@corca-org/ceal-host-win32-x64 1.0.5 → 1.0.7

package/libexec/ceal-host/relay.mjs

@@ -142,6 +142,7 @@ var CEAL_OPERATION_RECOVERY_KINDS = vocabulary(["none", "reconcile", "compensate
 var CEAL_OPERATION_RECOVERY_STATUSES = vocabulary(["not_started", "active", "completed"]);
 var CEAL_OPERATION_PROVIDER_READBACK_AVAILABILITY = vocabulary(["not_started", "not_applicable", "not_available", "pending", "available"]);
 var CEAL_OPERATION_OFFERED_HANDOFF_STATES = vocabulary(["accepted", "rejected", "unknown"]);
+var CEAL_OPERATION_RECEIPT_AUTHORITY_KEYS = Object.freeze(["instance_ref", "profile_ref", "principal_ref", "execution_subject_ref", "authority_revision_ref"]);
 var CEAL_OPERATION_APPROVAL_DISPOSITIONS = vocabulary([
   "approval_not_required_by_policy",
   "interactive_pending",
@@ -398,7 +399,13 @@ var CEAL_OPERATION_JSON_SCHEMA_BUDGET = Object.freeze({
   max_string_length: OPERATION_SCHEMA_LITERAL_MAX_BYTES / 4,
   max_alternatives: 8,
   max_enum_values: 64,
-  max_literal_bytes: OPERATION_SCHEMA_LITERAL_MAX_BYTES
+  max_literal_bytes: OPERATION_SCHEMA_LITERAL_MAX_BYTES,
+  /** @basis our_policy -- bounds explanatory schema prose carried in one catalog. */
+  max_description_characters: 1024,
+  /** @basis our_policy -- bounds regular-expression compilation input from one schema. */
+  max_pattern_characters: 256,
+  /** @basis our_policy -- bounds traversal work inside one already byte-bounded schema literal. */
+  max_literal_nodes: 512
 });
 
 // packages/ceal-client-protocol/src/operation-validation-primitives.ts
@@ -418,6 +425,9 @@ function requireIsoTimestamp(value, message) {
   if (typeof value !== "string" || !ISO_TIMESTAMP.test(value) || !Number.isFinite(Date.parse(value))) throw new TypeError(message);
 }
 
+// packages/ceal-client-protocol/src/operation-json-schema.ts
+var JSON_DESCRIPTION_CONTROL_CHARACTER = new RegExp("\\p{Cc}", "u");
+
 // packages/ceal-client-protocol/src/operation-contract-validation.ts
 var CEAL_OPERATION_AUTHORITY_POLICY_KEYS = Object.freeze(["profile", "instance_binding", "target", "admission_recheck"]);
 var MAX_OPERATION_INPUT_RESOLVER_BINDINGS = 96;
@@ -518,7 +528,6 @@ var CEAL_BOUNDED_SERIES_CATALOG = Object.freeze({
   control_commit: (root) => join(root, "control-auto-commit.jsonl"),
   engagement_signal: (root) => join(root, "runtime-state", "slack-feedback.jsonl"),
   runtime_error: (root) => join(root, "runtime-state", "runtime-errors.jsonl"),
-  provider_retry: (root) => join(root, "observability", "provider-retry-queue", "queue.jsonl"),
   turn_bridge_request: (root) => join(root, ".ceal", "turn-bridge", "requests.jsonl"),
   channel_log: (root) => join(root, "log.jsonl"),
   thread_run_events: (root) => join(root, "run-events.jsonl"),
@@ -527,8 +536,6 @@ var CEAL_BOUNDED_SERIES_CATALOG = Object.freeze({
   gateway_capability_audit: (root) => join(root, "capability-audit.jsonl"),
   gateway_retrieval_waste_partition: (root) => `${root}.jsonl`,
   gateway_access_policy_publication: (root) => join(root, "access-policy-publications.jsonl"),
-  gateway_event_lease_journal: (root) => `${root}.journal.jsonl`,
-  gateway_control_audit: (root) => `${root}.control-audits.jsonl`,
   gateway_profile_connector_control_audit: (root) => `${root}.audit.jsonl`,
