@xemahq/xema 0.25.1 → 0.27.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +70 -37
- package/dist/assets/appliance-base/images.lock.json +126 -126
- package/dist/assets/appliance-lean/images.lock.json +123 -123
- package/dist/assets/cloud/images.lock.json +126 -126
- package/dist/assets/core/images.lock.json +120 -120
- package/dist/assets/distribution-assets.manifest.json +15 -16
- package/dist/assets/minimal/images.lock.json +108 -108
- package/dist/assets/oss/images.lock.json +126 -126
- package/dist/assets/starter/images.lock.json +123 -123
- package/dist/cli.js +2 -2
- package/dist/cli.js.map +1 -1
- package/dist/commands/dev.js +1 -0
- package/dist/commands/dev.js.map +1 -1
- package/dist/commands/down.d.ts.map +1 -1
- package/dist/commands/down.js +7 -1
- package/dist/commands/down.js.map +1 -1
- package/dist/commands/edition.d.ts +3 -0
- package/dist/commands/edition.d.ts.map +1 -0
- package/dist/commands/edition.js +46 -0
- package/dist/commands/edition.js.map +1 -0
- package/dist/commands/init.js +2 -2
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/serve.js +1 -0
- package/dist/commands/serve.js.map +1 -1
- package/dist/commands/up.js +1 -0
- package/dist/commands/up.js.map +1 -1
- package/dist/dev/env-defaults.d.ts.map +1 -1
- package/dist/dev/env-defaults.js +6 -1
- package/dist/dev/env-defaults.js.map +1 -1
- package/dist/dev/infra-preflight.d.ts +3 -2
- package/dist/dev/infra-preflight.d.ts.map +1 -1
- package/dist/dev/infra-preflight.js +18 -8
- package/dist/dev/infra-preflight.js.map +1 -1
- package/dist/edition/verify-image-evidence.bundle.mjs +54179 -0
- package/dist/edition/verify-image-evidence.bundle.provenance.json +2871 -0
- package/dist/runtime/backing-registration.d.ts.map +1 -1
- package/dist/runtime/backing-registration.js +7 -2
- package/dist/runtime/backing-registration.js.map +1 -1
- package/dist/runtime/config/schema.d.ts +1 -0
- package/dist/runtime/config/schema.d.ts.map +1 -1
- package/dist/runtime/custody/local-custody.d.ts +12 -0
- package/dist/runtime/custody/local-custody.d.ts.map +1 -0
- package/dist/runtime/custody/local-custody.js +22 -0
- package/dist/runtime/custody/local-custody.js.map +1 -0
- package/dist/runtime/custody/openbao-custody-bootstrap.d.ts +18 -0
- package/dist/runtime/custody/openbao-custody-bootstrap.d.ts.map +1 -0
- package/dist/runtime/custody/openbao-custody-bootstrap.js +50 -0
- package/dist/runtime/custody/openbao-custody-bootstrap.js.map +1 -0
- package/dist/runtime/custody/openbao-custody-store.d.ts +18 -0
- package/dist/runtime/custody/openbao-custody-store.d.ts.map +1 -0
- package/dist/runtime/custody/openbao-custody-store.js +55 -0
- package/dist/runtime/custody/openbao-custody-store.js.map +1 -0
- package/dist/runtime/custody/openbao-http-client.d.ts +34 -0
- package/dist/runtime/custody/openbao-http-client.d.ts.map +1 -0
- package/dist/runtime/custody/openbao-http-client.js +154 -0
- package/dist/runtime/custody/openbao-http-client.js.map +1 -0
- package/dist/runtime/custody/openbao-local-constants.d.ts +22 -0
- package/dist/runtime/custody/openbao-local-constants.d.ts.map +1 -0
- package/dist/runtime/custody/openbao-local-constants.js +48 -0
- package/dist/runtime/custody/openbao-local-constants.js.map +1 -0
- package/dist/runtime/custody/openbao-local-runner.d.ts +16 -0
- package/dist/runtime/custody/openbao-local-runner.d.ts.map +1 -0
- package/dist/runtime/custody/openbao-local-runner.js +86 -0
- package/dist/runtime/custody/openbao-local-runner.js.map +1 -0
- package/dist/runtime/edition/run-entry.d.ts +9 -0
- package/dist/runtime/edition/run-entry.d.ts.map +1 -0
- package/dist/runtime/edition/run-entry.js +36 -0
- package/dist/runtime/edition/run-entry.js.map +1 -0
- package/dist/runtime/edition/verb-map.d.ts +60 -0
