@xemahq/contracts 0.75.0 → 0.77.0

package/dist/deployment/lib/resolved-deployment.d.ts

@@ -1,6 +1,12 @@
 import { z } from 'zod';
 export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 1;
 export declare const RESOLVER_PACKAGE: "@xemahq/contracts";
+export declare enum ResolvedDeploymentProvenanceKind {
+    Engine = "engine",
+    Unsplit = "unsplit"
+}
+export declare const EDITION_OCI_REF_PATTERN: RegExp;
+export declare const EditionOciRefSchema: z.ZodString;
 export declare const ResolvedDeploymentSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
     deployment: z.ZodString;
@@ -10,6 +16,7 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
         version: z.ZodString;
         registry: z.ZodString;
         lockSha256: z.ZodString;
+        ref: z.ZodString;
     }, z.core.$strict>;
     biomes: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -24,14 +31,32 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
             component: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    provenance: z.ZodObject<{
+    provenance: z.ZodUnion<readonly [z.ZodObject<{
+        kind: z.ZodOptional<z.ZodLiteral<ResolvedDeploymentProvenanceKind.Engine>>;
         topologyInputHash: z.ZodString;
         chartSetDigest: z.ZodString;
         resolver: z.ZodObject<{
             package: z.ZodLiteral<"@xemahq/contracts">;
             version: z.ZodString;
         }, z.core.$strict>;
-    }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<ResolvedDeploymentProvenanceKind.Unsplit>;
+        resolver: z.ZodObject<{
+            package: z.ZodLiteral<"@xemahq/contracts">;
+            version: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>]>;
 }, z.core.$strict>;
 export type ResolvedDeployment = z.infer<typeof ResolvedDeploymentSchema>;
+export type UnsplitResolvedDeployment = ResolvedDeployment & {
+    readonly provenance: Extract<ResolvedDeployment['provenance'], {
+        kind: ResolvedDeploymentProvenanceKind.Unsplit;
+    }>;
+};
+export type EngineResolvedDeployment = ResolvedDeployment & {
+    readonly provenance: Exclude<ResolvedDeployment['provenance'], {
+        kind: ResolvedDeploymentProvenanceKind.Unsplit;
+    }>;
+};
+export declare function isUnsplitResolvedDeployment(resolved: ResolvedDeployment): resolved is UnsplitResolvedDeployment;
 //# sourceMappingURL=resolved-deployment.d.ts.map

package/dist/deployment/lib/resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwDxB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAoC7D,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiFjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4DxB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAM7D,oBAAY,gCAAgC;IAK1C,MAAM,WAAW;IAOjB,OAAO,YAAY;CACpB;AAoBD,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AA2DJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAyFjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AASF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAC3B,QAAQ,IAAI,yBAAyB,CAEvC"}

