nor category.`,
|
|
385
|
+
remediation: 'Target a specific finding or drift category.',
|
|
386
|
+
});
|
|
387
|
+
}
|
|
388
|
+
if (!decision.findingId && decision.category && !decision.file && !decision.module && !decision.service) {
|
|
389
|
+
issues.push({
|
|
390
|
+
severity: 'warning',
|
|
391
|
+
code: 'broad-scope',
|
|
392
|
+
decisionId: decision.id,
|
|
393
|
+
message: `Decision ${decision.id} applies broadly to category '${decision.category}'.`,
|
|
394
|
+
remediation: 'Prefer adding --file, --module, or --service when accepting risk for a bounded scope.',
|
|
395
|
+
});
|
|
396
|
+
}
|
|
397
|
+
}
|
|
398
|
+
const errorCount = issues.filter((item) => item.severity === 'error').length;
|
|
399
|
+
const warningCount = issues.filter((item) => item.severity === 'warning').length;
|
|
400
|
+
return {
|
|
401
|
+
sourcePath: registry.sourcePath,
|
|
402
|
+
totalDecisions: registry.decisions.length,
|
|
403
|
+
activeDecisions,
|
|
404
|
+
expiredDecisions,
|
|
405
|
+
invalidEntries: registry.invalidEntries,
|
|
406
|
+
issueCount: issues.length,
|
|
407
|
+
errorCount,
|
|
408
|
+
warningCount,
|
|
409
|
+
issues,
|
|
410
|
+
};
|
|
411
|
+
}
|
|
412
|
+
//# sourceMappingURL=governance-decisions.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"governance-decisions.js","sourceRoot":"","sources":["../../src/utils/governance-decisions.ts"],"names":[],"mappings":";;;AA0FA,gEAEC;AAED,8DAQC;AAED,kEAEC;AAED,0EAEC;AAED,kEAIC;AAED,oEAKC;AAgCD,wEAiIC;AAED,0EASC;AAED,wDA6BC;AAED,0EAuBC;AAED,0DAwDC;AAED,sDAkBC;AAED,gFAiEC;AAhfD,iDAA6C;AAC7C,mCAAoC;AACpC,2BAAwE;AACxE,+BAAqC;AAKrC,+EAAkE;AAErD,QAAA,mCAAmC,GAAG,kCAAkC,CAAC;AA6CtF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAA4B;IAC1D,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;IACtB,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,IAAI;IACJ,OAAO;IACP,WAAW;IACX,UAAU;IACV,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,WAAW;IACX,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH,SAAgB,0BAA0B,CAAC,WAAmB;IAC5D,OAAO,IAAA,WAAI,EAAC,WAAW,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAAc;IACtD,OAAO,KAAK,KAAK,cAAc;WAC1B,KAAK,KAAK,iBAAiB;WAC3B,KAAK,KAAK,eAAe;WACzB,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,iBAAiB;WAC3B,KAAK,KAAK,oBAAoB;WAC9B,KAAK,KAAK,qBAAqB,CAAC;AACvC,CAAC;AAED,SAAgB,2BAA2B,CAAC,KAAc;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAkC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAgB,+BAA+B;IAC7C,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAgB,2BAA2B,CAAC,QAAqD,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjH,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;AAC3C,CAAC;AAED,SAAgB,4BAA4B,CAAC,KAA8B;IACzE,OAAO,KAAK,KAAK,eAAe;WAC3B,KAAK,KAAK,kBAAkB;WAC5B,KAAK,KAAK,oBAAoB;WAC9B,KAAK,KAAK,qBAAqB,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,QAAgB;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxF,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,GAAG,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,IAAA,+CAAiB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA+B,EAAE,UAAyB;IAC3F,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAChD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,QAAQ,EAAE,SAAkB;QAC5B,IAAI,EAAE,mBAAmB;QACzB,UAAU;QACV,OAAO,EAAE,wCAAwC,KAAK,IAAI;QAC1D,WAAW,EAAE,oFAAoF;KAClG,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAgB,8BAA8B,CAAC,WAAmB;IAChE,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU;YACV,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,CAAC;YACjB,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,CAAC;oBACZ,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,kDAAkD;oBAC3D,WAAW,EAAE,uGAAuG;iBACrH,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAE,MAAkC,CAAC,SAAS,CAAC;QAC1E,CAAC,CAAE,MAAmC,CAAC,SAAS;QAChD,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,MAAM,WAAW,GAAmC,EAAE,CAAC;IAEvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAE,MAAkC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,yBAAyB;YAC/B,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,+DAA+D;YACxE,WAAW,EAAE,0FAA0F;SACxG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,cAAc,IAAI,CAAC,CAAC;YACpB,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