@xemahq/contracts 0.76.0 → 0.78.0

package/dist/authzen/lib/durable-delegation-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"durable-delegation-model.js","sourceRoot":"","sources":["../../../src/authzen/lib/durable-delegation-model.ts"],"names":[],"mappings":";;;AA2GA,oDAUC;AAGD,oDAQC;AAQD,gEAKC;AAQD,8DAOC;AA5JD,2CAAgE;AAEhE,yEAGoC;AAEpC,iEAA2D;AA2B9C,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;AAOpD,QAAA,kBAAkB,GAAG,SAAS,CAAC;AAG/B,QAAA,4BAA4B,GAAG,kBAAkB,CAAC;AAGlD,QAAA,sBAAsB,GAAG,YAAY,CAAC;AAGnD,IAAY,uBAaX;AAbD,WAAY,uBAAuB;IAEjC,4CAAiB,CAAA;IAEjB,4CAAiB,CAAA;IAEjB,4CAAiB,CAAA;IAEjB,qDAA0B,CAAA;IAE1B,oDAAyB,CAAA;IAEzB,kDAAuB,CAAA;AACzB,CAAC,EAbW,uBAAuB,uCAAvB,uBAAuB,QAalC;AAYD,IAAY,4BAaX;AAbD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,0DAA0B,CAAA;IAE1B,yDAAyB,CAAA;IAEzB,uDAAuB,CAAA;AACzB,CAAC,EAbW,4BAA4B,4CAA5B,4BAA4B,QAavC;AAGD,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAWD,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,CAC5B,mCAAmC,QAAQ,uEAAuE,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,8BAAsB,IAAI,IAAA,8CAAmB,EAAC,QAAQ,CAAC,EAAE,CAAC;AACtE,CAAC;AAGD,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,GAAG,8BAAsB,GAAG,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,MAAM,cAAc,8BAAsB,UAAU,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,8CAAmB,EAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAgB,0BAA0B,CACxC,KAAa,EACb,aAAqB;IAErB,OAAO,GAAG,oCAA4B,IAAI,IAAA,wCAAiB,EAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;AACtF,CAAC;AAQD,SAAgB,yBAAyB,CAAC,OAGzC;IACC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,0BAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"durable-delegation-model.js","sourceRoot":"","sources":["../../../src/authzen/lib/durable-delegation-model.ts"],"names":[],"mappings":";;;AAwIA,oDAUC;AAGD,oDAQC;AAQD,8DAOC;AAuDD,8EAmDC;AAtRD,2CAAgE;AAEhE,yEAGoC;AAkDvB,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;AAOpD,QAAA,kBAAkB,GAAG,SAAS,CAAC;AAG/B,QAAA,sBAAsB,GAAG,YAAY,CAAC;AAYnD,IAAY,4BAwCX;AAxCD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,0DAA0B,CAAA;IAE1B,yDAAyB,CAAA;IAEzB,uDAAuB,CAAA;IAcvB,+CAAe,CAAA;IAaf,uDAAuB,CAAA;AACzB,CAAC,EAxCW,4BAA4B,4CAA5B,4BAA4B,QAwCvC;AAGD,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAWD,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,CAC5B,mCAAmC,QAAQ,uEAAuE,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,8BAAsB,IAAI,IAAA,8CAAmB,EAAC,QAAQ,CAAC,EAAE,CAAC;AACtE,CAAC;AAGD,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,GAAG,8BAAsB,GAAG,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,MAAM,cAAc,8BAAsB,UAAU,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,8CAAmB,EAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAgB,yBAAyB,CAAC,OAGzC;IACC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,0BAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAGD,IAAY,kCASX;AATD,WAAY,kCAAkC;IAE5C,+EAAyC,CAAA;IAEzC,sFAAgD,CAAA;IAEhD,yEAAmC,CAAA;IAEnC,6EAAuC,CAAA;AACzC,CAAC,EATW,kCAAkC,kDAAlC,kCAAkC,QAS7C;AAGD,MAAa,gCAAiC,SAAQ,KAAK;IAE9C;IADX,YACW,OAA2C,EACpD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,YAAO,GAAP,OAAO,CAAoC;QAIpD,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AARD,4EAQC;AAgCD,SAAgB,iCAAiC,CAAC,KAIjD;IACC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACjD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,iBAAiB,EACpD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,oBAAoB,EACvD,kDAAkD,KAAK,CAAC,IAAI,kEAAkE,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,gBAAgB,EACnD,sDAAsD,SAAS,CAAC,IAAI,uCAAuC,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,EACjD,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAiC;QAC3C,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,4BAA4B,CAAC,SAAS;YAChD,MAAM,EAAE,YAAY;SACrB,CAAC;KACH,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,sCAA8B;YACxC,MAAM,EAAE,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC"}

package/dist/authzen/lib/xema-membership.d.ts

@@ -0,0 +1,6 @@
+export declare const XEMA_MEMBERSHIP_OBJECT_TYPE = "membership";
+export declare const XEMA_MEMBERSHIP_HOLDER_RELATION = "holder";
+export declare const XEMA_MEMBERSHIP_PARENT_RELATION = "parent";
+export declare function buildXemaMembershipObject(orgId: string, membershipId: string): string;
+export declare function buildXemaMembershipHolderUserset(orgId: string, membershipId: string): string;
+//# sourceMappingURL=xema-membership.d.ts.map

package/dist/authzen/lib/xema-membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xema-membership.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-membership.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD,eAAO,MAAM,+BAA+B,WAAW,CAAC;AAExD,eAAO,MAAM,+BAA+B,WAAW,CAAC;AAGxD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,MAAM,CAER;AAGD,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,MAAM,CAER"}

