@xemahq/contracts 0.77.0 → 0.79.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/.source-stamp.json +2 -2
- package/dist/authorization-facts/lib/facts-apply.d.ts +1 -0
- package/dist/authorization-facts/lib/facts-apply.d.ts.map +1 -1
- package/dist/authorization-facts/lib/facts-apply.js +1 -0
- package/dist/authorization-facts/lib/facts-apply.js.map +1 -1
- package/dist/authorization-facts/lib/facts-writer-authority.d.ts +12 -1
- package/dist/authorization-facts/lib/facts-writer-authority.d.ts.map +1 -1
- package/dist/authorization-facts/lib/facts-writer-authority.js +69 -5
- package/dist/authorization-facts/lib/facts-writer-authority.js.map +1 -1
- package/dist/authorization-module/index.d.ts +2 -0
- package/dist/authorization-module/index.d.ts.map +1 -1
- package/dist/authorization-module/index.js +2 -0
- package/dist/authorization-module/index.js.map +1 -1
- package/dist/authorization-module/lib/authorization-composition-error.d.ts +12 -0
- package/dist/authorization-module/lib/authorization-composition-error.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-composition-error.js +17 -1
- package/dist/authorization-module/lib/authorization-composition-error.js.map +1 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.d.ts +5 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.js +1 -0
- package/dist/authorization-module/lib/authorization-interface-requirements.js.map +1 -1
- package/dist/authorization-module/lib/authorization-module-contribution.d.ts +24 -0
- package/dist/authorization-module/lib/authorization-module-contribution.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-module-contribution.js +1 -0
- package/dist/authorization-module/lib/authorization-module-contribution.js.map +1 -1
- package/dist/authorization-module/lib/authorization-module-envelope.d.ts +11 -0
- package/dist/authorization-module/lib/authorization-module-envelope.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-module-envelope.js +4 -0
- package/dist/authorization-module/lib/authorization-module-envelope.js.map +1 -1
- package/dist/authorization-module/lib/delegation-origination.d.ts +26 -0
- package/dist/authorization-module/lib/delegation-origination.d.ts.map +1 -0
- package/dist/authorization-module/lib/delegation-origination.js +43 -0
- package/dist/authorization-module/lib/delegation-origination.js.map +1 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts +6 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts.map +1 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.js +17 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.js.map +1 -0
- package/dist/authorization-module/lib/platform-authorization-modules.d.ts.map +1 -1
- package/dist/authorization-module/lib/platform-authorization-modules.js +11 -11
- package/dist/authorization-module/lib/platform-authorization-modules.js.map +1 -1
- package/dist/authorization-module/platform/xema_core.fga +76 -45
- package/dist/authorization-module/platform/xema_core.fga.yaml +522 -97
- package/dist/authorization-module/platform/xema_sharing.fga +48 -33
- package/dist/authorization-module/platform/xema_sharing.fga.yaml +555 -2
- package/dist/authorization-module/server/authorization-interface-conformance.d.ts +1 -0
- package/dist/authorization-module/server/authorization-interface-conformance.d.ts.map +1 -1
- package/dist/authorization-module/server/authorization-interface-conformance.js +13 -1
- package/dist/authorization-module/server/authorization-interface-conformance.js.map +1 -1
- package/dist/authorization-module/server/compose-authorization-base.d.ts +2 -0
- package/dist/authorization-module/server/compose-authorization-base.d.ts.map +1 -1
- package/dist/authorization-module/server/compose-authorization-base.js +45 -2
- package/dist/authorization-module/server/compose-authorization-base.js.map +1 -1
- package/dist/authorization-module/server/delegation-origination-conformance.d.ts +15 -0
- package/dist/authorization-module/server/delegation-origination-conformance.d.ts.map +1 -0
- package/dist/authorization-module/server/delegation-origination-conformance.js +92 -0
- package/dist/authorization-module/server/delegation-origination-conformance.js.map +1 -0
- package/dist/authorization-module/server/userset-subject-types.d.ts +3 -0
- package/dist/authorization-module/server/userset-subject-types.d.ts.map +1 -0
- package/dist/authorization-module/server/userset-subject-types.js +65 -0
- package/dist/authorization-module/server/userset-subject-types.js.map +1 -0
- package/dist/authzen/index.d.ts +1 -0
- package/dist/authzen/index.d.ts.map +1 -1
- package/dist/authzen/index.js +1 -0
- package/dist/authzen/index.js.map +1 -1
- package/dist/authzen/lib/durable-delegation-model.d.ts +33 -11
- package/dist/authzen/lib/durable-delegation-model.d.ts.map +1 -1
- package/dist/authzen/lib/durable-delegation-model.js +54 -16
- package/dist/authzen/lib/durable-delegation-model.js.map +1 -1
- package/dist/authzen/lib/xema-membership.d.ts +6 -0
- package/dist/authzen/lib/xema-membership.d.ts.map +1 -0
- package/dist/authzen/lib/xema-membership.js +16 -0
- package/dist/authzen/lib/xema-membership.js.map +1 -0
- package/dist/biome/lib/biome-component.d.ts +14 -0
- package/dist/biome/lib/biome-component.d.ts.map +1 -1
- package/dist/biome/lib/biome-component.js +37 -5
- package/dist/biome/lib/biome-component.js.map +1 -1
- package/dist/biome/lib/biome-generated-index.d.ts +75 -1
- package/dist/biome/lib/biome-generated-index.d.ts.map +1 -1
- package/dist/biome/lib/biome-generated-index.js +14 -0
- package/dist/biome/lib/biome-generated-index.js.map +1 -1
- package/dist/biome/lib/biome-manifest.d.ts +24 -0
- package/dist/biome/lib/biome-manifest.d.ts.map +1 -1
- package/dist/biome/xema-biome.schema.json +48 -0
- package/dist/connector/index.d.ts +1 -0
- package/dist/connector/index.d.ts.map +1 -1
- package/dist/connector/index.js +1 -0
- package/dist/connector/index.js.map +1 -1
- package/dist/connector/lib/connector-adapter-contribution.d.ts +1 -0
- package/dist/connector/lib/connector-adapter-contribution.d.ts.map +1 -1
- package/dist/connector/lib/connector-descriptor.d.ts +4 -0
- package/dist/connector/lib/connector-descriptor.d.ts.map +1 -1
- package/dist/connector/lib/connector-descriptor.js +2 -0
- package/dist/connector/lib/connector-descriptor.js.map +1 -1
- package/dist/connector/lib/connector-operation-exposure.d.ts +8 -0
- package/dist/connector/lib/connector-operation-exposure.d.ts.map +1 -0
- package/dist/connector/lib/connector-operation-exposure.js +12 -0
- package/dist/connector/lib/connector-operation-exposure.js.map +1 -0
- package/dist/contribution/lib/contribution-kind.d.ts +1 -0
- package/dist/contribution/lib/contribution-kind.d.ts.map +1 -1
- package/dist/contribution/lib/contribution-kind.js +1 -0
- package/dist/contribution/lib/contribution-kind.js.map +1 -1
- package/dist/deployment/lib/resolved-deployment.d.ts +5 -2
- package/dist/deployment/lib/resolved-deployment.d.ts.map +1 -1
- package/dist/deployment/lib/resolved-deployment.js +6 -3
- package/dist/deployment/lib/resolved-deployment.js.map +1 -1
- package/dist/distribution/index.d.ts +2 -0
- package/dist/distribution/index.d.ts.map +1 -1
- package/dist/distribution/index.js +2 -0
- package/dist/distribution/index.js.map +1 -1
