@xemahq/xema 0.25.1 → 0.27.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (239) hide show
  1. package/README.md +70 -37
  2. package/dist/assets/appliance-base/images.lock.json +126 -126
  3. package/dist/assets/appliance-lean/images.lock.json +123 -123
  4. package/dist/assets/cloud/images.lock.json +126 -126
  5. package/dist/assets/core/images.lock.json +120 -120
  6. package/dist/assets/distribution-assets.manifest.json +15 -16
  7. package/dist/assets/minimal/images.lock.json +108 -108
  8. package/dist/assets/oss/images.lock.json +126 -126
  9. package/dist/assets/starter/images.lock.json +123 -123
  10. package/dist/cli.js +2 -2
  11. package/dist/cli.js.map +1 -1
  12. package/dist/commands/dev.js +1 -0
  13. package/dist/commands/dev.js.map +1 -1
  14. package/dist/commands/down.d.ts.map +1 -1
  15. package/dist/commands/down.js +7 -1
  16. package/dist/commands/down.js.map +1 -1
  17. package/dist/commands/edition.d.ts +3 -0
  18. package/dist/commands/edition.d.ts.map +1 -0
  19. package/dist/commands/edition.js +46 -0
  20. package/dist/commands/edition.js.map +1 -0
  21. package/dist/commands/init.js +2 -2
  22. package/dist/commands/init.js.map +1 -1
  23. package/dist/commands/serve.js +1 -0
  24. package/dist/commands/serve.js.map +1 -1
  25. package/dist/commands/up.js +1 -0
  26. package/dist/commands/up.js.map +1 -1
  27. package/dist/dev/env-defaults.d.ts.map +1 -1
  28. package/dist/dev/env-defaults.js +6 -1
  29. package/dist/dev/env-defaults.js.map +1 -1
  30. package/dist/dev/infra-preflight.d.ts +3 -2
  31. package/dist/dev/infra-preflight.d.ts.map +1 -1
  32. package/dist/dev/infra-preflight.js +18 -8
  33. package/dist/dev/infra-preflight.js.map +1 -1
  34. package/dist/edition/verify-image-evidence.bundle.mjs +54179 -0
  35. package/dist/edition/verify-image-evidence.bundle.provenance.json +2871 -0
  36. package/dist/runtime/backing-registration.d.ts.map +1 -1
  37. package/dist/runtime/backing-registration.js +7 -2
  38. package/dist/runtime/backing-registration.js.map +1 -1
  39. package/dist/runtime/config/schema.d.ts +1 -0
  40. package/dist/runtime/config/schema.d.ts.map +1 -1
  41. package/dist/runtime/custody/local-custody.d.ts +12 -0
  42. package/dist/runtime/custody/local-custody.d.ts.map +1 -0
  43. package/dist/runtime/custody/local-custody.js +22 -0
  44. package/dist/runtime/custody/local-custody.js.map +1 -0
  45. package/dist/runtime/custody/openbao-custody-bootstrap.d.ts +18 -0
  46. package/dist/runtime/custody/openbao-custody-bootstrap.d.ts.map +1 -0
  47. package/dist/runtime/custody/openbao-custody-bootstrap.js +50 -0
  48. package/dist/runtime/custody/openbao-custody-bootstrap.js.map +1 -0
  49. package/dist/runtime/custody/openbao-custody-store.d.ts +18 -0
  50. package/dist/runtime/custody/openbao-custody-store.d.ts.map +1 -0
  51. package/dist/runtime/custody/openbao-custody-store.js +55 -0
  52. package/dist/runtime/custody/openbao-custody-store.js.map +1 -0
  53. package/dist/runtime/custody/openbao-http-client.d.ts +34 -0
  54. package/dist/runtime/custody/openbao-http-client.d.ts.map +1 -0
  55. package/dist/runtime/custody/openbao-http-client.js +154 -0
  56. package/dist/runtime/custody/openbao-http-client.js.map +1 -0
  57. package/dist/runtime/custody/openbao-local-constants.d.ts +22 -0
