@floegence/redevplugin-contracts 2.0.10 → 3.0.0

package/README.md

@@ -1,10 +1,11 @@
 # @floegence/redevplugin-contracts
 
-This opt-in package exposes the immutable ReDevPlugin machine-contract registry,
-contract bodies, hashes, and platform package set. It also provides typed,
-domain-separated canonical release-signing DTOs, preimage builders, strict
-decoders, and browser-compatible Ed25519 verifier adapters.
+This opt-in package provides typed, domain-separated canonical release-signing
+DTOs, preimage builders, strict decoders, browser-compatible Ed25519 verifier
+adapters, and verified presentation-evidence types.
 
-Ordinary ReDevPlugin UI imports do not load the raw contract bodies. Host
-products choose their own trusted keys and policy; this package owns only the
-host-neutral wire, canonicalization, and signature-verification request shape.
+Canonical machine contracts ship as exact artifacts named by the signed
+`PlatformReleaseManifest`; this npm package does not embed a second registry or
+package-set index. Host products choose their own trusted keys and policy. This
+package owns only host-neutral canonicalization, verification request shapes,
+and presentation evidence.

package/dist/index.d.ts

@@ -1,275 +1,2 @@
-import { generatedContractArtifacts, generatedRegistryContract } from "./contracts.gen.js";
 export * from "./release-signing.js";
 export * from "./presentation.js";
-export type ContractID = (typeof generatedContractArtifacts)[number]["id"] | typeof generatedRegistryContract.id;
-export type Contract = Readonly<{
-    id: ContractID;
-    path: string;
-    version: string;
-    sha256: string;
-    body: string;
-}>;
-export declare class UnknownContractError extends RangeError {
-    readonly id: string;
-    constructor(id: string);
-}
-export declare const contractArtifacts: readonly Contract[];
-export declare const registryContract: Contract;
-export declare const contractRegistry: {
-    readonly schema_version: "redevplugin.contract_registry.v2";
-    readonly registry_version: "contract-registry-v2";
-    readonly artifacts: readonly [{
-        readonly id: "compatibility-manifest-schema";
-        readonly path: "spec/plugin/compatibility-manifest-v20.schema.json";
-        readonly version: "compatibility-manifest-v20";
-        readonly sha256: "8ace15ee3f0bb05e5cdd3449385dd498e37f5fb2e22a67302efb5efeaee1aa02";
-    }, {
-        readonly id: "contract-registry-schema";
-        readonly path: "spec/plugin/contract-registry-v2.schema.json";
-        readonly version: "contract-registry-v2";
-        readonly sha256: "92ffee62b7954eecdc1ce0cf364c1f719060a19aec5d997c1b1493362e941367";
-    }, {
-        readonly id: "error-codes-schema";
-        readonly path: "spec/plugin/error-codes-v8.schema.json";
-        readonly version: "error-codes-v8";
-        readonly sha256: "5ec127f0fdd6e749d8ee342e53796acd04d1c220fb03cca462bd5222c57b5944";
-    }, {
-        readonly id: "external-signer-request-schema";
-        readonly path: "spec/plugin/external-signer-request-v1.schema.json";
-        readonly version: "external-signer-request-v1";
-        readonly sha256: "56884e9bb0b00d07fe7e8c52acfc33a4a7bab54f8a02d504f35b00bab42a03fb";
-    }, {
-        readonly id: "external-signer-response-schema";
-        readonly path: "spec/plugin/external-signer-response-v1.schema.json";
-        readonly version: "external-signer-response-v1";
-        readonly sha256: "b3b6d2b3dfe4f9bb680387e4c3a8010faef91d2d12fe28e76e51d5d84703a047";
-    }, {
-        readonly id: "host-capability-contract-schema";
-        readonly path: "spec/plugin/host-capability-contract-v1.schema.json";
-        readonly version: "host-capability-contract-v1";
-        readonly sha256: "4816f59ac0819d02fb05ddd48f2ac12a2d2103a8e15d5257ca8b7d5188ab21a4";
-    }, {
-        readonly id: "host-capability-pin-schema";
-        readonly path: "spec/plugin/host-capability-pin-v1.schema.json";
-        readonly version: "host-capability-pin-v1";
