@sourcey/catalog-verifier 1.1.1 → 1.1.3

package/dist/modules/publication-instance/src/index.d.ts

@@ -0,0 +1,479 @@
+import { type CatalogReleaseDelivery } from "../../../contracts/release/src/index.js";
+/** The domain transition a delta release carries beside its envelope. */
+export declare const SOURCEY_DELTA_STATE_FILE = "delta.json";
+/**
+ * Sourcey's installed release envelope: the engine's layout and checks, Sourcey's
+ * signed contract identifiers and the objects each Sourcey adapter owns. A delta
+ * release carries its domain transition as a state file; a full release has none.
+ */
+export declare const sourceyReleaseEnvelope: Readonly<{
+    schemas: Readonly<{
+        contracts: {
+            readonly manifest: "sourcey.release-object-manifest/v1alpha1";
+            readonly snapshot: "sourcey.snapshot-core/v1alpha1";
+            readonly artifact: "sourcey.canonical-artifact/v1alpha1";
+            readonly release: "sourcey.release-core/v1alpha1";
+            readonly descriptor: "sourcey.release-descriptor/v1alpha1";
+            readonly diff: "sourcey.release-diff/v1alpha1";
+            readonly bundle: "sourcey.catalog-release-bundle/v1alpha1";
+            readonly resourceTransition: "sourcey.projection-transition/v1alpha1";
+        };
+        change: import("zod").ZodObject<{
+            change_id: import("zod").ZodString;
+            kind: import("zod").ZodString;
+            subject_type: import("zod").ZodEnum<{
+                agent_readiness_profile: "agent_readiness_profile";
+                asset_binding: "asset_binding";
+                entity: "entity";
+                offer: "offer";
+                policy: "policy";
+                program: "program";
+            }>;
+            subject_id: import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodString]>;
+            revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            previous_revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            previous_projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            basis_event_ids: import("zod").ZodArray<import("zod").ZodString>;
+            tombstone: import("zod").ZodOptional<import("zod").ZodObject<{
+                reason: import("zod").ZodEnum<{
+                    ended: "ended";
+                    retired: "retired";
+                    withdrawn: "withdrawn";
+                }>;
+                canonical_route: import("zod").ZodOptional<import("zod").ZodString>;
+            }, import("zod/v4/core").$strict>>;
+        }, import("zod/v4/core").$strict>;
+        subjectTypes: readonly string[];
+        objectManifest: import("zod").ZodObject<{
+            manifest_contract: import("zod").ZodLiteral<string>;
+            objects: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+                sha256: import("zod").ZodString;
+                bytes: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strict>>;
+        }, import("zod/v4/core").$strict>;
+        snapshotCore: import("zod").ZodObject<{
+            snapshot_contract: import("zod").ZodLiteral<string>;
+            release_sequence: import("zod").ZodNumber;
+            compiler_version: import("zod").ZodString;
+            artifact_contract: import("zod").ZodLiteral<string>;
+            input_set_digest: import("zod").ZodString;
+            artifact_digest: import("zod").ZodString;
+            resource_digests: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+            root_set_digest: import("zod").ZodString;
+            signer_registry_digest: import("zod").ZodString;
+            trust_transition_digest: import("zod").ZodNullable<import("zod").ZodString>;
+            policy_as_of: import("zod").ZodISODateTime;
+        }, import("zod/v4/core").$strict>;
+        releaseCore: import("zod").ZodObject<{
+            release_contract: import("zod").ZodLiteral<string>;
+            release_sequence: import("zod").ZodNumber;
+            snapshot_id: import("zod").ZodString;
+            parent_release_id: import("zod").ZodNullable<import("zod").ZodString>;
+            diff_digest: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>;
+        descriptor: import("zod").ZodObject<{
+            descriptor_contract: import("zod").ZodLiteral<string>;
+            snapshot_core: import("zod").ZodObject<{
+                snapshot_contract: import("zod").ZodLiteral<string>;
+                release_sequence: import("zod").ZodNumber;
+                compiler_version: import("zod").ZodString;
+                artifact_contract: import("zod").ZodLiteral<string>;
+                input_set_digest: import("zod").ZodString;
+                artifact_digest: import("zod").ZodString;
+                resource_digests: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+                root_set_digest: import("zod").ZodString;
+                signer_registry_digest: import("zod").ZodString;
+                trust_transition_digest: import("zod").ZodNullable<import("zod").ZodString>;
+                policy_as_of: import("zod").ZodISODateTime;
+            }, import("zod/v4/core").$strict>;
+            snapshot_id: import("zod").ZodString;
+            release_core: import("zod").ZodObject<{
+                release_contract: import("zod").ZodLiteral<string>;
+                release_sequence: import("zod").ZodNumber;
+                snapshot_id: import("zod").ZodString;
