@sourcey/catalog-verifier 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (402) hide show
  1. package/CHANGELOG.md +3 -0
  2. package/LICENSE +21 -0
  3. package/README.md +64 -0
  4. package/SBOM.cdx.json +177 -0
  5. package/SECURITY.md +8 -0
  6. package/SOURCEY-CLOSURE.json +1559 -0
  7. package/SOURCEY-DISTRIBUTION.json +24 -0
  8. package/SOURCEY-LICENSE-POLICY.json +5 -0
  9. package/SOURCEY-TOOLCHAIN.json +8 -0
  10. package/SUPPORT.md +5 -0
  11. package/THIRD_PARTY_NOTICES.json +69 -0
  12. package/dist/contracts/agent-readiness/src/declaration-acquisition.d.ts +548 -0
  13. package/dist/contracts/agent-readiness/src/declaration-acquisition.d.ts.map +1 -0
  14. package/dist/contracts/agent-readiness/src/declaration-acquisition.js +159 -0
  15. package/dist/contracts/agent-readiness/src/declaration-acquisition.js.map +1 -0
  16. package/dist/contracts/agent-readiness/src/declaration-reference.d.ts +48 -0
  17. package/dist/contracts/agent-readiness/src/declaration-reference.d.ts.map +1 -0
  18. package/dist/contracts/agent-readiness/src/declaration-reference.js +42 -0
  19. package/dist/contracts/agent-readiness/src/declaration-reference.js.map +1 -0
  20. package/dist/contracts/agent-readiness/src/declaration.d.ts +1357 -0
  21. package/dist/contracts/agent-readiness/src/declaration.d.ts.map +1 -0
  22. package/dist/contracts/agent-readiness/src/declaration.js +659 -0
  23. package/dist/contracts/agent-readiness/src/declaration.js.map +1 -0
  24. package/dist/contracts/agent-readiness/src/evidence.d.ts +146 -0
  25. package/dist/contracts/agent-readiness/src/evidence.d.ts.map +1 -0
  26. package/dist/contracts/agent-readiness/src/evidence.js +154 -0
  27. package/dist/contracts/agent-readiness/src/evidence.js.map +1 -0
  28. package/dist/contracts/agent-readiness/src/index.d.ts +6487 -0
  29. package/dist/contracts/agent-readiness/src/index.d.ts.map +1 -0
  30. package/dist/contracts/agent-readiness/src/index.js +1487 -0
  31. package/dist/contracts/agent-readiness/src/index.js.map +1 -0
  32. package/dist/contracts/agent-readiness/src/interaction.d.ts +26 -0
  33. package/dist/contracts/agent-readiness/src/interaction.d.ts.map +1 -0
  34. package/dist/contracts/agent-readiness/src/interaction.js +24 -0
  35. package/dist/contracts/agent-readiness/src/interaction.js.map +1 -0
  36. package/dist/contracts/agent-readiness/src/method-pack.d.ts +391 -0
  37. package/dist/contracts/agent-readiness/src/method-pack.d.ts.map +1 -0
  38. package/dist/contracts/agent-readiness/src/method-pack.js +181 -0
  39. package/dist/contracts/agent-readiness/src/method-pack.js.map +1 -0
  40. package/dist/contracts/agent-readiness/src/shared.d.ts +119 -0
  41. package/dist/contracts/agent-readiness/src/shared.d.ts.map +1 -0
  42. package/dist/contracts/agent-readiness/src/shared.js +144 -0
  43. package/dist/contracts/agent-readiness/src/shared.js.map +1 -0
  44. package/dist/contracts/api/src/index.d.ts +48463 -0
  45. package/dist/contracts/api/src/index.d.ts.map +1 -0
  46. package/dist/contracts/api/src/index.js +1150 -0
  47. package/dist/contracts/api/src/index.js.map +1 -0
  48. package/dist/contracts/artifact/src/index.d.ts +1467 -0
  49. package/dist/contracts/artifact/src/index.d.ts.map +1 -0
  50. package/dist/contracts/artifact/src/index.js +325 -0
  51. package/dist/contracts/artifact/src/index.js.map +1 -0
  52. package/dist/contracts/assets/src/index.d.ts +1397 -0
  53. package/dist/contracts/assets/src/index.d.ts.map +1 -0
  54. package/dist/contracts/assets/src/index.js +560 -0
  55. package/dist/contracts/assets/src/index.js.map +1 -0
  56. package/dist/contracts/authoring/src/index.d.ts +1084 -0
  57. package/dist/contracts/authoring/src/index.d.ts.map +1 -0
  58. package/dist/contracts/authoring/src/index.js +211 -0
  59. package/dist/contracts/authoring/src/index.js.map +1 -0
  60. package/dist/contracts/authority/src/index.d.ts +135 -0
  61. package/dist/contracts/authority/src/index.d.ts.map +1 -0
  62. package/dist/contracts/authority/src/index.js +130 -0
  63. package/dist/contracts/authority/src/index.js.map +1 -0
  64. package/dist/contracts/billing/src/index.d.ts +587 -0
  65. package/dist/contracts/billing/src/index.d.ts.map +1 -0
  66. package/dist/contracts/billing/src/index.js +322 -0
  67. package/dist/contracts/billing/src/index.js.map +1 -0
  68. package/dist/contracts/catalog-verifier/src/index.d.ts +390 -0
  69. package/dist/contracts/catalog-verifier/src/index.d.ts.map +1 -0
  70. package/dist/contracts/catalog-verifier/src/index.js +222 -0
  71. package/dist/contracts/catalog-verifier/src/index.js.map +1 -0
  72. package/dist/contracts/commercial-work/src/index.d.ts +835 -0
  73. package/dist/contracts/commercial-work/src/index.d.ts.map +1 -0
  74. package/dist/contracts/commercial-work/src/index.js +510 -0
  75. package/dist/contracts/commercial-work/src/index.js.map +1 -0
  76. package/dist/contracts/events/src/index.d.ts +700 -0
  77. package/dist/contracts/events/src/index.d.ts.map +1 -0
  78. package/dist/contracts/events/src/index.js +553 -0
  79. package/dist/contracts/events/src/index.js.map +1 -0
  80. package/dist/contracts/evidence/src/index.d.ts +487 -0
  81. package/dist/contracts/evidence/src/index.d.ts.map +1 -0
  82. package/dist/contracts/evidence/src/index.js +342 -0
  83. package/dist/contracts/evidence/src/index.js.map +1 -0
  84. package/dist/contracts/feed/src/index.d.ts +159 -0
  85. package/dist/contracts/feed/src/index.d.ts.map +1 -0
  86. package/dist/contracts/feed/src/index.js +79 -0
  87. package/dist/contracts/feed/src/index.js.map +1 -0
  88. package/dist/contracts/funded-work/src/index.d.ts +64 -0
  89. package/dist/contracts/funded-work/src/index.d.ts.map +1 -0
  90. package/dist/contracts/funded-work/src/index.js +67 -0
  91. package/dist/contracts/funded-work/src/index.js.map +1 -0
  92. package/dist/contracts/observations/src/index.d.ts +134 -0
  93. package/dist/contracts/observations/src/index.d.ts.map +1 -0
  94. package/dist/contracts/observations/src/index.js +112 -0
  95. package/dist/contracts/observations/src/index.js.map +1 -0
