@spottoai/types-package 1.0.2-beta.356 → 1.0.2-beta.358

package/dist/common/artifactControlData.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactControlData.d.ts","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":"AA+CA,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAiCD,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EAC/D,CAAC;AAE5C,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EACxC,CAAC;AAElE,iGAAiG;AACjG,eAAO,MAAM,oCAAoC,GAAI,OAAO,OAAO,EAAE,yBAAwB,6BAA6B,EAAO,KAAG,OAenI,CAAC"}

package/dist/common/artifactControlData.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.containsForbiddenArtifactControlData = exports.allowedArtifactIdentityField = exports.allowedArtifactReferenceField = void 0;
+const FORBIDDEN_SENSITIVE_FIELDS = new Set([
+    'accountkey',
+    'accesskey',
+    'accesstoken',
+    'apikey',
+    'authorization',
+    'clientsecret',
+    'connectionstring',
+    'credential',
+    'credentials',
+    'password',
+    'refreshtoken',
+    'sastoken',
+    'secret',
+    'sharedaccesssignature',
+    'token',
+]);
+const PHYSICAL_REFERENCE_FIELDS = new Set([
+    'artifactpath',
+    'blobpath',
+    'bloburi',
+    'bloburl',
+    'containerpath',
+    'containeruri',
+    'containerurl',
+    'filepath',
+    'filesystempath',
+    'inputmanifestpath',
+    'manifestpath',
+    'outputmanifestpath',
+    'path',
+    'physicalpath',
+    'physicaluri',
+    'physicalurl',
+    'sourcepath',
+    'sourceuri',
+    'sourceurl',
+    'storagepath',
+    'storageuri',
+    'storageurl',
+    'uri',
+    'url',
+]);
+const PERCENT_ENCODED_BYTE_PATTERN = /%[0-9A-Fa-f]{2}/;
+const URI_SCHEME_PATTERN = /^[A-Za-z][A-Za-z0-9+.-]*:/;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const hasControlCharacters = (value) => Array.from(value).some(character => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
+const normalizeFieldName = (key) => key.replace(/[-_\s]/g, '').toLowerCase();
+const hasDotTraversal = (value) => value.split(/[\\/]/).some(segment => segment === '.' || segment === '..');
+const isForbiddenReferenceValue = (value, allowUriScheme = false) => hasControlCharacters(value) ||
+    PERCENT_ENCODED_BYTE_PATTERN.test(value) ||
+    (!allowUriScheme && URI_SCHEME_PATTERN.test(value)) ||
+    value.startsWith('/') ||
+    value.startsWith('\\\\') ||
+    /^[A-Za-z]:[\\/]/.test(value) ||
+    hasDotTraversal(value);
+const isSafeAzureResourceId = (key, value) => {
+    if (key !== 'resourceId' || typeof value !== 'string' || hasControlCharacters(value) || value.includes('\\'))
+        return false;
+    const segments = value.split('/');
+    return (segments.length >= 3 &&
+        segments[0] === '' &&
+        segments[1].toLowerCase() === 'subscriptions' &&
+        segments
+            .slice(2)
+            .every(segment => segment.trim() === segment && segment.length > 0 && !/[?#%]/.test(segment) && segment !== '.' && segment !== '..'));
+};
+/** Marks a structurally validated schema field whose logical reference name is allowed. */
+const allowedArtifactReferenceField = (object, key) => isRecord(object) ? [{ object, key }] : [];
+exports.allowedArtifactReferenceField = allowedArtifactReferenceField;
+/** Marks a structurally validated identity field whose value is allowed by its owning schema. */
+const allowedArtifactIdentityField = (object, key) => isRecord(object) ? [{ object, key, allowUriScheme: true }] : [];
+exports.allowedArtifactIdentityField = allowedArtifactIdentityField;
+/** Rejects exact normalized sensitive fields and physical-reference control data recursively. */
+const containsForbiddenArtifactControlData = (value, allowedReferenceFields = []) => {
+    if (typeof value === 'string')
+        return isForbiddenReferenceValue(value);
+    if (Array.isArray(value))
+        return value.some(child => (0, exports.containsForbiddenArtifactControlData)(child, allowedReferenceFields));
+    if (!isRecord(value))
+        return false;
+    return Object.entries(value).some(([key, child]) => {
+        if (hasControlCharacters(key))
+            return true;
+        const normalizedKey = normalizeFieldName(key);
+        if (FORBIDDEN_SENSITIVE_FIELDS.has(normalizedKey))
+            return true;
+        const allowedField = allowedReferenceFields.find(field => field.object === value && field.key === key);
+        if (allowedField?.allowUriScheme && typeof child === 'string')
+            return isForbiddenReferenceValue(child, true);
+        if (PHYSICAL_REFERENCE_FIELDS.has(normalizedKey) && !allowedField)
+            return true;
+        if (isSafeAzureResourceId(key, child))
+            return false;
+        return (0, exports.containsForbiddenArtifactControlData)(child, allowedReferenceFields);
+    });
+};
+exports.containsForbiddenArtifactControlData = containsForbiddenArtifactControlData;
+//# sourceMappingURL=artifactControlData.js.map

