@event4u/agent-config 17.2.1 → 17.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.augment-plugin/marketplace.json +3 -3
- package/.augment-plugin/plugin.json +1 -1
- package/.claude-plugin/marketplace.json +1 -1
- package/.claude-plugin/skills/install-agent-config/SKILL.md +9 -9
- package/CHANGELOG.md +167 -193
- package/CREDITS.md +2 -2
- package/README.md +1 -1
- package/dist/agent-src/skills/code-intelligence/SKILL.md +16 -12
- package/dist/agent-src/templates/agents/agent-project-settings.example.yml +1 -1
- package/dist/agent-src/templates/scripts/check_memory.ts +1 -1
- package/dist/cli/commands/recordTriggerEval.js +1 -1
- package/dist/cli/registry.js +2 -2
- package/dist/cli-delegate/{chunk-KR5ZIFPO.js → chunk-5AYJGUA3.js} +1 -3
- package/dist/cli-delegate/chunk-DIFZBP4G.js +1336 -0
- package/dist/cli-delegate/chunk-E7ACTJTJ.js +6792 -0
- package/dist/cli-delegate/{chunk-VYZGJLCA.js → chunk-RKNT4LIK.js} +22 -1286
- package/dist/cli-delegate/{chunk-BZJ4Y3CI.js → chunk-WY5ZZPGL.js} +2 -2
- package/dist/cli-delegate/{chunk-CMZEKSNN.js → chunk-X6LZ7W5A.js} +73 -10
- package/dist/cli-delegate/cmd_conformance.js +190 -192
- package/dist/cli-delegate/cmd_doctor.js +5 -5
- package/dist/cli-delegate/cmd_doctor_neighbours.js +3 -3
- package/dist/cli-delegate/cmd_explain.js +1 -1
- package/dist/cli-delegate/cmd_export.js +2 -2
- package/dist/cli-delegate/cmd_handoff.js +2 -2
- package/dist/cli-delegate/cmd_memory_get.js +1 -1
- package/dist/cli-delegate/cmd_prune.js +2 -2
- package/dist/cli-delegate/cmd_route_audit.js +1 -1
- package/dist/cli-delegate/cmd_session_recycle.js +2 -2
- package/dist/cli-delegate/cmd_settings_migrate.js +2 -2
- package/dist/cli-delegate/cmd_settings_set.js +8 -4
- package/dist/cli-delegate/cmd_sync.js +2 -2
- package/dist/cli-delegate/cmd_uninstall.js +2 -2
- package/dist/cli-delegate/cmd_update.js +24 -13
- package/dist/cli-delegate/cmd_upgrade.js +2 -2
- package/dist/cli-delegate/cmd_validate.js +2 -2
- package/dist/cli-delegate/dist-25AZAHOP.js +3240 -0
- package/dist/cli-delegate/dist-P7MFPMF3.js +411 -0
- package/dist/cli-delegate/dist-XAS5ZLQB.js +6 -0
- package/dist/cli-delegate/{upgrade_unattended-VVL6JLSX.js → upgrade_unattended-QCWOKTUN.js} +178 -163
- package/dist/discovery/deprecation-report.md +1 -1
- package/dist/discovery/discovery-manifest.json +3 -3
- package/dist/discovery/discovery-manifest.json.sha256 +1 -1
- package/dist/discovery/discovery-manifest.summary.md +1 -1
- package/dist/discovery/dormancy-report.md +1 -1
- package/dist/discovery/orphan-report.md +1 -1
- package/dist/discovery/packs.json +2 -2
- package/dist/discovery/trust-report.md +1 -1
- package/dist/discovery/workspaces.json +2 -2
- package/dist/hooks/code_graph_refresh.chunk.cjs +443 -0
- package/dist/hooks/code_graph_refresh.chunk.cjs.sha256 +1 -0
- package/dist/hooks/dispatch.js +1001 -938
- package/dist/hooks/dispatch.sha256 +1 -1
- package/dist/hooks/egress_engine.chunk.cjs +57 -7
- package/dist/hooks/egress_engine.chunk.cjs.sha256 +1 -1
- package/dist/hooks/update_notice.chunk.cjs +914 -0
- package/dist/hooks/update_notice.chunk.cjs.sha256 +1 -0
- package/dist/install/install.mjs +6974 -6037
- package/dist/mcp/mcp-cloudflare-catalogue.json +1 -0
- package/dist/mcp/registry-manifest.json +3 -2
- package/dist/mcp/server.json +13 -4
- package/dist/mcp/server.mjs +71202 -63282
- package/dist/scripts/_lib/egress_rules.js +8 -2
- package/dist/scripts/condense.js +18 -15
- package/dist/server/routes/discovery.js +1 -1
- package/dist/server/routes/install.js +1 -1
- package/dist/server/routes/ping.js +1 -1
- package/dist/server/routes/schema.js +4 -4
- package/dist/server/routes/settings.js +2 -6
- package/dist/server/routes/wizard.js +6 -6
- package/dist/server/schemas/settings.js +42 -42
- package/dist/shared/settingsSurface.js +1 -1
- package/dist/shared/userMd/schema.js +1 -1