- package/dist/runtime/edition/verb-map.d.ts.map +1 -0
- package/dist/runtime/edition/verb-map.js +146 -0
- package/dist/runtime/edition/verb-map.js.map +1 -0
- package/dist/runtime/env-seeder.d.ts +3 -0
- package/dist/runtime/env-seeder.d.ts.map +1 -1
- package/dist/runtime/env-seeder.js +20 -3
- package/dist/runtime/env-seeder.js.map +1 -1
- package/dist/runtime/launch.d.ts +3 -1
- package/dist/runtime/launch.d.ts.map +1 -1
- package/dist/runtime/launch.js +37 -8
- package/dist/runtime/launch.js.map +1 -1
- package/dist/runtime/paths.d.ts +1 -2
- package/dist/runtime/paths.d.ts.map +1 -1
- package/dist/runtime/paths.js +0 -10
- package/dist/runtime/paths.js.map +1 -1
- package/dist/runtime/runner/chart-local-provenance.d.ts +20 -0
- package/dist/runtime/runner/chart-local-provenance.d.ts.map +1 -0
- package/dist/runtime/runner/chart-local-provenance.js +114 -0
- package/dist/runtime/runner/chart-local-provenance.js.map +1 -0
- package/dist/runtime/runner/chart-preflight.d.ts +8 -8
- package/dist/runtime/runner/chart-preflight.d.ts.map +1 -1
- package/dist/runtime/runner/chart-preflight.js +30 -69
- package/dist/runtime/runner/chart-preflight.js.map +1 -1
- package/dist/runtime/runner/chart-pull.d.ts +14 -0
- package/dist/runtime/runner/chart-pull.d.ts.map +1 -0
- package/dist/runtime/runner/chart-pull.js +96 -0
- package/dist/runtime/runner/chart-pull.js.map +1 -0
- package/dist/runtime/runner/chart-resolver.d.ts +4 -12
- package/dist/runtime/runner/chart-resolver.d.ts.map +1 -1
- package/dist/runtime/runner/chart-resolver.js +16 -62
- package/dist/runtime/runner/chart-resolver.js.map +1 -1
- package/dist/runtime/runner/chart-set-lock.d.ts +6 -20
- package/dist/runtime/runner/chart-set-lock.d.ts.map +1 -1
- package/dist/runtime/runner/chart-set-lock.js +55 -99
- package/dist/runtime/runner/chart-set-lock.js.map +1 -1
- package/dist/runtime/runner/helm-cli.d.ts +3 -1
- package/dist/runtime/runner/helm-cli.d.ts.map +1 -1
- package/dist/runtime/runner/helm-cli.js +9 -7
- package/dist/runtime/runner/helm-cli.js.map +1 -1
- package/dist/runtime/runner/helm-runner.d.ts +4 -4
- package/dist/runtime/runner/helm-runner.d.ts.map +1 -1
- package/dist/runtime/runner/helm-runner.js +18 -16
- package/dist/runtime/runner/helm-runner.js.map +1 -1
- package/dist/runtime/sources/kinds/git.d.ts +1 -2
- package/dist/runtime/sources/kinds/git.d.ts.map +1 -1
- package/dist/runtime/sources/kinds/git.js +8 -5
- package/dist/runtime/sources/kinds/git.js.map +1 -1
- package/dist/runtime/sources/manifest-walk.d.ts +3 -1
- package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
- package/dist/runtime/sources/manifest-walk.js +8 -3
- package/dist/runtime/sources/manifest-walk.js.map +1 -1
- package/dist/runtime/sources/schema.d.ts +3 -0
- package/dist/runtime/sources/schema.d.ts.map +1 -1
- package/dist/runtime/sources/schema.js +6 -1
- package/dist/runtime/sources/schema.js.map +1 -1
- package/dist/runtime/supervisor.d.ts +3 -0
- package/dist/runtime/supervisor.d.ts.map +1 -1
- package/dist/runtime/supervisor.js +2 -0
- package/dist/runtime/supervisor.js.map +1 -1
- package/edition/README.md +315 -0
- package/edition/assemble-producer-input.mjs +1251 -0
- package/edition/authorization-base.mjs +347 -0
- package/edition/biome-content.mjs +268 -0
- package/edition/build-biome-index.mjs +175 -0
- package/edition/build-platform-service-index.mjs +288 -0
- package/edition/build-runtime-image-source-index.mjs +821 -0
- package/edition/built-verifier.mjs +55 -0
- package/edition/catalogue-edition.mjs +49 -0
- package/edition/catalogue-fetch.mjs +64 -0
- package/edition/catalogue.mjs +135 -0
- package/edition/chart-set-source-commit.mjs +92 -0
- package/edition/check-committed-image-evidence.mjs +383 -0
- package/edition/checkout-indexed-source-repositories.mjs +105 -0