+                parent_release_id: import("zod").ZodNullable<import("zod").ZodString>;
+                diff_digest: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>;
+            release_id: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>;
+        diff: import("zod").ZodObject<{
+            diff_contract: import("zod").ZodLiteral<string>;
+            parent_snapshot_id: import("zod").ZodNullable<import("zod").ZodString>;
+            snapshot_id: import("zod").ZodString;
+            changes: import("zod").ZodArray<import("zod").ZodObject<{
+                change_id: import("zod").ZodString;
+                kind: import("zod").ZodString;
+                subject_type: import("zod").ZodEnum<{
+                    agent_readiness_profile: "agent_readiness_profile";
+                    asset_binding: "asset_binding";
+                    entity: "entity";
+                    offer: "offer";
+                    policy: "policy";
+                    program: "program";
+                }>;
+                subject_id: import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodString]>;
+                revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+                previous_revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+                projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+                previous_projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+                basis_event_ids: import("zod").ZodArray<import("zod").ZodString>;
+                tombstone: import("zod").ZodOptional<import("zod").ZodObject<{
+                    reason: import("zod").ZodEnum<{
+                        ended: "ended";
+                        retired: "retired";
+                        withdrawn: "withdrawn";
+                    }>;
+                    canonical_route: import("zod").ZodOptional<import("zod").ZodString>;
+                }, import("zod/v4/core").$strict>>;
+            }, import("zod/v4/core").$strict>>;
+        }, import("zod/v4/core").$strict>;
+        bundle: import("zod").ZodObject<{
+            bundle_contract: import("zod").ZodLiteral<string>;
+            admitted_input_digests: import("zod").ZodArray<import("zod").ZodString>;
+            verifier_digest: import("zod").ZodString;
+            object_manifest_digest: import("zod").ZodString;
+            release: import("zod").ZodObject<{
+                descriptor_contract: import("zod").ZodLiteral<string>;
+                snapshot_core: import("zod").ZodObject<{
+                    snapshot_contract: import("zod").ZodLiteral<string>;
+                    release_sequence: import("zod").ZodNumber;
+                    compiler_version: import("zod").ZodString;
+                    artifact_contract: import("zod").ZodLiteral<string>;
+                    input_set_digest: import("zod").ZodString;
+                    artifact_digest: import("zod").ZodString;
+                    resource_digests: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+                    root_set_digest: import("zod").ZodString;
+                    signer_registry_digest: import("zod").ZodString;
+                    trust_transition_digest: import("zod").ZodNullable<import("zod").ZodString>;
+                    policy_as_of: import("zod").ZodISODateTime;
+                }, import("zod/v4/core").$strict>;
+                snapshot_id: import("zod").ZodString;
+                release_core: import("zod").ZodObject<{
+                    release_contract: import("zod").ZodLiteral<string>;
+                    release_sequence: import("zod").ZodNumber;
+                    snapshot_id: import("zod").ZodString;
+                    parent_release_id: import("zod").ZodNullable<import("zod").ZodString>;
+                    diff_digest: import("zod").ZodString;
+                }, import("zod/v4/core").$strict>;
+                release_id: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>;
+            resource_digests: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
+            files: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+                sha256: import("zod").ZodString;
+                bytes: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strict>>;
+            bundle_digest: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>;
+    }>;
+    ownership: Readonly<{
+        instanceId: string;
+        subjectTypes: readonly string[];
+        assertResources(resources: Readonly<Record<string, string>>): void;
+        hasResource(name: string): boolean;
+        claimsObjectPath(path: string): boolean;
+        assertOwned(paths: Iterable<string>): void;
+    }>;
+    stateFiles: readonly string[];
+    resourceTransitionDigest(resource: string, parentDigest: string, changes: unknown): import("provenry/primitives").Digest;
+    begin(input: ReadonlyMap<string, string | Buffer>): Readonly<{
+        manifest: {
+            manifest_contract: string;
+            objects: Record<string, {
+                sha256: string;
+                bytes: number;
+            }>;
+        };
+        manifestDigest: `sha256:${string}`;
+        seal: (sealInput: import("provenry/publication/envelope").PublicationSealInput<{
+            readonly manifest: "sourcey.release-object-manifest/v1alpha1";
+            readonly snapshot: "sourcey.snapshot-core/v1alpha1";
+            readonly artifact: "sourcey.canonical-artifact/v1alpha1";
