@xemahq/xema 0.25.1 → 0.27.0

package/dist/runtime/runner/chart-preflight.js

@@ -4,14 +4,14 @@ exports.ChartPreflightFailureKind = void 0;
 exports.runChartPreflight = runChartPreflight;
 exports.assertChartPreflightPassed = assertChartPreflightPassed;
 exports.formatChartPreflight = formatChartPreflight;
+const chart_pull_1 = require("./chart-pull");
 const chart_resolver_1 = require("./chart-resolver");
 var ChartPreflightFailureKind;
 (function (ChartPreflightFailureKind) {
     ChartPreflightFailureKind["EmptyScan"] = "empty-scan";
-    ChartPreflightFailureKind["ChartSetUnclosed"] = "chart-set-unclosed";
     ChartPreflightFailureKind["ChartUnavailable"] = "chart-unavailable";
-    ChartPreflightFailureKind["ChartNotServed"] = "chart-not-served";
-    ChartPreflightFailureKind["ChartTrust"] = "chart-trust";
+    ChartPreflightFailureKind["ChartPullRefused"] = "chart-pull-refused";
+    ChartPreflightFailureKind["LocalChartUnrecorded"] = "local-chart-unrecorded";
 })(ChartPreflightFailureKind || (exports.ChartPreflightFailureKind = ChartPreflightFailureKind = {}));
 async function runChartPreflight(opts) {
     const failures = [];
@@ -19,7 +19,7 @@ async function runChartPreflight(opts) {
         return {
             resolved: [],
             unavailable: [],
-            trust: null,
+            provenance: null,
             failures: [
                 {
                     kind: ChartPreflightFailureKind.EmptyScan,
@@ -31,33 +31,13 @@ async function runChartPreflight(opts) {
             passed: false,
         };
     }
-    const unclosed = await unclosedPublisherIndexes(opts);
-    if (unclosed.length > 0) {
-        return {
-            resolved: [],
-            unavailable: [],
-            trust: null,
-            failures: [
-                {
-                    kind: ChartPreflightFailureKind.ChartSetUnclosed,
-                    message: `The pinned chart set names ${unclosed.join(', ')}, which the registry ` +
-                        'does not serve. An index is published only after its publisher has ' +
-                        'pushed, signed and proved served every chart of its half, so a pin ' +
-                        'the registry cannot resolve means the lock is ahead of the registry ' +
-                        'or names a set that was pruned. Re-resolve it (xema-distributions: ' +
-                        'node resolve-chart-set.mjs).',
-                },
-            ],
-            passed: false,
-        };
-    }
     const resolved = [];
     const unavailable = [];
-    const notServed = [];
+    const refused = [];
     for (const name of opts.charts) {
         let chart;
         try {
-            chart = await opts.resolver.resolve(name);
+            chart = opts.resolver.resolve(name);
         }
         catch (error) {
             unavailable.push({ name, reason: messageOf(error) });
@@ -69,14 +49,19 @@ async function runChartPreflight(opts) {
         }
         if (opts.helm === undefined) {
             throw new Error(`Chart '${name}' resolved to ${chart.ref} at ${chart.version}, but the ` +
-                'pre-flight was built without a helm metadata reader and so cannot ' +
-                'prove the coordinate is served. Supply `helm`.');
+                'pre-flight was built without a helm client and so cannot prove the ' +
+                'pulled bytes match the lock. Supply `helm`.');
         }
         try {
-            await opts.helm.showChart(chart.ref, chart.version);
+            if (opts.archives !== undefined) {
+                await opts.archives.hold(chart, opts.helm);
+            }
+            else {
+                await (0, chart_pull_1.withPulledChart)(chart, opts.helm, () => Promise.resolve());
+            }
         }
-        catch {
-            notServed.push(`${name} (${chart.ref} at ${chart.version})`);
+        catch (error) {
+            refused.push({ name, reason: messageOf(error) });
         }
     }
     if (unavailable.length > 0) {
@@ -90,53 +75,32 @@ async function runChartPreflight(opts) {
                 unavailable.map((entry) => `  - ${entry.name}: ${entry.reason}`).join('\n'),
         });
     }
-    if (notServed.length > 0) {
+    if (refused.length > 0) {
         failures.push({
-            kind: ChartPreflightFailureKind.ChartNotServed,
-            message: `The pinned chart set names ${notServed.join(', ')}, although the registry ` +
-                'does not serve that coordinate. The index vouches for a chart the ' +
