@xemahq/contracts 0.1.0

package/dist/disclosure/lib/disclosure-horizon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure-horizon.js","sourceRoot":"","sources":["../../../src/disclosure/lib/disclosure-horizon.ts"],"names":[],"mappings":";;;AAoHA,kCAUC;AAUD,4CAMC;AAiBD,sCAaC;AA5KD,6BAAwB;AAqDX,QAAA,uBAAuB,GAAiC,OAAC;KACnE,MAAM,CAAC;IACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAcZ,MAAa,+BAAgC,SAAQ,KAAK;IAE7C;IACA;IAFX,YACW,IAAY,EACZ,KAAa;QAEtB,KAAK,CACH,kDAAkD,IAAI,SAAS,KAAK,KAAK;YACvE,wEAAwE;YACxE,uEAAuE,CAC1E,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QAOtB,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAZD,0EAYC;AAgCD,SAAgB,WAAW,CACzB,CAAgC,EAChC,CAAgC;IAEhC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,+BAA+B,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAUD,SAAgB,gBAAgB,CAC9B,MAAkD;IAElD,IAAI,GAAkC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD,SAAgB,aAAa,CAC3B,IAAmC,EACnC,MAAqC;IAErC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,+BAA+B,CACvC,IAAI,CAAC,WAAW,EAChB,MAAM,CAAC,WAAW,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;AAC1C,CAAC"}

package/dist/distribution/index.d.ts

@@ -0,0 +1,14 @@
+export * from './lib/install-policy';
+export * from './lib/distribution-selector';
+export * from './lib/runtime-image-platform';
+export * from './lib/distribution';
+export * from './lib/distribution-lock';
+export * from './lib/image-lock';
+export * from './lib/image-producer-evidence';
+export * from './lib/kernel-contract-authority';
+export * from './lib/platform-service-source-index';
+export * from './lib/runtime-image-source-index';
+export * from './lib/first-party-capability-domains';
+export * from './lib/distribution-ownership';
+export * from './lib/biome-source';
+//# sourceMappingURL=index.d.ts.map

package/dist/distribution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC"}

package/dist/distribution/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/install-policy"), exports);
+__exportStar(require("./lib/distribution-selector"), exports);
+__exportStar(require("./lib/runtime-image-platform"), exports);
+__exportStar(require("./lib/distribution"), exports);
+__exportStar(require("./lib/distribution-lock"), exports);
+__exportStar(require("./lib/image-lock"), exports);
+__exportStar(require("./lib/image-producer-evidence"), exports);
+__exportStar(require("./lib/kernel-contract-authority"), exports);
+__exportStar(require("./lib/platform-service-source-index"), exports);
+__exportStar(require("./lib/runtime-image-source-index"), exports);
+__exportStar(require("./lib/first-party-capability-domains"), exports);
+__exportStar(require("./lib/distribution-ownership"), exports);
+__exportStar(require("./lib/biome-source"), exports);
+//# sourceMappingURL=index.js.map

package/dist/distribution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC"}