,eAAe;gBACrB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,kBAAkB,KAAK,GAAG,CAAC,oBAAoB;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,WAAW,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAE3D,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,cAAc,IAAI,CAAC,CAAC;YACpB,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,eAAe;gBACrB,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,YAAY,EAAE,uCAAuC;aAC/D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,IAAI,CAAC,CAAC;YACpB,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,YAAY,EAAE,yDAAyD;aACjF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,YAAY,EAAE,uCAAuC,QAAQ,IAAI;gBAC1E,WAAW,EAAE,uHAAuH;aACrI,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC5C,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,oBAAoB;gBAC1B,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,YAAY,EAAE,iCAAiC;aACzD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzD,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,YAAY,EAAE,gEAAgE;aACxF,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,IAAI,CAAC;YACb,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC;YACrD,QAAQ,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACjE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC;YACjD,MAAM;YACN,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;YAChD,SAAS;YACT,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB;SAC/E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;AAClG,CAAC;AAED,SAAgB,+BAA+B,CAAC,WAAmB,EAAE,SAAqC;IACxG,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAA,cAAS,EAAC,IAAA,cAAO,EAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,2CAAmC;QAClD,SAAS;KACV,CAAC;IACF,IAAA,kBAAa,EAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,sBAAsB,CAAC,WAAmB,EAAE,QAAiB;IAC3E,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1F,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;YAC7D,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE;YAC3D,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;AACvC,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAI/C;IACC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAYvC;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,+CAAiB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,+CAAiB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,EAAE,GAAG,WAAW,YAAY,CAAC;QACjC,KAAK,CAAC,KAAK;QACX,SAAS,IAAI,EAAE;QACf,KAAK,CAAC,QAAQ,IAAI,EAAE;QACpB,IAAI,IAAI,EAAE;QACV,MAAM,IAAI,EAAE;QACZ,OAAO,IAAI,EAAE;QACb,MAAM;QACN,KAAK,CAAC,KAAK;QACX,SAAS;KACV,CAAC,EAAE,CAAC;IAEL,OAAO;QACL,EAAE;QACF,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS;QACT,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,qBAAqB;KAC7E,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,WAAmB,EAAE,QAAkC;IAK3F,MAAM,QAAQ,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,cAAc,GAAG,CAAC,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG;QACX,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC/D,QAAQ;KACT,CAAC;IACF,MAAM,UAAU,GAAG,+BAA+B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,SAAgB,kCAAkC,CAAC,QAAoC;IACrF,MAAM,MAAM,GAAmC,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,2BAA2B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,OAAO,EAAE,CAAC;YACZ,gBAAgB,IAAI,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,oDAAoD;gBACpF,WAAW,EAAE,4FAA4F;aAC1G,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;YACpH,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,+BAA+B;gBACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,uBAAuB,QAAQ,CAAC,EAAE,iBAAiB;gBAC5D,WAAW,EAAE,uFAAuF;aACrG,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,uEAAuE;gBACvG,WAAW,EAAE,8CAA8C;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxG,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,iCAAiC,QAAQ,CAAC,QAAQ,IAAI;gBACtF,WAAW,EAAE,uFAAuF;aACrG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACjF,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM;QACzC,eAAe;QACf,gBAAgB;QAChB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,UAAU;QACV,YAAY;QACZ,MAAM;KACP,CAAC;AACJ,CAAC"}
|
|
@@ -74,7 +74,7 @@ export declare function buildProvenanceRecord(input: {
|
|
|
74
74
|
* Updates the index file atomically.