  58. package/dist/runtime/custody/openbao-local-constants.d.ts.map +1 -0
  59. package/dist/runtime/custody/openbao-local-constants.js +48 -0
  60. package/dist/runtime/custody/openbao-local-constants.js.map +1 -0
  61. package/dist/runtime/custody/openbao-local-runner.d.ts +16 -0
  62. package/dist/runtime/custody/openbao-local-runner.d.ts.map +1 -0
  63. package/dist/runtime/custody/openbao-local-runner.js +86 -0
  64. package/dist/runtime/custody/openbao-local-runner.js.map +1 -0
  65. package/dist/runtime/edition/run-entry.d.ts +9 -0
  66. package/dist/runtime/edition/run-entry.d.ts.map +1 -0
  67. package/dist/runtime/edition/run-entry.js +36 -0
  68. package/dist/runtime/edition/run-entry.js.map +1 -0
  69. package/dist/runtime/edition/verb-map.d.ts +60 -0
  70. package/dist/runtime/edition/verb-map.d.ts.map +1 -0
  71. package/dist/runtime/edition/verb-map.js +146 -0
  72. package/dist/runtime/edition/verb-map.js.map +1 -0
  73. package/dist/runtime/env-seeder.d.ts +3 -0
  74. package/dist/runtime/env-seeder.d.ts.map +1 -1
  75. package/dist/runtime/env-seeder.js +20 -3
  76. package/dist/runtime/env-seeder.js.map +1 -1
  77. package/dist/runtime/launch.d.ts +3 -1
  78. package/dist/runtime/launch.d.ts.map +1 -1
  79. package/dist/runtime/launch.js +37 -8
  80. package/dist/runtime/launch.js.map +1 -1
  81. package/dist/runtime/paths.d.ts +1 -2
  82. package/dist/runtime/paths.d.ts.map +1 -1
  83. package/dist/runtime/paths.js +0 -10
  84. package/dist/runtime/paths.js.map +1 -1
  85. package/dist/runtime/runner/chart-local-provenance.d.ts +20 -0
  86. package/dist/runtime/runner/chart-local-provenance.d.ts.map +1 -0
  87. package/dist/runtime/runner/chart-local-provenance.js +114 -0
  88. package/dist/runtime/runner/chart-local-provenance.js.map +1 -0
  89. package/dist/runtime/runner/chart-preflight.d.ts +8 -8
  90. package/dist/runtime/runner/chart-preflight.d.ts.map +1 -1
  91. package/dist/runtime/runner/chart-preflight.js +30 -69
  92. package/dist/runtime/runner/chart-preflight.js.map +1 -1
  93. package/dist/runtime/runner/chart-pull.d.ts +14 -0
  94. package/dist/runtime/runner/chart-pull.d.ts.map +1 -0
  95. package/dist/runtime/runner/chart-pull.js +96 -0
  96. package/dist/runtime/runner/chart-pull.js.map +1 -0
  97. package/dist/runtime/runner/chart-resolver.d.ts +4 -12
  98. package/dist/runtime/runner/chart-resolver.d.ts.map +1 -1
  99. package/dist/runtime/runner/chart-resolver.js +16 -62
  100. package/dist/runtime/runner/chart-resolver.js.map +1 -1
  101. package/dist/runtime/runner/chart-set-lock.d.ts +6 -20
  102. package/dist/runtime/runner/chart-set-lock.d.ts.map +1 -1
  103. package/dist/runtime/runner/chart-set-lock.js +55 -99
  104. package/dist/runtime/runner/chart-set-lock.js.map +1 -1
  105. package/dist/runtime/runner/helm-cli.d.ts +3 -1
  106. package/dist/runtime/runner/helm-cli.d.ts.map +1 -1
  107. package/dist/runtime/runner/helm-cli.js +9 -7
  108. package/dist/runtime/runner/helm-cli.js.map +1 -1
  109. package/dist/runtime/runner/helm-runner.d.ts +4 -4
  110. package/dist/runtime/runner/helm-runner.d.ts.map +1 -1
  111. package/dist/runtime/runner/helm-runner.js +18 -16
  112. package/dist/runtime/runner/helm-runner.js.map +1 -1
  113. package/dist/runtime/sources/kinds/git.d.ts +1 -2