- package/dist/distribution/lib/authorization-lock.d.ts +16 -0
- package/dist/distribution/lib/authorization-lock.d.ts.map +1 -0
- package/dist/distribution/lib/authorization-lock.js +34 -0
- package/dist/distribution/lib/authorization-lock.js.map +1 -0
- package/dist/distribution/lib/customer-edition-definition.d.ts +10 -1
- package/dist/distribution/lib/customer-edition-definition.d.ts.map +1 -1
- package/dist/distribution/lib/customer-edition-definition.js +53 -2
- package/dist/distribution/lib/customer-edition-definition.js.map +1 -1
- package/dist/distribution/lib/distribution-lock.d.ts +2 -1
- package/dist/distribution/lib/distribution-lock.d.ts.map +1 -1
- package/dist/distribution/lib/distribution-lock.js +20 -0
- package/dist/distribution/lib/distribution-lock.js.map +1 -1
- package/dist/distribution/lib/image-producer-evidence.d.ts +86 -14
- package/dist/distribution/lib/image-producer-evidence.d.ts.map +1 -1
- package/dist/distribution/lib/image-producer-evidence.js +72 -12
- package/dist/distribution/lib/image-producer-evidence.js.map +1 -1
- package/dist/distribution/lib/kernel-contract-authority.d.ts +1 -0
- package/dist/distribution/lib/kernel-contract-authority.d.ts.map +1 -1
- package/dist/distribution/lib/kernel-contract-authority.js +6 -2
- package/dist/distribution/lib/kernel-contract-authority.js.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.js +9 -1
- package/dist/distribution/lib/kernel-contract-source-paths.js.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.d.ts +2 -0
- package/dist/distribution/lib/resolve-unsplit-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.js +14 -0
- package/dist/distribution/lib/resolve-unsplit-deployment.js.map +1 -1
- package/dist/distribution/lib/runtime-image-source-index.d.ts +18 -1
- package/dist/distribution/lib/runtime-image-source-index.d.ts.map +1 -1
- package/dist/distribution/lib/runtime-image-source-index.js +38 -2
- package/dist/distribution/lib/runtime-image-source-index.js.map +1 -1
- package/dist/distribution/lib/verify-delivered-locks.d.ts +41 -0
- package/dist/distribution/lib/verify-delivered-locks.d.ts.map +1 -0
- package/dist/distribution/lib/verify-delivered-locks.js +76 -0
- package/dist/distribution/lib/verify-delivered-locks.js.map +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/verify-resolved-deployment.js +8 -0
- package/dist/distribution/lib/verify-resolved-deployment.js.map +1 -1
- package/dist/distribution/server/index.d.ts +8 -0
- package/dist/distribution/server/index.d.ts.map +1 -0
- package/dist/distribution/server/index.js +34 -0
- package/dist/distribution/server/index.js.map +1 -0
- package/dist/edition-protocol/edition-contract.schema.json +1 -1
- package/dist/edition-protocol/edition-protocol.json +1 -1
- package/dist/edition-protocol/lib/edition-protocol.d.ts +2 -1
- package/dist/edition-protocol/lib/edition-protocol.d.ts.map +1 -1
- package/dist/edition-protocol/lib/edition-protocol.js +4 -2
- package/dist/edition-protocol/lib/edition-protocol.js.map +1 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts +2 -0
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts.map +1 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js +66 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js.map +1 -1
- package/dist/setting/index.d.ts +10 -0
- package/dist/setting/index.d.ts.map +1 -0
- package/dist/setting/index.js +26 -0
- package/dist/setting/index.js.map +1 -0
- package/dist/setting/lib/setting-constraints.d.ts +32 -0
- package/dist/setting/lib/setting-constraints.d.ts.map +1 -0
- package/dist/setting/lib/setting-constraints.js +27 -0
- package/dist/setting/lib/setting-constraints.js.map +1 -0
- package/dist/setting/lib/setting-definition.d.ts +70 -0
- package/dist/setting/lib/setting-definition.d.ts.map +1 -0
- package/dist/setting/lib/setting-definition.js +144 -0
- package/dist/setting/lib/setting-definition.js.map +1 -0
- package/dist/setting/lib/setting-duration.d.ts +3 -0
- package/dist/setting/lib/setting-duration.d.ts.map +1 -0
- package/dist/setting/lib/setting-duration.js +39 -0
- package/dist/setting/lib/setting-duration.js.map +1 -0
- package/dist/setting/lib/setting-enums.d.ts +27 -0
- package/dist/setting/lib/setting-enums.d.ts.map +1 -0
- package/dist/setting/lib/setting-enums.js +34 -0
- package/dist/setting/lib/setting-enums.js.map +1 -0
- package/dist/setting/lib/setting-key.d.ts +19 -0
- package/dist/setting/lib/setting-key.d.ts.map +1 -0
- package/dist/setting/lib/setting-key.js +70 -0
- package/dist/setting/lib/setting-key.js.map +1 -0
- package/dist/setting/lib/setting-merge.d.ts +7 -0
- package/dist/setting/lib/setting-merge.d.ts.map +1 -0
- package/dist/setting/lib/setting-merge.js +36 -0
- package/dist/setting/lib/setting-merge.js.map +1 -0
- package/dist/setting/lib/setting-resolve.d.ts +11 -0
- package/dist/setting/lib/setting-resolve.d.ts.map +1 -0
- package/dist/setting/lib/setting-resolve.js +39 -0
- package/dist/setting/lib/setting-resolve.js.map +1 -0
- package/dist/setting/lib/setting-revision.d.ts +5 -0
- package/dist/setting/lib/setting-revision.d.ts.map +1 -0
- package/dist/setting/lib/setting-revision.js +68 -0
- package/dist/setting/lib/setting-revision.js.map +1 -0
- package/dist/setting/lib/setting-value.d.ts +5 -0
- package/dist/setting/lib/setting-value.d.ts.map +1 -0
- package/dist/setting/lib/setting-value.js +57 -0
- package/dist/setting/lib/setting-value.js.map +1 -0
- package/dist/space/index.d.ts +0 -1
- package/dist/space/index.d.ts.map +1 -1
- package/dist/space/index.js +0 -1
- package/dist/space/index.js.map +1 -1
- package/package.json +5 -2
- package/dist/space/lib/scoped-setting.d.ts +0 -28
- package/dist/space/lib/scoped-setting.d.ts.map +0 -1
- package/dist/space/lib/scoped-setting.js +0 -60
- package/dist/space/lib/scoped-setting.js.map +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"kernel-contract-source-paths.js","sourceRoot":"","sources":["../../../src/distribution/lib/kernel-contract-source-paths.ts"],"names":[],"mappings":";;;AAOa,QAAA,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,uDAAuD;IACvD,+EAA+E;IAC/E,kEAAkE;IAClE,iEAAiE;IACjE,mFAAmF;IACnF,oFAAoF;IACpF,sFAAsF;IACtF,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E,iFAAiF;IACjF,uFAAuF;IACvF,oEAAoE;IACpE,uFAAuF;IACvF,gEAAgE;IAChE,qFAAqF;IACrF,6EAA6E;IAC7E,6DAA6D;IAC7D,qEAAqE;IACrE,uEAAuE;IACvE,wFAAwF;IACxF,oFAAoF;IACpF,qEAAqE;IACrE,+DAA+D;IAC/D,+EAA+E;IAC/E,iFAAiF;IACjF,iEAAiE;IACjE,0EAA0E;IAC1E,kFAAkF;IAClF,iFAAiF;IACjF,oFAAoF;IACpF,yEAAyE;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,qDAAqD;IACrD,6DAA6D;IAC7D,8DAA8D;IAC9D,iEAAiE;IACjE,qFAAqF;IACrF,iFAAiF;IACjF,6FAA6F;IAC7F,8EAA8E;IAC9E,mEAAmE;IACnE,4EAA4E;IAC5E,6EAA6E;IAC7E,gFAAgF;IAChF,wFAAwF;IACxF,+EAA+E;IAC/E,oEAAoE;IACpE,kGAAkG;IAClG,uGAAuG;IACvG,oGAAoG;IACpG,gGAAgG;IAChG,0FAA0F;IAC1F,iGAAiG;IACjG,iGAAiG;IACjG,yGAAyG;IACzG,8FAA8F;IAC9F,gGAAgG;IAChG,2EAA2E;IAC3E,2FAA2F;IAC3F,uDAAuD;IACvD,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,8EAA8E;IAC9E,oFAAoF;IACpF,0EAA0E;IAC1E,8EAA8E;IAC9E,gEAAgE;IAChE,wFAAwF;IACxF,8EAA8E;IAC9E,oFAAoF;IACpF,qDAAqD;IACrD,kEAAkE;IAClE,4EAA4E;IAC5E,yEAAyE;IACzE,kEAAkE;IAClE,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,8EAA8E;IAC9E,mEAAmE;IACnE,yEAAyE;IACzE,8DAA8D;IAC9D,mEAAmE;IACnE,