@sourcey/catalog-verifier 1.1.35 → 1.2.0

package/dist/modules/artifact/src/policy-closure.js

@@ -1,48 +0,0 @@
-import { digest, parseJsonFile } from "provenry/primitives";
-import { coveragePolicyCoreSchema, coveragePolicySchema, freshnessPolicyCoreSchema, freshnessPolicySchema, } from "../../../contracts/policies/src/index.js";
-import { RELEASE_RESOURCES, releasePolicyObjectPath, releaseResourceDigest, } from "../../../contracts/release/src/index.js";
-import { releasePolicyInputsSchema } from "../../../contracts/sourcey-publication/src/index.js";
-import { verifyAgentReadinessPolicy } from "../../agent-readiness-policy/src/grade-policy.js";
-import { validateAssuranceMethodPolicy } from "../../assurance/src/index.js";
-import { CATALOG_RELEASE } from "./release-directory-files.js";
-/**
- * Proves that every policy pin, addressed policy object, Artifact projection,
- * and closed policy-input declaration names the same content-addressed bytes.
- */
-export function assertReleasedPolicyClosure(input) {
-    const policyObject = (resource) => parseJsonFile(input.files, releasePolicyObjectPath(releaseResourceDigest(input.bundle.resource_digests, resource)), CATALOG_RELEASE);
-    const agentReadinessPolicy = verifyAgentReadinessPolicy(policyObject(RELEASE_RESOURCES.agentReadinessPolicy));
-    const assuranceMethodPolicy = validateAssuranceMethodPolicy(policyObject(RELEASE_RESOURCES.assuranceMethodPolicy));
-    const coveragePolicy = coveragePolicySchema.parse(policyObject(RELEASE_RESOURCES.coveragePolicy));
-    const freshnessPolicy = freshnessPolicySchema.parse(policyObject(RELEASE_RESOURCES.freshnessPolicy));
-    const { policy_digest: coveragePolicyDigest, ...coveragePolicyCore } = coveragePolicy;
-    const { policy_digest: freshnessPolicyDigest, ...freshnessPolicyCore } = freshnessPolicy;
-    if (digest(coveragePolicyCoreSchema.parse(coveragePolicyCore)) !== coveragePolicyDigest ||
-        digest(freshnessPolicyCoreSchema.parse(freshnessPolicyCore)) !== freshnessPolicyDigest) {
-        throw new Error("Release coverage or freshness policy is not content-addressed.");
-    }
-    const releasePolicies = {
-        [RELEASE_RESOURCES.agentReadinessPolicy]: agentReadinessPolicy.policy_digest,
-        [RELEASE_RESOURCES.assuranceMethodPolicy]: assuranceMethodPolicy.policy_digest,
-        [RELEASE_RESOURCES.coveragePolicy]: coveragePolicy.policy_digest,
-        [RELEASE_RESOURCES.freshnessPolicy]: freshnessPolicy.policy_digest,
-    };
-    for (const [resource, policyDigest] of Object.entries(releasePolicies)) {
-        if (input.bundle.resource_digests[resource] !== policyDigest ||
-            input.artifactPolicyDigests[resource] !== policyDigest) {
-            throw new Error(`Release policy ${resource} disagrees with its Artifact and bundle pins.`);
-        }
-    }
-    const policyInputs = releasePolicyInputsSchema.parse(parseJsonFile(input.files, "inputs/policies.json", CATALOG_RELEASE));
-    if (digest(policyInputs) !==
-        releaseResourceDigest(input.snapshotResourceDigests, RELEASE_RESOURCES.policyInputs)) {
-        throw new Error("Release policy inputs digest mismatch.");
-    }
-    if (policyInputs.agent_readiness_policy_digest !== agentReadinessPolicy.policy_digest ||
-        policyInputs.assurance_method_policy_digest !== assuranceMethodPolicy.policy_digest ||
-        policyInputs.coverage_policy_digest !== coveragePolicy.policy_digest ||
-        policyInputs.freshness_policy_digest !== freshnessPolicy.policy_digest) {
-        throw new Error("Release policy inputs disagree with the admitted policy objects.");
-    }
-}
-//# sourceMappingURL=policy-closure.js.map

