@sourcey/catalog-verifier 1.0.0 → 1.1.0

package/dist/modules/release/src/publication-authorities.d.ts

@@ -0,0 +1,267 @@
+import type { CatalogEvent, CatalogEventIntent } from "../../../contracts/events/src/index.js";
+import type { CatalogPublicationProposal } from "../../../contracts/publication/src/index.js";
+import type { EvidenceCatalogProposal } from "../../evidence-operations/src/evidence-authority.js";
+export type ReadinessPublicationProposal = Pick<EvidenceCatalogProposal, "agent_readiness_profile_input" | "agent_readiness_declaration_revision" | "agent_readiness_offer_relation_inputs">;
+/** Public canonical input only; private review and model material stay private. */
+export declare function agentReadinessPublicationInput(proposal: ReadinessPublicationProposal): {
+    release_input_contract: "sourcey.agent-readiness-release-input/v1alpha1";
+    profile_input: {
+        evidence_bindings: {
+            stage: "evaluate" | "sign_up" | "pay" | "provision" | "operate";
+            signal_code: string;
+            evidence_event_ids: string[];
+            observation_ids: string[];
+        }[];
+        agent_readiness_profile_id: string;
+        entity_id: string;
+        scope: {
+            product: {
+                key: string;
+                name: string;
+            };
+            funnel: {
+                key: string;
+                name: string;
+            };
+        };
+        catalog_binding: {
+            base_release_id: string;
+            entity_revision_digest: string;
+        };
+        declaration_revision_digest: string;
+        declaration: {
+            status: "none";
+        } | {
+            declaration_id: string;
+            provenance: {
+                repository: "sourcey/agent-ready-services";
+                commit: string;
+                path: string;
+                git_blob_oid: string;
+                blob_digest: string;
+            };
+            status: "community_declared" | "entity_attested";
+        };
+        lifecycle: "active" | "ended" | "withdrawn";
+        effective_from: string;
+        signals: {
+            stage: "evaluate" | "sign_up" | "pay" | "provision" | "operate";
+            signal_code: string;
+            selector_group_id: string;
+            value: "unknown" | "yes" | "no" | "partial" | "not_applicable";
+            observed_at: string;
+            tested_surfaces: {
+                node_kind: "resource" | "endpoint" | "interface" | "surface_exclusion";
+                node_id: string;
+            }[];
+            assessment_method: {
+                name: string;
+                version: string;
+                method_digest: string;
+            };
+            determination_bases: ({
+                locators: {
+                    artifact_digest: string;
+                    start_byte: number;
+                    end_byte: number;
+                    value_digest: string;
+                }[];
+                captures: {
+                    retained_capture_digest: string;
+                    capture_rung: "http" | "headless" | "archive" | "manual";
+                }[];
+                artifact_digests: string[];
+                kind: "direct_observation";
+            } | {
+                coverage_scope: "exact_resource" | "tested_surfaces" | "exact_funnel";
+                covered_surfaces: {
+                    node_kind: "resource" | "endpoint" | "interface" | "surface_exclusion";
+                    node_id: string;
+                }[];
+                covered_branches: number;
+                captures: {
+                    retained_capture_digest: string;
+                    capture_rung: "http" | "headless" | "archive" | "manual";
+                }[];
+                artifact_digests: string[];
+                kind: "bounded_absence";
+            } | {
+                source_surface: {
+                    node_kind: "resource" | "endpoint" | "interface" | "surface_exclusion";
+                    node_id: string;
+                };
+                locators: {
+                    artifact_digest: string;
+                    start_byte: number;
+                    end_byte: number;
+                    value_digest: string;
+                }[];
+                captures: {
+                    retained_capture_digest: string;
+                    capture_rung: "http" | "headless" | "archive" | "manual";
+                }[];
+                artifact_digests: string[];
+                kind: "explicit_first_party_declaration";
+            } | {
+                kind: "standard_requirement";
+                adapter_digest: string;
+                evidence_record_digest: string;
+                requirement: {
+                    namespace: string;
+                    version: string;
+                    requirement_id: string;
+                    relation: "tests" | "informational-reference";
+                };
+                artifact_digests: string[];
+            } | {
+                kind: "certification_receipt";
+                certification_receipt_digest: string;
+            })[];
+            note?: string | undefined;
+        }[];
+        input_contract: "sourcey.agent-readiness-input/v1alpha1";
+        effective_until?: string | undefined;
+    };
+    declaration_revision: {
+        revision_contract: "sourcey.agent-readiness-declaration-revision/v1alpha1";
+        entity_id: string;
+        declaration: {
+            scope: {
+                product: {
+                    key: string;
+                    name: string;
+                };
+                funnel: {
+                    key: string;
+                    name: string;
+                };
+            };
+            resources: {
+                resource_id: string;
+                uri: string;
