@jinn-network/client 0.1.9 → 0.2.0

package/dist/task-creator/environment/contracts.js

@@ -0,0 +1,207 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Versioned, strict contracts for public-repository evaluator environments.
+ *
+ * These artifacts deliberately exclude gold patches and test-patch contents:
+ * environment construction starts from the public base commit only.
+ */
+import { createHash } from 'node:crypto';
+import { z } from 'zod/v3';
+import { verifyMessage } from 'viem';
+import { canonicalJson } from '../../harnesses/engine/canonical-json.js';
+export const ENVIRONMENT_BUILD_REQUEST_V1 = 'jinn.environment-build-request.v1';
+export const ENVIRONMENT_BUILD_RECIPE_V1 = 'jinn.environment-build-recipe.v1';
+export const TASK_ENVIRONMENT_SPEC_V1 = 'jinn.task-environment.v1';
+const Sha256Schema = z.string().regex(/^sha256:[0-9a-f]{64}$/, 'must be sha256:<64 lowercase hex characters>');
+const EthereumAddressSchema = z.string().regex(/^0x[0-9a-fA-F]{40}$/, 'must be an Ethereum address');
+const CommitSchema = z.string().regex(/^[0-9a-f]{40}$/, 'must be a 40-character lowercase Git commit');
+const NonEmptyString = z.string().min(1);
+const EnvironmentVariableName = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be a shell environment variable name');
+export const DigestQualifiedImageV1Schema = z.object({
+    reference: NonEmptyString,
+    digest: Sha256Schema,
+}).strict().superRefine((image, ctx) => {
+    const match = /@(?<digest>sha256:[0-9a-f]{64})$/.exec(image.reference);
+    if (!match || match.groups?.['digest'] !== image.digest) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'image reference must be digest-qualified and match image.digest',
+            path: ['reference'],
+        });
+    }
+});
+export const EnvironmentSourceV1Schema = z.object({
+    repo: NonEmptyString,
+    repoUrl: z.string().url(),
+    baseCommit: CommitSchema,
+}).strict();
+/** A shell-free command representation executed relative to the workspace. */
+export const CommandSpecSchema = z.object({
+    bin: NonEmptyString,
+    args: z.array(NonEmptyString),
+    cwd: NonEmptyString.optional(),
+    environment: z.record(EnvironmentVariableName, NonEmptyString).optional(),
+}).strict();
+/**
+ * A rights record belongs to exactly one disclosed input. An SPDX assertion is
+ * still checked against repository metadata by the publication policy; an
+ * explicit authorization can carry a repository-specific permission record.
+ */
+export const InputRightsRefV1Schema = z.union([
+    z.object({
+        inputRef: NonEmptyString,
+        rightsRef: NonEmptyString,
+        basis: z.literal('spdx'),
+        spdxId: NonEmptyString,
+    }).strict(),
+    z.object({
+        inputRef: NonEmptyString,
+        rightsRef: NonEmptyString,
+        basis: z.literal('authorization'),
+        authorizationRef: NonEmptyString,
+    }).strict(),
+]);
+/** Identity of parser code bound by the durable evaluator enable marker. */
+export const TrustedParserIdentityV1Schema = z.object({
+    id: NonEmptyString,
+    version: NonEmptyString,
+    digest: Sha256Schema,
+    bundleId: NonEmptyString,
+}).strict();
+export const EnvironmentBuildRequestV1Schema = z.object({
+    schemaVersion: z.literal(ENVIRONMENT_BUILD_REQUEST_V1),
+    repo: NonEmptyString,
+    repoUrl: z.string().url(),
+    baseCommit: CommitSchema,
+    language: NonEmptyString.optional(),
+    workspaceHint: NonEmptyString.optional(),
+    testPathHints: z.array(NonEmptyString),
+    commandHints: z.array(NonEmptyString),
+}).strict();
+export const EnvironmentBuildRecipeV1Schema = z.object({
+    schemaVersion: z.literal(ENVIRONMENT_BUILD_RECIPE_V1),
+    recipeId: NonEmptyString,
+    source: EnvironmentSourceV1Schema,
+    platform: z.literal('linux/amd64'),
+    baseImage: DigestQualifiedImageV1Schema,
+    workspace: z.literal('/testbed'),
+    installCommands: z.array(CommandSpecSchema).min(1),
+    smokeCommands: z.array(CommandSpecSchema).min(1),
+    testCommands: z.array(CommandSpecSchema).min(1),
+    parser: TrustedParserIdentityV1Schema,
+    inputRights: z.array(InputRightsRefV1Schema).min(1),
+    timeoutSeconds: z.number().int().positive(),
+    environment: z.record(NonEmptyString),
+}).strict();
+const EnvironmentInputV1Schema = z.object({
+    inputRef: NonEmptyString,
