@floegence/redevplugin-contracts 0.7.26 → 1.0.0

package/dist/release-signing.js

@@ -2,19 +2,11 @@ export const rootDelegationSchemaVersion = "redevplugin.release_root_delegation.
 export const packageSignatureSchemaVersion = "redevplugin.package_signature.v1";
 export const releaseMetadataSchemaVersionV8 = "redevplugin.release_metadata.v8";
 export const releaseMetadataSchemaVersion = releaseMetadataSchemaVersionV8;
-export const sourcePolicySchemaVersion = "redevplugin.release_source_policy.v2";
+export const sourcePolicySchemaVersion = "redevplugin.release_source_policy.v3";
 export const sourcePolicyPointerSchemaVersion = "redevplugin.release_source_policy_pointer.v1";
 export const revocationSchemaVersion = "redevplugin.release_revocation.v2";
 export const revocationPointerSchemaVersion = "redevplugin.release_revocation_pointer.v1";
-export const releaseSigningLedgerEvidenceSchemaVersion = "redevplugin.release_signing_ledger_evidence.v1";
-export const signingSubjectSchemaVersion = "redevplugin.release_signing_subject.v1";
-export const signatureEnvelopeSchemaVersion = "redevplugin.release_signature_envelope.v1";
-export const signingLedgerSchemaVersion = "redevplugin.release_signing_ledger.v1";
-export const signingLedgerEntrySchemaVersion = "redevplugin.release_signing_ledger_entry.v1";
-export const signingLedgerLogLeafSchemaVersion = "redevplugin.release_signing_ledger_log_leaf.v1";
-export const signingLedgerReceiptSchemaVersion = "redevplugin.release_signing_ledger_receipt.v1";
 export const signatureAlgorithmEd25519 = "ed25519";
-export const genesisPreviousEpoch = "0";
 export const genesisPreviousDocumentSHA256 = "0".repeat(64);
 export const signingUsages = {
     rootDelegation: "redevplugin.release-signing.root-delegation.v1",
@@ -26,9 +18,8 @@ export const signingUsages = {
     revocationPointer: "redevplugin.release-signing.revocation-pointer.v1",
 };
 export const defaultSourcePolicyLimits = Object.freeze({
-    document_max_lifetime_seconds: 86400,
+    document_max_lifetime_seconds: 7776000,
     future_skew_seconds: 300,
-    activation_lease_max_seconds: 300,
     refresh_interval_max_seconds: 60,
     failure_teardown_deadline_seconds: 30,
 });
@@ -65,13 +56,10 @@ const signaturePattern = /^[A-Za-z0-9+/]{86}==$/;
 const delegatedUsageOrder = [
     "package",
     "release_metadata",
-    "host_capability_contract",
     "revocation_document",
     "revocation_pointer",
     "source_policy_document",
     "source_policy_pointer",
-    "signing_ledger",
-    "trusted_time",
 ];
 function invalidDocument() {
     throw new InvalidReleaseDocumentError();
@@ -267,20 +255,6 @@ function validateTimeRange(generatedAt, expiresAt, maximumMilliseconds = 0) {
         invalidDocument();
     }
 }
-function validateEpochChain(epoch, previousEpoch, previousDigest) {
-    if (!matchesPattern(positiveEpochPattern, epoch) || !matchesPattern(epochPattern, previousEpoch) || !matchesPattern(sha256Pattern, previousDigest)) {
-        invalidDocument();
-    }
-    if (BigInt(previousEpoch) + 1n !== BigInt(epoch))
-        invalidDocument();
-    if (previousEpoch === genesisPreviousEpoch) {
-        if (previousDigest !== genesisPreviousDocumentSHA256)
-            invalidDocument();
-    }
-    else if (previousDigest === genesisPreviousDocumentSHA256) {
-        invalidDocument();
-    }
-}
 function validateSortedIDs(values, minimum, maximum, lower = true) {
     if (!Array.isArray(values) || values.length < minimum || values.length > maximum)
         invalidDocument();
@@ -303,7 +277,8 @@ function validateRootDelegation(value, requireSignature) {
     closeRootDelegation(value);
     if (value.schema_version !== rootDelegationSchemaVersion || !matchesPattern(newIDPattern, value.source_id) || !matchesPattern(newIDPattern, value.key_id))
         invalidDocument();
-    validateEpochChain(value.root_epoch, value.previous_root_epoch, value.previous_delegation_sha256);
+    if (!matchesPattern(positiveEpochPattern, value.root_epoch))
