@xemahq/contracts 0.75.0 → 0.77.0

package/dist/distribution/lib/distribution-lock.d.ts

@@ -11,6 +11,7 @@ import { BiomeSourceKind } from './biome-source';
 import { type DistributionOwner, type DistributionVisibility } from './distribution-ownership';
 import { type LockedNexusBinding } from './nexus-binding';
 import { type NexusServiceProvision, type NexusServiceRequirement } from './resolve-nexus-bindings';
+import { type BiomeContentHash, type BiomeSourceManifestHash, type OciDigest } from './kernel-contract-authority';
 export interface BiomeServiceOwnerIdentity {
     kind: 'biome';
     biomeId: string;
@@ -18,7 +19,7 @@ export interface BiomeServiceOwnerIdentity {
     repo: string;
     path: string;
     version: string;
-    sourceManifestHash: string;
+    sourceManifestHash: BiomeSourceManifestHash;
 }
 export declare const BiomeServiceOwnerIdentitySchema: z.ZodType<BiomeServiceOwnerIdentity>;
 export interface PlatformServiceOwnerIdentity {
@@ -72,8 +73,6 @@ export interface LockedBiomeSource {
     imageRegistry?: string;
     imageNamePrefix?: string;
 }
-export type LockedBiomeSourceV2 = Omit<LockedBiomeSource, 'imageNamePrefix'>;
-export declare const LockedBiomeSourceV2Schema: z.ZodType<LockedBiomeSourceV2>;
 export declare const LockedBiomeSourceSchema: z.ZodType<LockedBiomeSource>;
 export interface LockedBiome {
     id: string;
@@ -102,7 +101,6 @@ export interface LockedBiome {
     workflowSubjects?: readonly LockedWorkflowSubject[];
     trustCeiling?: string;
     workerImages: Readonly<Record<string, LockedWorkerImage>>;
-    imageDigest?: string;
     displayName: string;
     packageName: string | null;
     requiresServerBiomes: readonly string[];
@@ -110,7 +108,8 @@ export interface LockedBiome {
     audience: BiomeAudience;
     storeListed: boolean;
     systemSurface: boolean;
-    sourceManifestHash: string;
+    sourceManifestHash: BiomeSourceManifestHash;
+    biomeContentHash: BiomeContentHash;
     display?: LockedBiomeDisplay;
     source?: LockedBiomeSource;
 }
@@ -177,10 +176,6 @@ export interface LockedBiomeDisplay {
     summary?: string;
     accent?: string;
 }
-export type LockedBiomeV3 = Omit<LockedBiome, 'bundleSource' | 'serviceResources' | 'serviceProcessFacts' | 'nexusProvides' | 'nexusRequires' | 'workerTaskQueues' | 'workflowClients' | 'workflowSubjects' | 'trustCeiling' | 'workerImages'>;
-export type LockedBiomeV2 = Omit<LockedBiomeV3, 'serviceDatabaseExtensions' | 'source'> & {
-    source?: LockedBiomeSourceV2;
-};
 export interface LockedServiceProcessFacts {
     componentKind: BiomeComponentKind.Service | BiomeComponentKind.Worker;
     scalingMode: BiomeScalingMode;
@@ -204,9 +199,8 @@ export declare const LockedServiceProcessFactsSchema: z.ZodObject<{
 export declare function lockedVersionedWorkers(biome: {
     readonly workerTaskQueues?: Readonly<Record<string, readonly LockedWorkerTaskQueue[]>> | undefined;
 }): readonly string[];
-export declare const LockedBiomeV2Schema: z.ZodType<LockedBiomeV2>;
-export declare const LockedBiomeV3Schema: z.ZodType<LockedBiomeV3>;
 export declare const LockedBiomeSchema: z.ZodType<LockedBiome>;
+export type UnsealedLockedBiome = Omit<LockedBiome, 'biomeContentHash'>;
 export interface LockedPlatformService {
     name: string;
     tier: PlatformServiceTier;
@@ -218,12 +212,9 @@ export interface CapabilityDomainOwner {
     biomeId: string;
 }
 export declare const CapabilityDomainOwnerSchema: z.ZodType<CapabilityDomainOwner>;
-export declare const DISTRIBUTION_LOCK_SCHEMA_VERSIONS: readonly [2, 3, 4];
+export declare const DISTRIBUTION_LOCK_SCHEMA_VERSIONS: readonly [5];
 export type DistributionLockSchemaVersion = (typeof DISTRIBUTION_LOCK_SCHEMA_VERSIONS)[number];
-export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE: 2;
-export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION: 2;
-export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION_V3: 3;
-export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST: 4;
+export declare const DISTRIBUTION_LOCK_SCHEMA_VERSION: 5;
 export interface DistributionLockBody {
     distributionId: string;
     capabilityDomainOwners: readonly CapabilityDomainOwner[];
@@ -232,48 +223,51 @@ export interface DistributionLockBody {
     inputHash: string;
     owner?: DistributionOwner;
     visibility?: DistributionVisibility;
+    catalogueDigest?: OciDigest;
 }
-export interface DistributionLockV2 extends DistributionLockBody {
-    schemaVersion: typeof DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE;
-    biomes: readonly LockedBiomeV2[];
-}
-export interface DistributionLockV3 extends DistributionLockBody {
-    schemaVersion: typeof DISTRIBUTION_LOCK_SCHEMA_VERSION_V3;
-    biomes: readonly LockedBiomeV3[];
-}
-export interface DistributionLockV4 extends DistributionLockBody {
-    schemaVersion: typeof DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST;
+export interface DistributionLock extends DistributionLockBody {
+    schemaVersion: typeof DISTRIBUTION_LOCK_SCHEMA_VERSION;
     biomes: readonly LockedBiome[];
     resolution?: DistributionLockResolution;
     nexusBindings?: readonly LockedNexusBinding[];
 }
+export declare const UNSEALED_DISTRIBUTION_LOCK_SCHEMA: "xema.distribution-lock.unsealed/v1";
+export interface UnsealedDistributionLock extends DistributionLockBody {
+    unsealedSchema: typeof UNSEALED_DISTRIBUTION_LOCK_SCHEMA;
+    biomes: readonly UnsealedLockedBiome[];
+    resolution?: DistributionLockResolution;
