@mannyc1/ts-release 0.0.7 → 0.2.2

package/dist/release/prepared.js

@@ -0,0 +1,268 @@
+import * as Schema from "effect/Schema";
+import { encodeCanonicalJson, parseStrictJson } from "../model/canonical.js";
+import { ArtifactCollectionContract, ArtifactCollectionMember, cardinalityAccepts, cardinalityIssue, collectionContractIssue, collectionMemberId, collectionMemberPath } from "../model/artifact-collection.js";
+import { Sha256Digest } from "../model/digest.js";
+import { CatalogRepositoryPath, GitBranchName, GitHubRepositoryCoordinate, PreparedCatalogRenderer } from "../model/catalog.js";
+import { PythonDistribution } from "../model/python-distribution.js";
+import { NonEmptyName, OutputId, SafeRelativePath, Version } from "../model/primitives.js";
+import { ExplicitInputSnapshot, StagingSnapshot } from "./context.js";
+import { CanonicalNpmRegistryEndpoint, NpmAccess, NpmAuthentication, NpmDistTag, NpmProvenancePolicy, PyPiAuthentication, PyPiProjectName, PyPiRepository } from "../recipes/config.js";
+import { PublicationAuthorityIntent, catalogPublicationAuthorityIssue, githubPublicationAuthorityIssue, npmPublicationAuthorityIssue, pyPiPublicationAuthorityIssue } from "./graph.js";
+const optional = Schema.optionalKey;
+const artifactKind = Schema.Literals(["file", "executable", "archive", "package", "digest"]);
+export class PreparedSource extends Schema.Class("PreparedSource")({
+    commit: NonEmptyName, tree: NonEmptyName, clean: Schema.Literal(true),
+    packageManifestPath: SafeRelativePath, packageManifestDigest: Sha256Digest,
+    materialized: StagingSnapshot
+}) {
+}
+export class PreparedProject extends Schema.Class("PreparedProject")({
+    name: NonEmptyName, packageName: optional(NonEmptyName), version: Version, tag: NonEmptyName,
+    repository: optional(Schema.NonEmptyString)
+}) {
+}
+export class PreparedArtifact extends Schema.Class("PreparedArtifact")({
+    id: OutputId, path: SafeRelativePath, kind: artifactKind, size: Schema.Number.check(Schema.makeFilter((value) => Number.isSafeInteger(value) && value >= 0
+        ? undefined : "Prepared artifact size must be a nonnegative safe integer.")), digest: Sha256Digest, blob: Sha256Digest, mediaType: optional(Schema.NonEmptyString),
+    producer: NonEmptyName,
+    inputBasis: Sha256Digest
+}) {
+}
+/** Durable collection provenance; the graph itself remains ephemeral. */
+export class PreparedArtifactCollection extends Schema.Class("PreparedArtifactCollection")({
+    contract: ArtifactCollectionContract,
+    members: Schema.Array(ArtifactCollectionMember)
+}) {
+}
+export class PreparedExecutionInputs extends Schema.Class("PreparedExecutionInputs")({
+    environment: Schema.Literal("closed"),
+    network: Schema.Literal("prohibited"),
+    timezone: Schema.Literal("UTC"),
+    locale: Schema.Literal("C"),
+    clock: Schema.Literal("source-date-epoch=0;host-clock-not-isolated"),
+    randomness: Schema.Literal("host-randomness-not-isolated"),
+    platform: Schema.NonEmptyString,
+    runtime: Schema.NonEmptyString,
+    networkIsolation: Schema.NonEmptyString,
+    bunCompileRuntimes: Schema.NonEmptyString,
+    npmPack: Schema.NonEmptyString,
+    releaseGraph: Sha256Digest,
+    preparer: Schema.NonEmptyString
+}) {
+}
+export class PreparedProvenance extends Schema.Class("PreparedProvenance")({
+    source: StagingSnapshot,
+    externalInputs: Schema.Array(ExplicitInputSnapshot),
+    execution: PreparedExecutionInputs,
+    inputBasis: Sha256Digest,
+    reproducibility: Schema.Literal("not-asserted")
+}) {
+}
+export class PreparedNpmPublication extends Schema.TaggedClass()("PreparedNpmPublication", {
+    id: NonEmptyName,
+    artifactId: OutputId,
+    packageName: NonEmptyName,
+    version: Version,
+    registryUrl: CanonicalNpmRegistryEndpoint,
+    distTag: NpmDistTag,
+    access: NpmAccess,
+    authentication: NpmAuthentication,
+    provenance: NpmProvenancePolicy,
+    authority: PublicationAuthorityIntent
+}) {
+}
+export class PreparedGitHubAsset extends Schema.Class("PreparedGitHubAsset")({
+    artifactId: OutputId, name: Schema.NonEmptyString, mediaType: Schema.NonEmptyString
+}) {
+}
+export class PreparedGitHubPublication extends Schema.TaggedClass()("PreparedGitHubPublication", {
+    id: NonEmptyName, repository: Schema.NonEmptyString, tag: NonEmptyName, title: NonEmptyName,
+    draft: Schema.Boolean, prerelease: Schema.Boolean, targetCommit: NonEmptyName, body: optional(Schema.String),
+    assets: Schema.Array(PreparedGitHubAsset), authority: PublicationAuthorityIntent
+}) {
+}
+export class PreparedPyPiFile extends Schema.Class("PreparedPyPiFile")({
+    artifactId: OutputId,
+    filename: NonEmptyName,
+    size: Schema.Number.check(Schema.makeFilter((value) => Number.isSafeInteger(value) && value >= 0 ? undefined : "PyPI file size must be a nonnegative safe integer.")),
+    sha256: Sha256Digest,
+    mediaType: Schema.Literals(["application/zip", "application/gzip"]),
+    distribution: PythonDistribution,
+    authority: PublicationAuthorityIntent
+}) {
+}
+export class PreparedPyPiPublication extends Schema.TaggedClass()("PreparedPyPiPublication", {
+    id: NonEmptyName,
+    project: PyPiProjectName,
+    version: Version,
+    repository: PyPiRepository,
+    simpleBaseUrl: Schema.NonEmptyString,
+    projectUrl: Schema.NonEmptyString,
+    uploadUrl: Schema.NonEmptyString,
+    authentication: PyPiAuthentication,
+    files: Schema.NonEmptyArray(PreparedPyPiFile)
+}) {
+}
+export class PreparedCatalogPublication extends Schema.TaggedClass()("PreparedCatalogPublication", {
+    id: NonEmptyName,
+    catalogId: NonEmptyName,
+    targetArtifactId: OutputId,
+    stateArtifactId: OutputId,
+    targetDigest: Sha256Digest,
+    stateDigest: Sha256Digest,
+    repository: GitHubRepositoryCoordinate,
+    branch: GitBranchName,
+    targetPath: CatalogRepositoryPath,
+    statePath: CatalogRepositoryPath,
+    version: Version,
+    sourceRepository: GitHubRepositoryCoordinate,
+    sourceTag: NonEmptyName,
+    renderer: PreparedCatalogRenderer,
+    authority: PublicationAuthorityIntent
+}) {
+}
+const PreparedPublicationVariants = Schema.Union([
+    PreparedNpmPublication, PreparedPyPiPublication, PreparedGitHubPublication, PreparedCatalogPublication
+]);
