@sourcey/catalog-verifier 1.0.0

package/dist/modules/release/src/verification-policies.d.ts

@@ -0,0 +1,278 @@
+import { type CatalogDelta, type CatalogReleaseBundle } from "../../../contracts/release/src/index.js";
+export declare function verifyCatalogDeltaPolicies(bundle: CatalogReleaseBundle, delta: CatalogDelta, files: ReadonlyMap<string, Buffer>): {
+    coveragePolicy: {
+        policy_contract: "sourcey.coverage/v1alpha1";
+        version: string;
+        entity_requirements: {
+            path: string;
+            proof_kinds: ("observed" | "derived" | "editorial" | "attested")[];
+            derivation_rules: ("contact-access-from-first-party-mailto" | "form-access-from-first-party-application" | "first-party-access-operator" | "public-availability-from-application")[];
+            guidance: string;
+        }[];
+        program_requirements: {
+            path: string;
+            proof_kinds: ("observed" | "derived" | "editorial" | "attested")[];
+            derivation_rules: ("contact-access-from-first-party-mailto" | "form-access-from-first-party-application" | "first-party-access-operator" | "public-availability-from-application")[];
+            guidance: string;
+        }[];
+        offer_requirements: {
+            path: string;
+            proof_kinds: ("observed" | "derived" | "editorial" | "attested")[];
+            derivation_rules: ("contact-access-from-first-party-mailto" | "form-access-from-first-party-application" | "first-party-access-operator" | "public-availability-from-application")[];
+            guidance: string;
+        }[];
+        policy_digest: string;
+    };
+    freshnessPolicy: {
+        policy_contract: "sourcey.freshness/v1alpha1";
+        version: string;
+        max_age_days: Record<string, number>;
+        policy_digest: string;
+    };
+    agentReadinessPolicy: {
+        policy_contract: "sourcey.agent-readiness-policy/v1alpha1";
+        policy_version: string;
+        assessment_basis: {
+            principal: "authorized_human_or_organization";
+            initial_state: {
+                product_specific_account: false;
+                product_credentials: false;
+                paid_subscription: false;
+                provisioned_resource: false;
+                external_identity: "only_when_declared_by_exact_funnel";
+            };
+            permitted_human_boundaries: ("account_ownership_confirmation" | "delegated_identity_consent" | "regulated_approval" | "final_payment_or_irreversible_commitment")[];
+            required_handoff_properties: ("exact_disclosure" | "resumable_handoff" | "deterministic_continuation")[];
+            forbidden_substitutions: ("captcha_solving" | "human_password_or_session_sharing" | "concealed_agent_identity" | "invented_eligibility" | "unbound_out_of_band_code" | "vendor_policy_bypass" | "unapproved_consequential_action")[];
+            success: {
+                target_coverage: "every_declared_target";
+                interface_coverage: "at_least_one_declared_alternative";
+                authority: "scoped";
+                failure_semantics: "documented";
+                recovery: "supported";
+            };
+            observed_assessment: {
+                allowed_sources: ("public_documentation" | "public_metadata" | "public_endpoints" | "non_mutating_interaction" | "operator_attested_public_observation")[];
+                consequential_claims: "certification_required";
+            };
+        };
+        assessment_methods: {
+            method_contract: "sourcey.agent-readiness-method/v1alpha1";
+            name: string;
+            version: string;
+            capabilities: {
+                stage: "evaluate" | "sign_up" | "pay" | "provision" | "operate";
+                signal_code: string;
+                values: ("yes" | "no" | "partial" | "not_applicable")[];
+                determination_bases: ("direct_observation" | "bounded_absence" | "explicit_first_party_declaration" | "standard_requirement" | "certification_receipt")[];
+            }[];
+            surface_support: {
+                node_kinds: ("resource" | "endpoint" | "interface" | "surface_exclusion")[];
+                resource_roles: ("policy" | "discovery" | "status" | "pricing" | "eligibility" | "access" | "terms" | "checkout" | "provisioning" | "operations" | "recovery" | "authentication" | "descriptor" | "documentation")[];
+                endpoint_roles: ("status" | "service" | "checkout" | "recovery" | "authorization" | "token" | "registration" | "protected_resource" | "webhook")[];
+                interface_modalities: ("web_application" | "network_api" | "command_line" | "software_library" | "tool_server" | "agent_service")[];