+    nexusBindings?: readonly LockedNexusBinding[];
+}
 export interface DistributionLockResolution {
     mode: DistributionResolutionMode;
     entries: readonly ClosureEntry[];
 }
 export declare const DistributionLockResolutionSchema: z.ZodType<DistributionLockResolution>;
-export type DistributionLock = DistributionLockV2 | DistributionLockV3 | DistributionLockV4;
 declare const distributionLockReadView: unique symbol;
 export type DistributionLockReadView = DistributionLock & {
     readonly [distributionLockReadView]: true;
 };
-export type DistributionLockWriterInput = DistributionLockBody & {
-    readonly biomes: readonly LockedBiome[];
-    readonly resolution?: DistributionLockResolution;
-    readonly nexusBindings?: readonly LockedNexusBinding[];
-    readonly [distributionLockReadView]?: never;
-};
-export declare const DistributionLockV2Schema: z.ZodType<DistributionLockV2>;
-export declare const DistributionLockV3Schema: z.ZodType<DistributionLockV3>;
-export declare const DistributionLockV4Schema: z.ZodType<DistributionLockV4>;
+export declare const UnsealedDistributionLockSchema: z.ZodType<UnsealedDistributionLock>;
 export declare const DistributionLockSchema: z.ZodType<DistributionLock>;
 export declare const DistributionLockReaderSchema: z.ZodType<DistributionLock>;
-export declare function distributionLockSchemaVersionFor(body: Pick<DistributionLockBody, never> & {
-    readonly biomes: readonly LockedBiome[];
-    readonly resolution?: DistributionLockResolution | undefined;
-    readonly nexusBindings?: readonly LockedNexusBinding[] | undefined;
-}): DistributionLockSchemaVersion;
-export declare function sealDistributionLock(body: DistributionLockWriterInput): DistributionLock;
+export type DistributionLockShape = 'sealed' | 'unsealed';
+export declare class DistributionLockShapeError extends Error {
+    readonly expected: DistributionLockShape;
+    readonly actual: DistributionLockShape;
+    constructor(expected: DistributionLockShape, actual: DistributionLockShape);
+}
+export declare enum DistributionLockVersionErrorCode {
+    UnsupportedSchemaVersion = "unsupported-schema-version"
+}
+export declare class DistributionLockVersionError extends Error {
+    readonly code: DistributionLockVersionErrorCode;
+    constructor(message: string);
+}
+export declare function sealDistributionLock(unsealed: UnsealedDistributionLock, contentHashes: ReadonlyMap<string, BiomeContentHash>): DistributionLock;
+export declare function unsealedProjection(lock: DistributionLock & {
+    readonly [distributionLockReadView]?: never;
+}): UnsealedDistributionLock;
+export declare function parseUnsealedDistributionLock(raw: unknown): UnsealedDistributionLock;
 export declare function parseDistributionLock(raw: unknown): DistributionLock;
 export declare function parseDistributionLockForReading(raw: unknown): DistributionLockReadView;
 export {};

package/dist/distribution/lib/distribution-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"distribution-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/distribution-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,kBAAkB,EAIlB,gBAAgB,EAEhB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAUrB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EAKhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,+BAA+B,EAU7B,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,kCAAkC,EAKhC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,eAAO,MAAM,0BAA0B,EAGjC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAOtC,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,eAAO,MAAM,6BAA6B,EAM3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAMlD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,4BAA4B,EAK1B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAuBjD,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,eAAe,CAAC;IACtB,WAAW,EAAE,mBAAmB,CAAC;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAED,eAAO,MAAM,2BAA2B,EASzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYhD,wBAAgB,6BAA6B,CAC3C,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,EAC1E,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,GACzE,MAAM,CAMR;AAsDD,eAAO,MAAM,4BAA4B,EAKvB,CAAC,CAAC,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;AAM9D,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,GACX,SAAS,qBAAqB,EAAE,CAUlC;AAwBD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,qBAAqB,CAAC;CACrC;AAED,eAAO,MAAM,sBAAsB,EAcpB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA+B3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;IAE1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAOD,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AAgB7E,eAAO,MAAM,yBAAyB,EAEvB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAS9C,eAAO,MAAM,uBAAuB,EACL,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAQ5D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IAEpB,MAAM,EAAE,WAAW,CAAC;IAEpB,SAAS,EAAE,OAAO,CAAC;IAEnB,aAAa,EAAE,kBAAkB,CAAC;IAKlC,MAAM,EAAE,eAAe,CAAC;IAExB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IAUb,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAmB5B,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAsBnD,yBAAyB,CAAC,EAAE,QAAQ,CAClC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CACjD,CAAC;IAeF,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAmCzC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAKrC,mBAAmB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IA0BxD,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAqBpD,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAkB1E,aAAa,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,aAAa,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAqBnD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAiB9E,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAiB5E,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAapD,YAAY,CAAC,EAAE,MAAM,CAAC;IA4BtB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAE1D,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,WAAW,EAAE,MAAM,CAAC;IAMpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,QAAQ,EAAE,aAAa,CAAC;IAExB,WAAW,EAAE,OAAO,CAAC;IAErB,aAAa,EAAE,OAAO,CAAC;IAEvB,kBAAkB,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAS7B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,uBAAuB;;;kBAKzB,CAAC;AAOZ,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;CAClC;AAED,eAAO,MAAM,0BAA0B;;;;;;;kBAM5B,CAAC;AAOZ,oBAAY,yBAAyB;IACnC,KAAK,UAAU;CAChB;AAYD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAaD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,EAAE,CAAC;CAC1C;AAED,eAAO,MAAM,2BAA2B;;;kBAU7B,CAAC;AAUZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAC1D,SAAS,CAAC;IACd,QAAQ,CAAC,eAAe,CAAC,EACrB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,GACzD,SAAS,CAAC;CACf,GAAG,qBAAqB,EAAE,CAS1B;AAGD,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,yBAAyB,EAAE,CAAC;IAEzC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAkBD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE;IACJ,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;KAC1E,EAAE,CAAC;CACL,EACD,QAAQ,EAAE,0BAA0B,GACnC,MAAM,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CA+C3C;AAOD,eAAO,MAAM,2BAA2B;;;oBAA2B,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAGhF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkBD,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,WAAW,EACT,cAAc,GACd,kBAAkB,GAClB,qBAAqB,GACrB,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,GACd,cAAc,CACjB,CAAC;AAYF,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,aAAa,EACb,2BAA2B,GAAG,QAAQ,CACvC,GAAG;IACF,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B,CAAC;AAWF,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACtE,WAAW,EAAE,gBAAgB,CAAC;IAC9B,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;kBAMjC,CAAC;AAscZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACpG,GAAG,SAAS,MAAM,EAAE,CAEpB;AAUD,eAAO,MAAM,mBAAmB,EACI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AA6B7D,eAAO,MAAM,mBAAmB,EACI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AA4C7D,eAAO,MAAM,iBAAiB,EACM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AA6C3D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,mBAAmB,CAAC;IAI1B,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,2BAA2B,EAsBhC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAqBzC,MAAM,WAAW,qBAAqB;IAEpC,MAAM,EAAE,MAAM,CAAC;IAEf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,2BAA2B,EAKzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAiFhD,eAAO,MAAM,iCAAiC,oBAAqB,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAOrD,eAAO,MAAM,yCAAyC,EAAG,CAAU,CAAC;AAcpE,eAAO,MAAM,gCAAgC,GACF,CAAC;AAO5C,eAAO,MAAM,mCAAmC,EAAG,CAAU,CAAC;AAoB9D,eAAO,MAAM,uCAAuC,EAAG,CAAU,CAAC;AAMlE,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IAWvB,sBAAsB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEzD,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEnD,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAUlB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAa1B,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAGD,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,aAAa,EAAE,OAAO,yCAAyC,CAAC;IAChE,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;CAClC;AAOD,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,aAAa,EAAE,OAAO,mCAAmC,CAAC;IAC1D,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;CAClC;AAQD,MAAM,WAAW,kBAAmB,SAAQ,oBAAoB;IAC9D,aAAa,EAAE,OAAO,uCAAuC,CAAC;IAC9D,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAQ/B,UAAU,CAAC,EAAE,0BAA0B,CAAC;IAQxC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C;AAOD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAClC;AAED,eAAO,MAAM,gCAAgC,EA6B1B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAqDzD,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,CAAC;AAOvB,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAC;AActD,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG;IACxD,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC;CAC3C,CAAC;AAMF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,GAAG;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD,QAAQ,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAC;CAC7C,CAAC;AA8KF,eAAO,MAAM,wBAAwB,EACI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEvE,eAAO,MAAM,wBAAwB,EACI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEvE,eAAO,MAAM,wBAAwB,EACI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAqBvE,eAAO,MAAM,sBAAsB,EAIlB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA2B7C,eAAO,MAAM,4BAA4B,EAOzB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAmB5C,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,GAAG;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;CACpE,GACA,6BAA6B,CAY/B;AASD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,2BAA2B,GAChC,gBAAgB,CAGlB;AA8CD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAEpE;AASD,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,OAAO,GACX,wBAAwB,CAK1B"}