package/dist/common/artifactControlData.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactControlData.js","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":";;;AAAA,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,YAAY;IACZ,WAAW;IACX,aAAa;IACb,QAAQ;IACR,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,cAAc;IACd,UAAU;IACV,QAAQ;IACR,uBAAuB;IACvB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,UAAU;IACV,SAAS;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,MAAM;IACN,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AACvD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAQvD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAEvG,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE7F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAE9H,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAE,cAAc,GAAG,KAAK,EAAW,EAAE,CACnF,oBAAoB,CAAC,KAAK,CAAC;IAC3B,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,cAAc,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACxB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzB,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAE,KAAc,EAAmB,EAAE;IAC7E,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3H,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,CACL,QAAQ,CAAC,MAAM,IAAI,CAAC;QACpB,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe;QAC7C,QAAQ;aACL,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CACvI,CAAC;AACJ,CAAC,CAAC;AAEF,2FAA2F;AACpF,MAAM,6BAA6B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC7G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAD/B,QAAA,6BAA6B,iCACE;AAE5C,iGAAiG;AAC1F,MAAM,4BAA4B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC5G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AADrD,QAAA,4BAA4B,gCACyB;AAElE,iGAAiG;AAC1F,MAAM,oCAAoC,GAAG,CAAC,KAAc,EAAE,yBAA0D,EAAE,EAAW,EAAE;IAC5I,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,4CAAoC,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1H,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACvG,IAAI,YAAY,EAAE,cAAc,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7G,IAAI,yBAAyB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/E,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,IAAA,4CAAoC,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAfW,QAAA,oCAAoC,wCAe/C"}

package/dist/common/artifactEvidence.d.ts

@@ -0,0 +1,144 @@
+import type { ArtifactProvider } from './artifactGeneration.js';
+export type ArtifactSupportVerdict = 'supported' | 'unsupported' | 'unknown';
+export type ArtifactApplicabilityVerdict = 'applicable' | 'not-applicable' | 'unknown';
+export type ArtifactAttemptOutcome = 'not-attempted' | 'queued' | 'running' | 'succeeded' | 'failed' | 'cancelled' | 'timed-out' | 'dead-lettered' | 'superseded';
+export type ArtifactCoverageVerdict = 'complete' | 'partial' | 'none' | 'unknown';
+export type ArtifactEmptyEvidenceVerdict = 'populated' | 'complete-empty' | 'not-observed' | 'unknown';
+export type ArtifactFreshnessVerdict = 'current' | 'stale' | 'expired' | 'unknown';
+export type ArtifactEvidenceVerdict = 'complete' | 'partial' | 'insufficient' | 'conflicting';
+export type ArtifactProcessingLifecycle = 'queued' | 'running' | 'succeeded' | 'failed' | 'cancelled' | 'timed-out' | 'dead-lettered' | 'superseded';
+export type ArtifactPublicationVerdict = 'completed' | 'partial' | 'suppressed' | 'superseded' | 'quarantined';
+export type BillingArtifactReadState = 'current' | 'stale' | 'partial' | 'fallback' | 'suppressed' | 'unavailable' | 'complete-empty';
+export interface ArtifactOwnershipBinding<Provider extends ArtifactProvider = ArtifactProvider> {
+    provider: Provider;
+    tenantId: string;
+    companyId: string;
+    cloudAccountId: string;
+    accountId: string;
+    ownershipEpochRevision?: number;
+}
+export interface ArtifactRevisionVector {
+    ownershipEpochRevision?: number;
+    sourceRevision: number;
+    policyRevision: number;
+}
+export type ArtifactRevisionComparison = 'newer' | 'equal' | 'older' | 'incomparable' | 'newer-ownership' | 'older-ownership' | 'unenforceable';
+interface ArtifactDecisionIssue {
+    code: string;
+    blocking: boolean;
+    dependency?: string;
+}
+type ArtifactNonBlockingDecisionIssue = ArtifactDecisionIssue & {
+    blocking: false;
+};
+export interface ArtifactObservedRange {
+    fromInclusive: string;
+    throughExclusive: string;
+    dateBasis: 'utc' | 'billing-calendar' | 'company-local';
+    timeZone?: string;
+}
+interface ArtifactDependencyBase {
+    name: string;
+    required: boolean;
+    support: ArtifactSupportVerdict;
+    applicability: ArtifactApplicabilityVerdict;
+    freshness: ArtifactFreshnessVerdict;
+    generationId?: string;
+    digest?: string;
+    sourceRevision?: number;
+    policyRevision?: number;
+    observedRange?: ArtifactObservedRange;
+    completeThrough?: string;
+    reasonCode?: string;
+}
+type ArtifactPopulatedCompletedDependency = ArtifactDependencyBase & {
+    support: 'supported';
+    applicability: 'applicable';
+    attempt: 'succeeded';
+    coverage: 'complete';
+    emptyEvidence: 'populated';
+    evidence: 'complete';
+    publication: 'completed';
+    acceptedRowCount?: number;
+    emptyProofRef?: never;
+};
+type ArtifactCompleteEmptyCompletedDependency = ArtifactDependencyBase & {
+    support: 'supported';
+    applicability: 'applicable';
+    attempt: 'succeeded';
+    coverage: 'complete';
+    emptyEvidence: 'complete-empty';
+    evidence: 'complete';
+    publication: 'completed';
+    acceptedRowCount: 0;
+    emptyProofRef: string;
+};
+type ArtifactUnpublishedDependency = ArtifactDependencyBase & {
+    attempt: ArtifactAttemptOutcome;
+    coverage: ArtifactCoverageVerdict;
+    evidence: ArtifactEvidenceVerdict;
+    publication: Exclude<ArtifactPublicationVerdict, 'completed'>;
+} & ({
+    emptyEvidence: Exclude<ArtifactEmptyEvidenceVerdict, 'complete-empty'>;
+    acceptedRowCount?: number;
+    emptyProofRef?: never;
+} | {
+    attempt: 'succeeded';
+    coverage: 'complete';
+    emptyEvidence: 'complete-empty';
+    acceptedRowCount: 0;
+    emptyProofRef: string;
+});
+export type ArtifactDependencyDescriptor = ArtifactPopulatedCompletedDependency | ArtifactCompleteEmptyCompletedDependency | ArtifactUnpublishedDependency;
+interface ArtifactClaimDependencyDecisionBase<Issue extends ArtifactDecisionIssue = ArtifactDecisionIssue> {
+    claimId: string;
+    sectionPaths: string[];
+    requiredDependencies: string[];
+    issues: Issue[];
+}
+export type ArtifactClaimDependencyDecision = (ArtifactClaimDependencyDecisionBase<ArtifactNonBlockingDecisionIssue> & {
+    evidence: 'complete';
+    publication: 'completed';
+}) | (ArtifactClaimDependencyDecisionBase & {
+    evidence: ArtifactEvidenceVerdict;
+    publication: Exclude<ArtifactPublicationVerdict, 'completed'>;
+});
+type ArtifactCompletedDependency = Extract<ArtifactDependencyDescriptor, {
+    publication: 'completed';
+}>;
+type ArtifactIncompleteDependency = Exclude<ArtifactDependencyDescriptor, ArtifactCompletedDependency>;
+type ArtifactCompletedDecisionDependency = ArtifactCompletedDependency | (ArtifactIncompleteDependency & {
+    required: false;
+});
+type ArtifactCompletedClaimDependencyDecision = Extract<ArtifactClaimDependencyDecision, {
+    publication: 'completed';
+}>;
+interface ArtifactPublicationDecisionBase<Dependency extends ArtifactDependencyDescriptor = ArtifactDependencyDescriptor, Claim extends ArtifactClaimDependencyDecision = ArtifactClaimDependencyDecision, Issue extends ArtifactDecisionIssue = ArtifactDecisionIssue> {
+    evidence: ArtifactEvidenceVerdict;
+    dependencies: Dependency[];
+    claims: Claim[];
+    issues: Issue[];
+}
+export type ArtifactPublicationDecision = (ArtifactPublicationDecisionBase<ArtifactCompletedDecisionDependency, ArtifactCompletedClaimDependencyDecision, ArtifactNonBlockingDecisionIssue> & {
+    processing: 'succeeded';
+    evidence: 'complete' | 'partial';
+    publication: 'completed';
+}) | (ArtifactPublicationDecisionBase & {
+    processing: ArtifactProcessingLifecycle;
+    publication: Exclude<ArtifactPublicationVerdict, 'completed'>;
+});
+/** Dependency-free runtime rejection boundary for provider-neutral publication decisions. */
+export declare const isArtifactPublicationDecision: (value: unknown) => value is ArtifactPublicationDecision;
+/** Checks the provider-neutral ownership shape used by observe- and enforce-mode artifacts. */
+export declare const isArtifactOwnershipBinding: (value: unknown) => value is ArtifactOwnershipBinding;
+/** Checks that an ownership binding is valid for enforce-mode publication. */
+export declare const isEnforceableArtifactOwnershipBinding: (value: unknown) => value is ArtifactOwnershipBinding & {
+    ownershipEpochRevision: number;
+};
+/**
+ * Compares ownership first, then source and policy revisions component-wise.
+ * Callers must validate both vectors before comparison; this function deliberately compares the supplied values without adding a second validation policy.
+ */
+export declare const compareArtifactRevisionVector: (left: ArtifactRevisionVector, right: ArtifactRevisionVector) => ArtifactRevisionComparison;
+export {};
+//# sourceMappingURL=artifactEvidence.d.ts.map