+                roles: ("policy" | "discovery" | "status" | "pricing" | "eligibility" | "access" | "terms" | "checkout" | "provisioning" | "operations" | "recovery" | "authentication" | "descriptor" | "documentation")[];
+                operated_by_participant_id: string;
+                standard_bindings: {
+                    namespace: string;
+                    version: string;
+                    relation: "declares" | "describes" | "implements" | "uses";
+                }[];
+                allowed_redirect_hosts?: string[] | undefined;
+            }[];
+            relations: {
+                relation_id: string;
+                kind: "describes" | "authenticates" | "requires" | "alternative_to" | "precedes";
+                from: {
+                    node_kind: "resource" | "endpoint" | "interface" | "surface_exclusion";
+                    node_id: string;
+                };
+                to: {
+                    node_kind: "resource" | "endpoint" | "interface" | "surface_exclusion";
+                    node_id: string;
+                };
+            }[];
+            declaration_id: string;
+            declared_at: string;
+            assessment_targets: {
+                target_id: string;
+                name: string;
+                interface_ids: string[];
+            }[];
+            participants: {
+                participant_id: string;
+                roles: ("subject" | "access_operator" | "identity_provider" | "payment_provider" | "provisioning_provider" | "operations_provider")[];
+                identity: {
+                    entity_id: string;
+                } | {
+                    origin_source_id: string;
+                };
+            }[];
+            endpoints: {
+                endpoint_id: string;
+                uri: string;
+                transport: "http" | "websocket" | "grpc";
+                roles: ("status" | "service" | "checkout" | "recovery" | "authorization" | "token" | "registration" | "protected_resource" | "webhook")[];
+                operated_by_participant_id: string;
+                standard_bindings: {
+                    namespace: string;
+                    version: string;
+                    relation: "declares" | "describes" | "implements" | "uses";
+                }[];
+                allowed_redirect_hosts?: string[] | undefined;
+            }[];
+            interfaces: {
+                interface_id: string;
+                modality: "web_application" | "network_api" | "command_line" | "software_library" | "tool_server" | "agent_service";
+                functions: ("events" | "recovery" | "authentication" | "service_operation" | "commerce")[];
+                endpoint_ids: string[];
+                resource_ids: string[];
+                operated_by_participant_id: string;
+                standard_bindings: {
+                    namespace: string;
+                    version: string;
+                    relation: "declares" | "describes" | "implements" | "uses";
+                }[];
+            }[];
+            surface_exclusions: {
+                exclusion_id: string;
+                role: "policy" | "discovery" | "status" | "pricing" | "eligibility" | "access" | "terms" | "checkout" | "provisioning" | "operations" | "recovery" | "authentication" | "descriptor" | "documentation";
+                rationale: string;
+            }[];
+            authority_intent: "entity" | "community";
+            source_bindings: {
+                target: {
+                    node_kind: "relation" | "resource" | "endpoint" | "interface" | "surface_exclusion" | "declaration" | "participant" | "assessment_target";
+                    node_id: string;
+                };
+                source_binding_id: string;
+                source_id: string;
+                field_paths: string[];
+            }[];
+        };
+        sources: {
+            source_id: string;
+            url: string;
+        }[];
+        revision_digest: string;
+    };
+    offer_relation_inputs: {
+        relation_input_contract: "sourcey.agent-readiness-offer-relation-input/v1alpha1";
+        agent_readiness_profile_id: string;
+        offer_id: string;
+        purpose: "application_path" | "redemption_path" | "operating_path";
+        applicable_stages: ("evaluate" | "sign_up" | "pay" | "provision" | "operate")[];
+        effective_from: string;
+        declaration_revision_digest: string;
+        offer_relation_proposal_id: string;
+        admitted_offer_revision_digest: string;
+        effective_until?: string | undefined;
+    }[];
+} | null;
+type ProposalReference = Pick<CatalogPublicationProposal["authority_proposals"][number], "proposal_digest">;
+export interface PublicationAuthorityBundles {
+    readonly evidenceProposals: readonly (ProposalReference & ReadinessPublicationProposal & {
+        readonly event_intents: readonly CatalogEventIntent[];
+    })[];
+    readonly claimBundles: readonly {
+        readonly proposal: ProposalReference;
+        readonly events: readonly CatalogEvent[];
+    }[];
+    readonly assetBundles: readonly {
+        readonly proposals: readonly ProposalReference[];
+        readonly events: readonly CatalogEvent[];
+    }[];
+    readonly identityBundles: readonly {
+        readonly proposal: ProposalReference;
+        readonly events: readonly CatalogEvent[];
+    }[];
+    readonly assuranceBundles: readonly {
+        readonly action: {
+            readonly action_digest: string;
+        };
+        readonly events: readonly CatalogEvent[];
+    }[];
+}
+/** Every materialization remains admitted independently; only semantic references form a union. */
+export declare function authorityProposalsForBundles(input: PublicationAuthorityBundles): CatalogPublicationProposal["authority_proposals"];
+export {};
+//# sourceMappingURL=publication-authorities.d.ts.map

