@omne-harness/repo-toolchain 0.0.12 → 0.0.14

package/README.md

@@ -106,7 +106,7 @@ Schema 2 and 3 source paths start at repository root. Referenced files and Markd
 IC-1 and IC-5 use adopted roles and actual public exports. Directory names grant no exception.
 A missing current or BASE input remains unknown or no-data. Current deletion still reports its semantic change.
 Changes to cited Markdown also trigger the hook. See the [conformance contract](src/arch/CONFORMANCE.md).
-The conformance report has [direction rows](src/arch/CONFORMANCE.md#方向行). The rows and the roles come from the runner repository's `constraints.json`, the same file that `omne-deps` reads. The dependency facts come from the dependency graph of the reported version. When that graph is not available, the rows are unknown. When the graph of the baseline is not available, the report does not mark deviations as new or stock, and each row gives the reason. A direction deviation is reported in the loop. It is not a hard line.
+The conformance report has [direction rows](src/arch/CONFORMANCE.md#方向行). The rows and the roles come from the runner repository's `constraints.json`, the same file that `omne-deps` reads. The dependency facts come from the dependency graph of the reported version. When no role that the direction rows reference has a file in that version, the report does not take the graph, and each row is unknown with the same text as with the graph. The [conformance contract](src/arch/CONFORMANCE.md#方向行) gives the rule. When the graph is taken but is not available, the rows are unknown. When the graph of the baseline is not available, the report does not mark deviations as new or stock, and each row gives the reason. A direction deviation is reported in the loop. It is not a hard line.
 It reports static conformance separately from added, removed and changed assembly facts.
 Fact counts are neutral. They have no thresholds or trend comparison.
 
@@ -130,16 +130,22 @@ The acceptance lock preserves original role violations in `LockReport.violations
 Loop keeps each full report in `auditRanges[].acceptance`. Its acceptance hard line contains only unresolved findings.
 Both text reports show original violations and approvals. Other Loop hard lines still apply.
 
-The artifact contains only the fixed [D010 decision](https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357).
-It covers commit `48ad37d292796326d65055a75e8a1fde44fe4233` and `packages/agent/agent/acceptance/README.md`.
-The tool checks real Git objects, one parent, exact blobs, and all bytes from `git diff --no-ext-diff --no-textconv --no-color --binary -U3 --src-prefix=a/ --dst-prefix=b/ --text`.
+The artifact contains a read-only list of fixed decisions in `src/acceptance/historical-approvals.data.ts`. The checker in `src/acceptance/historical-approvals.ts` reads only this list.
+Each entry covers one commit and one protected path. A commit with more protected paths has one entry for each path.
+The [D010 decision](https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357) covers commit `48ad37d292796326d65055a75e8a1fde44fe4233` and `packages/agent/agent/acceptance/README.md`.
+The [#769 decision](https://github.com/nemori-ai/omne-harness-lite/issues/769#issuecomment-6411908205) covers 27 paths in commits `19f457a15`, `9f3967cc5`, `69bdedfab`, `837d333fd`, `14b0fcfcb` and `06acd53ca`.
+Without a task context, the lock compares a merge commit with each parent (`git diff-tree -m`) and lists each path that differs from one parent. With a task context it uses `--cc`, which lists only paths that differ from all parents. A clean merge then lists no paths. The six #769 commits contain four such merges.
+By registration convention, a merge entry names the one parent where the path changed. The tool does not check this convention. It checks only that the named parent is one of the parents of the commit.
+The tool checks real Git objects, that the named parent is a parent of the commit, exact blobs, and all bytes from `git diff --no-ext-diff --no-textconv --no-color --binary -U3 --src-prefix=a/ --dst-prefix=b/ --text`.
+For a path that does not exist on one side, the blob is the Git null object ID (40 zeros), as `git diff --raw` shows it. The tool then checks that the tree has no such path.
 The call fixes `core.abbrev=8`, `diff.noprefix=false`, `diff.mnemonicPrefix=false`, `diff.algorithm=myers`, `diff.indentHeuristic=true`, `diff.context=3`, `diff.interHunkContext=0`, `diff.suppressBlankEmpty=false`, `diff.srcPrefix=a/`, `diff.dstPrefix=b/`, `core.attributesFile=/dev/null`, and `attr.tree` (the empty tree). It removes `GIT_DIFF_OPTS` and `GIT_ATTR_SOURCE` from its environment and sets `GIT_ATTR_NOSYSTEM=1`. Repository size and these settings do not change the bytes.
-Known limits: a funcname, xfuncname or `binary` attribute in `info/attributes`, a `.gitattributes` file in the worktree on Git older than 2.43, and an object prefix collision change the bytes. D010 then does not receive approval. These cases fail as a rejection, never as a false approval.
-Ordinary documents in that historical commit do not prevent approval. An additional protected path cannot receive this approval.
+Known limits: a funcname, xfuncname or `binary` attribute in `info/attributes`, a `.gitattributes` file in the worktree on Git older than 2.43, and an object prefix collision change the bytes. The entry then does not receive approval. These cases fail as a rejection, never as a false approval.
+Ordinary documents in a historical commit do not prevent approval. The protected paths that the lock lists for a commit must be exactly the paths registered for that commit. One more or one less path gives no approval for that commit.
+When the path sets are equal but the fingerprint of one entry does not match, only that entry gets no approval. The other entries of the commit are approved. The path of the failed entry stays an unresolved violation, so the CLI still exits 1.
 Uncommitted edits, future developer commits, and fingerprint or decision mismatches still fail.
 Git read failures remain tool errors. Configuration, environment variables, arguments, and supplied URLs cannot authorize changes.
 No runtime GitHub request is required. Adoption trusts the reviewed artifact and its npm integrity.
 Source tests alone do not establish that consumers installed the release.
 