  96. package/dist/contracts/policies/src/index.d.ts +151 -0
  97. package/dist/contracts/policies/src/index.d.ts.map +1 -0
  98. package/dist/contracts/policies/src/index.js +121 -0
  99. package/dist/contracts/policies/src/index.js.map +1 -0
  100. package/dist/contracts/publication/src/index.d.ts +4066 -0
  101. package/dist/contracts/publication/src/index.d.ts.map +1 -0
  102. package/dist/contracts/publication/src/index.js +535 -0
  103. package/dist/contracts/publication/src/index.js.map +1 -0
  104. package/dist/contracts/release/src/index.d.ts +2032 -0
  105. package/dist/contracts/release/src/index.d.ts.map +1 -0
  106. package/dist/contracts/release/src/index.js +252 -0
  107. package/dist/contracts/release/src/index.js.map +1 -0
  108. package/dist/contracts/revisions/src/index.d.ts +1405 -0
  109. package/dist/contracts/revisions/src/index.d.ts.map +1 -0
  110. package/dist/contracts/revisions/src/index.js +493 -0
  111. package/dist/contracts/revisions/src/index.js.map +1 -0
  112. package/dist/contracts/routes/src/index.d.ts +103 -0
  113. package/dist/contracts/routes/src/index.d.ts.map +1 -0
  114. package/dist/contracts/routes/src/index.js +163 -0
  115. package/dist/contracts/routes/src/index.js.map +1 -0
  116. package/dist/contracts/routes/src/public-route-allocations.generated.d.ts +2 -0
  117. package/dist/contracts/routes/src/public-route-allocations.generated.d.ts.map +1 -0
  118. package/dist/contracts/routes/src/public-route-allocations.generated.js +56 -0
  119. package/dist/contracts/routes/src/public-route-allocations.generated.js.map +1 -0
  120. package/dist/contracts/standards/src/index.d.ts +1482 -0
  121. package/dist/contracts/standards/src/index.d.ts.map +1 -0
  122. package/dist/contracts/standards/src/index.js +626 -0
  123. package/dist/contracts/standards/src/index.js.map +1 -0
  124. package/dist/contracts/taxonomy/src/index.d.ts +7 -0
  125. package/dist/contracts/taxonomy/src/index.d.ts.map +1 -0
  126. package/dist/contracts/taxonomy/src/index.js +25 -0
  127. package/dist/contracts/taxonomy/src/index.js.map +1 -0
  128. package/dist/modules/agent-readiness-policy/src/current-policy-metrics.d.ts +20 -0
  129. package/dist/modules/agent-readiness-policy/src/current-policy-metrics.d.ts.map +1 -0
  130. package/dist/modules/agent-readiness-policy/src/current-policy-metrics.js +604 -0
  131. package/dist/modules/agent-readiness-policy/src/current-policy-metrics.js.map +1 -0
  132. package/dist/modules/agent-readiness-policy/src/current-policy.d.ts +249 -0
  133. package/dist/modules/agent-readiness-policy/src/current-policy.d.ts.map +1 -0
  134. package/dist/modules/agent-readiness-policy/src/current-policy.js +470 -0
  135. package/dist/modules/agent-readiness-policy/src/current-policy.js.map +1 -0
  136. package/dist/modules/agent-readiness-policy/src/grading.d.ts +39 -0
  137. package/dist/modules/agent-readiness-policy/src/grading.d.ts.map +1 -0
  138. package/dist/modules/agent-readiness-policy/src/grading.js +40 -0
  139. package/dist/modules/agent-readiness-policy/src/grading.js.map +1 -0
  140. package/dist/modules/agent-readiness-policy/src/impact.d.ts +103 -0
  141. package/dist/modules/agent-readiness-policy/src/impact.d.ts.map +1 -0
  142. package/dist/modules/agent-readiness-policy/src/impact.js +249 -0
  143. package/dist/modules/agent-readiness-policy/src/impact.js.map +1 -0
  144. package/dist/modules/agent-readiness-policy/src/index.d.ts +811 -0
  145. package/dist/modules/agent-readiness-policy/src/index.d.ts.map +1 -0
  146. package/dist/modules/agent-readiness-policy/src/index.js +499 -0
  147. package/dist/modules/agent-readiness-policy/src/index.js.map +1 -0
  148. package/dist/modules/agent-readiness-policy/src/offer-relations.d.ts +12 -0
  149. package/dist/modules/agent-readiness-policy/src/offer-relations.d.ts.map +1 -0
  150. package/dist/modules/agent-readiness-policy/src/offer-relations.js +65 -0
  151. package/dist/modules/agent-readiness-policy/src/offer-relations.js.map +1 -0
  152. package/dist/modules/agent-readiness-policy/src/policy-validation.d.ts +4 -0
  153. package/dist/modules/agent-readiness-policy/src/policy-validation.d.ts.map +1 -0
  154. package/dist/modules/agent-readiness-policy/src/policy-validation.js +59 -0
  155. package/dist/modules/agent-readiness-policy/src/policy-validation.js.map +1 -0
  156. package/dist/modules/agent-readiness-policy/src/projection-lineage.d.ts +3 -0
  157. package/dist/modules/agent-readiness-policy/src/projection-lineage.d.ts.map +1 -0
  158. package/dist/modules/agent-readiness-policy/src/projection-lineage.js +12 -0
  159. package/dist/modules/agent-readiness-policy/src/projection-lineage.js.map +1 -0
  160. package/dist/modules/agent-readiness-policy/src/revision.d.ts +4 -0
  161. package/dist/modules/agent-readiness-policy/src/revision.d.ts.map +1 -0
  162. package/dist/modules/agent-readiness-policy/src/revision.js +46 -0
  163. package/dist/modules/agent-readiness-policy/src/revision.js.map +1 -0
  164. package/dist/modules/agent-readiness-policy/src/standard-mapping.d.ts +7 -0
  165. package/dist/modules/agent-readiness-policy/src/standard-mapping.d.ts.map +1 -0
  166. package/dist/modules/agent-readiness-policy/src/standard-mapping.js +13 -0
  167. package/dist/modules/agent-readiness-policy/src/standard-mapping.js.map +1 -0
  168. package/dist/modules/agent-readiness-policy/src/surface-selection.d.ts +36 -0
  169. package/dist/modules/agent-readiness-policy/src/surface-selection.d.ts.map +1 -0
  170. package/dist/modules/agent-readiness-policy/src/surface-selection.js +214 -0
  171. package/dist/modules/agent-readiness-policy/src/surface-selection.js.map +1 -0
  172. package/dist/modules/agent-readiness-repository/src/admission.d.ts +35 -0
  173. package/dist/modules/agent-readiness-repository/src/admission.d.ts.map +1 -0
  174. package/dist/modules/agent-readiness-repository/src/admission.js +56 -0
  175. package/dist/modules/agent-readiness-repository/src/admission.js.map +1 -0
  176. package/dist/modules/agent-readiness-repository/src/change.d.ts +62 -0