package/dist/deployment/lib/resolved-deployment.js

@@ -1,17 +1,29 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResolvedDeploymentSchema = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
+exports.ResolvedDeploymentSchema = exports.EditionOciRefSchema = exports.EDITION_OCI_REF_PATTERN = exports.ResolvedDeploymentProvenanceKind = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
+exports.isUnsplitResolvedDeployment = isUnsplitResolvedDeployment;
 const zod_1 = require("zod");
+const content_address_1 = require("../../content-address");
 const deployment_id_1 = require("./deployment-id");
 const trust_domain_1 = require("./trust-domain");
 const trust_partition_1 = require("./trust-partition");
 exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 1;
 exports.RESOLVER_PACKAGE = '@xemahq/contracts';
+var ResolvedDeploymentProvenanceKind;
+(function (ResolvedDeploymentProvenanceKind) {
+    ResolvedDeploymentProvenanceKind["Engine"] = "engine";
+    ResolvedDeploymentProvenanceKind["Unsplit"] = "unsplit";
+})(ResolvedDeploymentProvenanceKind || (exports.ResolvedDeploymentProvenanceKind = ResolvedDeploymentProvenanceKind = {}));
 const DnsLabelSchema = zod_1.z
     .string()
     .min(1)
     .max(63)
     .regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, 'must be a lowercase DNS label');
+exports.EDITION_OCI_REF_PATTERN = new RegExp('^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:[0-9]{1,5})?(\\/[a-z0-9]+(([._]|__|-+)[a-z0-9]+)*)+' +
+    `@sha256:${content_address_1.SHA256_HEX_SOURCE}$`);
+exports.EditionOciRefSchema = zod_1.z
+    .string()
+    .regex(exports.EDITION_OCI_REF_PATTERN, 'must be a digest-pinned OCI reference, <registry>/<path>@sha256:<64 hex>, with no tag');
 const BiomeIdSchema = zod_1.z
     .string()
     .regex(trust_domain_1.TRUST_DOMAIN_BIOME_ID_PATTERN, 'biome id must be lowercase kebab-case');
@@ -31,6 +43,28 @@ const ResolvedServiceAccountSchema = zod_1.z
         .min(1),
 })
     .strict();
+const ResolverSchema = zod_1.z
+    .object({
+    package: zod_1.z.literal(exports.RESOLVER_PACKAGE),
+    version: zod_1.z.string().min(1),
+})
+    .strict();
+const EngineProvenanceSchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal(ResolvedDeploymentProvenanceKind.Engine).optional(),
+    topologyInputHash: content_address_1.Sha256HexSchema,
+    chartSetDigest: zod_1.z
+        .string()
+        .regex(new RegExp(`^sha256:${content_address_1.SHA256_HEX_SOURCE}$`), 'must be an OCI index digest, sha256:<64 hex>'),
+    resolver: ResolverSchema,
+})
+    .strict();
+const UnsplitProvenanceSchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal(ResolvedDeploymentProvenanceKind.Unsplit),
+    resolver: ResolverSchema,
+})
+    .strict();
 exports.ResolvedDeploymentSchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION),
@@ -41,27 +75,13 @@ exports.ResolvedDeploymentSchema = zod_1.z
         id: zod_1.z.string().min(1),
         version: zod_1.z.string().min(1),
         registry: zod_1.z.string().min(1),
-        lockSha256: zod_1.z.string().regex(/^[0-9a-f]{64}$/, 'must be a lowercase sha256 hex digest'),
+        lockSha256: content_address_1.Sha256HexSchema,
+        ref: exports.EditionOciRefSchema,
     })
         .strict(),
     biomes: zod_1.z.array(ResolvedBiomeSchema).min(1),
     serviceAccounts: zod_1.z.array(ResolvedServiceAccountSchema),
-    provenance: zod_1.z
-        .object({
-        topologyInputHash: zod_1.z
-            .string()
-            .regex(/^[0-9a-f]{64}$/, 'must be a lowercase sha256 hex digest'),
-        chartSetDigest: zod_1.z
-            .string()
-            .regex(/^sha256:[0-9a-f]{64}$/, 'must be an OCI index digest, sha256:<64 hex>'),
-        resolver: zod_1.z
-            .object({
-            package: zod_1.z.literal(exports.RESOLVER_PACKAGE),
-            version: zod_1.z.string().min(1),
-        })
-            .strict(),
-    })
-        .strict(),
+    provenance: zod_1.z.union([EngineProvenanceSchema, UnsplitProvenanceSchema]),
 })
     .strict()
     .superRefine((resolved, ctx) => {
@@ -105,5 +125,27 @@ exports.ResolvedDeploymentSchema = zod_1.z
     ]) {
         ctx.addIssue({ code: 'custom', path: [], message: `[${violation.code}] ${violation.message}` });
     }
+    if (resolved.provenance.kind !== ResolvedDeploymentProvenanceKind.Unsplit)
+        return;
+    resolved.biomes.forEach((biome, index) => {
+        if (biome.trustDomain !== biome.trustCeiling) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['biomes', index, 'trustDomain'],
+                message: `an unsplit deployment places every biome in its ceiling domain, but "${biome.id}" is in ` +
+                    `"${biome.trustDomain}" under the ceiling "${biome.trustCeiling}"`,
+            });
+        }
+    });
+    if (resolved.serviceAccounts.length > 0) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['serviceAccounts'],
+            message: `an unsplit deployment states no ServiceAccount, but this one states ${resolved.serviceAccounts.length}`,
+        });
+    }
 });
+function isUnsplitResolvedDeployment(resolved) {
+    return resolved.provenance.kind === ResolvedDeploymentProvenanceKind.Unsplit;
+}
 //# sourceMappingURL=resolved-deployment.js.map