   gateway_profile_connector_scope_audit: (root) => join(root, "profile-connector-scope-audit.jsonl"),
   gateway_profile_connector_activity_scope_audit: (root) => join(root, "profile-connector-activity-scope-audit.jsonl"),
@@ -543,6 +550,11 @@ var CEAL_BOUNDED_SERIES_CATALOG = Object.freeze({
   gateway_admin_access_token: (root) => join(root, "access-tokens.jsonl")
 });
 
+// packages/ceal-client-protocol/src/gateway-installation-activation.ts
+var CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_DATA_CHARACTERS = 32;
+var CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_CHECK_CHARACTERS = 8;
+var CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_COMPACT_CHARACTERS = CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_DATA_CHARACTERS + CEAL_GATEWAY_INSTALLATION_ACTIVATION_CODE_CHECK_CHARACTERS;
+
 // packages/ceal-client-protocol/src/host-registration.ts
 var CEAL_HOST_REGISTRATION_RESULT_KEYS = Object.freeze(["credential_generation", "host_access_token", "host_installation_ref", "host_source_ref", "ok", "registration_attempt_ref", "schema_version", "status"]);
 
@@ -1131,7 +1143,7 @@ var CEAL_ACTOR_KINDS = vocabulary(["human", "bot", "app", "unknown"]);
 // packages/ceal-client-protocol/src/leased-consumer-vocabulary.ts
 var CEAL_TERMINAL_DISPOSITIONS = vocabulary(["completed", "failed", "cancelled"]);
 var CEAL_LEASE_DISPOSITIONS = vocabulary([...CEAL_TERMINAL_DISPOSITIONS, "deferred"]);
-var CEAL_AUTOMATIC_FEEDBACK_INTENTS = vocabulary(["reaction", "progress_start", "progress_finish"]);
+var CEAL_AUTOMATIC_FEEDBACK_INTENTS = vocabulary(["initial"]);
 var CEAL_LEASED_MESSAGE_DELIVERY_CAPABILITY_IDS = vocabulary(["message.create", "message.update", "message.delete"]);
 var CEAL_REPOSITORY_VISIBILITIES = vocabulary(["public", "private", "internal"]);
 var CEAL_RESULT_DELIVERY_OFFERS = vocabulary(["pending", "offered", "transport_lost"]);
@@ -1372,6 +1384,7 @@ function skipWhitespace(text, start) {
 import { createHash as createHash2 } from "node:crypto";
 var HOST_PRODUCER_FRAME_SCHEMA = "ceal.host_producer_frame.v1";
 var HOST_PRODUCER_MAX_JSON_BYTES = 262144;
+var HOST_PRODUCER_FRAME_LENGTH_BYTES = Uint32Array.BYTES_PER_ELEMENT;
 var SAFE_REF2 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 var DIGEST2 = /^[a-f0-9]{64}$/u;
 var PRODUCERS = /* @__PURE__ */ new Set(["codex", "claude"]);
@@ -1391,18 +1404,18 @@ function encodeHostProducerFrame(frame) {
   validateFrame(frame);
   const json = Buffer.from(JSON.stringify(frame), "utf8");
   if (json.byteLength > HOST_PRODUCER_MAX_JSON_BYTES) throw new HostProducerFrameError("frame_too_large", `frame_too_large: ${refusalFact("frame_bytes", json.byteLength, `at most ${HOST_PRODUCER_MAX_JSON_BYTES}`)}`);
-  const result2 = Buffer.allocUnsafe(json.byteLength + 4);
+  const result2 = Buffer.allocUnsafe(json.byteLength + HOST_PRODUCER_FRAME_LENGTH_BYTES);
   result2.writeUInt32BE(json.byteLength, 0);
-  json.copy(result2, 4);
+  json.copy(result2, HOST_PRODUCER_FRAME_LENGTH_BYTES);
   return result2;
 }
 function decodeHostProducerFrame(input) {
-  if (input.byteLength < 4) throw new HostProducerFrameError("frame_truncated", `frame_truncated: ${refusalFact("frame_bytes", input.byteLength, "at least 4")}`);
