@things-factory/ops-master 10.1.246 → 10.1.248

package/dist-server/service/test-spec/test-spec-revision-service.js

@@ -1,685 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TestSpecificationRefusal = void 0;
-exports.testSpecificationSubmissionHash = testSpecificationSubmissionHash;
-exports.testSpecificationApprovalInput = testSpecificationApprovalInput;
-exports.assertTestSpecificationApprovalInput = assertTestSpecificationApprovalInput;
-exports.createTestSpecificationDraft = createTestSpecificationDraft;
-exports.editTestSpecificationDraft = editTestSpecificationDraft;
-exports.freezeTestSpecificationDraft = freezeTestSpecificationDraft;
-exports.bindTestSpecificationApproval = bindTestSpecificationApproval;
-exports.publishTestSpecificationRevision = publishTestSpecificationRevision;
-exports.publishUnregulatedTestSpecification = publishUnregulatedTestSpecification;
-exports.resolveTestSpecification = resolveTestSpecification;
-exports.standTestSpecificationBaselines = standTestSpecificationBaselines;
-exports.testSpecificationRevisionForBasis = testSpecificationRevisionForBasis;
-exports.captureTestSpecificationBasis = captureTestSpecificationBasis;
-exports.testSpecificationRevisionOverview = testSpecificationRevisionOverview;
-exports.effectiveTestSpecification = effectiveTestSpecification;
-exports.saveAndPublishTestSpecification = saveAndPublishTestSpecification;
-const node_crypto_1 = require("node:crypto");
-const typeorm_1 = require("typeorm");
-const shell_1 = require("@things-factory/shell");
-const master_change_policy_1 = require("../master-change-policy");
-const criteria_check_1 = require("./criteria-check");
-const test_specification_1 = require("./test-specification");
-const test_spec_revision_1 = require("./test-spec-revision");
-const approval_input_1 = require("../master-change-approval/approval-input");
-const row_lock_1 = require("../row-lock");
-class TestSpecificationRefusal extends shell_1.Refusal {
-    constructor(code, detail) {
-        super(code, {}, detail ?? TEST_SPECIFICATION_REFUSALS[code] ?? 'The test specification change could not be applied.');
-    }
-}
-exports.TestSpecificationRefusal = TestSpecificationRefusal;
-const TEST_SPECIFICATION_REFUSALS = {
-    TRANSACTION_REQUIRED: 'This change requires a transaction.',
-    INVALID_INSTANT: 'Enter a valid date and time including its time zone.',
-    INVALID_CONTENT: 'The proposed specification content is invalid.',
-    INVALID_CRITERIA: 'The proposed inspection criteria are invalid.',
-    SPECIFICATION_NOT_FOUND: 'The specification does not exist in this domain.',
-    REVISION_NOT_FOUND: 'The revision does not exist in this domain.',
-    INVALID_BASE_REVISION: 'The proposed change is based on a different revision.',
-    DRAFT_NOT_OWNED: 'Only the draft author can edit or submit it.',
-    REVISION_FROZEN: 'This submitted revision cannot be edited. Create another draft.',
-    DRAFT_CONFLICT: 'The draft changed. Reload it before saving.',
-    PLAN_CONFLICT: 'The approved schedule changed. Review and submit a new draft.',
-    INVALID_SUBMISSION: 'The submitted content does not match the frozen revision.',
-    AUTHOR_CANNOT_APPROVE: 'The author cannot approve their own change.',
-    RETROACTIVE_IMPACT: 'This change would alter criteria already used by recorded inspections.',
-    FUTURE_PLAN_CONFLICT: 'This change conflicts with an approved future schedule.',
-    NO_EFFECTIVE_REVISION: 'There is no published revision effective at the inspection time.',
-    AMBIGUOUS_EFFECTIVITY: 'More than one revision is effective at the inspection time.',
-    REVISION_INTEGRITY_FAILURE: 'The stored revision does not match its signed content.',
-    BASIS_CONFLICT: 'This inspection already has a different specification or inspection time.',
-    APPROVAL_LINE_REQUIRED: 'Configure an approval line before submitting this change.',
-    REVISION_REQUIRED: 'Change the specification through a revision draft.'