- package/dist/shared/zodJsonSchema.js +47 -0
- package/dist/ui/assets/index-B0bcIgi0.js +77 -0
- package/dist/ui/index.html +1 -1
- package/package.json +6 -3
- package/src/agent-src/templates/scripts/check_memory.ts +1 -1
- package/src/config/ci-local-parity.yml +11 -0
- package/src/config/continuity-surface.json +9 -2
- package/src/config/evaluator-budgets.json +9 -8
- package/src/config/gate-violation-baselines.json +3 -3
- package/src/config/gitignore-block.txt +6 -5
- package/src/config/hook-bundle-budget.json +46 -6
- package/src/config/pack-size-budget.json +12 -1
- package/src/config/packed-binary-manifest.json +18 -0
- package/src/config/sigstore/npm_keys.json +50 -0
- package/src/config/sigstore/trust-material.json +9 -0
- package/src/config/sigstore/trusted_root.json +126 -0
- package/src/config/skill-body-budget.json +7 -1
- package/src/scripts/_cli/cmd_settings_set.ts +3 -2
- package/src/scripts/_cli/cmd_update.ts +48 -20
- package/src/scripts/_cli/cmd_upgrade.ts +7 -1
- package/src/scripts/_cli/upgrade_unattended.ts +90 -76
- package/src/scripts/_dispatch.bash +4 -3
- package/src/scripts/_lib/confusables.ts +0 -19
- package/src/scripts/_lib/egress_normalize.ts +53 -23
- package/src/scripts/_lib/egress_rules.ts +8 -2
- package/src/scripts/_lib/egress_text.ts +5 -3
- package/src/scripts/_lib/egress_token.ts +7 -5
- package/src/scripts/_lib/gate_collector_experimental.ts +633 -0
- package/src/scripts/_lib/git_common_dir.ts +10 -0
- package/src/scripts/_lib/graph_feeder_record.ts +3 -2
- package/src/scripts/_lib/install_reach_checks.ts +32 -2
- package/src/scripts/_lib/lineage_backfill.ts +136 -0
- package/src/scripts/_lib/lineage_ledger.ts +211 -0
- package/src/scripts/_lib/lineage_map.ts +55 -0
- package/src/scripts/_lib/lineage_query.ts +140 -0
- package/src/scripts/_lib/lineage_seed.ts +116 -0
- package/src/scripts/_lib/lineage_watch.ts +249 -0
- package/src/scripts/_lib/link_crypto.ts +8 -4
- package/src/scripts/_lib/listing_manifests.ts +85 -0
- package/src/scripts/_lib/neighbour_census.ts +1 -0
- package/src/scripts/_lib/production_reach.ts +3 -3
- package/src/scripts/_lib/project_registry.ts +227 -0
- package/src/scripts/_lib/provenance_verify.ts +14 -242
- package/src/scripts/_lib/release_settings_surface.ts +2 -6
- package/src/scripts/_lib/sigstore_provenance.ts +177 -0
- package/src/scripts/_lib/source_id.ts +48 -0
- package/src/scripts/_lib/source_shape.ts +4 -0
- package/src/scripts/_lib/unattended_gates.ts +6 -1
- package/src/scripts/adoption_status.ts +231 -27
- package/src/scripts/advisories.ts +26 -10
- package/src/scripts/ai_council/council_egress.ts +5 -6
- package/src/scripts/bench_graph_feeder_latency.ts +10 -3
- package/src/scripts/build_mcp_registry_manifest.ts +23 -12
- package/src/scripts/check_dependency_floors.ts +14 -0
- package/src/scripts/check_egress_mutations.ts +1 -0
- package/src/scripts/check_release_manifest_content.ts +17 -2
- package/src/scripts/check_release_pr_shape.ts +5 -0
- package/src/scripts/code_graph/build.ts +145 -45
- package/src/scripts/code_graph/cli.ts +382 -35
- package/src/scripts/code_graph/conventions_default.ts +247 -0
- package/src/scripts/code_graph/detect.ts +5 -5
- package/src/scripts/code_graph/estate_cli.ts +135 -0
- package/src/scripts/code_graph/estate_index.ts +394 -0
- package/src/scripts/code_graph/estate_manifests.ts +223 -0
- package/src/scripts/code_graph/estate_map.ts +141 -0
- package/src/scripts/code_graph/extract.ts +8 -2
- package/src/scripts/code_graph/extract_more.ts +241 -2
- package/src/scripts/code_graph/graph_budget.ts +158 -0
- package/src/scripts/code_graph/graph_home.ts +80 -0
- package/src/scripts/code_graph/lineage_cli.ts +315 -0
- package/src/scripts/code_graph/loader.ts +10 -2
- package/src/scripts/code_graph/map.ts +195 -53
- package/src/scripts/code_graph/map_model.ts +113 -20
- package/src/scripts/code_graph/map_verify.ts +80 -5
