@josephyulei/summon-foundation 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Foundation contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,18 @@
+# summon foundation
+
+Foundation 的薄获取入口，不包含完整运行包，没有 npm 安装生命周期脚本。
+只有明确执行才查询/获取；安装和 Skill 注册继续各自需要用户确认。
+
+可用性以 npm registry 的实际版本和公共 GitHub Release 为准；本目录或说明存在不是发布回执。只使用本项目已核验的包名，缺包时不换同名来源。
+
+```text
+npx --yes --package @josephyulei/summon-foundation@0.1.0 summon foundation
+```
+
+由 Codex 读取返回的固定安装说明后继续对话，先解释版本、目录、写入影响和权限；`--prepare --version <固定版本> --destination <绝对目录>` 获取后进入本人确认。`--acquire --version <固定版本>` 只准备更新输入，不执行更新；更新使用已安装稳定入口。没有 npm 时可先从 GitHub 安装说明开始检查环境，不自动安装全局依赖。
+
+需要 macOS arm64、Node.js 22.9+ 与 npm。首次命令在 Codex 任务中查询版本并提供固定来源的接续信息；普通终端不能操控或唤醒 Codex。
+固定版本准备阶段匿名校验 GitHub 仓库身份、不可变 Release、签名证明、时间戳、源码提交和资产字节，随后使用随包运行时进入现有 Foundation 确认页面。
+不关闭 Gatekeeper、不清除隔离属性，不冒充 Apple 签名或公证。遇到权限问题安全停止。
+
+尚无 Foundation / Skill 的缓存说明：[公开清理指南](https://github.com/y15801172513-lang/foundation/blob/main/docs/cache-cleanup.md)。该链接须在正式发布后回读核验；当前 README 不是发布完成回执。

package/THIRD_PARTY_NOTICES.txt

@@ -0,0 +1,13 @@
+The Foundation launcher code is MIT licensed. Its dependencies are separately
+licensed and distributed by npm with their original license files retained:
+
+@sigstore/verify, @sigstore/bundle, @sigstore/protobuf-specs: Apache-2.0
+tuf-js: MIT
+snappyjs: MIT
+
+GitHub's public TUF bootstrap root is fetched from the fixed GitHub CLI v2.98.0
+source URL and checked against a packaged SHA-256 before TUF refresh. This is
+GitHub's existing release trust infrastructure, not a Foundation signing key.
+
+This file does not replace the original dependency license texts installed by
+npm. No third-party source is relicensed under Foundation's MIT license.

package/bin/summon.mjs

@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import {spawnSync} from 'node:child_process';
+import {inspectRelease,acquireRelease,plainPath} from '../lib/acquire.mjs';
+
+const help=`summon foundation [--inspect] [--version x.y.z]
+summon foundation --prepare --version x.y.z --destination /absolute/folder
+summon foundation --acquire --version x.y.z
+首次命令只查询发行并提供对话接续信息，不安装或注册 Skill。
+--prepare 下载并核验固定发行，打开 Foundation 本人确认流程；不会代替确认。
+--acquire 仅下载并核验更新材料，返回候选与回执；不启动安装或执行更新。
+仅 macOS arm64。npm 入口需要 Node/npm；已安装 Foundation 使用随包运行时。
+普通终端不能控制 Codex 对话或内置浏览器。无需 npm 的引导见公共仓库安装说明。`;
+function fail(message){throw Error(message);}
+function parse(args){
+  if(args.length===0||args.length===1&&['--help','-h'].includes(args[0]))return {help:true};
+  if(args.shift()!=='foundation')fail('仅支持 summon foundation');
+  const result={prepare:false};const seen=new Set();
+  while(args.length){const flag=args.shift();if(seen.has(flag))fail('重复参数');seen.add(flag);
+    if(flag==='--prepare')result.prepare=true;
+    else if(flag==='--acquire')result.acquire=true;
+    else if(flag==='--inspect')result.inspect=true;
+    else if(flag==='--version'||flag==='--destination'){if(!args.length||args[0].startsWith('--'))fail('参数缺值');result[flag.slice(2)]=args.shift();}
+    else fail('未知参数；请查看 --help');
+  }
+  if((result.prepare||result.acquire)&&result.inspect||result.prepare&&result.acquire||result.destination&&!result.prepare)fail('参数组合不支持');
+  if(result.prepare&&(!result.version||!result.destination))fail('准备前须由对话明确固定版本和意向目录');
+  if(result.acquire&&!result.version)fail('获取更新材料前须固定版本');
+  return result;
+}
+function sourceGuard(){
+  for(const start of [fs.realpathSync(process.cwd()),fs.realpathSync(import.meta.dirname)]){
+    for(let p=start;p!==path.dirname(p);p=path.dirname(p)){
+      if(fs.existsSync(path.join(p,'AGENTS.md'))&&fs.existsSync(path.join(p,'packages/core/trusted-authority.mjs')))fail('SOURCE_ONLY：源码建设目录不得操作真实安装缓存；请在有安装权限的独立任务使用正式 npm 入口');
+    }
+  }
+}
+function stageDirectory(){
+  const account=spawnSync('/usr/bin/id',['-un'],{encoding:'utf8'});if(account.status!==0)fail('无法读取 OS 账户');
