@dsh-enhanced/plugin-control-plane 0.1.48 → 0.1.53

package/lib/foreground-deployment-runtime.js

@@ -1,9 +1,27 @@
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
 import { closeSync, constants, fstatSync, openSync, readFileSync, realpathSync } from 'node:fs';
 import { isAbsolute, resolve } from 'node:path';
-import { captureRetainedDeploymentReadiness } from './deployment-readiness.js';
+import { captureRetainedDeploymentReadiness, captureRuntimeEpochReadiness } from './deployment-readiness.js';
 import {} from './foreground-deployment.js';
 import { controlPlaneDigest } from './store.js';
+export function queueRuntimeEpoch(store, trust, runtime, withSourceFence) {
+    const attestor = trust.hostAttestor;
+    if (!attestor)
+        return;
+    const prepare = () => {
+        store.prepareRuntimeEpoch({ runtime,
+            issuer: { mode: 'configured-executable', id: attestor.id, version: attestor.version, path: attestor.path,
+                sha256: attestor.sha256, interpreter: attestor.interpreter, authority: attestor.authority, keyId: attestor.keyId },
+            // Covers the next native one-minute coordinator dispatch without extending the standing grant.
+            receiptTtlMs: 300_000 });
+    };
+    if (withSourceFence) {
+        const { plan, source } = store.currentRuntimeEpochDeployment(runtime.profilePath);
+        withSourceFence(plan.gapId, source.owner, prepare);
+    }
+    else
+        prepare();
+}
 export function validateForegroundDeploymentConfig(value) {
     if (!value || Object.keys(value).join(',') !== 'attestorJournalPath' || typeof value.attestorJournalPath !== 'string'
         || value.attestorJournalPath.length > 4096 || !isAbsolute(value.attestorJournalPath)
@@ -38,16 +56,37 @@ export function createForegroundDeploymentObserver(input) {
         protocol: 'plugin-control-plane/foreground-observer/v1',
         generation: randomUUID(), owner: input.owner,
         begin(task) {
-            return input.store.withForegroundDeployment(task, input.profilePath, (plan, operation) => {
-                const begin = capture(task);
-                if (!operation.receipt)
-                    throw new Error('foreground deployment lacks signed readiness');
-                const readiness = captureRetainedDeploymentReadiness({ plan, operation, receipt: operation.receipt, trust: input.trust,
-                    journalPath: input.config.attestorJournalPath, runtime: begin });
-                input.assertCurrent();
-                input.store.beginForegroundDeployment({ schemaVersion: 1, task: structuredClone(task), readiness, begin, state: 'pending' });
-                return task.inboxId;
-            });
+            let runtime;
+            try {
+                return input.store.withForegroundDeployment(task, input.profilePath, (plan, operation) => {
+                    const begin = capture(task);
+                    runtime = begin;
+                    if (!operation.receipt)
+                        throw new Error('foreground deployment lacks signed readiness');
+                    const epoch = plan.status === 'activated' ? input.store.latestAppliedRuntimeEpoch(plan.id) : undefined;
+                    const readiness = epoch ? captureRuntimeEpochReadiness({ plan, operation, epoch, trust: input.trust,
+                        journalPath: input.config.attestorJournalPath, runtime: begin, dispatchedAt: task.dispatchedAt })
+                        : captureRetainedDeploymentReadiness({ plan, operation, receipt: operation.receipt, trust: input.trust,
+                            journalPath: input.config.attestorJournalPath, runtime: begin });
+                    input.assertCurrent();
+                    input.store.beginForegroundDeployment({ schemaVersion: 1, task: structuredClone(task), readiness, begin, state: 'pending' });
+                    return task.inboxId;
+                });
+            }
+            catch (error) {
+                // Queue only a current runtime hint. The independent coordinator must sign it before any later task is attributed.
+                if (runtime) {
+                    try {
+                        input.assertCurrent();
+                        if (input.requestRuntimeEpoch)
+                            input.requestRuntimeEpoch(runtime);
+                        else
+                            queueRuntimeEpoch(input.store, input.trust, runtime);
+                    }
+                    catch { /* No successful watched deployment or source authorization. */ }
+                }
+                throw error;
+            }
         },
         completed(handle, task, execution) {
             input.assertCurrent();
@@ -61,8 +100,11 @@ export function createForegroundDeploymentObserver(input) {
                     const end = capture(task);
                     if (!operation.receipt || !execution.quiescent || execution.status !== 'succeeded')
                         throw new Error('foreground deployment completion unknown');
-                    const readiness = captureRetainedDeploymentReadiness({ plan, operation, receipt: operation.receipt, trust: input.trust,
-                        journalPath: input.config.attestorJournalPath, runtime: end });
+                    const epoch = plan.status === 'activated' ? input.store.latestAppliedRuntimeEpoch(plan.id) : undefined;
+                    const readiness = epoch ? captureRuntimeEpochReadiness({ plan, operation, epoch, trust: input.trust,
+                        journalPath: input.config.attestorJournalPath, runtime: end, dispatchedAt: task.dispatchedAt })
+                        : captureRetainedDeploymentReadiness({ plan, operation, receipt: operation.receipt, trust: input.trust,
+                            journalPath: input.config.attestorJournalPath, runtime: end });
                     if (controlPlaneDigest(readiness) !== controlPlaneDigest(prior.readiness))
                         throw new Error('foreground deployment changed during execution');
                     input.assertCurrent();