- package/src/scripts/code_graph/map_viewer/viewer.css +18 -0
- package/src/scripts/code_graph/map_viewer/viewer.js +146 -15
- package/src/scripts/code_graph/passes.ts +173 -0
- package/src/scripts/code_graph/project_ref.ts +25 -0
- package/src/scripts/code_graph/projects_cli.ts +254 -0
- package/src/scripts/code_graph/providers/angular.ts +55 -0
- package/src/scripts/code_graph/providers/aspnetcore.ts +182 -0
- package/src/scripts/code_graph/providers/catalog.ts +299 -0
- package/src/scripts/code_graph/providers/django.ts +206 -0
- package/src/scripts/code_graph/providers/express.ts +25 -0
- package/src/scripts/code_graph/providers/fastapi.ts +49 -0
- package/src/scripts/code_graph/providers/flask.ts +99 -0
- package/src/scripts/code_graph/providers/go_http.ts +121 -0
- package/src/scripts/code_graph/providers/index.ts +103 -0
- package/src/scripts/code_graph/{laravel_overlay.ts → providers/laravel.ts} +113 -7
- package/src/scripts/code_graph/providers/nestjs.ts +34 -0
- package/src/scripts/code_graph/providers/nextjs.ts +91 -0
- package/src/scripts/code_graph/providers/nuxt.ts +55 -0
- package/src/scripts/code_graph/providers/rails.ts +204 -0
- package/src/scripts/code_graph/providers/react-router.ts +58 -0
- package/src/scripts/code_graph/providers/shared/detect.ts +78 -0
- package/src/scripts/code_graph/providers/shared/extractors.ts +249 -0
- package/src/scripts/code_graph/providers/shared/js.ts +252 -0
- package/src/scripts/code_graph/providers/shared/kit.ts +210 -0
- package/src/scripts/code_graph/providers/shared/php.ts +64 -0
- package/src/scripts/code_graph/providers/shared/python.ts +223 -0
- package/src/scripts/code_graph/providers/spring.ts +175 -0
- package/src/scripts/code_graph/providers/sqlalchemy.ts +62 -0
- package/src/scripts/code_graph/providers/sveltekit.ts +59 -0
- package/src/scripts/code_graph/providers/symfony.ts +142 -0
- package/src/scripts/code_graph/providers/typeorm.ts +58 -0
- package/src/scripts/code_graph/providers/types.ts +56 -0
- package/src/scripts/code_graph/providers/vue-router.ts +21 -0
- package/src/scripts/code_graph/providers/wordpress.ts +128 -0
- package/src/scripts/code_graph/query.ts +9 -9
- package/src/scripts/code_graph/refresh_cli.ts +81 -0
- package/src/scripts/code_graph/refresh_lock.ts +197 -0
- package/src/scripts/code_graph/repo_identity.ts +169 -0
- package/src/scripts/code_graph/resolution_tiers.ts +19 -7
- package/src/scripts/code_graph/scip_reader.ts +2 -2
- package/src/scripts/code_graph/sqlite_store.ts +31 -28
- package/src/scripts/code_graph/types.ts +79 -41
- package/src/scripts/code_graph/validate.ts +6 -8
- package/src/scripts/condense.ts +15 -15
- package/src/scripts/generate_settings_reference.ts +2 -6
- package/src/scripts/hook_chunks.mjs +11 -0
- package/src/scripts/hook_manifest.json +1 -1
- package/src/scripts/hook_manifest.yaml +43 -23
- package/src/scripts/hooks/code_graph_refresh_hook.ts +163 -0
- package/src/scripts/hooks/dispatch_hook.ts +6 -7
- package/src/scripts/hooks/host_semantics.ts +72 -0
- package/src/scripts/hooks/lazy_concern.ts +8 -0
- package/src/scripts/hooks/user_notice.ts +105 -0
- package/src/scripts/install-hooks.sh +54 -33
- package/src/scripts/install.ts +2 -6
- package/src/scripts/lint_harvest_provenance.ts +137 -11
- package/src/scripts/lint_hook_manifest.ts +2 -0
- package/src/scripts/lint_marketplace.ts +33 -0
- package/src/scripts/lint_mcp_registry_manifest.ts +36 -0
- package/src/scripts/mcp_server/consumer_tool_catalog.json +70 -15
- package/src/scripts/mcp_server/graph_tools.ts +165 -41
- package/src/scripts/network_sources.ts +24 -6
- package/src/scripts/release.ts +2 -5
- package/src/scripts/release_drill.ts +4 -1
- package/src/scripts/release_env.ts +17 -0
- package/src/scripts/release_mix_taxonomy.json +3 -0
- package/src/scripts/schemas/provenance-mechanism.schema.json +46 -0
- package/src/scripts/update_notice_hook.ts +75 -7
