@numairbaseer/scifcode 0.3.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/README.md +9 -10
  2. package/package.json +2 -2
  3. package/sbom/SHA256SUMS +1 -1
  4. package/sbom/{scifcode-0.3.0-all-platforms.cdx.json → scifcode-0.4.0-all-platforms.cdx.json} +96 -96
  5. package/src/code-usage.js +2 -0
  6. package/src/control-plane-auth.js +1 -0
  7. package/src/ensure-scifcode-config.js +1 -0
  8. package/src/env-config.js +1 -0
  9. package/src/run-runtime.js +6 -0
  10. package/sbom/SHA256SUMS.sigstore.json +0 -1
package/README.md CHANGED
@@ -33,14 +33,14 @@ checksum manifest and the archive, then extract it and run the included
33
33
  installer:
34
34
 
35
35
  ```bash
36
- cosign verify-blob scifcode-0.3.0-offline-SHA256SUMS \
37
- --bundle scifcode-0.3.0-offline-SHA256SUMS.sigstore.json \
36
+ cosign verify-blob scifcode-0.4.0-offline-SHA256SUMS \
37
+ --bundle scifcode-0.4.0-offline-SHA256SUMS.sigstore.json \
38
38
  --certificate-identity \
39
- https://github.com/numairbaseer/scifcode/.github/workflows/release-cli.yml@refs/tags/v0.3.0 \
39
+ https://github.com/numairbaseer/scifcode/.github/workflows/release-cli.yml@refs/tags/v0.4.0 \
40
40
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
41
- sha256sum -c scifcode-0.3.0-offline-SHA256SUMS
42
- tar -xzf scifcode-0.3.0-linux-x64-baseline.tar.gz
43
- cd scifcode-0.3.0-linux-x64-baseline
41
+ sha256sum -c scifcode-0.4.0-offline-SHA256SUMS
42
+ tar -xzf scifcode-0.4.0-linux-x64-baseline.tar.gz
43
+ cd scifcode-0.4.0-linux-x64-baseline
44
44
  ./install.sh
45
45
  ```
46
46
 
@@ -60,10 +60,9 @@ checksum manifest with a keyless Sigstore certificate tied to the tagged
60
60
  GitHub Actions workflow. It verifies every signature before publishing the
61
61
  release assets; no long-lived signing key is required.
62
62
 
63
- Publish the matching `runtime-vX.Y.Z` runtime release before tagging the CLI as
64
- `vX.Y.Z`. The CLI workflow downloads the exact platform runtime package pinned
65
- in `package.json`, compiles the launcher, and attaches the completed offline
66
- archives to the CLI release.
63
+ Publish the runtime version pinned in `package.json` before tagging the CLI.
64
+ The CLI workflow downloads that exact platform runtime package, compiles the
65
+ launcher, and attaches the completed offline archives to the CLI release.
67
66
 
68
67
  ## Log in
69
68
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@numairbaseer/scifcode",
3
- "version": "0.3.0",
3
+ "version": "0.4.0",
4
4
  "description": "Scifcode: a coding CLI agent powered by Poolside Laguna.",
5
5
  "type": "module",
6
6
  "repository": {
@@ -29,7 +29,7 @@
29
29
  "prepack": "npm test && npm run lint"
30
30
  },
31
31
  "dependencies": {
32
- "@numairbaseer/scifcode-runtime": "0.3.0"
32
+ "@numairbaseer/scifcode-runtime": "0.4.0"
33
33
  },
34
34
  "engines": {
35
35
  "node": ">=22.19.0"
package/sbom/SHA256SUMS CHANGED
@@ -1 +1 @@
1
- 0cffa66b37db6ac57f8674c4333a7d7538f1fa8c1290073b53f5daaf5e45bc78 scifcode-0.3.0-all-platforms.cdx.json
1
+ 5088d91e42bc34589b991c4c8803f2db9d699936a822e0fe890a914f96e24848 scifcode-0.4.0-all-platforms.cdx.json
package/sbom/{scifcode-0.3.0-all-platforms.cdx.json → scifcode-0.4.0-all-platforms.cdx.json} RENAMED
@@ -9,7 +9,7 @@
9
9
  {
10
10
  "type": "application",
11
11
  "name": "npm",
12
- "version": "12.0.2"
12
+ "version": "11.17.0"
13
13
  },
14
14
  {
15
15
  "type": "library",
@@ -97,8 +97,8 @@
97
97
  "type": "application",
98
98
  "name": "scifcode",
99
99
  "group": "@numairbaseer",
100
- "version": "0.3.0",
101
- "bom-ref": "@numairbaseer/scifcode@0.3.0",
100
+ "version": "0.4.0",
101
+ "bom-ref": "@numairbaseer/scifcode@0.4.0",
102
102
  "description": "Scifcode: a coding CLI agent powered by Poolside Laguna.",
103
103
  "licenses": [
104
104
  {
@@ -108,7 +108,7 @@
108
108
  }
109
109
  }
110
110
  ],
111
- "purl": "pkg:npm/%40numairbaseer/scifcode@0.3.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fnumairbaseer%2Fscifcode.git",
111
+ "purl": "pkg:npm/%40numairbaseer/scifcode@0.4.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fnumairbaseer%2Fscifcode.git",
112
112
  "externalReferences": [
113
113
  {
114
114
  "url": "https://github.com/numairbaseer/scifcode/issues",
@@ -149,8 +149,8 @@
149
149
  "type": "library",
150
150
  "name": "scifcode-runtime-darwin-arm64",
151
151
  "group": "@numairbaseer",
152
- "version": "0.3.0",
153
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
152
+ "version": "0.4.0",
153
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.4.0",
154
154
  "scope": "optional",
155
155
  "licenses": [
156
156
  {
@@ -160,15 +160,15 @@
160
160
  }
161
161
  }
162
162
  ],
163
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
163
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-arm64@0.4.0",
164
164
  "externalReferences": [
165
165
  {
166
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-arm64/-/scifcode-runtime-darwin-arm64-0.3.0.tgz",
166
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-arm64/-/scifcode-runtime-darwin-arm64-0.4.0.tgz",
167
167
  "type": "distribution",
168
168
  "hashes": [
169
169
  {
170
170
