@xemahq/contracts 0.75.0 → 0.76.0

package/dist/distribution/lib/image-producer-evidence.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DistributionImageReplayStateSchema = exports.SigstoreOfflineTrustPolicySchema = exports.SigstoreIdentityPolicySchema = exports.DistributionImageEvidenceSetSchema = exports.SigstoreEvidenceDescriptorSchema = exports.ImageDeliveryEntitlementStatementSchema = exports.ImageDeliveryEntitlementPredicateSchema = exports.IMAGE_DELIVERY_ENTITLEMENT_PREDICATE_TYPE = exports.ImageDeliveryMode = exports.DistributionImagesStatementSchema = exports.DistributionImagesPredicateSchema = exports.DISTRIBUTION_IMAGES_PREDICATE_TYPE = exports.ImageProducerStatementSchema = exports.IMAGE_PRODUCER_PREDICATE_TYPE = exports.ImageProducerPredicateSchema = exports.ImageProducerRunSchema = exports.ImageProducerArtifactSchema = exports.ImageProducerBuildSchema = exports.ImageProducerSourceSchema = exports.ImageProducerPlatformSchema = exports.InTotoSubjectSchema = void 0;
+exports.DistributionImageReplayStateSchema = exports.SigstoreOfflineTrustPolicySchema = exports.SigstoreIdentityPolicySchema = exports.EVIDENCE_CHANNEL_REFS = exports.EVIDENCE_CHANNELS = exports.DistributionImageEvidenceSetSchema = exports.SigstoreEvidenceDescriptorSchema = exports.ImageDeliveryEntitlementStatementSchema = exports.ImageDeliveryEntitlementPredicateSchema = exports.IMAGE_DELIVERY_ENTITLEMENT_PREDICATE_TYPE = exports.ImageDeliveryMode = exports.DistributionImagesStatementSchema = exports.DistributionImagesPredicateSchema = exports.DISTRIBUTION_IMAGES_PREDICATE_TYPE = exports.ImageProducerStatementSchema = exports.IMAGE_PRODUCER_PREDICATE_TYPE = exports.ImageProducerPredicateSchema = exports.ImageProducerRunSchema = exports.ImageProducerArtifactSchema = exports.ImageProducerBuildSchema = exports.ImageProducerSourceSchema = exports.ImageProducerPlatformSchema = exports.InTotoSubjectSchema = void 0;
 exports.parseImageProducerStatement = parseImageProducerStatement;
 exports.parseDistributionImagesStatement = parseDistributionImagesStatement;
 exports.parseImageDeliveryEntitlementStatement = parseImageDeliveryEntitlementStatement;
@@ -10,8 +10,7 @@ exports.parseDistributionImageReplayState = parseDistributionImageReplayState;
 const zod_1 = require("zod");
 const image_lock_1 = require("./image-lock");
 const kernel_contract_authority_1 = require("./kernel-contract-authority");
-const Sha256HexSchema = zod_1.z.string().regex(/^[a-f0-9]{64}$/);
-const Sha256DigestSchema = zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/);
+const content_address_1 = require("../../content-address");
 const GitCommitSchema = zod_1.z.string().regex(/^[a-f0-9]{40}$/);
 const Rfc3339Schema = zod_1.z.string().datetime({ offset: true });
 const CanonicalIdentifierSchema = zod_1.z
@@ -31,7 +30,7 @@ exports.InTotoSubjectSchema = zod_1.z
     name: zod_1.z.string().min(1),
     digest: zod_1.z
         .object({
-        sha256: Sha256HexSchema,
+        sha256: content_address_1.Sha256HexSchema,
     })
         .strict(),
 })
@@ -39,7 +38,7 @@ exports.InTotoSubjectSchema = zod_1.z
 exports.ImageProducerPlatformSchema = zod_1.z
     .object({
     ...image_lock_1.RuntimeImagePlatformSchema.shape,
-    manifestDigest: Sha256DigestSchema,
+    manifestDigest: kernel_contract_authority_1.OciDigestSchema,
 })
     .strict();
 exports.ImageProducerSourceSchema = zod_1.z
@@ -50,39 +49,39 @@ exports.ImageProducerSourceSchema = zod_1.z
     repo: CanonicalRelativePathSchema,
     path: CanonicalRelativePathSchema,
     sourceCommit: GitCommitSchema,
-    sourceManifestHash: Sha256HexSchema,
+    sourceManifestHash: kernel_contract_authority_1.BiomeSourceManifestHashSchema,
     sourceHashAlgorithm: zod_1.z.union([
         zod_1.z.literal(image_lock_1.ImageSourceHashAlgorithm.ImageInputV1),
         zod_1.z.literal(image_lock_1.ImageSourceHashAlgorithm.ImageInputV2),
         zod_1.z.literal(image_lock_1.ImageSourceHashAlgorithm.ImageInputV3),
     ]),
-    sourceTreeHash: Sha256HexSchema,
+    sourceTreeHash: content_address_1.Sha256HexSchema,
 })
     .strict();
 exports.ImageProducerBuildSchema = zod_1.z
     .object({
     builderId: zod_1.z.string().url(),
     buildType: zod_1.z.string().url(),
-    buildDefinitionDigest: Sha256DigestSchema,
-    parametersDigest: Sha256DigestSchema,
+    buildDefinitionDigest: kernel_contract_authority_1.OciDigestSchema,
+    parametersDigest: kernel_contract_authority_1.OciDigestSchema,
     platforms: zod_1.z.array(exports.ImageProducerPlatformSchema).min(1).readonly(),
 })
     .strict();
 exports.ImageProducerArtifactSchema = zod_1.z
     .object({
     imageRepository: zod_1.z.string().min(1),
-    manifestDigest: Sha256DigestSchema,
+    manifestDigest: kernel_contract_authority_1.OciDigestSchema,
     manifestMediaType: zod_1.z.string().min(1),
     sbom: zod_1.z
         .object({
         predicateType: zod_1.z.literal('https://spdx.dev/Document'),
-        digest: Sha256DigestSchema,
+        digest: kernel_contract_authority_1.OciDigestSchema,
     })
         .strict(),
     provenance: zod_1.z
         .object({
         predicateType: zod_1.z.literal('https://slsa.dev/provenance/v1'),
-        digest: Sha256DigestSchema,
+        digest: kernel_contract_authority_1.OciDigestSchema,
     })
         .strict(),
 })
@@ -121,8 +120,8 @@ exports.DistributionImagesPredicateSchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(1),
     distributionId: CanonicalIdentifierSchema,
-    distributionInputHash: Sha256HexSchema,
-    normalizedImageLockDigest: Sha256DigestSchema,
+    distributionInputHash: content_address_1.Sha256HexSchema,
+    normalizedImageLockDigest: kernel_contract_authority_1.OciDigestSchema,
     releaseSequence: zod_1.z.number().int().nonnegative(),
     releaseSourceCommit: GitCommitSchema,
     runId: CanonicalIdentifierSchema,
@@ -136,9 +135,9 @@ exports.DistributionImagesPredicateSchema = zod_1.z
         subjectKind: zod_1.z.nativeEnum(image_lock_1.RuntimeImageSubjectKind),
         subjectId: CanonicalIdentifierSchema,
         imageRepository: zod_1.z.string().min(1),
-        manifestDigest: Sha256DigestSchema,
-        producerStatementDigest: Sha256DigestSchema,
-        producerBundleDigest: Sha256DigestSchema,
+        manifestDigest: kernel_contract_authority_1.OciDigestSchema,
+        producerStatementDigest: kernel_contract_authority_1.OciDigestSchema,