+    sha256: Sha256Schema,
+    rights: InputRightsRefV1Schema,
+}).strict().superRefine((input, ctx) => {
+    if (input.inputRef !== input.rights.inputRef) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'rights.inputRef must bind the same inputRef',
+            path: ['rights', 'inputRef'],
+        });
+    }
+});
+export const Eip191EnvironmentAttestationV1Schema = z.object({
+    scheme: z.literal('eip191'),
+    algo: z.literal('secp256k1'),
+    environmentHash: Sha256Schema,
+    operatorSafe: EthereumAddressSchema,
+    signer: EthereumAddressSchema,
+    signature: z.string().regex(/^0x[0-9a-fA-F]{130}$/, 'must be a 65-byte hex signature'),
+}).strict();
+/** Domain-separated EIP-191 message for an immutable evaluator environment. */
+export function environmentAttestationMessageV1(environmentHash) {
+    return `jinn.task-environment.v1:${environmentHash}`;
+}
+/**
+ * Verify the signer named by a parsed attestation. This deliberately verifies
+ * the hash-bound domain message rather than merely checking signature shape.
+ */
+export async function verifyEnvironmentAttestationV1(attestation) {
+    try {
+        return await verifyMessage({
+            address: attestation.signer,
+            message: environmentAttestationMessageV1(attestation.environmentHash),
+            signature: attestation.signature,
+        });
+    }
+    catch {
+        return false;
+    }
+}
+/** Structural schema used only while computing the non-self-referential hash. */
+const TaskEnvironmentSpecV1BaseSchema = z.object({
+    schemaVersion: z.literal(TASK_ENVIRONMENT_SPEC_V1),
+    source: EnvironmentSourceV1Schema,
+    inputs: z.array(EnvironmentInputV1Schema).min(1),
+    execution: z.object({
+        platform: z.literal('linux/amd64'),
+        workspace: z.literal('/testbed'),
+        image: DigestQualifiedImageV1Schema,
+        testCommands: z.array(CommandSpecSchema).min(1),
+        parser: TrustedParserIdentityV1Schema,
+        timeoutSeconds: z.number().int().positive(),
+        environment: z.record(NonEmptyString),
+    }).strict(),
+    build: z.object({
+        recipeCid: NonEmptyString,
+        recipeHash: Sha256Schema,
+        provider: z.enum(['explicit', 'deterministic', 'agentic']),
+        providerId: NonEmptyString,
+        providerVersion: NonEmptyString,
+    }).strict(),
+    publication: z.object({
+        publicRepoVerifiedAt: z.string().datetime(),
+        rightsPolicyVersion: NonEmptyString,
+        buildSmoke: z.literal('pass'),
+        imageSecretScan: z.literal('pass'),
+        sbomCid: NonEmptyString,
+    }).strict(),
+    attestation: Eip191EnvironmentAttestationV1Schema,
+}).strict();
+/**
+ * The signed hash covers only immutable build/publication bindings. The
+ * verification timestamp is an observation, and the attestation would make a
+ * self-referential signing payload, so neither is included.
+ */
+export function taskEnvironmentHashPayloadV1(spec) {
+    return {
+        source: spec.source,
+        inputs: spec.inputs,
+        execution: spec.execution,
+        build: spec.build,
+        publication: {
+            rightsPolicyVersion: spec.publication.rightsPolicyVersion,
+            buildSmoke: spec.publication.buildSmoke,
+            imageSecretScan: spec.publication.imageSecretScan,
+            sbomCid: spec.publication.sbomCid,
+        },
+    };
+}
+export function hashTaskEnvironmentSpecV1(spec) {
+    const hex = createHash('sha256').update(canonicalJson(taskEnvironmentHashPayloadV1(spec))).digest('hex');
+    return `sha256:${hex}`;
+}
+/**
+ * Public task-environment parser. It binds the EIP-191 payload to the exact
+ * canonical immutable environment body before consumers may trust the spec.
+ */
+export const TaskEnvironmentSpecV1Schema = TaskEnvironmentSpecV1BaseSchema.superRefine((spec, ctx) => {
+    const expectedHash = hashTaskEnvironmentSpecV1(spec);
+    if (spec.attestation.environmentHash !== expectedHash) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'attestation.environmentHash must equal the canonical environment hash',
+            path: ['attestation', 'environmentHash'],
+        });
+    }
+});
+export function parseTaskEnvironmentSpecV1(input) {
+    return TaskEnvironmentSpecV1Schema.parse(input);
+}
+//# sourceMappingURL=contracts.js.map

