@xemahq/xema 0.26.0 → 0.27.0

package/dist/runtime/custody/openbao-local-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openbao-local-runner.js","sourceRoot":"","sources":["../../../src/runtime/custody/openbao-local-runner.ts"],"names":[],"mappings":";;;AAAA,uEAOmC;AACnC,qDAI8B;AAS9B,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,MAAa,kBAAkB;IACA;IAA7B,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEhE,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAC7C,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,6BAA6B,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,MAAM,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAC3D,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,CAAC,iDAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iDAAuB,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CACb,sBAAsB,iDAAuB,sCAAsC;gBACjF,qEAAqE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,iDAAuB,CAAC,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,iDAAuB,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,4CAAkB,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,GAAG,CAAC;YACf,KAAK;YACL,IAAI;YACJ,QAAQ;YACR,iDAAuB;YACvB,SAAS;YACT,GAAG,2BAAc,QAAQ;YACzB,SAAS;YACT,GAAG,kCAAqB,IAAI,cAAc,EAAE;YAC5C,WAAW;YACX,IAAI,CAAC,IAAI,CAAC,OAAO;YACjB,WAAW;YACX,gBAAgB;YAEhB,IAAI;YACJ,aAAa,IAAI,IAAI,IAAI,EAAE;YAC3B,IAAI;YACJ,GAAG,8CAAoB,IAAI,iDAAuB,EAAE;YACpD,OAAO;YACP,oBAAoB,qDAA2B,EAAE;YACjD,6CAAmB;YACnB,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;QAC9C,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC9C,IAAI;gBACJ,UAAU;gBACV,SAAS,iDAAuB,GAAG;gBACnC,UAAU;gBACV,gBAAgB;gBAChB,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,iDAAuB,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,2EAA2E,iDAAuB,EAAE,CACrG,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,eAAe,CAAC,MAAM;oBACtE,gCAAgC,iDAAuB,EAAE,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AA/ED,gDA+EC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/edition/run-entry.d.ts

@@ -0,0 +1,9 @@
+import { type EditionVerb } from './verb-map';
+export declare const EDITION_LIBRARY_DIR: string;
+export declare const EDITION_BUNDLE_DIR: string;
+export declare const EVIDENCE_VERIFIER_ENV_KEYS: readonly string[];
+export interface EditionRunResult {
+    readonly exitCode: number;
+}
+export declare function runEditionVerb(verb: EditionVerb, args: readonly string[], libraryDir?: string, bundleDir?: string, environment?: NodeJS.ProcessEnv): EditionRunResult;
+//# sourceMappingURL=run-entry.d.ts.map

package/dist/runtime/edition/run-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-entry.d.ts","sourceRoot":"","sources":["../../../src/runtime/edition/run-entry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkD,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAS9F,eAAO,MAAM,mBAAmB,QAA+C,CAAC;AAGhF,eAAO,MAAM,kBAAkB,QAAuD,CAAC;AAOvF,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAAuD,CAAC;AAahH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAGD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,UAAU,GAAE,MAA4B,EACxC,SAAS,GAAE,MAA2B,EACtC,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,gBAAgB,CAclB"}

package/dist/runtime/edition/run-entry.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVIDENCE_VERIFIER_ENV_KEYS = exports.EDITION_BUNDLE_DIR = exports.EDITION_LIBRARY_DIR = void 0;
+exports.runEditionVerb = runEditionVerb;
+const node_child_process_1 = require("node:child_process");
+const node_path_1 = require("node:path");
+const verb_map_1 = require("./verb-map");
+exports.EDITION_LIBRARY_DIR = (0, node_path_1.join)(__dirname, '..', '..', '..', 'edition');
+exports.EDITION_BUNDLE_DIR = (0, node_path_1.join)(__dirname, '..', '..', '..', 'dist', 'edition');
+exports.EVIDENCE_VERIFIER_ENV_KEYS = ['PATH', 'HOME', 'TMPDIR', 'LANG', 'LC_ALL', 'TZ'];
+function reducedEnvironment(source) {
+    const reduced = {};
+    for (const key of exports.EVIDENCE_VERIFIER_ENV_KEYS) {
+        const value = source[key];
+        if (value !== undefined) {
+            reduced[key] = value;
+        }
+    }
+    return reduced;
+}
+function runEditionVerb(verb, args, libraryDir = exports.EDITION_LIBRARY_DIR, bundleDir = exports.EDITION_BUNDLE_DIR, environment = process.env) {
+    const invocation = (0, verb_map_1.resolveEditionInvocation)(verb, args);
+    const bundled = invocation.location === verb_map_1.EditionEntryLocation.Bundle;
+    const result = (0, node_child_process_1.spawnSync)(process.execPath, [(0, node_path_1.join)(bundled ? bundleDir : libraryDir, invocation.entry), ...invocation.args], {
+        stdio: 'inherit',
+        ...(bundled ? { env: reducedEnvironment(environment) } : {}),
+    });
+    if (result.error !== undefined) {
+        throw new Error(`could not start ${invocation.entry}: ${result.error.message}`);
+    }
+    if (result.status === null) {
+        throw new Error(`${invocation.entry} was terminated by ${result.signal ?? 'a signal'}`);
+    }
+    return { exitCode: result.status };
+}
+//# sourceMappingURL=run-entry.js.map

package/dist/runtime/edition/run-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-entry.js","sourceRoot":"","sources":["../../../src/runtime/edition/run-entry.ts"],"names":[],"mappings":";;;AAwCA,wCAoBC;AA5DD,2DAA+C;AAC/C,yCAAiC;AAEjC,yCAA8F;AASjF,QAAA,mBAAmB,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAGnE,QAAA,kBAAkB,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAO1E,QAAA,0BAA0B,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAEhH,SAAS,kBAAkB,CAAC,MAAyB;IACnD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,kCAA0B,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD,SAAgB,cAAc,CAC5B,IAAiB,EACjB,IAAuB,EACvB,aAAqB,2BAAmB,EACxC,YAAoB,0BAAkB,EACtC,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,UAAU,GAAG,IAAA,mCAAwB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,KAAK,+BAAoB,CAAC,MAAM,CAAC;IACpE,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE;QACzH,KAAK,EAAE,SAAS;QAChB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,sBAAsB,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/runtime/edition/verb-map.d.ts