  114. package/dist/runtime/sources/kinds/git.d.ts.map +1 -1
  115. package/dist/runtime/sources/kinds/git.js +8 -5
  116. package/dist/runtime/sources/kinds/git.js.map +1 -1
  117. package/dist/runtime/sources/manifest-walk.d.ts +3 -1
  118. package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
  119. package/dist/runtime/sources/manifest-walk.js +8 -3
  120. package/dist/runtime/sources/manifest-walk.js.map +1 -1
  121. package/dist/runtime/sources/schema.d.ts +3 -0
  122. package/dist/runtime/sources/schema.d.ts.map +1 -1
  123. package/dist/runtime/sources/schema.js +6 -1
  124. package/dist/runtime/sources/schema.js.map +1 -1
  125. package/dist/runtime/supervisor.d.ts +3 -0
  126. package/dist/runtime/supervisor.d.ts.map +1 -1
  127. package/dist/runtime/supervisor.js +2 -0
  128. package/dist/runtime/supervisor.js.map +1 -1
  129. package/edition/README.md +315 -0
  130. package/edition/assemble-producer-input.mjs +1251 -0
  131. package/edition/authorization-base.mjs +347 -0
  132. package/edition/biome-content.mjs +268 -0
  133. package/edition/build-biome-index.mjs +175 -0
  134. package/edition/build-platform-service-index.mjs +288 -0
  135. package/edition/build-runtime-image-source-index.mjs +821 -0
  136. package/edition/built-verifier.mjs +55 -0
  137. package/edition/catalogue-edition.mjs +49 -0
  138. package/edition/catalogue-fetch.mjs +64 -0
  139. package/edition/catalogue.mjs +135 -0
  140. package/edition/chart-set-source-commit.mjs +92 -0
  141. package/edition/check-committed-image-evidence.mjs +383 -0
  142. package/edition/checkout-indexed-source-repositories.mjs +105 -0
  143. package/edition/comment-blanker.mjs +75 -0
  144. package/edition/connector-source-authority.mjs +60 -0
  145. package/edition/customer-definition.mjs +183 -0
  146. package/edition/customer-flags.mjs +7 -0
  147. package/edition/develop-customer-edition.mjs +99 -0
  148. package/edition/develop-edition-resolve.mjs +65 -0
  149. package/edition/develop-edition.mjs +274 -0
  150. package/edition/develop-freeze.mjs +173 -0
  151. package/edition/develop-image-coordinate.mjs +54 -0
  152. package/edition/develop-seal.mjs +77 -0
  153. package/edition/develop-snapshot-inputs.mjs +104 -0
  154. package/edition/dist-check.mjs +986 -0
  155. package/edition/distribution-evidence-set.mjs +987 -0
  156. package/edition/distribution-paths.mjs +191 -0
  157. package/edition/edition-artifact.mjs +270 -0
  158. package/edition/edition-biome-manifests.mjs +85 -0
  159. package/edition/edition-channel.mjs +6 -0
  160. package/edition/edition-chart-set.mjs +93 -0
  161. package/edition/edition-config.mjs +207 -0
  162. package/edition/edition-constants.mjs +57 -0
  163. package/edition/edition-contract.json +23 -0
  164. package/edition/edition-list.mjs +35 -0
  165. package/edition/edition-locks.mjs +69 -0
  166. package/edition/edition-protocol.mjs +228 -0
  167. package/edition/edition-workspace.mjs +176 -0
  168. package/edition/evidence-checkout.mjs +418 -0
  169. package/edition/evidence-grammars.mjs +16 -0
  170. package/edition/evidence-trust-pin.mjs +304 -0
  171. package/edition/evidence-trust-policy.mjs +256 -0
  172. package/edition/external-source-walk.mjs +463 -0
  173. package/edition/first-party-source-ids.mjs +59 -0
  174. package/edition/fleet-coordinate-finality.mjs +350 -0