package/dist/deployment/lib/resolved-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AA6Cd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAG7D,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,iCAAiC,EAAE,+BAA+B,CAAC,CAAC;AAM7E,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;KACxF,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,iBAAiB,EAAE,OAAC;aACjB,MAAM,EAAE;aACR,KAAK,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;QACnE,cAAc,EAAE,OAAC;aACd,MAAM,EAAE;aACR,KAAK,CAAC,uBAAuB,EAAE,8CAA8C,CAAC;QACjF,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;YACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3B,CAAC;aACD,MAAM,EAAE;KACZ,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AA+RA,kEAIC;AAnSD,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AAgDd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAM7D,IAAY,gCAaX;AAbD,WAAY,gCAAgC;IAK1C,qDAAiB,CAAA;IAOjB,uDAAmB,CAAA;AACrB,CAAC,EAbW,gCAAgC,gDAAhC,gCAAgC,QAa3C;AAGD,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,iCAAiC,EAAE,+BAA+B,CAAC,CAAC;AAahE,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACnE,iBAAiB,EAAE,iCAAe;IAClC,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;IACrG,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC;IACzD,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO;QAAE,OAAO;IAClF,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;gBACtC,OAAO,EACL,wEAAwE,KAAK,CAAC,EAAE,UAAU;oBAC1F,IAAI,KAAK,CAAC,WAAW,wBAAwB,KAAK,CAAC,YAAY,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,uEAAuE,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA2BL,SAAgB,2BAA2B,CACzC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO,CAAC;AAC/E,CAAC"}

package/dist/distribution/index.d.ts

@@ -2,6 +2,7 @@ export * from './lib/install-policy';
 export * from './lib/distribution-selector';
 export * from './lib/runtime-image-platform';
 export * from './lib/distribution';
+export * from './lib/customer-edition-definition';
 export * from './lib/distribution-roots';
 export * from './lib/biome-closure';
 export * from './lib/distribution-lock';
@@ -18,5 +19,8 @@ export * from './lib/resolve-nexus-bindings';
 export * from './lib/nexus-endpoint-specs';
 export * from './lib/lock-consumers';
 export * from './lib/verify-resolved-deployment';
-export type { VerifiedResolvedDeployment } from './lib/verified-resolved-deployment';
+export * from './lib/resolve-unsplit-deployment';
+export { isUnsplitResolvedDeployment } from '../deployment';
+export type { VerifiedEditionResolution, VerifiedResolvedDeployment, VerifiedUnsplitEditionResolution, VerifiedUnsplitResolvedDeployment, } from './lib/verified-resolved-deployment';
+export * from './lib/delivered-biome';
 //# sourceMappingURL=index.d.ts.map

package/dist/distribution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,YAAY,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AAEjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}

package/dist/distribution/index.js

@@ -14,10 +14,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUnsplitResolvedDeployment = void 0;
 __exportStar(require("./lib/install-policy"), exports);
 __exportStar(require("./lib/distribution-selector"), exports);
 __exportStar(require("./lib/runtime-image-platform"), exports);
 __exportStar(require("./lib/distribution"), exports);
+__exportStar(require("./lib/customer-edition-definition"), exports);
 __exportStar(require("./lib/distribution-roots"), exports);
 __exportStar(require("./lib/biome-closure"), exports);
 __exportStar(require("./lib/distribution-lock"), exports);
@@ -34,4 +36,8 @@ __exportStar(require("./lib/resolve-nexus-bindings"), exports);
 __exportStar(require("./lib/nexus-endpoint-specs"), exports);
 __exportStar(require("./lib/lock-consumers"), exports);
 __exportStar(require("./lib/verify-resolved-deployment"), exports);
+__exportStar(require("./lib/resolve-unsplit-deployment"), exports);
+var deployment_1 = require("../deployment");
+Object.defineProperty(exports, "isUnsplitResolvedDeployment", { enumerable: true, get: function () { return deployment_1.isUnsplitResolvedDeployment; } });
+__exportStar(require("./lib/delivered-biome"), exports);
 //# sourceMappingURL=index.js.map

package/dist/distribution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,oEAAkD;AAClD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AACjD,mEAAiD;AAEjD,4CAA4D;AAAnD,yHAAA,2BAA2B,OAAA;AAOpC,wDAAsC"}