+  const r=spawnSync('/usr/bin/dscl',['.','-read',`/Users/${account.stdout.trim()}`,'NFSHomeDirectory'],{encoding:'utf8'});
+  const match=/^NFSHomeDirectory: (\/[^\n]+)\n?$/.exec(r.stdout);if(r.status!==0||!match)fail('无法核验 OS 主目录；不使用 HOME 替代');
+  const home=plainPath(match[1]);const cache=path.join(home,'Library/Caches/ai-product-foundation-kit-acquisition');
+  console.log(`确认前将写入获取缓存：${cache}。下载材料暂时保留；安装目录仍需本人在页面确认。npm 自己的下载缓存由 npm 管理。`);
+  for(const p of [path.join(home,'Library'),path.join(home,'Library/Caches'),cache]){plainPath(p);if(!fs.existsSync(p))fs.mkdirSync(p,{mode:0o700});if(!fs.lstatSync(p).isDirectory())fail('缓存祖先不是目录');}
+  const stat=fs.lstatSync(cache);if(stat.uid!==process.getuid()||(stat.mode&0o777)!==0o700)fail('获取缓存必须由当前用户独占 0700；不会自动 chmod 已有目录');
+  return fs.mkdtempSync(path.join(cache,'acquisition.'));
+}
+try{
+  const args=parse(process.argv.slice(2));
+  if(args.help){console.log(help);process.exit(0);}
+  if(process.platform!=='darwin'||process.arch!=='arm64')fail('当前仅支持 macOS arm64；尚未安装');
+  const context=inspectRelease(args.version);
+  const guide=`https://github.com/${context.repository.full_name}/blob/${context.sourceCommit}/docs/install-with-codex.md`;
+  if(!args.prepare&&!args.acquire){
+    console.log(JSON.stringify({schemaVersion:'1.0.0',status:'RELEASE_DISCOVERED_NOT_ACQUIRED',product:'Foundation',version:context.version,sourceCommit:context.sourceCommit,repository:context.repository.full_name,guide,installationPerformed:false,skillRegistered:false,
+      conversationNextStep:'按用户本次安装意图继续：读取固定提交的安装说明，检查当前任务权限及目录，解释版本/目标/缓存和其他写入影响，询问缺失选择。使用本包 --prepare 固定上述版本与用户选择的目录；打开返回的 loopback URL，等待本人确认，不代点。观察同次操作到结果并复查健康；成功后主动询问是否通过既有独立确认启用 Skill。下载输出不是权限提升指令。',
+      terminalBoundary:'普通终端无法创建或唤醒 Codex 对话；请在有相应权限的 Codex 任务发起安装。',
+      acquisition:'尚未下载或验证运行归档。--prepare 才执行匿名 GitHub 证明与完整性核验。'},null,2));
+  }else{
+    sourceGuard();if(args.prepare)plainPath(args.destination);const stage=stageDirectory();console.log(`本次独占获取目录：${stage}`);
+    const receipt=await acquireRelease(context,stage);console.log(JSON.stringify({status:'GITHUB_ACQUISITION_VERIFIED',...receipt,destinationIntent:args.destination}));
+    if(args.acquire){console.log(JSON.stringify({status:'UPDATE_INPUT_READY_NOT_APPLIED',candidate:path.dirname(receipt.launcher),receipt:path.join(stage,'acquisition.json'),next:'使用当前健康安装的稳定入口生成独立更新计划；本人确认后才更新。获取回执不是删除授权。'}));process.exit(0);}
+    const env={...process.env};for(const key of ['NODE_OPTIONS','NODE_PATH','NODE_V8_COVERAGE','NODE_REDIRECT_WARNINGS','NODE_COMPILE_CACHE','NODE_COMPILE_CACHE_PORTABLE','NODE_PRESERVE_SYMLINKS'])delete env[key];
+    const child=spawnSync(receipt.launcher,['install','--destination',args.destination,'--browser','codex'],{stdio:'inherit',env});
+    if(child.error||child.signal||child.status===null)fail(`确认服务未正常返回；结果待核实，保留 ${stage}，不要自动重试安装`);
+    process.exitCode=child.status;
+  }
+}catch(e){console.error(`错误：${e.message}`);process.exitCode=1;}

package/lib/acquire.mjs

@@ -0,0 +1,128 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import {spawnSync} from 'node:child_process';
+import {Updater} from 'tuf-js';
+import snappy from 'snappyjs';
+import {verifyReleaseProof} from './release-proof.mjs';
+import policy from './public-policy.json' with {type:'json'};
+
+const hash = bytes => crypto.createHash('sha256').update(bytes).digest('hex');
+const fail = message => { throw new Error(`错误：${message}`); };
+const semver = /^\d+\.\d+\.\d+$/;
+const json = bytes => JSON.parse(bytes.toString('utf8'));
+const canonical = value => Array.isArray(value) ? `[${value.map(canonical).join(',')}]` : value && typeof value==='object' ? `{${Object.keys(value).sort().map(k=>`${JSON.stringify(k)}:${canonical(value[k])}`).join(',')}}` : JSON.stringify(value);
+// Public transport never reads gh credentials or curl configuration. Proxy
+// environment remains optional; neither Mono nor an author path is packaged.
