@corca-org/ceal-host-win32-x64 1.0.6 → 1.0.8

package/libexec/ceal-host/claude-hook.mjs

@@ -2420,6 +2420,9 @@ var DOCTOR_FLAGS = Object.freeze({
 // host/client-doctor.ts
 var execFileAsync = promisify(execFile);
 
+// host/claude/src/claude-installer.ts
+var CLAUDE_LOCAL_CAPABILITY_ACTIVATION = Object.freeze({ environment: "CLAUDE_CODE_ENTRYPOINT", value: "cli" });
+
 // host/claude/bin/ceal-claude-hook.ts
 async function main() {
   return runClaudeHookCli();

package/libexec/ceal-host/codex-invocation-authentication.mjs

@@ -2201,7 +2201,7 @@ function boundedMilliseconds(value) {
 import { createHash as createHash3 } from "node:crypto";
 
 // host/codex/src/codex-types.ts
-var CODEX_SESSION_ID_ENVIRONMENT = "CODEX_THREAD_ID";
+var CODEX_THREAD_ID_ENVIRONMENT = "CODEX_THREAD_ID";
 var CODEX_OUTBOX_SCHEMA_VERSION = "ceal.codex_observation_outbox.v1";
 var CODEX_TURN_BINDING_SCHEMA_VERSION = "ceal.codex_turn_binding.v1";
 var CODEX_SESSION_SCHEMA_VERSION = "ceal.codex_session.v1";
@@ -3966,7 +3966,7 @@ var CODEX_INVOCATION_AUTHENTICATION_DESCRIPTOR = {
   command_name: "ceal-codex-invocation-authentication",
   producer_id: "codex",
   create_store: (directory) => new CodexOutboxStore(directory),
-  session_id_env: CODEX_SESSION_ID_ENVIRONMENT,
+  session_id_env: CODEX_THREAD_ID_ENVIRONMENT,
   session_ref: hostSessionReference,
   config_flag: HOST_PRODUCER_CONFIG_FLAG,
   parse_config_flag: parseHostProducerConfigFlag,

package/libexec/ceal-host/control.mjs

@@ -2897,7 +2897,7 @@ var CEAL_REQUEST_RUN_BATCH_JSON_SCHEMA = {
 };
 
 // packages/ceal-client-protocol/src/host-observation.ts
-var CEAL_LOCAL_HOST_CAPABILITIES_SCHEMA_VERSION = "ceal.local_host_capabilities.v6";
+var CEAL_LOCAL_HOST_CAPABILITIES_SCHEMA_VERSION = "ceal.local_host_capabilities.v7";
 var CEAL_HOST_OBSERVATION_REF_PREFIX = "host-observation:";
 var HOST_OBSERVATION_PRODUCER = /^[a-z][a-z0-9]{0,31}$/u;
 var HOST_OBSERVATION_DIGEST = /^[a-f0-9]{8,64}$/u;
@@ -4181,7 +4181,8 @@ var CODEX_CLI_VERSION = "0.152.0";
 var CODEX_HOOK_FEATURE = "hooks";
 var CODEX_HOOKS_CONFIG_FILE = "hooks.json";
 var CODEX_HOOK_OWNER = "ceal-codex-host-observation-v1";
-var CODEX_SESSION_ID_ENVIRONMENT = "CODEX_THREAD_ID";
+var CODEX_THREAD_ID_ENVIRONMENT = "CODEX_THREAD_ID";
+var CODEX_SESSION_ID_ENVIRONMENT = "CODEX_SESSION_ID";
 var CODEX_OUTBOX_SCHEMA_VERSION = "ceal.codex_observation_outbox.v1";
 var CODEX_TURN_BINDING_SCHEMA_VERSION = "ceal.codex_turn_binding.v1";
 var CODEX_SESSION_SCHEMA_VERSION = "ceal.codex_session.v1";
@@ -6256,7 +6257,7 @@ function hostLocalCapabilityDescriptor(input) {
   return {
     schema_version: CEAL_LOCAL_HOST_CAPABILITIES_SCHEMA_VERSION,
     owner: input.owner,
-    ...input.activationEnvironment === void 0 ? {} : { activation_environment: input.activationEnvironment },
+    ...input.activation === void 0 ? {} : { activation: input.activation },
     authentication: { mode: "nonce", execution: { mode: "verbatim", argv: [...argv, "authenticate", "--client-nonce"] } },
     capabilities: []
   };
@@ -6264,7 +6265,7 @@ function hostLocalCapabilityDescriptor(input) {
 