  "alg": "SHA-512",
171
- "content": "cc4b0857e0e62538c0c9ce34560685159db5ec69ca5b9ad25e98c30729ab24569c0aeff2b4df37eaa919a7c3509313fe86b93fde9682c401fc9e08311762c3d5"
171
+ "content": "312ee2e40307fb034c121b22e8fea0088414f7a351bc142097a23af159a563369c5aeff1612d064692db6476da775c76dc08d34d56ba86235ea8260ecfa2ff48"
172
172
  }
173
173
  ],
174
174
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -185,8 +185,8 @@
185
185
  "type": "library",
186
186
  "name": "scifcode-runtime-darwin-x64-baseline",
187
187
  "group": "@numairbaseer",
188
- "version": "0.3.0",
189
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
188
+ "version": "0.4.0",
189
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.4.0",
190
190
  "scope": "optional",
191
191
  "licenses": [
192
192
  {
@@ -196,15 +196,15 @@
196
196
  }
197
197
  }
198
198
  ],
199
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
199
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64-baseline@0.4.0",
200
200
  "externalReferences": [
201
201
  {
202
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64-baseline/-/scifcode-runtime-darwin-x64-baseline-0.3.0.tgz",
202
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64-baseline/-/scifcode-runtime-darwin-x64-baseline-0.4.0.tgz",
203
203
  "type": "distribution",
204
204
  "hashes": [
205
205
  {
206
206
  "alg": "SHA-512",
207
- "content": "e55ec7e050f6a4f6a2868ee51140409e66f3a8c0383ad32db95f841771e3f9ca08313529c9d8b764b6ed00f64ea35b9c03a2e7f599a34f4192b0b8c09ebde120"
207
+ "content": "7c3a72b182e8cf5fda3a851bf890b66acf271f555f829cc94e5886486e7b5c99ef58cbfcad2a1c06282bb74dc5c6f00a1860815dd75989522cf4f801658bde8e"
208
208
  }
209
209
  ],
210
210
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -221,8 +221,8 @@
221
221
  "type": "library",
222
222
  "name": "scifcode-runtime-darwin-x64",
223
223
  "group": "@numairbaseer",
224
- "version": "0.3.0",
225
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
224
+ "version": "0.4.0",
225
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64@0.4.0",
226
226
  "scope": "optional",
227
227
  "licenses": [
228
228
  {
@@ -232,15 +232,15 @@
232
232
  }
233
233
  }
234
234
  ],
235
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
235
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-darwin-x64@0.4.0",
236
236
  "externalReferences": [
237
237
  {
238
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64/-/scifcode-runtime-darwin-x64-0.3.0.tgz",
238
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-darwin-x64/-/scifcode-runtime-darwin-x64-0.4.0.tgz",
239
239
  "type": "distribution",
240
240
  "hashes": [
241
241
  {
242
242
  "alg": "SHA-512",
243
- "content": "d7f72ddbd03fb0516b14e96a42a9b8ccb9ac7c20a01184e8e7ec7591bab18e41a7b174375437917ba07a84eb9118801bc75b932dc755d1b2ac436970b7568b71"
243
+ "content": "fd1b9f28479e1800a6cb89dd42af7041915e5e2c02c25e965b87abfeed0d6a6eef02ef45174778a0204d0fa67dd4d7b3b140e799809d8f8b9f6072962903ea5e"
244
244
  }
245
245
  ],
246
246
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -257,8 +257,8 @@
257
257
  "type": "library",
258
258
  "name": "scifcode-runtime-linux-arm64-musl",
259
259
  "group": "@numairbaseer",
260
- "version": "0.3.0",
261
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
260
+ "version": "0.4.0",
261
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.4.0",
262
262
  "scope": "optional",
263
263
  "licenses": [
264
264
  {
@@ -268,15 +268,15 @@
268
268
  }
269
269
  }
270
270
  ],
271
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
271
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64-musl@0.4.0",
272
272
  "externalReferences": [
273
273
  {
274
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64-musl/-/scifcode-runtime-linux-arm64-musl-0.3.0.tgz",
274
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64-musl/-/scifcode-runtime-linux-arm64-musl-0.4.0.tgz",
275
275
  "type": "distribution",
276
276
  "hashes": [
277
277
  {
278
278
  "alg": "SHA-512",
279
- "content": "af627809b8f33bff762606a36669a0c1ce5f093292be497bcd05400d8d81de8ba7eb49c0a13a1ee25063eabf71f3eee70073832e616fd5cef2d7b535aeb28d54"
279
+ "content": "424ecbe8f9d1436b8b3445862d11cf53386e22b4709d78a7329e433313358cc301effefc2bdf44a2a214bc417b2e7651b7759d049a48a5f0aadca073b03ae877"
280
280
  }
281
281
  ],
282
282
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -293,8 +293,8 @@
293
293
  "type": "library",
294
294
  "name": "scifcode-runtime-linux-arm64",
295
295
  "group": "@numairbaseer",
296
- "version": "0.3.0",
297
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
296
+ "version": "0.4.0",
297
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64@0.4.0",
298
298
  "scope": "optional",
299
299
  "licenses": [
300
300
  {
@@ -304,15 +304,15 @@
304
304
  }
305
305
  }
306
306
  ],
307
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
307
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-arm64@0.4.0",
308
308
  "externalReferences": [
309
309
  {
310
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64/-/scifcode-runtime-linux-arm64-0.3.0.tgz",
310
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-arm64/-/scifcode-runtime-linux-arm64-0.4.0.tgz",