package/dist/distribution/lib/biome-source.d.ts

@@ -40,11 +40,13 @@ export declare const OciBiomeSourceSchema: z.ZodObject<{
     name: z.ZodString;
 }, z.core.$strict>;
 export type OciBiomeSource = z.infer<typeof OciBiomeSourceSchema>;
+export declare const GitAuthUsernameSchema: z.ZodString;
 export declare const GitBiomeSourceSchema: z.ZodObject<{
     kind: z.ZodLiteral<BiomeSourceKind.Git>;
     url: z.ZodString;
     ref: z.ZodOptional<z.ZodString>;
     authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
     imageRegistry: z.ZodOptional<z.ZodString>;
     imageNamePrefix: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
@@ -75,6 +77,7 @@ export declare const BiomeSourceSpecSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     url: z.ZodString;
     ref: z.ZodOptional<z.ZodString>;
     authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
     imageRegistry: z.ZodOptional<z.ZodString>;
     imageNamePrefix: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
@@ -105,6 +108,7 @@ export declare const BiomeSourcesConfigSchema: z.ZodArray<z.ZodDiscriminatedUnio
     url: z.ZodString;
     ref: z.ZodOptional<z.ZodString>;
     authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
     imageRegistry: z.ZodOptional<z.ZodString>;
     imageNamePrefix: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
@@ -115,6 +119,7 @@ export declare const DistributionSourceDeclarationSchema: z.ZodDiscriminatedUnio
     url: z.ZodString;
     ref: z.ZodOptional<z.ZodString>;
     authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
     imageRegistry: z.ZodOptional<z.ZodString>;
     imageNamePrefix: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
@@ -136,6 +141,7 @@ export declare const DistributionSourcesSchema: z.ZodArray<z.ZodDiscriminatedUni
     url: z.ZodString;
     ref: z.ZodOptional<z.ZodString>;
     authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
     imageRegistry: z.ZodOptional<z.ZodString>;
     imageNamePrefix: z.ZodOptional<z.ZodString>;
     name: z.ZodString;

package/dist/distribution/lib/biome-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"biome-source.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiDxB,oBAAY,eAAe;IAEzB,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,GAAG,QAAQ;IAEX,GAAG,QAAQ;IAEX,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,qBAAqB,mCAAgC,CAAC;AAOnE,eAAO,MAAM,qBAAqB,aAGuC,CAAC;AAqD1E,eAAO,MAAM,2BAA2B,aAGA,CAAC;AAEzC,eAAO,MAAM,0BAA0B,aAIC,CAAC;AAEzC,eAAO,MAAM,+BAA+B,aAGI,CAAC;AAmDjD,eAAO,MAAM,6BAA6B,aAMvC,CAAC;AASJ,eAAO,MAAM,0BAA0B;;;;kBAM5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAU9E,eAAO,MAAM,6BAA6B;;;;;kBAO/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAMF,eAAO,MAAM,oBAAoB;;;;;;kBAWtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,oBAAoB;;;;;kBAOtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAuDlE,eAAO,MAAM,oBAAoB;;;;;;;;kBAUtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAiC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;4BAG/C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAUF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;6BAclC,CAAC"}
+{"version":3,"file":"biome-source.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiDxB,oBAAY,eAAe;IAEzB,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,GAAG,QAAQ;IAEX,GAAG,QAAQ;IAEX,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,qBAAqB,mCAAgC,CAAC;AAOnE,eAAO,MAAM,qBAAqB,aAGuC,CAAC;AAqD1E,eAAO,MAAM,2BAA2B,aAGA,CAAC;AAEzC,eAAO,MAAM,0BAA0B,aAIC,CAAC;AAEzC,eAAO,MAAM,+BAA+B,aAGI,CAAC;AAmDjD,eAAO,MAAM,6BAA6B,aAMvC,CAAC;AASJ,eAAO,MAAM,0BAA0B;;;;kBAM5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAS9E,eAAO,MAAM,6BAA6B;;;;;kBAO/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAMF,eAAO,MAAM,oBAAoB;;;;;;kBAWtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,oBAAoB;;;;;kBAOtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAQlE,eAAO,MAAM,qBAAqB,aAEmD,CAAC;AAoFtF,eAAO,MAAM,oBAAoB;;;;;;;;;kBAYkB,CAAC;AACpD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAiC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;4BAG/C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAUF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;6BAclC,CAAC"}

