@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/biome-local-install.js

@@ -0,0 +1,243 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalBiomeInstallExitCode = exports.LocalBiomeInstallError = void 0;
+exports.fetchBiomeLocally = fetchBiomeLocally;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const git_1 = require("./sources/kinds/git");
+const manifest_walk_1 = require("./sources/manifest-walk");
+const schema_1 = require("./sources/schema");
+const LOCAL_BIOME_CACHE_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'cache', 'local-biomes');
+const FETCH_MARKER = '.xema-fetch-ref';
+const DEFAULT_OCI_USERNAME = 'token';
+const DEFAULT_OCI_TAG = 'latest';
+class LocalBiomeInstallError extends Error {
+    exitCode;
+    constructor(message, exitCode = LocalBiomeInstallExitCode.GenericError) {
+        super(message);
+        this.exitCode = exitCode;
+        this.name = 'LocalBiomeInstallError';
+    }
+}
+exports.LocalBiomeInstallError = LocalBiomeInstallError;
+var LocalBiomeInstallExitCode;
+(function (LocalBiomeInstallExitCode) {
+    LocalBiomeInstallExitCode[LocalBiomeInstallExitCode["GenericError"] = 1] = "GenericError";
+    LocalBiomeInstallExitCode[LocalBiomeInstallExitCode["MissingDependency"] = 2] = "MissingDependency";
+    LocalBiomeInstallExitCode[LocalBiomeInstallExitCode["ConfigurationError"] = 3] = "ConfigurationError";
+})(LocalBiomeInstallExitCode || (exports.LocalBiomeInstallExitCode = LocalBiomeInstallExitCode = {}));
+async function fetchBiomeLocally(params) {
+    const { source } = params;
+    switch (source.kind) {
+        case schema_1.SourceKind.Npm:
+            return fetchFromNpm(source, params);
+        case schema_1.SourceKind.Oci:
+            return fetchFromOci(source, params);
+        case schema_1.SourceKind.Git:
+            return fetchFromGit(source, params);
+        case schema_1.SourceKind.Workspace:
+        case schema_1.SourceKind.Distribution:
+            throw new LocalBiomeInstallError(`source "${source.name}" (${source.kind}) is already a launch-time source — ` +
+                'boot it directly with `xema dev`/`xema up`; --local is only for npm/oci/git sources.', LocalBiomeInstallExitCode.ConfigurationError);
+    }
+}
+async function fetchFromNpm(source, params) {
+    const packageName = resolveNpmPackageName(source, params.biomeId, params.packageOverride);
+    const registryUrl = (source.registryUrl ?? 'https://registry.npmjs.org').replace(/\/$/, '');
+    const token = params.credentials.resolve(source.authTokenEnv, source.name);
+    const headers = token !== undefined ? { authorization: `Bearer ${token}` } : {};
+    const packumentUrl = `${registryUrl}/${encodeURIComponent(packageName)}`;
+    const packument = await fetchJson(packumentUrl, headers, `packument for "${packageName}"`);
+    const version = resolveNpmVersion(packument, packageName, params.version);
+    const destDir = cacheDirFor(params.biomeId, version);
+    const identity = `npm:${packageName}@${version}`;
+    if (isCached(destDir, identity)) {
+        params.log?.(`biome "${params.biomeId}" (npm): reusing cached fetch (${identity}).`);
+        return validateFetched(destDir, params.biomeId, version);
+    }
+    const tarballUrl = extractTarballUrl(packument, version);
+    if (tarballUrl === null) {
+        throw new LocalBiomeInstallError(`npm: package "${packageName}@${version}" has no tarball entry in its packument.`);
+    }
+    params.log?.(`biome "${params.biomeId}" (npm): fetching ${identity} from ${registryUrl}`);
+    const tarball = await fetchBytes(tarballUrl, headers, `tarball for "${packageName}@${version}"`);
+    extractNpmTarball(tarball, destDir);
+    writeMarker(destDir, identity);
+    return validateFetched(destDir, params.biomeId, version);
+}
+function resolveNpmPackageName(source, biomeId, override) {