-        readonly sha256: "23591639475c485134c842cae5e53a679dde1b30374a6430ce6e4827be4d18ed";
-    }, {
-        readonly id: "iframe-bridge-schema";
-        readonly path: "spec/plugin/bridge-v7.schema.json";
-        readonly version: "bridge-v7";
-        readonly sha256: "5a6e7307f1649eb70d13e83e5d16177458957bffb3262b9299b4cf6d443e284a";
-    }, {
-        readonly id: "manifest-schema";
-        readonly path: "spec/plugin/manifest-v9.schema.json";
-        readonly version: "manifest-v9";
-        readonly sha256: "d8b0fc348179a1a9af81f152897bad1891b1f8b7a7a4448c0a4e54e9883f1322";
-    }, {
-        readonly id: "network-grant-schema";
-        readonly path: "spec/plugin/network-grant-v2.schema.json";
-        readonly version: "network-grant-v2";
-        readonly sha256: "5fc1cfc3469a992e551fd392fab982abb6f95e456a1cb768ceca137f7c693abc";
-    }, {
-        readonly id: "opaque-surface-document-schema";
-        readonly path: "spec/plugin/opaque-surface-document-v3.schema.json";
-        readonly version: "opaque-surface-document-v3";
-        readonly sha256: "63419ff5b5a8890e14f97ca29aaae175b93daff61d4567c5bdff7f6e6a9e7450";
-    }, {
-        readonly id: "opaque-surface-transport-schema";
-        readonly path: "spec/plugin/opaque-surface-transport-v6.schema.json";
-        readonly version: "opaque-surface-transport-v6";
-        readonly sha256: "8f2af2669edc9413020c26765ee3f1986ef63a7d0803466861d8cdae3977ccff";
-    }, {
-        readonly id: "owner-scope-inventory-registry";
-        readonly path: "spec/plugin/owner-scope-inventories-v1.json";
-        readonly version: "owner-scope-inventory-registry-v1";
-        readonly sha256: "f655313a641368383b3d84b6ea4f6a2a2ef42a44a4dd23f71211361c9c2e0505";
-    }, {
-        readonly id: "owner-scope-inventory-schema";
-        readonly path: "spec/plugin/owner-scope-inventory-v1.schema.json";
-        readonly version: "owner-scope-inventory-v1";
-        readonly sha256: "21dc4980103f3a36f4252ce141d7350476ec00968e8a320695e450274e928be1";
-    }, {
-        readonly id: "owner-scope-migration-schema";
-        readonly path: "spec/plugin/owner-scope-migration-v1.schema.json";
-        readonly version: "owner-scope-migration-v1";
-        readonly sha256: "497fff8a09d48fe195c18d13ff05ca6c9f8406f6215588901cb6d89315b713eb";
-    }, {
-        readonly id: "owner-scope-root-recovery-schema";
-        readonly path: "spec/plugin/owner-scope-root-recovery-v1.schema.json";
-        readonly version: "owner-scope-root-recovery-v1";
-        readonly sha256: "81b961a9933d129c8f9119e3091226039ffbc0b4721116a4811f9785bebf9d64";
-    }, {
-        readonly id: "package-signature-schema";
-        readonly path: "spec/plugin/package-signature-v1.schema.json";
-        readonly version: "package-signature-v1";
-        readonly sha256: "13951c0f6831ba28647774368c76a817868aeb7984628e2cf3dc4ad1b54f8284";
-    }, {
-        readonly id: "performance-contract";
-        readonly path: "spec/plugin/performance-contract-v4.json";
-        readonly version: "performance-contract-v4";
-        readonly sha256: "08830053b38f0f8466c4e9e608fd7f21e24175063ec02307543fbd8adfb5692e";
-    }, {
-        readonly id: "performance-evidence-schema";
-        readonly path: "spec/plugin/performance-evidence-v4.schema.json";
-        readonly version: "performance-evidence-v4";
-        readonly sha256: "f51ba9d425f0e40bc4f2db7ed26454e7575b14ffb6937a06dc01b8e7a66b3f61";
-    }, {
-        readonly id: "platform-package-publication-schema";
-        readonly path: "spec/plugin/platform-package-publication-v2.schema.json";
-        readonly version: "platform-package-publication-v2";
-        readonly sha256: "1cc7a342b7dda8533324764c7f29fa7a3ca24a93f6015e7a18a17539febd538a";
-    }, {
-        readonly id: "platform-package-set-schema";
-        readonly path: "spec/plugin/platform-package-set-v3.schema.json";
-        readonly version: "platform-package-set-v3";