package/dist/distribution/lib/biome-source.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DistributionSourcesSchema = exports.DistributionSourceDeclarationSchema = exports.BiomeSourcesConfigSchema = exports.BiomeSourceSpecSchema = exports.GitBiomeSourceSchema = exports.OciBiomeSourceSchema = exports.NpmBiomeSourceSchema = exports.DistributionBiomeSourceSchema = exports.WorkspaceBiomeSourceSchema = exports.ImageArtifactNamePrefixSchema = exports.CredentialFreeOciRegistrySchema = exports.CredentialFreeGitUrlSchema = exports.CredentialFreeHttpUrlSchema = exports.BiomeSourceNameSchema = exports.BiomeSourceKindSchema = exports.BiomeSourceKind = void 0;
+exports.DistributionSourcesSchema = exports.DistributionSourceDeclarationSchema = exports.BiomeSourcesConfigSchema = exports.BiomeSourceSpecSchema = exports.GitBiomeSourceSchema = exports.GitAuthUsernameSchema = exports.OciBiomeSourceSchema = exports.NpmBiomeSourceSchema = exports.DistributionBiomeSourceSchema = exports.WorkspaceBiomeSourceSchema = exports.ImageArtifactNamePrefixSchema = exports.CredentialFreeOciRegistrySchema = exports.CredentialFreeGitUrlSchema = exports.CredentialFreeHttpUrlSchema = exports.BiomeSourceNameSchema = exports.BiomeSourceKindSchema = exports.BiomeSourceKind = void 0;
 const zod_1 = require("zod");
 var BiomeSourceKind;
 (function (BiomeSourceKind) {
@@ -100,6 +100,25 @@ exports.OciBiomeSourceSchema = zod_1.z
     authTokenEnv: zod_1.z.string().min(1).optional(),
 })
     .strict();
+exports.GitAuthUsernameSchema = zod_1.z
+    .string()
+    .regex(/^[^\s:]+$/, 'git authUsername must be non-empty with no whitespace or ":"');
+function requireAuthUsernameExactlyWithToken(value, ctx) {
+    if (value.authTokenEnv !== undefined && value.authUsername === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['authUsername'],
+            message: 'authUsername is required when authTokenEnv is set: the git username the token authenticates as (GitHub `x-access-token`; other forges differ); it has no default',
+        });
+    }
+    if (value.authTokenEnv === undefined && value.authUsername !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['authUsername'],
+            message: 'authUsername is refused without authTokenEnv: a username with no token authenticates nothing',
+        });
+    }
+}
 exports.GitBiomeSourceSchema = zod_1.z
     .object({
     ...biomeSourceBase,
@@ -107,10 +126,12 @@ exports.GitBiomeSourceSchema = zod_1.z
     url: exports.CredentialFreeGitUrlSchema,
     ref: zod_1.z.string().min(1).optional(),
     authTokenEnv: zod_1.z.string().min(1).optional(),
+    authUsername: exports.GitAuthUsernameSchema.optional(),
     imageRegistry: exports.CredentialFreeOciRegistrySchema.optional(),
     imageNamePrefix: exports.ImageArtifactNamePrefixSchema.optional(),
 })
-    .strict();
+    .strict()
+    .superRefine(requireAuthUsernameExactlyWithToken);
 exports.BiomeSourceSpecSchema = zod_1.z.discriminatedUnion('kind', [
     exports.WorkspaceBiomeSourceSchema,
     exports.DistributionBiomeSourceSchema,