package/dist/common/artifactEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidence.d.ts","sourceRoot":"","sources":["../../src/common/artifactEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAE7E,MAAM,MAAM,4BAA4B,GAAG,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEvF,MAAM,MAAM,sBAAsB,GAC9B,eAAe,GACf,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;AAEvG,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;AAE9F,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,GAAG,YAAY,CAAC;AAErJ,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,CAAC;AAE/G,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAEtI,MAAM,WAAW,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IAC5F,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,eAAe,CAAC;AAEhJ,UAAU,qBAAqB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gCAAgC,GAAG,qBAAqB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,KAAK,GAAG,kBAAkB,GAAG,eAAe,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,sBAAsB,CAAC;IAChC,aAAa,EAAE,4BAA4B,CAAC;IAC5C,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,oCAAoC,GAAG,sBAAsB,GAAG;IACnE,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,WAAW,CAAC;IAC3B,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,CAAC;AAEF,KAAK,wCAAwC,GAAG,sBAAsB,GAAG;IACvE,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,6BAA6B,GAAG,sBAAsB,GAAG;IAC5D,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,GAAG,CACE;IACE,aAAa,EAAE,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,GACD;IACE,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,gBAAgB,CAAC;IAChC,gBAAgB,EAAE,CAAC,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CACJ,CAAC;AAEJ,MAAM,MAAM,4BAA4B,GACpC,oCAAoC,GACpC,wCAAwC,GACxC,6BAA6B,CAAC;AAElC,UAAU,mCAAmC,CAAC,KAAK,SAAS,qBAAqB,GAAG,qBAAqB;IACvG,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,+BAA+B,GACvC,CAAC,mCAAmC,CAAC,gCAAgC,CAAC,GAAG;IACvE,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC,GACF,CAAC,mCAAmC,GAAG;IACrC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AAEP,KAAK,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AACvG,KAAK,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;AACvG,KAAK,mCAAmC,GAAG,2BAA2B,GAAG,CAAC,4BAA4B,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAC9H,KAAK,wCAAwC,GAAG,OAAO,CAAC,+BAA+B,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEvH,UAAU,+BAA+B,CACvC,UAAU,SAAS,4BAA4B,GAAG,4BAA4B,EAC9E,KAAK,SAAS,+BAA+B,GAAG,+BAA+B,EAC/E,KAAK,SAAS,qBAAqB,GAAG,qBAAqB;IAE3D,QAAQ,EAAE,uBAAuB,CAAC;IAClC,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,2BAA2B,GACnC,CAAC,+BAA+B,CAC9B,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,CACjC,GAAG;IACF,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC,GACF,CAAC,+BAA+B,GAAG;IACjC,UAAU,EAAE,2BAA2B,CAAC;IACxC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AA8HP,6FAA6F;AAC7F,eAAO,MAAM,6BAA6B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,2BAgCvE,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAO4B,CAAC;AAElG,8EAA8E;AAC9E,eAAO,MAAM,qCAAqC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAAwB,GAAG;IAAE,sBAAsB,EAAE,MAAM,CAAA;CAC1D,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GAAI,MAAM,sBAAsB,EAAE,OAAO,sBAAsB,KAAG,0BAW3G,CAAC"}

