@sourcey/catalog-verifier 1.1.36 → 1.2.1

package/dist/modules/release/src/agent-readiness-regrade-evidence.js

@@ -1,164 +0,0 @@
-import { basename } from "node:path";
-import { compareCanonicalStrings } from "provenry/primitives";
-import { z } from "zod";
-import { agentReadinessDigestSchema, agentReadinessProfileIdSchema, agentReadinessProjectionSchema, } from "../../../contracts/agent-readiness/src/index.js";
-import { catalogEventSchema } from "../../../contracts/events/src/index.js";
-import { deriveAgentReadinessReprojection, regradeAgentReadinessProjection, } from "../../agent-readiness-policy/src/index.js";
-import { validateProtectedEvent } from "../../authority/src/index.js";
-import { buildEventGraph } from "../../provenance/src/index.js";
-import { mergeCanonicalById } from "./evidence-admission.js";
-export const AGENT_READINESS_REGRADE_EVIDENCE_PREFIX = "agent-readiness-regrade-evidence/";
-/**
- * Exact standing context for reprojection of an existing revision: the events
- * its dispute and attestation state rest on. New events still require ordinary
- * release admission; these bytes only close the graph beside the prior
- * projection for independent offline recomputation. Ratings rest on the
- * revision's own steps and need no evidence here.
- */
-export const agentReadinessRegradeEvidenceSchema = z
-    .object({
-    evidence_contract: z.literal("sourcey.agent-readiness-regrade-evidence/v1alpha1"),
-    agent_readiness_profile_id: agentReadinessProfileIdSchema,
-    revision_digest: agentReadinessDigestSchema,
-    events: z.array(catalogEventSchema).min(1),
-})
-    .strict();
-/**
- * Select the changed events owned by one exact Agent Readiness revision.
- * A Catalog delta is not a complete event graph: unrelated transitions may
- * target immutable objects retained by the parent release.
- */
-export function selectAgentReadinessEvidenceChanges(input) {
-    return input.events.filter((event) => event.subject.subject_type === "agent_readiness_profile" &&
-        event.subject.agent_readiness_profile_id === input.profileId &&
-        event.subject.revision_digest === input.revisionDigest);
-}
-/**
- * Select, from the resolved closure, exactly the events one regrade is
- * projected from: the prior projection's basis events, every event on the same
- * revision, and every event that invalidates one of those.
- */
-export function selectAgentReadinessRegradeEvidence(input) {
-    const included = new Set(input.priorProjection.provenance.basis_event_ids);
-    for (const event of input.events) {
-        if (event.subject.revision_digest === input.revision.revision_digest) {
-            included.add(event.event_id);
-        }
-    }
-    for (const event of input.events) {
-        const target = event.payload.target_event_id;
-        if (typeof target === "string" && included.has(target))
-            included.add(event.event_id);
-    }
-    const events = input.events
-        .filter((event) => included.has(event.event_id))
-        .sort((left, right) => compareCanonicalStrings(left.event_id, right.event_id));
-    const missing = [...included].filter((eventId) => !events.some((event) => event.event_id === eventId));
-    if (missing.length > 0) {
-        throw new Error(`Agent Readiness regrade ${input.profileId} cannot resolve basis events ${missing.join(", ")}.`);
-    }
-    return agentReadinessRegradeEvidenceSchema.parse({
-        evidence_contract: "sourcey.agent-readiness-regrade-evidence/v1alpha1",
-        agent_readiness_profile_id: input.profileId,
-        revision_digest: input.revision.revision_digest,
-        events,
-    });
-}
-/** The evidence must close the prior projection exactly before it can rebuild its graph. */
-export function verifyAgentReadinessRegradeEvidence(input) {
-    const profileId = input.priorProjection.agent_readiness_profile_id;
-    if (input.evidence.agent_readiness_profile_id !== profileId ||
-        input.evidence.revision_digest !== input.revision.revision_digest) {
-        throw new Error(`Agent Readiness regrade evidence does not address ${profileId}.`);
-    }
-    const eventIds = new Set(input.evidence.events.map((event) => event.event_id));
-    const missing = input.priorProjection.provenance.basis_event_ids.filter((eventId) => !eventIds.has(eventId));