+export const PreparedPublication = PreparedPublicationVariants.pipe(Schema.check(Schema.makeFilter((publication) => publication._tag === "PreparedNpmPublication"
+    ? npmPublicationAuthorityIssue(publication)
+    : publication._tag === "PreparedPyPiPublication"
+        ? pyPiPublicationAuthorityIssue(publication)
+        : publication._tag === "PreparedGitHubPublication"
+            ? githubPublicationAuthorityIssue(publication)
+            : catalogPublicationAuthorityIssue(publication))));
+export class PreparedReleaseV2 extends Schema.Class("PreparedReleaseV2")({
+    kind: Schema.Literal("complete"),
+    schemaVersion: Schema.Literal("prepared-release/v2"), source: PreparedSource, project: PreparedProject,
+    provenance: PreparedProvenance,
+    artifacts: Schema.Array(PreparedArtifact),
+    collections: Schema.Array(PreparedArtifactCollection),
+    publications: Schema.Array(PreparedPublication)
+}) {
+}
+export class PreparedManifestError extends Schema.TaggedErrorClass()("PreparedManifestError", {
+    reason: Schema.String
+}) {
+}
+const assertCompletePreparedRelease = (manifest) => {
+    if (manifest.kind !== "complete")
+        throw new Error("prepared manifest kind must be 'complete'");
+    if (manifest.source.materialized.digest.hex !== manifest.provenance.source.digest.hex) {
+        throw new Error("prepared source materialization must match provenance source");
+    }
+    for (const publication of manifest.publications) {
+        if (publication._tag === "PreparedNpmPublication" &&
+            publication.authority.publishStrategy.kind === "trusted-publishing" &&
+            publication.authority.publishStrategy.sourceCommit.toString() !== manifest.source.commit.toString()) {
+            throw new Error(`prepared npm publication ${publication.id} source commit disagrees with the verified source`);
+        }
+        if (publication._tag === "PreparedPyPiPublication" &&
+            publication.authentication.strategy === "trusted-publishing" &&
+            publication.files.some((file) => file.authority.publishStrategy.kind !== "trusted-publishing" ||
+                file.authority.publishStrategy.sourceCommit.toString() !== manifest.source.commit.toString())) {
+            throw new Error(`prepared PyPI publication ${publication.id} source commit disagrees with the verified source`);
+        }
+    }
+    for (const artifact of manifest.artifacts) {
+        if (artifact.inputBasis.hex !== manifest.provenance.inputBasis.hex) {
+            throw new Error(`prepared artifact ${artifact.id} has a foreign input basis`);
+        }
+    }
+    const artifacts = new Map(manifest.artifacts.map((artifact) => [artifact.id.toString(), artifact]));
+    for (const publication of manifest.publications) {
+        if (publication._tag !== "PreparedCatalogPublication")
+            continue;
+        const target = artifacts.get(publication.targetArtifactId.toString());
+        const state = artifacts.get(publication.stateArtifactId.toString());
+        if (target === undefined || state === undefined || target.digest.hex !== publication.targetDigest.hex ||
+            state.digest.hex !== publication.stateDigest.hex || target.kind !== "file" || state.kind !== "file") {
+            throw new Error(`prepared catalog publication ${publication.id} does not bind its exact target/state artifacts`);
+        }
+    }
+    const collectionIds = new Set();
+    const collectionRoots = new Map();
+    const collectionProducers = new Set();
+    const memberArtifacts = new Set();
+    let previousCollection = "";
+    for (const collection of manifest.collections) {
+        const { contract } = collection;
+        const id = contract.id.toString();
+        if (id <= previousCollection)
+            throw new Error("prepared artifact collections must have unique code-point-sorted ids");
+        previousCollection = id;
+        const foldedId = id.toLocaleLowerCase("en-US");
+        if (collectionIds.has(foldedId))
+            throw new Error(`prepared artifact collection ${id} has a case-colliding id`);
+        collectionIds.add(foldedId);
+        const foldedRoot = contract.root.toString().toLocaleLowerCase("en-US");
+        const overlappingRoot = [...collectionRoots.entries()].find(([root]) => foldedRoot === root || foldedRoot.startsWith(`${root}/`) || root.startsWith(`${foldedRoot}/`));
+        if (overlappingRoot !== undefined) {
+            throw new Error(`prepared artifact collection ${id} root overlaps collection ${overlappingRoot[1]}`);
+        }
+        collectionRoots.set(foldedRoot, id);
+        if (collectionProducers.has(contract.producer.toString())) {
+            throw new Error(`prepared artifact collection ${id} repeats producer ${contract.producer}`);
+        }
+        collectionProducers.add(contract.producer.toString());
+        const issue = cardinalityIssue(contract.cardinality);
+        if (issue !== undefined)
+            throw new Error(`prepared artifact collection ${id}: ${issue}`);
+        const contractIssue = collectionContractIssue(contract);
+        if (contractIssue !== undefined)
+            throw new Error(`prepared artifact collection ${id}: ${contractIssue}`);
+        if (!cardinalityAccepts(contract.cardinality, collection.members.length)) {
+            throw new Error(`prepared artifact collection ${id} has ${collection.members.length} members outside its declared cardinality`);
+        }
+        const keys = new Set();
+        let previousKey = "";
+        for (const member of collection.members) {
+            const key = member.key.toString();
+            if (key <= previousKey)
+                throw new Error(`prepared artifact collection ${id} member keys must be unique and code-point sorted`);
+            previousKey = key;
+            const foldedKey = key.toLocaleLowerCase("en-US");
+            if (keys.has(foldedKey))
+                throw new Error(`prepared artifact collection ${id} has duplicate normalized member key ${key}`);
+            keys.add(foldedKey);
+            const expectedId = collectionMemberId(contract, member.key);
+            if (member.artifactId !== expectedId)
+                throw new Error(`prepared artifact collection ${id} member ${key} has an invalid stable artifact id`);
+            const artifact = artifacts.get(member.artifactId.toString());