 // host/claude/src/claude-installer.ts
 var OWNER = "ceal-claude-host-observation-v1";
-var CLAUDE_LOCAL_CAPABILITY_ACTIVATION_ENVIRONMENT = "CLAUDE_CODE_ENTRYPOINT";
+var CLAUDE_LOCAL_CAPABILITY_ACTIVATION = Object.freeze({ environment: "CLAUDE_CODE_ENTRYPOINT", value: "cli" });
 function resolveClaudeSettingsPath(claudeHome, environment = process.env) {
   return join8(claudeHome ?? environment.CLAUDE_CONFIG_DIR ?? join8(homedir2(), ".claude"), "settings.json");
 }
@@ -6321,7 +6322,7 @@ async function doctorClaudeHooks(options) {
   return { status, settings_path: settingsPath, configured_events: configured, missing_events: missing, ...executableSha256 === void 0 ? {} : { executable_sha256: executableSha256 }, drift_reasons: reasons };
 }
 function claudeLocalCapabilityDescriptor(authenticationCommand) {
-  return hostLocalCapabilityDescriptor({ owner: OWNER, authenticationCommand, activationEnvironment: CLAUDE_LOCAL_CAPABILITY_ACTIVATION_ENVIRONMENT });
+  return hostLocalCapabilityDescriptor({ owner: OWNER, authenticationCommand, activation: CLAUDE_LOCAL_CAPABILITY_ACTIVATION });
 }
 async function installClaudeLocalCapability(path, authenticationCommand) {
   if (!isAbsolute3(path)) throw new ClaudeHostError("configuration", "Claude local capability path must be absolute.");
@@ -6607,7 +6608,7 @@ async function validateAuthenticationCommand(command) {
   }
 }
 function codexLocalCapabilityDescriptor(authenticationCommand) {
-  return hostLocalCapabilityDescriptor({ owner: CODEX_LOCAL_CAPABILITY_OWNER, authenticationCommand, activationEnvironment: CODEX_SESSION_ID_ENVIRONMENT });
+  return hostLocalCapabilityDescriptor({ owner: CODEX_LOCAL_CAPABILITY_OWNER, authenticationCommand, activation: { environment: CODEX_THREAD_ID_ENVIRONMENT, value: { environment: CODEX_SESSION_ID_ENVIRONMENT } } });
 }
 async function installCodexLocalCapability(path, authenticationCommand) {
   const current = await readOptionalText(path);
@@ -6961,6 +6962,9 @@ function isHostBundleComponent(value) {
 function isHostBundleProducer(value) {
   return HOST_BUNDLE_PRODUCERS.some((producer) => producer === value);
 }
+function hostPrivateRuntimeModule(entry) {
+  return `${entry}.mjs`;
+}
 function hostBundleComponentsForProducers(producers) {
   const selected = /* @__PURE__ */ new Set(["lifecycle", "relay", ...producers]);
   return HOST_BUNDLE_COMPONENTS.filter((component) => selected.has(component));
@@ -7000,14 +7004,14 @@ function resolveInstalledHostRuntimePaths(prefix, platform = process.platform) {
   return {
     private_root: privateRoot,
     node_executable: join10(privateRoot, "node", "bin", platform === "win32" ? "node.exe" : "node"),
-    control_module: join10(privateRoot, "control.mjs"),
-    codex_hook_module: join10(privateRoot, "codex-hook.mjs"),
-    codex_invocation_authentication_module: join10(privateRoot, "codex-invocation-authentication.mjs"),
-    claude_hook_module: join10(privateRoot, "claude-hook.mjs"),
-    claude_invocation_authentication_module: join10(privateRoot, "claude-invocation-authentication.mjs"),
-    relay_module: join10(privateRoot, "relay.mjs"),
-    codex_producer_module: join10(privateRoot, "codex-producer.mjs"),
-    claude_producer_module: join10(privateRoot, "claude-producer.mjs")
+    control_module: join10(privateRoot, hostPrivateRuntimeModule("control")),
+    codex_hook_module: join10(privateRoot, hostPrivateRuntimeModule("codex-hook")),
+    codex_invocation_authentication_module: join10(privateRoot, hostPrivateRuntimeModule("codex-invocation-authentication")),
+    claude_hook_module: join10(privateRoot, hostPrivateRuntimeModule("claude-hook")),
+    claude_invocation_authentication_module: join10(privateRoot, hostPrivateRuntimeModule("claude-invocation-authentication")),
+    relay_module: join10(privateRoot, hostPrivateRuntimeModule("relay")),
