@xemahq/contracts 0.76.0 → 0.78.0

package/dist/distribution/lib/runtime-image-source-index.d.ts

@@ -25,8 +25,13 @@ export declare const BuildStepContextDirectorySchema: z.ZodObject<{
     reason: z.ZodString;
 }, z.core.$strict>;
 export type BuildStepContextDirectory = z.infer<typeof BuildStepContextDirectorySchema>;
+export declare const ProducerWorkflowPinSchema: z.ZodObject<{
+    repository: z.ZodString;
+    workflowCommit: z.ZodString;
+}, z.core.$strict>;
+export type ProducerWorkflowPin = z.infer<typeof ProducerWorkflowPinSchema>;
 export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
+    schemaVersion: z.ZodLiteral<2>;
     contractAuthority: z.ZodObject<{
         schemaVersion: z.ZodLiteral<1>;
         generatorIdentity: z.ZodLiteral<"xema-distributions/build-runtime-image-source-index.mjs@v1">;
@@ -65,6 +70,10 @@ export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
         sourceCommit: z.ZodString;
         vendoredSourceCommit: z.ZodString;
     }, z.core.$strict>>>;
+    producerWorkflowPins: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        repository: z.ZodString;
+        workflowCommit: z.ZodString;
+    }, z.core.$strict>>>;
     platformServiceBindings: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         platformService: z.ZodString;
         subjectKind: z.ZodEnum<typeof RuntimeImageSubjectKind>;
@@ -73,4 +82,12 @@ export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type RuntimeImageSourceIndex = z.infer<typeof RuntimeImageSourceIndexSchema>;
 export declare function parseRuntimeImageSourceIndex(raw: unknown): RuntimeImageSourceIndex;
+export declare enum ProducerWorkflowPinRefusal {
+    Unpinned = "producer_workflow_unpinned",
+    Mismatch = "producer_workflow_pin_mismatch"
+}
+export declare function producerWorkflowPinRefusal(index: RuntimeImageSourceIndex, producer: {
+    readonly repository: string;
+    readonly workflowCommit: string;
+}): ProducerWorkflowPinRefusal | undefined;
 //# sourceMappingURL=runtime-image-source-index.d.ts.map

package/dist/distribution/lib/runtime-image-source-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-image-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA6CvD,eAAO,MAAM,oCAAoC;;;;;;;;;;kBAYtC,CAAC;AAeZ,eAAO,MAAM,yBAAyB;;;;;;kBAiB3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAc5E,eAAO,MAAM,+BAA+B;;;;kBASjC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4OtC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,GACX,uBAAuB,CAUzB"}
+{"version":3,"file":"runtime-image-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA8CvD,eAAO,MAAM,oCAAoC;;;;;;;;;;kBAYtC,CAAC;AAeZ,eAAO,MAAM,yBAAyB;;;;;;kBAiB3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAc5E,eAAO,MAAM,+BAA+B;;;;kBASjC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,eAAO,MAAM,yBAAyB;;;kBAM3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA+PtC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,GACX,uBAAuB,CAUzB;AAGD,oBAAY,0BAA0B;IAEpC,QAAQ,+BAA+B;IAEvC,QAAQ,mCAAmC;CAC5C;AAWD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACzE,0BAA0B,GAAG,SAAS,CAQxC"}

package/dist/distribution/lib/runtime-image-source-index.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RuntimeImageSourceIndexSchema = exports.BuildStepContextDirectorySchema = exports.CrossRepoBuildInputSchema = exports.RuntimeImageSupplementalSourceSchema = void 0;
+exports.ProducerWorkflowPinRefusal = exports.RuntimeImageSourceIndexSchema = exports.ProducerWorkflowPinSchema = exports.BuildStepContextDirectorySchema = exports.CrossRepoBuildInputSchema = exports.RuntimeImageSupplementalSourceSchema = void 0;
 exports.parseRuntimeImageSourceIndex = parseRuntimeImageSourceIndex;
+exports.producerWorkflowPinRefusal = producerWorkflowPinRefusal;
 const zod_1 = require("zod");
 const image_lock_1 = require("./image-lock");
+const image_producer_evidence_1 = require("./image-producer-evidence");
 const kernel_contract_authority_1 = require("./kernel-contract-authority");
 const RuntimeIdentitySchema = zod_1.z
     .string()
@@ -65,9 +67,15 @@ exports.BuildStepContextDirectorySchema = zod_1.z
     reason: zod_1.z.string().min(20),
 })
     .strict();
+exports.ProducerWorkflowPinSchema = zod_1.z
+    .object({
+    repository: image_producer_evidence_1.GithubRepositorySchema,
+    workflowCommit: GitCommitSchema,
+})
+    .strict();
 exports.RuntimeImageSourceIndexSchema = zod_1.z
     .object({
-    schemaVersion: zod_1.z.literal(1),
+    schemaVersion: zod_1.z.literal(2),
     contractAuthority: kernel_contract_authority_1.KernelContractAuthoritySchema,
     supplementalSubjects: zod_1.z
         .array(exports.RuntimeImageSupplementalSourceSchema)
@@ -87,6 +95,7 @@ exports.RuntimeImageSourceIndexSchema = zod_1.z
         .strict())
         .min(1)
         .readonly(),
+    producerWorkflowPins: zod_1.z.array(exports.ProducerWorkflowPinSchema).readonly(),
     platformServiceBindings: zod_1.z
         .array(zod_1.z
         .object({
@@ -228,6 +237,20 @@ exports.RuntimeImageSourceIndexSchema = zod_1.z
             });
         }
     }
+    const pinnedWorkflows = new Map();
+    for (const [index, pin] of value.producerWorkflowPins.entries()) {
+        const incumbent = pinnedWorkflows.get(pin.repository);
+        if (incumbent !== undefined) {
+            context.addIssue({
+                code: zod_1.z.ZodIssueCode.custom,
+                path: ['producerWorkflowPins', index, 'repository'],
+                message: `duplicates producerWorkflowPins[${incumbent}].repository "${pin.repository}"`,
+            });
+        }
+        else {
+            pinnedWorkflows.set(pin.repository, index);
+        }
+    }
     const platformServices = new Map();
     for (const [index, binding] of value.platformServiceBindings.entries()) {
         const incumbent = platformServices.get(binding.platformService);
@@ -252,4 +275,17 @@ function parseRuntimeImageSourceIndex(raw) {
     }
     return result.data;
 }
+var ProducerWorkflowPinRefusal;
+(function (ProducerWorkflowPinRefusal) {
+    ProducerWorkflowPinRefusal["Unpinned"] = "producer_workflow_unpinned";
+    ProducerWorkflowPinRefusal["Mismatch"] = "producer_workflow_pin_mismatch";
+})(ProducerWorkflowPinRefusal || (exports.ProducerWorkflowPinRefusal = ProducerWorkflowPinRefusal = {}));
+function producerWorkflowPinRefusal(index, producer) {
+    const pin = index.producerWorkflowPins.find((candidate) => candidate.repository === producer.repository);
+    if (pin === undefined)
+        return ProducerWorkflowPinRefusal.Unpinned;
+    return pin.workflowCommit === producer.workflowCommit
+        ? undefined
+        : ProducerWorkflowPinRefusal.Mismatch;
+}
 //# sourceMappingURL=runtime-image-source-index.js.map