-};
-function refuse(code, detail) {
-    throw new TestSpecificationRefusal(code, detail);
-}
-function transaction(manager) {
-    if (!manager.queryRunner?.isTransactionActive)
-        refuse('TRANSACTION_REQUIRED');
-}
-function instant(value) {
-    if (!(value instanceof Date) && (typeof value !== 'string' || !/(Z|[+-]\d{2}:\d{2})$/.test(value)))
-        refuse('INVALID_INSTANT');
-    const result = new Date(value);
-    if (!Number.isFinite(result.getTime()))
-        refuse('INVALID_INSTANT');
-    return result;
-}
-function text(value, field) {
-    if (typeof value !== 'string' || !value.trim())
-        refuse('INVALID_CONTENT', field);
-    return value.trim();
-}
-/** Sorted object keys, ordered arrays, ISO instants. This is the v1 submission encoding. */
-function canonical(value) {
-    if (value === null || typeof value !== 'object')
-        return JSON.stringify(value);
-    if (Array.isArray(value))
-        return '[' + value.map(canonical).join(',') + ']';
-    return ('{' +
-        Object.keys(value)
-            .sort()
-            .map(key => JSON.stringify(key) + ':' + canonical(value[key]))
-            .join(',') +
-        '}');
-}
-function testSpecificationSubmissionHash(revision) {
-    return (0, node_crypto_1.createHash)('sha256')
-        .update(canonical({
-        schemaVersion: 1,
-        revisionNumber: revision.revisionNumber,
-        policyId: revision.policyId,
-        domainId: revision.domainId,
-        specId: revision.specId,
-        baseRevisionId: revision.baseRevisionId,
-        baseGeneration: revision.baseGeneration,
-        version: revision.version,
-        description: revision.description,
-        criteria: revision.criteria,
-        effectiveFrom: revision.effectiveFrom.toISOString(),
-        reason: revision.reason
-    }))
-        .digest('hex');
-}
-/** Display values are a checked projection of the frozen revision, never a second editable source. */
-async function testSpecificationApprovalInput(manager, domainId, revisionId) {
-    const draft = await revision(manager, domainId, revisionId);
-    if (!draft.frozenAt || draft.contentHash !== testSpecificationSubmissionHash(draft))
-        refuse('INVALID_SUBMISSION');
-    const spec = await subject(manager, domainId, draft.specId);
-    const base = draft.baseRevisionId ? await revision(manager, domainId, draft.baseRevisionId) : null;
-    const plan = base ? await manager.findOneBy(test_spec_revision_1.TestSpecificationPlan, {
-        domain: { id: domainId }, spec: { id: draft.specId }, generation: draft.baseGeneration
-    }) : null;
-    const segment = plan && base ? await manager.findOneBy(test_spec_revision_1.TestSpecificationSegment, {
-        domain: { id: domainId }, plan: { id: plan.id }, revision: { id: base.id }
-    }) : null;
-    /*
-     * How the base was published (2026-10-20) — the approval screen names a baseline base in plain words. Only the
-     * base carries it: it was published before this draft existed and never changes, so the snapshot stays pinned.
-     * The proposal is unpublished here and would read differently once published.
-     */
-    const basePlan = base ? await manager.findOneBy(test_spec_revision_1.TestSpecificationPlan, { domain: { id: domainId }, publishedRevision: { id: base.id } }) : null;
-    const values = (row) => ({
-        revisionNumber: row.revisionNumber,
-        detail: {
-            revisionId: row.id, createdAt: row.createdAt.toISOString(), frozenAt: row.frozenAt?.toISOString(),
-            effectiveFrom: row.effectiveFrom.toISOString(), reason: row.reason,
-            ...(row.id === base?.id ? { releaseKind: basePlan?.releaseKind ?? null } : {}),
-            ...(row.id === base?.id && segment ? { validFrom: segment.validFrom.toISOString(), validTo: segment.validTo?.toISOString() ?? null } : {})
-        },
-        version: row.version,
-        description: row.description,
-        criteria: row.criteria
-    });
-    return {
-        headline: spec.name,
-        reason: draft.reason,
-        effectiveFrom: draft.effectiveFrom.toISOString(),
-        before: base ? values(base) : null,
-        after: values(draft),
-        revision: {
-            revisionId: draft.id,
-            hash: draft.contentHash,
-            specId: draft.specId,
-            baseGeneration: draft.baseGeneration
-        }
-    };
-}
-async function assertTestSpecificationApprovalInput(manager, domainId, input) {
-    const reference = input?.revision;
-    if (typeof reference?.revisionId !== 'string')
-        refuse('INVALID_SUBMISSION');
-    const expected = await testSpecificationApprovalInput(manager, domainId, reference.revisionId);
-    if (!(0, approval_input_1.approvalInputMatches)(input, expected))
-        refuse('INVALID_SUBMISSION');
-}
-function content(input) {
-    const read = (0, criteria_check_1.readCriteria)(input.criteria);
-    if (read.read === 'failed')
-        refuse('INVALID_CRITERIA', read.detail);
-    const judged = (0, criteria_check_1.judgeCriteria)(read.criteria);
-    if (!judged.ok)
-        refuse('INVALID_CRITERIA', judged.problems.join('\n'));
-    // A JSON round trip makes the accepted value exactly the persisted value, not a caller-owned object.