- package/src/server/schemas/settings.ts +42 -42
- package/src/shared/settingsSurface.ts +1 -1
- package/src/shared/userMd/schema.ts +1 -1
- package/src/shared/zodJsonSchema.ts +41 -0
- package/src/vendor/grammars/README.md +8 -6
- package/src/vendor/grammars/tree-sitter-c_sharp.wasm +0 -0
- package/src/vendor/grammars/tree-sitter-ruby.wasm +0 -0
- package/dist/cli-delegate/chunk-XIAPY44N.js +0 -4587
- package/dist/ui/assets/index-w70Ado09.js +0 -23
- /package/dist/cli-delegate/{chunk-FKYZOWVD.js → chunk-QBAFP67O.js} +0 -0
- /package/dist/cli-delegate/{chunk-BMGUGSY6.js → chunk-TQG6UMPC.js} +0 -0
|
@@ -0,0 +1,411 @@
|
|
|
1
|
+
import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
|
|
2
|
+
import {
|
|
3
|
+
require_dist
|
|
4
|
+
} from "./chunk-DIFZBP4G.js";
|
|
5
|
+
import {
|
|
6
|
+
__commonJS
|
|
7
|
+
} from "./chunk-J55WI3RR.js";
|
|
8
|
+
|
|
9
|
+
// node_modules/@sigstore/bundle/dist/bundle.js
|
|
10
|
+
var require_bundle = __commonJS({
|
|
11
|
+
"node_modules/@sigstore/bundle/dist/bundle.js"(exports) {
|
|
12
|
+
"use strict";
|
|
13
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
14
|
+
exports.BUNDLE_V03_MEDIA_TYPE = exports.BUNDLE_V03_LEGACY_MEDIA_TYPE = exports.BUNDLE_V02_MEDIA_TYPE = exports.BUNDLE_V01_MEDIA_TYPE = void 0;
|
|
15
|
+
exports.isBundleWithCertificateChain = isBundleWithCertificateChain;
|
|
16
|
+
exports.isBundleWithPublicKey = isBundleWithPublicKey;
|
|
17
|
+
exports.isBundleWithMessageSignature = isBundleWithMessageSignature;
|
|
18
|
+
exports.isBundleWithDsseEnvelope = isBundleWithDsseEnvelope;
|
|
19
|
+
exports.BUNDLE_V01_MEDIA_TYPE = "application/vnd.dev.sigstore.bundle+json;version=0.1";
|
|
20
|
+
exports.BUNDLE_V02_MEDIA_TYPE = "application/vnd.dev.sigstore.bundle+json;version=0.2";
|
|
21
|
+
exports.BUNDLE_V03_LEGACY_MEDIA_TYPE = "application/vnd.dev.sigstore.bundle+json;version=0.3";
|
|
22
|
+
exports.BUNDLE_V03_MEDIA_TYPE = "application/vnd.dev.sigstore.bundle.v0.3+json";
|
|
23
|
+
function isBundleWithCertificateChain(b) {
|
|
24
|
+
return b.verificationMaterial.content.$case === "x509CertificateChain";
|
|
25
|
+
}
|
|
26
|
+
function isBundleWithPublicKey(b) {
|
|
27
|
+
return b.verificationMaterial.content.$case === "publicKey";
|
|
28
|
+
}
|
|
29
|
+
function isBundleWithMessageSignature(b) {
|
|
30
|
+
return b.content.$case === "messageSignature";
|
|
31
|
+
}
|
|
32
|
+
function isBundleWithDsseEnvelope(b) {
|
|
33
|
+
return b.content.$case === "dsseEnvelope";
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
});
|
|
37
|
+
|
|
38
|
+
// node_modules/@sigstore/bundle/dist/build.js
|
|
39
|
+
var require_build = __commonJS({
|
|
40
|
+
"node_modules/@sigstore/bundle/dist/build.js"(exports) {
|
|
41
|
+
"use strict";
|
|
42
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
43
|
+
exports.toMessageSignatureBundle = toMessageSignatureBundle;
|
|
44
|
+
exports.toDSSEBundle = toDSSEBundle;
|
|
45
|
+
var protobuf_specs_1 = require_dist();
|
|
46
|
+
var bundle_1 = require_bundle();
|
|
47
|
+
function toMessageSignatureBundle(options) {
|
|
48
|
+
return {
|
|
49
|
+
mediaType: options.certificateChain ? bundle_1.BUNDLE_V02_MEDIA_TYPE : bundle_1.BUNDLE_V03_MEDIA_TYPE,
|
|
50
|
+
content: {
|
|
51
|
+
$case: "messageSignature",
|
|
52
|
+
messageSignature: {
|
|
53
|
+
messageDigest: {
|
|
54
|
+
algorithm: protobuf_specs_1.HashAlgorithm.SHA2_256,
|
|
55
|
+
digest: options.digest
|
|
56
|
+
},
|
|
57
|
+
signature: options.signature
|
|
58
|
+
}
|
|
59
|
+
},
|
|
60
|
+
verificationMaterial: toVerificationMaterial(options)
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
function toDSSEBundle(options) {
|
|
64
|
+
return {
|
|
65
|
+
mediaType: options.certificateChain ? bundle_1.BUNDLE_V02_MEDIA_TYPE : bundle_1.BUNDLE_V03_MEDIA_TYPE,
|
|
66
|
+
content: {
|
|
67
|
+
$case: "dsseEnvelope",
|
|
68
|
+