+            if (artifact === undefined)
+                throw new Error(`prepared artifact collection ${id} member ${key} references no artifact`);
+            if (artifact.path !== collectionMemberPath(contract, member.key) || artifact.kind !== contract.artifactKind ||
+                artifact.mediaType !== contract.mediaType || artifact.producer.toString() !== contract.producer.toString()) {
+                throw new Error(`prepared artifact collection ${id} member ${key} disagrees with its contract`);
+            }
+            if (memberArtifacts.has(member.artifactId.toString())) {
+                throw new Error(`prepared artifact ${member.artifactId} belongs to more than one collection`);
+            }
+            memberArtifacts.add(member.artifactId.toString());
+        }
+    }
+    for (const artifact of manifest.artifacts) {
+        if (collectionProducers.has(artifact.producer.toString()) && !memberArtifacts.has(artifact.id.toString())) {
+            throw new Error(`prepared collection producer ${artifact.producer} has unclaimed artifact ${artifact.id}`);
+        }
+    }
+};
+export const encodePreparedRelease = (manifest) => {
+    assertCompletePreparedRelease(manifest);
+    return new TextEncoder().encode(encodeCanonicalJson(Schema.encodeSync(PreparedReleaseV2)(manifest)));
+};
+export const decodePreparedRelease = (bytes) => {
+    try {
+        const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+        const value = Schema.decodeUnknownSync(PreparedReleaseV2, { onExcessProperty: "error" })(parseStrictJson(text));
+        assertCompletePreparedRelease(value);
+        const canonical = encodePreparedRelease(value);
+        if (canonical.length !== bytes.length || canonical.some((byte, index) => byte !== bytes[index])) {
+            throw new Error("manifest bytes are not canonical");
+        }
+        return value;
+    }
+    catch (cause) {
+        throw PreparedManifestError.make({ reason: cause instanceof Error ? cause.message : String(cause) });
+    }
+};
+//# sourceMappingURL=prepared.js.map

package/dist/release/prepared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared.js","sourceRoot":"","sources":["../../src/release/prepared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAC1F,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,YAAY,CAAA;AAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAA;AACnC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;AAE5F,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAAC;IACjF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACrE,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,YAAY;IAC1E,YAAY,EAAE,eAAe;CAC9B,CAAC;CAAG;AAEL,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,iBAAiB,CAAC,CAAC;IACpF,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY;IAC5F,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;CAC5C,CAAC;CAAG;AAEL,MAAM,OAAO,gBAAiB,SAAQ,MAAM,CAAC,KAAK,CAAmB,kBAAkB,CAAC,CAAC;IACvF,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CACjF,MAAM,CAAC,UAAU,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAC9E,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;IACvF,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,YAAY;CACzB,CAAC;CAAG;AAEL,yEAAyE;AACzE,MAAM,OAAO,0BACX,SAAQ,MAAM,CAAC,KAAK,CAA6B,4BAA4B,CAAC,CAAC;IAC7E,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAChD,CAAC;CAAG;AAEP,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,KAAK,CAA0B,yBAAyB,CAAC,CAAC;IAC5G,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,6CAA6C,CAAC;IACpE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC,cAAc;IAC/B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,gBAAgB,EAAE,MAAM,CAAC,cAAc;IACvC,kBAAkB,EAAE,MAAM,CAAC,cAAc;IACzC,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,YAAY,EAAE,YAAY;IAC1B,QAAQ,EAAE,MAAM,CAAC,cAAc;CAChC,CAAC;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,KAAK,CAAqB,oBAAoB,CAAC,CAAC;IAC7F,MAAM,EAAE,eAAe;IACvB,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACnD,SAAS,EAAE,uBAAuB;IAClC,UAAU,EAAE,YAAY;IACxB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;CAChD,CAAC;CAAG;AAEL,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CAAC,wBAAwB,EAAE;IACjH,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,YAAY;IACzB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,4BAA4B;IACzC,OAAO,EAAE,UAAU;IACnB,MAAM,EAAE,SAAS;IACjB,cAAc,EAAE,iBAAiB;IACjC,UAAU,EAAE,mBAAmB;IAC/B,SAAS,EAAE,0BAA0B;CACtC,CAAC;CAAG;AAEL,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,KAAK,CAAsB,qBAAqB,CAAC,CAAC;IAChG,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc;CACpF,CAAC;CAAG;AAEL,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAAC,2BAA2B,EAAE;IAC1H,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY;IAC3F,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5G,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,0BAA0B;CACjF,CAAC;CAAG;AAEL,MAAM,OAAO,gBAAiB,SAAQ,MAAM,CAAC,KAAK,CAAmB,kBAAkB,CAAC,CAAC;IACvF,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,YAAY;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAa,EAAE,EAAE,CAC5D,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC;IAChH,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IACnE,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,0BAA0B;CACtC,CAAC;CAAG;AAEL,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CAAC,yBAAyB,EAAE;IACpH,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,cAAc;IAC1B,aAAa,EAAE,MAAM,CAAC,cAAc;IACpC,UAAU,EAAE,MAAM,CAAC,cAAc;IACjC,SAAS,EAAE,MAAM,CAAC,cAAc;IAChC,cAAc,EAAE,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC;CAC9C,CAAC;CAAG;AAEL,MAAM,OAAO,0BACX,SAAQ,MAAM,CAAC,WAAW,EAA8B,CAAC,4BAA4B,EAAE;IACrF,EAAE,EAAE,YAAY;IAChB,SAAS,EAAE,YAAY;IACvB,gBAAgB,EAAE,QAAQ;IAC1B,eAAe,EAAE,QAAQ;IACzB,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,YAAY;IACzB,UAAU,EAAE,0BAA0B;IACtC,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,qBAAqB;IACjC,SAAS,EAAE,qBAAqB;IAChC,OAAO,EAAE,OAAO;IAChB,gBAAgB,EAAE,0BAA0B;IAC5C,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,uBAAuB;IACjC,SAAS,EAAE,0BAA0B;CACtC,CAAC;CAAG;AAEP,MAAM,2BAA2B,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/C,sBAAsB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,0BAA0B;CACvG,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAC9E,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