+    codex_producer_module: join10(privateRoot, hostPrivateRuntimeModule("codex-producer")),
+    claude_producer_module: join10(privateRoot, hostPrivateRuntimeModule("claude-producer"))
   };
 }
 function parseHostRuntimeControlRequest(value) {
@@ -7248,13 +7252,13 @@ var InstalledHostRuntimeHookAdapter = class {
     const targets = { runtime: paths.private_root, services: servicesRoot };
     if (producer === "codex") {
       const entryRoot2 = resolveHostEntryRoot(this.homes.codex_home, ".codex");
-      const hook2 = hostEntryCommand({ entryRoot: entryRoot2, module: "codex-hook.mjs", configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "codex.json" });
-      const authentication2 = hostEntryCommand({ entryRoot: entryRoot2, module: "codex-invocation-authentication.mjs", configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "codex.json" });
+      const hook2 = hostEntryCommand({ entryRoot: entryRoot2, module: hostPrivateRuntimeModule("codex-hook"), configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "codex.json" });
+      const authentication2 = hostEntryCommand({ entryRoot: entryRoot2, module: hostPrivateRuntimeModule("codex-invocation-authentication"), configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "codex.json" });
       return { entryRoot: entryRoot2, targets, hook: hook2, authentication: authentication2, configPath: this.configPaths.codex };
     }
     const entryRoot = resolveHostEntryRoot(this.homes.claude_home, ".claude");
-    const hook = hostEntryCommand({ entryRoot, module: "claude-hook.mjs", configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "claude.json" });
-    const authentication = hostEntryCommand({ entryRoot, module: "claude-invocation-authentication.mjs", configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "claude.json" });
+    const hook = hostEntryCommand({ entryRoot, module: hostPrivateRuntimeModule("claude-hook"), configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "claude.json" });
+    const authentication = hostEntryCommand({ entryRoot, module: hostPrivateRuntimeModule("claude-invocation-authentication"), configFlag: HOST_PRODUCER_CONFIG_FLAG, configFile: "claude.json" });
     return { entryRoot, targets, hook, authentication, configPath: this.configPaths.claude };
   }
 };
@@ -7361,11 +7365,6 @@ function equalStringLists(left, right) {
 // host/lifecycle/src/host-runtime-services.ts
 var HOST_RUNTIME_SERVICE_COMPONENTS = Object.freeze(hostBundleComponentsForProducers(HOST_BUNDLE_PRODUCERS).filter((component) => component !== "lifecycle"));
 var HOST_RUNTIME_SERVICE_COMMAND_TIMEOUT_MS = 2e4;
-var ENTRYPOINTS = Object.freeze({
-  relay: "relay.mjs",
-  codex: "codex-producer.mjs",
-  claude: "claude-producer.mjs"
-});
 var HOST_RUNTIME_SERVICE_STATES = ["absent", "stopped", "running", "unknown"];
 var HostRuntimeServiceContractError = class extends Error {
   code;
@@ -7384,7 +7383,7 @@ function createHostRuntimeServiceSet(input) {
   const node = path.join(prefix, HOST_BUNDLE_PRIVATE_RUNTIME_ROOT, "node", "bin", flavor === "windows" ? "node.exe" : "node");
   const services = selected.map((component) => {
     const config = absoluteNormalizedPath(input.config_paths[component], `${component} service config`, path);
-    const entrypoint = path.join(prefix, HOST_BUNDLE_PRIVATE_RUNTIME_ROOT, ENTRYPOINTS[component]);
+    const entrypoint = path.join(prefix, HOST_BUNDLE_PRIVATE_RUNTIME_ROOT, hostPrivateRuntimeModule(component === "relay" ? component : `${component}-producer`));
     const command = { executable: node, args: [entrypoint, "serve", "--config", config] };
     validateHostCommandVector(command);
     return { component, command };
@@ -7943,7 +7942,7 @@ var WINDOWS_TASK_SCHEDULER_PROGRAM = Buffer.from(TASK_SCHEDULER_SOURCE, "utf16le
 