package/dist/distribution/lib/runtime-image-source-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-image-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":";;;AA2WA,oEAYC;AAvXD,6BAAwB;AACxB,6CAAuD;AACvD,2EAGqC;AAErC,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACtD,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK;SACH,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACL,sEAAsE,CACvE,CAAC;AACJ,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,MAAM,KAAK,EAAE;YACpB,MAAM,CAAC,IAAI,KAAK,EAAE;YAClB,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,qDAAqD,CAAC,CAAC;AAE/C,QAAA,oCAAoC,GAAG,OAAC;KAClD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;IAC3C,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,4BAA4B;IAC3C,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,2BAA2B;IACjC,kBAAkB,EAAE,2BAA2B;IAC/C,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,yDAA6B;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAeC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IAEN,YAAY,EAAE,2BAA2B;IAMzC,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAEjD,UAAU,EAAE,2BAA2B;IAEvC,UAAU,EAAE,2BAA2B;IAEvC,eAAe,EAAE,2BAA2B;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAgBC,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IAEN,IAAI,EAAE,2BAA2B;IAEjC,IAAI,EAAE,2BAA2B;IAEjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,yDAA6B;IAChD,oBAAoB,EAAE,OAAC;SACpB,KAAK,CAAC,4CAAoC,CAAC;SAC3C,QAAQ,EAAE;IACb,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACnE,2BAA2B,EAAE,OAAC;SAC3B,KAAK,CAAC,uCAA+B,CAAC;SACtC,QAAQ,EAAE;IA0Cb,cAAc,EAAE,OAAC;SACd,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,2BAA2B;QACjC,aAAa,EAAE,4BAA4B;QAK3C,YAAY,EAAE,eAAe;QAM7B,oBAAoB,EAAE,eAAe;KACtC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,uBAAuB,EAAE,OAAC;SACvB,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,qBAAqB;QACtC,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,qBAAqB;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACvC,OAAO,EAAE,6BAA6B,SAAS,WAAW,UAAU,CAAC,IAAI,GAAG;aAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC3C,OAAO,EAAE,mCAAmC,gBAAgB,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,UAAU,CAAC;gBACjD,OAAO,EAAE,+BAA+B,cAAc,eAAe,OAAO,CAAC,QAAQ,GAAG;aACzF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5C,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAClD,UAAU,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAChD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,CAAC;gBACrD,OAAO,EACL,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG;YACV,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,eAAe,IAAI,EAAE;YAC3B,KAAK,CAAC,eAAe;SACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;gBACrC,OAAO,EACL,+EAA+E;aAClF,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAG5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBACxD,OAAO,EAAE,mCAAmC,SAAS,kBAAkB,KAAK,CAAC,eAAe,GAAG;aAChG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC;gBACnD,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;oBACrC,OAAO,EAAE,0BAA0B,IAAI,oCAAoC;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CACT,KAAK,EACL,SAAS,EACV,IAAI,KAAK,CAAC,2BAA2B,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,CAAC;gBAC5C,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0CAA0C,SAAS,GAAG;aAChE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0BAA0B,SAAS,CAAC,IAAI,oCAAoC;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBAC3D,OAAO,EAAE,sCAAsC,SAAS,sBAAsB,OAAO,CAAC,eAAe,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAML,SAAgB,4BAA4B,CAC1C,GAAY;IAEZ,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
+{"version":3,"file":"runtime-image-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":";;;AA6YA,oEAYC;AAmBD,gEAWC;AAvbD,6BAAwB;AACxB,6CAAuD;AACvD,uEAAmE;AACnE,2EAGqC;AAErC,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACtD,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK;SACH,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACL,sEAAsE,CACvE,CAAC;AACJ,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,MAAM,KAAK,EAAE;YACpB,MAAM,CAAC,IAAI,KAAK,EAAE;YAClB,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,qDAAqD,CAAC,CAAC;AAE/C,QAAA,oCAAoC,GAAG,OAAC;KAClD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;IAC3C,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,4BAA4B;IAC3C,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,2BAA2B;IACjC,kBAAkB,EAAE,2BAA2B;IAC/C,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,yDAA6B;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAeC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IAEN,YAAY,EAAE,2BAA2B;IAMzC,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAEjD,UAAU,EAAE,2BAA2B;IAEvC,UAAU,EAAE,2BAA2B;IAEvC,eAAe,EAAE,2BAA2B;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAgBC,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IAEN,IAAI,EAAE,2BAA2B;IAEjC,IAAI,EAAE,2BAA2B;IAEjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IAEN,UAAU,EAAE,gDAAsB;IAClC,cAAc,EAAE,eAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,yDAA6B;IAChD,oBAAoB,EAAE,OAAC;SACpB,KAAK,CAAC,4CAAoC,CAAC;SAC3C,QAAQ,EAAE;IACb,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACnE,2BAA2B,EAAE,OAAC;SAC3B,KAAK,CAAC,uCAA+B,CAAC;SACtC,QAAQ,EAAE;IA0Cb,cAAc,EAAE,OAAC;SACd,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,2BAA2B;QACjC,aAAa,EAAE,4BAA4B;QAK3C,YAAY,EAAE,eAAe;QAM7B,oBAAoB,EAAE,eAAe;KACtC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IAMb,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACnE,uBAAuB,EAAE,OAAC;SACvB,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,qBAAqB;QACtC,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,qBAAqB;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACvC,OAAO,EAAE,6BAA6B,SAAS,WAAW,UAAU,CAAC,IAAI,GAAG;aAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC3C,OAAO,EAAE,mCAAmC,gBAAgB,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,UAAU,CAAC;gBACjD,OAAO,EAAE,+BAA+B,cAAc,eAAe,OAAO,CAAC,QAAQ,GAAG;aACzF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5C,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAClD,UAAU,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAChD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,CAAC;gBACrD,OAAO,EACL,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG;YACV,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,eAAe,IAAI,EAAE;YAC3B,KAAK,CAAC,eAAe;SACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;gBACrC,OAAO,EACL,+EAA+E;aAClF,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAG5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBACxD,OAAO,EAAE,mCAAmC,SAAS,kBAAkB,KAAK,CAAC,eAAe,GAAG;aAChG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC;gBACnD,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;oBACrC,OAAO,EAAE,0BAA0B,IAAI,oCAAoC;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CACT,KAAK,EACL,SAAS,EACV,IAAI,KAAK,CAAC,2BAA2B,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,CAAC;gBAC5C,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0CAA0C,SAAS,GAAG;aAChE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0BAA0B,SAAS,CAAC,IAAI,oCAAoC;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC;gBACnD,OAAO,EAAE,mCAAmC,SAAS,iBAAiB,GAAG,CAAC,UAAU,GAAG;aACxF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBAC3D,OAAO,EAAE,sCAAsC,SAAS,sBAAsB,OAAO,CAAC,eAAe,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAML,SAAgB,4BAA4B,CAC1C,GAAY;IAEZ,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAGD,IAAY,0BAKX;AALD,WAAY,0BAA0B;IAEpC,qEAAuC,CAAA;IAEvC,yEAA2C,CAAA;AAC7C,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAWD,SAAgB,0BAA0B,CACxC,KAA8B,EAC9B,QAA0E;IAE1E,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC5D,CAAC;IACF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,0BAA0B,CAAC,QAAQ,CAAC;IAClE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC;AAC1C,CAAC"}

