@xemahq/xema 0.33.3 → 0.33.5

package/dist/edition/verify-image-evidence.bundle.mjs

@@ -59428,9 +59428,6 @@ function assertCanonicalDistributionId(distributionId) {
   return distributionId;
 }
 
-// edition/edition-channel.mjs
-var EditionChannel = Object.freeze({ Develop: "develop", Release: "release" });
-
 // edition/edition-workspace.mjs
 import { existsSync, realpathSync, statSync } from "node:fs";
 import { join, resolve } from "node:path";
@@ -59544,15 +59541,9 @@ var EditionChartSetCheck = Object.freeze({
   MISSING: "missing",
   STALE: "stale"
 });
-var CHART_VERSION_COORDINATE = Object.freeze({
-  [EditionChannel.Release]: /-h[0-9a-f]{16}$/,
-  [EditionChannel.Develop]: /-dev\.[0-9a-f]{12}$/
-});
-var DEVELOP_CHART_VERSION_PREFIX = "0.0.0-dev.";
-var DEVELOP_CHART_SHA_LENGTH = 12;
-var DEVELOP_CHART_VERSION_PATTERN = new RegExp(
-  `^${DEVELOP_CHART_VERSION_PREFIX.replaceAll(".", "\\.")}[0-9a-f]{${DEVELOP_CHART_SHA_LENGTH}}$`
-);
+
+// edition/edition-channel.mjs
+var EditionChannel = Object.freeze({ Develop: "develop", Release: "release" });
 
 // edition/edition-contract-parse.mjs
 var EDITION_CONTRACT_SCHEMA = "xema.edition-contract/v2";

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "artifactSha256": "sha256:09f40c552224a946fef9f54e2d2c2de6885a76b386daece39862f2e42382235b",
+  "artifactSha256": "sha256:4fffbefc61cab2c4844351c1397fd18198f33d58532a4c31b9c333c3627097ba",
   "esbuild": {
     "version": "0.28.2"
   },
@@ -2203,229 +2203,229 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:bbeac7ff01376cb89ed2140526d4795d8e559b3f01612b404a701f19aaa24c6a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/build-ledger.mjs",
       "sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-artifact.mjs",
-      "sha256": "sha256:161f522eb39e3db705bc709f8512988dd3e6752851d972521354eeccffd8075d"
+      "sha256": "sha256:e8a391938c88398f63f86fdf413582d3a18eb20c219784a01fa84794bbd22e38"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-chart-set.mjs",
-      "sha256": "sha256:fbda500315d45e35eb974f4701bbf36729c3b642a5d735bc1b07085c91d25b23"
+      "sha256": "sha256:cea98292ffc8bfe2afcc01f327172bc9071a83ef9b62a4e56236f2029d2699a9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:e3997bd9a0082e02d01760868b2a4f41ed3081e904126b30fdf86e7938dc6137"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:71ae51028847ab3430ffec9b229b0516a7705b75a6de1fcfa665f5e1abf8e9bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:c575e96b70bda82899931eb0b18567988e2e13e664fa498bcbef96b571dcabb4"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:aa1a05f1728813a7bdb1e02d9305e9adf641d695e6767305210c67a1d81b38a7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:2940a0ee8662970722aa2618a1635f8d5b4f5e54b85f09667f71ccf7c2c81b03"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-source-pins.mjs",
       "sha256": "sha256:b2190ace174a29875e2a9bd7209460b0ef6de186aca9b31bcd45dc17af57c1ba"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:f7267e93fd7dc07cf65fb8cac2c4439d28a72c1e0acbdeca1648c6859440eb32"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4dae22b61ade99219a482b971c9780d68a3d37d021e39cdfe860b245364b8b9f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:b9dd5c01903394436530783614efb0cd357d982ed2befd844a39328479773cbc"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/git-json.mjs",
       "sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:09945712ecc6524d5f52cfd82141ef4cade45be35210777f6e32818792068881"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:20abdde62a7b037c01ea9bbe1ff1e6094e6b0efd0add2f656f1938a04409bf82"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/lib.mjs",
       "sha256": "sha256:0e9045632a14cb1a035bce7aac3ad26e7b2211daa3f9c2cd27a55dfd772e3b6b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:ffe6fdc9da6b2974270fc86c11be0c41d0bc6d85c8e3c137d3c3bc00a72fc4f6"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:fbaa6dffbdf4a262a13127bcf37bca791234fae74e327ac250e56ff4b78c1244"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:858b607dde94e2abd00a341f569e18cfa567d4bff139c64a2d60abbb7de4c85e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:62f83f8bb835f360535402d12657156d2c9d6e651b426c2b30a04a2dc2f8d3e8"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:058c849767434e9ba911d9310092bede42e3ef959c75bbd35ff8879dc21ce3ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.33.3",
+      "version": "0.33.5",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/dist/runtime/runner/chart-set-lock.d.ts

@@ -1,9 +1,6 @@
 export declare const CHART_SET_LOCK_ENV = "XEMA_CHART_SET_LOCK";
 export declare const CHART_SET_LOCK_FILENAME = "chart-set.lock.json";
 export declare const CHART_SET_LOCK_SCHEMA_VERSION = 4;
-export declare const DEVELOP_CHART_VERSION_PREFIX = "0.0.0-dev.";
-export declare const DEVELOP_CHART_SHA_LENGTH = 12;
-export declare const DEVELOP_CHART_VERSION_PATTERN: RegExp;
 export declare const CHART_DIGEST_PATTERN: RegExp;
 export interface ChartSetMember {
     readonly version: string;

package/dist/runtime/runner/chart-set-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chart-set-lock.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAG7D,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAG/C,eAAO,MAAM,4BAA4B,eAAe,CAAC;AAGzD,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAG3C,eAAO,MAAM,6BAA6B,QAEzC,CAAC;AAGF,eAAO,MAAM,oBAAoB,QAA0B,CAAC;AAG5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvD;AAGD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAQR;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuBlE;AAwID,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMrD"}
+{"version":3,"file":"chart-set-lock.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAG7D,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAG/C,eAAO,MAAM,oBAAoB,QAA0B,CAAC;AAG5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvD;AAGD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAQR;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuBlE;AAuGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMrD"}