 Regression tests are in `tests/acceptance-lock.spec.ts` and `tests/loop-strict.spec.ts`.
-The real history cases require this repository's D010 Git objects.
+The real history cases require the Git objects of the registered commits in this repository.

package/README_ZH.md

@@ -137,12 +137,16 @@ pnpm run acceptance:lock --base <任务基线提交或分支>
 Loop 的 `auditRanges[].acceptance` 保留完整报告，`hardLines.acceptanceLock.violations` 只列未解决项。
 Loop 的 Markdown 同时显示原始违规和批准决定；其他硬线照常判断。
 
-当前制品只包含 [D010 的固定决定](https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357)。
-它只批准提交 `48ad37d292796326d65055a75e8a1fde44fe4233` 中的 `packages/agent/agent/acceptance/README.md` 改动。
-工具读取真实 Git 对象，核对完整提交、唯一父提交、受保护路径、旧新 blob 和完整二进制 diff 的 SHA-256。该 diff 使用 `git diff --no-ext-diff --no-textconv --no-color --binary -U3 --src-prefix=a/ --dst-prefix=b/ --text`。
+固定决定编进 `src/acceptance/historical-approvals.data.ts` 的只读列表（核对器 `src/acceptance/historical-approvals.ts` 只读这份列表），每条对应一个提交里的一个受保护路径；一个提交改了几个受保护路径，就登记几条。
+[D010 的决定](https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357)批准提交 `48ad37d292796326d65055a75e8a1fde44fe4233` 中的 `packages/agent/agent/acceptance/README.md` 改动。
+[#769 的决定](https://github.com/nemori-ai/omne-harness-lite/issues/769#issuecomment-6411908205)批准提交 `19f457a15`、`9f3967cc5`、`69bdedfab`、`837d333fd`、`14b0fcfcb`、`06acd53ca` 中的 27 个路径改动。
+没有任务上下文时，验收锁把合并提交与每个父提交分别比较（`git diff-tree -m`），与任一父提交不同的路径都列出。有任务上下文时它用 `--cc`，只列与所有父提交都不同的路径，干净合并因此不列路径。#769 的六个提交里有四个是这样的合并。
+登记约定是：合并提交的条目写该路径有变化的那一个父提交。工具不核对这条约定，只核对所写父提交是该提交的父提交之一。
+工具读取真实 Git 对象，核对完整提交、所写父提交确是该提交的父提交、受保护路径、旧新 blob 和完整二进制 diff 的 SHA-256。某一侧没有这个路径时，blob 记为 Git 的空对象号（40 个 0，与 `git diff --raw` 的写法相同），工具核对该侧的树里确实没有这个路径。该 diff 使用 `git diff --no-ext-diff --no-textconv --no-color --binary -U3 --src-prefix=a/ --dst-prefix=b/ --text`。
 调用固定 `core.abbrev=8`、`diff.noprefix=false`、`diff.mnemonicPrefix=false`、`diff.algorithm=myers`、`diff.indentHeuristic=true`、`diff.context=3`、`diff.interHunkContext=0`、`diff.suppressBlankEmpty=false`、`diff.srcPrefix=a/`、`diff.dstPrefix=b/`、`core.attributesFile=/dev/null` 与 `attr.tree`（空树），从环境中去掉 `GIT_DIFF_OPTS` 与 `GIT_ATTR_SOURCE`，并设 `GIT_ATTR_NOSYSTEM=1`。仓库大小与这些配置不会改变字节。
-已知限制：`info/attributes` 中的 funcname、xfuncname 或 `binary` 属性，Git 2.43 以前版本下工作树里的 `.gitattributes`，以及对象前缀碰撞，会改变字节，D010 因此不获批准。这些情况的失败方向是拒绝，不会误批准。
-其他普通文档可以在原提交中一起修改；多一个受保护验收路径不能命中例外。
+已知限制：`info/attributes` 中的 funcname、xfuncname 或 `binary` 属性，Git 2.43 以前版本下工作树里的 `.gitattributes`，以及对象前缀碰撞，会改变字节，该条因此不获批准。这些情况的失败方向是拒绝，不会误批准。
+其他普通文档可以在原提交中一起修改。验收锁为一个提交列出的受保护路径必须恰好等于为它登记的路径，多一个或少一个，这个提交一条都不批准。
+路径集合相等、但其中一条的指纹不符时，只有那一条不批准，该提交的其他条目照常批准；不符那条的路径仍是未解决违规，CLI 仍退出 1。
 未提交改动、未来 developer 提交和任一指纹或决定不匹配仍失败。Git 读取失败退出 2。
 仓库配置、环境变量、CLI 参数和外部 URL 都不能新增批准；运行时不访问 GitHub。
 批准记录随受审查的工具制品发布，安装版本与 npm integrity 是采用边界，源码测试通过不代表已安装修复。
@@ -389,7 +393,7 @@ CLI 的范围只有 `all` 和 `engineering`，默认 `all`；工程范围必须
 全局预期归 `docs/architecture/constraints.json`。
 当前及历史版本分别发现唯一源，同版双源或坏依据拒绝。schema 2 与 3 的依据路径从仓库根解析，文件和Markdown锚点在相同版本校验。IC-1与IC-5沿采用责任及真实公开入口判断，目录名不构成许可。
 缺当前或BASE输入保留unknown或no-data，删除变化仍可见。只修改依据Markdown也触发收工测量。精确输入、范围和不能证明的性质见[符合性契约](src/arch/CONFORMANCE.md)。
-符合性报告带[方向行](src/arch/CONFORMANCE.md#方向行)：方向行与角色读运行检查器仓库的 `constraints.json`（与 `omne-deps` 同一份），依赖事实读本版的依赖图，图不可得时这些行是 unknown；基线的图不可得时偏离行不判新旧，每一行写明原因；方向偏离在回路里只报告，不是硬线。
+符合性报告带[方向行](src/arch/CONFORMANCE.md#方向行)：方向行与角色读运行检查器仓库的 `constraints.json`（与 `omne-deps` 同一份），依赖事实读本版的依赖图，方向行引用的角色在本版里都匹配不到文件时不取图，每一行都是 unknown，文字与取图时相同，规则见[符合性契约](src/arch/CONFORMANCE.md#方向行)；取了图但图不可得时这些行是 unknown；基线的图不可得时偏离行不判新旧，每一行写明原因；方向偏离在回路里只报告，不是硬线。
 集成约定归 [Cordis 集成约定](../../docs/architecture/cordis-integration-conventions.md)。
 工具不反写预期，也不从目录存在性或手写绑定推断实现状态。
 

