@spottoai/types-package 1.0.2-beta.99 → 1.0.2-dev1138.2

package/dist/common/artifactEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidence.d.ts","sourceRoot":"","sources":["../../src/common/artifactEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAE7E,MAAM,MAAM,4BAA4B,GAAG,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAEvF,MAAM,MAAM,sBAAsB,GAC9B,eAAe,GACf,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC;AAEvG,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,aAAa,CAAC;AAE9F,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,GAAG,YAAY,CAAC;AAErJ,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,CAAC;AAE/G,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAEtI,MAAM,WAAW,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IAC5F,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,eAAe,CAAC;AAEhJ,UAAU,qBAAqB;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gCAAgC,GAAG,qBAAqB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,KAAK,GAAG,kBAAkB,GAAG,eAAe,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,sBAAsB,CAAC;IAChC,aAAa,EAAE,4BAA4B,CAAC;IAC5C,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,oCAAoC,GAAG,sBAAsB,GAAG;IACnE,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,WAAW,CAAC;IAC3B,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,CAAC;AAEF,KAAK,wCAAwC,GAAG,sBAAsB,GAAG;IACvE,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,6BAA6B,GAAG,sBAAsB,GAAG;IAC5D,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,GAAG,CACE;IACE,aAAa,EAAE,OAAO,CAAC,4BAA4B,EAAE,gBAAgB,CAAC,CAAC;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,GACD;IACE,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,EAAE,gBAAgB,CAAC;IAChC,gBAAgB,EAAE,CAAC,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,CACJ,CAAC;AAEJ,MAAM,MAAM,4BAA4B,GACpC,oCAAoC,GACpC,wCAAwC,GACxC,6BAA6B,CAAC;AAElC,UAAU,mCAAmC,CAAC,KAAK,SAAS,qBAAqB,GAAG,qBAAqB;IACvG,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,+BAA+B,GACvC,CAAC,mCAAmC,CAAC,gCAAgC,CAAC,GAAG;IACvE,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC,GACF,CAAC,mCAAmC,GAAG;IACrC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AAEP,KAAK,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AACvG,KAAK,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;AACvG,KAAK,mCAAmC,GAAG,2BAA2B,GAAG,CAAC,4BAA4B,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAC9H,KAAK,wCAAwC,GAAG,OAAO,CAAC,+BAA+B,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEvH,UAAU,+BAA+B,CACvC,UAAU,SAAS,4BAA4B,GAAG,4BAA4B,EAC9E,KAAK,SAAS,+BAA+B,GAAG,+BAA+B,EAC/E,KAAK,SAAS,qBAAqB,GAAG,qBAAqB;IAE3D,QAAQ,EAAE,uBAAuB,CAAC;IAClC,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,2BAA2B,GACnC,CAAC,+BAA+B,CAC9B,mCAAmC,EACnC,wCAAwC,EACxC,gCAAgC,CACjC,GAAG;IACF,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC,GACF,CAAC,+BAA+B,GAAG;IACjC,UAAU,EAAE,2BAA2B,CAAC;IACxC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AA8HP,6FAA6F;AAC7F,eAAO,MAAM,6BAA6B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,2BAgCvE,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAO4B,CAAC;AAElG,8EAA8E;AAC9E,eAAO,MAAM,qCAAqC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,wBAAwB,GAAG;IAAE,sBAAsB,EAAE,MAAM,CAAA;CAC1D,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GAAI,MAAM,sBAAsB,EAAE,OAAO,sBAAsB,KAAG,0BAW3G,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,CAAC;AAE/F;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,GACjD,MAAM,sBAAsB,EAC5B,OAAO,sBAAsB,KAC5B,mCAkBF,CAAC"}