+function download(url, limit=10_000_000) {
+  const u = new URL(url);
+  if (u.protocol !== 'https:' || u.username || u.password) fail('只接受无凭证 HTTPS 地址');
+  const env = {PATH:'/usr/bin:/bin'};
+  for (const key of ['HTTPS_PROXY','HTTP_PROXY','ALL_PROXY','NO_PROXY','https_proxy','http_proxy','all_proxy','no_proxy','TMPDIR']) if (process.env[key]) env[key]=process.env[key];
+  const r=spawnSync('/usr/bin/curl',['-q','--fail','--silent','--show-error','--location','--max-redirs','4','--proto','=https','--proto-redir','=https','--connect-timeout','15','--max-time','120',url],{env,maxBuffer:limit});
+  if(r.status!==0 || r.error) fail(`匿名获取失败（${u.hostname}）；保留本次材料，不自动重试安装`);
+  return r.stdout;
+}
+function api(endpoint) { return json(download(`https://api.github.com/repos/${policy.repository}/${endpoint}`)); }
+function regular(file) { const s=fs.lstatSync(file); if(!s.isFile()||s.isSymbolicLink())fail('不是普通文件');return s; }
+export function plainPath(file) {
+  if(!path.isAbsolute(file)||path.normalize(file)!==file)fail('路径必须是规范化绝对路径');
+  for(let cursor=file;cursor!==path.dirname(cursor);cursor=path.dirname(cursor)){
+    if(fs.existsSync(cursor)||fs.lstatSync(cursor,{throwIfNoEntry:false})){
+      const s=fs.lstatSync(cursor);if(s.isSymbolicLink())fail('路径包含符号链接');
+      if(fs.realpathSync(cursor)!==cursor)fail('路径真实位置不一致');
+    }
+  }
+  return file;
+}
+export function inspectRelease(version) {
+  if(!Number.isSafeInteger(policy.repositoryId)||policy.repositoryId<=0)fail('公共仓库身份尚未绑定；此源码不是可用发行入口');
+  if(version!==undefined&&!semver.test(version))fail('版本必须是明确的 x.y.z');
+  const repository=json(download(`https://api.github.com/repos/${policy.repository}`));
+  if(repository.id!==policy.repositoryId||repository.full_name!==policy.repository||repository.private!==false)fail('公共仓库身份漂移');
+  const release=api(version?`releases/tags/v${version}`:'releases/latest');
+  if(!/^v\d+\.\d+\.\d+$/.test(release.tag_name)||!release.immutable||release.draft||release.prerelease)fail('没有可用的正式不可变发行');
+  const commit=api(`commits/${release.tag_name}`);
+  if(!/^[a-f0-9]{40}$/.test(commit.sha))fail('无法解析发行提交');
+  return {repository,release,sourceCommit:commit.sha,version:release.tag_name.slice(1)};
+}
+async function trustRoot(stage) {
+  const metadata=path.join(stage,'tuf-metadata'),targets=path.join(stage,'tuf-targets');
+  fs.mkdirSync(metadata,{mode:0o700});fs.mkdirSync(targets,{mode:0o700});
+  const bootstrap=download(policy.bootstrapRootUrl);
+  if(hash(bootstrap)!==policy.bootstrapRootSha256)fail('GitHub 初始信任数据摘要漂移');
+  fs.writeFileSync(path.join(metadata,'root.json'),bootstrap,{flag:'wx',mode:0o600});
+  // TUF validates root rotation, metadata signatures, expiry and target hashes.
+  const updater=new Updater({metadataDir:metadata,targetDir:targets,metadataBaseUrl:'https://tuf-repo.github.com',targetBaseUrl:'https://tuf-repo.github.com/targets',config:{fetchTimeout:30000,fetchRetries:0}});
+  await updater.refresh();const info=await updater.getTargetInfo('trusted_root.json');if(!info)fail('GitHub 信任目标缺失');
+  return json(fs.readFileSync(await updater.downloadTarget(info)));
+}
+async function verifiedAsset(context,asset,stage,trust) {
+  if(!asset||!Number.isSafeInteger(asset.size)||asset.size<=0||asset.size>250_000_000||!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(asset.name)||!/^sha256:[a-f0-9]{64}$/.test(asset.digest)||asset.browser_download_url!==`https://github.com/${policy.repository}/releases/download/${context.release.tag_name}/${asset.name}`)fail('资产元数据无效');
+  const bytes=download(asset.browser_download_url,asset.size+1);
+  if(bytes.length!==asset.size||`sha256:${hash(bytes)}`!==asset.digest)fail('下载长度或摘要不匹配');
+  const proofs=api(`attestations/${asset.digest}?predicate_type=release&per_page=100`).attestations;
+  if(!Array.isArray(proofs)||proofs.length>=100)fail('证明列表不完整或分页待核实');
+  const matches=[];
+  for(const item of proofs){
+    if(item.initiator!=='github'||item.repository_id!==policy.repositoryId)continue;
+    let bundle=item.bundle;
+    if(!bundle){
+      const url=new URL(item.bundle_url);
+      if(url.protocol!=='https:'||url.hostname!=='tmaproduction.blob.core.windows.net'||!url.pathname.startsWith('/attestations/'))fail('证明存储来源不符合 GitHub 公共来源');