+    if (override !== undefined && override.length > 0) {
+        return override;
+    }
+    return source.scope !== undefined ? `${source.scope}/${biomeId}` : biomeId;
+}
+function resolveNpmVersion(packument, packageName, pinned) {
+    if (pinned !== undefined && pinned.length > 0) {
+        return pinned;
+    }
+    const distTags = packument !== null && typeof packument === 'object'
+        ? packument['dist-tags']
+        : undefined;
+    const latest = distTags?.['latest'];
+    if (typeof latest !== 'string' || latest.length === 0) {
+        throw new LocalBiomeInstallError(`npm: package "${packageName}" has no dist-tags.latest — pin a version explicitly.`);
+    }
+    return latest;
+}
+function extractTarballUrl(packument, version) {
+    if (packument === null || typeof packument !== 'object') {
+        return null;
+    }
+    const versions = packument['versions'];
+    if (versions === null || typeof versions !== 'object') {
+        return null;
+    }
+    const entry = versions[version];
+    if (entry === null || entry === undefined || typeof entry !== 'object') {
+        return null;
+    }
+    const dist = entry['dist'];
+    if (dist === null || dist === undefined || typeof dist !== 'object') {
+        return null;
+    }
+    const tarball = dist['tarball'];
+    return typeof tarball === 'string' ? tarball : null;
+}
+function extractNpmTarball(tarball, destDir) {
+    if ((0, node_fs_1.existsSync)(destDir)) {
+        (0, node_fs_1.rmSync)(destDir, { recursive: true, force: true });
+    }
+    (0, node_fs_1.mkdirSync)(destDir, { recursive: true });
+    const tmp = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-npm-biome-'));
+    const tgzPath = (0, node_path_1.join)(tmp, 'package.tgz');
+    try {
+        (0, node_fs_1.writeFileSync)(tgzPath, tarball);
+        const result = (0, node_child_process_1.spawnSync)('tar', ['-xzf', tgzPath, '-C', destDir, '--strip-components', '1'], {
+            stdio: ['ignore', 'ignore', 'pipe'],
+        });
+        if (result.error !== undefined) {
+            const code = result.error.code;
+            if (code === 'ENOENT') {
+                throw new LocalBiomeInstallError('"tar" CLI not found on PATH — install it to extract npm biome packages.', LocalBiomeInstallExitCode.MissingDependency);
+            }
+            throw new LocalBiomeInstallError(`npm: tar extraction failed to start: ${result.error.message}`);
+        }
+        if (result.status !== 0) {
+            const stderr = result.stderr instanceof Buffer ? result.stderr.toString('utf8') : '';
+            throw new LocalBiomeInstallError(`npm: tar extraction exited with code ${String(result.status)}: ${stderr.slice(-200)}`);
+        }
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tmp, { recursive: true, force: true });
+    }
+}
+async function fetchFromOci(source, params) {
+    ensureToolInstalled('oras');
+    const tag = params.tag !== undefined && params.tag.length > 0 ? params.tag : DEFAULT_OCI_TAG;
+    const ociRef = `${source.registry.replace(/\/+$/, '')}/${params.biomeId}:${tag}`;
+    const destDir = cacheDirForOci(params.biomeId, tag);
+    const identity = `oci:${ociRef}`;
+    if (isCached(destDir, identity)) {
+        params.log?.(`biome "${params.biomeId}" (oci): reusing cached pull (${identity}).`);
+        return validateFetched(destDir, params.biomeId, tag);
+    }
+    const token = params.credentials.resolve(source.authTokenEnv, source.name);
+    const args = ['pull', '--output', destDir, ociRef];
+    if (token !== undefined) {
+        args.push('--username', DEFAULT_OCI_USERNAME, '--password-stdin');
+    }
+    if ((0, node_fs_1.existsSync)(destDir)) {
+        (0, node_fs_1.rmSync)(destDir, { recursive: true, force: true });
+    }