-                'registry does not have.',
+            kind: ChartPreflightFailureKind.ChartPullRefused,
+            message: `The lock pins ${refused.map((entry) => entry.name).join(', ')}, but the ` +
+                'registry does not serve them at the sealed digest:\n' +
+                refused.map((entry) => `  - ${entry.name}: ${entry.reason}`).join('\n'),
         });
     }
-    let trust = null;
-    if (unavailable.length === 0 && notServed.length === 0) {
-        trust = await opts.trust.evaluate(resolved);
-        if (!trust.passed) {
+    let provenance = null;
+    if (unavailable.length === 0 && refused.length === 0) {
+        provenance = opts.provenance.evaluate(resolved);
+        if (!provenance.passed) {
             failures.push({
-                kind: ChartPreflightFailureKind.ChartTrust,
-                message: trust.message,
+                kind: ChartPreflightFailureKind.LocalChartUnrecorded,
+                message: provenance.message,
             });
         }
     }
     return {
         resolved,
         unavailable,
-        trust,
+        provenance,
         failures,
         passed: failures.length === 0,
     };
 }
-async function unclosedPublisherIndexes(opts) {
-    const pins = opts.resolver.publisherPins();
-    if (pins.length === 0) {
-        return [];
-    }
-    if (opts.helm === undefined) {
-        throw new Error(`${opts.resolver.lockPath} pins ${String(pins.length)} publisher index(es), ` +
-            'but the pre-flight was built without a helm metadata reader and so cannot ' +
-            'prove the set was closed. Supply `helm`.');
-    }
-    const unclosed = [];
-    for (const pin of pins) {
-        try {
-            await opts.helm.showChart(`${opts.resolver.chartRepo}/${pin.index}`, pin.version);
-        }
-        catch {
-            unclosed.push(`${pin.index}@${pin.version}`);
-        }
-    }
-    return unclosed;
-}
 function assertChartPreflightPassed(report) {
     if (report.passed) {
         return;
@@ -151,11 +115,8 @@ function formatChartPreflight(report) {
     const remote = report.resolved.filter((chart) => chart.kind === chart_resolver_1.ChartSourceKind.Oci);
     lines.push(`charts   : ${String(report.resolved.length)} resolved ` +
         `(${String(local.length)} local, ${String(remote.length)} from the registry)`);
-    if (report.trust !== null && report.trust.message.length > 0) {
-        lines.push(`trust    : ${report.trust.message}`);
-    }
-    else if (report.trust !== null) {
-        lines.push(`trust    : ${report.trust.outcome} (${report.trust.mode})`);
+    if (report.provenance !== null && report.provenance.message.length > 0) {
+        lines.push(`local    : ${report.provenance.message}`);
     }
     return lines.join('\n');
 }

package/dist/runtime/runner/chart-preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"chart-preflight.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-preflight.ts"],"names":[],"mappings":";;;AAmFA,8CA6HC;AAoCD,gEASC;AAGD,oDAcC;AA9QD,qDAI0B;AAsC1B,IAAY,yBAWX;AAXD,WAAY,yBAAyB;IAEnC,qDAAwB,CAAA;IAExB,oEAAuC,CAAA;IAEvC,mEAAsC,CAAA;IAEtC,gEAAmC,CAAA;IAEnC,uDAA0B,CAAA;AAC5B,CAAC,EAXW,yBAAyB,yCAAzB,yBAAyB,QAWpC;AA8BM,KAAK,UAAU,iBAAiB,CACrC,IAA2B;IAE3B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,yBAAyB,CAAC,SAAS;oBACzC,OAAO,EACL,mEAAmE;wBACnE,kEAAkE;wBAClE,gCAAgC;iBACnC;aACF;YACD,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAID,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAMxB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,yBAAyB,CAAC,gBAAgB;oBAChD,OAAO,EACL,8BAA8B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;wBACxE,qEAAqE;wBACrE,qEAAqE;wBACrE,sEAAsE;wBACtE,qEAAqE;wBACrE,8BAA8B;iBACjC;aACF;YACD,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAGD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,iBAAiB,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,OAAO,YAAY;gBACtE,oEAAoE;gBACpE,gDAAgD,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,yBAAyB,CAAC,gBAAgB;YAChD,OAAO,EACL,6BAA6B,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAClF,oEAAoE;gBACpE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,aAAa,IAAI,CAAC,QAAQ,CAAC,SAAS,yBAAyB;gBACvF,QAAQ,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,IAAI;gBAClG,6BAA6B;gBAC7B,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,yBAAyB,CAAC,cAAc;YAC9C,OAAO,EACL,8BAA8B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B;gBAC5E,oEAAoE;gBACpE,yBAAyB;SAC5B,CAAC,CAAC;IACL,CAAC;IAKD,IAAI,KAAK,GAA4B,IAAI,CAAC;IAC1C