+        invalidDocument();
     validateTimeRange(value.generated_at, value.expires_at);
     if (!Array.isArray(value.delegated_keys) || value.delegated_keys.length < 1 || value.delegated_keys.length > 32)
         invalidDocument();
@@ -321,11 +296,7 @@ function validateRootDelegation(value, requireSignature) {
                 invalidDocument();
             previousUsage = rank;
         }
-        const sourceWide = key.usages.every((usage) => usage === "signing_ledger" || usage === "trusted_time");
-        const hasSourceWide = key.usages.some((usage) => usage === "signing_ledger" || usage === "trusted_time");
-        if (hasSourceWide !== sourceWide)
-            invalidDocument();
-        validateSortedIDs(key.channels, sourceWide ? 0 : 1, sourceWide ? 0 : 16);
+        validateSortedIDs(key.channels, 1, 16);
         validateTimeRange(key.valid_from, key.valid_until);
         if (parseCanonicalTime(key.valid_until) > parseCanonicalTime(value.expires_at))
             invalidDocument();
@@ -445,13 +416,8 @@ function validReleaseMetadataUIProtocolPair(schemaVersion, uiProtocolVersion) {
     return schemaVersion === releaseMetadataSchemaVersionV8 && uiProtocolVersion === "plugin-ui-v7";
 }
 function validateCapabilityContractRef(value) {
-    if (![value.publisher_id, value.contract_id, value.signature_key_id].every((item) => matchesPattern(legacyIDPattern, item)) || !matchesPattern(semverPattern, value.contract_version))
-        invalidDocument();
-    if (!matchesPattern(epochPattern, value.signature_policy_epoch) || !matchesPattern(epochPattern, value.signature_revocation_epoch))
-        invalidDocument();
-    if (![value.artifact_ref, value.manifest_ref, value.signature_ref, value.compatibility_ref, value.generated_client_ref, value.notices_ref].every(validArtifactRef))
-        invalidDocument();
-    if (![value.artifact_sha256, value.manifest_sha256, value.signature_sha256, value.compatibility_sha256, value.generated_client_sha256, value.notices_sha256].every((item) => sha256Pattern.test(item)))
+    if (![value.publisher_id, value.contract_id].every((item) => matchesPattern(legacyIDPattern, item)) ||
+        !matchesPattern(semverPattern, value.contract_version) || !sha256Pattern.test(value.artifact_sha256))
         invalidDocument();
 }
 function validateSourcePolicy(value, requireSignature) {
@@ -459,7 +425,8 @@ function validateSourcePolicy(value, requireSignature) {
     closeSourcePolicy(value);
     if (value.schema_version !== sourcePolicySchemaVersion || !matchesPattern(newIDPattern, value.source_id) || !matchesPattern(newIDPattern, value.channel) || !matchesPattern(newIDPattern, value.key_id))
         invalidDocument();
-    validateEpochChain(value.epoch, value.previous_epoch, value.previous_document_sha256);
+    if (!matchesPattern(positiveEpochPattern, value.epoch))
+        invalidDocument();
     if (!matchesPattern(positiveEpochPattern, value.root_epoch) || !matchesPattern(epochPattern, value.minimum_revocation_epoch))
         invalidDocument();
     if (value.source_type !== "registry" && value.source_type !== "host_artifact")
@@ -483,17 +450,6 @@ function validateSourcePolicy(value, requireSignature) {
         value.active_keys.revocation_pointer,
     ])
         validateSortedIDs(keys, 1, 16);
-    validateSortedIDs(value.active_keys.host_capability_contract, 0, 16);
-    if (!Array.isArray(value.capability_publisher_scopes) || value.capability_publisher_scopes.length !== value.active_keys.host_capability_contract.length)
-        invalidDocument();
-    for (let index = 0; index < value.capability_publisher_scopes.length; index += 1) {
-        const scope = value.capability_publisher_scopes[index];
-        assertRecord(scope);
-        exactKeys(scope, ["key_id", "allowed_publishers"]);
-        if (scope.key_id !== value.active_keys.host_capability_contract[index])
-            invalidDocument();
-        validateSortedIDs(scope.allowed_publishers, 1, 1024, false);
-    }