  177. package/dist/modules/agent-readiness-repository/src/change.d.ts.map +1 -0
  178. package/dist/modules/agent-readiness-repository/src/change.js +218 -0
  179. package/dist/modules/agent-readiness-repository/src/change.js.map +1 -0
  180. package/dist/modules/agent-readiness-repository/src/declaration-blob.d.ts +29 -0
  181. package/dist/modules/agent-readiness-repository/src/declaration-blob.d.ts.map +1 -0
  182. package/dist/modules/agent-readiness-repository/src/declaration-blob.js +126 -0
  183. package/dist/modules/agent-readiness-repository/src/declaration-blob.js.map +1 -0
  184. package/dist/modules/agent-readiness-repository/src/index.d.ts +102 -0
  185. package/dist/modules/agent-readiness-repository/src/index.d.ts.map +1 -0
  186. package/dist/modules/agent-readiness-repository/src/index.js +208 -0
  187. package/dist/modules/agent-readiness-repository/src/index.js.map +1 -0
  188. package/dist/modules/artifact/src/agent-readiness-closure.d.ts +24 -0
  189. package/dist/modules/artifact/src/agent-readiness-closure.d.ts.map +1 -0
  190. package/dist/modules/artifact/src/agent-readiness-closure.js +98 -0
  191. package/dist/modules/artifact/src/agent-readiness-closure.js.map +1 -0
  192. package/dist/modules/artifact/src/asset-closure.d.ts +12 -0
  193. package/dist/modules/artifact/src/asset-closure.d.ts.map +1 -0
  194. package/dist/modules/artifact/src/asset-closure.js +40 -0
  195. package/dist/modules/artifact/src/asset-closure.js.map +1 -0
  196. package/dist/modules/artifact/src/authoring-closure.d.ts +4 -0
  197. package/dist/modules/artifact/src/authoring-closure.d.ts.map +1 -0
  198. package/dist/modules/artifact/src/authoring-closure.js +19 -0
  199. package/dist/modules/artifact/src/authoring-closure.js.map +1 -0
  200. package/dist/modules/artifact/src/index.d.ts +46 -0
  201. package/dist/modules/artifact/src/index.d.ts.map +1 -0
  202. package/dist/modules/artifact/src/index.js +563 -0
  203. package/dist/modules/artifact/src/index.js.map +1 -0
  204. package/dist/modules/artifact/src/trust-history.d.ts +3 -0
  205. package/dist/modules/artifact/src/trust-history.d.ts.map +1 -0
  206. package/dist/modules/artifact/src/trust-history.js +134 -0
  207. package/dist/modules/artifact/src/trust-history.js.map +1 -0
  208. package/dist/modules/assets/src/authority-bundle.d.ts +36 -0
  209. package/dist/modules/assets/src/authority-bundle.d.ts.map +1 -0
  210. package/dist/modules/assets/src/authority-bundle.js +206 -0
  211. package/dist/modules/assets/src/authority-bundle.js.map +1 -0
  212. package/dist/modules/assets/src/delta.d.ts +18 -0
  213. package/dist/modules/assets/src/delta.d.ts.map +1 -0
  214. package/dist/modules/assets/src/delta.js +183 -0
  215. package/dist/modules/assets/src/delta.js.map +1 -0
  216. package/dist/modules/assets/src/disposition.d.ts +3 -0
  217. package/dist/modules/assets/src/disposition.d.ts.map +1 -0
  218. package/dist/modules/assets/src/disposition.js +30 -0
  219. package/dist/modules/assets/src/disposition.js.map +1 -0
  220. package/dist/modules/assets/src/index.d.ts +25 -0
  221. package/dist/modules/assets/src/index.d.ts.map +1 -0
  222. package/dist/modules/assets/src/index.js +234 -0
  223. package/dist/modules/assets/src/index.js.map +1 -0
  224. package/dist/modules/assets/src/ingestion.d.ts +69 -0
  225. package/dist/modules/assets/src/ingestion.d.ts.map +1 -0
  226. package/dist/modules/assets/src/ingestion.js +169 -0
  227. package/dist/modules/assets/src/ingestion.js.map +1 -0
  228. package/dist/modules/authority/src/index.d.ts +47 -0
  229. package/dist/modules/authority/src/index.d.ts.map +1 -0
  230. package/dist/modules/authority/src/index.js +349 -0
  231. package/dist/modules/authority/src/index.js.map +1 -0
  232. package/dist/modules/authority-state/src/index.d.ts +43 -0
  233. package/dist/modules/authority-state/src/index.d.ts.map +1 -0
  234. package/dist/modules/authority-state/src/index.js +194 -0
  235. package/dist/modules/authority-state/src/index.js.map +1 -0
  236. package/dist/modules/catalog-admission/src/admission-conflicts.d.ts +424 -0
  237. package/dist/modules/catalog-admission/src/admission-conflicts.d.ts.map +1 -0
  238. package/dist/modules/catalog-admission/src/admission-conflicts.js +369 -0
  239. package/dist/modules/catalog-admission/src/admission-conflicts.js.map +1 -0
  240. package/dist/modules/catalog-admission/src/index.d.ts +248 -0
  241. package/dist/modules/catalog-admission/src/index.d.ts.map +1 -0
  242. package/dist/modules/catalog-admission/src/index.js +601 -0
  243. package/dist/modules/catalog-admission/src/index.js.map +1 -0
  244. package/dist/modules/catalog-admission/src/machine-admission.d.ts +1273 -0
  245. package/dist/modules/catalog-admission/src/machine-admission.d.ts.map +1 -0
  246. package/dist/modules/catalog-admission/src/machine-admission.js +529 -0
  247. package/dist/modules/catalog-admission/src/machine-admission.js.map +1 -0
  248. package/dist/modules/catalog-admission/src/publication-assets.d.ts +5 -0
  249. package/dist/modules/catalog-admission/src/publication-assets.d.ts.map +1 -0
  250. package/dist/modules/catalog-admission/src/publication-assets.js +26 -0
  251. package/dist/modules/catalog-admission/src/publication-assets.js.map +1 -0
  252. package/dist/modules/catalog-admission/src/publication-dependencies.d.ts +96 -0
  253. package/dist/modules/catalog-admission/src/publication-dependencies.d.ts.map +1 -0
  254. package/dist/modules/catalog-admission/src/publication-dependencies.js +177 -0
  255. package/dist/modules/catalog-admission/src/publication-dependencies.js.map +1 -0
  256. package/dist/modules/catalog-admission/src/publication-entities.d.ts +9 -0
  257. package/dist/modules/catalog-admission/src/publication-entities.d.ts.map +1 -0
  258. package/dist/modules/catalog-admission/src/publication-entities.js +48 -0
  259. package/dist/modules/catalog-admission/src/publication-entities.js.map +1 -0
  260. package/dist/modules/catalog-admission/src/publication-recomposition.d.ts +42 -0