+      bundle=json(Buffer.from(snappy.uncompress(download(url.href),10_000_000)));
+    }
+    const statement=json(Buffer.from(bundle.dsseEnvelope.payload,'base64'));
+    if(statement.predicate?.tag===context.release.tag_name)matches.push(bundle);
+  }
+  if(matches.length!==1)fail('无法唯一确定对应发行证明');
+  const evidence=verifyReleaseProof({...context,bundle:matches[0],trustedRoot:trust,asset,bytes});
+  fs.writeFileSync(path.join(stage,asset.name),bytes,{flag:'wx',mode:0o600});
+  fs.writeFileSync(path.join(stage,asset.name+'.verification.json'),JSON.stringify(evidence,null,2)+'\n',{flag:'wx',mode:0o600});
+  return {bytes,file:path.join(stage,asset.name),evidence};
+}
+function validateCandidate(root,release,sourceCommit) {
+  const manifestFile=path.join(root,'manifest.json');regular(plainPath(manifestFile));const manifest=json(fs.readFileSync(manifestFile));
+  const {candidateHash,...manifestBody}=manifest;
+  if(candidateHash!==hash(canonical(manifestBody)))fail('候选清单摘要不匹配');
+  if(manifest.candidateHash!==release.candidateHash||manifest.productVersion!==release.version||manifest.platform!=='darwin'||manifest.arch!=='arm64'||manifest.build?.identity!==sourceCommit||manifest.source?.kind!=='repository-local-build'||manifest.runtime?.officialSourceVerified!==true||manifest.signature?.status!=='unsigned'||manifest.signature?.productionDistribution!==false)fail('候选身份、运行时或构建提交不匹配');
+  const expected=new Map([['manifest.json',null],['foundation-kit',manifest.launcher]]);
+  if(!Array.isArray(manifest.files)||manifest.launcher?.path!=='foundation-kit')fail('候选清单无效');
+  for(const record of manifest.files){
+    if(typeof record.path!=='string'||record.path.split('/').some(s=>!s||s==='.'||s==='..')||record.path.includes('\\'))fail('候选清单路径越界');
+    const rel='payload/'+record.path;if(expected.has(rel))fail('候选清单路径重复');expected.set(rel,record);
+  }
+  const actual=new Set();
+  const walk=(dir)=>{for(const name of fs.readdirSync(dir)){const file=path.join(dir,name),s=fs.lstatSync(file);if(s.isSymbolicLink())fail('候选含链接');if(s.uid!==process.getuid()||(s.mode&0o7000)!==0)fail('候选所有者或特殊权限无效');if(s.isDirectory())walk(file);else {if(!s.isFile())fail('候选含特殊文件');const rel=path.relative(root,file);actual.add(rel);if(!expected.has(rel))fail('候选包含未知文件');const r=expected.get(rel);if(r&&(r.size!==s.size||r.mode!==(s.mode&0o777)||r.sha256!==hash(fs.readFileSync(file))))fail('候选字节或模式不匹配');}}};walk(root);
+  if(actual.size!==expected.size||[...expected.keys()].some(k=>!actual.has(k)))fail('候选缺失文件');
+  const node=path.join(root,'payload/runtime/bin/node');if(hash(fs.readFileSync(node))!==release.runtime.binarySha256)fail('官方运行时摘要不匹配');
+  return {manifest,launcher:path.join(root,'foundation-kit')};
+}
+// stage is always created by the CLI from the OS account in production.
+// Keeping this module callable allows contained engineering validation without
+// adding an install/cache override to the user-facing executable.
+export async function acquireRelease(context,stage) {
+  plainPath(stage);const s=fs.lstatSync(stage);if(!s.isDirectory()||(s.mode&0o777)!==0o700||s.uid!==process.getuid()||fs.readdirSync(stage).length)fail('获取目录必须是当前用户的新建独占空目录');
+  const beforeTmp=process.env.TMPDIR;process.env.TMPDIR=stage;
+  try{
+    const trust=await trustRoot(stage);
+    const name=`foundation-release-${context.version}-macos-arm64.json`;
+    const catalogs=context.release.assets.filter(x=>x.name===name);if(catalogs.length!==1)fail('发行清单缺失或重复');
+    const catalog=json((await verifiedAsset(context,catalogs[0],stage,trust)).bytes);
+    const releases=catalog.releases?.filter(x=>x.version===context.version&&x.platform==='darwin'&&x.arch==='arm64');
+    if(catalog.schemaVersion!=='1.0.0'||catalog.product!=='ai-product-foundation-kit'||catalog.keyId!==null||!Number.isSafeInteger(catalog.issuedAt)||catalog.issuedAt>Date.now()||!Number.isSafeInteger(catalog.expiresAt)||catalog.expiresAt<=Date.now()||catalog.expiresAt<=catalog.issuedAt||releases?.length!==1)fail('发行清单身份、有效期或架构不匹配');
+    const release=releases[0];const assetName=`foundation-${release.sha256}.tar.gz`;