package/dist/modules/release/src/publication-authorities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-authorities.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/publication-authorities.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAG9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAGnG,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAC7C,uBAAuB,EACrB,+BAA+B,GAC/B,sCAAsC,GACtC,uCAAuC,CAC1C,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAQpF;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,0BAA0B,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,EACzD,iBAAiB,CAClB,CAAC;AAEF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,GACrD,4BAA4B,GAAG;QAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACvD,CAAC,EAAE,CAAC;IACP,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;KAC1C,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;QACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;KAC1C,EAAE,CAAC;IACJ,QAAQ,CAAC,eAAe,EAAE,SAAS;QACjC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;KAC1C,EAAE,CAAC;IACJ,QAAQ,CAAC,gBAAgB,EAAE,SAAS;QAClC,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;KAC1C,EAAE,CAAC;CACL;AAED,mGAAmG;AACnG,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,2BAA2B,GACjC,0BAA0B,CAAC,qBAAqB,CAAC,CAoDnD"}

package/dist/modules/release/src/publication-authorities.js

@@ -0,0 +1,56 @@
+import { agentReadinessProfileReleaseInputSchema } from "../../../contracts/agent-readiness/src/index.js";
+import { mergeCatalogPublicationAuthorityProposalLanes } from "../../catalog-admission/src/publication-authorities.js";
+import { catalogPublicationEventDependencyKeys } from "../../catalog-admission/src/publication-dependencies.js";
+import { digest } from "../../primitives/src/index.js";
+/** Public canonical input only; private review and model material stay private. */
+export function agentReadinessPublicationInput(proposal) {
+    if (!proposal.agent_readiness_profile_input)
+        return null;
+    return agentReadinessProfileReleaseInputSchema.parse({
+        release_input_contract: "sourcey.agent-readiness-release-input/v1alpha1",
+        profile_input: proposal.agent_readiness_profile_input,
+        declaration_revision: proposal.agent_readiness_declaration_revision,
+        offer_relation_inputs: proposal.agent_readiness_offer_relation_inputs,
+    });
+}
+/** Every materialization remains admitted independently; only semantic references form a union. */
+export function authorityProposalsForBundles(input) {
+    return mergeCatalogPublicationAuthorityProposalLanes(...input.evidenceProposals.map((proposal) => {
+        const { proposal_digest, event_intents } = proposal;
+        const publicInput = agentReadinessPublicationInput(proposal);
+        const publicBinding = publicInput ? { public_input_digest: digest(publicInput) } : {};
+        const dependency_keys = catalogPublicationEventDependencyKeys(event_intents.map(({ core, event_id }) => ({ ...core, event_id })));
+        return [
+            { purpose: "catalog-capture", proposal_digest, dependency_keys },
+            {
+                purpose: "catalog-evidence",
+                proposal_digest,
+                dependency_keys,
+                ...publicBinding,
+            },
+        ];
+    }), ...input.claimBundles.map(({ proposal: { proposal_digest }, events }) => [...new Set(events.map((event) => event.protected.signature_purpose))].map((purpose) => ({
+        purpose,
+        proposal_digest,
+        dependency_keys: catalogPublicationEventDependencyKeys(events.filter((event) => event.protected.signature_purpose === purpose)),
+    }))), ...input.assetBundles.map(({ proposals }) => proposals.map(({ proposal_digest }) => ({
+        purpose: "catalog-identity",
+        proposal_digest,
+        // Asset dependencies come from the exact binding/proposal transitions,
+        // including candidates whose custody event has not been issued yet.
+        dependency_keys: [],
+    }))), ...input.identityBundles.map(({ proposal: { proposal_digest }, events }) => [
+        {
+            purpose: "catalog-identity",
+            proposal_digest,
+            dependency_keys: catalogPublicationEventDependencyKeys(events),
+        },
+    ]), ...input.assuranceBundles.map(({ action: { action_digest }, events }) => [
+        {
+            purpose: "catalog-verification",
+            proposal_digest: action_digest,
+            dependency_keys: catalogPublicationEventDependencyKeys(events),
+        },
+    ]));
+}
+//# sourceMappingURL=publication-authorities.js.map