package/dist/task-creator/environment/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../src/task-creator/environment/contracts.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAA0B,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAEzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAA4C,CAAC;AACzF,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAA2C,CAAC;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAAmC,CAAC;AAE5E,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,EAAE,8CAA8C,CAAC,CAAC;AAC/G,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;AACrG,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;AACvG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,EAAE,2CAA2C,CAAC,CAAC;AAE1H,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACrC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iEAAiE;YAC1E,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,UAAU,EAAE,YAAY;CACzB,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC7B,GAAG,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACjC,gBAAgB,EAAE,cAAc;KACjC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,YAAY;IACpB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IACtD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,cAAc,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IACrD,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,yBAAyB;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAClC,SAAS,EAAE,4BAA4B;IACvC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,6BAA6B;IACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,sBAAsB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,6CAA6C;YACtD,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,eAAe,EAAE,YAAY;IAC7B,YAAY,EAAE,qBAAqB;IACnC,MAAM,EAAE,qBAAqB;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;CACvF,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAAC,eAAuB;IACrE,OAAO,4BAA4B,eAAe,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,WAA2C;IAC9F,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC;YACzB,OAAO,EAAE,WAAW,CAAC,MAAiB;YACtC,OAAO,EAAE,+BAA+B,CAAC,WAAW,CAAC,eAAe,CAAC;YACrE,SAAS,EAAE,WAAW,CAAC,SAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAClD,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAChC,KAAK,EAAE,4BAA4B;QACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,EAAE,6BAA6B;QACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;KACtC,CAAC,CAAC,MAAM,EAAE;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAC1D,UAAU,EAAE,cAAc;QAC1B,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC,MAAM,EAAE;IACX,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3C,mBAAmB,EAAE,cAAc;QACnC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC,MAAM,EAAE;IACX,WAAW,EAAE,oCAAoC;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAA2B;IACtE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE;YACX,mBAAmB,EAAE,IAAI,CAAC,WAAW,CAAC,mBAAmB;YACzD,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU;YACvC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe;YACjD,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA2B;IACnE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzG,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,+BAA+B,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnG,MAAM,YAAY,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,WAAW,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;QACtD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,uEAAuE;YAChF,IAAI,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC"}

package/dist/task-creator/environment/github.d.ts

@@ -0,0 +1,25 @@
+import type { VerifiedInputPublicationFacts } from './policy.js';
+/** Injectable boundary; tests supply a deterministic in-memory implementation. */
+export type GitHubFetch = (input: string, init?: {
+    headers?: Record<string, string>;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+export type GitHubRepositoryPublicationCheckRequest = {
+    repo: string;
+    baseCommit: string;
+};
+export interface GitHubRepositoryChecker {
+    check(input: GitHubRepositoryPublicationCheckRequest): Promise<VerifiedInputPublicationFacts>;
+}
+/**
+ * Reads only public GitHub metadata and the licence endpoint at the requested
+ * base commit. The returned evidence is bound to the canonical GitHub input
+ * locator so a decision for one repository cannot be reused for another.
+ */
+export declare function createGitHubRepoPublicationChecker(input: {
+    fetchImpl: GitHubFetch;
+    token?: string;
+}): GitHubRepositoryChecker;