+                interface_functions: ("events" | "recovery" | "authentication" | "service_operation" | "commerce")[];
+            };
+            capture: {
+                rungs: ("http" | "headless" | "archive" | "manual")[];
+                redirects: "reject" | "same-origin" | "allowed-hosts";
+                require_https: true;
+                max_redirects: number;
+                timeout_ms: number;
+                max_bytes: number;
+                freshness_capability: "current" | "history-only";
+            };
+            interaction: {
+                mode: "non_mutating";
+                max_actions: number;
+                allowed_actions: ("navigate" | "follow_link" | "expand_disclosure" | "select_non_submitting_control" | "scroll" | "wait")[];
+                forbidden_effects: ("provision" | "submit_application" | "create_account" | "send_verification_code" | "accept_terms" | "enter_credentials" | "enter_payment_details" | "purchase" | "create_key" | "invoke_billable_service")[];
+            };
+            required_artifacts: ("redirect_chain" | "interaction_trace" | "raw_bytes" | "normalized_text" | "structured_validation" | "standard_evidence_result" | "utf8_locators" | "screenshot" | "capture_interaction_trace" | "manual_review_note")[];
+            failure_classes: ("network_failure" | "policy_refusal" | "authentication_required" | "timeout" | "render_failure" | "invalid_structure" | "interaction_budget_exhausted" | "capture_unavailable")[];
+            residue_classes: ("unresolved_signal" | "insufficient_determination_basis" | "conflicting_observations" | "scope_mismatch" | "manual_review_required" | "unsupported_interaction")[];
+            external_references: {
+                namespace: string;
+                version: string;
+                requirement_id: string;
+                relation: "tests" | "informational-reference";
+            }[];
+            method_digest: string;
+        }[];
+        signal_rules: {
+            stage: "evaluate" | "sign_up" | "pay" | "provision" | "operate";
+            signal_code: string;
+            evaluation_role: "graded" | "barrier" | "informational";
+            required: boolean;
+            pass_values: ("unknown" | "yes" | "no" | "partial" | "not_applicable")[];
+            constrained_values: ("unknown" | "yes" | "no" | "partial" | "not_applicable")[];
+            fail_values: ("unknown" | "yes" | "no" | "partial" | "not_applicable")[];
+            allow_not_applicable: boolean;
+            allowed_method_digests: string[];
+            selector_groups: {
+                selector_group_id: string;
+                coverage: "at_least_one" | "all_matches";
+                alternatives: {
+                    alternative_id: string;
+                    selectors: ({
+                        kind: "resource_role";
+                        roles: ("policy" | "discovery" | "status" | "pricing" | "eligibility" | "access" | "terms" | "checkout" | "provisioning" | "operations" | "recovery" | "authentication" | "descriptor" | "documentation")[];
+                    } | {
+                        kind: "endpoint_role";
+                        roles: ("status" | "service" | "checkout" | "recovery" | "authorization" | "token" | "registration" | "protected_resource" | "webhook")[];
+                    } | {
+                        kind: "interface_signature";
+                        modalities: ("web_application" | "network_api" | "command_line" | "software_library" | "tool_server" | "agent_service")[];
+                        functions: ("events" | "recovery" | "authentication" | "service_operation" | "commerce")[];
+                    } | {
+                        kind: "assessment_target_membership";
+                        membership: "direct" | "reachable";
+                    } | {
+                        kind: "target_relation";
+                        relation_kind: "describes" | "authenticates" | "requires" | "alternative_to" | "precedes";
+                        direction: "from_target" | "to_target";
+                    } | {
+                        kind: "standard_requirement";
+                        requirement: {
+                            namespace: string;
+                            version: string;
+                            requirement_id: string;
+                            relation: "tests" | "informational-reference";
+                        };
+                    })[];
+                }[];
+            }[];
+            value_evidence: {
+                value: "yes" | "no" | "partial" | "not_applicable";
+                alternatives: {
+                    alternative_id: string;
+                    required_basis_kinds: ("direct_observation" | "bounded_absence" | "explicit_first_party_declaration" | "standard_requirement" | "certification_receipt")[];