package/dist/modules/release/src/publication-authorities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-authorities.js","sourceRoot":"","sources":["../../../../modules/release/src/publication-authorities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,iDAAiD,CAAC;AAG1G,OAAO,EAAE,6CAA6C,EAAE,MAAM,wDAAwD,CAAC;AACvH,OAAO,EAAE,qCAAqC,EAAE,MAAM,yDAAyD,CAAC;AAEhH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AASvD,mFAAmF;AACnF,MAAM,UAAU,8BAA8B,CAAC,QAAsC;IACnF,IAAI,CAAC,QAAQ,CAAC,6BAA6B;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,uCAAuC,CAAC,KAAK,CAAC;QACnD,sBAAsB,EAAE,gDAAgD;QACxE,aAAa,EAAE,QAAQ,CAAC,6BAA6B;QACrD,oBAAoB,EAAE,QAAQ,CAAC,oCAAoC;QACnE,qBAAqB,EAAE,QAAQ,CAAC,qCAAqC;KACtE,CAAC,CAAC;AACL,CAAC;AA8BD,mGAAmG;AACnG,MAAM,UAAU,4BAA4B,CAC1C,KAAkC;IAElC,OAAO,6CAA6C,CAClD,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1C,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC;QACpD,MAAM,WAAW,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,eAAe,GAAG,qCAAqC,CAC3D,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CACnE,CAAC;QACF,OAAO;YACL,EAAE,OAAO,EAAE,iBAA0B,EAAE,eAAe,EAAE,eAAe,EAAE;YACzE;gBACE,OAAO,EAAE,kBAA2B;gBACpC,eAAe;gBACf,eAAe;gBACf,GAAG,aAAa;aACjB;SACF,CAAC;IACJ,CAAC,CAAC,EACF,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACtE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO;QACP,eAAe;QACf,eAAe,EAAE,qCAAqC,CACpD,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,KAAK,OAAO,CAAC,CACxE;KACF,CAAC,CAAC,CACJ,EACD,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAC1C,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,kBAA2B;QACpC,eAAe;QACf,uEAAuE;QACvE,oEAAoE;QACpE,eAAe,EAAE,EAAE;KACpB,CAAC,CAAC,CACJ,EACD,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1E;YACE,OAAO,EAAE,kBAA2B;YACpC,eAAe;YACf,eAAe,EAAE,qCAAqC,CAAC,MAAM,CAAC;SAC/D;KACF,CAAC,EACF,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvE;YACE,OAAO,EAAE,sBAA+B;YACxC,eAAe,EAAE,aAAa;YAC9B,eAAe,EAAE,qCAAqC,CAAC,MAAM,CAAC;SAC/D;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/modules/release/src/publication-inputs.d.ts

@@ -1,9 +1,5 @@
-import { type CatalogPublicationChangeSet, type CatalogPublicationProposal, type PublicationIngressReceipt } from "../../../contracts/publication/src/index.js";
+import { type CatalogPublicationComposition } from "../../../contracts/publication/src/index.js";
 import type { CatalogDelta, CatalogReleaseBundle } from "../../../contracts/release/src/index.js";
-export interface VerifiedPublicationInputs {
-    readonly proposal: CatalogPublicationProposal;
-    readonly changeSet: CatalogPublicationChangeSet;
-    readonly receipts: readonly PublicationIngressReceipt[];
-}
+export type VerifiedPublicationInputs = CatalogPublicationComposition;
 export declare function verifyPublicationInputs(bundle: CatalogReleaseBundle, delta: CatalogDelta, files: ReadonlyMap<string, Buffer>): VerifiedPublicationInputs;
 //# sourceMappingURL=publication-inputs.d.ts.map

package/dist/modules/release/src/publication-inputs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publication-inputs.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAK/B,KAAK,yBAAyB,EAG/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAalG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,yBAAyB,CAgE3B"}
+{"version":3,"file":"publication-inputs.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,6BAA6B,EAOnC,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAclG,MAAM,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEtE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,yBAAyB,CAsF3B"}