+  if (input.byteLength < HOST_PRODUCER_FRAME_LENGTH_BYTES) throw new HostProducerFrameError("frame_truncated", `frame_truncated: ${refusalFact("frame_bytes", input.byteLength, `at least ${HOST_PRODUCER_FRAME_LENGTH_BYTES}`)}`);
   const length = input.readUInt32BE(0);
   if (length > HOST_PRODUCER_MAX_JSON_BYTES) throw new HostProducerFrameError("frame_too_large", `frame_too_large: ${refusalFact("declared_bytes", length, `at most ${HOST_PRODUCER_MAX_JSON_BYTES}`)}`);
   if (length === 0) throw new HostProducerFrameError("invalid_frame_length");
-  if (input.byteLength !== length + 4) throw new HostProducerFrameError(input.byteLength < length + 4 ? "frame_truncated" : "invalid_frame_length");
-  const bytes2 = input.subarray(4);
+  if (input.byteLength !== length + HOST_PRODUCER_FRAME_LENGTH_BYTES) throw new HostProducerFrameError(input.byteLength < length + HOST_PRODUCER_FRAME_LENGTH_BYTES ? "frame_truncated" : "invalid_frame_length");
+  const bytes2 = input.subarray(HOST_PRODUCER_FRAME_LENGTH_BYTES);
   const text = new TextDecoder("utf-8", { fatal: true });
   let value;
   try {
@@ -2429,6 +2442,7 @@ var HOST_REGISTRATION_STATE_KEYS = Object.freeze([
   "status"
 ]);
 var HOST_INGRESS_PATH = "/api/ceal/v2/host-ingress";
+var HOST_REGISTRATION_STATE_MAX_BYTES = 65536;
 var HostRelayGatewayError = class extends Error {
   name = "HostRelayGatewayError";
   code;
@@ -2545,7 +2559,7 @@ async function readHostRegistrationAuthority(path, expectedHostSourceRef) {
     const stats = await handle.stat();
     if (!stats.isFile() || !ownerPrivate3(stats)) throw new HostRelayGatewayError("credential", "Host Relay credential file is not owner-private.");
     const raw = await handle.readFile("utf8");
-    if (raw.length > 65536) throw new HostRelayGatewayError("credential", `Host registration state is invalid: ${refusalFact("registration_state_bytes", Buffer.byteLength(raw, "utf8"), "at most 65536")}.`);
+    if (Buffer.byteLength(raw, "utf8") > HOST_REGISTRATION_STATE_MAX_BYTES) throw new HostRelayGatewayError("credential", `Host registration state is invalid: ${refusalFact("registration_state_bytes", Buffer.byteLength(raw, "utf8"), `at most ${HOST_REGISTRATION_STATE_MAX_BYTES}`)}.`);
     let value;
     try {
       value = JSON.parse(raw);
@@ -2628,6 +2642,7 @@ var HOST_RELAY_BINDING_QUERY_SCHEMA = "ceal.host_relay_binding_query.v1";
 var HOST_RELAY_BINDING_RESULT_SCHEMA = "ceal.host_relay_binding_result.v1";
 var HOST_RELAY_INVOCATION_CONTEXT_QUERY_SCHEMA = "ceal.host_relay_invocation_context_query.v1";
 var HOST_RELAY_INVOCATION_CONTEXT_RESULT_SCHEMA = "ceal.host_relay_invocation_context_result.v1";
+var HOST_RELAY_IPC_LENGTH_BYTES = Uint32Array.BYTES_PER_ELEMENT;
 var HostRelayIpcError = class extends Error {
   code;
   constructor(code, message = code) {
@@ -2647,9 +2662,9 @@ async function startHostRelayIpcServer(options) {
 }
 function encodeHostRelayIpcResponse(response2) {
   const body = Buffer.from(JSON.stringify(response2), "utf8");
-  const result2 = Buffer.allocUnsafe(body.length + 4);
+  const result2 = Buffer.allocUnsafe(body.length + HOST_RELAY_IPC_LENGTH_BYTES);
   result2.writeUInt32BE(body.length, 0);
-  body.copy(result2, 4);
+  body.copy(result2, HOST_RELAY_IPC_LENGTH_BYTES);
   return result2;