|
|
75
75
|
* Index retains last 1000 records (trims oldest first).
|
|
76
76
|
*/
|
|
77
|
-
export declare function saveProvenanceRecord(repoRoot: string, record: ProvenanceRecord):
|
|
77
|
+
export declare function saveProvenanceRecord(repoRoot: string, record: ProvenanceRecord): boolean;
|
|
78
78
|
/**
|
|
79
79
|
* Load the provenance index.
|
|
80
80
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"governance-provenance.d.ts","sourceRoot":"","sources":["../../src/utils/governance-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;
|
|
1
|
+
{"version":3,"file":"governance-provenance.d.ts","sourceRoot":"","sources":["../../src/utils/governance-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,MAAM,WAAW,gBAAgB;IAE/B,KAAK,EAAY,MAAM,CAAC;IACxB,KAAK,EAAY,MAAM,CAAC;IACxB,aAAa,EAAI,CAAC,CAAC;IAGnB,QAAQ,EAAS,MAAM,CAAC;IACxB,aAAa,EAAI,MAAM,CAAC;IACxB,WAAW,EAAM,MAAM,CAAC;IAGxB,MAAM,EAAW,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAO,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAO,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAU,MAAM,EAAE,CAAC;IAG1B,aAAa,EAAI,MAAM,CAAC;IACxB,aAAa,EAAI,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,oBAAoB,EAAG,MAAM,CAAC;IAC9B,gBAAgB,EAAO,MAAM,CAAC;IAC9B,iBAAiB,EAAM,MAAM,CAAC;IAG9B,OAAO,EAAU,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAG3B,WAAW,EAAM,MAAM,CAAC;IACxB,SAAS,EAAQ,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAK,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QACb,KAAK,EAAQ,MAAM,CAAC;QACpB,KAAK,EAAQ,MAAM,CAAC;QACpB,OAAO,EAAM,MAAM,CAAC;QACpB,MAAM,EAAO,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AA2BD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,EAAO,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,MAAM,EAAS,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAK,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAK,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAQ,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAQ,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,gBAAgB,CA8CnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAiCxF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAerE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAW7F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,gBAAgB,EAAE,CAepF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAa3E"}
|
|
@@ -22,6 +22,7 @@ exports.verifyProvenanceIntegrity = verifyProvenanceIntegrity;
|
|
|
22
22
|
const crypto_1 = require("crypto");
|
|
23
23
|
const fs_1 = require("fs");
|
|
24
24
|
const path_1 = require("path");
|
|
25
|
+
const artifact_io_1 = require("./artifact-io");
|
|
25
26
|
const MAX_INDEX_RECORDS = 1000;
|
|
26
27
|
function provenanceDir(repoRoot) {
|
|
27
28
|
return (0, path_1.join)(repoRoot, '.neurcode', 'provenance');
|
|
@@ -36,11 +37,6 @@ function computeFingerprint(runId, runAt, ruleIds, blockingCount, verdict) {
|
|
|
36
37
|
const canonical = `${runId}|${runAt}|${ruleIds.slice().sort().join(',')}|${blockingCount}|${verdict}`;
|
|
37
38
|
return (0, crypto_1.createHash)('sha256').update(canonical, 'utf8').digest('hex');
|
|
38
39
|
}
|
|
39
|
-
function atomicWrite(filePath, content) {
|
|
40
|
-
const tmp = `${filePath}.tmp`;
|
|
41
|
-
(0, fs_1.writeFileSync)(tmp, content, 'utf8');
|
|
42
|
-
(0, fs_1.renameSync)(tmp, filePath);
|
|
43
|
-
}
|
|
44
40
|
/**
|
|
45
41
|
* Build a provenance record from verify run results.