package/dist/distribution/lib/biome-source.d.ts

@@ -0,0 +1,148 @@
+import { z } from 'zod';
+export declare enum BiomeSourceKind {
+    Workspace = "workspace",
+    Distribution = "distribution",
+    Npm = "npm",
+    Oci = "oci",
+    Git = "git"
+}
+export declare const BiomeSourceKindSchema: z.ZodEnum<typeof BiomeSourceKind>;
+export declare const BiomeSourceNameSchema: z.ZodString;
+export declare const CredentialFreeHttpUrlSchema: z.ZodString;
+export declare const CredentialFreeGitUrlSchema: z.ZodString;
+export declare const CredentialFreeOciRegistrySchema: z.ZodString;
+export declare const WorkspaceBiomeSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceBiomeSource = z.infer<typeof WorkspaceBiomeSourceSchema>;
+export declare const DistributionBiomeSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type DistributionBiomeSource = z.infer<typeof DistributionBiomeSourceSchema>;
+export declare const NpmBiomeSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type NpmBiomeSource = z.infer<typeof NpmBiomeSourceSchema>;
+export declare const OciBiomeSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type OciBiomeSource = z.infer<typeof OciBiomeSourceSchema>;
+export declare const GitBiomeSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type GitBiomeSource = z.infer<typeof GitBiomeSourceSchema>;
+export declare const BiomeSourceSpecSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type BiomeSourceSpec = z.infer<typeof BiomeSourceSpecSchema>;
+export declare const BiomeSourcesConfigSchema: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Workspace>;
+    root: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Distribution>;
+    edition: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">>;
+export type BiomeSourcesConfig = z.infer<typeof BiomeSourcesConfigSchema>;
+export declare const DistributionSourceDeclarationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type DistributionSourceDeclaration = z.infer<typeof DistributionSourceDeclarationSchema>;
+export declare const DistributionSourcesSchema: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Oci>;
+    registry: z.ZodString;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<BiomeSourceKind.Npm>;
+    registryUrl: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>], "kind">>;
+//# sourceMappingURL=biome-source.d.ts.map

package/dist/distribution/lib/biome-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-source.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiDxB,oBAAY,eAAe;IAEzB,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,GAAG,QAAQ;IAEX,GAAG,QAAQ;IAEX,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,qBAAqB,mCAAgC,CAAC;AAOnE,eAAO,MAAM,qBAAqB,aAGuC,CAAC;AAqD1E,eAAO,MAAM,2BAA2B,aAGA,CAAC;AAEzC,eAAO,MAAM,0BAA0B,aAIC,CAAC;AAEzC,eAAO,MAAM,+BAA+B,aAGI,CAAC;AASjD,eAAO,MAAM,0BAA0B;;;;kBAM5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAU9E,eAAO,MAAM,6BAA6B;;;;;kBAO/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAMF,eAAO,MAAM,oBAAoB;;;;;;kBAWtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,oBAAoB;;;;;kBAOtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAalE,eAAO,MAAM,oBAAoB;;;;;;;kBAStB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAiC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;4BAG/C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAUF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;6BAclC,CAAC"}