 }
 function serveSocket(socket, admission, bindings, mintInvocationContext, quarantine, active, sockets) {
@@ -2673,23 +2688,23 @@ function serveSocket(socket, admission, bindings, mintInvocationContext, quarant
   });
 }
 async function drainFrames(socket, state, admission, bindings, mintInvocationContext, quarantine, active) {
-  while (!state.closed && state.buffer.length >= 4 && await processBufferedRequest(socket, state, admission, bindings, mintInvocationContext, quarantine, active)) {
+  while (!state.closed && state.buffer.length >= HOST_RELAY_IPC_LENGTH_BYTES && await processBufferedRequest(socket, state, admission, bindings, mintInvocationContext, quarantine, active)) {
   }
 }
 async function processBufferedRequest(socket, state, admission, bindings, mintInvocationContext, quarantine, active) {
   const length = state.buffer.readUInt32BE(0);
   if (length === 0 || length > HOST_PRODUCER_MAX_JSON_BYTES) {
     const code = length === 0 ? "invalid_frame_length" : "frame_too_large";
-    const raw = state.buffer.subarray(0, Math.min(state.buffer.length, length + 4));
+    const raw = state.buffer.subarray(0, Math.min(state.buffer.length, length + HOST_RELAY_IPC_LENGTH_BYTES));
     await quarantine.retainMalformed(raw, code);
     writeResponse(socket, errorResponse(code));
     state.buffer = Buffer.alloc(0);
     socket.end();
     return false;
   }
-  if (state.buffer.length < length + 4) return false;
-  const encoded = state.buffer.subarray(0, length + 4);
-  state.buffer = state.buffer.subarray(length + 4);
+  if (state.buffer.length < length + HOST_RELAY_IPC_LENGTH_BYTES) return false;
+  const encoded = state.buffer.subarray(0, length + HOST_RELAY_IPC_LENGTH_BYTES);
+  state.buffer = state.buffer.subarray(length + HOST_RELAY_IPC_LENGTH_BYTES);
   let request2;
   try {
     request2 = decodeIpcRequest(encoded);
@@ -2797,22 +2812,22 @@ function validQueryIdentity(value, schema) {
   return record4(value) && value.schema_version === schema && (value.producer_id === "codex" || value.producer_id === "claude") && safeRef3(value.producer_installation_ref) && safeRef3(value.local_session_ref) && safeRef3(value.local_turn_ref);
 }
 function decodeLengthPrefixedJson(input, maximum) {
-  if (input.length < 4) return null;
+  if (input.length < HOST_RELAY_IPC_LENGTH_BYTES) return null;
   const length = input.readUInt32BE(0);
   if (length === 0 || length > maximum) throw new HostRelayIpcError("relay_unavailable", `Host Relay IPC message length is invalid: ${refusalFact("declared_bytes", length, `between 1 and ${maximum}`)}.`);
-  if (input.length < length + 4) return null;
-  if (input.length !== length + 4) throw new HostRelayIpcError("relay_unavailable", `Host Relay IPC message has trailing bytes: ${refusalFacts([{ name: "declared_bytes", value: length, expected: "the received message length minus 4" }, { name: "received_bytes", value: input.byteLength, expected: `exactly ${length + 4}` }])}.`);
+  if (input.length < length + HOST_RELAY_IPC_LENGTH_BYTES) return null;
+  if (input.length !== length + HOST_RELAY_IPC_LENGTH_BYTES) throw new HostRelayIpcError("relay_unavailable", `Host Relay IPC message has trailing bytes: ${refusalFacts([{ name: "declared_bytes", value: length, expected: `the received message length minus ${HOST_RELAY_IPC_LENGTH_BYTES}` }, { name: "received_bytes", value: input.byteLength, expected: `exactly ${length + HOST_RELAY_IPC_LENGTH_BYTES}` }])}.`);