 // host/lifecycle/src/host-runtime-systemd.ts
 import { createHash as createHash8, randomUUID } from "node:crypto";
-import { chmod as chmod3, lstat as lstat10, mkdir as mkdir10, open as open10, readFile as readFile6, rename as rename9, unlink as unlink6 } from "node:fs/promises";
+import { chmod as chmod3, lstat as lstat10, mkdir as mkdir10, open as open10, readFile as readFile6, readdir as readdir3, rename as rename9, unlink as unlink6 } from "node:fs/promises";
 import { join as join13 } from "node:path";
 
 // host/lifecycle/src/systemd-unit-show.ts
@@ -8023,12 +8022,12 @@ function createLinuxUserSystemdAdapter(options) {
       const previousByComponent = serviceMap(previous);
       const targetByComponent = serviceMap(target);
       await ensurePrivateUnitDirectory(unitDirectory);
-      const ownedUnits = await ownedUnitComponents(unitDirectory, identity, previousByComponent, targetByComponent);
+      const ownedUnits = await ownedHostUnits(unitDirectory);
       for (const service of target.services) await replaceOwnedUnit(unitDirectory, identity, service);
-      for (const service of previous.services) {
-        if (targetByComponent.has(service.component)) continue;
-        if (ownedUnits.has(service.component)) await invokeSystemctl(run, systemctl, ["--user", "disable", "--now", unitName(identity, service.component)]);
-        await removeOwnedUnit(unitDirectory, identity, service.component);
+      for (const unit of ownedUnits) {
+        if (unit.identity === identity && targetByComponent.has(unit.component)) continue;
+        await invokeSystemctl(run, systemctl, ["--user", "disable", "--now", unitName(unit.identity, unit.component)]);
+        await removeOwnedUnit(unitDirectory, unit.identity, unit.component);
       }
       await invokeSystemctl(run, systemctl, ["--user", "daemon-reload"]);
       for (const service of target.services) {
@@ -8037,9 +8036,7 @@ function createLinuxUserSystemdAdapter(options) {
         if (previousByComponent.has(service.component)) await invokeSystemctl(run, systemctl, ["--user", "restart", name]);
         await requireExpectedReadback(run, systemctl, unitDirectory, identity, service, "running");
       }
-      for (const service of previous.services) {
-        if (!targetByComponent.has(service.component)) await requireAbsentReadback(run, systemctl, unitDirectory, identity, service.component);
-      }
+      for (const unit of ownedUnits) if (unit.identity !== identity || !targetByComponent.has(unit.component)) await requireAbsentReadback(run, systemctl, unitDirectory, unit.identity, unit.component);
     },
     async restart({ target, service }) {
       const identity = prefixIdentity(target.prefix);
@@ -8077,12 +8074,20 @@ function unitPath(directory, identity, component) {
 function serviceMap(set) {
   return new Map(set.services.map((service) => [service.component, service]));
 }
-async function ownedUnitComponents(directory, identity, previous, target) {
-  const owned = /* @__PURE__ */ new Set();
-  for (const component of HOST_RUNTIME_SERVICE_COMPONENTS) {
-    if ((previous.has(component) || target.has(component)) && await ownedUnitPresent(unitPath(directory, identity, component), identity, component)) owned.add(component);
+async function ownedHostUnits(directory) {
+  const owned = [];
+  for (const name of await readdir3(directory)) {
+    const match = /^ceal-host-([a-f0-9]{64})-(lifecycle|relay|codex|claude)\.service$/u.exec(name);
+    if (match === null) continue;
+    const identity = match[1];
+    const component = match[2];
+    if (identity === void 0 || !UNIT_ID_PATTERN.test(identity) || !isHostRuntimeServiceComponent(component)) continue;
+    if (await ownedUnitPresent(unitPath(directory, identity, component), identity, component)) owned.push({ identity, component });
   }
-  return owned;
+  return owned.sort((left, right) => unitName(left.identity, left.component).localeCompare(unitName(right.identity, right.component)));
+}
+function isHostRuntimeServiceComponent(value) {
+  return value !== void 0 && HOST_RUNTIME_SERVICE_COMPONENTS.some((component) => component === value);
 }
 async function ensurePrivateUnitDirectory(directory) {
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corca-org/ceal-host-win32-x64",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "license": "MIT",
   "repository": {
     "type": "git",