package/dist/task-creator/environment/github.js

@@ -0,0 +1,67 @@
+// SPDX-License-Identifier: Apache-2.0
+import { z } from 'zod/v3';
+const CheckRequestSchema = z.object({
+    repo: z.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/),
+    baseCommit: z.string().regex(/^[0-9a-f]{40}$/),
+}).strict();
+const RepositoryMetadataSchema = z.object({
+    visibility: z.enum(['public', 'private']),
+    private: z.boolean(),
+}).passthrough();
+const LicenseEvidenceSchema = z.object({
+    license: z.object({ spdx_id: z.string().min(1).nullable() }).nullable(),
+}).passthrough();
+/**
+ * Reads only public GitHub metadata and the licence endpoint at the requested
+ * base commit. The returned evidence is bound to the canonical GitHub input
+ * locator so a decision for one repository cannot be reused for another.
+ */
+export function createGitHubRepoPublicationChecker(input) {
+    const headers = {
+        Accept: 'application/vnd.github+json',
+        ...(input.token ? { Authorization: `Bearer ${input.token}` } : {}),
+    };
+    return {
+        async check(rawRequest) {
+            const request = CheckRequestSchema.parse(rawRequest);
+            const repositoryUrl = `https://api.github.com/repos/${request.repo}`;
+            const metadata = RepositoryMetadataSchema.safeParse(await fetchJson(input.fetchImpl, repositoryUrl, headers, 'repository metadata'));
+            if (!metadata.success || metadata.data.private === (metadata.data.visibility === 'public')) {
+                throw new Error('malformed GitHub repository metadata response');
+            }
+            const evidenceRef = `${repositoryUrl}/license?ref=${request.baseCommit}`;
+            const license = LicenseEvidenceSchema.safeParse(await fetchJson(input.fetchImpl, evidenceRef, headers, 'license evidence'));
+            if (!license.success)
+                throw new Error('malformed GitHub license evidence response');
+            return {
+                inputRef: `git+https://github.com/${request.repo}.git#${request.baseCommit}`,
+                locator: `github:${request.repo}`,
+                visibility: metadata.data.visibility,
+                licenseSpdxId: license.data.license?.spdx_id ?? null,
+                evidenceRef,
+            };
+        },
+    };
+}
+async function fetchJson(fetchImpl, url, headers, resource) {
+    let response;
+    try {
+        response = await fetchImpl(url, { headers });
+    }
+    catch (error) {
+        throw new Error(`GitHub ${resource} request failed: ${message(error)}`);
+    }
+    if (!response || response.ok !== true) {
+        throw new Error(`GitHub ${resource} request failed (status ${String(response?.status)})`);
+    }
+    try {
+        return await response.json();
+    }
+    catch (error) {
+        throw new Error(`malformed GitHub ${resource} response: ${message(error)}`);
+    }
+}
+function message(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=github.js.map

package/dist/task-creator/environment/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/task-creator/environment/github.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAsB3B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,KAGlD;IACC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,6BAA6B;QACrC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,UAAmD;YAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,gCAAgC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACrI,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC3F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,aAAa,gBAAgB,OAAO,CAAC,UAAU,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC5H,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAEpF,OAAO;gBACL,QAAQ,EAAE,0BAA0B,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,UAAU,EAAE;gBAC5E,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE;gBACjC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;gBACpC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI;gBACpD,WAAW;aACZ,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAAsB,EACtB,GAAW,EACX,OAA+B,EAC/B,QAAgB;IAEhB,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,oBAAoB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,2BAA2B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,cAAc,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/task-creator/environment/interfaces.d.ts