package/dist/authzen/lib/xema-membership.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XEMA_MEMBERSHIP_PARENT_RELATION = exports.XEMA_MEMBERSHIP_HOLDER_RELATION = exports.XEMA_MEMBERSHIP_OBJECT_TYPE = void 0;
+exports.buildXemaMembershipObject = buildXemaMembershipObject;
+exports.buildXemaMembershipHolderUserset = buildXemaMembershipHolderUserset;
+const xema_authzen_profile_1 = require("./xema-authzen-profile");
+exports.XEMA_MEMBERSHIP_OBJECT_TYPE = 'membership';
+exports.XEMA_MEMBERSHIP_HOLDER_RELATION = 'holder';
+exports.XEMA_MEMBERSHIP_PARENT_RELATION = 'parent';
+function buildXemaMembershipObject(orgId, membershipId) {
+    return `${exports.XEMA_MEMBERSHIP_OBJECT_TYPE}:${(0, xema_authzen_profile_1.qualifyResourceId)(orgId, membershipId)}`;
+}
+function buildXemaMembershipHolderUserset(orgId, membershipId) {
+    return `${buildXemaMembershipObject(orgId, membershipId)}#${exports.XEMA_MEMBERSHIP_HOLDER_RELATION}`;
+}
+//# sourceMappingURL=xema-membership.js.map

package/dist/authzen/lib/xema-membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xema-membership.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-membership.ts"],"names":[],"mappings":";;;AAgBA,8DAKC;AAGD,4EAKC;AA7BD,iEAA2D;AAS9C,QAAA,2BAA2B,GAAG,YAAY,CAAC;AAE3C,QAAA,+BAA+B,GAAG,QAAQ,CAAC;AAE3C,QAAA,+BAA+B,GAAG,QAAQ,CAAC;AAGxD,SAAgB,yBAAyB,CACvC,KAAa,EACb,YAAoB;IAEpB,OAAO,GAAG,mCAA2B,IAAI,IAAA,wCAAiB,EAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;AACpF,CAAC;AAGD,SAAgB,gCAAgC,CAC9C,KAAa,EACb,YAAoB;IAEpB,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,uCAA+B,EAAE,CAAC;AAChG,CAAC"}

package/dist/biome-dependency/lib/peer-seam-table.d.ts

@@ -51,4 +51,5 @@ export declare const PEER_SEAM_TABLE: readonly PeerSeam[];
 export declare const CONTRIBUTION_FACT_SEAM: "biome-index/contribution-fact";
 export declare const BIOME_DELIVERY_SERVICE: "biome-host-api";
 export declare const OPERATION_REQUIRES_EXTENSION: "x-xema-operation-requires";
+export declare const ORIGIN_PATH_EXTENSION: "x-xema-origin-path";
 //# sourceMappingURL=peer-seam-table.d.ts.map

package/dist/biome-dependency/lib/peer-seam-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer-seam-table.d.ts","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAsB9E,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAGlD,oBAAY,qBAAqB;IAE/B,QAAQ,aAAa;IAMrB,eAAe,qBAAqB;IAEpC,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,WAAW,iBAAiB;IAE5B,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAI1E,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAiIf,CAAC;AAGjC,eAAO,MAAM,sBAAsB,EAAG,+BAAwC,CAAC;AAG/E,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAUhE,eAAO,MAAM,4BAA4B,EAAG,2BAAoC,CAAC"}
+{"version":3,"file":"peer-seam-table.d.ts","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAsB9E,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAGlD,oBAAY,qBAAqB;IAE/B,QAAQ,aAAa;IAMrB,eAAe,qBAAqB;IAEpC,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,WAAW,iBAAiB;IAE5B,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAI1E,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAiIf,CAAC;AAGjC,eAAO,MAAM,sBAAsB,EAAG,+BAAwC,CAAC;AAG/E,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAUhE,eAAO,MAAM,4BAA4B,EAAG,2BAAoC,CAAC;AAUjF,eAAO,MAAM,qBAAqB,EAAG,oBAA6B,CAAC"}

package/dist/biome-dependency/lib/peer-seam-table.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OPERATION_REQUIRES_EXTENSION = exports.BIOME_DELIVERY_SERVICE = exports.CONTRIBUTION_FACT_SEAM = exports.PEER_SEAM_TABLE = exports.PeerSeamOptionMeaning = exports.PEER_SEAM_TABLE_VERSION = void 0;
+exports.ORIGIN_PATH_EXTENSION = exports.OPERATION_REQUIRES_EXTENSION = exports.BIOME_DELIVERY_SERVICE = exports.CONTRIBUTION_FACT_SEAM = exports.PEER_SEAM_TABLE = exports.PeerSeamOptionMeaning = exports.PEER_SEAM_TABLE_VERSION = void 0;
 const biome_dependency_contract_1 = require("./biome-dependency-contract");
 exports.PEER_SEAM_TABLE_VERSION = 2;
 var PeerSeamOptionMeaning;
@@ -145,4 +145,5 @@ exports.PEER_SEAM_TABLE = Object.freeze([
 exports.CONTRIBUTION_FACT_SEAM = 'biome-index/contribution-fact';
 exports.BIOME_DELIVERY_SERVICE = 'biome-host-api';
 exports.OPERATION_REQUIRES_EXTENSION = 'x-xema-operation-requires';
+exports.ORIGIN_PATH_EXTENSION = 'x-xema-origin-path';
 //# sourceMappingURL=peer-seam-table.js.map