311
311
  "type": "distribution",
312
312
  "hashes": [
313
313
  {
314
314
  "alg": "SHA-512",
315
- "content": "8f89ed9a7f37e3227041f28eb84973eeced9e06d72b596d82aa6fe1ad1726ca85d75056f186cce8c6d43f2f6173ce5e5874ecf42e73c9edf204c465dfbe6cca0"
315
+ "content": "6579973377f0b1fbfcd4cc4fad647cbd67e5930e3c0280f88136035bd9babdcb12e37359647775bbbdceb9d0950692cfc62f261c2bb22299c5848483813c629d"
316
316
  }
317
317
  ],
318
318
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -329,8 +329,8 @@
329
329
  "type": "library",
330
330
  "name": "scifcode-runtime-linux-x64-baseline-musl",
331
331
  "group": "@numairbaseer",
332
- "version": "0.3.0",
333
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
332
+ "version": "0.4.0",
333
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.4.0",
334
334
  "scope": "optional",
335
335
  "licenses": [
336
336
  {
@@ -340,15 +340,15 @@
340
340
  }
341
341
  }
342
342
  ],
343
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
343
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.4.0",
344
344
  "externalReferences": [
345
345
  {
346
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline-musl/-/scifcode-runtime-linux-x64-baseline-musl-0.3.0.tgz",
346
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline-musl/-/scifcode-runtime-linux-x64-baseline-musl-0.4.0.tgz",
347
347
  "type": "distribution",
348
348
  "hashes": [
349
349
  {
350
350
  "alg": "SHA-512",
351
- "content": "e72ebb235bb27a5f7831843a4c9dc2074a87cb8272193f191b4a10be932100744441a200df1f43300b2f21a57fe0aa943d155efd78dd5db0e0e76f9793bd9096"
351
+ "content": "13c56c4d0978ffbff8c8e2bad433dceaea13adf86d4c6d60eb87c9b51d49969d4903a729b1f3a0da8a6c3c6843763ff4cd6260528d5f2a6ae58f54ad6f5d893e"
352
352
  }
353
353
  ],
354
354
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -365,8 +365,8 @@
365
365
  "type": "library",
366
366
  "name": "scifcode-runtime-linux-x64-baseline",
367
367
  "group": "@numairbaseer",
368
- "version": "0.3.0",
369
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
368
+ "version": "0.4.0",
369
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.4.0",
370
370
  "scope": "optional",
371
371
  "licenses": [
372
372
  {
@@ -376,15 +376,15 @@
376
376
  }
377
377
  }
378
378
  ],
379
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
379
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-baseline@0.4.0",
380
380
  "externalReferences": [
381
381
  {
382
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline/-/scifcode-runtime-linux-x64-baseline-0.3.0.tgz",
382
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-baseline/-/scifcode-runtime-linux-x64-baseline-0.4.0.tgz",
383
383
  "type": "distribution",
384
384
  "hashes": [
385
385
  {
386
386
  "alg": "SHA-512",
387
- "content": "630587b514cdb40bc2d985366da7cd111098a36690eb159eafec1855b89cf54c0b78bce43032b3f520485382a5b476554eae3b9acc2bf810865736e9101b40fa"
387
+ "content": "6cad8dd81bd553c1cd203433dc23e197071248f1006ae69aa1e6fc9a56560b150837844b292bd24d7f0fb4b3475cb31c6e977e34609075a8d88116b697be65fa"
388
388
  }
389
389
  ],
390
390
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -401,8 +401,8 @@
401
401
  "type": "library",
402
402
  "name": "scifcode-runtime-linux-x64-musl",
403
403
  "group": "@numairbaseer",
404
- "version": "0.3.0",
405
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
404
+ "version": "0.4.0",
405
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.4.0",
406
406
  "scope": "optional",
407
407
  "licenses": [
408
408
  {
@@ -412,15 +412,15 @@
412
412
  }
413
413
  }
414
414
  ],
415
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
415
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64-musl@0.4.0",
416
416
  "externalReferences": [
417
417
  {
418
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-musl/-/scifcode-runtime-linux-x64-musl-0.3.0.tgz",
418
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64-musl/-/scifcode-runtime-linux-x64-musl-0.4.0.tgz",
419
419
  "type": "distribution",
420
420
  "hashes": [
421
421
  {
422
422
  "alg": "SHA-512",
423
- "content": "0c5157cf534e1a2dabe508e0802306a00a264d05da3294e6b577e76976d782f78e447bba1d2a63e8442dfb0e824c020f5be3fcfd27e76848a872712a0de44a5d"
423
+ "content": "57574e9629c9de59a338db78d73453b3eb39cf6d44339205e41329deadb408ca5a4f88ce914e8b768ba622c05a698b3013ef7563c7867423bb644b151647e292"
424
424
  }
425
425
  ],
426
426
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -437,8 +437,8 @@
437
437
  "type": "library",
438
438
  "name": "scifcode-runtime-linux-x64",
439
439
  "group": "@numairbaseer",
440
- "version": "0.3.0",
441
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0",
440
+ "version": "0.4.0",
441
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64@0.4.0",
442
442
  "scope": "optional",
443
443
  "licenses": [
444
444
  {
@@ -448,15 +448,15 @@
448
448
  }
449
449
  }
450
450
  ],
451
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64@0.3.0",
451
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-linux-x64@0.4.0",
452
452
  "externalReferences": [
453
453
  {
454