-        readonly sha256: "8acba305f9df90be10cca516b98a598efc9a4bffd0e3c2915d78385e18397b88";
-    }, {
-        readonly id: "plugin-platform-openapi";
-        readonly path: "spec/openapi/plugin-platform-v17.yaml";
-        readonly version: "plugin-platform-v17";
-        readonly sha256: "7c3f82c13737ad04882a1dd6ca4577f13f9a2249135c647c859e8c77059db131";
-    }, {
-        readonly id: "presentation-icon-evidence-schema";
-        readonly path: "spec/plugin/presentation-icon-evidence-v1.schema.json";
-        readonly version: "presentation-icon-evidence-v1";
-        readonly sha256: "0b302ff651bec9447637dd08b672d2371fcf383c5d9505e885955aa1b607ec15";
-    }, {
-        readonly id: "presentation-locale-fixture";
-        readonly path: "spec/plugin/presentation-locale-fixtures-v1.json";
-        readonly version: "presentation-locale-fixtures-v1";
-        readonly sha256: "cbb4c0188d020b5fbde9a0c2c33b3677d21cc64c0f0297b7f6f3f6c0efabc40e";
-    }, {
-        readonly id: "process-containment-schema";
-        readonly path: "spec/plugin/process-containment-v1.schema.json";
-        readonly version: "process-containment-v1";
-        readonly sha256: "930ea44b1f62361706e994649e84f62af0a6418b77a661ae9bf9c10f1398e3fc";
-    }, {
-        readonly id: "public-api-catalog";
-        readonly path: "spec/plugin/public-api-v1.json";
-        readonly version: "public-api-v1";
-        readonly sha256: "562a80933bb079abf082dc354e4ff206c8a00b6670be5d17ef5d191a9c52fc75";
-    }, {
-        readonly id: "publisher-release-ref-schema";
-        readonly path: "spec/plugin/publisher-release-ref-v1.schema.json";
-        readonly version: "publisher-release-ref-v1";
-        readonly sha256: "f68241937dc291b1f660c2c184bd60a7058a4471d2966bd7954ba574c84fe726";
-    }, {
-        readonly id: "quarantine-cleanup-schema";
-        readonly path: "spec/plugin/quarantine-cleanup-v1.schema.json";
-        readonly version: "quarantine-cleanup-v1";
-        readonly sha256: "0aced01a8d409953d5075a799ac273cae79e285ac82debe93ac4d8b706571ad1";
-    }, {
-        readonly id: "release-metadata-schema";
-        readonly path: "spec/plugin/release-metadata-v8.schema.json";
-        readonly version: "release-metadata-v8";
-        readonly sha256: "ad8888e6b5673786ea0fc82475be92835c3b177b685cca5bb3efd936d461b215";
-    }, {
-        readonly id: "release-publisher-config-schema";
-        readonly path: "spec/plugin/release-publisher-config-v1.schema.json";
-        readonly version: "release-publisher-config-v1";
-        readonly sha256: "47d782062652b85a77dc67a98c8859f2f1dc598d4496df13ca70c4ceb02df227";
-    }, {
-        readonly id: "release-revocation-pointer-schema";
-        readonly path: "spec/plugin/release-revocation-pointer-v2.schema.json";
-        readonly version: "release-revocation-pointer-v2";
-        readonly sha256: "51ced7ca790d7d3d3dcb2e65faf3a3a74713ccefe7b2a5b97355a0b3226bdf34";
-    }, {
-        readonly id: "release-revocation-schema";
-        readonly path: "spec/plugin/release-revocation-v3.schema.json";
-        readonly version: "release-revocation-v3";
-        readonly sha256: "930d2729719f5f44de108df23e9efbbae17f7a3072963c1c5471197b189aa8d9";
-    }, {
-        readonly id: "release-root-delegation-schema";
-        readonly path: "spec/plugin/release-root-delegation-v1.schema.json";
-        readonly version: "release-root-delegation-v1";
-        readonly sha256: "f46249f9d51610b7a8401adc4ed04c098adaad408f35661b092f8d67767e21f2";
-    }, {
-        readonly id: "release-source-policy-pointer-schema";
-        readonly path: "spec/plugin/release-source-policy-pointer-v2.schema.json";
-        readonly version: "release-source-policy-pointer-v2";
-        readonly sha256: "a4b2ba0909a633cfd0a365dff87ca1b6eaf6df53ac38b4d2b458d7ea85da6dd1";
-    }, {
-        readonly id: "release-source-policy-schema";
-        readonly path: "spec/plugin/release-source-policy-v3.schema.json";
-        readonly version: "release-source-policy-v3";