@@ -0,0 +1,60 @@
+export declare enum EditionVerb {
+    Resolve = "resolve",
+    Seal = "seal",
+    Develop = "develop",
+    Artifact = "artifact",
+    Catalogue = "catalogue",
+    Index = "index",
+    Check = "check",
+    Why = "why",
+    VerifyPlatforms = "verify-platforms",
+    CheckoutSources = "checkout-sources",
+    RepinEvidenceTrust = "repin-evidence-trust",
+    VerifyEvidence = "verify-evidence",
+    Evidence = "evidence",
+    List = "list",
+    Locks = "locks",
+    SourceClosure = "source-closure",
+    ChartSet = "chart-set",
+    BiomeManifests = "biome-manifests"
+}
+export declare enum EditionChartSetOperation {
+    Resolve = "resolve",
+    SourceCommit = "source-commit"
+}
+export declare enum EditionEvidenceKind {
+    AssembleInput = "assemble-input",
+    Statement = "statement",
+    AssembleSet = "assemble-set",
+    CheckCommitted = "check-committed",
+    PlanRefresh = "plan-refresh",
+    Oci = "oci"
+}
+export declare enum EditionEvidenceStatement {
+    Producer = "producer",
+    Completeness = "completeness",
+    Entitlement = "entitlement"
+}
+export declare enum EditionIndexKind {
+    Biome = "biome",
+    PlatformService = "platform-service",
+    RuntimeImageSource = "runtime-image-source"
+}
+export declare enum EditionEntryLocation {
+    Library = "library",
+    Bundle = "bundle"
+}
+export declare const EDITION_BUNDLE_VERB_ENTRY: Readonly<Record<EditionVerb.VerifyEvidence, string>>;
+export declare const EDITION_VERB_ENTRY: Readonly<Record<Exclude<EditionVerb, EditionVerb.Index | EditionVerb.VerifyEvidence | EditionVerb.Evidence | EditionVerb.ChartSet>, string>>;
+export declare const EDITION_CHART_SET_ENTRY: Readonly<Record<EditionChartSetOperation, string>>;
+export declare const EDITION_EVIDENCE_STATEMENT_ENTRY: Readonly<Record<EditionEvidenceStatement, string>>;
+export declare const EDITION_EVIDENCE_ENTRY: Readonly<Record<Exclude<EditionEvidenceKind, EditionEvidenceKind.Statement>, string>>;
+export declare const EVIDENCE_ACCEPT_PHASE = "accept";
+export declare const EDITION_INDEX_ENTRY: Readonly<Record<EditionIndexKind, string>>;
+export interface EditionInvocation {
+    readonly location: EditionEntryLocation;
+    readonly entry: string;
+    readonly args: readonly string[];
+}
+export declare function resolveEditionInvocation(verb: EditionVerb, args: readonly string[]): EditionInvocation;
+//# sourceMappingURL=verb-map.d.ts.map

package/dist/runtime/edition/verb-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-map.d.ts","sourceRoot":"","sources":["../../../src/runtime/edition/verb-map.ts"],"names":[],"mappings":"AAKA,oBAAY,WAAW;IACrB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,eAAe,qBAAqB;IACpC,eAAe,qBAAqB;IACpC,kBAAkB,yBAAyB;IAC3C,cAAc,oBAAoB;IAClC,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,aAAa,mBAAmB;IAChC,QAAQ,cAAc;IACtB,cAAc,oBAAoB;CACnC;AAGD,oBAAY,wBAAwB;IAClC,OAAO,YAAY;IACnB,YAAY,kBAAkB;CAC/B;AAGD,oBAAY,mBAAmB;IAC7B,aAAa,mBAAmB;IAChC,SAAS,cAAc;IACvB,WAAW,iBAAiB;IAC5B,cAAc,oBAAoB;IAClC,WAAW,iBAAiB;IAC5B,GAAG,QAAQ;CACZ;AAGD,oBAAY,wBAAwB;IAClC,QAAQ,aAAa;IACrB,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;CAC5B;AAGD,oBAAY,gBAAgB;IAC1B,KAAK,UAAU;IACf,eAAe,qBAAqB;IACpC,kBAAkB,yBAAyB;CAC5C;AAGD,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAGD,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,CAAC,CAE1F,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,cAAc,GAAG,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAgBnI,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAGtF,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAI/F,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAQxH,CAAC;AAGF,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAE9C,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAI1E,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IAExC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAiDD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,iBAAiB,CAoBtG"}