|
|
46
42
|
* The fingerprint is SHA-256 of: runId + runAt + ruleIds.sort().join(',') + blockingCount + verdict
|
|
@@ -94,7 +90,7 @@ function saveProvenanceRecord(repoRoot, record) {
|
|
|
94
90
|
(0, fs_1.mkdirSync)(dir, { recursive: true });
|
|
95
91
|
}
|
|
96
92
|
// Write the record file atomically
|
|
97
|
-
|
|
93
|
+
(0, artifact_io_1.atomicWriteJsonFileSync)(recordPath(repoRoot, record.runId), record);
|
|
98
94
|
// Update the index atomically
|
|
99
95
|
const idx = loadProvenanceIndex(repoRoot);
|
|
100
96
|
idx.records.push({
|
|
@@ -109,10 +105,12 @@ function saveProvenanceRecord(repoRoot, record) {
|
|
|
109
105
|
if (idx.records.length > MAX_INDEX_RECORDS) {
|
|
110
106
|
idx.records = idx.records.slice(0, MAX_INDEX_RECORDS);
|
|
111
107
|
}
|
|
112
|
-
|
|
108
|
+
(0, artifact_io_1.atomicWriteJsonFileSync)(indexPath(repoRoot), idx);
|
|
109
|
+
return true;
|
|
113
110
|
}
|
|
114
111
|
catch {
|
|
115
112
|
// Never throw — provenance persistence is best-effort
|
|
113
|
+
return false;
|
|
116
114
|
}
|
|
117
115
|
}
|
|
118
116
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"governance-provenance.js","sourceRoot":"","sources":["../../src/utils/governance-provenance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;
|
|
1
|
+
{"version":3,"file":"governance-provenance.js","sourceRoot":"","sources":["../../src/utils/governance-provenance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAsFH,sDAgEC;AAOD,oDAiCC;AAKD,kDAeC;AAKD,oDAWC;AAKD,kDAeC;AAMD,8DAaC;AAvQD,mCAA4D;AAC5D,2BAAyD;AACzD,+BAA4B;AAC5B,+CAAwD;AAoDxD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,IAAA,WAAI,EAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAa;IACjD,OAAO,IAAA,WAAI,EAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAA,WAAI,EAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAa,EACb,KAAa,EACb,OAAiB,EACjB,aAAqB,EACrB,OAAe;IAEf,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;IACtG,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAkBrC;IACC,MAAM,KAAK,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEvC,MAAM,WAAW,GAAG,kBAAkB,CACpC,KAAK,EACL,KAAK,EACL,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,OAAO,CACd,CAAC;IAEF,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,YAAY,GAAkB,IAAI,CAAC;IAEvC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,IAAI,IAAI,CAAC;IAC1E,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvF,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,IAAI,SAAS,CAAC;IAChF,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK;QACL,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAS,KAAK,CAAC,QAAQ;QAC/B,aAAa,EAAI,KAAK,CAAC,aAAa;QACpC,WAAW,EAAM,KAAK,CAAC,WAAW;QAClC,MAAM,EAAW,KAAK,CAAC,MAAM;QAC7B,UAAU,EAAO,KAAK,CAAC,UAAU;QACjC,UAAU,EAAO,KAAK,CAAC,UAAU;QACjC,OAAO,EAAU,KAAK,CAAC,OAAO;QAC9B,aAAa,EAAI,KAAK,CAAC,aAAa;QACpC,aAAa,EAAI,KAAK,CAAC,aAAa;QACpC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,gBAAgB,EAAM,KAAK,CAAC,gBAAgB;QAC5C,iBAAiB,EAAK,KAAK,CAAC,iBAAiB;QAC7C,OAAO,EAAW