@kitman-sh/sdk 0.0.0-stage → 0.7.0

package/types/packages/core/src/runner-trust.d.ts

@@ -0,0 +1,67 @@
+export declare const RunnerArchitecture: readonly ['amd64', 'arm64'];
+export type RunnerArchitecture = (typeof RunnerArchitecture)[number];
+declare const RunnerArtifactKinds: readonly ['host_package', 'oci_image'];
+type RunnerArtifactKind = (typeof RunnerArtifactKinds)[number];
+declare const RunnerArtifactTrustErrorCodes: readonly ['artifact_signature_invalid', 'artifact_sbom_invalid', 'artifact_provenance_invalid', 'artifact_expired', 'artifact_signed_in_future', 'artifact_architecture_mismatch', 'artifact_digest_not_allowed', 'artifact_profile_mismatch', 'artifact_sbom_mismatch', 'artifact_provenance_mismatch', 'artifact_metadata_rollback', 'artifact_metadata_expired', 'artifact_subject_mismatch', 'artifact_index_invalid'];
+type RunnerArtifactTrustErrorCode = (typeof RunnerArtifactTrustErrorCodes)[number];
+declare const RunnerArtifactTrustError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RunnerArtifactTrustError";
+} & Readonly<A>;
+export declare class RunnerArtifactTrustError extends RunnerArtifactTrustError_base<{
+    readonly code: RunnerArtifactTrustErrorCode;
+    readonly message: string;
+}> {
+    constructor(code: RunnerArtifactTrustErrorCode);
+}
+export type RunnerArtifactManifest = {
+    readonly contractVersion: 'runner-trust-distribution.v1';
+    readonly artifactId: string;
+    readonly kind: RunnerArtifactKind;
+    readonly version: string;
+    readonly channel: string;
+    readonly architecture: RunnerArchitecture;
+    readonly platform: 'linux';
+    readonly subjectDigest: string;
+    readonly subjectLength: number;
+    readonly profileDigest: string;
+    readonly certificationDigest: string;
+    readonly sbomDigest: string;
+    readonly provenanceDigest: string;
+    readonly metadataVersion: number;
+    readonly rollbackFloor: number;
+    readonly signedAt: string;
+    readonly expiresAt: string;
+};
+type RunnerArtifactManifestInput = Omit<RunnerArtifactManifest, 'contractVersion' | 'kind' | 'platform' | 'signedAt' | 'expiresAt'> & {
+    readonly kind?: RunnerArtifactKind;
+    readonly platform?: 'linux';
+    readonly signedAt: Date | string;
+    readonly expiresAt: Date | string;
+};
+type RunnerArtifactVerificationResult = {
+    readonly ok: boolean;
+    readonly reasons: readonly RunnerArtifactTrustErrorCode[];
+};
+type RunnerOciManifest = {
+    readonly digest: string;
+    readonly size: number;
+    readonly platform: {
+        readonly os: 'linux';
+        readonly architecture: RunnerArchitecture;
+    };
+    readonly artifactDigest: string;
+};
+export type RunnerOciIndex = {
+    readonly schemaVersion: 2;
+    readonly mediaType: 'application/vnd.oci.image.index.v1+json';
+    readonly indexDigest: string;
+    readonly manifests: readonly RunnerOciManifest[];
+};
+export declare function createRunnerArtifactManifest(input: RunnerArtifactManifestInput): RunnerArtifactManifest;
+export declare function verifyRunnerOciIndex(index: RunnerOciIndex): RunnerArtifactVerificationResult;
+export declare function createRunnerOciIndex(artifacts: readonly RunnerArtifactManifest[], options?: {
+    readonly digest?: string;
+}): RunnerOciIndex;
+export declare function runnerCanonicalJson<ValueType>(value: ValueType): string;
+export declare function sha256(value: string): string;
+export {};