  261. package/dist/modules/catalog-admission/src/publication-recomposition.d.ts.map +1 -0
  262. package/dist/modules/catalog-admission/src/publication-recomposition.js +163 -0
  263. package/dist/modules/catalog-admission/src/publication-recomposition.js.map +1 -0
  264. package/dist/modules/catalog-admission/src/publication.d.ts +92 -0
  265. package/dist/modules/catalog-admission/src/publication.d.ts.map +1 -0
  266. package/dist/modules/catalog-admission/src/publication.js +605 -0
  267. package/dist/modules/catalog-admission/src/publication.js.map +1 -0
  268. package/dist/modules/catalog-admission/src/submission.d.ts +47 -0
  269. package/dist/modules/catalog-admission/src/submission.d.ts.map +1 -0
  270. package/dist/modules/catalog-admission/src/submission.js +289 -0
  271. package/dist/modules/catalog-admission/src/submission.js.map +1 -0
  272. package/dist/modules/catalog-authoring-validation/src/index.d.ts +46 -0
  273. package/dist/modules/catalog-authoring-validation/src/index.d.ts.map +1 -0
  274. package/dist/modules/catalog-authoring-validation/src/index.js +98 -0
  275. package/dist/modules/catalog-authoring-validation/src/index.js.map +1 -0
  276. package/dist/modules/catalog-model/src/index.d.ts +26 -0
  277. package/dist/modules/catalog-model/src/index.d.ts.map +1 -0
  278. package/dist/modules/catalog-model/src/index.js +80 -0
  279. package/dist/modules/catalog-model/src/index.js.map +1 -0
  280. package/dist/modules/cli/src/index.d.ts +10 -0
  281. package/dist/modules/cli/src/index.d.ts.map +1 -0
  282. package/dist/modules/cli/src/index.js +31 -0
  283. package/dist/modules/cli/src/index.js.map +1 -0
  284. package/dist/modules/compiler/src/index.d.ts +23 -0
  285. package/dist/modules/compiler/src/index.d.ts.map +1 -0
  286. package/dist/modules/compiler/src/index.js +75 -0
  287. package/dist/modules/compiler/src/index.js.map +1 -0
  288. package/dist/modules/evidence-operations/src/dependency-versions.d.ts +2 -0
  289. package/dist/modules/evidence-operations/src/dependency-versions.d.ts.map +1 -0
  290. package/dist/modules/evidence-operations/src/dependency-versions.js +17 -0
  291. package/dist/modules/evidence-operations/src/dependency-versions.js.map +1 -0
  292. package/dist/modules/evidence-operations/src/evidence-normalization.d.ts +111 -0
  293. package/dist/modules/evidence-operations/src/evidence-normalization.d.ts.map +1 -0
  294. package/dist/modules/evidence-operations/src/evidence-normalization.js +309 -0
  295. package/dist/modules/evidence-operations/src/evidence-normalization.js.map +1 -0
  296. package/dist/modules/evidence-operations/src/proof-graph.d.ts +22 -0
  297. package/dist/modules/evidence-operations/src/proof-graph.d.ts.map +1 -0
  298. package/dist/modules/evidence-operations/src/proof-graph.js +188 -0
  299. package/dist/modules/evidence-operations/src/proof-graph.js.map +1 -0
  300. package/dist/modules/evidence-operations/src/source-authority.d.ts +31 -0
  301. package/dist/modules/evidence-operations/src/source-authority.d.ts.map +1 -0
  302. package/dist/modules/evidence-operations/src/source-authority.js +60 -0
  303. package/dist/modules/evidence-operations/src/source-authority.js.map +1 -0
  304. package/dist/modules/evidence-operations/src/submission-verifier.d.ts +318 -0
  305. package/dist/modules/evidence-operations/src/submission-verifier.d.ts.map +1 -0
  306. package/dist/modules/evidence-operations/src/submission-verifier.js +392 -0
  307. package/dist/modules/evidence-operations/src/submission-verifier.js.map +1 -0
  308. package/dist/modules/evidence-operations/src/url-canonicalization.d.ts +3 -0
  309. package/dist/modules/evidence-operations/src/url-canonicalization.d.ts.map +1 -0
  310. package/dist/modules/evidence-operations/src/url-canonicalization.js +7 -0
  311. package/dist/modules/evidence-operations/src/url-canonicalization.js.map +1 -0
  312. package/dist/modules/primitives/src/index.d.ts +40 -0
  313. package/dist/modules/primitives/src/index.d.ts.map +1 -0
  314. package/dist/modules/primitives/src/index.js +154 -0
  315. package/dist/modules/primitives/src/index.js.map +1 -0
  316. package/dist/modules/provenance/src/evidence-bindings.d.ts +10 -0
  317. package/dist/modules/provenance/src/evidence-bindings.d.ts.map +1 -0
  318. package/dist/modules/provenance/src/evidence-bindings.js +49 -0
  319. package/dist/modules/provenance/src/evidence-bindings.js.map +1 -0
  320. package/dist/modules/provenance/src/evidence-coverage.d.ts +35 -0
  321. package/dist/modules/provenance/src/evidence-coverage.d.ts.map +1 -0
  322. package/dist/modules/provenance/src/evidence-coverage.js +131 -0
  323. package/dist/modules/provenance/src/evidence-coverage.js.map +1 -0
  324. package/dist/modules/provenance/src/index.d.ts +68 -0
  325. package/dist/modules/provenance/src/index.d.ts.map +1 -0
  326. package/dist/modules/provenance/src/index.js +536 -0
  327. package/dist/modules/provenance/src/index.js.map +1 -0
  328. package/dist/modules/provenance/src/material-claims.d.ts +381 -0
  329. package/dist/modules/provenance/src/material-claims.d.ts.map +1 -0
  330. package/dist/modules/provenance/src/material-claims.js +375 -0
  331. package/dist/modules/provenance/src/material-claims.js.map +1 -0
  332. package/dist/modules/provenance/src/prospective-evidence.d.ts +6 -0
  333. package/dist/modules/provenance/src/prospective-evidence.d.ts.map +1 -0
  334. package/dist/modules/provenance/src/prospective-evidence.js +61 -0
  335. package/dist/modules/provenance/src/prospective-evidence.js.map +1 -0
  336. package/dist/modules/release/src/asset-delta-verifier.d.ts +12 -0
  337. package/dist/modules/release/src/asset-delta-verifier.d.ts.map +1 -0
  338. package/dist/modules/release/src/asset-delta-verifier.js +82 -0
  339. package/dist/modules/release/src/asset-delta-verifier.js.map +1 -0
  340. package/dist/modules/release/src/changes.d.ts +23 -0
  341. package/dist/modules/release/src/changes.d.ts.map +1 -0
  342. package/dist/modules/release/src/changes.js +389 -0
  343. package/dist/modules/release/src/changes.js.map +1 -0