package/dist/acceptance/historical-approvals.d.ts

@@ -1,14 +1,21 @@
-export interface HistoricalApproval {
-    readonly commit: string;
-    readonly parent: string;
-    readonly path: string;
-    readonly oldBlob: string;
-    readonly newBlob: string;
-    readonly diffSha256: string;
-    readonly decisionUrl: string;
-}
-/** Internal matcher: it can recognize the compiled decision, never authorize a new one. */
+import { type HistoricalApproval } from './historical-approvals.data.ts';
+type ApprovalList = readonly HistoricalApproval[];
+/** Internal matcher: it can recognize a compiled decision, never authorize a new one. */
 export declare function matchHistoricalApproval(candidate: Partial<HistoricalApproval>, protectedPaths: readonly string[]): HistoricalApproval | undefined;
-/** Read immutable Git objects; errors propagate to the caller as tool failures. */
-export declare function inspectHistoricalApproval(root: string, commit: string, protectedPaths: readonly string[]): HistoricalApproval | undefined;
+/**
+ * Read the change of one path between a parent and a commit from immutable Git objects. The
+ * compiled constants come from this same function; errors propagate as tool failures.
+ */
+export declare function observeHistoricalChange(root: string, commit: string, parent: string, path: string): Pick<HistoricalApproval, 'oldBlob' | 'newBlob' | 'diffSha256'>;
+/**
+ * Test seam only: the same check over a given list. Production code calls
+ * inspectHistoricalApproval, which always passes the compiled list; no repository input reaches here.
+ */
+export declare function inspectAgainst(list: ApprovalList, root: string, commit: string, protectedPaths: readonly string[]): readonly HistoricalApproval[];
+/**
+ * The compiled approvals that match this commit's protected paths exactly, one for each path.
+ * Read immutable Git objects; errors propagate to the caller as tool failures.
+ */
+export declare function inspectHistoricalApproval(root: string, commit: string, protectedPaths: readonly string[]): readonly HistoricalApproval[];
+export {};
 //# sourceMappingURL=historical-approvals.d.ts.map

package/dist/acceptance/historical-approvals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"historical-approvals.d.ts","sourceRoot":"","sources":["../../src/acceptance/historical-approvals.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAsED,2FAA2F;AAC3F,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACtC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,kBAAkB,GAAG,SAAS,CAYhC;AAED,mFAAmF;AACnF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,kBAAkB,GAAG,SAAS,CAqChC"}
+{"version":3,"file":"historical-approvals.d.ts","sourceRoot":"","sources":["../../src/acceptance/historical-approvals.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAA;AA2DvC,KAAK,YAAY,GAAG,SAAS,kBAAkB,EAAE,CAAA;AAqCjD,yFAAyF;AACzF,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,EACtC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,kBAAkB,GAAG,SAAS,CAEhC;AAwCD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAWhE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,SAAS,kBAAkB,EAAE,CAyB/B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,SAAS,kBAAkB,EAAE,CAE/B"}