- package/edition/comment-blanker.mjs +75 -0
- package/edition/connector-source-authority.mjs +60 -0
- package/edition/customer-definition.mjs +183 -0
- package/edition/customer-flags.mjs +7 -0
- package/edition/develop-customer-edition.mjs +99 -0
- package/edition/develop-edition-resolve.mjs +65 -0
- package/edition/develop-edition.mjs +274 -0
- package/edition/develop-freeze.mjs +173 -0
- package/edition/develop-image-coordinate.mjs +54 -0
- package/edition/develop-seal.mjs +77 -0
- package/edition/develop-snapshot-inputs.mjs +104 -0
- package/edition/dist-check.mjs +986 -0
- package/edition/distribution-evidence-set.mjs +987 -0
- package/edition/distribution-paths.mjs +191 -0
- package/edition/edition-artifact.mjs +270 -0
- package/edition/edition-biome-manifests.mjs +85 -0
- package/edition/edition-channel.mjs +6 -0
- package/edition/edition-chart-set.mjs +93 -0
- package/edition/edition-config.mjs +207 -0
- package/edition/edition-constants.mjs +57 -0
- package/edition/edition-contract.json +23 -0
- package/edition/edition-list.mjs +35 -0
- package/edition/edition-locks.mjs +69 -0
- package/edition/edition-protocol.mjs +228 -0
- package/edition/edition-workspace.mjs +176 -0
- package/edition/evidence-checkout.mjs +418 -0
- package/edition/evidence-grammars.mjs +16 -0
- package/edition/evidence-trust-pin.mjs +304 -0
- package/edition/evidence-trust-policy.mjs +256 -0
- package/edition/external-source-walk.mjs +463 -0
- package/edition/first-party-source-ids.mjs +59 -0
- package/edition/fleet-coordinate-finality.mjs +350 -0
- package/edition/git-source-auth.mjs +52 -0
- package/edition/image-evidence-replay-state.mjs +242 -0
- package/edition/image-evidence.mjs +1225 -0
- package/edition/kernel-contract-authority.mjs +443 -0
- package/edition/lib.mjs +3018 -0
- package/edition/no-follow-file.mjs +94 -0
- package/edition/oci-evidence-verbs.mjs +392 -0
- package/edition/oci-image-source-evidence.mjs +239 -0
- package/edition/oras.mjs +648 -0
- package/edition/pin-source.mjs +227 -0
- package/edition/plan-image-evidence-refresh.mjs +408 -0
- package/edition/platform-lock-readability.mjs +892 -0
- package/edition/platform-service-class.mjs +18 -0
- package/edition/platform-service-source-authority.mjs +105 -0
- package/edition/positive-closure.mjs +162 -0
- package/edition/produce-distribution-completeness-evidence.mjs +311 -0
- package/edition/produce-image-delivery-entitlement-evidence.mjs +294 -0
- package/edition/produce-image-source-evidence.mjs +765 -0
- package/edition/producer-evidence-bundle.mjs +157 -0
- package/edition/registry-credentials.mjs +193 -0
- package/edition/release-catalogue.mjs +39 -0
- package/edition/release-channel-guard.mjs +99 -0
- package/edition/release-edition-artifact.mjs +158 -0
- package/edition/remedy-command.mjs +89 -0
- package/edition/repin-evidence-trust.mjs +101 -0
- package/edition/required-resource-provider.mjs +58 -0
- package/edition/resolve-chart-set.mjs +415 -0
- package/edition/resolve-customer-edition.mjs +288 -0
- package/edition/resolve-distribution.mjs +2318 -0
- package/edition/resolve-edition.mjs +186 -0
- package/edition/resolve-images.mjs +1606 -0
- package/edition/seal-image-digests.mjs +855 -0
- package/edition/sealed-evidence-accept.mjs +82 -0
- package/edition/source-authority.mjs +725 -0
- package/edition/source-closure.mjs +116 -0
- package/edition/strict-json.mjs +121 -0
- package/edition/string-order.mjs +5 -0
- package/edition/trust-policy-arming.mjs +120 -0
- package/edition/trusted-executable.mjs +166 -0
- package/edition/verifier-binding.mjs +45 -0
- package/edition/verifier-files.mjs +8 -0
- package/edition/verifier-kernel-schemas.mjs +22 -0
- package/edition/verifier-provenance.mjs +64 -0
- package/edition/verify-image-evidence.mjs +430 -0