dsseEnvelope: toEnvelope(options)
|
|
69
|
+
},
|
|
70
|
+
verificationMaterial: toVerificationMaterial(options)
|
|
71
|
+
};
|
|
72
|
+
}
|
|
73
|
+
function toEnvelope(options) {
|
|
74
|
+
return {
|
|
75
|
+
payloadType: options.artifactType,
|
|
76
|
+
payload: options.artifact,
|
|
77
|
+
signatures: [toSignature(options)]
|
|
78
|
+
};
|
|
79
|
+
}
|
|
80
|
+
function toSignature(options) {
|
|
81
|
+
return {
|
|
82
|
+
keyid: options.keyHint || "",
|
|
83
|
+
sig: options.signature
|
|
84
|
+
};
|
|
85
|
+
}
|
|
86
|
+
function toVerificationMaterial(options) {
|
|
87
|
+
return {
|
|
88
|
+
content: toKeyContent(options),
|
|
89
|
+
tlogEntries: [],
|
|
90
|
+
timestampVerificationData: { rfc3161Timestamps: [] }
|
|
91
|
+
};
|
|
92
|
+
}
|
|
93
|
+
function toKeyContent(options) {
|
|
94
|
+
if (options.certificate) {
|
|
95
|
+
if (options.certificateChain) {
|
|
96
|
+
return {
|
|
97
|
+
$case: "x509CertificateChain",
|
|
98
|
+
x509CertificateChain: {
|
|
99
|
+
certificates: [{ rawBytes: options.certificate }]
|
|
100
|
+
}
|
|
101
|
+
};
|
|
102
|
+
} else {
|
|
103
|
+
return {
|
|
104
|
+
$case: "certificate",
|
|
105
|
+
certificate: { rawBytes: options.certificate }
|
|
106
|
+
};
|
|
107
|
+
}
|
|
108
|
+
} else {
|
|
109
|
+
return {
|
|
110
|
+
$case: "publicKey",
|
|
111
|
+
publicKey: {
|
|
112
|
+
hint: options.keyHint || ""
|
|
113
|
+
}
|
|
114
|
+
};
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
});
|
|
119
|
+
|
|
120
|
+
// node_modules/@sigstore/bundle/dist/error.js
|
|
121
|
+
var require_error = __commonJS({
|
|
122
|
+
"node_modules/@sigstore/bundle/dist/error.js"(exports) {
|
|
123
|
+
"use strict";
|
|
124
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
125
|
+
exports.ValidationError = void 0;
|
|
126
|
+
var ValidationError = class extends Error {
|
|
127
|
+
fields;
|
|
128
|
+
constructor(message, fields) {
|
|
129
|
+
super(message);
|
|
130
|
+
this.fields = fields;
|
|
131
|
+
}
|
|
132
|
+
};
|
|
133
|
+
exports.ValidationError = ValidationError;
|
|
134
|
+
}
|
|
135
|
+
});
|
|
136
|
+
|
|
137
|
+
// node_modules/@sigstore/bundle/dist/validate.js
|
|
138
|
+
var require_validate = __commonJS({
|
|
139
|
+
"node_modules/@sigstore/bundle/dist/validate.js"(exports) {
|
|
140
|
+
"use strict";
|
|
141
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
142
|
+
exports.assertBundle = assertBundle;
|
|
143
|
+
exports.assertBundleV01 = assertBundleV01;
|
|
144
|
+
exports.isBundleV01 = isBundleV01;
|
|
145
|
+
exports.assertBundleV02 = assertBundleV02;
|
|
146
|
+
exports.assertBundleLatest = assertBundleLatest;
|
|
147
|
+
var error_1 = require_error();
|
|
148
|
+
function assertBundle(b) {
|
|
149
|
+
const invalidValues = validateBundleBase(b);
|
|
150
|
+
if (invalidValues.length > 0) {
|
|
151
|
+
throw new error_1.ValidationError("invalid bundle", invalidValues);
|
|
152
|
+
}
|
|
153
|
+
}
|
|
154
|
+
function assertBundleV01(b) {
|
|
155
|
+
const invalidValues = [];
|
|
156
|
+
invalidValues.push(...validateBundleBase(b));
|
|
157
|
+
invalidValues.push(...validateInclusionPromise(b));
|
|
158
|
+
if (invalidValues.length > 0) {
|
|
159
|
+
throw new error_1.ValidationError("invalid v0.1 bundle", invalidValues);
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
function isBundleV01(b) {
|
|
163
|
+
try {
|
|
164
|
+
assertBundleV01(b);
|
|
165
|
+
return true;
|
|
166
|
+
} catch (e) {
|
|
167
|
+
return false;
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
function assertBundleV02(b) {
|
|
171
|
+
const invalidValues = [];
|
|
172
|
+
invalidValues.push(...validateBundleBase(b));
|
|
173
|
+
invalidValues.push(...validateInclusionProof(b));
|
|
174
|
+
if (invalidValues.length > 0) {
|
|
175
|
+
throw new error_1.ValidationError("invalid v0.2 bundle", invalidValues);
|
|
176
|
+
}
|
|
177
|
+
}
|
|
178
|
+
function assertBundleLatest(b) {