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,0EAA0E;IAC1E,gEAAgE;IAChE,6FAA6F;IAC7F,iGAAiG;IACjG,0FAA0F;IAC1F,oFAAoF;IACpF,qEAAqE;IACrE,iGAAiG;IACjG,4FAA4F;IAC5F,wFAAwF;IACxF,0DAA0D;IAC1D,yEAAyE;IACzE,kFAAkF;IAClF,4EAA4E;IAC5E,gFAAgF;IAChF,6EAA6E;IAC7E,0EAA0E;IAC1E,gFAAgF;IAChF,yEAAyE;IACzE,kFAAkF;IAClF,yFAAyF;IACzF,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,uEAAuE;IACvE,iFAAiF;IACjF,iFAAiF;IACjF,+DAA+D;IAC/D,gFAAgF;IAChF,kEAAkE;IAClE,2EAA2E;IAC3E,uFAAuF;IACvF,iFAAiF;IACjF,mFAAmF;IACnF,yDAAyD;IACzD,oEAAoE;IACpE,mFAAmF;IACnF,kEAAkE;IAClE,sFAAsF;IACtF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,uEAAuE;IACvE,8EAA8E;IAC9E,wFAAwF;IACxF,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,qFAAqF;IACrF,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,iFAAiF;IACjF,wFAAwF;IACxF,oFAAoF;IACpF,+DAA+D;IAC/D,6EAA6E;IAC7E,sEAAsE;IACtE,4DAA4D;IAC5D,wFAAwF;IACxF,uFAAuF;IACvF,4EAA4E;IAC5E,uFAAuF;IACvF,8EAA8E;IAC9E,uEAAuE;IACvE,mEAAmE;IACnE,+DAA+D;IAC/D,6DAA6D;IAC7D,yEAAyE;IACzE,mFAAmF;IACnF,kEAAkE;IAClE,mFAAmF;IACnF,0DAA0D;IAC1D,8EAA8E;IAC9E,sEAAsE;IACtE,4EAA4E;IAC5E,qEAAqE;IACrE,wEAAwE;IACxE,4DAA4D;IAC5D,wEAAwE;IACxE,uEAAuE;IACvE,sFAAsF;IACtF,0EAA0E;IAC1E,4EAA4E;IAC5E,iFAAiF;IACjF,6EAA6E;IAC7E,gFAAgF;IAChF,uEAAuE;IACvE,yFAAyF;IACzF,qEAAqE;IACrE,kFAAkF;IAClF,yEAAyE;IACzE,oFAAoF;IACpF,uFAAuF;IACvF,yEAAyE;IACzE,wEAAwE;IACxE,+EAA+E;IAC/E,wFAAwF;IACxF,iFAAiF;IACjF,qFAAqF;IACrF,iFAAiF;IACjF,qFAAqF;IACrF,qFAAqF;IACrF,iEAAiE;IACjE,sEAAsE;IACtE,iFAAiF;IACjF,uEAAuE;IACvE,0EAA0E;IAC1E,mGAAmG;IACnG,qEAAqE;IACrE,iFAAiF;IACjF,yFAAyF;IACzF,4FAA4F;IAC5F,6FAA6F;IAC7F,gGAAgG;IAChG,yFAAyF;IACzF,gEAAgE;IAChE,qFAAqF;IACrF,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IACpD,8DAA8D;IAC9D,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,sEAAsE;IACtE,6DAA6D;IAC7D,qDAAqD;IACrD,8DAA8D;IAC9D,iEAAiE;IACjE,6DAA6D;IAC7D,iFAAiF;IACjF,0EAA0E;IAC1E,sDAAsD;IACtD,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,gEAAgE;IAChE,4DAA4D;IAC5D,uEAAuE;IACvE,mEAAmE;IACnE,qFAAqF;IACrF,+DAA+D;IAC/D,kFAAkF;IAClF,sDAAsD;IACtD,qEAAqE;IACrE,gEAAgE;IAChE,2EAA2E;IAC3E,2DAA2D;IAC3D,gEAAgE;IAChE,mFAAmF;IACnF,gEAAgE;IAChE,wFAAwF;IACxF,+EAA+E;IAC/E,uFAAuF;IACvF,4DAA4D;IAC5D,uEAAuE;IACvE,oEAAoE;IACpE,uFAAuF;IACvF,6DAA6D;IAC7D,iFAAiF;IACjF,sFAAsF;IACtF,yFAAyF;IACzF,oFAAoF;IACpF,wDAAwD;IACxD,2DAA2D;IAC3D,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,0EAA0E;IAC1E,sFAAsF;IACtF,mEAAmE;IACnE,4DAA4D;IAC5D,oEAAoE;IACpE,+DAA+D;IAC/D,6EAA6E;IAC7E,sDAAsD;IACtD,6DAA6D;IAC7D,8DAA8D;IAC9D,uEAAuE;IACvE,qEAAqE;IACrE,+DAA+D;IAC/D,gEAAgE;IAChE,uEAAuE;IACvE,gEAAgE;IAChE,iEAAiE;IACjE,wEAAwE;IACxE,2DAA2D;IAC3D,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChE,6EAA6E;IAC7E,mFAAmF;IACnF,iFAAiF;IACjF,sFAAsF;IACtF,sFAAsF;IACtF,8DAA8D;IAC9D,6EAA6E;IAC7E,oFAAoF;IACpF,oFAAoF;IACpF,+EAA+E;IAC/E,6EAA6E;IAC7E,mFAAmF;IACnF,6EAA6E;IAC7E,8EAA8E;IAC9E,qDAAqD;IACrD,+DAA+D;IAC/D,oEAAoE;IACpE,gEAAgE;IAChE,yDAAyD;IACzD,yEAAyE;IACzE,qDAAqD;IACrD,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,qEAAqE;IACrE,
|
|
1
|
+
{"version":3,"file":"kernel-contract-source-paths.js","sourceRoot":"","sources":["../../../src/distribution/lib/kernel-contract-source-paths.ts"],"names":[],"mappings":";;;AAOa,QAAA,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,uDAAuD;IACvD,+EAA+E;IAC/E,kEAAkE;IAClE,iEAAiE;IACjE,mFAAmF;IACnF,oFAAoF;IACpF,sFAAsF;IACtF,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E,iFAAiF;IACjF,uFAAuF;IACvF,oEAAoE;IACpE,uFAAuF;IACvF,gEAAgE;IAChE,qFAAqF;IACrF,6EAA6E;IAC7E,6DAA6D;IAC7D,qEAAqE;IACrE,uEAAuE;IACvE,wFAAwF;IACxF,oFAAoF;IACpF,qEAAqE;IACrE,+DAA+D;IAC/D,+EAA+E;IAC/E,iFAAiF;IACjF,iEAAiE;IACjE,0EAA0E;IAC1E,kFAAkF;IAClF,iFAAiF;IACjF,oFAAoF;IACpF,yEAAyE;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,qDAAqD;IACrD,6DAA6D;IAC7D,8DAA8D;IAC9D,iEAAiE;IACjE,qFAAqF;IACrF,iFAAiF;IACjF,6FAA6F;IAC7F,8EAA8E;IAC9E,mEAAmE;IACnE,4EAA4E;IAC5E,6EAA6E;IAC7E,gFAAgF;IAChF,wFAAwF;IACxF,+EAA+E;IAC/E,oEAAoE;IACpE,kGAAkG;IAClG,uGAAuG;IACvG,oGAAoG;IACpG,gGAAgG;IAChG,0FAA0F;IAC1F,yFAAyF;IACzF,8FAA8F;IAC9F,iGAAiG;IACjG,iGAAiG;IACjG,yGAAyG;IACzG,8FAA8F;IAC9F,gGAAgG;IAChG,wGAAwG;IACxG,2EAA2E;IAC3E,2FAA2F;IAC3F,2FAA2F;IAC3F,uDAAuD;IACvD,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,8EAA8E;IAC9E,oFAAoF;IACpF,0EAA0E;IAC1E,8EAA8E;IAC9E,qEAAqE;IACrE,gEAAgE;IAChE,wFAAwF;IACxF,8EAA8E;IAC9E,oFAAoF;IACpF,qDAAqD;IACrD,kEAAkE;IAClE,4EAA4E;IAC5E,yEAAyE;IACzE,kEAAkE;IAClE,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,8EAA8E;IAC9E,mEAAmE;IACnE,yEAAyE;IACzE,8DAA8D;IAC9D,mEAAmE;IACnE,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,0EAA0E;IAC1E,gEAAgE;IAChE,6FAA6F;IAC7F,iGAAiG;IACjG,0FAA0F;IAC1F,oFAAoF;IACpF,qEAAqE;IACrE,iGAAiG;IACjG,4FAA4F;IAC5F,wFAAwF;IACxF,0DAA0D;IAC1D,yEAAyE;IACzE,kFAAkF;IAClF,4EAA4E;IAC5E,gFAAgF;IAChF,6EAA6E;IAC7E,0EAA0E;IAC1E,gFAAgF;IAChF,yEAAyE;IACzE,kFAAkF;IAClF,yFAAyF;IACzF,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,uEAAuE;IACvE,iFAAiF;IACjF,iFAAiF;IACjF,+DAA+D;IAC/D,gFAAgF;IAChF,kEAAkE;IAClE,2EAA2E;IAC3E,uFAAuF;IACvF,iFAAiF;IACjF,mFAAmF;IACnF,yDAAyD;IACzD,oEAAoE;IACpE,mFAAmF;IACnF,kEAAkE;IAClE,sFAAsF;IACtF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,oFAAoF;IACpF,4EAA4E;IAC5E,8EAA8E;IAC9E,uEAAuE;IACvE,8EAA8E;IAC9E,wFAAwF;IACxF,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,qFAAqF;IACrF,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,iFAAiF;IACjF,wFAAwF;IACxF,oFAAoF;IACpF,+DAA+D;IAC/D,6EAA6E;IAC7E,sEAAsE;IACtE,4DAA4D;IAC5D,wFAAwF;IACxF,uFAAuF;IACvF,4EAA4E;IAC5E,uFAAuF;IACvF,8EAA8E;IAC9E,uEAAuE;IACvE,mEAAmE;IACnE,+DAA+D;IAC/D,6DAA6D;IAC7D,yEAAyE;IACzE,mFAAmF;IACnF,kEAAkE;IAClE,mFAAmF;IACnF,0DAA0D;IAC1D,8EAA8E;IAC9E,sEAAsE;IACtE,4EAA4E;IAC5E,qEAAqE;IACrE,wEAAwE;IACxE,4DAA4D;IAC5D,6EAA6E;IAC7E,wEAAwE;IACxE,uEAAuE;IACvE,sFAAsF;IACtF,0EAA0E;IAC1E,4EAA4E;IAC5E,iFAAiF;IACjF,6EAA6E;IAC7E,gFAAgF;IAChF,uEAAuE;IACvE,yFAAyF;IACzF,qEAAqE;IACrE,kFAAkF;IAClF,yEAAyE;IACzE,oFAAoF;IACpF,uFAAuF;IACvF,yEAAyE;IACzE,wEAAwE;IACxE,+EAA+E;IAC/E,wFAAwF;IACxF,iFAAiF;IACjF,qFAAqF;IACrF,iFAAiF;IACjF,qFAAqF;IACrF,iFAAiF;IACjF,qFAAqF;IACrF,mEAAmE;IACnE,iEAAiE;IACjE,sEAAsE;IACtE,iFAAiF;IACjF,uEAAuE;IACvE,0EAA0E;IAC1E,mGAAmG;IACnG,qEAAqE;IACrE,iFAAiF;IACjF,yFAAyF;IACzF,4FAA4F;IAC5F,6FAA6F;IAC7F,gGAAgG;IAChG,yFAAyF;IACzF,gEAAgE;IAChE,qFAAqF;IACrF,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IACpD,8DAA8D;IAC9D,0EAA0E;IAC1E,qEAAqE;IACrE,kEAAkE;IAClE,sEAAsE;IACtE,6DAA6D;IAC7D,qDAAqD;IACrD,8DAA8D;IAC9D,iEAAiE;IACjE,6DAA6D;IAC7D,iFAAiF;IACjF,0EAA0E;IAC1E,sDAAsD;IACtD,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,gEAAgE;IAChE,4DAA4D;IAC5D,uEAAuE;IACvE,mEAAmE;IACnE,qFAAqF;IACrF,+DAA+D;IAC/D,kFAAkF;IAClF,sDAAsD;IACtD,qEAAqE;IACrE,gEAAgE;IAChE,2EAA2E;IAC3E,2DAA2D;IAC3D,gEAAgE;IAChE,mFAAmF;IACnF,gEAAgE;IAChE,wFAAwF;IACxF,+EAA+E;IAC/E,uFAAuF;IACvF,4DAA4D;IAC5D,uEAAuE;IACvE,oEAAoE;IACpE,uFAAuF;IACvF,6DAA6D;IAC7D,iFAAiF;IACjF,sFAAsF;IACtF,yFAAyF;IACzF,oFAAoF;IACpF,wDAAwD;IACxD,2DAA2D;IAC3D,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,0EAA0E;IAC1E,sFAAsF;IACtF,mEAAmE;IACnE,4DAA4D;IAC5D,oEAAoE;IACpE,+DAA+D;IAC/D,6EAA6E;IAC7E,sDAAsD;IACtD,6DAA6D;IAC7D,8DAA8D;IAC9D,uEAAuE;IACvE,qEAAqE;IACrE,+DAA+D;IAC/D,gEAAgE;IAChE,uEAAuE;IACvE,gEAAgE;IAChE,iEAAiE;IACjE,wEAAwE;IACxE,2DAA2D;IAC3D,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChE,6EAA6E;IAC7E,mFAAmF;IACnF,iFAAiF;IACjF,sFAAsF;IACtF,sFAAsF;IACtF,8DAA8D;IAC9D,6EAA6E;IAC7E,oFAAoF;IACpF,oFAAoF;IACpF,+EAA+E;IAC/E,6EAA6E;IAC7E,mFAAmF;IACnF,6EAA6E;IAC7E,8EAA8E;IAC9E,qDAAqD;IACrD,+DAA+D;IAC/D,oEAAoE;IACpE,gEAAgE;IAChE,yDAAyD;IACzD,yEAAyE;IACzE,qDAAqD;IACrD,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,qEAAqE;IACrE,wEAAwE;IACxE,mEAAmE;IACnE,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,yDAAyD;IACzD,uDAAuD;IACvD,yEAAyE;IACzE,6DAA6D;IAC7D,iEAAiE;IACjE,uDAAuD;IACvD,0EAA0E;IAC1E,kEAAkE;IAClE,mEAAmE;IACnE,sDAAsD;IACtD,qEAAqE;IACrE,2DAA2D;IAC3D,6DAA6D;IAC7D,iEAAiE;IACjE,8DAA8D;IAC9D,yEAAyE;IACzE,kEAAkE;IAClE,mFAAmF;IACnF,mFAAmF;IACnF,wFAAwF;IACxF,4EAA4E;IAC5E,oEAAoE;IACpE,oEAAoE;IACpE,8EAA8E;IAC9E,iFAAiF;IACjF,wDAAwD;IACxD,iEAAiE;IACjE,uEAAuE;IACvE,iEAAiE;IACjE,mEAAmE;IACnE,uEAAuE;IACvE,gEAAgE;IAChE,yEAAyE;IACzE,mEAAmE;IACnE,kFAAkF;IAClF,wEAAwE;IACxE,iEAAiE;IACjE,4DAA4D;IAC5D,6DAA6D;IAC7D,8DAA8D;IAC9D,gEAAgE;IAChE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,4FAA4F;IAC5F,sFAAsF;IACtF,sEAAsE;IACtE,mEAAmE;IACnE,mEAAmE;IACnE,sEAAsE;IACtE,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,+EAA+E;CACvE,CAAC,CAAC"}
|
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
import { type ResolvedDeployment } from '../../deployment';
|
|
2
2
|
export interface UnsplitDeploymentInput {
|
|
3
3
|
readonly lockBytes: Uint8Array;
|
|
4
|
+
readonly imagesLockBytes: Uint8Array;
|
|
5
|
+
readonly authorizationLockBytes: Uint8Array;
|
|
4
6
|
readonly deployment: string;
|
|
5
7
|
readonly runtimeNamespace: string;
|
|
6
8
|
readonly edition: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolve-unsplit-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"resolve-unsplit-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAkC1B,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IAErC,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAE5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAMlC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAE1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AASD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA8C7B"}
|
|
@@ -4,9 +4,21 @@ exports.resolveUnsplitDeployment = resolveUnsplitDeployment;
|
|
|
4
4
|
const content_address_1 = require("../../content-address");
|
|
5
5
|
const deployment_1 = require("../../deployment");
|
|
6
6
|
const process_topology_1 = require("../../process-topology");
|
|
7
|
+
const authorization_lock_1 = require("./authorization-lock");
|
|
7
8
|
const distribution_lock_1 = require("./distribution-lock");
|
|
9
|
+
const image_lock_1 = require("./image-lock");
|
|
8
10
|
async function resolveUnsplitDeployment(input) {
|
|
9
11
|
const lock = (0, distribution_lock_1.parseDistributionLockForReading)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.lockBytes)));
|
|
12
|
+
const imageLock = (0, image_lock_1.parseImageLock)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.imagesLockBytes)));
|
|
13
|
+
const authorizationLock = (0, authorization_lock_1.parseAuthorizationLockReadView)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.authorizationLockBytes)));
|
|
14
|
+
for (const [name, distributionId] of [
|
|
15
|
+
['images lock', imageLock.distributionId],
|
|
16
|
+
['authorization lock', authorizationLock.distributionId],
|
|
17
|
+
]) {
|
|
18
|
+
if (distributionId !== lock.distributionId) {
|
|
19
|
+
throw new Error(`resolveUnsplitDeployment: the ${name} is for distribution "${distributionId}", but the lock is for "${lock.distributionId}".`);
|
|
20
|
+
}
|
|
21
|
+
}
|
|
10
22
|
return deployment_1.ResolvedDeploymentSchema.parse({
|
|
11
23
|
schemaVersion: deployment_1.RESOLVED_DEPLOYMENT_SCHEMA_VERSION,
|
|
12
24
|
deployment: input.deployment,
|
|
@@ -16,6 +28,8 @@ async function resolveUnsplitDeployment(input) {
|
|
|
16
28
|
version: input.edition.version,
|
|
17
29
|
registry: input.edition.registry,
|
|
18
30
|
lockSha256: await (0, content_address_1.sha256Hex)(input.lockBytes),
|
|
31
|
+
imagesLockSha256: await (0, content_address_1.sha256Hex)(input.imagesLockBytes),
|
|
32
|
+
authorizationLockSha256: await (0, content_address_1.sha256Hex)(input.authorizationLockBytes),
|
|
19
33
|
ref: input.edition.ref,
|
|
20
34
|
},
|
|
21
35
|
biomes: [...lock.biomes]
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;AAyEA,4DAgDC;AAzHD,2DAAkD;AAClD,iDAM0B;AAC1B,6DAA4D;AAC5D,6DAAsE;AACtE,2DAAsE;AACtE,6CAA8C;AA8DvC,KAAK,UAAU,wBAAwB,CAC5C,KAA6B;IAE7B,MAAM,IAAI,GAAG,IAAA,mDAA+B,EAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,2BAAc,EAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACpF,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAA,mDAA8B,EACtD,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAC3F,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI;QACnC,CAAC,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC;QACzC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,cAAc,CAAC;KAChD,EAAE,CAAC;QACX,IAAI,cAAc,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,yBAAyB,cAAc,2BAA2B,IAAI,CAAC,cAAc,IAAI,CAC/H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,qCAAwB,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,+CAAkC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE;YACP,EAAE,EAAE,IAAI,CAAC,cAAc;YACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,SAAS,CAAC;YAC5C,gBAAgB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,eAAe,CAAC;YACxD,uBAAuB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,sBAAsB,CAAC;YACtE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;SACvB;QACD,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAEb,MAAM,OAAO,GAAG,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACvE,CAAC,CAAC;QACJ,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE;YACV,IAAI,EAAE,6CAAgC,CAAC,OAAO;YAC9C,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE;SACxE;KACF,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -25,8 +25,13 @@ export declare const BuildStepContextDirectorySchema: z.ZodObject<{
|
|
|
25
25
|
reason: z.ZodString;
|
|
26
26
|
}, z.core.$strict>;
|
|
27
27
|
export type BuildStepContextDirectory = z.infer<typeof BuildStepContextDirectorySchema>;
|
|
28
|
+
export declare const ProducerWorkflowPinSchema: z.ZodObject<{
|
|
29
|
+
repository: z.ZodString;
|
|
30
|
+
workflowCommit: z.ZodString;
|
|
31
|
+
}, z.core.$strict>;
|
|
32
|
+
export type ProducerWorkflowPin = z.infer<typeof ProducerWorkflowPinSchema>;
|
|
28
33
|
export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
|
|
29
|
-
schemaVersion: z.ZodLiteral<
|
|
34
|
+
schemaVersion: z.ZodLiteral<2>;
|
|
30
35
|
contractAuthority: z.ZodObject<{
|
|
31
36
|
schemaVersion: z.ZodLiteral<1>;
|
|
32
37
|
generatorIdentity: z.ZodLiteral<"xema-distributions/build-runtime-image-source-index.mjs@v1">;
|
|
@@ -65,6 +70,10 @@ export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
|
|
|
65
70
|
sourceCommit: z.ZodString;
|
|
66
71
|
vendoredSourceCommit: z.ZodString;
|
|
67
72
|
}, z.core.$strict>>>;
|
|
73
|
+
producerWorkflowPins: z.ZodReadonly<z.ZodArray<z.ZodObject<{
|
|
74
|
+
repository: z.ZodString;
|
|
75
|
+
workflowCommit: z.ZodString;
|
|
76
|
+
}, z.core.$strict>>>;
|
|
68
77
|
platformServiceBindings: z.ZodReadonly<z.ZodArray<z.ZodObject<{
|
|
69
78
|
platformService: z.ZodString;
|
|
70
79
|
subjectKind: z.ZodEnum<typeof RuntimeImageSubjectKind>;