package/dist/runtime/edition/verb-map.js

@@ -0,0 +1,146 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EDITION_INDEX_ENTRY = exports.EVIDENCE_ACCEPT_PHASE = exports.EDITION_EVIDENCE_ENTRY = exports.EDITION_EVIDENCE_STATEMENT_ENTRY = exports.EDITION_CHART_SET_ENTRY = exports.EDITION_VERB_ENTRY = exports.EDITION_BUNDLE_VERB_ENTRY = exports.EditionEntryLocation = exports.EditionIndexKind = exports.EditionEvidenceStatement = exports.EditionEvidenceKind = exports.EditionChartSetOperation = exports.EditionVerb = void 0;
+exports.resolveEditionInvocation = resolveEditionInvocation;
+var EditionVerb;
+(function (EditionVerb) {
+    EditionVerb["Resolve"] = "resolve";
+    EditionVerb["Seal"] = "seal";
+    EditionVerb["Develop"] = "develop";
+    EditionVerb["Artifact"] = "artifact";
+    EditionVerb["Catalogue"] = "catalogue";
+    EditionVerb["Index"] = "index";
+    EditionVerb["Check"] = "check";
+    EditionVerb["Why"] = "why";
+    EditionVerb["VerifyPlatforms"] = "verify-platforms";
+    EditionVerb["CheckoutSources"] = "checkout-sources";
+    EditionVerb["RepinEvidenceTrust"] = "repin-evidence-trust";
+    EditionVerb["VerifyEvidence"] = "verify-evidence";
+    EditionVerb["Evidence"] = "evidence";
+    EditionVerb["List"] = "list";
+    EditionVerb["Locks"] = "locks";
+    EditionVerb["SourceClosure"] = "source-closure";
+    EditionVerb["ChartSet"] = "chart-set";
+    EditionVerb["BiomeManifests"] = "biome-manifests";
+})(EditionVerb || (exports.EditionVerb = EditionVerb = {}));
+var EditionChartSetOperation;
+(function (EditionChartSetOperation) {
+    EditionChartSetOperation["Resolve"] = "resolve";
+    EditionChartSetOperation["SourceCommit"] = "source-commit";
+})(EditionChartSetOperation || (exports.EditionChartSetOperation = EditionChartSetOperation = {}));
+var EditionEvidenceKind;
+(function (EditionEvidenceKind) {
+    EditionEvidenceKind["AssembleInput"] = "assemble-input";
+    EditionEvidenceKind["Statement"] = "statement";
+    EditionEvidenceKind["AssembleSet"] = "assemble-set";
+    EditionEvidenceKind["CheckCommitted"] = "check-committed";
+    EditionEvidenceKind["PlanRefresh"] = "plan-refresh";
+    EditionEvidenceKind["Oci"] = "oci";
+})(EditionEvidenceKind || (exports.EditionEvidenceKind = EditionEvidenceKind = {}));
+var EditionEvidenceStatement;
+(function (EditionEvidenceStatement) {
+    EditionEvidenceStatement["Producer"] = "producer";
+    EditionEvidenceStatement["Completeness"] = "completeness";
+    EditionEvidenceStatement["Entitlement"] = "entitlement";
+})(EditionEvidenceStatement || (exports.EditionEvidenceStatement = EditionEvidenceStatement = {}));
+var EditionIndexKind;
+(function (EditionIndexKind) {
+    EditionIndexKind["Biome"] = "biome";
+    EditionIndexKind["PlatformService"] = "platform-service";
+    EditionIndexKind["RuntimeImageSource"] = "runtime-image-source";
+})(EditionIndexKind || (exports.EditionIndexKind = EditionIndexKind = {}));
+var EditionEntryLocation;
+(function (EditionEntryLocation) {
+    EditionEntryLocation["Library"] = "library";
+    EditionEntryLocation["Bundle"] = "bundle";
+})(EditionEntryLocation || (exports.EditionEntryLocation = EditionEntryLocation = {}));
+exports.EDITION_BUNDLE_VERB_ENTRY = {
+    [EditionVerb.VerifyEvidence]: 'verify-image-evidence.bundle.mjs',
+};
+exports.EDITION_VERB_ENTRY = {
+    [EditionVerb.Resolve]: 'resolve-edition.mjs',
+    [EditionVerb.Seal]: 'seal-image-digests.mjs',
+    [EditionVerb.Develop]: 'develop-edition.mjs',
+    [EditionVerb.Artifact]: 'release-edition-artifact.mjs',
+    [EditionVerb.Catalogue]: 'catalogue-edition.mjs',
+    [EditionVerb.Check]: 'dist-check.mjs',
+    [EditionVerb.Why]: 'why.mjs',
+    [EditionVerb.VerifyPlatforms]: 'verify-image-platforms.mjs',
+    [EditionVerb.CheckoutSources]: 'checkout-indexed-source-repositories.mjs',
+    [EditionVerb.RepinEvidenceTrust]: 'repin-evidence-trust.mjs',
+    [EditionVerb.List]: 'edition-list.mjs',
+    [EditionVerb.Locks]: 'edition-locks.mjs',
+    [EditionVerb.SourceClosure]: 'source-closure.mjs',
+    [EditionVerb.BiomeManifests]: 'edition-biome-manifests.mjs',
+};
+exports.EDITION_CHART_SET_ENTRY = {
+    [EditionChartSetOperation.Resolve]: 'resolve-chart-set.mjs',
+    [EditionChartSetOperation.SourceCommit]: 'chart-set-source-commit.mjs',
+};
+exports.EDITION_EVIDENCE_STATEMENT_ENTRY = {
+    [EditionEvidenceStatement.Producer]: 'produce-image-source-evidence.mjs',
+    [EditionEvidenceStatement.Completeness]: 'produce-distribution-completeness-evidence.mjs',
+    [EditionEvidenceStatement.Entitlement]: 'produce-image-delivery-entitlement-evidence.mjs',
+};
+exports.EDITION_EVIDENCE_ENTRY = {
+    [EditionEvidenceKind.AssembleInput]: 'assemble-producer-input.mjs',
+    [EditionEvidenceKind.AssembleSet]: exports.EDITION_EVIDENCE_STATEMENT_ENTRY[EditionEvidenceStatement.Completeness],
+    [EditionEvidenceKind.CheckCommitted]: 'check-committed-image-evidence.mjs',
+    [EditionEvidenceKind.PlanRefresh]: 'plan-image-evidence-refresh.mjs',
+    [EditionEvidenceKind.Oci]: 'oci-evidence-verbs.mjs',
+};
+exports.EVIDENCE_ACCEPT_PHASE = 'accept';
+exports.EDITION_INDEX_ENTRY = {
+    [EditionIndexKind.Biome]: 'build-biome-index.mjs',
+    [EditionIndexKind.PlatformService]: 'build-platform-service-index.mjs',
+    [EditionIndexKind.RuntimeImageSource]: 'build-runtime-image-source-index.mjs',
+};
+const isIndexKind = (value) => Object.values(EditionIndexKind).some((kind) => kind === value);
+const isEvidenceKind = (value) => Object.values(EditionEvidenceKind).some((kind) => kind === value);
+const isEvidenceStatement = (value) => Object.values(EditionEvidenceStatement).some((statement) => statement === value);
+const named = (value) => (value === undefined ? 'nothing' : `"${value}"`);
+function resolveEvidenceInvocation(args) {
+    const [kind, ...rest] = args;
+    if (!isEvidenceKind(kind)) {
+        throw new Error(`xema edition evidence needs one of ${Object.values(EditionEvidenceKind).join(', ')} (got ${named(kind)})`);
+    }
+    if (kind === EditionEvidenceKind.AssembleSet) {
+        return { location: EditionEntryLocation.Library, entry: exports.EDITION_EVIDENCE_ENTRY[kind], args: [exports.EVIDENCE_ACCEPT_PHASE, ...rest] };
+    }
+    if (kind !== EditionEvidenceKind.Statement) {
+        return { location: EditionEntryLocation.Library, entry: exports.EDITION_EVIDENCE_ENTRY[kind], args: rest };
+    }
+    const [statement, ...statementArgs] = rest;
+    if (!isEvidenceStatement(statement)) {
+        throw new Error(`xema edition evidence statement needs one of ${Object.values(EditionEvidenceStatement).join(', ')} (got ${named(statement)})`);
+    }
+    return { location: EditionEntryLocation.Library, entry: exports.EDITION_EVIDENCE_STATEMENT_ENTRY[statement], args: statementArgs };
+}
+const isChartSetOperation = (value) => Object.values(EditionChartSetOperation).some((operation) => operation === value);
+function resolveChartSetInvocation(args) {
+    const [operation, ...rest] = args;
+    if (!isChartSetOperation(operation)) {
+        throw new Error(`xema edition chart-set needs one of ${Object.values(EditionChartSetOperation).join(', ')} (got ${named(operation)})`);
+    }
+    return { location: EditionEntryLocation.Library, entry: exports.EDITION_CHART_SET_ENTRY[operation], args: rest };
+}
+function resolveEditionInvocation(verb, args) {
+    if (verb === EditionVerb.VerifyEvidence) {
+        return { location: EditionEntryLocation.Bundle, entry: exports.EDITION_BUNDLE_VERB_ENTRY[verb], args };
+    }
+    if (verb === EditionVerb.Evidence) {
+        return resolveEvidenceInvocation(args);
+    }
+    if (verb === EditionVerb.ChartSet) {
+        return resolveChartSetInvocation(args);
+    }
+    if (verb !== EditionVerb.Index) {
+        return { location: EditionEntryLocation.Library, entry: exports.EDITION_VERB_ENTRY[verb], args };
+    }
+    const [kind, ...rest] = args;
+    if (!isIndexKind(kind)) {
+        throw new Error(`xema edition index needs one of ${Object.values(EditionIndexKind).join(', ')} (got ${kind === undefined ? 'nothing' : `"${kind}"`})`);
+    }
+    return { location: EditionEntryLocation.Library, entry: exports.EDITION_INDEX_ENTRY[kind], args: rest };
+}
+//# sourceMappingURL=verb-map.js.map