package/dist/common/artifactEvidence.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareArtifactRevisionVector = exports.isEnforceableArtifactOwnershipBinding = exports.isArtifactOwnershipBinding = exports.isArtifactPublicationDecision = void 0;
+const artifactEvidenceValidation_js_1 = require("./artifactEvidenceValidation.js");
+const SUPPORT_VERDICTS = new Set(['supported', 'unsupported', 'unknown']);
+const APPLICABILITY_VERDICTS = new Set(['applicable', 'not-applicable', 'unknown']);
+const ATTEMPT_OUTCOMES = new Set([
+    'not-attempted',
+    'queued',
+    'running',
+    'succeeded',
+    'failed',
+    'cancelled',
+    'timed-out',
+    'dead-lettered',
+    'superseded',
+]);
+const COVERAGE_VERDICTS = new Set(['complete', 'partial', 'none', 'unknown']);
+const EMPTY_EVIDENCE_VERDICTS = new Set(['populated', 'complete-empty', 'not-observed', 'unknown']);
+const FRESHNESS_VERDICTS = new Set(['current', 'stale', 'expired', 'unknown']);
+const EVIDENCE_VERDICTS = new Set(['complete', 'partial', 'insufficient', 'conflicting']);
+const PROCESSING_LIFECYCLES = new Set(['queued', 'running', 'succeeded', 'failed', 'cancelled', 'timed-out', 'dead-lettered', 'superseded']);
+const PUBLICATION_VERDICTS = new Set(['completed', 'partial', 'suppressed', 'superseded', 'quarantined']);
+const PROVIDERS = new Set(['azure', 'aws']);
+const DATE_BASES = new Set(['utc', 'billing-calendar', 'company-local']);
+const SHA256_PATTERN = /^[a-f0-9]{64}$/;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isNonEmptyString = (value) => typeof value === 'string' && value.trim().length > 0;
+const isNonNegativeInteger = (value) => Number.isInteger(value) && value >= 0;
+const isPositiveInteger = (value) => Number.isInteger(value) && value > 0;
+const isStringIn = (value, values) => typeof value === 'string' && values.has(value);
+const isCanonicalIsoTimestamp = (value) => {
+    if (!isNonEmptyString(value))
+        return false;
+    const timestamp = Date.parse(value);
+    return Number.isFinite(timestamp) && new Date(timestamp).toISOString() === value;
+};
+const isArtifactDecisionIssue = (value) => isRecord(value) &&
+    isNonEmptyString(value.code) &&
+    typeof value.blocking === 'boolean' &&
+    (value.dependency === undefined || isNonEmptyString(value.dependency));
+const isObservedRange = (value) => {
+    if (!isRecord(value) ||
+        !isCanonicalIsoTimestamp(value.fromInclusive) ||
+        !isCanonicalIsoTimestamp(value.throughExclusive) ||
+        Date.parse(value.throughExclusive) <= Date.parse(value.fromInclusive) ||
+        !isStringIn(value.dateBasis, DATE_BASES)) {
+        return false;
+    }
+    return value.timeZone === undefined || isNonEmptyString(value.timeZone);
+};
+const isArtifactDependencyDescriptor = (value) => {
+    if (!isRecord(value) ||
+        !isNonEmptyString(value.name) ||
+        typeof value.required !== 'boolean' ||
+        !isStringIn(value.support, SUPPORT_VERDICTS) ||
+        !isStringIn(value.applicability, APPLICABILITY_VERDICTS) ||
+        !isStringIn(value.attempt, ATTEMPT_OUTCOMES) ||
+        !isStringIn(value.coverage, COVERAGE_VERDICTS) ||
+        !isStringIn(value.emptyEvidence, EMPTY_EVIDENCE_VERDICTS) ||
+        !isStringIn(value.freshness, FRESHNESS_VERDICTS) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS)) {
+        return false;
+    }
+    if (value.generationId !== undefined && !isNonEmptyString(value.generationId))
+        return false;
+    if (value.digest !== undefined && (typeof value.digest !== 'string' || !SHA256_PATTERN.test(value.digest)))
+        return false;
+    if (!(0, artifactEvidenceValidation_js_1.hasValidOptionalArtifactRevisionComponents)(value))
+        return false;
+    if (value.observedRange !== undefined && !isObservedRange(value.observedRange))
+        return false;
+    if (value.completeThrough !== undefined && !isCanonicalIsoTimestamp(value.completeThrough))
+        return false;
+    if (value.reasonCode !== undefined && !isNonEmptyString(value.reasonCode))
+        return false;
+    if (value.acceptedRowCount !== undefined && !isNonNegativeInteger(value.acceptedRowCount))
+        return false;
+    if (value.emptyEvidence === 'complete-empty') {
+        if (value.attempt !== 'succeeded' ||
+            value.coverage !== 'complete' ||
+            value.acceptedRowCount !== 0 ||
+            !(0, artifactEvidenceValidation_js_1.isStrictLogicalArtifactReference)(value.emptyProofRef)) {
+            return false;
+        }
+    }
+    else if (value.emptyProofRef !== undefined) {
+        return false;
+    }
+    if (value.publication === 'completed') {
+        return (value.support === 'supported' &&
+            value.applicability === 'applicable' &&
+            value.attempt === 'succeeded' &&