-    const criteria = JSON.parse(JSON.stringify(read.criteria));
-    if (input.description != null && typeof input.description !== 'string')
-        refuse('INVALID_CONTENT', 'description');
-    return {
-        version: text(input.version, 'version'),
-        description: input.description ?? null,
-        criteria,
-        effectiveFrom: instant(input.effectiveFrom),
-        reason: text(input.reason, 'reason')
-    };
-}
-async function subject(manager, domainId, specId) {
-    const spec = await manager.findOne(test_specification_1.TestSpecification, {
-        where: { id: specId, domain: { id: domainId } },
-        ...(0, row_lock_1.writeLockOn)(manager, test_specification_1.TestSpecification)
-    });
-    if (!spec)
-        refuse('SPECIFICATION_NOT_FOUND');
-    // Compare the current head and latest persisted plan in one SQL snapshot. A historical
-    // knownAt query must not compare its selected old plan with the current head.
-    const head = await manager.createQueryBuilder(test_specification_1.TestSpecification, 'head')
-        .leftJoin(test_spec_revision_1.TestSpecificationPlan, 'plan', 'plan.spec = head.id AND plan.domain = head.domain')
-        .select('head.planGeneration', 'generation')
-        .addSelect('MAX(plan.generation)', 'latest')
-        .where({ id: specId, domain: { id: domainId } })
-        .groupBy('head.id').addGroupBy('head.planGeneration')
-        .getRawOne();
-    if (!head || Number(head.generation) !== Number(head.latest ?? 0)) {
-        throw new shell_1.Refusal('PLAN_INTEGRITY_FAILURE', {}, 'The current plan generation does not match the latest published plan. Contact an administrator.');
-    }
-    return spec;
-}
-async function revision(manager, domainId, revisionId, locked = true) {
-    const found = await manager.findOne(test_spec_revision_1.TestSpecificationRevision, {
-        where: { id: revisionId, domain: { id: domainId } },
-        ...(locked ? (0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationRevision) : {})
-    });
-    if (!found)
-        refuse('REVISION_NOT_FOUND');
-    return found;
-}
-/** A write lock valid on every supported SQL backend, including SQLite (no SELECT FOR UPDATE). */
-async function lockSubject(manager, domainId, specId) {
-    transaction(manager);
-    const locked = await manager
-        .createQueryBuilder()
-        .update(test_specification_1.TestSpecification)
-        .set({ revisionLock: () => 'revision_lock + 1' })
-        .where({ id: specId, domain: { id: domainId } })
-        .execute();
-    if (locked.affected !== 1)
-        refuse('SPECIFICATION_NOT_FOUND');
-    return subject(manager, domainId, specId);
-}
-async function createTestSpecificationDraft(manager, domainId, creatorId, asked) {
-    transaction(manager);
-    const accepted = content(asked.content);
-    const policy = await (0, master_change_policy_1.masterChangePolicy)(manager, domainId, 'testSpecification');
-    let spec;
-    if (asked.specId) {
-        spec = await lockSubject(manager, domainId, asked.specId);
-    }
-    else {
-        spec = await manager.save(test_specification_1.TestSpecification, manager.create(test_specification_1.TestSpecification, {
-            domain: { id: domainId },
-            name: text(asked.name, 'name'),
-            planGeneration: 0,
-            revisionLock: 0,
-            creator: { id: creatorId },
-            updater: { id: creatorId }
-        }));
-    }
-    const previous = await manager.findOne(test_spec_revision_1.TestSpecificationRevision, {
-        where: { domain: { id: domainId }, spec: { id: spec.id } }, order: { revisionNumber: 'DESC' },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationRevision)
-    });
-    const revisionNumber = (previous?.revisionNumber ?? 0) + 1;
-    let baseRevisionId = null;
-    if (spec.planGeneration > 0) {
-        baseRevisionId = (await resolveTestSpecification(manager, domainId, spec.id, accepted.effectiveFrom)).revision.id;
-    }
-    if (asked.baseRevisionId && asked.baseRevisionId !== baseRevisionId)
-        refuse('INVALID_BASE_REVISION');
-    const saved = await manager.save(test_spec_revision_1.TestSpecificationRevision, manager.create(test_spec_revision_1.TestSpecificationRevision, {
-        ...accepted,
-        policy: { id: policy.id },
-        domain: { id: domainId },
-        spec: { id: spec.id },
-        baseRevision: baseRevisionId ? { id: baseRevisionId } : null,
-        baseGeneration: spec.planGeneration,
-        revisionNumber,
-        editGeneration: 0,
-        creator: { id: creatorId },
-        createdAt: new Date(),
-        frozenAt: null,
-        contentHash: null,
-        activityInstanceId: null
-    }));
-    return revision(manager, domainId, saved.id);
-}
-async function editTestSpecificationDraft(manager, domainId, actorId, revisionId, expectedEditGeneration, input) {
-    transaction(manager);
-    const accepted = content(input);
-    const initial = await revision(manager, domainId, revisionId, false);
-    const spec = await lockSubject(manager, domainId, initial.specId);
-    const draft = await revision(manager, domainId, revisionId);
-    if (draft.creatorId !== actorId)
-        refuse('DRAFT_NOT_OWNED');
-    if (draft.frozenAt)
-        refuse('REVISION_FROZEN');
-    if (draft.baseGeneration !== spec.planGeneration)
-        refuse('PLAN_CONFLICT');
-    // Moving the effective date across a scheduled boundary changes the before-image.