package/dist/modules/release/src/publication-inputs.js

@@ -1,5 +1,5 @@
 import { catalogPublicationChangeSetCoreSchema, catalogPublicationChangeSetSchema, catalogPublicationProposalCoreSchema, catalogPublicationProposalSchema, publicationIngressReceiptCoreSchema, publicationIngressReceiptSchema, } from "../../../contracts/publication/src/index.js";
-import { catalogPublicationAdmittedInputDigests, verifyCatalogPublicationInputClosure, } from "../../catalog-admission/src/index.js";
+import { catalogPublicationAdmittedInputDigests, catalogPublicationIngressUnion, verifyCatalogPublicationInputClosure, } from "../../catalog-admission/src/index.js";
 import { canonicalJson, compareCanonicalStrings, digest, digestFromPathSegment, } from "../../primitives/src/index.js";
 export function verifyPublicationInputs(bundle, delta, files) {
     const proposals = valuesUnder(files, "publication/proposals/").map(([path, input]) => {
@@ -22,32 +22,46 @@ export function verifyPublicationInputs(bundle, delta, files) {
         return receipt;
     })
         .sort((left, right) => compareCanonicalStrings(left.receipt_digest, right.receipt_digest));
-    const proposal = proposals[0];
-    const changeSet = changeSets[0];
-    if (!proposal || proposals.length !== 1 || !changeSet || changeSets.length !== 1) {
-        throw new Error("Catalog delta must close one canonical proposal and one Change Set.");
-    }
     if (receipts.length === 0 || !delta.base) {
         throw new Error("Catalog delta must close ingress receipt provenance and an exact live base.");
     }
+    const proposalsByDigest = new Map(proposals.map((proposal) => [proposal.proposal_digest, proposal]));
+    const changeSetsByProposal = new Map(changeSets.map((changeSet) => [changeSet.proposal_digest, changeSet]));
+    if (proposalsByDigest.size !== proposals.length ||
+        changeSetsByProposal.size !== changeSets.length)
+        throw new Error("Catalog publication must retain exactly one Change Set for each addressed proposal.");
+    const ingresses = receipts.map((receipt) => {
+        const proposal = proposalsByDigest.get(receipt.proposal_digest);
+        const changeSet = changeSetsByProposal.get(receipt.proposal_digest);
+        if (!proposal || !changeSet)
+            throw new Error("Catalog ingress lacks its retained proposal or Change Set.");
+        return { proposal, change_set: changeSet, ingress_receipt: receipt };
+    });
+    const union = catalogPublicationIngressUnion(ingresses);
+    const proposal = proposalsByDigest.get(union.proposal_digest);
+    const changeSet = changeSetsByProposal.get(union.proposal_digest);
+    if (!proposal || !changeSet)
+        throw new Error("Catalog delta lacks its exact aggregate publication plan.");
     const publication = verifyCatalogPublicationInputClosure({
         proposal,
-        changeSet,
-        ingressReceipts: receipts,
+        change_set: changeSet,
+        ingresses,
     });
     if (publication.proposal.live_parent_release_id !== delta.base.release.release_id) {
         throw new Error("Catalog publication inputs do not share one proposal and live parent.");
     }
     const admittedInputs = catalogPublicationAdmittedInputDigests(publication);
-    if (canonicalJson(admittedInputs) !== canonicalJson(bundle.admitted_input_digests) ||
+    const retainedInputs = [
+        ...proposals.map(({ proposal_digest }) => proposal_digest),
+        ...changeSets.map(({ change_set_digest }) => change_set_digest),
+        ...receipts.map(({ receipt_digest }) => receipt_digest),
+    ].sort(compareCanonicalStrings);
+    if (canonicalJson(admittedInputs) !== canonicalJson(retainedInputs) ||
+        canonicalJson(admittedInputs) !== canonicalJson(bundle.admitted_input_digests) ||
         canonicalJson(admittedInputs) !== canonicalJson(delta.admitted_input_digests)) {
         throw new Error("Catalog publication objects do not close the admitted input digest set.");
     }
-    return {
-        proposal: publication.proposal,
-        changeSet: publication.changeSet,
-        receipts: publication.ingressReceipts,
-    };
+    return publication;
 }
 function valuesUnder(files, prefix) {
     return [...files.entries()]
@@ -60,7 +74,7 @@ function assertAddressed(path, declared, computed, label) {
     const address = filename?.endsWith(".json")
         ? digestFromPathSegment(filename.slice(0, -".json".length))
         : null;
-    if (address !== declared || computed !== declared) {
+    if (path.split("/").length !== 3 || address !== declared || computed !== declared) {
         throw new Error(`Catalog publication ${label} ${path} is not content-addressed.`);
     }
 }