package/dist/common/artifactEvidence.js

@@ -0,0 +1,207 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareEpochFreeArtifactRevisionVector = exports.compareArtifactRevisionVector = exports.isEnforceableArtifactOwnershipBinding = exports.isArtifactOwnershipBinding = exports.isArtifactPublicationDecision = void 0;
+const artifactEvidenceValidation_js_1 = require("./artifactEvidenceValidation.js");
+const SUPPORT_VERDICTS = new Set(['supported', 'unsupported', 'unknown']);
+const APPLICABILITY_VERDICTS = new Set(['applicable', 'not-applicable', 'unknown']);
+const ATTEMPT_OUTCOMES = new Set([
+    'not-attempted',
+    'queued',
+    'running',
+    'succeeded',
+    'failed',
+    'cancelled',
+    'timed-out',
+    'dead-lettered',
+    'superseded',
+]);
+const COVERAGE_VERDICTS = new Set(['complete', 'partial', 'none', 'unknown']);
+const EMPTY_EVIDENCE_VERDICTS = new Set(['populated', 'complete-empty', 'not-observed', 'unknown']);
+const FRESHNESS_VERDICTS = new Set(['current', 'stale', 'expired', 'unknown']);
+const EVIDENCE_VERDICTS = new Set(['complete', 'partial', 'insufficient', 'conflicting']);
+const PROCESSING_LIFECYCLES = new Set(['queued', 'running', 'succeeded', 'failed', 'cancelled', 'timed-out', 'dead-lettered', 'superseded']);
+const PUBLICATION_VERDICTS = new Set(['completed', 'partial', 'suppressed', 'superseded', 'quarantined']);
+const PROVIDERS = new Set(['azure', 'aws']);
+const DATE_BASES = new Set(['utc', 'billing-calendar', 'company-local']);
+const SHA256_PATTERN = /^[a-f0-9]{64}$/;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isNonEmptyString = (value) => typeof value === 'string' && value.trim().length > 0;
+const isNonNegativeInteger = (value) => Number.isInteger(value) && value >= 0;
+const isPositiveInteger = (value) => Number.isInteger(value) && value > 0;
+const isStringIn = (value, values) => typeof value === 'string' && values.has(value);
+const isCanonicalIsoTimestamp = (value) => {
+    if (!isNonEmptyString(value))
+        return false;
+    const timestamp = Date.parse(value);
+    return Number.isFinite(timestamp) && new Date(timestamp).toISOString() === value;
+};
+const isArtifactDecisionIssue = (value) => isRecord(value) &&
+    isNonEmptyString(value.code) &&
+    typeof value.blocking === 'boolean' &&
+    (value.dependency === undefined || isNonEmptyString(value.dependency));
+const isObservedRange = (value) => {
+    if (!isRecord(value) ||
+        !isCanonicalIsoTimestamp(value.fromInclusive) ||
+        !isCanonicalIsoTimestamp(value.throughExclusive) ||
+        Date.parse(value.throughExclusive) <= Date.parse(value.fromInclusive) ||
+        !isStringIn(value.dateBasis, DATE_BASES)) {
+        return false;
+    }
+    return value.timeZone === undefined || isNonEmptyString(value.timeZone);
+};
+const isArtifactDependencyDescriptor = (value) => {
+    if (!isRecord(value) ||
+        !isNonEmptyString(value.name) ||
+        typeof value.required !== 'boolean' ||
+        !isStringIn(value.support, SUPPORT_VERDICTS) ||
+        !isStringIn(value.applicability, APPLICABILITY_VERDICTS) ||
+        !isStringIn(value.attempt, ATTEMPT_OUTCOMES) ||
+        !isStringIn(value.coverage, COVERAGE_VERDICTS) ||
+        !isStringIn(value.emptyEvidence, EMPTY_EVIDENCE_VERDICTS) ||
+        !isStringIn(value.freshness, FRESHNESS_VERDICTS) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS)) {
+        return false;
+    }
+    if (value.generationId !== undefined && !isNonEmptyString(value.generationId))
+        return false;
+    if (value.digest !== undefined && (typeof value.digest !== 'string' || !SHA256_PATTERN.test(value.digest)))
+        return false;
+    if (!(0, artifactEvidenceValidation_js_1.hasValidOptionalArtifactRevisionComponents)(value))
+        return false;
+    if (value.observedRange !== undefined && !isObservedRange(value.observedRange))
+        return false;
+    if (value.completeThrough !== undefined && !isCanonicalIsoTimestamp(value.completeThrough))
+        return false;
+    if (value.reasonCode !== undefined && !isNonEmptyString(value.reasonCode))
+        return false;
+    if (value.acceptedRowCount !== undefined && !isNonNegativeInteger(value.acceptedRowCount))
+        return false;
+    if (value.emptyEvidence === 'complete-empty') {
+        if (value.attempt !== 'succeeded' ||
+            value.coverage !== 'complete' ||
+            value.acceptedRowCount !== 0 ||
+            !(0, artifactEvidenceValidation_js_1.isStrictLogicalArtifactReference)(value.emptyProofRef)) {
+            return false;
+        }
+    }
+    else if (value.emptyProofRef !== undefined) {
+        return false;
+    }
+    if (value.publication === 'completed') {
+        return (value.support === 'supported' &&
+            value.applicability === 'applicable' &&
+            value.attempt === 'succeeded' &&
+            value.coverage === 'complete' &&
+            (value.emptyEvidence === 'populated' || value.emptyEvidence === 'complete-empty') &&
+            value.evidence === 'complete');
+    }
+    return true;
+};
+const isArtifactClaimDependencyDecision = (value) => {
+    if (!isRecord(value) ||
+        !isNonEmptyString(value.claimId) ||
+        !Array.isArray(value.sectionPaths) ||
+        !value.sectionPaths.every(isNonEmptyString) ||
+        !Array.isArray(value.requiredDependencies) ||
+        !value.requiredDependencies.every(isNonEmptyString) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS) ||