   try {
-    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(input.subarray(4)));
+    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(input.subarray(HOST_RELAY_IPC_LENGTH_BYTES)));
   } catch {
     throw new HostRelayIpcError("relay_unavailable", "Host Relay IPC message is invalid.");
   }
 }
 function encodeLengthPrefixed(value) {
   const body = Buffer.from(JSON.stringify(value), "utf8");
-  const output = Buffer.allocUnsafe(body.length + 4);
+  const output = Buffer.allocUnsafe(body.length + HOST_RELAY_IPC_LENGTH_BYTES);
   output.writeUInt32BE(body.length, 0);
-  body.copy(output, 4);
+  body.copy(output, HOST_RELAY_IPC_LENGTH_BYTES);
   return output;
 }
 function exactKeys4(value, keys) {
@@ -2849,6 +2864,9 @@ function errorCode7(error) {
 
 // host/relay/src/host-relay-runtime.ts
 var HOST_RELAY_CONFIG_SCHEMA = "ceal.host_relay_config.v1";
+var HOST_RELAY_SERVE_COMMAND_PREFIX = ["serve", "--config"];
+var HOST_RELAY_CONFIG_MIN_BYTES = Buffer.byteLength("{}", "utf8");
+var HOST_RELAY_CONFIG_MAX_BYTES = 65536;
 var HostRelayConfigError = class extends Error {
   name = "HostRelayConfigError";
   code;
@@ -2865,7 +2883,7 @@ async function readHostRelayConfig(path) {
     handle = await open4(path, O_RDONLY4 | O_NOFOLLOW3);
     const stats = await handle.stat();
     if (!stats.isFile() || !ownerPrivate4(stats)) throw new HostRelayConfigError("config_not_private", "Host Relay config file is not owner-private.");
-    if (stats.size < 2 || stats.size > 65536) throw new HostRelayConfigError("invalid_config", `invalid_config: Host Relay config size is invalid: ${refusalFact("config_bytes", stats.size, "between 2 and 65536")}.`);
+    if (stats.size < HOST_RELAY_CONFIG_MIN_BYTES || stats.size > HOST_RELAY_CONFIG_MAX_BYTES) throw new HostRelayConfigError("invalid_config", `invalid_config: Host Relay config size is invalid: ${refusalFact("config_bytes", stats.size, `between ${HOST_RELAY_CONFIG_MIN_BYTES} and ${HOST_RELAY_CONFIG_MAX_BYTES}`)}.`);
     const text = await handle.readFile("utf8");
     assertNoDuplicateJsonKeys(text);
     let value;
@@ -2934,7 +2952,7 @@ async function runHostRelayCli(args, signal, dependencies = {}) {
   }
 }
 function parseServeArgs(args) {
-  if (args.length !== 3 || args[0] !== "serve" || args[1] !== "--config" || !isAbsoluteNormalizedNonRootPath(args[2], process.platform, true)) {
+  if (args.length !== HOST_RELAY_SERVE_COMMAND_PREFIX.length + 1 || args[0] !== HOST_RELAY_SERVE_COMMAND_PREFIX[0] || args[1] !== HOST_RELAY_SERVE_COMMAND_PREFIX[1] || !isAbsoluteNormalizedNonRootPath(args[2], process.platform, true)) {
     throw new HostRelayConfigError("invalid_config_path", `invalid_config_path: Use: relay.mjs serve --config <absolute-owner-private-json>: ${refusalFact("args", args, "serve --config <absolute normalized non-root path>")}.`);
   }
   return args[2];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corca-org/ceal-host-win32-x64",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "license": "MIT",
   "repository": {
     "type": "git",