package/dist/biome-dependency/lib/peer-seam-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer-seam-table.js","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":";;;AAAA,2EAA8E;AAsBjE,QAAA,uBAAuB,GAAG,CAAU,CAAC;AAGlD,IAAY,qBAmBX;AAnBD,WAAY,qBAAqB;IAE/B,8CAAqB,CAAA;IAMrB,6DAAoC,CAAA;IAEpC,gDAAuB,CAAA;IAEvB,sDAA6B,CAAA;IAE7B,qDAA4B,CAAA;IAE5B,0CAAiB,CAAA;IAEjB,4CAAmB,CAAA;AACrB,CAAC,EAnBW,qBAAqB,qCAArB,qBAAqB,QAmBhC;AA0DD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAEjD,QAAA,eAAe,GAAwB,MAAM,CAAC,MAAM,CAAC;IAChE;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,2CAA2C;QAC/C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzC,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAChB,OAAO,EAAE,qBAAqB,CAAC,MAAM;gBACrC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,qBAAqB,CAAC,SAAS;aACzC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,qBAAqB,CAAC,WAAW;aAC3C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,6CAA6C;QACjD,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC9B,OAAO,EAAE,qBAAqB,CAAC,YAAY;aAC5C;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE,EAAE;KACZ;IACD;QAGE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,YAAY;QAC3C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,UAAU;QACzC,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,gCAAgC;QACxC,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO;gBACtC,QAAQ,EAAE,IAAI;aACf;SACF;KACF;CAC4B,CAAC,CAAC;AAGpB,QAAA,sBAAsB,GAAG,+BAAwC,CAAC;AAGlE,QAAA,sBAAsB,GAAG,gBAAyB,CAAC;AAUnD,QAAA,4BAA4B,GAAG,2BAAoC,CAAC"}
+{"version":3,"file":"peer-seam-table.js","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":";;;AAAA,2EAA8E;AAsBjE,QAAA,uBAAuB,GAAG,CAAU,CAAC;AAGlD,IAAY,qBAmBX;AAnBD,WAAY,qBAAqB;IAE/B,8CAAqB,CAAA;IAMrB,6DAAoC,CAAA;IAEpC,gDAAuB,CAAA;IAEvB,sDAA6B,CAAA;IAE7B,qDAA4B,CAAA;IAE5B,0CAAiB,CAAA;IAEjB,4CAAmB,CAAA;AACrB,CAAC,EAnBW,qBAAqB,qCAArB,qBAAqB,QAmBhC;AA0DD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAEjD,QAAA,eAAe,GAAwB,MAAM,CAAC,MAAM,CAAC;IAChE;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,2CAA2C;QAC/C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzC,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAChB,OAAO,EAAE,qBAAqB,CAAC,MAAM;gBACrC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,qBAAqB,CAAC,SAAS;aACzC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,qBAAqB,CAAC,WAAW;aAC3C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,6CAA6C;QACjD,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC9B,OAAO,EAAE,qBAAqB,CAAC,YAAY;aAC5C;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE,EAAE;KACZ;IACD;QAGE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,YAAY;QAC3C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,UAAU;QACzC,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,gCAAgC;QACxC,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO;gBACtC,QAAQ,EAAE,IAAI;aACf;SACF;KACF;CAC4B,CAAC,CAAC;AAGpB,QAAA,sBAAsB,GAAG,+BAAwC,CAAC;AAGlE,QAAA,sBAAsB,GAAG,gBAAyB,CAAC;AAUnD,QAAA,4BAA4B,GAAG,2BAAoC,CAAC;AAUpE,QAAA,qBAAqB,GAAG,oBAA6B,CAAC"}

package/dist/deployment/lib/resolved-deployment.d.ts

@@ -1,10 +1,15 @@
 import { z } from 'zod';
-export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 1;
+export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 2;
 export declare const RESOLVER_PACKAGE: "@xemahq/contracts";
+export declare enum ResolvedDeploymentProvenanceKind {
+    Engine = "engine",
+    Unsplit = "unsplit"
+}
+export declare const DNS_LABEL_PATTERN: RegExp;
 export declare const EDITION_OCI_REF_PATTERN: RegExp;
 export declare const EditionOciRefSchema: z.ZodString;
 export declare const ResolvedDeploymentSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
+    schemaVersion: z.ZodLiteral<2>;
     deployment: z.ZodString;
     runtimeNamespace: z.ZodString;
     edition: z.ZodObject<{
@@ -12,6 +17,8 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
         version: z.ZodString;
         registry: z.ZodString;
         lockSha256: z.ZodString;
+        imagesLockSha256: z.ZodString;
+        authorizationLockSha256: z.ZodString;
         ref: z.ZodString;
     }, z.core.$strict>;
     biomes: z.ZodArray<z.ZodObject<{
@@ -27,14 +34,32 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
             component: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    provenance: z.ZodObject<{
+    provenance: z.ZodUnion<readonly [z.ZodObject<{
+        kind: z.ZodOptional<z.ZodLiteral<ResolvedDeploymentProvenanceKind.Engine>>;
         topologyInputHash: z.ZodString;
         chartSetDigest: z.ZodString;
         resolver: z.ZodObject<{
             package: z.ZodLiteral<"@xemahq/contracts">;
             version: z.ZodString;
         }, z.core.$strict>;
-    }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<ResolvedDeploymentProvenanceKind.Unsplit>;
+        resolver: z.ZodObject<{
+            package: z.ZodLiteral<"@xemahq/contracts">;
+            version: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>]>;
 }, z.core.$strict>;
 export type ResolvedDeployment = z.infer<typeof ResolvedDeploymentSchema>;
+export type UnsplitResolvedDeployment = ResolvedDeployment & {
+    readonly provenance: Extract<ResolvedDeployment['provenance'], {
+        kind: ResolvedDeploymentProvenanceKind.Unsplit;
+    }>;
+};
+export type EngineResolvedDeployment = ResolvedDeployment & {
+    readonly provenance: Exclude<ResolvedDeployment['provenance'], {
+        kind: ResolvedDeploymentProvenanceKind.Unsplit;
+    }>;
+};
+export declare function isUnsplitResolvedDeployment(resolved: ResolvedDeployment): resolved is UnsplitResolvedDeployment;
 //# sourceMappingURL=resolved-deployment.d.ts.map