+        !Array.isArray(value.issues) ||
+        !value.issues.every(isArtifactDecisionIssue)) {
+        return false;
+    }
+    return value.publication !== 'completed' || (value.evidence === 'complete' && !value.issues.some(issue => issue.blocking));
+};
+const hasUniqueValues = (values) => new Set(values).size === values.length;
+/** Dependency-free runtime rejection boundary for provider-neutral publication decisions. */
+const isArtifactPublicationDecision = (value) => {
+    if (!isRecord(value) ||
+        !isStringIn(value.processing, PROCESSING_LIFECYCLES) ||
+        !isStringIn(value.evidence, EVIDENCE_VERDICTS) ||
+        !isStringIn(value.publication, PUBLICATION_VERDICTS) ||
+        !Array.isArray(value.dependencies) ||
+        !value.dependencies.every(isArtifactDependencyDescriptor) ||
+        !Array.isArray(value.claims) ||
+        !value.claims.every(isArtifactClaimDependencyDecision) ||
+        !Array.isArray(value.issues) ||
+        !value.issues.every(isArtifactDecisionIssue)) {
+        return false;
+    }
+    const dependencyNames = value.dependencies.map(dependency => dependency.name);
+    const claimIds = value.claims.map(claim => claim.claimId);
+    if (!hasUniqueValues(dependencyNames) || !hasUniqueValues(claimIds))
+        return false;
+    if (!value.claims.every(claim => hasUniqueValues(claim.requiredDependencies)))
+        return false;
+    if (value.publication !== 'completed')
+        return true;
+    const completedDependencies = new Set(value.dependencies.filter(dependency => dependency.publication === 'completed').map(dependency => dependency.name));
+    return (value.processing === 'succeeded' &&
+        (value.evidence === 'complete' || value.evidence === 'partial') &&
+        value.dependencies.every(dependency => !dependency.required || dependency.publication === 'completed') &&
+        value.claims.every(claim => claim.publication === 'completed' && claim.requiredDependencies.every(dependency => completedDependencies.has(dependency))) &&
+        !value.issues.some(issue => issue.blocking));
+};
+exports.isArtifactPublicationDecision = isArtifactPublicationDecision;
+/** Checks the provider-neutral ownership shape used by observe- and enforce-mode artifacts. */
+const isArtifactOwnershipBinding = (value) => isRecord(value) &&
+    isStringIn(value.provider, PROVIDERS) &&
+    isNonEmptyString(value.tenantId) &&
+    isNonEmptyString(value.companyId) &&
+    isNonEmptyString(value.cloudAccountId) &&
+    isNonEmptyString(value.accountId) &&
+    (value.ownershipEpochRevision === undefined || isPositiveInteger(value.ownershipEpochRevision));
+exports.isArtifactOwnershipBinding = isArtifactOwnershipBinding;
+/** Checks that an ownership binding is valid for enforce-mode publication. */
+const isEnforceableArtifactOwnershipBinding = (value) => (0, exports.isArtifactOwnershipBinding)(value) && value.ownershipEpochRevision !== undefined;
+exports.isEnforceableArtifactOwnershipBinding = isEnforceableArtifactOwnershipBinding;
+/**
+ * Compares ownership first, then source and policy revisions component-wise.
+ * Callers must validate both vectors before comparison; this function deliberately compares the supplied values without adding a second validation policy.
+ */
+const compareArtifactRevisionVector = (left, right) => {
+    if (left.ownershipEpochRevision === undefined || right.ownershipEpochRevision === undefined)
+        return 'unenforceable';
+    if (left.ownershipEpochRevision > right.ownershipEpochRevision)
+        return 'newer-ownership';
+    if (left.ownershipEpochRevision < right.ownershipEpochRevision)
+        return 'older-ownership';
+    const sourceComparison = Math.sign(left.sourceRevision - right.sourceRevision);
+    const policyComparison = Math.sign(left.policyRevision - right.policyRevision);
+    if (sourceComparison === 0 && policyComparison === 0)
+        return 'equal';
+    if (sourceComparison >= 0 && policyComparison >= 0)
+        return 'newer';
+    if (sourceComparison <= 0 && policyComparison <= 0)
+        return 'older';
+    return 'incomparable';
+};
+exports.compareArtifactRevisionVector = compareArtifactRevisionVector;
+/**
+ * Compares latest epoch-free authority revisions under a fixed policy revision.
+ * A policy mismatch is intentionally incomparable so a policy rollout cannot
+ * silently reuse source ordering without a separate contract decision.
+ */
+const compareEpochFreeArtifactRevisionVector = (left, right) => {
+    if (left.ownershipEpochRevision !== undefined || right.ownershipEpochRevision !== undefined)
+        return 'incomparable';
+    if (!Number.isSafeInteger(left.sourceRevision) ||
+        left.sourceRevision < 1 ||
+        !Number.isSafeInteger(right.sourceRevision) ||
+        right.sourceRevision < 1 ||
+        !Number.isSafeInteger(left.policyRevision) ||
+        left.policyRevision < 1 ||
+        !Number.isSafeInteger(right.policyRevision) ||
+        right.policyRevision < 1 ||
+        left.policyRevision !== right.policyRevision) {
+        return 'incomparable';
+    }
+    if (left.sourceRevision > right.sourceRevision)
+        return 'newer';
+    if (left.sourceRevision < right.sourceRevision)
+        return 'older';
+    return 'equal';
+};
+exports.compareEpochFreeArtifactRevisionVector = compareEpochFreeArtifactRevisionVector;
+//# sourceMappingURL=artifactEvidence.js.map