package/dist/distribution/lib/biome-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"biome-source.js","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAiDxB,IAAY,eAWX;AAXD,WAAY,eAAe;IAEzB,0CAAuB,CAAA;IAEvB,gDAA6B,CAAA;IAE7B,8BAAW,CAAA;IAEX,8BAAW,CAAA;IAEX,8BAAW,CAAA;AACb,CAAC,EAXW,eAAe,+BAAf,eAAe,QAW1B;AAEY,QAAA,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAOtD,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;AAE1E,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,6BAAqB;CAC5B,CAAC;AAWF,SAAS,wBAAwB,CAAC,KAAa,EAAE,GAAoB;IACnE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAa,EACb,GAAoB;IAEpB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,0FAA0F;SAC7F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAEY,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,uBAAuB,CAAC;KAC5B,KAAK,CAAC,cAAc,EAAE,yBAAyB,CAAC;KAChD,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,gCAAgC,CAAC,CAAC;AAmDpC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,EAAE;KACR,KAAK,CACJ,6BAA6B,EAC7B,6EAA6E;IAC3E,yEAAyE,CAC5E,CAAC;AASS,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAWC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC7D,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,uCAA+B;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAwDC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,GAAG,EAAE,kCAA0B;IAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,uCAA+B,CAAC,QAAQ,EAAE;IACzD,eAAe,EAAE,qCAA6B,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,kCAA0B;IAC1B,qCAA6B;IAC7B,4BAAoB;IACpB,4BAAoB;IACpB,4BAAoB;CACrB,CAAC,CAAC;AAOU,QAAA,wBAAwB,GAAG,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC;AAa1D,QAAA,mCAAmC,GAAG,OAAC,CAAC,kBAAkB,CACrE,MAAM,EACN,CAAC,4BAAoB,EAAE,4BAAoB,EAAE,4BAAoB,CAAC,CACnE,CAAC;AAaW,QAAA,yBAAyB,GAAG,OAAC;KACvC,KAAK,CAAC,2CAAmC,CAAC;KAC1C,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,OAAO,EAAE,0BAA0B,MAAM,CAAC,IAAI,2EAA2E;aAC1H,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"biome-source.js","sourceRoot":"","sources":["../../../src/distribution/lib/biome-source.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAiDxB,IAAY,eAWX;AAXD,WAAY,eAAe;IAEzB,0CAAuB,CAAA;IAEvB,gDAA6B,CAAA;IAE7B,8BAAW,CAAA;IAEX,8BAAW,CAAA;IAEX,8BAAW,CAAA;AACb,CAAC,EAXW,eAAe,+BAAf,eAAe,QAW1B;AAEY,QAAA,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAOtD,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;AAE1E,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,6BAAqB;CAC5B,CAAC;AAWF,SAAS,wBAAwB,CAAC,KAAa,EAAE,GAAoB;IACnE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAa,EACb,GAAoB;IAEpB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EACL,0FAA0F;SAC7F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAEY,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,EAAE;KACR,GAAG,CAAC,uBAAuB,CAAC;KAC5B,KAAK,CAAC,cAAc,EAAE,yBAAyB,CAAC;KAChD,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAE5B,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,gCAAgC,CAAC,CAAC;AAmDpC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,EAAE;KACR,KAAK,CACJ,6BAA6B,EAC7B,6EAA6E;IAC3E,yEAAyE,CAC5E,CAAC;AASS,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,OAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC7D,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,uCAA+B;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AASC,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,KAAK,CAAC,WAAW,EAAE,8DAA8D,CAAC,CAAC;AAOtF,SAAS,mCAAmC,CAC1C,KAGC,EACD,GAAoB;IAEpB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,kKAAkK;SACrK,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,8FAA8F;SACxG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAuDY,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,GAAG,eAAe;IAClB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;IACpC,GAAG,EAAE,kCAA0B;IAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,6BAAqB,CAAC,QAAQ,EAAE;IAC9C,aAAa,EAAE,uCAA+B,CAAC,QAAQ,EAAE;IACzD,eAAe,EAAE,qCAA6B,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,mCAAmC,CAAC,CAAC;AAIvC,QAAA,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,kCAA0B;IAC1B,qCAA6B;IAC7B,4BAAoB;IACpB,4BAAoB;IACpB,4BAAoB;CACrB,CAAC,CAAC;AAOU,QAAA,wBAAwB,GAAG,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC;AAa1D,QAAA,mCAAmC,GAAG,OAAC,CAAC,kBAAkB,CACrE,MAAM,EACN,CAAC,4BAAoB,EAAE,4BAAoB,EAAE,4BAAoB,CAAC,CACnE,CAAC;AAaW,QAAA,yBAAyB,GAAG,OAAC;KACvC,KAAK,CAAC,2CAAmC,CAAC;KAC1C,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,OAAO,EAAE,0BAA0B,MAAM,CAAC,IAAI,2EAA2E;aAC1H,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/distribution/lib/customer-edition-definition.d.ts

@@ -0,0 +1,45 @@
+import { z } from 'zod';
+export declare const CustomerEditionSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<import("./biome-source").BiomeSourceKind.Git>;
+    url: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+    authUsername: z.ZodOptional<z.ZodString>;
+    imageRegistry: z.ZodOptional<z.ZodString>;
+    imageNamePrefix: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+}, z.core.$strict>;
+export type CustomerEditionSource = z.infer<typeof CustomerEditionSourceSchema>;
+export declare const CustomerEditionDefinitionSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    requiredPlatforms: z.ZodType<readonly import("./runtime-image-platform").RuntimeImagePlatformKey[], unknown, z.core.$ZodTypeInternals<readonly import("./runtime-image-platform").RuntimeImagePlatformKey[], unknown>>;
+    include: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        biome: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+        mandatory: z.ZodOptional<z.ZodBoolean>;
+        installPolicy: z.ZodOptional<z.ZodEnum<typeof import("./install-policy").BiomeInstallPolicy>>;
+    }, z.core.$strict>>>;
+    trustCeiling: z.ZodOptional<z.ZodObject<{
+        assignments: z.ZodArray<z.ZodObject<{
+            domain: z.ZodString;
+            biomes: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    sources: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<import("./biome-source").BiomeSourceKind.Git>;
+        url: z.ZodString;
+        ref: z.ZodOptional<z.ZodString>;
+        authTokenEnv: z.ZodOptional<z.ZodString>;
+        authUsername: z.ZodOptional<z.ZodString>;
+        imageRegistry: z.ZodOptional<z.ZodString>;
+        imageNamePrefix: z.ZodOptional<z.ZodString>;
+        name: z.ZodString;
+    }, z.core.$strict>>>>;
+}, z.core.$strict>;
+export type CustomerEditionDefinition = z.infer<typeof CustomerEditionDefinitionSchema>;
+export declare function parseCustomerEditionDefinition(raw: unknown): CustomerEditionDefinition;
+export declare function customerTrustCeilingIssues(definition: CustomerEditionDefinition, sourceBiomeIds: readonly string[]): readonly string[];
+//# sourceMappingURL=customer-edition-definition.d.ts.map