+            value.coverage === 'complete' &&
+            (value.emptyEvidence === 'populated' || value.emptyEvidence === 'complete-empty') &&
+            value.evidence === 'complete');
+    }
+    return true;
+};
+const isArtifactClaimDependencyDecision = (value) => {
+    if (!isRecord(value) ||
+        !isNonEmptyString(value.claimId) ||
+        !Array.isArray(value.sectionPaths) ||
+        !value.sectionPaths.every(isNonEmptyString) ||
+        !Array.isArray(value.requiredDependencies) ||
+        !value.requiredDependencies.every(isNonEmptyString) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS) ||
+        !Array.isArray(value.issues) ||
+        !value.issues.every(isArtifactDecisionIssue)) {
+        return false;
+    }
+    return value.publication !== 'completed' || (value.evidence === 'complete' && !value.issues.some(issue => issue.blocking));
+};
+const hasUniqueValues = (values) => new Set(values).size === values.length;
+/** Dependency-free runtime rejection boundary for provider-neutral publication decisions. */
+const isArtifactPublicationDecision = (value) => {
+    if (!isRecord(value) ||
+        !isStringIn(value.processing, PROCESSING_LIFECYCLES) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS) ||
+        !Array.isArray(value.dependencies) ||
+        !value.dependencies.every(isArtifactDependencyDescriptor) ||
+        !Array.isArray(value.claims) ||
+        !value.claims.every(isArtifactClaimDependencyDecision) ||
+        !Array.isArray(value.issues) ||
+        !value.issues.every(isArtifactDecisionIssue)) {
+        return false;
+    }
+    const dependencyNames = value.dependencies.map(dependency => dependency.name);
+    const claimIds = value.claims.map(claim => claim.claimId);
+    if (!hasUniqueValues(dependencyNames) || !hasUniqueValues(claimIds))
+        return false;
+    if (!value.claims.every(claim => hasUniqueValues(claim.requiredDependencies)))
+        return false;
+    if (value.publication !== 'completed')
+        return true;
+    const completedDependencies = new Set(value.dependencies.filter(dependency => dependency.publication === 'completed').map(dependency => dependency.name));
+    return (value.processing === 'succeeded' &&
+        (value.evidence === 'complete' || value.evidence === 'partial') &&
+        value.dependencies.every(dependency => !dependency.required || dependency.publication === 'completed') &&
+        value.claims.every(claim => claim.publication === 'completed' && claim.requiredDependencies.every(dependency => completedDependencies.has(dependency))) &&
+        !value.issues.some(issue => issue.blocking));
+};
+exports.isArtifactPublicationDecision = isArtifactPublicationDecision;
+/** Checks the provider-neutral ownership shape used by observe- and enforce-mode artifacts. */
+const isArtifactOwnershipBinding = (value) => isRecord(value) &&
+    isStringIn(value.provider, PROVIDERS) &&
+    isNonEmptyString(value.tenantId) &&
+    isNonEmptyString(value.companyId) &&
+    isNonEmptyString(value.cloudAccountId) &&
+    isNonEmptyString(value.accountId) &&
+    (value.ownershipEpochRevision === undefined || isPositiveInteger(value.ownershipEpochRevision));
+exports.isArtifactOwnershipBinding = isArtifactOwnershipBinding;
+/** Checks that an ownership binding is valid for enforce-mode publication. */
+const isEnforceableArtifactOwnershipBinding = (value) => (0, exports.isArtifactOwnershipBinding)(value) && value.ownershipEpochRevision !== undefined;
+exports.isEnforceableArtifactOwnershipBinding = isEnforceableArtifactOwnershipBinding;
+/**
+ * Compares ownership first, then source and policy revisions component-wise.
+ * Callers must validate both vectors before comparison; this function deliberately compares the supplied values without adding a second validation policy.
+ */
+const compareArtifactRevisionVector = (left, right) => {
+    if (left.ownershipEpochRevision === undefined || right.ownershipEpochRevision === undefined)
+        return 'unenforceable';
+    if (left.ownershipEpochRevision > right.ownershipEpochRevision)
+        return 'newer-ownership';
+    if (left.ownershipEpochRevision < right.ownershipEpochRevision)
+        return 'older-ownership';
+    const sourceComparison = Math.sign(left.sourceRevision - right.sourceRevision);
+    const policyComparison = Math.sign(left.policyRevision - right.policyRevision);
+    if (sourceComparison === 0 && policyComparison === 0)
+        return 'equal';
+    if (sourceComparison >= 0 && policyComparison >= 0)
+        return 'newer';
+    if (sourceComparison <= 0 && policyComparison <= 0)
+        return 'older';
+    return 'incomparable';
+};
+exports.compareArtifactRevisionVector = compareArtifactRevisionVector;
+//# sourceMappingURL=artifactEvidence.js.map