,KAAK,CAAC,OAAO;QAC/B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,WAAW;QACX,SAAS;QACT,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,QAAgB,EAAE,MAAwB;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,IAAA,eAAU,EAAC,GAAG,CAAC,EAAE,CAAC;YACrB,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,mCAAmC;QACnC,IAAA,qCAAuB,EAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpE,8BAA8B;QAC9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAE1C,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACf,KAAK,EAAQ,MAAM,CAAC,KAAK;YACzB,KAAK,EAAQ,MAAM,CAAC,KAAK;YACzB,OAAO,EAAM,MAAM,CAAC,OAAO;YAC3B,MAAM,EAAO,MAAM,CAAC,MAAM;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QAEH,wDAAwD;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACxD,CAAC;QAED,IAAA,qCAAuB,EAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,QAAgB,EAAE,KAAa;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,MAAwB;IAChE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CACjC,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,OAAO,QAAQ,KAAK,MAAM,CAAC,WAAW,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
|
|
@@ -1,5 +1,7 @@
|
|
|
1
1
|
import { DiffFile } from '@neurcode-ai/diff-parser';
|
|
2
2
|
import { AiChangeJustification, AiChangeLogIntegrityStatus, BlastRadiusReport, ChangeSet, ContextPolicy, ContextPolicyEvaluation, GovernanceDecisionReport, GovernancePlanSpec, OrgGovernanceSettings, SuspiciousChangeReport } from '@neurcode-ai/core';
|
|
3
|
+
import { type ActiveEngineeringContext } from './active-engineering-context';
|
|
4
|
+
import { buildDriftIntelligence } from './drift-intelligence';
|
|
3
5
|
export interface GovernanceEvaluationInput {
|
|
4
6
|
projectRoot: string;
|
|
5
7
|
task: string;
|
|
@@ -13,6 +15,7 @@ export interface GovernanceEvaluationInput {
|
|
|
13
15
|
signingKeyId?: string | null;
|
|
14
16
|
signingKeys?: Record<string, string> | null;
|
|
15
17
|
signer?: string;
|
|
18
|
+
activeEngineeringContext?: ActiveEngineeringContext | null;
|
|
16
19
|
}
|
|
17
20
|
export interface GovernanceEvaluationResult {
|
|
18
21
|
planSpec: GovernancePlanSpec;
|
|
@@ -31,6 +34,111 @@ export interface GovernanceEvaluationResult {
|
|
|
31
34
|
aiChangeLogPath: string;
|
|
32
35
|
aiChangeLogAuditPath: string;
|
|
33
36
|
aiChangeLogIntegrity: AiChangeLogIntegrityStatus;
|
|
37
|
+
engineeringContext: {
|
|
38
|
+
source: 'intent-runtime' | 'legacy-plan';
|
|
39
|
+
sessionId: string | null;
|
|
40
|
+
intentPackId: string | null;
|
|
41
|
+
contextPackId: string | null;
|
|
42
|
+
repositoryGraphId: string | null;
|
|
43
|
+
approvedScope: {
|
|
44
|
+
files: string[];
|
|
45
|
+
modules: string[];
|
|
46
|
+
services: string[];
|
|
47
|
+
};
|
|
48
|
+
intentSummary: string | null;
|
|
49
|
+
constraints: string[];
|
|
50
|
+
expectedDependencies: string[];
|
|
51
|
+
expectedInfrastructure: string[];
|
|
52
|
+
rolloutExpectations: string[];
|
|
53
|
+
governanceExpectations: string[];
|
|
54
|
+
forbiddenBoundaries: Array<{