+    (0, node_fs_1.mkdirSync)(destDir, { recursive: true });
+    params.log?.(`biome "${params.biomeId}" (oci): pulling ${ociRef}`);
+    const result = (0, node_child_process_1.spawnSync)('oras', args, {
+        stdio: [token !== undefined ? 'pipe' : 'ignore', 'ignore', 'pipe'],
+        ...(token !== undefined ? { input: `${token}\n` } : {}),
+    });
+    if (result.error !== undefined) {
+        throw new LocalBiomeInstallError(`oci: oras failed to start: ${result.error.message}`);
+    }
+    if (result.status !== 0) {
+        const stderr = result.stderr instanceof Buffer ? result.stderr.toString('utf8') : '';
+        throw new LocalBiomeInstallError(`oci: \`oras pull ${ociRef}\` exited with code ${String(result.status)}: ${stderr.slice(-200)}`);
+    }
+    writeMarker(destDir, identity);
+    return validateFetched(destDir, params.biomeId, tag);
+}
+function ensureToolInstalled(tool) {
+    const probe = (0, node_child_process_1.spawnSync)(tool, ['version'], { stdio: 'ignore' });
+    if (probe.error !== undefined || probe.status === null) {
+        throw new LocalBiomeInstallError(`"${tool}" CLI not found on PATH — install it to fetch OCI biome artifacts ` +
+            '(oras: https://oras.land).', LocalBiomeInstallExitCode.MissingDependency);
+    }
+}
+function fetchFromGit(source, params) {
+    const cloneDir = (0, git_1.checkoutGitSource)(source, params.credentials, params.log);
+    return validateFetched(cloneDir, params.biomeId, source.ref ?? 'HEAD');
+}
+function validateFetched(root, biomeId, fallbackVersion) {
+    const { biomes } = (0, manifest_walk_1.walkBiomeManifests)(root);
+    const match = biomes.find((b) => b.id === biomeId);
+    if (match === undefined) {
+        const found = biomes.length > 0 ? biomes.map((b) => b.id).join(', ') : '(none)';
+        throw new LocalBiomeInstallError(`fetched artifact does not contain a biome with id "${biomeId}" — found: ${found}.`);
+    }
+    const biomeDir = match.biomeDir.length > 0 ? (0, node_path_1.join)(root, match.biomeDir) : root;
+    return {
+        dir: biomeDir,
+        manifest: match.manifest,
+        biomeId: match.id,
+        version: match.version.length > 0 ? match.version : fallbackVersion,
+    };
+}
+function cacheDirFor(biomeId, version) {
+    return (0, node_path_1.join)(LOCAL_BIOME_CACHE_DIR, biomeId, sanitizeSegment(version));
+}
+function cacheDirForOci(biomeId, tag) {
+    return (0, node_path_1.join)(LOCAL_BIOME_CACHE_DIR, biomeId, `oci-${sanitizeSegment(tag)}`);
+}
+function sanitizeSegment(value) {
+    return value.replace(/[^a-zA-Z0-9._-]/g, '_');
+}
+function isCached(destDir, identity) {
+    const marker = (0, node_path_1.join)(destDir, FETCH_MARKER);
+    if (!(0, node_fs_1.existsSync)(marker)) {
+        return false;
+    }
+    return (0, node_fs_1.readFileSync)(marker, 'utf8').trim() === identity;
+}
+function writeMarker(destDir, identity) {
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(destDir, FETCH_MARKER), identity, 'utf8');
+}
+async function fetchJson(url, headers, what) {
+    let res;
+    try {
+        res = await fetch(url, { headers });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new LocalBiomeInstallError(`could not reach ${url} (${what}): ${detail}`);
+    }
+    if (!res.ok) {
+        throw new LocalBiomeInstallError(`GET ${url} (${what}) returned HTTP ${String(res.status)}.`);
+    }
+    return res.json();
+}
+async function fetchBytes(url, headers, what) {
+    let res;
+    try {
+        res = await fetch(url, { headers });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new LocalBiomeInstallError(`could not reach ${url} (${what}): ${detail}`);
+    }
+    if (!res.ok) {
+        throw new LocalBiomeInstallError(`GET ${url} (${what}) returned HTTP ${String(res.status)}.`);
+    }
+    return Buffer.from(await res.arrayBuffer());