-        readonly sha256: "9b6964cbbaeab6400ab25ff3da6fca891b9833c7f644f56367b420382d096244";
-    }, {
-        readonly id: "resource-scope-schema";
-        readonly path: "spec/plugin/resource-scope-v1.schema.json";
-        readonly version: "resource-scope-v1";
-        readonly sha256: "e6021bd576c7220ad5536645a7ad8e57ee7aeb9901c31a89444fa6b695d8dc6f";
-    }, {
-        readonly id: "runtime-admission-schema";
-        readonly path: "spec/plugin/runtime-admission-v1.schema.json";
-        readonly version: "runtime-admission-v1";
-        readonly sha256: "bee7b149876447d663a4099dbd71e71fa97f8ff80ddf4e12cbfba951a47c4beb";
-    }, {
-        readonly id: "runtime-descriptor-schema";
-        readonly path: "spec/plugin/runtime-descriptor-v3.schema.json";
-        readonly version: "runtime-descriptor-v3";
-        readonly sha256: "c95c9126c0bbb4b5f697114d4e11d7107d1bebea56d700d3549d00812e7c3e97";
-    }, {
-        readonly id: "runtime-exec-journal-schema";
-        readonly path: "spec/plugin/runtime-exec-journal-v1.schema.json";
-        readonly version: "runtime-exec-journal-v1";
-        readonly sha256: "2bddbba383843b8ebc1554009909f0bb25e98616be763826a697cb0f408870d2";
-    }, {
-        readonly id: "rust-ipc-schema";
-        readonly path: "spec/plugin/ipc-v7.schema.json";
-        readonly version: "rust-ipc-v7";
-        readonly sha256: "1e1c5b6414030a0c7ffa6f4356f95e2f78f339b9b4dff45bb3691931316d9502";
-    }, {
-        readonly id: "session-scope-schema";
-        readonly path: "spec/plugin/session-scope-v1.schema.json";
-        readonly version: "session-scope-v1";
-        readonly sha256: "38044d65de36ce5219929ac4080547660734a7c6bb4d26d9b90e5838b1db331a";
-    }, {
-        readonly id: "target-classifier-fixture";
-        readonly path: "spec/plugin/target-classifier-v2.json";
-        readonly version: "target-classifier-v2";
-        readonly sha256: "ae7336cce77a2e820f96f1cc309b93f8442c932dcebec25e3890d31cd098e2d1";
-    }, {
-        readonly id: "token-ticket-schema";
-        readonly path: "spec/plugin/token-ticket-v4.schema.json";
-        readonly version: "token-ticket-v4";
-        readonly sha256: "1576e35e4e06ba67c2fdc038934c5d5184fd1224adbd75c9f8eaf6a144ade238";
-    }, {
-        readonly id: "wasm-worker-schema";
-        readonly path: "spec/plugin/wasm-worker-v2.schema.json";
-        readonly version: "redevplugin-wasm-worker-v2";
-        readonly sha256: "00bf123f3a9ed932de4b71c180e2a5c34af0f82050defb271fedec42cf217902";
-    }, {
-        readonly id: "worker-invocation-schema";
-        readonly path: "spec/plugin/worker-invocation-v3.schema.json";
-        readonly version: "worker-invocation-v3";
-        readonly sha256: "f75b5b6ea0f5936e15f84a76d9b496690d7e1b7da7a05948ad26a88cc1360847";
-    }];
-};
-export declare const packageSet: {
-    readonly schema_version: "redevplugin.platform_package_set.v3";
-    readonly platform_version: "2.0.10";
-    readonly go_module: {
-        readonly module: "github.com/floegence/redevplugin/v2";
-        readonly version: "v2.0.10";
-    };
-    readonly npm_packages: readonly [{
-        readonly name: "@floegence/redevplugin-contracts";
-        readonly version: "2.0.10";
-    }, {
-        readonly name: "@floegence/redevplugin-ui";
-        readonly version: "2.0.10";
-    }];
-    readonly rust_crates: readonly [{
-        readonly name: "redevplugin-runtime";
-        readonly version: "2.0.10";
-        readonly role: "runtime";
-    }, {
-        readonly name: "redevplugin-worker-sdk";
-        readonly version: "2.0.10";
-        readonly role: "worker_sdk";
-    }];
-    readonly contract_registry_version: "contract-registry-v2";
-    readonly contract_set_sha256: "f6cc158815ec2df3499681caf38b3b3bad8deea291ffffae6558fc1f5474d709";
-};
-export declare const contractSetSHA256: "f6cc158815ec2df3499681caf38b3b3bad8deea291ffffae6558fc1f5474d709";
-export declare function getContract(id: ContractID): Contract;

package/dist/index.js

@@ -1,34 +1,2 @@