package/dist/common/artifactEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidence.js","sourceRoot":"","sources":["../../src/common/artifactEvidence.ts"],"names":[],"mappings":";;;AACA,mFAA+H;AA+K/H,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAClF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,eAAe;IACf,QAAQ;IACR,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;IACX,WAAW;IACX,eAAe;IACf,YAAY;CACb,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACtF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5G,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACvF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAClG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AACrJ,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAClH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;AACjF,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5I,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACnH,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AACpH,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC;AAChH,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,MAAmB,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE5H,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAmB,EAAE;IAClE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACnF,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAkC,EAAE,CACjF,QAAQ,CAAC,KAAK,CAAC;IACf,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;IACnC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAEzE,MAAM,eAAe,GAAG,CAAC,KAAc,EAAkC,EAAE;IACzE,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC7C,CAAC,uBAAuB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QACrE,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,EACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,KAAc,EAAyC,EAAE;IAC/F,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAC5C,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,sBAAsB,CAAC;QACxD,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAC5C,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC;QACzD,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAChD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzH,IAAI,CAAC,IAAA,0EAA0C,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACzG,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAExG,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;QAC7C,IACE,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,QAAQ,KAAK,UAAU;YAC7B,KAAK,CAAC,gBAAgB,KAAK,CAAC;YAC5B,CAAC,IAAA,gEAAgC,EAAC,KAAK,CAAC,aAAa,CAAC,EACtD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,CACL,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,aAAa,KAAK,YAAY;YACpC,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,QAAQ,KAAK,UAAU;YAC7B,CAAC,KAAK,CAAC,aAAa,KAAK,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,CAAC;YACjF,KAAK,CAAC,QAAQ,KAAK,UAAU,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CAAC,KAAc,EAA4C,EAAE;IACrG,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC1C,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACnD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7H,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAgB,EAAW,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC;AAE9F,6FAA6F;AACtF,MAAM,6BAA6B,GAAG,CAAC,KAAc,EAAwC,EAAE;IACpG,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACpD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,8BAA8B,CAAC;QACzD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC;QACtD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACnH,CAAC;IACF,OAAO,CACL,KAAK,CAAC,UAAU,KAAK,WAAW;QAChC,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC/D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;QACtG,KAAK,CAAC,MAAM,CAAC,KAAK,CAChB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACpI;QACD,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC;AAhCW,QAAA,6BAA6B,iCAgCxC;AAEF,+FAA+F;AACxF,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAqC,EAAE,CAC9F,QAAQ,CAAC,KAAK,CAAC;IACf,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;IAChC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;IACjC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;IACtC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;IACjC,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAPrF,QAAA,0BAA0B,8BAO2D;AAElG,8EAA8E;AACvE,MAAM,qCAAqC,GAAG,CAAC,KAAc,EAA0E,EAAE,CAC9I,IAAA,kCAA0B,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,CAAC;AADrE,QAAA,qCAAqC,yCACgC;AAElF;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,IAA4B,EAAE,KAA6B,EAA8B,EAAE;IACvI,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACpH,IAAI,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB;QAAE,OAAO,iBAAiB,CAAC;IACzF,IAAI,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB;QAAE,OAAO,iBAAiB,CAAC;IAEzF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E,IAAI,gBAAgB,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrE,IAAI,gBAAgB,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACnE,IAAI,gBAAgB,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACnE,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAXW,QAAA,6BAA6B,iCAWxC"}