+            readonly release: "sourcey.release-core/v1alpha1";
+            readonly descriptor: "sourcey.release-descriptor/v1alpha1";
+            readonly diff: "sourcey.release-diff/v1alpha1";
+            readonly bundle: "sourcey.catalog-release-bundle/v1alpha1";
+            readonly resourceTransition: "sourcey.projection-transition/v1alpha1";
+        }, import("zod").ZodObject<{
+            change_id: import("zod").ZodString;
+            kind: import("zod").ZodString;
+            subject_type: import("zod").ZodEnum<{
+                agent_readiness_profile: "agent_readiness_profile";
+                asset_binding: "asset_binding";
+                entity: "entity";
+                offer: "offer";
+                policy: "policy";
+                program: "program";
+            }>;
+            subject_id: import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodString]>;
+            revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            previous_revision_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            previous_projection_digest: import("zod").ZodOptional<import("zod").ZodString>;
+            basis_event_ids: import("zod").ZodArray<import("zod").ZodString>;
+            tombstone: import("zod").ZodOptional<import("zod").ZodObject<{
+                reason: import("zod").ZodEnum<{
+                    ended: "ended";
+                    retired: "retired";
+                    withdrawn: "withdrawn";
+                }>;
+                canonical_route: import("zod").ZodOptional<import("zod").ZodString>;
+            }, import("zod/v4/core").$strict>>;
+        }, import("zod/v4/core").$strict>>) => Readonly<{
+            files: ReadonlyMap<string, string | Buffer>;
+            bundle: {
+                bundle_contract: string;
+                admitted_input_digests: string[];
+                verifier_digest: string;
+                object_manifest_digest: string;
+                release: {
+                    descriptor_contract: string;
+                    snapshot_core: {
+                        snapshot_contract: string;
+                        release_sequence: number;
+                        compiler_version: string;
+                        artifact_contract: string;
+                        input_set_digest: string;
+                        artifact_digest: string;
+                        resource_digests: Record<string, string>;
+                        root_set_digest: string;
+                        signer_registry_digest: string;
+                        trust_transition_digest: string | null;
+                        policy_as_of: string;
+                    };
+                    snapshot_id: string;
+                    release_core: {
+                        release_contract: string;
+                        release_sequence: number;
+                        snapshot_id: string;
+                        parent_release_id: string | null;
+                        diff_digest: string;
+                    };
+                    release_id: string;
+                };
+                resource_digests: Record<string, string>;
+                files: Record<string, {
+                    sha256: string;
+                    bytes: number;
+                }>;
+                bundle_digest: string;
+            };
+            bundleBytes: string;
+            descriptor: {
+                descriptor_contract: string;
+                snapshot_core: {
+                    snapshot_contract: string;
+                    release_sequence: number;
+                    compiler_version: string;
+                    artifact_contract: string;
+                    input_set_digest: string;
+                    artifact_digest: string;
+                    resource_digests: Record<string, string>;
+                    root_set_digest: string;
+                    signer_registry_digest: string;
+                    trust_transition_digest: string | null;
+                    policy_as_of: string;
+                };
+                snapshot_id: string;
+                release_core: {
+                    release_contract: string;
+                    release_sequence: number;
+                    snapshot_id: string;
+                    parent_release_id: string | null;
+                    diff_digest: string;
+                };
+                release_id: string;
+            };
+            diff: {
+                diff_contract: string;
+                parent_snapshot_id: string | null;
+                snapshot_id: string;
+                changes: {
+                    change_id: string;
+                    kind: string;
+                    subject_type: "agent_readiness_profile" | "asset_binding" | "entity" | "offer" | "policy" | "program";
+                    subject_id: string;
+                    revision_digest?: string | undefined;
+                    previous_revision_digest?: string | undefined;
+                    projection_digest?: string | undefined;
+                    previous_projection_digest?: string | undefined;
+                    basis_event_ids: string[];
+                    tombstone?: {
+                        reason: "ended" | "retired" | "withdrawn";
+                        canonical_route?: string | undefined;
+                    } | undefined;
+                }[];