+        producerBundleDigest: kernel_contract_authority_1.OciDigestSchema,
     })
         .strict())
         .min(1)
@@ -196,7 +195,7 @@ exports.ImageDeliveryEntitlementPredicateSchema = zod_1.z
     schemaVersion: zod_1.z.literal(1),
     customerId: CanonicalIdentifierSchema,
     distributionId: CanonicalIdentifierSchema,
-    distributionStatementDigest: Sha256DigestSchema,
+    distributionStatementDigest: kernel_contract_authority_1.OciDigestSchema,
     mode: zod_1.z.nativeEnum(ImageDeliveryMode),
     targetRegistry: CanonicalRegistryAuthoritySchema.nullable(),
     nonce: zod_1.z.string().regex(/^[a-zA-Z0-9_-]{22,128}$/),
@@ -234,9 +233,9 @@ exports.ImageDeliveryEntitlementStatementSchema = zod_1.z
 exports.SigstoreEvidenceDescriptorSchema = zod_1.z
     .object({
     statementPath: CanonicalRelativePathSchema,
-    statementDigest: Sha256DigestSchema,
+    statementDigest: kernel_contract_authority_1.OciDigestSchema,
     bundlePath: CanonicalRelativePathSchema,
-    bundleDigest: Sha256DigestSchema,
+    bundleDigest: kernel_contract_authority_1.OciDigestSchema,
     bundleMediaType: zod_1.z.literal('application/vnd.dev.sigstore.bundle.v0.3+json'),
 })
     .strict();
@@ -298,9 +297,15 @@ exports.DistributionImageEvidenceSetSchema = zod_1.z
         }
     }
 });
+exports.EVIDENCE_CHANNELS = ['release', 'develop'];
+exports.EVIDENCE_CHANNEL_REFS = {
+    release: 'refs/heads/main',
+    develop: 'refs/heads/develop',
+};
 exports.SigstoreIdentityPolicySchema = zod_1.z
     .object({
     policyId: CanonicalIdentifierSchema,
+    channel: zod_1.z.enum(exports.EVIDENCE_CHANNELS),
     predicateTypes: zod_1.z.array(zod_1.z.string().url()).min(1).readonly(),
     certificateIdentity: zod_1.z.string().url(),
     oidcIssuer: zod_1.z.string().url(),
@@ -310,19 +315,18 @@ exports.SigstoreIdentityPolicySchema = zod_1.z
         ref: zod_1.z.string().regex(/^refs\/(?:heads|tags)\/.+$/),
         path: CanonicalRelativePathSchema,
     })
-        .strict()
-        .optional(),
+        .strict(),
     imageProducer: zod_1.z
         .object({
         builderIds: zod_1.z.array(zod_1.z.string().url()).min(1).readonly(),
         buildTypes: zod_1.z.array(zod_1.z.string().url()).min(1).readonly(),
         buildDefinitionDigests: zod_1.z
-            .array(Sha256DigestSchema)
+            .array(kernel_contract_authority_1.OciDigestSchema)
             .min(1)
             .readonly()
             .optional(),
         parametersDigests: zod_1.z
-            .array(Sha256DigestSchema)
+            .array(kernel_contract_authority_1.OciDigestSchema)
             .min(1)
             .readonly()
             .optional(),
@@ -336,25 +340,31 @@ exports.SigstoreIdentityPolicySchema = zod_1.z
     })
         .strict()
         .optional(),
-    allowedImageRepositoryPrefixes: zod_1.z
+    imageRepositories: zod_1.z
         .array(zod_1.z
         .string()
-        .regex(/^[a-z0-9.-]+(?::[1-9]\d{0,4})?\/(?:[a-z0-9._-]+\/)*$/, 'must be a canonical lowercase OCI repository namespace ending in "/"'))
+        .regex(/^[a-z0-9.-]+(?::[1-9]\d{0,4})?\/(?:[a-z0-9._-]+\/)*[a-z0-9._-]+$/, 'must be an exact canonical lowercase OCI repository without a trailing "/"'))
         .min(1)
-        .readonly(),
+        .readonly()
+        .optional(),
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.githubWorkflow) {
-        const expectedIdentity = `https://github.com/${value.githubWorkflow.repository}/` +
-            `${value.githubWorkflow.path}@${value.githubWorkflow.ref}`;
-        if (value.certificateIdentity !== expectedIdentity) {
-            context.addIssue({
-                code: zod_1.z.ZodIssueCode.custom,
-                path: ['certificateIdentity'],
-                message: 'must exactly match githubWorkflow repository, path, and ref',
-            });
-        }
+    const expectedIdentity = `https://github.com/${value.githubWorkflow.repository}/` +
+        `${value.githubWorkflow.path}@${value.githubWorkflow.ref}`;
+    if (value.certificateIdentity !== expectedIdentity) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['certificateIdentity'],
+            message: 'must exactly match githubWorkflow repository, path, and ref',
+        });
+    }
+    if (value.githubWorkflow.ref !== exports.EVIDENCE_CHANNEL_REFS[value.channel]) {
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['githubWorkflow', 'ref'],
+            message: `must equal ${exports.EVIDENCE_CHANNEL_REFS[value.channel]} for channel "${value.channel}"`,
+        });
     }
     const signsProducerEvidence = value.predicateTypes.includes(exports.IMAGE_PRODUCER_PREDICATE_TYPE);
     if (signsProducerEvidence !== (value.imageProducer !== undefined)) {
@@ -364,25 +374,39 @@ exports.SigstoreIdentityPolicySchema = zod_1.z
             message: 'is required exactly when predicateTypes includes image-producer evidence',
         });
     }
-    const signsDistributionCompleteness = value.predicateTypes.includes(exports.DISTRIBUTION_IMAGES_PREDICATE_TYPE);
-    if ((signsProducerEvidence || signsDistributionCompleteness) &&
-        value.githubWorkflow === undefined) {
+    if (signsProducerEvidence !== (value.imageRepositories !== undefined)) {
         context.addIssue({
             code: zod_1.z.ZodIssueCode.custom,
-            path: ['githubWorkflow'],
-            message: 'is required for producer or distribution-completeness evidence to bind the exact workflow commit',
+            path: ['imageRepositories'],
+            message: 'is required exactly when predicateTypes includes image-producer evidence',
         });
     }
+    if (value.imageRepositories !== undefined) {
+        const seen = new Map();
+        for (const [index, repository] of value.imageRepositories.entries()) {
+            const incumbent = seen.get(repository);
+            if (incumbent !== undefined) {
+                context.addIssue({
+                    code: zod_1.z.ZodIssueCode.custom,
+                    path: ['imageRepositories', index],
+                    message: `duplicates imageRepositories[${incumbent}] "${repository}"`,
+                });
+            }
+            else {
+                seen.set(repository, index);
+            }
+        }
+    }
 });
 exports.SigstoreOfflineTrustPolicySchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(1),
     trustedRootPath: CanonicalRelativePathSchema,