,wBAAwB;IAC9E,CAAC,CAAC,4BAA4B,CAAC,WAAW,CAAC;IAC3C,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,yBAAyB;QAChD,CAAC,CAAC,6BAA6B,CAAC,WAAW,CAAC;QAC5C,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,2BAA2B;YAClD,CAAC,CAAC,+BAA+B,CAAC,WAAW,CAAC;YAC9C,CAAC,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC,CACnD,CAAC,CAAA;AAGF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CAAoB,mBAAmB,CAAC,CAAC;IAC1F,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe;IACtG,UAAU,EAAE,kBAAkB;IAC9B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC;IACrD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAChD,CAAC;CAAG;AAEL,MAAM,OAAO,qBACX,SAAQ,MAAM,CAAC,gBAAgB,EAAyB,CAAC,uBAAuB,EAAE;IAChF,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC;CAAG;AAEP,MAAM,6BAA6B,GAAG,CAAC,QAA2B,EAAQ,EAAE;IAC1E,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9F,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,IAAI,KAAK,wBAAwB;YAC/C,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,KAAK,oBAAoB;YACnE,WAAW,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACtG,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,CAAC,EAAE,mDAAmD,CAAC,CAAA;QAChH,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,yBAAyB;YAChD,WAAW,CAAC,cAAc,CAAC,QAAQ,KAAK,oBAAoB;YAC5D,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,KAAK,oBAAoB;gBAC3F,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAClG,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,CAAC,EAAE,mDAAmD,CAAC,CAAA;QACjH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACnG,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,IAAI,KAAK,4BAA4B;YAAE,SAAQ;QAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnE,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,YAAY,CAAC,GAAG;YACjG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,WAAW,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,gCAAgC,WAAW,CAAC,EAAE,iDAAiD,CAAC,CAAA;QAClH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAA;IACjD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,IAAI,kBAAkB,GAAG,EAAE,CAAA;IAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAA;QAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAA;QACjC,IAAI,EAAE,IAAI,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;QACrH,kBAAkB,GAAG,EAAE,CAAA;QACvB,MAAM,QAAQ,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC9C,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,0BAA0B,CAAC,CAAA;QAC9G,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3B,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACtE,MAAM,eAAe,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CACrE,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAA;QAChG,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,6BAA6B,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACtG,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,qBAAqB,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC7F,CAAC;QACD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,KAAK,KAAK,EAAE,CAAC,CAAA;QACxF,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QACvD,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,KAAK,aAAa,EAAE,CAAC,CAAA;QACxG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,QAAQ,UAAU,CAAC,OAAO,CAAC,MAAM,2CAA2C,CAAC,CAAA;QACjI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,IAAI,WAAW,GAAG,EAAE,CAAA;QACpB,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YACjC,IAAI,GAAG,IAAI,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,mDAAmD,CAAC,CAAA;YAC9H,WAAW,GAAG,GAAG,CAAA;YACjB,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,wCAAwC,GAAG,EAAE,CAAC,CAAA;YACzH,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACnB,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;YAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,oCAAoC,CAAC,CAAA;YAC3I,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAA;YAC5D,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,yBAAyB,CAAC,CAAA;YACtH,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY;gBACvG,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC/G,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,WAAW,GAAG,8BAA8B,CAAC,CAAA;YACjG,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,UAAU,sCAAsC,CAAC,CAAA;YAC/F,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,QAAQ,2BAA2B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5G,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAA2B,EAAc,EAAE;IAC/E,6BAA6B,CAAC,QAAQ,CAAC,CAAA;IACvC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AACtG,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAiB,EAAqB,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/G,6BAA6B,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtG,CAAC;AACH,CAAC,CAAA"}

package/dist/release/staging.d.ts

@@ -0,0 +1,31 @@
+import { type Sha256Digest } from "../model/digest.js";
+import { SafeRelativePath } from "../model/primitives.js";
+import { ExplicitInputSnapshot, StagingSnapshot } from "./context.js";
+/** Paths in staging manifests are portable POSIX-style relative paths. */
+export declare const canonicalStagingPath: (value: string) => SafeRelativePath;
+export interface SnapshotOptions {
+    /** Canonical roots omitted from a mutation comparison (declared outputs and scratch only). */
+    readonly exclude?: ReadonlyArray<SafeRelativePath | string>;
+}
+/** Canonical path/type/digest manifest for a private staging tree. */
+export declare const snapshotStaging: (rootValue: string, options?: SnapshotOptions) => StagingSnapshot;
+export declare const snapshotsEqual: (left: StagingSnapshot, right: StagingSnapshot) => boolean;
+/** Select canonical roots from a whole-stage snapshot without following links again. */
+export declare const selectStagingSnapshot: (snapshot: StagingSnapshot, roots: ReadonlyArray<SafeRelativePath | string>) => StagingSnapshot;
+export declare const snapshotDifference: (before: StagingSnapshot, after: StagingSnapshot) => string;
+export declare const assertSnapshotPresent: (root: string, expected: StagingSnapshot, label: string, options?: SnapshotOptions) => void;
+/**
+ * Copy/reflink one declared non-Git input into private staging and return the
+ * digest that becomes part of prepared provenance. The destination must not
+ * already exist; source bytes can therefore never overwrite verified Git
+ * materialization.