|
|
179
|
+
const invalidValues = [];
|
|
180
|
+
invalidValues.push(...validateBundleBase(b));
|
|
181
|
+
invalidValues.push(...validateInclusionProof(b));
|
|
182
|
+
invalidValues.push(...validateNoCertificateChain(b));
|
|
183
|
+
if (invalidValues.length > 0) {
|
|
184
|
+
throw new error_1.ValidationError("invalid bundle", invalidValues);
|
|
185
|
+
}
|
|
186
|
+
}
|
|
187
|
+
function validateBundleBase(b) {
|
|
188
|
+
const invalidValues = [];
|
|
189
|
+
if (b.mediaType === void 0 || !b.mediaType.match(/^application\/vnd\.dev\.sigstore\.bundle\+json;version=\d\.\d/) && !b.mediaType.match(/^application\/vnd\.dev\.sigstore\.bundle\.v\d\.\d\+json/)) {
|
|
190
|
+
invalidValues.push("mediaType");
|
|
191
|
+
}
|
|
192
|
+
if (b.content === void 0) {
|
|
193
|
+
invalidValues.push("content");
|
|
194
|
+
} else {
|
|
195
|
+
switch (b.content.$case) {
|
|
196
|
+
case "messageSignature":
|
|
197
|
+
if (b.content.messageSignature.messageDigest === void 0) {
|
|
198
|
+
invalidValues.push("content.messageSignature.messageDigest");
|
|
199
|
+
} else {
|
|
200
|
+
if (b.content.messageSignature.messageDigest.digest.length === 0) {
|
|
201
|
+
invalidValues.push("content.messageSignature.messageDigest.digest");
|
|
202
|
+
}
|
|
203
|
+
}
|
|
204
|
+
if (b.content.messageSignature.signature.length === 0) {
|
|
205
|
+
invalidValues.push("content.messageSignature.signature");
|
|
206
|
+
}
|
|
207
|
+
break;
|
|
208
|
+
case "dsseEnvelope":
|
|
209
|
+
if (b.content.dsseEnvelope.payload.length === 0) {
|
|
210
|
+
invalidValues.push("content.dsseEnvelope.payload");
|
|
211
|
+
}
|
|
212
|
+
if (b.content.dsseEnvelope.signatures.length !== 1) {
|
|
213
|
+
invalidValues.push("content.dsseEnvelope.signatures");
|
|
214
|
+
} else {
|
|
215
|
+
if (b.content.dsseEnvelope.signatures[0].sig.length === 0) {
|
|
216
|
+
invalidValues.push("content.dsseEnvelope.signatures[0].sig");
|
|
217
|
+
}
|
|
218
|
+
}
|
|
219
|
+
break;
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
if (b.verificationMaterial === void 0) {
|
|
223
|
+
invalidValues.push("verificationMaterial");
|
|
224
|
+
} else {
|
|
225
|
+
if (b.verificationMaterial.content === void 0) {
|
|
226
|
+
invalidValues.push("verificationMaterial.content");
|
|
227
|
+
} else {
|
|
228
|
+
switch (b.verificationMaterial.content.$case) {
|
|
229
|
+
case "x509CertificateChain":
|
|
230
|
+
if (b.verificationMaterial.content.x509CertificateChain.certificates.length === 0) {
|
|
231
|
+
invalidValues.push("verificationMaterial.content.x509CertificateChain.certificates");
|
|
232
|
+
}
|
|
233
|
+
b.verificationMaterial.content.x509CertificateChain.certificates.forEach((cert, i) => {
|
|
234
|
+
if (cert.rawBytes.length === 0) {
|
|
235
|
+
invalidValues.push(`verificationMaterial.content.x509CertificateChain.certificates[${i}].rawBytes`);
|
|
236
|
+
}
|
|
237
|
+
});
|
|
238
|
+
break;
|
|
239
|
+
case "certificate":
|
|
240
|
+
if (b.verificationMaterial.content.certificate.rawBytes.length === 0) {
|
|
241
|
+
invalidValues.push("verificationMaterial.content.certificate.rawBytes");
|
|
242
|
+
}
|
|
243
|
+
break;
|
|
244
|
+
}
|
|
245
|
+
}
|
|
246
|
+
if (b.verificationMaterial.tlogEntries === void 0) {
|
|
247
|
+
invalidValues.push("verificationMaterial.tlogEntries");
|
|
248
|
+
} else {
|
|
249
|
+
if (b.verificationMaterial.tlogEntries.length > 0) {
|
|
250
|
+
b.verificationMaterial.tlogEntries.forEach((entry, i) => {
|
|
251
|
+
if (entry.logId === void 0) {
|
|
252
|
+
invalidValues.push(`verificationMaterial.tlogEntries[${i}].logId`);
|
|
253
|
+
}
|
|
254
|
+
if (entry.kindVersion === void 0) {
|
|
255
|
+
invalidValues.push(`verificationMaterial.tlogEntries[${i}].kindVersion`);
|
|
256
|
+
}
|
|
257
|
+
});
|
|
258
|
+
}
|
|
259
|
+
}
|
|
260
|
+
}
|
|
261
|
+
return invalidValues;
|
|
262
|
+
}
|
|
263
|
+
function validateInclusionPromise(b) {