-import { generatedContractArtifacts, generatedContractRegistry, generatedContractSetSHA256, generatedPackageSet, generatedRegistryContract, } from "./contracts.gen.js";
 export * from "./release-signing.js";
 export * from "./presentation.js";
-export class UnknownContractError extends RangeError {
-    id;
-    constructor(id) {
-        super(`contract id ${JSON.stringify(id)} is unknown`);
-        this.name = "UnknownContractError";
-        this.id = id;
-    }
-}
-function deepFreeze(value) {
-    if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
-        for (const nested of Object.values(value))
-            deepFreeze(nested);
-        Object.freeze(value);
-    }
-    return value;
-}
-export const contractArtifacts = deepFreeze(generatedContractArtifacts);
-export const registryContract = deepFreeze(generatedRegistryContract);
-export const contractRegistry = deepFreeze(generatedContractRegistry);
-export const packageSet = deepFreeze(generatedPackageSet);
-export const contractSetSHA256 = generatedContractSetSHA256;
-const contractsByID = new Map();
-for (const contract of contractArtifacts)
-    contractsByID.set(contract.id, contract);
-contractsByID.set(registryContract.id, registryContract);
-export function getContract(id) {
-    const contract = contractsByID.get(id);
-    if (contract === undefined)
-        throw new UnknownContractError(id);
-    return contract;
-}

package/dist/release-signing.d.ts

@@ -1,11 +1,10 @@
 export declare const rootDelegationSchemaVersion: "redevplugin.release_root_delegation.v1";
 export declare const packageSignatureSchemaVersion: "redevplugin.package_signature.v1";
-export declare const releaseMetadataSchemaVersionV8: "redevplugin.release_metadata.v8";
-export declare const releaseMetadataSchemaVersion: "redevplugin.release_metadata.v8";
+export declare const releaseMetadataSchemaVersion: "redevplugin.release_metadata";
 export declare const sourcePolicySchemaVersion: "redevplugin.release_source_policy.v3";
-export declare const sourcePolicyPointerSchemaVersion: "redevplugin.release_source_policy_pointer.v1";
-export declare const revocationSchemaVersion: "redevplugin.release_revocation.v2";
-export declare const revocationPointerSchemaVersion: "redevplugin.release_revocation_pointer.v1";
+export declare const sourcePolicyPointerSchemaVersion: "redevplugin.release_source_policy_pointer.v2";
+export declare const revocationSchemaVersion: "redevplugin.release_revocation.v3";
+export declare const revocationPointerSchemaVersion: "redevplugin.release_revocation_pointer.v2";
 export declare const signatureAlgorithmEd25519: "ed25519";
 export declare const genesisPreviousDocumentSHA256: string;
 export declare const signingUsages: {
@@ -92,35 +91,13 @@ export type PackageReleaseSignatureRef = Readonly<{
     source_policy_epoch: string;
     revocation_epoch: string;
 }>;
-export type ReleaseCompatibility = Readonly<{
-    min_redevplugin_version: string;
-    min_runtime_version: string;
-    ui_protocol_version: "plugin-ui-v7";
-    supported_targets?: readonly ("darwin/amd64" | "darwin/arm64" | "linux/amd64" | "linux/arm64")[];
-}>;
-export type HostCapabilityContractRef = Readonly<{
-    publisher_id: string;
-    contract_id: string;
-    contract_version: string;
-    artifact_sha256: string;
-}>;
-export type HostCapabilityRequirementRef = Readonly<{
-    capability_id: string;
-    capability_version: string;
-    contract: HostCapabilityContractRef;
-}>;
-export type ReleaseHostRequirement = Readonly<{
-    host_id: string;
-    min_host_version?: string;
-    required_capability_contracts?: readonly HostCapabilityRequirementRef[];
-}>;
 export type ReleaseEvidence = Readonly<{
     notices_sha256?: string;
     provenance_sha256?: string;
     generated_at?: string;
 }>;
-export type ReleaseMetadataV8 = Readonly<{
-    schema_version: typeof releaseMetadataSchemaVersionV8;
+export type ReleaseMetadata = Readonly<{
+    schema_version: typeof releaseMetadataSchemaVersion;
     source_id: string;