@@ -0,0 +1,60 @@
+import type { CommandSpec, Eip191EnvironmentAttestationV1, EnvironmentBuildRecipeV1 } from './contracts.js';
+export type { GitHubRepositoryChecker } from './github.js';
+/** The local-only result of a successful isolated image construction. */
+export type BuiltEnvironment = {
+    localImageTag: string;
+    /** Docker's immutable local image identifier when the engine reports one. */
+    localImageId?: `sha256:${string}`;
+    /** A local repository digest when available before registry publication. */
+    localImageDigest?: `sha256:${string}`;
+    platform: 'linux/amd64';
+    workspace: '/testbed';
+    smoke: {
+        status: 'pass';
+        commands: readonly CommandSpec[];
+    };
+};
+export type EnvironmentScanReport = {
+    status: 'pass' | 'fail';
+    /** A local Trivy-compatible document. It is not a published CID. */
+    report: unknown;
+};
+export type EnvironmentSbomDocument = {
+    /** A local Syft-compatible document. It is not a published CID. */
+    document: unknown;
+};
+export type PublishedEnvironmentImage = {
+    /** Must be a digest-qualified remote image reference. */
+    reference: string;
+    digest: `sha256:${string}`;
+};
+export interface EnvironmentImageScanner {
+    scan(input: BuiltEnvironment): Promise<EnvironmentScanReport>;
+}
+export interface EnvironmentSbomGenerator {
+    generate(input: BuiltEnvironment): Promise<EnvironmentSbomDocument>;
+}
+export interface EnvironmentBuilder {
+    build(recipe: EnvironmentBuildRecipeV1): Promise<BuiltEnvironment>;
+}
+/** Owns registry authentication and docker push outside the build context. */
+export interface EnvironmentImagePublisher {
+    publish(input: {
+        image: BuiltEnvironment;
+        repository: string;
+    }): Promise<PublishedEnvironmentImage>;
+}
+/** Artifact storage happens only after local gates and successful image push. */
+export interface EnvironmentArtifactUploader {
+    upload(input: {
+        kind: 'recipe' | 'sbom' | 'environment';
+        document: unknown;
+    }): Promise<{
+        cid: string;
+    }>;
+}
+export interface EnvironmentAttestor {
+    attest(input: {
+        environmentHash: `sha256:${string}`;
+    }): Promise<Eip191EnvironmentAttestationV1>;
+}

package/dist/task-creator/environment/interfaces.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+export {};
+//# sourceMappingURL=interfaces.js.map

package/dist/task-creator/environment/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/task-creator/environment/interfaces.ts"],"names":[],"mappings":"AAAA,sCAAsC"}

package/dist/task-creator/environment/jinn-differential-policy.d.ts

@@ -0,0 +1,22 @@
+import { type EnvironmentBuildRecipeV1, type TaskEnvironmentSpecV1 } from './contracts.js';
+export interface JinnDifferentialAttesterPolicyV1 {
+    /** Operator-safe/signer pairs explicitly approved for the reviewed Jinn proof. */
+    approvedAttesters: readonly {
+        operatorSafe: string;
+        signer: string;
+    }[];
+}
+/** Parse externally governed address pairs without ever accepting a signer implicitly. */
+export declare function parseJinnDifferentialAttesterPolicyV1(values: readonly string[] | undefined, optionName?: string): JinnDifferentialAttesterPolicyV1;
+/**
+ * Canonical build-recipe digest used by the environment publication contract.
+ * Keep this here rather than trusting a CID, which names transport rather than
+ * the immutable recipe content.
+ */
+export declare function hashEnvironmentBuildRecipeV1(recipe: EnvironmentBuildRecipeV1): `sha256:${string}`;
+/**
+ * Require the exact explicit Jinn recipe and an independently approved
+ * attester. The caller already determines that the source is the one reviewed
+ * Jinn proof; generic public repositories must not call this policy.
+ */
+export declare function assertJinnDifferentialEnvironmentPolicyV1(environment: TaskEnvironmentSpecV1, policy: JinnDifferentialAttesterPolicyV1 | undefined): void;