+            };
+        }>;
+    }>;
+    verifyFiles(releaseFiles: ReadonlyMap<string, Buffer>): {
+        readonly bundle: {
+            bundle_contract: string;
+            admitted_input_digests: string[];
+            verifier_digest: string;
+            object_manifest_digest: string;
+            release: {
+                descriptor_contract: string;
+                snapshot_core: {
+                    snapshot_contract: string;
+                    release_sequence: number;
+                    compiler_version: string;
+                    artifact_contract: string;
+                    input_set_digest: string;
+                    artifact_digest: string;
+                    resource_digests: Record<string, string>;
+                    root_set_digest: string;
+                    signer_registry_digest: string;
+                    trust_transition_digest: string | null;
+                    policy_as_of: string;
+                };
+                snapshot_id: string;
+                release_core: {
+                    release_contract: string;
+                    release_sequence: number;
+                    snapshot_id: string;
+                    parent_release_id: string | null;
+                    diff_digest: string;
+                };
+                release_id: string;
+            };
+            resource_digests: Record<string, string>;
+            files: Record<string, {
+                sha256: string;
+                bytes: number;
+            }>;
+            bundle_digest: string;
+        };
+        readonly files: ReadonlyMap<string, Buffer>;
+    };
+    verify(releaseFiles: ReadonlyMap<string, Buffer>): Readonly<{
+        bundle: {
+            bundle_contract: string;
+            admitted_input_digests: string[];
+            verifier_digest: string;
+            object_manifest_digest: string;
+            release: {
+                descriptor_contract: string;
+                snapshot_core: {
+                    snapshot_contract: string;
+                    release_sequence: number;
+                    compiler_version: string;
+                    artifact_contract: string;
+                    input_set_digest: string;
+                    artifact_digest: string;
+                    resource_digests: Record<string, string>;
+                    root_set_digest: string;
+                    signer_registry_digest: string;
+                    trust_transition_digest: string | null;
+                    policy_as_of: string;
+                };
+                snapshot_id: string;
+                release_core: {
+                    release_contract: string;
+                    release_sequence: number;
+                    snapshot_id: string;
+                    parent_release_id: string | null;
+                    diff_digest: string;
+                };
+                release_id: string;
+            };
+            resource_digests: Record<string, string>;
+            files: Record<string, {
+                sha256: string;
+                bytes: number;
+            }>;
+            bundle_digest: string;
+        };
+        descriptor: {
+            descriptor_contract: string;
+            snapshot_core: {
+                snapshot_contract: string;
+                release_sequence: number;
+                compiler_version: string;
+                artifact_contract: string;
+                input_set_digest: string;
+                artifact_digest: string;
+                resource_digests: Record<string, string>;
+                root_set_digest: string;
+                signer_registry_digest: string;
+                trust_transition_digest: string | null;
+                policy_as_of: string;
+            };
+            snapshot_id: string;
+            release_core: {
+                release_contract: string;
+                release_sequence: number;
+                snapshot_id: string;
+                parent_release_id: string | null;
+                diff_digest: string;
+            };
+            release_id: string;
+        };
+        manifest: {
+            manifest_contract: string;
+            objects: Record<string, {
+                sha256: string;
+                bytes: number;
+            }>;
+        };
+        diff: {
+            diff_contract: string;
+            parent_snapshot_id: string | null;
+            snapshot_id: string;
+            changes: {
+                change_id: string;
+                kind: string;
+                subject_type: "agent_readiness_profile" | "asset_binding" | "entity" | "offer" | "policy" | "program";
+                subject_id: string;
+                revision_digest?: string | undefined;
+                previous_revision_digest?: string | undefined;
+                projection_digest?: string | undefined;
+                previous_projection_digest?: string | undefined;
+                basis_event_ids: string[];
+                tombstone?: {
+                    reason: "ended" | "retired" | "withdrawn";
+                    canonical_route?: string | undefined;
+                } | undefined;
+            }[];
+        };
+        changes: readonly {
+            change_id: string;
+            kind: string;
+            subject_type: "agent_readiness_profile" | "asset_binding" | "entity" | "offer" | "policy" | "program";
+            subject_id: string;
