@sourcey/catalog-verifier 1.0.0

package/dist/modules/standard-adapter-runtime/src/index.d.ts

@@ -0,0 +1,16 @@
+import type { StandardEvidenceArtifact, StandardEvidenceLocator, StandardEvidenceResidue } from "../../../contracts/standards/src/index.js";
+import { type Digest } from "../../primitives/src/index.js";
+export declare function standardAdapterKey(namespace: string, version: string): string;
+export declare function verifyRetainedStandardArtifacts(input: {
+    readonly artifacts: readonly StandardEvidenceArtifact[];
+    readonly bytesByDigest: ReadonlyMap<Digest, Uint8Array>;
+    readonly acceptedMediaTypes: readonly string[];
+    readonly adapterDigest: string;
+}): void;
+export declare function verifyStandardLocatorClosure(input: {
+    readonly artifacts: readonly StandardEvidenceArtifact[];
+    readonly bytesByDigest: ReadonlyMap<Digest, Uint8Array>;
+    readonly locators: readonly StandardEvidenceLocator[];
+    readonly residue: readonly StandardEvidenceResidue[];
+}): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/standard-adapter-runtime/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/standard-adapter-runtime/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,KAAK,MAAM,EAAe,MAAM,+BAA+B,CAAC;AAEzE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,GAAG,IAAI,CAoBP;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACtD,GAAG,IAAI,CAiBP"}

package/dist/modules/standard-adapter-runtime/src/index.js

@@ -0,0 +1,43 @@
+import { sha256Bytes } from "../../primitives/src/index.js";
+export function standardAdapterKey(namespace, version) {
+    return `${namespace}\u0000${version}`;
+}
+export function verifyRetainedStandardArtifacts(input) {
+    if (input.bytesByDigest.size !== input.artifacts.length) {
+        throw new Error("Standard adapter artifact bytes must match the exact request closure.");
+    }
+    const accepted = new Set(input.acceptedMediaTypes.map(normalizeMediaType));
+    for (const artifact of input.artifacts) {
+        const bytes = input.bytesByDigest.get(artifact.object_digest);
+        if (!bytes ||
+            bytes.byteLength !== artifact.bytes ||
+            sha256Bytes(bytes) !== artifact.object_digest) {
+            throw new Error(`Standard artifact ${artifact.object_digest} does not match retained bytes.`);
+        }
+        if (!accepted.has(normalizeMediaType(artifact.media_type))) {
+            throw new Error(`Standard adapter ${input.adapterDigest} does not accept ${artifact.media_type}.`);
+        }
+    }
+}
+export function verifyStandardLocatorClosure(input) {
+    const artifacts = new Map(input.artifacts.map((artifact) => [artifact.object_digest, artifact]));
+    for (const locator of input.locators) {
+        const artifact = artifacts.get(locator.object_digest);
+        const bytes = input.bytesByDigest.get(locator.object_digest);
+        if (!artifact || !bytes || locator.end_byte > artifact.bytes) {
+            throw new Error("A standard locator names bytes outside its exact retained artifact.");
+        }
+        if (sha256Bytes(bytes.slice(locator.start_byte, locator.end_byte)) !== locator.value_digest) {
+            throw new Error("A standard locator does not match its exact retained artifact bytes.");
+        }
+    }
+    for (const item of input.residue) {
+        if (item.object_digest && !artifacts.has(item.object_digest)) {
+            throw new Error("Standard residue names an artifact outside its exact request.");
+        }
+    }
+}
+function normalizeMediaType(value) {
+    return value.split(";", 1)[0]?.trim().toLowerCase() ?? value;
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/standard-adapter-runtime/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../modules/standard-adapter-runtime/src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEzE,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,OAAe;IACnE,OAAO,GAAG,SAAS,SAAS,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAuB,CAAC,CAAC;QACxE,IACE,CAAC,KAAK;YACN,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,KAAK;YACnC,WAAW,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,aAAa,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,aAAa,iCAAiC,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,CAAC,aAAa,oBAAoB,QAAQ,CAAC,UAAU,GAAG,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAK5C;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,aAAuB,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC;AAC/D,CAAC"}