package/dist/acceptance/historical-approvals.data.d.ts

@@ -0,0 +1,22 @@
+export interface HistoricalApproval {
+    readonly commit: string;
+    /**
+     * The parent that the change is registered against. The tool checks only that it is one of the
+     * commit's parents. By registration convention a merge entry names the one parent where the path
+     * differs. That convention is not checked. The lock lists such a path only in its `-m` listing
+     * (no task context); its `--cc` listing (task context) shows no paths for a clean merge.
+     */
+    readonly parent: string;
+    readonly path: string;
+    /** NULL_OBJECT_ID when the path does not exist on that side, as `git diff --raw` reports it. */
+    readonly oldBlob: string;
+    readonly newBlob: string;
+    readonly diffSha256: string;
+    readonly decisionUrl: string;
+}
+/** Git's null object id: the side of a change where the path does not exist. */
+export declare const NULL_OBJECT_ID = "0000000000000000000000000000000000000000";
+export declare const HISTORICAL_APPROVALS: readonly HistoricalApproval[];
+/** Each (commit, path) has at most one entry; a duplicate is an artifact defect, not a choice. */
+export declare function assertUniqueApprovals(list: readonly HistoricalApproval[]): void;
+//# sourceMappingURL=historical-approvals.data.d.ts.map

package/dist/acceptance/historical-approvals.data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-approvals.data.d.ts","sourceRoot":"","sources":["../../src/acceptance/historical-approvals.data.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,gFAAgF;AAChF,eAAO,MAAM,cAAc,6CAA6C,CAAA;AAWxE,eAAO,MAAM,oBAAoB,EAAE,SAAS,kBAAkB,EAuQ7D,CAAA;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAI/E"}

