@aviaratech/ai-delivery 0.1.0

package/dist/delivery/policy.d.ts

@@ -0,0 +1,237 @@
+import { z } from 'zod';
+import type { Coordinate } from './common.js';
+export declare const RepositoryStageDefinitionSchema: z.ZodObject<{
+    attestationKey: z.ZodOptional<z.ZodString>;
+    commands: z.ZodArray<z.ZodObject<{
+        argv: z.ZodArray<z.ZodString>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+    dependsOn: z.ZodArray<z.ZodString>;
+    id: z.ZodString;
+    resourceClass: z.ZodEnum<{
+        source_only: "source_only";
+        focused_node: "focused_node";
+        canonical_verify: "canonical_verify";
+        model: "model";
+        postgres_docker: "postgres_docker";
+    }>;
+    semanticInputKeys: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type RepositoryStageDefinition = z.infer<typeof RepositoryStageDefinitionSchema>;
+export declare const RepositoryPolicyEvidenceSchema: z.ZodObject<{
+    artifacts: z.ZodArray<z.ZodObject<{
+        digest: z.ZodString;
+        path: z.ZodString;
+        producer: z.ZodString;
+    }, z.core.$strict>>;
+    base: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    configDigest: z.ZodString;
+    evidenceId: z.ZodString;
+    head: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    opaquePayload: z.ZodString;
+    policyDigest: z.ZodString;
+    producer: z.ZodString;
+    repository: z.ZodString;
+    schemaVersion: z.ZodLiteral<"ai-delivery.policy-evidence@1">;
+}, z.core.$strict>;
+export type RepositoryPolicyEvidence = z.infer<typeof RepositoryPolicyEvidenceSchema>;
+export declare const RepositoryPolicyClassificationSchema: z.ZodObject<{
+    policyDigest: z.ZodString;
+    policyEvidence: z.ZodObject<{
+        artifacts: z.ZodArray<z.ZodObject<{
+            digest: z.ZodString;
+            path: z.ZodString;
+            producer: z.ZodString;
+        }, z.core.$strict>>;
+        base: z.ZodObject<{
+            sha: z.ZodString;
+            tree: z.ZodString;
+        }, z.core.$strict>;
+        configDigest: z.ZodString;
+        evidenceId: z.ZodString;
+        head: z.ZodObject<{
+            sha: z.ZodString;
+            tree: z.ZodString;
+        }, z.core.$strict>;
+        opaquePayload: z.ZodString;
+        policyDigest: z.ZodString;
+        producer: z.ZodString;
+        repository: z.ZodString;
+        schemaVersion: z.ZodLiteral<"ai-delivery.policy-evidence@1">;
+    }, z.core.$strict>;
+    requiredStages: z.ZodArray<z.ZodObject<{
+        attestationKey: z.ZodOptional<z.ZodString>;
+        commands: z.ZodArray<z.ZodObject<{
+            argv: z.ZodArray<z.ZodString>;
+            label: z.ZodString;
+        }, z.core.$strict>>;
+        dependsOn: z.ZodArray<z.ZodString>;
+        id: z.ZodString;
+        resourceClass: z.ZodEnum<{
+            source_only: "source_only";
+            focused_node: "focused_node";
+            canonical_verify: "canonical_verify";
+            model: "model";
+            postgres_docker: "postgres_docker";
+        }>;
+        semanticInputKeys: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    risk: z.ZodEnum<{
+        high: "high";
+        standard: "standard";
+    }>;
+}, z.core.$strict>;
+export type RepositoryPolicyClassification = z.infer<typeof RepositoryPolicyClassificationSchema>;
+export declare const RepositoryPolicyBoundarySchema: z.ZodObject<{
+    additionalConstraints: z.ZodObject<{
+        exactBaseHeadLease: z.ZodBoolean;
+        requiredAttestationIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    boundaryId: z.ZodString;
+    classificationReceiptId: z.ZodString;
+    configDigest: z.ZodString;
+    currentBase: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    currentHead: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    phase: z.ZodEnum<{
+        verify: "verify";
+        publish: "publish";
+        merge: "merge";
+    }>;
+    policyEvidenceId: z.ZodString;