package/dist/runtime/runner/chart-set-lock.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CHART_DIGEST_PATTERN = exports.DEVELOP_CHART_VERSION_PATTERN = exports.DEVELOP_CHART_SHA_LENGTH = exports.DEVELOP_CHART_VERSION_PREFIX = exports.CHART_SET_LOCK_SCHEMA_VERSION = exports.CHART_SET_LOCK_FILENAME = exports.CHART_SET_LOCK_ENV = void 0;
+exports.CHART_DIGEST_PATTERN = exports.CHART_SET_LOCK_SCHEMA_VERSION = exports.CHART_SET_LOCK_FILENAME = exports.CHART_SET_LOCK_ENV = void 0;
 exports.defaultChartSetLockPath = defaultChartSetLockPath;
 exports.loadChartSetLock = loadChartSetLock;
 exports.isMissingPath = isMissingPath;
@@ -9,9 +9,6 @@ const appliance_context_1 = require("./appliance-context");
 exports.CHART_SET_LOCK_ENV = 'XEMA_CHART_SET_LOCK';
 exports.CHART_SET_LOCK_FILENAME = 'chart-set.lock.json';
 exports.CHART_SET_LOCK_SCHEMA_VERSION = 4;
-exports.DEVELOP_CHART_VERSION_PREFIX = '0.0.0-dev.';
-exports.DEVELOP_CHART_SHA_LENGTH = 12;
-exports.DEVELOP_CHART_VERSION_PATTERN = new RegExp(`^${exports.DEVELOP_CHART_VERSION_PREFIX.replaceAll('.', '\\.')}[0-9a-f]{${exports.DEVELOP_CHART_SHA_LENGTH}}$`);
 exports.CHART_DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
 function defaultChartSetLockPath(env = process.env) {
     const declared = env[exports.CHART_SET_LOCK_ENV];
@@ -83,28 +80,9 @@ function parseChartSetLock(parsed, path) {
 function assertIndexDigest(publisher, index, path) {
     const where = `${path}: publisher '${index}'`;
     if (!Object.hasOwn(publisher, 'indexDigest')) {
-        throw new Error(`${where} carries no 'indexDigest' key (required: sha256:<64 hex> for a ` +
-            'release index, null for a develop snapshot version).');
-    }
-    const { version, indexDigest } = publisher;
-    if (typeof version === 'string' &&
-        version.startsWith(exports.DEVELOP_CHART_VERSION_PREFIX) &&
-        !exports.DEVELOP_CHART_VERSION_PATTERN.test(version)) {
-        throw new Error(`${where} has malformed develop chart version ${JSON.stringify(version)}; ` +
-            `a develop version is exactly ${exports.DEVELOP_CHART_VERSION_PREFIX}<${exports.DEVELOP_CHART_SHA_LENGTH} lowercase hex>.`);
-    }
-    const develop = typeof version === 'string' && exports.DEVELOP_CHART_VERSION_PATTERN.test(version);
-    if (indexDigest === null) {
-        if (!develop) {
-            throw new Error(`${where} has indexDigest null with version ${JSON.stringify(version)}; ` +
-                `null is only for a develop snapshot version (${exports.DEVELOP_CHART_VERSION_PREFIX}<sha12>).`);
-        }
-        return;
-    }
-    if (develop) {
-        throw new Error(`${where} has an indexDigest with develop snapshot version ${String(version)}; ` +
-            'a develop snapshot has no index chart, so indexDigest must be null.');
+        throw new Error(`${where} carries no 'indexDigest' key (required: sha256:<64 hex>).`);
     }
+    const { indexDigest } = publisher;
     if (typeof indexDigest !== 'string' || !exports.CHART_DIGEST_PATTERN.test(indexDigest)) {
         throw new Error(`${where} has a malformed indexDigest (${JSON.stringify(indexDigest)}); ` +
             'expected sha256:<64 hex>.');

package/dist/runtime/runner/chart-set-lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"chart-set-lock.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":";;;AA8DA,0DAUC;AAQD,4CAuBC;AAwID,sCAMC;AArPD,qCAAuC;AAEvC,2DAAiE;AAsBpD,QAAA,kBAAkB,GAAG,qBAAqB,CAAC;AAG3C,QAAA,uBAAuB,GAAG,qBAAqB,CAAC;AAGhD,QAAA,6BAA6B,GAAG,CAAC,CAAC;AAGlC,QAAA,4BAA4B,GAAG,YAAY,CAAC;AAG5C,QAAA,wBAAwB,GAAG,EAAE,CAAC;AAG9B,QAAA,6BAA6B,GAAG,IAAI,MAAM,CACrD,IAAI,oCAA4B,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,gCAAwB,IAAI,CAChG,CAAC;AAGW,QAAA,oBAAoB,GAAG,uBAAuB,CAAC;AAkB5D,SAAgB,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAIpC,MAAM,QAAQ,GAAG,GAAG,CAAC,0BAAkB,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,IAAA,8CAA0B,EAAC,EAAE,GAAG,EAAE,CAAC,IAAI,+BAAuB,EAAE,CAAC;AAC7E,CAAC;AAQD,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,gCAAgC;YACzE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe,EAAE,IAAY;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qDAAqD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,qCAA6B,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS;YACtE,iBAAiB,MAAM,CAAC,qCAA6B,CAAC,oBAAoB;YAC1E,4EAA4E;YAC5E,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sDAAsD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wDAAwD,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAuB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,CAAC;QAC/B,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;QACD,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,KAAK,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,YAAY,IAAI,8CAA8C;oBACnE,8DAA8D,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAOD,SAAS,iBAAiB,CACxB,SAAkC,EAClC,KAAa,EACb,IAAY;IAEZ,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,KAAK,GAAG,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iEAAiE;YACvE,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAC3C,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,UAAU,CAAC,oCAA4B,CAAC;QAChD,CAAC,qCAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,wCAAwC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;YACzE,gCAAgC,oCAA4B,IAAI,gCAAwB,kBAAkB,CAC7G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,qCAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI;gBACvE,gDAAgD,oCAA4B,WAAW,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,qDAAqD,MAAM,CAAC,OAAO,CAAC,IAAI;YAC9E,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,4BAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iCAAiC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK;YACvE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAc,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,sCAAsC;YAC5D,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,CAC/C,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3E,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,IAAI,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,4BAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,sCAAsC;YAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,8BAA8B,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAGD,SAAgB,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAA4B,CAAC,IAAI;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC"}
+{"version":3,"file":"chart-set-lock.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-set-lock.ts"],"names":[],"mappings":";;;AAmDA,0DAUC;AAQD,4CAuBC;AAuGD,sCAMC;AAzMD,qCAAuC;AAEvC,2DAAiE;AAsBpD,QAAA,kBAAkB,GAAG,qBAAqB,CAAC;AAG3C,QAAA,uBAAuB,GAAG,qBAAqB,CAAC;AAGhD,QAAA,6BAA6B,GAAG,CAAC,CAAC;AAGlC,QAAA,oBAAoB,GAAG,uBAAuB,CAAC;AAkB5D,SAAgB,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAIpC,MAAM,QAAQ,GAAG,GAAG,CAAC,0BAAkB,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,IAAA,8CAA0B,EAAC,EAAE,GAAG,EAAE,CAAC,IAAI,+BAAuB,EAAE,CAAC;AAC7E,CAAC;AAQD,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,gCAAgC;YACzE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe,EAAE,IAAY;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qDAAqD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,qCAA6B,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS;YACtE,iBAAiB,MAAM,CAAC,qCAA6B,CAAC,oBAAoB;YAC1E,4EAA4E;YAC5E,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sDAAsD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wDAAwD,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAuB,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,CAAC;QAC/B,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;QACD,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,KAAK,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,YAAY,IAAI,8CAA8C;oBACnE,8DAA8D,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAGD,SAAS,iBAAiB,CACxB,SAAkC,EAClC,KAAa,EACb,IAAY;IAEZ,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,KAAK,GAAG,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4DAA4D,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAClC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,4BAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,iCAAiC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK;YACvE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAc,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,sCAAsC;YAC5D,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,CAC/C,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3E,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,IAAI,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,4BAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,aAAa,IAAI,sCAAsC;YAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,8BAA8B,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAGD,SAAgB,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAA4B,CAAC,IAAI;QACpC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC"}