package/lib/foreground-deployment-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"foreground-deployment-runtime.js","sourceRoot":"","sources":["../src/foreground-deployment-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/F,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE/C,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAA;AAC9E,OAAO,EAAmC,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAA0B,MAAM,YAAY,CAAA;AAMvE,MAAM,UAAU,kCAAkC,CAAC,KAAiC;IAClF,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qBAAqB,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;WAChH,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC;WACjF,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,KAAK,CAAC,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;AACvI,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC1F,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;eACpF,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAQlD;IACC,MAAM,OAAO,GAAG,CAAC,IAAwC,EAAE,EAAE;QAC3D,KAAK,CAAC,aAAa,EAAE,CAAA;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7D,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAClI,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAwC;QAC1D,QAAQ,EAAE,6CAAsD;QAChE,UAAU,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAC5C,KAAK,CAAC,IAAI;YACR,OAAO,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;gBACvF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC3B,IAAI,CAAC,SAAS,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;gBACvF,MAAM,SAAS,GAAG,kCAAkC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;oBACpH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;gBAClE,KAAK,CAAC,aAAa,EAAE,CAAA;gBACrB,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC5H,OAAO,IAAI,CAAC,OAAO,CAAA;YACrB,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS;YAC/B,KAAK,CAAC,aAAa,EAAE,CAAA;YACrB,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACpF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACjK,IAAI,CAAC;gBACH,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;oBAChF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;oBACzB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;oBAC/I,MAAM,SAAS,GAAG,kCAAkC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;wBACpH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;oBAChE,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;oBAC5I,KAAK,CAAC,aAAa,EAAE,CAAA;oBACrB,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;gBACrH,CAAC,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,aAAa,EAAE,CAAA;gBACrB,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAC/G,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"foreground-deployment-runtime.js","sourceRoot":"","sources":["../src/foreground-deployment-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/F,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE/C,OAAO,EAAE,kCAAkC,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAA;AAC5G,OAAO,EAAmC,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAA0B,MAAM,YAAY,CAAA;AAOvE,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,KAA+B,EAAE,OAA2B,EACtH,eAA0G;IAC1G,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAA;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAM;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE;QAAG,KAAK,CAAC,mBAAmB,CAAC,EAAE,OAAO;YACzD,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACtG,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;YACpH,+FAA+F;YAC/F,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;IAAC,CAAC,CAAA;IAC5B,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,6BAA6B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACjF,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC;;QAAM,OAAO,EAAE,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAiC;IAClF,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qBAAqB,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;WAChH,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC;WACjF,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,KAAK,CAAC,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;AACvI,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC1F,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;eACpF,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KASlD;IACC,MAAM,OAAO,GAAG,CAAC,IAAwC,EAAE,EAAE;QAC3D,KAAK,CAAC,aAAa,EAAE,CAAA;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7D,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAClI,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAwC;QAC1D,QAAQ,EAAE,6CAAsD;QAChE,UAAU,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAC5C,KAAK,CAAC,IAAI;YACR,IAAI,OAAuC,CAAA;YAC3C,IAAI,CAAC;gBAAC,OAAO,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;oBAC7F,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;oBAC3B,OAAO,GAAG,KAAK,CAAA;oBACf,IAAI,CAAC,SAAS,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;oBACvF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBACtG,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;wBACjG,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;wBACjG,CAAC,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;4BACpG,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;oBACpE,KAAK,CAAC,aAAa,EAAE,CAAA;oBACrB,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;oBAC5H,OAAO,IAAI,CAAC,OAAO,CAAA;gBACrB,CAAC,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAClB,mHAAmH;gBACnH,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBAAC,KAAK,CAAC,aAAa,EAAE,CAAC;wBAC1B,IAAI,KAAK,CAAC,mBAAmB;4BAAE,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;;4BAC5D,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;oBAC3D,CAAC;oBAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS;YAC/B,KAAK,CAAC,aAAa,EAAE,CAAA;YACrB,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACpF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC/D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACjK,IAAI,CAAC;gBACH,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;oBAChF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;oBACzB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;oBAC/I,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;oBACtG,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;wBACjG,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC/F,CAAC,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;4BACpG,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;oBAClE,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;oBAC5I,KAAK,CAAC,aAAa,EAAE,CAAA;oBACrB,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;gBACrH,CAAC,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,aAAa,EAAE,CAAA;gBACrB,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAC/G,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/lib/foreground-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"foreground-deployment.d.ts","sourceRoot":"","sources":["../src/foreground-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAC3E,OAAO,EAAiD,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAEvH,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAA;IAChB,IAAI,EAAE,sBAAsB,CAAA;IAC5B,SAAS,EAAE,0BAA0B,CAAA;IACrC,KAAK,EAAE,kBAAkB,CAAA;IACzB,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;IACzC,GAAG,CAAC,EAAE,kBAAkB,CAAA;IACxB,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAChC;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAUxE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAIzE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,GAAG,IAAI,CAgBnF"}
+{"version":3,"file":"foreground-deployment.d.ts","sourceRoot":"","sources":["../src/foreground-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAC3E,OAAO,EAAiD,KAAK,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAEvH,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAA;IAChB,IAAI,EAAE,sBAAsB,CAAA;IAC5B,SAAS,EAAE,0BAA0B,CAAA;IACrC,KAAK,EAAE,kBAAkB,CAAA;IACzB,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;IACzC,GAAG,CAAC,EAAE,kBAAkB,CAAA;IACxB,SAAS,CAAC,EAAE,mBAAmB,CAAA;CAChC;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAUxE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAIzE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,GAAG,IAAI,CAqBnF"}