-    trustedRootDigest: Sha256DigestSchema,
+    trustedRootDigest: kernel_contract_authority_1.OciDigestSchema,
     cosignVersion: zod_1.z.string().regex(/^v\d+\.\d+\.\d+$/),
-    trustedCosignBinaryDigests: zod_1.z.array(Sha256DigestSchema).readonly(),
+    trustedCosignBinaryDigests: zod_1.z.array(kernel_contract_authority_1.OciDigestSchema).readonly(),
     gitVersion: zod_1.z.string().regex(/^\d+\.\d+\.\d+$/),
-    trustedGitBinaryDigests: zod_1.z.array(Sha256DigestSchema).readonly(),
+    trustedGitBinaryDigests: zod_1.z.array(kernel_contract_authority_1.OciDigestSchema).readonly(),
     maxProducerTtlSeconds: zod_1.z.number().int().positive(),
     maxCompletenessTtlSeconds: zod_1.z.number().int().positive(),
     maxEntitlementTtlSeconds: zod_1.z.number().int().positive(),
@@ -409,9 +433,9 @@ exports.DistributionImageReplayStateSchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(1),
     distributionId: CanonicalIdentifierSchema,
-    trustPolicyDigest: Sha256DigestSchema,
+    trustPolicyDigest: kernel_contract_authority_1.OciDigestSchema,
     lastReleaseSequence: zod_1.z.number().int().min(-1),
-    lastCompletenessStatementDigest: Sha256DigestSchema.nullable(),
+    lastCompletenessStatementDigest: kernel_contract_authority_1.OciDigestSchema.nullable(),
     lastCompletenessNonce: zod_1.z
         .string()
         .regex(/^[a-zA-Z0-9_-]{22,128}$/)

package/dist/distribution/lib/image-producer-evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"image-producer-evidence.js","sourceRoot":"","sources":["../../../src/distribution/lib/image-producer-evidence.ts"],"names":[],"mappings":";;;AAkjBA,kEAQC;AAED,4EAQC;AAED,wFAQC;AAED,0EAQC;AAED,8EAQC;AAED,8EAQC;AA5mBD,6BAAwB;AACxB,6CAIsB;AACtB,2EAA4E;AAE5E,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACrE,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,wDAAwD,CAAC,CAAC;AACnE,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK;SACH,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACL,sEAAsE,CACvE,CAAC;AAES,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,MAAM,EAAE,eAAe;KACxB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,GAAG,uCAA0B,CAAC,KAAK;IACnC,cAAc,EAAE,kBAAkB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;IAC3C,EAAE,EAAE,yBAAyB;IAC7B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,2BAA2B;IACjC,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,eAAe;IAenC,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC;QAC3B,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;QAChD,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;QAChD,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;KACjD,CAAC;IACF,cAAc,EAAE,eAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,qBAAqB,EAAE,kBAAkB;IACzC,gBAAgB,EAAE,kBAAkB;IACpC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,mCAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,cAAc,EAAE,kBAAkB;IAClC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACrD,MAAM,EAAE,kBAAkB;KAC3B,CAAC;SACD,MAAM,EAAE;IACX,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;QAC1D,MAAM,EAAE,kBAAkB;KAC3B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,mBAAmB,EAAE,eAAe;IACpC,KAAK,EAAE,yBAAyB;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,yDAA6B;IAChD,MAAM,EAAE,iCAAyB;IACjC,KAAK,EAAE,gCAAwB;IAC/B,QAAQ,EAAE,mCAA2B;IACrC,WAAW,EAAE,8BAAsB;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,6BAA6B,GACxC,+CAAwD,CAAC;AAE9C,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,qCAA6B,CAAC;IACvD,SAAS,EAAE,oCAA4B;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,kCAAkC,GAC7C,sDAA+D,CAAC;AAErD,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,qBAAqB,EAAE,eAAe;IACtC,yBAAyB,EAAE,kBAAkB;IAC7C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,mBAAmB,EAAE,eAAe;IACpC,KAAK,EAAE,yBAAyB;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;IACxB,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,yBAAyB;QACpC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,cAAc,EAAE,kBAAkB;QAClC,uBAAuB,EAAE,kBAAkB;QAC3C,oBAAoB,EAAE,kBAAkB;KACzC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,SAAS,EAAE,yCAAiC;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,sCAAiB,CAAA;IACjB,sCAAiB,CAAA;AACnB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAED,MAAM,gCAAgC,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACnE,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE;QAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QAC3C,IACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,IAAI,KAAK,KAAK,EACrB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,MAAM,CAAC,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CACJ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,MAAM,IAAI,EAAE;YAClB,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAClD,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,sDAAsD,CAAC,CAAC;AAE9C,QAAA,yCAAyC,GACpD,6DAAsE,CAAC;AAE5D,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,yBAAyB;IACrC,cAAc,EAAE,yBAAyB;IACzC,2BAA2B,EAAE,kBAAkB;IAC/C,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;IACrC,cAAc,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,cAAc,EAAE,yBAAyB;IACzC,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;CACzB,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,MAAM;QACvC,KAAK,CAAC,cAAc,KAAK,IAAI,EAC7B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,MAAM;QACvC,KAAK,CAAC,cAAc,KAAK,IAAI,EAC7B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,iDAAyC,CAAC;IACnE,SAAS,EAAE,+CAAuC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,aAAa,EAAE,2BAA2B;IAC1C,eAAe,EAAE,kBAAkB;IACnC,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,kBAAkB;IAChC,eAAe,EAAE,OAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC;CAC5E,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,gBAAgB,EAAE,OAAC;SAChB,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,wCAAgC;KAC3C,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,YAAY,EAAE,wCAAgC;CAC/C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,eAAe,GAAG,GAAG,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzE,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,WAAW,CAAC;gBAC9C,OAAO,EAAE,+BAA+B,gBAAgB,eAAe,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,GAAG;aACrH,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,GAAG,CAC7C,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAClC,CAAC;QACF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC;gBAChE,OAAO,EAAE,2BAA2B,kBAAkB,mBAAmB;aAC1E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC;gBAC7D,OAAO,EAAE,2BAA2B,eAAe,gBAAgB;aACpE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAMQ,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,QAAQ,EAAE,yBAAyB;IACnC,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,cAAc,EAAE,OAAC;SACd,MAAM,CAAC;QACN,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;QAClE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;QACnD,IAAI,EAAE,2BAA2B;KAClC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,aAAa,EAAE,OAAC;SACb,MAAM,CAAC;QACN,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAqBvD,sBAAsB,EAAE,OAAC;aACtB,KAAK,CAAC,kBAAkB,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,EAAE;QACb,iBAAiB,EAAE,OAAC;aACjB,KAAK,CAAC,kBAAkB,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,EAAE;QACb,kBAAkB,EAAE,OAAC;aAClB,KAAK,CACJ,OAAC,CAAC,IAAI,CAAC;YACL,yCAAyC;YACzC,4CAA4C;SAC7C,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,8BAA8B,EAAE,OAAC;SAC9B,KAAK,CACJ,OAAC;SACE,MAAM,EAAE;SACR,KAAK,CACJ,sDAAsD,EACtD,sEAAsE,CACvE,CACJ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,gBAAgB,GACpB,sBAAsB,KAAK,CAAC,cAAc,CAAC,UAAU,GAAG;YACxD,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;gBAC7B,OAAO,EACL,6DAA6D;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CACzD,qCAA6B,CAC9B,CAAC;IACF,IAAI,qBAAqB,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,0EAA0E;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,6BAA6B,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CACjE,0CAAkC,CACnC,CAAC;IACF,IACE,CAAC,qBAAqB,IAAI,6BAA6B,CAAC;QACxD,KAAK,CAAC,cAAc,KAAK,SAAS,EAClC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,eAAe,EAAE,2BAA2B;IAC5C,iBAAiB,EAAE,kBAAkB;IACrC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACnD,0BAA0B,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC/C,uBAAuB,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC/D,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClD,yBAAyB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtD,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;gBACrC,OAAO,EAAE,uBAAuB,SAAS,eAAe,MAAM,CAAC,QAAQ,GAAG;aAC3E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,iBAAiB,EAAE,kBAAkB;IACrC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,+BAA+B,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC9D,qBAAqB,EAAE,OAAC;SACrB,MAAM,EAAE;SACR,KAAK,CAAC,yBAAyB,CAAC;SAChC,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,KAAK,CAAC,CAAC,CAAC;IACtD,IACE,CAAC,KAAK,CAAC,+BAA+B,KAAK,IAAI,CAAC,KAAK,YAAY;QACjE,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC,KAAK,YAAY,EACvD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EACL,4FAA4F;SAC/F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAUL,SAAS,eAAe,CACtB,KAAa,EACb,MAAoB,EACpB,GAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM;aACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,2BAA2B,CACzC,GAAY;IAEZ,OAAO,eAAe,CACpB,0BAA0B,EAC1B,oCAA4B,EAC5B,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,GAAY;IAEZ,OAAO,eAAe,CACpB,+BAA+B,EAC/B,yCAAiC,EACjC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,sCAAsC,CACpD,GAAY;IAEZ,OAAO,eAAe,CACpB,sCAAsC,EACtC,+CAAuC,EACvC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAC7C,GAAY;IAEZ,OAAO,eAAe,CACpB,+BAA+B,EAC/B,wCAAgC,EAChC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAAY;IAEZ,OAAO,eAAe,CACpB,iCAAiC,EACjC,0CAAkC,EAClC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAAY;IAEZ,OAAO,eAAe,CACpB,iCAAiC,EACjC,0CAAkC,EAClC,GAAG,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"image-producer-evidence.js","sourceRoot":"","sources":["../../../src/distribution/lib/image-producer-evidence.ts"],"names":[],"mappings":";;;AA4kBA,kEAQC;AAED,4EAQC;AAED,wFAQC;AAED,0EAQC;AAED,8EAQC;AAED,8EAQC;AAtoBD,6BAAwB;AACxB,6CAIsB;AACtB,2EAIqC;AACrC,2DAAwD;AAExD,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,wDAAwD,CAAC,CAAC;AACnE,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK;SACH,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACL,sEAAsE,CACvE,CAAC;AAES,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,MAAM,EAAE,iCAAe;KACxB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,GAAG,uCAA0B,CAAC,KAAK;IACnC,cAAc,EAAE,2CAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;IAC3C,EAAE,EAAE,yBAAyB;IAC7B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,2BAA2B;IACjC,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,yDAA6B;IAejD,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC;QAC3B,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;QAChD,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;QAChD,OAAC,CAAC,OAAO,CAAC,qCAAwB,CAAC,YAAY,CAAC;KACjD,CAAC;IACF,cAAc,EAAE,iCAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,qBAAqB,EAAE,2CAAe;IACtC,gBAAgB,EAAE,2CAAe;IACjC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,mCAA2B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,cAAc,EAAE,2CAAe;IAC/B,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACrD,MAAM,EAAE,2CAAe;KACxB,CAAC;SACD,MAAM,EAAE;IACX,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;QAC1D,MAAM,EAAE,2CAAe;KACxB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,mBAAmB,EAAE,eAAe;IACpC,KAAK,EAAE,yBAAyB;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,yDAA6B;IAChD,MAAM,EAAE,iCAAyB;IACjC,KAAK,EAAE,gCAAwB;IAC/B,QAAQ,EAAE,mCAA2B;IACrC,WAAW,EAAE,8BAAsB;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,6BAA6B,GACxC,+CAAwD,CAAC;AAE9C,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,qCAA6B,CAAC;IACvD,SAAS,EAAE,oCAA4B;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,kCAAkC,GAC7C,sDAA+D,CAAC;AAErD,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,qBAAqB,EAAE,iCAAe;IACtC,yBAAyB,EAAE,2CAAe;IAC1C,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,mBAAmB,EAAE,eAAe;IACpC,KAAK,EAAE,yBAAyB;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;IACxB,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,yBAAyB;QACpC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,cAAc,EAAE,2CAAe;QAC/B,uBAAuB,EAAE,2CAAe;QACxC,oBAAoB,EAAE,2CAAe;KACtC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,SAAS,EAAE,yCAAiC;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,sCAAiB,CAAA;IACjB,sCAAiB,CAAA;AACnB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAED,MAAM,gCAAgC,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACnE,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE;QAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QAC3C,IACE,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,IAAI,KAAK,KAAK,EACrB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,MAAM,CAAC,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CACJ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,MAAM,IAAI,EAAE;YAClB,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAClD,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,sDAAsD,CAAC,CAAC;AAE9C,QAAA,yCAAyC,GACpD,6DAAsE,CAAC;AAE5D,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,yBAAyB;IACrC,cAAc,EAAE,yBAAyB;IACzC,2BAA2B,EAAE,2CAAe;IAC5C,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;IACrC,cAAc,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAClD,cAAc,EAAE,yBAAyB;IACzC,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,aAAa;CACzB,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,MAAM;QACvC,KAAK,CAAC,cAAc,KAAK,IAAI,EAC7B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,MAAM;QACvC,KAAK,CAAC,cAAc,KAAK,IAAI,EAC7B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,uCAAuC,GAAG,OAAC;KACrD,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,iDAAyC,CAAC;IACnE,SAAS,EAAE,+CAAuC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,aAAa,EAAE,2BAA2B;IAC1C,eAAe,EAAE,2CAAe;IAChC,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,2CAAe;IAC7B,eAAe,EAAE,OAAC,CAAC,OAAO,CAAC,+CAA+C,CAAC;CAC5E,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,gBAAgB,EAAE,OAAC;SAChB,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,yBAAyB;QACpC,QAAQ,EAAE,wCAAgC;KAC3C,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,YAAY,EAAE,wCAAgC;CAC/C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,eAAe,GAAG,GAAG,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzE,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,WAAW,CAAC;gBAC9C,OAAO,EAAE,+BAA+B,gBAAgB,eAAe,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,GAAG;aACrH,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,GAAG,CAC7C,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAClC,CAAC;QACF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC;gBAChE,OAAO,EAAE,2BAA2B,kBAAkB,mBAAmB;aAC1E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC;gBAC7D,OAAO,EAAE,2BAA2B,eAAe,gBAAgB;aACpE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAMQ,QAAA,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC;AAIpD,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,oBAAoB;CACqB,CAAC;AAExC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,QAAQ,EAAE,yBAAyB;IACnC,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,yBAAiB,CAAC;IAClC,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,cAAc,EAAE,OAAC;SACd,MAAM,CAAC;QACN,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;QAClE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;QACnD,IAAI,EAAE,2BAA2B;KAClC,CAAC;SACD,MAAM,EAAE;IACX,aAAa,EAAE,OAAC;SACb,MAAM,CAAC;QACN,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAqBvD,sBAAsB,EAAE,OAAC;aACtB,KAAK,CAAC,2CAAe,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,EAAE;QACb,iBAAiB,EAAE,OAAC;aACjB,KAAK,CAAC,2CAAe,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,EAAE;QACb,kBAAkB,EAAE,OAAC;aAClB,KAAK,CACJ,OAAC,CAAC,IAAI,CAAC;YACL,yCAAyC;YACzC,4CAA4C;SAC7C,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,iBAAiB,EAAE,OAAC;SACjB,KAAK,CACJ,OAAC;SACE,MAAM,EAAE;SACR,KAAK,CACJ,kEAAkE,EAClE,4EAA4E,CAC7E,CACJ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,gBAAgB,GACpB,sBAAsB,KAAK,CAAC,cAAc,CAAC,UAAU,GAAG;QACxD,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;IAC7D,IAAI,KAAK,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,KAAK,6BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC;YAC/B,OAAO,EAAE,cAAc,6BAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,CAAC,OAAO,GAAG;SAC7F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CACzD,qCAA6B,CAC9B,CAAC;IACF,IAAI,qBAAqB,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,0EAA0E;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,qBAAqB,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,mBAAmB,CAAC;YAC3B,OAAO,EACL,0EAA0E;SAC7E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC;oBAClC,OAAO,EAAE,gCAAgC,SAAS,MAAM,UAAU,GAAG;iBACtE,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,eAAe,EAAE,2BAA2B;IAC5C,iBAAiB,EAAE,2CAAe;IAClC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACnD,0BAA0B,EAAE,OAAC,CAAC,KAAK,CAAC,2CAAe,CAAC,CAAC,QAAQ,EAAE;IAC/D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC/C,uBAAuB,EAAE,OAAC,CAAC,KAAK,CAAC,2CAAe,CAAC,CAAC,QAAQ,EAAE;IAC5D,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClD,yBAAyB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtD,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;gBACrC,OAAO,EAAE,uBAAuB,SAAS,eAAe,MAAM,CAAC,QAAQ,GAAG;aAC3E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,yBAAyB;IACzC,iBAAiB,EAAE,2CAAe;IAClC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,+BAA+B,EAAE,2CAAe,CAAC,QAAQ,EAAE;IAC3D,qBAAqB,EAAE,OAAC;SACrB,MAAM,EAAE;SACR,KAAK,CAAC,yBAAyB,CAAC;SAChC,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,KAAK,CAAC,CAAC,CAAC;IACtD,IACE,CAAC,KAAK,CAAC,+BAA+B,KAAK,IAAI,CAAC,KAAK,YAAY;QACjE,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC,KAAK,YAAY,EACvD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;YAC7B,OAAO,EACL,4FAA4F;SAC/F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAUL,SAAS,eAAe,CACtB,KAAa,EACb,MAAoB,EACpB,GAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM;aACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,2BAA2B,CACzC,GAAY;IAEZ,OAAO,eAAe,CACpB,0BAA0B,EAC1B,oCAA4B,EAC5B,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,GAAY;IAEZ,OAAO,eAAe,CACpB,+BAA+B,EAC/B,yCAAiC,EACjC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,sCAAsC,CACpD,GAAY;IAEZ,OAAO,eAAe,CACpB,sCAAsC,EACtC,+CAAuC,EACvC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAC7C,GAAY;IAEZ,OAAO,eAAe,CACpB,+BAA+B,EAC/B,wCAAgC,EAChC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAAY;IAEZ,OAAO,eAAe,CACpB,iCAAiC,EACjC,0CAAkC,EAClC,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAAY;IAEZ,OAAO,eAAe,CACpB,iCAAiC,EACjC,0CAAkC,EAClC,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/dist/distribution/lib/kernel-contract-authority.d.ts

@@ -1,6 +1,7 @@
-import { z } from 'zod';
+import { z } from "zod";
+import { XEMA_KERNEL_CONTRACT_SOURCE_PATHS } from "./kernel-contract-source-paths";
