agentera 3.0.0-dev.14 → 3.0.0-dev.16

package/dist/runtime/lifecycleOperationContract.js

@@ -0,0 +1,109 @@
+import fs from "node:fs";
+import path from "node:path";
+import { loadYamlMapping } from "../core/yaml.js";
+import { LIFECYCLE_APPLY_STATUSES, LIFECYCLE_OPERATION_CONTRACT_RELATIVE_PATH, LIFECYCLE_PLAN_ACTIONS, LIFECYCLE_RESOURCE_STATES, } from "./lifecycleOperations.js";
+function sameList(value, expected) {
+    return Array.isArray(value) && JSON.stringify(value) === JSON.stringify(expected);
+}
+export function validateLifecycleOperationContractData(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        return ["operation contract must be a YAML object"];
+    }
+    const data = value;
+    const errors = [];
+    if (data.schema_version !== "agentera.lifecycleOperationContract.v1") {
+        errors.push("schema_version must be agentera.lifecycleOperationContract.v1");
+    }
+    if (data.status !== "active_contract")
+        errors.push("status must be active_contract");
+    if (data.decision !== 92)
+        errors.push("decision must cite approved Decision 92");
+    if (!sameList(data.resource_states, LIFECYCLE_RESOURCE_STATES)) {
+        errors.push(`resource_states must be ${LIFECYCLE_RESOURCE_STATES.join(", ")}`);
+    }
+    if (!sameList(data.plan_actions, LIFECYCLE_PLAN_ACTIONS)) {
+        errors.push(`plan_actions must be ${LIFECYCLE_PLAN_ACTIONS.join(", ")}`);
+    }
+    if (!sameList(data.apply_results, LIFECYCLE_APPLY_STATUSES)) {
+        errors.push(`apply_results must be ${LIFECYCLE_APPLY_STATUSES.join(", ")}`);
+    }
+    const ownership = data.ownership;
+    if (ownership?.identity_rule !== "Managed and published pending-create records bind the filesystem device and inode observed at publication.") {
+        errors.push("ownership.identity_rule must bind records to publication identity");
+    }
+    if (typeof ownership?.removal_rule !== "string" || !ownership.removal_rule.includes("identity and fingerprint")) {
+        errors.push("ownership.removal_rule must require matching identity and fingerprint");
+    }
+    if (typeof ownership?.journal_rule !== "string"
+        || !ownership.journal_rule.includes("append-only")
+        || !ownership.journal_rule.includes("atomically at final names")
+        || !ownership.journal_rule.includes("contiguous sequence-one hash chain")) {
+        errors.push("ownership.journal_rule must require atomic append-only publication and a strict contiguous hash chain");
+    }
+    const journalStatuses = ownership?.journal_statuses;
+    if (!journalStatuses
+        || !["absent", "clean", "recoverable_terminal_tail", "corrupt"]
+            .every((state) => typeof journalStatuses[state] === "string")
+        || !journalStatuses.recoverable_terminal_tail.includes("every mutation is blocked")
+        || !journalStatuses.corrupt.includes("digest mismatch")) {
+        errors.push("ownership.journal_statuses must define the four strict read and mutation states");
+    }
+    if (typeof ownership?.recovery_rule !== "string"
+        || !ownership.recovery_rule.includes("non-authoritative publication temporaries")
+        || !ownership.recovery_rule.includes("rolled-back prefix")
+        || !ownership.recovery_rule.includes("re-observes each resource")) {
+        errors.push("ownership.recovery_rule must ignore only publication temporaries, block rollback append, and re-observe resources");
+    }
+    const publication = data.publication_policy;
+    if (publication?.supported_platform !== "linux_proc_self_fd") {
+        errors.push("publication_policy.supported_platform must be linux_proc_self_fd");
+    }
+    if (publication?.unsupported_platform_result !== "action_required") {
+        errors.push("publication_policy.unsupported_platform_result must be action_required");
+    }
+    if (typeof publication?.apply_serialization !== "string"
+        || !publication.apply_serialization.includes("complete live preparation blocks contenders")
+        || !publication.apply_serialization.includes("Linux boot ID")
+        || !publication.apply_serialization.includes("process start ticks")) {
+        errors.push("publication_policy.apply_serialization must atomically publish a complete strong-identity lock");
+    }
+    if (typeof publication?.lock_recovery !== "string"
+        || !publication.lock_recovery.includes("Malformed or incomplete final locks fail closed")
+        || !publication.lock_recovery.includes("full identity and token")) {
+        errors.push("publication_policy.lock_recovery must fail closed and verify identity on stale recovery and release");
+    }
+    if (typeof publication?.journal_publication !== "string"
+        || !publication.journal_publication.includes("non-authoritative temporary name")
+        || !publication.journal_publication.includes("hard-linked atomically")) {
+        errors.push("publication_policy.journal_publication must atomically publish durable complete final events");
+    }
+    if (publication?.destructive_path_mutations !== "owned_removal_only") {
+        errors.push("publication_policy.destructive_path_mutations must be owned_removal_only");
+    }
+    if (typeof publication?.cleanup_rule !== "string" || !publication.cleanup_rule.includes("never unlinks")) {
+        errors.push("publication_policy.cleanup_rule must forbid unlinking colliding or replaced paths");
+    }
+    const nativePolicy = data.native_policy;
+    if (nativePolicy?.install_update_auth_trust_operations !== "forbidden") {
+        errors.push("native_policy.install_update_auth_trust_operations must be forbidden");
+    }
+    if (nativePolicy?.trust_is_observed_only !== true) {
+        errors.push("native_policy.trust_is_observed_only must be true");
+    }
+    return errors;
+}
+export function validateLifecycleOperationContractRoot(root) {
+    const contractPath = path.join(root, LIFECYCLE_OPERATION_CONTRACT_RELATIVE_PATH);
+    if (!fs.existsSync(contractPath)) {
+        return [`${LIFECYCLE_OPERATION_CONTRACT_RELATIVE_PATH}:1: missing lifecycle operation contract`];
+    }
+    try {
+        return validateLifecycleOperationContractData(loadYamlMapping(fs.readFileSync(contractPath, "utf8"))).map((error) => `${LIFECYCLE_OPERATION_CONTRACT_RELATIVE_PATH}: ${error}`);
+    }
+    catch (error) {
+        return [
+            `${LIFECYCLE_OPERATION_CONTRACT_RELATIVE_PATH}: could not parse contract: ${error.message}`,
+        ];
+    }
+}
+//# sourceMappingURL=lifecycleOperationContract.js.map