package/dist/modules/standard-evidence/src/index.d.ts

@@ -0,0 +1,33 @@
+import { type StandardEvidenceAdapterManifest, type StandardEvidenceRecord, type StandardEvidenceRequest, type StandardEvidenceRequirementResult, type StandardEvidenceResult, standardEvidenceAdapterManifestCoreSchema, standardEvidenceRequestCoreSchema } from "../../../contracts/standards/src/index.js";
+import { type Digest } from "../../primitives/src/index.js";
+export interface StandardEvidenceAdapter {
+    readonly manifest: StandardEvidenceAdapterManifest;
+    interpret(input: {
+        readonly request: StandardEvidenceRequest;
+        readonly artifacts: ReadonlyMap<Digest, Uint8Array>;
+    }): readonly StandardEvidenceRequirementResult[];
+}
+export declare function buildStandardEvidenceAdapterManifest(input: Parameters<typeof standardEvidenceAdapterManifestCoreSchema.parse>[0]): StandardEvidenceAdapterManifest;
+export declare function buildStandardEvidenceRequest(input: Parameters<typeof standardEvidenceRequestCoreSchema.parse>[0]): StandardEvidenceRequest;
+export declare function buildStandardEvidenceRecord(input: {
+    readonly request: StandardEvidenceRequest;
+    readonly result: StandardEvidenceResult;
+}): StandardEvidenceRecord;
+export declare class StandardEvidenceAdapterRegistry {
+    #private;
+    constructor(adapters: readonly StandardEvidenceAdapter[]);
+    interpret(input: {
+        readonly request: unknown;
+        readonly artifacts: ReadonlyMap<Digest, Uint8Array>;
+    }): StandardEvidenceResult;
+    verifyRecord(input: {
+        readonly record: unknown;
+        readonly artifacts: ReadonlyMap<Digest, Uint8Array>;
+    }): StandardEvidenceRecord;
+}
+export declare function verifyStandardEvidenceAdapterManifest(input: unknown): StandardEvidenceAdapterManifest;
+export declare function verifyStandardEvidenceResult(input: unknown): StandardEvidenceResult;
+export declare function verifyStandardEvidenceRequest(input: unknown): StandardEvidenceRequest;
+export declare function verifyStandardEvidenceRecord(input: unknown): StandardEvidenceRecord;
+export declare function standardEvidenceResultBytes(result: StandardEvidenceResult): Uint8Array;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/standard-evidence/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/standard-evidence/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,yCAAyC,EAIzC,iCAAiC,EAIlC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAGL,KAAK,MAAM,EAGZ,MAAM,+BAA+B,CAAC;AAOvC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD,SAAS,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAC1C,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACrD,GAAG,SAAS,iCAAiC,EAAE,CAAC;CAClD;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,UAAU,CAAC,OAAO,yCAAyC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAC3E,+BAA+B,CAMjC;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,UAAU,CAAC,OAAO,iCAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GACnE,uBAAuB,CAGzB;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC,GAAG,sBAAsB,CAUzB;AAED,qBAAa,+BAA+B;;gBAG9B,QAAQ,EAAE,SAAS,uBAAuB,EAAE;IAoBxD,SAAS,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACrD,GAAG,sBAAsB;IA6D1B,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACrD,GAAG,sBAAsB;CAW3B;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,+BAA+B,CAOjC;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAOnF;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAOrF;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAoBnF;AAWD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,sBAAsB,GAAG,UAAU,CAEtF"}

package/dist/modules/standard-evidence/src/index.js

@@ -0,0 +1,149 @@
+import { standardEvidenceAdapterManifestCoreSchema, standardEvidenceAdapterManifestSchema, standardEvidenceRecordCoreSchema, standardEvidenceRecordSchema, standardEvidenceRequestCoreSchema, standardEvidenceRequestSchema, standardEvidenceResultCoreSchema, standardEvidenceResultSchema, } from "../../../contracts/standards/src/index.js";