package/dist/distribution/lib/verified-resolved-deployment.d.ts

@@ -1,14 +1,24 @@
-import type { ResolvedDeployment } from "../../deployment";
+import type { EngineResolvedDeployment, UnsplitResolvedDeployment } from "../../deployment";
 import type { DistributionLockReadView } from "./distribution-lock";
 declare const verifiedBrand: unique symbol;
-export type VerifiedResolvedDeployment = ResolvedDeployment & {
+export type VerifiedResolvedDeployment = EngineResolvedDeployment & {
     readonly [verifiedBrand]: true;
 };
+declare const verifiedUnsplitBrand: unique symbol;
+export type VerifiedUnsplitResolvedDeployment = UnsplitResolvedDeployment & {
+    readonly [verifiedUnsplitBrand]: true;
+};
 declare const editionResolutionBrand: unique symbol;
 export interface VerifiedEditionResolution {
     readonly [editionResolutionBrand]: true;
     readonly resolved: VerifiedResolvedDeployment;
     readonly lock: DistributionLockReadView;
 }
+declare const unsplitEditionResolutionBrand: unique symbol;
+export interface VerifiedUnsplitEditionResolution {
+    readonly [unsplitEditionResolutionBrand]: true;
+    readonly resolved: VerifiedUnsplitResolvedDeployment;
+    readonly lock: DistributionLockReadView;
+}
 export {};
 //# sourceMappingURL=verified-resolved-deployment.d.ts.map

package/dist/distribution/lib/verified-resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verified-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verified-resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,CAAC,MAAM,aAAa,EAAE,OAAO,MAAM,CAAC;AAU3C,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG;IAC5D,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAChC,CAAC;AAEF,OAAO,CAAC,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;AAepD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;CACzC"}
+{"version":3,"file":"verified-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verified-resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,CAAC,MAAM,aAAa,EAAE,OAAO,MAAM,CAAC;AAgB3C,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,GAAG;IAClE,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAChC,CAAC;AAEF,OAAO,CAAC,MAAM,oBAAoB,EAAE,OAAO,MAAM,CAAC;AASlD,MAAM,MAAM,iCAAiC,GAAG,yBAAyB,GAAG;IAC1E,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,IAAI,CAAC;CACvC,CAAC;AAEF,OAAO,CAAC,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;AAepD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAE9C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;CACzC;AAED,OAAO,CAAC,MAAM,6BAA6B,EAAE,OAAO,MAAM,CAAC;AAO3D,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,iCAAiC,CAAC;IAErD,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;CACzC"}