     if (!new Set(["allow", "review_required", "block"]).has(value.install_policy))
         invalidDocument();
     if (!new Set(["dev_only", "review_required", "block"]).has(value.unsigned_policy))
@@ -502,7 +458,7 @@ function validateSourcePolicy(value, requireSignature) {
         invalidDocument();
     if (canonicalJSONString(value.limits) !== canonicalJSONString(defaultSourcePolicyLimits))
         invalidDocument();
-    validateTimeRange(value.generated_at, value.expires_at, 24 * 60 * 60 * 1000);
+    validateTimeRange(value.generated_at, value.expires_at, 90 * 24 * 60 * 60 * 1000);
     if (requireSignature)
         decodeBase64(value.signature, 64);
     else if (value.signature !== "")
@@ -513,7 +469,8 @@ function validatePointer(value, expectedSchemaVersion, requireSignature) {
     closePointer(value);
     if (value.schema_version !== expectedSchemaVersion || !matchesPattern(newIDPattern, value.source_id) || !matchesPattern(newIDPattern, value.channel) || !matchesPattern(newIDPattern, value.key_id))
         invalidDocument();
-    validateEpochChain(value.epoch, value.previous_epoch, value.previous_document_sha256);
+    if (!matchesPattern(positiveEpochPattern, value.epoch))
+        invalidDocument();
     if (!validArtifactRef(value.ref) || !sha256Pattern.test(value.document_sha256) || value.document_sha256 === genesisPreviousDocumentSHA256)
         invalidDocument();
     validateTimeRange(value.generated_at, value.expires_at, 24 * 60 * 60 * 1000);
@@ -527,7 +484,8 @@ function validateRevocation(value, requireSignature) {
     closeRevocation(value);
     if (value.schema_version !== revocationSchemaVersion || !matchesPattern(newIDPattern, value.source_id) || !matchesPattern(newIDPattern, value.channel) || !matchesPattern(newIDPattern, value.key_id))
         invalidDocument();
-    validateEpochChain(value.epoch, value.previous_epoch, value.previous_document_sha256);
+    if (!matchesPattern(positiveEpochPattern, value.epoch))
+        invalidDocument();
     if (!matchesPattern(positiveEpochPattern, value.root_epoch))
         invalidDocument();
     validateTimeRange(value.generated_at, value.expires_at, 24 * 60 * 60 * 1000);
@@ -550,181 +508,6 @@ function validateRevocation(value, requireSignature) {
     else if (value.signature !== "")
         invalidDocument();
 }
-function validateSigningLedgerEvidence(value) {
-    assertRecord(value);
-    closeSigningLedgerEvidence(value);
-    if (value.schema_version !== releaseSigningLedgerEvidenceSchemaVersion || !matchesPattern(newIDPattern, value.source_id))
-        invalidDocument();
-    if (value.channel !== undefined && !matchesPattern(newIDPattern, value.channel))
-        invalidDocument();
-    for (const digest of [
-        value.subject_identity_sha256,
-        value.signing_preimage_sha256,
-        value.signature_envelope_sha256,
-        value.receipt_sha256,
-        value.checkpoint_sha256,
-        value.inclusion_proof_sha256,
-        value.latest_proof_sha256,
-    ]) {
-        if (!sha256Pattern.test(digest))
-            invalidDocument();
-    }
-    for (const reference of [
-        value.receipt_ref,
-        value.checkpoint_ref,
-        value.inclusion_proof_ref,
-        value.latest_proof_ref,
-    ]) {
-        if (!validArtifactRef(reference))
-            invalidDocument();
-    }
-    if ((value.consistency_proof_ref === undefined) !== (value.consistency_proof_sha256 === undefined))
-        invalidDocument();
-    if (value.consistency_proof_ref !== undefined && (!validArtifactRef(value.consistency_proof_ref) || !sha256Pattern.test(value.consistency_proof_sha256)))
-        invalidDocument();
-}
-function validateSigningSubject(value) {
-    assertRecord(value);
-    closeSigningSubject(value);
-    if (value.schema_version !== signingSubjectSchemaVersion || !matchesPattern(newIDPattern, value.source_id))
-        invalidDocument();
-    if (value.usage === "root_delegation") {
-        if (!matchesPattern(positiveEpochPattern, value.root_epoch))
-            invalidDocument();