package/dist/acceptance/historical-approvals.data.js

@@ -0,0 +1,280 @@
+// Compiled historical acceptance-lock approvals. Only the reviewed tool artifact owns this list.
+// Repository inputs, configuration, environment variables and arguments cannot add approvals.
+/** Git's null object id: the side of a change where the path does not exist. */
+export const NULL_OBJECT_ID = '0000000000000000000000000000000000000000';
+const D010_DECISION = 'https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357';
+const ISSUE_769_DECISION = 'https://github.com/nemori-ai/omne-harness-lite/issues/769#issuecomment-6411908205';
+const MODEL_ACCEPTANCE = 'packages/model/model/acceptance';
+const TRANSPORT_ACCEPTANCE = 'packages/model/pi-ai-transport/acceptance';
+// One entry for each (commit, path). A commit receives approval only when the protected paths that
+// the lock lists for it are exactly the paths registered here for that commit.
+export const HISTORICAL_APPROVALS = Object.freeze([
+    // D010.
+    {
+        commit: '48ad37d292796326d65055a75e8a1fde44fe4233',
+        parent: 'e7aab8ec73002713d2ef6486401816850c984fb1',
+        path: 'packages/agent/agent/acceptance/README.md',
+        oldBlob: 'f7fac2fc21bfceb51c3dd84542b866eb7bb12c89',
+        newBlob: 'fbf0d08732f5d2004c3d63cff6c8be11442da99b',
+        diffSha256: 'eee5be00ebfdf300db6978cb2981a1b989dcd977846fc3de2669bb835edf3a2c',
+        decisionUrl: D010_DECISION,
+    },
+    // #769: six commits from 2026-10-20 to 10-23 that entered the track through the gate of that time.
+    // 19f457a15: #645 sync merge; the path differs only from its first parent.
+    {
+        commit: '19f457a1501aca70baae7ff573bddb86089c93ae',
+        parent: '2726a8c8bd3b04f65bab4785dbcca21e02f87024',
+        path: 'packages/agent/agent/acceptance/README.md',
+        oldBlob: 'f7fac2fc21bfceb51c3dd84542b866eb7bb12c89',
+        newBlob: 'fbf0d08732f5d2004c3d63cff6c8be11442da99b',
+        diffSha256: 'eee5be00ebfdf300db6978cb2981a1b989dcd977846fc3de2669bb835edf3a2c',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    // 9f3967cc5: #461 member documents.
+    {
+        commit: '9f3967cc5ec8e8eda4febfacaff50f78d5206b2b',
+        parent: '26b6c74e1b15f126425e2996475b7ab1fd043d5b',
+        path: `${TRANSPORT_ACCEPTANCE}/README.md`,
+        oldBlob: '4e52eb364f0a3705da54151aad66f004c2cd81e7',
+        newBlob: '7d7ef9306e63e823440f53aa381222b882348908',
+        diffSha256: '9c9113dc168f423ebfcaa86610e6af0953accc2be1c306c3170a0fb32041b37c',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '9f3967cc5ec8e8eda4febfacaff50f78d5206b2b',
+        parent: '26b6c74e1b15f126425e2996475b7ab1fd043d5b',
+        path: `${TRANSPORT_ACCEPTANCE}/fixtures/README.md`,
+        oldBlob: '794b57ae3902e48c9408080b31ab9f7df82da57d',
+        newBlob: '201cd7fd2a5160e3fa13391b77c4f144670a9827',
+        diffSha256: '5f8b1849be2b5e6fadc76da56d23f97ad7210987e464cb08e96dc923a8b1bf05',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '9f3967cc5ec8e8eda4febfacaff50f78d5206b2b',
+        parent: '26b6c74e1b15f126425e2996475b7ab1fd043d5b',
+        path: `${TRANSPORT_ACCEPTANCE}/fixtures/index.md`,
+        oldBlob: 'ccda51f9fcb999a06188bb3db4738843e85e4785',
+        newBlob: '2d59e565bcfde009603448b85ba181f0311aa25e',
+        diffSha256: '98fecd235050e1b89b1dfdc0f06531bb8540b2f8842a64e6a3d86ad413368a01',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '9f3967cc5ec8e8eda4febfacaff50f78d5206b2b',
+        parent: '26b6c74e1b15f126425e2996475b7ab1fd043d5b',
+        path: `${TRANSPORT_ACCEPTANCE}/index.md`,
+        oldBlob: '4a1bd66b5b76a23377c9664ab5d56cb550899d6e',
+        newBlob: '7a62b98257b47f48709a8532222c25d116943ecf',
+        diffSha256: '3b449877945335d1a5981587d3b47e0b4798207bb5d6345c6a6a5cca904773f9',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    // 69bdedfab: toolchain sync merge; the paths differ only from its first parent.
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.admission-rejection.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: 'b551f1a762c9e83840ae998682ba7a39a42d45b4',
+        diffSha256: 'f92510e714308d2540480963ba3116ecf81075cfa11163acf822b00be211a3bf',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.credential-denied.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '5d6a46b9b123f1b6e288cfa9a6e641cb4bba62ec',
+        diffSha256: '98a4277048d8e2974e1b24b27a626b6e3c44ef676caeb0e34c95b4f695f65a47',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.success.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '6c27d0afec06d242af3ee8b9c5251fe506a28b26',
+        diffSha256: 'd65fda5375aeff38adf0f69d74c5afbbe44a4fc5572df73b8655ff683c5003ec',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/README.md`,
+        oldBlob: 'ccae451371a1a19003fb2199b3dc5378727cceb0',
+        newBlob: 'ff535d6769178c43d4d387858b2960dc6d8cb3c2',
+        diffSha256: 'dd95dd737a8bda058a4f7bc74e025941127603146e5c38d169eb534511a75870',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/fixtures/README.md`,
+        oldBlob: '201cd7fd2a5160e3fa13391b77c4f144670a9827',
+        newBlob: '4a1b17f21cfbf8fbd8a6cc122ff19f2eae11f7f1',
+        diffSha256: '513c5d79ca30afc0dc9554eb2e550ef1418a901e0bff7c862f9427d3a1a0a36b',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/fixtures/index.md`,
+        oldBlob: '2d59e565bcfde009603448b85ba181f0311aa25e',
+        newBlob: 'ed72fe68040bf9c69b89999730e8bf8e80a25527',
+        diffSha256: 'a31effc46dc4509db3bb42cfddc602da2a5bb46d4e10136abe9f77000af6a896',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/fixtures/runtime.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '24be28c8765e1be3f2434fda6671733cc9db806b',
+        diffSha256: '3f060dd7ca4889d726756752cb48dc2c6e423ef69367030ae0139949b79bbd79',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '69bdedfabc097585cea516ccec8a6ba1d58003ae',
+        parent: '3f10ac0d71f69677e6dd4d05def905231a64a298',
+        path: `${MODEL_ACCEPTANCE}/index.md`,
+        oldBlob: '7a62b98257b47f48709a8532222c25d116943ecf',