 export declare const XEMA_KERNEL_CONTRACT_REPOSITORY_URL: "https://github.com/xema-dev/xema-kernel-contracts.git";
-export declare const XEMA_KERNEL_CONTRACT_SOURCE_PATHS: readonly ["packages/kernel/kernel-contracts/src/distribution/index.ts", "packages/kernel/kernel-contracts/src/distribution/lib/image-lock.ts", "packages/kernel/kernel-contracts/src/distribution/lib/image-producer-evidence.ts", "packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-authority.ts", "packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-source-index.ts"];
+export { XEMA_KERNEL_CONTRACT_SOURCE_PATHS };
 export declare const XEMA_KERNEL_CONTRACT_SOURCE_MODE: "100644";
 export declare const XEMA_KERNEL_CONTRACT_AUTHORITY_GENERATOR: "xema-distributions/build-runtime-image-source-index.mjs@v1";
 export declare const XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_DOMAIN: "xema.kernel-contract-authority.digest";
@@ -13,12 +14,61 @@ export interface KernelContractAuthorityDigestSource {
     readonly mode: string;
     readonly blob: Uint8Array;
 }
+declare const BIOME_SOURCE_MANIFEST_HASH_BRAND: unique symbol;
+declare const OCI_DIGEST_BRAND: unique symbol;
+declare const BIOME_CONTENT_HASH_BRAND: unique symbol;
+declare const GIT_TREE_ID_BRAND: unique symbol;
+export declare const BIOME_SOURCE_MANIFEST_HASH_PATTERN: RegExp;
+export declare const BIOME_CONTENT_HASH_PATTERN: RegExp;
+export declare const GIT_TREE_ID_PATTERN: RegExp;
+export declare const OCI_DIGEST_PATTERN: RegExp;
+export type BiomeSourceManifestHash = string & {
+    readonly [BIOME_SOURCE_MANIFEST_HASH_BRAND]: true;
+};
+export type OciDigest = string & {
+    readonly [OCI_DIGEST_BRAND]: true;
+};
+export type BiomeContentHash = string & {
+    readonly [BIOME_CONTENT_HASH_BRAND]: true;
+};
+export type GitTreeId = string & {
+    readonly [GIT_TREE_ID_BRAND]: true;
+};
+export declare enum DigestKind {
+    BiomeSourceManifestHash = "biome-source-manifest-hash",
+    OciDigest = "oci-digest",
+    BiomeContentHash = "biome-content-hash",
+    GitTreeId = "git-tree-id"
+}
+export declare class MalformedDigestError extends Error {
+    readonly kind: DigestKind;
+    constructor(kind: DigestKind, value: unknown, expected: string);
+}
+export declare function parseBiomeSourceManifestHash(value: unknown): BiomeSourceManifestHash;
+export declare function parseOciDigest(value: unknown): OciDigest;
+export declare function parseBiomeContentHash(value: unknown): BiomeContentHash;
+export declare function parseGitTreeId(value: unknown): GitTreeId;
+export declare class DuplicateImageSubjectDigestError extends Error {
+    readonly digest: string;
+    constructor(digest: string);
+}
+export interface BiomeContentHashInput {
+    readonly sourceManifestHash: BiomeSourceManifestHash;
+    readonly sourceTreeId: GitTreeId;
+    readonly imageSubjectDigests: readonly OciDigest[];
+}
+export declare const BIOME_CONTENT_HASH_PREIMAGE_TYPE: "xema.biome-content/v1";
+export declare function computeBiomeContentHash(input: BiomeContentHashInput): Promise<BiomeContentHash>;
+export declare function computeBiomeSourceManifestHash(rawManifest: unknown): Promise<BiomeSourceManifestHash>;
+export declare const BiomeSourceManifestHashSchema: z.ZodPipe<z.ZodString, z.ZodTransform<BiomeSourceManifestHash, string>>;
+export declare const BiomeContentHashSchema: z.ZodPipe<z.ZodString, z.ZodTransform<BiomeContentHash, string>>;
+export declare const OciDigestSchema: z.ZodPipe<z.ZodString, z.ZodTransform<OciDigest, string>>;
 export declare const KernelContractAuthoritySchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     generatorIdentity: z.ZodLiteral<"xema-distributions/build-runtime-image-source-index.mjs@v1">;
     repositoryUrl: z.ZodLiteral<"https://github.com/xema-dev/xema-kernel-contracts.git">;
     sourceCommit: z.ZodString;
-    sourcePaths: z.ZodReadonly<z.ZodTuple<[z.ZodLiteral<"packages/kernel/kernel-contracts/src/distribution/index.ts">, z.ZodLiteral<"packages/kernel/kernel-contracts/src/distribution/lib/image-lock.ts">, z.ZodLiteral<"packages/kernel/kernel-contracts/src/distribution/lib/image-producer-evidence.ts">, z.ZodLiteral<"packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-authority.ts">, z.ZodLiteral<"packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-source-index.ts">], null>>;
+    sourcePaths: z.ZodReadonly<z.ZodArray<z.ZodString>>;
     contentHashAlgorithm: z.ZodLiteral<KernelContractContentHashAlgorithm>;
     contentDigest: z.ZodString;
 }, z.core.$strict>;

package/dist/distribution/lib/kernel-contract-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel-contract-authority.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/kernel-contract-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,mCAAmC,EAC9C,uDAAgE,CAAC;AAEnE,eAAO,MAAM,iCAAiC,iZAMnC,CAAC;AAEZ,eAAO,MAAM,gCAAgC,EAAG,QAAiB,CAAC;AAElE,eAAO,MAAM,wCAAwC,EACnD,4DAAqE,CAAC;AAExE,eAAO,MAAM,4CAA4C,EACvD,uCAAgD,CAAC;AAEnD,eAAO,MAAM,6CAA6C,EAAG,CAAU,CAAC;AAExE,oBAAY,kCAAkC;IAC5C,6BAA6B,8EAA8E;CAC5G;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAKD,eAAO,MAAM,6BAA6B;;;;;;;;kBAoB/B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAUF,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,SAAS,mCAAmC,EAAE,GACtD,UAAU,CAuBZ;AAKD,wBAAsB,2CAA2C,CAC/D,OAAO,EAAE,SAAS,mCAAmC,EAAE,GACtD,OAAO,CAAC,MAAM,CAAC,CAEjB"}
+{"version":3,"file":"kernel-contract-authority.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/kernel-contract-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AAEnF,eAAO,MAAM,mCAAmC,EAC9C,uDAAgE,CAAC;AAWnE,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAE7C,eAAO,MAAM,gCAAgC,EAAG,QAAiB,CAAC;AAElE,eAAO,MAAM,wCAAwC,EACnD,4DAAqE,CAAC;AAExE,eAAO,MAAM,4CAA4C,EACvD,uCAAgD,CAAC;AAEnD,eAAO,MAAM,6CAA6C,EAAG,CAAU,CAAC;AAExE,oBAAY,kCAAkC;IAC5C,6BAA6B,8EAA8E;CAC5G;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAqBD,OAAO,CAAC,MAAM,gCAAgC,EAAE,OAAO,MAAM,CAAC;AAC9D,OAAO,CAAC,MAAM,gBAAgB,EAAE,OAAO,MAAM,CAAC;AAC9C,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAC;AACtD,OAAO,CAAC,MAAM,iBAAiB,EAAE,OAAO,MAAM,CAAC;AAE/C,eAAO,MAAM,kCAAkC,QAAqB,CAAC;AACrE,eAAO,MAAM,0BAA0B,QAAqB,CAAC;AAE7D,eAAO,MAAM,mBAAmB,QAAoC,CAAC;AACrE,eAAO,MAAM,kBAAkB,QAA8C,CAAC;AAG9E,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG;IAC7C,QAAQ,CAAC,CAAC,gCAAgC,CAAC,EAAE,IAAI,CAAC;CACnD,CAAC;AAGF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAC/B,