+    if(release.repositoryId!==policy.repositoryId||release.sourceCommit!==context.sourceCommit||!/^[a-f0-9]{64}$/.test(release.candidateHash)||release.url!==`https://github.com/${policy.repository}/releases/download/${context.release.tag_name}/${assetName}`||!/^\d+\.\d+\.\d+$/.test(release.runtime?.version)||release.runtime.url!==`https://nodejs.org/dist/v${release.runtime.version}/node-v${release.runtime.version}-darwin-arm64.tar.gz`)fail('清单不能更换仓库、提交或官方运行时来源');
+    const assets=context.release.assets.filter(x=>x.name===assetName&&x.size===release.bytes&&x.digest===`sha256:${release.sha256}`);if(assets.length!==1)fail('归档身份不匹配');
+    const archive=await verifiedAsset(context,assets[0],stage,trust);
+    const listing=spawnSync('/usr/bin/tar',['-tzf',archive.file],{encoding:'utf8',maxBuffer:10_000_000});
+    const types=spawnSync('/usr/bin/tar',['-tvzf',archive.file],{encoding:'utf8',maxBuffer:10_000_000});
+    if(listing.status!==0||types.status!==0||listing.stdout.trim().split('\n').some(p=>p.startsWith('/')||p.includes('\\')||p.split('/').includes('..'))||types.stdout.trim().split('\n').some(p=>!['d','-'].includes(p[0])||/[sStT]/.test(p.slice(1,10))))fail('归档包含不安全路径、链接或特殊权限');
+    const candidate=path.join(stage,'candidate');fs.mkdirSync(candidate,{mode:0o700});
+    const extracted=spawnSync('/usr/bin/tar',['-xzf',archive.file,'-p','--no-same-owner','--no-acls','--no-fflags','--no-mac-metadata','--no-xattrs','-C',candidate],{stdio:'pipe'});if(extracted.status!==0)fail('归档展开失败；未执行');
+    const checked=validateCandidate(candidate,release,context.sourceCommit);
+    const receipt={...archive.evidence,candidateHash:release.candidateHash,launcher:checked.launcher,purpose:'acquisition-cache',retained:true,deletionAuthority:false,installationConfirmed:false};
+    fs.writeFileSync(path.join(stage,'acquisition.json'),JSON.stringify(receipt,null,2)+'\n',{flag:'wx',mode:0o600});
+    return receipt;
+  }finally{if(beforeTmp===undefined)delete process.env.TMPDIR;else process.env.TMPDIR=beforeTmp;}
+}

package/lib/public-policy.json

@@ -0,0 +1,6 @@
+{
+  "repository": "y15801172513-lang/foundation",
+  "repositoryId": 1363748227,
+  "bootstrapRootUrl": "https://raw.githubusercontent.com/cli/cli/v2.98.0/pkg/cmd/attestation/verification/embed/tuf-repo.github.com/root.json",
+  "bootstrapRootSha256": "98cba97be9075bc98b2322de3de85fbd1b70ec7392991dfd2f53d215bede1a8d"
+}

package/lib/release-proof.mjs

@@ -0,0 +1,31 @@
+import crypto from 'node:crypto';
+import {Verifier, toSignedEntity, toTrustMaterial} from '@sigstore/verify';
+import {bundleFromJSON} from '@sigstore/bundle';
+import {TrustedRoot} from '@sigstore/protobuf-specs';
+
+const sha256 = bytes => crypto.createHash('sha256').update(bytes).digest('hex');
+const reject = message => { throw new Error(`发行校验失败：${message}`); };
+
+// The caller obtains trustedRoot from a successfully refreshed GitHub TUF
+// target rooted in the packaged, reviewed GitHub bootstrap root. Never from
+// the downloaded release, caller approval booleans, or a catalog field.
+export function verifyReleaseProof({bundle, trustedRoot, repository, release, sourceCommit, asset, bytes}) {
+  if (!repository || !Number.isSafeInteger(repository.id) || repository.id <= 0 || repository.private !== false || !/^[A-Za-z0-9-]+\/[A-Za-z0-9_.-]+$/.test(repository.full_name)) reject('仓库身份无效');
+  if (!release || !Number.isSafeInteger(release.id) || release.immutable !== true || release.draft !== false || release.prerelease !== false || !/^v\d+\.\d+\.\d+$/.test(release.tag_name) || !/^[a-f0-9]{40}$/.test(sourceCommit)) reject('版本不是绑定提交的正式不可变发行');
+  if (!Buffer.isBuffer(bytes) || !asset || !Number.isSafeInteger(asset.size) || bytes.length !== asset.size || !/^sha256:[a-f0-9]{64}$/.test(asset.digest) || asset.digest !== `sha256:${sha256(bytes)}`) reject('资产长度或摘要不匹配');
+  if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(asset.name) || asset.state !== 'uploaded' || asset.browser_download_url !== `https://github.com/${repository.full_name}/releases/download/${release.tag_name}/${asset.name}`) reject('资产不是固定版本下载地址');
+  if (release.assets?.filter(x => x.id === asset.id && x.name === asset.name && x.size === asset.size && x.digest === asset.digest).length !== 1) reject('资产不属于对应发行');
+  // GitHub releases use its TSA, not public-good Rekor/SCT logs. This matches
+  // gh release verify-asset's GitHub policy: real TSA >=1 + CA + exact SAN.
+  // No timestamp or signature check is disabled.