+    schemaVersion: z.ZodLiteral<"ai-delivery.policy-boundary@1">;
+    stageReceiptSetHash: z.ZodString;
+}, z.core.$strict>;
+export type RepositoryPolicyBoundary = z.infer<typeof RepositoryPolicyBoundarySchema>;
+export interface RepositoryDeliveryPolicy {
+    readonly schemaVersion: 'RepositoryDeliveryPolicy@1';
+    classifyExactRange(input: {
+        repository: string;
+        baseSha: string;
+        baseTree: string;
+        headSha: string;
+        headTree: string;
+        changedPaths: readonly string[];
+        configDigest: string;
+    }): RepositoryPolicyClassification;
+    validateBoundary(input: {
+        phase: 'verify' | 'publish' | 'merge';
+        classificationReceiptId: string;
+        policyEvidence: RepositoryPolicyEvidence;
+        currentBase: Coordinate;
+        currentHead: Coordinate;
+        configDigest: string;
+        stageReceiptIds: readonly {
+            receiptId: string;
+            stageId: string;
+        }[];
+    }): RepositoryPolicyBoundary;
+}
+export declare const RepositoryClassificationReceiptSchema: z.ZodObject<{
+    base: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    changedPaths: z.ZodArray<z.ZodString>;
+    configDigest: z.ZodString;
+    head: z.ZodObject<{
+        sha: z.ZodString;
+        tree: z.ZodString;
+    }, z.core.$strict>;
+    policyDigest: z.ZodString;
+    policyEvidence: z.ZodObject<{
+        artifacts: z.ZodArray<z.ZodObject<{
+            digest: z.ZodString;
+            path: z.ZodString;
+            producer: z.ZodString;
+        }, z.core.$strict>>;
+        base: z.ZodObject<{
+            sha: z.ZodString;
+            tree: z.ZodString;
+        }, z.core.$strict>;
+        configDigest: z.ZodString;
+        evidenceId: z.ZodString;
+        head: z.ZodObject<{
+            sha: z.ZodString;
+            tree: z.ZodString;
+        }, z.core.$strict>;
+        opaquePayload: z.ZodString;
+        policyDigest: z.ZodString;
+        producer: z.ZodString;
+        repository: z.ZodString;
+        schemaVersion: z.ZodLiteral<"ai-delivery.policy-evidence@1">;
+    }, z.core.$strict>;
+    receiptId: z.ZodString;
+    repository: z.ZodString;
+    requiredStages: z.ZodArray<z.ZodObject<{
+        attestationKey: z.ZodOptional<z.ZodString>;
+        commands: z.ZodArray<z.ZodObject<{
+            argv: z.ZodArray<z.ZodString>;
+            label: z.ZodString;
+        }, z.core.$strict>>;
+        dependsOn: z.ZodArray<z.ZodString>;
+        id: z.ZodString;
+        resourceClass: z.ZodEnum<{
+            source_only: "source_only";
+            focused_node: "focused_node";
+            canonical_verify: "canonical_verify";
+            model: "model";
+            postgres_docker: "postgres_docker";
+        }>;
+        semanticInputKeys: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    risk: z.ZodEnum<{
+        high: "high";
+        standard: "standard";
+    }>;
+    schemaVersion: z.ZodLiteral<"ai-delivery.classification@1">;
+}, z.core.$strict>;
+export type RepositoryClassificationReceipt = z.infer<typeof RepositoryClassificationReceiptSchema>;
+export declare function loadSelectedRepositoryPolicy(input: {
+    repoRoot: string;
+    policySourcePath: string;
+}): Promise<{
+    policy: RepositoryDeliveryPolicy;
+    policyDigest: `sha256:${string}`;
+}>;
+export declare function classifyRepositoryExactRange(input: {
+    repoRoot: string;
+    repository: string;
+    base: Coordinate;
+    head: Coordinate;
+    changedPaths: readonly string[];
+    configDigest: string;
+    policySourcePath: string;
+    policy: RepositoryDeliveryPolicy;
+}): RepositoryClassificationReceipt;
+export declare function assertRepositoryClassificationCurrent(input: {
+    repoRoot: string;
+    classification: RepositoryClassificationReceipt;
+    configDigest: string;
+    policySourcePath: string;
+}): void;
+export declare function validateRepositoryPolicyBoundary(input: {
