@splitin/verification-cli 0.1.0-beta.0

package/migrations/002_seed.sql

@@ -0,0 +1,40 @@
+-- Seed tenant `default` and sandbox examples. No active production route.
+
+INSERT INTO verification.tenants (tenant_key, display_name, continuation_destinations)
+VALUES ('default', 'Default tenant', ARRAY['verification.resume', 'application.home'])
+ON CONFLICT (tenant_key) DO NOTHING;
+
+INSERT INTO verification.policy_versions (
+  tenant_key, id, version, environment, lifecycle, reason,
+  proposed_by_actor_id, approved_by_actor_id, approved_at, activated_at
+) VALUES (
+  'default', 'pol_sandbox_example', 'sandbox-example-1', 'sandbox', 'active',
+  'Seeded sandbox example policy',
+  'system:seed', 'system:seed-approver', now(), now()
+) ON CONFLICT (tenant_key, id) DO NOTHING;
+
+INSERT INTO verification.policy_versions (
+  tenant_key, id, version, environment, lifecycle, reason, proposed_by_actor_id
+) VALUES (
+  'default', 'pol_production_unactivated', 'production-unactivated', 'production', 'draft',
+  'Seeded production policy is never auto-activated', 'system:seed'
+) ON CONFLICT (tenant_key, id) DO NOTHING;
+
+INSERT INTO verification.configuration_revisions (
+  tenant_key, id, provider, environment, revision, configuration_digest, lifecycle,
+  proposed_by_actor_id, approved_by_actor_id, approved_at
+) VALUES (
+  'default', 'cfg_sandbox_example', 'test_fake', 'sandbox', 1,
+  'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+  'approved', 'system:seed', 'system:seed-approver', now()
+) ON CONFLICT (tenant_key, id) DO NOTHING;
+
+INSERT INTO verification.routes (
+  tenant_key, id, provider, environment, package_code, country_code, priority,
+  configuration_revision_id, policy_version_id, lifecycle,
+  proposed_by_actor_id, approved_by_actor_id, approved_at, activated_at
+) VALUES (
+  'default', 'rte_sandbox_example_human_idv', 'test_fake', 'sandbox', 'human_idv', 'US', 100,
+  'cfg_sandbox_example', 'pol_sandbox_example', 'active',
+  'system:seed', 'system:seed-approver', now(), now()
+) ON CONFLICT (tenant_key, id) DO NOTHING;

package/migrations/003_retention.down.sql

@@ -0,0 +1,8 @@
+ALTER TABLE verification.policy_versions
+  DROP CONSTRAINT IF EXISTS production_retention_complete;
+
+ALTER TABLE verification.policy_versions
+  DROP COLUMN IF EXISTS legal_hold,
+  DROP COLUMN IF EXISTS appeal_hold_days,
+  DROP COLUMN IF EXISTS provider_redaction_delay_days,
+  DROP COLUMN IF EXISTS decision_retention_days;

package/migrations/003_retention.sql

@@ -0,0 +1,28 @@
+ALTER TABLE verification.policy_versions
+  ADD COLUMN IF NOT EXISTS decision_retention_days integer,
+  ADD COLUMN IF NOT EXISTS provider_redaction_delay_days integer,
+  ADD COLUMN IF NOT EXISTS appeal_hold_days integer,
+  ADD COLUMN IF NOT EXISTS legal_hold boolean NOT NULL DEFAULT false;
+
+ALTER TABLE verification.policy_versions
+  DROP CONSTRAINT IF EXISTS production_retention_complete;
+
+ALTER TABLE verification.policy_versions
+  ADD CONSTRAINT production_retention_complete CHECK (
+    environment <> 'production'
+    OR lifecycle <> 'active'
+    OR (
+      decision_retention_days IS NOT NULL
+      AND provider_redaction_delay_days IS NOT NULL
+      AND appeal_hold_days IS NOT NULL
+    )
+  );
+
+COMMENT ON COLUMN verification.policy_versions.decision_retention_days IS
+  'Adopter-selected verified-decision retention in days. Required before production activation.';
+COMMENT ON COLUMN verification.policy_versions.provider_redaction_delay_days IS
+  'Delay before provider redaction after a terminal decision. Required before production activation.';
+COMMENT ON COLUMN verification.policy_versions.appeal_hold_days IS
+  'Appeal hold window that delays redaction. Required before production activation.';
+COMMENT ON COLUMN verification.policy_versions.legal_hold IS
+  'When true, redaction jobs remain scheduled until the hold is cleared.';

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@splitin/verification-cli",
+  "version": "0.1.0-beta.0",
+  "description": "CLI for initializing, validating, diagnosing, and certifying self-hosted verification adapters.",
+  "license": "MIT",
+  "author": "SplitInTech, @ojchavan",
+  "homepage": "https://github.com/splitintech/open-internal-tools/tree/main/verification-adapter-sdk/packages/verification-cli#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/splitintech/open-internal-tools.git",
+    "directory": "verification-adapter-sdk/packages/verification-cli"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "engines": { "node": ">=20" },
+  "bin": {
+    "splitin-verification": "./dist/cli.js"
+  },
+  "main": "./dist/cli.cjs",
+  "module": "./dist/cli.js",
+  "types": "./dist/cli.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/cli.d.ts",
+      "import": "./dist/cli.js",
+      "require": "./dist/cli.cjs"
+    }
+  },
+  "files": ["dist", "migrations", "LICENSE", "NOTICE", "README.md", "package.json"],
+  "publishConfig": { "access": "public" },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  },
+  "dependencies": {
+    "@splitin/verification-adapter-sdk": "0.1.0-beta.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
+  }
+}