-        return;
-    }
-    if (value.usage === "package" || value.usage === "release_metadata") {
-        if (!matchesPattern(newIDPattern, value.channel) || !matchesPattern(legacyIDPattern, value.publisher_id) ||
-            !matchesPattern(legacyIDPattern, value.plugin_id) || !matchesPattern(semverPattern, value.version) ||
-            !matchesPattern(sha256Pattern, value.artifact_or_metadata_identity_sha256))
-            invalidDocument();
-        return;
-    }
-    if (["source_policy_document", "source_policy_pointer", "revocation_document", "revocation_pointer"].includes(value.usage)) {
-        if (!matchesPattern(newIDPattern, value.channel) || !matchesPattern(positiveEpochPattern, value.epoch))
-            invalidDocument();
-        return;
-    }
-    invalidDocument();
-}
-function validateSignatureEnvelope(value) {
-    assertRecord(value);
-    closeSignatureEnvelope(value);
-    if (value.schema_version !== signatureEnvelopeSchemaVersion || !matchesPattern(sha256Pattern, value.subject_identity_sha256) ||
-        !matchesPattern(sha256Pattern, value.signing_preimage_sha256) || value.algorithm !== signatureAlgorithmEd25519 ||
-        !matchesPattern(newIDPattern, value.key_id))
-        invalidDocument();
-    decodeBase64(value.signature, 64);
-}
-function validateSigningLedgerEntry(value) {
-    assertRecord(value);
-    closeSigningLedgerEntry(value);
-    if (value.schema_version !== signingLedgerEntrySchemaVersion || !matchesPattern(sha256Pattern, value.subject_identity_sha256) ||
-        !matchesPattern(sha256Pattern, value.signing_preimage_sha256) || value.algorithm !== signatureAlgorithmEd25519 ||
-        !matchesPattern(newIDPattern, value.key_id) || !Number.isSafeInteger(value.revision) || value.revision < 1)
-        invalidDocument();
-    validateSigningSubject(value.subject);
-    const reservedAt = parseCanonicalTime(value.reserved_at);
-    if (value.state === "reserved") {
-        if (value.signature_envelope !== undefined || value.signature_envelope_sha256 !== undefined || value.finalized_at !== undefined ||
-            value.failure_code !== undefined || value.failed_at !== undefined)
-            invalidDocument();
-        return;
-    }
-    if (value.state === "finalized") {
-        if (value.signature_envelope === undefined || !matchesPattern(sha256Pattern, value.signature_envelope_sha256) ||
-            value.finalized_at === undefined || value.failure_code !== undefined || value.failed_at !== undefined)
-            invalidDocument();
-        validateSignatureEnvelope(value.signature_envelope);
-        if (value.signature_envelope.subject_identity_sha256 !== value.subject_identity_sha256 ||
-            value.signature_envelope.signing_preimage_sha256 !== value.signing_preimage_sha256 ||
-            value.signature_envelope.algorithm !== value.algorithm || value.signature_envelope.key_id !== value.key_id ||
-            parseCanonicalTime(value.finalized_at) < reservedAt)
-            invalidDocument();
-        return;
-    }
-    if (value.state === "terminal_failed") {
-        if (value.signature_envelope !== undefined || value.signature_envelope_sha256 !== undefined || value.finalized_at !== undefined ||
-            value.failure_code === undefined || !["signer_rejected", "subject_conflict", "ledger_rejected"].includes(value.failure_code) ||
-            value.failed_at === undefined || parseCanonicalTime(value.failed_at) < reservedAt)
-            invalidDocument();
-        return;
-    }
-    invalidDocument();
-}
-function validateSigningLedgerLogLeaf(value) {
-    assertRecord(value);
-    closeSigningLedgerLogLeaf(value);
-    if (value.schema_version !== signingLedgerLogLeafSchemaVersion || !matchesPattern(newIDPattern, value.source_id) ||
-        (value.channel !== undefined && !matchesPattern(newIDPattern, value.channel)) ||
-        !matchesPattern(sha256Pattern, value.subject_identity_sha256) || !matchesPattern(sha256Pattern, value.signing_preimage_sha256) ||