-    if (missing.length > 0) {
-        throw new Error(`Agent Readiness regrade ${profileId} evidence omits basis events ${missing.join(", ")}.`);
-    }
-    for (const event of input.evidence.events) {
-        if (event.subject.revision_digest !== undefined &&
-            event.subject.revision_digest !== input.revision.revision_digest &&
-            !input.priorProjection.provenance.basis_event_ids.includes(event.event_id)) {
-            throw new Error(`Agent Readiness regrade ${profileId} evidence carries foreign event ${event.event_id}.`);
-        }
-    }
-    return buildEventGraph(input.evidence.events, []);
-}
-/**
- * Read one shipped regrade evidence file. Retained evidence re-verifies every
- * event signature against the release-pinned registry at this release's
- * sequence; it admits nothing and carries no inclusion record.
- */
-export function readAgentReadinessRegradeEvidenceFile(input) {
-    const evidence = agentReadinessRegradeEvidenceSchema.parse(JSON.parse(input.bytes.toString("utf8")));
-    const address = basename(input.path, ".json");
-    if (evidence.agent_readiness_profile_id !== address) {
-        throw new Error(`Catalog delta regrade evidence ${input.path} is not addressed correctly.`);
-    }
-    for (const event of evidence.events) {
-        const registry = input.registries.get(event.protected.signer_registry_digest);
-        if (!registry) {
-            throw new Error(`Catalog delta regrade event ${event.event_id} names a registry outside the trusted history.`);
-        }
-        validateProtectedEvent(event, registry, input.releaseSequence);
-    }
-    return [address, evidence];
-}
-/** Every shipped evidence file must belong to exactly one policy regrade object. */
-export function assertAgentReadinessRegradeEvidenceClosure(evidence, objects) {
-    for (const profileId of evidence.keys()) {
-        const object = objects.get(profileId);
-        if (!object ||
-            object.profile_input !== null ||
-            !object.projection ||
-            !object.prior_projection) {
-            throw new Error(`Catalog delta carries regrade evidence for non-regrade ${profileId}.`);
-        }
-    }
-}
-/** The canonical projection a policy-only regrade object must equal. */
-export function expectedAgentReadinessRegradeProjection(input) {
-    if (!input.object.prior_projection) {
-        throw new Error(`Agent Readiness regrade ${input.profileId} lacks its exact prior projection.`);
-    }
-    const priorProjection = agentReadinessProjectionSchema.parse(input.object.prior_projection);
-    if (input.evidence) {
-        // Validate the supplied context before selecting from it. Selection must not
-        // silently discard a foreign profile, revision or event from the archive.
-        verifyAgentReadinessRegradeEvidence({
-            evidence: input.evidence,
-            revision: input.revision,
-            priorProjection,
-        });
-    }
-    const graph = input.evidence
-        ? verifyAgentReadinessRegradeEvidence({
-            // A retained context may not hide a newly admitted retraction. Merge
-            // the verified successor graph before selecting this profile's closure.
-            evidence: selectAgentReadinessRegradeEvidence({
-                profileId: input.profileId,
-                revision: input.revision,
-                priorProjection,
-                events: mergeCanonicalById(input.evidence.events, input.deltaEvents, "event", (event) => event.event_id),
-            }),
-            revision: input.revision,
-            priorProjection,
-        })
-        : buildEventGraph(input.deltaEvents, []);
-    const reproject = input.evidence
-        ? regradeAgentReadinessProjection
-        : deriveAgentReadinessReprojection;
-    return reproject({
-        currentProjection: input.current,
-        revision: input.revision,
-        declarationRevision: input.declarationRevision,
-        authorityEntityRevision: input.entityRevision,
-        priorProjection,
-        graph,
-        entitySlug: input.entitySlug,
-        policy: input.policy,
-        policyAsOf: input.policyAsOf,
-    });
-}
-//# sourceMappingURL=agent-readiness-regrade-evidence.js.map