package/lib/foreground-deployment.js

@@ -23,6 +23,11 @@ export function assertForegroundDeployment(record) {
         throw new Error('invalid foreground deployment');
     assertForegroundTask(record.task);
     assertRuntimeObservation(record.begin);
+    const epoch = record.readiness.runtimeEpoch;
+    if (epoch && (!Number.isSafeInteger(epoch.sequence) || epoch.sequence < 1
+        || epoch.operationId !== record.readiness.operationId || epoch.receiptDigest !== record.readiness.receiptDigest)) {
+        throw new Error('foreground runtime epoch binding differs');
+    }
     if (record.begin.observedAt < record.task.dispatchedAt || record.begin.profilePath !== record.readiness.profilePath
         || runtimeIdentityDigest(record.begin) !== record.readiness.runtimeDigest)
         throw new Error('foreground deployment binding differs');

package/lib/foreground-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"foreground-deployment.js","sourceRoot":"","sources":["../src/foreground-deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAA2B,MAAM,gCAAgC,CAAA;AAavH,MAAM,UAAU,oBAAoB,CAAC,KAA6B;IAChE,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,KAAK,CAAC,QAAQ,KAAK,uCAAuC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACnH,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC3F,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACzH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1H,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,wBAAwB,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC/E,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAkC;IAC3E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC9I,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjC,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,SAAS,CAAC,WAAW;WAC9G,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACrI,IAAI,MAAM,CAAC,GAAG;QAAE,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnI,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO;WACzE,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG;WAC/D,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS;WACtE,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW;WACpD,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;AAC/I,CAAC"}
+{"version":3,"file":"foreground-deployment.js","sourceRoot":"","sources":["../src/foreground-deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAA2B,MAAM,gCAAgC,CAAA;AAavH,MAAM,UAAU,oBAAoB,CAAC,KAA6B;IAChE,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,KAAK,CAAC,QAAQ,KAAK,uCAAuC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACnH,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC3F,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACzH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1H,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,wBAAwB,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC/E,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAkC;IAC3E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC9I,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjC,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAA;IAC3C,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;WACpE,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,SAAS,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,SAAS,CAAC,WAAW;WAC9G,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACrI,IAAI,MAAM,CAAC,GAAG;QAAE,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnI,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO;WACzE,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG;WAC/D,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS;WACtE,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW;WACpD,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;AAC/I,CAAC"}

package/lib/host-attestor.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeEpochReceipt, type RuntimeEpochRequest } from './runtime-epoch.js';
 import { ControlPlaneStore } from './store.js';
 import { type PluginControlTrustConfig } from './trust.js';
 import type { HostAttestationOperation, HostAttestationPhase, HostAttestationPolicy, HostAttestationReceipt, HostAttestationRequest, HostAttestationRequirements, PluginActivationPlan } from './types.js';
@@ -10,4 +11,5 @@ export declare function hostRequirements(policy: HostAttestationPolicy, phase: H
 export declare function prepareManualHostAttestation(store: ControlPlaneStore, plan: PluginActivationPlan, trust: PluginControlTrustConfig): HostAttestationOperation;
 export declare function prepareConfiguredHostAttestation(store: ControlPlaneStore, plan: PluginActivationPlan, trust: PluginControlTrustConfig): HostAttestationOperation;
 export declare function invokeConfiguredHostAttestor(trust: PluginControlTrustConfig, request: HostAttestationRequest, signal?: AbortSignal): Promise<HostAttestationReceipt>;
+export declare function invokeConfiguredRuntimeEpochAttestor(trust: PluginControlTrustConfig, request: RuntimeEpochRequest, signal?: AbortSignal): Promise<RuntimeEpochReceipt>;
 //# sourceMappingURL=host-attestor.d.ts.map