+    repoRoot: string;
+    classification: RepositoryClassificationReceipt;
+    configDigest: string;
+    currentBase: Coordinate;
+    currentHead: Coordinate;
+    phase: 'verify' | 'publish' | 'merge';
+    policySourcePath: string;
+    policy: RepositoryDeliveryPolicy;
+    stageReceiptIds: readonly {
+        receiptId: string;
+        stageId: string;
+    }[];
+}): RepositoryPolicyBoundary;

package/dist/delivery/policy.js

@@ -0,0 +1,246 @@
+import { readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { z } from 'zod';
+import { assertArtifact, assertExactRange, CoordinateSchema, DigestSchema, digestBytes, digestValue, git, isUniqueSorted, RepositorySchema, resolveRepositoryFile, stableJson, StageIdSchema, } from './common.js';
+const ArtifactSchema = z
+    .object({ digest: DigestSchema, path: z.string().min(1), producer: z.string().min(1) })
+    .strict();
+export const RepositoryStageDefinitionSchema = z
+    .object({
+    attestationKey: z.string().min(1).optional(),
+    commands: z.array(z.object({ argv: z.array(z.string().min(1)).min(1), label: z.string().min(1) }).strict()),
+    dependsOn: z.array(StageIdSchema),
+    id: StageIdSchema,
+    resourceClass: z.enum(['source_only', 'focused_node', 'canonical_verify', 'model', 'postgres_docker']),
+    semanticInputKeys: z.array(z.string().min(1)).min(1),
+})
+    .strict();
+export const RepositoryPolicyEvidenceSchema = z
+    .object({
+    artifacts: z.array(ArtifactSchema).min(1),
+    base: CoordinateSchema,
+    configDigest: DigestSchema,
+    evidenceId: DigestSchema,
+    head: CoordinateSchema,
+    opaquePayload: z.string().min(1),
+    policyDigest: DigestSchema,
+    producer: z.string().min(1),
+    repository: RepositorySchema,
+    schemaVersion: z.literal('ai-delivery.policy-evidence@1'),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { evidenceId, ...content } = value;
+    if (evidenceId !== digestValue(content) || !isUniqueSorted(value.artifacts.map((a) => a.path)))
+        ctx.addIssue({ code: 'custom', message: 'Policy evidence identity or artifacts are invalid.' });
+});
+export const RepositoryPolicyClassificationSchema = z
+    .object({
+    policyDigest: DigestSchema,
+    policyEvidence: RepositoryPolicyEvidenceSchema,
+    requiredStages: z.array(RepositoryStageDefinitionSchema).min(1),
+    risk: z.enum(['standard', 'high']),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const seen = new Set();
+    for (const stage of value.requiredStages) {
+        if (seen.has(stage.id) ||
+            stage.dependsOn.some((d) => !seen.has(d)) ||
+            new Set(stage.dependsOn).size !== stage.dependsOn.length ||
+            !isUniqueSorted(stage.semanticInputKeys) ||
+            (stage.commands.length === 0) !== (stage.attestationKey !== undefined))
+            ctx.addIssue({ code: 'custom', message: 'Policy stages must be unique, ordered and proof complete.' });
+        seen.add(stage.id);
+    }
+});
+export const RepositoryPolicyBoundarySchema = z
+    .object({
+    additionalConstraints: z
+        .object({ exactBaseHeadLease: z.boolean(), requiredAttestationIds: z.array(DigestSchema) })
+        .strict(),
+    boundaryId: DigestSchema,
+    classificationReceiptId: DigestSchema,
+    configDigest: DigestSchema,
+    currentBase: CoordinateSchema,
+    currentHead: CoordinateSchema,
+    phase: z.enum(['verify', 'publish', 'merge']),
+    policyEvidenceId: DigestSchema,
+    schemaVersion: z.literal('ai-delivery.policy-boundary@1'),
+    stageReceiptSetHash: DigestSchema,
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { boundaryId, ...content } = value;
+    if (boundaryId !== digestValue(content) || !isUniqueSorted(value.additionalConstraints.requiredAttestationIds))
+        ctx.addIssue({ code: 'custom', message: 'Policy boundary identity or attestation inventory is invalid.' });
+});
+export const RepositoryClassificationReceiptSchema = z
