@sourcey/catalog-verifier 1.1.4 → 1.1.5

package/SOURCEY-DISTRIBUTION.json

@@ -20,6 +20,6 @@
     "dist/modules/evidence-operations/src/source-inventory",
     "dist/modules/evidence-operations/src/workflow"
   ],
-  "dependencies": ["parse5", "provenry", "tldts", "yaml", "zod"],
+  "dependencies": ["provenry", "tldts", "yaml", "zod"],
   "self_contained": true
 }

package/THIRD_PARTY_NOTICES.json

@@ -7,10 +7,10 @@
   "dependencies": [
     {
       "name": "entities",
-      "version": "8.0.0",
+      "version": "8.1.0",
       "license": "BSD-2-Clause",
-      "resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
-      "integrity": "sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-8.1.0.tgz",
+      "integrity": "sha512-kxL7msIffSuh9aaFAMD7rxAIuTRMAHMeBtgHW2yUdWw732ZNh4MehkF2gdjvtdmikkaIP9bFDDJOPlsvm7avrA==",
       "lock_path": "node_modules/entities",
       "license_files": [
         {
@@ -37,10 +37,10 @@
     },
     {
       "name": "provenry",
-      "version": "0.1.5",
+      "version": "0.2.0",
       "license": "MIT",
-      "resolved": "https://registry.npmjs.org/provenry/-/provenry-0.1.5.tgz",
-      "integrity": "sha512-FwchnhfQBYG9JtTcWGM4i8aXSTiKBXgyX8azQdVZyd4am+aZ8+yPn1ekp4VMjOGyAXtlhIzWqgwskUx7iTjm1w==",
+      "resolved": "https://registry.npmjs.org/provenry/-/provenry-0.2.0.tgz",
+      "integrity": "sha512-+Z2o6BLUf1NqkunyjtzZrgqo3/th81qPM44RnxdfUhJOwb4Q2zWnMWM7E47GGj9JCYyCQ5IuROiWI5tcwNG1UQ==",
       "lock_path": "node_modules/provenry",
       "license_files": [
         {

package/dist/contracts/agent-readiness/src/authority.d.ts

@@ -0,0 +1,51 @@
+import { z } from "zod";
+export declare const AGENT_READINESS_AUTHORITY_BUNDLE_CONTRACT: "sourcey.agent-readiness-authority-bundle/v1alpha1";
+/** The bundle's two objects: the public release input and its signed admission. */
+export declare const AGENT_READINESS_AUTHORITY_OBJECTS: {
+    readonly releaseInput: "release-input.json";
+    readonly admission: "admission.json";
+};
+/**
+ * One admitted readiness revision as release authority: the exact public
+ * release input (profile input with its run records, declaration revision and
+ * Offer relation inputs) and the signed event that admitted it.
+ */
+export declare const agentReadinessAuthorityBundleCoreSchema: z.ZodObject<{
+    bundle_contract: z.ZodLiteral<"sourcey.agent-readiness-authority-bundle/v1alpha1">;
+    agent_readiness_profile_id: z.ZodString;
+    revision_digest: z.ZodString;
+    release_input_digest: z.ZodString;
+    admission_event_id: z.ZodString;
+    target_signer_registry_digest: z.ZodString;
+    objects: z.ZodObject<{
+        "release-input.json": z.ZodObject<{
+            sha256: z.ZodString;
+            bytes: z.ZodNumber;
+        }, z.core.$strict>;
+        "admission.json": z.ZodObject<{
+            sha256: z.ZodString;
+            bytes: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const agentReadinessAuthorityBundleManifestSchema: z.ZodObject<{
+    bundle_contract: z.ZodLiteral<"sourcey.agent-readiness-authority-bundle/v1alpha1">;
+    agent_readiness_profile_id: z.ZodString;
+    revision_digest: z.ZodString;
+    release_input_digest: z.ZodString;
+    admission_event_id: z.ZodString;
+    target_signer_registry_digest: z.ZodString;
+    objects: z.ZodObject<{
+        "release-input.json": z.ZodObject<{
+            sha256: z.ZodString;
+            bytes: z.ZodNumber;
+        }, z.core.$strict>;
+        "admission.json": z.ZodObject<{
+            sha256: z.ZodString;
+            bytes: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    bundle_digest: z.ZodString;
+}, z.core.$strict>;
+export type AgentReadinessAuthorityBundleManifest = z.infer<typeof agentReadinessAuthorityBundleManifestSchema>;
+//# sourceMappingURL=authority.d.ts.map