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB,CAAC,UAAU;gBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW;QACX,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,wBAAwB,CACrC,IAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB;YAC3E,4EAA4E;YAC5E,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,SAAgB,0BAA0B,CAAC,MAA4B;IACrE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,CAAC,4DAA4D,EAAE,EAAE,CAAC;SAC/D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SAChF,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;AACJ,CAAC;AAGD,SAAgB,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CACR,cAAc,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAChF,CAAC;IACF,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"chart-preflight.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-preflight.ts"],"names":[],"mappings":";;;AAmFA,8CAkGC;AAGD,gEASC;AAGD,oDAYC;AAhND,6CAAiG;AACjG,qDAI0B;AAqC1B,IAAY,yBASX;AATD,WAAY,yBAAyB;IAEnC,qDAAwB,CAAA;IAExB,mEAAsC,CAAA;IAEtC,oEAAuC,CAAA;IAEvC,4EAA+C,CAAA;AACjD,CAAC,EATW,yBAAyB,yCAAzB,yBAAyB,QASpC;AAgCM,KAAK,UAAU,iBAAiB,CACrC,IAA2B;IAE3B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,yBAAyB,CAAC,SAAS;oBACzC,OAAO,EACL,mEAAmE;wBACnE,kEAAkE;wBAClE,gCAAgC;iBACnC;aACF;YACD,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAGD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,iBAAiB,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,OAAO,YAAY;gBACtE,qEAAqE;gBACrE,6CAA6C,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAA,4BAAe,EAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,yBAAyB,CAAC,gBAAgB;YAChD,OAAO,EACL,6BAA6B,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAClF,oEAAoE;gBACpE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,aAAa,IAAI,CAAC,QAAQ,CAAC,SAAS,yBAAyB;gBACvF,QAAQ,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,IAAI;gBAClG,6BAA6B;gBAC7B,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,yBAAyB,CAAC,gBAAgB;YAChD,OAAO,EACL,iBAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;gBAC1E,sDAAsD;gBACtD,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1E,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,UAAU,GAAiC,IAAI,CAAC;IACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB,CAAC,oBAAoB;gBACpD,OAAO,EAAE,UAAU,CAAC,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW;QACX,UAAU;QACV,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AAGD,SAAgB,0BAA0B,CAAC,MAA4B;IACrE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,CAAC,4DAA4D,EAAE,EAAE,CAAC;SAC/D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;SAChF,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;AACJ,CAAC;AAGD,SAAgB,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CACR,cAAc,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAChF,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/runtime/runner/chart-pull.d.ts

@@ -0,0 +1,14 @@
+import type { ResolvedChart } from './chart-resolver';
+export interface ChartPullClient {
+    pull(ref: string, version: string, destination: string): Promise<string>;
+}
+export declare function withPulledChart<T>(chart: ResolvedChart, client: ChartPullClient, use: (archivePath: string) => Promise<T>): Promise<T>;
+export declare class VerifiedChartArchives {
+    private readonly held;
+    private readonly onExit;
+    constructor();
+    hold(chart: ResolvedChart, client: ChartPullClient): Promise<void>;
+    use<T>(chart: ResolvedChart, client: ChartPullClient, use: (archivePath: string) => Promise<T>): Promise<T>;
+    disposeAll(): void;
+}
+//# sourceMappingURL=chart-pull.d.ts.map

package/dist/runtime/runner/chart-pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chart-pull.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-pull.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmBtD,MAAM,WAAW,eAAe;IAK9B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAoCD,wBAAsB,eAAe,CAAC,CAAC,EACrC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACvC,OAAO,CAAC,CAAC,CAAC,CAOZ;AAWD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;;IAOlD,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAclE,GAAG,CAAC,CAAC,EACT,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACvC,OAAO,CAAC,CAAC,CAAC;IAeb,UAAU,IAAI,IAAI;CAOnB"}

package/dist/runtime/runner/chart-pull.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifiedChartArchives = void 0;
+exports.withPulledChart = withPulledChart;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const chart_set_lock_1 = require("./chart-set-lock");
+async function pullVerified(chart, client) {