package/dist/distribution/lib/verify-delivered-locks.d.ts

@@ -0,0 +1,41 @@
+import { type AuthorizationLockReadView } from "./authorization-lock";
+import { type ImageLock } from "./image-lock";
+import type { VerifiedEditionResolution, VerifiedUnsplitEditionResolution } from "./verified-resolved-deployment";
+export declare enum ImagesLockRefusalCode {
+    BytesMissing = "images-lock-bytes-missing",
+    DigestMismatch = "images-lock-digest-mismatch",
+    Unparseable = "images-lock-unparseable",
+    DistributionMismatch = "images-lock-distribution-mismatch"
+}
+export declare enum AuthorizationLockRefusalCode {
+    BytesMissing = "authorization-lock-bytes-missing",
+    DigestMismatch = "authorization-lock-digest-mismatch",
+    Unparseable = "authorization-lock-unparseable",
+    DistributionMismatch = "authorization-lock-distribution-mismatch"
+}
+export interface ImagesLockRefusal {
+    readonly code: ImagesLockRefusalCode;
+    readonly message: string;
+}
+export interface AuthorizationLockRefusal {
+    readonly code: AuthorizationLockRefusalCode;
+    readonly message: string;
+}
+export type ImagesLockVerification = {
+    readonly ok: true;
+    readonly imageLock: ImageLock;
+} | {
+    readonly ok: false;
+    readonly refusals: readonly ImagesLockRefusal[];
+};
+export type AuthorizationLockVerification = {
+    readonly ok: true;
+    readonly authorizationLock: AuthorizationLockReadView;
+} | {
+    readonly ok: false;
+    readonly refusals: readonly AuthorizationLockRefusal[];
+};
+export type VerifiedResolution = VerifiedEditionResolution | VerifiedUnsplitEditionResolution;
+export declare function verifyImagesLock(verified: VerifiedResolution, imagesLockBytes: Uint8Array): Promise<ImagesLockVerification>;
+export declare function verifyAuthorizationLock(verified: VerifiedResolution, authorizationLockBytes: Uint8Array): Promise<AuthorizationLockVerification>;
+//# sourceMappingURL=verify-delivered-locks.d.ts.map

package/dist/distribution/lib/verify-delivered-locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-delivered-locks.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-delivered-locks.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAsBxC,oBAAY,qBAAqB;IAE/B,YAAY,8BAA8B;IAE1C,cAAc,gCAAgC;IAE9C,WAAW,4BAA4B;IAEvC,oBAAoB,sCAAsC;CAC3D;AAGD,oBAAY,4BAA4B;IAEtC,YAAY,qCAAqC;IAEjD,cAAc,uCAAuC;IAErD,WAAW,mCAAmC;IAE9C,oBAAoB,6CAA6C;CAClE;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAE5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,yBAAyB,CAAA;CAAE,GAC5E;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACxD,CAAC;AAGN,MAAM,MAAM,kBAAkB,GAC1B,yBAAyB,GACzB,gCAAgC,CAAC;AAgBrC,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CAmCjC;AAQD,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,kBAAkB,EAC5B,sBAAsB,EAAE,UAAU,GACjC,OAAO,CAAC,6BAA6B,CAAC,CAmCxC"}