package/lib/host-attestor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-attestor.d.ts","sourceRoot":"","sources":["../src/host-attestor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAA0B,MAAM,YAAY,CAAA;AACtE,OAAO,EACuB,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,KAAK,EACV,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,GAAG,kBAAkB,CAAA;AAExI,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,qBAAqB;gBAA3B,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM;CAIlE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,oBAAoB,EACzF,sBAAsB,EAAE,MAAM,GAAG,2BAA2B,CAc7D;AAuBD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,EAC/F,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAE3D;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,EACnG,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAM3D;AA0BD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,wBAAwB,EAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsCxF"}
+{"version":3,"file":"host-attestor.d.ts","sourceRoot":"","sources":["../src/host-attestor.ts"],"names":[],"mappings":"AAGA,OAAO,EAA4B,KAAK,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAA0B,MAAM,YAAY,CAAA;AACtE,OAAO,EACuB,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,KAAK,EACV,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAEnB,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,GAAG,kBAAkB,CAAA;AAExI,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,qBAAqB;gBAA3B,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM;CAIlE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,oBAAoB,EACzF,sBAAsB,EAAE,MAAM,GAAG,2BAA2B,CAc7D;AAuBD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,EAC/F,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAE3D;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,EACnG,KAAK,EAAE,wBAAwB,GAAG,wBAAwB,CAM3D;AA0BD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,wBAAwB,EAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAExF;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE,wBAAwB,EACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAElF"}

package/lib/host-attestor.js

@@ -1,6 +1,7 @@
 import { realpath } from 'node:fs/promises';
 import { ControlledProcessError, executeControlledProcess } from './adapter-process.js';
 import { parseHostAttestationReceipt } from './attestation.js';
+import { parseRuntimeEpochReceipt } from './runtime-epoch.js';
 import { ControlPlaneStore, ControlPlaneStoreError } from './store.js';
 import { inheritedHostAttestorEnvironment, openTrustedExecutable, verifyOpenTrustedExecutable } from './trust.js';
 export class HostAttestorError extends Error {
@@ -94,6 +95,12 @@ async function execute(executable, interpreter, args, environment, timeoutMs, in
     }
 }
 export async function invokeConfiguredHostAttestor(trust, request, signal) {
+    return invokeConfiguredAttestor(trust, request, parseHostAttestationReceipt, signal);
+}
+export async function invokeConfiguredRuntimeEpochAttestor(trust, request, signal) {
+    return invokeConfiguredAttestor(trust, request, parseRuntimeEpochReceipt, signal);
+}
+async function invokeConfiguredAttestor(trust, request, parseReceipt, signal) {
     const attestor = trust.hostAttestor;
     if (attestor === undefined)
         throw new HostAttestorError('NOT_CONFIGURED', 'no owner-configured Host attestor is registered');
@@ -133,7 +140,7 @@ export async function invokeConfiguredHostAttestor(trust, request, signal) {
         catch {
             throw new HostAttestorError('FAILED', 'registered Host attestor did not return one JSON receipt');
         }
-        receipt = parseHostAttestationReceipt(parsed);
+        receipt = parseReceipt(parsed);
     }
     catch (error) {
         if (error instanceof HostAttestorError || error instanceof ControlPlaneStoreError)