package/dist/common/artifactEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidence.js","sourceRoot":"","sources":["../../src/common/artifactEvidence.ts"],"names":[],"mappings":";;;AACA,mFAA+H;AA+K/H,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAClF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,eAAe;IACf,QAAQ;IACR,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;IACX,WAAW;IACX,eAAe;IACf,YAAY;CACb,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACtF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5G,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACvF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAClG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AACrJ,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAClH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;AACjF,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5I,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACnH,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC;AACpH,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC;AAChH,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,MAAmB,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE5H,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAmB,EAAE;IAClE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACnF,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAkC,EAAE,CACjF,QAAQ,CAAC,KAAK,CAAC;IACf,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;IACnC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAEzE,MAAM,eAAe,GAAG,CAAC,KAAc,EAAkC,EAAE;IACzE,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC;QAC7C,CAAC,uBAAuB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QACrE,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,EACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,KAAc,EAAyC,EAAE;IAC/F,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;QACnC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAC5C,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,sBAAsB,CAAC;QACxD,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAC5C,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC;QACzD,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAChD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC,EACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzH,IAAI,CAAC,IAAA,0EAA0C,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACzG,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAExG,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;QAC7C,IACE,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,QAAQ,KAAK,UAAU;YAC7B,KAAK,CAAC,gBAAgB,KAAK,CAAC;YAC5B,CAAC,IAAA,gEAAgC,EAAC,KAAK,CAAC,aAAa,CAAC,EACtD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,CACL,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,aAAa,KAAK,YAAY;YACpC,KAAK,CAAC,OAAO,KAAK,WAAW;YAC7B,KAAK,CAAC,QAAQ,KAAK,UAAU;YAC7B,CAAC,KAAK,CAAC,aAAa,KAAK,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,gBAAgB,CAAC;YACjF,KAAK,CAAC,QAAQ,KAAK,UAAU,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CAAC,KAAc,EAA4C,EAAE;IACrG,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC1C,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACnD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7H,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAgB,EAAW,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC;AAE9F,6FAA6F;AACtF,MAAM,6BAA6B,GAAG,CAAC,KAAc,EAAwC,EAAE;IACpG,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC;QACpD,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QAC9C,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,8BAA8B,CAAC;QACzD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC;QACtD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACnH,CAAC;IACF,OAAO,CACL,KAAK,CAAC,UAAU,KAAK,WAAW;QAChC,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC/D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;QACtG,KAAK,CAAC,MAAM,CAAC,KAAK,CAChB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACpI;QACD,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC;AAhCW,QAAA,6BAA6B,iCAgCxC;AAEF,+FAA+F;AACxF,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAqC,EAAE,CAC9F,QAAQ,CAAC,KAAK,CAAC;IACf,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;IACrC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;IAChC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;IACjC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC;IACtC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;IACjC,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAPrF,QAAA,0BAA0B,8BAO2D;AAElG,8EAA8E;AACvE,MAAM,qCAAqC,GAAG,CAAC,KAAc,EAA0E,EAAE,CAC9I,IAAA,kCAA0B,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,CAAC;AADrE,QAAA,qCAAqC,yCACgC;AAElF;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,IAA4B,EAAE,KAA6B,EAA8B,EAAE;IACvI,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACpH,IAAI,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB;QAAE,OAAO,iBAAiB,CAAC;IACzF,IAAI,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB;QAAE,OAAO,iBAAiB,CAAC;IAEzF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E,IAAI,gBAAgB,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrE,IAAI,gBAAgB,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACnE,IAAI,gBAAgB,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACnE,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAXW,QAAA,6BAA6B,iCAWxC;AAIF;;;;GAIG;AACI,MAAM,sCAAsC,GAAG,CACpD,IAA4B,EAC5B,KAA6B,EACQ,EAAE;IACvC,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IACnH,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,CAAC;QACvB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,KAAK,CAAC,cAAc,GAAG,CAAC;QACxB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,CAAC;QACvB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,KAAK,CAAC,cAAc,GAAG,CAAC;QACxB,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAC5C,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAC/D,IAAI,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AArBW,QAAA,sCAAsC,0CAqBjD"}