+    .object({
+    base: CoordinateSchema,
+    changedPaths: z.array(z.string().min(1)),
+    configDigest: DigestSchema,
+    head: CoordinateSchema,
+    policyDigest: DigestSchema,
+    policyEvidence: RepositoryPolicyEvidenceSchema,
+    receiptId: DigestSchema,
+    repository: RepositorySchema,
+    requiredStages: z.array(RepositoryStageDefinitionSchema).min(1),
+    risk: z.enum(['standard', 'high']),
+    schemaVersion: z.literal('ai-delivery.classification@1'),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const { receiptId, ...content } = value;
+    if (receiptId !== digestValue(content) ||
+        !isUniqueSorted(value.changedPaths) ||
+        (value.base.sha !== value.head.sha && value.changedPaths.length === 0) ||
+        value.policyEvidence.repository !== value.repository ||
+        stableJson(value.policyEvidence.base) !== stableJson(value.base) ||
+        stableJson(value.policyEvidence.head) !== stableJson(value.head) ||
+        value.policyEvidence.configDigest !== value.configDigest ||
+        value.policyEvidence.policyDigest !== value.policyDigest ||
+        !RepositoryPolicyClassificationSchema.safeParse({
+            policyDigest: value.policyDigest,
+            policyEvidence: value.policyEvidence,
+            requiredStages: value.requiredStages,
+            risk: value.risk,
+        }).success)
+        ctx.addIssue({ code: 'custom', message: 'Repository classification is unbound or invalid.' });
+});
+export async function loadSelectedRepositoryPolicy(input) {
+    const path = resolveRepositoryFile(input.repoRoot, input.policySourcePath);
+    git(input.repoRoot, ['ls-files', '--error-unmatch', '--', input.policySourcePath]);
+    const policyDigest = digestBytes(readFileSync(path));
+    const loaded = await import(`${pathToFileURL(path).href}?policy=${policyDigest.slice(7)}`);
+    const policy = loaded.default;
+    if (policy === null ||
+        typeof policy !== 'object' ||
+        policy.schemaVersion !== 'RepositoryDeliveryPolicy@1' ||
+        typeof policy.classifyExactRange !== 'function' ||
+        typeof policy.validateBoundary !== 'function')
+        throw new Error('Selected repository policy module is missing or invalid.');
+    return { policy: policy, policyDigest };
+}
+function selectedPolicyDigest(repoRoot, policySourcePath) {
+    const path = resolveRepositoryFile(repoRoot, policySourcePath);
+    git(repoRoot, ['ls-files', '--error-unmatch', '--', policySourcePath]);
+    return digestBytes(readFileSync(path));
+}
+export function classifyRepositoryExactRange(input) {
+    if (input.policy.schemaVersion !== 'RepositoryDeliveryPolicy@1')
+        throw new Error('Unknown repository policy version.');
+    const base = CoordinateSchema.parse(input.base);
+    const head = CoordinateSchema.parse(input.head);
+    const repository = RepositorySchema.parse(input.repository);
+    const configDigest = DigestSchema.parse(input.configDigest);
+    const changedPaths = [...input.changedPaths].sort();
+    assertExactRange({ repoRoot: input.repoRoot, base, head, changedPaths });
+    const policyDigest = selectedPolicyDigest(input.repoRoot, input.policySourcePath);
+    const selected = RepositoryPolicyClassificationSchema.parse(input.policy.classifyExactRange({
+        repository,
+        baseSha: base.sha,
+        baseTree: base.tree,
+        headSha: head.sha,
+        headTree: head.tree,
+        changedPaths,
+        configDigest,
+    }));
+    if (selected.policyDigest !== policyDigest ||
+        selected.policyEvidence.policyDigest !== policyDigest ||
+        selected.policyEvidence.repository !== repository ||
+        stableJson(selected.policyEvidence.base) !== stableJson(base) ||
+        stableJson(selected.policyEvidence.head) !== stableJson(head) ||
+        selected.policyEvidence.configDigest !== configDigest)
+        throw new Error('Selected policy did not bind the exact repository, config, source and policy bytes.');