+{"version":3,"file":"distribution-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/distribution-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,kBAAkB,EAIlB,gBAAgB,EAEhB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAUrB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EAKhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,SAAS,EACf,MAAM,6BAA6B,CAAC;AAGrC,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,uBAAuB,CAAC;CAC7C;AAED,eAAO,MAAM,+BAA+B,EAU7B,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,kCAAkC,EAKhC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,eAAO,MAAM,0BAA0B,EAGjC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAOtC,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,eAAO,MAAM,6BAA6B,EAM3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAMlD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,4BAA4B,EAK1B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAuBjD,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,eAAe,CAAC;IACtB,WAAW,EAAE,mBAAmB,CAAC;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAED,eAAO,MAAM,2BAA2B,EASzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYhD,wBAAgB,6BAA6B,CAC3C,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,EAC1E,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,GACzE,MAAM,CAMR;AAsDD,eAAO,MAAM,4BAA4B,EAKvB,CAAC,CAAC,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;AAM9D,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,GACX,SAAS,qBAAqB,EAAE,CAUlC;AAwBD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,qBAAqB,CAAC;CACrC;AAED,eAAO,MAAM,sBAAsB,EAcpB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA+B3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;IAE1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAWD,eAAO,MAAM,uBAAuB,EAKrB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAO5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IAEpB,MAAM,EAAE,WAAW,CAAC;IAEpB,SAAS,EAAE,OAAO,CAAC;IAEnB,aAAa,EAAE,kBAAkB,CAAC;IAKlC,MAAM,EAAE,eAAe,CAAC;IAExB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IAUb,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAmB5B,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAsBnD,yBAAyB,CAAC,EAAE,QAAQ,CAClC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CACjD,CAAC;IAeF,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAiCzC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAKrC,mBAAmB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IA0BxD,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAqBpD,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAkB1E,aAAa,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,aAAa,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAqBnD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAiB9E,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAiB5E,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAapD,YAAY,CAAC,EAAE,MAAM,CAAC;IA4BtB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAS1D,WAAW,EAAE,MAAM,CAAC;IAMpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,QAAQ,EAAE,aAAa,CAAC;IAExB,WAAW,EAAE,OAAO,CAAC;IAErB,aAAa,EAAE,OAAO,CAAC;IAEvB,kBAAkB,EAAE,uBAAuB,CAAC;IAE5C,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAS7B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,uBAAuB;;;kBAKzB,CAAC;AAOZ,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;CAClC;AAED,eAAO,MAAM,0BAA0B;;;;;;;kBAM5B,CAAC;AAOZ,oBAAY,yBAAyB;IACnC,KAAK,UAAU;CAChB;AAYD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAaD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,EAAE,CAAC;CAC1C;AAED,eAAO,MAAM,2BAA2B;;;kBAU7B,CAAC;AAUZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAC1D,SAAS,CAAC;IACd,QAAQ,CAAC,eAAe,CAAC,EACrB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,GACzD,SAAS,CAAC;CACf,GAAG,qBAAqB,EAAE,CAS1B;AAGD,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,yBAAyB,EAAE,CAAC;IAEzC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAsBD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE;IACJ,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;KAC1E,EAAE,CAAC;CACL,EACD,QAAQ,EAAE,0BAA0B,GACnC,MAAM,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAqD3C;AAOD,eAAO,MAAM,2BAA2B;;;oBAA2B,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAGhF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACtE,WAAW,EAAE,gBAAgB,CAAC;IAC9B,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;kBAMjC,CAAC;AAmcZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACpG,GAAG,SAAS,MAAM,EAAE,CAEpB;AAqED,eAAO,MAAM,iBAAiB,EACI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGzD,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAiCxE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,mBAAmB,CAAC;IAI1B,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,2BAA2B,EAsBhC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAqBzC,MAAM,WAAW,qBAAqB;IAEpC,MAAM,EAAE,MAAM,CAAC;IAEf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,2BAA2B,EAKzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AA2ChD,eAAO,MAAM,iCAAiC,cAAe,CAAC;AAE9D,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAGrD,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAM3D,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IAWvB,sBAAsB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEzD,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEnD,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAUlB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAa1B,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAiBpC,eAAe,CAAC,EAAE,SAAS,CAAC;CAC7B;AAGD,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAQ/B,UAAU,CAAC,EAAE,0BAA0B,CAAC;IAQxC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C;AAGD,eAAO,MAAM,iCAAiC,EAC5C,oCAA6C,CAAC;AAUhD,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;IACpE,cAAc,EAAE,OAAO,iCAAiC,CAAC;IACzD,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C;AAOD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAClC;AAED,eAAO,MAAM,gCAAgC,EA6B1B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAkDzD,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAC;AAetD,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG;IACxD,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC;CAC3C,CAAC;AA0JF,eAAO,MAAM,8BAA8B,EACI,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AA6BnF,eAAO,MAAM,sBAAsB,EACI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA2BnE,eAAO,MAAM,4BAA4B,EACI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAGzE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAQ1D,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;gBAC3B,QAAQ,EAAE,qBAAqB,EAAE,MAAM,EAAE,qBAAqB;CAU3E;AAGD,oBAAY,gCAAgC;IAE1C,wBAAwB,+BAA+B;CACxD;AAGD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;gBACpC,OAAO,EAAE,MAAM;CAK5B;AAaD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,wBAAwB,EAClC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACnD,gBAAgB,CA0BlB;AAOD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,GAAG;IAAE,QAAQ,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE,wBAAwB,CAU1B;AAGD,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,OAAO,GACX,wBAAwB,CAa1B;AAiDD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAEpE;AASD,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,OAAO,GACX,wBAAwB,CAK1B"}

package/dist/distribution/lib/distribution-lock.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DistributionLockReaderSchema = exports.DistributionLockSchema = exports.DistributionLockV4Schema = exports.DistributionLockV3Schema = exports.DistributionLockV2Schema = exports.DistributionLockResolutionSchema = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_V3 = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE = exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS = exports.CapabilityDomainOwnerSchema = exports.LockedPlatformServiceSchema = exports.LockedBiomeSchema = exports.LockedBiomeV3Schema = exports.LockedBiomeV2Schema = exports.LockedServiceProcessFactsSchema = exports.LockedWorkerTaskQueueSchema = exports.LockedWorkflowSubjectSchema = exports.WorkflowSubjectPermission = exports.LockedWorkflowClientSchema = exports.LockedWorkerImageSchema = exports.LockedBiomeSourceSchema = exports.LockedBiomeSourceV2Schema = exports.LockedHostModuleSchema = exports.LockedServiceResourcesSchema = exports.LockedServiceResourceSchema = exports.LockedResourceProviderSchema = exports.LockedServiceDependencySchema = exports.ServiceOwnerIdentitySchema = exports.PlatformServiceOwnerIdentitySchema = exports.BiomeServiceOwnerIdentitySchema = void 0;
+exports.DistributionLockVersionError = exports.DistributionLockVersionErrorCode = exports.DistributionLockShapeError = exports.DistributionLockReaderSchema = exports.DistributionLockSchema = exports.UnsealedDistributionLockSchema = exports.DistributionLockResolutionSchema = exports.UNSEALED_DISTRIBUTION_LOCK_SCHEMA = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION = exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS = exports.CapabilityDomainOwnerSchema = exports.LockedPlatformServiceSchema = exports.LockedBiomeSchema = exports.LockedServiceProcessFactsSchema = exports.LockedWorkerTaskQueueSchema = exports.LockedWorkflowSubjectSchema = exports.WorkflowSubjectPermission = exports.LockedWorkflowClientSchema = exports.LockedWorkerImageSchema = exports.LockedBiomeSourceSchema = exports.LockedHostModuleSchema = exports.LockedServiceResourcesSchema = exports.LockedServiceResourceSchema = exports.LockedResourceProviderSchema = exports.LockedServiceDependencySchema = exports.ServiceOwnerIdentitySchema = exports.PlatformServiceOwnerIdentitySchema = exports.BiomeServiceOwnerIdentitySchema = void 0;
 exports.compareLockedServiceResources = compareLockedServiceResources;
 exports.parseLockedServiceResources = parseLockedServiceResources;
 exports.controllerTokenServiceAccount = controllerTokenServiceAccount;
@@ -8,8 +8,9 @@ exports.deriveWorkflowSubjects = deriveWorkflowSubjects;
 exports.resolveWorkflowSubjects = resolveWorkflowSubjects;
 exports.lockedWorkerTaskQueueName = lockedWorkerTaskQueueName;
 exports.lockedVersionedWorkers = lockedVersionedWorkers;
-exports.distributionLockSchemaVersionFor = distributionLockSchemaVersionFor;
 exports.sealDistributionLock = sealDistributionLock;
+exports.unsealedProjection = unsealedProjection;
+exports.parseUnsealedDistributionLock = parseUnsealedDistributionLock;
 exports.parseDistributionLock = parseDistributionLock;
 exports.parseDistributionLockForReading = parseDistributionLockForReading;
 const zod_1 = require("zod");
@@ -28,6 +29,8 @@ const biome_source_1 = require("./biome-source");
 const distribution_ownership_1 = require("./distribution-ownership");
 const nexus_binding_1 = require("./nexus-binding");
 const resolve_nexus_bindings_1 = require("./resolve-nexus-bindings");
+const kernel_contract_authority_1 = require("./kernel-contract-authority");
+const content_address_1 = require("../../content-address");
 exports.BiomeServiceOwnerIdentitySchema = zod_1.z
     .object({
     kind: zod_1.z.literal('biome'),
@@ -36,7 +39,7 @@ exports.BiomeServiceOwnerIdentitySchema = zod_1.z