package/dist/common/artifactEvidenceValidation.d.ts

@@ -0,0 +1,16 @@
+/** Validates a generation-relative logical artifact reference without accepting physical-path encodings. */
+export declare const isStrictLogicalArtifactReference: (value: unknown) => value is string;
+interface RuntimeArtifactRevisionVector {
+    ownershipEpochRevision?: number;
+    sourceRevision: number;
+    policyRevision: number;
+}
+/** Validates the positive source/policy revision vector shared by evidence producers and consumers. */
+export declare const isArtifactRevisionVector: (value: unknown) => value is RuntimeArtifactRevisionVector;
+/** Validates optional dependency revision components using the shared revision-vector rules. */
+export declare const hasValidOptionalArtifactRevisionComponents: (value: {
+    sourceRevision?: unknown;
+    policyRevision?: unknown;
+}) => boolean;
+export {};
+//# sourceMappingURL=artifactEvidenceValidation.d.ts.map

package/dist/common/artifactEvidenceValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidenceValidation.d.ts","sourceRoot":"","sources":["../../src/common/artifactEvidenceValidation.ts"],"names":[],"mappings":"AAGA,4GAA4G;AAC5G,eAAO,MAAM,gCAAgC,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAM1E,CAAC;AAEF,UAAU,6BAA6B;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,6BAIkC,CAAC;AAEtG,gGAAgG;AAChG,eAAO,MAAM,0CAA0C,GAAI,OAAO;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,KAAG,OAIvH,CAAC"}

package/dist/common/artifactEvidenceValidation.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasValidOptionalArtifactRevisionComponents = exports.isArtifactRevisionVector = exports.isStrictLogicalArtifactReference = void 0;
+const hasControlCharacters = (value) => Array.from(value).some(character => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
+/** Validates a generation-relative logical artifact reference without accepting physical-path encodings. */
+const isStrictLogicalArtifactReference = (value) => {
+    if (typeof value !== 'string' || value.trim() !== value || value.length === 0 || hasControlCharacters(value))
+        return false;
+    if (value.startsWith('/') || value.includes('\\') || value.includes('%') || value.includes('?') || value.includes('#'))
+        return false;
+    if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value) || /^[A-Za-z]:[\\/]/.test(value))
+        return false;
+    const segments = value.split('/');
+    return segments.length >= 2 && segments.every(segment => segment.length > 0 && segment !== '.' && segment !== '..');
+};
+exports.isStrictLogicalArtifactReference = isStrictLogicalArtifactReference;
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isPositiveSafeInteger = (value) => Number.isSafeInteger(value) && Number(value) > 0;
+/** Validates the positive source/policy revision vector shared by evidence producers and consumers. */
+const isArtifactRevisionVector = (value) => isRecord(value) &&
+    isPositiveSafeInteger(value.sourceRevision) &&
+    isPositiveSafeInteger(value.policyRevision) &&
+    (value.ownershipEpochRevision === undefined || isPositiveSafeInteger(value.ownershipEpochRevision));
+exports.isArtifactRevisionVector = isArtifactRevisionVector;
+/** Validates optional dependency revision components using the shared revision-vector rules. */
+const hasValidOptionalArtifactRevisionComponents = (value) => (0, exports.isArtifactRevisionVector)({
+    sourceRevision: value.sourceRevision === undefined ? 1 : value.sourceRevision,
+    policyRevision: value.policyRevision === undefined ? 1 : value.policyRevision,
+});
+exports.hasValidOptionalArtifactRevisionComponents = hasValidOptionalArtifactRevisionComponents;
+//# sourceMappingURL=artifactEvidenceValidation.js.map

package/dist/common/artifactEvidenceValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactEvidenceValidation.js","sourceRoot":"","sources":["../../src/common/artifactEvidenceValidation.ts"],"names":[],"mappings":";;;AAAA,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAEvG,4GAA4G;AACrG,MAAM,gCAAgC,GAAG,CAAC,KAAc,EAAmB,EAAE;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3H,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrI,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACtH,CAAC,CAAC;AANW,QAAA,gCAAgC,oCAM3C;AAQF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5I,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAEpH,uGAAuG;AAChG,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAA0C,EAAE,CACjG,QAAQ,CAAC,KAAK,CAAC;IACf,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3C,qBAAqB,CAAC,KAAK,CAAC,cAAc,CAAC;IAC3C,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAJzF,QAAA,wBAAwB,4BAIiE;AAEtG,gGAAgG;AACzF,MAAM,0CAA0C,GAAG,CAAC,KAA6D,EAAW,EAAE,CACnI,IAAA,gCAAwB,EAAC;IACvB,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;IAC7E,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc;CAC9E,CAAC,CAAC;AAJQ,QAAA,0CAA0C,8CAIlD"}