+    for (const artifact of selected.policyEvidence.artifacts)
+        assertArtifact(input.repoRoot, artifact);
+    const content = {
+        base,
+        changedPaths,
+        configDigest,
+        head,
+        policyDigest,
+        policyEvidence: selected.policyEvidence,
+        repository,
+        requiredStages: selected.requiredStages,
+        risk: selected.risk,
+        schemaVersion: 'ai-delivery.classification@1',
+    };
+    return RepositoryClassificationReceiptSchema.parse({ ...content, receiptId: digestValue(content) });
+}
+export function assertRepositoryClassificationCurrent(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    if (input.configDigest !== classification.configDigest ||
+        selectedPolicyDigest(input.repoRoot, input.policySourcePath) !== classification.policyDigest)
+        throw new Error('Repository classification is stale against config or policy source.');
+    assertExactRange({
+        repoRoot: input.repoRoot,
+        base: classification.base,
+        head: classification.head,
+        changedPaths: classification.changedPaths,
+    });
+    for (const artifact of classification.policyEvidence.artifacts)
+        assertArtifact(input.repoRoot, artifact);
+}
+export function validateRepositoryPolicyBoundary(input) {
+    const classification = RepositoryClassificationReceiptSchema.parse(input.classification);
+    const base = CoordinateSchema.parse(input.currentBase);
+    const head = CoordinateSchema.parse(input.currentHead);
+    if (input.policy.schemaVersion !== 'RepositoryDeliveryPolicy@1' ||
+        input.configDigest !== classification.configDigest ||
+        selectedPolicyDigest(input.repoRoot, input.policySourcePath) !== classification.policyDigest ||
+        stableJson(base) !== stableJson(classification.base) ||
+        stableJson(head) !== stableJson(classification.head))
+        throw new Error('Repository policy boundary is stale against source, config or policy.');
+    assertRepositoryClassificationCurrent({
+        repoRoot: input.repoRoot,
+        classification,
+        configDigest: input.configDigest,
+        policySourcePath: input.policySourcePath,
+    });
+    const selected = RepositoryPolicyClassificationSchema.parse(input.policy.classifyExactRange({
+        repository: classification.repository,
+        baseSha: base.sha,
+        baseTree: base.tree,
+        headSha: head.sha,
+        headTree: head.tree,
+        changedPaths: classification.changedPaths,
+        configDigest: classification.configDigest,
+    }));
+    if (stableJson(selected) !==
+        stableJson({
+            policyDigest: classification.policyDigest,
+            policyEvidence: classification.policyEvidence,
+            requiredStages: classification.requiredStages,
+            risk: classification.risk,
+        }))
+        throw new Error('Repository policy no longer selects the classified stage plan.');
+    const stageReceiptIds = input.stageReceiptIds.map((entry) => ({
+        receiptId: DigestSchema.parse(entry.receiptId),
+        stageId: StageIdSchema.parse(entry.stageId),
+    }));
+    if (stageReceiptIds.length !== classification.requiredStages.length ||
+        stageReceiptIds.some((entry, index) => entry.stageId !== classification.requiredStages[index]?.id))
+        throw new Error('Policy boundary lacks complete ordered stage receipts.');
+    const boundary = RepositoryPolicyBoundarySchema.parse(input.policy.validateBoundary({
+        phase: input.phase,
+        classificationReceiptId: classification.receiptId,
+        policyEvidence: classification.policyEvidence,
+        currentBase: base,
+        currentHead: head,
+        configDigest: classification.configDigest,
+        stageReceiptIds,
+    }));
+    if (boundary.policyEvidenceId !== classification.policyEvidence.evidenceId ||