+}
+//# sourceMappingURL=biome-local-install.js.map

package/dist/runtime/biome-local-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-local-install.js","sourceRoot":"","sources":["../../src/runtime/biome-local-install.ts"],"names":[],"mappings":";;;AAiIA,8CAiBC;AAlJD,2DAA+C;AAC/C,qCAAkG;AAClG,qCAA0C;AAC1C,yCAAiC;AAEjC,6CAAwD;AACxD,2DAAmF;AACnF,6CAM0B;AAyC1B,MAAM,qBAAqB,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAEhF,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAOjC,MAAa,sBAAuB,SAAQ,KAAK;IAGpC;IAFX,YACE,OAAe,EACN,WAAsC,yBAAyB,CAAC,YAAY;QAErF,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,aAAQ,GAAR,QAAQ,CAAoE;QAGrF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AARD,wDAQC;AAUD,IAAY,yBAIX;AAJD,WAAY,yBAAyB;IACnC,yFAAgB,CAAA;IAChB,mGAAqB,CAAA;IACrB,qGAAsB,CAAA;AACxB,CAAC,EAJW,yBAAyB,yCAAzB,yBAAyB,QAIpC;AAwCM,KAAK,UAAU,iBAAiB,CAAC,MAA+B;IACrE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,mBAAU,CAAC,SAAS,CAAC;QAC1B,KAAK,mBAAU,CAAC,YAAY;YAC1B,MAAM,IAAI,sBAAsB,CAC9B,WAAW,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,IAAI,sCAAsC;gBAC3E,sFAAsF,EACxF,yBAAyB,CAAC,kBAAkB,CAC7C,CAAC;IACN,CAAC;AACH,CAAC;AASD,KAAK,UAAU,YAAY,CACzB,MAAiB,EACjB,MAA+B;IAE/B,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,4BAA4B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,MAAM,YAAY,GAAG,GAAG,WAAW,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,kBAAkB,WAAW,GAAG,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,WAAW,IAAI,OAAO,EAAE,CAAC;IAEjD,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,MAAM,CAAC,OAAO,kCAAkC,QAAQ,IAAI,CAAC,CAAC;QACrF,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAC9B,iBAAiB,WAAW,IAAI,OAAO,0CAA0C,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,MAAM,CAAC,OAAO,qBAAqB,QAAQ,SAAS,WAAW,EAAE,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,gBAAgB,WAAW,IAAI,OAAO,GAAG,CAAC,CAAC;IACjG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAGD,SAAS,qBAAqB,CAC5B,MAAiB,EACjB,OAAe,EACf,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAGD,SAAS,iBAAiB,CACxB,SAAkB,EAClB,WAAmB,EACnB,MAA0B;IAE1B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,QAAQ,GACZ,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QACjD,CAAC,CAAG,SAAqC,CAAC,WAAW,CAAyC;QAC9F,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,sBAAsB,CAC9B,iBAAiB,WAAW,uDAAuD,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,SAAS,iBAAiB,CAAC,SAAkB,EAAE,OAAe;IAC5D,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAI,SAAqC,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAI,QAAoC,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAI,KAAiC,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAI,IAAgC,CAAC,SAAS,CAAC,CAAC;IAC7D,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAQD,SAAS,iBAAiB,CAAC,OAAe,EAAE,OAAe;IACzD,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAA,mBAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,IAAA,uBAAa,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC,EAAE;YAC3F,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;YAC1D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,sBAAsB,CAC9B,yEAAyE,EACzE,yBAAyB,CAAC,iBAAiB,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,sBAAsB,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,sBAAsB,CAC9B,wCAAwC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,YAAY,CACzB,MAAiB,EACjB,MAA+B;IAE/B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;IAC7F,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAC;IAEjC,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,MAAM,CAAC,OAAO,iCAAiC,QAAQ,IAAI,CAAC,CAAC;QACpF,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAA,mBAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,MAAM,CAAC,OAAO,oBAAoB,MAAM,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,MAAM,EAAE,IAAI,EAAE;QACrC,KAAK,