|
|
264
|
+
const invalidValues = [];
|
|
265
|
+
if (b.verificationMaterial && b.verificationMaterial.tlogEntries?.length > 0) {
|
|
266
|
+
b.verificationMaterial.tlogEntries.forEach((entry, i) => {
|
|
267
|
+
if (entry.inclusionPromise === void 0) {
|
|
268
|
+
invalidValues.push(`verificationMaterial.tlogEntries[${i}].inclusionPromise`);
|
|
269
|
+
}
|
|
270
|
+
});
|
|
271
|
+
}
|
|
272
|
+
return invalidValues;
|
|
273
|
+
}
|
|
274
|
+
function validateInclusionProof(b) {
|
|
275
|
+
const invalidValues = [];
|
|
276
|
+
if (b.verificationMaterial && b.verificationMaterial.tlogEntries?.length > 0) {
|
|
277
|
+
b.verificationMaterial.tlogEntries.forEach((entry, i) => {
|
|
278
|
+
if (entry.inclusionProof === void 0) {
|
|
279
|
+
invalidValues.push(`verificationMaterial.tlogEntries[${i}].inclusionProof`);
|
|
280
|
+
} else {
|
|
281
|
+
if (entry.inclusionProof.checkpoint === void 0) {
|
|
282
|
+
invalidValues.push(`verificationMaterial.tlogEntries[${i}].inclusionProof.checkpoint`);
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
});
|
|
286
|
+
}
|
|
287
|
+
return invalidValues;
|
|
288
|
+
}
|
|
289
|
+
function validateNoCertificateChain(b) {
|
|
290
|
+
const invalidValues = [];
|
|
291
|
+
if (b.verificationMaterial?.content?.$case === "x509CertificateChain") {
|
|
292
|
+
invalidValues.push("verificationMaterial.content.$case");
|
|
293
|
+
}
|
|
294
|
+
return invalidValues;
|
|
295
|
+
}
|
|
296
|
+
}
|
|
297
|
+
});
|
|
298
|
+
|
|
299
|
+
// node_modules/@sigstore/bundle/dist/serialized.js
|
|
300
|
+
var require_serialized = __commonJS({
|
|
301
|
+
"node_modules/@sigstore/bundle/dist/serialized.js"(exports) {
|
|
302
|
+
"use strict";
|
|
303
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
304
|
+
exports.envelopeToJSON = exports.envelopeFromJSON = exports.bundleToJSON = exports.bundleFromJSON = void 0;
|
|
305
|
+
var protobuf_specs_1 = require_dist();
|
|
306
|
+
var bundle_1 = require_bundle();
|
|
307
|
+
var validate_1 = require_validate();
|
|
308
|
+
var bundleFromJSON = (obj) => {
|
|
309
|
+
const bundle = protobuf_specs_1.Bundle.fromJSON(obj);
|
|
310
|
+
switch (bundle.mediaType) {
|
|
311
|
+
case bundle_1.BUNDLE_V01_MEDIA_TYPE:
|
|
312
|
+
(0, validate_1.assertBundleV01)(bundle);
|
|
313
|
+
break;
|
|
314
|
+
case bundle_1.BUNDLE_V02_MEDIA_TYPE:
|
|
315
|
+
(0, validate_1.assertBundleV02)(bundle);
|
|
316
|
+
break;
|
|
317
|
+
default:
|
|
318
|
+
(0, validate_1.assertBundleLatest)(bundle);
|
|
319
|
+
break;
|
|
320
|
+
}
|
|
321
|
+
return bundle;
|
|
322
|
+
};
|
|
323
|
+
exports.bundleFromJSON = bundleFromJSON;
|
|
324
|
+
var bundleToJSON = (bundle) => {
|
|
325
|
+
return protobuf_specs_1.Bundle.toJSON(bundle);
|
|
326
|
+
};
|
|
327
|
+
exports.bundleToJSON = bundleToJSON;
|
|
328
|
+
var envelopeFromJSON = (obj) => {
|
|
329
|
+
return protobuf_specs_1.Envelope.fromJSON(obj);
|
|
330
|
+
};
|
|
331
|
+
exports.envelopeFromJSON = envelopeFromJSON;
|
|
332
|
+
var envelopeToJSON = (envelope) => {
|
|
333
|
+
return protobuf_specs_1.Envelope.toJSON(envelope);
|
|
334
|
+
};
|
|
335
|
+
exports.envelopeToJSON = envelopeToJSON;
|
|
336
|
+
}
|
|
337
|
+
});
|
|
338
|
+
|
|
339
|
+
// node_modules/@sigstore/bundle/dist/index.js
|
|
340
|
+
var require_dist2 = __commonJS({
|
|
341
|
+
"node_modules/@sigstore/bundle/dist/index.js"(exports) {
|
|
342
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
343
|
+
exports.isBundleV01 = exports.assertBundleV02 = exports.assertBundleV01 = exports.assertBundleLatest = exports.assertBundle = exports.envelopeToJSON = exports.envelopeFromJSON = exports.bundleToJSON = exports.bundleFromJSON = exports.ValidationError = exports.isBundleWithPublicKey = exports.isBundleWithMessageSignature = exports.isBundleWithDsseEnvelope = exports.isBundleWithCertificateChain = exports.BUNDLE_V03_MEDIA_TYPE = exports.BUNDLE_V03_LEGACY_MEDIA_TYPE = exports.BUNDLE_V02_MEDIA_TYPE = exports.BUNDLE_V01_MEDIA_TYPE = exports.toMessageSignatureBundle = exports.toDSSEBundle = void 0;