+ */
+export declare const materializeExplicitInput: (input: {
+    readonly id: string;
+    readonly sourceWorkspace: string;
+    readonly stageRoot: string;
+    readonly path: SafeRelativePath;
+}) => ExplicitInputSnapshot;
+/** Digest a set of preparation influences without asserting reproducibility. */
+export declare const preparationBasisDigest: (source: StagingSnapshot, inputs: ReadonlyArray<ExplicitInputSnapshot>, execution: Readonly<Record<string, string>>) => Sha256Digest;
+//# sourceMappingURL=staging.d.ts.map

package/dist/release/staging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging.d.ts","sourceRoot":"","sources":["../../src/release/staging.ts"],"names":[],"mappings":"AAcA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EACL,qBAAqB,EAErB,eAAe,EAChB,MAAM,cAAc,CAAA;AAOrB,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,KAAG,gBAOpD,CAAA;AA+BD,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAA;CAC5D;AAED,sEAAsE;AACtE,eAAO,MAAM,eAAe,GAAI,WAAW,MAAM,EAAE,UAAS,eAAoB,KAAG,eA8ClF,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,MAAM,eAAe,EAAE,OAAO,eAAe,KAAG,OACzC,CAAA;AAStC,wFAAwF;AACxF,eAAO,MAAM,qBAAqB,GAChC,UAAU,eAAe,EACzB,OAAO,aAAa,CAAC,gBAAgB,GAAG,MAAM,CAAC,KAC9C,eASF,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,QAAQ,eAAe,EAAE,OAAO,eAAe,KAAG,MAUpF,CAAA;AAED,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,EACZ,UAAU,eAAe,EACzB,OAAO,MAAM,EACb,UAAS,eAAoB,KAC5B,IAYF,CAAA;AA0BD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,GAAI,OAAO;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAChC,KAAG,qBA8BH,CAAA;AAED,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,GACjC,QAAQ,eAAe,EACvB,QAAQ,aAAa,CAAC,qBAAqB,CAAC,EAC5C,WAAW,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,iBASzC,CAAA"}

package/dist/release/staging.js

@@ -0,0 +1,218 @@
+import { constants, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, readdirSync, realpathSync, symlinkSync } from "node:fs";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { encodeCanonicalJson } from "../model/canonical.js";
+import { sha256Digest } from "../model/digest.js";
+import { SafeRelativePath } from "../model/primitives.js";
+import { ExplicitInputSnapshot, StagingEntry, StagingSnapshot } from "./context.js";
+const utf8 = new TextEncoder();
+const byCodepoint = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const fail = (reason) => { throw new Error(reason); };
+/** Paths in staging manifests are portable POSIX-style relative paths. */
+export const canonicalStagingPath = (value) => {
+    const path = value.split(sep).join("/");
+    if (path === "." || path.includes("\\") || path.includes("\0") ||
+        path.split("/").some((part) => part.length === 0 || part === "." || part === "..")) {
+        return fail(`Staging path ${JSON.stringify(value)} is not canonical and portable.`);
+    }
+    return SafeRelativePath.make(path);
+};
+const lexicalContainment = (root, candidate) => {
+    const path = relative(root, candidate);
+    return path === "" || (path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path));
+};
+const relativePath = (root, path) => canonicalStagingPath(relative(root, path));
+const entryDigest = (kind, path) => {
+    if (kind === "directory")
+        return { digest: sha256Digest(utf8.encode("")), size: 0 };
+    const bytes = kind === "symlink" ? utf8.encode(readlinkSync(path)) : new Uint8Array(readFileSync(path));
+    return { digest: sha256Digest(bytes), size: bytes.length };
+};
+const assertSafeSymlink = (root, path) => {
+    const target = readlinkSync(path);
+    if (target.length === 0 || isAbsolute(target))
+        fail(`Staging symlink ${relative(root, path)} has an absolute or empty target.`);
+    const landed = resolve(dirname(path), target);
+    if (!lexicalContainment(root, landed))
+        fail(`Staging symlink ${relative(root, path)} escapes the private root.`);
+    if (!existsSync(landed))
+        fail(`Staging symlink ${relative(root, path)} is dangling.`);
+    const real = realpathSync(path);
+    if (!lexicalContainment(root, real))
+        fail(`Staging symlink ${relative(root, path)} resolves outside the private root.`);
+};
+const isExcluded = (path, excluded) => excluded.some((root) => path === root || path.startsWith(`${root}/`));
+const isExcludedAncestor = (path, excluded) => excluded.some((root) => root.startsWith(`${path}/`));
+/** Canonical path/type/digest manifest for a private staging tree. */
+export const snapshotStaging = (rootValue, options = {}) => {
+    const root = realpathSync(rootValue);
+    if (lstatSync(root).isSymbolicLink() || !lstatSync(root).isDirectory())
+        fail("Staging root must be a real directory.");
+    const excluded = (options.exclude ?? []).map(String).sort(byCodepoint);
+    const entries = [];
+    const folded = new Map();
+    const walk = (directory) => {
+        for (const child of readdirSync(directory, { withFileTypes: true }).sort((left, right) => byCodepoint(left.name, right.name))) {
+            const path = join(directory, child.name);
+            const name = relativePath(root, path).toString();
+            if (isExcluded(name, excluded))
+                continue;
+            const collision = folded.get(name.toLocaleLowerCase("en-US"));
+            if (collision !== undefined && collision !== name)
+                fail(`Staging paths ${collision} and ${name} collide under case folding.`);
+            folded.set(name.toLocaleLowerCase("en-US"), name);
+            const stat = lstatSync(path);
+            const kind = stat.isSymbolicLink()
+                ? "symlink"
+                : stat.isDirectory()
+                    ? "directory"
+                    : stat.isFile()
+                        ? (stat.mode & 0o111) === 0 ? "file" : "executable"
+                        : fail(`Staging path ${name} has an unsupported filesystem kind.`);
+            if (kind === "symlink")
+                assertSafeSymlink(root, path);
+            const value = entryDigest(kind, path);
+            // Ancestor directories of an excluded writable root are traversal-only:
+            // creating `.release` in order to create `.release/assets` must not look
+            // like an undeclared mutation, while siblings under `.release` remain
+            // fully snapshotted and protected.