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64/-/scifcode-runtime-linux-x64-0.3.0.tgz",
454
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-linux-x64/-/scifcode-runtime-linux-x64-0.4.0.tgz",
455
455
  "type": "distribution",
456
456
  "hashes": [
457
457
  {
458
458
  "alg": "SHA-512",
459
- "content": "9af6c05e64e6466a09405b7225953f25475a26f4adac7919b57311f8acaf5d2ccd610510ef6be8e32f529cf51ac4e684dfb027764a19548940e9b8fa9dd04a15"
459
+ "content": "cad1dc1ca29eab468955f99018dcfd0c6074738c00d0d9245c5948a9bb0699d11db802081893b9afee2d427bd337b0e49982693735d322a42758ce38b6152168"
460
460
  }
461
461
  ],
462
462
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -473,8 +473,8 @@
473
473
  "type": "library",
474
474
  "name": "scifcode-runtime-windows-arm64",
475
475
  "group": "@numairbaseer",
476
- "version": "0.3.0",
477
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
476
+ "version": "0.4.0",
477
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-arm64@0.4.0",
478
478
  "scope": "optional",
479
479
  "licenses": [
480
480
  {
@@ -484,15 +484,15 @@
484
484
  }
485
485
  }
486
486
  ],
487
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
487
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-arm64@0.4.0",
488
488
  "externalReferences": [
489
489
  {
490
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-arm64/-/scifcode-runtime-windows-arm64-0.3.0.tgz",
490
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-arm64/-/scifcode-runtime-windows-arm64-0.4.0.tgz",
491
491
  "type": "distribution",
492
492
  "hashes": [
493
493
  {
494
494
  "alg": "SHA-512",
495
- "content": "72ccf3a6301c8dbb89db7c3c1b830516774fcc37af907c15e4f7aa0932bf07c3579c33e09775ffd8d431579e79ae0e1d1484485083b605f4a5f1f4e654edb40c"
495
+ "content": "f96efa8dc3e7242c3488252e586dcdf5bf03b69876815de04bb7dcc19c81ee69afdbaff3471c6c0c005cd6143bc78950feeb6e5b607d39b369dc9d296433c2bd"
496
496
  }
497
497
  ],
498
498
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -509,8 +509,8 @@
509
509
  "type": "library",
510
510
  "name": "scifcode-runtime-windows-x64-baseline",
511
511
  "group": "@numairbaseer",
512
- "version": "0.3.0",
513
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
512
+ "version": "0.4.0",
513
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.4.0",
514
514
  "scope": "optional",
515
515
  "licenses": [
516
516
  {
@@ -520,15 +520,15 @@
520
520
  }
521
521
  }
522
522
  ],
523
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
523
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64-baseline@0.4.0",
524
524
  "externalReferences": [
525
525
  {
526
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64-baseline/-/scifcode-runtime-windows-x64-baseline-0.3.0.tgz",
526
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64-baseline/-/scifcode-runtime-windows-x64-baseline-0.4.0.tgz",
527
527
  "type": "distribution",
528
528
  "hashes": [
529
529
  {
530
530
  "alg": "SHA-512",
531
- "content": "24a9128da5b85709eb94f6ea6c728eb557aefee65221ac13891b68e312c39c0f61abb5d835d95614bd804c6424d11daebe9a13098befa2d57e8857cc452f1bb3"
531
+ "content": "48c93e39af57843d0cd5d07962652347cbbfb9b07d0a05337bf46c88fe5b54a495cf38f6d15b807c566c5d6b87a9e37016d58476c0617372e812ec1e31007e6e"
532
532
  }
533
533
  ],
534
534
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -545,8 +545,8 @@
545
545
  "type": "library",
546
546
  "name": "scifcode-runtime-windows-x64",
547
547
  "group": "@numairbaseer",
548
- "version": "0.3.0",
549
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0",
548
+ "version": "0.4.0",
549
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64@0.4.0",
550
550
  "scope": "optional",
551
551
  "licenses": [
552
552
  {
@@ -556,15 +556,15 @@
556
556
  }
557
557
  }
558
558
  ],
559
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64@0.3.0",
559
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime-windows-x64@0.4.0",
560
560
  "externalReferences": [
561
561
  {
562
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64/-/scifcode-runtime-windows-x64-0.3.0.tgz",
562
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime-windows-x64/-/scifcode-runtime-windows-x64-0.4.0.tgz",
563
563
  "type": "distribution",
564
564
  "hashes": [
565
565
  {
566
566
  "alg": "SHA-512",
567
- "content": "532aa3e20824a694c764827b93e28103f6b0ea4c795800e78e1f64815b186be367f341616436ad24b576d7550f7b1d71d379476f0d8c9da78febb8acd4ba97a5"
567
+ "content": "560cce08330040677cad1e566b80b16ccae9d482128845198698945a1e8482ea836869306bd77384ab2fe1256243f0cfe2ead482d9e66178d7dc976a0fab76c7"
568
568
  }
569
569
  ],
570
570
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -581,8 +581,8 @@
581
581
  "type": "library",
582
582
  "name": "scifcode-runtime",
583
583
  "group": "@numairbaseer",
584
- "version": "0.3.0",
585
- "bom-ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0",
584
+ "version": "0.4.0",
585
+ "bom-ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime@0.4.0",
586
586
  "licenses": [
587
587
  {
588
588
  "license": {
@@ -591,15 +591,15 @@
591
591
  }
592
592
  }
593
593
  ],
594
- "purl": "pkg:npm/%40numairbaseer/scifcode-runtime@0.3.0",
594