-    const baseRevisionId = spec.planGeneration > 0
-        ? (await resolveTestSpecification(manager, domainId, spec.id, accepted.effectiveFrom)).revision.id
-        : null;
-    const updated = await manager
-        .createQueryBuilder()
-        .update(test_spec_revision_1.TestSpecificationRevision)
-        .set({
-        ...accepted,
-        baseRevision: baseRevisionId ? { id: baseRevisionId } : null,
-        editGeneration: expectedEditGeneration + 1
-    })
-        .where({
-        id: revisionId,
-        domain: { id: domainId },
-        creator: { id: actorId },
-        editGeneration: expectedEditGeneration
-    })
-        .andWhere('frozen_at IS NULL')
-        .execute();
-    if (updated.affected !== 1)
-        refuse('DRAFT_CONFLICT');
-    return revision(manager, domainId, revisionId);
-}
-/** Product calls this in the same transaction as issuing its worklist approval. */
-async function freezeTestSpecificationDraft(manager, domainId, actorId, revisionId, expectedEditGeneration) {
-    const initial = await revision(manager, domainId, revisionId, false);
-    const spec = await lockSubject(manager, domainId, initial.specId);
-    const draft = await revision(manager, domainId, revisionId);
-    if (draft.creatorId !== actorId)
-        refuse('DRAFT_NOT_OWNED');
-    if (draft.frozenAt)
-        refuse('REVISION_FROZEN');
-    if (draft.editGeneration !== expectedEditGeneration)
-        refuse('DRAFT_CONFLICT');
-    if (draft.baseGeneration !== spec.planGeneration)
-        refuse('PLAN_CONFLICT');
-    const policy = await (0, master_change_policy_1.masterChangePolicy)(manager, domainId, 'testSpecification');
-    if (draft.policyId !== policy.id)
-        refuse('PLAN_CONFLICT');
-    content(draft);
-    const contentHash = testSpecificationSubmissionHash(draft);
-    await manager.update(test_spec_revision_1.TestSpecificationRevision, { id: revisionId, domain: { id: domainId } }, { frozenAt: new Date(), contentHash });
-    return revision(manager, domainId, revisionId);
-}
-async function bindTestSpecificationApproval(manager, domainId, revisionId, activityInstanceId) {
-    transaction(manager);
-    const initial = await revision(manager, domainId, revisionId, false);
-    await lockSubject(manager, domainId, initial.specId);
-    const draft = await revision(manager, domainId, revisionId);
-    if (!draft.frozenAt || draft.activityInstanceId)
-        refuse('INVALID_SUBMISSION');
-    await manager.update(test_spec_revision_1.TestSpecificationRevision, { id: revisionId, domain: { id: domainId } }, { activityInstanceId: text(activityInstanceId, 'activityInstanceId') });
-}
-/** Internal completion callback only. Never expose this as an approved=true mutation. */
-async function publishTestSpecificationRevision(manager, domainId, revisionId, decision) {
-    return publishRevision(manager, domainId, revisionId, {
-        kind: 'approved',
-        activityInstanceId: decision.activityInstanceId,
-        actorId: decision.approverId,
-        submissionHash: decision.submissionHash
-    });
-}
-async function publishUnregulatedTestSpecification(manager, domainId, actorId, revisionId, editGeneration) {
-    transaction(manager);
-    const initial = await revision(manager, domainId, revisionId, false);
-    await lockSubject(manager, domainId, initial.specId);
-    const policy = await (0, master_change_policy_1.masterChangePolicy)(manager, domainId, 'testSpecification');
-    if (policy.approvalRequired)
-        throw new shell_1.Refusal('MASTER_APPROVAL_REQUIRED', {}, 'This change requires product approval.');
-    const prior = await manager.findOneBy(test_spec_revision_1.TestSpecificationPlan, {
-        domain: { id: domainId },
-        publishedRevision: { id: revisionId },
-        releaseKind: 'policy'
-    });
-    if (prior) {
-        if (prior.publisherId !== actorId)
-            refuse('DRAFT_NOT_OWNED');
-        return prior;
-    }