     release_metadata_ref: string;
     publisher_id: string;
@@ -130,8 +107,6 @@ export type ReleaseMetadataV8 = Readonly<{
     hashes: ReleasePackageHashSet;
     release_metadata_signature: ReleaseMetadataSignatureRef;
     package_signature: PackageReleaseSignatureRef;
-    compatibility: ReleaseCompatibility;
-    host_requirements?: readonly ReleaseHostRequirement[];
     release_evidence?: ReleaseEvidence;
     metadata?: Readonly<Record<string, string>>;
 }>;
@@ -149,7 +124,7 @@ export type SourcePolicyActiveKeys = Readonly<{
     revocation_document: readonly string[];
     revocation_pointer: readonly string[];
 }>;
-export type SourcePolicyV2 = Readonly<{
+export type SourcePolicyV3 = Readonly<{
     schema_version: typeof sourcePolicySchemaVersion;
     source_id: string;
     channel: string;
@@ -171,7 +146,7 @@ export type SourcePolicyV2 = Readonly<{
     key_id: string;
     signature: string;
 }>;
-export type SourcePolicyInput = Omit<SourcePolicyV2, "schema_version" | "signature">;
+export type SourcePolicyInput = Omit<SourcePolicyV3, "schema_version" | "signature">;
 export type ReleasePointerInput = Readonly<{
     source_id: string;
     channel: string;
@@ -182,7 +157,7 @@ export type ReleasePointerInput = Readonly<{
     expires_at: string;
     key_id: string;
 }>;
-export type SourcePolicyPointerV1 = Readonly<ReleasePointerInput & {
+export type SourcePolicyPointerV2 = Readonly<ReleasePointerInput & {
     schema_version: typeof sourcePolicyPointerSchemaVersion;
     signature: string;
 }>;
@@ -193,7 +168,7 @@ export type RevokedRelease = Readonly<{
     release_metadata_sha256: string;
     revoked_at: string;
 }>;
-export type RevocationV2 = Readonly<{
+export type RevocationV3 = Readonly<{
     schema_version: typeof revocationSchemaVersion;
     source_id: string;
     channel: string;
@@ -206,8 +181,8 @@ export type RevocationV2 = Readonly<{
     key_id: string;
     signature: string;
 }>;
-export type RevocationInput = Omit<RevocationV2, "schema_version" | "signature">;
-export type RevocationPointerV1 = Readonly<ReleasePointerInput & {
+export type RevocationInput = Omit<RevocationV3, "schema_version" | "signature">;
+export type RevocationPointerV2 = Readonly<ReleasePointerInput & {
     schema_version: typeof revocationPointerSchemaVersion;
     signature: string;
 }>;
@@ -232,31 +207,31 @@ export declare function buildPackageSignature(input: PackageSigningInput, signat
 export declare function packageSigningPreimage(input: PackageSigningInput): Uint8Array;
 export declare function canonicalPackageSignature(context: PackageVerificationContext, document: PackageSignatureV1): Uint8Array;
 export declare function verifyPackageSignature(context: PackageVerificationContext, document: PackageSignatureV1, verifier: SignatureVerifier): Promise<void>;
-export declare function buildReleaseMetadata(document: ReleaseMetadataV8): ReleaseMetadataV8;
-export declare function releaseMetadataSigningPreimage(channel: string, document: ReleaseMetadataV8): Uint8Array;
-export declare function canonicalReleaseMetadata(document: ReleaseMetadataV8): Uint8Array;
-export declare function verifyReleaseMetadata(channel: string, document: ReleaseMetadataV8, signature: Uint8Array, verifier: SignatureVerifier): Promise<void>;
-export declare function buildSourcePolicy(input: SourcePolicyInput, signature: Uint8Array): SourcePolicyV2;
+export declare function buildReleaseMetadata(document: ReleaseMetadata): ReleaseMetadata;
+export declare function releaseMetadataSigningPreimage(channel: string, document: ReleaseMetadata): Uint8Array;
+export declare function canonicalReleaseMetadata(document: ReleaseMetadata): Uint8Array;
+export declare function verifyReleaseMetadata(channel: string, document: ReleaseMetadata, signature: Uint8Array, verifier: SignatureVerifier): Promise<void>;
+export declare function buildSourcePolicy(input: SourcePolicyInput, signature: Uint8Array): SourcePolicyV3;