package/dist/deployment/lib/resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0DxB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAoB7D,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AAyBJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiFjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiExB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAM7D,oBAAY,gCAAgC;IAK1C,MAAM,WAAW;IAOjB,OAAO,YAAY;CACpB;AAMD,eAAO,MAAM,iBAAiB,QAAoC,CAAC;AAoBnE,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AA2DJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiGjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AASF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAC3B,QAAQ,IAAI,yBAAyB,CAEvC"}

package/dist/deployment/lib/resolved-deployment.js

@@ -1,18 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResolvedDeploymentSchema = exports.EditionOciRefSchema = exports.EDITION_OCI_REF_PATTERN = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
+exports.ResolvedDeploymentSchema = exports.EditionOciRefSchema = exports.EDITION_OCI_REF_PATTERN = exports.DNS_LABEL_PATTERN = exports.ResolvedDeploymentProvenanceKind = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
+exports.isUnsplitResolvedDeployment = isUnsplitResolvedDeployment;
 const zod_1 = require("zod");
 const content_address_1 = require("../../content-address");
 const deployment_id_1 = require("./deployment-id");
 const trust_domain_1 = require("./trust-domain");
 const trust_partition_1 = require("./trust-partition");
-exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 1;
+exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 2;
 exports.RESOLVER_PACKAGE = '@xemahq/contracts';
+var ResolvedDeploymentProvenanceKind;
+(function (ResolvedDeploymentProvenanceKind) {
+    ResolvedDeploymentProvenanceKind["Engine"] = "engine";
+    ResolvedDeploymentProvenanceKind["Unsplit"] = "unsplit";
+})(ResolvedDeploymentProvenanceKind || (exports.ResolvedDeploymentProvenanceKind = ResolvedDeploymentProvenanceKind = {}));
+exports.DNS_LABEL_PATTERN = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
 const DnsLabelSchema = zod_1.z
     .string()
     .min(1)
     .max(63)
-    .regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, 'must be a lowercase DNS label');
+    .regex(exports.DNS_LABEL_PATTERN, 'must be a lowercase DNS label');
 exports.EDITION_OCI_REF_PATTERN = new RegExp('^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:[0-9]{1,5})?(\\/[a-z0-9]+(([._]|__|-+)[a-z0-9]+)*)+' +
     `@sha256:${content_address_1.SHA256_HEX_SOURCE}$`);
 exports.EditionOciRefSchema = zod_1.z
@@ -37,6 +44,28 @@ const ResolvedServiceAccountSchema = zod_1.z
         .min(1),
 })
     .strict();
+const ResolverSchema = zod_1.z
+    .object({
+    package: zod_1.z.literal(exports.RESOLVER_PACKAGE),
+    version: zod_1.z.string().min(1),
+})
+    .strict();
+const EngineProvenanceSchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal(ResolvedDeploymentProvenanceKind.Engine).optional(),
+    topologyInputHash: content_address_1.Sha256HexSchema,
+    chartSetDigest: zod_1.z
+        .string()
+        .regex(new RegExp(`^sha256:${content_address_1.SHA256_HEX_SOURCE}$`), 'must be an OCI index digest, sha256:<64 hex>'),
+    resolver: ResolverSchema,
+})
+    .strict();
+const UnsplitProvenanceSchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal(ResolvedDeploymentProvenanceKind.Unsplit),
+    resolver: ResolverSchema,
+})
+    .strict();
 exports.ResolvedDeploymentSchema = zod_1.z
     .object({
     schemaVersion: zod_1.z.literal(exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION),
@@ -48,25 +77,14 @@ exports.ResolvedDeploymentSchema = zod_1.z
         version: zod_1.z.string().min(1),
         registry: zod_1.z.string().min(1),
         lockSha256: content_address_1.Sha256HexSchema,
+        imagesLockSha256: content_address_1.Sha256HexSchema,
+        authorizationLockSha256: content_address_1.Sha256HexSchema,
         ref: exports.EditionOciRefSchema,
     })
         .strict(),
     biomes: zod_1.z.array(ResolvedBiomeSchema).min(1),
     serviceAccounts: zod_1.z.array(ResolvedServiceAccountSchema),
-    provenance: zod_1.z
-        .object({
-        topologyInputHash: content_address_1.Sha256HexSchema,
-        chartSetDigest: zod_1.z
-            .string()
-            .regex(new RegExp(`^sha256:${content_address_1.SHA256_HEX_SOURCE}$`), 'must be an OCI index digest, sha256:<64 hex>'),
-        resolver: zod_1.z
-            .object({
-            package: zod_1.z.literal(exports.RESOLVER_PACKAGE),
-            version: zod_1.z.string().min(1),
-        })
-            .strict(),
-    })
-        .strict(),
+    provenance: zod_1.z.union([EngineProvenanceSchema, UnsplitProvenanceSchema]),
 })
     .strict()
     .superRefine((resolved, ctx) => {
@@ -110,5 +128,27 @@ exports.ResolvedDeploymentSchema = zod_1.z
     ]) {
         ctx.addIssue({ code: 'custom', path: [], message: `[${violation.code}] ${violation.message}` });
     }
+    if (resolved.provenance.kind !== ResolvedDeploymentProvenanceKind.Unsplit)
+        return;
+    resolved.biomes.forEach((biome, index) => {
+        if (biome.trustDomain !== biome.trustCeiling) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['biomes', index, 'trustDomain'],
+                message: `an unsplit deployment places every biome in its ceiling domain, but "${biome.id}" is in ` +
+                    `"${biome.trustDomain}" under the ceiling "${biome.trustCeiling}"`,
+            });
+        }
+    });
+    if (resolved.serviceAccounts.length > 0) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['serviceAccounts'],
+            message: `an unsplit deployment states no ServiceAccount, but this one states ${resolved.serviceAccounts.length}`,
+        });
+    }
 });
+function isUnsplitResolvedDeployment(resolved) {
+    return resolved.provenance.kind === ResolvedDeploymentProvenanceKind.Unsplit;
+}
 //# sourceMappingURL=resolved-deployment.js.map