-    const frozen = await freezeTestSpecificationDraft(manager, domainId, actorId, revisionId, editGeneration);
-    return publishRevision(manager, domainId, revisionId, { kind: 'policy', actorId, submissionHash: frozen.contentHash });
-}
-async function publishRevision(manager, domainId, revisionId, decision) {
-    const initial = await revision(manager, domainId, revisionId, false);
-    const spec = await lockSubject(manager, domainId, initial.specId);
-    const draft = await revision(manager, domainId, revisionId);
-    if (!draft.frozenAt ||
-        (decision.kind === 'approved'
-            ? draft.activityInstanceId !== decision.activityInstanceId
-            : !!draft.activityInstanceId) ||
-        draft.contentHash !== decision.submissionHash ||
-        testSpecificationSubmissionHash(draft) !== decision.submissionHash)
-        refuse('INVALID_SUBMISSION');
-    const policy = await (0, master_change_policy_1.masterChangePolicy)(manager, domainId, 'testSpecification');
-    if (draft.policyId !== policy.id)
-        refuse('PLAN_CONFLICT');
-    if (policy.approvalRequired !== (decision.kind === 'approved'))
-        throw new shell_1.Refusal('MASTER_APPROVAL_POLICY_MISMATCH', {}, 'Use the publication path required by the domain policy.');
-    if (decision.kind === 'approved' && draft.creatorId === decision.actorId)
-        refuse('AUTHOR_CANNOT_APPROVE');
-    text(decision.actorId, 'publisher');
-    const previousDecision = await manager.findOne(test_spec_revision_1.TestSpecificationPlan, {
-        where: { domain: { id: domainId }, publishedRevision: { id: revisionId } },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationPlan)
-    });
-    if (previousDecision)
-        return previousDecision;
-    if (draft.baseGeneration !== spec.planGeneration)
-        refuse('PLAN_CONFLICT');
-    // Only replacement from effectiveFrom onward is supported in this slice, not arbitrary rescheduling.
-    if (await manager.findOne(test_spec_revision_1.TestSpecificationBasis, {
-        where: { domain: { id: domainId }, spec: { id: spec.id }, businessTime: (0, typeorm_1.MoreThanOrEqual)(draft.effectiveFrom) },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationBasis)
-    }))
-        refuse('RETROACTIVE_IMPACT');
-    const oldPlan = await manager.findOne(test_spec_revision_1.TestSpecificationPlan, {
-        where: { domain: { id: domainId }, spec: { id: spec.id }, generation: spec.planGeneration },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationPlan)
-    });
-    if (spec.planGeneration > 0 && !oldPlan)
-        refuse('PLAN_CONFLICT');
-    const oldSegments = oldPlan
-        ? await manager.find(test_spec_revision_1.TestSpecificationSegment, {
-            where: { domain: { id: domainId }, spec: { id: spec.id }, plan: { id: oldPlan.id } },
-            order: { validFrom: 'ASC' },
-            ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationSegment)
-        })
-        : [];
-    // Do not silently erase an already approved future appointment.
-    if (oldSegments.some(segment => segment.validFrom >= draft.effectiveFrom))
-        refuse('FUTURE_PLAN_CONFLICT');
-    const recordedAt = new Date();
-    const plan = await manager.save(test_spec_revision_1.TestSpecificationPlan, manager.create(test_spec_revision_1.TestSpecificationPlan, {
-        domain: { id: domainId },
-        spec: { id: spec.id },
-        generation: spec.planGeneration + 1,
-        recordedAt,
-        activityInstanceId: decision.activityInstanceId ?? null,
-        submissionHash: decision.submissionHash,
-        approver: decision.kind === 'approved' ? { id: decision.actorId } : null,
-        publisher: { id: decision.actorId },
-        releaseKind: decision.kind,
-        publishedRevision: { id: revisionId },
-        policy: { id: policy.id }
-    }));
-    for (const old of oldSegments) {
-        await manager.save(test_spec_revision_1.TestSpecificationSegment, manager.create(test_spec_revision_1.TestSpecificationSegment, {