+            if (!(kind === "directory" && isExcludedAncestor(name, excluded))) {
+                entries.push(StagingEntry.make({
+                    path: canonicalStagingPath(name),
+                    kind,
+                    mode: kind === "executable" ? 0o755 : kind === "directory" ? 0o755 : kind === "symlink" ? 0o777 : 0o644,
+                    size: value.size,
+                    digest: value.digest
+                }));
+            }
+            if (kind === "directory")
+                walk(path);
+        }
+    };
+    walk(root);
+    const canonical = encodeCanonicalJson(entries.map((entry) => ({
+        path: entry.path.toString(), kind: entry.kind, mode: entry.mode, size: entry.size,
+        digest: entry.digest.hex
+    })));
+    return StagingSnapshot.make({ entries, digest: sha256Digest(utf8.encode(canonical)) });
+};
+export const snapshotsEqual = (left, right) => left.digest.hex === right.digest.hex;
+const snapshotDigest = (entries) => sha256Digest(utf8.encode(encodeCanonicalJson(entries.map((entry) => ({
+    path: entry.path.toString(), kind: entry.kind, mode: entry.mode, size: entry.size,
+    digest: entry.digest.hex
+})))));
+/** Select canonical roots from a whole-stage snapshot without following links again. */
+export const selectStagingSnapshot = (snapshot, roots) => {
+    const names = roots.map(String);
+    const selected = snapshot.entries.map((entry) => {
+        const root = names.find((candidate) => entry.path.toString().startsWith(`${candidate}/`));
+        if (root === undefined)
+            return undefined;
+        const path = canonicalStagingPath(entry.path.toString().slice(root.length + 1));
+        return StagingEntry.make({ ...entry, path });
+    }).filter((entry) => entry !== undefined);
+    return StagingSnapshot.make({ entries: selected, digest: snapshotDigest(selected) });
+};
+export const snapshotDifference = (before, after) => {
+    const left = new Map(before.entries.map((entry) => [entry.path.toString(), entry]));
+    const right = new Map(after.entries.map((entry) => [entry.path.toString(), entry]));
+    const paths = [...new Set([...left.keys(), ...right.keys()])].sort(byCodepoint);
+    const changed = paths.filter((path) => {
+        const a = left.get(path);
+        const b = right.get(path);
+        return a === undefined || b === undefined || a.kind !== b.kind || a.mode !== b.mode ||
+            a.size !== b.size || a.digest.hex !== b.digest.hex;
+    });
+    return changed.slice(0, 8).join(", ") + (changed.length > 8 ? ` (+${changed.length - 8} more)` : "");
+};
+export const assertSnapshotPresent = (root, expected, label, options = {}) => {
+    const current = snapshotStaging(root, options);
+    const available = new Map(current.entries.map((entry) => [entry.path.toString(), entry]));
+    const excluded = (options.exclude ?? []).map(String);
+    for (const entry of expected.entries) {
+        if (isExcluded(entry.path.toString(), excluded))
+            continue;
+        const actual = available.get(entry.path.toString());
+        if (actual === undefined || actual.kind !== entry.kind || actual.mode !== entry.mode ||
+            actual.size !== entry.size || actual.digest.hex !== entry.digest.hex) {
+            fail(`${label} changed at ${entry.path}.`);
+        }
+    }
+};
+const copyPrivateTree = (sourceRoot, destinationRoot) => {
+    const source = realpathSync(sourceRoot);
+    const walk = (from, to) => {
+        const stat = lstatSync(from);
+        if (stat.isSymbolicLink()) {
+            const landed = realpathSync(from);
+            if (!lexicalContainment(source, landed))
+                fail(`Explicit input symlink ${from} escapes its declared root.`);
+            const target = readlinkSync(from);
+            symlinkSync(target, to, stat.isDirectory() ? "dir" : "file");
+            return;
+        }
+        if (stat.isDirectory()) {
+            mkdirSync(to, { recursive: false, mode: 0o700 });
+            for (const child of readdirSync(from).sort(byCodepoint))
+                walk(join(from, child), join(to, child));
+            return;
+        }
+        if (!stat.isFile())
+            fail(`Explicit input ${from} has an unsupported filesystem kind.`);
+        copyFileSync(from, to, constants.COPYFILE_FICLONE);
+    };
+    walk(sourceRoot, destinationRoot);
+    // Re-snapshot to reject copied links that only appeared safe in the source topology.
+    if (lstatSync(destinationRoot).isDirectory())
+        snapshotStaging(destinationRoot);
+};
+/**
+ * Copy/reflink one declared non-Git input into private staging and return the
+ * digest that becomes part of prepared provenance. The destination must not
+ * already exist; source bytes can therefore never overwrite verified Git
+ * materialization.