package/dist/modules/artifact/src/policy-closure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-closure.js","sourceRoot":"","sources":["../../../../modules/artifact/src/policy-closure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kDAAkD,CAAC;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAK3C;IACC,MAAM,YAAY,GAAG,CAAC,QAAoE,EAAE,EAAE,CAC5F,aAAa,CACX,KAAK,CAAC,KAAK,EACX,uBAAuB,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,EACvF,eAAe,CAChB,CAAC;IACJ,MAAM,oBAAoB,GAAG,0BAA0B,CACrD,YAAY,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CACrD,CAAC;IACF,MAAM,qBAAqB,GAAG,6BAA6B,CACzD,YAAY,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CACtD,CAAC;IACF,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CACjD,YAAY,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAChD,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,kBAAkB,EAAE,GAAG,cAAc,CAAC;IACtF,MAAM,EAAE,aAAa,EAAE,qBAAqB,EAAE,GAAG,mBAAmB,EAAE,GAAG,eAAe,CAAC;IACzF,IACE,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,KAAK,oBAAoB;QACnF,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,qBAAqB,EACtF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,eAAe,GAAG;QACtB,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC,aAAa;QAC5E,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC,aAAa;QAC9E,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,aAAa;QAChE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,aAAa;KACnE,CAAC;IACF,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACvE,IACE,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,YAAY;YACxD,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,YAAY,EACtD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,+CAA+C,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAClD,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAsB,EAAE,eAAe,CAAC,CACpE,CAAC;IACF,IACE,MAAM,CAAC,YAAY,CAAC;QACpB,qBAAqB,CAAC,KAAK,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,YAAY,CAAC,EACpF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IACE,YAAY,CAAC,6BAA6B,KAAK,oBAAoB,CAAC,aAAa;QACjF,YAAY,CAAC,8BAA8B,KAAK,qBAAqB,CAAC,aAAa;QACnF,YAAY,CAAC,sBAAsB,KAAK,cAAc,CAAC,aAAa;QACpE,YAAY,CAAC,uBAAuB,KAAK,eAAe,CAAC,aAAa,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/modules/artifact/src/release-directory-files.d.ts

@@ -1,16 +0,0 @@
-import { type Digest } from "provenry/primitives";
-import type { Observation } from "../../../contracts/observations/src/index.js";
-import { type CatalogReleaseBundle } from "../../../contracts/release/src/index.js";
-/** How errors name the file set of one Catalog release. */
-export declare const CATALOG_RELEASE = "Catalog release";
-export declare function addressFromReleaseJsonPath(path: string): Digest;
-/**
- * The public evidence bytes a verified release carries for its observations. The
- * envelope proved every file against its declaration, so a declared digest equal
- * to the object's address proves the bytes without hashing them again.
- */
-export declare function releasedEvidenceObjects(observations: readonly Observation[], files: ReadonlyMap<string, Buffer>, declarations: CatalogReleaseBundle["files"]): {
-    readonly captures: ReadonlyMap<Digest, Buffer>;
-    readonly normalizedObjects: ReadonlyMap<Digest, Buffer>;
-};
-//# sourceMappingURL=release-directory-files.d.ts.map

package/dist/modules/artifact/src/release-directory-files.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"release-directory-files.d.ts","sourceRoot":"","sources":["../../../../modules/artifact/src/release-directory-files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAAyB,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,yCAAyC,CAAC;AAEjD,2DAA2D;AAC3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAC1C;IACD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzD,CAiBA"}

package/dist/modules/artifact/src/release-directory-files.js

@@ -1,34 +0,0 @@
-import { basename } from "node:path";
-import { digestFromPathSegment } from "provenry/primitives";
-import { releaseCaptureObjectPath, releaseNormalizedObjectPath, } from "../../../contracts/release/src/index.js";
-/** How errors name the file set of one Catalog release. */
-export const CATALOG_RELEASE = "Catalog release";
-export function addressFromReleaseJsonPath(path) {
-    return digestFromPathSegment(basename(path, ".json"));
-}
-/**
- * The public evidence bytes a verified release carries for its observations. The
- * envelope proved every file against its declaration, so a declared digest equal
- * to the object's address proves the bytes without hashing them again.
- */
-export function releasedEvidenceObjects(observations, files, declarations) {
-    const captures = new Map();
-    const normalizedObjects = new Map();
-    const collect = (objects, objectDigest, path) => {
-        const bytes = files.get(path);
-        if (bytes && declarations[path]?.sha256 === objectDigest)
-            objects.set(objectDigest, bytes);
-    };
-    for (const observation of observations) {
-        if (observation.capture?.availability !== "public")
-            continue;
-        const captureDigest = observation.capture.digest;
-        collect(captures, captureDigest, releaseCaptureObjectPath(captureDigest));
-        const normalizedDigest = observation.capture.normalized_object?.digest;
-        if (normalizedDigest) {
-            collect(normalizedObjects, normalizedDigest, releaseNormalizedObjectPath(normalizedDigest));
-        }
-    }
-    return { captures, normalizedObjects };
-}
-//# sourceMappingURL=release-directory-files.js.map

package/dist/modules/artifact/src/release-directory-files.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"release-directory-files.js","sourceRoot":"","sources":["../../../../modules/artifact/src/release-directory-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAe,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAEL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,yCAAyC,CAAC;AAEjD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoC,EACpC,KAAkC,EAClC,YAA2C;IAK3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,YAAoB,EAAE,IAAY,EAAE,EAAE;QACnF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,WAAW,CAAC,OAAO,EAAE,YAAY,KAAK,QAAQ;YAAE,SAAS;QAC7D,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,MAAgB,CAAC;QAC3D,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,wBAAwB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAA4B,CAAC;QAC7F,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC"}

package/dist/modules/artifact/src/trust-history.d.ts

@@ -1,3 +0,0 @@
-import { type RootSet, type SignerRegistry } from "../../../contracts/authority/src/index.js";
-export declare function validateTrustHistory(files: ReadonlyMap<string, Buffer>, currentRootSet: RootSet, currentRegistry: SignerRegistry): Map<string, SignerRegistry>;
-//# sourceMappingURL=trust-history.d.ts.map