+  const verifier = new Verifier(toTrustMaterial(TrustedRoot.fromJSON(trustedRoot)), {ctlogThreshold: 0, tlogThreshold: 0, timestampThreshold: 1});
+  const entity = toSignedEntity(bundleFromJSON(bundle));
+  if (!entity.timestamps.some(t => t.$case === 'timestamp-authority')) reject('缺少 GitHub 签名时间戳');
+  verifier.verify(entity, {subjectAlternativeName: /^https:\/\/dotcom\.releases\.github\.com$/});
+  const statement = JSON.parse(Buffer.from(bundle.dsseEnvelope.payload, 'base64').toString('utf8'));
+  const purl = `pkg:github/${repository.full_name}@${release.tag_name}`;
+  const predicate = statement.predicate;
+  if (statement._type !== 'https://in-toto.io/Statement/v1' || statement.predicateType !== 'https://in-toto.io/attestation/release/v0.2' || predicate?.repository !== repository.full_name || String(predicate.repositoryId) !== String(repository.id) || String(predicate.databaseId) !== String(release.id) || predicate.tag !== release.tag_name || predicate.purl !== purl) reject('签名证明的仓库或发行身份不匹配');
+  if (statement.subject?.filter(s => s.uri === purl && s.digest?.sha1 === sourceCommit).length !== 1 || statement.subject?.filter(s => s.name === asset.name && s.digest?.sha256 === asset.digest.slice(7)).length !== 1) reject('签名证明未绑定提交和资产');
+  return Object.freeze({repository: repository.full_name, repositoryId: repository.id, releaseId: release.id, tag: release.tag_name, sourceCommit, asset: asset.name, bytes: bytes.length, sha256: sha256(bytes), verification: 'github-release-signature-timestamp-and-byte-binding'});
+}

package/npm-shrinkwrap.json

@@ -0,0 +1,617 @@
+{
+  "name": "@josephyulei/summon-foundation",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@josephyulei/summon-foundation",
+      "version": "0.1.0",
+      "license": "MIT",
+      "dependencies": {
+        "@sigstore/bundle": "4.0.0",
+        "@sigstore/protobuf-specs": "0.5.0",
+        "@sigstore/verify": "3.1.1",
+        "snappyjs": "0.7.0",
+        "tuf-js": "4.1.0"
+      },
+      "bin": {
+        "summon": "bin/summon.mjs"
+      },
+      "engines": {
+        "node": ">=22.9.0"
+      }
+    },
+    "node_modules/@gar/promise-retry": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz",
+      "integrity": "sha512-GmzA9ckNokPypTg10pgpeHNQe7ph+iIKKmhKu3Ob9ANkswreCx7R3cKmY781K8QK3AqVL3xVh9A42JvIAbkkSA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@npmcli/agent": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/agent/-/agent-4.0.2.tgz",
+      "integrity": "sha512-EUEuWAxnL07Sp5/iC/1X6Xj+XThUvnbei9zfRWZdEXa7lss9RTHMhAHBeg+MZ5To9s/gGaSI+UwZTPdYMvKSeg==",
+      "license": "ISC",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "http-proxy-agent": "^7.0.0",
+        "https-proxy-agent": "^7.0.1",
+        "lru-cache": "^11.2.1",
+        "socks-proxy-agent": "^8.0.3"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@npmcli/fs": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/fs/-/fs-5.0.0.tgz",
+      "integrity": "sha512-7OsC1gNORBEawOa5+j2pXN9vsicaIOH5cPXxoR6fJOmH6/EXpJB2CajXOu1fPRFun2m1lktEFX11+P89hqO/og==",
+      "license": "ISC",
+      "dependencies": {
+        "semver": "^7.3.5"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@npmcli/redact": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/redact/-/redact-4.0.0.tgz",
+      "integrity": "sha512-gOBg5YHMfZy+TfHArfVogwgfBeQnKbbGo3pSUyK/gSI0AVu+pEiDVcKlQb0D8Mg1LNRZILZ6XG8I5dJ4KuAd9Q==",
+      "license": "ISC",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@sigstore/bundle": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@sigstore/bundle/-/bundle-4.0.0.tgz",
+      "integrity": "sha512-NwCl5Y0V6Di0NexvkTqdoVfmjTaQwoLM236r89KEojGmq/jMls8S+zb7yOwAPdXvbwfKDlP+lmXgAL4vKSQT+A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@sigstore/protobuf-specs": "^0.5.0"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@sigstore/core": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/@sigstore/core/-/core-3.2.1.tgz",
+      "integrity": "sha512-qRsxPnCrbC/puegGxKuynfnxgLiHqWStrSjxkoB4YKqq3Z3s4cyZyj42ZdWFAEblNP65C+rBH8EuREHIXoi83g==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@sigstore/protobuf-specs": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/@sigstore/protobuf-specs/-/protobuf-specs-0.5.0.tgz",
+      "integrity": "sha512-MM8XIwUjN2bwvCg1QvrMtbBmpcSHrkhFSCu1D11NyPvDQ25HEc4oG5/OcQfd/Tlf/OxmKWERDj0zGE23jQaMwA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": "^18.17.0 || >=20.5.0"
+      }
+    },
+    "node_modules/@sigstore/verify": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/@sigstore/verify/-/verify-3.1.1.tgz",
+      "integrity": "sha512-qv7+G3J2cc6wwFj3yKvXOamzqhMwSk1ogPGmhpS8iXllcPrJaIIBA+4HbttlHVu1pqWTdmaCH/WE7UOC51kdoA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@sigstore/bundle": "^4.0.0",
+        "@sigstore/core": "^3.2.1",
+        "@sigstore/protobuf-specs": "^0.5.0"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/@tufjs/canonical-json": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@tufjs/canonical-json/-/canonical-json-2.0.0.tgz",