     repo: zod_1.z.string().min(1),
     path: zod_1.z.string().min(1),
     version: zod_1.z.string().min(1),
-    sourceManifestHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    sourceManifestHash: kernel_contract_authority_1.BiomeSourceManifestHashSchema,
 })
     .strict();
 exports.PlatformServiceOwnerIdentitySchema = zod_1.z
@@ -145,16 +148,12 @@ const lockedBiomeSourceBaseShape = {
     commit: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
     imageRegistry: biome_source_1.CredentialFreeOciRegistrySchema.optional(),
 };
-exports.LockedBiomeSourceV2Schema = zod_1.z
-    .object(lockedBiomeSourceBaseShape)
-    .strict();
-const lockedBiomeSourceV3Object = zod_1.z
+exports.LockedBiomeSourceSchema = zod_1.z
     .object({
     ...lockedBiomeSourceBaseShape,
     imageNamePrefix: biome_source_1.ImageArtifactNamePrefixSchema.optional(),
 })
     .strict();
-exports.LockedBiomeSourceSchema = lockedBiomeSourceV3Object;
 exports.LockedWorkerImageSchema = zod_1.z
     .object({
     imageOf: zod_1.z.string().min(1),
@@ -198,6 +197,10 @@ function deriveWorkflowSubjects(biome) {
     }));
 }
 function resolveWorkflowSubjects(lock, resolved) {
+    if ((0, deployment_1.isUnsplitResolvedDeployment)(resolved)) {
+        throw new Error('resolveWorkflowSubjects: the resolved deployment is the unsplit variant, which states no ServiceAccount; ' +
+            'workflow subjects are resolved only from an engine deployment');
+    }
     const domainOf = new Map(resolved.biomes.map((biome) => [biome.id, biome.trustDomain]));
     const accountsOf = new Map();
     for (const account of resolved.serviceAccounts) {
@@ -287,7 +290,6 @@ const lockedBiomeBaseShape = {
     runtimeComponents: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
     hostModules: zod_1.z.array(exports.LockedHostModuleSchema).readonly(),
     serviceDependencies: zod_1.z.array(exports.LockedServiceDependencySchema).readonly(),
-    imageDigest: zod_1.z.string().min(1).optional(),
     displayName: zod_1.z.string().min(1),
     packageName: zod_1.z.string().min(1).nullable(),
     requiresServerBiomes: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
@@ -295,7 +297,7 @@ const lockedBiomeBaseShape = {
     audience: biome_1.BiomeAudienceSchema,
     storeListed: zod_1.z.boolean(),
     systemSurface: zod_1.z.boolean(),
-    sourceManifestHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    sourceManifestHash: kernel_contract_authority_1.BiomeSourceManifestHashSchema,
     display: LockedBiomeDisplaySchema.optional(),
 };
 const refineLockedBiome = (value, context) => {
@@ -571,15 +573,7 @@ const refineLockedTrustCeiling = (value, context) => {
 function lockedVersionedWorkers(biome) {
     return Object.keys(biome.workerTaskQueues ?? {}).sort();
 }
-const lockedBiomeV2Object = zod_1.z
-    .object({
-    ...lockedBiomeBaseShape,
-    source: exports.LockedBiomeSourceV2Schema.optional(),
-})
-    .strict()
-    .superRefine(refineLockedBiome);
-exports.LockedBiomeV2Schema = lockedBiomeV2Object;
-const lockedBiomeV3Shape = {
+const unsealedLockedBiomeShape = {
     ...lockedBiomeBaseShape,
     serviceDatabaseExtensions: zod_1.z
         .record(zod_1.z.string().min(1), zod_1.z
@@ -591,14 +585,6 @@ const lockedBiomeV3Shape = {
         .readonly()
         .optional(),
     source: exports.LockedBiomeSourceSchema.optional(),
-};
-const lockedBiomeV3Object = zod_1.z
-    .object(lockedBiomeV3Shape)
-    .strict()
-    .superRefine(refineLockedBiome);
-exports.LockedBiomeV3Schema = lockedBiomeV3Object;
-const lockedBiomeV4Shape = {
-    ...lockedBiomeV3Shape,
     bundleSource: biome_1.BiomeBundleSourceSpecSchema.optional(),
     serviceResources: zod_1.z.array(exports.LockedServiceResourceSchema).readonly().optional(),
     serviceProcessFacts: zod_1.z
@@ -621,29 +607,29 @@ const lockedBiomeV4Shape = {
         .record(zod_1.z.string().min(1), exports.LockedWorkerImageSchema)
         .readonly(),
 };
-const lockedBiomeV4Object = zod_1.z
-    .object(lockedBiomeV4Shape)
+const lockedBiomeShape = {
+    ...unsealedLockedBiomeShape,
+    biomeContentHash: kernel_contract_authority_1.BiomeContentHashSchema,
+};
+const unsealedLockedBiomeObject = zod_1.z
+    .object(unsealedLockedBiomeShape)
     .strict()
     .superRefine(refineLockedBiome)
     .superRefine(refineLockedBiomeResources);
-exports.LockedBiomeSchema = lockedBiomeV4Object;
-const readerLockedBiomeV2Object = zod_1.z
-    .looseObject({
-    ...lockedBiomeBaseShape,
-    source: exports.LockedBiomeSourceV2Schema.optional(),
-})
-    .superRefine(refineLockedBiome);
-const readerLockedBiomeV3Object = zod_1.z
-    .looseObject(lockedBiomeV3Shape)
-    .superRefine(refineLockedBiome);
-const readerLockedBiomeV4Object = zod_1.z
+const lockedBiomeObject = zod_1.z
+    .object(lockedBiomeShape)
+    .strict()
+    .superRefine(refineLockedBiome)
+    .superRefine(refineLockedBiomeResources);
+exports.LockedBiomeSchema = lockedBiomeObject;
+const readerLockedBiomeObject = zod_1.z
     .looseObject({
-    ...lockedBiomeV4Shape,
+    ...lockedBiomeShape,
     serviceResources: zod_1.z
         .array(ReaderLockedServiceResourceSchema)
         .readonly()
         .optional(),
-    workerImages: lockedBiomeV4Shape.workerImages.optional(),
+    workerImages: lockedBiomeShape.workerImages.optional(),
 })
     .superRefine(refineLockedBiome);
 exports.LockedPlatformServiceSchema = zod_1.z
@@ -675,11 +661,9 @@ exports.CapabilityDomainOwnerSchema = zod_1.z
     biomeId: zod_1.z.string().min(1),