package/dist/modules/release/src/agent-readiness-regrade-evidence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-readiness-regrade-evidence.js","sourceRoot":"","sources":["../../../../modules/release/src/agent-readiness-regrade-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAe,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAqB,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAE/F,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAmB,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,MAAM,uCAAuC,GAAG,mCAAmC,CAAC;AAE3F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,mDAAmD,CAAC;IACjF,0BAA0B,EAAE,6BAA6B;IACzD,eAAe,EAAE,0BAA0B;IAC3C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,yBAAyB;QACxD,KAAK,CAAC,OAAO,CAAC,0BAA0B,KAAK,KAAK,CAAC,SAAS;QAC5D,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,CACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAKnD;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACnF,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YACrE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,MAAM,GAAI,KAAK,CAAC,OAAmC,CAAC,eAAe,CAAC;QAC1E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;SACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAClC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CACjE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,CAAC,SAAS,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,mCAAmC,CAAC,KAAK,CAAC;QAC/C,iBAAiB,EAAE,mDAAmD;QACtE,0BAA0B,EAAE,KAAK,CAAC,SAAS;QAC3C,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,eAAe;QAC/C,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,0BAA0B,CAAC;IACnE,IACE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,KAAK,SAAS;QACvD,KAAK,CAAC,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,QAAQ,CAAC,eAAe,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,SAAS,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CACrE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CACpC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1F,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1C,IACE,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YAC3C,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,QAAQ,CAAC,eAAe;YAChE,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAkB,CAAC,EACpF,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,mCAAmC,KAAK,CAAC,QAAQ,GAAG,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CACxD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACzC,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,0BAA0B,KAAK,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,CAAC,QAAQ,gDAAgD,CAC9F,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,0CAA0C,CACxD,QAA4D,EAC5D,OAAuD;IAEvD,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IACE,CAAC,MAAM;YACP,MAAM,CAAC,aAAa,KAAK,IAAI;YAC7B,CAAC,MAAM,CAAC,UAAU;YAClB,CAAC,MAAM,CAAC,gBAAgB,EACxB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,SAAS,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uCAAuC,CAAC,KAavD;IACC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,SAAS,oCAAoC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,eAAe,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,6EAA6E;QAC7E,0EAA0E;QAC1E,mCAAmC,CAAC;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ;QAC1B,CAAC,CAAC,mCAAmC,CAAC;YAClC,qEAAqE;YACrE,wEAAwE;YACxE,QAAQ,EAAE,mCAAmC,CAAC;gBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,eAAe;gBACf,MAAM,EAAE,kBAAkB,CACxB,KAAK,CAAC,QAAQ,CAAC,MAAM,EACrB,KAAK,CAAC,WAAW,EACjB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAC1B;aACF,CAAC;YACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe;SAChB,CAAC;QACJ,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ;QAC9B,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,gCAAgC,CAAC;IACrC,OAAO,SAAS,CAAC;QACf,iBAAiB,EAAE,KAAK,CAAC,OAAO;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,uBAAuB,EAAE,KAAK,CAAC,cAAc;QAC7C,eAAe;QACf,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/modules/release/src/asset-delta-verifier.d.ts