package/dist/common/artifactGeneration.d.ts

@@ -0,0 +1,93 @@
+import type { ArtifactEvidenceVerdict } from './artifactEvidence.js';
+export declare const ARTIFACT_GENERATION_SCHEMA_VERSION: 1;
+export type ArtifactGenerationSchemaVersion = typeof ARTIFACT_GENERATION_SCHEMA_VERSION;
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
+export type JsonObject = {
+    [key: string]: JsonValue;
+};
+export type ArtifactProvider = 'azure' | 'aws';
+/** Provider-neutral identity shared by immutable Portal and plugin runs. */
+export interface ArtifactGeneration<RunId extends string = string> {
+    runId: RunId;
+    generatedAt: string;
+}
+export interface ArtifactAccountBinding<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string> {
+    provider: Provider;
+    accountId: AccountId;
+}
+export type ArtifactSourceGenerationStatus = 'available' | 'partial' | 'missing' | 'stale' | 'unavailable';
+type ArtifactSourceGenerationBase<Provider extends ArtifactProvider, AccountId extends string> = ArtifactAccountBinding<Provider, AccountId> & {
+    source: string;
+};
+export type ArtifactSourceGeneration<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string> = (ArtifactSourceGenerationBase<Provider, AccountId> & {
+    status: 'available';
+    generationId: string;
+    generatedAt: string;
+    reason?: never;
+}) | (ArtifactSourceGenerationBase<Provider, AccountId> & {
+    status: 'partial' | 'stale';
+    generationId: string;
+    generatedAt: string;
+    reason: string;
+}) | (ArtifactSourceGenerationBase<Provider, AccountId> & {
+    status: 'missing' | 'unavailable';
+    generationId?: never;
+    generatedAt?: never;
+    reason: string;
+});
+export type AvailableArtifactSourceGeneration<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string> = Extract<ArtifactSourceGeneration<Provider, AccountId>, {
+    status: 'available';
+}>;
+export type DegradedArtifactSourceGeneration<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string> = Exclude<ArtifactSourceGeneration<Provider, AccountId>, AvailableArtifactSourceGeneration<Provider, AccountId>>;
+export type ArtifactContentEncoding = 'identity' | 'gzip';
+/** Logical artifact metadata; storage paths remain application-owned. */
+export interface ArtifactDescriptor {
+    name: string;
+    mediaType: 'application/json';
+    contentEncoding: ArtifactContentEncoding;
+    byteLength: number;
+    sha256: string;
+}
+export type ArtifactEvidenceIssueStatus = 'partial' | 'missing' | 'stale' | 'unavailable';
+type ArtifactManifestEvidenceVerdict = Extract<ArtifactEvidenceVerdict, 'complete' | 'partial'>;
+export interface ArtifactEvidenceIssue {
+    source: string;
+    status: ArtifactEvidenceIssueStatus;
+    reason: string;
+}
+export type ArtifactManifestEvidence = {
+    status: Extract<ArtifactManifestEvidenceVerdict, 'complete'>;
+    issues: [];
+} | {
+    status: Extract<ArtifactManifestEvidenceVerdict, 'partial'>;
+    issues: [ArtifactEvidenceIssue, ...ArtifactEvidenceIssue[]];
+};
+type ArtifactGenerationManifestBase<Provider extends ArtifactProvider, AccountId extends string, RunId extends string> = ArtifactAccountBinding<Provider, AccountId> & {
+    schemaVersion: ArtifactGenerationSchemaVersion;
+    artifactGeneration: ArtifactGeneration<RunId>;
+    artifacts: [ArtifactDescriptor, ...ArtifactDescriptor[]];
+};
+export type ArtifactGenerationManifest<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string, RunId extends string = string> = ArtifactGenerationManifestBase<Provider, AccountId, RunId> & ({
+    status: 'completed';
+    sourceGenerations: [AvailableArtifactSourceGeneration<Provider, AccountId>, ...AvailableArtifactSourceGeneration<Provider, AccountId>[]];
+    evidence: Extract<ArtifactManifestEvidence, {
+        status: 'complete';
+    }>;
+} | {
+    status: 'partial';
+    sourceGenerations: [ArtifactSourceGeneration<Provider, AccountId>, ...ArtifactSourceGeneration<Provider, AccountId>[]];
+    evidence: Extract<ArtifactManifestEvidence, {
+        status: 'partial';
+    }>;
+});
+/** The sole visibility commit for one fully written immutable generation. */
+export interface CompletedArtifactGenerationPointer<Provider extends ArtifactProvider = ArtifactProvider, AccountId extends string = string, RunId extends string = string> extends ArtifactAccountBinding<Provider, AccountId> {
+    schemaVersion: ArtifactGenerationSchemaVersion;
+    status: 'completed';
+    artifactGeneration: ArtifactGeneration<RunId>;
+    manifest: ArtifactDescriptor;
+    completedAt: string;
+}
+export {};
+//# sourceMappingURL=artifactGeneration.d.ts.map

