@semacode/cli 2.2.0 → 2.3.1

package/exemplos/operacao_estrategia_rollout.sema

@@ -1,124 +1,124 @@
-module exemplos.operacao_estrategia.rollout {
-  docs {
-    resumo: "Task oficial para ativar strategy com nova versao de modelo apos aprovacao manual."
-  }
-
-  enum StatusStrategy {
-    RASCUNHO,
-    ATIVA,
-    QUARENTENA,
-    DESATIVADA
-  }
-
-  enum StatusGate {
-    ABERTO,
-    FECHADO
-  }
-
-  task ativar_strategy_com_nova_versao {
-    docs {
-      resumo: "Promove a versao candidata aprovada e reabre a strategy so quando houver aprovacao manual e gate global devidamente controlado."
-    }
-    input {
-      strategy_id: Id required
-      versao_modelo_ativa: Texto required
-      versao_modelo_candidata: Texto required
-      strategy_status_atual: StatusStrategy required
-      gate_global_atual: StatusGate required
-      aprovacao_manual: Booleano required
-    }
-    output {
-      strategy_status: StatusStrategy
-      gate_global: StatusGate
-      versao_modelo_ativa: Texto
-    }
-    authz {
-      escopo: strategy.rollout.ativar
-      tenant: obrigatorio
-    }
-    dados {
-      classificacao_padrao: interno
-      redacao_log: obrigatoria
-      input {
-        strategy_id: interno
-        versao_modelo_ativa: interno
-        versao_modelo_candidata: interno
-        strategy_status_atual: interno
-        gate_global_atual: interno
-        aprovacao_manual: interno
-      }
-      output {
-        strategy_status: interno
-        gate_global: interno
-        versao_modelo_ativa: interno
-      }
-    }
-    audit {
-      evento: strategy.rollout.ativado
-      ator: sistema.strategy
-      correlacao: request_id
-      retencao: "180d"
-      motivo: obrigatorio
-    }
-    forbidden {
-      shell.exec
-      log.segredo
-      retorno.credencial
-    }
-    rules {
-      strategy_id existe
-      versao_modelo_ativa existe
-      versao_modelo_candidata existe
-      strategy_status_atual em [RASCUNHO, QUARENTENA]
-      gate_global_atual == FECHADO
-      aprovacao_manual == verdadeiro
-    }
-    effects {
-      persistencia strategy criticidade = alta
-      evento strategy_ativada criticidade = alta
-      auditoria rollout criticidade = alta
-    }
-    vinculos {
-      tabela: strategy
-      recurso: model_registry
-      evento: strategy_ativada
-    }
-    execucao {
-      idempotencia: verdadeiro
-      timeout: "15s"
-      retry: "nenhum"
-      compensacao: "reverter_para_versao_modelo_ativa_anterior"
-      criticidade_operacional: alta
-    }
-    state governanca_estrategia {
-      transitions {
-        QUARENTENA -> ATIVA
-        RASCUNHO -> ATIVA
-      }
-    }
-    guarantees {
-      strategy_status == ATIVA
-      gate_global == ABERTO
-      versao_modelo_ativa existe
-    }
-    tests {
-      caso "reativa strategy apos aprovacao do novo modelo" {
-        given {
-          strategy_id: "strategy_alpha"
-          versao_modelo_ativa: "modelo_2026_12"
-          versao_modelo_candidata: "modelo_2026_13"
-          strategy_status_atual: "QUARENTENA"
-          gate_global_atual: "FECHADO"
-          aprovacao_manual: verdadeiro
-        }
-
-        expect {
-          sucesso: verdadeiro
-          strategy_status: "ATIVA"
-          gate_global: "ABERTO"
-          versao_modelo_ativa: "modelo_2026_13"