 export declare function sourcePolicySigningPreimage(input: SourcePolicyInput): Uint8Array;
-export declare function canonicalSourcePolicy(document: SourcePolicyV2): Uint8Array;
-export declare function verifySourcePolicy(document: SourcePolicyV2, verifier: SignatureVerifier): Promise<void>;
-export declare function buildSourcePolicyPointer(input: ReleasePointerInput, signature: Uint8Array): SourcePolicyPointerV1;
+export declare function canonicalSourcePolicy(document: SourcePolicyV3): Uint8Array;
+export declare function verifySourcePolicy(document: SourcePolicyV3, verifier: SignatureVerifier): Promise<void>;
+export declare function buildSourcePolicyPointer(input: ReleasePointerInput, signature: Uint8Array): SourcePolicyPointerV2;
 export declare function sourcePolicyPointerSigningPreimage(input: ReleasePointerInput): Uint8Array;
-export declare function canonicalSourcePolicyPointer(document: SourcePolicyPointerV1): Uint8Array;
-export declare function verifySourcePolicyPointer(document: SourcePolicyPointerV1, verifier: SignatureVerifier): Promise<void>;
-export declare function buildRevocation(input: RevocationInput, signature: Uint8Array): RevocationV2;
+export declare function canonicalSourcePolicyPointer(document: SourcePolicyPointerV2): Uint8Array;
+export declare function verifySourcePolicyPointer(document: SourcePolicyPointerV2, verifier: SignatureVerifier): Promise<void>;
+export declare function buildRevocation(input: RevocationInput, signature: Uint8Array): RevocationV3;
 export declare function revocationSigningPreimage(input: RevocationInput): Uint8Array;
-export declare function canonicalRevocation(document: RevocationV2): Uint8Array;
-export declare function verifyRevocation(document: RevocationV2, verifier: SignatureVerifier): Promise<void>;
-export declare function buildRevocationPointer(input: ReleasePointerInput, signature: Uint8Array): RevocationPointerV1;
+export declare function canonicalRevocation(document: RevocationV3): Uint8Array;
+export declare function verifyRevocation(document: RevocationV3, verifier: SignatureVerifier): Promise<void>;
+export declare function buildRevocationPointer(input: ReleasePointerInput, signature: Uint8Array): RevocationPointerV2;
 export declare function revocationPointerSigningPreimage(input: ReleasePointerInput): Uint8Array;
-export declare function canonicalRevocationPointer(document: RevocationPointerV1): Uint8Array;
-export declare function verifyRevocationPointer(document: RevocationPointerV1, verifier: SignatureVerifier): Promise<void>;
+export declare function canonicalRevocationPointer(document: RevocationPointerV2): Uint8Array;
+export declare function verifyRevocationPointer(document: RevocationPointerV2, verifier: SignatureVerifier): Promise<void>;
 export declare function decodeRootDelegation(raw: Uint8Array | string): RootDelegationV1;
 export declare function decodePackageSignature(raw: Uint8Array | string, context: PackageVerificationContext): PackageSignatureV1;
-export declare function decodeReleaseMetadata(raw: Uint8Array | string): ReleaseMetadataV8;
-export declare function decodeSourcePolicy(raw: Uint8Array | string): SourcePolicyV2;
-export declare function decodeSourcePolicyPointer(raw: Uint8Array | string): SourcePolicyPointerV1;
-export declare function decodeRevocation(raw: Uint8Array | string): RevocationV2;
-export declare function decodeRevocationPointer(raw: Uint8Array | string): RevocationPointerV1;
+export declare function decodeReleaseMetadata(raw: Uint8Array | string): ReleaseMetadata;
+export declare function decodeSourcePolicy(raw: Uint8Array | string): SourcePolicyV3;
+export declare function decodeSourcePolicyPointer(raw: Uint8Array | string): SourcePolicyPointerV2;
+export declare function decodeRevocation(raw: Uint8Array | string): RevocationV3;
+export declare function decodeRevocationPointer(raw: Uint8Array | string): RevocationPointerV2;
 export declare function createEd25519Verifier(publicKeys: Readonly<Record<string, Uint8Array>>, subtle?: SubtleCrypto): SignatureVerifier;