-            domain: { id: domainId },
-            spec: { id: spec.id },
-            plan: { id: plan.id },
-            revision: { id: old.revisionId },
-            validFrom: old.validFrom,
-            validTo: !old.validTo || old.validTo > draft.effectiveFrom ? draft.effectiveFrom : old.validTo
-        }));
-    }
-    await manager.save(test_spec_revision_1.TestSpecificationSegment, manager.create(test_spec_revision_1.TestSpecificationSegment, {
-        domain: { id: domainId },
-        spec: { id: spec.id },
-        plan: { id: plan.id },
-        revision: { id: revisionId },
-        validFrom: draft.effectiveFrom,
-        validTo: null
-    }));
-    const advanced = await manager.update(test_specification_1.TestSpecification, { id: spec.id, domain: { id: domainId }, planGeneration: spec.planGeneration }, { planGeneration: plan.generation });
-    if (advanced.affected !== 1)
-        refuse('PLAN_CONFLICT');
-    return plan;
-}
-async function resolveTestSpecification(manager, domainId, specId, businessTime, knownAt = new Date()) {
-    const at = instant(businessTime);
-    const known = instant(knownAt);
-    const plan = await manager.findOne(test_spec_revision_1.TestSpecificationPlan, {
-        where: { domain: { id: domainId }, spec: { id: specId }, recordedAt: (0, typeorm_1.LessThanOrEqual)(known) },
-        order: { generation: 'DESC' },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationPlan)
-    });
-    if (!plan)
-        refuse('NO_EFFECTIVE_REVISION');
-    /* 실행 조회도 뿌리와 최신 Plan 의 불변식을 지난다 — material·recipe 와 같은 자리다. */
-    await subject(manager, domainId, specId);
-    const query = manager
-        .createQueryBuilder(test_spec_revision_1.TestSpecificationSegment, 'segment')
-        .where({ domain: { id: domainId }, spec: { id: specId }, plan: { id: plan.id } })
-        .andWhere('segment.validFrom <= :at', { at })
-        .andWhere('(segment.validTo IS NULL OR segment.validTo > :at)', { at });
-    (0, row_lock_1.lockRowsOf)(manager, query);
-    const segments = await query.getMany();
-    if (!segments.length)
-        await refuseBeforeBaseline(manager, domainId, specId, at);
-    if (segments.length !== 1)
-        refuse(segments.length ? 'AMBIGUOUS_EFFECTIVITY' : 'NO_EFFECTIVE_REVISION');
-    const selected = await revision(manager, domainId, segments[0].revisionId);
-    if (!selected.frozenAt || selected.contentHash !== testSpecificationSubmissionHash(selected))
-        refuse('REVISION_INTEGRITY_FAILURE');
-    return { revision: selected, plan, segment: segments[0] };
-}
-/**
- * 기준선보다 앞선 시각을 물으면 **모른다고 말한다**(2026-09-24). 그 시각의 내용은 기록된 적이 없다 —
- * 행이 제자리에서 덮어써졌기 때문이다. 오늘 값이나 「유효한 것 없음」으로 답하지 않는다.
- */
-async function refuseBeforeBaseline(manager, domainId, specId, at) {
-    const first = await manager.findOneBy(test_spec_revision_1.TestSpecificationPlan, {
-        domain: { id: domainId }, spec: { id: specId }, generation: 1, releaseKind: 'baseline'
-    });
-    if (!first)
-        return;
-    const recorded = await manager.findOneBy(test_spec_revision_1.TestSpecificationRevision, { domain: { id: domainId }, id: first.publishedRevisionId });
-    if (recorded && at < recorded.effectiveFrom)
-        throw new shell_1.Refusal('BEFORE_BASELINE', { baselineAt: recorded.effectiveFrom.toISOString() }, `This master was first recorded at ${recorded.effectiveFrom.toISOString()}; nothing is known about it before then.`);
-}
-/**
- * **개정본이 하나도 없는 명세**마다 지금 서 있는 행을 첫 개정본으로 적는다 — 기준선(2026-09-24).
- *
- * 개정 체계보다 먼저 있던 행은 한 번도 개정본을 가진 적이 없어서, 새 검사가 고를 것이 없었다. 기준선은
- * 변경이 아니라 **지금 이 값으로 돌고 있다는 기록**이라 결재를 안 탄다. 대신 자기 성격을 이름으로 댄다 —
- * 발행 종류 `baseline`, 결재자·작성자·발행자는 비고, 세운 시각과 버전(`edition`)이 사유에 남는다.
- *
- * - 값은 행에 있는 그대로다. 고치지 않는다.
- * - 유효 시작은 **세운 시각**이다(`at` — 서버가 정한다). 앞으로 소급하지 않는다. 그 앞은 모른다.
- * - 행에 끝(`effectiveEnd`)이 적혀 있으면 그때 끝난다. 이미 지났으면 개정본만 서고 유효 구간은 없다.
- * - 개정본이 하나라도 있는 명세는 손대지 않는다. 찾는 것은 질의 하나다.
- * - 둘이 동시에 돌아도 하나만 선다 — 개정 번호 유니크와 루트의 세대 조건부 갱신이 막는다.
