@xemahq/xema 0.31.1 → 0.31.2

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -2203,211 +2203,211 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:bbeac7ff01376cb89ed2140526d4795d8e559b3f01612b404a701f19aaa24c6a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-artifact.mjs",
       "sha256": "sha256:161f522eb39e3db705bc709f8512988dd3e6752851d972521354eeccffd8075d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-chart-set.mjs",
       "sha256": "sha256:fbda500315d45e35eb974f4701bbf36729c3b642a5d735bc1b07085c91d25b23"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:e3997bd9a0082e02d01760868b2a4f41ed3081e904126b30fdf86e7938dc6137"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:71ae51028847ab3430ffec9b229b0516a7705b75a6de1fcfa665f5e1abf8e9bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:c575e96b70bda82899931eb0b18567988e2e13e664fa498bcbef96b571dcabb4"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:aa1a05f1728813a7bdb1e02d9305e9adf641d695e6767305210c67a1d81b38a7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:2940a0ee8662970722aa2618a1635f8d5b4f5e54b85f09667f71ccf7c2c81b03"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:f7267e93fd7dc07cf65fb8cac2c4439d28a72c1e0acbdeca1648c6859440eb32"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4dae22b61ade99219a482b971c9780d68a3d37d021e39cdfe860b245364b8b9f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:b9dd5c01903394436530783614efb0cd357d982ed2befd844a39328479773cbc"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:3192b411d52f8ce7e32d3f8cba977692ce021a00ad1b7f72248a747ef3a8d45c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:20abdde62a7b037c01ea9bbe1ff1e6094e6b0efd0add2f656f1938a04409bf82"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/lib.mjs",
       "sha256": "sha256:f7da6a34588354e12c44196287e130b9098190fbde57b38c3a87dfeafee5cb7d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:ffe6fdc9da6b2974270fc86c11be0c41d0bc6d85c8e3c137d3c3bc00a72fc4f6"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:4e64d25b7aacec344253d1963f419f946998f36e8c269eea58b8c848e0f35e52"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:2351d47a32ee865720a675f1ecd336b00cdce4aa34713219a1aa23920ac7b60f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:62f83f8bb835f360535402d12657156d2c9d6e651b426c2b30a04a2dc2f8d3e8"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:058c849767434e9ba911d9310092bede42e3ef959c75bbd35ff8879dc21ce3ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/edition/resolve-images.mjs

@@ -870,6 +870,63 @@ export function editionSourceIds(lock) {
   return { get: (repo) => ids.get(repo) ?? firstPartySourceId(repo) };
 }
 