+        newBlob: '83ededfe813614539c63c521f263498ca6a14a6c',
+        diffSha256: '0ca167590ccedbff242697ac7f7bb707e9afc57b36ec2a0d5a2a3db360735140',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    // 837d333fd: toolchain sync merge; the paths differ only from its first parent.
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.admission-rejection.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: 'b551f1a762c9e83840ae998682ba7a39a42d45b4',
+        diffSha256: 'f92510e714308d2540480963ba3116ecf81075cfa11163acf822b00be211a3bf',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.credential-denied.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '5d6a46b9b123f1b6e288cfa9a6e641cb4bba62ec',
+        diffSha256: '98a4277048d8e2974e1b24b27a626b6e3c44ef676caeb0e34c95b4f695f65a47',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.success.acceptance.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '6c27d0afec06d242af3ee8b9c5251fe506a28b26',
+        diffSha256: 'd65fda5375aeff38adf0f69d74c5afbbe44a4fc5572df73b8655ff683c5003ec',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/README.md`,
+        oldBlob: 'ccae451371a1a19003fb2199b3dc5378727cceb0',
+        newBlob: 'ff535d6769178c43d4d387858b2960dc6d8cb3c2',
+        diffSha256: 'dd95dd737a8bda058a4f7bc74e025941127603146e5c38d169eb534511a75870',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/fixtures/README.md`,
+        oldBlob: '201cd7fd2a5160e3fa13391b77c4f144670a9827',
+        newBlob: '4a1b17f21cfbf8fbd8a6cc122ff19f2eae11f7f1',
+        diffSha256: '513c5d79ca30afc0dc9554eb2e550ef1418a901e0bff7c862f9427d3a1a0a36b',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/fixtures/index.md`,
+        oldBlob: '2d59e565bcfde009603448b85ba181f0311aa25e',
+        newBlob: 'ed72fe68040bf9c69b89999730e8bf8e80a25527',
+        diffSha256: 'a31effc46dc4509db3bb42cfddc602da2a5bb46d4e10136abe9f77000af6a896',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/fixtures/runtime.ts`,
+        oldBlob: NULL_OBJECT_ID,
+        newBlob: '24be28c8765e1be3f2434fda6671733cc9db806b',
+        diffSha256: '3f060dd7ca4889d726756752cb48dc2c6e423ef69367030ae0139949b79bbd79',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '837d333fdac65e6d2f7b62f7bd4bf73c066c857d',
+        parent: 'cced1ffbfaec385e05d4d8466fea659c4ab8cfbc',
+        path: `${MODEL_ACCEPTANCE}/index.md`,
+        oldBlob: '7a62b98257b47f48709a8532222c25d116943ecf',
+        newBlob: '83ededfe813614539c63c521f263498ca6a14a6c',
+        diffSha256: '0ca167590ccedbff242697ac7f7bb707e9afc57b36ec2a0d5a2a3db360735140',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    // 14b0fcfcb: Node engine merge for #549; the paths differ only from its second parent.
+    {
+        commit: '14b0fcfcb1effda5d41f40bc5293c51eee5c4b6e',
+        parent: '6dd1fefa1dcb6646d4221d01767220e2bfc04b05',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.admission-rejection.acceptance.ts`,
+        oldBlob: 'b551f1a762c9e83840ae998682ba7a39a42d45b4',
+        newBlob: '7958c50949fd3f71b9a279479d31e2b38410c024',
+        diffSha256: 'f6e347c3266316b46a56ad2c722edd5754bc09b6a788ff49ce500d2b5ec4049f',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '14b0fcfcb1effda5d41f40bc5293c51eee5c4b6e',
+        parent: '6dd1fefa1dcb6646d4221d01767220e2bfc04b05',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.credential-denied.acceptance.ts`,
+        oldBlob: '5d6a46b9b123f1b6e288cfa9a6e641cb4bba62ec',
+        newBlob: '81292c76bf84dd2bf6537d4750ab695ae531bbf1',
+        diffSha256: 'a9d32bea1d10639c350b371383fc238ebece299096566f1df6150e9d09df393f',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '14b0fcfcb1effda5d41f40bc5293c51eee5c4b6e',
+        parent: '6dd1fefa1dcb6646d4221d01767220e2bfc04b05',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.success.acceptance.ts`,
+        oldBlob: '6c27d0afec06d242af3ee8b9c5251fe506a28b26',
+        newBlob: '6e9d8a5c0b0758713b2c7e4d670d303fd1f6a5e1',
+        diffSha256: '9f70ab6cf123d62b3520e418ff9afc43e46f238e277a74372084c63c20bcf9cd',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    // 06acd53ca: toolchain merge for #549; the paths differ only from its second parent.
+    {
+        commit: '06acd53ca13e66fc7867a7daec0ff7683c2ee6ac',
+        parent: 'ec0de1dba1f7e02cdbef6f35815c23f41c5a9b68',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.admission-rejection.acceptance.ts`,
+        oldBlob: 'b551f1a762c9e83840ae998682ba7a39a42d45b4',
+        newBlob: '946519832b6a863cb94ce967f7d07370cfa567d8',
+        diffSha256: '810c035f8358fb4a6293d01e9fc4ff95c2cab2e7363592a310038898fda6ad6c',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '06acd53ca13e66fc7867a7daec0ff7683c2ee6ac',
+        parent: 'ec0de1dba1f7e02cdbef6f35815c23f41c5a9b68',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.credential-denied.acceptance.ts`,
+        oldBlob: '5d6a46b9b123f1b6e288cfa9a6e641cb4bba62ec',
+        newBlob: '81292c76bf84dd2bf6537d4750ab695ae531bbf1',
+        diffSha256: 'a9d32bea1d10639c350b371383fc238ebece299096566f1df6150e9d09df393f',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+    {
+        commit: '06acd53ca13e66fc7867a7daec0ff7683c2ee6ac',
+        parent: 'ec0de1dba1f7e02cdbef6f35815c23f41c5a9b68',
+        path: `${MODEL_ACCEPTANCE}/PD-model-invocation.success.acceptance.ts`,
+        oldBlob: '6c27d0afec06d242af3ee8b9c5251fe506a28b26',
+        newBlob: '6e9d8a5c0b0758713b2c7e4d670d303fd1f6a5e1',
+        diffSha256: '9f70ab6cf123d62b3520e418ff9afc43e46f238e277a74372084c63c20bcf9cd',
+        decisionUrl: ISSUE_769_DECISION,
+    },
+].map(approval => Object.freeze(approval)));
+/** Each (commit, path) has at most one entry; a duplicate is an artifact defect, not a choice. */
+export function assertUniqueApprovals(list) {
+    const keys = new Set(list.map(item => `${item.commit}\0${item.path}`));
+    if (keys.size !== list.length)
+        throw new Error('Historical acceptance approvals contain a duplicate (commit, path) entry');
+}
+assertUniqueApprovals(HISTORICAL_APPROVALS);
+//# sourceMappingURL=historical-approvals.data.js.map