+    const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-chart-'));
+    try {
+        const output = await client.pull(chart.ref, chart.version, dir);
+        const reported = reportedDigest(output, chart);
+        if (reported !== chart.digest) {
+            throw new Error(`Chart '${chart.name}' at ${chart.version} pulled from ${chart.ref} has ` +
+                `digest ${reported}, but the lock pins ${chart.digest}. The registry ` +
+                'serves different bytes than were sealed (a re-pointed tag, or a ' +
+                'mirror out of step). Refusing to install it.');
+        }
+        return { dir, archive: archiveIn(dir, chart) };
+    }
+    catch (error) {
+        (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+        throw error;
+    }
+}
+async function withPulledChart(chart, client, use) {
+    const { dir, archive } = await pullVerified(chart, client);
+    try {
+        return await use(archive);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+    }
+}
+class VerifiedChartArchives {
+    held = new Map();
+    onExit = () => this.disposeAll();
+    constructor() {
+        process.once('exit', this.onExit);
+    }
+    async hold(chart, client) {
+        const { dir } = await pullVerified(chart, client);
+        const key = holdKey(chart);
+        const previous = this.held.get(key);
+        if (previous !== undefined) {
+            (0, node_fs_1.rmSync)(previous, { recursive: true, force: true });
+        }
+        this.held.set(key, dir);
+    }
+    async use(chart, client, use) {
+        const key = holdKey(chart);
+        const dir = this.held.get(key);
+        if (dir === undefined) {
+            return withPulledChart(chart, client, use);
+        }
+        this.held.delete(key);
+        try {
+            return await use(archiveIn(dir, chart));
+        }
+        finally {
+            (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+        }
+    }
+    disposeAll() {
+        for (const dir of this.held.values()) {
+            (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+        }
+        this.held.clear();
+        process.removeListener('exit', this.onExit);
+    }
+}
+exports.VerifiedChartArchives = VerifiedChartArchives;
+function holdKey(chart) {
+    return `${chart.ref}@${chart.version}@${chart.digest}`;
+}
+function reportedDigest(output, chart) {
+    const match = /^Digest:\s*(\S+)\s*$/m.exec(output);
+    const digest = match?.[1];
+    if (digest === undefined || !chart_set_lock_1.CHART_DIGEST_PATTERN.test(digest)) {
+        throw new Error(`helm pull of '${chart.name}' at ${chart.version} reported no usable ` +
+            "'Digest: sha256:…' line, so the pulled bytes cannot be compared with " +
+            'the lock. Refusing to install them.');
+    }
+    return digest;
+}
+function archiveIn(dir, chart) {
+    const archives = (0, node_fs_1.readdirSync)(dir).filter((entry) => entry.endsWith('.tgz'));
+    const [only] = archives;
+    if (archives.length !== 1 || only === undefined) {
+        throw new Error(`helm pull of '${chart.name}' at ${chart.version} left ${String(archives.length)} ` +
+            'archive(s) in its private directory; expected exactly one.');
+    }
+    return (0, node_path_1.join)(dir, only);
+}
+//# sourceMappingURL=chart-pull.js.map

package/dist/runtime/runner/chart-pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chart-pull.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-pull.ts"],"names":[],"mappings":";;;AAmEA,0CAWC;AA9ED,qCAA2D;AAC3D,qCAAiC;AACjC,yCAAiC;AAEjC,qDAAwD;AAkCxD,KAAK,UAAU,YAAY,CACzB,KAAoB,EACpB,MAAuB;IAIvB,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,gBAAgB,KAAK,CAAC,GAAG,OAAO;gBACvE,UAAU,QAAQ,uBAAuB,KAAK,CAAC,MAAM,iBAAiB;gBACtE,kEAAkE;gBAClE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAMM,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,MAAuB,EACvB,GAAwC;IAExC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAWD,MAAa,qBAAqB;IACf,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,MAAM,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAExD;QACE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAGD,KAAK,CAAC,IAAI,CAAC,KAAoB,EAAE,MAAuB;QACtD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAA,gBAAM,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAMD,KAAK,CAAC,GAAG,CACP,KAAoB,EACpB,MAAuB,EACvB,GAAwC;QAExC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAGD,UAAU;QACR,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF;AAjDD,sDAiDC;AAED,SAAS,OAAO,CAAC,KAAoB;IACnC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,KAAoB;IAC1D,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,qCAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,sBAAsB;YACpE,uEAAuE;YACvE,qCAAqC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,KAAoB;IAClD,MAAM,QAAQ,GAAG,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,iBAAiB,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YACjF,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/runtime/runner/chart-resolver.d.ts