package/dist/modules/release/src/publication-inputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"publication-inputs.js","sourceRoot":"","sources":["../../../../modules/release/src/publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAEhC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,uBAAuB,EAEvB,MAAM,EACN,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,KAAmB,EACnB,KAAkC;IAElC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACnF,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC9D,eAAe,CACb,IAAI,EACJ,cAAc,EACd,MAAM,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACxD,UAAU,CACX,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACtF,MAAM,SAAS,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;QAClE,eAAe,CACb,IAAI,EACJ,eAAe,EACf,MAAM,CAAC,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACzD,YAAY,CACb,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAC3D,eAAe,CACb,IAAI,EACJ,aAAa,EACb,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACvD,iBAAiB,CAClB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,WAAW,GAAG,oCAAoC,CAAC;QACvD,QAAQ;QACR,SAAS;QACT,eAAe,EAAE,QAAQ;KAC1B,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,cAAc,GAAG,sCAAsC,CAAC,WAAW,CAAC,CAAC;IAC3E,IACE,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC9E,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAC7E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,QAAQ,EAAE,WAAW,CAAC,eAAe;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAkC,EAClC,MAAc;IAEd,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAU,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa;IACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC;QACzC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,IAAI,4BAA4B,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}
+{"version":3,"file":"publication-inputs.js","sourceRoot":"","sources":["../../../../modules/release/src/publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,sCAAsC,EACtC,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,uBAAuB,EAEvB,MAAM,EACN,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAIvC,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,KAAmB,EACnB,KAAkC;IAElC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACnF,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC9D,eAAe,CACb,IAAI,EACJ,cAAc,EACd,MAAM,CAAC,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACxD,UAAU,CACX,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACtF,MAAM,SAAS,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC;QAClE,eAAe,CACb,IAAI,EACJ,eAAe,EACf,MAAM,CAAC,qCAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACzD,YAAY,CACb,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,sBAAsB,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAC3D,eAAe,CACb,IAAI,EACJ,aAAa,EACb,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACvD,iBAAiB,CAClB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAClE,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CACtE,CAAC;IACF,IACE,iBAAiB,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC3C,oBAAoB,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAE/C,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;YACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QACzB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,oCAAoC,CAAC;QACvD,QAAQ;QACR,UAAU,EAAE,SAAS;QACrB,SAAS;KACV,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,cAAc,GAAG,sCAAsC,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG;QACrB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC;QAC1D,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC;QAC/D,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC;KACxD,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,IACE,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,cAAc,CAAC;QAC/D,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC9E,aAAa,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAC7E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAClB,KAAkC,EAClC,MAAc;IAEd,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAU,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa;IACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC;QACzC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,IAAI,4BAA4B,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/modules/release/src/publication-parent-guard.d.ts

@@ -0,0 +1,17 @@
+import type { PublicationDependencyRegistration } from "../../../contracts/publication/src/index.js";
+import { catalogPublicationParentRelationGuard } from "./publication-parent-relations.js";
+/** Executable validation stays with the exact verifier that admitted the bundle.
+ * The host supplies current parent rows under its activation lock, not rules. */
+export declare function catalogPublicationParentGuard(delta: Parameters<typeof catalogPublicationParentRelationGuard>[0]): {
+    relations: {
+        selectors: {
+            relationIds: string[];
+            profileIds: string[];
+            offerIds: string[];
+        };
+        verify(parent: import("./publication-parent-relations.js").CatalogPublicationParentRelations): void;
+    };
+    verifyImpact(registrations: readonly PublicationDependencyRegistration[]): void;
+};
+export type CatalogPublicationParentGuard = ReturnType<typeof catalogPublicationParentGuard>;
+//# sourceMappingURL=publication-parent-guard.d.ts.map

package/dist/modules/release/src/publication-parent-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-parent-guard.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/publication-parent-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAGrG,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AAE1F;iFACiF;AACjF,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,UAAU,CAAC,OAAO,qCAAqC,CAAC,CAAC,CAAC,CAAC;;;;;;;;;gCAIpC,SAAS,iCAAiC,EAAE,GAAG,IAAI;EAelF;AAED,MAAM,MAAM,6BAA6B,GAAG,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/modules/release/src/publication-parent-guard.js