package/dist/task-creator/environment/jinn-differential-policy.js

@@ -0,0 +1,73 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Exact-source policy for the first real Jinn differential admission proof.
+ *
+ * This is deliberately narrower than the generic public-repository
+ * environment contract. A valid signature only proves who signed an artifact;
+ * it does not make an arbitrary recipe or signer suitable evidence for the
+ * reviewed Jinn source. Operators must provide the approved attester pair for
+ * the proof they intend to create or verify.
+ */
+import { createHash } from 'node:crypto';
+import { canonicalJson } from '../../harnesses/engine/canonical-json.js';
+import { ENVIRONMENT_BUILD_RECIPE_V1, } from './contracts.js';
+import { resolveJinnMonoRecipeV1 } from './recipes.js';
+/** Parse externally governed address pairs without ever accepting a signer implicitly. */
+export function parseJinnDifferentialAttesterPolicyV1(values, optionName = '--approved-attester') {
+    if (!values?.length) {
+        const action = optionName.startsWith('--') ? 'pass' : 'set';
+        throw new Error(`${action} ${optionName} <operatorSafe:signer>; the Jinn differential proof has no implicit attester trust`);
+    }
+    const approvedAttesters = values.map((value) => {
+        const match = /^(0x[0-9a-fA-F]{40}):(0x[0-9a-fA-F]{40})$/u.exec(value);
+        if (!match)
+            throw new Error(`${optionName} must be operatorSafe:signer Ethereum addresses`);
+        return { operatorSafe: match[1], signer: match[2] };
+    });
+    return { approvedAttesters };
+}
+/**
+ * Canonical build-recipe digest used by the environment publication contract.
+ * Keep this here rather than trusting a CID, which names transport rather than
+ * the immutable recipe content.
+ */
+export function hashEnvironmentBuildRecipeV1(recipe) {
+    return `sha256:${createHash('sha256')
+        .update(canonicalJson({ schemaVersion: ENVIRONMENT_BUILD_RECIPE_V1, recipe }))
+        .digest('hex')}`;
+}
+/**
+ * Require the exact explicit Jinn recipe and an independently approved
+ * attester. The caller already determines that the source is the one reviewed
+ * Jinn proof; generic public repositories must not call this policy.
+ */
+export function assertJinnDifferentialEnvironmentPolicyV1(environment, policy) {
+    const recipe = resolveJinnMonoRecipeV1(environment.source.baseCommit);
+    if (environment.build.provider !== 'explicit' ||
+        environment.build.providerId !== recipe.recipeId ||
+        environment.build.providerVersion !== 'v1') {
+        throw new Error('Jinn differential proof environment must use the canonical explicit Jinn recipe provider');
+    }
+    if (environment.build.recipeHash !== hashEnvironmentBuildRecipeV1(recipe)) {
+        throw new Error('Jinn differential proof environment recipe hash does not bind resolveJinnMonoRecipeV1(baseCommit)');
+    }
+    if (canonicalJson(environment.execution.testCommands) !== canonicalJson(recipe.testCommands)) {
+        throw new Error('Jinn differential proof environment test-command template does not match the canonical Jinn recipe');
+    }
+    if (environment.execution.platform !== recipe.platform ||
+        environment.execution.workspace !== recipe.workspace ||
+        canonicalJson(environment.execution.parser) !== canonicalJson(recipe.parser) ||
+        canonicalJson(environment.execution.environment) !== canonicalJson(recipe.environment) ||
+        environment.execution.timeoutSeconds !== recipe.timeoutSeconds) {
+        throw new Error('Jinn differential proof environment execution contract does not match the canonical Jinn recipe');
+    }
+    if (!policy?.approvedAttesters.length) {
+        throw new Error('Jinn differential proof requires an explicit policy-approved environment attester');
+    }
+    const attestation = environment.attestation;
+    if (!policy.approvedAttesters.some((approved) => approved.operatorSafe.toLowerCase() === attestation.operatorSafe.toLowerCase() &&
+        approved.signer.toLowerCase() === attestation.signer.toLowerCase())) {
+        throw new Error('Jinn differential proof environment attester/signer is not policy-approved');
+    }
+}
+//# sourceMappingURL=jinn-differential-policy.js.map