package/dist/contracts/agent-readiness/src/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../../../contracts/agent-readiness/src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,yCAAyC,EACpD,mDAA4D,CAAC;AAE/D,mFAAmF;AACnF,eAAO,MAAM,iCAAiC;aAC5C,YAAY,EAAE,oBAAoB;aAClC,SAAS,EAAE,gBAAgB;CACnB,CAAC;AAMX;;;;GAIG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;kBAezC,CAAC;AAEZ,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;;kBAE7C,CAAC;AACZ,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,2CAA2C,CACnD,CAAC"}

package/dist/contracts/agent-readiness/src/authority.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+import { agentReadinessDigestSchema, agentReadinessProfileIdSchema } from "./shared.js";
+export const AGENT_READINESS_AUTHORITY_BUNDLE_CONTRACT = "sourcey.agent-readiness-authority-bundle/v1alpha1";
+/** The bundle's two objects: the public release input and its signed admission. */
+export const AGENT_READINESS_AUTHORITY_OBJECTS = {
+    releaseInput: "release-input.json",
+    admission: "admission.json",
+};
+const objectDeclarationSchema = z
+    .object({ sha256: agentReadinessDigestSchema, bytes: z.number().int().nonnegative() })
+    .strict();
+/**
+ * One admitted readiness revision as release authority: the exact public
+ * release input (profile input with its run records, declaration revision and
+ * Offer relation inputs) and the signed event that admitted it.
+ */
+export const agentReadinessAuthorityBundleCoreSchema = z
+    .object({
+    bundle_contract: z.literal(AGENT_READINESS_AUTHORITY_BUNDLE_CONTRACT),
+    agent_readiness_profile_id: agentReadinessProfileIdSchema,
+    revision_digest: agentReadinessDigestSchema,
+    release_input_digest: agentReadinessDigestSchema,
+    admission_event_id: agentReadinessDigestSchema,
+    target_signer_registry_digest: agentReadinessDigestSchema,
+    objects: z
+        .object({
+        [AGENT_READINESS_AUTHORITY_OBJECTS.releaseInput]: objectDeclarationSchema,
+        [AGENT_READINESS_AUTHORITY_OBJECTS.admission]: objectDeclarationSchema,
+    })
+        .strict(),
+})
+    .strict();
+export const agentReadinessAuthorityBundleManifestSchema = agentReadinessAuthorityBundleCoreSchema
+    .safeExtend({ bundle_digest: agentReadinessDigestSchema })
+    .strict();
+//# sourceMappingURL=authority.js.map

package/dist/contracts/agent-readiness/src/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../../contracts/agent-readiness/src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAExF,MAAM,CAAC,MAAM,yCAAyC,GACpD,mDAA4D,CAAC;AAE/D,mFAAmF;AACnF,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,YAAY,EAAE,oBAAoB;IAClC,SAAS,EAAE,gBAAgB;CACnB,CAAC;AAEX,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KACrF,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC;KACrD,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC;IACrE,0BAA0B,EAAE,6BAA6B;IACzD,eAAe,EAAE,0BAA0B;IAC3C,oBAAoB,EAAE,0BAA0B;IAChD,kBAAkB,EAAE,0BAA0B;IAC9C,6BAA6B,EAAE,0BAA0B;IACzD,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,CAAC,iCAAiC,CAAC,YAAY,CAAC,EAAE,uBAAuB;QACzE,CAAC,iCAAiC,CAAC,SAAS,CAAC,EAAE,uBAAuB;KACvE,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2CAA2C,GAAG,uCAAuC;KAC/F,UAAU,CAAC,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAAC;KACzD,MAAM,EAAE,CAAC"}