package/edition/chart-set-source-commit.mjs

@@ -3,14 +3,12 @@
 //
 // The publisher stamps its index chart with `xema.dev/chart-set-source-sha`
 // next to `xema.dev/chart-set-charts`. This verb reads that stamp from the index
-// chart at the digest the committed fleet `chart-set.lock.json` pins (a develop
-// lock has none and is refused), and prints one JSON document. It refuses,
+// chart at the digest the committed fleet `chart-set.lock.json` pins and prints one JSON document. It refuses,
 // printing nothing, when the stamp is absent or is not a 40-hex commit, when the
 // registry does not serve the locked digest, or when the index's roster is not
 // the one the lock records for that publisher: the commit it would name would then be
 // the commit of a different set than the locked one.
 
-import { EditionChannel } from './edition-channel.mjs';
 import { assertRosteredChartSetLock } from './edition-chart-set.mjs';
 import { WorkspaceRoot, configureEditionWorkspaceFromProcess, isEntryModule } from './edition-workspace.mjs';
 import { COMMIT_PATTERN } from './evidence-grammars.mjs';
@@ -59,9 +57,6 @@ export async function chartSetSourceCommits({ client, lock }) {
   const publishers = [];
   for (const { index, repo, version, indexDigest, charts } of lock.publishers) {
     const label = `${index}@${version}`;
-    if (indexDigest === null) {
-      throw new Error(`${label}: a develop chart set names its deploy commit in the snapshot pins, not in an index chart (indexDigest is null)`);
-    }
     // The index is read BY the digest the lock pins, so a re-pushed tag cannot answer.
     const served = await client.getManifestByDigest(registryRepository(index), indexDigest);
     if (served.digest !== indexDigest) {
@@ -89,7 +84,7 @@ async function main(argv) {
   if (lock === null) {
     throw new Error(`${chartSetLockPath()} is missing or is not JSON: run 'xema edition chart-set resolve' first`);
   }
-  assertRosteredChartSetLock(lock, CHART_SET_LOCK_FILE, EditionChannel.Release);
+  assertRosteredChartSetLock(lock, CHART_SET_LOCK_FILE);
   const document = await chartSetSourceCommits({ client: chartRegistryClient(), lock });
   process.stdout.write(serializeJson(document));
 }

package/edition/develop-chart-set.mjs

@@ -0,0 +1,61 @@
+// develop-chart-set — the chart-set lock of a develop edition.
+//
+// A develop edition renders with the charts the publisher actually published:
+// the committed release chart-set lock's entries (names, content versions and
+// digests, and each index digest), unchanged. xema-deploy publishes charts per
+// content version (`<n>-h<16 hex>`) for the commit its release set was closed
+// at, so that commit is the only deploy commit whose charts exist in the
+// registry. A develop edition frozen at that commit takes the release lock
+// as it is, and asks the registry nothing about a chart's tag; a develop edition
+// frozen at any other commit is refused, because no chart was published for it
+// (a develop chart lane in xema-deploy is the owner's decision, not built).
+
+import { basename } from 'node:path';
+
+import { chartSetSourceCommits } from './chart-set-source-commit.mjs';
+import { assertRosteredChartSetLock } from './edition-chart-set.mjs';
+import { COMMIT_PATTERN } from './evidence-grammars.mjs';
+import { deployPinKey } from './pin-source.mjs';
+import { CHART_SET_LOCK_FILE, chartRegistryClient, chartSetLockPath, readLock } from './resolve-chart-set.mjs';
+
+/** The source commits of `lock`'s publishers, read from their index charts at the digests the lock pins. */
+const registrySourceCommits = (lock) => chartSetSourceCommits({ client: chartRegistryClient(), lock });
+
+/**
+ * The develop chart-set lock for the deploy commit `xemaDeploySha`: the committed
+ * release lock, when that lock's deploy publisher closed its set at this commit.
+ * `readSourceCommits(lock)` defaults to the chart registry's index charts and
+ * returns `{publishers: [{repo, sourceCommit}]}`.
+ *
+ * TEMPORARY BRIDGE (owner: edition, lead D41 10-13): only the release set's
+ * source commit is resolvable here. Exit: develop charts resolved by content
+ * version (edition T37: the shared developChartVersionFromDigest, published by
+ * xema-deploy publish-charts on develop pushes), which replaces this function
+ * before t348-i2 lands.
+ */
+export async function resolveDevelopChartSet({ xemaDeploySha, releaseLock = readLock(), readSourceCommits = registrySourceCommits }) {
+  if (!COMMIT_PATTERN.test(xemaDeploySha ?? '')) {
+    throw new Error(`the deploy checkout SHA is not a 40-hex commit: ${JSON.stringify(xemaDeploySha)}`);
+  }
+  if (releaseLock === null) {
+    throw new Error(`${chartSetLockPath()} is missing or is not JSON: run 'xema edition chart-set resolve' first`);
+  }
+  assertRosteredChartSetLock(releaseLock, CHART_SET_LOCK_FILE);
+  const deployRepo = basename(deployPinKey());
+  const deployPublishers = releaseLock.publishers.filter((publisher) => basename(publisher.repo) === deployRepo);
+  if (deployPublishers.length !== 1) {
+    throw new Error(
+      `${deployPublishers.length} chart publishers of ${CHART_SET_LOCK_FILE} have repository ${deployRepo} (the deploy pin role); exactly one must, ` +
+        'since its source commit is the one commit whose charts were published',
+    );
+  }
+  const { sourceCommit } = (await readSourceCommits(releaseLock)).publishers.find((publisher) => publisher.index === deployPublishers[0].index) ?? {};
+  if (sourceCommit !== xemaDeploySha) {
+    throw new Error(
+      `the develop deploy commit ${xemaDeploySha} is not the commit ${CHART_SET_LOCK_FILE} was published from (${sourceCommit}): ` +
+        'develop charts are only published for the release set\'s source commit, so no chart exists for this commit. ' +
+        'A develop chart lane in the deploy repository is required to develop at another commit (owner decision, not built)',
+    );
+  }
+  return releaseLock;
+}