package/dist/task-creator/environment/jinn-differential-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jinn-differential-policy.js","sourceRoot":"","sources":["../../../src/task-creator/environment/jinn-differential-policy.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EACL,2BAA2B,GAG5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAUvD,0FAA0F;AAC1F,MAAM,UAAU,qCAAqC,CACnD,MAAqC,EACrC,UAAU,GAAG,qBAAqB;IAElC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,UAAU,oFAAoF,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,iDAAiD,CAAC,CAAC;QAC5F,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAgC;IAC3E,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,CAAC;SAC7E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yCAAyC,CACvD,WAAkC,EAClC,MAAoD;IAEpD,MAAM,MAAM,GAAG,uBAAuB,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,IACE,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU;QACzC,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ;QAChD,WAAW,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IACxH,CAAC;IACD,IACE,WAAW,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAClD,WAAW,CAAC,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACpD,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5E,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;QACtF,WAAW,CAAC,SAAS,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC9C,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE;QAC9E,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,CACnE,EAAE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/task-creator/environment/policy.d.ts

@@ -0,0 +1,38 @@
+import { type InputRightsRefV1 } from './contracts.js';
+export declare const DEFAULT_PUBLICATION_RIGHTS_POLICY_VERSION: "jinn.publication-rights.v1";
+export type RepositoryPublicationMetadata = {
+    visibility: 'public' | 'private' | 'unknown';
+    licenseSpdxId: string | null;
+};
+/** Facts are keyed by their exact disclosed input reference, never globally. */
+export type VerifiedInputPublicationFacts = {
+    inputRef: string;
+    locator: string;
+    visibility: 'public' | 'private' | 'unknown';
+    licenseSpdxId: string | null;
+    evidenceRef: string;
+    authorizationRef?: string;
+};
+export type RightsPolicyDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    code: 'repository-not-public' | 'input-not-public' | 'missing-or-unapproved-rights';
+};
+/**
+ * Default disclosure policy. A public source repository needs matching MIT or
+ * Apache-2.0 evidence for every ordinary source input; an explicit recorded
+ * authorization is sufficient even when GitHub cannot report a license.
+ */
+export declare function evaluateDefaultRightsPolicy(input: {
+    /** Legacy caller context; it is never used as rights evidence. */
+    repository?: RepositoryPublicationMetadata;
+    inputRights: readonly InputRightsRefV1[];
+    verifiedInputs: Readonly<Record<string, VerifiedInputPublicationFacts>>;
+}): RightsPolicyDecision;
+export type ApprovedImage = {
+    reference: string;
+    digest: string;
+};
+/** Pure allowlist check; image acquisition and scanning belong to Task 3. */
+export declare function isApprovedImage(image: ApprovedImage, approvedImages: readonly ApprovedImage[]): boolean;