package/dist/distribution/lib/verify-delivered-locks.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationLockRefusalCode = exports.ImagesLockRefusalCode = void 0;
+exports.verifyImagesLock = verifyImagesLock;
+exports.verifyAuthorizationLock = verifyAuthorizationLock;
+const content_address_1 = require("../../content-address");
+const authorization_lock_1 = require("./authorization-lock");
+const image_lock_1 = require("./image-lock");
+var ImagesLockRefusalCode;
+(function (ImagesLockRefusalCode) {
+    ImagesLockRefusalCode["BytesMissing"] = "images-lock-bytes-missing";
+    ImagesLockRefusalCode["DigestMismatch"] = "images-lock-digest-mismatch";
+    ImagesLockRefusalCode["Unparseable"] = "images-lock-unparseable";
+    ImagesLockRefusalCode["DistributionMismatch"] = "images-lock-distribution-mismatch";
+})(ImagesLockRefusalCode || (exports.ImagesLockRefusalCode = ImagesLockRefusalCode = {}));
+var AuthorizationLockRefusalCode;
+(function (AuthorizationLockRefusalCode) {
+    AuthorizationLockRefusalCode["BytesMissing"] = "authorization-lock-bytes-missing";
+    AuthorizationLockRefusalCode["DigestMismatch"] = "authorization-lock-digest-mismatch";
+    AuthorizationLockRefusalCode["Unparseable"] = "authorization-lock-unparseable";
+    AuthorizationLockRefusalCode["DistributionMismatch"] = "authorization-lock-distribution-mismatch";
+})(AuthorizationLockRefusalCode || (exports.AuthorizationLockRefusalCode = AuthorizationLockRefusalCode = {}));
+function hasBytes(bytes) {
+    return bytes instanceof Uint8Array && bytes.length > 0;
+}
+function decodeJson(bytes) {
+    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+}
+async function verifyImagesLock(verified, imagesLockBytes) {
+    const refuse = (code, message) => ({
+        ok: false,
+        refusals: [{ code, message }],
+    });
+    if (!hasBytes(imagesLockBytes)) {
+        return refuse(ImagesLockRefusalCode.BytesMissing, "the images lock bytes are missing or empty; they are the file's exact bytes.");
+    }
+    const expected = verified.resolved.edition.imagesLockSha256;
+    const digest = await (0, content_address_1.sha256Hex)(imagesLockBytes);
+    if (digest !== expected) {
+        return refuse(ImagesLockRefusalCode.DigestMismatch, `the images lock bytes hash to ${digest}, but the resolved deployment pins ${expected}; it is not this edition's images lock.`);
+    }
+    let imageLock;
+    try {
+        imageLock = (0, image_lock_1.parseImageLock)(decodeJson(imagesLockBytes));
+    }
+    catch (error) {
+        return refuse(ImagesLockRefusalCode.Unparseable, `the images lock bytes are not a readable images lock: ${error.message}`);
+    }
+    if (imageLock.distributionId !== verified.lock.distributionId) {
+        return refuse(ImagesLockRefusalCode.DistributionMismatch, `the images lock is for distribution "${imageLock.distributionId}", but the verified edition lock is for "${verified.lock.distributionId}".`);
+    }
+    return { ok: true, imageLock };
+}
+async function verifyAuthorizationLock(verified, authorizationLockBytes) {
+    const refuse = (code, message) => ({ ok: false, refusals: [{ code, message }] });
+    if (!hasBytes(authorizationLockBytes)) {
+        return refuse(AuthorizationLockRefusalCode.BytesMissing, "the authorization lock bytes are missing or empty; they are the file's exact bytes.");
+    }
+    const expected = verified.resolved.edition.authorizationLockSha256;
+    const digest = await (0, content_address_1.sha256Hex)(authorizationLockBytes);
+    if (digest !== expected) {
+        return refuse(AuthorizationLockRefusalCode.DigestMismatch, `the authorization lock bytes hash to ${digest}, but the resolved deployment pins ${expected}; it is not this edition's authorization lock.`);
+    }
+    let authorizationLock;
+    try {
+        authorizationLock = (0, authorization_lock_1.parseAuthorizationLockReadView)(decodeJson(authorizationLockBytes));
+    }
+    catch (error) {
+        return refuse(AuthorizationLockRefusalCode.Unparseable, `the authorization lock bytes are not a readable authorization lock: ${error.message}`);
+    }
+    if (authorizationLock.distributionId !== verified.lock.distributionId) {
+        return refuse(AuthorizationLockRefusalCode.DistributionMismatch, `the authorization lock is for distribution "${authorizationLock.distributionId}", but the verified edition lock is for "${verified.lock.distributionId}".`);
+    }
+    return { ok: true, authorizationLock };
+}
+//# sourceMappingURL=verify-delivered-locks.js.map

package/dist/distribution/lib/verify-delivered-locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-delivered-locks.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-delivered-locks.ts"],"names":[],"mappings":";;;AAgGA,4CAsCC;AAQD,0DAsCC;AApLD,2DAAkD;AAClD,6DAG8B;AAC9B,6CAA8D;AA0B9D,IAAY,qBASX;AATD,WAAY,qBAAqB;IAE/B,mEAA0C,CAAA;IAE1C,uEAA8C,CAAA;IAE9C,gEAAuC,CAAA;IAEvC,mFAA0D,CAAA;AAC5D,CAAC,EATW,qBAAqB,qCAArB,qBAAqB,QAShC;AAGD,IAAY,4BASX;AATD,WAAY,4BAA4B;IAEtC,iFAAiD,CAAA;IAEjD,qFAAqD,CAAA;IAErD,8EAA8C,CAAA;IAE9C,iGAAiE,CAAA;AACnE,CAAC,EATW,4BAA4B,4CAA5B,4BAA4B,QASvC;AA8BD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAQM,KAAK,UAAU,gBAAgB,CACpC,QAA4B,EAC5B,eAA2B;IAE3B,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,OAAe,EAA0B,EAAE,CAAC,CAAC;QACxF,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CACX,qBAAqB,CAAC,YAAY,EAClC,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,eAAe,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,qBAAqB,CAAC,cAAc,EACpC,iCAAiC,MAAM,sCAAsC,QAAQ,yCAAyC,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,2BAAc,EAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,qBAAqB,CAAC,WAAW,EACjC,yDAA0D,KAAe,CAAC,OAAO,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9D,OAAO,MAAM,CACX,qBAAqB,CAAC,oBAAoB,EAC1C,wCAAwC,SAAS,CAAC,cAAc,4CAA4C,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAC7I,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAQM,KAAK,UAAU,uBAAuB,CAC3C,QAA4B,EAC5B,sBAAkC;IAElC,MAAM,MAAM,GAAG,CACb,IAAkC,EAClC,OAAe,EACgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CACX,4BAA4B,CAAC,YAAY,EACzC,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,sBAAsB,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,4BAA4B,CAAC,cAAc,EAC3C,wCAAwC,MAAM,sCAAsC,QAAQ,gDAAgD,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,iBAA4C,CAAC;IACjD,IAAI,CAAC;QACH,iBAAiB,GAAG,IAAA,mDAA8B,EAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,4BAA4B,CAAC,WAAW,EACxC,uEAAwE,KAAe,CAAC,OAAO,EAAE,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,cAAc,KAAK,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtE,OAAO,MAAM,CACX,4BAA4B,CAAC,oBAAoB,EACjD,+CAA+C,iBAAiB,CAAC,cAAc,4CAA4C,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAC5J,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC"}