-        !matchesPattern(sha256Pattern, value.signature_envelope_sha256) || !Number.isSafeInteger(value.sequence) || value.sequence < 1)
-        invalidDocument();
-}
-function validateSigningLedgerCheckpoint(value) {
-    assertRecord(value);
-    closeSigningLedgerCheckpoint(value);
-    if (value.schema_version !== signingLedgerSchemaVersion || value.kind !== "checkpoint" || !matchesPattern(newIDPattern, value.log_id) ||
-        !Number.isSafeInteger(value.tree_size) || value.tree_size < 1 || !matchesPattern(sha256Pattern, value.log_root_hash) ||
-        !matchesPattern(sha256Pattern, value.latest_map_root_hash) || !matchesPattern(newIDPattern, value.key_id))
-        invalidDocument();
-    parseCanonicalTime(value.checkpoint_time);
-    decodeBase64(value.signature, 64);
-}
-function validateSigningLedgerReceipt(value) {
-    assertRecord(value);
-    closeSigningLedgerReceipt(value);
-    if (value.schema_version !== signingLedgerReceiptSchemaVersion || !matchesPattern(newIDPattern, value.log_id) ||
-        !matchesPattern(newIDPattern, value.source_id) || (value.channel !== undefined && !matchesPattern(newIDPattern, value.channel)) ||
-        !matchesPattern(sha256Pattern, value.subject_identity_sha256) || !matchesPattern(sha256Pattern, value.signing_preimage_sha256) ||
-        !matchesPattern(sha256Pattern, value.signature_envelope_sha256) || !Number.isSafeInteger(value.sequence) || value.sequence < 1 ||
-        !Number.isSafeInteger(value.leaf_index) || value.leaf_index !== value.sequence - 1 || !Number.isSafeInteger(value.tree_size) ||
-        value.tree_size < value.sequence || !matchesPattern(sha256Pattern, value.log_root_hash) ||
-        !matchesPattern(sha256Pattern, value.latest_map_root_hash) || !matchesPattern(sha256Pattern, value.checkpoint_sha256) ||
-        !matchesPattern(newIDPattern, value.key_id))
-        invalidDocument();
-    parseCanonicalTime(value.checkpoint_time);
-    decodeBase64(value.signature, 64);
-}
-function validateLedgerNodes(value, exact) {
-    if (!Array.isArray(value) || (exact === undefined ? value.length > 64 : value.length !== exact) ||
-        value.some((node) => !matchesPattern(sha256Pattern, node)))
-        invalidDocument();
-}
-function validateSigningLedgerInclusionProof(value) {
-    assertRecord(value);
-    closeSigningLedgerInclusionProof(value);
-    if (value.schema_version !== signingLedgerSchemaVersion || value.kind !== "inclusion_proof" || !matchesPattern(newIDPattern, value.log_id) ||
-        !Number.isSafeInteger(value.leaf_index) || value.leaf_index < 0 || !Number.isSafeInteger(value.tree_size) ||
-        value.tree_size < 1 || value.leaf_index >= value.tree_size)
-        invalidDocument();
-    validateLedgerNodes(value.nodes);
-}
-function validateSigningLedgerLatestProof(value) {
-    assertRecord(value);
-    closeSigningLedgerLatestProof(value);
-    if (value.schema_version !== signingLedgerSchemaVersion || value.kind !== "latest_proof" || !matchesPattern(newIDPattern, value.log_id) ||
-        !matchesPattern(sha256Pattern, value.subject_identity_sha256) || typeof value.present !== "boolean")
-        invalidDocument();
-    validateLedgerNodes(value.siblings, 256);
-    if (value.present) {
-        if (!Number.isSafeInteger(value.sequence) || value.sequence < 1 || !matchesPattern(sha256Pattern, value.signing_preimage_sha256) ||
-            !matchesPattern(sha256Pattern, value.signature_envelope_sha256))
-            invalidDocument();
-    }
-    else if (value.sequence !== undefined || value.signing_preimage_sha256 !== undefined || value.signature_envelope_sha256 !== undefined) {
-        invalidDocument();
-    }
-}
-function validateSigningLedgerConsistencyProof(value) {
-    assertRecord(value);
-    closeSigningLedgerConsistencyProof(value);
-    if (value.schema_version !== signingLedgerSchemaVersion || value.kind !== "consistency_proof" || !matchesPattern(newIDPattern, value.log_id) ||
-        !Number.isSafeInteger(value.old_tree_size) || value.old_tree_size < 1 || !Number.isSafeInteger(value.new_tree_size) ||