  344. package/dist/modules/release/src/identity.d.ts +17 -0
  345. package/dist/modules/release/src/identity.d.ts.map +1 -0
  346. package/dist/modules/release/src/identity.js +433 -0
  347. package/dist/modules/release/src/identity.js.map +1 -0
  348. package/dist/modules/release/src/inputs.d.ts +89 -0
  349. package/dist/modules/release/src/inputs.d.ts.map +1 -0
  350. package/dist/modules/release/src/inputs.js +514 -0
  351. package/dist/modules/release/src/inputs.js.map +1 -0
  352. package/dist/modules/release/src/publication-inputs.d.ts +9 -0
  353. package/dist/modules/release/src/publication-inputs.d.ts.map +1 -0
  354. package/dist/modules/release/src/publication-inputs.js +67 -0
  355. package/dist/modules/release/src/publication-inputs.js.map +1 -0
  356. package/dist/modules/release/src/release-directory-files.d.ts +7 -0
  357. package/dist/modules/release/src/release-directory-files.d.ts.map +1 -0
  358. package/dist/modules/release/src/release-directory-files.js +49 -0
  359. package/dist/modules/release/src/release-directory-files.js.map +1 -0
  360. package/dist/modules/release/src/release-revision-parser.d.ts +5 -0
  361. package/dist/modules/release/src/release-revision-parser.d.ts.map +1 -0
  362. package/dist/modules/release/src/release-revision-parser.js +19 -0
  363. package/dist/modules/release/src/release-revision-parser.js.map +1 -0
  364. package/dist/modules/release/src/transition.d.ts +36 -0
  365. package/dist/modules/release/src/transition.d.ts.map +1 -0
  366. package/dist/modules/release/src/transition.js +263 -0
  367. package/dist/modules/release/src/transition.js.map +1 -0
  368. package/dist/modules/release/src/verification-policies.d.ts +278 -0
  369. package/dist/modules/release/src/verification-policies.d.ts.map +1 -0
  370. package/dist/modules/release/src/verification-policies.js +38 -0
  371. package/dist/modules/release/src/verification-policies.js.map +1 -0
  372. package/dist/modules/release/src/verification-transitions.d.ts +14 -0
  373. package/dist/modules/release/src/verification-transitions.d.ts.map +1 -0
  374. package/dist/modules/release/src/verification-transitions.js +26 -0
  375. package/dist/modules/release/src/verification-transitions.js.map +1 -0
  376. package/dist/modules/release/src/verifier.d.ts +41 -0
  377. package/dist/modules/release/src/verifier.d.ts.map +1 -0
  378. package/dist/modules/release/src/verifier.js +577 -0
  379. package/dist/modules/release/src/verifier.js.map +1 -0
  380. package/dist/modules/standard-adapter-runtime/src/index.d.ts +16 -0
  381. package/dist/modules/standard-adapter-runtime/src/index.d.ts.map +1 -0
  382. package/dist/modules/standard-adapter-runtime/src/index.js +43 -0
  383. package/dist/modules/standard-adapter-runtime/src/index.js.map +1 -0
  384. package/dist/modules/standard-evidence/src/index.d.ts +33 -0
  385. package/dist/modules/standard-evidence/src/index.d.ts.map +1 -0
  386. package/dist/modules/standard-evidence/src/index.js +149 -0
  387. package/dist/modules/standard-evidence/src/index.js.map +1 -0
  388. package/dist/packages/catalog-verifier/src/application.d.ts +89 -0
  389. package/dist/packages/catalog-verifier/src/application.d.ts.map +1 -0
  390. package/dist/packages/catalog-verifier/src/application.js +363 -0
  391. package/dist/packages/catalog-verifier/src/application.js.map +1 -0
  392. package/dist/packages/catalog-verifier/src/index.d.ts +7 -0
  393. package/dist/packages/catalog-verifier/src/index.d.ts.map +1 -0
  394. package/dist/packages/catalog-verifier/src/index.js +7 -0
  395. package/dist/packages/catalog-verifier/src/index.js.map +1 -0
  396. package/dist/packages/catalog-verifier/src/program.d.ts +4 -0
  397. package/dist/packages/catalog-verifier/src/program.d.ts.map +1 -0
  398. package/dist/packages/catalog-verifier/src/program.js +203 -0
  399. package/dist/packages/catalog-verifier/src/program.js.map +1 -0
  400. package/package.json +63 -0
  401. package/sourcey-catalog-verify.js +7 -0
  402. package/taxonomy.json +29 -0
@@ -0,0 +1,60 @@
1
+ import { canonicalizePublicHttpsUrl } from "../../primitives/src/index.js";
2
+ import { evidenceHttpAllowedHosts } from "./url-canonicalization.js";
3
+ /**
4
+ * Canonical-source authority for catalog evidence.
5
+ *
6
+ * A cited source may prove facts for a subject only when the party publishing
7
+ * it controls those facts. The vendor's own domains always qualify. A third
8
+ * party qualifies only when the subject's roles name that party's entity, the
9
+ * channel-operator case: Pulley's perks page is canonical for the terms of a
10
+ * perk Pulley grants, because the record says Pulley operates it. Directory
11
+ * and aggregator listings match neither test and are inert; they never count
12
+ * toward evidence coverage. Aggregators copy one another's numbers, so citing
13
+ * them would join the chain of restated guesses this catalog exists to break.
14
+ * (2026-08-12: 47 live offers were found carrying economics, eligibility, and
15
+ * access sourced from an aggregator that neither operated nor published the
16
+ * underlying programs.)
17
+ */
18
+ export function hostnameWithinEntityDomains(hostname, domains, retrievedAt) {
19
+ const subject = hostname.toLowerCase().replace(/\.$/, "");
20
+ return domains.some((domain) => {
21
+ if (Date.parse(domain.valid_from) > retrievedAt ||
22
+ (domain.valid_until !== undefined && Date.parse(domain.valid_until) <= retrievedAt)) {
23
+ return false;
24
+ }
25
+ const declared = domain.value.toLowerCase().replace(/\.$/, "");
26
+ return subject === declared || subject.endsWith(`.${declared}`);
27
+ });
28
+ }
29
+ /**
30
+ * Split a subject's cited sources into the canonical set worth capturing and
31
+ * the inert hosts that cannot carry authority for it. Inert sources are not
32
+ * captured at all: the capture allowlist pins each job to its cited host, so
33
+ * a listing on the wrong host can never redirect its way into authority, and
34
+ * skipping it avoids spending extraction effort on text that will not count.