package/share/ceal-host/bundle-manifest.json

@@ -3,12 +3,12 @@
   "product": "ceal-host",
   "version_source": {
     "product": "ceal-host",
-    "version": "1.0.6"
+    "version": "1.0.8"
   },
   "source": {
     "repository": "corca-ai/ceal",
-    "commit": "2f5fdf77dcc3e3ea15c920e429b40b5e7645c4f0",
-    "tree": "087f8caa9b3c20febc0ec07ab6fdaa4aed1a2972"
+    "commit": "10719bbafba3b7a05a475426403c8550adbc56d2",
+    "tree": "8f0cadb1a7027e2b1415bdf1a2186dfedcb04ac6"
   },
   "target": "windows-x64",
   "required_features": [],
@@ -19,7 +19,7 @@
       ],
       "executable": true,
       "path": "bin/ceal-host.exe",
-      "sha256": "7131f5da87869cddedb7760b8baf9399126869bb9ec4746a89f5e3f7d5029b72"
+      "sha256": "867a472ff70f931b118962d3fe3a72b6aa1e3d05c5c5e93f68befd70e17f49c1"
     },
     {
       "owners": [
@@ -27,7 +27,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/claude-hook.mjs",
-      "sha256": "ed39b7cc61467120420956cdf110305f6d338dbeec74ce94902ed11be3bd9ddf"
+      "sha256": "5d38cedda3a1178ff9debf2455ab60e5e1adaf74bcd7a6af7d7a26113360df3a"
     },
     {
       "owners": [
@@ -59,7 +59,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/codex-invocation-authentication.mjs",
-      "sha256": "2ce3f609ad07ee0c2eb03bb4bf1bdfbc3726bd4ffb9a08b3a357614bd0d36978"
+      "sha256": "3056f3ea26ae59faa5ab4e1a1eef548ef4760584a337ffb480216607dc3c97a3"
     },
     {
       "owners": [
@@ -75,7 +75,7 @@
       ],
       "executable": false,
       "path": "libexec/ceal-host/control.mjs",
-      "sha256": "3715aae4e5622e4b11ad8d4f0b859edfe7e8c4d0aaf00c4ee1c539d17d3064b2"
+      "sha256": "31ca0d6e9d224737cf9d91fe6a3c91a6756a067c7e28f7a90f4b45e443dbb33b"
     },
     {
       "owners": [