package/dist/modules/artifact/src/trust-history.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-history.d.ts","sourceRoot":"","sources":["../../../../modules/artifact/src/trust-history.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,OAAO,EAGZ,KAAK,cAAc,EAEpB,MAAM,2CAA2C,CAAC;AAGnD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,cAAc,EAAE,OAAO,EACvB,eAAe,EAAE,cAAc,GAC9B,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAiH7B"}

package/dist/modules/artifact/src/trust-history.js

@@ -1,134 +0,0 @@
-import { basename } from "node:path";
-import { digest, digestFromPathSegment } from "provenry/primitives";
-import { rootSetSchema, rootSetTransitionSchema, signerRegistrySchema, } from "../../../contracts/authority/src/index.js";
-import { validateRootSetTransition, validateSignerRegistry } from "../../authority/src/index.js";
-export function validateTrustHistory(files, currentRootSet, currentRegistry) {
-    const rootSets = new Map();
-    const transitions = new Map();
-    const registries = new Map();
-    for (const [path, bytes] of files) {
-        if (path.startsWith("trust/roots/") && path.endsWith(".json")) {
-            const rootSet = rootSetSchema.parse(JSON.parse(bytes.toString("utf8")));
-            const rootDigest = digest(rootSet);
-            if (addressFromJsonPath(path) !== rootDigest || rootSets.has(rootDigest)) {
-                throw new Error(`Trust root ${path} is duplicate or misaddressed.`);
-            }
-            rootSets.set(rootDigest, rootSet);
-        }
-        else if (path.startsWith("trust/transitions/") && path.endsWith(".json")) {
-            const transition = rootSetTransitionSchema.parse(JSON.parse(bytes.toString("utf8")));
-            if (addressFromJsonPath(path) !== transition.transition_digest ||
-                digest(withoutKeys(transition, [
-                    "transition_digest",
-                    "previous_root_signatures",
-                    "next_root_signatures",
-                ])) !== transition.transition_digest ||
-                transitions.has(transition.next_root_set_digest)) {
-                throw new Error(`Trust transition ${path} is duplicate or misaddressed.`);
-            }
-            transitions.set(transition.next_root_set_digest, transition);
-        }
-        else if (path.startsWith("trust/registries/") && path.endsWith(".json")) {
-            const signerRegistry = signerRegistrySchema.parse(JSON.parse(bytes.toString("utf8")));
-            if (addressFromJsonPath(path) !== signerRegistry.registry_digest ||
-                registries.has(signerRegistry.registry_digest)) {
-                throw new Error(`Signer registry ${path} is duplicate or misaddressed.`);
-            }
-            registries.set(signerRegistry.registry_digest, signerRegistry);
-        }
-    }
-    const currentRootDigest = digest(currentRootSet);
-    if (!rootSets.has(currentRootDigest)) {
-        throw new Error("Current trust root is absent from trust history.");
-    }
-    const trustedRoots = new Map();
-    const usedTransitions = new Set();
-    let rootDigest = currentRootDigest;
-    while (true) {
-        const rootSet = rootSets.get(rootDigest);
-        if (!rootSet || trustedRoots.has(rootDigest)) {
-            throw new Error("Trust-root history is missing or cyclic.");
-        }
-        trustedRoots.set(rootDigest, rootSet);
-        const transition = transitions.get(rootDigest);
-        if (!transition)
-            break;
-        const previousRoot = rootSets.get(transition.previous_root_set_digest);
-        if (!previousRoot)
-            throw new Error("Trust-root history lacks a transition predecessor.");
-        validateRootSetTransition({
-            previousRootSet: previousRoot,
-            nextRootSet: rootSet,
-            transition,
-            releaseSequence: transition.effective_release_sequence,
-        });
-        usedTransitions.add(transition.transition_digest);
-        rootDigest = transition.previous_root_set_digest;
-    }
-    if (trustedRoots.size !== rootSets.size || usedTransitions.size !== transitions.size) {
-        throw new Error("Release contains trust roots or transitions outside the current trust lineage.");
-    }
-    const currentRegistryDigest = currentRegistry.registry_digest;
-    if (!registries.has(currentRegistryDigest)) {
-        throw new Error("Current signer registry is absent from trust history.");
-    }
-    const trustedRegistries = new Map();
-    let registry = currentRegistry;
-    while (registry) {
-        if (trustedRegistries.has(registry.registry_digest)) {
-            throw new Error("Signer-registry history is cyclic.");
-        }
-        const validated = validateRegistryUnderTrustedRoot(registry, trustedRoots);
-        trustedRegistries.set(validated.registry_digest, validated);
-        if (registry.parent_registry_digest === null) {
-            if (registry.generation !== 1) {
-                throw new Error("Signer-registry history does not terminate at generation one.");
-            }
-            break;
-        }
-        const parent = registries.get(registry.parent_registry_digest);
-        if (!parent || parent.generation !== registry.generation - 1) {
-            throw new Error("Signer-registry history is not adjacent and predecessor-bound.");
-        }
-        registry = parent;
-    }
-    for (const candidate of registries.values()) {
-        if (trustedRegistries.has(candidate.registry_digest))
-            continue;
-        if (candidate.parent_registry_digest === null) {
-            if (candidate.generation !== 1) {
-                throw new Error("Historical signer-registry branches must terminate at generation one.");
-            }
-        }
-        else {
-            const parent = registries.get(candidate.parent_registry_digest);
-            if (!parent || parent.generation !== candidate.generation - 1) {
-                throw new Error("Historical signer-registry branches must be adjacent and complete.");
-            }
-        }
-        const validated = validateRegistryUnderTrustedRoot(candidate, trustedRoots);
-        trustedRegistries.set(validated.registry_digest, validated);
-    }
-    return trustedRegistries;
-}
-function validateRegistryUnderTrustedRoot(registry, trustedRoots) {
-    for (const rootSet of trustedRoots.values()) {
-        try {
-            return validateSignerRegistry(rootSet, registry);
-        }
-        catch {
-            // A historical registry needs to validate under only one root in the trusted lineage.
-        }
-    }
-    throw new Error(`Signer registry ${registry.registry_digest} has no valid root in the trusted lineage.`);
-}
-function addressFromJsonPath(path) {
-    return digestFromPathSegment(basename(path, ".json"));
-}
-function withoutKeys(value, keys) {
-    const copy = { ...value };
-    for (const key of keys)
-        delete copy[key];
-    return copy;
-}
-//# sourceMappingURL=trust-history.js.map