-        }
-      }
-    }
-  }
-}
+module exemplos.operacao_estrategia.rollout {
+  docs {
+    resumo: "Task oficial para ativar strategy com nova versao de modelo apos aprovacao manual."
+  }
+
+  enum StatusStrategy {
+    RASCUNHO,
+    ATIVA,
+    QUARENTENA,
+    DESATIVADA
+  }
+
+  enum StatusGate {
+    ABERTO,
+    FECHADO
+  }
+
+  task ativar_strategy_com_nova_versao {
+    docs {
+      resumo: "Promove a versao candidata aprovada e reabre a strategy so quando houver aprovacao manual e gate global devidamente controlado."
+    }
+    input {
+      strategy_id: Id required
+      versao_modelo_ativa: Texto required
+      versao_modelo_candidata: Texto required
+      strategy_status_atual: StatusStrategy required
+      gate_global_atual: StatusGate required
+      aprovacao_manual: Booleano required
+    }
+    output {
+      strategy_status: StatusStrategy
+      gate_global: StatusGate
+      versao_modelo_ativa: Texto
+    }
+    authz {
+      escopo: strategy.rollout.ativar
+      tenant: obrigatorio
+    }
+    dados {
+      classificacao_padrao: interno
+      redacao_log: obrigatoria
+      input {
+        strategy_id: interno
+        versao_modelo_ativa: interno
+        versao_modelo_candidata: interno
+        strategy_status_atual: interno
+        gate_global_atual: interno
+        aprovacao_manual: interno
+      }
+      output {
+        strategy_status: interno
+        gate_global: interno
+        versao_modelo_ativa: interno
+      }
+    }
+    audit {
+      evento: strategy.rollout.ativado
+      ator: sistema.strategy
+      correlacao: request_id
+      retencao: "180d"
+      motivo: obrigatorio
+    }
+    forbidden {
+      shell.exec
+      log.segredo
+      retorno.credencial
+    }
+    rules {
+      strategy_id existe
+      versao_modelo_ativa existe
+      versao_modelo_candidata existe
+      strategy_status_atual em [RASCUNHO, QUARENTENA]
+      gate_global_atual == FECHADO
+      aprovacao_manual == verdadeiro
+    }
+    effects {
+      persistencia strategy criticidade = alta
+      evento strategy_ativada criticidade = alta
+      auditoria rollout criticidade = alta
+    }
+    vinculos {
+      tabela: strategy
+      recurso: model_registry
+      evento: strategy_ativada
+    }
+    execucao {
+      idempotencia: verdadeiro
+      timeout: "15s"
+      retry: "nenhum"
+      compensacao: "reverter_para_versao_modelo_ativa_anterior"
+      criticidade_operacional: alta
+    }
+    state governanca_estrategia {
+      transitions {
+        QUARENTENA -> ATIVA
+        RASCUNHO -> ATIVA
+      }
+    }
+    guarantees {
+      strategy_status == ATIVA
+      gate_global == ABERTO
+      versao_modelo_ativa existe
+    }
+    tests {
+      caso "reativa strategy apos aprovacao do novo modelo" {
+        given {
+          strategy_id: "strategy_alpha"
+          versao_modelo_ativa: "modelo_2026_12"
+          versao_modelo_candidata: "modelo_2026_13"
+          strategy_status_atual: "QUARENTENA"
+          gate_global_atual: "FECHADO"
+          aprovacao_manual: verdadeiro
+        }
+
+        expect {
+          sucesso: verdadeiro
+          strategy_status: "ATIVA"
+          gate_global: "ABERTO"
+          versao_modelo_ativa: "modelo_2026_13"
+        }
+      }
+    }
+  }
+}