package/share/ceal-host/bundle-manifest.json

@@ -3,12 +3,12 @@
   "product": "ceal-host",
   "version_source": {
     "product": "ceal-host",
-    "version": "1.0.5"
+    "version": "1.0.7"
   },
   "source": {
     "repository": "corca-ai/ceal",
-    "commit": "26b21d587e3e47155e1d9cd1122f09b39eac32cb",
-    "tree": "3b3750ea8a55c06190f5bd7133f7a845610e0bda"
+    "commit": "a8d2e68372289765d006db4dfa5a3153e2401cd0",
+    "tree": "7e9df152ec5dd90a6eb54d4811b9b8af6c1673ea"
   },
   "target": "windows-x64",
   "required_features": [],
@@ -19,7 +19,7 @@
       ],
       "executable": true,
       "path": "bin/ceal-host.exe",
-      "sha256": "b3e093180653c55dd6fe7338ab66d951bc64f5ac99a87a2a68dcfb150044b393"
+      "sha256": "27328ae848c8d3113485b773859899ce41090caa32fb232093f831fc699675c3"
     },
     {
       "owners": [
@@ -27,7 +27,15 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/claude-hook.mjs",
-      "sha256": "06efc085ebb5e7ca968f0c85656b8a56b6a33666b071df7bf5bf91fec38ebe49"
+      "sha256": "5d38cedda3a1178ff9debf2455ab60e5e1adaf74bcd7a6af7d7a26113360df3a"
+    },
+    {
+      "owners": [
+        "claude"
+      ],
+      "executable": false,
+      "path": "libexec/ceal-host/claude-invocation-authentication.mjs",
+      "sha256": "cd3e714180a62b24f3b248f63c5f0111dbd6d60ab903f273d25b99d809479eae"
     },
     {
       "owners": [
@@ -35,7 +43,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/claude-producer.mjs",
-      "sha256": "5bd0c2fc3d7b34280952017d74f52e9cfdd384779ce3abaded00128b91bd00ed"
+      "sha256": "d87bace242f088ead68e6b648c590255673b1169e06d17255fe54c1320319c2d"
     },
     {
       "owners": [
@@ -43,7 +51,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/codex-hook.mjs",
-      "sha256": "fec05d5ef3a8a505304f80064dfc512f92eff7fbf8f9861bc1382de35323a30e"
+      "sha256": "b91ec9e7c482bbb3bb8a4a365070babcfc898ce6533083bb214dacb518b23665"
     },
     {
       "owners": [
@@ -51,7 +59,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/codex-invocation-authentication.mjs",
-      "sha256": "5e0b6b11692da9d1620912fd6d156596f1ef8c50a9287aef98a7ac0a5dd493e0"
+      "sha256": "3056f3ea26ae59faa5ab4e1a1eef548ef4760584a337ffb480216607dc3c97a3"
     },
     {
       "owners": [
@@ -59,7 +67,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/codex-producer.mjs",
-      "sha256": "c77b49e10ba0a8ec2d62c19da0ca45559c697d30c7ab24ce812191ba4b39343a"
+      "sha256": "9d17c53f736030fe0950082de48aac493565700490f5600f848c918ccdf7ddc7"
     },
     {
       "owners": [
@@ -67,7 +75,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/control.mjs",
-      "sha256": "85c98df73de9cf0200cb11657bb7ee2a21f1856c61a7472a3866946f0f15e004"
+      "sha256": "31ca0d6e9d224737cf9d91fe6a3c91a6756a067c7e28f7a90f4b45e443dbb33b"
     },
     {
       "owners": [
@@ -83,7 +91,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/relay.mjs",
-      "sha256": "84d10378bec458539727e38e1d540a4c8c79889466293cae41aa2b9149caf027"
+      "sha256": "e41da7308e4c59f67b86b8e6fb5516fc5ed8218817dda1790b2e619071f776da"
     }
   ]
 }

package/share/ceal-host/bundle-manifest.sigstore.json

@@ -1 +1 @@