-        value.new_tree_size < value.old_tree_size)
-        invalidDocument();
-    validateLedgerNodes(value.nodes);
-}
 function decodeCanonicalDocument(raw, close, validate) {
     const bytes = typeof raw === "string" ? textEncoder.encode(raw) : raw;
     if (!(bytes instanceof Uint8Array) || bytes.length < 1 || bytes.length > maximumDocumentBytes)
@@ -751,7 +534,7 @@ function decodeCanonicalDocument(raw, close, validate) {
     return deepFreeze(cloneJSON(parsed));
 }
 function closeRootDelegation(value) {
-    exactKeys(value, ["schema_version", "source_id", "root_epoch", "previous_root_epoch", "previous_delegation_sha256", "generated_at", "expires_at", "delegated_keys", "key_id", "signature"]);
+    exactKeys(value, ["schema_version", "source_id", "root_epoch", "generated_at", "expires_at", "delegated_keys", "key_id", "signature"]);
     if (!Array.isArray(value.delegated_keys))
         invalidDocument();
     for (const item of value.delegated_keys) {
@@ -788,7 +571,7 @@ function closeReleaseMetadata(value) {
                     assertRecord(requirement);
                     exactKeys(requirement, ["capability_id", "capability_version", "contract"]);
                     assertRecord(requirement.contract);
-                    exactKeys(requirement.contract, ["publisher_id", "contract_id", "contract_version", "artifact_ref", "artifact_sha256", "manifest_ref", "manifest_sha256", "signature_ref", "signature_sha256", "signature_key_id", "signature_policy_epoch", "signature_revocation_epoch", "compatibility_ref", "compatibility_sha256", "generated_client_ref", "generated_client_sha256", "notices_ref", "notices_sha256"]);
+                    exactKeys(requirement.contract, ["publisher_id", "contract_id", "contract_version", "artifact_sha256"]);
                 }
             }
         }
@@ -801,17 +584,17 @@ function closeReleaseMetadata(value) {
         assertRecord(value.metadata);
 }
 function closeSourcePolicy(value) {
-    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "previous_epoch", "previous_document_sha256", "root_epoch", "source_type", "source_class", "allowed_publishers", "allowed_artifact_hosts", "active_keys", "capability_publisher_scopes", "require_signature", "install_policy", "unsigned_policy", "downgrade_policy", "minimum_revocation_epoch", "limits", "generated_at", "expires_at", "key_id", "signature"]);
+    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "root_epoch", "source_type", "source_class", "allowed_publishers", "allowed_artifact_hosts", "active_keys", "require_signature", "install_policy", "unsigned_policy", "downgrade_policy", "minimum_revocation_epoch", "limits", "generated_at", "expires_at", "key_id", "signature"]);
     assertRecord(value.active_keys);
-    exactKeys(value.active_keys, ["package", "release_metadata", "host_capability_contract", "source_policy_pointer", "revocation_document", "revocation_pointer"]);
+    exactKeys(value.active_keys, ["package", "release_metadata", "source_policy_pointer", "revocation_document", "revocation_pointer"]);
     assertRecord(value.limits);
-    exactKeys(value.limits, ["document_max_lifetime_seconds", "future_skew_seconds", "activation_lease_max_seconds", "refresh_interval_max_seconds", "failure_teardown_deadline_seconds"]);
+    exactKeys(value.limits, ["document_max_lifetime_seconds", "future_skew_seconds", "refresh_interval_max_seconds", "failure_teardown_deadline_seconds"]);
 }
 function closePointer(value) {
-    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "previous_epoch", "previous_document_sha256", "ref", "document_sha256", "generated_at", "expires_at", "key_id", "signature"]);
+    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "ref", "document_sha256", "generated_at", "expires_at", "key_id", "signature"]);
 }
 function closeRevocation(value) {
-    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "previous_epoch", "previous_document_sha256", "root_epoch", "generated_at", "expires_at", "revoked_key_ids", "revoked_releases", "key_id", "signature"]);