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;CACnC,CAAC;AAOF,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG;IACtC,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC;CAC3C,CAAC;AAGF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAC/B,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;CACpC,CAAC;AAGF,oBAAY,UAAU;IACpB,uBAAuB,+BAA+B;IACtD,SAAS,eAAe;IACxB,gBAAgB,uBAAuB;IACvC,SAAS,gBAAgB;CAC1B;AAGD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;gBAEd,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;CAS/D;AAGD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,GACb,uBAAuB,CAYzB;AAGD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CASxD;AAGD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAStE;AAGD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CASxD;AAGD,qBAAa,gCAAiC,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAMpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IAEjC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,SAAS,EAAE,CAAC;CACpD;AAGD,eAAO,MAAM,gCAAgC,EAAG,uBAAgC,CAAC;AAUjF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAkB3B;AAiBD,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,uBAAuB,CAAC,CAsBlC;AAGD,eAAO,MAAM,6BAA6B,yEAGA,CAAC;AAG3C,eAAO,MAAM,sBAAsB,kEAGA,CAAC;AAGpC,eAAO,MAAM,eAAe,2DAGA,CAAC;AAI7B,eAAO,MAAM,6BAA6B;;;;;;;;kBAyB/B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAUF,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,SAAS,mCAAmC,EAAE,GACtD,UAAU,CAuBZ;AAKD,wBAAsB,2CAA2C,CAC/D,OAAO,EAAE,SAAS,mCAAmC,EAAE,GACtD,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/distribution/lib/kernel-contract-authority.js

@@ -1,27 +1,123 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KernelContractAuthoritySchema = exports.KernelContractContentHashAlgorithm = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_VERSION = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_DOMAIN = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_GENERATOR = exports.XEMA_KERNEL_CONTRACT_SOURCE_MODE = exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS = exports.XEMA_KERNEL_CONTRACT_REPOSITORY_URL = void 0;
+exports.KernelContractAuthoritySchema = exports.OciDigestSchema = exports.BiomeContentHashSchema = exports.BiomeSourceManifestHashSchema = exports.BIOME_CONTENT_HASH_PREIMAGE_TYPE = exports.DuplicateImageSubjectDigestError = exports.MalformedDigestError = exports.DigestKind = exports.OCI_DIGEST_PATTERN = exports.GIT_TREE_ID_PATTERN = exports.BIOME_CONTENT_HASH_PATTERN = exports.BIOME_SOURCE_MANIFEST_HASH_PATTERN = exports.KernelContractContentHashAlgorithm = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_VERSION = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_DOMAIN = exports.XEMA_KERNEL_CONTRACT_AUTHORITY_GENERATOR = exports.XEMA_KERNEL_CONTRACT_SOURCE_MODE = exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS = exports.XEMA_KERNEL_CONTRACT_REPOSITORY_URL = void 0;
+exports.parseBiomeSourceManifestHash = parseBiomeSourceManifestHash;
+exports.parseOciDigest = parseOciDigest;
+exports.parseBiomeContentHash = parseBiomeContentHash;
+exports.parseGitTreeId = parseGitTreeId;
+exports.computeBiomeContentHash = computeBiomeContentHash;
+exports.computeBiomeSourceManifestHash = computeBiomeSourceManifestHash;
 exports.encodeKernelContractAuthorityDigestPreimage = encodeKernelContractAuthorityDigestPreimage;
 exports.computeKernelContractAuthorityContentDigest = computeKernelContractAuthorityContentDigest;
 const zod_1 = require("zod");
 const content_address_1 = require("../../content-address");
-exports.XEMA_KERNEL_CONTRACT_REPOSITORY_URL = 'https://github.com/xema-dev/xema-kernel-contracts.git';
-exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS = Object.freeze([
-    'packages/kernel/kernel-contracts/src/distribution/index.ts',
-    'packages/kernel/kernel-contracts/src/distribution/lib/image-lock.ts',
-    'packages/kernel/kernel-contracts/src/distribution/lib/image-producer-evidence.ts',
-    'packages/kernel/kernel-contracts/src/distribution/lib/kernel-contract-authority.ts',
-    'packages/kernel/kernel-contracts/src/distribution/lib/runtime-image-source-index.ts',
-]);
-exports.XEMA_KERNEL_CONTRACT_SOURCE_MODE = '100644';
-exports.XEMA_KERNEL_CONTRACT_AUTHORITY_GENERATOR = 'xema-distributions/build-runtime-image-source-index.mjs@v1';
-exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_DOMAIN = 'xema.kernel-contract-authority.digest';
+const kernel_contract_source_paths_1 = require("./kernel-contract-source-paths");
+Object.defineProperty(exports, "XEMA_KERNEL_CONTRACT_SOURCE_PATHS", { enumerable: true, get: function () { return kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS; } });
+exports.XEMA_KERNEL_CONTRACT_REPOSITORY_URL = "https://github.com/xema-dev/xema-kernel-contracts.git";
+exports.XEMA_KERNEL_CONTRACT_SOURCE_MODE = "100644";
+exports.XEMA_KERNEL_CONTRACT_AUTHORITY_GENERATOR = "xema-distributions/build-runtime-image-source-index.mjs@v1";
+exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_DOMAIN = "xema.kernel-contract-authority.digest";
 exports.XEMA_KERNEL_CONTRACT_AUTHORITY_DIGEST_VERSION = 1;
 var KernelContractContentHashAlgorithm;
 (function (KernelContractContentHashAlgorithm) {
     KernelContractContentHashAlgorithm["LengthFramedGitPathModeBlobV1"] = "xema-kernel-contract-authority-length-framed-git-path-mode-blob-sha256-v1";
 })(KernelContractContentHashAlgorithm || (exports.KernelContractContentHashAlgorithm = KernelContractContentHashAlgorithm = {}));
-const Sha256HexSchema = zod_1.z.string().regex(/^[a-f0-9]{64}$/);
+exports.BIOME_SOURCE_MANIFEST_HASH_PATTERN = content_address_1.SHA256_HEX_PATTERN;
+exports.BIOME_CONTENT_HASH_PATTERN = content_address_1.SHA256_HEX_PATTERN;
+exports.GIT_TREE_ID_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/;
+exports.OCI_DIGEST_PATTERN = new RegExp(`^sha256:${content_address_1.SHA256_HEX_SOURCE}$`);
+var DigestKind;
+(function (DigestKind) {
+    DigestKind["BiomeSourceManifestHash"] = "biome-source-manifest-hash";
+    DigestKind["OciDigest"] = "oci-digest";
+    DigestKind["BiomeContentHash"] = "biome-content-hash";
+    DigestKind["GitTreeId"] = "git-tree-id";
+})(DigestKind || (exports.DigestKind = DigestKind = {}));
+class MalformedDigestError extends Error {
+    kind;
+    constructor(kind, value, expected) {
+        super(`${kind} refused: expected ${expected}, got ${typeof value === "string" ? JSON.stringify(value) : typeof value}.`);