  175. package/edition/git-source-auth.mjs +52 -0
  176. package/edition/image-evidence-replay-state.mjs +242 -0
  177. package/edition/image-evidence.mjs +1225 -0
  178. package/edition/kernel-contract-authority.mjs +443 -0
  179. package/edition/lib.mjs +3018 -0
  180. package/edition/no-follow-file.mjs +94 -0
  181. package/edition/oci-evidence-verbs.mjs +392 -0
  182. package/edition/oci-image-source-evidence.mjs +239 -0
  183. package/edition/oras.mjs +648 -0
  184. package/edition/pin-source.mjs +227 -0
  185. package/edition/plan-image-evidence-refresh.mjs +408 -0
  186. package/edition/platform-lock-readability.mjs +892 -0
  187. package/edition/platform-service-class.mjs +18 -0
  188. package/edition/platform-service-source-authority.mjs +105 -0
  189. package/edition/positive-closure.mjs +162 -0
  190. package/edition/produce-distribution-completeness-evidence.mjs +311 -0
  191. package/edition/produce-image-delivery-entitlement-evidence.mjs +294 -0
  192. package/edition/produce-image-source-evidence.mjs +765 -0
  193. package/edition/producer-evidence-bundle.mjs +157 -0
  194. package/edition/registry-credentials.mjs +193 -0
  195. package/edition/release-catalogue.mjs +39 -0
  196. package/edition/release-channel-guard.mjs +99 -0
  197. package/edition/release-edition-artifact.mjs +158 -0
  198. package/edition/remedy-command.mjs +89 -0
  199. package/edition/repin-evidence-trust.mjs +101 -0
  200. package/edition/required-resource-provider.mjs +58 -0
  201. package/edition/resolve-chart-set.mjs +415 -0
  202. package/edition/resolve-customer-edition.mjs +288 -0
  203. package/edition/resolve-distribution.mjs +2318 -0
  204. package/edition/resolve-edition.mjs +186 -0
  205. package/edition/resolve-images.mjs +1606 -0
  206. package/edition/seal-image-digests.mjs +855 -0
  207. package/edition/sealed-evidence-accept.mjs +82 -0
  208. package/edition/source-authority.mjs +725 -0
  209. package/edition/source-closure.mjs +116 -0
  210. package/edition/strict-json.mjs +121 -0
  211. package/edition/string-order.mjs +5 -0
  212. package/edition/trust-policy-arming.mjs +120 -0
  213. package/edition/trusted-executable.mjs +166 -0
  214. package/edition/verifier-binding.mjs +45 -0
  215. package/edition/verifier-files.mjs +8 -0
  216. package/edition/verifier-kernel-schemas.mjs +22 -0
  217. package/edition/verifier-provenance.mjs +64 -0
  218. package/edition/verify-image-evidence.mjs +430 -0
  219. package/edition/verify-image-platforms.mjs +495 -0
  220. package/edition/why.mjs +56 -0
  221. package/edition/workspace-sections.mjs +195 -0
  222. package/examples/06-biome-sources.yaml +1 -0
  223. package/package.json +18 -7
  224. package/dist/commands/dist.d.ts +0 -16
  225. package/dist/commands/dist.d.ts.map +0 -1
  226. package/dist/commands/dist.js +0 -182
  227. package/dist/commands/dist.js.map +0 -1
  228. package/dist/runtime/distribution/available-biome.d.ts +0 -10
  229. package/dist/runtime/distribution/available-biome.d.ts.map +0 -1
  230. package/dist/runtime/distribution/available-biome.js +0 -154
  231. package/dist/runtime/distribution/available-biome.js.map +0 -1
  232. package/dist/runtime/distribution/compose.d.ts +0 -23
  233. package/dist/runtime/distribution/compose.d.ts.map +0 -1