package/dist/common/artifactEvidenceValidation.d.ts

@@ -0,0 +1,16 @@
+/** Validates a generation-relative logical artifact reference without accepting physical-path encodings. */
+export declare const isStrictLogicalArtifactReference: (value: unknown) => value is string;
+interface RuntimeArtifactRevisionVector {
+    ownershipEpochRevision?: number;
+    sourceRevision: number;
+    policyRevision: number;
+}
+/** Validates the positive source/policy revision vector shared by evidence producers and consumers. */
+export declare const isArtifactRevisionVector: (value: unknown) => value is RuntimeArtifactRevisionVector;
+/** Validates optional dependency revision components using the shared revision-vector rules. */
+export declare const hasValidOptionalArtifactRevisionComponents: (value: {
+    sourceRevision?: unknown;
+    policyRevision?: unknown;
+}) => boolean;
+export {};
+//# sourceMappingURL=artifactEvidenceValidation.d.ts.map

package/dist/common/artifactEvidenceValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidenceValidation.d.ts","sourceRoot":"","sources":["../../src/common/artifactEvidenceValidation.ts"],"names":[],"mappings":"AAGA,4GAA4G;AAC5G,eAAO,MAAM,gCAAgC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAM1E,CAAC;AAEF,UAAU,6BAA6B;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,6BAIkC,CAAC;AAEtG,gGAAgG;AAChG,eAAO,MAAM,0CAA0C,GAAI,OAAO;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,KAAG,OAIvH,CAAC"}

package/dist/common/artifactEvidenceValidation.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasValidOptionalArtifactRevisionComponents = exports.isArtifactRevisionVector = exports.isStrictLogicalArtifactReference = void 0;
+const hasControlCharacters = (value) => Array.from(value).some(character => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
+/** Validates a generation-relative logical artifact reference without accepting physical-path encodings. */
+const isStrictLogicalArtifactReference = (value) => {
+    if (typeof value !== 'string' || value.trim() !== value || value.length === 0 || hasControlCharacters(value))
+        return false;
+    if (value.startsWith('/') || value.includes('\\') || value.includes('%') || value.includes('?') || value.includes('#'))
+        return false;
+    if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value) || /^[A-Za-z]:[\\/]/.test(value))
+        return false;
+    const segments = value.split('/');
+    return segments.length >= 2 && segments.every(segment => segment.length > 0 && segment !== '.' && segment !== '..');
+};
+exports.isStrictLogicalArtifactReference = isStrictLogicalArtifactReference;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isPositiveSafeInteger = (value) => Number.isSafeInteger(value) && Number(value) > 0;
+/** Validates the positive source/policy revision vector shared by evidence producers and consumers. */
+const isArtifactRevisionVector = (value) => isRecord(value) &&
+    isPositiveSafeInteger(value.sourceRevision) &&
+    isPositiveSafeInteger(value.policyRevision) &&
+    (value.ownershipEpochRevision === undefined || isPositiveSafeInteger(value.ownershipEpochRevision));
+exports.isArtifactRevisionVector = isArtifactRevisionVector;
+/** Validates optional dependency revision components using the shared revision-vector rules. */
+const hasValidOptionalArtifactRevisionComponents = (value) => (0, exports.isArtifactRevisionVector)({
+    sourceRevision: value.sourceRevision === undefined ? 1 : value.sourceRevision,
+    policyRevision: value.policyRevision === undefined ? 1 : value.policyRevision,
+});
+exports.hasValidOptionalArtifactRevisionComponents = hasValidOptionalArtifactRevisionComponents;
+//# sourceMappingURL=artifactEvidenceValidation.js.map

package/dist/common/artifactEvidenceValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidenceValidation.js","sourceRoot":"","sources":["../../src/common/artifactEvidenceValidation.ts"],"names":[],"mappings":";;;AAAA,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAEvG,4GAA4G;AACrG,MAAM,gCAAgC,GAAG,CAAC,KAAc,EAAmB,EAAE;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3H,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrI,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACtH,CAAC,CAAC;AANW,QAAA,gCAAgC,oCAM3C;AAQF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5I,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAEpH,uGAAuG;AAChG,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAA0C,EAAE,CACjG,QAAQ,CAAC,KAAK,CAAC;IACf,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3C,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3C,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAJzF,QAAA,wBAAwB,4BAIiE;AAEtG,gGAAgG;AACzF,MAAM,0CAA0C,GAAG,CAAC,KAA6D,EAAW,EAAE,CACnI,IAAA,gCAAwB,EAAC;IACvB,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;IAC7E,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;CAC9E,CAAC,CAAC;AAJQ,QAAA,0CAA0C,8CAIlD"}

package/dist/common/artifactGeneration.d.ts

@@ -1,3 +1,4 @@
+import type { ArtifactEvidenceVerdict } from './artifactEvidence.js';
 export declare const ARTIFACT_GENERATION_SCHEMA_VERSION: 1;
 export type ArtifactGenerationSchemaVersion = typeof ARTIFACT_GENERATION_SCHEMA_VERSION;
 export type JsonPrimitive = string | number | boolean | null;
@@ -49,16 +50,17 @@ export interface ArtifactDescriptor {
     sha256: string;
 }
 export type ArtifactEvidenceIssueStatus = 'partial' | 'missing' | 'stale' | 'unavailable';
+type ArtifactManifestEvidenceVerdict = Extract<ArtifactEvidenceVerdict, 'complete' | 'partial'>;
 export interface ArtifactEvidenceIssue {
     source: string;
     status: ArtifactEvidenceIssueStatus;
     reason: string;
 }
 export type ArtifactManifestEvidence = {
-    status: 'complete';
+    status: Extract<ArtifactManifestEvidenceVerdict, 'complete'>;
     issues: [];
 } | {
-    status: 'partial';
+    status: Extract<ArtifactManifestEvidenceVerdict, 'partial'>;
     issues: [ArtifactEvidenceIssue, ...ArtifactEvidenceIssue[]];
 };
 type ArtifactGenerationManifestBase<Provider extends ArtifactProvider, AccountId extends string, RunId extends string> = ArtifactAccountBinding<Provider, AccountId> & {