@@ -1,4 +1,3 @@
-import { type ChartMetadataReader, type ChartSetPublisherPin, type ChartSetRoster } from './chart-set-lock';
 export declare const CHARTS_DIR_ENV = "XEMA_CHARTS_DIR";
 export declare const CHART_REPO_ENV = "XEMA_CHART_REPO";
 export declare const CHARTS_DIR_NAME = "charts";
@@ -12,14 +11,12 @@ export interface ResolvedChart {
     readonly kind: ChartSourceKind;
     readonly ref: string;
     readonly version: string;
-    readonly extraArgs: readonly string[];
+    readonly digest: string;
 }
 export interface ChartResolverOptions {
     readonly chartsDir?: string;
     readonly chartRepo?: string;
-    readonly versionOverride?: string;
     readonly lockPath?: string;
-    readonly helm?: ChartMetadataReader;
     readonly env?: NodeJS.ProcessEnv;
 }
 export declare class ChartResolver {
@@ -28,17 +25,12 @@ export declare class ChartResolver {
     private readonly declaredLockPath;
     private lockPathMemo;
     private readonly env;
-    private readonly versionOverride;
-    private readonly helm;
-    private roster;
+    private lock;
     constructor(opts?: ChartResolverOptions);
     get remotePlaneEnabled(): boolean;
     get lockPath(): string;
-    resolve(name: string): Promise<ResolvedChart>;
-    private pinnedVersion;
-    publisherPins(): readonly ChartSetPublisherPin[];
-    chartSetRoster(): Promise<ChartSetRoster | null>;
-    private readChartSetRoster;
+    resolve(name: string): ResolvedChart;
+    private sealedLock;
 }
 export declare function defaultChartsDir(env?: NodeJS.ProcessEnv): string;
 export declare function newestLocalArchive(dir: string, name: string): string | null;

package/dist/runtime/runner/chart-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chart-resolver.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AA+B1B,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAGhD,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAGhD,eAAO,MAAM,eAAe,WAAW,CAAC;AAMxC,oBAAY,eAAe;IAEzB,cAAc,oBAAoB;IAElC,YAAY,kBAAkB;IAE9B,GAAG,QAAQ;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAE/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAKrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkC;IAMvD,OAAO,CAAC,MAAM,CAA6C;gBAE/C,IAAI,GAAE,oBAAyB;IAa3C,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAQD,IAAI,QAAQ,IAAI,MAAM,CAGrB;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YA0DrC,aAAa;IAgB3B,aAAa,IAAI,SAAS,oBAAoB,EAAE;IAY1C,cAAc,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;YAKxC,kBAAkB;CAoBjC;AAGD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQ7E;AAgBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6B3E;AAWD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA2BxE"}
+{"version":3,"file":"chart-resolver.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-resolver.ts"],"names":[],"mappings":"AAuCA,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAGhD,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAGhD,eAAO,MAAM,eAAe,WAAW,CAAC;AAMxC,oBAAY,eAAe;IAEzB,cAAc,oBAAoB;IAElC,YAAY,kBAAkB;IAE9B,GAAG,QAAQ;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAK/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAKrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IAExC,OAAO,CAAC,IAAI,CAAsD;gBAEtD,IAAI,GAAE,oBAAyB;IAW3C,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAQD,IAAI,QAAQ,IAAI,MAAM,CAGrB;IAED,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa;IAyCpC,OAAO,CAAC,UAAU;CAInB;AAGD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQ7E;AAgBD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6B3E;AAWD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA2BxE"}

package/dist/runtime/runner/chart-resolver.js

@@ -24,17 +24,13 @@ class ChartResolver {
     declaredLockPath;
     lockPathMemo;
     env;
-    versionOverride;
-    helm;
-    roster;
+    lock;
     constructor(opts = {}) {
         const env = opts.env ?? process.env;
         this.env = env;
         this.chartsDir = opts.chartsDir ?? defaultChartsDir(env);