package/lib/host-attestor.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-attestor.js","sourceRoot":"","sources":["../src/host-attestor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,2BAA2B,EAChC,MAAM,YAAY,CAAA;AAa/E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB;IAArB,YAAqB,IAA2B,EAAE,OAAe;QAC/D,KAAK,CAAC,sCAAsC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAA;QAD7C,SAAI,GAAJ,IAAI,CAAuB;QAE9C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA6B,EAAE,KAA2B,EACzF,sBAA8B;IAC9B,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;IACtE,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAA;IAC/F,IAAI,KAAK,KAAK,uBAAuB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK;YACzD,uBAAuB,EAAE,MAAM,CAAC,oCAAoC;YACpE,4BAA4B,EAAE,MAAM,CAAC,yCAAyC,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IAC7G,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,oBAAoB;YACvF,iBAAiB,EAAE,MAAM,CAAC,uBAAuB,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IAChF,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAC/D,cAAc,EAAE,MAAM,CAAC,oBAAoB,EAAE,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAA;IAC9F,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,mBAAmB;YACrF,cAAc,EAAE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAA;IAChG,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAA;IACxI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,oEAAoE,CAAC,CAAA;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,IAA0B;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/F,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,MAA8B,CAAA;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB,EAAE,IAA0B,EAAE,KAA+B,EACpG,MAAwC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,kBAAkB,IAAI,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;IAC5H,MAAM,YAAY,GAAG,KAAK,KAAK,UAAU;QACvC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,sBAAsB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAe;YAC7L,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,mBAAmB,IAAI,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE;QAClH,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;IAC9F,OAAO,KAAK,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ;QAC7F,aAAa,EAAE,IAAI,CAAC,UAAW,CAAC,KAAK,EAAE,MAAM;QAC7C,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAwB,EAAE,IAA0B,EAC/F,KAA+B;IAC/B,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAwB,EAAE,IAA0B,EACnG,KAA+B;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAA;IACnC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAA;IAC5H,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;QAC5G,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;QAC/E,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,UAAiC,EAAE,WAA8C,EACtG,IAAuB,EAAE,WAA8B,EACvD,SAAiB,EAAE,KAAyB,EAAE,aAAqB,EAAE,MAAoB;IACzF,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;IACpG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAA;IACzH,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjF,MAAM,gBAAgB,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,CAAA;IAC7F,MAAM,KAAK,GAAsC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjG,IAAI,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,wBAAwB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK;YAC9F,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;YAAE,MAAM,KAAK,CAAA;QAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAA;QACtH,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,iBAAiB,CAAC,cAAc,EAAE,oDAAoD,CAAC,CAAA;QACpI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU;YAC7D,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAA;IACvH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAA+B,EAChF,OAA+B,EAAE,MAAoB;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAA;IACnC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAA;IAC5H,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;WACnF,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;WACpF,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WAC5F,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;WACnF,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAA;IACnJ,IAAI,UAA6C,CAAA;IACjD,IAAI,WAA8C,CAAA;IAClD,IAAI,OAA2C,CAAA;IAC/C,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,UAAU,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxE,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,WAAW,GAAG,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS;YACrD,CAAC,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACvF,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,MAAM,WAAW,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzI,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,uDAAuD,CAAC,CAAA;QAC1I,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzJ,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAA;QAC7E,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAY,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAA;QAAC,CAAC;QACjK,OAAO,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QAC9F,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,oEAAoE,CAAC,CAAA;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,MAAM,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;gBACjC,CAAC;YAAC,MAAM,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;IACpG,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,mDAAmD,CAAC,CAAA;IACrH,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"host-attestor.js","sourceRoot":"","sources":["../src/host-attestor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,wBAAwB,EAAsD,MAAM,oBAAoB,CAAA;AACjH,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,2BAA2B,EAChC,MAAM,YAAY,CAAA;AAa/E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB;IAArB,YAAqB,IAA2B,EAAE,OAAe;QAC/D,KAAK,CAAC,sCAAsC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAA;QAD7C,SAAI,GAAJ,IAAI,CAAuB;QAE9C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA6B,EAAE,KAA2B,EACzF,sBAA8B;IAC9B,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;IACtE,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAA;IAC/F,IAAI,KAAK,KAAK,uBAAuB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK;YACzD,uBAAuB,EAAE,MAAM,CAAC,oCAAoC;YACpE,4BAA4B,EAAE,MAAM,CAAC,yCAAyC,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IAC7G,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,oBAAoB;YACvF,iBAAiB,EAAE,MAAM,CAAC,uBAAuB,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IAChF,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YAC/D,cAAc,EAAE,MAAM,CAAC,oBAAoB,EAAE,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAA;IAC9F,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,mBAAmB;YACrF,cAAc,EAAE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAA;IAChG,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAA;IACxI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,oEAAoE,CAAC,CAAA;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,IAA0B;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/F,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,MAA8B,CAAA;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB,EAAE,IAA0B,EAAE,KAA+B,EACpG,MAAwC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,kBAAkB,IAAI,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;IAC5H,MAAM,YAAY,GAAG,KAAK,KAAK,UAAU;QACvC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,sBAAsB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAe;YAC7L,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,mBAAmB,IAAI,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE;QAClH,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;IAC9F,OAAO,KAAK,CAAC,+BAA+B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,QAAQ;QAC7F,aAAa,EAAE,IAAI,CAAC,UAAW,CAAC,KAAK,EAAE,MAAM;QAC7C,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAwB,EAAE,IAA0B,EAC/F,KAA+B;IAC/B,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAwB,EAAE,IAA0B,EACnG,KAA+B;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAA;IACnC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAA;IAC5H,OAAO,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;QAC5G,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;QAC/E,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,UAAiC,EAAE,WAA8C,EACtG,IAAuB,EAAE,WAA8B,EACvD,SAAiB,EAAE,KAAyB,EAAE,aAAqB,EAAE,MAAoB;IACzF,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;IACpG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAA;IACzH,IAAI,CAAC;QAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjF,MAAM,gBAAgB,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,CAAA;IAC7F,MAAM,KAAK,GAAsC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjG,IAAI,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,wBAAwB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK;YAC9F,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAC1F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;YAAE,MAAM,KAAK,CAAA;QAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAA;QACtH,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,iBAAiB,CAAC,cAAc,EAAE,oDAAoD,CAAC,CAAA;QACpI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU;YAC7D,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAA;IACvH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAA+B,EAChF,OAA+B,EAAE,MAAoB;IACrD,OAAO,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAA;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAA+B,EACxF,OAA4B,EAAE,MAAoB;IAClD,OAAO,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAA;AACnF,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAI,KAA+B,EACxE,OAAqD,EAAE,YAAmC,EAAE,MAAoB;IAChH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAA;IACnC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAA;IAC5H,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;WACnF,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;WACpF,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WAC5F,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;WACnF,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAA;IACnJ,IAAI,UAA6C,CAAA;IACjD,IAAI,WAA8C,CAAA;IAClD,IAAI,OAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,UAAU,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxE,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,WAAW,GAAG,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS;YACrD,CAAC,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACvF,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,MAAM,WAAW,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzI,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,uDAAuD,CAAC,CAAA;QAC1I,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzJ,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAA;QAC7E,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;QACpG,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAY,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAA;QAAC,CAAC;QACjK,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QAC9F,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,oEAAoE,CAAC,CAAA;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,MAAM,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;gBACjC,CAAC;YAAC,MAAM,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAA;IACpG,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,mDAAmD,CAAC,CAAA;IACrH,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/lib/host-inputs.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Break pnpm-style hardlinks only for signed, declared inputs. The caller holds
+ * the profile mutation lock; directory-descriptor paths keep every write in
+ * the already-open private profile directory if a pathname is swapped.
+ */
+export declare function materializeHostInputFiles(profilePath: string, inputs: readonly string[]): Promise<void>;
+/** Capture declared deployment inputs before a staged profile can reach its Host. */
+export declare function captureHostInputFiles(profilePath: string, finalProfilePath: string, inputs: readonly string[]): Promise<readonly {
+    input: string;
+    path: string;
+    sha256: string;
+}[]>;
+//# sourceMappingURL=host-inputs.d.ts.map