 })
     .strict();
-exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS = [2, 3, 4];
-exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE = 2;
-exports.DISTRIBUTION_LOCK_SCHEMA_VERSION = exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE;
-exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_V3 = 3;
-exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST = 4;
+exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS = [5];
+exports.DISTRIBUTION_LOCK_SCHEMA_VERSION = 5;
+exports.UNSEALED_DISTRIBUTION_LOCK_SCHEMA = 'xema.distribution-lock.unsealed/v1';
 exports.DistributionLockResolutionSchema = zod_1.z
     .object({
     mode: distribution_roots_1.DistributionResolutionModeSchema,
@@ -737,24 +721,11 @@ const distributionLockBodyShape = {
     capabilityDomainOwners: zod_1.z.array(exports.CapabilityDomainOwnerSchema).readonly(),
     platformServices: zod_1.z.array(exports.LockedPlatformServiceSchema).readonly(),
     resolvedAt: zod_1.z.string().datetime({ offset: true }),
-    inputHash: zod_1.z.string().regex(/^[a-f0-9]{64}$/),
+    inputHash: content_address_1.Sha256HexSchema,
     owner: distribution_ownership_1.DistributionOwnerSchema.optional(),
     visibility: distribution_ownership_1.DistributionVisibilitySchema.optional(),
+    catalogueDigest: kernel_contract_authority_1.OciDigestSchema.optional(),
 };
-const distributionLockV2Object = zod_1.z
-    .object({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE),
-    biomes: zod_1.z.array(exports.LockedBiomeV2Schema).readonly(),
-    ...distributionLockBodyShape,
-})
-    .strict();
-const distributionLockV3Object = zod_1.z
-    .object({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_V3),
-    biomes: zod_1.z.array(exports.LockedBiomeV3Schema).readonly(),
-    ...distributionLockBodyShape,
-})
-    .strict();
 const refineResourceProviders = (lock, context) => {
     const shipped = new Map();
     for (const biome of lock.biomes) {
@@ -818,9 +789,9 @@ const refineCrossBiomeWorkflowClients = (lock, context) => {
         }
     });
 };
-const distributionLockV4Object = zod_1.z
+const distributionLockObject = zod_1.z
     .object({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST),
+    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION),
     biomes: zod_1.z.array(exports.LockedBiomeSchema).readonly(),
     ...distributionLockBodyShape,
     resolution: exports.DistributionLockResolutionSchema.optional(),
@@ -832,61 +803,117 @@ const distributionLockV4Object = zod_1.z
     .superRefine(nexus_binding_1.refineNexusBindings)
     .superRefine(resolve_nexus_bindings_1.refineNexusBindingsAgreeWithFacts)
     .superRefine(refineCrossBiomeWorkflowClients);
-const readerDistributionLockV2Object = zod_1.z.looseObject({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_BASELINE),
-    biomes: zod_1.z.array(readerLockedBiomeV2Object).readonly(),
-    ...distributionLockBodyShape,
-});
-const readerDistributionLockV3Object = zod_1.z.looseObject({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_V3),
-    biomes: zod_1.z.array(readerLockedBiomeV3Object).readonly(),
+const unsealedDistributionLockObject = zod_1.z
+    .object({
+    unsealedSchema: zod_1.z.literal(exports.UNSEALED_DISTRIBUTION_LOCK_SCHEMA),
+    biomes: zod_1.z.array(unsealedLockedBiomeObject).readonly(),
     ...distributionLockBodyShape,
-});
-const readerDistributionLockV4Object = zod_1.z.looseObject({
-    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST),
-    biomes: zod_1.z.array(readerLockedBiomeV4Object).readonly(),
+    resolution: exports.DistributionLockResolutionSchema.optional(),
+    nexusBindings: zod_1.z.array(nexus_binding_1.LockedNexusBindingSchema).readonly().optional(),
+})
+    .strict()
+    .superRefine(refineResourceProviders)
+    .superRefine(refineResolutionCoverage)
+    .superRefine(nexus_binding_1.refineNexusBindings)
+    .superRefine(resolve_nexus_bindings_1.refineNexusBindingsAgreeWithFacts)
+    .superRefine(refineCrossBiomeWorkflowClients);
+exports.UnsealedDistributionLockSchema = unsealedDistributionLockObject;
+const readerDistributionLockObject = zod_1.z.looseObject({
+    schemaVersion: zod_1.z.literal(exports.DISTRIBUTION_LOCK_SCHEMA_VERSION),
+    biomes: zod_1.z.array(readerLockedBiomeObject).readonly(),
     ...distributionLockBodyShape,
     resolution: exports.DistributionLockResolutionSchema.optional(),
     nexusBindings: zod_1.z.array(nexus_binding_1.LockedNexusBindingSchema).readonly().optional(),
 });
-exports.DistributionLockV2Schema = distributionLockV2Object;
-exports.DistributionLockV3Schema = distributionLockV3Object;
-exports.DistributionLockV4Schema = distributionLockV4Object;
-exports.DistributionLockSchema = zod_1.z.discriminatedUnion('schemaVersion', [
-    distributionLockV2Object,
-    distributionLockV3Object,
-    distributionLockV4Object,
-]);
-exports.DistributionLockReaderSchema = zod_1.z.discriminatedUnion('schemaVersion', [
-    readerDistributionLockV2Object,
-    readerDistributionLockV3Object,
-    readerDistributionLockV4Object,
-]);
-function distributionLockSchemaVersionFor(body) {
-    const silent = body.biomes
-        .filter((biome) => biome.workerImages === undefined)
+exports.DistributionLockSchema = distributionLockObject;
+exports.DistributionLockReaderSchema = readerDistributionLockObject;
+class DistributionLockShapeError extends Error {
+    expected;
+    actual;
+    constructor(expected, actual) {
+        super(expected === 'sealed'