package/share/ceal-host/bundle-manifest.sigstore.json

@@ -1 +1 @@
-{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"MIIHDTCCBpOgAwIBAgIUI8wBIqS+OiL1VLx0hGiPbDmrEtQwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjYwOTE1MjIxMjAxWhcNMjYwOTE1MjIyMjAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYree3XVAm+DJhhgl3mckyyFl/sWHevki7LDnwTI9IJqcPZkInc1DUdlkibW/A5ga6nXwumU8YnPSbkkcYMFgkaOCBbIwggWuMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUoVjgRGdNKhts0k0JEBsxnilP5twwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wZgYDVR0RAQH/BFwwWoZYaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpL2NlYWwvLmdpdGh1Yi93b3JrZmxvd3MvcmVsZWFzZS1jYW5kaWRhdGUueW1sQHJlZnMvaGVhZHMvbWFpbjA5BgorBgEEAYO/MAEBBCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMB8GCisGAQQBg78wAQIEEXdvcmtmbG93X2Rpc3BhdGNoMDYGCisGAQQBg78wAQMEKDJmNWZkZjc3ZGNjM2UzZWExNWM5MjBlNDI5YjQwYjVlNzY0NWM0ZjAwJAYKKwYBBAGDvzABBAQWQ2VhbCByZWxlYXNlIGNhbmRpZGF0ZTAbBgorBgEEAYO/MAEFBA1jb3JjYS1haS9jZWFsMB0GCisGAQQBg78wAQYED3JlZnMvaGVhZHMvbWFpbjA7BgorBgEEAYO/MAEIBC0MK2h0dHBzOi8vdG9rZW4uYWN0aW9ucy5naXRodWJ1c2VyY29udGVudC5jb20waAYKKwYBBAGDvzABCQRaDFhodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbC8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNhbmRpZGF0ZS55bWxAcmVmcy9oZWFkcy9tYWluMDgGCisGAQQBg78wAQoEKgwoMmY1ZmRmNzdkY2MzZTNlYTE1YzkyMGU0MjliNDBiNWU3NjQ1YzRmMDAdBgorBgEEAYO/MAELBA8MDWdpdGh1Yi1ob3N0ZWQwMAYKKwYBBAGDvzABDAQiDCBodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbDA4BgorBgEEAYO/MAENBCoMKDJmNWZkZjc3ZGNjM2UzZWExNWM5MjBlNDI5YjQwYjVlNzY0NWM0ZjAwHwYKKwYBBAGDvzABDgQRDA9yZWZzL2hlYWRzL21haW4wGgYKKwYBBAGDvzABDwQMDAoxMTkxNTU0NTkzMCsGCisGAQQBg78wARAEHQwbaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpMBgGCisGAQQBg78wAREECgwINzI5Nzg4NjAwaAYKKwYBBAGDvzABEgRaDFhodHRwczovL2dpdGh1Yi5jb20vY29yY2EtYWkvY2VhbC8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNhbmRpZGF0ZS55bWxAcmVmcy9oZWFkcy9tYWluMDgGCisGAQQBg78wARMEKgwoMmY1ZmRmNzdkY2MzZTNlYTE1YzkyMGU0MjliNDBiNWU3NjQ1YzRmMDAhBgorBgEEAYO/MAEUBBMMEXdvcmtmbG93X2Rpc3