|
|
@@ -73,4 +82,12 @@ export declare const RuntimeImageSourceIndexSchema: z.ZodObject<{
|
|
|
73
82
|
}, z.core.$strict>;
|
|
74
83
|
export type RuntimeImageSourceIndex = z.infer<typeof RuntimeImageSourceIndexSchema>;
|
|
75
84
|
export declare function parseRuntimeImageSourceIndex(raw: unknown): RuntimeImageSourceIndex;
|
|
85
|
+
export declare enum ProducerWorkflowPinRefusal {
|
|
86
|
+
Unpinned = "producer_workflow_unpinned",
|
|
87
|
+
Mismatch = "producer_workflow_pin_mismatch"
|
|
88
|
+
}
|
|
89
|
+
export declare function producerWorkflowPinRefusal(index: RuntimeImageSourceIndex, producer: {
|
|
90
|
+
readonly repository: string;
|
|
91
|
+
readonly workflowCommit: string;
|
|
92
|
+
}): ProducerWorkflowPinRefusal | undefined;
|
|
76
93
|
//# sourceMappingURL=runtime-image-source-index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runtime-image-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;
|
|
1
|
+
{"version":3,"file":"runtime-image-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA8CvD,eAAO,MAAM,oCAAoC;;;;;;;;;;kBAYtC,CAAC;AAeZ,eAAO,MAAM,yBAAyB;;;;;;kBAiB3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAc5E,eAAO,MAAM,+BAA+B;;;;kBASjC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,eAAO,MAAM,yBAAyB;;;kBAM3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA+PtC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,GACX,uBAAuB,CAUzB;AAGD,oBAAY,0BAA0B;IAEpC,QAAQ,+BAA+B;IAEvC,QAAQ,mCAAmC;CAC5C;AAWD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACzE,0BAA0B,GAAG,SAAS,CAQxC"}
|
|
@@ -1,9 +1,11 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.RuntimeImageSourceIndexSchema = exports.BuildStepContextDirectorySchema = exports.CrossRepoBuildInputSchema = exports.RuntimeImageSupplementalSourceSchema = void 0;
|
|
3
|
+
exports.ProducerWorkflowPinRefusal = exports.RuntimeImageSourceIndexSchema = exports.ProducerWorkflowPinSchema = exports.BuildStepContextDirectorySchema = exports.CrossRepoBuildInputSchema = exports.RuntimeImageSupplementalSourceSchema = void 0;
|
|
4
4
|
exports.parseRuntimeImageSourceIndex = parseRuntimeImageSourceIndex;
|
|
5
|
+
exports.producerWorkflowPinRefusal = producerWorkflowPinRefusal;
|
|
5
6
|
const zod_1 = require("zod");
|
|
6
7
|
const image_lock_1 = require("./image-lock");
|
|
8
|
+
const image_producer_evidence_1 = require("./image-producer-evidence");
|
|
7
9
|
const kernel_contract_authority_1 = require("./kernel-contract-authority");
|
|
8
10
|
const RuntimeIdentitySchema = zod_1.z
|
|
9
11
|
.string()
|
|
@@ -65,9 +67,15 @@ exports.BuildStepContextDirectorySchema = zod_1.z
|
|
|
65
67
|
reason: zod_1.z.string().min(20),
|
|
66
68
|
})
|
|
67
69
|
.strict();
|
|
70
|
+
exports.ProducerWorkflowPinSchema = zod_1.z
|
|
71
|
+
.object({
|
|
72
|
+
repository: image_producer_evidence_1.GithubRepositorySchema,
|
|
73
|
+
workflowCommit: GitCommitSchema,
|
|
74
|
+
})
|
|
75
|
+
.strict();
|
|
68
76
|
exports.RuntimeImageSourceIndexSchema = zod_1.z
|
|
69
77
|
.object({
|
|
70
|
-
schemaVersion: zod_1.z.literal(
|
|
78
|
+
schemaVersion: zod_1.z.literal(2),
|
|
71
79
|
contractAuthority: kernel_contract_authority_1.KernelContractAuthoritySchema,
|
|
72
80
|
supplementalSubjects: zod_1.z
|
|
73
81
|
.array(exports.RuntimeImageSupplementalSourceSchema)
|
|
@@ -87,6 +95,7 @@ exports.RuntimeImageSourceIndexSchema = zod_1.z
|
|
|
87
95
|
.strict())
|
|
88
96
|
.min(1)
|
|
89
97
|
.readonly(),
|
|
98
|
+
producerWorkflowPins: zod_1.z.array(exports.ProducerWorkflowPinSchema).readonly(),
|
|
90
99
|
platformServiceBindings: zod_1.z
|
|
91
100
|
.array(zod_1.z
|
|
92
101
|
.object({
|
|
@@ -228,6 +237,20 @@ exports.RuntimeImageSourceIndexSchema = zod_1.z
|
|
|
228
237
|
});
|
|
229
238
|
}
|
|
230
239
|
}
|
|
240
|
+
const pinnedWorkflows = new Map();
|
|
241
|
+
for (const [index, pin] of value.producerWorkflowPins.entries()) {
|
|
242
|
+
const incumbent = pinnedWorkflows.get(pin.repository);
|
|
243
|
+
if (incumbent !== undefined) {
|
|
244
|
+
context.addIssue({
|
|
245
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
246
|
+
path: ['producerWorkflowPins', index, 'repository'],
|
|
247
|
+
message: `duplicates producerWorkflowPins[${incumbent}].repository "${pin.repository}"`,
|
|
248
|
+
});
|
|
249
|
+
}
|
|
250
|
+
else {
|
|
251
|
+
pinnedWorkflows.set(pin.repository, index);
|
|
252
|
+
}
|
|
253
|
+
}
|
|
231
254
|
const platformServices = new Map();
|
|
232
255
|
for (const [index, binding] of value.platformServiceBindings.entries()) {
|
|
233
256
|
const incumbent = platformServices.get(binding.platformService);
|
|
@@ -252,4 +275,17 @@ function parseRuntimeImageSourceIndex(raw) {
|
|
|
252
275
|
}
|
|
253
276
|
return result.data;
|
|
254
277
|
}
|
|
278
|
+
var ProducerWorkflowPinRefusal;
|
|
279
|
+
(function (ProducerWorkflowPinRefusal) {
|
|
280
|
+
ProducerWorkflowPinRefusal["Unpinned"] = "producer_workflow_unpinned";
|
|
281
|
+
ProducerWorkflowPinRefusal["Mismatch"] = "producer_workflow_pin_mismatch";
|
|
282
|
+
})(ProducerWorkflowPinRefusal || (exports.ProducerWorkflowPinRefusal = ProducerWorkflowPinRefusal = {}));
|
|
283
|
+
function producerWorkflowPinRefusal(index, producer) {
|
|
284
|
+
const pin = index.producerWorkflowPins.find((candidate) => candidate.repository === producer.repository);
|
|
285
|
+
if (pin === undefined)
|
|
286
|
+
return ProducerWorkflowPinRefusal.Unpinned;
|
|
287
|
+
return pin.workflowCommit === producer.workflowCommit
|
|
288
|
+
? undefined
|
|
289
|
+
: ProducerWorkflowPinRefusal.Mismatch;
|
|
290
|
+
}
|
|
255
291
|
//# sourceMappingURL=runtime-image-source-index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runtime-image-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"runtime-image-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/runtime-image-source-index.ts"],"names":[],"mappings":";;;AA6YA,oEAYC;AAmBD,gEAWC;AAvbD,6BAAwB;AACxB,6CAAuD;AACvD,uEAAmE;AACnE,2EAGqC;AAErC,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACtD,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;IAChC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;IACpB,CAAC,KAAK;SACH,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACL,sEAAsE,CACvE,CAAC;AACJ,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC3D,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,MAAM,KAAK,EAAE;YACpB,MAAM,CAAC,IAAI,KAAK,EAAE;YAClB,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,qDAAqD,CAAC,CAAC;AAE/C,QAAA,oCAAoC,GAAG,OAAC;KAClD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;IAC3C,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,4BAA4B;IAC3C,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,2BAA2B;IACjC,kBAAkB,EAAE,2BAA2B;IAC/C,YAAY,EAAE,eAAe;IAC7B,kBAAkB,EAAE,yDAA6B;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAeC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IAEN,YAAY,EAAE,2BAA2B;IAMzC,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAEjD,UAAU,EAAE,2BAA2B;IAEvC,UAAU,EAAE,2BAA2B;IAEvC,eAAe,EAAE,2BAA2B;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAgBC,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IAEN,IAAI,EAAE,2BAA2B;IAEjC,IAAI,EAAE,2BAA2B;IAEjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IAEN,UAAU,EAAE,gDAAsB;IAClC,cAAc,EAAE,eAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