+                    minimum_distinct_captures: number;
+                    require_independent_capture_rungs: boolean;
+                    required_artifacts: ("redirect_chain" | "interaction_trace" | "raw_bytes" | "normalized_text" | "structured_validation" | "standard_evidence_result" | "utf8_locators" | "screenshot" | "capture_interaction_trace" | "manual_review_note")[];
+                    minimum_surfaces: number;
+                    minimum_branches: number;
+                }[];
+            }[];
+            priority: number;
+            public_findings: {
+                yes: {
+                    condition: string;
+                    finding: string;
+                };
+                no: {
+                    condition: string;
+                    finding: string;
+                };
+                partial: {
+                    condition: string;
+                    finding: string;
+                };
+                unknown: {
+                    condition: string;
+                    finding: string;
+                };
+                not_applicable: {
+                    condition: string;
+                    finding: string;
+                };
+            };
+            external_references: {
+                namespace: string;
+                version: string;
+                requirement_id: string;
+                relation: "tests" | "informational-reference";
+            }[];
+            standard_evidence: {
+                requirement: {
+                    namespace: string;
+                    version: string;
+                    requirement_id: string;
+                    relation: "tests" | "informational-reference";
+                };
+                support: {
+                    result: "satisfied" | "not_satisfied";
+                    values: ("yes" | "no" | "partial" | "not_applicable")[];
+                }[];
+            }[];
+            evidence_terms?: string[] | undefined;
+            blocker?: {
+                code: string;
+                explanation: string;
+            } | undefined;
+            remediation?: {
+                code: string;
+                instruction: string;
+            } | undefined;
+        }[];
+        aggregation: {
+            stage: "worst-signal";
+            overall: "worst-stage";
+            outcome_precedence: ("unknown" | "not_applicable" | "pass" | "constrained" | "fail")[];
+            blocker_precedence: "outcome-then-rule-priority";
+            tie_breaker: "signal-code";
+        };
+        coverage: {
+            unknown_signals: "uncovered";
+            contradicted_signals: "uncovered";
+        };
+        freshness: {
+            source: "observation-freshness-policy";
+            aggregation: "worst-signal" | "worst-required-signal" | "worst-evaluated-signal";
+        };
+        public_states: {
+            pass: {
+                state: "unknown" | "not_applicable" | "ready" | "limited" | "blocked";
+                label: string;
+            };
+            constrained: {
+                state: "unknown" | "not_applicable" | "ready" | "limited" | "blocked";
+                label: string;
+            };
+            fail: {
+                state: "unknown" | "not_applicable" | "ready" | "limited" | "blocked";
+                label: string;
+            };
+            unknown: {
+                state: "unknown" | "not_applicable" | "ready" | "limited" | "blocked";
+                label: string;
+            };
+            not_applicable: {
+                state: "unknown" | "not_applicable" | "ready" | "limited" | "blocked";
+                label: string;
+            };
+        };
+        grading: {
+            strategy: "stage-state-cardinality";
+            grade_by_limited_stage_count: {
+                "0": "A+";
+                "1": "A";
+                "2": "B+";
+                "3": "B";
+                "4": "C+";
+                "5": "C";
+            };
+            failure_grade_by_stage: {
+                evaluate: "D";
+                sign_up: "D";
+                pay: "D";
+                provision: "F";
+                operate: "F";
+            };
+            not_applicable_signals: "excluded";
+            unrated_when: {
+                coverage: "not-complete";
+                freshness: "not-fresh";
+            };
+            unverified_barrier_grade_cap?: "B+" | undefined;
+        };
+        grade_derivation: {
+            label: string;
+            explanation: string;
+            coverage_rule: string;
+            outcome_rule: string;
+        };
+        policy_digest: string;
+    };
+};
+//# sourceMappingURL=verification-policies.d.ts.map