BhdGNoMFQGCisGAQQBg78wARUERgxEaHR0cHM6Ly9naXRodWIuY29tL2NvcmNhLWFpL2NlYWwvYWN0aW9ucy9ydW5zLzM1MDI5MDgwMDA2L2F0dGVtcHRzLzEwFwYKKwYBBAGDvzABFgQJDAdwcml2YXRlMDYGCisGAQQBg78wARgEKAwmcmVwbzpjb3JjYS1haS9jZWFsOnJlZjpyZWZzL2hlYWRzL21haW4wgYoGCisGAQQB1nkCBAIEfAR6AHgAdgDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAAAaCnIIW0AAAEAwBHMEUCIHS8TAi8z8IHf0cmuB1JH7Q7Xiz9oKlgnnS1GvOr/rlLAiEA2wu2Ok3C3VB1870R/RoVzLIsYHw3zwz4KgmPankg/FgwCgYIKoZIzj0EAwMDaAAwZQIxAOEv6IKfD9QcsevcEPzGqCIEDg8qc7vYjo43lFw/djqYLtm5z29beG654UGreBTBrQIwbvLnJUjA4rf6IsNx3F8lGqw8zVV4Ogd0GJN2JJ2LOWYCKLp4lnS6DLL3fpoZmZJB"},"tlogEntries":[{"logIndex":"2851888129","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1789510321","inclusionPromise":{"signedEntryTimestamp":"MEQCIDcq0UrNcfJYFvDV1Q35U237A3dQipvp8jh+JtL2yUSCAiAszez0/m0TPCDqHGGY9bwM1VGlfaCYG5EqK816geSKug=="},"inclusionProof":{"logIndex":"2729983867","rootHash":"BWMsQSDbDO+CY0Xjrw/yRmRDdpI/wzCulHx3nBEm51w=","treeSize":"2729983901","hashes":["qBMs6bSw4oDln9Bk2LG4x+viJMw8cP8MfINxAx5iKPQ=","EEn510aK716yngy7I0dH/VCFttNqs2oF4kFtNyh8QBM=","DrUWEmcHY6htBPWM50ZMD8z5NHsGXsyu9QMJfiwq3Wk=","gEOpkugWzRPWUAV4l56159JQYhgSDoteupVa3ssMk1U=","RfrCtWBBpDwtcvbYR6H6R55eQYl9qBvHISBKLjSYl4E=","gB2Y9IQA4brii232OIp5gMx7QECDRrXKoez2cFtz0Gc=","XBY4zKkaEqbQ7zd5qRGJdZOjvKS2UKY+k0zr1xeRcOQ=","dVjH9qnbfId+AIuPJ8Sowkd363iHT1K3qJOOftJ/kKQ=","8VnTUl1T0pyYKQHDaaPvGphiQJ2blvqTAWLeSk8ShMg=","6eJ2wL6DyCPmR2paAMnCoA9UB5Y0dP2GZBKq8nB4J7A=","0yXg08Rdp0sMymnXs60CJ91pj8Cy8YByJ8mft2+xzAo=","/r6e/oZDAaPAU7ZiHA4nPHqwTV906BhyF7AXKiKFTbQ=","8L18Md5aGoBwBlDMyr6RWGH1R8FxNVJoQVNZAdUiGp0=","jD8cvGxxxWJBKtdGs1KwTri/UGL3fv4a/QLD3WyZKbo=","xPjCST8WHvK11hCFqS6gbNPTMB3aUPaNdWFbeH72kgo=","Ty12lwhXheAvfCO/5aYZ9leO0iPQ/txxYFtTQMlm9JY=","oCmst3Ks4vD7eWBowjSTm262iNrZs+SVJ/DUgAa87O8=","UHTD4gppDpUbvjVt5JlrR1znuqkF/Be+5C53hqcVmDA=","jhevWFOJ2cWU6SvzMnAe08zHGcVquRlP7gAed39+wI4=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2729983901\nBWMsQSDbDO+CY0Xjrw/yRmRDdpI/wzCulHx3nBEm51w=\n\n— rekor.sigstore.dev wNI9ajBGAiEAxTdulSQ1dQVy65L6C3tZv6CkFXKWBNoHlu+uae0FmSACIQCGFD4VNhH1x76AtCKOf/ifZ1A41rSt419pHJpQy5VDnA==\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"Hq/giqfEDxgkTZQfpFgTHEhXBfX+FoQC9HsJ0pB5Gqw="},"signature":"MEUCIQDzV/GAGdcMdGW1uKZ27pc5y79nyBb6J/mh9+Perui6VQIgINt620KjYuxwLP+v7k5NEyMKtDMRTDjcL9Xf/4/jBnM="}}