,yDAA6B;IAChD,oBAAoB,EAAE,OAAC;SACpB,KAAK,CAAC,4CAAoC,CAAC;SAC3C,QAAQ,EAAE;IACb,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACnE,2BAA2B,EAAE,OAAC;SAC3B,KAAK,CAAC,uCAA+B,CAAC;SACtC,QAAQ,EAAE;IA0Cb,cAAc,EAAE,OAAC;SACd,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,2BAA2B;QACjC,aAAa,EAAE,4BAA4B;QAK3C,YAAY,EAAE,eAAe;QAM7B,oBAAoB,EAAE,eAAe;KACtC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IAMb,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC,QAAQ,EAAE;IACnE,uBAAuB,EAAE,OAAC;SACvB,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,eAAe,EAAE,qBAAqB;QACtC,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oCAAuB,CAAC;QAClD,SAAS,EAAE,qBAAqB;KACjC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACvC,OAAO,EAAE,6BAA6B,SAAS,WAAW,UAAU,CAAC,IAAI,GAAG;aAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC3C,OAAO,EAAE,mCAAmC,gBAAgB,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,UAAU,CAAC;gBACjD,OAAO,EAAE,+BAA+B,cAAc,eAAe,OAAO,CAAC,QAAQ,GAAG;aACzF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5C,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAClD,UAAU,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAChD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,CAAC;gBACrD,OAAO,EACL,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG;YACV,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,eAAe,IAAI,EAAE;YAC3B,KAAK,CAAC,eAAe;SACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;gBACrC,OAAO,EACL,+EAA+E;aAClF,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAG5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBACxD,OAAO,EAAE,mCAAmC,SAAS,kBAAkB,KAAK,CAAC,eAAe,GAAG;aAChG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC;gBACnD,OAAO,EACL,wGAAwG;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,CAAC;oBACrC,OAAO,EAAE,0BAA0B,IAAI,oCAAoC;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD,IAAI,oBAAwC,CAAC;IAC7C,KAAK,MAAM,CACT,KAAK,EACL,SAAS,EACV,IAAI,KAAK,CAAC,2BAA2B,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,oBAAoB,KAAK,SAAS,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACrE,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,CAAC;gBAC5C,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;QACD,oBAAoB,GAAG,GAAG,CAAC;QAC3B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0CAA0C,SAAS,GAAG;aAChE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,MAAM,CAAC;gBACpD,OAAO,EAAE,0BAA0B,SAAS,CAAC,IAAI,oCAAoC;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,YAAY,CAAC;gBACnD,OAAO,EAAE,mCAAmC,SAAS,iBAAiB,GAAG,CAAC,UAAU,GAAG;aACxF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,CAAC;gBAC3D,OAAO,EAAE,sCAAsC,SAAS,sBAAsB,OAAO,CAAC,eAAe,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAML,SAAgB,4BAA4B,CAC1C,GAAY;IAEZ,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAGD,IAAY,0BAKX;AALD,WAAY,0BAA0B;IAEpC,qEAAuC,CAAA;IAEvC,yEAA2C,CAAA;AAC7C,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAWD,SAAgB,0BAA0B,CACxC,KAA8B,EAC9B,QAA0E;IAE1E,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC5D,CAAC;IACF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,0BAA0B,CAAC,QAAQ,CAAC;IAClE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC;AAC1C,CAAC"}
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import { type AuthorizationLockReadView } from "./authorization-lock";
|
|
2
|
+
import { type ImageLock } from "./image-lock";
|
|
3
|
+
import type { VerifiedEditionResolution, VerifiedUnsplitEditionResolution } from "./verified-resolved-deployment";
|
|
4
|
+
export declare enum ImagesLockRefusalCode {
|
|
5
|
+
BytesMissing = "images-lock-bytes-missing",
|
|
6
|
+
DigestMismatch = "images-lock-digest-mismatch",
|
|
7
|
+
Unparseable = "images-lock-unparseable",
|
|
8
|
+
DistributionMismatch = "images-lock-distribution-mismatch"
|
|
9
|
+
}
|
|
10
|
+
export declare enum AuthorizationLockRefusalCode {
|
|
11
|
+
BytesMissing = "authorization-lock-bytes-missing",
|
|
12
|
+
DigestMismatch = "authorization-lock-digest-mismatch",
|
|
13
|
+
Unparseable = "authorization-lock-unparseable",
|
|
14
|
+
DistributionMismatch = "authorization-lock-distribution-mismatch"
|
|
15
|
+
}
|
|
16
|
+
export interface ImagesLockRefusal {
|
|
17
|
+
readonly code: ImagesLockRefusalCode;
|
|
18
|
+
readonly message: string;
|
|
19
|
+
}
|
|
20
|
+
export interface AuthorizationLockRefusal {
|
|
21
|
+
readonly code: AuthorizationLockRefusalCode;
|
|
22
|
+
readonly message: string;
|
|
23
|
+
}
|
|
24
|
+
export type ImagesLockVerification = {
|
|
25
|
+
readonly ok: true;
|
|
26
|
+
readonly imageLock: ImageLock;
|
|
27
|
+
} | {
|
|
28
|
+
readonly ok: false;
|
|
29
|
+
readonly refusals: readonly ImagesLockRefusal[];
|
|
30
|
+
};
|
|
31
|
+
export type AuthorizationLockVerification = {
|
|
32
|
+
readonly ok: true;
|
|
33
|
+
readonly authorizationLock: AuthorizationLockReadView;
|
|
34
|
+
} | {
|
|
35
|
+
readonly ok: false;
|
|
36
|
+
readonly refusals: readonly AuthorizationLockRefusal[];
|
|
37
|
+
};
|
|
38
|
+
export type VerifiedResolution = VerifiedEditionResolution | VerifiedUnsplitEditionResolution;
|
|
39
|
+
export declare function verifyImagesLock(verified: VerifiedResolution, imagesLockBytes: Uint8Array): Promise<ImagesLockVerification>;
|
|
40
|
+
export declare function verifyAuthorizationLock(verified: VerifiedResolution, authorizationLockBytes: Uint8Array): Promise<AuthorizationLockVerification>;
|
|
41
|
+
//# sourceMappingURL=verify-delivered-locks.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verify-delivered-locks.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-delivered-locks.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAsBxC,oBAAY,qBAAqB;IAE/B,YAAY,8BAA8B;IAE1C,cAAc,gCAAgC;IAE9C,WAAW,4BAA4B;IAEvC,oBAAoB,sCAAsC;CAC3D;AAGD,oBAAY,4BAA4B;IAEtC,YAAY,qCAAqC;IAEjD,cAAc,uCAAuC;IAErD,WAAW,mCAAmC;IAE9C,oBAAoB,6CAA6C;CAClE;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAE5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,yBAAyB,CAAA;CAAE,GAC5E;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACxD,CAAC;AAGN,MAAM,MAAM,kBAAkB,GAC1B,yBAAyB,GACzB,gCAAgC,CAAC;AAgBrC,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,sBAAsB,CAAC,CAmCjC;AAQD,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,kBAAkB,EAC5B,sBAAsB,EAAE,UAAU,GACjC,OAAO,CAAC,6BAA6B,CAAC,CAmCxC"}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.AuthorizationLockRefusalCode = exports.ImagesLockRefusalCode = void 0;
|
|
4
|
+
exports.verifyImagesLock = verifyImagesLock;
|
|
5
|
+
exports.verifyAuthorizationLock = verifyAuthorizationLock;
|
|
6
|
+
const content_address_1 = require("../../content-address");
|
|
7
|
+
const authorization_lock_1 = require("./authorization-lock");
|
|
8
|
+
const image_lock_1 = require("./image-lock");
|
|
9
|
+
var ImagesLockRefusalCode;
|
|
10
|
+
(function (ImagesLockRefusalCode) {
|
|
11
|
+
ImagesLockRefusalCode["BytesMissing"] = "images-lock-bytes-missing";
|
|
12
|
+
ImagesLockRefusalCode["DigestMismatch"] = "images-lock-digest-mismatch";
|
|
13
|
+
ImagesLockRefusalCode["Unparseable"] = "images-lock-unparseable";
|
|
14
|
+
ImagesLockRefusalCode["DistributionMismatch"] = "images-lock-distribution-mismatch";
|
|
15
|
+
})(ImagesLockRefusalCode || (exports.ImagesLockRefusalCode = ImagesLockRefusalCode = {}));
|
|
16
|
+