|
|
344
|
+
var build_1 = require_build();
|
|
345
|
+
Object.defineProperty(exports, "toDSSEBundle", { enumerable: true, get: function() {
|
|
346
|
+
return build_1.toDSSEBundle;
|
|
347
|
+
} });
|
|
348
|
+
Object.defineProperty(exports, "toMessageSignatureBundle", { enumerable: true, get: function() {
|
|
349
|
+
return build_1.toMessageSignatureBundle;
|
|
350
|
+
} });
|
|
351
|
+
var bundle_1 = require_bundle();
|
|
352
|
+
Object.defineProperty(exports, "BUNDLE_V01_MEDIA_TYPE", { enumerable: true, get: function() {
|
|
353
|
+
return bundle_1.BUNDLE_V01_MEDIA_TYPE;
|
|
354
|
+
} });
|
|
355
|
+
Object.defineProperty(exports, "BUNDLE_V02_MEDIA_TYPE", { enumerable: true, get: function() {
|
|
356
|
+
return bundle_1.BUNDLE_V02_MEDIA_TYPE;
|
|
357
|
+
} });
|
|
358
|
+
Object.defineProperty(exports, "BUNDLE_V03_LEGACY_MEDIA_TYPE", { enumerable: true, get: function() {
|
|
359
|
+
return bundle_1.BUNDLE_V03_LEGACY_MEDIA_TYPE;
|
|
360
|
+
} });
|
|
361
|
+
Object.defineProperty(exports, "BUNDLE_V03_MEDIA_TYPE", { enumerable: true, get: function() {
|
|
362
|
+
return bundle_1.BUNDLE_V03_MEDIA_TYPE;
|
|
363
|
+
} });
|
|
364
|
+
Object.defineProperty(exports, "isBundleWithCertificateChain", { enumerable: true, get: function() {
|
|
365
|
+
return bundle_1.isBundleWithCertificateChain;
|
|
366
|
+
} });
|
|
367
|
+
Object.defineProperty(exports, "isBundleWithDsseEnvelope", { enumerable: true, get: function() {
|
|
368
|
+
return bundle_1.isBundleWithDsseEnvelope;
|
|
369
|
+
} });
|
|
370
|
+
Object.defineProperty(exports, "isBundleWithMessageSignature", { enumerable: true, get: function() {
|
|
371
|
+
return bundle_1.isBundleWithMessageSignature;
|
|
372
|
+
} });
|
|
373
|
+
Object.defineProperty(exports, "isBundleWithPublicKey", { enumerable: true, get: function() {
|
|
374
|
+
return bundle_1.isBundleWithPublicKey;
|
|
375
|
+
} });
|
|
376
|
+
var error_1 = require_error();
|
|
377
|
+
Object.defineProperty(exports, "ValidationError", { enumerable: true, get: function() {
|
|
378
|
+
return error_1.ValidationError;
|
|
379
|
+
} });
|
|
380
|
+
var serialized_1 = require_serialized();
|
|
381
|
+
Object.defineProperty(exports, "bundleFromJSON", { enumerable: true, get: function() {
|
|
382
|
+
return serialized_1.bundleFromJSON;
|
|
383
|
+
} });
|
|
384
|
+
Object.defineProperty(exports, "bundleToJSON", { enumerable: true, get: function() {
|
|
385
|
+
return serialized_1.bundleToJSON;
|
|
386
|
+
} });
|
|
387
|
+
Object.defineProperty(exports, "envelopeFromJSON", { enumerable: true, get: function() {
|
|
388
|
+
return serialized_1.envelopeFromJSON;
|
|
389
|
+
} });
|
|
390
|
+
Object.defineProperty(exports, "envelopeToJSON", { enumerable: true, get: function() {
|
|
391
|
+
return serialized_1.envelopeToJSON;
|
|
392
|
+
} });
|
|
393
|
+
var validate_1 = require_validate();
|
|
394
|
+
Object.defineProperty(exports, "assertBundle", { enumerable: true, get: function() {
|
|
395
|
+
return validate_1.assertBundle;
|
|
396
|
+
} });
|
|
397
|
+
Object.defineProperty(exports, "assertBundleLatest", { enumerable: true, get: function() {
|
|
398
|
+
return validate_1.assertBundleLatest;
|
|
399
|
+
} });
|
|
400
|
+
Object.defineProperty(exports, "assertBundleV01", { enumerable: true, get: function() {
|
|
401
|
+
return validate_1.assertBundleV01;
|
|
402
|
+
} });
|
|
403
|
+
Object.defineProperty(exports, "assertBundleV02", { enumerable: true, get: function() {
|
|
404
|
+
return validate_1.assertBundleV02;
|
|
405
|
+
} });
|
|
406
|
+
Object.defineProperty(exports, "isBundleV01", { enumerable: true, get: function() {
|
|
407
|
+
return validate_1.isBundleV01;
|
|
408
|
+
} });
|
|
409
|
+
}
|
|
410
|
+
});
|
|
411
|
+
export default require_dist2();
|