+{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2858866240","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1789551999","inclusionPromise":{"signedEntryTimestamp":"MEQCIG13ksie/x1N9D1f8mko08B1YLsXBunLg3Y1q7/j2OrHAiBfTofFeoc69nr41scsSsI8TvTi4gZMyq6G6safwrSykg=="},"inclusionProof":{"logIndex":"2736961978","rootHash":"kyrSLuniwgV/QXpAx31bPX0/vFc8iHnXL8DRexlUEkM=","treeSize":"2736962021","hashes":["XYxNqmyl9ifJ+lzx2fjVPeg4UKOZEWkLwEARxdnjhIY=","ESzsTWoC3ObJ+XqDsGtUWn0F/TZZXDLlMOl+/2SdDHg=","NuB3NMstbM6O2it/oo0ZJDh2XVSO2jZjwcU6dkoBmbs=","RPyxkJM7FHUJwyqKEjrAt8BsE7gjI91vf0Qnl4mti4c=","7rraA6WPAy6ZaPYQHL5zMo9tBPSW4nQo0AmPooF4Hfc=","+AyxuoVaqkffrCfBz1GHPXiXhZG9P+T7oPLIDS8lTXM=","YwX7B4jCR8GVScupwPXSZ3cdDXcqVlaXez4DzyFLgiw=","dZ/pfODWORH/+jel8QSDo0Xg/i/P8dgWNViAPoA/G1Y=","5hf6vPspmEIx6OQ7hRl4fgcsuTSQZgUbIpPVfc7nZ24=","YtgvEADmpNm1POCqVzL3ayUaHjOREJEWKGIqIkykKwU=","3YoO3T3CALeO3glVMGUEBni62mt61BsvcZawvH4hMiI=","rCP8Cvn3hXw/lCxXth2xEi2igbuEWFVOoCoYpqN9U8Y=","qYx5qzTk1Et2YVoR21RO3pRYX7n91je81CoDDihjs90=","PHCwLmXkS0v1blaC472bJO3scX8pmpbhD1n9OQh4aP4=","X5JOeyZQDjcvuNcRxBItueeOjls/a+Vx2tWjZWGUv+Q=","gGfwuhE97xnhmxu6exffPtS05ABS4/ldyg66sFcxSRE=","jhevWFOJ2cWU6SvzMnAe08zHGcVquRlP7gAed39+wI4=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2736962021\nkyrSLuniwgV/QXpAx31bPX0/vFc8iHnXL8DRexlUEkM=\n\n— rekor.sigstore.dev wNI9ajBFAiEA8ynxESeevj8DxlbKkqkvqkTN+O9MdNqRgKghSLJc3SgCICZBGMlKd4vtM8eV6P3za8TmT0a/WlErb07Y+hCdnUx6\n"}},"canonicalizedBody":"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"}]},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"JTib0eaYM0hE9NsLi+aDtXZ6h7BDfpCAcv5oL5+rDtA="},"signature":"MEUCIQD6CKFbTyP81x9xSlQ8TCy1VWcwTm4fij7QxPa3qS6P6AIgdTSf4tP4NZ3hnSZOh3W45bBaR3das+ntwwpTzUMHb38="}}