package/dist/modules/artifact/src/trust-history.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-history.js","sourceRoot":"","sources":["../../../../modules/artifact/src/trust-history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAe,MAAM,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAEL,aAAa,EACb,uBAAuB,EAEvB,oBAAoB,GACrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEjG,MAAM,UAAU,oBAAoB,CAClC,KAAkC,EAClC,cAAuB,EACvB,eAA+B;IAE/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4D,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAErD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,gCAAgC,CAAC,CAAC;YACtE,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrF,IACE,mBAAmB,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,iBAAiB;gBAC1D,MAAM,CACJ,WAAW,CAAC,UAAU,EAAE;oBACtB,mBAAmB;oBACnB,0BAA0B;oBAC1B,sBAAsB;iBACvB,CAAC,CACH,KAAK,UAAU,CAAC,iBAAiB;gBAClC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,oBAA8B,CAAC,EAC1D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,gCAAgC,CAAC,CAAC;YAC5E,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,oBAA8B,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtF,IACE,mBAAmB,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,eAAe;gBAC5D,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,eAAyB,CAAC,EACxD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,gCAAgC,CAAC,CAAC;YAC3E,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,eAAyB,EAAE,cAAc,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,UAAU,GAAG,iBAAiB,CAAC;IACnC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU;YAAE,MAAM;QACvB,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,wBAAkC,CAAC,CAAC;QACjF,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzF,yBAAyB,CAAC;YACxB,eAAe,EAAE,YAAY;YAC7B,WAAW,EAAE,OAAO;YACpB,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,0BAA0B;SACvD,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,iBAA2B,CAAC,CAAC;QAC5D,UAAU,GAAG,UAAU,CAAC,wBAAkC,CAAC;IAC7D,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,eAAe,CAAC,eAAyB,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5D,IAAI,QAAQ,GAA+B,eAAe,CAAC;IAC3D,OAAO,QAAQ,EAAE,CAAC;QAChB,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,gCAAgC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC3E,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAgC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC;YAAE,SAAS;QAC/D,IAAI,SAAS,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAgC,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,gCAAgC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5E,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAwB,EACxB,YAA0C;IAE1C,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;QACxF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,eAAe,4CAA4C,CACxF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAClB,KAAQ,EACR,IAAkB;IAElB,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/modules/assets/src/authority-bundle.d.ts