-{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2844918259","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1789474255","inclusionPromise":{"signedEntryTimestamp":"MEYCIQCx8OELZ/Zx2GjmAT6/Ucgw9IBpbkOHA/zOmlUHZJY+aQIhAJNb9RbVbevsNr1XbJxhk2xuhfwpPBhN7Wj5VJQHbQ9J"},"inclusionProof":{"logIndex":"2723013997","rootHash":"HRZHVV4iFyArUSEvINwrJXkVU5wmRi5qPAvufEvm9y0=","treeSize":"2723014069","hashes":["Ef9bYkS7Jn1FNDBuuNb+RDSIGQRs03uCqu4T0Z4ZA2o=","E7emCemGTugPD0Z7AbSsN0xkerZJATIngAHbJcl0ynw=","+6yozvlBv7YYCTjgQkE4yK4FOoyRlmvM73mESTCgsjk=","3/LDVKQZR21uaIaD8eUKjizL3tdLaelD6qOFn/1Kdeo=","l4giImg6ZPOlV+u0PQ8NCORKCb3srfAqKZp71Zvp7BA=","0x0N8asCEQVPN+MC2LZ4uqd0XtF7P8bDXtaFmhKdkoY=","3liTAT7ZYH6nobOlYNPlpy67GBWyO/Abr1isEJCO/r8=","Ekoc/xP+0vPJXV5YcNvzV/klZBrGggjx5ENJWtVJefs=","PyJn0vYup1xGcE2DeQrEz9KvVr1DM9a879uuSa3jajI=","9JtZxWMkqZoznAiyI+oALgsbaGrvWeCqHOF0Y/ZJ+q0=","tjhCYKU1EzoEWevWq4JE637SgQ5lUqtjKTqy6kIshFA=","+fOF39WwvZV0Pjuqxgl219wEHnc24bnyaj50MvLc8ro=","Y9IGSi9Fwa/R67Pw7sFrDgnOY/2FPzFnVLvy9EPskP4=","oJ3BYwRym1LU01wFDwUPIFG4zFc2dxw3Ld4ebKhbNs4=","e+fne0gYV9/YHSf8mnneGSye3LNwINPVoO+x1Bview8=","jlR8z+FcisiEVmqVqCRumt+sdaJvt6nAVeYq5nDPink=","Ql0v42ZyFnCfvN2WZ1fRMaQ0I4oH58S/H7RKVgxShUw=","jhevWFOJ2cWU6SvzMnAe08zHGcVquRlP7gAed39+wI4=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2723014069\nHRZHVV4iFyArUSEvINwrJXkVU5wmRi5qPAvufEvm9y0=\n\n— rekor.sigstore.dev wNI9ajBGAiEAuG5L8/Au5O7TXEG3TTeAXJEQOko2KvLJheVEIOmOpW8CIQDnjJGbRL5HWN3hnWzgT4szBZwNzEyqXJsTBlA5NJuwiw==\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"sIBZ8hvL6zv/EIhfs7SVBsn26OPbBGhbGg6IoCsngvI="},"signature":"MEUCIQD9Fan04ah/FXInPz0PjRXV7y1FGSq8P+5dA86ey1RgSwIgIOwUl2QauoHn/gNc6LyL9eBpXGICQy/9XYYp7LWBJN8="}}
+{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2858466272","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1789550070","inclusionPromise":{"signedEntryTimestamp":"MEUCIQDiF5nV4Mt6LSIaIh9DM5xjly0PEaFQ+fuhhxfNzB7ySQIgKIisBJO479klCpXvdtwzsTUOCjVjMHMDjS4fL34MWvI="},"inclusionProof":{"logIndex":"2736562010","rootHash":"bnus1pcYPiJKfEui+8wiHi4Y1fkOPx3fNoxAfcN6wnI=","treeSize":"2736562015","hashes":["/j84qo4igSCtxTxvt12SZfZ/xkQmpxOuNXuVpsxLdQQ=","sGCAULLT4ILqAIQRE5LM4yLerMSZJPetQQne8FOlrvs=","hP/7gJMF1cagXxGi6iWZm1+p/GGNmKGPg/xUV8bORVw=","j4AbHhpES+b5VkPFkLDk4yfgLD8UgJZBlI/zxM+fpz8=","jt/wuoeqJKg64rSEGp8eJ6q7tdr9iCRhzRVxqBLAfj8=","lJWF7fD8svJ/gj8o5xQb1TwjSs+8FrhxdXifb95LRT0=","sNnDtIUPNqmm1Fx1QJRdOJtjXNpFpPwn3lnmfHv8ju8=","m3YO7nPrj+FMoYESXrJ0umhoFIG11zFVYeEhPCDg4z0=","awPmL5bGIELflE6W9kwonBK7FlPH86Bgy1F2/M6FHXs=","jFjGo6VJPBdBZS0IQT2SFWeCHafVY/GIVxsb4rVn5Uc=","EPvjiG9k0nRuUUDSiEMTlFyOaKfz+TNIMltVVL91vV4=","5+SCCtj7/SurODJSftta27gfnuDkHqX53akXW2hhyzA=","n+hxEhyY8wOf+95n5A1RtNWPjG3kTLmhzLyAzxUY9xA=","imrIvZj6JTyKLlSm0Orl7ea26tZp+b9u+qI7QmzJJEM=","bUR40APIlDp+hSRs9Sn61sQzjB3I1nWW/EVYUSplyQk=","gGfwuhE97xnhmxu6exffPtS05ABS4/ldyg66sFcxSRE=","jhevWFOJ2cWU6SvzMnAe08zHGcVquRlP7gAed39+wI4=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2736562015\nbnus1pcYPiJKfEui+8wiHi4Y1fkOPx3fNoxAfcN6wnI=\n\n— rekor.sigstore.dev wNI9ajBFAiEAvTcwWnXOmDJZEyx9mXUStsqKPCAvylmSWxfi3/8wlfcCIBIF3H6YMchHCNTAX5xtvSg1VD0Vhb7WeTHnjasvqzez\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"Mu63DFmA+jBzPS6sYmlQCr6whp4OjpGW7/lc3QSDU34="},"signature":"MEUCIHd2NFp4EUFp+B1nPxtgF2Tj5ZRX5tk1YJdRQ+sVcAgjAiEAk4ZTHl86RVRhB50Y3qxpPTp7hObh4H4lEEImJpvsfr4="}}