+ "purl": "pkg:npm/%40numairbaseer/scifcode-runtime@0.4.0",
595
595
  "externalReferences": [
596
596
  {
597
- "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime/-/scifcode-runtime-0.3.0.tgz",
597
+ "url": "https://registry.npmjs.org/@numairbaseer/scifcode-runtime/-/scifcode-runtime-0.4.0.tgz",
598
598
  "type": "distribution",
599
599
  "hashes": [
600
600
  {
601
601
  "alg": "SHA-512",
602
- "content": "808cf270df03cd8cca0b0755ef12680f2e31ee56e4621bbdef0ad600973783c81f25fdd59c4223dac99c7c59e481b2a5116304cbd166496b3108eefc52425571"
602
+ "content": "4e94d9db855a894a2899780d074eda843cc6a3a761a443e9329063930a4e23bc4385d19972ec870195d5dfd3fdca2082a02768b4bb7dd4b7eba7cefa80b7bc25"
603
603
  }
604
604
  ],
605
605
  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
@@ -615,62 +615,62 @@
615
615
  ],
616
616
  "dependencies": [
617
617
  {
618
- "ref": "@numairbaseer/scifcode@0.3.0",
618
+ "ref": "@numairbaseer/scifcode@0.4.0",
619
619
  "dependsOn": [
620
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0"
620
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime@0.4.0"
621
621
  ]
622
622
  },
623
623
  {
624
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0"
624
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.4.0"
625
625
  },
626
626
  {
627
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0"
627
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.4.0"
628
628
  },
629
629
  {
630
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0"
630
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64@0.4.0"
631
631
  },
632
632
  {
633
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0"
633
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.4.0"
634
634
  },
635
635
  {
636
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0"
636
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64@0.4.0"
637
637
  },
638
638
  {
639
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0"
639
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.4.0"
640
640
  },
641
641
  {
642
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0"
642
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.4.0"
643
643
  },
644
644
  {
645
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0"
645
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.4.0"
646
646
  },
647
647
  {
648
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0"
648
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64@0.4.0"
649
649
  },
650
650
  {
651
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0"
651
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-arm64@0.4.0"
652
652
  },
653
653
  {
654
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0"
654
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.4.0"
655
655
  },
656
656
  {
657
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0"
657
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64@0.4.0"
658
658
  },
659
659
  {
660
- "ref": "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime@0.3.0",
660
+ "ref": "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime@0.4.0",
661
661
  "dependsOn": [
662
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.3.0",
663
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.3.0",
664
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-darwin-x64@0.3.0",
665
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.3.0",
666
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-arm64@0.3.0",
667
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.3.0",
668
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.3.0",
669
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.3.0",
670
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-linux-x64@0.3.0",
671
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-arm64@0.3.0",
672
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.3.0",
673
- "@numairbaseer/scifcode@0.3.0|@numairbaseer/scifcode-runtime-windows-x64@0.3.0"
662
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-arm64@0.4.0",
663
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64-baseline@0.4.0",
664
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-darwin-x64@0.4.0",
665
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64-musl@0.4.0",
666
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-arm64@0.4.0",
667
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline-musl@0.4.0",
668
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-baseline@0.4.0",
669
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64-musl@0.4.0",
670
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-linux-x64@0.4.0",
671
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-arm64@0.4.0",
672
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64-baseline@0.4.0",
673
+ "@numairbaseer/scifcode@0.4.0|@numairbaseer/scifcode-runtime-windows-x64@0.4.0"
674
674
  ]
675
675
  }
676
676
  ]
package/src/code-usage.js CHANGED
@@ -19,7 +19,9 @@ function runGit(args, options = {}) {
19
19
  }
20
20
 
21
21
  function snapshotWorkingTree(repoDir, options = {}) {
22
+ // nosemgrep -- The OS creates this private, randomized directory under a trusted local temp root.