@@ -1,46 +0,0 @@
-import { type Digest } from "provenry/primitives";
-import { type AssetAuthorityBundleManifest, type EntityAssetProposal, type EntityAssetReviewArtifact } from "../../../contracts/assets/src/index.js";
-import type { SignerRegistry } from "../../../contracts/authority/src/index.js";
-import { type CatalogEvent, type CatalogEventCore } from "../../../contracts/events/src/index.js";
-import type { CatalogPublicationProposal } from "../../../contracts/publication/src/index.js";
-interface ReadAssetAuthorityBundle {
-    readonly manifest: AssetAuthorityBundleManifest;
-    readonly proposals: readonly EntityAssetProposal[];
-    readonly reviews: readonly EntityAssetReviewArtifact[];
-    readonly events: readonly CatalogEvent[];
-    readonly safeBytes: ReadonlyMap<Digest, Buffer>;
-}
-export declare function createAssetBindingEventIntent(input: {
-    readonly proposal: EntityAssetProposal;
-    readonly issuerId: string;
-}): {
-    readonly event_id: Digest;
-    readonly core: CatalogEventCore;
-};
-export declare function readAssetAuthorityBundle(root: string): Promise<ReadAssetAuthorityBundle>;
-export declare function admitAssetAuthorityBundle(input: {
-    readonly bundle: ReadAssetAuthorityBundle;
-    readonly existingEvents: readonly CatalogEvent[];
-    readonly publicationProposal: CatalogPublicationProposal;
-    readonly targetRegistry: SignerRegistry;
-    readonly targetReleaseSequence: number;
-}): {
-    readonly authoritySetDigest: Digest;
-    readonly proposals: readonly EntityAssetProposal[];
-    readonly events: readonly CatalogEvent[];
-    readonly safeBytes: ReadonlyMap<Digest, Buffer>;
-};
-/**
- * The converse of one bundle's own check, asserted where every admitted bundle
- * is visible: each declared asset has signed binding authority. Distinct
- * materializations may carry the same exact proposal; each is independently
- * admitted before the release owner composes their byte-identical events.
- */
-export declare function assertAssetAuthorityCoverage(input: {
-    readonly declared: readonly EntityAssetProposal[];
-    readonly admitted: readonly {
-        readonly proposals: readonly EntityAssetProposal[];
-    }[];
-}): void;
-export {};
-//# sourceMappingURL=authority-bundle.d.ts.map

package/dist/modules/assets/src/authority-bundle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authority-bundle.d.ts","sourceRoot":"","sources":["../../../../modules/assets/src/authority-bundle.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,MAAM,EAKZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,4BAA4B,EAGjC,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAG/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EAItB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAI9F,UAAU,wBAAwB;IAChC,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAgCjE;AAED,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAiH9F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,YAAY,EAAE,CAAC;IACjD,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC,GAAG;IACF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD,CA6EA;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAA;KAAE,EAAE,CAAC;CACtF,GAAG,IAAI,CAaP"}