package/edition/develop-edition-resolve.mjs

@@ -2,26 +2,26 @@
 //
 // The whole pipeline, in the order the release runs it, over the snapshot's
 // injected inputs: distribution lock -> authorization base (composed, never
-// written) -> images lock -> develop seal, plus the chart-set lock: the frozen
-// xema-deploy charts' registry manifest digests, in the release roster shape. Nothing here writes to the editions
+// written) -> images lock -> develop seal, plus the chart-set lock: the release
+// lock's published charts (develop-chart-set.mjs). Nothing here writes to the editions
 // trees; the caller writes the artifact (edition-artifact.mjs).
 
 import { adapterHostRow, assertAdapterBundlesMatchHost, fetchRegistryManifest } from './adapter-bundled-versions.mjs';
 import { biomeSourceTreeIds, sealLock } from './biome-content.mjs';
 import { buildCatalogue } from './catalogue.mjs';
+import { resolveDevelopChartSet } from './develop-chart-set.mjs';
 import { sealDevelopImages } from './develop-seal.mjs';
 import { assertFrozenCheckouts, buildSnapshotInputs } from './develop-snapshot-inputs.mjs';
 import { EditionChannel } from './edition-constants.mjs';
-import { deployRoot, kernelPackageDir } from './edition-workspace.mjs';
+import { kernelPackageDir } from './edition-workspace.mjs';
 import { kernelPackageOfAuthority } from './kernel-package.mjs';
 import { loadKernelDistributionSchemas } from './lib.mjs';
 import { deployPinKey } from './pin-source.mjs';
-import { resolveDevelopChartSet } from './resolve-chart-set.mjs';
 import { composeAuthorizationBase, resolveDistributionWithIndex } from './resolve-distribution.mjs';
 import { externalSourceTrees, resolveImages, sourceTreeLocator } from './resolve-images.mjs';
 import { createPinnedSourceAuthority } from './source-authority.mjs';
 
-export async function resolveDevelopEdition({ id, pins, env = process.env, sealOptions = {}, chartDigestLookup, fetchKernelTarball, fetchManifest = fetchRegistryManifest }) {
+export async function resolveDevelopEdition({ id, pins, env = process.env, sealOptions = {}, readSourceCommits, fetchKernelTarball, fetchManifest = fetchRegistryManifest }) {
   const schemas = await loadKernelDistributionSchemas();
   assertFrozenCheckouts(pins);
   const inputs = await buildSnapshotInputs({ id, pins, schemas });
@@ -41,9 +41,8 @@ export async function resolveDevelopEdition({ id, pins, env = process.env, sealO
     vendoredCommit: (repo) => authority.vendoredSourceCommitForRepository(repo),
   });
   const chartSetLock = await resolveDevelopChartSet({
-    xemaDeployDir: deployRoot(),
     xemaDeploySha: pins[deployPinKey()],
-    lookup: chartDigestLookup,
+    ...(readSourceCommits === undefined ? {} : { readSourceCommits }),
   });
   const sourceTreeIds = await biomeSourceTreeIds({
     schemas,

package/edition/dist-check.mjs

@@ -37,7 +37,6 @@ import {
   loadKernelAuthorizationComposer,
 } from './authorization-base.mjs';
 import { verifyBiomeContentHashes } from './biome-content.mjs';
-import { EditionChannel } from './edition-channel.mjs';
 import {
   EDITION_CHART_SET_FILE,
   EditionChartSetCheck,
@@ -951,7 +950,7 @@ async function main() {
   let chartSetPinText = null;
   try {
     chartSetPinText = readFileSync(fleetChartSetLockPath(), 'utf8');
-    assertRosteredChartSetLock(JSON.parse(chartSetPinText), EDITION_CHART_SET_FILE, EditionChannel.Release);
+    assertRosteredChartSetLock(JSON.parse(chartSetPinText), EDITION_CHART_SET_FILE);
   } catch (err) {
     console.error(`[dist:check] chart-set pin: ${err.message}. Run \`${commandFor('resolve-chart-set.mjs')}\`.`);
     failed = true;

package/edition/edition-artifact.mjs

@@ -276,7 +276,7 @@ export function writeEditionArtifact({
       throw new Error(`edition "${distributionId}" has no ${file}: an edition carries all four locks`);
     }
   }
-  assertRosteredChartSetLock(chartSetLock, EDITION_CHART_SET_FILE, channel);
+  assertRosteredChartSetLock(chartSetLock, EDITION_CHART_SET_FILE);
   const descriptor = editionDescriptor({ distributionId, channel, pins, workflow, evidenceTrustPolicy, engineImage });
   mkdirSync(outDir, { recursive: true });
   for (const [file, value] of [[EDITION_DESCRIPTOR_FILE, descriptor], ...byFile]) {

package/edition/edition-chart-set.mjs

@@ -26,7 +26,6 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 
-import { EditionChannel } from './edition-channel.mjs';
 import { dataRoot } from './edition-workspace.mjs';
 
 export const EDITION_CHART_SET_FILE = 'chart-set.lock.json';
@@ -39,38 +38,12 @@ export const EditionChartSetCheck = Object.freeze({
   STALE: 'stale',
 });
 