+            revision_digest?: string | undefined;
+            previous_revision_digest?: string | undefined;
+            projection_digest?: string | undefined;
+            previous_projection_digest?: string | undefined;
+            basis_event_ids: string[];
+            tombstone?: {
+                reason: "ended" | "retired" | "withdrawn";
+                canonical_route?: string | undefined;
+            } | undefined;
+        }[];
+        files: ReadonlyMap<string, Buffer<ArrayBufferLike>>;
+        stateFiles: ReadonlyMap<string, Buffer>;
+    }>;
+    assertSuccessor(successor: {
+        readonly descriptor: import("provenry/publication/envelope").PublicationDescriptorFields;
+        readonly diff: {
+            readonly parent_snapshot_id: string | null;
+        };
+        readonly parent: import("provenry/publication/envelope").PublicationParent | null;
+    }): void;
+}>;
+type VerifiedSourceyEnvelope = ReturnType<typeof sourceyReleaseEnvelope.verify>;
+/** One release with verified envelope bindings, typed by the state file it carries. */
+export type VerifiedSourceyRelease = {
+    readonly kind: "full";
+    readonly envelope: VerifiedSourceyEnvelope;
+} | {
+    readonly kind: "delta";
+    readonly envelope: VerifiedSourceyEnvelope;
+    readonly delta: Buffer;
+};
+/** Reads a materialized release once and verifies its envelope once. */
+export declare function readVerifiedSourceyRelease(directory: string): Promise<VerifiedSourceyRelease>;
+export declare function catalogReleaseDelivery(bundleDigest: string): CatalogReleaseDelivery;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/publication-instance/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/publication-instance/src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,sBAAsB,EAG5B,MAAM,yCAAyC,CAAC;AAGjD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIjC,CAAC;AAEH,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAEhF,uFAAuF;AACvF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,GACrE;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,wEAAwE;AACxE,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC,CAIjC;AASD,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,sBAAsB,CAInF"}

package/dist/modules/publication-instance/src/index.js

@@ -0,0 +1,34 @@
+import { contentAddressedArchiveDelivery } from "provenry/publication/delivery";
+import { createPublicationEnvelope } from "provenry/publication/envelope";
+import { readReleaseFiles } from "provenry/publication/objects";
+import { SOURCEY_ARTIFACT_ORIGIN } from "../../../contracts/artifact/src/distribution.js";
+import { catalogReleaseDeliverySchema, sourceyReleaseEnvelopeSchemas, } from "../../../contracts/release/src/index.js";
+import { sourceyReleaseOwnership } from "../../../contracts/sourcey-publication/src/ownership.js";
+/** The domain transition a delta release carries beside its envelope. */
+export const SOURCEY_DELTA_STATE_FILE = "delta.json";
+/**
+ * Sourcey's installed release envelope: the engine's layout and checks, Sourcey's
+ * signed contract identifiers and the objects each Sourcey adapter owns. A delta
+ * release carries its domain transition as a state file; a full release has none.
+ */
+export const sourceyReleaseEnvelope = createPublicationEnvelope({
+    schemas: sourceyReleaseEnvelopeSchemas,
+    ownership: sourceyReleaseOwnership,
+    stateFiles: [SOURCEY_DELTA_STATE_FILE],
+});
+/** Reads a materialized release once and verifies its envelope once. */
+export async function readVerifiedSourceyRelease(directory) {
+    const envelope = sourceyReleaseEnvelope.verify(await readReleaseFiles(directory));
+    const delta = envelope.stateFiles.get(SOURCEY_DELTA_STATE_FILE);
+    return delta ? { kind: "delta", envelope, delta } : { kind: "full", envelope };
+}
+/** Where Sourcey delivers release archives; contributor data cannot select it. */
+const sourceyReleaseDelivery = {
+    artifactOrigin: SOURCEY_ARTIFACT_ORIGIN,
+    collectionPath: "catalog/releases",
+    archiveNamePrefix: "sourcey-catalog-release",
+};
+export function catalogReleaseDelivery(bundleDigest) {
+    return catalogReleaseDeliverySchema.parse(contentAddressedArchiveDelivery({ bundleDigest, ...sourceyReleaseDelivery }));
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/publication-instance/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../modules/publication-instance/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAEL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAElG,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;IAC9D,OAAO,EAAE,6BAA6B;IACtC,SAAS,EAAE,uBAAuB;IAClC,UAAU,EAAE,CAAC,wBAAwB,CAAC;CACvC,CAAC,CAAC;AAaH,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB;IAEjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,kFAAkF;AAClF,MAAM,sBAAsB,GAAG;IAC7B,cAAc,EAAE,uBAAuB;IACvC,cAAc,EAAE,kBAAkB;IAClC,iBAAiB,EAAE,yBAAyB;CACpC,CAAC;AAEX,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,OAAO,4BAA4B,CAAC,KAAK,CACvC,+BAA+B,CAAC,EAAE,YAAY,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAC7E,CAAC;AACJ,CAAC"}

package/dist/modules/release/src/agent-readiness-publication-inputs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-readiness-publication-inputs.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/agent-readiness-publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EAEvC,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAS9F,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,8BAA8B,CAAC;AAItC,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EACnC,SAAS,EAAE,SAAS,4BAA4B,EAAE,GACjD,IAAI,CAKN;AAED;iFACiF;AACjF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACnE,GAAG,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAkCzD"}