package/dist/runtime/edition/verb-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verb-map.js","sourceRoot":"","sources":["../../../src/runtime/edition/verb-map.ts"],"names":[],"mappings":";;;AA4KA,4DAoBC;AA3LD,IAAY,WAmBX;AAnBD,WAAY,WAAW;IACrB,kCAAmB,CAAA;IACnB,4BAAa,CAAA;IACb,kCAAmB,CAAA;IACnB,oCAAqB,CAAA;IACrB,sCAAuB,CAAA;IACvB,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,0BAAW,CAAA;IACX,mDAAoC,CAAA;IACpC,mDAAoC,CAAA;IACpC,0DAA2C,CAAA;IAC3C,iDAAkC,CAAA;IAClC,oCAAqB,CAAA;IACrB,4BAAa,CAAA;IACb,8BAAe,CAAA;IACf,+CAAgC,CAAA;IAChC,qCAAsB,CAAA;IACtB,iDAAkC,CAAA;AACpC,CAAC,EAnBW,WAAW,2BAAX,WAAW,QAmBtB;AAGD,IAAY,wBAGX;AAHD,WAAY,wBAAwB;IAClC,+CAAmB,CAAA;IACnB,0DAA8B,CAAA;AAChC,CAAC,EAHW,wBAAwB,wCAAxB,wBAAwB,QAGnC;AAGD,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,uDAAgC,CAAA;IAChC,8CAAuB,CAAA;IACvB,mDAA4B,CAAA;IAC5B,yDAAkC,CAAA;IAClC,mDAA4B,CAAA;IAC5B,kCAAW,CAAA;AACb,CAAC,EAPW,mBAAmB,mCAAnB,mBAAmB,QAO9B;AAGD,IAAY,wBAIX;AAJD,WAAY,wBAAwB;IAClC,iDAAqB,CAAA;IACrB,yDAA6B,CAAA;IAC7B,uDAA2B,CAAA;AAC7B,CAAC,EAJW,wBAAwB,wCAAxB,wBAAwB,QAInC;AAGD,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,mCAAe,CAAA;IACf,wDAAoC,CAAA;IACpC,+DAA2C,CAAA;AAC7C,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAGD,IAAY,oBAGX;AAHD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,yCAAiB,CAAA;AACnB,CAAC,EAHW,oBAAoB,oCAApB,oBAAoB,QAG/B;AAGY,QAAA,yBAAyB,GAAyD;IAC7F,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,kCAAkC;CACjE,CAAC;AAEW,QAAA,kBAAkB,GAE3B;IACF,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB;IAC5C,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,wBAAwB;IAC5C,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB;IAC5C,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,8BAA8B;IACtD,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,uBAAuB;IAChD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,gBAAgB;IACrC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS;IAC5B,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,4BAA4B;IAC3D,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,0CAA0C;IACzE,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,0BAA0B;IAC5D,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,kBAAkB;IACtC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,mBAAmB;IACxC,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,oBAAoB;IACjD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,6BAA6B;CAC5D,CAAC;AAEW,QAAA,uBAAuB,GAAuD;IACzF,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,uBAAuB;IAC3D,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAE,6BAA6B;CACvE,CAAC;AAEW,QAAA,gCAAgC,GAAuD;IAClG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,mCAAmC;IACxE,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAE,gDAAgD;IACzF,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,iDAAiD;CAC1F,CAAC;AAEW,QAAA,sBAAsB,GAA0F;IAC3H,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,6BAA6B;IAElE,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,wCAAgC,CAAC,wBAAwB,CAAC,YAAY,CAAC;IAC1G,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE,oCAAoC;IAC1E,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,iCAAiC;IAEpE,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,wBAAwB;CACpD,CAAC;AAGW,QAAA,qBAAqB,GAAG,QAAQ,CAAC;AAEjC,QAAA,mBAAmB,GAA+C;IAC7E,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,uBAAuB;IACjD,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,kCAAkC;IACtE,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,sCAAsC;CAC9E,CAAC;AAWF,MAAM,WAAW,GAAG,CAAC,KAAyB,EAA6B,EAAE,CAC3E,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;AAEjE,MAAM,cAAc,GAAG,CAAC,KAAyB,EAAgC,EAAE,CACjF,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;AAEpE,MAAM,mBAAmB,GAAG,CAAC,KAAyB,EAAqC,EAAE,CAC3F,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;AAEnF,MAAM,KAAK,GAAG,CAAC,KAAyB,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAGtG,SAAS,yBAAyB,CAAC,IAAuB;IACxD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,8BAAsB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,6BAAqB,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACjI,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,CAAC,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,8BAAsB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC;IAC3C,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,gDAAgD,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,SAAS,CAAC,GAAG,CAC/H,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,wCAAgC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC7H,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,KAAyB,EAAqC,EAAE,CAC3F,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;AAGnF,SAAS,yBAAyB,CAAC,IAAuB;IACxD,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,uCAAuC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,SAAS,CAAC,GAAG,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,+BAAuB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3G,CAAC;AAGD,SAAgB,wBAAwB,CAAC,IAAiB,EAAE,IAAuB;IACjF,IAAI,IAAI,KAAK,WAAW,CAAC,cAAc,EAAE,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAyB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,0BAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,CACtI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,2BAAmB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClG,CAAC"}

package/dist/runtime/env-seeder.d.ts

@@ -1,5 +1,6 @@
 import { Substrate, type XemaConfig } from './config/schema';
 import { type ResolvedSecrets } from './secrets/resolver';
+import type { LocalCustodyBinding } from './custody/local-custody';
 import type { InfraPlan } from './infra/infra-plan';
 import type { RosterEntry } from './roster';
 import type { LocalInfrastructureCredentials } from './secrets/managed-local-store';
@@ -19,6 +20,7 @@ export interface EnvSeederContext {
     readonly secrets?: ResolvedSecrets;
     readonly managedCredentials?: LocalInfrastructureCredentials;
     readonly installationId: string;
+    readonly custody?: LocalCustodyBinding;
 }
 export declare function seedEnv(ctx: EnvSeederContext): SeededEnv;
 //# sourceMappingURL=env-seeder.d.ts.map

package/dist/runtime/env-seeder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,SAAS,EAET,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AASzB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAapF,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAQ9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAOtC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAExC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IAEnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IAE7D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AA8KD,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAgYxD"}
+{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,SAAS,EAET,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAgBzB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAapF,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAQ9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAOtC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAExC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IAEnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;IAE7D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAMhC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACxC;AAgLD,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAiZxD"}