35
+ */
36
+ export function partitionCanonicalEvidenceSources(sources, canonicalDomains, retrievalInstant) {
37
+ const canonical = [];
38
+ const inertHosts = new Set();
39
+ for (const source of sources) {
40
+ let candidates;
41
+ try {
42
+ candidates = evidenceHttpAllowedHosts(source.url);
43
+ }
44
+ catch {
45
+ // A URL the canonicalizer rejects (http://, credentials) cannot be
46
+ // judged here; pass it through so the capture attempt reports the
47
+ // precise transport error instead of a misleading authority one.
48
+ canonical.push(source);
49
+ continue;
50
+ }
51
+ if (candidates.some((host) => hostnameWithinEntityDomains(host, canonicalDomains, retrievalInstant))) {
52
+ canonical.push(source);
53
+ }
54
+ else {
55
+ inertHosts.add(new URL(canonicalizePublicHttpsUrl(source.url, { fragment: "remove" })).hostname);
56
+ }
57
+ }
58
+ return { canonical, inertHosts: [...inertHosts].sort() };
59
+ }
60
+ //# sourceMappingURL=source-authority.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"source-authority.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/source-authority.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,OAA0B,EAC1B,WAAmB;IAEnB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,IACE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,WAAW;YAC3C,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,EACnF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAA0B,EAC1B,gBAAmC,EACnC,gBAAwB;IAExB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,UAA6B,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IACE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,2BAA2B,CAAC,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CACtE,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CACZ,IAAI,GAAG,CAAC,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3D,CAAC"}
@@ -0,0 +1,318 @@
1
+ import { z } from "zod";
2
+ import type { AgentReadinessRevision } from "../../../contracts/agent-readiness/src/index.js";
3
+ import { type EvidenceAssertion, type EvidenceDerivationRule, type EvidenceProofKind, type EvidenceSourceStanding } from "../../../contracts/evidence/src/index.js";
4
+ import type { EntityRevision, OfferRevision, ProgramRevision } from "../../../contracts/revisions/src/index.js";
5
+ import { type Digest } from "../../primitives/src/index.js";
6
+ export { EVIDENCE_NORMALIZER, EVIDENCE_NORMALIZER_CANONICAL_LINK, EVIDENCE_NORMALIZER_CANONICAL_LINK_TOOLCHAIN, EVIDENCE_NORMALIZER_FOUNDATION, EVIDENCE_NORMALIZER_FOUNDATION_TOOLCHAIN, EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN, EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_XML_TOOLCHAIN, EVIDENCE_NORMALIZER_PRE_JSON_VARIANTS_TOOLCHAIN, EVIDENCE_NORMALIZER_TOOLCHAIN, EVIDENCE_NORMALIZER_WEB_LINK_TOOLCHAIN, EVIDENCE_NORMALIZER_XML, EVIDENCE_NORMALIZER_XML_TOOLCHAIN, evidenceNormalizerForToolchainDigest, evidenceNormalizerSchema, normalizeEvidenceCapture, } from "./evidence-normalization.js";
7
+ export declare const EVIDENCE_SUBMISSION_LIMITS: {
8
+ readonly captureBytes: number;
9
+ readonly normalizedBytes: number;
10
+ readonly assertions: 128;
11
+ readonly locatorsPerAssertion: 16;
12
+ readonly redirects: 5;
13
+ };
14
+ export declare const evidenceSubmissionCaptureSchema: z.ZodObject<{
15
+ subject_source_url: z.ZodURL;
16
+ requested_url: z.ZodURL;
17
+ final_url: z.ZodURL;
18
+ redirect_chain: z.ZodArray<z.ZodObject<{
19
+ status: z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<303>, z.ZodLiteral<307>, z.ZodLiteral<308>]>;
20
+ from: z.ZodURL;
21
+ to: z.ZodURL;
22
+ }, z.core.$strict>>;
23
+ retrieved_at: z.ZodISODateTime;
24
+ method: z.ZodEnum<{
25
+ http: "http";
26
+ headless: "headless";
27
+ archive: "archive";
28
+ manual: "manual";
29
+ }>;
30
+ response_status_code: z.ZodNumber;
31
+ media_type: z.ZodString;
32
+ digest: z.ZodString;
33
+ availability: z.ZodEnum<{
34
+ public: "public";
35
+ restricted: "restricted";
36
+ }>;
37
+ }, z.core.$strict>;
38
+ export declare const evidenceSubmissionNormalizationSchema: z.ZodObject<{
39
+ normalizer_contract: z.ZodLiteral<"sourcey.evidence-normalizer/v1alpha1">;
40
+ normalizer_id: z.ZodLiteral<"sourcey-deterministic-content">;
41
+ version: z.ZodLiteral<"1">;
42
+ toolchain_digest: z.ZodString;
43
+ object_digest: z.ZodString;
44
+ }, z.core.$strict>;
45
+ export declare const evidenceSubmissionSchema: z.ZodObject<{
46
+ submission_contract: z.ZodLiteral<"sourcey.evidence-submission/v1alpha1">;
47
+ base_revision_digest: z.ZodString;
48
+ capture: z.ZodObject<{
49
+ subject_source_url: z.ZodURL;
50
+ requested_url: z.ZodURL;
51
+ final_url: z.ZodURL;
52
+ redirect_chain: z.ZodArray<z.ZodObject<{
53
+ status: z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<303>, z.ZodLiteral<307>, z.ZodLiteral<308>]>;
54
+ from: z.ZodURL;
55
+ to: z.ZodURL;
56
+ }, z.core.$strict>>;
57
+ retrieved_at: z.ZodISODateTime;
58
+ method: z.ZodEnum<{
59
+ http: "http";
60
+ headless: "headless";
61
+ archive: "archive";
62
+ manual: "manual";
63
+ }>;
64
+ response_status_code: z.ZodNumber;
65
+ media_type: z.ZodString;
66
+ digest: z.ZodString;
67
+ availability: z.ZodEnum<{
68
+ public: "public";
69
+ restricted: "restricted";
70
+ }>;
71
+ }, z.core.$strict>;
72
+ normalization: z.ZodObject<{
73
+ normalizer_contract: z.ZodLiteral<"sourcey.evidence-normalizer/v1alpha1">;
74
+ normalizer_id: z.ZodLiteral<"sourcey-deterministic-content">;
75
+ version: z.ZodLiteral<"1">;
76
+ toolchain_digest: z.ZodString;
77
+ object_digest: z.ZodString;
78
+ }, z.core.$strict>;
79
+ assertions: z.ZodArray<z.ZodObject<{
80
+ path: z.ZodString;
81
+ polarity: z.ZodEnum<{
82
+ supports: "supports";
83
+ contradicts: "contradicts";
84
+ }>;
85
+ proof_kind: z.ZodEnum<{
86
+ observed: "observed";
87
+ derived: "derived";
88
+ editorial: "editorial";
89
+ attested: "attested";
90
+ }>;
91
+ derivation_rule: z.ZodNullable<z.ZodEnum<{
92
+ "contact-access-from-first-party-mailto": "contact-access-from-first-party-mailto";
93
+ "form-access-from-first-party-application": "form-access-from-first-party-application";
94
+ "first-party-access-operator": "first-party-access-operator";
95
+ "public-availability-from-application": "public-availability-from-application";
96
+ }>>;
97
+ locators: z.ZodArray<z.ZodObject<{
98
+ kind: z.ZodLiteral<"utf8-range">;
99
+ start_byte: z.ZodNumber;
100
+ end_byte: z.ZodNumber;
101
+ value_digest: z.ZodString;
102
+ }, z.core.$strict>>;