package/dist/deployment/lib/resolved-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AA8Cd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAG7D,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,iCAAiC,EAAE,+BAA+B,CAAC,CAAC;AAahE,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,iBAAiB,EAAE,iCAAe;QAClC,cAAc,EAAE,OAAC;aACd,MAAM,EAAE;aACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;QACrG,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;YACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3B,CAAC;aACD,MAAM,EAAE;KACZ,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAkTA,kEAIC;AAtTD,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AAqDd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAM7D,IAAY,gCAaX;AAbD,WAAY,gCAAgC;IAK1C,qDAAiB,CAAA;IAOjB,uDAAmB,CAAA;AACrB,CAAC,EAbW,gCAAgC,gDAAhC,gCAAgC,QAa3C;AAMY,QAAA,iBAAiB,GAAG,iCAAiC,CAAC;AAGnE,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,yBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAahD,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACnE,iBAAiB,EAAE,iCAAe;IAClC,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;IACrG,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC;IACzD,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,gBAAgB,EAAE,iCAAe;QAMjC,uBAAuB,EAAE,iCAAe;QAExC,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO;QAAE,OAAO;IAClF,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;gBACtC,OAAO,EACL,wEAAwE,KAAK,CAAC,EAAE,UAAU;oBAC1F,IAAI,KAAK,CAAC,WAAW,wBAAwB,KAAK,CAAC,YAAY,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,uEAAuE,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA2BL,SAAgB,2BAA2B,CACzC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO,CAAC;AAC/E,CAAC"}

package/dist/distribution/index.d.ts

@@ -19,6 +19,10 @@ export * from './lib/resolve-nexus-bindings';
 export * from './lib/nexus-endpoint-specs';
 export * from './lib/lock-consumers';
 export * from './lib/verify-resolved-deployment';
-export type { VerifiedEditionResolution, VerifiedResolvedDeployment, } from './lib/verified-resolved-deployment';
+export * from './lib/resolve-unsplit-deployment';
+export * from './lib/authorization-lock';
+export * from './lib/verify-delivered-locks';
+export { isUnsplitResolvedDeployment } from '../deployment';
+export type { VerifiedEditionResolution, VerifiedResolvedDeployment, VerifiedUnsplitEditionResolution, VerifiedUnsplitResolvedDeployment, } from './lib/verified-resolved-deployment';
 export * from './lib/delivered-biome';
 //# sourceMappingURL=index.d.ts.map

package/dist/distribution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,YAAY,EACV,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAE7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}

package/dist/distribution/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUnsplitResolvedDeployment = void 0;
 __exportStar(require("./lib/install-policy"), exports);
 __exportStar(require("./lib/distribution-selector"), exports);
 __exportStar(require("./lib/runtime-image-platform"), exports);
@@ -35,5 +36,10 @@ __exportStar(require("./lib/resolve-nexus-bindings"), exports);
 __exportStar(require("./lib/nexus-endpoint-specs"), exports);
 __exportStar(require("./lib/lock-consumers"), exports);
 __exportStar(require("./lib/verify-resolved-deployment"), exports);
+__exportStar(require("./lib/resolve-unsplit-deployment"), exports);
+__exportStar(require("./lib/authorization-lock"), exports);
+__exportStar(require("./lib/verify-delivered-locks"), exports);
+var deployment_1 = require("../deployment");
+Object.defineProperty(exports, "isUnsplitResolvedDeployment", { enumerable: true, get: function () { return deployment_1.isUnsplitResolvedDeployment; } });
 __exportStar(require("./lib/delivered-biome"), exports);
 //# sourceMappingURL=index.js.map

package/dist/distribution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,oEAAkD;AAClD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AAKjD,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,oEAAkD;AAClD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AACjD,mEAAiD;AACjD,2DAAyC;AACzC,+DAA6C;AAE7C,4CAA4D;AAAnD,yHAAA,2BAA2B,OAAA;AAOpC,wDAAsC"}

package/dist/distribution/lib/authorization-lock.d.ts

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+export declare const AUTHORIZATION_LOCK_SCHEMA_VERSION: 1;
+export declare const AuthorizationLockReadViewSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    distributionId: z.ZodString;
+    platformGeneration: z.ZodNumber;
+    modelHash: z.ZodString;
+    modules: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        namespace: z.ZodString;
+        moduleVersion: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$loose>>>;
+}, z.core.$loose>;
+export type AuthorizationLockReadView = z.infer<typeof AuthorizationLockReadViewSchema>;
+export declare function parseAuthorizationLockReadView(raw: unknown): AuthorizationLockReadView;
+//# sourceMappingURL=authorization-lock.d.ts.map

package/dist/distribution/lib/authorization-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/authorization-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAY5D,eAAO,MAAM,+BAA+B;;;;;;;;;;iBAkB5B,CAAC;AAEjB,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B"}