package/dist/runtime/env-seeder.js

@@ -7,6 +7,7 @@ const kernel_state_runtime_1 = require("@xemahq/kernel-state-runtime");
 const service_registry_nest_1 = require("@xemahq/service-registry-nest");
 const browser_origins_1 = require("./browser-origins");
 const schema_1 = require("./config/schema");
+const openbao_local_constants_1 = require("./custody/openbao-local-constants");
 const infra_catalog_1 = require("./infra/infra-catalog");
 const keycloak_realm_1 = require("./infra/keycloak-realm");
 const postgres_endpoint_1 = require("./infra/postgres-endpoint");
@@ -22,7 +23,6 @@ const IDENTITY_API_INTERNAL_TOKEN_VAR = 'IDENTITY_API_INTERNAL_TOKEN';
 const MANAGED_OBJECT_STORE_REGION = 'us-east-1';
 const OBJECT_STORE_BLOB_BACKEND = 's3';
 const OBJECT_STORE_CONTAINER_PREFIX = 'xema';
-const LOCAL_CUSTODY_BACKEND = 'secrets_api';
 const LOCAL_PTY_PROVIDER = 'local';
 const LOCAL_MATERIALIZER_MODE = 'dev_file';
 const PLATFORM_KERNEL_VERSION = '1.0.0';
@@ -46,7 +46,11 @@ const SUBSTRATE_WORKLOAD_BINDING = {
 };
 const LAUNCHER_OWNED_ENV = new Set([
     'BIOME_SANDBOX_PTY_PROVIDER',
-    'CUSTODY_BACKEND',
+    'CUSTODY_PROVIDER_REF',
+    'OPENBAO_ADDRESS',
+    'OPENBAO_AUTH_METHOD',
+    'OPENBAO_MOUNT_PATH',
+    'OPENBAO_TOKEN',
     'K8S_ALLOWED_IMAGE_REGISTRIES',
     'K8S_DEFAULT_NAMESPACE',
     'OAUTH_CONNECT_FRONTEND_ALLOWLIST',
@@ -193,7 +197,6 @@ function seedEnv(ctx) {
         }
     }
     if (ctx.substrate !== schema_1.Substrate.Helm) {
-        base.CUSTODY_BACKEND = LOCAL_CUSTODY_BACKEND;
         base.BIOME_SANDBOX_PTY_PROVIDER = LOCAL_PTY_PROVIDER;
         base.RUNNER_CREDENTIAL_MATERIALIZER_MODE = LOCAL_MATERIALIZER_MODE;
         base.XEMA_SHELL_WS_ENABLED = 'true';
@@ -251,6 +254,18 @@ function seedEnv(ctx) {
                     overlay[(0, generated_platform_secrets_1.identityRealmInternalTokenVar)(realm)] = token;
                 }
             }
+            if (entry.name === openbao_local_constants_1.CREDENTIAL_BROKER_SERVICE_NAME &&
+                ctx.substrate !== schema_1.Substrate.Helm) {
+                if (ctx.custody === undefined) {
+                    throw new Error(`${openbao_local_constants_1.CREDENTIAL_BROKER_SERVICE_NAME} is in the roster but no local custody ` +
+                        'provider was provisioned; it refuses to boot without CUSTODY_PROVIDER_REF.');
+                }
+                overlay.CUSTODY_PROVIDER_REF = openbao_local_constants_1.CustodyProviderRef.OpenBao;
+                overlay.OPENBAO_ADDRESS = (0, openbao_local_constants_1.localOpenBaoAddress)(ctx.substrate === schema_1.Substrate.Container);
+                overlay.OPENBAO_AUTH_METHOD = openbao_local_constants_1.OpenBaoAuthMethod.Token;
+                overlay.OPENBAO_TOKEN = ctx.custody.brokerToken;
+                overlay.OPENBAO_MOUNT_PATH = openbao_local_constants_1.LOCAL_OPENBAO_MOUNT_PATH;
+            }
             return overlay;
         },
     };