+ */
+export const materializeExplicitInput = (input) => {
+    const sourceRoot = realpathSync(input.sourceWorkspace);
+    const source = join(sourceRoot, input.path.toString());
+    const destination = join(input.stageRoot, input.path.toString());
+    if (!lexicalContainment(sourceRoot, source) || !lexicalContainment(realpathSync(input.stageRoot), destination)) {
+        return fail(`Explicit input ${input.id} escapes its declared root.`);
+    }
+    if (!existsSync(source))
+        return fail(`Explicit input ${input.id} does not exist at ${input.path}.`);
+    if (existsSync(destination))
+        return fail(`Explicit input ${input.id} overlaps verified source at ${input.path}.`);
+    mkdirSync(dirname(destination), { recursive: true, mode: 0o700 });
+    const sourceStat = lstatSync(source);
+    if (sourceStat.isSymbolicLink())
+        return fail(`Explicit input ${input.id} cannot be a symlink.`);
+    copyPrivateTree(source, destination);
+    const kind = sourceStat.isDirectory() ? "directory" : "file";
+    const snapshot = sourceStat.isDirectory() ? snapshotStaging(destination) : undefined;
+    const size = sourceStat.isDirectory()
+        ? snapshot.entries.filter((entry) => entry.kind !== "directory").reduce((sum, entry) => sum + entry.size, 0)
+        : sourceStat.size;
+    const digest = sourceStat.isDirectory()
+        ? snapshot.digest
+        : sha256Digest(new Uint8Array(readFileSync(destination)));
+    return ExplicitInputSnapshot.make({
+        id: input.id,
+        path: input.path,
+        kind,
+        size,
+        digest,
+        materializer: "private-copy-or-reflink/v1",
+        materializationBasis: [digest]
+    });
+};
+/** Digest a set of preparation influences without asserting reproducibility. */
+export const preparationBasisDigest = (source, inputs, execution) => sha256Digest(utf8.encode(encodeCanonicalJson({
+    source: source.digest.hex,
+    inputs: [...inputs].sort((left, right) => byCodepoint(left.id, right.id)).map((input) => ({
+        id: input.id, path: input.path.toString(), kind: input.kind, size: input.size, digest: input.digest.hex,
+        materializer: input.materializer,
+        materializationBasis: input.materializationBasis.map((digest) => digest.hex)
+    })),
+    execution
+})));
+//# sourceMappingURL=staging.js.map

package/dist/release/staging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging.js","sourceRoot":"","sources":["../../src/release/staging.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACZ,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,eAAe,EAChB,MAAM,cAAc,CAAA;AAErB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAA;AAC9B,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAErG,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAA;AAEnE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAoB,EAAE;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAW,EAAE;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACtC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5F,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAoB,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAEjH,MAAM,WAAW,GAAG,CAAC,IAA0B,EAAE,IAAY,EAA+E,EAAE;IAC5I,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IACnF,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IACvG,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;AAC5D,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,IAAY,EAAQ,EAAE;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IAC/H,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAChH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,qCAAqC,CAAC,CAAA;AACzH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,QAA+B,EAAW,EAAE,CAC5E,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;AAEvE,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,QAA+B,EAAW,EAAE,CACpF,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;AAOtD,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,UAA2B,EAAE,EAAmB,EAAE;IACnG,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IACpC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACtH,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACtE,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACvC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;YAChD,IAAI,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,SAAQ;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,iBAAiB,SAAS,QAAQ,IAAI,8BAA8B,CAAC,CAAA;YAC7H,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;YACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAyB,IAAI,CAAC,cAAc,EAAE;gBACtD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;oBACpB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;wBACf,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;wBACnD,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,sCAAsC,CAAC,CAAA;YACpE,IAAI,IAAI,KAAK,SAAS;gBAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACrD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACrC,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,mCAAmC;YACnC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC;oBAChC,IAAI;oBACJ,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;oBACvG,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC,CAAA;YACL,CAAC;YACD,IAAI,IAAI,KAAK,WAAW;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACV,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QACjF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;KACzB,CAAC,CAAC,CAAC,CAAA;IACJ,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAA;AACxF,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAqB,EAAE,KAAsB,EAAW,EAAE,CACvF,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAA;AAEtC,MAAM,cAAc,GAAG,CAAC,OAAoC,EAAgB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CACzH,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;IACjF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;CACzB,CAAC,CAAC,CACJ,CAAC,CAAC,CAAA;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,QAAyB,EACzB,KAA+C,EAC9B,EAAE;IACnB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;QACzF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACxC,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;QAC/E,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IAChE,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AACtF,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAuB,EAAE,KAAsB,EAAU,EAAE;IAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnD,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjF,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IACtD,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACtG,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAY,EACZ,QAAyB,EACzB,KAAa,EACb,UAA2B,EAAE,EACvB,EAAE;IACR,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACpD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC;YAAE,SAAQ;QACzD