+        boundary.classificationReceiptId !== classification.receiptId ||
+        boundary.configDigest !== classification.configDigest ||
+        boundary.phase !== input.phase ||
+        stableJson(boundary.currentBase) !== stableJson(base) ||
+        stableJson(boundary.currentHead) !== stableJson(head) ||
+        boundary.stageReceiptSetHash !== digestValue(stageReceiptIds) ||
+        boundary.additionalConstraints.requiredAttestationIds.some((id) => !stageReceiptIds.some((stage) => stage.receiptId === id)))
+        throw new Error('Repository policy boundary returned unbound constraints.');
+    return boundary;
+}
+//# sourceMappingURL=policy.js.map

package/dist/delivery/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/delivery/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,GAAG,EACH,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,UAAU,EACV,aAAa,GACd,MAAM,aAAa,CAAC;AAGrB,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3G,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IACjC,EAAE,EAAE,aAAa;IACjB,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACtG,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,YAAY;IAC1B,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,gBAAgB;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,YAAY;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,gBAAgB;IAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,UAAU,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC;KAClD,MAAM,CAAC;IACN,YAAY,EAAE,YAAY;IAC1B,cAAc,EAAE,8BAA8B;IAC9C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzC,IACE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;YACxD,CAAC,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACxC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC;YAEtE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,qBAAqB,EAAE,CAAC;SACrB,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;SAC1F,MAAM,EAAE;IACX,UAAU,EAAE,YAAY;IACxB,uBAAuB,EAAE,YAAY;IACrC,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,gBAAgB;IAC7B,WAAW,EAAE,gBAAgB;IAC7B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,gBAAgB,EAAE,YAAY;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACzD,mBAAmB,EAAE,YAAY;CAClC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACzC,IAAI,UAAU,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC,sBAAsB,CAAC;QAC5G,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAyBL,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,YAAY;IAC1B,cAAc,EAAE,8BAA8B;IAC9C,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE,gBAAgB;IAC5B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC;CACzD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,IACE,SAAS,KAAK,WAAW,CAAC,OAAO,CAAC;QAClC,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC;QACnC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QACtE,KAAK,CAAC,cAAc,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpD,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAChE,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAChE,KAAK,CAAC,cAAc,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QACxD,KAAK,CAAC,cAAc,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QACxD,CAAC,oCAAoC,CAAC,SAAS,CAAC;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC,OAAO;QAEV,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAGlD;IACC,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3E,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAY,MAAM,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpG,MAAM,MAAM,GAAI,MAAgC,CAAC,OAAO,CAAC;IACzD,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QACzB,MAAmC,CAAC,aAAa,KAAK,4BAA4B;QACnF,OAAQ,MAAmC,CAAC,kBAAkB,KAAK,UAAU;QAC7E,OAAQ,MAAmC,CAAC,gBAAgB,KAAK,UAAU;QAE3E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,MAAkC,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,gBAAwB;IACtE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC/D,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvE,OAAO,