package/lib/host-inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-inputs.d.ts","sourceRoot":"","sources":["../src/host-inputs.ts"],"names":[],"mappings":"AAwBA;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+E7G;AAED,qFAAqF;AACrF,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS;IACtI,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAC5C,EAAE,CAAC,CAyBH"}

package/lib/host-inputs.js

@@ -0,0 +1,162 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open, realpath, rename, unlink } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+const maximumInputBytes = 64n * 1024n * 1024n;
+function insideProfile(profilePath, physical) {
+    const inside = relative(profilePath, physical);
+    if (!inside || inside === '..' || inside.startsWith(`..${sep}`) || isAbsolute(inside))
+        throw new Error('Host input escapes profile');
+    return inside;
+}
+function validInput(input) {
+    if (!input || input.includes('\\') || input.includes('\0') || isAbsolute(input)
+        || input.split('/').some(part => !part || part === '.' || part === '..'))
+        throw new Error('Host input path is invalid');
+}
+function trustedFile(stat) {
+    const uid = process.getuid?.();
+    return stat.isFile() && stat.size <= maximumInputBytes && (stat.mode & 18n) === 0n
+        && (stat.mode & 3584n) === 0n && (uid === undefined || stat.uid === 0n || stat.uid === BigInt(uid));
+}
+/**
+ * Break pnpm-style hardlinks only for signed, declared inputs. The caller holds
+ * the profile mutation lock; directory-descriptor paths keep every write in
+ * the already-open private profile directory if a pathname is swapped.
+ */
+export async function materializeHostInputFiles(profilePath, inputs) {
+    if (!isAbsolute(profilePath) || resolve(profilePath) !== profilePath || await realpath(profilePath) !== profilePath) {
+        throw new Error('Host input profile is not canonical');
+    }
+    if (inputs.length < 1 || inputs.length > 128)
+        throw new Error('Host input count is invalid');
+    const physicalPaths = new Set();
+    let copiedBytes = 0n;
+    for (const input of inputs) {
+        validInput(input);
+        const logical = join(profilePath, input), physical = await realpath(logical);
+        insideProfile(profilePath, physical);
+        if (physicalPaths.has(physical))
+            throw new Error('Host inputs alias the same file');
+        physicalPaths.add(physical);
+        const parent = dirname(physical);
+        if (await realpath(parent) !== parent)
+            throw new Error('Host input parent is not canonical');
+        const directory = await open(parent, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        let temporary;
+        try {
+            const directoryStat = await directory.stat({ bigint: true }), uid = process.getuid?.();
+            if (!directoryStat.isDirectory() || (directoryStat.mode & 18n) !== 0n
+                || (uid !== undefined && directoryStat.uid !== 0n && directoryStat.uid !== BigInt(uid))) {
+                throw new Error('Host input parent is not a trusted directory');
+            }
+            // /proc/self/fd anchors both rename operands to the opened directory,
+            // so a concurrent parent symlink swap cannot redirect writes outside it.
+            const anchored = `/proc/self/fd/${directory.fd}`;
+            if (await realpath(anchored) !== parent)
+                throw new Error('Host input parent changed before copy');
+            const target = join(anchored, basename(physical));
+            const pathname = await lstat(target, { bigint: true });
+            if (!trustedFile(pathname))
+                throw new Error('Host input is not a trusted regular file');
+            const source = await open(target, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+            try {
+                const before = await source.stat({ bigint: true });
+                if (before.dev !== pathname.dev || before.ino !== pathname.ino || before.size !== pathname.size
+                    || before.mtimeNs !== pathname.mtimeNs || before.ctimeNs !== pathname.ctimeNs)
+                    throw new Error('Host input changed before copy');
+                if (before.nlink === 1n)
+                    continue;
+                copiedBytes += before.size;
+                if (copiedBytes > 512n * 1024n * 1024n)
+                    throw new Error('Host input materialization byte budget exceeded');
+                const bytes = await source.readFile(), after = await source.stat({ bigint: true });
+                if (BigInt(bytes.length) !== before.size || after.dev !== before.dev || after.ino !== before.ino
+                    || after.size !== before.size || after.mtimeNs !== before.mtimeNs || after.ctimeNs !== before.ctimeNs) {
+                    throw new Error('Host input changed during copy');
+                }
+                temporary = join(anchored, `.dsh-host-input-${randomUUID()}`);
+                const copy = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+                try {
+                    await copy.writeFile(bytes);
+                    await copy.chmod(Number(before.mode & 511n));
+                    const copied = await copy.stat({ bigint: true });
+                    if (!copied.isFile() || copied.nlink !== 1n || copied.size !== before.size)
+                        throw new Error('Host input copy is incomplete');
+                    await copy.sync();
+                }
+                finally {
+                    await copy.close();
+                }
+                const current = await lstat(target, { bigint: true });
+                if (current.dev !== before.dev || current.ino !== before.ino || current.size !== before.size
+                    || current.mtimeNs !== before.mtimeNs || current.ctimeNs !== before.ctimeNs
+                    || await realpath(anchored) !== parent || await realpath(logical) !== physical
+                    || await realpath(profilePath) !== profilePath) {
+                    throw new Error('Host input changed before atomic replacement');
+                }
+                await rename(temporary, target);
+                temporary = undefined;
+                await directory.sync();
+                const detached = await lstat(target, { bigint: true });
+                if (!trustedFile(detached) || detached.nlink !== 1n || detached.size !== before.size
+                    || await realpath(anchored) !== parent || await realpath(logical) !== physical) {
+                    throw new Error('Host input changed after atomic replacement');
+                }
+            }
+            finally {
+                await source.close();
+            }
+        }
+        finally {
+            try {
+                if (temporary !== undefined) {
+                    await unlink(temporary).catch(error => {
+                        if (error.code !== 'ENOENT')
+                            throw error;
+                    });
+                    await directory.sync();
+                }
+            }
+            finally {
+                await directory.close();
+            }
+        }
+    }
+}
+/** Capture declared deployment inputs before a staged profile can reach its Host. */
+export async function captureHostInputFiles(profilePath, finalProfilePath, inputs) {
+    if (!isAbsolute(profilePath) || resolve(profilePath) !== profilePath || await realpath(profilePath) !== profilePath
+        || !isAbsolute(finalProfilePath) || resolve(finalProfilePath) !== finalProfilePath)
+        throw new Error('Host input profile is not canonical');
+    const captured = [];
+    for (const input of inputs) {
+        validInput(input);
+        const logical = join(profilePath, input), physical = await realpath(logical);
+        const inside = insideProfile(profilePath, physical);
+        const pathname = await lstat(physical, { bigint: true }), uid = process.getuid?.();
+        if (!trustedFile(pathname) || pathname.nlink !== 1n
+            || (uid !== undefined && pathname.uid !== 0n && pathname.uid !== BigInt(uid)))
+            throw new Error('Host input is not a trusted regular file');
+        const handle = await open(physical, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        try {
+            const before = await handle.stat({ bigint: true });
+            if (before.dev !== pathname.dev || before.ino !== pathname.ino || before.size !== pathname.size
+                || before.mtimeNs !== pathname.mtimeNs || before.ctimeNs !== pathname.ctimeNs)
+                throw new Error('Host input changed before read');
+            const bytes = await handle.readFile(), after = await handle.stat({ bigint: true }), linked = await lstat(physical, { bigint: true });
+            if (before.dev !== after.dev || before.ino !== after.ino || before.size !== after.size || before.mtimeNs !== after.mtimeNs
+                || before.ctimeNs !== after.ctimeNs || BigInt(bytes.length) !== before.size || before.dev !== linked.dev
+                || before.ino !== linked.ino || await realpath(logical) !== physical)
+                throw new Error('Host input changed during read');
+            captured.push({ input, path: join(finalProfilePath, inside), sha256: createHash('sha256').update(bytes).digest('hex') });
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    if (new Set(captured.map(file => file.path)).size !== captured.length)
+        throw new Error('Host inputs alias the same file');
+    return captured;
+}
+//# sourceMappingURL=host-inputs.js.map