package/dist/modules/assets/src/authority-bundle.js

@@ -1,227 +0,0 @@
-import { readdir, readFile } from "node:fs/promises";
-import { basename, join, relative, sep } from "node:path";
-import { canonicalJson, compareCanonicalStrings, deriveOperationId, digest, digestFromPathSegment, sha256Bytes, } from "provenry/primitives";
-import { assetAuthorityBundleCoreSchema, assetAuthorityBundleManifestSchema, entityAssetReviewArtifactCoreSchema, entityAssetReviewArtifactSchema, } from "../../../contracts/assets/src/index.js";
-import { catalogEventCoreSchema, catalogEventPayloadSchemas, catalogEventSchema, } from "../../../contracts/events/src/index.js";
-import { validateProtectedEvent } from "../../authority/src/index.js";
-import { verifyEntityAssetProposal } from "./index.js";
-export function createAssetBindingEventIntent(input) {
-    const proposal = verifyEntityAssetProposal(input.proposal);
-    const core = catalogEventCoreSchema.parse({
-        event_contract: "sourcey.catalog-event/v1alpha1",
-        kind: "asset.bound",
-        issuer_id: input.issuerId,
-        operation_id: deriveOperationId("sourcey.asset-binding/v1alpha1", {
-            proposal_digest: proposal.proposal_digest,
-            issuer_id: input.issuerId,
-        }),
-        subject: {
-            subject_type: "entity",
-            entity_id: proposal.entity_id,
-        },
-        occurred_at: proposal.effective_from,
-        payload: {
-            role: proposal.role,
-            asset_object_digest: proposal.asset.asset_object_digest,
-            served_derivative_digest: proposal.served_digest,
-            authority_basis: proposal.authority_basis,
-            ...(proposal.authority_claim_id ? { authority_claim_id: proposal.authority_claim_id } : {}),
-            approval_receipt_digest: proposal.review.review_artifact_digest,
-            approval_scope: proposal.approval_scope,
-            source_basis: proposal.source_basis,
-            license_basis: proposal.asset.redistribution.basis,
-            effective_from: proposal.effective_from,
-            ...(proposal.expected_current_binding_event_id
-                ? { superseded_binding_event_id: proposal.expected_current_binding_event_id }
-                : {}),
-        },
-    });
-    return { event_id: digest(core), core };
-}
-export async function readAssetAuthorityBundle(root) {
-    const manifestBytes = await readFile(join(root, "manifest.json"));
-    const manifest = assetAuthorityBundleManifestSchema.parse(JSON.parse(manifestBytes.toString("utf8")));
-    const { bundle_digest: bundleDigest, ...core } = manifest;
-    if (digest(assetAuthorityBundleCoreSchema.parse(core)) !== bundleDigest) {
-        throw new Error("Asset authority bundle is not content addressed.");
-    }
-    const expectedPaths = ["manifest.json", ...Object.keys(manifest.objects)].sort(compareCanonicalStrings);
-    const actualPaths = (await filesUnder(root))
-        .map((path) => relative(root, path).split(sep).join("/"))
-        .sort(compareCanonicalStrings);
-    if (canonicalJson(actualPaths) !== canonicalJson(expectedPaths)) {
-        throw new Error("Asset authority bundle has an unexpected file set.");
-    }
-    const objects = new Map();
-    for (const [path, declaration] of Object.entries(manifest.objects)) {
-        assertSafeRelativePath(path);
-        const bytes = await readFile(join(root, path));
-        if (bytes.byteLength !== declaration.bytes || sha256Bytes(bytes) !== declaration.sha256) {
-            throw new Error(`Asset authority bundle object ${path} differs.`);
-        }
-        objects.set(path, bytes);
-    }
-    const proposals = [...objects.entries()]
-        .filter(([path]) => path.startsWith("proposals/"))
-        .map(([path, bytes]) => {
-        const proposal = verifyEntityAssetProposal(JSON.parse(bytes.toString("utf8")));
-        if (proposal.proposal_digest !== digestFromPathSegment(basename(path, ".json"))) {
-            throw new Error(`Asset proposal ${path} is stored under the wrong address.`);
-        }
-        return proposal;
-    })
-        .sort((left, right) => compareCanonicalStrings(left.proposal_digest, right.proposal_digest));
-    const events = [...objects.entries()]
-        .filter(([path]) => path.startsWith("events/"))
-        .map(([path, bytes]) => {
-        const event = catalogEventSchema.parse(JSON.parse(bytes.toString("utf8")));
-        if (event.event_id !== digestFromPathSegment(basename(path, ".json"))) {
-            throw new Error(`Asset event ${path} is stored under the wrong address.`);
-        }
-        return event;
-    })
-        .sort((left, right) => compareCanonicalStrings(left.event_id, right.event_id));
-    const reviews = [...objects.entries()]
-        .filter(([path]) => path.startsWith("reviews/"))
-        .map(([path, bytes]) => {
-        const review = entityAssetReviewArtifactSchema.parse(JSON.parse(bytes.toString("utf8")));
-        const { review_artifact_digest: reviewDigest, ...reviewCore } = review;
-        if (digest(entityAssetReviewArtifactCoreSchema.parse(reviewCore)) !== reviewDigest ||
-            reviewDigest !== digestFromPathSegment(basename(path, ".json"))) {
-            throw new Error(`Asset review ${path} is stored under the wrong address.`);
-        }
-        return review;
-    })
-        .sort((left, right) => compareCanonicalStrings(left.review_artifact_digest, right.review_artifact_digest));
-    const safeBytes = new Map();
-    for (const [path, bytes] of objects) {
-        if (!path.startsWith("assets/sha256/"))
-            continue;
-        const objectDigest = digestFromPathSegment(basename(path));
-        if (sha256Bytes(bytes) !== objectDigest) {
-            throw new Error(`Safe asset ${path} is stored under the wrong address.`);
-        }
-        safeBytes.set(objectDigest, bytes);
-    }
-    if (canonicalJson(proposals.map((proposal) => proposal.proposal_digest)) !==
-        canonicalJson(manifest.asset_proposal_digests) ||
-        canonicalJson(events.map((event) => event.event_id)) !== canonicalJson(manifest.event_ids)) {
-        throw new Error("Asset authority bundle manifest disagrees with its objects.");
-    }
-    for (const proposal of proposals) {
-        const bytes = safeBytes.get(proposal.served_digest);
-        const variant = proposal.asset.safe_variants.find((candidate) => candidate.digest === proposal.served_digest);
-        if (!bytes || !variant || bytes.byteLength !== variant.bytes) {
-            throw new Error(`Asset proposal ${proposal.proposal_digest} lacks its exact safe bytes.`);
-        }
-        const review = reviews.find((candidate) => candidate.review_artifact_digest === proposal.review.review_artifact_digest);
-        if (!review || canonicalJson(review) !== canonicalJson(proposal.review)) {
-            throw new Error(`Asset proposal ${proposal.proposal_digest} lacks its exact review artifact.`);
-        }
-    }
-    const referencedSafeDigests = new Set(proposals.map(({ served_digest: servedDigest }) => servedDigest));
-    if (safeBytes.size !== referencedSafeDigests.size ||
-        [...safeBytes.keys()].some((safeDigest) => !referencedSafeDigests.has(safeDigest))) {
-        throw new Error("Asset authority bundle contains a missing or unreferenced safe object.");
-    }
-    if (reviews.length !== proposals.length ||
-        new Set(reviews.map(({ review_artifact_digest: reviewDigest }) => reviewDigest)).size !==
-            reviews.length) {
-        throw new Error("Asset authority bundle must contain one unique review per proposal.");
-    }
-    return { manifest, proposals, reviews, events, safeBytes };
-}
-export function admitAssetAuthorityBundle(input) {
-    // The base is immutable review provenance. The activation proposal binds the
-    // current Entity and icon snapshots; each retained event must still satisfy
-    // its exact signed registry and the target release sequence below.
-    if (input.bundle.manifest.target_signer_registry_digest !== input.targetRegistry.registry_digest) {
-        throw new Error("Asset authority bundle targets another signer registry.");
-    }
-    const declared = new Map(input.publicationProposal.candidate_assets.map((proposal) => [
-        proposal.proposal_digest,
-        proposal,
-    ]));
-    const undeclared = input.bundle.proposals.filter((proposal) => {
-        const match = declared.get(proposal.proposal_digest);
-        return match === undefined || canonicalJson(match) !== canonicalJson(proposal);
-    });
-    if (undeclared.length > 0) {
-        throw new Error(`Asset authority bundle carries proposals this publication does not declare: ${undeclared
-            .map(({ proposal_digest: proposalDigest }) => proposalDigest)
-            .join(", ")}.`);
-    }
-    const previouslyUsedReviews = new Set(input.existingEvents
-        .filter((event) => event.kind === "asset.bound")
-        .map((event) => `${event.subject.entity_id}:${catalogEventPayloadSchemas["asset.bound"].parse(event.payload).approval_receipt_digest}`));
-    for (const proposal of input.bundle.proposals) {
-        if (previouslyUsedReviews.has(`${proposal.entity_id}:${proposal.review.review_artifact_digest}`)) {
-            throw new Error(`Asset review ${proposal.review.review_artifact_digest} was already published; rebinding requires a new review.`);
-        }
-    }
-    const expected = new Map(input.bundle.proposals.map((proposal) => {
-        const intent = createAssetBindingEventIntent({
-            proposal,
-            issuerId: input.bundle.manifest.issuer_id,
-        });
-        return [intent.event_id, intent];
-    }));
-    if (expected.size !== input.bundle.events.length) {
-        throw new Error("Asset authority bundle does not contain one exact event per proposal.");
-    }
-    for (const inputEvent of input.bundle.events) {
-        const event = validateProtectedEvent(inputEvent, input.targetRegistry, input.targetReleaseSequence);
-        if (event.protected.signature_purpose !== "catalog-identity") {
-            throw new Error("Asset authority event uses the wrong signing purpose.");
-        }
-        const intent = expected.get(event.event_id);
-        if (!intent)
-            throw new Error(`Asset authority bundle has unexpected event ${event.event_id}.`);
-        const { event_id: _, protected: __, ...eventCore } = event;
-        if (canonicalJson(eventCore) !== canonicalJson(intent.core)) {
-            throw new Error(`Asset authority event ${event.event_id} differs from its intent.`);
-        }
-    }
-    return {
-        authoritySetDigest: input.bundle.manifest.bundle_digest,
-        proposals: input.bundle.proposals,
-        events: input.bundle.events,
-        safeBytes: input.bundle.safeBytes,
-    };
-}
-/**
- * The converse of one bundle's own check, asserted where every admitted bundle
- * is visible: each declared asset has signed binding authority. Distinct
- * materializations may carry the same exact proposal; each is independently
- * admitted before the release owner composes their byte-identical events.
- */
-export function assertAssetAuthorityCoverage(input) {
-    const carried = input.admitted.flatMap((authority) => authority.proposals.map(({ proposal_digest: proposalDigest }) => proposalDigest));
-    const carriedOnce = new Set(carried);
-    const uncarried = input.declared
-        .map(({ proposal_digest: proposalDigest }) => proposalDigest)
-        .filter((proposalDigest) => !carriedOnce.has(proposalDigest));
-    if (uncarried.length > 0) {
-        throw new Error(`Publication asset proposals lack an admitted authority bundle: ${uncarried.join(", ")}.`);
-    }
-}
-function assertSafeRelativePath(path) {
-    const segments = path.split("/");
-    if (!path ||
-        path.startsWith("/") ||
-        path.includes("\\") ||
-        segments.some((segment) => !segment || segment === "." || segment === "..")) {
-        throw new Error(`Asset authority bundle has unsafe object path ${path}.`);
-    }
-}
-async function filesUnder(directory) {
-    const entries = await readdir(directory, { withFileTypes: true });
-    return (await Promise.all(entries.map((entry) => {
-        const path = join(directory, entry.name);
-        if (entry.isSymbolicLink()) {
-            throw new Error(`Asset authority bundle contains a symlink: ${path}.`);
-        }
-        return entry.isDirectory() ? filesUnder(path) : [path];
-    }))).flat();
-}
-//# sourceMappingURL=authority-bundle.js.map