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;QAClE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,sBAAsB,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,sBAAsB,CAC9B,oBAAoB,MAAM,uBAAuB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAChG,CAAC;IACJ,CAAC;IACD,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAGD,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAA,8BAAS,EAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,sBAAsB,CAC9B,IAAI,IAAI,oEAAoE;YAC1E,4BAA4B,EAC9B,yBAAyB,CAAC,iBAAiB,CAC5C,CAAC;IACJ,CAAC;AACH,CAAC;AASD,SAAS,YAAY,CAAC,MAAiB,EAAE,MAA+B;IACtE,MAAM,QAAQ,GAAG,IAAA,uBAAiB,EAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;AACzE,CAAC;AAYD,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe,EAAE,eAAuB;IAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAgC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAChF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChF,MAAM,IAAI,sBAAsB,CAC9B,sDAAsD,OAAO,cAAc,KAAK,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;KACpE,CAAC;AACJ,CAAC;AAGD,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe;IACnD,OAAO,IAAA,gBAAI,EAAC,qBAAqB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAGD,SAAS,cAAc,CAAC,OAAe,EAAE,GAAW;IAClD,OAAO,IAAA,gBAAI,EAAC,qBAAqB,EAAE,OAAO,EAAE,OAAO,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAGD,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAGD,SAAS,QAAQ,CAAC,OAAe,EAAE,QAAgB;IACjD,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,sBAAY,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAGD,SAAS,WAAW,CAAC,OAAe,EAAE,QAAgB;IACpD,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC/D,CAAC;AAGD,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,OAA+B,EAC/B,IAAY;IAEZ,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,sBAAsB,CAAC,mBAAmB,GAAG,KAAK,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,sBAAsB,CAAC,OAAO,GAAG,KAAK,IAAI,mBAAmB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAGD,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,OAA+B,EAC/B,IAAY;IAEZ,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,sBAAsB,CAAC,mBAAmB,GAAG,KAAK,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,sBAAsB,CAAC,OAAO,GAAG,KAAK,IAAI,mBAAmB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/runtime/biome-provenance.d.ts

@@ -0,0 +1,26 @@
+export { SLSA_PROVENANCE_PREDICATE_TYPE } from '@xemahq/biome-supply-chain';
+export declare const XEMA_BIOME_PUBLISH_BUILD_TYPE = "https://xema.dev/biome-publish/v1";
+export declare enum SlsaBuildRunnerKind {
+    GithubActions = "github-actions",
+    DeclaredCi = "declared-ci",
+    LocalDeveloper = "local-developer"
+}
+export declare const BUILDER_ID_ENV = "XEMA_BIOME_BUILDER_ID";
+export interface ResolvedBuilder {
+    readonly kind: SlsaBuildRunnerKind;
+    readonly id: string;
+}
+export declare function resolveBuilder(env: NodeJS.ProcessEnv): ResolvedBuilder;
+export interface ProvenancePredicateInput {
+    readonly biomeId: string;
+    readonly version: string;
+    readonly tag: string;
+    readonly ociRef: string;
+    readonly biomeDir: string;
+    readonly files: readonly string[];
+    readonly builder: ResolvedBuilder;
+    readonly startedOn: string;
+    readonly finishedOn: string;
+}
+export declare function buildProvenancePredicate(input: ProvenancePredicateInput): Record<string, unknown>;
+//# sourceMappingURL=biome-provenance.d.ts.map

package/dist/runtime/biome-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-provenance.d.ts","sourceRoot":"","sources":["../../src/runtime/biome-provenance.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E,eAAO,MAAM,6BAA6B,sCAAsC,CAAC;AAMjF,oBAAY,mBAAmB;IAE7B,aAAa,mBAAmB;IAEhC,UAAU,gBAAgB;IAE1B,cAAc,oBAAoB;CACnC;AAGD,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAQD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,eAAe,CAkBtE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAYD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,wBAAwB,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4BzB"}