- package/edition/verify-image-platforms.mjs +495 -0
- package/edition/why.mjs +56 -0
- package/edition/workspace-sections.mjs +195 -0
- package/examples/06-biome-sources.yaml +1 -0
- package/package.json +18 -7
- package/dist/commands/dist.d.ts +0 -16
- package/dist/commands/dist.d.ts.map +0 -1
- package/dist/commands/dist.js +0 -182
- package/dist/commands/dist.js.map +0 -1
- package/dist/runtime/distribution/available-biome.d.ts +0 -10
- package/dist/runtime/distribution/available-biome.d.ts.map +0 -1
- package/dist/runtime/distribution/available-biome.js +0 -154
- package/dist/runtime/distribution/available-biome.js.map +0 -1
- package/dist/runtime/distribution/compose.d.ts +0 -23
- package/dist/runtime/distribution/compose.d.ts.map +0 -1
- package/dist/runtime/distribution/compose.js +0 -48
- package/dist/runtime/distribution/compose.js.map +0 -1
- package/dist/runtime/runner/chart-trust.d.ts +0 -57
- package/dist/runtime/runner/chart-trust.d.ts.map +0 -1
- package/dist/runtime/runner/chart-trust.js +0 -270
- package/dist/runtime/runner/chart-trust.js.map +0 -1
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
"editions": [
|
|
11
11
|
{
|
|
12
12
|
"id": "minimal",
|
|
13
|
-
"sourceCommit": "
|
|
13
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
14
14
|
"inputHash": "a44d8ed99fc7eba0d724f8e8ec4d1763cebc5b48d01fe5eff971cd2f5c4fb7a3",
|
|
15
15
|
"files": [
|
|
16
16
|
"minimal/distribution.lock.json",
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
},
|
|
20
20
|
{
|
|
21
21
|
"id": "core",
|
|
22
|
-
"sourceCommit": "
|
|
22
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
23
23
|
"inputHash": "149da78845960be49cc1020621deedc204ab78ce082f47226fe22ec9ea0b33d4",
|
|
24
24
|
"files": [
|
|
25
25
|
"core/distribution.lock.json",
|
|
@@ -28,7 +28,7 @@
|
|
|
28
28
|
},
|
|
29
29
|
{
|
|
30
30
|
"id": "starter",
|
|
31
|
-
"sourceCommit": "
|
|
31
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
32
32
|
"inputHash": "6b763937e62f2c137b4ec02d50b13ff92bead25510c424b4ec0672b5b836fca4",
|
|
33
33
|
"files": [
|
|
34
34
|
"starter/distribution.lock.json",
|
|
@@ -37,7 +37,7 @@
|
|
|
37
37
|
},
|
|
38
38
|
{
|
|
39
39
|
"id": "oss",
|
|
40
|
-
"sourceCommit": "
|
|
40
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
41
41
|
"inputHash": "3b8de83baa5f32f27b9681de2ee8799c29e283b928ed2bcd3749aa1799f4fa8a",
|
|
42
42
|
"files": [
|
|
43
43
|
"oss/distribution.lock.json",
|
|
@@ -46,7 +46,7 @@
|
|
|
46
46
|
},
|
|
47
47
|
{
|
|
48
48
|
"id": "appliance-lean",
|
|
49
|
-
"sourceCommit": "
|
|
49
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
50
50
|
"inputHash": "8e0b634f1374287328c162e4b9d03b4b6bdffbc5778e87214642d0fd3a901c26",
|
|
51
51
|
"files": [
|
|
52
52
|
"appliance-lean/distribution.lock.json",
|
|
@@ -55,7 +55,7 @@
|
|
|
55
55
|
},
|
|
56
56
|
{
|
|
57
57
|
"id": "appliance-base",
|
|
58
|
-
"sourceCommit": "
|
|
58
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
59
59
|
"inputHash": "e321c5420e5bf278f0c3f97bc216bc6acd2e093a6a5c49e12d12e19feb5e4e33",
|
|
60
60
|
"files": [
|
|
61
61
|
"appliance-base/distribution.lock.json",
|
|
@@ -64,7 +64,7 @@
|
|
|
64
64
|
},
|
|
65
65
|
{
|
|
66
66
|
"id": "cloud",
|
|
67
|
-
"sourceCommit": "
|
|
67
|
+
"sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
|
|
68
68
|
"inputHash": "a5f38cd422873d905640661be9fe8ddea09aed713b23f9cf6759df62b30aa949",
|
|
69
69
|
"files": [
|
|
70
70
|
"cloud/distribution.lock.json",
|
|
@@ -73,8 +73,7 @@
|
|
|
73
73
|
}
|
|
74
74
|
],
|
|
75
75
|
"excludedEditions": {
|
|
76
|
-
"xema-internal": "operator-audience edition (pulls the operator-only fleet-management biome). @xemahq/xema is a PUBLIC npm package; operator inventory does not belong in it. Operators run it from the aggregator checkout or with --lock."