package/dist/modules/assets/src/authority-bundle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authority-bundle.js","sourceRoot":"","sources":["../../../../modules/assets/src/authority-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EACL,aAAa,EACb,uBAAuB,EAEvB,iBAAiB,EACjB,MAAM,EACN,qBAAqB,EACrB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,8BAA8B,EAC9B,kCAAkC,EAGlC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAGL,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAUvD,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACxC,cAAc,EAAE,gCAAgC;QAChD,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,YAAY,EAAE,iBAAiB,CAAC,gCAAgC,EAAE;YAChE,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,SAAS,EAAE,KAAK,CAAC,QAAQ;SAC1B,CAAC;QACF,OAAO,EAAE;YACP,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B;QACD,WAAW,EAAE,QAAQ,CAAC,cAAc;QACpC,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,mBAAmB;YACvD,wBAAwB,EAAE,QAAQ,CAAC,aAAa;YAChD,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB;YAC/D,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK;YAClD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,GAAG,CAAC,QAAQ,CAAC,iCAAiC;gBAC5C,CAAC,CAAC,EAAE,2BAA2B,EAAE,QAAQ,CAAC,iCAAiC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY;IACzD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,kCAAkC,CAAC,KAAK,CACvD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC3C,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1D,IAAI,MAAM,CAAC,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAC5E,uBAAuB,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACxD,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,QAAQ,CAAC,eAAe,KAAK,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,QAAQ,KAAK,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,qCAAqC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;QACvE,IACE,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,YAAY;YAC9E,YAAY,KAAK,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAC/D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,qCAAqC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,uBAAuB,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CACnF,CAAC;IACJ,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,SAAS;QACjD,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,qCAAqC,CAAC,CAAC;QAC3E,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,IACE,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAClE,aAAa,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAChD,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAuB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAC/C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,aAAa,CAC3D,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,eAAe,8BAA8B,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,sBAAsB,KAAK,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAC3F,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,CAAC,eAAe,mCAAmC,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,CACjE,CAAC;IACF,IACE,SAAS,CAAC,IAAI,KAAK,qBAAqB,CAAC,IAAI;QAC7C,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QACnC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YACnF,OAAO,CAAC,MAAM,EAChB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IAMC,6EAA6E;IAC7E,4EAA4E;IAC5E,mEAAmE;IACnE,IACE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,6BAA6B,KAAK,KAAK,CAAC,cAAc,CAAC,eAAe,EAC5F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3D,QAAQ,CAAC,eAAe;QACxB,QAAQ;KACT,CAAC,CACH,CAAC;IACF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACrD,OAAO,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,+EAA+E,UAAU;aACtF,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,KAAK,CAAC,cAAc;SACjB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;SAC/C,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,uBAAuB,EAAE,CACzH,CACJ,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9C,IACE,qBAAqB,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC,EAC5F,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gBAAgB,QAAQ,CAAC,MAAM,CAAC,sBAAsB,0DAA0D,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,QAAQ;YACR,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS;SAC1C,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAU,CAAC;IAC5C,CAAC,CAAC,CACH,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,sBAAsB,CAClC,UAAU,EACV,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,qBAAqB,CAC5B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,KAAK,kBAAkB,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC/F,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC;QAC3D,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,QAAQ,2BAA2B,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO;QACL,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAuB;QACjE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACjC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QAC3B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;KAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAG5C;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CACnD,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,CACjF,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ;SAC7B,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC;SAC5D,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,kEAAkE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,CAAC,IAAI;QACL,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAC3E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,CACL,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CAAC;AACX,CAAC"}