@@ -1,13 +0,0 @@
-import type { Digest } from "provenry/primitives";
-import type { AssetDelta } from "../../../contracts/assets/src/index.js";
-import type { CatalogEvent } from "../../../contracts/events/src/index.js";
-import type { CatalogPublicationProposal } from "../../../contracts/publication/src/index.js";
-export declare function assertCatalogAssetDeltaClosure(input: {
-    readonly baseAssetIndexDigest: Digest;
-    readonly publicationProposal: CatalogPublicationProposal;
-    readonly events: readonly CatalogEvent[];
-    readonly assetDelta: AssetDelta | null;
-    /** Safe bytes keyed by the digest they are already proven to match. */
-    readonly safeAssetBytes: ReadonlyMap<Digest, Buffer>;
-}): void;
-//# sourceMappingURL=asset-delta-verifier.d.ts.map

package/dist/modules/release/src/asset-delta-verifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"asset-delta-verifier.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/asset-delta-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAI9F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtD,GAAG,IAAI,CAgGP"}

package/dist/modules/release/src/asset-delta-verifier.js

@@ -1,80 +0,0 @@
-import { eventDisposesAssetBinding } from "../../assets/src/disposition.js";
-import { eventMatchesEntityAssetProposal, verifyAssetDelta } from "../../assets/src/index.js";
-export function assertCatalogAssetDeltaClosure(input) {
-    const proposals = input.publicationProposal.candidate_assets;
-    const removals = new Set(input.publicationProposal.remove_entity_ids);
-    if (proposals.length === 0 && removals.size === 0) {
-        if (input.assetDelta || input.safeAssetBytes.size > 0) {
-            throw new Error("Catalog delta contains asset objects without an admitted asset proposal.");
-        }
-        return;
-    }
-    if (!input.assetDelta) {
-        throw new Error("Catalog delta omitted the admitted asset transition.");
-    }
-    const delta = verifyAssetDelta(input.assetDelta);
-    if (delta.parent_asset_index_digest !== input.baseAssetIndexDigest) {
-        throw new Error("Catalog asset delta does not target the exact live asset index.");
-    }
-    const proposalByKey = new Map(proposals.map((proposal) => [`${proposal.entity_id}:${proposal.role}`, proposal]));
-    if (proposalByKey.size !== proposals.length ||
-        delta.changes.length !== proposals.length + removals.size) {
-        throw new Error("Catalog asset delta does not close its unique proposal set.");
-    }
-    const requiredSafeDigests = new Set();
-    for (const change of delta.changes) {
-        const key = `${change.entity_id}:${change.role}`;
-        if (change.operation === "remove") {
-            const expected = input.publicationProposal.expected_current_asset_bindings.find((binding) => binding.entity_id === change.entity_id && binding.role === change.role);
-            const disposition = input.events.find((event) => event.event_id === change.disposition_event_id);
-            if (!removals.delete(change.entity_id) ||
-                !expected ||
-                expected.binding_event_id !== change.prior_binding_event_id ||
-                expected.binding_digest !== change.prior_binding_digest ||
-                !disposition ||
-                !eventDisposesAssetBinding(disposition, change.entity_id, change.prior_binding_event_id)) {
-                throw new Error(`Catalog asset removal ${key} lacks its exact protected disposition.`);
-            }
-            continue;
-        }
-        const proposal = proposalByKey.get(key);
-        if (!proposal ||
-            change.prior_binding_event_id !== proposal.expected_current_binding_event_id ||
-            change.asset.asset_object_digest !== proposal.asset.asset_object_digest ||
-            change.binding.asset_object_digest !== proposal.asset.asset_object_digest ||
-            change.binding.served_digest !== proposal.served_digest ||
-            change.binding.authority_basis !== proposal.authority_basis ||
-            (change.binding.authority_claim_id ?? null) !== (proposal.authority_claim_id ?? null) ||
-            change.binding.approval_receipt_digest !== proposal.review.review_artifact_digest ||
-            change.binding.source_basis !== proposal.source_basis ||
-            change.binding.license_basis !== proposal.asset.redistribution.basis ||
-            change.binding.effective_from !== proposal.effective_from) {
-            throw new Error(`Catalog asset delta disagrees with proposal ${key}.`);
-        }
-        const event = input.events.find((candidate) => candidate.event_id === change.binding.binding_event_id);
-        if (!event || !eventMatchesEntityAssetProposal(event, proposal)) {
-            throw new Error(`Catalog asset delta ${key} lacks its exact protected binding event.`);
-        }
-        const variant = proposal.asset.safe_variants.find((candidate) => candidate.digest === proposal.served_digest);
-        const bytes = variant ? input.safeAssetBytes.get(variant.digest) : undefined;
-        if (!variant ||
-            change.safe_variant_path !== variant.source_path ||
-            change.binding.media_type !== variant.media_type ||
-            change.binding.bytes !== variant.bytes ||
-            change.binding.width !== variant.width ||
-            change.binding.height !== variant.height ||
-            !bytes ||
-            bytes.byteLength !== variant.bytes) {
-            throw new Error(`Catalog asset delta ${key} lacks its exact safe derivative.`);
-        }
-        requiredSafeDigests.add(variant.digest);
-        proposalByKey.delete(key);
-    }
-    if (proposalByKey.size > 0 ||
-        removals.size > 0 ||
-        requiredSafeDigests.size !== input.safeAssetBytes.size ||
-        [...input.safeAssetBytes.keys()].some((objectDigest) => !requiredSafeDigests.has(objectDigest))) {
-        throw new Error("Catalog safe asset payload escapes its admitted proposal closure.");
-    }
-}
-//# sourceMappingURL=asset-delta-verifier.js.map