package/dist/distribution/lib/biome-source.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DistributionSourcesSchema = exports.DistributionSourceDeclarationSchema = exports.BiomeSourcesConfigSchema = exports.BiomeSourceSpecSchema = exports.GitBiomeSourceSchema = exports.OciBiomeSourceSchema = exports.NpmBiomeSourceSchema = exports.DistributionBiomeSourceSchema = exports.WorkspaceBiomeSourceSchema = exports.CredentialFreeOciRegistrySchema = exports.CredentialFreeGitUrlSchema = exports.CredentialFreeHttpUrlSchema = exports.BiomeSourceNameSchema = exports.BiomeSourceKindSchema = exports.BiomeSourceKind = void 0;
+const zod_1 = require("zod");
+var BiomeSourceKind;
+(function (BiomeSourceKind) {
+    BiomeSourceKind["Workspace"] = "workspace";
+    BiomeSourceKind["Distribution"] = "distribution";
+    BiomeSourceKind["Npm"] = "npm";
+    BiomeSourceKind["Oci"] = "oci";
+    BiomeSourceKind["Git"] = "git";
+})(BiomeSourceKind || (exports.BiomeSourceKind = BiomeSourceKind = {}));
+exports.BiomeSourceKindSchema = zod_1.z.nativeEnum(BiomeSourceKind);
+exports.BiomeSourceNameSchema = zod_1.z
+    .string()
+    .min(1)
+    .regex(/^[a-z][a-z0-9-]*$/, 'source name must be lowercase kebab-case');
+const biomeSourceBase = {
+    name: exports.BiomeSourceNameSchema,
+};
+function refuseEmbeddedCredential(value, ctx) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return;
+    }
+    if (parsed.username.length > 0 ||
+        parsed.password.length > 0 ||
+        parsed.search.length > 0 ||
+        parsed.hash.length > 0) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'source URL must not contain userinfo, query parameters, or fragments; use authTokenEnv',
+        });
+    }
+}
+function refuseEmbeddedRegistryCredential(value, ctx) {
+    if (value.includes('?') || value.includes('#') || value.includes('@')) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: 'OCI registry must not contain userinfo, query parameters, or fragments; use authTokenEnv',
+        });
+        return;
+    }
+    if (/^https?:\/\//.test(value)) {
+        refuseEmbeddedCredential(value, ctx);
+    }
+}
+exports.CredentialFreeHttpUrlSchema = zod_1.z
+    .string()
+    .url()
+    .superRefine(refuseEmbeddedCredential);
+exports.CredentialFreeGitUrlSchema = zod_1.z
+    .string()
+    .url('git url must be valid')
+    .regex(/^https?:\/\//, 'git url must be http(s)')
+    .superRefine(refuseEmbeddedCredential);
+exports.CredentialFreeOciRegistrySchema = zod_1.z
+    .string()
+    .min(1)
+    .superRefine(refuseEmbeddedRegistryCredential);
+exports.WorkspaceBiomeSourceSchema = zod_1.z
+    .object({
+    ...biomeSourceBase,
+    kind: zod_1.z.literal(BiomeSourceKind.Workspace),
+    root: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.DistributionBiomeSourceSchema = zod_1.z
+    .object({
+    ...biomeSourceBase,
+    kind: zod_1.z.literal(BiomeSourceKind.Distribution),
+    edition: zod_1.z.string().min(1),
+    ref: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.NpmBiomeSourceSchema = zod_1.z
+    .object({
+    ...biomeSourceBase,
+    kind: zod_1.z.literal(BiomeSourceKind.Npm),
+    registryUrl: exports.CredentialFreeHttpUrlSchema.optional(),
+    scope: zod_1.z
+        .string()
+        .regex(/^@[a-z0-9][a-z0-9-]*$/, 'scope must look like @scope')
+        .optional(),
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.OciBiomeSourceSchema = zod_1.z
+    .object({
+    ...biomeSourceBase,
+    kind: zod_1.z.literal(BiomeSourceKind.Oci),
+    registry: exports.CredentialFreeOciRegistrySchema,
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+exports.GitBiomeSourceSchema = zod_1.z
+    .object({
+    ...biomeSourceBase,
+    kind: zod_1.z.literal(BiomeSourceKind.Git),
+    url: exports.CredentialFreeGitUrlSchema,
+    ref: zod_1.z.string().min(1).optional(),
+    authTokenEnv: zod_1.z.string().min(1).optional(),
+    imageRegistry: exports.CredentialFreeOciRegistrySchema.optional(),
+})
+    .strict();
+exports.BiomeSourceSpecSchema = zod_1.z.discriminatedUnion('kind', [
+    exports.WorkspaceBiomeSourceSchema,
+    exports.DistributionBiomeSourceSchema,
+    exports.NpmBiomeSourceSchema,
+    exports.OciBiomeSourceSchema,
+    exports.GitBiomeSourceSchema,
+]);
+exports.BiomeSourcesConfigSchema = zod_1.z.array(exports.BiomeSourceSpecSchema);
+exports.DistributionSourceDeclarationSchema = zod_1.z.discriminatedUnion('kind', [exports.GitBiomeSourceSchema, exports.OciBiomeSourceSchema, exports.NpmBiomeSourceSchema]);
+exports.DistributionSourcesSchema = zod_1.z
+    .array(exports.DistributionSourceDeclarationSchema)
+    .superRefine((value, ctx) => {
+    const seen = new Set();
+    value.forEach((source, index) => {
+        if (seen.has(source.name)) {
+            ctx.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: [index, 'name'],
+                message: `duplicate source name "${source.name}" — a source name is a handle and must resolve to exactly one declaration`,
+            });
+        }
+        seen.add(source.name);
+    });
+});
+//# sourceMappingURL=biome-source.js.map