package/dist/common/artifactGeneration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactGeneration.d.ts","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,MAAM,MAAM,+BAA+B,GAAG,OAAO,kCAAkC,CAAC;AAExF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AAEjE,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM;IAC/D,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM;IAC7H,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,MAAM,8BAA8B,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3G,KAAK,4BAA4B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,IAAI,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IAC7I,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IACxH,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACF,CAAC,4BAA4B,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG;IACnD,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;IAClC,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEP,MAAM,MAAM,iCAAiC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CACxB,CAAC;AAEF,MAAM,MAAM,gCAAgC,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EAAE,SAAS,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CAC7I,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC7C,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1D,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,kBAAkB,CAAC;IAC9B,eAAe,EAAE,uBAAuB,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAE1F,KAAK,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;AAEhG,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,MAAM,EAAE,OAAO,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,EAAE,EAAE,CAAC;CACZ,GACD;IACE,MAAM,EAAE,OAAO,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;CAC7D,CAAC;AAEN,KAAK,8BAA8B,CAAC,QAAQ,SAAS,gBAAgB,EAAE,SAAS,SAAS,MAAM,EAAE,KAAK,SAAS,MAAM,IAAI,sBAAsB,CAC7I,QAAQ,EACR,SAAS,CACV,GAAG;IACF,aAAa,EAAE,+BAA+B,CAAC;IAC/C,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,SAAS,EAAE,CAAC,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,0BAA0B,CACpC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,IAC3B,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,GAC5D,CACI;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,iCAAiC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACzI,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACrE,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACvH,QAAQ,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CACpE,CACJ,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,WAAW,kCAAkC,CACjD,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,EACpD,SAAS,SAAS,MAAM,GAAG,MAAM,EACjC,KAAK,SAAS,MAAM,GAAG,MAAM,CAC7B,SAAQ,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC;IACnD,aAAa,EAAE,+BAA+B,CAAC;IAC/C,MAAM,EAAE,WAAW,CAAC;IACpB,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/common/artifactGeneration.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ARTIFACT_GENERATION_SCHEMA_VERSION = void 0;
+exports.ARTIFACT_GENERATION_SCHEMA_VERSION = 1;
+//# sourceMappingURL=artifactGeneration.js.map

package/dist/common/artifactGeneration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifactGeneration.js","sourceRoot":"","sources":["../../src/common/artifactGeneration.ts"],"names":[],"mappings":";;;AAEa,QAAA,kCAAkC,GAAG,CAAU,CAAC"}