-/**
- * A published chart's version coordinate, per channel: `-h<16 hex>` (content
- * hash) in a release chart set, `-dev.<12 hex>` (the frozen xema-deploy SHA) in a
- * develop one. One lock SHAPE serves both; the coordinate is what the producer
- * of each channel writes, so each producer validates its own channel's (this is
- * a check of what is being written, not a branch of any reader).
- */
-const CHART_VERSION_COORDINATE = Object.freeze({
-  [EditionChannel.Release]: /-h[0-9a-f]{16}$/,
-  [EditionChannel.Develop]: /-dev\.[0-9a-f]{12}$/,
-});
+/** A published chart's version coordinate: `-h<16 hex>`, the content hash its publisher mints. A develop chart set takes the release set's charts, so it carries the same coordinate. */
+const CHART_VERSION_COORDINATE = /-h[0-9a-f]{16}$/;
 
 /** The chart-set lock schema every reader accepts; a lock of any other schema is re-resolved, never migrated. */
 export const CHART_SET_LOCK_SCHEMA_VERSION = 4;
 
-/** The version prefix of a develop snapshot chart set (`0.0.0-dev.<sha12>`): xema-deploy's frozen-SHA charts, which have no index chart. */
-export const DEVELOP_CHART_VERSION_PREFIX = '0.0.0-dev.';
-
-/** The length of the lowercase-hex xema-deploy SHA a develop snapshot version carries. */
-export const DEVELOP_CHART_SHA_LENGTH = 12;
-
-/** The full develop snapshot version grammar: `0.0.0-dev.<12 lowercase hex>`, anchored. */
-export const DEVELOP_CHART_VERSION_PATTERN = new RegExp(
-  `^${DEVELOP_CHART_VERSION_PREFIX.replaceAll('.', '\\.')}[0-9a-f]{${DEVELOP_CHART_SHA_LENGTH}}$`,
-);
-
-/** Does `version` start with the develop prefix, whether or not it is the full develop grammar? */
-export const hasDevelopChartVersionPrefix = (version) => typeof version === 'string' && version.startsWith(DEVELOP_CHART_VERSION_PREFIX);
-
-/** Is `version` a develop snapshot version? The one predicate for "this publisher has no index chart". */
-export const isDevelopChartVersion = (version) => typeof version === 'string' && DEVELOP_CHART_VERSION_PATTERN.test(version);
-
 /** An OCI manifest digest: `sha256:` and 64 lowercase hex. */
 export const OCI_DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
 
@@ -79,15 +52,10 @@ export const RESOLVE_CHART_SET_INSTRUCTION = 're-resolve the chart set with `xem
 
 /**
  * A chart-set lock (schemaVersion 4) that pins every member by version and OCI
- * manifest digest, with `channel`'s version coordinate, and pins each publisher's
- * index chart by `indexDigest` (null exactly for a develop snapshot version,
- * which has no index chart; the release channel refuses null).
+ * manifest digest, with the `-h<16 hex>` content coordinate, and pins each
+ * publisher's index chart by `indexDigest` (always a sha256 digest).
  */
-export function assertRosteredChartSetLock(lock, label, channel) {
-  const coordinate = CHART_VERSION_COORDINATE[channel];
-  if (coordinate === undefined) {
-    throw new Error(`${label}: cannot validate a chart-set lock for channel ${JSON.stringify(channel)}; expected ${Object.values(EditionChannel).join(' | ')}`);
-  }
+export function assertRosteredChartSetLock(lock, label) {
   const fail = (why) => {
     throw new Error(`${label} is not a rostered chart-set lock: ${why}`);
   };
@@ -101,30 +69,20 @@ export function assertRosteredChartSetLock(lock, label, channel) {
     }
     for (const [name, member] of Object.entries(pin.charts)) {
       if (!member || typeof member !== 'object' || Array.isArray(member)) {fail(`${pin.index}: ${name} must be {version, digest}`);}
-      if (!coordinate.test(String(member.version))) {fail(`${pin.index}: ${name} has no ${channel} content coordinate (${member.version}); a ${channel} chart set carries ${coordinate}`);}
+      if (!CHART_VERSION_COORDINATE.test(String(member.version))) {fail(`${pin.index}: ${name} has no content coordinate (${member.version}); a chart set carries ${CHART_VERSION_COORDINATE}`);}
       if (!OCI_DIGEST_PATTERN.test(String(member.digest))) {fail(`${pin.index}: ${name} has no sha256 manifest digest`);}
     }
-    assertIndexDigest(pin, position, channel, fail);
+    assertIndexDigest(pin, position, fail);
   }
   return lock;
 }
 
-/** The `indexDigest` rule: present, a sha256 digest unless the version is a develop snapshot (then null), and never null in a release lock. */
-function assertIndexDigest(pin, position, channel, fail) {
+/** The `indexDigest` rule: the key is present and is a sha256 digest. */
+function assertIndexDigest(pin, position, fail) {
   const where = `publisher ${position} (${pin?.index ?? '?'})`;
   if (!pin || typeof pin !== 'object' || !Object.hasOwn(pin, 'indexDigest')) {
-    fail(`${where} carries no indexDigest key (required: "sha256:<64 hex>" for a release index, null for a develop snapshot version)`);
-  }
-  if (hasDevelopChartVersionPrefix(pin.version) && !isDevelopChartVersion(pin.version)) {
-    fail(`${where} has malformed develop chart version ${JSON.stringify(pin.version)}; a develop version is exactly ${DEVELOP_CHART_VERSION_PREFIX}<${DEVELOP_CHART_SHA_LENGTH} lowercase hex>`);
-  }
-  const develop = isDevelopChartVersion(pin.version);
-  if (pin.indexDigest === null) {
-    if (!develop) {fail(`${where} has indexDigest null with version ${JSON.stringify(pin.version)}; null is only for a develop snapshot version (${DEVELOP_CHART_VERSION_PREFIX}<sha12>)`);}
-    if (channel === EditionChannel.Release) {fail(`${where} has indexDigest null, which a release chart set refuses; a release index chart is pinned by digest`);}
-    return;
+    fail(`${where} carries no indexDigest key (required: "sha256:<64 hex>")`);
   }
-  if (develop) {fail(`${where} has an indexDigest with develop snapshot version ${pin.version}; a develop snapshot has no index chart, so indexDigest must be null`);}
   if (!OCI_DIGEST_PATTERN.test(String(pin.indexDigest))) {fail(`${where} has a malformed indexDigest (${JSON.stringify(pin.indexDigest)}); expected "sha256:<64 lowercase hex>"`);}
 }
 