         this.chartRepo = opts.chartRepo ?? env[exports.CHART_REPO_ENV] ?? helm_cli_1.DEFAULT_HELM_CHART_REPO;
-        this.versionOverride = opts.versionOverride ?? env[chart_set_lock_1.CHART_VERSION_ENV] ?? '';
         this.declaredLockPath = opts.lockPath;
-        this.helm = opts.helm;
     }
     get remotePlaneEnabled() {
         return this.chartRepo.length > 0;
@@ -43,26 +39,14 @@ class ChartResolver {
         this.lockPathMemo ??= this.declaredLockPath ?? (0, chart_set_lock_1.defaultChartSetLockPath)(this.env);
         return this.lockPathMemo;
     }
-    async resolve(name) {
+    resolve(name) {
         const directory = (0, node_path_1.join)(this.chartsDir, name);
         if (pathExists((0, node_path_1.join)(directory, 'Chart.yaml'))) {
-            return {
-                name,
-                kind: ChartSourceKind.LocalDirectory,
-                ref: directory,
-                version: '',
-                extraArgs: [],
-            };
+            return { name, kind: ChartSourceKind.LocalDirectory, ref: directory, version: '', digest: '' };
         }
         const archive = newestLocalArchive(this.chartsDir, name);
         if (archive !== null) {
-            return {
-                name,
-                kind: ChartSourceKind.LocalArchive,
-                ref: archive,
-                version: '',
-                extraArgs: [],
-            };
+            return { name, kind: ChartSourceKind.LocalArchive, ref: archive, version: '', digest: '' };
         }
         if (!this.remotePlaneEnabled) {
             throw new Error(`Chart '${name}' is not in ${exports.CHARTS_DIR_ENV}=${this.chartsDir} (expected ` +
@@ -70,56 +54,26 @@ class ChartResolver {
                 `plane is disabled (${exports.CHART_REPO_ENV} is empty). Stage the chart locally, ` +
                 `or unset ${exports.CHART_REPO_ENV} to allow the published plane.`);
         }
-        const version = await this.pinnedVersion(name);
-        if (version.length === 0) {
+        const member = this.sealedLock()?.members.get(name);
+        if (member === undefined) {
             throw new Error(`Chart '${name}' is not in ${exports.CHARTS_DIR_ENV}=${this.chartsDir}, and the ` +
-                `pinned chart set does not carry it — refusing to pull a floating ` +
-                `version from ${this.chartRepo}. Every chart is published at a ` +
-                `coordinate derived from its own content, and the set that names those ` +
-                `coordinates is pinned in ${this.lockPath}. A chart missing from it was ` +
-                `never published into this set. Re-resolve the lock ` +
-                `(xema-distributions: node resolve-chart-set.mjs), or pin one version ` +
-                `for this run with ${chart_set_lock_1.CHART_VERSION_ENV}.`);
+                `sealed chart set (${this.lockPath}) does not carry it — refusing to ` +
+                `pull an unpinned chart from ${this.chartRepo}. Every remote chart is ` +
+                'installed at the version AND digest the lock seals; a chart missing ' +
+                'from it was never sealed into this set (or there is no lock). Re-seal ' +
+                'the lock (xema-distributions: node resolve-chart-set.mjs).');
         }
         return {
             name,
             kind: ChartSourceKind.Oci,
             ref: `${this.chartRepo}/${name}`,
-            version,
-            extraArgs: ['--version', version],
+            version: member.version,
+            digest: member.digest,
         };
     }
-    async pinnedVersion(name) {
-        if (this.versionOverride.length > 0) {
-            return this.versionOverride;
-        }
-        const roster = await this.chartSetRoster();
-        return roster?.versions.get(name) ?? '';
-    }
-    publisherPins() {
-        if (!this.remotePlaneEnabled) {
-            return [];
-        }
-        return (0, chart_set_lock_1.loadChartSetLock)(this.lockPath)?.publishers ?? [];
-    }
-    async chartSetRoster() {
-        this.roster ??= this.readChartSetRoster();
-        return this.roster;
-    }
-    async readChartSetRoster() {
-        if (!this.remotePlaneEnabled) {
-            return null;
-        }
-        const lock = (0, chart_set_lock_1.loadChartSetLock)(this.lockPath);
-        if (lock === null) {
-            return null;
-        }
-        if (this.helm === undefined) {
-            throw new Error(`${this.lockPath} pins a chart set, but this resolver was built without a ` +