  234. package/dist/runtime/distribution/compose.js +0 -48
  235. package/dist/runtime/distribution/compose.js.map +0 -1
  236. package/dist/runtime/runner/chart-trust.d.ts +0 -57
  237. package/dist/runtime/runner/chart-trust.d.ts.map +0 -1
  238. package/dist/runtime/runner/chart-trust.js +0 -270
  239. package/dist/runtime/runner/chart-trust.js.map +0 -1
@@ -10,7 +10,7 @@
10
10
  "editions": [
11
11
  {
12
12
  "id": "minimal",
13
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
13
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
14
14
  "inputHash": "a44d8ed99fc7eba0d724f8e8ec4d1763cebc5b48d01fe5eff971cd2f5c4fb7a3",
15
15
  "files": [
16
16
  "minimal/distribution.lock.json",
@@ -19,7 +19,7 @@
19
19
  },
20
20
  {
21
21
  "id": "core",
22
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
22
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
23
23
  "inputHash": "149da78845960be49cc1020621deedc204ab78ce082f47226fe22ec9ea0b33d4",
24
24
  "files": [
25
25
  "core/distribution.lock.json",
@@ -28,7 +28,7 @@
28
28
  },
29
29
  {
30
30
  "id": "starter",
31
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
31
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
32
32
  "inputHash": "6b763937e62f2c137b4ec02d50b13ff92bead25510c424b4ec0672b5b836fca4",
33
33
  "files": [
34
34
  "starter/distribution.lock.json",
@@ -37,7 +37,7 @@
37
37
  },
38
38
  {
39
39
  "id": "oss",
40
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
40
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
41
41
  "inputHash": "3b8de83baa5f32f27b9681de2ee8799c29e283b928ed2bcd3749aa1799f4fa8a",
42
42
  "files": [
43
43
  "oss/distribution.lock.json",
@@ -46,7 +46,7 @@
46
46
  },
47
47
  {
48
48
  "id": "appliance-lean",
49
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
49
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
50
50
  "inputHash": "8e0b634f1374287328c162e4b9d03b4b6bdffbc5778e87214642d0fd3a901c26",
51
51
  "files": [
52
52
  "appliance-lean/distribution.lock.json",
@@ -55,7 +55,7 @@
55
55
  },
56
56
  {
57
57
  "id": "appliance-base",
58
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
58
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
59
59
  "inputHash": "e321c5420e5bf278f0c3f97bc216bc6acd2e093a6a5c49e12d12e19feb5e4e33",
60
60
  "files": [
61
61
  "appliance-base/distribution.lock.json",
@@ -64,7 +64,7 @@
64
64
  },
65
65
  {
66
66
  "id": "cloud",
67
- "sourceCommit": "8bfe6d8059c33258b00d95ec424cf7216ceea2fd",
67
+ "sourceCommit": "59da66e97c7b38ec98b7846f2cfb7fbc750c3078",
68
68
  "inputHash": "a5f38cd422873d905640661be9fe8ddea09aed713b23f9cf6759df62b30aa949",
69
69
  "files": [
70
70
  "cloud/distribution.lock.json",
@@ -73,8 +73,7 @@
73
73
  }
74
74
  ],
75
75
  "excludedEditions": {
76
- "xema-internal": "operator-audience edition (pulls the operator-only fleet-management biome). @xemahq/xema is a PUBLIC npm package; operator inventory does not belong in it. Operators run it from the aggregator checkout or with --lock.",
77
- "editorial": "declares `visibility: private` in its own xema-distribution.json — a publishing decision the edition already took, and @xemahq/xema is a PUBLIC npm package. Recorded here because this list must be explicit, not derived; the edition is still installable from the aggregator checkout or with --lock."