package/dist/runtime/env-seeder.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AAqQA,0BAgYC;AAroBD,6DAAiE;AACjE,2EAAwE;AACxE,uEAAkE;AAClE,yEAGuC;AAEvC,uDAA0D;AAC1D,4CAMyB;AACzB,yDAG+B;AAC/B,2DAA8D;AAC9D,iEAAoE;AACpE,mCAA2D;AAC3D,qFAAqF;AACrF,iDAI4B;AAC5B,6DAG8B;AAC9B,sDAA+C;AAwE/C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAMzC,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAEjD,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAatE,MAAM,2BAA2B,GAAG,WAAW,CAAC;AAEhD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAS7C,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAE5C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAE3C,MAAM,uBAAuB,GAAG,OAAO,CAAC;AASxC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AACjE,MAAM,iCAAiC,GAAG,sBAAsB,CAAC;AACjE,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAC7D,MAAM,qCAAqC,GAAG,sBAAsB,CAAC;AACrE,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;AAG7D,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAElD,MAAM,sBAAsB,GAAG,IAAI,CAAC;AA4BpC,MAAM,0BAA0B,GAE5B;IACF,CAAC,kBAAS,CAAC,SAAS,CAAC,EAAE;QACrB,gBAAgB,EAAE,QAAQ;QAC1B,cAAc,EAAE,qCAAiB,CAAC,WAAW;KAC9C;IAID,CAAC,kBAAS,CAAC,MAAM,CAAC,EAAE;QAClB,gBAAgB,EAAE,OAAO;QACzB,cAAc,EAAE,qCAAiB,CAAC,WAAW;KAC9C;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,4BAA4B;IAC5B,iBAAiB;IACjB,8BAA8B;IAC9B,uBAAuB;IACvB,kCAAkC;IAClC,yBAAyB;IACzB,qCAAqC;IACrC,wCAAwC;IACxC,oCAAoC;IACpC,0CAA0C;IAC1C,oCAAoC;IACpC,sCAAsC;IACtC,sCAAsC;IACtC,uBAAuB;IACvB,uBAAuB;IACvB,sBAAsB;IACtB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,oBAAoB;IACpB,wBAAwB;IACxB,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,MAAM;IACN,WAAW;IACX,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,8BAAiB;IACjB,aAAa;IACb,4BAA4B;IAC5B,iBAAiB;IACjB,4BAA4B;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,qBAAqB;IACrB,2BAA2B;IAC3B,wDAAgC;CACjC,CAAC,CAAC;AAEH,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAI7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;IAEhE,MAAM,mBAAmB,GAAG,IAAA,4BAAiB,EAAC,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,IAAI;QAC3D,kBAAS,CAAC,OAAO,EACjB,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,gEAAgE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAMhE,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,gBAAgB,GAAG,WAAW,CACjC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAC3D,CAAC;IAIF,IAAI,CAAC,kBAAkB,GAAG,IAAA,qDAAgC,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAI/E,IAAI,CAAC,8BAAiB,CAAC,GAAG,IAAA,gDAA2B,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAa1E,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC;QACpC,kDAA0B,CAAC,WAAW,CAAC;IAGzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,qCAAoB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAW5B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,CAAC,KAAK,CAAC,EAAE;YACP,QAAQ,EAAE,uBAAuB;YACjC,mBAAmB,EAAE,CAAC,wBAAwB,CAAC;SAChD;KACF,CAAC,CAAC;IAOH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,OAAO,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC;SAC/B,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,WAAW,KAAK,EAAE,CAAC;SACpD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAO1B,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAID,IAAI,CAAC,kBAAkB,GAAG,wCAAwB,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC,QAAQ,CAAC;IACxD,CAAC;IAMD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,cAAc,GAClB,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO;gBACrC,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,eAAe;gBAC3D,CAAC,CAAC,gBAAgB,CAAC;YACvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC;YACpC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;YACzC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,sBAAsB,GAAG,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;YACnE,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YACxD,IAAI,CAAC,oBAAoB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAC;YAC7C,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACpC,CAAC;QAYD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAKnC,IAAI,CAAC,oBAAoB,GAAG,yBAAyB,CAAC;YACtD,IAAI,CAAC,qBAAqB,GAAG,6BAA6B,CAAC;QAC7D,CAAC;IACH,CAAC;IAYD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QAKrC,IAAI,CAAC,eAAe,GAAG,qBAAqB,CAAC;QAI7C,IAAI,CAAC,0BAA0B,GAAG,kBAAkB,CAAC;QAIrD,IAAI,CAAC,mCAAmC,GAAG,uBAAuB,CAAC;QACnE,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC;QAMpC,IAAI,CAAC,qBAAqB,GAAG,aAAa,CAAC;QAC3C,IAAI,CAAC,4BAA4B,GAAG,sBAAsB,CAAC;IAC7D,CAAC;IAKD,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;IAIvD,IAAI,CAAC,gCAAgC,GAAG,uCAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAiBxE,IAAI,CAAC,kCAAkC,GAAG,+BAA+B,CAAC;IAC1E,IAAI,CAAC,oCAAoC,GAAG,iCAAiC,CAAC;IAC9E,IAAI,CAAC,kCAAkC,GAAG,+BAA+B,CAAC;IAC1E,IAAI,CAAC,wCAAwC;QAC3C,qCAAqC,CAAC;IAKxC,IAAI,CAAC,sCAAsC;QACzC,mCAAmC,CAAC;IAItC,IAAI,CAAC,oCAAoC,GAAG,iCAAiC,CAAC;IAO9E,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;IAQhC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;IAC7B,CAAC;IAQD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAC5C,CAAC;IAQD,IAAI,CAAC,0BAA0B,GAAG,IAAA,mCAA0B,EAC1D,GAAG,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC;IAQF,IAAI,CAAC,2BAA2B;QAC9B,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACnC,CAAC,CAAC,wCAAgC;YAClC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAG/B,IAAI,CAAC,6BAA6B,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAKhE,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,0BAA0B,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAC5D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,cAAc,CAAC;IACjD,CAAC;IAOD,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;YAeD,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAA,0DAA6B,EAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;gBACxD,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB,CAAC,GAAqB;IAI7C,OAAO,IAAA,2CAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC;AACvJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAqB;IAIhD,MAAM,QAAQ,GAAG,IAAA,sCAA2B,EAC1C,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CACzB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IACzD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CACf,GAAqB,EACrB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CACjB,GAAqB,EACrB,QAAgC;IAEhC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"env-seeder.js","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":";;AAqRA,0BAiZC;AAtqBD,6DAAiE;AACjE,2EAAwE;AACxE,uEAAkE;AAClE,yEAGuC;AAEvC,uDAA0D;AAC1D,4CAMyB;AACzB,+EAM2C;AAC3C,yDAG+B;AAC/B,2DAA8D;AAC9D,iEAAoE;AACpE,mCAA2D;AAC3D,qFAAqF;AACrF,iDAI4B;AAC5B,6DAG8B;AAC9B,sDAA+C;AA+E/C,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAC9C,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAMzC,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAEjD,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAatE,MAAM,2BAA2B,GAAG,WAAW,CAAC;AAEhD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAS7C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAE3C,MAAM,uBAAuB,GAAG,OAAO,CAAC;AASxC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AACjE,MAAM,iCAAiC,GAAG,sBAAsB,CAAC;AACjE,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAC7D,MAAM,qCAAqC,GAAG,sBAAsB,CAAC;AACrE,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;AAG7D,