-                'helm metadata reader, so the pinned roster cannot be read. Construct ' +
-                'the ChartResolver with `helm` (a HelmCli).');
-        }
-        return (0, chart_set_lock_1.loadChartSetRoster)(lock, this.chartRepo, this.helm);
+    sealedLock() {
+        this.lock ??= { value: (0, chart_set_lock_1.loadChartSetLock)(this.lockPath) };
+        return this.lock.value;
     }
 }
 exports.ChartResolver = ChartResolver;

package/dist/runtime/runner/chart-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"chart-resolver.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-resolver.ts"],"names":[],"mappings":";;;AA2PA,4CAQC;AAgBD,gDA6BC;AAWD,oDA2BC;AAtVD,qCAAgD;AAChD,yCAAiC;AAEjC,2DAAiE;AACjE,qDAS0B;AAC1B,yCAAqD;AA8BxC,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAGnC,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAGnC,QAAA,eAAe,GAAG,QAAQ,CAAC;AAMxC,IAAY,eAOX;AAPD,WAAY,eAAe;IAEzB,qDAAkC,CAAA;IAElC,iDAA8B,CAAA;IAE9B,8BAAW,CAAA;AACb,CAAC,EAPW,eAAe,+BAAf,eAAe,QAO1B;AA8BD,MAAa,aAAa;IACf,SAAS,CAAS;IAElB,SAAS,CAAS;IACV,gBAAgB,CAAqB;IAC9C,YAAY,CAAqB;IACxB,GAAG,CAAoB;IACvB,eAAe,CAAS;IACxB,IAAI,CAAkC;IAM/C,MAAM,CAA6C;IAE3D,YAAY,OAA6B,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAGzD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,sBAAc,CAAC,IAAI,kCAAuB,CAAC;QAClF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,kCAAiB,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAGD,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,CAAC;IAQD,IAAI,QAAQ;QACV,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,gBAAgB,IAAI,IAAA,wCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,eAAe,CAAC,cAAc;gBACpC,GAAG,EAAE,SAAS;gBACd,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,EAAE;aACd,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,eAAe,CAAC,YAAY;gBAClC,GAAG,EAAE,OAAO;gBACZ,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,EAAE;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,eAAe,sBAAc,IAAI,IAAI,CAAC,SAAS,aAAa;gBACxE,IAAI,IAAI,oBAAoB,IAAI,wCAAwC;gBACxE,sBAAsB,sBAAc,uCAAuC;gBAC3E,YAAY,sBAAc,gCAAgC,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,eAAe,sBAAc,IAAI,IAAI,CAAC,SAAS,YAAY;gBACvE,mEAAmE;gBACnE,gBAAgB,IAAI,CAAC,SAAS,kCAAkC;gBAChE,wEAAwE;gBACxE,4BAA4B,IAAI,CAAC,QAAQ,gCAAgC;gBACzE,qDAAqD;gBACrD,uEAAuE;gBACvE,qBAAqB,kCAAiB,GAAG,CAC5C,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,eAAe,CAAC,GAAG;YACzB,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YAChC,OAAO;YACP,SAAS,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;SAClC,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,OAAO,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAUD,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAA,iCAAgB,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC;IAC3D,CAAC;IAOD,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,iCAAgB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAI5B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,QAAQ,2DAA2D;gBACzE,uEAAuE;gBACvE,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,mCAAkB,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;CACF;AA3JD,sCA2JC;AAGD,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAGnE,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAc,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAA,gBAAI,EAAC,IAAA,8CAA0B,EAAC,EAAE,GAAG,EAAE,CAAC,EAAE,uBAAe,CAAC,CAAC;AACpE,CAAC;AAgBD,SAAgB,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAC1D,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,8BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM,UAAU,GAAwC,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAWD,SAAgB,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAQD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,8BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}
+{"version":3,"file":"chart-resolver.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-resolver.ts"],"names":[],"mappings":";;;AA2KA,4CAQC;AAgBD,gDA6BC;AAWD,oDA2BC;AAtQD,qCAAgD;AAChD,yCAAiC;AAEjC,2DAAiE;AACjE,qDAK0B;AAC1B,yCAAqD;AA6BxC,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAGnC,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAGnC,QAAA,eAAe,GAAG,QAAQ,CAAC;AAMxC,IAAY,eAOX;AAPD,WAAY,eAAe;IAEzB,qDAAkC,CAAA;IAElC,iDAA8B,CAAA;IAE9B,8BAAW,CAAA;AACb,CAAC,EAPW,eAAe,+BAAf,eAAe,QAO1B;AA6BD,MAAa,aAAa;IACf,SAAS,CAAS;IAElB,SAAS,CAAS;IACV,gBAAgB,CAAqB;IAC9C,YAAY,CAAqB;IACxB,GAAG,CAAoB;IAEhC,IAAI,CAAsD;IAElE,YAAY,OAA6B,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAGzD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,sBAAc,CAAC,IAAI,kCAAuB,