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAChF,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACzE,IAAI,CAAC,GAAG,KAAK,eAAe,KAAK,CAAC,IAAI,GAAG,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAE,eAAuB,EAAQ,EAAE;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAU,EAAQ,EAAE;QAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAE,IAAI,CAAC,0BAA0B,IAAI,6BAA6B,CAAC,CAAA;YAC1G,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC5D,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAChD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;YACjG,OAAM;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,kBAAkB,IAAI,sCAAsC,CAAC,CAAA;QACtF,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAA;IACpD,CAAC,CAAA;IACD,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IACjC,qFAAqF;IACrF,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;QAAE,eAAe,CAAC,eAAe,CAAC,CAAA;AAChF,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAKxC,EAAyB,EAAE;IAC1B,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/G,OAAO,IAAI,CAAC,kBAAkB,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,KAAK,CAAC,EAAE,sBAAsB,KAAK,CAAC,IAAI,GAAG,CAAC,CAAA;IACnG,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,KAAK,CAAC,EAAE,gCAAgC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAA;IACjH,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,UAAU,CAAC,cAAc,EAAE;QAAE,OAAO,IAAI,CAAC,kBAAkB,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAA;IAC/F,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE;QACnC,CAAC,CAAC,QAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7G,CAAC,CAAC,UAAU,CAAC,IAAI,CAAA;IACnB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,QAAS,CAAC,MAAM;QAClB,CAAC,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;IAC3D,OAAO,qBAAqB,CAAC,IAAI,CAAC;QAChC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,YAAY,EAAE,4BAA4B;QAC1C,oBAAoB,EAAE,CAAC,MAAM,CAAC;KAC/B,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAAuB,EACvB,MAA4C,EAC5C,SAA2C,EAC3C,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG;IACzB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;QACvG,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;KAC7E,CAAC,CAAC;IACH,SAAS;CACV,CAAC,CAAC,CAAC,CAAA"}

package/dist/resolve/authored.d.ts

@@ -0,0 +1,53 @@
+import * as Schema from "effect/Schema";
+declare const AuthoredProject_base: Schema.Class<AuthoredProject, Schema.Struct<{
+    readonly name: Schema.optionalKey<Schema.brand<Schema.NonEmptyString, "NonEmptyName">>;
+    readonly version: Schema.optionalKey<Schema.brand<Schema.NonEmptyString, "Version">>;
+    readonly tag: Schema.optionalKey<Schema.brand<Schema.NonEmptyString, "NonEmptyName">>;
+    readonly tagTemplate: Schema.optionalKey<Schema.NonEmptyString>;
+    readonly packageName: Schema.optionalKey<Schema.NonEmptyString>;
+    readonly repository: Schema.optionalKey<Schema.NonEmptyString>;
+}>, {}>;
+export declare class AuthoredProject extends AuthoredProject_base {
+}
+declare const AuthoredNpmPublish_base: Schema.Class<AuthoredNpmPublish, Schema.Struct<{
+    readonly registry: Schema.optionalKey<Schema.NonEmptyString>;
+    readonly distTag: Schema.optionalKey<Schema.NonEmptyString>;
+    readonly access: Schema.optionalKey<Schema.Literals<readonly ["public", "restricted"]>>;
+    readonly authentication: Schema.Union<readonly [typeof import("../recipes/config.js").NpmTokenAuthentication, typeof import("../recipes/config.js").NpmTrustedPublishingAuthentication]>;
+    readonly provenance: Schema.optionalKey<Schema.Literals<readonly ["automatic", "required", "disabled"]>>;
+}>, {}>;
+/** Human-authored npm policy. Resolution fills only documented deterministic defaults. */
+export declare class AuthoredNpmPublish extends AuthoredNpmPublish_base {
+}
+declare const AuthoredPyPiPublish_base: Schema.Class<AuthoredPyPiPublish, Schema.Struct<{
+    readonly artifacts: Schema.NonEmptyArray<Schema.NonEmptyString>;
+    readonly repository: Schema.optionalKey<Schema.Literals<readonly ["pypi", "testpypi"]>>;
+    readonly authentication: Schema.Union<readonly [typeof import("../recipes/config.js").PyPiTokenAuthentication, typeof import("../recipes/config.js").PyPiExternalTrustedPublishingAuthentication]>;
+}>, {}>;
+export declare class AuthoredPyPiPublish extends AuthoredPyPiPublish_base {
+}
+declare const AuthoredPublish_base: Schema.Class<AuthoredPublish, Schema.Struct<{
+    readonly npm: Schema.optionalKey<typeof AuthoredNpmPublish>;
+    readonly pypi: Schema.optionalKey<typeof AuthoredPyPiPublish>;
+    readonly catalogGit: Schema.optionalKey<Schema.NonEmptyArray<typeof import("../recipes/config.js").CandidateCatalogGitDestination>>;
+    readonly github: Schema.optionalKey<typeof import("../recipes/config.js").CandidateGitHubPublish>;
+}>, {}>;
+export declare class AuthoredPublish extends AuthoredPublish_base {
+}
+declare const AuthoredConfig_base: Schema.Class<AuthoredConfig, Schema.Struct<{
+    readonly project: typeof AuthoredProject;
+    readonly publish: Schema.optionalKey<typeof AuthoredPublish>;
+    readonly versionFrom: Schema.optionalKey<Schema.Literals<readonly ["manifest", "git-tag"]>>;
+    readonly $schema: Schema.optionalKey<Schema.String>;
+    readonly builds: Schema.optionalKey<Schema.NonEmptyArray<Schema.Union<readonly [typeof import("../recipes/config.js").CandidateBunBuild, typeof import("../recipes/config.js").CandidateCommandBuild, typeof import("../recipes/config.js").CandidatePrebuiltBuild]>>>;
+    readonly preparations: Schema.optionalKey<Schema.NonEmptyArray<Schema.Union<readonly [typeof import("../recipes/config.js").CandidateCheckPreparation, typeof import("../recipes/config.js").CandidateArtifactPreparation, typeof import("../recipes/config.js").CandidateCollectionPreparation]>>>;
+    readonly npmPackage: Schema.optionalKey<typeof import("../recipes/config.js").CandidateNpmPackage>;
+    readonly artifacts: Schema.optionalKey<Schema.NonEmptyArray<typeof import("../recipes/config.js").CandidateArtifact>>;
+    readonly archives: Schema.optionalKey<Schema.NonEmptyArray<typeof import("../recipes/config.js").CandidateArchive>>;
+    readonly checksum: Schema.optionalKey<typeof import("../recipes/config.js").CandidateChecksum>;
+    readonly catalogs: Schema.optionalKey<typeof import("../recipes/config.js").CandidateCatalogs>;
+}>, {}>;
+export declare class AuthoredConfig extends AuthoredConfig_base {
+}
+export {};
+//# sourceMappingURL=authored.d.ts.map

package/dist/resolve/authored.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authored.d.ts","sourceRoot":"","sources":["../../src/resolve/authored.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;;;;;;AAevC,qBAAa,eAAgB,SAAQ,oBAanC;CAAG;;;;;;;;AAEL,0FAA0F;AAC1F,qBAAa,kBAAmB,SAAQ,uBAMtC;CAAG;;;;;;AAEL,qBAAa,mBAAoB,SAAQ,wBAIvC;CAAG;;;;;;;AAEL,qBAAa,eAAgB,SAAQ,oBAInC;CAAG;;;;;;;;;;;;;;AAEL,qBAAa,cAAe,SAAQ,mBAKlC;CAAG"}