var AuthorizationLockRefusalCode;
|
|
17
|
+
(function (AuthorizationLockRefusalCode) {
|
|
18
|
+
AuthorizationLockRefusalCode["BytesMissing"] = "authorization-lock-bytes-missing";
|
|
19
|
+
AuthorizationLockRefusalCode["DigestMismatch"] = "authorization-lock-digest-mismatch";
|
|
20
|
+
AuthorizationLockRefusalCode["Unparseable"] = "authorization-lock-unparseable";
|
|
21
|
+
AuthorizationLockRefusalCode["DistributionMismatch"] = "authorization-lock-distribution-mismatch";
|
|
22
|
+
})(AuthorizationLockRefusalCode || (exports.AuthorizationLockRefusalCode = AuthorizationLockRefusalCode = {}));
|
|
23
|
+
function hasBytes(bytes) {
|
|
24
|
+
return bytes instanceof Uint8Array && bytes.length > 0;
|
|
25
|
+
}
|
|
26
|
+
function decodeJson(bytes) {
|
|
27
|
+
return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
|
|
28
|
+
}
|
|
29
|
+
async function verifyImagesLock(verified, imagesLockBytes) {
|
|
30
|
+
const refuse = (code, message) => ({
|
|
31
|
+
ok: false,
|
|
32
|
+
refusals: [{ code, message }],
|
|
33
|
+
});
|
|
34
|
+
if (!hasBytes(imagesLockBytes)) {
|
|
35
|
+
return refuse(ImagesLockRefusalCode.BytesMissing, "the images lock bytes are missing or empty; they are the file's exact bytes.");
|
|
36
|
+
}
|
|
37
|
+
const expected = verified.resolved.edition.imagesLockSha256;
|
|
38
|
+
const digest = await (0, content_address_1.sha256Hex)(imagesLockBytes);
|
|
39
|
+
if (digest !== expected) {
|
|
40
|
+
return refuse(ImagesLockRefusalCode.DigestMismatch, `the images lock bytes hash to ${digest}, but the resolved deployment pins ${expected}; it is not this edition's images lock.`);
|
|
41
|
+
}
|
|
42
|
+
let imageLock;
|
|
43
|
+
try {
|
|
44
|
+
imageLock = (0, image_lock_1.parseImageLock)(decodeJson(imagesLockBytes));
|
|
45
|
+
}
|
|
46
|
+
catch (error) {
|
|
47
|
+
return refuse(ImagesLockRefusalCode.Unparseable, `the images lock bytes are not a readable images lock: ${error.message}`);
|
|
48
|
+
}
|
|
49
|
+
if (imageLock.distributionId !== verified.lock.distributionId) {
|
|
50
|
+
return refuse(ImagesLockRefusalCode.DistributionMismatch, `the images lock is for distribution "${imageLock.distributionId}", but the verified edition lock is for "${verified.lock.distributionId}".`);
|
|
51
|
+
}
|
|
52
|
+
return { ok: true, imageLock };
|
|
53
|
+
}
|
|
54
|
+
async function verifyAuthorizationLock(verified, authorizationLockBytes) {
|
|
55
|
+
const refuse = (code, message) => ({ ok: false, refusals: [{ code, message }] });
|
|
56
|
+
if (!hasBytes(authorizationLockBytes)) {
|
|
57
|
+
return refuse(AuthorizationLockRefusalCode.BytesMissing, "the authorization lock bytes are missing or empty; they are the file's exact bytes.");
|
|
58
|
+
}
|
|
59
|
+
const expected = verified.resolved.edition.authorizationLockSha256;
|
|
60
|
+
const digest = await (0, content_address_1.sha256Hex)(authorizationLockBytes);
|
|
61
|
+
if (digest !== expected) {
|
|
62
|
+
return refuse(AuthorizationLockRefusalCode.DigestMismatch, `the authorization lock bytes hash to ${digest}, but the resolved deployment pins ${expected}; it is not this edition's authorization lock.`);
|
|
63
|
+
}
|
|
64
|
+
let authorizationLock;
|
|
65
|
+
try {
|
|
66
|
+
authorizationLock = (0, authorization_lock_1.parseAuthorizationLockReadView)(decodeJson(authorizationLockBytes));
|
|
67
|
+
}
|
|
68
|
+
catch (error) {
|
|
69
|
+
return refuse(AuthorizationLockRefusalCode.Unparseable, `the authorization lock bytes are not a readable authorization lock: ${error.message}`);
|
|
70
|
+
}
|
|
71
|
+
if (authorizationLock.distributionId !== verified.lock.distributionId) {
|
|
72
|
+
return refuse(AuthorizationLockRefusalCode.DistributionMismatch, `the authorization lock is for distribution "${authorizationLock.distributionId}", but the verified edition lock is for "${verified.lock.distributionId}".`);
|
|
73
|
+
}
|
|
74
|
+
return { ok: true, authorizationLock };
|
|
75
|
+
}
|
|
76
|
+
//# sourceMappingURL=verify-delivered-locks.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verify-delivered-locks.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-delivered-locks.ts"],"names":[],"mappings":";;;AAgGA,4CAsCC;AAQD,0DAsCC;AApLD,2DAAkD;AAClD,6DAG8B;AAC9B,6CAA8D;AA0B9D,IAAY,qBASX;AATD,WAAY,qBAAqB;IAE/B,mEAA0C,CAAA;IAE1C,uEAA8C,CAAA;IAE9C,gEAAuC,CAAA;IAEvC,mFAA0D,CAAA;AAC5D,CAAC,EATW,qBAAqB,qCAArB,qBAAqB,QAShC;AAGD,IAAY,4BASX;AATD,WAAY,4BAA4B;IAEtC,iFAAiD,CAAA;IAEjD,qFAAqD,CAAA;IAErD,8EAA8C,CAAA;IAE9C,iGAAiE,CAAA;AACnE,CAAC,EATW,4BAA4B,4CAA5B,4BAA4B,QASvC;AA8BD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAQM,KAAK,UAAU,gBAAgB,CACpC,QAA4B,EAC5B,eAA2B;IAE3B,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,OAAe,EAA0B,EAAE,CAAC,CAAC;QACxF,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CACX,qBAAqB,CAAC,YAAY,EAClC,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,eAAe,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,qBAAqB,CAAC,cAAc,EACpC,iCAAiC,MAAM,sCAAsC,QAAQ,yCAAyC,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,2BAAc,EAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,qBAAqB,CAAC,WAAW,EACjC,yDAA0D,KAAe,CAAC,OAAO,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9D,OAAO,MAAM,CACX,qBAAqB,CAAC,oBAAoB,EAC1C,wCAAwC,SAAS,CAAC,cAAc,4CAA4C,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAC7I,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAQM,KAAK,UAAU,uBAAuB,CAC3C,QAA4B,EAC5B,sBAAkC;IAElC,MAAM,MAAM,GAAG,CACb,IAAkC,EAClC,OAAe,EACgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CACX,4BAA4B,CAAC,YAAY,EACzC,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,sBAAsB,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,4BAA4B,CAAC,cAAc,EAC3C,wCAAwC,MAAM,sCAAsC,QAAQ,gDAAgD,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,iBAA4C,CAAC;IACjD,IAAI,CAAC;QACH,iBAAiB,GAAG,IAAA,mDAA8B,EAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,4BAA4B,CAAC,WAAW,EACxC,uEAAwE,KAAe,CAAC,OAAO,EAAE,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,cAAc,KAAK,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtE,OAAO,MAAM,CACX,4BAA4B,CAAC,oBAAoB,EACjD,+CAA+C,iBAAiB,CAAC,cAAc,4CAA4C,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAC5J,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC"}
|
|
@@ -12,6 +12,7 @@ export declare enum ResolvedDeploymentRefusalCode {
|
|
|
12
12
|
EngineNotAccepted = "engine-not-accepted",
|
|
13
13
|
LockDigestMismatch = "lock-digest-mismatch",
|
|
14
14
|
MalformedLock = "malformed-lock",
|
|
15
|
+
EditionIdMismatch = "edition-id-mismatch",
|
|
15
16
|
BiomeMissing = "biome-missing",
|
|
16
17
|
BiomeNotInLock = "biome-not-in-lock",
|
|
17
18
|
TrustCeilingMismatch = "trust-ceiling-mismatch",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;
|
|
1
|
+
{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAKhC,iBAAiB,wBAAwB;IAEzC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD,yBAAyB,CAAC;AAE9B,MAAM,MAAM,qCAAqC,GAC7C,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,gCAAgC,CAAC,GAC1D,yBAAyB,CAAC;AA6C9B,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3C,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,qCAAqC,CAAC,CAAC;AA2IlD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACtC,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,gCAAgC,CAAC,CAAC"}
|
|
@@ -19,6 +19,7 @@ var ResolvedDeploymentRefusalCode;