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAS5C;IACC,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,4BAA4B;QAC7D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,oCAAoC,CAAC,KAAK,CACzD,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC9B,UAAU;QACV,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,YAAY;QACZ,YAAY;KACb,CAAC,CACH,CAAC;IACF,IACE,QAAQ,CAAC,YAAY,KAAK,YAAY;QACtC,QAAQ,CAAC,cAAc,CAAC,YAAY,KAAK,YAAY;QACrD,QAAQ,CAAC,cAAc,CAAC,UAAU,KAAK,UAAU;QACjD,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC;QAC7D,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC;QAC7D,QAAQ,CAAC,cAAc,CAAC,YAAY,KAAK,YAAY;QAErD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,SAAS;QAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG;QACd,IAAI;QACJ,YAAY;QACZ,YAAY;QACZ,IAAI;QACJ,YAAY;QACZ,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,UAAU;QACV,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,aAAa,EAAE,8BAAuC;KACvD,CAAC;IACF,OAAO,qCAAqC,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,IACE,KAAK,CAAC,YAAY,KAAK,cAAc,CAAC,YAAY;QAClD,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,cAAc,CAAC,YAAY;QAE5F,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,gBAAgB,CAAC;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,YAAY,EAAE,cAAc,CAAC,YAAY;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,QAAQ,IAAI,cAAc,CAAC,cAAc,CAAC,SAAS;QAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAUhD;IACC,MAAM,cAAc,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,IACE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,4BAA4B;QAC3D,KAAK,CAAC,YAAY,KAAK,cAAc,CAAC,YAAY;QAClD,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,cAAc,CAAC,YAAY;QAC5F,UAAU,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;QACpD,UAAU,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC;QAEpD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,qCAAqC,CAAC;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc;QACd,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,oCAAoC,CAAC,KAAK,CACzD,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC9B,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,YAAY,EAAE,cAAc,CAAC,YAAY;KAC1C,CAAC,CACH,CAAC;IACF,IACE,UAAU,CAAC,QAAQ,CAAC;QACpB,UAAU,CAAC;YACT,YAAY,EAAE,cAAc,CAAC,YAAY;YACzC,cAAc,EAAE,cAAc,CAAC,cAAc;YAC7C,cAAc,EAAE,cAAc,CAAC,cAAc;YAC7C,IAAI,EAAE,cAAc,CAAC,IAAI;SAC1B,CAAC;QAEF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC,CAAC;IACJ,IACE,eAAe,CAAC,MAAM,KAAK,cAAc,CAAC,cAAc,CAAC,MAAM;QAC/D,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAElG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,CACnD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,uBAAuB,EAAE,cAAc,CAAC,SAAS;QACjD,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,eAAe;KAChB,CAAC,CACH,CAAC;IACF,IACE,QAAQ,CAAC,gBAAgB,KAAK,cAAc,CAAC,cAAc,CAAC,UAAU;QACtE,QAAQ,CAAC,uBAAuB,KAAK,cAAc,CAAC,SAAS;QAC7D,QAAQ,CAAC,YAAY,KAAK,cAAc,CAAC,YAAY;QACrD,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC9B,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC;QACrD,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC;QACrD,QAAQ,CAAC,mBAAmB,KAAK,WAAW,CAAC,eAAe,CAAC;QAC7D,QAAQ,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,IAAI,CACxD,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,EAAE,CAAC,CACjE;QAED,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/delivery/stage.d.ts

@@ -0,0 +1,125 @@
+import { z } from 'zod';
+import type { RepositoryClassificationReceipt } from './policy.js';
+export declare const RepositoryStageInputSchema: z.ZodObject<{
+    classificationReceiptId: z.ZodString;
+    definitionHash: z.ZodString;
+    environmentDigest: z.ZodString;
+    inputId: z.ZodString;
+    policyDigest: z.ZodString;
+    schemaVersion: z.ZodLiteral<"ai-delivery.stage-input@1">;
+    semanticInputs: z.ZodArray<z.ZodObject<{
+        digest: z.ZodString;
+        key: z.ZodString;
+    }, z.core.$strict>>;
+    stageId: z.ZodString;