package/dist/distribution/lib/customer-edition-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-edition-definition.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8CxB,eAAO,MAAM,2BAA2B;;;;;;;;;kBAoBvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0DxC,CAAC;AACL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B;AAcD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,yBAAyB,EACrC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,SAAS,MAAM,EAAE,CAuBnB"}

package/dist/distribution/lib/customer-edition-definition.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CustomerEditionDefinitionSchema = exports.CustomerEditionSourceSchema = void 0;
+exports.parseCustomerEditionDefinition = parseCustomerEditionDefinition;
+exports.customerTrustCeilingIssues = customerTrustCeilingIssues;
+const zod_1 = require("zod");
+const process_topology_1 = require("../../process-topology");
+const biome_source_1 = require("./biome-source");
+const distribution_selector_1 = require("./distribution-selector");
+const runtime_image_platform_1 = require("./runtime-image-platform");
+const FULL_HEX_OBJECT_ID = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i;
+exports.CustomerEditionSourceSchema = biome_source_1.GitBiomeSourceSchema.superRefine((source, context) => {
+    if (source.ref === undefined) {
+        context.addIssue({
+            code: 'custom',
+            path: ['ref'],
+            message: '`ref` is required on a customer source: name the branch or tag the edition follows',
+        });
+        return;
+    }
+    if (FULL_HEX_OBJECT_ID.test(source.ref)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['ref'],
+            message: '`ref` names a branch or a tag, never a commit id — the seal resolves the ref and records the commit in the lock',
+        });
+    }
+});
+exports.CustomerEditionDefinitionSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(1),
+    id: zod_1.z.string().min(1),
+    displayName: zod_1.z.string().min(1),
+    description: zod_1.z.string().min(1).optional(),
+    requiredPlatforms: runtime_image_platform_1.DistributionRequiredPlatformsSchema,
+    include: zod_1.z.array(distribution_selector_1.DistributionBiomeSelectorSchema).readonly(),
+    trustCeiling: process_topology_1.ProcessTrustPolicySchema.optional(),
+    sources: zod_1.z
+        .array(exports.CustomerEditionSourceSchema)
+        .min(1, 'an empty `sources` says nothing — omit the key')
+        .readonly()
+        .optional(),
+})
+    .strict()
+    .superRefine((definition, context) => {
+    const included = new Set();
+    definition.include.forEach((selector, index) => {
+        if (included.has(selector.biome)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['include', index, 'biome'],
+                message: `biome "${selector.biome}" is included twice — a biome is named once, with its options`,
+            });
+        }
+        included.add(selector.biome);
+    });
+    if (definition.sources !== undefined) {
+        const named = biome_source_1.DistributionSourcesSchema.safeParse(definition.sources);
+        for (const issue of named.success ? [] : named.error.issues) {
+            context.addIssue({
+                code: 'custom',
+                path: ['sources', ...issue.path],
+                message: issue.message,
+            });
+        }
+    }
+    if (definition.sources === undefined) {
+        if (definition.trustCeiling !== undefined) {
+            context.addIssue({
+                code: 'custom',
+                path: ['trustCeiling'],
+                message: '`trustCeiling` assigns the biomes of the definition\'s own sources and is refused when it declares none',
+            });
+        }
+        return;
+    }
+    if (definition.trustCeiling === undefined) {
+        context.addIssue({
+            code: 'custom',
+            path: ['trustCeiling'],
+            message: '`trustCeiling` is required when the definition declares `sources`: every biome drawn from them is assigned a trust domain, by name',
+        });
+    }
+});
+function parseCustomerEditionDefinition(raw) {
+    const result = exports.CustomerEditionDefinitionSchema.safeParse(raw);
+    if (!result.success) {
+        throw new Error(`Invalid customer edition definition: ${result.error.issues
+            .map((issue) => `[${issue.path.join('.')}] ${issue.message}`)
+            .join('; ')}`);
+    }
+    return result.data;
+}
+function customerTrustCeilingIssues(definition, sourceBiomeIds) {
+    const fromSources = new Set(sourceBiomeIds);
+    const assigned = new Set((definition.trustCeiling?.assignments ?? []).flatMap((assignment) => assignment.biomes));
+    const issues = [];
+    for (const biomeId of [...fromSources].sort()) {
+        if (!assigned.has(biomeId)) {
+            issues.push(`biome "${biomeId}" comes from the definition's sources and \`trustCeiling\` assigns it no trust domain`);
+        }
+    }
+    for (const biomeId of [...assigned].sort()) {
+        if (!fromSources.has(biomeId)) {
+            issues.push(`\`trustCeiling\` assigns biome "${biomeId}", which no source of the definition carries — the ceiling covers the definition's own sources and nothing else`);
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=customer-edition-definition.js.map