+/**
+ * A composed-process declaration the build cannot be read from. Named so a
+ * caller can tell "this image's inputs are unknown" from any other refusal:
+ * the carried set is evidence, and with none there is no owner to derive.
+ */
+export class ComposedProcessInputsError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = 'ComposedProcessInputsError';
+  }
+}
+
+/**
+ * Which of a repository's biome services the composed image CARRIES, read from
+ * the composed build's own inputs at the sealed commit.
+ *
+ * `image-build-inputs.json` lists the member package directories the image is
+ * built from (its hash is the subject's `sourceManifestHash`). A service is
+ * carried when its manifest-declared source directory (`subjectServicePath`,
+ * the `components[].artifact.path` mapping) is one of them. Returns one row
+ * per biome: the service ids carried and the ones not.
+ */
+function composedProcessCarriage(structure, enums, repo, sourceCommit, locate) {
+  const inputsPath = `${COMPOSED_PROCESS_IMAGE_PATH}/${COMPOSED_PROCESS_DECLARATION_FILE}`;
+  const { dir } = locate(repo);
+  let members;
+  try {
+    members = readGitJsonAtCommit(dir, inputsPath, sourceCommit)?.workspacePackages;
+  } catch (cause) {
+    throw new ComposedProcessInputsError(
+      `composed-process inputs "${inputsPath}" of "${repo}" are unreadable at ${sourceCommit} ` +
+        `(${cause.message}) — the biomes the image carries cannot be derived`,
+    );
+  }
+  if (!Array.isArray(members) || members.some((member) => typeof member !== 'string')) {
+    throw new ComposedProcessInputsError(
+      `composed-process inputs "${inputsPath}" of "${repo}" at ${sourceCommit} declare no ` +
+        '"workspacePackages" array of directories — the biomes the image carries cannot be derived',
+    );
+  }
+  const carried = new Set(members);
+  const byBiome = new Map();
+  for (const subject of structure.subjects) {
+    if (subject.kind !== enums.RuntimeImageSubjectKind.Service || subject.repo !== repo) {continue;}
+    const servicePath = subjectServicePath(subject, sourceCommit, locate);
+    for (const owner of subject.owners) {
+      if (owner.kind !== enums.RuntimeImageOwnerKind.Biome) {continue;}
+      const row = byBiome.get(owner.biomeId) ?? { biomeId: owner.biomeId, carried: [], uncarried: [] };
+      (carried.has(servicePath) ? row.carried : row.uncarried).push(subject.id);
+      byBiome.set(owner.biomeId, row);
+    }
+  }
+  return [...byBiome.values()]
+    .map((row) => ({ ...row, carried: row.carried.sort(compareStrings), uncarried: row.uncarried.sort(compareStrings) }))
+    .sort((a, b) => compareStrings(a.biomeId, b.biomeId));
+}
+
 /**
  * Read each repository's composed-process DECLARATION at the commit the
  * edition builds its services from. Only repositories that contribute a
@@ -920,6 +977,7 @@ export function readComposedProcessDeclarations(
       repo,
       sourceId,
       sourceCommit,
+      carriage: composedProcessCarriage(structure, enums, repo, sourceCommit, locate),
       path: `${repoRelative}/${COMPOSED_PROCESS_IMAGE_PATH}`,
       sourceManifestPath: `${repoRelative}/${declarationPath}`,
       sourceManifestHash: exactSourceManifestHash(dir, declarationPath, sourceCommit),
@@ -933,10 +991,17 @@ export function readComposedProcessDeclarations(
  * structure. Pure over its inputs, so the structural check and the source
  * resolve derive the same subject from the same declarations.
  *
- * Owners are the biomes whose service subjects come from that repository in
- * this edition — the members the deploy plane may place in a process with it.
+ * Owners are the biomes the image CARRIES, derived from the composed build's
+ * inputs at the sealed commit (`declaration.carriage`): the biomes all of whose
+ * services are members, never every biome with a service in the repository.
  */
-export function withComposedProcessSubjects(structure, declarations, enums, requiredPlatforms) {
+export function withComposedProcessSubjects(
+  structure,
+  declarations,
+  enums,
+  requiredPlatforms,
+  { onNotice = (message) => console.warn(`[dist:images] ${message}`) } = {},
+) {
   if (declarations.length === 0) {return structure;}
   const subjects = new Map(structure.subjects.map((subject) => [subjectKey(subject), subject]));
   for (const declaration of declarations) {
@@ -944,20 +1009,32 @@ export function withComposedProcessSubjects(structure, declarations, enums, requ
       (subject) =>
         subject.kind === enums.RuntimeImageSubjectKind.Service && subject.repo === declaration.repo,
     );
-    // One owner per biome: a biome shipping several services owns the
-    // composed image once (the kernel refuses a repeated owner identity).
-    const biomeOwners = [
-      ...new Map(
-        services
-          .flatMap((subject) => subject.owners)
-          .filter((owner) => owner.kind === enums.RuntimeImageOwnerKind.Biome)
-          .map((owner) => [owner.biomeId, owner]),
-      ).values(),
-    ];
+    if (!Array.isArray(declaration.carriage)) {
+      throw new ComposedProcessInputsError(
+        `composed-process declaration for "${declaration.repo}" carries no evidence of the ` +
+          'biomes the image carries — refusing to guess its owners',
+      );
+    }
+    // Owners are the biomes ALL of whose services the image carries. A biome
+    // with only some carried deploys dedicated, so it is no owner (and is
+    // named); a biome with none carried is simply not one.
+    const biomeOwners = [];
+    for (const row of declaration.carriage) {
+      if (row.carried.length === 0) {continue;}
+      if (row.uncarried.length > 0) {
+        onNotice(
+          `composed-process "${declaration.repo}": biome "${row.biomeId}" is only partly carried ` +
+            `(carried: ${row.carried.join(', ')}; not carried: ${row.uncarried.join(', ')}) — ` +
+            'it is not an owner and deploys dedicated',
+        );
+        continue;
+      }
+      biomeOwners.push({ kind: enums.RuntimeImageOwnerKind.Biome, biomeId: row.biomeId });
+    }
     if (biomeOwners.length === 0) {
       throw new Error(
-        `composed-process declaration for "${declaration.repo}" names no biome service ` +
-          'subject in this edition — a composed image carries services, so it has no owner',
+        `composed-process declaration for "${declaration.repo}" carries no biome's services in ` +
+          'this edition — a composed image carries services, so it has no owner',
       );
     }
     for (const subject of services) {
@@ -1001,7 +1078,7 @@ export function withComposedProcessSubjects(structure, declarations, enums, requ
       sourceManifestHash: declaration.sourceManifestHash,
       sourceManifestPath: declaration.sourceManifestPath,
       requiredPlatforms,
-      owners: biomeOwners.map((owner) => ({ kind: owner.kind, biomeId: owner.biomeId })),
+      owners: biomeOwners,
     });
   }
   return {
@@ -1023,7 +1100,7 @@ export function resolveComposedProcessStructure(
   structure,
   enums,
   requiredPlatforms,
-  { locate } = {},
+  { locate, onNotice } = {},
 ) {
   return withComposedProcessSubjects(
     structure,
@@ -1036,6 +1113,7 @@ export function resolveComposedProcessStructure(
     ),
     enums,
     requiredPlatforms,
+    onNotice === undefined ? undefined : { onNotice },
   );
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -92,6 +92,6 @@
     "typecheck": "tsc --noEmit"
   },
   "xemaRelease": {
-    "sourceDigest": "sha256:fb84f9a32012146ed5af8e2ddc1327fff42293fc57b72ca58bc082cf5502839f"
+    "sourceDigest": "sha256:98d3df3b954a3e3149f8099e228a7649cbba3f0ed37fbfc59c2c1e3cc3a2acef"
   }
 }