+    exactKeys(value, ["schema_version", "source_id", "channel", "epoch", "root_epoch", "generated_at", "expires_at", "revoked_key_ids", "revoked_releases", "key_id", "signature"]);
     if (!Array.isArray(value.revoked_releases))
         invalidDocument();
     for (const item of value.revoked_releases) {
@@ -819,77 +602,6 @@ function closeRevocation(value) {
         exactKeys(item, ["publisher_id", "plugin_id", "version", "release_metadata_sha256", "revoked_at"]);
     }
 }
-function closeSigningLedgerEvidence(value) {
-    exactOptionalKeys(value, [
-        "schema_version",
-        "source_id",
-        "subject_identity_sha256",
-        "signing_preimage_sha256",
-        "signature_envelope_sha256",
-        "receipt_ref",
-        "receipt_sha256",
-        "checkpoint_ref",
-        "checkpoint_sha256",
-        "inclusion_proof_ref",
-        "inclusion_proof_sha256",
-        "latest_proof_ref",
-        "latest_proof_sha256",
-    ], ["channel", "consistency_proof_ref", "consistency_proof_sha256"]);
-}
-function closeSigningSubject(value) {
-    if (value.usage === "root_delegation") {
-        exactKeys(value, ["schema_version", "usage", "source_id", "root_epoch"]);
-    }
-    else if (value.usage === "package" || value.usage === "release_metadata") {
-        exactKeys(value, ["schema_version", "usage", "source_id", "channel", "publisher_id", "plugin_id", "version", "artifact_or_metadata_identity_sha256"]);
-    }
-    else {
-        exactKeys(value, ["schema_version", "usage", "source_id", "channel", "epoch"]);
-    }
-}
-function closeSignatureEnvelope(value) {
-    exactKeys(value, ["schema_version", "subject_identity_sha256", "signing_preimage_sha256", "algorithm", "key_id", "signature"]);
-}
-function closeSigningLedgerEntry(value) {
-    exactOptionalKeys(value, [
-        "schema_version", "state", "subject", "subject_identity_sha256", "signing_preimage_sha256",
-        "algorithm", "key_id", "revision", "reserved_at",
-    ], ["signature_envelope", "signature_envelope_sha256", "finalized_at", "failure_code", "failed_at"]);
-    assertRecord(value.subject);
-    closeSigningSubject(value.subject);
-    if (value.signature_envelope !== undefined) {
-        assertRecord(value.signature_envelope);
-        closeSignatureEnvelope(value.signature_envelope);
-    }
-}
-function closeSigningLedgerLogLeaf(value) {
-    exactOptionalKeys(value, [
-        "schema_version", "source_id", "subject_identity_sha256", "signing_preimage_sha256", "signature_envelope_sha256", "sequence",
-    ], ["channel"]);
-}
-function closeSigningLedgerCheckpoint(value) {
-    exactKeys(value, [
-        "schema_version", "kind", "log_id", "tree_size", "log_root_hash", "latest_map_root_hash", "checkpoint_time", "key_id", "signature",
-    ]);
-}
-function closeSigningLedgerReceipt(value) {
-    exactOptionalKeys(value, [
-        "schema_version", "log_id", "source_id", "subject_identity_sha256", "signing_preimage_sha256",
-        "signature_envelope_sha256", "sequence", "leaf_index", "tree_size", "log_root_hash", "latest_map_root_hash",
-        "checkpoint_sha256", "checkpoint_time", "key_id", "signature",
-    ], ["channel"]);
-}
-function closeSigningLedgerInclusionProof(value) {
-    exactKeys(value, ["schema_version", "kind", "log_id", "leaf_index", "tree_size", "nodes"]);
-}
-function closeSigningLedgerLatestProof(value) {
-    exactOptionalKeys(value, ["schema_version", "kind", "log_id", "subject_identity_sha256", "present", "siblings"], [
-        "sequence", "signing_preimage_sha256", "signature_envelope_sha256",
-    ]);
-}
-function closeSigningLedgerConsistencyProof(value) {
-    exactKeys(value, ["schema_version", "kind", "log_id", "old_tree_size", "new_tree_size", "nodes"]);
-}
 export function buildRootDelegation(input, signature) {
     requireSignatureBytes(signature);
     const document = {
@@ -1087,61 +799,6 @@ export function decodeRevocation(raw) {
 export function decodeRevocationPointer(raw) {