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAElD,MAAM,sBAAsB,GAAG,IAAI,CAAC;AA4BpC,MAAM,0BAA0B,GAE5B;IACF,CAAC,kBAAS,CAAC,SAAS,CAAC,EAAE;QACrB,gBAAgB,EAAE,QAAQ;QAC1B,cAAc,EAAE,qCAAiB,CAAC,WAAW;KAC9C;IAID,CAAC,kBAAS,CAAC,MAAM,CAAC,EAAE;QAClB,gBAAgB,EAAE,OAAO;QACzB,cAAc,EAAE,qCAAiB,CAAC,WAAW;KAC9C;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,4BAA4B;IAC5B,sBAAsB;IACtB,iBAAiB;IACjB,qBAAqB;IACrB,oBAAoB;IACpB,eAAe;IACf,8BAA8B;IAC9B,uBAAuB;IACvB,kCAAkC;IAClC,yBAAyB;IACzB,qCAAqC;IACrC,wCAAwC;IACxC,oCAAoC;IACpC,0CAA0C;IAC1C,oCAAoC;IACpC,sCAAsC;IACtC,sCAAsC;IACtC,uBAAuB;IACvB,uBAAuB;IACvB,sBAAsB;IACtB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,oBAAoB;IACpB,wBAAwB;IACxB,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,MAAM;IACN,WAAW;IACX,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,oBAAoB;IACpB,8BAAiB;IACjB,aAAa;IACb,4BAA4B;IAC5B,iBAAiB;IACjB,4BAA4B;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,qBAAqB;IACrB,2BAA2B;IAC3B,wDAAgC;CACjC,CAAC,CAAC;AAEH,SAAgB,OAAO,CAAC,GAAqB;IAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAI7D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;IAEhE,MAAM,mBAAmB,GAAG,IAAA,4BAAiB,EAAC,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,IAAI;QAC3D,kBAAS,CAAC,OAAO,EACjB,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC5C,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,gEAAgE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAMhE,IAAI,CAAC,SAAS,GAAG,WAAW,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACnG,IAAI,CAAC,gBAAgB,GAAG,WAAW,CACjC,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAC3D,CAAC;IAIF,IAAI,CAAC,kBAAkB,GAAG,IAAA,qDAAgC,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAI/E,IAAI,CAAC,8BAAiB,CAAC,GAAG,IAAA,gDAA2B,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAa1E,MAAM,YAAY,GAChB,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,WAAW,GAAG,UAAU,YAAY,gBAAgB,CAAC;IAM1D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACpE,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,yBAAyB,GAAG,yCAAkB,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,wDAAgC,CAAC;QACpC,kDAA0B,CAAC,WAAW,CAAC;IAGzC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,qCAAoB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAW5B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,CAAC,KAAK,CAAC,EAAE;YACP,QAAQ,EAAE,uBAAuB;YACjC,mBAAmB,EAAE,CAAC,wBAAwB,CAAC;SAChD;KACF,CAAC,CAAC;IAOH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,OAAO,GAAG,6BAAa,CAAC,uBAAc,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC;SAC/B,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,WAAW,KAAK,EAAE,CAAC;SACpD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,kBAAkB,GAAG,GAAG,KAAK,WAAW,KAAK,gCAAgC,CAAC;IAKnF,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAO1B,IACE,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,OAAO;QACnC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EACrC,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC;QAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAID,IAAI,CAAC,kBAAkB,GAAG,wCAAwB,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC,QAAQ,CAAC;IACxD,CAAC;IAMD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,cAAc,GAClB,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO;gBACrC,CAAC,CAAC,6BAAa,CAAC,uBAAc,CAAC,WAAW,CAAC,CAAC,eAAe;gBAC3D,CAAC,CAAC,gBAAgB,CAAC;YACvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC;YACpC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC;YACzC,IAAI,CAAC,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,WAAW,EAAE,IAAI,KAAK,kBAAS,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,sBAAsB,GAAG,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC;YACnE,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YACxD,IAAI,CAAC,oBAAoB,GAAG,sBAAsB,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAC;YAC7C,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACpC,CAAC;QAYD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAKnC,IAAI,CAAC,oBAAoB,GAAG,yBAAyB,CAAC;YACtD,IAAI,CAAC,qBAAqB,GAAG,6BAA6B,CAAC;QAC7D,CAAC;IACH,CAAC;IAYD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QAIrC,IAAI,CAAC,0BAA0B,GAAG,kBAAkB,CAAC;QAIrD,IAAI,CAAC,mCAAmC,GAAG,uBAAuB,CAAC;QACnE,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC;QAMpC,IAAI,CAAC,qBAAqB,GAAG,aAAa,CAAC;QAC3C,IAAI,CAAC,4BAA4B,GAAG,sBAAsB,CAAC;IAC7D,CAAC;IAKD,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;IAIvD,IAAI,CAAC,gCAAgC,GAAG,uCAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAiBxE,IAAI,CAAC,kCAAkC,GAAG,+BAA+B,CAAC;IAC1E,IAAI,CAAC,oCAAoC,GAAG,iCAAiC,CAAC;IAC9E,IAAI,CAAC,kCAAkC,GAAG,+BAA+B,CAAC;IAC1E,IAAI,CAAC,wCAAwC;QAC3C,qCAAqC,CAAC;IAKxC,IAAI,CAAC,sCAAsC;QACzC,mCAAmC,CAAC;IAItC,IAAI,CAAC,oCAAoC,GAAG,iCAAiC,CAAC;IAO9E,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;IAQhC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,uBAAc,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;IAC7B,CAAC;IAQD,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC;IAC5C,CAAC;IAQD,IAAI,CAAC,0BAA0B,GAAG,IAAA,mCAA0B,EAC1D,GAAG,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC;IAQF,IAAI,CAAC,2BAA2B;QAC9B,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS;YACnC,CAAC,CAAC,wCAAgC;YAClC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAG/B,IAAI,CAAC,6BAA6B,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAKhE,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,0BAA0B,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAC5D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,cAAc,CAAC;IACjD,CAAC;IAOD,OAAO;QACL,IAAI;QACJ,UAAU,CAAC,KAAkB;YAC3B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,CAAC,kBAAkB,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChF,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;YAeD,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAA,0DAA6B,EAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;gBACxD,CAAC;YACH,CAAC;YACD,IACE,KAAK,CAAC,IAAI,KAAK,wDAA8B;gBAC7C,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAChC,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,GAAG,wDAA8B,yCAAyC;wBACxE,4EAA4E,CAC/E,CAAC;gBACJ,CAAC;gBAKD,OAAO,CAAC,oBAAoB,GAAG,4CAAkB,CAAC,OAAO,CAAC;gBAC1D,OAAO,CAAC,eAAe,GAAG,IAAA,6CAAmB,EAC3C,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,CACtC,CAAC;gBACF,OAAO,CAAC,mBAAmB,GAAG,2CAAiB,CAAC,KAAK,CAAC;gBACtD,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;gBAChD,OAAO,CAAC,kBAAkB,GAAG,kDAAwB,CAAC;YACxD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB,CAAC,GAAqB;IAI7C,OAAO,IAAA,2CAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC;AAGD,SAAS,WAAW,CAAC,GAAqB,EAAE,WAAmB;IAC7D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;IAClD,OAAO,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC;AACvJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAqB;IAIhD,MAAM,QAAQ,GAAG,IAAA,sCAA2B,EAC1C,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CACzB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IACzD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CACf,GAAqB,EACrB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CACjB,GAAqB,EACrB,QAAgC;IAEhC,MAAM,IAAI,GAAG,6BAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,UAAU,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,oBAAoB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/runtime/launch.d.ts