+import { canonicalJson, compareCanonicalStrings, digest, sha256Bytes, } from "../../primitives/src/index.js";
+import { standardAdapterKey, verifyRetainedStandardArtifacts, verifyStandardLocatorClosure, } from "../../standard-adapter-runtime/src/index.js";
+export function buildStandardEvidenceAdapterManifest(input) {
+    const core = standardEvidenceAdapterManifestCoreSchema.parse(input);
+    return standardEvidenceAdapterManifestSchema.parse({
+        ...core,
+        adapter_digest: digest(core),
+    });
+}
+export function buildStandardEvidenceRequest(input) {
+    const core = standardEvidenceRequestCoreSchema.parse(input);
+    return standardEvidenceRequestSchema.parse({ ...core, request_digest: digest(core) });
+}
+export function buildStandardEvidenceRecord(input) {
+    const request = verifyStandardEvidenceRequest(input.request);
+    const result = verifyStandardEvidenceResult(input.result);
+    const core = standardEvidenceRecordCoreSchema.parse({
+        record_contract: "sourcey.standard-evidence-record/v1alpha1",
+        request,
+        result,
+        result_object_digest: sha256Bytes(standardEvidenceResultBytes(result)),
+    });
+    return standardEvidenceRecordSchema.parse({ ...core, record_digest: digest(core) });
+}
+export class StandardEvidenceAdapterRegistry {
+    #adapters;
+    constructor(adapters) {
+        const byStandard = new Map();
+        const digests = new Set();
+        for (const adapter of adapters) {
+            const manifest = verifyStandardEvidenceAdapterManifest(adapter.manifest);
+            const key = standardAdapterKey(manifest.standard.namespace, manifest.standard.version);
+            if (byStandard.has(key)) {
+                throw new Error(`Standards adapter ${manifest.standard.namespace}@${manifest.standard.version} is registered more than once.`);
+            }
+            if (digests.has(manifest.adapter_digest)) {
+                throw new Error(`Standards adapter digest ${manifest.adapter_digest} is not unique.`);
+            }
+            byStandard.set(key, adapter);
+            digests.add(manifest.adapter_digest);
+        }
+        this.#adapters = byStandard;
+    }
+    interpret(input) {
+        const request = verifyStandardEvidenceRequest(input.request);
+        const adapter = this.#adapters.get(standardAdapterKey(request.adapter.namespace, request.adapter.version));
+        if (!adapter) {
+            throw new Error(`No exact standards adapter is registered for ${request.adapter.namespace}@${request.adapter.version}.`);
+        }
+        const manifest = verifyStandardEvidenceAdapterManifest(adapter.manifest);
+        if (manifest.adapter_digest !== request.adapter.adapter_digest) {
+            throw new Error(`Standards adapter digest does not match ${request.adapter.namespace}@${request.adapter.version}.`);
+        }
+        const supported = new Set(manifest.requirement_ids);
+        for (const requirement of request.requirements) {
+            if (!supported.has(requirement.requirement_id)) {
+                throw new Error(`Standards adapter ${manifest.adapter_digest} does not implement ${requirement.requirement_id}.`);
+            }
+        }
+        verifyRetainedStandardArtifacts({
+            artifacts: request.artifacts,
+            bytesByDigest: input.artifacts,
+            acceptedMediaTypes: manifest.accepted_media_types,
+            adapterDigest: manifest.adapter_digest,
+        });
+        const interpreted = adapter.interpret({ request, artifacts: input.artifacts });
+        const requested = new Set(request.requirements.map(requirementKey));
+        const returned = new Set(interpreted.map((result) => requirementKey(result.requirement)));
+        if (requested.size !== returned.size ||
+            [...requested].some((requirement) => !returned.has(requirement))) {
+            throw new Error("A standards adapter must return every requested requirement exactly once.");
+        }
+        for (const result of interpreted) {
+            verifyStandardLocatorClosure({
+                artifacts: request.artifacts,