- */
-async function standTestSpecificationBaselines(manager, domainId, at, edition) {
-    transaction(manager);
-    const roots = await manager
-        .createQueryBuilder(test_specification_1.TestSpecification, 'spec')
-        .leftJoin(test_spec_revision_1.TestSpecificationRevision, 'rev', 'rev.spec_id = spec.id AND rev.domain_id = spec.domain_id')
-        .where('spec.domain_id = :domainId', { domainId })
-        .andWhere('rev.id IS NULL')
-        .getMany();
-    const outcome = { stood: 0, unreadable: [] };
-    if (!roots.length)
-        return outcome;
-    const policy = await (0, master_change_policy_1.masterChangePolicy)(manager, domainId, 'testSpecification');
-    for (const root of roots) {
-        if (root.planGeneration !== 0) {
-            outcome.unreadable.push({ name: root.name, problem: 'plan without revision' });
-            continue;
-        }
-        const read = (0, criteria_check_1.readCriteria)(root.criteria ?? []);
-        const judged = read.read === 'failed' ? { ok: false, problems: [read.detail] } : (0, criteria_check_1.judgeCriteria)(read.criteria);
-        if (read.read === 'failed' || !judged.ok || !root.version?.trim()) {
-            outcome.unreadable.push({
-                name: root.name,
-                problem: !root.version?.trim() ? 'no version' : judged.problems.join('; ')
-            });
-            continue;
-        }
-        const validFrom = root.effectiveStart && root.effectiveStart > at ? root.effectiveStart : at;
-        const validTo = root.effectiveEnd ?? null;
-        const saved = await manager.save(test_spec_revision_1.TestSpecificationRevision, manager.create(test_spec_revision_1.TestSpecificationRevision, {
-            version: root.version.trim(),
-            description: root.description ?? null,
-            criteria: JSON.parse(JSON.stringify(read.criteria)),
-            effectiveFrom: validFrom,
-            reason: `baseline: the row as it stood, recorded by ${edition}`,
-            policy: { id: policy.id },
-            domain: { id: domainId },
-            spec: { id: root.id },
-            baseRevision: null,
-            baseGeneration: 0,
-            revisionNumber: 1,
-            editGeneration: 0,
-            creator: null,
-            createdAt: at,
-            frozenAt: at,
-            contentHash: null,
-            activityInstanceId: null
-        }));
-        const stood = await revision(manager, domainId, saved.id);
-        const contentHash = testSpecificationSubmissionHash(stood);
-        await manager.update(test_spec_revision_1.TestSpecificationRevision, { id: stood.id, domain: { id: domainId } }, { contentHash });
-        const plan = await manager.save(test_spec_revision_1.TestSpecificationPlan, manager.create(test_spec_revision_1.TestSpecificationPlan, {
-            domain: { id: domainId },
-            spec: { id: root.id },
-            generation: 1,
-            recordedAt: at,
-            activityInstanceId: null,
-            submissionHash: contentHash,
-            approver: null,
-            publisher: null,
-            releaseKind: 'baseline',
-            publishedRevision: { id: stood.id },
-            policy: { id: policy.id }
-        }));
-        if (!validTo || validTo > validFrom) {
-            await manager.save(test_spec_revision_1.TestSpecificationSegment, manager.create(test_spec_revision_1.TestSpecificationSegment, {
-                domain: { id: domainId },
-                spec: { id: root.id },
-                plan: { id: plan.id },
-                revision: { id: stood.id },
-                validFrom,
-                validTo
-            }));
-        }
-        const advanced = await manager.update(test_specification_1.TestSpecification, { id: root.id, domain: { id: domainId }, planGeneration: 0 }, { planGeneration: 1 });
-        if (advanced.affected !== 1)
-            refuse('PLAN_CONFLICT');
-        outcome.stood++;
-    }
-    return outcome;
-}
-/** Replay reads verify the captured digest too, not only the currently effective schedule. */
-async function testSpecificationRevisionForBasis(manager, domainId, basis) {
-    if (basis.domainId !== domainId)
-        refuse('BASIS_CONFLICT');
-    const selected = await revision(manager, domainId, basis.revisionId);
-    if (selected.specId !== basis.specId || !selected.frozenAt || selected.contentHash !== basis.contentHash || testSpecificationSubmissionHash(selected) !== basis.contentHash) {
-        refuse('REVISION_INTEGRITY_FAILURE');
-    }
-    return selected;
-}
-/** Must run inside the transaction that writes the inspection result. */
-async function captureTestSpecificationBasis(manager, domainId, specId, recordKey, businessTime) {