+            ? `Invalid distribution.lock.json: this is an UNSEALED lock (unsealedSchema ${exports.UNSEALED_DISTRIBUTION_LOCK_SCHEMA}); only a sealed schemaVersion ${exports.DISTRIBUTION_LOCK_SCHEMA_VERSION} lock is accepted here. Seal it with sealDistributionLock, or parse it with parseUnsealedDistributionLock.`
+            : `Invalid unsealed distribution lock: this is a SEALED lock (schemaVersion ${exports.DISTRIBUTION_LOCK_SCHEMA_VERSION}); parse it with parseDistributionLock, or project it with unsealedProjection.`);
+        this.name = 'DistributionLockShapeError';
+        this.expected = expected;
+        this.actual = actual;
+    }
+}
+exports.DistributionLockShapeError = DistributionLockShapeError;
+var DistributionLockVersionErrorCode;
+(function (DistributionLockVersionErrorCode) {
+    DistributionLockVersionErrorCode["UnsupportedSchemaVersion"] = "unsupported-schema-version";
+})(DistributionLockVersionErrorCode || (exports.DistributionLockVersionErrorCode = DistributionLockVersionErrorCode = {}));
+class DistributionLockVersionError extends Error {
+    code;
+    constructor(message) {
+        super(message);
+        this.name = 'DistributionLockVersionError';
+        this.code = DistributionLockVersionErrorCode.UnsupportedSchemaVersion;
+    }
+}
+exports.DistributionLockVersionError = DistributionLockVersionError;
+const isSealedShape = (raw) => typeof raw === 'object' && raw !== null && 'schemaVersion' in raw;
+const isUnsealedShape = (raw) => typeof raw === 'object' && raw !== null && 'unsealedSchema' in raw;
+function sealDistributionLock(unsealed, contentHashes) {
+    parseUnsealedDistributionLock(unsealed);
+    const ids = new Set(unsealed.biomes.map((biome) => biome.id));
+    const unknown = [...contentHashes.keys()].filter((id) => !ids.has(id));
+    if (unknown.length > 0) {
+        throw new Error(`sealDistributionLock: content hash for biome(s) ${unknown.join(', ')}, which the lock does not ship`);
+    }
+    const missing = unsealed.biomes
+        .filter((biome) => !contentHashes.has(biome.id))
         .map((biome) => biome.id);
-    if (silent.length > 0) {
-        throw new Error(`distribution lock biome(s) ${silent.join(', ')} state no workerImages: a ` +
-            `producer states every biome's shared-image workers, {} when it has none, ` +
-            `so that an absent field can never read as "no workers"`);
+    if (missing.length > 0) {
+        throw new Error(`sealDistributionLock: no content hash for biome(s) ${missing.join(', ')}`);
     }
-    return exports.DISTRIBUTION_LOCK_SCHEMA_VERSION_LATEST;
+    const { unsealedSchema: _unsealedSchema, ...rest } = unsealed;
+    return parseDistributionLock({
+        ...rest,
+        schemaVersion: exports.DISTRIBUTION_LOCK_SCHEMA_VERSION,
+        biomes: unsealed.biomes.map((biome) => ({
+            ...biome,
+            biomeContentHash: contentHashes.get(biome.id),
+        })),
+    });
+}
+function unsealedProjection(lock) {
+    const { schemaVersion: _schemaVersion, ...rest } = lock;
+    return {
+        unsealedSchema: exports.UNSEALED_DISTRIBUTION_LOCK_SCHEMA,
+        ...rest,
+        biomes: lock.biomes.map((biome) => {
+            const { biomeContentHash: _hash, ...unsealedBiome } = biome;
+            return unsealedBiome;
+        }),
+    };
 }
-function sealDistributionLock(body) {
-    const schemaVersion = distributionLockSchemaVersionFor(body);
-    return parseDistributionLock({ ...body, schemaVersion });
+function parseUnsealedDistributionLock(raw) {
+    if (isSealedShape(raw)) {
+        throw new DistributionLockShapeError('unsealed', 'sealed');
+    }
+    const result = exports.UnsealedDistributionLockSchema.safeParse(raw);
+    if (!result.success) {
+        throw new Error(`Invalid unsealed distribution lock: ${result.error.issues
+            .map((i) => `[${i.path.join('.')}] ${i.message}`)
+            .join('; ')}`);
+    }
+    return result.data;
 }
 function parseDistributionLockWith(schema, raw) {
+    if (isUnsealedShape(raw)) {
+        throw new DistributionLockShapeError('sealed', 'unsealed');
+    }
     const version = typeof raw === 'object' && raw !== null && 'schemaVersion' in raw
         ? raw.schemaVersion
         : undefined;
     const supported = exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS.join(', ');
     if (version === undefined) {
-        throw new Error(`Invalid distribution.lock.json: missing required schemaVersion; this runtime supports schemaVersion ${supported}. Regenerate the lock with the current distribution builder.`);
+        throw new DistributionLockVersionError(`Invalid distribution.lock.json: missing required schemaVersion; this runtime supports schemaVersion ${supported}. Regenerate the lock with the current distribution builder.`);
     }
     if (!exports.DISTRIBUTION_LOCK_SCHEMA_VERSIONS.includes(version)) {
-        throw new Error(`Invalid distribution.lock.json: unsupported schemaVersion ${JSON.stringify(version)}; this runtime supports schemaVersion ${supported}. Regenerate the lock with the current distribution builder, or upgrade this runtime's @xemahq/contracts.`);
+        throw new DistributionLockVersionError(`Invalid distribution.lock.json: unsupported schemaVersion ${JSON.stringify(version)}; this runtime supports schemaVersion ${supported}. Regenerate the lock with the current distribution builder, or upgrade this runtime's @xemahq/contracts.`);
     }
     const result = schema.safeParse(raw);
     if (!result.success) {