package/lib/host-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-inputs.js","sourceRoot":"","sources":["../src/host-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEvF,MAAM,iBAAiB,GAAG,GAAG,GAAG,KAAK,GAAG,KAAK,CAAA;AAE7C,SAAS,aAAa,CAAC,WAAmB,EAAE,QAAgB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACpI,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;WAC1E,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;AAC3H,CAAC;AAED,SAAS,WAAW,CAAC,IAAoE;IACvF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;WAChF,CAAC,IAAI,CAAC,IAAI,GAAG,KAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AACzG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,MAAyB;IAC5F,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,WAAW,IAAI,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC5F,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,IAAI,WAAW,GAAG,EAAE,CAAA;IACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC5E,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACpC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACnF,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QAChC,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC5F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACvG,IAAI,SAA6B,CAAA;QACjC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;YACtF,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;mBACnE,CAAC,GAAG,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,KAAK,EAAE,IAAI,aAAa,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACjE,CAAC;YACD,sEAAsE;YACtE,yEAAyE;YACzE,MAAM,QAAQ,GAAG,iBAAiB,SAAS,CAAC,EAAE,EAAE,CAAA;YAChD,IAAI,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YACjG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;YACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACtD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;YACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;YACnG,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClD,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;uBAC1F,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;gBAClI,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE;oBAAE,SAAQ;gBACjC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAA;gBAC1B,IAAI,WAAW,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;gBAC1G,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClF,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;uBAC3F,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACxG,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;gBACnD,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,mBAAmB,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;gBAC3H,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;oBAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,IAAM,CAAC,CAAC,CAAA;oBAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;oBAChD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;oBAC5H,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACnB,CAAC;wBAAS,CAAC;oBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrD,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;uBACvF,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;uBACxE,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ;uBAC3E,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;gBACjE,CAAC;gBACD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBAC/B,SAAS,GAAG,SAAS,CAAA;gBACrB,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;gBACtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACtD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;uBAC/E,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;gBAChE,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;wBACpC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,KAAK,CAAA;oBACrE,CAAC,CAAC,CAAA;oBACF,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;gBACxB,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB,EAAE,gBAAwB,EAAE,MAAyB;IAGlH,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,WAAW,IAAI,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,WAAW;WAC9G,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC5I,MAAM,QAAQ,GAAG,EAAE,CAAA;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,KAAK,CAAC,CAAA;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC5E,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;QAClF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE;eAC9C,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC5I,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACrG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;mBAC1F,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YAClI,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACpI,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;mBACrH,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;mBACrG,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACzH,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC1H,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACzH,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/lib/host-maintenance.d.ts

@@ -0,0 +1,61 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { HostAttestationReceipt, HostInputWitness, PluginActivationPlan } from './types.js';
+type Pin = {
+    path: string;
+    sha256: string | null;
+};
+type DeploymentPin = {
+    input: string;
+    path: string;
+    sha256: string;
+};
+export interface HostMaintenanceSnapshot {
+    executor: PluginActivationPlan['executor'];
+    profileFiles: readonly Pin[];
+    baselineFiles: readonly Pin[];
+    deploymentFiles: readonly DeploymentPin[];
+    baselineDeploymentFiles: readonly DeploymentPin[];
+    unitProperties: Record<string, string>;
+}
+export interface HostMaintenanceRecord {
+    schemaVersion: 1;
+    kind: 'dsh-host-maintenance';
+    transactionId: string;
+    installationId: string;
+    ledger: PluginActivationPlan['ledger'];
+    profile: {
+        name: string;
+        path: string;
+    };
+    plan: {
+        id: string;
+        digest: string;
+    };
+    activation: {
+        id: string;
+        fence: number;
+    };
+    predecessor: {
+        operationId: string;
+        receiptDigest: string;
+        hostGeneration: number;
+    };
+    sequence: number;
+    previousDigest: string | null;
+    before: HostMaintenanceSnapshot;
+    after: HostMaintenanceSnapshot;
+    issuedAt: number;
+    authority: string;
+    keyId: string;
+    publicKeyPem: string;
+    signature: string;
+}
+export declare function hostMaintenanceCanonical(value: unknown): string;
+export declare function hostMaintenanceDigest(value: unknown): string;
+export declare function parseHostMaintenanceRecord(value: unknown): HostMaintenanceRecord;
+export declare function signHostMaintenanceRecord(input: Omit<HostMaintenanceRecord, 'publicKeyPem' | 'signature'>, privateKeyPem: string): HostMaintenanceRecord;
+/** Anchor every maintenance chain in the already applied original readiness key. */
+export declare function verifyHostMaintenanceChain(records: readonly HostMaintenanceRecord[], plan: PluginActivationPlan, readiness: HostAttestationReceipt, witness: HostInputWitness): readonly HostMaintenanceRecord[];
+export declare function readHostMaintenanceRecords(database: DatabaseSync, planId: string): HostMaintenanceRecord[];
+export {};
+//# sourceMappingURL=host-maintenance.d.ts.map

package/lib/host-maintenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-maintenance.d.ts","sourceRoot":"","sources":["../src/host-maintenance.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEhG,KAAK,GAAG,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAClD,KAAK,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AACpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAC1C,YAAY,EAAE,SAAS,GAAG,EAAE,CAAA;IAC5B,aAAa,EAAE,SAAS,GAAG,EAAE,CAAA;IAC7B,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;IACzC,uBAAuB,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACvC;AACD,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAA;IAChB,IAAI,EAAE,sBAAsB,CAAA;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACtC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACvC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACpC,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAA;IACnF,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,uBAAuB,CAAA;IAC/B,KAAK,EAAE,uBAAuB,CAAA;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAM/D;AACD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAsF;AAoCnJ,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAyBhF;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,GAAG,WAAW,CAAC,EAAE,aAAa,EAAE,MAAM,GAAG,qBAAqB,CAGxJ;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAC9G,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,gBAAgB,GAAG,SAAS,qBAAqB,EAAE,CAyBhG;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,qBAAqB,EAAE,CAO1G"}