package/dist/common/artifactGeneration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifactGeneration.d.ts","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,MAAM,MAAM,+BAA+B,GAAG,OAAO,kCAAkC,CAAC;AAExF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AAEjE,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM;IAC/D,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM;IAC7H,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,MAAM,8BAA8B,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3G,KAAK,4BAA4B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,IAAI,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IAC7I,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IACxH,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEP,MAAM,MAAM,iCAAiC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CACxB,CAAC;AAEF,MAAM,MAAM,gCAAgC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC7I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1D,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,kBAAkB,CAAC;IAC9B,eAAe,EAAE,uBAAuB,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE1F,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,EAAE,CAAC;CACZ,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;CAC7D,CAAC;AAEN,KAAK,8BAA8B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,EAAE,KAAK,SAAS,MAAM,IAAI,sBAAsB,CAC7I,QAAQ,EACR,SAAS,CACV,GAAG;IACF,aAAa,EAAE,+BAA+B,CAAC;IAC/C,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,SAAS,EAAE,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,0BAA0B,CACpC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,GAC5D,CACI;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACzI,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACrE,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACvH,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACpE,CACJ,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,WAAW,kCAAkC,CACjD,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,CAC7B,SAAQ,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC;IACnD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,MAAM,EAAE,WAAW,CAAC;IACpB,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"artifactGeneration.d.ts","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,MAAM,MAAM,+BAA+B,GAAG,OAAO,kCAAkC,CAAC;AAExF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AAEjE,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM;IAC/D,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM;IAC7H,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,MAAM,8BAA8B,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3G,KAAK,4BAA4B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,IAAI,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IAC7I,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IACxH,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEP,MAAM,MAAM,iCAAiC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CACxB,CAAC;AAEF,MAAM,MAAM,gCAAgC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC7I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1D,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,kBAAkB,CAAC;IAC9B,eAAe,EAAE,uBAAuB,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE1F,KAAK,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;AAEhG,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,EAAE,OAAO,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,EAAE,EAAE,CAAC;CACZ,GACD;IACE,MAAM,EAAE,OAAO,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;CAC7D,CAAC;AAEN,KAAK,8BAA8B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,EAAE,KAAK,SAAS,MAAM,IAAI,sBAAsB,CAC7I,QAAQ,EACR,SAAS,CACV,GAAG;IACF,aAAa,EAAE,+BAA+B,CAAC;IAC/C,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,SAAS,EAAE,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,0BAA0B,CACpC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,GAC5D,CACI;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACzI,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACrE,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACvH,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACpE,CACJ,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,WAAW,kCAAkC,CACjD,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,CAC7B,SAAQ,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC;IACnD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,MAAM,EAAE,WAAW,CAAC;IACpB,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/common/artifactGeneration.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifactGeneration.js","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":";;;AAAa,QAAA,kCAAkC,GAAG,CAAU,CAAC"}
+{"version":3,"file":"artifactGeneration.js","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":";;;AAEa,QAAA,kCAAkC,GAAG,CAAU,CAAC"}

package/dist/common/capabilityPassport.d.ts

@@ -1,4 +1,5 @@
 import type { ArtifactProvider } from './artifactGeneration.js';
+import { type ArtifactEmptyEvidenceVerdict, type ArtifactFreshnessVerdict, type ArtifactOwnershipBinding } from './artifactEvidence.js';
 export declare const CAPABILITY_PASSPORT_SCHEMA_VERSION: 1;
 export type CapabilityPassportSchemaVersion = typeof CAPABILITY_PASSPORT_SCHEMA_VERSION;
 export declare const CAPABILITY_REASON_CODES: readonly ["not-requested", "permission-denied", "not-found", "throttled", "timeout", "pagination-incomplete", "source-partial", "source-empty", "source-unsupported", "retained-last-known-good", "currency-unresolved", "unknown"];
@@ -42,16 +43,16 @@ export type CapabilityAttempt = {
     reasonCodes: CapabilityReasonCode[];
 };
 export type CapabilityFreshness = {
-    status: 'current';
+    status: Extract<ArtifactFreshnessVerdict, 'current'>;
     observedAt: string;
     completeThrough?: string;
 } | {
-    status: 'stale';
+    status: Extract<ArtifactFreshnessVerdict, 'stale'>;
     observedAt: string;
     completeThrough?: string;
     maximumAge: string;
 } | {
-    status: 'unknown';
+    status: Extract<ArtifactFreshnessVerdict, 'unknown'>;
 };
 export interface CapabilityObservation<Provider extends ArtifactProvider = ArtifactProvider> {
     observationId: string;
@@ -60,7 +61,7 @@ export interface CapabilityObservation<Provider extends ArtifactProvider = Artif
     attempt: CapabilityAttempt;
     providerSurfaceOutcome: 'accepted' | 'authoritatively-unsupported' | 'unknown';
     availability: 'available' | 'partial' | 'missing' | 'unavailable' | 'unknown';
-    emptyEvidence: 'populated' | 'complete-empty' | 'not-observed' | 'unknown';
+    emptyEvidence: ArtifactEmptyEvidenceVerdict;
     freshness: CapabilityFreshness;
     sourceGeneration?: ImmutableSourceGeneration;
     coverageRef?: string;
@@ -92,14 +93,8 @@ export interface CapabilityPassport<Provider extends ArtifactProvider = Artifact
     passportId: string;
     generatedAt: string;
     runId: string;
-    ownership: {
-        provider: Provider;
-        tenantId: string;
-        companyId: string;
-        cloudAccountId: string;
-        accountId: string;
+    ownership: ArtifactOwnershipBinding<Provider> & {
         subscriptionId: string;
-        ownershipEpochRevision?: number;
     };
     agreementObservation: {
         type: CapabilityAgreementType;