package/dist/distribution/lib/verify-resolved-deployment.d.ts

@@ -1,8 +1,18 @@
-import type { VerifiedEditionResolution } from "./verified-resolved-deployment";
+import type { VerifiedEditionResolution, VerifiedUnsplitEditionResolution } from "./verified-resolved-deployment";
+export declare enum ResolvedDeploymentAcceptance {
+    Engine = "engine",
+    Unsplit = "unsplit"
+}
+export interface VerifyResolvedDeploymentOptions<A extends ResolvedDeploymentAcceptance = ResolvedDeploymentAcceptance> {
+    readonly accept?: A;
+}
 export declare enum ResolvedDeploymentRefusalCode {
     MalformedArtifact = "malformed-artifact",
+    UnsplitNotAccepted = "unsplit-not-accepted",
+    EngineNotAccepted = "engine-not-accepted",
     LockDigestMismatch = "lock-digest-mismatch",
     MalformedLock = "malformed-lock",
+    EditionIdMismatch = "edition-id-mismatch",
     BiomeMissing = "biome-missing",
     BiomeNotInLock = "biome-not-in-lock",
     TrustCeilingMismatch = "trust-ceiling-mismatch",
@@ -14,12 +24,22 @@ export interface ResolvedDeploymentRefusal {
     readonly serviceAccount?: string;
     readonly message: string;
 }
-export type ResolvedDeploymentVerification = ({
-    readonly ok: true;
-} & VerifiedEditionResolution) | {
+export interface ResolvedDeploymentRefused {
     readonly ok: false;
     readonly refusals: readonly ResolvedDeploymentRefusal[];
-};
-export declare function verifyResolvedDeployment(resolved: unknown, lockBytes: Uint8Array): Promise<ResolvedDeploymentVerification>;
-export declare function assertResolvedDeployment(resolved: unknown, lockBytes: Uint8Array): Promise<VerifiedEditionResolution>;
+}
+export type ResolvedDeploymentVerification = ({
+    readonly ok: true;
+} & VerifiedEditionResolution) | ResolvedDeploymentRefused;
+export type UnsplitResolvedDeploymentVerification = ({
+    readonly ok: true;
+} & VerifiedUnsplitEditionResolution) | ResolvedDeploymentRefused;
+export declare function verifyResolvedDeployment(resolved: unknown, lockBytes: Uint8Array, options?: VerifyResolvedDeploymentOptions<ResolvedDeploymentAcceptance.Engine>): Promise<ResolvedDeploymentVerification>;
+export declare function verifyResolvedDeployment(resolved: unknown, lockBytes: Uint8Array, options: {
+    readonly accept: ResolvedDeploymentAcceptance.Unsplit;
+}): Promise<UnsplitResolvedDeploymentVerification>;
+export declare function assertResolvedDeployment(resolved: unknown, lockBytes: Uint8Array, options?: VerifyResolvedDeploymentOptions<ResolvedDeploymentAcceptance.Engine>): Promise<VerifiedEditionResolution>;
+export declare function assertResolvedDeployment(resolved: unknown, lockBytes: Uint8Array, options: {
+    readonly accept: ResolvedDeploymentAcceptance.Unsplit;
+}): Promise<VerifiedUnsplitEditionResolution>;
 //# sourceMappingURL=verify-resolved-deployment.d.ts.map

package/dist/distribution/lib/verify-resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,yBAAyB,EAE1B,MAAM,gCAAgC,CAAC;AA2BxC,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAEhC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD,CAAC;AAON,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,8BAA8B,CAAC,CAgGzC;AAGD,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,yBAAyB,CAAC,CAWpC"}
+{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAKhC,iBAAiB,wBAAwB;IAEzC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD,yBAAyB,CAAC;AAE9B,MAAM,MAAM,qCAAqC,GAC7C,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,gCAAgC,CAAC,GAC1D,yBAAyB,CAAC;AA6C9B,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3C,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,qCAAqC,CAAC,CAAC;AA2IlD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACtC,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,gCAAgC,CAAC,CAAC"}