package/dist/acceptance/historical-approvals.data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historical-approvals.data.js","sourceRoot":"","sources":["../../src/acceptance/historical-approvals.data.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,8FAA8F;AAmB9F,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,0CAA0C,CAAA;AAExE,MAAM,aAAa,GACjB,mFAAmF,CAAA;AACrF,MAAM,kBAAkB,GACtB,mFAAmF,CAAA;AACrF,MAAM,gBAAgB,GAAG,iCAAiC,CAAA;AAC1D,MAAM,oBAAoB,GAAG,2CAA2C,CAAA;AAExE,mGAAmG;AACnG,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAkC,MAAM,CAAC,MAAM,CAC9E;IACE,QAAQ;IACR;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,aAAa;KAC3B;IACD,mGAAmG;IACnG,2EAA2E;IAC3E;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD,oCAAoC;IACpC;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,oBAAoB,YAAY;QACzC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,oBAAoB,qBAAqB;QAClD,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,oBAAoB,oBAAoB;QACjD,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,oBAAoB,WAAW;QACxC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD,gFAAgF;IAChF;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,wDAAwD;QACjF,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sDAAsD;QAC/E,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,4CAA4C;QACrE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,YAAY;QACrC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,qBAAqB;QAC9C,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,oBAAoB;QAC7C,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sBAAsB;QAC/C,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,WAAW;QACpC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD,gFAAgF;IAChF;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,wDAAwD;QACjF,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sDAAsD;QAC/E,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,4CAA4C;QACrE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,YAAY;QACrC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,qBAAqB;QAC9C,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,oBAAoB;QAC7C,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sBAAsB;QAC/C,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,WAAW;QACpC,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD,uFAAuF;IACvF;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,wDAAwD;QACjF,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sDAAsD;QAC/E,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,4CAA4C;QACrE,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD,qFAAqF;IACrF;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,wDAAwD;QACjF,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,sDAAsD;QAC/E,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,MAAM,EAAE,0CAA0C;QAClD,MAAM,EAAE,0CAA0C;QAClD,IAAI,EAAE,GAAG,gBAAgB,4CAA4C;QACrE,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,kBAAkB;KAChC;CACF,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAC3C,CAAA;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,IAAmC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QAC3B,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;AAC/F,CAAC;AAED,qBAAqB,CAAC,oBAAoB,CAAC,CAAA"}