@@ -134,7 +92,7 @@ function assertIndexDigest(pin, position, channel, fail) {
  * coordinates is written.
  */
 export function writeEditionChartSet(editionDir, pinText) {
-  assertRosteredChartSetLock(JSON.parse(pinText), EDITION_CHART_SET_FILE, EditionChannel.Release);
+  assertRosteredChartSetLock(JSON.parse(pinText), EDITION_CHART_SET_FILE);
   writeFileSync(join(editionDir, EDITION_CHART_SET_FILE), pinText);
 }
 

package/edition/platform-lock-readability.mjs

@@ -503,6 +503,15 @@ export function lockedSdkVersions({ repoRoot = sourcesRoot(), repo, commit }) {
   return [...versions].sort();
 }
 
+/**
+ * Does comment-blanked executable source CALL the tolerant reader? Both the source form `parseDistributionLockForReading(x)`
+ * and the compiled CommonJS form `(0, mod.parseDistributionLockForReading)(x)` are calls; a bare reference (an export, a
+ * re-export) is not, and a docblock mention is blanked before this runs.
+ */
+export function callsReader(executable) {
+  return /\bparseDistributionLockForReading\s*(?:\)\s*)?\(/u.test(executable);
+}
+
 /**
  * Does the PUBLISHED SDK at `version` parse the lock with the kernel READER?
  * Asked of the tarball's own executable source (comments blanked), so a
@@ -528,7 +537,7 @@ export function sdkReadsWithReader(version) {
     );
   }
   const executable = blankAllComments(readFileSync(module, 'utf8'));
-  const readsWithReader = /\bparseDistributionLockForReading\s*\(/u.test(executable);
+  const readsWithReader = callsReader(executable);
   sdkModeCache.set(version, readsWithReader);
   return readsWithReader;
 }

package/edition/release-channel-guard.mjs

@@ -17,7 +17,7 @@ import { join, resolve } from 'node:path';
 
 import { isDevelopImageRef } from './develop-image-coordinate.mjs';
 import { EDITION_CHART_SET_FILE, assertRosteredChartSetLock } from './edition-chart-set.mjs';
-import { EditionChannel, EditionLockFile } from './edition-constants.mjs';
+import { EditionLockFile } from './edition-constants.mjs';
 import { isEntryModule } from './edition-workspace.mjs';
 
 /** Throws when `value` (a parsed JSON document) names a develop image repository. `where` names it in the refusal. */
@@ -30,10 +30,9 @@ export function assertReleaseContent(value, where) {
         'a release lock names release repositories only',
     );
   }
-  // A chart-set lock (one with a roster of publishers) carries release chart
-  // coordinates only: a develop chart set copied into a release is refused.
+  // A chart-set lock (one with a roster of publishers) carries content coordinates only.
   if (Array.isArray(value.publishers)) {
-    assertRosteredChartSetLock(value, where, EditionChannel.Release);
+    assertRosteredChartSetLock(value, where);
   }
 }
 

package/edition/release-edition-artifact.mjs

@@ -123,7 +123,7 @@ export async function readCommittedEdition(id, root = editionsRoot()) {
     distributionLock,
     imageLock: read(EditionLockFile.Images),
     authorizationLock: read(EditionLockFile.Authorization),
-    chartSetLock: assertRosteredChartSetLock(read(EditionLockFile.ChartSet), join(dir, EditionLockFile.ChartSet), EditionChannel.Release),
+    chartSetLock: assertRosteredChartSetLock(read(EditionLockFile.ChartSet), join(dir, EditionLockFile.ChartSet)),
   };
 }
 

package/edition/resolve-chart-set.mjs

@@ -55,27 +55,21 @@
 //   shape this plane has been bitten by: a claim that outlives its evidence.
 
 import { existsSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
-import { basename, join } from 'node:path';
+import { join } from 'node:path';
 
-import { EditionChannel } from './edition-channel.mjs';
 import {
   EDITION_CHART_SET_FILE,
   CHART_SET_LOCK_SCHEMA_VERSION,
-  DEVELOP_CHART_VERSION_PREFIX,
   EditionChartSetCheck,
   OCI_DIGEST_PATTERN,
   assertRosteredChartSetLock,
   checkEditionChartSet,
-  DEVELOP_CHART_SHA_LENGTH,
-  hasDevelopChartVersionPrefix,
-  isDevelopChartVersion,
   writeEditionChartSet,
 } from './edition-chart-set.mjs';
 import { vendorChartSetConfig } from './edition-config.mjs';
 import { WorkspaceRoot, configureEditionWorkspaceFromProcess, dataRoot, editionsRoot, isEntryModule } from './edition-workspace.mjs';
 import { serializeJson } from './lib.mjs';
 import { OrasRegistry } from './oras.mjs';
-import { deployPinKey } from './pin-source.mjs';
 import {
   loadRegistryCredentialDeclarations,
   resolveRegistryCredential,
@@ -129,11 +123,8 @@ export function isVersionTag(tag) {
  * last: guessing an order for a coordinate whose age is unknown is how a stale
  * set gets pinned as current.
  */
-export function selectNewestIndex(allCandidates) {
-  if (!Array.isArray(allCandidates)) {return null;}
-  // Anything with the develop prefix (`0.0.0-dev.`) is a frozen xema-deploy
-  // snapshot or a malformed develop version, never a release index: it is not a candidate for the release pin.
-  const candidates = allCandidates.filter((c) => !hasDevelopChartVersionPrefix(c.tag));
+export function selectNewestIndex(candidates) {
+  if (!Array.isArray(candidates)) {return null;}
   if (candidates.length === 0) {return null;}
   const undated = candidates.filter((c) => !c.createdAt);
   if (undated.length > 0) {
@@ -155,8 +146,7 @@ export const INDEX_ROSTER_ANNOTATION = 'xema.dev/chart-set-charts';
 
 /**
  * The lock for `publishers`: each publisher's index version, the manifest digest
- * the registry served for that index (`indexDigestsByIndex`, null for a develop
- * snapshot, which has no index chart), and its sealed roster.
+ * the registry served for that index (`indexDigestsByIndex`), and its sealed roster.
  */
 export function buildLock(versionsByIndex, rostersByIndex, indexDigestsByIndex, publishers = chartSetPublishers()) {
   // Every publisher's VERSION first: a pin that resolved nothing for one half is
@@ -193,9 +183,8 @@ export function buildLock(versionsByIndex, rostersByIndex, indexDigestsByIndex,
       }
       // The digest the registry served for the index manifest the roster was read from.
       const indexDigest = indexDigestsByIndex?.[publisher.index];
-      const wellFormed = isDevelopChartVersion(version) ? indexDigest === null : DIGEST_PATTERN.test(String(indexDigest));
-      if (!wellFormed) {
-        throw new Error(`no index manifest digest was read for '${publisher.index}@${version}' (got ${JSON.stringify(indexDigest ?? null)}; a release index needs sha256:<64 hex>, a develop snapshot null)`);
+      if (!DIGEST_PATTERN.test(String(indexDigest))) {
+        throw new Error(`no index manifest digest was read for '${publisher.index}@${version}' (got ${JSON.stringify(indexDigest ?? null)}; a release index needs sha256:<64 hex>)`);
       }
       return { ...publisher, version, indexDigest, charts };
     }),
@@ -277,63 +266,12 @@ function editionDirs() {
     .sort();
 }
 