package/dist/modules/release/src/asset-delta-verifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"asset-delta-verifier.js","sourceRoot":"","sources":["../../../../modules/release/src/asset-delta-verifier.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE9F,MAAM,UAAU,8BAA8B,CAAC,KAO9C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACtE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,yBAAyB,KAAK,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAU,CAAC,CAC3F,CAAC;IACF,IACE,aAAa,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QACvC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,CAAC,+BAA+B,CAAC,IAAI,CAC7E,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CACpF,CAAC;YACF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,oBAAoB,CAC1D,CAAC;YACF,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;gBAClC,CAAC,QAAQ;gBACT,QAAQ,CAAC,gBAAgB,KAAK,MAAM,CAAC,sBAAsB;gBAC3D,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,oBAAoB;gBACvD,CAAC,WAAW;gBACZ,CAAC,yBAAyB,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,EACxF,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,yCAAyC,CAAC,CAAC;YACzF,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,CAAC,QAAQ;YACT,MAAM,CAAC,sBAAsB,KAAK,QAAQ,CAAC,iCAAiC;YAC5E,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,KAAK,CAAC,mBAAmB;YACvE,MAAM,CAAC,OAAO,CAAC,mBAAmB,KAAK,QAAQ,CAAC,KAAK,CAAC,mBAAmB;YACzE,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YACvD,MAAM,CAAC,OAAO,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;YAC3D,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,IAAI,IAAI,CAAC;YACrF,MAAM,CAAC,OAAO,CAAC,uBAAuB,KAAK,QAAQ,CAAC,MAAM,CAAC,sBAAsB;YACjF,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;YACrD,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK;YACpE,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAC7B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,gBAAgB,CACtE,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,2CAA2C,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAC/C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,aAAa,CAC3D,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IACE,CAAC,OAAO;YACR,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,WAAW;YAChD,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YAChD,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YACtC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YACxC,CAAC,KAAK;YACN,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,EAClC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,mCAAmC,CAAC,CAAC;QACjF,CAAC;QACD,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAC;QAClD,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IACE,aAAa,CAAC,IAAI,GAAG,CAAC;QACtB,QAAQ,CAAC,IAAI,GAAG,CAAC;QACjB,mBAAmB,CAAC,IAAI,KAAK,KAAK,CAAC,cAAc,CAAC,IAAI;QACtD,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAC/F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/modules/release/src/changes.d.ts

@@ -1,23 +0,0 @@
-import type { AgentReadinessProjection } from "../../../contracts/agent-readiness/src/index.js";
-import type { CanonicalArtifact, IdentityIndex, ReleaseChange } from "../../../contracts/artifact/src/index.js";
-import type { AssetIndex } from "../../../contracts/assets/src/index.js";
-import type { CatalogEvent } from "../../../contracts/events/src/index.js";
-import { type routeIndexSchema } from "../../../contracts/routes/src/index.js";
-export declare function buildChanges(input: {
-    readonly parent: CanonicalArtifact | null;
-    readonly current: CanonicalArtifact;
-    readonly identities: IdentityIndex;
-    readonly parentRoutes: ReturnType<typeof routeIndexSchema.parse> | null;
-    readonly agentReadinessProfiles: readonly AgentReadinessProjection[];
-    readonly parentAgentReadinessProfiles: readonly AgentReadinessProjection[];
-    readonly assetIndex: AssetIndex;
-    readonly parentAssetIndex: AssetIndex | null;
-    readonly events: readonly CatalogEvent[];
-}): ReleaseChange[];
-export declare function buildAgentReadinessChanges(input: {
-    readonly current: readonly AgentReadinessProjection[];
-    readonly prior: readonly AgentReadinessProjection[];
-    readonly identities: IdentityIndex;
-    readonly regradedProfileIds: ReadonlySet<string>;
-}): ReleaseChange[];
-//# sourceMappingURL=changes.d.ts.map

package/dist/modules/release/src/changes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../../../../modules/release/src/changes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAChG,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,aAAa,EACd,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,wCAAwC,CAAC;AAQhD,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACxE,QAAQ,CAAC,sBAAsB,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACrE,QAAQ,CAAC,4BAA4B,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC3E,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C,GAAG,aAAa,EAAE,CAiUlB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD,GAAG,aAAa,EAAE,CAMlB"}