yam-flow 2.5.1 → 2.7.0

package/dist/lib/trust-kernel.js

@@ -1,3 +1,4 @@
+import { verifyStrictGateResult } from './gate-result.js';
 export const TRUTH_STATUSES = Object.freeze([
     'verified',
     'proven',
@@ -1023,7 +1024,22 @@ function missionCompletionCap(value = '') {
         if (!parsed || typeof parsed !== 'object')
             return weakestTruth(weakest, 'blocked');
         const gate = buildMissionCompletionGate(parsed);
-        return weakestTruth(weakest, gate.truth_status);
+        const record = parsed;
+        const strictGate = record.gate_result && typeof record.gate_result === 'object'
+            ? record.gate_result
+            : null;
+        const reportedContract = record.gate_contract && typeof record.gate_contract === 'object'
+            ? record.gate_contract
+            : null;
+        const strictVerification = verifyStrictGateResult(strictGate);
+        const strictReady = Boolean(strictGate
+            && strictGate.boundary === 'mission'
+            && strictGate.gate_id === 'mission-completion'
+            && strictGate.status === 'passed'
+            && strictVerification.valid
+            && reportedContract?.valid === true
+            && reportedContract?.truth_status === 'verified');
+        return weakestTruth(weakest, strictReady ? gate.truth_status : 'blocked');
     }, 'proven');
 }
 function strongestSupportedTruth(rows = []) {

package/dist/lib/verification-closure.d.ts

@@ -0,0 +1,97 @@
+export type VerificationScope = 'affected' | 'release';
+export interface SelectedVerificationCommand {
+    id: string;
+    command: string;
+    scope: VerificationScope;
+    required: boolean;
+}
+export interface ExecutedVerificationCommand {
+    id: string;
+    command: string;
+    exit_code: number;
+    evidence: string;
+}
+export interface VerificationCommandException {
+    check_id: string;
+    reason: string;
+}
+export interface VerificationClosureReceipt {
+    schema: 'yam.verification-closure.v1';
+    created_at: string;
+    planned_scope: VerificationScope;
+    final_scope: VerificationScope;
+    scope_derivation: {
+        source: 'git_status_porcelain_v1';
+        availability: 'observed' | 'unavailable';
+        promoted: boolean;
+        release_sensitive_files: string[];
+        reason: string;
+    };
+    declared_changed_files: string[];
+    scope_observation: {
+        command: 'git status --porcelain=v1 -z --untracked-files=all';
+        availability: 'observed' | 'unavailable';
+        changed_files: string[];
+        unplanned_files: string[];
+        declared_not_observed: string[];
+        reason: string;
+    };
+    changed_files: string[];
+    selected_commands: SelectedVerificationCommand[];
+    executed_commands: ExecutedVerificationCommand[];
+    skipped: VerificationCommandException[];
+    truncated: VerificationCommandException[];
+    execution_boundary: {
+        command_execution_by_yam: false;
+        execution_evidence: 'operator_declared';
+    };
+    status: 'passed' | 'failed';
+    blockers: string[];
+    truth_status: 'partial' | 'blocked';
+    digest: string;
+}
+export declare function createVerificationClosureReceipt(input: {
+    root: string;
+    receipt_path: string;
+    planned_scope: VerificationScope;
+    changed_files: string[];
+    selected_commands: SelectedVerificationCommand[];
+    executed_commands: ExecutedVerificationCommand[];
+    skipped: VerificationCommandException[];
+    truncated: VerificationCommandException[];
+}): Promise<{
+    schema: "yam.verification-closure-write.v1";
+    receipt_path: string;
+    receipt: VerificationClosureReceipt;
+    truth_status: "blocked" | "partial";
+    next_action: string;
+}>;
+export declare function verifyVerificationClosureReceipt(value: unknown): {
+    schema: "yam.verification-closure-verification.v1";
+    valid: boolean;
+    errors: string[];
+    receipt_truth_status: unknown;
+    truth_status: "verified" | "blocked";
+    next_action: string;
+};
+export declare function verifyVerificationClosureReceiptFile(input: {
+    root: string;
+    receipt_path: string;
+}): Promise<{
+    receipt_path: string;
+    current_scope: {
+        command: "git status --porcelain=v1 -z --untracked-files=all";
+        availability: "observed" | "unavailable";
+        changed_files: string[];
+        unplanned_files: string[];
+        declared_not_observed: string[];
+        reason: string;
+    };
+    valid: boolean;
+    errors: string[];
+    truth_status: "verified" | "blocked";
+    next_action: string;
+    schema: "yam.verification-closure-verification.v1";
+    receipt_truth_status: unknown;
+}>;
+export declare function isReleaseSensitivePath(file: string): boolean;