package/dist/modules/release/src/verification-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-policies.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/verification-policies.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EAI1B,MAAM,yCAAyC,CAAC;AAIjD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CnC"}

package/dist/modules/release/src/verification-policies.js

@@ -0,0 +1,38 @@
+import { coveragePolicyCoreSchema, coveragePolicySchema, freshnessPolicyCoreSchema, freshnessPolicySchema, } from "../../../contracts/policies/src/index.js";
+import { RELEASE_RESOURCES, releasePolicyObjectPath, releaseResourceDigest, } from "../../../contracts/release/src/index.js";
+import { validateAgentReadinessPolicy } from "../../agent-readiness-policy/src/index.js";
+import { digest } from "../../primitives/src/index.js";
+export function verifyCatalogDeltaPolicies(bundle, delta, files) {
+    const coverageExpected = releaseResourceDigest(bundle.resource_digests, RELEASE_RESOURCES.coveragePolicy);
+    const coverage = coveragePolicySchema.parse(parseJson(files, releasePolicyObjectPath(coverageExpected)));
+    const { policy_digest: coverageDigest, ...coverageCore } = coverage;
+    const freshnessExpected = releaseResourceDigest(bundle.resource_digests, RELEASE_RESOURCES.freshnessPolicy);
+    const freshness = freshnessPolicySchema.parse(parseJson(files, releasePolicyObjectPath(freshnessExpected)));
+    const { policy_digest: freshnessDigest, ...freshnessCore } = freshness;
+    const agentReadinessExpected = releaseResourceDigest(bundle.resource_digests, RELEASE_RESOURCES.agentReadinessPolicy);
+    const agentReadiness = validateAgentReadinessPolicy(parseJson(files, releasePolicyObjectPath(agentReadinessExpected)));
+    if (digest(coveragePolicyCoreSchema.parse(coverageCore)) !== coverageDigest ||
+        digest(freshnessPolicyCoreSchema.parse(freshnessCore)) !== freshnessDigest ||
+        coverageExpected !== coverageDigest ||
+        freshnessExpected !== freshnessDigest ||
+        agentReadinessExpected !== agentReadiness.policy_digest ||
+        releaseResourceDigest(delta.artifact_core.policy_digests, RELEASE_RESOURCES.agentReadinessPolicy) !== agentReadiness.policy_digest ||
+        releaseResourceDigest(delta.artifact_core.policy_digests, RELEASE_RESOURCES.coveragePolicy) !==
+            coverageDigest ||
+        releaseResourceDigest(delta.artifact_core.policy_digests, RELEASE_RESOURCES.freshnessPolicy) !==
+            freshnessDigest) {
+        throw new Error("Catalog delta policies do not match their canonical bundle digests.");
+    }
+    return {
+        coveragePolicy: coverage,
+        freshnessPolicy: freshness,
+        agentReadinessPolicy: agentReadiness,
+    };
+}
+function parseJson(files, path) {
+    const bytes = files.get(path);
+    if (!bytes)
+        throw new Error(`Catalog delta bundle is missing ${path}.`);
+    return JSON.parse(bytes.toString("utf8"));
+}
+//# sourceMappingURL=verification-policies.js.map

package/dist/modules/release/src/verification-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-policies.js","sourceRoot":"","sources":["../../../../modules/release/src/verification-policies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAGL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAEvD,MAAM,UAAU,0BAA0B,CACxC,MAA4B,EAC5B,KAAmB,EACnB,KAAkC;IAElC,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,MAAM,CAAC,gBAAgB,EACvB,iBAAiB,CAAC,cAAc,CACjC,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CACzC,SAAS,CAAC,KAAK,EAAE,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC;IACpE,MAAM,iBAAiB,GAAG,qBAAqB,CAC7C,MAAM,CAAC,gBAAgB,EACvB,iBAAiB,CAAC,eAAe,CAClC,CAAC;IACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAC3C,SAAS,CAAC,KAAK,EAAE,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAC7D,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE,GAAG,SAAS,CAAC;IACvE,MAAM,sBAAsB,GAAG,qBAAqB,CAClD,MAAM,CAAC,gBAAgB,EACvB,iBAAiB,CAAC,oBAAoB,CACvC,CAAC;IACF,MAAM,cAAc,GAAG,4BAA4B,CACjD,SAAS,CAAC,KAAK,EAAE,uBAAuB,CAAC,sBAAsB,CAAC,CAAC,CAClE,CAAC;IACF,IACE,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,cAAc;QACvE,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,eAAe;QAC1E,gBAAgB,KAAK,cAAc;QACnC,iBAAiB,KAAK,eAAe;QACrC,sBAAsB,KAAK,cAAc,CAAC,aAAa;QACvD,qBAAqB,CACnB,KAAK,CAAC,aAAa,CAAC,cAAc,EAClC,iBAAiB,CAAC,oBAAoB,CACvC,KAAK,cAAc,CAAC,aAAa;QAClC,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC;YACzF,cAAc;QAChB,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC1F,eAAe,EACjB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO;QACL,cAAc,EAAE,QAAQ;QACxB,eAAe,EAAE,SAAS;QAC1B,oBAAoB,EAAE,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAkC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,GAAG,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/modules/release/src/verification-transitions.d.ts