package/dist/distribution/lib/verify-resolved-deployment.js

@@ -1,23 +1,52 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResolvedDeploymentRefusalCode = void 0;
+exports.ResolvedDeploymentRefusalCode = exports.ResolvedDeploymentAcceptance = void 0;
 exports.verifyResolvedDeployment = verifyResolvedDeployment;
 exports.assertResolvedDeployment = assertResolvedDeployment;
 const content_address_1 = require("../../content-address");
 const deployment_1 = require("../../deployment");
 const process_topology_1 = require("../../process-topology");
 const distribution_lock_1 = require("./distribution-lock");
+var ResolvedDeploymentAcceptance;
+(function (ResolvedDeploymentAcceptance) {
+    ResolvedDeploymentAcceptance["Engine"] = "engine";
+    ResolvedDeploymentAcceptance["Unsplit"] = "unsplit";
+})(ResolvedDeploymentAcceptance || (exports.ResolvedDeploymentAcceptance = ResolvedDeploymentAcceptance = {}));
 var ResolvedDeploymentRefusalCode;
 (function (ResolvedDeploymentRefusalCode) {
     ResolvedDeploymentRefusalCode["MalformedArtifact"] = "malformed-artifact";
+    ResolvedDeploymentRefusalCode["UnsplitNotAccepted"] = "unsplit-not-accepted";
+    ResolvedDeploymentRefusalCode["EngineNotAccepted"] = "engine-not-accepted";
     ResolvedDeploymentRefusalCode["LockDigestMismatch"] = "lock-digest-mismatch";
     ResolvedDeploymentRefusalCode["MalformedLock"] = "malformed-lock";
+    ResolvedDeploymentRefusalCode["EditionIdMismatch"] = "edition-id-mismatch";
     ResolvedDeploymentRefusalCode["BiomeMissing"] = "biome-missing";
     ResolvedDeploymentRefusalCode["BiomeNotInLock"] = "biome-not-in-lock";
     ResolvedDeploymentRefusalCode["TrustCeilingMismatch"] = "trust-ceiling-mismatch";
     ResolvedDeploymentRefusalCode["UnknownComponent"] = "unknown-component";
 })(ResolvedDeploymentRefusalCode || (exports.ResolvedDeploymentRefusalCode = ResolvedDeploymentRefusalCode = {}));
-async function verifyResolvedDeployment(resolved, lockBytes) {
+function acceptanceOf(options) {
+    if (options === undefined)
+        return ResolvedDeploymentAcceptance.Engine;
+    if (options === null || typeof options !== "object" || Array.isArray(options)) {
+        throw new TypeError("verifyResolvedDeployment: options must be an object `{ accept }` or absent.");
+    }
+    const unknownKeys = Object.keys(options).filter((key) => key !== "accept");
+    if (unknownKeys.length > 0) {
+        throw new TypeError(`verifyResolvedDeployment: unknown option(s) ${unknownKeys.map((key) => `"${key}"`).join(", ")}; the only option is "accept".`);
+    }
+    const accept = options.accept;
+    if (accept === undefined)
+        return ResolvedDeploymentAcceptance.Engine;
+    if (accept !== ResolvedDeploymentAcceptance.Engine &&
+        accept !== ResolvedDeploymentAcceptance.Unsplit) {
+        throw new TypeError(`verifyResolvedDeployment: accept must be "${ResolvedDeploymentAcceptance.Engine}" or ` +
+            `"${ResolvedDeploymentAcceptance.Unsplit}", got ${JSON.stringify(accept) ?? String(accept)}.`);
+    }
+    return accept;
+}
+async function verifyResolvedDeployment(resolved, lockBytes, options) {
+    const accept = acceptanceOf(options);
     const parsed = deployment_1.ResolvedDeploymentSchema.safeParse(resolved);
     if (!parsed.success) {
         return refuse({
@@ -29,6 +58,20 @@ async function verifyResolvedDeployment(resolved, lockBytes) {
         });
     }
     const artifact = parsed.data;
+    const unsplit = (0, deployment_1.isUnsplitResolvedDeployment)(artifact);
+    if (unsplit && accept !== ResolvedDeploymentAcceptance.Unsplit) {
+        return refuse({
+            code: ResolvedDeploymentRefusalCode.UnsplitNotAccepted,
+            message: `the resolved deployment is the unsplit variant (no engine, no chart, no ServiceAccount), ` +
+                `and this caller accepts only an engine deployment.`,
+        });
+    }
+    if (!unsplit && accept !== ResolvedDeploymentAcceptance.Engine) {
+        return refuse({
+            code: ResolvedDeploymentRefusalCode.EngineNotAccepted,
+            message: `the resolved deployment is an engine deployment, and this caller accepts only the unsplit variant.`,
+        });
+    }
     const digest = await (0, content_address_1.sha256Hex)(lockBytes);
     if (digest !== artifact.edition.lockSha256) {
         return refuse({
@@ -47,6 +90,13 @@ async function verifyResolvedDeployment(resolved, lockBytes) {
             message: `the lock bytes are not a readable distribution lock: ${error.message}`,
         });
     }
+    if (artifact.edition.id !== lock.distributionId) {
+        return refuse({
+            code: ResolvedDeploymentRefusalCode.EditionIdMismatch,
+            message: `the resolved deployment names edition "${artifact.edition.id}", but the lock's ` +
+                `distributionId is "${lock.distributionId}"; an edition's id is its lock's distributionId.`,
+        });
+    }
     const refusals = [];
     const lockBiomes = new Map(lock.biomes.map((biome) => [biome.id, biome]));
     const placed = new Set(artifact.biomes.map((biome) => biome.id));
@@ -96,14 +146,21 @@ async function verifyResolvedDeployment(resolved, lockBytes) {
     }
     if (refusals.length > 0)
         return { ok: false, refusals };
+    if (unsplit) {
+        return {
+            ok: true,
+            resolved: artifact,
+            lock,
+        };
+    }
     return {
         ok: true,
         resolved: artifact,
         lock,
     };
 }
-async function assertResolvedDeployment(resolved, lockBytes) {
-    const verification = await verifyResolvedDeployment(resolved, lockBytes);
+async function assertResolvedDeployment(resolved, lockBytes, options) {
+    const verification = await verifyResolvedDeployment(resolved, lockBytes, options);
     if (!verification.ok) {
         throw new Error(`resolved deployment is refused:\n` +
             verification.refusals

package/dist/distribution/lib/verify-resolved-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA4EA,4DAmGC;AAGD,4DAcC;AAhMD,2DAAkD;AAClD,iDAA4D;AAC5D,6DAA4D;AAC5D,2DAG6B;AA+B7B,IAAY,6BAeX;AAfD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAEhC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;AACxC,CAAC,EAfW,6BAA6B,6CAA7B,6BAA6B,QAexC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB;IAErB,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAGxD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAGM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB;IAErB,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA4KA,4DAuIC;AAeD,4DAwBC;AA1VD,2DAAkD;AAClD,iDAG0B;AAC1B,6DAA4D;AAC5D,2DAG6B;AA4C7B,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAUD,IAAY,6BAwBX;AAxBD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,0EAAyC,CAAA;IAEzC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAKhC,0EAAyC,CAAA;IAEzC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;AACxC,CAAC,EAxBW,6BAA6B,6CAA7B,6BAA6B,QAwBxC;AA+BD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACtE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,+CAA+C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACrE,IACE,MAAM,KAAK,4BAA4B,CAAC,MAAM;QAC9C,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6CAA6C,4BAA4B,CAAC,MAAM,OAAO;YACrF,IAAI,4BAA4B,CAAC,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAA,wCAA2B,EAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,2FAA2F;gBAC3F,oDAAoD;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,oGAAoG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB;gBACjF,sBAAsB,IAAI,CAAC,cAAc,kDAAkD;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAKxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAA6C;YACvD,IAAI;SACuD,CAAC;IAChE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAeM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAGzC,MAAM,YAAY,GAAG,MACnB,wBAOD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}