-    const at = instant(businessTime);
-    await lockSubject(manager, domainId, specId);
-    const existing = await manager.findOne(test_spec_revision_1.TestSpecificationBasis, {
-        where: { domain: { id: domainId }, recordKey },
-        ...(0, row_lock_1.writeLockOn)(manager, test_spec_revision_1.TestSpecificationBasis)
-    });
-    if (existing) {
-        if (existing.specId !== specId || existing.businessTime.getTime() !== at.getTime())
-            refuse('BASIS_CONFLICT');
-        await testSpecificationRevisionForBasis(manager, domainId, existing);
-        return existing;
-    }
-    const resolvedAt = new Date();
-    const selected = await resolveTestSpecification(manager, domainId, specId, at, resolvedAt);
-    const saved = await manager.save(test_spec_revision_1.TestSpecificationBasis, manager.create(test_spec_revision_1.TestSpecificationBasis, {
-        domain: { id: domainId },
-        spec: { id: specId },
-        recordKey: text(recordKey, 'recordKey'),
-        businessTime: at,
-        resolvedAt,
-        revision: { id: selected.revision.id },
-        contentHash: selected.revision.contentHash,
-        plan: { id: selected.plan.id }
-    }));
-    return manager.findOneByOrFail(test_spec_revision_1.TestSpecificationBasis, { id: saved.id, domain: { id: domainId } });
-}
-async function testSpecificationRevisionOverview(manager, domainId, specId, at = new Date()) {
-    const spec = await subject(manager, domainId, specId);
-    const revisions = await manager.find(test_spec_revision_1.TestSpecificationRevision, {
-        where: { domain: { id: domainId }, spec: { id: specId } },
-        order: { createdAt: 'ASC', id: 'ASC' }
-    });
-    const plan = await manager.findOne(test_spec_revision_1.TestSpecificationPlan, {
-        where: { domain: { id: domainId }, spec: { id: specId }, generation: spec.planGeneration }
-    });
-    const schedule = plan
-        ? await manager.find(test_spec_revision_1.TestSpecificationSegment, {
-            where: { domain: { id: domainId }, spec: { id: specId }, plan: { id: plan.id } },
-            order: { validFrom: 'ASC' }
-        })
-        : [];
-    /*
-     * 개정본마다 **어떻게 발행됐는지**(`releaseKind`)를 함께 싣는다 — 발행한 적용계획의 값 그대로(2026-10-20).
-     * 화면은 이것으로 기준선을 알아보고 사람의 말(「최초 기록」)로 적는다. 기준선의 사유는 서버가 쓴 기록
-     * 문장인데 해시에 들어가 바꿀 수 없고, 문구로 알아보면 깨지기 쉽다. 발행 전 개정본은 null.
-     */
-    const kindOf = (0, approval_input_1.releaseKinds)(await manager.findBy(test_spec_revision_1.TestSpecificationPlan, { domain: { id: domainId }, spec: { id: specId } }));
-    return {
-        specId,
-        name: spec.name,
-        generation: spec.planGeneration,
-        at: at.toISOString(),
-        schedule: schedule.map(segment => ({
-            ...segment,
-            state: segment.validFrom > at ? 'scheduled' : segment.validTo && segment.validTo <= at ? 'expired' : 'current'
-        })),
-        revisions: revisions.map(item => ({ ...item, state: item.frozenAt ? 'frozen' : 'draft',
-            releaseKind: kindOf(item.id) }))
-    };
-}
-/** Read-time projection, never a clock-driven rewrite of the identity row. */
-async function effectiveTestSpecification(manager, domainId, spec, at = new Date()) {
-    const selected = await resolveTestSpecification(manager, domainId, spec.id, at);
-    return Object.assign(new test_specification_1.TestSpecification(), spec, {
-        version: selected.revision.version,
-        description: selected.revision.description,
-        criteria: selected.revision.criteria,
-        effectiveStart: selected.segment.validFrom,
-        effectiveEnd: selected.segment.validTo ?? undefined
-    });
-}
-/**
- * **비규제 사업장의 「저장」 한 번** — 초안을 만들고 바로 발행한다, 한 트랜잭션에서(ADR-0086 09-22 보탬).
- * 비규제면 사람이 누를 것은 저장 하나다. 두 걸음(초안 저장 → 발행)이 구조상 필연인 것처럼 보이게 하지 않는다.
- * 이 축이 승인제면 발행이 `MASTER_APPROVAL_REQUIRED` 로 거절되고, 같은 트랜잭션이라 초안도 함께 물러난다 —
- * 반쯤 저장된 것이 남지 않는다. 개정본 · 적용계획 · 구간은 두 걸음 때와 똑같이 선다.
- */
-async function saveAndPublishTestSpecification(manager, domainId, actorId, asked) {
-    // Reuse the owned draft and its concurrency guard; publishing failure rolls back the edit too.
-    if (asked.revisionId && !Number.isInteger(asked.editGeneration))
-        refuse('DRAFT_CONFLICT');
-    const draft = asked.revisionId
-        ? await editTestSpecificationDraft(manager, domainId, actorId, asked.revisionId, asked.editGeneration, asked.content)
-        : await createTestSpecificationDraft(manager, domainId, actorId, asked);
-    const plan = await publishUnregulatedTestSpecification(manager, domainId, actorId, draft.id, draft.editGeneration);
-    return { revision: await revision(manager, domainId, draft.id, false), plan };
-}
-//# sourceMappingURL=test-spec-revision-service.js.map