package/dist/task-creator/environment/policy.js

@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: Apache-2.0
+import { z } from 'zod/v3';
+import { InputRightsRefV1Schema, } from './contracts.js';
+export const DEFAULT_PUBLICATION_RIGHTS_POLICY_VERSION = 'jinn.publication-rights.v1';
+const DEFAULT_ALLOWED_SOURCE_LICENSES = new Set(['Apache-2.0', 'MIT']);
+const VerifiedInputPublicationFactsSchema = z.object({
+    inputRef: z.string().min(1),
+    locator: z.string().min(1),
+    visibility: z.enum(['public', 'private', 'unknown']),
+    licenseSpdxId: z.string().min(1).nullable(),
+    evidenceRef: z.string().min(1),
+    authorizationRef: z.string().min(1).optional(),
+}).strict();
+/**
+ * Default disclosure policy. A public source repository needs matching MIT or
+ * Apache-2.0 evidence for every ordinary source input; an explicit recorded
+ * authorization is sufficient even when GitHub cannot report a license.
+ */
+export function evaluateDefaultRightsPolicy(input) {
+    if (input.inputRights.length === 0) {
+        return { allowed: false, code: 'missing-or-unapproved-rights' };
+    }
+    const rights = input.inputRights.map((entry) => InputRightsRefV1Schema.parse(entry));
+    for (const entry of rights) {
+        const parsedFacts = VerifiedInputPublicationFactsSchema.safeParse(input.verifiedInputs[entry.inputRef]);
+        if (!parsedFacts.success || parsedFacts.data.inputRef !== entry.inputRef) {
+            return { allowed: false, code: 'missing-or-unapproved-rights' };
+        }
+        const facts = parsedFacts.data;
+        if (facts.visibility !== 'public')
+            return { allowed: false, code: 'input-not-public' };
+        if (entry.basis === 'authorization') {
+            if (facts.evidenceRef !== entry.rightsRef ||
+                facts.authorizationRef !== entry.authorizationRef) {
+                return { allowed: false, code: 'missing-or-unapproved-rights' };
+            }
+            continue;
+        }
+        if (facts.evidenceRef !== entry.rightsRef ||
+            facts.licenseSpdxId !== entry.spdxId ||
+            !DEFAULT_ALLOWED_SOURCE_LICENSES.has(entry.spdxId)) {
+            return { allowed: false, code: 'missing-or-unapproved-rights' };
+        }
+    }
+    return { allowed: true };
+}
+/** Pure allowlist check; image acquisition and scanning belong to Task 3. */
+export function isApprovedImage(image, approvedImages) {
+    return approvedImages.some((approved) => approved.reference === image.reference && approved.digest === image.digest);
+}
+//# sourceMappingURL=policy.js.map

package/dist/task-creator/environment/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/task-creator/environment/policy.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EACL,sBAAsB,GAEvB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,yCAAyC,GAAG,4BAAqC,CAAC;AAC/F,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;AAiBvE,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAK3C;IACC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAC/B,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QACvF,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACpC,IACE,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS;gBACrC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,EACjD,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;YAClE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IACE,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS;YACrC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,MAAM;YACpC,CAAC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAClD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAOD,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,KAAoB,EACpB,cAAwC;IAExC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAC3E,CAAC;AACJ,CAAC"}

package/dist/task-creator/environment/publication.d.ts

@@ -0,0 +1,39 @@
+import { type EnvironmentBuildRecipeV1, type TaskEnvironmentSpecV1 } from './contracts.js';
+import type { EnvironmentArtifactUploader, EnvironmentAttestor, EnvironmentBuilder, EnvironmentImagePublisher, EnvironmentImageScanner, EnvironmentSbomGenerator } from './interfaces.js';
+import type { GitHubRepositoryChecker } from './github.js';
+import { type ApprovedImage } from './policy.js';
+export declare const DEFAULT_ENVIRONMENT_IMAGE_REPOSITORY: "ghcr.io/jinn-network/task-environment";
+export type EnvironmentPublicationControllerDependencies = {
+    builder: EnvironmentBuilder;
+    scanner: EnvironmentImageScanner;
+    sbomGenerator: EnvironmentSbomGenerator;
+    publisher: EnvironmentImagePublisher;
+    uploader: EnvironmentArtifactUploader;
+    attestor: EnvironmentAttestor;
+    githubChecker: GitHubRepositoryChecker;
+    approvedBaseImages?: readonly ApprovedImage[];
+    imageRepository?: string;
+    clock?: () => Date;
+};
+/**
+ * The immutable, signed environment artifact together with the CID returned
+ * by the final environment-document publication (not recipe or SBOM uploads).
+ */
+export type PublishedTaskEnvironmentV1 = {
+    spec: TaskEnvironmentSpecV1;
+    environmentCid: string;
+};
+/**
+ * Orders local build evidence and public disclosure so a failed gate leaves no
+ * registry or artifact-store side effect behind.
+ */
+export declare class EnvironmentPublicationController {
+    private readonly dependencies;
+    private readonly approvedBaseImages;
+    private readonly imageRepository;
+    private readonly clock;
+    constructor(dependencies: EnvironmentPublicationControllerDependencies);
+    publish(rawRecipe: EnvironmentBuildRecipeV1): Promise<PublishedTaskEnvironmentV1>;
+    private verifyInputRights;
+    private unsignedSpec;
+}