+        this.name = "MalformedDigestError";
+        this.kind = kind;
+    }
+}
+exports.MalformedDigestError = MalformedDigestError;
+function parseBiomeSourceManifestHash(value) {
+    if (typeof value !== "string" ||
+        !exports.BIOME_SOURCE_MANIFEST_HASH_PATTERN.test(value)) {
+        throw new MalformedDigestError(DigestKind.BiomeSourceManifestHash, value, "64 lowercase hex characters with no prefix");
+    }
+    return value;
+}
+function parseOciDigest(value) {
+    if (typeof value !== "string" || !exports.OCI_DIGEST_PATTERN.test(value)) {
+        throw new MalformedDigestError(DigestKind.OciDigest, value, '"sha256:" followed by 64 lowercase hex characters');
+    }
+    return value;
+}
+function parseBiomeContentHash(value) {
+    if (typeof value !== "string" || !exports.BIOME_CONTENT_HASH_PATTERN.test(value)) {
+        throw new MalformedDigestError(DigestKind.BiomeContentHash, value, "64 lowercase hex characters with no prefix");
+    }
+    return value;
+}
+function parseGitTreeId(value) {
+    if (typeof value !== "string" || !exports.GIT_TREE_ID_PATTERN.test(value)) {
+        throw new MalformedDigestError(DigestKind.GitTreeId, value, "40 or 64 lowercase hex characters");
+    }
+    return value;
+}
+class DuplicateImageSubjectDigestError extends Error {
+    digest;
+    constructor(digest) {
+        super(`imageSubjectDigests lists ${digest} more than once; a biome content hash refuses duplicates rather than deduplicating them.`);
+        this.digest = digest;
+        this.name = "DuplicateImageSubjectDigestError";
+    }
+}
+exports.DuplicateImageSubjectDigestError = DuplicateImageSubjectDigestError;
+exports.BIOME_CONTENT_HASH_PREIMAGE_TYPE = "xema.biome-content/v1";
+async function computeBiomeContentHash(input) {
+    const imageSubjectDigests = input.imageSubjectDigests
+        .map((digest) => parseOciDigest(digest))
+        .sort();
+    for (const [index, digest] of imageSubjectDigests.entries()) {
+        if (digest === imageSubjectDigests[index - 1]) {
+            throw new DuplicateImageSubjectDigestError(digest);
+        }
+    }
+    const preimage = (0, content_address_1.canonicalJsonStringify)({
+        type: exports.BIOME_CONTENT_HASH_PREIMAGE_TYPE,
+        sourceManifestHash: parseBiomeSourceManifestHash(input.sourceManifestHash),
+        sourceTreeId: parseGitTreeId(input.sourceTreeId),
+        imageSubjectDigests: imageSubjectDigests,
+    });
+    return parseBiomeContentHash(await (0, content_address_1.sha256Hex)(new TextEncoder().encode(preimage)));
+}
+async function computeBiomeSourceManifestHash(rawManifest) {
+    const proto = typeof rawManifest === "object" && rawManifest !== null
+        ? Object.getPrototypeOf(rawManifest)
+        : undefined;
+    if (typeof rawManifest !== "object" ||
+        rawManifest === null ||
+        Array.isArray(rawManifest) ||
+        (proto !== Object.prototype && proto !== null)) {
+        throw new MalformedDigestError(DigestKind.BiomeSourceManifestHash, rawManifest, "a plain JSON object manifest");
+    }
+    return parseBiomeSourceManifestHash(await (0, content_address_1.sha256Hex)(new TextEncoder().encode(`${JSON.stringify(rawManifest, null, 2)}\n`)));
+}
+exports.BiomeSourceManifestHashSchema = zod_1.z
+    .string()
+    .regex(exports.BIOME_SOURCE_MANIFEST_HASH_PATTERN)
+    .transform(parseBiomeSourceManifestHash);
+exports.BiomeContentHashSchema = zod_1.z
+    .string()
+    .regex(exports.BIOME_CONTENT_HASH_PATTERN)
+    .transform(parseBiomeContentHash);
+exports.OciDigestSchema = zod_1.z
+    .string()
+    .regex(exports.OCI_DIGEST_PATTERN)
+    .transform(parseOciDigest);
 const GitCommitSchema = zod_1.z.string().regex(/^[a-f0-9]{40}$/);
 exports.KernelContractAuthoritySchema = zod_1.z
     .object({
@@ -30,16 +126,14 @@ exports.KernelContractAuthoritySchema = zod_1.z
     repositoryUrl: zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_REPOSITORY_URL),
     sourceCommit: GitCommitSchema,
     sourcePaths: zod_1.z
-        .tuple([
-        zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[0]),
-        zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[1]),
-        zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[2]),
-        zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[3]),
-        zod_1.z.literal(exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[4]),
-    ])
-        .readonly(),
+        .array(zod_1.z.string())
+        .readonly()
+        .refine((paths) => paths.length === kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.length &&
+        paths.every((path, index) => path === kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS[index]), {
+        message: "sourcePaths must be exactly XEMA_KERNEL_CONTRACT_SOURCE_PATHS, in order",
+    }),
     contentHashAlgorithm: zod_1.z.literal(KernelContractContentHashAlgorithm.LengthFramedGitPathModeBlobV1),
-    contentDigest: Sha256HexSchema,
+    contentDigest: content_address_1.Sha256HexSchema,
 })
     .strict();
 function encodeKernelContractAuthorityDigestPreimage(sources) {
@@ -63,12 +157,12 @@ async function computeKernelContractAuthorityContentDigest(sources) {
 }
 function validateSources(sources) {
     if (!Array.isArray(sources)) {
-        throw new Error('Kernel contract authority sources must be an array.');
+        throw new Error("Kernel contract authority sources must be an array.");
     }
-    if (sources.length !== exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.length) {
-        throw new Error(`Kernel contract authority requires exactly ${exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.length} sources.`);
+    if (sources.length !== kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.length) {
+        throw new Error(`Kernel contract authority requires exactly ${kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.length} sources.`);
     }
-    for (const [index, expectedPath,] of exports.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.entries()) {
+    for (const [index, expectedPath,] of kernel_contract_source_paths_1.XEMA_KERNEL_CONTRACT_SOURCE_PATHS.entries()) {
         const source = sources[index];
         if (source === undefined || source.path !== expectedPath) {
             throw new Error(`Kernel contract authority source[${index}] must be "${expectedPath}".`);