-const SHA_PATTERN = /^[0-9a-f]{40}$/;
-
-/** The develop chart version xema-deploy publishes for a frozen SHA: `0.0.0-dev.<sha12>`, also the OCI tag. */
-export const developChartVersion = (sha) => `${DEVELOP_CHART_VERSION_PREFIX}${sha.slice(0, DEVELOP_CHART_SHA_LENGTH)}`;
-
-/** Every chart (a directory with a Chart.yaml, library charts included) of an xema-deploy checkout, sorted. */
-function deployChartNames(xemaDeployDir) {
-  const chartsDir = join(xemaDeployDir, 'charts');
-  if (!existsSync(chartsDir)) {throw new Error(`${xemaDeployDir} has no charts/ directory`);}
-  return readdirSync(chartsDir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory() && existsSync(join(chartsDir, entry.name, 'Chart.yaml')))
-    .map((entry) => entry.name)
-    .sort();
-}
-
 /** The registry client for the chart registry, with the data root's declared credential. */
 export function chartRegistryClient() {
   const credential = resolveRegistryCredential({ authority: registryAuthority(), declarations: loadRegistryCredentialDeclarations() });
   return new OrasRegistry({ credential });
 }
 
-/** The manifest digest the chart registry serves for `<chart>:<version>`. */
-const registryManifestDigest = (client) => async (name, version) =>
-  (await client.getManifestByTag(registryRepository(name), version)).digest;
-
-/**
- * The develop chart-set lock: the SAME rostered lock a release pins, over the
- * charts xema-deploy publishes for the frozen SHA. The deploy publisher (the
- * workspace publisher whose repository is the deploy pin role's) publishes every
- * chart directory of its tree at `0.0.0-dev.<sha12>`; the roster records each
- * chart's registry manifest digest, so a consumer pulls by digest exactly as it
- * does for a release. A chart the registry does not serve is refused by name.
- * `lookup(name, version)` defaults to the chart registry and returns the digest.
- */
-export async function resolveDevelopChartSet({ xemaDeployDir, xemaDeploySha, lookup }) {
-  if (!SHA_PATTERN.test(xemaDeploySha ?? '')) {
-    throw new Error(`the deploy checkout SHA is not a 40-hex commit: ${JSON.stringify(xemaDeploySha)}`);
-  }
-  const names = deployChartNames(xemaDeployDir);
-  if (names.length === 0) {throw new Error(`the deploy checkout at ${xemaDeploySha} has no chart (charts/<name>/Chart.yaml)`);}
-  const deployRepo = basename(deployPinKey());
-  const publishers = chartSetPublishers().filter((publisher) => basename(publisher.repo) === deployRepo);
-  if (publishers.length !== 1) {
-    throw new Error(
-      `${publishers.length} chart publishers have repository ${deployRepo} (the deploy pin role); exactly one must, ` +
-        'since it is the publisher whose develop charts this lock pins',
-    );
-  }
-  const version = developChartVersion(xemaDeploySha);
-  const digestOf = lookup ?? registryManifestDigest(chartRegistryClient());
-  const roster = Object.fromEntries(names.map((name) => [name, { version }]));
-  const sealed = await sealRoster(roster, digestOf, `${publishers[0].index}@${version}`);
-  // A develop snapshot has no index chart: its roster is the deploy checkout's chart directories.
-  const lock = buildLock({ [publishers[0].index]: version }, { [publishers[0].index]: sealed }, { [publishers[0].index]: null }, publishers);
-  return assertRosteredChartSetLock(lock, EDITION_CHART_SET_FILE, EditionChannel.Develop);
-}
-
 export function readLock(path = chartSetLockPath()) {
   try {
     return JSON.parse(readFileSync(path, 'utf8'));
@@ -395,7 +333,7 @@ async function main(argv) {
   const check = argv.includes('--check');
   const { versionsByIndex, rostersByIndex, indexDigestsByIndex } = await resolveFromRegistry();
   const next = buildLock(versionsByIndex, rostersByIndex, indexDigestsByIndex);
-  assertRosteredChartSetLock(next, CHART_SET_LOCK_FILE, EditionChannel.Release);
+  assertRosteredChartSetLock(next, CHART_SET_LOCK_FILE);
   const pinText = serializeJson(next);
   const current = readLock();
   // The pin AND every edition's copy of it: one writer, one run, so the N copies

package/edition/resolve-customer-edition.mjs

@@ -326,7 +326,7 @@ export async function resolveCustomerEdition(request) {
   const imageLock = await resolveCustomerImages({ id, catalogue, lock, composed, schemas, inputs, sealOwn: request.sealOwn });
   // The chart-set is copied whole, so it carries the coordinates of the channel it was published on:
   // the edition being written states its channel, and a chart-set of the other one is refused here.
-  const chartSetLock = assertRosteredChartSetLock(catalogue.chartSet, `the catalogue's chart-set of "${catalogue.offeringId}"`, request.channel);
+  const chartSetLock = assertRosteredChartSetLock(catalogue.chartSet, `the catalogue's chart-set of "${catalogue.offeringId}"`);
   return { id, distributionLock: lock, imageLock, authorizationLock, chartSetLock };
 }
 