package/dist/distribution/server/index.d.ts

@@ -0,0 +1,8 @@
+import type { DistributionLock } from '../lib/distribution-lock';
+import { DistributionImagesPredicateRefusal, ImageDeliveryEntitlementRefusal, type DistributionImagesPredicate, type ImageDeliveryEntitlementPredicate } from '../lib/image-producer-evidence';
+import { type BiomeSourceManifestHash } from '../lib/kernel-contract-authority';
+export declare function computeBiomeSourceManifestHashSync(rawManifest: unknown): BiomeSourceManifestHash;
+export declare function distributionLockDigest(lock: DistributionLock): string;
+export declare function distributionImagesPredicateLockRefusal(predicate: DistributionImagesPredicate, lock: DistributionLock): DistributionImagesPredicateRefusal | undefined;
+export declare function imageDeliveryEntitlementRefusal(predicate: ImageDeliveryEntitlementPredicate, lock: DistributionLock): ImageDeliveryEntitlementRefusal | undefined;
+//# sourceMappingURL=index.d.ts.map

package/dist/distribution/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/distribution/server/index.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,kCAAkC,CAAC;AAO1C,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,OAAO,GACnB,uBAAuB,CAMzB;AAkBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAGrE;AAQD,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,2BAA2B,EACtC,IAAI,EAAE,gBAAgB,GACrB,kCAAkC,GAAG,SAAS,CAIhD;AAgBD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,iCAAiC,EAC5C,IAAI,EAAE,gBAAgB,GACrB,+BAA+B,GAAG,SAAS,CAQ7C"}

package/dist/distribution/server/index.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeBiomeSourceManifestHashSync = computeBiomeSourceManifestHashSync;
+exports.distributionLockDigest = distributionLockDigest;
+exports.distributionImagesPredicateLockRefusal = distributionImagesPredicateLockRefusal;
+exports.imageDeliveryEntitlementRefusal = imageDeliveryEntitlementRefusal;
+const node_crypto_1 = require("node:crypto");
+const server_1 = require("../../content-address/server");
+const image_producer_evidence_1 = require("../lib/image-producer-evidence");
+const kernel_contract_authority_1 = require("../lib/kernel-contract-authority");
+function computeBiomeSourceManifestHashSync(rawManifest) {
+    return (0, kernel_contract_authority_1.parseBiomeSourceManifestHash)((0, node_crypto_1.createHash)('sha256')
+        .update((0, kernel_contract_authority_1.biomeSourceManifestHashPreimage)(rawManifest))
+        .digest('hex'));
+}
+function distributionLockDigest(lock) {
+    const { resolvedAt: _resolvedAt, ...rest } = lock;
+    return (0, server_1.canonicalJsonSha256)(rest);
+}
+function distributionImagesPredicateLockRefusal(predicate, lock) {
+    return predicate.lockDigest === distributionLockDigest(lock)
+        ? undefined
+        : image_producer_evidence_1.DistributionImagesPredicateRefusal.LockDigestMismatch;
+}
+function imageDeliveryEntitlementRefusal(predicate, lock) {
+    if (predicate.lockDigest !== distributionLockDigest(lock)) {
+        return image_producer_evidence_1.ImageDeliveryEntitlementRefusal.LockDigestMismatch;
+    }
+    const lockCatalogue = lock.catalogueDigest ?? null;
+    return predicate.catalogueDigest === lockCatalogue
+        ? undefined
+        : image_producer_evidence_1.ImageDeliveryEntitlementRefusal.CatalogueDigestMismatch;
+}
+//# sourceMappingURL=index.js.map

package/dist/distribution/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/distribution/server/index.ts"],"names":[],"mappings":";;AAiCA,gFAQC;AAkBD,wDAGC;AAQD,wFAOC;AAgBD,0EAWC;AA5FD,6CAAyC;AAEzC,yDAAmE;AAEnE,4EAKwC;AACxC,gFAI0C;AAO1C,SAAgB,kCAAkC,CAChD,WAAoB;IAEpB,OAAO,IAAA,wDAA4B,EACjC,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,IAAA,2DAA+B,EAAC,WAAW,CAAC,CAAC;SACpD,MAAM,CAAC,KAAK,CAAC,CACjB,CAAC;AACJ,CAAC;AAkBD,SAAgB,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,OAAO,IAAA,4BAAmB,EAAC,IAAa,CAAC,CAAC;AAC5C,CAAC;AAQD,SAAgB,sCAAsC,CACpD,SAAsC,EACtC,IAAsB;IAEtB,OAAO,SAAS,CAAC,UAAU,KAAK,sBAAsB,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,4DAAkC,CAAC,kBAAkB,CAAC;AAC5D,CAAC;AAgBD,SAAgB,+BAA+B,CAC7C,SAA4C,EAC5C,IAAsB;IAEtB,IAAI,SAAS,CAAC,UAAU,KAAK,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,yDAA+B,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACnD,OAAO,SAAS,CAAC,eAAe,KAAK,aAAa;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yDAA+B,CAAC,uBAAuB,CAAC;AAC9D,CAAC"}