package/dist/runtime/biome-provenance.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILDER_ID_ENV = exports.SlsaBuildRunnerKind = exports.XEMA_BIOME_PUBLISH_BUILD_TYPE = exports.SLSA_PROVENANCE_PREDICATE_TYPE = void 0;
+exports.resolveBuilder = resolveBuilder;
+exports.buildProvenancePredicate = buildProvenancePredicate;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+var biome_supply_chain_1 = require("@xemahq/biome-supply-chain");
+Object.defineProperty(exports, "SLSA_PROVENANCE_PREDICATE_TYPE", { enumerable: true, get: function () { return biome_supply_chain_1.SLSA_PROVENANCE_PREDICATE_TYPE; } });
+exports.XEMA_BIOME_PUBLISH_BUILD_TYPE = 'https://xema.dev/biome-publish/v1';
+var SlsaBuildRunnerKind;
+(function (SlsaBuildRunnerKind) {
+    SlsaBuildRunnerKind["GithubActions"] = "github-actions";
+    SlsaBuildRunnerKind["DeclaredCi"] = "declared-ci";
+    SlsaBuildRunnerKind["LocalDeveloper"] = "local-developer";
+})(SlsaBuildRunnerKind || (exports.SlsaBuildRunnerKind = SlsaBuildRunnerKind = {}));
+exports.BUILDER_ID_ENV = 'XEMA_BIOME_BUILDER_ID';
+function resolveBuilder(env) {
+    const declared = env[exports.BUILDER_ID_ENV];
+    if (declared !== undefined && declared.length > 0) {
+        return { kind: SlsaBuildRunnerKind.DeclaredCi, id: declared };
+    }
+    const workflowRef = env['GITHUB_WORKFLOW_REF'];
+    if (workflowRef !== undefined && workflowRef.length > 0) {
+        return {
+            kind: SlsaBuildRunnerKind.GithubActions,
+            id: `https://github.com/${workflowRef}`,
+        };
+    }
+    const user = env['USER'] ?? env['USERNAME'] ?? 'unknown';
+    const host = env['HOSTNAME'] ?? 'local';
+    return {
+        kind: SlsaBuildRunnerKind.LocalDeveloper,
+        id: `local-developer://${user}@${host}`,
+    };
+}
+function buildProvenancePredicate(input) {
+    return {
+        buildDefinition: {
+            buildType: exports.XEMA_BIOME_PUBLISH_BUILD_TYPE,
+            externalParameters: {
+                biomeId: input.biomeId,
+                version: input.version,
+                tag: input.tag,
+                ociRef: input.ociRef,
+            },
+            internalParameters: {
+                publisher: 'xema biome publish',
+                runnerKind: input.builder.kind,
+            },
+            resolvedDependencies: input.files.map((file) => ({
+                uri: `biome-file:${file}`,
+                digest: { sha256: sha256File((0, node_path_1.join)(input.biomeDir, file)) },
+            })),
+        },
+        runDetails: {
+            builder: { id: input.builder.id },
+            metadata: {
+                invocationId: input.ociRef,
+                startedOn: input.startedOn,
+                finishedOn: input.finishedOn,
+            },
+        },
+    };
+}
+function sha256File(absolutePath) {
+    return (0, node_crypto_1.createHash)('sha256').update((0, node_fs_1.readFileSync)(absolutePath)).digest('hex');
+}
+//# sourceMappingURL=biome-provenance.js.map

package/dist/runtime/biome-provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-provenance.js","sourceRoot":"","sources":["../../src/runtime/biome-provenance.ts"],"names":[],"mappings":";;;AA+DA,wCAkBC;AA0BD,4DA8BC;AAtHD,6CAAyC;AACzC,qCAAuC;AACvC,yCAAiC;AAUjC,iEAA4E;AAAnE,oIAAA,8BAA8B,OAAA;AAG1B,QAAA,6BAA6B,GAAG,mCAAmC,CAAC;AAMjF,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAE7B,uDAAgC,CAAA;IAEhC,iDAA0B,CAAA;IAE1B,yDAAkC,CAAA;AACpC,CAAC,EAPW,mBAAmB,mCAAnB,mBAAmB,QAO9B;AAGY,QAAA,cAAc,GAAG,uBAAuB,CAAC;AAatD,SAAgB,cAAc,CAAC,GAAsB;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAc,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,mBAAmB,CAAC,aAAa;YACvC,EAAE,EAAE,sBAAsB,WAAW,EAAE;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,mBAAmB,CAAC,cAAc;QACxC,EAAE,EAAE,qBAAqB,IAAI,IAAI,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AA0BD,SAAgB,wBAAwB,CACtC,KAA+B;IAE/B,OAAO;QACL,eAAe,EAAE;YACf,SAAS,EAAE,qCAA6B;YACxC,kBAAkB,EAAE;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;YACD,kBAAkB,EAAE;gBAClB,SAAS,EAAE,oBAAoB;gBAC/B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;aAC/B;YACD,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/C,GAAG,EAAE,cAAc,IAAI,EAAE;gBACzB,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,IAAA,gBAAI,EAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE;aAC3D,CAAC,CAAC;SACJ;QACD,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;YACjC,QAAQ,EAAE;gBACR,YAAY,EAAE,KAAK,CAAC,MAAM;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,sBAAY,EAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC"}

package/dist/runtime/biome-publish.d.ts

@@ -0,0 +1,48 @@
+import { type BiomeManifest } from '@xemahq/kernel-contracts/biome';
+export declare const BIOME_ARTIFACT_TYPE = "application/vnd.xema.biome.manifest.v1+json";
+export declare const COSIGN_KEY_ENV = "COSIGN_KEY";
+export interface PublishOptions {
+    readonly path: string;
+    readonly registry?: string;
+    readonly source?: string;
+    readonly tokenEnv?: string;
+    readonly username?: string;
+    readonly tag?: string;
+    readonly configPath?: string;
+    readonly dryRun?: boolean;
+}
+export interface PublishPlan {
+    readonly biomeId: string;
+    readonly version: string;
+    readonly registry: string;
+    readonly tag: string;
+    readonly ociRef: string;
+    readonly files: readonly string[];
+    readonly orasArgs: readonly string[];
+    readonly cosignArgs: readonly string[];
+    readonly cosignAttestArgs: readonly string[];
+    readonly tokenEnv?: string;
+    readonly tokenPresent: boolean;
+    readonly cosignKeyResolved: boolean;
+}
+export declare class BiomePublishConfigError extends Error {
+    constructor(message: string);
+}
+export declare class MissingRuntimeToolError extends Error {
+    readonly tool: string;
+    constructor(tool: string, message: string);
+}
+export declare function publishBiome(options: PublishOptions): PublishPlan;
+export declare function attestArgsWithPredicate(attestArgs: readonly string[], predicatePath: string): string[];
+export declare function loadManifest(biomeDir: string): BiomeManifest;
+export interface OrasArgsInput {
+    readonly ociRef: string;
+    readonly biomeId: string;
+    readonly version: string;
+    readonly files: readonly string[];
+    readonly hasToken: boolean;
+    readonly username: string;
+}
+export declare function buildOrasArgs(input: OrasArgsInput): string[];
+export declare function collectBiomeFiles(root: string): string[];
+//# sourceMappingURL=biome-publish.d.ts.map

package/dist/runtime/biome-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biome-publish.d.ts","sourceRoot":"","sources":["../../src/runtime/biome-publish.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,gCAAgC,CAAC;AA8CxC,eAAO,MAAM,mBAAmB,gDAAgD,CAAC;AAGjF,eAAO,MAAM,cAAc,eAAe,CAAC;AAyC3C,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAMvC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAGD,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAGD,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAKlB;AAOD,wBAAgB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CAqEjE;AA+CD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,aAAa,EAAE,MAAM,GACpB,MAAM,EAAE,CAEV;AASD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAY5D;AAgED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAOD,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,EAAE,CAY5D;AA0CD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAoBxD"}