@@ -0,0 +1,18 @@
+import { resolveCatalogPublicationImpact } from "../../catalog-admission/src/publication.js";
+import { CatalogPublicationImpactIndex } from "../../catalog-admission/src/publication-dependencies.js";
+import { catalogPublicationParentRelationGuard } from "./publication-parent-relations.js";
+/** Executable validation stays with the exact verifier that admitted the bundle.
+ * The host supplies current parent rows under its activation lock, not rules. */
+export function catalogPublicationParentGuard(delta) {
+    return {
+        relations: catalogPublicationParentRelationGuard(delta),
+        verifyImpact(registrations) {
+            const changeSet = delta.publicationChangeSet;
+            const index = new CatalogPublicationImpactIndex(registrations, changeSet.changed_dependency_keys);
+            if (resolveCatalogPublicationImpact(changeSet, index).change_set_digest !==
+                changeSet.change_set_digest)
+                throw new Error("Catalog publication impact differs from its exact current dependency closure.");
+        },
+    };
+}
+//# sourceMappingURL=publication-parent-guard.js.map

package/dist/modules/release/src/publication-parent-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-parent-guard.js","sourceRoot":"","sources":["../../../../modules/release/src/publication-parent-guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,yDAAyD,CAAC;AACxG,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AAE1F;iFACiF;AACjF,MAAM,UAAU,6BAA6B,CAC3C,KAAkE;IAElE,OAAO;QACL,SAAS,EAAE,qCAAqC,CAAC,KAAK,CAAC;QACvD,YAAY,CAAC,aAA2D;YACtE,MAAM,SAAS,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,6BAA6B,CAC7C,aAAa,EACb,SAAS,CAAC,uBAAuB,CAClC,CAAC;YACF,IACE,+BAA+B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,iBAAiB;gBACnE,SAAS,CAAC,iBAAiB;gBAE3B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/modules/release/src/publication-parent-relations.d.ts

@@ -0,0 +1,24 @@
+import type { AgentReadinessOfferRelationRevision, AgentReadinessProjection } from "../../../contracts/agent-readiness/src/index.js";
+import type { VerifiedCatalogDelta } from "./verifier.js";
+type Delta = Pick<VerifiedCatalogDelta, "publicationProposal" | "publicationChangeSet" | "agentReadinessObjects" | "agentReadinessOfferRelationObjects" | "files">;
+export interface CatalogPublicationParentRelations {
+    readonly relations: readonly AgentReadinessOfferRelationRevision[];
+    readonly profiles: readonly Pick<AgentReadinessProjection, "agent_readiness_profile_id" | "revision_digest" | "declaration_revision_digest">[];
+    readonly offers: readonly {
+        readonly offer_id: string;
+        readonly revision_digest: string;
+    }[];
+}
+/** The bundle proves admitted changes, not which associations existed in its
+ * parent. Storage supplies this exact bounded slice under the live-head lock.
+ * Selection never trusts the producer's affected_dependents list. */
+export declare function catalogPublicationParentRelationGuard(delta: Delta): {
+    selectors: {
+        relationIds: string[];
+        profileIds: string[];
+        offerIds: string[];
+    };
+    verify(parent: CatalogPublicationParentRelations): void;
+};
+export {};
+//# sourceMappingURL=publication-parent-relations.d.ts.map

package/dist/modules/release/src/publication-parent-relations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-parent-relations.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/publication-parent-relations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mCAAmC,EACnC,wBAAwB,EACzB,MAAM,iDAAiD,CAAC;AAQzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,KAAK,KAAK,GAAG,IAAI,CACf,oBAAoB,EAClB,qBAAqB,GACrB,sBAAsB,GACtB,uBAAuB,GACvB,oCAAoC,GACpC,OAAO,CACV,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,mCAAmC,EAAE,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,CAC9B,wBAAwB,EACxB,4BAA4B,GAAG,iBAAiB,GAAG,6BAA6B,CACjF,EAAE,CAAC;IACJ,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7F;AAED;;qEAEqE;AACrE,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,KAAK;;;;;;mBA8C/C,iCAAiC,GAAG,IAAI;EAgE1D"}