22
23
  const temporaryDir = fs.mkdtempSync(path.join(options.tmpDir || os.tmpdir(), "scifcode-git-index-"));
24
+ // nosemgrep -- This fixed filename is constrained to the newly created temporary directory.
23
25
  const indexPath = path.join(temporaryDir, "index");
24
26
  const env = { ...(options.env || process.env), GIT_INDEX_FILE: indexPath };
25
27
  try {
package/src/control-plane-auth.js CHANGED
@@ -27,6 +27,7 @@ export function readSession(options = {}) {
27
27
  const sessionPath = options.sessionPath || getScifcodeSessionPath(options.homeDir);
28
28
  if (!fs.existsSync(sessionPath)) return null;
29
29
  try {
30
+ // nosemgrep -- The CLI reads its fixed owner-local session path; overrides are test-only injection points.
30
31
  const session = JSON.parse(fs.readFileSync(sessionPath, "utf8"));
31
32
  if (!session.sessionToken || !session.controlPlaneUrl) return null;
32
33
  return session;
package/src/ensure-scifcode-config.js CHANGED
@@ -37,6 +37,7 @@ export function buildScifcodeProvider(env = process.env, options = {}) {
37
37
 
38
38
  function readConfig(filePath) {
39
39
  if (!fs.existsSync(filePath)) return {};
40
+ // nosemgrep -- filePath is the fixed owner-local Scifcode config path, not remote input.
40
41
  try { return JSON.parse(fs.readFileSync(filePath, "utf8")); }
41
42
  catch (error) { throw new Error(`Scifcode could not parse ${filePath}. Fix the JSON and retry.\n${error.message}`); }
42
43
  }
package/src/env-config.js CHANGED
@@ -55,6 +55,7 @@ function readEnvFile(filePath) {
55
55
  return {};
56
56
  }
57
57
 
58
+ // nosemgrep -- filePath is one of two fixed local CLI env paths derived from home/cwd.
58
59
  return parseEnvContent(fs.readFileSync(filePath, "utf8"));
59
60
  }
60
61
 
package/src/run-runtime.js CHANGED
@@ -18,6 +18,7 @@ function defaultSourceDir() {
18
18
  function findInstalledRuntime(options = {}) {
19
19
  let current = options.searchDir || path.dirname(fileURLToPath(import.meta.url));
20
20
  for (;;) {
21
+ // nosemgrep -- current is a local package-install ancestor, never request or network input.
21
22
  const candidate = path.join(current, "node_modules", "@numairbaseer", "scifcode-runtime", "bin", "scifcode.exe");
22
23
  if (fs.existsSync(candidate)) return candidate;
23
24
  const parent = path.dirname(current);
@@ -29,6 +30,7 @@ function findInstalledRuntime(options = {}) {
29
30
  function findBundledRuntime(options = {}) {
30
31
  const runtimePlatform = options.platform || process.platform;
31
32
  const binaryName = runtimePlatform === "win32" ? "scifcode-runtime.exe" : "scifcode-runtime";
33
+ // nosemgrep -- execPath is the trusted local Node executable path; overrides are test-only.
32
34
  const candidate = path.join(path.dirname(options.execPath || process.execPath), binaryName);
33
35
  return fs.existsSync(candidate) ? candidate : undefined;
34
36
  }
@@ -48,12 +50,16 @@ export function resolveRuntime(options = {}) {
48
50
  const platform = runtimePlatform === "win32" ? "windows" : runtimePlatform;
49
51
  const arch = options.arch || process.arch;
50
52
  const binaryName = runtimePlatform === "win32" ? "scifcode.exe" : "scifcode";
53
+ // nosemgrep -- sourceDir/platform/arch select an explicitly configured local development runtime.