|
|
|
19
19
|
ResolvedDeploymentRefusalCode["EngineNotAccepted"] = "engine-not-accepted";
|
|
20
20
|
ResolvedDeploymentRefusalCode["LockDigestMismatch"] = "lock-digest-mismatch";
|
|
21
21
|
ResolvedDeploymentRefusalCode["MalformedLock"] = "malformed-lock";
|
|
22
|
+
ResolvedDeploymentRefusalCode["EditionIdMismatch"] = "edition-id-mismatch";
|
|
22
23
|
ResolvedDeploymentRefusalCode["BiomeMissing"] = "biome-missing";
|
|
23
24
|
ResolvedDeploymentRefusalCode["BiomeNotInLock"] = "biome-not-in-lock";
|
|
24
25
|
ResolvedDeploymentRefusalCode["TrustCeilingMismatch"] = "trust-ceiling-mismatch";
|
|
@@ -89,6 +90,13 @@ async function verifyResolvedDeployment(resolved, lockBytes, options) {
|
|
|
89
90
|
message: `the lock bytes are not a readable distribution lock: ${error.message}`,
|
|
90
91
|
});
|
|
91
92
|
}
|
|
93
|
+
if (artifact.edition.id !== lock.distributionId) {
|
|
94
|
+
return refuse({
|
|
95
|
+
code: ResolvedDeploymentRefusalCode.EditionIdMismatch,
|
|
96
|
+
message: `the resolved deployment names edition "${artifact.edition.id}", but the lock's ` +
|
|
97
|
+
`distributionId is "${lock.distributionId}"; an edition's id is its lock's distributionId.`,
|
|
98
|
+
});
|
|
99
|
+
}
|
|
92
100
|
const refusals = [];
|
|
93
101
|
const lockBiomes = new Map(lock.biomes.map((biome) => [biome.id, biome]));
|
|
94
102
|
const placed = new Set(artifact.biomes.map((biome) => biome.id));
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA4KA,4DAuIC;AAeD,4DAwBC;AA1VD,2DAAkD;AAClD,iDAG0B;AAC1B,6DAA4D;AAC5D,2DAG6B;AA4C7B,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAUD,IAAY,6BAwBX;AAxBD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,0EAAyC,CAAA;IAEzC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAKhC,0EAAyC,CAAA;IAEzC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;AACxC,CAAC,EAxBW,6BAA6B,6CAA7B,6BAA6B,QAwBxC;AA+BD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACtE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,+CAA+C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACrE,IACE,MAAM,KAAK,4BAA4B,CAAC,MAAM;QAC9C,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6CAA6C,4BAA4B,CAAC,MAAM,OAAO;YACrF,IAAI,4BAA4B,CAAC,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAA,wCAA2B,EAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,2FAA2F;gBAC3F,oDAAoD;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,oGAAoG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB;gBACjF,sBAAsB,IAAI,CAAC,cAAc,kDAAkD;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAKxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAA6C;YACvD,IAAI;SACuD,CAAC;IAChE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAeM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAGzC,MAAM,YAAY,GAAG,MACnB,wBAOD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { DistributionLock } from '../lib/distribution-lock';
|
|
2
|
+
import { DistributionImagesPredicateRefusal, ImageDeliveryEntitlementRefusal, type DistributionImagesPredicate, type ImageDeliveryEntitlementPredicate } from '../lib/image-producer-evidence';
|
|
3
|
+
import { type BiomeSourceManifestHash } from '../lib/kernel-contract-authority';
|
|
4
|
+
export declare function computeBiomeSourceManifestHashSync(rawManifest: unknown): BiomeSourceManifestHash;
|
|
5
|
+
export declare function distributionLockDigest(lock: DistributionLock): string;
|
|
6
|
+
export declare function distributionImagesPredicateLockRefusal(predicate: DistributionImagesPredicate, lock: DistributionLock): DistributionImagesPredicateRefusal | undefined;
|
|
7
|
+
export declare function imageDeliveryEntitlementRefusal(predicate: ImageDeliveryEntitlementPredicate, lock: DistributionLock): ImageDeliveryEntitlementRefusal | undefined;
|
|
8
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/distribution/server/index.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,kCAAkC,CAAC;AAO1C,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,OAAO,GACnB,uBAAuB,CAMzB;AAkBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAGrE;AAQD,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,2BAA2B,EACtC,IAAI,EAAE,gBAAgB,GACrB,kCAAkC,GAAG,SAAS,CAIhD;AAgBD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,iCAAiC,EAC5C,IAAI,EAAE,gBAAgB,GACrB,+BAA+B,GAAG,SAAS,CAQ7C"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.computeBiomeSourceManifestHashSync = computeBiomeSourceManifestHashSync;
|
|
4
|
+
exports.distributionLockDigest = distributionLockDigest;
|
|
5
|
+
exports.distributionImagesPredicateLockRefusal = distributionImagesPredicateLockRefusal;
|
|
6
|
+
exports.imageDeliveryEntitlementRefusal = imageDeliveryEntitlementRefusal;
|
|
7
|
+
const node_crypto_1 = require("node:crypto");
|
|
8
|
+
const server_1 = require("../../content-address/server");
|
|
9
|
+
const image_producer_evidence_1 = require("../lib/image-producer-evidence");
|
|
10
|
+
const kernel_contract_authority_1 = require("../lib/kernel-contract-authority");
|
|
11
|
+
function computeBiomeSourceManifestHashSync(rawManifest) {
|
|
12
|
+
return (0, kernel_contract_authority_1.parseBiomeSourceManifestHash)((0, node_crypto_1.createHash)('sha256')
|
|
13
|
+
.update((0, kernel_contract_authority_1.biomeSourceManifestHashPreimage)(rawManifest))
|
|
14
|
+
.digest('hex'));
|
|
15
|
+
}
|
|
16
|
+
function distributionLockDigest(lock) {
|
|
17
|
+
const { resolvedAt: _resolvedAt, ...rest } = lock;
|
|
18
|
+
return (0, server_1.canonicalJsonSha256)(rest);
|
|
19
|
+
}
|
|
20
|
+
function distributionImagesPredicateLockRefusal(predicate, lock) {
|
|
21
|
+
return predicate.lockDigest === distributionLockDigest(lock)
|
|
22
|
+
? undefined
|
|
23
|
+
: image_producer_evidence_1.DistributionImagesPredicateRefusal.LockDigestMismatch;
|
|
24
|
+
}
|
|
25
|
+
function imageDeliveryEntitlementRefusal(predicate, lock) {
|
|
26
|
+
if (predicate.lockDigest !== distributionLockDigest(lock)) {
|
|
27
|
+
return image_producer_evidence_1.ImageDeliveryEntitlementRefusal.LockDigestMismatch;
|
|
28
|
+
}
|
|
29
|
+
const lockCatalogue = lock.catalogueDigest ?? null;
|
|
30
|
+
return predicate.catalogueDigest === lockCatalogue
|
|
31
|
+
? undefined
|
|
32
|
+
: image_producer_evidence_1.ImageDeliveryEntitlementRefusal.CatalogueDigestMismatch;
|
|
33
|
+
}
|
|
34
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/distribution/server/index.ts"],"names":[],"mappings":";;AAiCA,gFAQC;AAkBD,wDAGC;AAQD,wFAOC;AAgBD,0EAWC;AA5FD,6CAAyC;AAEzC,yDAAmE;AAEnE,4EAKwC;AACxC,gFAI0C;AAO1C,SAAgB,kCAAkC,CAChD,WAAoB;IAEpB,OAAO,IAAA,wDAA4B,EACjC,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,IAAA,2DAA+B,EAAC,WAAW,CAAC,CAAC;SACpD,MAAM,CAAC,KAAK,CAAC,CACjB,CAAC;AACJ,CAAC;AAkBD,SAAgB,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,OAAO,IAAA,4BAAmB,EAAC,IAAa,CAAC,CAAC;AAC5C,CAAC;AAQD,SAAgB,sCAAsC,CACpD,SAAsC,EACtC,IAAsB;IAEtB,OAAO,SAAS,CAAC,UAAU,KAAK,sBAAsB,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,4DAAkC,CAAC,kBAAkB,CAAC;AAC5D,CAAC;AAgBD,SAAgB,+BAA+B,CAC7C,SAA4C,EAC5C,IAAsB;IAEtB,IAAI,SAAS,CAAC,UAAU,KAAK,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,yDAA+B,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACnD,OAAO,SAAS,CAAC,eAAe,KAAK,aAAa;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,yDAA+B,CAAC,uBAAuB,CAAC;AAC9D,CAAC"}
|