103
+ }, z.core.$strict>>;
104
+ }, z.core.$strict>;
105
+ export type EvidenceSubmission = z.infer<typeof evidenceSubmissionSchema>;
106
+ export type EvidenceSubmissionCapture = z.infer<typeof evidenceSubmissionCaptureSchema>;
107
+ export type EvidenceSubmissionNormalization = z.infer<typeof evidenceSubmissionNormalizationSchema>;
108
+ export type { EvidenceSourceStanding };
109
+ export interface VerifiedEvidenceAssertion {
110
+ readonly path: string;
111
+ readonly polarity: "supports" | "contradicts";
112
+ readonly proofKind: EvidenceProofKind;
113
+ readonly derivationRule: EvidenceDerivationRule | null;
114
+ readonly values: readonly {
115
+ readonly valueDigest: Digest;
116
+ readonly text: string;
117
+ }[];
118
+ }
119
+ export interface VerifiedEvidenceSubmission {
120
+ readonly submission: EvidenceSubmission;
121
+ readonly sourceStanding: EvidenceSourceStanding;
122
+ readonly normalizedBytes: Uint8Array;
123
+ readonly assertions: readonly VerifiedEvidenceAssertion[];
124
+ }
125
+ export declare const evidenceReviewProposalSchema: z.ZodObject<{
126
+ proposal_contract: z.ZodLiteral<"sourcey.evidence-review-proposal/v1alpha1">;
127
+ operation_id: z.ZodString;
128
+ job_id: z.ZodString;
129
+ target_id: z.ZodString;
130
+ base_release_id: z.ZodString;
131
+ capture_policy_digest: z.ZodString;
132
+ coverage_policy_digest: z.ZodString;
133
+ subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
134
+ subject_type: z.ZodLiteral<"entity">;
135
+ entity_id: z.ZodString;
136
+ revision_digest: z.ZodString;
137
+ }, z.core.$strict>, z.ZodObject<{
138
+ subject_type: z.ZodLiteral<"program">;
139
+ entity_id: z.ZodString;
140
+ program_id: z.ZodString;
141
+ revision_digest: z.ZodString;
142
+ }, z.core.$strict>, z.ZodObject<{
143
+ subject_type: z.ZodLiteral<"offer">;
144
+ entity_id: z.ZodString;
145
+ program_id: z.ZodOptional<z.ZodString>;
146
+ offer_id: z.ZodString;
147
+ revision_digest: z.ZodString;
148
+ }, z.core.$strict>, z.ZodObject<{
149
+ subject_type: z.ZodLiteral<"agent_readiness_profile">;
150
+ entity_id: z.ZodString;
151
+ agent_readiness_profile_id: z.ZodString;
152
+ revision_digest: z.ZodString;
153
+ }, z.core.$strict>], "subject_type">;
154
+ authority_entity_revision_digest: z.ZodString;
155
+ authority_program_revision_digest: z.ZodNullable<z.ZodString>;
156
+ submission: z.ZodObject<{
157
+ submission_contract: z.ZodLiteral<"sourcey.evidence-submission/v1alpha1">;
158
+ base_revision_digest: z.ZodString;
159
+ capture: z.ZodObject<{
160
+ subject_source_url: z.ZodURL;
161
+ requested_url: z.ZodURL;
162
+ final_url: z.ZodURL;
163
+ redirect_chain: z.ZodArray<z.ZodObject<{
164
+ status: z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<303>, z.ZodLiteral<307>, z.ZodLiteral<308>]>;
165
+ from: z.ZodURL;
166
+ to: z.ZodURL;
167
+ }, z.core.$strict>>;
168
+ retrieved_at: z.ZodISODateTime;
169
+ method: z.ZodEnum<{
170
+ http: "http";
171
+ headless: "headless";
172
+ archive: "archive";
173
+ manual: "manual";
174
+ }>;
175
+ response_status_code: z.ZodNumber;
176
+ media_type: z.ZodString;
177
+ digest: z.ZodString;
178
+ availability: z.ZodEnum<{
179
+ public: "public";
180
+ restricted: "restricted";
181
+ }>;
182
+ }, z.core.$strict>;
183
+ normalization: z.ZodObject<{
184
+ normalizer_contract: z.ZodLiteral<"sourcey.evidence-normalizer/v1alpha1">;
185
+ normalizer_id: z.ZodLiteral<"sourcey-deterministic-content">;
186
+ version: z.ZodLiteral<"1">;
187
+ toolchain_digest: z.ZodString;
188
+ object_digest: z.ZodString;
189
+ }, z.core.$strict>;
190
+ assertions: z.ZodArray<z.ZodObject<{
191
+ path: z.ZodString;
192
+ polarity: z.ZodEnum<{
193
+ supports: "supports";
194
+ contradicts: "contradicts";
195
+ }>;
196
+ proof_kind: z.ZodEnum<{
197
+ observed: "observed";
198
+ derived: "derived";
199
+ editorial: "editorial";
200
+ attested: "attested";
201
+ }>;
202
+ derivation_rule: z.ZodNullable<z.ZodEnum<{
203
+ "contact-access-from-first-party-mailto": "contact-access-from-first-party-mailto";
204
+ "form-access-from-first-party-application": "form-access-from-first-party-application";
205
+ "first-party-access-operator": "first-party-access-operator";
206
+ "public-availability-from-application": "public-availability-from-application";
207
+ }>>;
208
+ locators: z.ZodArray<z.ZodObject<{
209
+ kind: z.ZodLiteral<"utf8-range">;
210
+ start_byte: z.ZodNumber;
211
+ end_byte: z.ZodNumber;
212
+ value_digest: z.ZodString;
213
+ }, z.core.$strict>>;
214
+ }, z.core.$strict>>;
215
+ }, z.core.$strict>;
216
+ review_projection: z.ZodObject<{
217
+ source_standing: z.ZodEnum<{
218
+ "live-first-party": "live-first-party";
219
+ "archived-first-party": "archived-first-party";
220
+ "live-third-party": "live-third-party";
221
+ "archived-third-party": "archived-third-party";
222
+ "manual-first-party": "manual-first-party";
223
+ "manual-third-party": "manual-third-party";
224
+ }>;
225
+ assertions: z.ZodArray<z.ZodObject<{
226
+ path: z.ZodString;
227
+ polarity: z.ZodEnum<{
228
+ supports: "supports";
229
+ contradicts: "contradicts";
230
+ }>;
231
+ proof_kind: z.ZodEnum<{
232
+ observed: "observed";
233
+ derived: "derived";
234
+ editorial: "editorial";
235
+ attested: "attested";
236
+ }>;
237
+ derivation_rule: z.ZodNullable<z.ZodEnum<{
238
+ "contact-access-from-first-party-mailto": "contact-access-from-first-party-mailto";
239
+ "form-access-from-first-party-application": "form-access-from-first-party-application";
240
+ "first-party-access-operator": "first-party-access-operator";
241
+ "public-availability-from-application": "public-availability-from-application";
242
+ }>>;
243
+ values: z.ZodArray<z.ZodObject<{
244
+ start_byte: z.ZodNumber;
245
+ end_byte: z.ZodNumber;
246
+ value_digest: z.ZodString;
247
+ text: z.ZodString;
248
+ }, z.core.$strict>>;
249
+ }, z.core.$strict>>;
250
+ }, z.core.$strict>;
251
+ proposal_digest: z.ZodString;
252
+ }, z.core.$strict>;
253
+ export type EvidenceReviewProposal = z.infer<typeof evidenceReviewProposalSchema>;
254
+ type Revision = EntityRevision | ProgramRevision | OfferRevision | AgentReadinessRevision;
255
+ /**
256
+ * Validates the self-contained proposal envelope at a persistence or provider
257
+ * boundary. This intentionally does not claim that the referenced evidence is
258
+ * true; the offline verifier below performs that stronger check from the exact
259
+ * capture, normalized, and revision bytes.