+{"version":3,"file":"agent-readiness-publication-inputs.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/agent-readiness-publication-inputs.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EAEvC,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,8BAA8B,CAAC;AAItC,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EACnC,SAAS,EAAE,SAAS,4BAA4B,EAAE,GACjD,IAAI,CAKN;AAED;iFACiF;AACjF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACnE,GAAG,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAkCzD"}

package/dist/modules/release/src/agent-readiness-publication-inputs.js

@@ -1,6 +1,6 @@
+import { canonicalJson, digest, digestPathSegment, parseJsonFile, prettyJson, } from "provenry/primitives";
 import { agentReadinessProfileReleaseInputSchema, } from "../../../contracts/agent-readiness/src/index.js";
-import { parseReleaseJson } from "../../artifact/src/release-directory-files.js";
-import { canonicalJson, digest, digestPathSegment, prettyJson, } from "../../primitives/src/index.js";
+import { CATALOG_RELEASE } from "../../artifact/src/release-directory-files.js";
 import { agentReadinessPublicationInput, } from "./publication-authorities.js";
 const prefix = "inputs/agent-readiness-release/";
 export function addAgentReadinessPublicationInputs(files, proposals) {
@@ -24,7 +24,7 @@ export function verifyAgentReadinessPublicationInputs(input) {
         if (paths.has(path))
             continue;
         paths.add(path);
-        const value = agentReadinessProfileReleaseInputSchema.parse(parseReleaseJson(input.files, path));
+        const value = agentReadinessProfileReleaseInputSchema.parse(parseJsonFile(input.files, path, CATALOG_RELEASE));
         const profileId = value.profile_input.agent_readiness_profile_id;
         const object = input.profiles.get(profileId);
         const previous = profiles.get(profileId);

package/dist/modules/release/src/agent-readiness-publication-inputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-readiness-publication-inputs.js","sourceRoot":"","sources":["../../../../modules/release/src/agent-readiness-publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uCAAuC,GACxC,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AACjF,OAAO,EACL,aAAa,EAEb,MAAM,EACN,iBAAiB,EACjB,UAAU,GACX,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,8BAA8B,GAE/B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,GAAG,iCAAiC,CAAC;AAEjD,MAAM,UAAU,kCAAkC,CAChD,KAAmC,EACnC,SAAkD;IAElD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,qCAAqC,CAAC,KAIrD;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,mBAAmB;YAAE,SAAS;QAC7C,IAAI,SAAS,CAAC,OAAO,KAAK,kBAAkB;YAC1C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,mBAA6B,CAAC,OAAO,CAAC;QAC3F,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,uCAAuC,CAAC,KAAK,CACzD,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CACpC,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,0BAA0B,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IACE,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,mBAAmB;YAC/C,CAAC,MAAM,EAAE,aAAa;YACtB,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;YAC1E,aAAa,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC;gBACzD,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC;YAC3C,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;YAE9D,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,qCAAqC,CAAC,CAAC;QAC7F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,oCAAoC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"agent-readiness-publication-inputs.js","sourceRoot":"","sources":["../../../../modules/release/src/agent-readiness-publication-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAEb,MAAM,EACN,iBAAiB,EACjB,aAAa,EACb,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,uCAAuC,GACxC,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAChF,OAAO,EACL,8BAA8B,GAE/B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,GAAG,iCAAiC,CAAC;AAEjD,MAAM,UAAU,kCAAkC,CAChD,KAAmC,EACnC,SAAkD;IAElD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,qCAAqC,CAAC,KAIrD;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6C,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,mBAAmB;YAAE,SAAS;QAC7C,IAAI,SAAS,CAAC,OAAO,KAAK,kBAAkB;YAC1C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,mBAA6B,CAAC,OAAO,CAAC;QAC3F,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,uCAAuC,CAAC,KAAK,CACzD,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAClD,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,0BAA0B,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IACE,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,mBAAmB;YAC/C,CAAC,MAAM,EAAE,aAAa;YACtB,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;YAC1E,aAAa,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC;gBACzD,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC;YAC3C,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;YAE9D,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,qCAAqC,CAAC,CAAC;QAC7F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,oCAAoC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC"}