package/dist/distribution/lib/biome-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-source.js","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAiDxB,IAAY,eAWX;AAXD,WAAY,eAAe;IAEzB,0CAAuB,CAAA;IAEvB,gDAA6B,CAAA;IAE7B,8BAAW,CAAA;IAEX,8BAAW,CAAA;IAEX,8BAAW,CAAA;AACb,CAAC,EAXW,eAAe,+BAAf,eAAe,QAW1B;AAEY,QAAA,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAOtD,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;AAE1E,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,6BAAqB;CAC5B,CAAC;AAWF,SAAS,wBAAwB,CAAC,KAAa,EAAE,GAAoB;IACnE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAa,EACb,GAAoB;IAEpB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,0FAA0F;SAC7F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAEY,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,uBAAuB,CAAC;KAC5B,KAAK,CAAC,cAAc,EAAE,yBAAyB,CAAC;KAChD,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,gCAAgC,CAAC,CAAC;AASpC,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAWC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC7D,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,uCAA+B;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAcC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,GAAG,EAAE,kCAA0B;IAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,uCAA+B,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,kCAA0B;IAC1B,qCAA6B;IAC7B,4BAAoB;IACpB,4BAAoB;IACpB,4BAAoB;CACrB,CAAC,CAAC;AAOU,QAAA,wBAAwB,GAAG,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC;AAa1D,QAAA,mCAAmC,GAAG,OAAC,CAAC,kBAAkB,CACrE,MAAM,EACN,CAAC,4BAAoB,EAAE,4BAAoB,EAAE,4BAAoB,CAAC,CACnE,CAAC;AAaW,QAAA,yBAAyB,GAAG,OAAC;KACvC,KAAK,CAAC,2CAAmC,CAAC;KAC1C,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,OAAO,EAAE,0BAA0B,MAAM,CAAC,IAAI,2EAA2E;aAC1H,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/distribution/lib/distribution-lock.d.ts