260
+ */
261
+ export declare function validateEvidenceReviewProposalEnvelope(proposal: unknown): EvidenceReviewProposal;
262
+ /**
263
+ * The one local-byte verification kernel used by proposal preparation and CI.
264
+ * It has no network, filesystem, provider, signing, or mutation dependency.
265
+ */
266
+ export declare function verifyEvidenceSubmission(input: {
267
+ readonly submission: unknown;
268
+ readonly captureBytes: Uint8Array;
269
+ readonly normalizedBytes: Uint8Array;
270
+ readonly revision: Revision;
271
+ readonly authorityEntityRevision: EntityRevision;
272
+ readonly authorityProgramRevision: ProgramRevision | null;
273
+ }): VerifiedEvidenceSubmission;
274
+ /**
275
+ * The one byte-level capture verifier used before claim matching and again
276
+ * when accepted matches enter ordinary evidence authority.
277
+ */
278
+ export declare function verifyEvidenceCaptureObjects(input: {
279
+ readonly capture: unknown;
280
+ readonly normalization: unknown;
281
+ readonly captureBytes: Uint8Array;
282
+ readonly normalizedBytes: Uint8Array;
283
+ }): {
284
+ readonly capture: EvidenceSubmissionCapture;
285
+ readonly normalization: EvidenceSubmissionNormalization;
286
+ readonly normalizedBytes: Uint8Array;
287
+ };
288
+ export declare function verifyEvidenceAssertions(input: {
289
+ readonly assertions: readonly EvidenceAssertion[];
290
+ readonly normalizedBytes: Uint8Array;
291
+ readonly revision: Revision;
292
+ }): readonly VerifiedEvidenceAssertion[];
293
+ export declare function prepareEvidenceReviewProposal(input: {
294
+ readonly operationId: Digest;
295
+ readonly jobId: Digest;
296
+ readonly targetId: string;
297
+ readonly baseReleaseId: Digest;
298
+ readonly capturePolicyDigest: Digest;
299
+ readonly coveragePolicyDigest: Digest;
300
+ readonly submission: unknown;
301
+ readonly captureBytes: Uint8Array;
302
+ readonly normalizedBytes: Uint8Array;
303
+ readonly revision: Revision;
304
+ readonly authorityEntityRevision: EntityRevision;
305
+ readonly authorityProgramRevision: ProgramRevision | null;
306
+ }): EvidenceReviewProposal;
307
+ export declare function verifyEvidenceReviewProposal(input: {
308
+ readonly proposal: unknown;
309
+ readonly captureBytes: Uint8Array;
310
+ readonly normalizedBytes: Uint8Array;
311
+ readonly revision: Revision;
312
+ readonly authorityEntityRevision: EntityRevision;
313
+ readonly authorityProgramRevision: ProgramRevision | null;
314
+ readonly expectedBaseReleaseId?: Digest;
315
+ }): EvidenceReviewProposal;
316
+ export declare function deriveSourceStanding(capture: EvidenceSubmission["capture"], authorityEntityRevision: EntityRevision): EvidenceSourceStanding;
317
+ export declare function validateEvidenceCaptureDeclaration(capture: EvidenceSubmission["capture"]): EvidenceSubmission["capture"];
318
+ //# sourceMappingURL=submission-verifier.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"submission-verifier.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/submission-verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAO5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,MAAM,EAIZ,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,4CAA4C,EAC5C,8BAA8B,EAC9B,wCAAwC,EACxC,mDAAmD,EACnD,uDAAuD,EACvD,+CAA+C,EAC/C,6BAA6B,EAC7B,sCAAsC,EACtC,uBAAuB,EACvB,iCAAiC,EACjC,oCAAoC,EACpC,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAMrC,eAAO,MAAM,0BAA0B;;;;;;CAM7B,CAAC;AAEX,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;kBAAmC,CAAC;AAEhF,eAAO,MAAM,qCAAqC;;;;;;kBAEvC,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQ1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AACpG,YAAY,EAAE,sBAAsB,EAAE,CAAC;AAEvC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,aAAa,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC3D;AAwDD,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAE9B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,KAAK,QAAQ,GAAG,cAAc,GAAG,eAAe,GAAG,aAAa,GAAG,sBAAsB,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,QAAQ,EAAE,OAAO,GAAG,sBAAsB,CAOhG;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,cAAc,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,eAAe,GAAG,IAAI,CAAC;CAC3D,GAAG,0BAA0B,CA8B7B;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CACtC,GAAG;IACF,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CACtC,CA2BA;AAqED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B,GAAG,SAAS,yBAAyB,EAAE,CAkCvC;AAQD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,cAAc,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,eAAe,GAAG,IAAI,CAAC;CAC3D,GAAG,sBAAsB,CAsCzB;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,cAAc,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,eAAe,GAAG,IAAI,CAAC;IAC1D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC,GAAG,sBAAsB,CA0BzB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,EACtC,uBAAuB,EAAE,cAAc,GACtC,sBAAsB,CAgBxB;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,GACrC,kBAAkB,CAAC,SAAS,CAAC,CAI/B"}