package/dist/acceptance/historical-approvals.js

@@ -1,16 +1,7 @@
 import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { repositoryEnv } from '../core/git-environment.js';
-// The reviewed tool artifact owns this decision. Repository inputs cannot add approvals.
-const D010 = Object.freeze({
-    commit: '48ad37d292796326d65055a75e8a1fde44fe4233',
-    parent: 'e7aab8ec73002713d2ef6486401816850c984fb1',
-    path: 'packages/agent/agent/acceptance/README.md',
-    oldBlob: 'f7fac2fc21bfceb51c3dd84542b866eb7bb12c89',
-    newBlob: 'fbf0d08732f5d2004c3d63cff6c8be11442da99b',
-    diffSha256: 'eee5be00ebfdf300db6978cb2981a1b989dcd977846fc3de2669bb835edf3a2c',
-    decisionUrl: 'https://github.com/nemori-ai/omne-harness-lite/issues/638#issuecomment-6367449357',
-});
+import { HISTORICAL_APPROVALS, NULL_OBJECT_ID, assertUniqueApprovals, } from './historical-approvals.data.js';
 // Fixed diff settings: the same Git objects must give the same bytes under any user or repository
 // configuration that these settings cover. core.abbrev=8 matches the abbreviation length at
 // approval time. Do not use --full-index: it changes the bytes and so the approved digest.
@@ -62,49 +53,112 @@ function fingerprintEnv(base) {
     const { GIT_DIFF_OPTS: _diffOptions, GIT_ATTR_SOURCE: _attributeSource, ...env } = repositoryEnv(base);
     return { ...env, GIT_ATTR_NOSYSTEM: '1' };
 }
-/** Internal matcher: it can recognize the compiled decision, never authorize a new one. */
-export function matchHistoricalApproval(candidate, protectedPaths) {
-    return protectedPaths.length === 1 &&
-        protectedPaths[0] === D010.path &&
-        candidate.commit === D010.commit &&
-        candidate.parent === D010.parent &&
-        candidate.path === D010.path &&
-        candidate.oldBlob === D010.oldBlob &&
-        candidate.newBlob === D010.newBlob &&
-        candidate.diffSha256 === D010.diffSha256 &&
-        candidate.decisionUrl === D010.decisionUrl
-        ? D010
+/** The protected paths of the commit are exactly the registered ones: one more or one less fails. */
+function coversExactly(list, commit, protectedPaths) {
+    const registered = new Set(list.filter(item => item.commit === commit).map(item => item.path));
+    const listed = new Set(protectedPaths);
+    return (registered.size > 0 &&
+        listed.size === protectedPaths.length &&
+        listed.size === registered.size &&
+        protectedPaths.every(path => registered.has(path)));
+}
+function matchAgainst(list, candidate, protectedPaths) {
+    const approval = list.find(item => item.commit === candidate.commit && item.path === candidate.path);
+    return approval !== undefined &&
+        coversExactly(list, approval.commit, protectedPaths) &&
+        candidate.parent === approval.parent &&
+        candidate.oldBlob === approval.oldBlob &&
+        candidate.newBlob === approval.newBlob &&
+        candidate.diffSha256 === approval.diffSha256 &&
+        candidate.decisionUrl === approval.decisionUrl
+        ? approval
         : undefined;
 }
-/** Read immutable Git objects; errors propagate to the caller as tool failures. */
-export function inspectHistoricalApproval(root, commit, protectedPaths) {
-    if (commit !== D010.commit || protectedPaths.length !== 1 || protectedPaths[0] !== D010.path)
-        return undefined;
-    const git = (args, env = repositoryEnv(process.env)) => execFileSync('git', args, {
+/** Internal matcher: it can recognize a compiled decision, never authorize a new one. */
+export function matchHistoricalApproval(candidate, protectedPaths) {
+    return matchAgainst(HISTORICAL_APPROVALS, candidate, protectedPaths);
+}
+function gitIn(root) {
+    return (args, env = repositoryEnv(process.env)) => execFileSync('git', args, {
         cwd: root,
         env,
         maxBuffer: 256 * 1024 * 1024,
         stdio: ['ignore', 'pipe', 'pipe'],
     });
-    const objectId = (type, revision) => {
-        const bytes = git(['cat-file', type, revision]);
-        return createHash('sha1').update(`${type} ${bytes.length}\0`).update(bytes).digest('hex');
-    };
-    if (objectId('commit', commit) !== D010.commit || objectId('commit', D010.parent) !== D010.parent)
-        return undefined;
-    const identity = git(['show', '-s', '--format=%H %P', commit]).toString('utf8').trim();
-    if (identity !== `${D010.commit} ${D010.parent}`)
+}
+function hashObject(type, bytes) {
+    return createHash('sha1').update(`${type} ${bytes.length}\0`).update(bytes).digest('hex');
+}
+/** Hash the object bytes again, so a Git replacement object cannot pass as the original. */
+function objectId(git, type, revision) {
+    return hashObject(type, git(['cat-file', type, revision]));
+}
+/** The parents written in the commit object itself, read from bytes whose hash was checked. */
+function verifiedParents(git, commit) {
+    const bytes = git(['cat-file', 'commit', commit]);
+    if (hashObject('commit', bytes) !== commit)
         return undefined;
-    return matchHistoricalApproval({
-        commit,
-        parent: D010.parent,
-        path: D010.path,
-        oldBlob: objectId('blob', `${D010.parent}:${D010.path}`),
-        newBlob: objectId('blob', `${commit}:${D010.path}`),
+    const header = bytes.toString('utf8').split('\n\n', 1)[0] ?? '';
+    return header.split('\n').flatMap(line => {
+        const parent = /^parent ([0-9a-f]{40})$/u.exec(line)?.[1];
+        return parent === undefined ? [] : [parent];
+    });
+}
+/** The blob at `revision:path`, or NULL_OBJECT_ID when the tree has no such path. */
+function blobAt(git, revision, path) {
+    if (git(['ls-tree', revision, '--', path]).length === 0)
+        return NULL_OBJECT_ID;
+    return objectId(git, 'blob', `${revision}:${path}`);
+}
+/**
+ * Read the change of one path between a parent and a commit from immutable Git objects. The
+ * compiled constants come from this same function; errors propagate as tool failures.
+ */
+export function observeHistoricalChange(root, commit, parent, path) {
+    const git = gitIn(root);
+    return {
+        oldBlob: blobAt(git, parent, path),
+        newBlob: blobAt(git, commit, path),
         diffSha256: createHash('sha256')
-            .update(git([...FINGERPRINT_DIFF_ARGS, D010.parent, commit, '--', D010.path], fingerprintEnv(process.env)))
+            .update(git([...FINGERPRINT_DIFF_ARGS, parent, commit, '--', path], fingerprintEnv(process.env)))
             .digest('hex'),
-        decisionUrl: D010.decisionUrl,
-    }, protectedPaths);
+    };
+}
+/**
+ * Test seam only: the same check over a given list. Production code calls
+ * inspectHistoricalApproval, which always passes the compiled list; no repository input reaches here.
+ */
+export function inspectAgainst(list, root, commit, protectedPaths) {
+    assertUniqueApprovals(list);
+    if (!coversExactly(list, commit, protectedPaths))
+        return [];
+    const git = gitIn(root);
+    const parents = verifiedParents(git, commit);
+    if (parents === undefined)
+        return [];
+    return list
+        .filter(item => item.commit === commit)
+        .flatMap(approval => {
+        // The candidate takes the registered parent, so these two checks are the only parent guards.
+        if (!parents.includes(approval.parent))
+            return [];
+        if (objectId(git, 'commit', approval.parent) !== approval.parent)
+            return [];
+        const matched = matchAgainst(list, {
+            commit,
+            parent: approval.parent,
+            path: approval.path,
+            ...observeHistoricalChange(root, commit, approval.parent, approval.path),
+            decisionUrl: approval.decisionUrl,
+        }, protectedPaths);
+        return matched === undefined ? [] : [matched];
+    });
+}
+/**
+ * The compiled approvals that match this commit's protected paths exactly, one for each path.
+ * Read immutable Git objects; errors propagate to the caller as tool failures.
+ */
+export function inspectHistoricalApproval(root, commit, protectedPaths) {
+    return inspectAgainst(HISTORICAL_APPROVALS, root, commit, protectedPaths);
 }
 //# sourceMappingURL=historical-approvals.js.map