package/exemplos/pagamento.sema

@@ -431,4 +431,4 @@ module exemplos.pagamento {
       timeout_gateway: "Erro publico quando o gateway nao responde."
     }
   }
-}
+}

package/exemplos/pagamento_dominio.sema

@@ -32,4 +32,4 @@ module exemplos.pagamento.dominio {
       PENDENTE -> RECUSADO
     }
   }
-}
+}

package/exemplos/pedido.sema

@@ -252,4 +252,4 @@ module exemplos.pedido {
       auditoria fluxo_aprovacao_pedido criticidade = alta
     }
   }
-}
+}

package/exemplos/permissao.sema

@@ -118,4 +118,4 @@ module exemplos.permissao {
       }
     }
   }
-}
+}

package/exemplos/persistencia_vendor_first.sema

@@ -83,4 +83,4 @@ module exemplos.persistencia.vendor_first {
       retention: 300s
     }
   }
-}
+}

package/exemplos/pipeline-conteudo/README.md

@@ -1,44 +1,44 @@
-# Content pipeline example
-
-This fixture proves that the pipeline core is independent from a platform,
-brand, or media type. One definition creates a global editorial core and two
-isolated target branches: a long-form document and a spoken audio episode.
-The same AI-native plan can add any number of channels and formats without
-making this experience the only delivery path.
-
-Definition v1 declares exactly one output per stage. Each stage also selects an
-  `adapterPolicy`: `NONE`, `CONSTRAINTS`, or `CONFIRMATION`. Constraint gates are
-  satisfied only by independently signed observations bound to the produced
-  artifact, including an independently observed media type; producer metadata
-  is not evidence of its own correctness.
-
-```bash
-sema conteudo validar exemplos/pipeline-conteudo/definicao.json --json
-sema conteudo planejar exemplos/pipeline-conteudo/definicao.json --alvos-arquivo exemplos/pipeline-conteudo/alvos.json --json
-```
-
-The example intentionally contains no private keys, signed policy, trust pins,
-ledger checkpoint, or signed events. In a live run, an authorized policy
-  authority must sign a policy bound to the execution and complete target set
-  through `runId` and `targetSetDigest`, with explicit `issuedAt` and `expiresAt`
-  authorization bounds. Every event must be recorded within that interval, and
-  every append also supplies that policy envelope. Keep the
-  trust-root digest, current `revocationDigest`, and
-required `expectedHead` outside the runner-controlled workspace. Generate
-events in independently controlled producer, evaluator, and adapter processes;
-  never commit production private keys to a Sema workspace. The adapter's
-  `requiredMetadata + optionalMetadata` is the exact scalar public allowlist;
-  artifact metadata is unavailable in v1. The runner resolves credentials
-  externally from a strict `account:<alias>` reference.
-
-Every gate declares separate deterministic-attester and semantic-AI quorums.
-Use `content.evidence.attest:<evidenceType>` for ordinary attestations. Adapter
-observations use the stricter
-`content.adapter.attest:<adapterId>@<version>:<evidenceType>` capability and
-signed adapter/version binding; a generic receipt capability is intentionally
-insufficient.
-
-The runner executes and resumes work from Sema's derived `nextActions`. It does
-not calculate verdicts or edit completion state. Operational conditions remain
-separate from gate verdicts, and every generated manifest is a non-authoritative
-projection of the canonical ledger. There is no native human-review fallback.
+# Content pipeline example
+
+This fixture proves that the pipeline core is independent from a platform,
+brand, or media type. One definition creates a global editorial core and two
+isolated target branches: a long-form document and a spoken audio episode.
+The same AI-native plan can add any number of channels and formats without
+making this experience the only delivery path.
+
+Definition v1 declares exactly one output per stage. Each stage also selects an
+  `adapterPolicy`: `NONE`, `CONSTRAINTS`, or `CONFIRMATION`. Constraint gates are
+  satisfied only by independently signed observations bound to the produced
+  artifact, including an independently observed media type; producer metadata
+  is not evidence of its own correctness.
+
+```bash
+sema conteudo validar exemplos/pipeline-conteudo/definicao.json --json
+sema conteudo planejar exemplos/pipeline-conteudo/definicao.json --alvos-arquivo exemplos/pipeline-conteudo/alvos.json --json
+```
+
+The example intentionally contains no private keys, signed policy, trust pins,
+ledger checkpoint, or signed events. In a live run, an authorized policy
+  authority must sign a policy bound to the execution and complete target set
+  through `runId` and `targetSetDigest`, with explicit `issuedAt` and `expiresAt`
+  authorization bounds. Every event must be recorded within that interval, and
+  every append also supplies that policy envelope. Keep the
+  trust-root digest, current `revocationDigest`, and
+required `expectedHead` outside the runner-controlled workspace. Generate
+events in independently controlled producer, evaluator, and adapter processes;
+  never commit production private keys to a Sema workspace. The adapter's
+  `requiredMetadata + optionalMetadata` is the exact scalar public allowlist;
+  artifact metadata is unavailable in v1. The runner resolves credentials
+  externally from a strict `account:<alias>` reference.
+
+Every gate declares separate deterministic-attester and semantic-AI quorums.
+Use `content.evidence.attest:<evidenceType>` for ordinary attestations. Adapter
+observations use the stricter
+`content.adapter.attest:<adapterId>@<version>:<evidenceType>` capability and
+signed adapter/version binding; a generic receipt capability is intentionally
+insufficient.
+
+The runner executes and resumes work from Sema's derived `nextActions`. It does
+not calculate verdicts or edit completion state. Operational conditions remain
+separate from gate verdicts, and every generated manifest is a non-authoritative
+projection of the canonical ledger. There is no native human-review fallback.

package/exemplos/pipeline-conteudo/alvos.json

@@ -1,23 +1,23 @@
-[
-  {
-    "targetId": "documento-principal",
-    "adapterId": "destination.document",
-    "accountScope": "account:publisher.site-a",
-    "formatProfileId": "long-form",
-    "locale": "pt-BR",
-    "metadata": {
-      "title": "Exemplo de conteúdo multiformato"
-    }
-  },
-  {
-    "targetId": "episodio-audio",
-    "adapterId": "destination.audio-feed",
-    "accountScope": "account:publisher.feed-a",
-    "formatProfileId": "spoken-episode",
-    "locale": "pt-BR",
-    "metadata": {
-      "title": "Exemplo de conteúdo multiformato",
-      "description": "A mesma intenção editorial em um destino de áudio independente."
-    }
-  }
-]
+[
+  {
+    "targetId": "documento-principal",
+    "adapterId": "destination.document",
+    "accountScope": "account:publisher.site-a",
+    "formatProfileId": "long-form",
+    "locale": "pt-BR",
+    "metadata": {
+      "title": "Exemplo de conteúdo multiformato"
+    }
+  },
+  {
+    "targetId": "episodio-audio",
+    "adapterId": "destination.audio-feed",
+    "accountScope": "account:publisher.feed-a",
+    "formatProfileId": "spoken-episode",
+    "locale": "pt-BR",
+    "metadata": {
+      "title": "Exemplo de conteúdo multiformato",
+      "description": "A mesma intenção editorial em um destino de áudio independente."
+    }
+  }
+]