+                bytesByDigest: input.artifacts,
+                locators: result.locators,
+                residue: result.residue,
+            });
+        }
+        const core = standardEvidenceResultCoreSchema.parse({
+            result_contract: "sourcey.standard-evidence-result/v1alpha1",
+            request_digest: request.request_digest,
+            adapter_digest: manifest.adapter_digest,
+            requirements: [...interpreted].sort((left, right) => compareCanonicalStrings(requirementKey(left.requirement), requirementKey(right.requirement))),
+        });
+        return standardEvidenceResultSchema.parse({ ...core, result_digest: digest(core) });
+    }
+    verifyRecord(input) {
+        const record = verifyStandardEvidenceRecord(input.record);
+        const replayed = buildStandardEvidenceRecord({
+            request: record.request,
+            result: this.interpret({ request: record.request, artifacts: input.artifacts }),
+        });
+        if (canonicalJson(replayed) !== canonicalJson(record)) {
+            throw new Error("Standards evidence record does not match exact adapter replay.");
+        }
+        return record;
+    }
+}
+export function verifyStandardEvidenceAdapterManifest(input) {
+    const manifest = standardEvidenceAdapterManifestSchema.parse(input);
+    const { adapter_digest: adapterDigest, ...core } = manifest;
+    if (digest(standardEvidenceAdapterManifestCoreSchema.parse(core)) !== adapterDigest) {
+        throw new Error("Standards adapter manifest digest does not match its canonical core.");
+    }
+    return manifest;
+}
+export function verifyStandardEvidenceResult(input) {
+    const result = standardEvidenceResultSchema.parse(input);
+    const { result_digest: resultDigest, ...core } = result;
+    if (digest(standardEvidenceResultCoreSchema.parse(core)) !== resultDigest) {
+        throw new Error("Standards evidence result digest does not match its canonical core.");
+    }
+    return result;
+}
+export function verifyStandardEvidenceRequest(input) {
+    const request = standardEvidenceRequestSchema.parse(input);
+    const { request_digest: requestDigest, ...core } = request;
+    if (digest(standardEvidenceRequestCoreSchema.parse(core)) !== requestDigest) {
+        throw new Error("Standards evidence request digest does not match its canonical core.");
+    }
+    return request;
+}
+export function verifyStandardEvidenceRecord(input) {
+    const record = standardEvidenceRecordSchema.parse(input);
+    const request = verifyStandardEvidenceRequest(record.request);
+    const result = verifyStandardEvidenceResult(record.result);
+    if (sha256Bytes(standardEvidenceResultBytes(result)) !== record.result_object_digest) {
+        throw new Error("Standards evidence result object digest does not match its canonical bytes.");
+    }
+    const { record_digest: recordDigest, ...core } = record;
+    if (digest(standardEvidenceRecordCoreSchema.parse({
+        ...core,
+        request,
+        result,
+    })) !== recordDigest) {
+        throw new Error("Standards evidence record digest does not match its canonical core.");
+    }
+    return record;
+}
+function requirementKey(value) {
+    return `${standardAdapterKey(value.namespace, value.version)}\u0000${value.requirement_id}\u0000${value.relation}`;
+}
+export function standardEvidenceResultBytes(result) {
+    return new TextEncoder().encode(`${canonicalJson(result)}\n`);
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/standard-evidence/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../modules/standard-evidence/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,yCAAyC,EACzC,qCAAqC,EACrC,gCAAgC,EAChC,4BAA4B,EAC5B,iCAAiC,EACjC,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,aAAa,EACb,uBAAuB,EAEvB,MAAM,EACN,WAAW,GACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,6CAA6C,CAAC;AAUrD,MAAM,UAAU,oCAAoC,CAClD,KAA4E;IAE5E,MAAM,IAAI,GAAG,yCAAyC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,qCAAqC,CAAC,KAAK,CAAC;QACjD,GAAG,IAAI;QACP,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,KAAoE;IAEpE,MAAM,IAAI,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,6BAA6B,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC;QAClD,eAAe,EAAE,2CAA2C;QAC5D,OAAO;QACP,MAAM;QACN,oBAAoB,EAAE,WAAW,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC,CAAC;IACH,OAAO,4BAA4B,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,OAAO,+BAA+B;IACjC,SAAS,CAA+C;IAEjE,YAAY,QAA4C;QACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,qCAAqC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzE,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvF,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,gCAAgC,CAC9G,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,cAAc,iBAAiB,CAAC,CAAC;YACxF,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,KAGT;QACC,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAChC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CACvE,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,gDAAgD,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,CACxG,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,qCAAqC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACpD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,CAAC,cAAc,uBAAuB,WAAW,CAAC,cAAc,GAAG,CACjG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,+BAA+B,CAAC;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,KAAK,CAAC,SAAS;YAC9B,kBAAkB,EAAE,QAAQ,CAAC,oBAAoB;YACjD,aAAa,EAAE,QAAQ,CAAC,cAAc;SACvC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1F,IACE,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAChC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAChE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,4BAA4B,CAAC;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,aAAa,EAAE,KAAK,CAAC,SAAS;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,gCAAgC,CAAC,KAAK,CAAC;YAClD,eAAe,EAAE,2CAA2C;YAC5D,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClD,uBAAuB,CACrB,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAChC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAClC,CACF;SACF,CAAC,CAAC;QACH,OAAO,4BAA4B,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,YAAY,CAAC,KAGZ;QACC,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAc;IAEd,MAAM,QAAQ,GAAG,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC5D,IAAI,MAAM,CAAC,yCAAyC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACxD,IAAI,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC3D,IAAI,MAAM,CAAC,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,WAAW,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACxD,IACE,MAAM,CACJ,gCAAgC,CAAC,KAAK,CAAC;QACrC,GAAG,IAAI;QACP,OAAO;QACP,MAAM;KACP,CAAC,CACH,KAAK,YAAY,EAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAKvB;IACC,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,cAAc,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA8B;IACxE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/packages/catalog-verifier/src/application.d.ts

@@ -0,0 +1,89 @@
+import { type CatalogVerifierCandidateInput, type CatalogVerifierCriterion, type CatalogVerifierResult, type VerifierRepositoryKind } from "../../../contracts/catalog-verifier/src/index.js";
+import type { CatalogTaxonomy } from "../../../contracts/taxonomy/src/index.js";
+import { type CatalogAdmissionCandidate } from "../../../modules/catalog-admission/src/index.js";
+export interface CatalogVerifierIdentityContextInput {
+    readonly packet: unknown;
+    readonly rootSet: unknown;
+    readonly trustedRootDigest: string;
+    readonly verifiedAt: string;
+}
+export interface CatalogVerifierRepositoryInput {
+    readonly repositoryKind: VerifierRepositoryKind;
+    readonly repositoryRoot: string;
+    readonly baseRevision: string;
+    readonly headRevision: string;
+    readonly taxonomy?: CatalogTaxonomy;
+}
+export declare class CatalogVerifierApplication {
+    explain(repositoryKind: VerifierRepositoryKind): readonly CatalogVerifierCriterion[];
+    validateRepositoryChange(input: {
+        readonly repositoryKind: VerifierRepositoryKind;
+        readonly repositoryRoot: string;
+        readonly baseRevision: string;
+        readonly headRevision: string;
+        readonly taxonomy?: CatalogTaxonomy;
+        readonly candidate: CatalogAdmissionCandidate;
+        readonly identityContext: CatalogVerifierIdentityContextInput;
+    }): Promise<CatalogVerifierResult>;