package/dist/distribution/lib/authorization-lock.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationLockReadViewSchema = exports.AUTHORIZATION_LOCK_SCHEMA_VERSION = void 0;
+exports.parseAuthorizationLockReadView = parseAuthorizationLockReadView;
+const zod_1 = require("zod");
+const platform_generation_1 = require("../../platform-generation");
+exports.AUTHORIZATION_LOCK_SCHEMA_VERSION = 1;
+exports.AuthorizationLockReadViewSchema = zod_1.z
+    .object({
+    schemaVersion: zod_1.z.literal(exports.AUTHORIZATION_LOCK_SCHEMA_VERSION),
+    distributionId: zod_1.z.string().min(1),
+    platformGeneration: platform_generation_1.PlatformGenerationSchema,
+    modelHash: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
+    modules: zod_1.z
+        .array(zod_1.z
+        .object({
+        namespace: zod_1.z.string().min(1),
+        moduleVersion: zod_1.z.number().int().positive(),
+        contentHash: zod_1.z.string().min(1),
+    })
+        .passthrough())
+        .readonly(),
+})
+    .passthrough();
+function parseAuthorizationLockReadView(raw) {
+    const result = exports.AuthorizationLockReadViewSchema.safeParse(raw);
+    if (!result.success) {
+        throw new Error(`Invalid authorization.lock.json: ${result.error.issues
+            .map((issue) => `[${issue.path.join('.')}] ${issue.message}`)
+            .join('; ')}`);
+    }
+    return result.data;
+}
+//# sourceMappingURL=authorization-lock.js.map

package/dist/distribution/lib/authorization-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-lock.js","sourceRoot":"","sources":["../../../src/distribution/lib/authorization-lock.ts"],"names":[],"mappings":";;;AAwCA,wEAYC;AApDD,6BAAwB;AAExB,mEAAqE;AAExD,QAAA,iCAAiC,GAAG,CAAU,CAAC;AAY/C,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,yCAAiC,CAAC;IAC3D,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,kBAAkB,EAAE,8CAAwB;IAC5C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,OAAO,EAAE,OAAC;SACP,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,WAAW,EAAE,CACjB;SACA,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAMjB,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,KAAK,CAAC,MAAM;aACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/distribution/lib/customer-edition-definition.d.ts

@@ -1,4 +1,6 @@
 import { z } from 'zod';
+import { BiomeOrigin } from '../../biome';
+import { type ProcessTrustPolicy } from '../../process-topology';
 export declare const CustomerEditionSourceSchema: z.ZodObject<{
     kind: z.ZodLiteral<import("./biome-source").BiomeSourceKind.Git>;
     url: z.ZodString;
@@ -41,5 +43,12 @@ export declare const CustomerEditionDefinitionSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type CustomerEditionDefinition = z.infer<typeof CustomerEditionDefinitionSchema>;
 export declare function parseCustomerEditionDefinition(raw: unknown): CustomerEditionDefinition;
-export declare function customerTrustCeilingIssues(definition: CustomerEditionDefinition, sourceBiomeIds: readonly string[]): readonly string[];
+export declare function customerTrustCeilingIssues(definition: CustomerEditionDefinition, sourceBiomeIds: readonly string[], catalogueCeiling: ProcessTrustPolicy): readonly string[];
+export interface CustomerLockCeilingBiome {
+    readonly id: string;
+    readonly origin: BiomeOrigin;
+    readonly trustCeiling?: string | undefined;
+    readonly source?: unknown;
+}
+export declare function customerLockCeilingIssues(catalogueCeiling: ProcessTrustPolicy | undefined, lockBiomes: readonly CustomerLockCeilingBiome[]): readonly string[];
 //# sourceMappingURL=customer-edition-definition.d.ts.map

package/dist/distribution/lib/customer-edition-definition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"customer-edition-definition.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8CxB,eAAO,MAAM,2BAA2B;;;;;;;;;kBAoBvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0DxC,CAAC;AACL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B;AAcD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,yBAAyB,EACrC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,SAAS,MAAM,EAAE,CAuBnB"}
+{"version":3,"file":"customer-edition-definition.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AA4ChC,eAAO,MAAM,2BAA2B;;;;;;;;;kBAoBvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqExC,CAAC;AACL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B;AAoBD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,yBAAyB,EACrC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,gBAAgB,EAAE,kBAAkB,GACnC,SAAS,MAAM,EAAE,CAoCnB;AAsBD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiBD,wBAAgB,yBAAyB,CACvC,gBAAgB,EAAE,kBAAkB,GAAG,SAAS,EAChD,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAC9C,SAAS,MAAM,EAAE,CA2BnB"}