package/dist/common/capabilityPassport.d.ts

@@ -0,0 +1,114 @@
+import type { ArtifactProvider } from './artifactGeneration.js';
+import { type ArtifactEmptyEvidenceVerdict, type ArtifactFreshnessVerdict, type ArtifactOwnershipBinding } from './artifactEvidence.js';
+export declare const CAPABILITY_PASSPORT_SCHEMA_VERSION: 1;
+export type CapabilityPassportSchemaVersion = typeof CAPABILITY_PASSPORT_SCHEMA_VERSION;
+export declare const CAPABILITY_REASON_CODES: readonly ["not-requested", "permission-denied", "not-found", "throttled", "timeout", "pagination-incomplete", "source-partial", "source-empty", "source-unsupported", "retained-last-known-good", "currency-unresolved", "unknown"];
+export type CapabilityReasonCode = (typeof CAPABILITY_REASON_CODES)[number];
+type CapabilityScopeBase<Provider extends ArtifactProvider = ArtifactProvider> = {
+    provider: Provider;
+    tenantId: string;
+};
+export type CapabilityScopeBinding<Provider extends ArtifactProvider = ArtifactProvider> = (CapabilityScopeBase<Provider> & {
+    kind: 'tenant';
+}) | (CapabilityScopeBase<Provider> & {
+    kind: 'billing-account';
+    billingAccountId: string;
+}) | (CapabilityScopeBase<Provider> & {
+    kind: 'customer';
+    customerId: string;
+}) | (CapabilityScopeBase<Provider> & {
+    kind: 'subscription';
+    subscriptionId: string;
+}) | (CapabilityScopeBase<Provider> & {
+    kind: 'resource';
+    subscriptionId: string;
+    normalizedResourceId: string;
+});
+export interface ImmutableSourceGeneration {
+    artifactRef: string;
+    generationId: string;
+    sha256: string;
+    schemaVersion: number;
+    producedAt: string;
+    completeThrough?: string;
+}
+export type CapabilityAttempt = {
+    status: 'not-attempted';
+    reasonCode: CapabilityReasonCode;
+} | {
+    status: 'attempted';
+    startedAt: string;
+    completedAt: string;
+    outcome: 'succeeded' | 'failed' | 'partial';
+    reasonCodes: CapabilityReasonCode[];
+};
+export type CapabilityFreshness = {
+    status: Extract<ArtifactFreshnessVerdict, 'current'>;
+    observedAt: string;
+    completeThrough?: string;
+} | {
+    status: Extract<ArtifactFreshnessVerdict, 'stale'>;
+    observedAt: string;
+    completeThrough?: string;
+    maximumAge: string;
+} | {
+    status: Extract<ArtifactFreshnessVerdict, 'unknown'>;
+};
+export interface CapabilityObservation<Provider extends ArtifactProvider = ArtifactProvider> {
+    observationId: string;
+    capability: string;
+    scope: CapabilityScopeBinding<Provider>;
+    attempt: CapabilityAttempt;
+    providerSurfaceOutcome: 'accepted' | 'authoritatively-unsupported' | 'unknown';
+    availability: 'available' | 'partial' | 'missing' | 'unavailable' | 'unknown';
+    emptyEvidence: ArtifactEmptyEvidenceVerdict;
+    freshness: CapabilityFreshness;
+    sourceGeneration?: ImmutableSourceGeneration;
+    coverageRef?: string;
+    limits?: {
+        expectedPages?: number;
+        receivedPages?: number;
+        throttled?: boolean;
+        retainedLastKnownGood?: boolean;
+    };
+}
+export type CapabilityObservationSet<Provider extends ArtifactProvider = ArtifactProvider> = {
+    mode: 'inline';
+    totalCount: number;
+    items: CapabilityObservation<Provider>[];
+} | {
+    mode: 'sharded';
+    totalCount: number;
+    shardCount: number;
+    indexRef: string;
+    shards: Array<{
+        artifactRef: string;
+        sha256: string;
+        itemCount: number;
+    }>;
+};
+export type CapabilityAgreementType = 'EA' | 'MCA' | 'CSP' | 'PAYG-MOSP' | 'sponsored-trial' | 'unknown';
+export interface CapabilityPassport<Provider extends ArtifactProvider = ArtifactProvider> {
+    schemaVersion: CapabilityPassportSchemaVersion;
+    passportId: string;
+    generatedAt: string;
+    runId: string;
+    ownership: ArtifactOwnershipBinding<Provider> & {
+        subscriptionId: string;
+    };
+    agreementObservation: {
+        type: CapabilityAgreementType;
+        source: 'observed' | 'configured' | 'unknown';
+        sourceGeneration?: ImmutableSourceGeneration;
+    };
+    observations: CapabilityObservationSet<Provider>;
+    producerVersions: Record<string, string>;
+    issues: Array<{
+        reasonCode: CapabilityReasonCode;
+        observationId?: string;
+    }>;
+}
+/** Dependency-free runtime rejection boundary for Capability Passport schema v1. */
+export declare const isCapabilityPassport: (value: unknown) => value is CapabilityPassport;
+export {};
+//# sourceMappingURL=capabilityPassport.d.ts.map

package/dist/common/capabilityPassport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityPassport.d.ts","sourceRoot":"","sources":["../../src/common/capabilityPassport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,MAAM,MAAM,+BAA+B,GAAG,OAAO,kCAAkC,CAAC;AAExF,eAAO,MAAM,uBAAuB,qOAa1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,KAAK,mBAAmB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,IAAI;IAC/E,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,IACnF,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GACpD,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC,GACvF,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,GAClF,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEP,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC7D;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5C,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GACtG;IAAE,MAAM,EAAE,OAAO,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxH;IAAE,MAAM,EAAE,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,qBAAqB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IACzF,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,sBAAsB,EAAE,UAAU,GAAG,6BAA6B,GAAG,SAAS,CAAC;IAC/E,YAAY,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAC9E,aAAa,EAAE,4BAA4B,CAAC;IAC5C,SAAS,EAAE,mBAAmB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QACP,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC;CACH;AAED,MAAM,MAAM,wBAAwB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB,IACrF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAA;CAAE,GAChF;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3E,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEzG,MAAM,WAAW,kBAAkB,CAAC,QAAQ,SAAS,gBAAgB,GAAG,gBAAgB;IACtF,aAAa,EAAE,+BAA+B,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,wBAAwB,CAAC,QAAQ,CAAC,GAAG;QAC9C,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,oBAAoB,EAAE;QACpB,IAAI,EAAE,uBAAuB,CAAC;QAC9B,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;QAC9C,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;KAC9C,CAAC;IACF,YAAY,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACjD,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,oBAAoB,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E;AAuJD,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,kBAqC9D,CAAC"}