package/dist/modules/release/src/publication-parent-relations.js

@@ -0,0 +1,104 @@
+import { agentReadinessOfferRelationRequiresWithdrawal, compileAgentReadinessOfferRelationRevision, } from "../../agent-readiness-policy/src/offer-relations.js";
+import { orderedUnique } from "../../catalog-admission/src/publication-dependencies.js";
+import { canonicalJson } from "../../primitives/src/index.js";
+import { verifyAgentReadinessPublicationInputs } from "./agent-readiness-publication-inputs.js";
+/** The bundle proves admitted changes, not which associations existed in its
+ * parent. Storage supplies this exact bounded slice under the live-head lock.
+ * Selection never trusts the producer's affected_dependents list. */
+export function catalogPublicationParentRelationGuard(delta) {
+    const objects = delta.agentReadinessOfferRelationObjects;
+    const admitted = verifyAgentReadinessPublicationInputs({
+        files: delta.files,
+        proposal: delta.publicationProposal,
+        profiles: delta.agentReadinessObjects,
+    });
+    const desired = new Map([...admitted].map(([id, input]) => [
+        id,
+        new Map(input.offer_relation_inputs.map((input) => {
+            const relation = compileAgentReadinessOfferRelationRevision(input);
+            return [relation.relation_id, relation];
+        })),
+    ]));
+    const changedOffers = new Map(delta.publicationChangeSet.revision_changes.flatMap((change) => change.kind === "offer"
+        ? [[change.target_id, change.candidate_revision_digest]]
+        : []));
+    const profileIds = orderedUnique([
+        ...delta.agentReadinessObjects.keys(),
+        ...[...objects.values()].map((object) => relationSubject(object).agent_readiness_profile_id),
+    ]);
+    const selectors = {
+        relationIds: orderedUnique([...objects.keys()]),
+        profileIds,
+        offerIds: orderedUnique([
+            ...changedOffers.keys(),
+            ...[...desired.values()].flatMap((relations) => [...relations.values()].map((relation) => relation.offer_id)),
+            ...[...objects.values()].flatMap((object) => [object.relation, object.prior_relation].flatMap((relation) => relation ? [relation.offer_id] : [])),
+        ]),
+    };
+    return {
+        selectors,
+        verify(parent) {
+            const current = new Map(parent.relations.map((relation) => [relation.relation_id, relation]));
+            if (current.size !== parent.relations.length)
+                throw new Error("Catalog relation parent repeats an association.");
+            const profiles = new Map(parent.profiles.map((profile) => [profile.agent_readiness_profile_id, profile]));
+            const offers = new Map(parent.offers.map((offer) => [offer.offer_id, offer.revision_digest]));
+            const assertCurrentOffer = (relation) => {
+                const revision = changedOffers.has(relation.offer_id)
+                    ? changedOffers.get(relation.offer_id)
+                    : offers.get(relation.offer_id);
+                if (revision !== relation.admitted_offer_revision_digest)
+                    throw new Error(`Catalog Offer relation ${relation.relation_id} does not bind the current Offer.`);
+            };
+            for (const [id, object] of objects) {
+                if (canonicalJson(current.get(id) ?? null) !== canonicalJson(object.prior_relation))
+                    throw new Error(`Catalog Offer relation ${id} does not match its exact current base.`);
+                const profileId = relationSubject(object).agent_readiness_profile_id;
+                const transition = delta.agentReadinessObjects.get(profileId);
+                // A retirement's withdrawal binds the old profile; a replacement binds
+                // the admitted successor. An unchanged profile must still be live.
+                const profile = transition?.projection ?? profiles.get(profileId);
+                if (!profile ||
+                    profile.revision_digest !== object.catalog_context.profile_revision_digest ||
+                    profile.declaration_revision_digest !==
+                        object.catalog_context.declaration_revision.revision_digest)
+                    throw new Error(`Catalog Offer relation ${id} lacks its current profile closure.`);
+                if (object.relation)
+                    assertCurrentOffer(object.relation);
+            }
+            for (const relation of current.values()) {
+                const profileId = relation.agent_readiness_profile_id;
+                const profile = delta.agentReadinessObjects.get(profileId);
+                const replacement = desired.get(profileId);
+                const expected = replacement
+                    ? (replacement.get(relation.relation_id) ?? null)
+                    : agentReadinessOfferRelationRequiresWithdrawal({
+                        relation,
+                        changedOfferRevisionDigest: changedOffers.get(relation.offer_id),
+                        profileRetired: profile?.projection === null,
+                    })
+                        ? null
+                        : relation;
+                const change = objects.get(relation.relation_id);
+                const actual = change ? change.relation : relation;
+                if (canonicalJson(actual) !== canonicalJson(expected))
+                    throw new Error(`Catalog publication omits the required transition for Offer relation ${relation.relation_id}.`);
+            }
+            for (const relations of desired.values()) {
+                for (const [id, relation] of relations) {
+                    assertCurrentOffer(relation);
+                    const actual = objects.has(id) ? objects.get(id)?.relation : current.get(id);
+                    if (canonicalJson(actual ?? null) !== canonicalJson(relation))
+                        throw new Error(`Catalog publication omits admitted Offer relation ${id}.`);
+                }
+            }
+        },
+    };
+}
+function relationSubject(object) {
+    const relation = object.relation ?? object.prior_relation;
+    if (!relation)
+        throw new Error(`Offer relation ${object.relation_id} has no transition subject.`);
+    return relation;
+}
+//# sourceMappingURL=publication-parent-relations.js.map