+      "integrity": "sha512-yVtV8zsdo8qFHe+/3kw81dSLyF7D576A5cCFCi4X7B39tWT7SekaEFUnvnWJHz+9qO7qJTah1JbrDjWKqFtdWA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^16.14.0 || >=18.0.0"
+      }
+    },
+    "node_modules/@tufjs/models": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-4.1.0.tgz",
+      "integrity": "sha512-Y8cK9aggNRsqJVaKUlEYs4s7CvQ1b1ta2DVPyAimb0I2qhzjNk+A+mxvll/klL0RlfuIUei8BF7YWiua4kQqww==",
+      "license": "MIT",
+      "dependencies": {
+        "@tufjs/canonical-json": "2.0.0",
+        "minimatch": "^10.1.1"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/balanced-match": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
+    "node_modules/brace-expansion": {
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/cacache": {
+      "version": "20.0.4",
+      "resolved": "https://registry.npmjs.org/cacache/-/cacache-20.0.4.tgz",
+      "integrity": "sha512-M3Lab8NPYlZU2exsL3bMVvMrMqgwCnMWfdZbK28bn3pK6APT/Te/I8hjRPNu1uwORY9a1eEQoifXbKPQMfMTOA==",
+      "license": "ISC",
+      "dependencies": {
+        "@npmcli/fs": "^5.0.0",
+        "fs-minipass": "^3.0.0",
+        "glob": "^13.0.0",
+        "lru-cache": "^11.1.0",
+        "minipass": "^7.0.3",
+        "minipass-collect": "^2.0.1",
+        "minipass-flush": "^1.0.5",
+        "minipass-pipeline": "^1.2.4",
+        "p-map": "^7.0.2",
+        "ssri": "^13.0.0"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz",
+      "integrity": "sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fs-minipass": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-3.0.3.tgz",
+      "integrity": "sha512-XUBA9XClHbnJWSfBzjkm6RvPsyg3sryZt06BEQoXcF7EK/xpGaQYJgQKDJSUH5SGZ76Y7pFx1QBnXz09rU5Fbw==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^7.0.3"
+      },
+      "engines": {
+        "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
+      }
+    },
+    "node_modules/glob": {
+      "version": "13.0.6",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz",
+      "integrity": "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "minimatch": "^10.2.2",
+        "minipass": "^7.1.3",
+        "path-scurry": "^2.0.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/http-cache-semantics": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.2.0.tgz",
+      "integrity": "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==",
+      "license": "BSD-2-Clause"
+    },
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.7.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/ip-address": {
+      "version": "10.7.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.0.tgz",
+      "integrity": "sha512-BGFsyJd5mpXp3rK6jIdADLNgpJUK1jnjzvYF8lK+VyDab9JAmqN0YOKDdP17HlgKb2+ehPgDc8EtnRLbGCAMhA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
+    "node_modules/lru-cache": {
+      "version": "11.5.2",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.2.tgz",
+      "integrity": "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/make-fetch-happen": {
+      "version": "15.0.6",
+      "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.6.tgz",
+      "integrity": "sha512-Je0fLJ0F5atA7F+eIlLzk+Wkcl57JDf4kf+EW8xiP5E31xOQxkIxTbgf1Oi1Lw9tRI9UEMRdI5Vz2xTzoNU1Jw==",
+      "license": "ISC",
+      "dependencies": {
+        "@gar/promise-retry": "^1.0.0",
+        "@npmcli/agent": "^4.0.0",
+        "@npmcli/redact": "^4.0.0",
+        "cacache": "^20.0.1",
+        "http-cache-semantics": "^4.1.1",
+        "minipass": "^7.0.2",
+        "minipass-fetch": "^5.0.0",
+        "minipass-flush": "^1.0.5",
+        "minipass-pipeline": "^1.2.4",
+        "negotiator": "^1.0.0",
+        "proc-log": "^6.0.0",
+        "ssri": "^13.0.0"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/minimatch": {
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "brace-expansion": "^5.0.8"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/minipass": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
+      "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/minipass-collect": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-2.0.1.tgz",
+      "integrity": "sha512-D7V8PO9oaz7PWGLbCACuI1qEOsq7UKfLotx/C0Aet43fCUB/wfQ7DYeq2oR/svFJGYDHPr38SHATeaj/ZoKHKw==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^7.0.3"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/minipass-fetch": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-5.0.2.tgz",
+      "integrity": "sha512-2d0q2a8eCi2IRg/IGubCNRJoYbA1+YPXAzQVRFmB45gdGZafyivnZ5YSEfo3JikbjGxOdntGFvBQGqaSMXlAFQ==",
+      "license": "MIT",
+      "dependencies": {
+        "minipass": "^7.0.3",
+        "minipass-sized": "^2.0.0",
+        "minizlib": "^3.0.1"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      },
+      "optionalDependencies": {
+        "iconv-lite": "^0.7.2"
+      }
+    },
+    "node_modules/minipass-flush": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.7.tgz",
+      "integrity": "sha512-TbqTz9cUwWyHS2Dy89P3ocAGUGxKjjLuR9z8w4WUTGAVgEj17/4nhgo2Du56i0Fm3Pm30g4iA8Lcqctc76jCzA==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "minipass": "^3.0.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/minipass-flush/node_modules/minipass": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz",