|
|
77
|
-
"editorial": "declares `visibility: private` in its own xema-distribution.json — a publishing decision the edition already took, and @xemahq/xema is a PUBLIC npm package. Recorded here because this list must be explicit, not derived; the edition is still installable from the aggregator checkout or with --lock."
|
|
76
|
+
"xema-internal": "operator-audience edition (pulls the operator-only fleet-management biome). @xemahq/xema is a PUBLIC npm package; operator inventory does not belong in it. Operators run it from the aggregator checkout or with --lock."
|
|
78
77
|
},
|
|
79
78
|
"packageAssets": [
|
|
80
79
|
"keycloak/realm-xema.json"
|
|
@@ -86,7 +85,7 @@
|
|
|
86
85
|
},
|
|
87
86
|
{
|
|
88
87
|
"path": "appliance-base/images.lock.json",
|
|
89
|
-
"sha256": "
|
|
88
|
+
"sha256": "a01692967f61ef40c65912b401ea8ae6533a72ea6e9b799583f86608e3a6b0aa"
|
|
90
89
|
},
|
|
91
90
|
{
|
|
92
91
|
"path": "appliance-lean/distribution.lock.json",
|
|
@@ -94,7 +93,7 @@
|
|
|
94
93
|
},
|
|
95
94
|
{
|
|
96
95
|
"path": "appliance-lean/images.lock.json",
|
|
97
|
-
"sha256": "
|
|
96
|
+
"sha256": "58ec21a753e18f28f09be0012eac664cb02ecc49edfcb55418eb365e99cd2a98"
|
|
98
97
|
},
|
|
99
98
|
{
|
|
100
99
|
"path": "boot-graph.json",
|
|
@@ -106,7 +105,7 @@
|
|
|
106
105
|
},
|
|
107
106
|
{
|
|
108
107
|
"path": "cloud/images.lock.json",
|
|
109
|
-
"sha256": "
|
|
108
|
+
"sha256": "08b8b97f8a2d015e90023224fe91fd498f58161d92a3d978b8d66f0eb9e58009"
|
|
110
109
|
},
|
|
111
110
|
{
|
|
112
111
|
"path": "core/distribution.lock.json",
|
|
@@ -114,7 +113,7 @@
|
|
|
114
113
|
},
|
|
115
114
|
{
|
|
116
115
|
"path": "core/images.lock.json",
|
|
117
|
-
"sha256": "
|
|
116
|
+
"sha256": "2f087f1d459949051f1b6aa99fb0c9fc14dcfb3d947865af23568be6a50b31fd"
|
|
118
117
|
},
|
|
119
118
|
{
|
|
120
119
|
"path": "keycloak/realm-xema.json",
|
|
@@ -126,7 +125,7 @@
|
|
|
126
125
|
},
|
|
127
126
|
{
|
|
128
127
|
"path": "minimal/images.lock.json",
|
|
129
|
-
"sha256": "
|
|
128
|
+
"sha256": "82bed2a4f760f7d7a9d2474912ae58ba9d35e7596fb31f0eaa3671eebab254e9"
|
|
130
129
|
},
|
|
131
130
|
{
|
|
132
131
|
"path": "oss/distribution.lock.json",
|
|
@@ -134,7 +133,7 @@
|
|
|
134
133
|
},
|
|
135
134
|
{
|
|
136
135
|
"path": "oss/images.lock.json",
|
|
137
|
-
"sha256": "
|
|
136
|
+
"sha256": "c3424f9264f7d4e680f9ff895737747b88f17e248e7a11e6955ae952d0e1ffc4"
|
|
138
137
|
},
|
|
139
138
|
{
|
|
140
139
|
"path": "starter/distribution.lock.json",
|
|
@@ -142,7 +141,7 @@
|
|
|
142
141
|
},
|
|
143
142
|
{
|
|
144
143
|
"path": "starter/images.lock.json",
|
|
145
|
-
"sha256": "
|
|
144
|
+
"sha256": "24844786210f336b6ec164b0b7684f240f3826993dab6376b34e932c29358bef"
|
|
146
145
|
}
|
|
147
146
|
]
|
|
148
147
|
}
|