     return decodeCanonicalDocument(raw, closePointer, (value) => validatePointer(value, revocationPointerSchemaVersion, true));
 }
-export function decodeSigningLedgerEvidence(raw) {
-    const bytes = typeof raw === "string" ? textEncoder.encode(raw) : raw;
-    if (!(bytes instanceof Uint8Array) || bytes.length > 64 * 1024)
-        invalidDocument();
-    return decodeCanonicalDocument(bytes, closeSigningLedgerEvidence, validateSigningLedgerEvidence);
-}
-export function canonicalSigningSubject(value) {
-    validateSigningSubject(value);
-    return canonicalJSON(value);
-}
-export function decodeSigningSubject(raw) {
-    return decodeCanonicalDocument(raw, closeSigningSubject, validateSigningSubject);
-}
-export function canonicalSignatureEnvelope(value) {
-    validateSignatureEnvelope(value);
-    return canonicalJSON(value);
-}
-export function decodeSignatureEnvelope(raw) {
-    return decodeCanonicalDocument(raw, closeSignatureEnvelope, validateSignatureEnvelope);
-}
-export function canonicalSigningLedgerEntry(value) {
-    validateSigningLedgerEntry(value);
-    return canonicalJSON(value);
-}
-export function decodeSigningLedgerEntry(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerEntry, validateSigningLedgerEntry);
-}
-export async function verifySigningLedgerEntryBindings(value) {
-    validateSigningLedgerEntry(value);
-    if (await sha256Hex(canonicalSigningSubject(value.subject)) !== value.subject_identity_sha256)
-        invalidDocument();
-    if (value.state === "finalized") {
-        if (value.signature_envelope === undefined || value.signature_envelope_sha256 === undefined ||
-            await sha256Hex(canonicalSignatureEnvelope(value.signature_envelope)) !== value.signature_envelope_sha256)
-            invalidDocument();
-    }
-}
-export function decodeSigningLedgerLogLeaf(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerLogLeaf, validateSigningLedgerLogLeaf);
-}
-export function decodeSigningLedgerCheckpoint(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerCheckpoint, validateSigningLedgerCheckpoint);
-}
-export function decodeSigningLedgerReceipt(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerReceipt, validateSigningLedgerReceipt);
-}
-export function decodeSigningLedgerInclusionProof(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerInclusionProof, validateSigningLedgerInclusionProof);
-}
-export function decodeSigningLedgerLatestProof(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerLatestProof, validateSigningLedgerLatestProof);
-}
-export function decodeSigningLedgerConsistencyProof(raw) {
-    return decodeCanonicalDocument(raw, closeSigningLedgerConsistencyProof, validateSigningLedgerConsistencyProof);
-}
 export function createEd25519Verifier(publicKeys, subtle) {
     const selectedSubtle = subtle ?? globalThis.crypto?.subtle;
     return async (request) => {
@@ -1190,13 +847,6 @@ async function verifyRaw(usage, keyID, preimage, signature, verifier) {
 function toArrayBuffer(value) {
     return Uint8Array.from(value).buffer;
 }
-async function sha256Hex(value) {
-    const subtle = globalThis.crypto?.subtle;
-    if (subtle === undefined)
-        invalidDocument();
-    const digest = new Uint8Array(await subtle.digest("SHA-256", toArrayBuffer(value)));
-    return Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 function unsignedDocument(value) {
     const input = cloneJSON(value);
     delete input.schema_version;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/redevplugin-contracts",
-  "version": "0.7.26",
+  "version": "1.0.0",
   "description": "Embedded ReDevPlugin machine contracts and canonical release-signing APIs",
   "license": "MIT",
   "type": "module",
@@ -27,6 +27,6 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "tsc -p tsconfig.test.json && node --test dist-test/test/*.js"
+    "test": "node ../../scripts/clean_typescript_test_output.mjs dist-test && tsc -p tsconfig.test.json && node --test dist-test/test/*.js"
   }
 }