+    createRepositoryIdentityContextRequest(input: CatalogVerifierRepositoryInput & {
+        readonly liveParentReleaseId: string;
+        readonly candidate: CatalogAdmissionCandidate;
+    }): Promise<{
+        query_contract: "sourcey.catalog-admission-conflict-query/v1alpha1";
+        keys: {
+            kind: "entity_id" | "entity_name" | "program_id" | "offer_id" | "offer_slug" | "program_slug" | "domain" | "entity_slug" | "entity_url" | "evidence_url" | "offer_url" | "semantic_offer";
+            normalizedValue: string;
+            keyDigest: `sha256:${string}`;
+            candidateReference: string;
+            candidateIdentityDigest?: `sha256:${string}` | undefined;
+        }[];
+        liveParentReleaseId: `sha256:${string}`;
+        candidate: {
+            kind: "git_pull_request";
+            repository: string;
+            pullRequestNumber: number;
+            headSha: string;
+        } | {
+            kind: "detached";
+            repositoryKind: "startup-credits" | "agent-readiness";
+            candidateDigest: `sha256:${string}`;
+        };
+    }>;
+    validateCandidate(input: CatalogVerifierCandidateInput & {
+        readonly candidate: CatalogAdmissionCandidate;
+        readonly identityContext: CatalogVerifierIdentityContextInput;
+    }): CatalogVerifierResult;
+    createCandidateIdentityContextRequest(input: CatalogVerifierCandidateInput & {
+        readonly liveParentReleaseId: string;
+        readonly candidate?: CatalogAdmissionCandidate;
+    }): {
+        query_contract: "sourcey.catalog-admission-conflict-query/v1alpha1";
+        keys: {
+            kind: "entity_id" | "entity_name" | "program_id" | "offer_id" | "offer_slug" | "program_slug" | "domain" | "entity_slug" | "entity_url" | "evidence_url" | "offer_url" | "semantic_offer";
+            normalizedValue: string;
+            keyDigest: `sha256:${string}`;
+            candidateReference: string;
+            candidateIdentityDigest?: `sha256:${string}` | undefined;
+        }[];
+        liveParentReleaseId: `sha256:${string}`;
+        candidate: {
+            kind: "git_pull_request";
+            repository: string;
+            pullRequestNumber: number;
+            headSha: string;
+        } | {
+            kind: "detached";
+            repositoryKind: "startup-credits" | "agent-readiness";
+            candidateDigest: `sha256:${string}`;
+        };
+    };
+    verifyRelease(input: {
+        readonly directory: string;
+        readonly trustedRootDigest: string;
+    }): Promise<CatalogVerifierResult>;
+}
+export declare function validateCatalogCandidate(input: CatalogVerifierCandidateInput & {
+    readonly candidate: CatalogAdmissionCandidate;
+    readonly identityContext: CatalogVerifierIdentityContextInput;
+}): CatalogVerifierResult;
+//# sourceMappingURL=application.d.ts.map

package/dist/packages/catalog-verifier/src/application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../../../../packages/catalog-verifier/src/application.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAI1B,KAAK,sBAAsB,EAC5B,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAOhF,OAAO,EAEL,KAAK,yBAAyB,EAK/B,MAAM,iDAAiD,CAAC;AAWzD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;CACrC;AA2DD,qBAAa,0BAA0B;IACrC,OAAO,CAAC,cAAc,EAAE,sBAAsB,GAAG,SAAS,wBAAwB,EAAE;IAM9E,wBAAwB,CAAC,KAAK,EAAE;QACpC,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;QACpC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAC9C,QAAQ,CAAC,eAAe,EAAE,mCAAmC,CAAC;KAC/D,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAmB5B,sCAAsC,CAC1C,KAAK,EAAE,8BAA8B,GAAG;QACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;KAC/C;;;;;;;;;;;;;;;;;;;;;IAWH,iBAAiB,CACf,KAAK,EAAE,6BAA6B,GAAG;QACrC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;QAC9C,QAAQ,CAAC,eAAe,EAAE,mCAAmC,CAAC;KAC/D,GACA,qBAAqB;IA+CxB,qCAAqC,CACnC,KAAK,EAAE,6BAA6B,GAAG;QACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC;KAChD;;;;;;;;;;;;;;;;;;;;;IA6BG,aAAa,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAwBnC;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,6BAA6B,GAAG;IACrC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,mCAAmC,CAAC;CAC/D,GACA,qBAAqB,CAEvB"}