package/dist/distribution/lib/customer-edition-definition.js

@@ -3,7 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CustomerEditionDefinitionSchema = exports.CustomerEditionSourceSchema = void 0;
 exports.parseCustomerEditionDefinition = parseCustomerEditionDefinition;
 exports.customerTrustCeilingIssues = customerTrustCeilingIssues;
+exports.customerLockCeilingIssues = customerLockCeilingIssues;
 const zod_1 = require("zod");
+const deployment_1 = require("../../deployment");
 const process_topology_1 = require("../../process-topology");
 const biome_source_1 = require("./biome-source");
 const distribution_selector_1 = require("./distribution-selector");
@@ -64,6 +66,15 @@ exports.CustomerEditionDefinitionSchema = zod_1.z
             });
         }
     }
+    (definition.trustCeiling?.assignments ?? []).forEach((assignment, index) => {
+        if (assignment.domain === deployment_1.FIRST_PARTY_TRUST_DOMAIN) {
+            context.addIssue({
+                code: 'custom',
+                path: ['trustCeiling', 'assignments', index, 'domain'],
+                message: `trust domain "${deployment_1.FIRST_PARTY_TRUST_DOMAIN}" is reserved to the vendor catalogue — a customer edition assigns its own biomes to a domain of its own name`,
+            });
+        }
+    });
     if (definition.sources === undefined) {
         if (definition.trustCeiling !== undefined) {
             context.addIssue({
@@ -91,7 +102,11 @@ function parseCustomerEditionDefinition(raw) {
     }
     return result.data;
 }
-function customerTrustCeilingIssues(definition, sourceBiomeIds) {
+function customerTrustCeilingIssues(definition, sourceBiomeIds, catalogueCeiling) {
+    if (catalogueCeiling === undefined || catalogueCeiling === null) {
+        throw new Error('customerTrustCeilingIssues requires the catalogue ceiling (a ProcessTrustPolicy): ' +
+            'without it the domains the vendor reserves are unknown, and an omitted ceiling is not "no ceiling"');
+    }
     const fromSources = new Set(sourceBiomeIds);
     const assigned = new Set((definition.trustCeiling?.assignments ?? []).flatMap((assignment) => assignment.biomes));
     const issues = [];
@@ -105,6 +120,42 @@ function customerTrustCeilingIssues(definition, sourceBiomeIds) {
             issues.push(`\`trustCeiling\` assigns biome "${biomeId}", which no source of the definition carries — the ceiling covers the definition's own sources and nothing else`);
         }
     }
-    return issues;
+    for (const assignment of definition.trustCeiling?.assignments ?? []) {
+        for (const biomeId of assignment.biomes) {
+            if (joinsReservedDomain(catalogueCeiling, biomeId, assignment.domain)) {
+                issues.push(reservedDomainMessage(biomeId, assignment.domain));
+            }
+        }
+    }
+    return issues.sort();
+}
+function joinsReservedDomain(catalogueCeiling, biomeId, domain) {
+    const assignments = catalogueCeiling?.assignments ?? [];
+    if (!assignments.some((assignment) => assignment.domain === domain)) {
+        return false;
+    }
+    return !assignments.some((assignment) => assignment.domain === domain && assignment.biomes.includes(biomeId));
+}
+const reservedDomainMessage = (biomeId, domain) => `biome "${biomeId}" is placed in trust domain "${domain}", which the vendor catalogue assigns to its own biomes — that domain is reserved to the vendor catalogue`;
+const renderCeiling = (ceiling) => ceiling === undefined ? '(absent: the default domain)' : `"${ceiling}"`;
+function customerLockCeilingIssues(catalogueCeiling, lockBiomes) {
+    const issues = [];
+    for (const biome of lockBiomes) {
+        if (biome.source === undefined) {
+            const expected = (0, process_topology_1.deriveTrustCeiling)(biome.id, biome.origin, catalogueCeiling);
+            if (biome.trustCeiling !== expected) {
+                issues.push(`vendor biome "${biome.id}" states trust ceiling ${renderCeiling(biome.trustCeiling)}, but the catalogue derives ${renderCeiling(expected)}`);
+            }
+            continue;
+        }
+        const domain = biome.trustCeiling ?? (0, process_topology_1.defaultTrustDomain)(biome.id, biome.origin);
+        if (domain === deployment_1.FIRST_PARTY_TRUST_DOMAIN) {
+            issues.push(`biome "${biome.id}" comes from a customer source and is placed in trust domain "${deployment_1.FIRST_PARTY_TRUST_DOMAIN}", which is reserved to the vendor catalogue`);
+        }
+        else if (joinsReservedDomain(catalogueCeiling, biome.id, domain)) {
+            issues.push(reservedDomainMessage(biome.id, domain));
+        }
+    }
+    return issues.sort();
 }
 //# sourceMappingURL=customer-edition-definition.js.map

package/dist/distribution/lib/customer-edition-definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"customer-edition-definition.js","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":";;;AAwIA,wEAYC;AAcD,gEA0BC;AA5LD,6BAAwB;AAExB,6DAAkE;AAElE,iDAAiF;AACjF,mEAA0E;AAC1E,qEAA+E;AAkC/E,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAMjD,QAAA,2BAA2B,GAAG,mCAAoB,CAAC,WAAW,CACzE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAClB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,oFAAoF;SACvF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,iHAAiH;SACpH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAGW,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,4DAAmC;IACtD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,uDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC5D,YAAY,EAAE,2CAAwB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,mCAA2B,CAAC;SAClC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;SACxD,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC;gBACjC,OAAO,EAAE,UAAU,QAAQ,CAAC,KAAK,+DAA+D;aACjG,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,wCAAyB,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,oIAAoI;SACvI,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AASL,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAcD,SAAgB,0BAA0B,CACxC,UAAqC,EACrC,cAAiC;IAEjC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAClC,CACF,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,uFAAuF,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,iHAAiH,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"customer-edition-definition.js","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":";;;AA0JA,wEAYC;AAoBD,gEAwCC;AA6CD,8DA8BC;AA7SD,6BAAwB;AAGxB,iDAA4D;AAC5D,6DAKgC;AAEhC,iDAAiF;AACjF,mEAA0E;AAC1E,qEAA+E;AAkC/E,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAMjD,QAAA,2BAA2B,GAAG,mCAAoB,CAAC,WAAW,CACzE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAClB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,oFAAoF;SACvF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,iHAAiH;SACpH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAGW,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,4DAAmC;IACtD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,uDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC5D,YAAY,EAAE,2CAAwB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,mCAA2B,CAAC;SAClC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;SACxD,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC;gBACjC,OAAO,EAAE,UAAU,QAAQ,CAAC,KAAK,+DAA+D;aACjG,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,wCAAyB,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGD,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,qCAAwB,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACtD,OAAO,EAAE,iBAAiB,qCAAwB,+GAA+G;aAClK,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,oIAAoI;SACvI,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AASL,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAoBD,SAAgB,0BAA0B,CACxC,UAAqC,EACrC,cAAiC,EACjC,gBAAoC;IAEpC,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,oFAAoF;YAClF,oGAAoG,CACvG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAClC,CACF,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,uFAAuF,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,iHAAiH,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;QACpE,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAGD,SAAS,mBAAmB,CAC1B,gBAAgD,EAChD,OAAe,EACf,MAAc;IAEd,MAAM,WAAW,GAAG,gBAAgB,EAAE,WAAW,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAE,MAAc,EAAU,EAAE,CACxE,UAAU,OAAO,gCAAgC,MAAM,2GAA2G,CAAC;AAWrK,MAAM,aAAa,GAAG,CAAC,OAA2B,EAAU,EAAE,CAC5D,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC;AAc1E,SAAgB,yBAAyB,CACvC,gBAAgD,EAChD,UAA+C;IAE/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAA,qCAAkB,EACjC,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,MAAM,EACZ,gBAAgB,CACjB,CAAC;YACF,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,iBAAiB,KAAK,CAAC,EAAE,0BAA0B,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,+BAA+B,aAAa,CAAC,QAAQ,CAAC,EAAE,CAC7I,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,IAAI,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,qCAAwB,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CACT,UAAU,KAAK,CAAC,EAAE,iEAAiE,qCAAwB,8CAA8C,CAC1J,CAAC;QACJ,CAAC;aAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC"}