package/dist/distribution/lib/customer-edition-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-edition-definition.js","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":";;;AAwIA,wEAYC;AAcD,gEA0BC;AA5LD,6BAAwB;AAExB,6DAAkE;AAElE,iDAAiF;AACjF,mEAA0E;AAC1E,qEAA+E;AAkC/E,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAMjD,QAAA,2BAA2B,GAAG,mCAAoB,CAAC,WAAW,CACzE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAClB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,oFAAoF;SACvF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,iHAAiH;SACpH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAGW,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,4DAAmC;IACtD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,uDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC5D,YAAY,EAAE,2CAAwB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,mCAA2B,CAAC;SAClC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;SACxD,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC;gBACjC,OAAO,EAAE,UAAU,QAAQ,CAAC,KAAK,+DAA+D;aACjG,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,wCAAyB,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,oIAAoI;SACvI,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AASL,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAcD,SAAgB,0BAA0B,CACxC,UAAqC,EACrC,cAAiC;IAEjC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAClC,CACF,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,uFAAuF,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,iHAAiH,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/distribution/lib/delivered-biome.d.ts

@@ -0,0 +1,11 @@
+import type { BiomeContentHash } from "./kernel-contract-authority";
+import type { VerifiedEditionResolution, VerifiedUnsplitEditionResolution } from "./verified-resolved-deployment";
+export interface DeliveredBiome {
+    readonly biomeContentHash: BiomeContentHash;
+}
+export declare class DeliveredBiomeInvariantError extends Error {
+    readonly biomeId: string;
+    constructor(biomeId: string);
+}
+export declare function deliveredBiome(resolution: VerifiedEditionResolution | VerifiedUnsplitEditionResolution, biomeId: string): DeliveredBiome | undefined;
+//# sourceMappingURL=delivered-biome.d.ts.map

package/dist/distribution/lib/delivered-biome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivered-biome.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAGD,qBAAa,4BAA6B,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAOrC;AAQD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,yBAAyB,GAAG,gCAAgC,EACxE,OAAO,EAAE,MAAM,GACd,cAAc,GAAG,SAAS,CAO5B"}

package/dist/distribution/lib/delivered-biome.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliveredBiomeInvariantError = void 0;
+exports.deliveredBiome = deliveredBiome;
+class DeliveredBiomeInvariantError extends Error {
+    biomeId;
+    constructor(biomeId) {
+        super(`biome "${biomeId}" is placed by the verified resolved deployment but absent from its lock; ` +
+            `verification refuses that case (biome-not-in-lock), so this resolution was not minted by verify.`);
+        this.biomeId = biomeId;
+        this.name = "DeliveredBiomeInvariantError";
+    }
+}
+exports.DeliveredBiomeInvariantError = DeliveredBiomeInvariantError;
+function deliveredBiome(resolution, biomeId) {
+    if (!resolution.resolved.biomes.some((biome) => biome.id === biomeId)) {
+        return undefined;
+    }
+    const locked = resolution.lock.biomes.find((biome) => biome.id === biomeId);
+    if (locked === undefined)
+        throw new DeliveredBiomeInvariantError(biomeId);
+    return { biomeContentHash: locked.biomeContentHash };
+}
+//# sourceMappingURL=delivered-biome.js.map

package/dist/distribution/lib/delivered-biome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivered-biome.js","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":";;;AA4BA,wCAUC;AA1BD,MAAa,4BAA6B,SAAQ,KAAK;IAChC;IAArB,YAAqB,OAAe;QAClC,KAAK,CACH,UAAU,OAAO,4EAA4E;YAC3F,kGAAkG,CACrG,CAAC;QAJiB,YAAO,GAAP,OAAO,CAAQ;QAKlC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AARD,oEAQC;AAQD,SAAgB,cAAc,CAC5B,UAAwE,EACxE,OAAe;IAEf,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC5E,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AACvD,CAAC"}