@@ -0,0 +1,14 @@
+import type { AgentReadinessDeltaObject, AgentReadinessOfferRelationDeltaObject } from "../../../contracts/agent-readiness/src/index.js";
+export declare function verifiedAgentReadinessTransitions(objects: ReadonlyMap<string, AgentReadinessDeltaObject>): {
+    agent_readiness_profile_id: string;
+    input_digest: `sha256:${string}` | null;
+    revision_digest: `sha256:${string}` | null;
+    projection_digest: `sha256:${string}` | null;
+}[];
+export declare function verifiedAgentReadinessOfferRelationTransitions(objects: ReadonlyMap<string, AgentReadinessOfferRelationDeltaObject>): {
+    relation_id: string;
+    input_digest: `sha256:${string}` | null;
+    relation_revision_digest: `sha256:${string}` | null;
+    previous_relation_revision_digest: `sha256:${string}` | null;
+}[];
+//# sourceMappingURL=verification-transitions.d.ts.map

package/dist/modules/release/src/verification-transitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-transitions.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/verification-transitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,sCAAsC,EACvC,MAAM,iDAAiD,CAAC;AAGzD,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC;;;;;IAYxD;AAED,wBAAgB,8CAA8C,CAC5D,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,sCAAsC,CAAC;;;;;IAcrE"}

package/dist/modules/release/src/verification-transitions.js

@@ -0,0 +1,26 @@
+import { compareCanonicalStrings, digest } from "../../primitives/src/index.js";
+export function verifiedAgentReadinessTransitions(objects) {
+    return [...objects.values()]
+        .map((object) => ({
+        agent_readiness_profile_id: object.agent_readiness_profile_id,
+        input_digest: object.profile_input ? digest(object.profile_input) : null,
+        revision_digest: object.projection ? object.projection.revision_digest : null,
+        projection_digest: object.projection ? object.projection.projection_digest : null,
+    }))
+        .sort((left, right) => compareCanonicalStrings(left.agent_readiness_profile_id, right.agent_readiness_profile_id));
+}
+export function verifiedAgentReadinessOfferRelationTransitions(objects) {
+    return [...objects.values()]
+        .map((object) => ({
+        relation_id: object.relation_id,
+        input_digest: object.relation_input ? digest(object.relation_input) : null,
+        relation_revision_digest: object.relation
+            ? object.relation.relation_revision_digest
+            : null,
+        previous_relation_revision_digest: object.prior_relation
+            ? object.prior_relation.relation_revision_digest
+            : null,
+    }))
+        .sort((left, right) => compareCanonicalStrings(left.relation_id, right.relation_id));
+}
+//# sourceMappingURL=verification-transitions.js.map

package/dist/modules/release/src/verification-transitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-transitions.js","sourceRoot":"","sources":["../../../../modules/release/src/verification-transitions.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAe,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAE7F,MAAM,UAAU,iCAAiC,CAC/C,OAAuD;IAEvD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAY,CAAC,CAAC,CAAC,IAAI;QACpF,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,MAAM,CAAC,UAAU,CAAC,eAA0B,CAAC,CAAC,CAAC,IAAI;QACzF,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,MAAM,CAAC,UAAU,CAAC,iBAA4B,CAAC,CAAC,CAAC,IAAI;KAC9F,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,uBAAuB,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAC3F,CAAC;AACN,CAAC;AAED,MAAM,UAAU,8CAA8C,CAC5D,OAAoE;IAEpE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAY,CAAC,CAAC,CAAC,IAAI;QACtF,wBAAwB,EAAE,MAAM,CAAC,QAAQ;YACvC,CAAC,CAAE,MAAM,CAAC,QAAQ,CAAC,wBAAmC;YACtD,CAAC,CAAC,IAAI;QACR,iCAAiC,EAAE,MAAM,CAAC,cAAc;YACtD,CAAC,CAAE,MAAM,CAAC,cAAc,CAAC,wBAAmC;YAC5D,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/modules/release/src/verifier.d.ts