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+import { type BiomeTier, type BiomeTarget, type BiomeOrigin, type BiomeAudience, type BiomeBundleSourceSpec } from '../../biome';
+import { type PlatformServiceTier } from './distribution';
+import { type BiomeInstallPolicy, type BiomeLaunchMode } from './install-policy';
+import { type PlatformServiceSourceIdentity } from './platform-service-source-index';
+import { type ProcessTopology } from '../../process-topology';
+import { BiomeSourceKind } from './biome-source';
+import { type DistributionOwner, type DistributionVisibility } from './distribution-ownership';
+export interface BiomeServiceOwnerIdentity {
+    kind: 'biome';
+    biomeId: string;
+    target: BiomeTarget;
+    repo: string;
+    path: string;
+    version: string;
+    sourceManifestHash: string;
+}
+export declare const BiomeServiceOwnerIdentitySchema: z.ZodType<BiomeServiceOwnerIdentity>;
+export interface PlatformServiceOwnerIdentity {
+    kind: 'platform';
+    source: PlatformServiceSourceIdentity;
+}
+export declare const PlatformServiceOwnerIdentitySchema: z.ZodType<PlatformServiceOwnerIdentity>;
+export type ServiceOwnerIdentity = BiomeServiceOwnerIdentity | PlatformServiceOwnerIdentity;
+export declare const ServiceOwnerIdentitySchema: z.ZodType<ServiceOwnerIdentity>;
+export interface LockedServiceDependency {
+    consumerService: string;
+    requiredService: string;
+    owner: ServiceOwnerIdentity;
+}
+export declare const LockedServiceDependencySchema: z.ZodType<LockedServiceDependency>;
+export interface LockedHostModule {
+    componentKey: string;
+    artifactPath: string;
+    modulePath: string;
+    exportName: string;
+    hostAbi: {
+        name: string;
+        versionRange: string;
+    };
+    bundleSource: BiomeBundleSourceSpec;
+}
+export declare const LockedHostModuleSchema: z.ZodType<LockedHostModule>;
+export interface LockedBiomeSource {
+    kind: BiomeSourceKind.Git;
+    name: string;
+    url: string;
+    ref?: string;
+    commit: string;
+    imageRegistry?: string;
+}
+export declare const LockedBiomeSourceSchema: z.ZodType<LockedBiomeSource>;
+export interface LockedBiome {
+    id: string;
+    version: string;
+    tier: BiomeTier;
+    target: BiomeTarget;
+    origin: BiomeOrigin;
+    mandatory: boolean;
+    installPolicy: BiomeInstallPolicy;
+    launch: BiomeLaunchMode;
+    repo: string;
+    path: string;
+    services: readonly string[];
+    serviceDatabases: Readonly<Record<string, string>>;
+    runtimeComponents: readonly string[];
+    hostModules: readonly LockedHostModule[];
+    serviceDependencies: readonly LockedServiceDependency[];
+    imageDigest?: string;
+    displayName: string;
+    packageName: string | null;
+    requiresServerBiomes: readonly string[];
+    optionalServerBiomes: readonly string[];
+    audience: BiomeAudience;
+    storeListed: boolean;
+    systemSurface: boolean;
+    sourceManifestHash: string;
+    display?: LockedBiomeDisplay;
+    source?: LockedBiomeSource;
+}
+export interface LockedBiomeDisplay {
+    icon?: string;
+    category?: string;
+    summary?: string;
+    accent?: string;
+}
+export declare const LockedBiomeSchema: z.ZodType<LockedBiome>;
+export interface LockedPlatformService {
+    name: string;
+    tier: PlatformServiceTier;
+    source: PlatformServiceSourceIdentity;
+}
+export declare const LockedPlatformServiceSchema: z.ZodType<LockedPlatformService>;
+export interface CapabilityDomainOwner {
+    domain: string;
+    biomeId: string;
+}
+export declare const CapabilityDomainOwnerSchema: z.ZodType<CapabilityDomainOwner>;
+export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION: 2;
+export interface DistributionLock {
+    schemaVersion: typeof DISTRIBUTION_LOCK_SCHEMA_VERSION;
+    distributionId: string;
+    biomes: readonly LockedBiome[];
+    capabilityDomainOwners: readonly CapabilityDomainOwner[];
+    platformServices: readonly LockedPlatformService[];
+    processTopology?: ProcessTopology;
+    resolvedAt: string;
+    inputHash: string;
+    owner?: DistributionOwner;
+    visibility?: DistributionVisibility;
+}
+export declare const DistributionLockSchema: z.ZodType<DistributionLock>;
+export declare function parseDistributionLock(raw: unknown): DistributionLock;
+//# sourceMappingURL=distribution-lock.d.ts.map

package/dist/distribution/lib/distribution-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/distribution-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EAIhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,+BAA+B,EAU7B,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,kCAAkC,EAKhC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,eAAO,MAAM,0BAA0B,EAGjC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAOtC,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,eAAO,MAAM,6BAA6B,EAM3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAQlD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,qBAAqB,CAAC;CACrC;AAED,eAAO,MAAM,sBAAsB,EAcpB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAuB3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;IAE1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,uBAAuB,EASrB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAQ5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IAEpB,MAAM,EAAE,WAAW,CAAC;IAEpB,SAAS,EAAE,OAAO,CAAC;IAEnB,aAAa,EAAE,kBAAkB,CAAC;IAKlC,MAAM,EAAE,eAAe,CAAC;IAExB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IAUb,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAmB5B,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAenD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAKzC,mBAAmB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAExD,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,WAAW,EAAE,MAAM,CAAC;IAMpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,QAAQ,EAAE,aAAa,CAAC;IAExB,WAAW,EAAE,OAAO,CAAC;IAErB,aAAa,EAAE,OAAO,CAAC;IAEvB,kBAAkB,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAS7B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAWD,eAAO,MAAM,iBAAiB,EA4HtB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAU/B,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,mBAAmB,CAAC;IAI1B,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,2BAA2B,EAsBhC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAqBzC,MAAM,WAAW,qBAAqB;IAEpC,MAAM,EAAE,MAAM,CAAC;IAEf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,2BAA2B,EAKzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAGhD,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAW/B,sBAAsB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEzD,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IA0BnD,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAUlB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAa1B,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,eAAO,MAAM,sBAAsB,EAapB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAO3C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAwBpE"}