CAAC;QAClF,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;IACxC,CAAC;IAGD,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,CAAC;IAQD,IAAI,QAAQ;QACV,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,gBAAgB,IAAI,IAAA,wCAAuB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,eAAe,sBAAc,IAAI,IAAI,CAAC,SAAS,aAAa;gBACxE,IAAI,IAAI,oBAAoB,IAAI,wCAAwC;gBACxE,sBAAsB,sBAAc,uCAAuC;gBAC3E,YAAY,sBAAc,gCAAgC,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,eAAe,sBAAc,IAAI,IAAI,CAAC,SAAS,YAAY;gBACvE,qBAAqB,IAAI,CAAC,QAAQ,oCAAoC;gBACtE,+BAA+B,IAAI,CAAC,SAAS,0BAA0B;gBACvE,sEAAsE;gBACtE,wEAAwE;gBACxE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,eAAe,CAAC,GAAG;YACzB,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAGO,UAAU;QAChB,IAAI,CAAC,IAAI,KAAK,EAAE,KAAK,EAAE,IAAA,iCAAgB,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;CACF;AAjFD,sCAiFC;AAGD,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAGnE,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAc,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAA,gBAAI,EAAC,IAAA,8CAA0B,EAAC,EAAE,GAAG,EAAE,CAAC,EAAE,uBAAe,CAAC,CAAC;AACpE,CAAC;AAgBD,SAAgB,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAC1D,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,8BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM,UAAU,GAAwC,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAWD,SAAgB,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAQD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,8BAAa,EAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/runtime/runner/chart-set-lock.d.ts

@@ -1,31 +1,17 @@
-export declare const CHART_SET_ROSTER_ANNOTATION = "xema.dev/chart-set-charts";
 export declare const CHART_SET_LOCK_ENV = "XEMA_CHART_SET_LOCK";
-export declare const CHART_VERSION_ENV = "XEMA_CHART_VERSION";
 export declare const CHART_SET_LOCK_FILENAME = "chart-set.lock.json";
-export interface ChartSetPublisherPin {
-    readonly index: string;
+export declare const CHART_SET_LOCK_SCHEMA_VERSION = 3;
+export declare const CHART_DIGEST_PATTERN: RegExp;
+export interface ChartSetMember {
     readonly version: string;
+    readonly digest: string;
 }
 export interface ChartSetLock {
     readonly path: string;
-    readonly publishers: readonly ChartSetPublisherPin[];
+    readonly registry: string;
+    readonly members: ReadonlyMap<string, ChartSetMember>;
 }
 export declare function defaultChartSetLockPath(env?: NodeJS.ProcessEnv): string;
 export declare function loadChartSetLock(path: string): ChartSetLock | null;
-export interface ChartMetadataReader {
-    showChart(ref: string, version: string): Promise<string>;
-}
-export interface ChartSetRoster {
-    readonly versions: ReadonlyMap<string, string>;
-    readonly publishers: number;
-    readonly lockPath: string;
-}
-export declare function loadChartSetRoster(lock: ChartSetLock, chartRepo: string, helm: ChartMetadataReader): Promise<ChartSetRoster>;
-interface ChartSetMember {
-    readonly name: string;
-    readonly version: string;
-}
-export declare function parseChartSetRosterAnnotation(shownChart: string, ref: string, version: string): readonly ChartSetMember[];
 export declare function isMissingPath(error: unknown): boolean;
-export {};
 //# sourceMappingURL=chart-set-lock.d.ts.map

package/dist/runtime/runner/chart-set-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chart-set-lock.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,2BAA2B,8BAA8B,CAAC;AAGvE,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAGtD,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAG7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACtD;AAGD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAQR;AAWD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAoClE;AA8BD,MAAM,WAAW,mBAAmB;IAElC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAcD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,cAAc,CAAC,CAuBzB;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAgBD,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,SAAS,cAAc,EAAE,CA+D3B;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMrD"}
+{"version":3,"file":"chart-set-lock.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAG7D,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAG/C,eAAO,MAAM,oBAAoB,QAA0B,CAAC;AAG5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvD;AAGD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAQR;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuBlE;AAkFD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMrD"}