|
|
55
|
+
type: string;
|
|
56
|
+
path: string;
|
|
57
|
+
policy: string;
|
|
58
|
+
reason: string;
|
|
59
|
+
}>;
|
|
60
|
+
expectedBlastRadius: unknown;
|
|
61
|
+
contextFiles: Array<{
|
|
62
|
+
path: string;
|
|
63
|
+
confidence: number;
|
|
64
|
+
source: string;
|
|
65
|
+
}>;
|
|
66
|
+
serviceBoundaries: Array<{
|
|
67
|
+
name: string;
|
|
68
|
+
path: string;
|
|
69
|
+
kind: string;
|
|
70
|
+
}>;
|
|
71
|
+
semanticExpectations: {
|
|
72
|
+
ownershipBoundaries: string[];
|
|
73
|
+
contractIds: string[];
|
|
74
|
+
invariantIds: string[];
|
|
75
|
+
expectedResponsibilities: string[];
|
|
76
|
+
expectedBehaviorKinds: string[];
|
|
77
|
+
expectedRuntimeFlows: string[];
|
|
78
|
+
expectedRolloutUnits: string[];
|
|
79
|
+
};
|
|
80
|
+
ownershipBoundaries: Array<{
|
|
81
|
+
name: string;
|
|
82
|
+
domain: string;
|
|
83
|
+
kind: string;
|
|
84
|
+
primaryOwner: string;
|
|
85
|
+
responsibilities: string[];
|
|
86
|
+
forbiddenResponsibilities: string[];
|
|
87
|
+
criticality: string;
|
|
88
|
+
}>;
|
|
89
|
+
semanticContracts: Array<{
|
|
90
|
+
id: string;
|
|
91
|
+
name: string;
|
|
92
|
+
kind: string;
|
|
93
|
+
boundaryName: string | null;
|
|
94
|
+
expectedResponsibilities: string[];
|
|
95
|
+
forbiddenResponsibilities: string[];
|
|
96
|
+
forbiddenDependencyKinds: string[];
|
|
97
|
+
}>;
|
|
98
|
+
invariants: Array<{
|
|
99
|
+
id: string;
|
|
100
|
+
name: string;
|
|
101
|
+
category: string;
|
|
102
|
+
expectation: string;
|
|
103
|
+
impact: string;
|
|
104
|
+
boundaryName: string | null;
|
|
105
|
+
}>;
|
|
106
|
+
runtimeBehaviors: Array<{
|
|
107
|
+
boundaryName: string;
|
|
108
|
+
behaviorKinds: string[];
|
|
109
|
+
sideEffectKinds: string[];
|
|
110
|
+
stateSurfaces: string[];
|
|
111
|
+
rolloutUnits: string[];
|
|
112
|
+
runtimeEnvironments: string[];
|
|
113
|
+
criticalFlows: string[];
|
|
114
|
+
}>;
|
|
115
|
+
runtimeInteractions: Array<{
|
|
116
|
+
kind: string;
|
|
117
|
+
fromBoundaryName: string;
|
|
118
|
+
toBoundaryName: string | null;
|
|
119
|
+
subject: string;
|
|
120
|
+
rationale: string;
|
|
121
|
+
}>;
|
|
122
|
+
deploymentBoundaries: Array<{
|
|
123
|
+
name: string;
|
|
124
|
+
type: string;
|
|
125
|
+
rolloutUnits: string[];
|
|
126
|
+
runtimeEnvironments: string[];
|
|
127
|
+
dependentBoundaryNames: string[];
|
|
128
|
+
}>;
|
|
129
|
+
invariantMemory: {
|
|
130
|
+
invariantMemoryId: string | null;
|
|
131
|
+
historicalDriftPatterns: Array<{
|
|
132
|
+
category: string;
|
|
133
|
+
count: number;
|
|
134
|
+
latestSummary: string;
|
|
135
|
+
}>;
|
|
136
|
+
} | null;
|
|
137
|
+
relatedModules: string[];
|
|
138
|
+
sessionLineage: string[];
|
|
139
|
+
warnings: string[];
|
|
140
|
+
};
|
|
141
|
+
driftIntelligence: ReturnType<typeof buildDriftIntelligence>;
|
|
34
142
|
}
|
|
35
143
|
export declare function evaluateGovernance(input: GovernanceEvaluationInput): GovernanceEvaluationResult;
|
|
36
144
|
//# sourceMappingURL=governance.d.ts.map
|