+    upstream: z.ZodArray<z.ZodObject<{
+        receiptId: z.ZodString;
+        stageId: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RepositoryStageInput = z.infer<typeof RepositoryStageInputSchema>;
+export declare const RepositoryStageReceiptSchema: z.ZodObject<{
+    artifacts: z.ZodArray<z.ZodObject<{
+        digest: z.ZodString;
+        path: z.ZodString;
+    }, z.core.$strict>>;
+    commands: z.ZodArray<z.ZodObject<{
+        exitCode: z.ZodNumber;
+        label: z.ZodString;
+        outputDigest: z.ZodString;
+    }, z.core.$strict>>;
+    completedAt: z.ZodISODateTime;
+    input: z.ZodObject<{
+        classificationReceiptId: z.ZodString;
+        definitionHash: z.ZodString;
+        environmentDigest: z.ZodString;
+        inputId: z.ZodString;
+        policyDigest: z.ZodString;
+        schemaVersion: z.ZodLiteral<"ai-delivery.stage-input@1">;
+        semanticInputs: z.ZodArray<z.ZodObject<{
+            digest: z.ZodString;
+            key: z.ZodString;
+        }, z.core.$strict>>;
+        stageId: z.ZodString;
+        upstream: z.ZodArray<z.ZodObject<{
+            receiptId: z.ZodString;
+            stageId: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    receiptId: z.ZodString;
+    result: z.ZodLiteral<"passed">;
+    schemaVersion: z.ZodLiteral<"ai-delivery.stage-receipt@1">;
+    startedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type RepositoryStageReceipt = z.infer<typeof RepositoryStageReceiptSchema>;
+export declare const RepositoryStageAggregateSchema: z.ZodObject<{
+    aggregateId: z.ZodString;
+    classificationReceiptId: z.ZodString;
+    policyDigest: z.ZodString;
+    result: z.ZodLiteral<"passed">;
+    schemaVersion: z.ZodLiteral<"ai-delivery.stage-aggregate@1">;
+    stages: z.ZodArray<z.ZodObject<{
+        inputId: z.ZodString;
+        receiptId: z.ZodString;
+        stageId: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RepositoryStageAggregate = z.infer<typeof RepositoryStageAggregateSchema>;
+export declare function createRepositoryStageInput(input: {
+    classification: RepositoryClassificationReceipt;
+    environmentDigest: string;
+    semanticInputs: readonly {
+        digest: string;
+        key: string;
+    }[];
+    stageId: string;
+    upstream: readonly {
+        receiptId: string;
+        stageId: string;
+    }[];
+}): RepositoryStageInput;
+export declare function createRepositoryStageReceipt(input: {
+    artifacts: readonly {
+        digest: string;
+        path: string;
+    }[];
+    classification: RepositoryClassificationReceipt;
+    commands: readonly {
+        exitCode: number;
+        label: string;
+        outputDigest: string;
+    }[];
+    completedAt: string;
+    stageInput: RepositoryStageInput;
+    startedAt: string;
+}): RepositoryStageReceipt;
+export declare function createRepositoryStageAggregate(input: {
+    classification: RepositoryClassificationReceipt;
+    receipts: readonly RepositoryStageReceipt[];
+}): RepositoryStageAggregate;
+export declare function writeRepositoryCommandOutput(input: {
+    bytes: Buffer;
+    gitCommonDir: string;
+}): `sha256:${string}`;
+export declare function assertRepositoryStageProof(input: {
+    gitCommonDir: string;
+    receipt: RepositoryStageReceipt;
+    repoRoot: string;
+}): void;
+export declare function writeRepositoryStageCheckpoint(input: {
+    gitCommonDir: string;
+    receipt: RepositoryStageReceipt;
+    repoRoot: string;
+}): string;
+export declare function loadRepositoryStageCheckpoint(input: {
+    gitCommonDir: string;
+    stageInput: RepositoryStageInput;
+    repoRoot: string;
+    classification: RepositoryClassificationReceipt;
+    configDigest: string;
+    policySourcePath: string;
+}): RepositoryStageReceipt | undefined;
+export declare function writeRepositoryStageAggregate(input: {
+    gitCommonDir: string;
+    aggregate: RepositoryStageAggregate;
+}): string;