package/edition/seal-image-digests.mjs

@@ -470,22 +470,17 @@ function replaceLocksTogether(documents) {
 }
 
 /**
- * The seal of one edition's two locks, as ONE write.
- *
- * `digests` (`kind:id` -> registry digest) are the image digests this run seals
- * into the images lock. Each biome's `biomeContentHash` is then RECOMPUTED from
- * its sources over that sealed images lock, and the unsealed distribution lock
- * the resolver wrote is turned into the v5 lock by the kernel's
- * `sealDistributionLock`. A distribution lock that is already sealed is VERIFIED
- * instead: every hash is recomputed and a mismatch is refused, naming the biome.
- *
- * Nothing is written until both documents exist in memory, and the distribution
- * lock is renamed LAST: a seal that fails for any reason before that leaves the
- * committed pair as it was, and the one state a crash between the two renames
- * can leave (images sealed, distribution unsealed) is refused by every reader of
- * a sealed edition.
+ * The lock the images of an edition will actually READ, built IN MEMORY: the committed lock sealed against the image lock
+ * carrying `digests`. Nothing is written. The readability grader asks its question of THIS, never of the committed
+ * unsealed form, which every contracts reader refuses for want of a `schemaVersion` whatever the repositories do.
  */
-export async function sealEditionLocks({ distributionId, root, digests = new Map(), check = false, label = 'dist:seal-digests', vendoredCommit, catalogue, catalogueDigest, fetchManifest = fetchRegistryManifest }) {
+export async function buildSealedEditionLock(options) {
+  const { prepared } = await prepareEditionSeal({ ...options, checkAdapters: false, check: false });
+  return prepared.result.lock;
+}
+
+/** The shared in-memory half of the seal: reads both locks, applies `digests`, seals or verifies. Writes nothing. */
+async function prepareEditionSeal({ distributionId, root, digests = new Map(), check = false, vendoredCommit, catalogue, catalogueDigest, fetchManifest = fetchRegistryManifest, checkAdapters = true }) {
   const schemas = await loadKernelDistributionSchemas();
   const lockPath = join(root, distributionId, 'distribution.lock.json');
   const imagesPath = join(root, distributionId, 'images.lock.json');
@@ -514,7 +509,7 @@ export async function sealEditionLocks({ distributionId, root, digests = new Map
   const editionInputs = catalogue === undefined && vendoredCommit === undefined ? await editionPinnedInputs(distributionId, { schemas }) : undefined;
   const pinned = vendoredCommit ?? ((repo) => createPinnedSourceAuthority({ pins: editionInputs?.repositoryPins ?? committedRepositoryPins() }).vendoredSourceCommitForRepository(repo));
   const lockDocument = raw !== null && typeof raw === 'object' && 'unsealedSchema' in raw ? schemas.parseUnsealedDistributionLock(raw) : schemas.parseDistributionLock(raw);
-  if (lockMountsAdapters(lockDocument)) {
+  if (checkAdapters && lockMountsAdapters(lockDocument)) {
     // The adapter host's row: the verified catalogue's for a customer, the data root's biome index for the vendor.
     const rows = catalogue !== undefined ? catalogue.biomes : (editionInputs?.biomeIndex ?? JSON.parse(readFileSync(biomeIndexPath(), 'utf8')));
     await assertAdapterBundlesMatchHost({ lock: lockDocument, hostRow: adapterHostRow(rows), fetchManifest });
@@ -530,6 +525,28 @@ export async function sealEditionLocks({ distributionId, root, digests = new Map
     check,
     lockPath,
   });
+  return { prepared: { result, rawImages, applied, lockPath, imagesPath } };
+}
+
+/**
+ * The seal of one edition's two locks, as ONE write.
+ *
+ * `digests` (`kind:id` -> registry digest) are the image digests this run seals
+ * into the images lock. Each biome's `biomeContentHash` is then RECOMPUTED from
+ * its sources over that sealed images lock, and the unsealed distribution lock
+ * the resolver wrote is turned into the v5 lock by the kernel's
+ * `sealDistributionLock`. A distribution lock that is already sealed is VERIFIED
+ * instead: every hash is recomputed and a mismatch is refused, naming the biome.
+ *
+ * Nothing is written until both documents exist in memory, and the distribution
+ * lock is renamed LAST: a seal that fails for any reason before that leaves the
+ * committed pair as it was, and the one state a crash between the two renames
+ * can leave (images sealed, distribution unsealed) is refused by every reader of
+ * a sealed edition.
+ */
+export async function sealEditionLocks({ distributionId, root, digests = new Map(), check = false, label = 'dist:seal-digests', vendoredCommit, catalogue, catalogueDigest, fetchManifest = fetchRegistryManifest }) {
+  const { prepared } = await prepareEditionSeal({ distributionId, root, digests, check, vendoredCommit, catalogue, catalogueDigest, fetchManifest });
+  const { result, rawImages, applied, lockPath, imagesPath } = prepared;
   replaceLocksTogether([
     ...(applied > 0 ? [{ path: imagesPath, text: `${JSON.stringify(rawImages, null, 2)}\n` }] : []),
     ...(result.sealed ? [{ path: lockPath, text: serializeJson(result.lock) }] : []),
@@ -760,10 +777,22 @@ async function main() {
   //
   // The practical rule for anything added below: the distribution lock may be
   // regenerated to answer a question; the image lock may not.
+  const { writes, unchanged } = planDigestSeal({
+    subjects: imageLock.subjects,
+    verified: report.subjects,
+  });
+
+  const planned = new Map();
+  for (const w of writes) {planned.set(w.key, w.digest);}
   await assertPlatformCanParseLock({
-    lock: JSON.parse(
-      readFileSync(join(root, distributionId, 'distribution.lock.json'), 'utf8'),
-    ),
+    // The lock the images will READ: sealed in memory with this run's digests, never the committed unsealed form.
+    lock: await buildSealedEditionLock({
+      distributionId,
+      root,
+      digests: planned,
+      catalogue,
+      catalogueDigest,
+    }),
     imageLock,
     distributionId,
     // A vendor edition grades the pins it RESOLVES at (a held repository is graded at the held commit);
@@ -774,11 +803,6 @@ async function main() {
         : JSON.parse(readFileSync(runtimeImageSourceIndexPath(), 'utf8')),
   });
 
-  const { writes, unchanged } = planDigestSeal({
-    subjects: imageLock.subjects,
-    verified: report.subjects,
-  });
-
   const label = check ? 'dist:seal-digests --check' : 'dist:seal-digests';
   console.log(
     `[${label}] "${distributionId}": ${report.subjectCount} subjects verified against ` +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.33.3",
+  "version": "0.33.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -92,6 +92,6 @@
     "typecheck": "tsc --noEmit"
   },
   "xemaRelease": {
-    "sourceDigest": "sha256:fddbe95c5e82a8ecc251e4d62f65718c96630117ec28d6fb9c8f0f05174432bc"
+    "sourceDigest": "sha256:2454817b84225bef480391ca4e8b54c1f2114fb6e3ea60daa96eaa6b810584f2"
   }
 }