76
+ "xema-internal": "operator-audience edition (pulls the operator-only fleet-management biome). @xemahq/xema is a PUBLIC npm package; operator inventory does not belong in it. Operators run it from the aggregator checkout or with --lock."
78
77
  },
79
78
  "packageAssets": [
80
79
  "keycloak/realm-xema.json"
@@ -86,7 +85,7 @@
86
85
  },
87
86
  {
88
87
  "path": "appliance-base/images.lock.json",
89
- "sha256": "a7223f2c4680a2b575b6ef7c2bfba2d0be80bb8f7eda86e4f64fa3d0e8fbf17d"
88
+ "sha256": "a01692967f61ef40c65912b401ea8ae6533a72ea6e9b799583f86608e3a6b0aa"
90
89
  },
91
90
  {
92
91
  "path": "appliance-lean/distribution.lock.json",
@@ -94,7 +93,7 @@
94
93
  },
95
94
  {
96
95
  "path": "appliance-lean/images.lock.json",
97
- "sha256": "bca8707e1dd94aa26908d11df57974f960b5121ad01687e380770dc3521154bd"
96
+ "sha256": "58ec21a753e18f28f09be0012eac664cb02ecc49edfcb55418eb365e99cd2a98"
98
97
  },
99
98
  {
100
99
  "path": "boot-graph.json",
@@ -106,7 +105,7 @@
106
105
  },
107
106
  {
108
107
  "path": "cloud/images.lock.json",
109
- "sha256": "68362c93bb4c8350d05d3d019adde043bfbbbc9d892bdc8106680671a0644cf3"
108
+ "sha256": "08b8b97f8a2d015e90023224fe91fd498f58161d92a3d978b8d66f0eb9e58009"
110
109
  },
111
110
  {
112
111
  "path": "core/distribution.lock.json",
@@ -114,7 +113,7 @@
114
113
  },
115
114
  {
116
115
  "path": "core/images.lock.json",
117
- "sha256": "70dcc56a8d0051044c569494dfcd5bc0cf4b801522bea409b88f45e12ada4806"
116
+ "sha256": "2f087f1d459949051f1b6aa99fb0c9fc14dcfb3d947865af23568be6a50b31fd"
118
117
  },
119
118
  {
120
119
  "path": "keycloak/realm-xema.json",
@@ -126,7 +125,7 @@
126
125
  },
127
126
  {
128
127
  "path": "minimal/images.lock.json",
129
- "sha256": "9e97132d5f37ec097aa68be7dec0cae3671bc18a7fee2042d9e0766bd6359c46"
128
+ "sha256": "82bed2a4f760f7d7a9d2474912ae58ba9d35e7596fb31f0eaa3671eebab254e9"
130
129
  },
131
130
  {
132
131
  "path": "oss/distribution.lock.json",
@@ -134,7 +133,7 @@
134
133
  },
135
134
  {
136
135
  "path": "oss/images.lock.json",
137
- "sha256": "f127ac00a401c6fdbbbcc7d98a45a54b6417a446063070c732905646d00644a1"
136
+ "sha256": "c3424f9264f7d4e680f9ff895737747b88f17e248e7a11e6955ae952d0e1ffc4"
138
137
  },
139
138
  {
140
139
  "path": "starter/distribution.lock.json",
@@ -142,7 +141,7 @@
142
141
  },
143
142
  {
144
143
  "path": "starter/images.lock.json",
145
- "sha256": "0cdac4f238512aa2d97beb12089d409c973c3fd1bc7efee616e2d8f10d0caee0"
144
+ "sha256": "24844786210f336b6ec164b0b7684f240f3826993dab6376b34e932c29358bef"
146
145
  }
147
146
  ]
148
147
  }