@@ -0,0 +1,41 @@
+import { type AgentReadinessDeltaObject, type AgentReadinessOfferRelationDeltaObject, type AgentReadinessProjection } from "../../../contracts/agent-readiness/src/index.js";
+import type { CompiledEntity } from "../../../contracts/artifact/src/index.js";
+import { releaseChangeSchema } from "../../../contracts/artifact/src/index.js";
+import type { AssetDelta } from "../../../contracts/assets/src/index.js";
+import type { EntityAuthoring } from "../../../contracts/authoring/src/index.js";
+import type { RootSet, SignerRegistry } from "../../../contracts/authority/src/index.js";
+import type { CatalogEvent } from "../../../contracts/events/src/index.js";
+import { type CaptureReceipt } from "../../../contracts/evidence/src/index.js";
+import { type Observation } from "../../../contracts/observations/src/index.js";
+import type { CatalogPublicationChangeSet, CatalogPublicationProposal, PublicationIngressReceipt } from "../../../contracts/publication/src/index.js";
+import { type CatalogDelta, type CatalogReleaseBundle } from "../../../contracts/release/src/index.js";
+import { type Digest } from "../../primitives/src/index.js";
+import { type ReleaseRevision } from "./release-revision-parser.js";
+export interface VerifiedCatalogDelta {
+    readonly bundle: CatalogReleaseBundle;
+    readonly delta: CatalogDelta;
+    readonly entities: ReadonlyMap<string, CompiledEntity>;
+    readonly priorEntities: ReadonlyMap<string, CompiledEntity | null>;
+    readonly authoring: ReadonlyMap<string, EntityAuthoring>;
+    readonly priorAuthoring: ReadonlyMap<string, EntityAuthoring | null>;
+    readonly assetDelta: AssetDelta | null;
+    readonly safeAssetBytes: ReadonlyMap<Digest, Buffer>;
+    readonly revisions: ReadonlyMap<Digest, ReleaseRevision>;
+    readonly agentReadinessProfiles: ReadonlyMap<string, AgentReadinessProjection>;
+    readonly agentReadinessObjects: ReadonlyMap<string, AgentReadinessDeltaObject>;
+    readonly agentReadinessOfferRelationObjects: ReadonlyMap<string, AgentReadinessOfferRelationDeltaObject>;
+    readonly events: readonly CatalogEvent[];
+    readonly observations: readonly Observation[];
+    readonly captureReceipts: readonly CaptureReceipt[];
+    readonly publicationProposal: CatalogPublicationProposal;
+    readonly publicationChangeSet: CatalogPublicationChangeSet;
+    readonly ingressReceipts: readonly PublicationIngressReceipt[];
+    readonly rootSet: RootSet;
+    readonly registry: SignerRegistry;
+    readonly files: ReadonlyMap<string, Buffer>;
+    readonly changes: readonly ReturnType<typeof releaseChangeSchema.parse>[];
+}
+export declare function verifyCatalogDeltaDirectory(directory: string, trust?: {
+    readonly rootSetDigest: Digest;
+}): Promise<VerifiedCatalogDelta>;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/modules/release/src/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/verifier.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,sCAAsC,EAG3C,KAAK,wBAAwB,EAS9B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAqB,MAAM,0CAA0C,CAAC;AAClG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAEzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,KAAK,WAAW,EAAqB,MAAM,8CAA8C,CAAC;AACnG,OAAO,KAAK,EACV,2BAA2B,EAC3B,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EAY1B,MAAM,yCAAyC,CAAC;AAejD,OAAO,EAGL,KAAK,MAAM,EAKZ,MAAM,+BAA+B,CAAC;AAWvC,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAY1F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,sBAAsB,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC/E,QAAQ,CAAC,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC/E,QAAQ,CAAC,kCAAkC,EAAE,WAAW,CACtD,MAAM,EACN,sCAAsC,CACvC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;IACzD,QAAQ,CAAC,oBAAoB,EAAE,2BAA2B,CAAC;IAC3D,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,CAAC,OAAO,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;CAC3E;AAED,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAiR/B"}