+      "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==",
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/minipass-pipeline": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz",
+      "integrity": "sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/minipass-pipeline/node_modules/minipass": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz",
+      "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==",
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/minipass-sized": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/minipass-sized/-/minipass-sized-2.0.0.tgz",
+      "integrity": "sha512-zSsHhto5BcUVM2m1LurnXY6M//cGhVaegT71OfOXoprxT6o780GZd792ea6FfrQkuU4usHZIUczAQMRUE2plzA==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/minizlib": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
+      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
+      "license": "MIT",
+      "dependencies": {
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.1.0.tgz",
+      "integrity": "sha512-NMPBRMJgiQHjbd8phG3Vebdx4kZ1H121rbl5IkMqeOsahptB9BKo/d7oJ3zTXqTgagn2bWlNSXkh0QUGM31RYg==",
+      "license": "MIT",
+      "dependencies": {
+        "content-type": "^2.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/p-map": {
+      "version": "7.0.7",
+      "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.7.tgz",
+      "integrity": "sha512-VaWRu2i4FJNRtiRWCuuQRgfQ1B7a6+gMSrO+3j0EQi/k0ULfS9kosRxGoiqwzIjZTDI02tGfk5mXXltLg6QtfQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/path-scurry": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz",
+      "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "lru-cache": "^11.0.0",
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/proc-log": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
+      "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==",
+      "license": "ISC",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/smart-buffer": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz",
+      "integrity": "sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 6.0.0",
+        "npm": ">= 3.0.0"
+      }
+    },
+    "node_modules/snappyjs": {
+      "version": "0.7.0",
+      "resolved": "https://registry.npmjs.org/snappyjs/-/snappyjs-0.7.0.tgz",
+      "integrity": "sha512-u5iEEXkMe2EInQio6Wv9LWHOQYRDbD2O9hzS27GpT/lwfIQhTCnHCTqedqHIHe9ZcvQo+9au6vngQayipz1NYw==",
+      "license": "MIT"
+    },
+    "node_modules/socks": {
+      "version": "2.8.10",
+      "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.10.tgz",
+      "integrity": "sha512-e0VyvkVTwVYViNovRkZ9aodhxVlyoMn7eJhVUPxZ+eK9P/7CBkxvvsBOHqFPEH416726W8tLXXXjKwqgTErrCQ==",
+      "license": "MIT",
+      "dependencies": {
+        "ip-address": "^10.1.1",
+        "smart-buffer": "^4.2.0"
+      },
+      "engines": {
+        "node": ">= 10.0.0",
+        "npm": ">= 3.0.0"
+      }
+    },
+    "node_modules/socks-proxy-agent": {
+      "version": "8.0.5",
+      "resolved": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz",
+      "integrity": "sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "^4.3.4",
+        "socks": "^2.8.3"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/ssri": {
+      "version": "13.0.1",
+      "resolved": "https://registry.npmjs.org/ssri/-/ssri-13.0.1.tgz",
+      "integrity": "sha512-QUiRf1+u9wPTL/76GTYlKttDEBWV1ga9ZXW8BG6kfdeyyM8LGPix9gROyg9V2+P0xNyF3X2Go526xKFdMZrHSQ==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^7.0.3"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/tuf-js": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/tuf-js/-/tuf-js-4.1.0.tgz",
+      "integrity": "sha512-50QV99kCKH5P/Vs4E2Gzp7BopNV+KzTXqWeaxrfu5IQJBOULRsTIS9seSsOVT8ZnGXzCyx55nYWAi4qJzpZKEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@tufjs/models": "4.1.0",
+        "debug": "^4.4.3",
+        "make-fetch-happen": "^15.0.1"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/yallist": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+      "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==",
+      "license": "ISC"
+    }
+  }
+}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@josephyulei/summon-foundation",
+  "version": "0.1.0",
+  "description": "Prepare a verified Foundation release for an explicitly confirmed Codex installation",
+  "type": "module",
+  "bin": {"summon": "bin/summon.mjs"},
+  "files": ["bin/", "lib/", "README.md", "LICENSE", "THIRD_PARTY_NOTICES.txt", "npm-shrinkwrap.json"],
+  "license": "MIT",
+  "engines": {"node": ">=22.9.0"},
+  "repository": {"type": "git", "url": "git+https://github.com/y15801172513-lang/foundation.git", "directory": "distribution/summon-foundation"},
+  "publishConfig": {"access": "public", "registry": "https://registry.npmjs.org/"},
+  "dependencies": {
+    "@sigstore/verify": "3.1.1",
+    "@sigstore/bundle": "4.0.0",
+    "@sigstore/protobuf-specs": "0.5.0",
+    "tuf-js": "4.1.0",
+    "snappyjs": "0.7.0"
+  }
+}