@@ -7,7 +7,7 @@ import type { HelmReleaseRendering } from './installation/helm-release';
 export interface LaunchOptions {
     readonly config: XemaConfig;
     readonly includeWeb: boolean;
-    readonly installationIdentity?: string;
+    readonly installationIdentity: string;
     readonly installationId?: string;
     readonly lockPathOverride?: string | undefined;
     readonly bootGraphPathOverride?: string | undefined;
@@ -48,6 +48,7 @@ export interface LaunchPlan {
 export declare function resolveLaunchPlan(opts: LaunchOptions): LaunchPlan;
 export declare function unionIncludeServices(include: RosterInclude, services: readonly string[]): RosterInclude;
 export declare function launch(opts: LaunchOptions, preResolved?: LaunchPlan): Promise<LaunchHandle>;
+export declare function requireInstallationIdentity(opts: LaunchOptions): string;
 export declare function buildSelection(config: XemaConfig, includeWeb: boolean): RosterSelection;
 export declare function normalizeInclude(include: 'all' | 'default' | 'minimal' | readonly string[], features: readonly string[]): RosterInclude;
 export declare function splitIncludeTokens(tokens: readonly string[]): {

package/dist/runtime/launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,SAAS,EACT,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYtD,OAAO,EAOL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AA6BlB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAGL,WAAW,EACZ,MAAM,SAAS,CAAC;AAIjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAexE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAE7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAEvC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQ3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAU3B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAQ3C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAO5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAE/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAM9B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3F,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAEpD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM/C,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAElD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAM1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AASD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAqIjE;AAQD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAcf;AAqED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,aAAa,EACnB,WAAW,CAAC,EAAE,UAAU,GACvB,OAAO,CAAC,YAAY,CAAC,CA8CvB;AA4dD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,OAAO,GAClB,eAAe,CAQjB;AAcD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,EAC1D,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAsBf;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAWA"}
+{"version":3,"file":"launch.d.ts","sourceRoot":"","sources":["../../src/runtime/launch.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,SAAS,EACT,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYtD,OAAO,EAOL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AA6BlB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAGL,WAAW,EACZ,MAAM,SAAS,CAAC;AAIjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAexE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAK7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAQ3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAU3B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAQ3C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAO5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAE/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAM9B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3F,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAEpD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM/C,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAElD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAM1C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAM9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AASD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAqIjE;AAQD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAcf;AAqED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,aAAa,EACnB,WAAW,CAAC,EAAE,UAAU,GACvB,OAAO,CAAC,YAAY,CAAC,CA+CvB;AAgdD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAWvE;AAkCD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,OAAO,GAClB,eAAe,CAQjB;AAcD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,EAC1D,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,aAAa,CAsBf;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG;IAC7D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAWA"}

package/dist/runtime/launch.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveLaunchPlan = resolveLaunchPlan;
 exports.unionIncludeServices = unionIncludeServices;
 exports.launch = launch;
+exports.requireInstallationIdentity = requireInstallationIdentity;
 exports.buildSelection = buildSelection;
 exports.normalizeInclude = normalizeInclude;
 exports.splitIncludeTokens = splitIncludeTokens;
@@ -15,6 +16,8 @@ const backing_registration_1 = require("./backing-registration");
 const boot_graph_loader_1 = require("./boot-graph-loader");
 const cleanup_1 = require("./cleanup");
 const schema_1 = require("./config/schema");
+const local_custody_1 = require("./custody/local-custody");
+const openbao_local_constants_1 = require("./custody/openbao-local-constants");
 const infra_catalog_1 = require("./infra/infra-catalog");
 const infra_plan_1 = require("./infra/infra-plan");
 const infra_runner_1 = require("./infra/infra-runner");
@@ -196,11 +199,12 @@ function collectNativeServicePaths() {
 }
 async function launch(opts, preResolved) {
     const log = opts.log ?? (() => undefined);
+    const installationIdentity = requireInstallationIdentity(opts);
     (0, resolver_1.assertSecretMaterializationSupported)(opts.config, opts.config.app.substrate);
     const declared = await new resolver_1.SecretResolver({
-        cwd: secretResolutionDirectory(opts.installationIdentity),
+        cwd: secretResolutionDirectory(installationIdentity),
     }).resolve(opts.config);
-    const secrets = await (0, generated_platform_secrets_1.withGeneratedPlatformSecrets)(declared, opts.installationIdentity ?? process.cwd());
+    const secrets = await (0, generated_platform_secrets_1.withGeneratedPlatformSecrets)(declared, installationIdentity);
     const plan = preResolved ?? resolveLaunchPlan(opts);
     for (const warning of plan.infraWarnings) {
         log(`WARN  ${warning}`);
@@ -219,9 +223,10 @@ async function executeLaunchPlan(plan, opts, secrets) {
     const { config } = opts;
     const log = opts.log ?? (() => undefined);
     const { substrate, roster, waves, ports, infra } = plan;
+    const installationIdentity = requireInstallationIdentity(opts);
     const installationId = opts.installationId ??
         `local-${(0, node_crypto_1.createHash)('sha256')
-            .update(opts.installationIdentity ?? process.cwd())
+            .update(installationIdentity)
             .digest('hex')
             .slice(0, 20)}`;
     const planHash = opts.planHash ?? (0, node_crypto_1.randomUUID)();
@@ -238,7 +243,7 @@ async function executeLaunchPlan(plan, opts, secrets) {
     const usesManagedLocalCredentials = managesPostgres || managesObjectStore || managesKeycloak;
     const credentialStore = usesManagedLocalCredentials
         ? new managed_local_store_1.ManagedLocalCredentialStore({
-            installationIdentity: opts.installationIdentity ?? process.cwd(),
+            installationIdentity,
         })
         : undefined;
     if (substrate === schema_1.Substrate.Container && usesManagedLocalCredentials) {
@@ -312,6 +317,17 @@ async function executeLaunchPlan(plan, opts, secrets) {
         await infraRunner.bootstrap(infra, roster);
         log('infra    : bootstrapped (per-service databases, object-store buckets)');
     }
+    const custody = substrate !== schema_1.Substrate.Helm &&
+        roster.some((service) => service.name === openbao_local_constants_1.CREDENTIAL_BROKER_SERVICE_NAME)
+        ? await (0, local_custody_1.provisionLocalCustody)({
+            network: NETWORK,
+            installationId,
+            installationIdentity,
+        })
+        : undefined;
+    if (custody !== undefined) {
+        log('custody  : local OpenBao ready (initialised, unsealed, broker token minted)');
+    }
     const runner = selectRunner(plan, opts);
     if (plan.substrate === schema_1.Substrate.Helm) {
         if (!(runner instanceof helm_runner_1.HelmRunner)) {
@@ -342,6 +358,7 @@ async function executeLaunchPlan(plan, opts, secrets) {
         executionId,
         secrets,
         ...(managedCredentials !== undefined ? { managedCredentials } : {}),
+        ...(custody !== undefined ? { custody } : {}),
         containerPort: CONTAINER_PORT,
         ...(opts.onEvent ? { onEvent: opts.onEvent } : {}),
     });
@@ -477,10 +494,17 @@ function nativeBackingCredentials(env, required) {
         ...(objectStore !== undefined ? { objectStore } : {}),
     };
 }
+function requireInstallationIdentity(opts) {
+    const identity = opts
+        .installationIdentity;
+    if (identity === undefined || identity.length === 0) {
+        throw new Error('A launch needs an installation identity and none was given. It is the ' +
+            'canonical path of the loaded config: pass `--config <path>` or run ' +
+            'from a directory holding xema.config.yaml.');
+    }
+    return identity;
+}
 function secretResolutionDirectory(installationIdentity) {
-    if (installationIdentity === undefined) {
-        return process.cwd();
-    }
     return (0, node_fs_1.statSync)(installationIdentity).isDirectory()
         ? installationIdentity
         : (0, node_path_1.dirname)(installationIdentity);