package/dist/distribution/lib/delivered-biome.d.ts

@@ -1,5 +1,5 @@
 import type { BiomeContentHash } from "./kernel-contract-authority";
-import type { VerifiedEditionResolution } from "./verified-resolved-deployment";
+import type { VerifiedEditionResolution, VerifiedUnsplitEditionResolution } from "./verified-resolved-deployment";
 export interface DeliveredBiome {
     readonly biomeContentHash: BiomeContentHash;
 }
@@ -7,5 +7,5 @@ export declare class DeliveredBiomeInvariantError extends Error {
     readonly biomeId: string;
     constructor(biomeId: string);
 }
-export declare function deliveredBiome(resolution: VerifiedEditionResolution, biomeId: string): DeliveredBiome | undefined;
+export declare function deliveredBiome(resolution: VerifiedEditionResolution | VerifiedUnsplitEditionResolution, biomeId: string): DeliveredBiome | undefined;
 //# sourceMappingURL=delivered-biome.d.ts.map

package/dist/distribution/lib/delivered-biome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivered-biome.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAGhF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAGD,qBAAa,4BAA6B,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAOrC;AAQD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE,MAAM,GACd,cAAc,GAAG,SAAS,CAO5B"}
+{"version":3,"file":"delivered-biome.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAGD,qBAAa,4BAA6B,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM;gBAAf,OAAO,EAAE,MAAM;CAOrC;AAQD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,yBAAyB,GAAG,gCAAgC,EACxE,OAAO,EAAE,MAAM,GACd,cAAc,GAAG,SAAS,CAO5B"}

package/dist/distribution/lib/delivered-biome.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivered-biome.js","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":";;;AAyBA,wCAUC;AA1BD,MAAa,4BAA6B,SAAQ,KAAK;IAChC;IAArB,YAAqB,OAAe;QAClC,KAAK,CACH,UAAU,OAAO,4EAA4E;YAC3F,kGAAkG,CACrG,CAAC;QAJiB,YAAO,GAAP,OAAO,CAAQ;QAKlC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AARD,oEAQC;AAQD,SAAgB,cAAc,CAC5B,UAAqC,EACrC,OAAe;IAEf,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC5E,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AACvD,CAAC"}
+{"version":3,"file":"delivered-biome.js","sourceRoot":"","sources":["../../../src/distribution/lib/delivered-biome.ts"],"names":[],"mappings":";;;AA4BA,wCAUC;AA1BD,MAAa,4BAA6B,SAAQ,KAAK;IAChC;IAArB,YAAqB,OAAe;QAClC,KAAK,CACH,UAAU,OAAO,4EAA4E;YAC3F,kGAAkG,CACrG,CAAC;QAJiB,YAAO,GAAP,OAAO,CAAQ;QAKlC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AARD,oEAQC;AAQD,SAAgB,cAAc,CAC5B,UAAwE,EACxE,OAAe;IAEf,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC5E,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AACvD,CAAC"}

package/dist/distribution/lib/distribution-lock.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { BiomeComponentKind, BiomeScalingMode, type BiomeComponentProcessFacts, type PostgresExtensionName, type BiomeTier, type BiomeTarget, type BiomeOrigin, type BiomeAudience, type BiomeBundleSourceSpec } from '../../biome';
+import { BiomeComponentKind, BiomeScalingMode, type BiomeComponentProcessFacts, type PostgresExtensionName, type BiomeTier, type BiomeTarget, BiomeOrigin, type BiomeAudience, type BiomeBundleSourceSpec } from '../../biome';
 import type { VerifiedResolvedDeployment } from './verified-resolved-deployment';
 import { type ResourceInclusion, type ResourceKindRef, type ResourceLogicalName, type ResourceScope } from '../../resource-requirement';
 import { type PlatformServiceTier } from './distribution';
@@ -270,5 +270,6 @@ export declare function unsealedProjection(lock: DistributionLock & {
 export declare function parseUnsealedDistributionLock(raw: unknown): UnsealedDistributionLock;
 export declare function parseDistributionLock(raw: unknown): DistributionLock;
 export declare function parseDistributionLockForReading(raw: unknown): DistributionLockReadView;
+export declare function biomeOriginsOfLock(lock: DistributionLock): ReadonlyMap<string, BiomeOrigin>;
 export {};
 //# sourceMappingURL=distribution-lock.d.ts.map