package/dist/modules/assets/src/delta.d.ts

@@ -1,45 +0,0 @@
-import { type Digest } from "provenry/primitives";
-import type { AssetBindingProjection, AssetDelta, EntityAssetProposal } from "../../../contracts/assets/src/index.js";
-import type { CatalogEvent } from "../../../contracts/events/src/index.js";
-export declare function buildAssetDelta(input: {
-    readonly parentAssetIndexDigest: Digest;
-    readonly proposals: readonly EntityAssetProposal[];
-    readonly events: readonly CatalogEvent[];
-    readonly currentBindings: readonly AssetBindingProjection[];
-    readonly removedEntityIds?: readonly string[];
-}): AssetDelta;
-/** The asset index changes a release chains onto its parent asset index. */
-export declare function assetIndexTransitionChanges(delta: AssetDelta): ({
-    entity_id: string;
-    role: "icon";
-    prior_binding_event_id: string | null;
-    operation: "remove" | "upsert";
-    binding: {
-        entity_id: string;
-        role: "icon" | "logo-dark" | "logo-light";
-        asset_object_digest: string;
-        served_digest: string;
-        served_path: string;
-        media_type: "image/jpeg" | "image/png" | "image/svg+xml" | "image/webp";
-        bytes: number;
-        width: number;
-        height: number;
-        authority_basis: "editorial-review" | "licensed-source" | "sourcey-owned" | "vendor-authority";
-        authority_claim_id?: string | undefined;
-        approval_receipt_digest: string;
-        source_basis: string;
-        license_basis: string;
-        effective_from: string;
-        effective_until?: string | undefined;
-        binding_event_id: string;
-    };
-} | {
-    entity_id: string;
-    role: "icon";
-    prior_binding_event_id: string | null;
-    operation: "remove" | "upsert";
-    prior_binding_digest: string;
-    disposition_event_id: string;
-})[];
-export declare function eventMatchesEntityAssetProposal(event: CatalogEvent, proposal: EntityAssetProposal): boolean;
-//# sourceMappingURL=delta.d.ts.map

package/dist/modules/assets/src/delta.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delta.d.ts","sourceRoot":"","sources":["../../../../modules/assets/src/delta.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0C,KAAK,MAAM,EAAU,MAAM,qBAAqB,CAAC;AAClG,OAAO,KAAK,EACV,sBAAsB,EACtB,UAAU,EACV,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAK3E,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC5D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C,GAAG,UAAU,CAkGb;AAED,4EAA4E;AAC5E,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAa5D;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAkBT"}