package/dist/runtime/lifecycleOperationContract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycleOperationContract.js","sourceRoot":"","sources":["../../src/runtime/lifecycleOperationContract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,0CAA0C,EAC1C,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,SAAS,QAAQ,CAAC,KAAc,EAAE,QAA2B;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,cAAc,KAAK,wCAAwC,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,yBAAyB,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,2BAA2B,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,wBAAwB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,yBAAyB,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAgD,CAAC;IACxE,IAAI,SAAS,EAAE,aAAa,KAAK,4GAA4G,EAAE,CAAC;QAC9I,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,SAAS,EAAE,YAAY,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAChH,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IACD,IACE,OAAO,SAAS,EAAE,YAAY,KAAK,QAAQ;WACxC,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC;WAC/C,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,2BAA2B,CAAC;WAC7D,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EACzE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,eAAe,GAAG,SAAS,EAAE,gBAAuD,CAAC;IAC3F,IACE,CAAC,eAAe;WACb,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,SAAS,CAAC;aAC5D,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;WAC5D,CAAE,eAAe,CAAC,yBAAoC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;WAC5F,CAAE,eAAe,CAAC,OAAkB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EACnE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IACjG,CAAC;IACD,IACE,OAAO,SAAS,EAAE,aAAa,KAAK,QAAQ;WACzC,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,2CAA2C,CAAC;WAC9E,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC;WACvD,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACjE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mHAAmH,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAyD,CAAC;IACnF,IAAI,WAAW,EAAE,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,WAAW,EAAE,2BAA2B,KAAK,iBAAiB,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACxF,CAAC;IACD,IACE,OAAO,WAAW,EAAE,mBAAmB,KAAK,QAAQ;WACjD,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,6CAA6C,CAAC;WACxF,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC;WAC1D,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EACnE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;IAChH,CAAC;IACD,IACE,OAAO,WAAW,EAAE,aAAa,KAAK,QAAQ;WAC3C,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,iDAAiD,CAAC;WACtF,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EACjE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IACrH,CAAC;IACD,IACE,OAAO,WAAW,EAAE,mBAAmB,KAAK,QAAQ;WACjD,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,kCAAkC,CAAC;WAC7E,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACtE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,8FAA8F,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,WAAW,EAAE,0BAA0B,KAAK,oBAAoB,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,WAAW,EAAE,YAAY,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAoD,CAAC;IAC/E,IAAI,YAAY,EAAE,oCAAoC,KAAK,WAAW,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,YAAY,EAAE,sBAAsB,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,IAAY;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,0CAA0C,CAAC,CAAC;IACjF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,0CAA0C,0CAA0C,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sCAAsC,CAC3C,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CACvD,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,0CAA0C,KAAK,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,GAAG,0CAA0C,+BAAgC,KAAe,CAAC,OAAO,EAAE;SACvG,CAAC;IACJ,CAAC;AACH,CAAC"}