51
54
  const builtBin = path.join(sourceDir, "packages", "opencode", "dist", `scifcode-${platform}-${arch}`, "bin", binaryName);
52
55
  if (fs.existsSync(builtBin)) return { command: builtBin, argsPrefix: [], source: "binary" };
56
+ // nosemgrep -- sourceDir is an explicitly configured local development directory.
53
57
  const packageDir = path.join(sourceDir, "packages", "opencode");
54
58
  const entrypoint = path.join(packageDir, "src", "index.ts");
55
59
  const bunName = process.platform === "win32" ? "bun.exe" : "bun";
60
+ // nosemgrep -- BUN_INSTALL is a trusted process environment setting for a local executable.
56
61
  const bunInstall = env.BUN_INSTALL && path.join(env.BUN_INSTALL, "bin", bunName);
62
+ // nosemgrep -- This is the fixed Bun location beneath the current user's home directory.
57
63
  const standardBun = path.join(options.homeDir || os.homedir(), ".bun", "bin", bunName);
58
64
  const bun = env.SCIFCODE_BUN_BIN
59
65
  || executableOnPath("bun", env)
package/sbom/SHA256SUMS.sigstore.json DELETED
@@ -1 +0,0 @@
1
- {"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"MIIHRzCCBs2gAwIBAgIUNr4hWHo6T/dCpP14p/P/VnKUDdYwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjYwOTAxMDIwNDQ5WhcNMjYwOTAxMDIxNDQ5WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbbvJoQTCgz0Sdp8CItAMHFk4TejJABY9mKUvkGkm8Vcx06my07C34+PG2G645Q+XlF0tyWBnchjBPnGeASYQc6OCBewwggXoMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUl9jGgg1nMcBOrY/O7iHwp6npa7IwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8waQYDVR0RAQH/BF8wXYZbaHR0cHM6Ly9naXRodWIuY29tL251bWFpcmJhc2Vlci9zY2lmY29kZS8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNsaS55bWxAcmVmcy90YWdzL3YwLjMuMDA5BgorBgEEAYO/MAEBBCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMBIGCisGAQQBg78wAQIEBHB1c2gwNgYKKwYBBAGDvzABAwQoOWRhODM5MWU2YjMwZjUzZjVjZGM4ZDdiM2RhYjFmY2E4M2ZmNGM3MzAjBgorBgEEAYO/MAEEBBVSZWxlYXNlIFNDSUYgQ29kZSBDTEkwIwYKKwYBBAGDvzABBQQVbnVtYWlyYmFzZWVyL3NjaWZjb2RlMB4GCisGAQQBg78wAQYEEHJlZnMvdGFncy92MC4zLjAwOwYKKwYBBAGDvzABCAQtDCtodHRwczovL3Rva2VuLmFjdGlvbnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tMGsGCisGAQQBg78wAQkEXQxbaHR0cHM6Ly9naXRodWIuY29tL251bWFpcmJhc2Vlci9zY2lmY29kZS8uZ2l0aHViL3dvcmtmbG93cy9yZWxlYXNlLWNsaS55bWxAcmVmcy90YWdzL3YwLjMuMDA4BgorBgEEAYO/MAEKBCoMKDlkYTgzOTFlNmIzMGY1M2Y1Y2RjOGQ3YjNkYWIxZmNhODNmZjRjNzMwHQYKKwYBBAGDvzABCwQPDA1naXRodWItaG9zdGVkMDgGCisGAQQBg78wAQwEKgwoaHR0cHM6Ly9naXRodWIuY29tL251bWFpcmJhc2Vlci9zY2lmY29kZTA4BgorBgEEAYO/MAENBCoMKDlkYTgzOTFlNmIzMGY1M2Y1Y2RjOGQ3YjNkYWIxZmNhODNmZjRjNzMwIAYKKwYBBAGDvzABDgQSDBByZWZzL3RhZ3MvdjAuMy4wMBoGCisGAQQBg78wAQ8EDAwKMTM0NjU1MTUyNDAvBgorBgEEAYO/MAEQBCEMH2h0dHBzOi8vZ2l0aHViLmNvbS9udW1haXJiYXNlZXIwGAYKKwYBBAGDvzABEQQKDAgxMjY3ODA2ODBrBgorBgEEAYO/MAESBF0MW2h0dHBzOi8vZ2l0aHViLmNvbS9udW1haXJiYXNlZXIvc2NpZmNvZGUvLmdpdGh1Yi93b3JrZmxvd3MvcmVsZWFzZS1jbGkueW1sQHJlZnMvdGFncy92MC4zLjAwOAYKKwYBBAGDvzABEwQqDCg5ZGE4MzkxZTZiMzBmNTNmNWNkYzhkN2IzZGFiMWZjYTgzZmY0YzczMBQGCisGAQQBg78wARQEBgwEcHVzaDBcBgorBgEEAYO/MAEVBE4MTGh0dHBzOi8vZ2l0aHViLmNvbS9udW1haXJiYXNlZXIvc2NpZmNvZGUvYWN0aW9ucy9ydW5zLzMzNDYxMTUxMDIyL2F0dGVtcHRzLzEwFwYKKwYBBAGDvzABFgQJDAdwcml2YXRlMBMGCisGAQQBg78wARcEBQwDbnBtME4GCisGAQQBg78wARgEQAw+cmVwbzpudW1haXJiYXNlZXJAMTI2NzgwNjgvc2NpZmNvZGVAMTM0NjU1MTUyNDplbnZpcm9ubWVudDpucG0wgYsGCisGAQQB1nkCBAIEfQR7AHkAdwDdPTBqxscRMmMZHhyZZzcCokpeuN48rf+HinKALynujgAAAaBatkRQAAAEAwBIMEYCIQD6ScmU5NfIDlTpOqtOdMgQHa8k5e/A757WnL9aXGGrpAIhANHi1DwfgDQYoeDxUA0wR4WQpoihSEE1zL4Nh3Zevw6eMAoGCCqGSM49BAMDA2gAMGUCMG4hZIMayG5OwYD993NF7bcAUi1N/gBVQPIM+rNhoeR5mqS9HzunZfF4SFqrZ9xMqQIxAK5rhWCBf40d9YpEprcFNDHm+C/QyEETFtA4cHwXw97rgmGdRv/kRMyZgzZRCDZ9EQ=="},"tlogEntries":[{"logIndex":"2670340931","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1788228290","inclusionPromise":{"signedEntryTimestamp":"MEYCIQCNThOoX9+RP8aK+xIGZCAig0S90RsmalBfsMzZ9xtLuAIhALwurxlXxal0mHGdmIi4VXbddgFPwPkStcaOrMQGZfFF"},"inclusionProof":{"logIndex":"2548436669","rootHash":"YoAnB5VLJUYhx8XLqMqhUBIj2NCaSWnDxbCJW0WMcwA=","treeSize":"2548436688","hashes":["MHpRHAfk9ew2epuavTPtp55QwT/aYkHD4O+1VMyhekY=","uEK78hAhOJYtxzGucUdhvLIcru8aTSgt2Pvr/ocsOPo=","WKMTJCh9xSA0JlvsC2pkxsROsyTLrXOkTFJRxhF/Ml4=","xCEM/MXK/TMOydPcTPTi3HN1C/k22ZuniihkVskaoGk=","VIGKZ4THxvJ0K+6Jzw75JVxxUWl+mDau2BjSC/yRjg8=","fwEheFWEE6If6/2zr00OBc47rcn5x7UK5o/iY2kgDbY=","Dg3J/nrjcbfDFZ95U3E2k+MigcpD0rTYzyIIUzvmKxg=","DfYNZ8ZruiXAOuQwlMedsYnaK8/QftEZ+XdioF06AkI=","yxm1n7WV1D9Ocx/PAatNvrH4sPbKRT7G2fC1Tk/KuI0=","iDGA2apU6OrdVY64HuuevCjq1OLTD0dTNjzpAHUzjIE=","teOA0aoFI4b4vp2Yey4S54m0vCXTtmwt4iFnHHiCKNg=","p07sZPiNhS3OKedAe6eZnpNiY4alN/6vFHSwmzD+XeM=","0x+NthETNYNp/FuWTune0hSsB75R/jw5TVMLuguVBt0=","xyOt2GKNFZJCSWNl1S4wKoCid/PFKOYR1XcNE/ZPkJ8=","zY/PhpISrIBFRZyHncbk1o+GE9n0L8P+0JwBnaBs+FM=","88k9bhVfFtycpvkQKEbIw1Ql9DnXkT/cvWFa/NEgXeQ=","fABv5KbTDQGTSJg+5k8zHZQKwnOUQHo6srePRzgEpf8=","ddECIA46kQzLbMwjR1L9WCHUWrsqVGYIgRiw6XlG1xs=","0HfdxDt/zGugZLIuHasrdLEW9s8OaTykSSqBEDFQXdw=","SndbMKVtcTenAkwi2JBfGzD+mhexp1qJbRIY+A1JRIU=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2548436688\nYoAnB5VLJUYhx8XLqMqhUBIj2NCaSWnDxbCJW0WMcwA=\n\n— rekor.sigstore.dev wNI9ajBEAiB+YTa7sjFBaarIcZvV7b36/lJ0nwj/myPeMUdBCSjhnQIgMuZQ1wTHTz4vCb/hvbTruX7javMh4EvWa754FbK3MvA=\n"}},"canonicalizedBody":"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"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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"}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"9vqC3xj4fb2a6WgdENFinwlKU/tsOdNOJcIfEQE0ecM="},"signature":"MEUCIQDjnZiqaw/XSKEhJQ/6d6mBjhBgMlvGZb9hVYeFuXtJrQIgNk0YPELldrCZ7jgcUzcJbyoDs1DjyWtG4+KIstiNELg="}}