@xemahq/xema 0.49.0 → 0.49.1

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -2521,343 +2521,343 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:bbeac7ff01376cb89ed2140526d4795d8e559b3f01612b404a701f19aaa24c6a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/build-ledger.mjs",
       "sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/canonical-evidence-json.mjs",
       "sha256": "sha256:3b32f6786c9fb1c0deadf2f687077356a503b0db766392d2e0254aa1ab78feec"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/canonical-repository-url.mjs",
       "sha256": "sha256:f36e4f7cbe7849789422ec2f0ebce2d62f7dc3684afecc3ac51a32560e72d8a1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/cosign-certificate-constraints.mjs",
       "sha256": "sha256:f8776e6095a477d3a6b510df572de804de73d2f5abf4a0fe9040a926dbe42d73"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/develop-graph.mjs",
       "sha256": "sha256:319db77e708dd73a9dd4a81a963d86e52b030cad3346b104c0862af4e38a2237"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/dispatched-runtime-components.mjs",
       "sha256": "sha256:9712823d183a60108cd002b2d36a9e5c0867b9d576dd02825264a18f7b8ece69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-artifact.mjs",
       "sha256": "sha256:4ca19b111d10252a067a6ee135338716ac5b509b56ba3ac475c05e9ea3c4a805"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-chart-set.mjs",
       "sha256": "sha256:f9f16b58279c8c2619a39c5cc92bdbc334543d1a324304cd5d3b120d66dc8f3a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:58af55e9a2b36ca23485246d44a295260afa240bcdc0649c697563b36085ddaa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:217fa5b1fa25cb50ee4e1b46ea5e086061ff1f44e00198e1dc28f52376f236a0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:e2c6e66378f878499f44b62d060ae50197f40757b2044d9ce05290e367dfe21d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:566a17301ad15b94a06fef12b26bbe39e292ed2bf30a2659a9bf07ce5ce487e0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-kind.mjs",
       "sha256": "sha256:b4f3358ffa81bbafb8c37d158b9e01032a7358c38b9d6e5aca409091f989e47a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:4122dfb12c0f5e9fb44c96a277f8c2a308823095f0e4bed357189f7538230eb9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-publisher.mjs",
       "sha256": "sha256:8803b41067d81acbc35a8974426f606b5b8168b7a9c2581c16586a86f36db50f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-source-pins.mjs",
       "sha256": "sha256:b141474fff33b06734fb62cd2552752b991c8267bb1c9bccb22a81dd80e91c6c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:892b360f9f80d2308b0b12f9b99658ae06173878d9b71cf5d6fc8bd717b3c86e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4bea69437af5a36c139b5b41d0ecf2d1ddcf3f871e10c78e3d351f608eedca3b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:eb46e4d6a79dfac5536b7a439ab9df7dd4b03af369bdcfa9fcdd522aa1aab8dd"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/first-party-source-ids.mjs",
       "sha256": "sha256:20cb1ad7cfb8c6e6686a6be5a51289da4bba76c20b58d9c1b5b6b3813a38dc1c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/fulcio-certificate-extensions.mjs",
       "sha256": "sha256:6f1f5a8ea110a489f7aff4bfb8e0b2d058919fe3e8ba4a1e5e8396fca24861b7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/git-json.mjs",
       "sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/git-source-auth.mjs",
       "sha256": "sha256:c1b32aa6f7d59798db58238d632cafeadbd4f07376396a31acdeb5f0ac56dcac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:6902845b5a015c6576b787fe9b443bb2876e65bcadbad5b62ef724a373b9be00"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:cf0326f29b6488438497c40665feffa68b470f493cf69a2f3fb5dea9624c40d4"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/kernel-contract-source-path-set.mjs",
       "sha256": "sha256:bc4756f217d80fd8f802932f47da71ab14e782873fa9fa977002a94e058d8a9e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/kernel-package.mjs",
       "sha256": "sha256:b468039179d89b0251abcdbb3020c6dcadb86a675c398a3cbb4cbca53c59830e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/lib.mjs",
       "sha256": "sha256:89b6ed1883198fc0b6eff89d9797292d80e307ad983fad559a27edde8c6c644f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:82c0fadc5b10c6f60a1258ad685aeb33e58a53c14f83d4b6d468ac71a5e4e7b4"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:32fa918729a83587b4d3bca6e5fe381f5a525397ebc49d52729ec1f8cf216c37"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/sigstore-bundle-media-type.mjs",
       "sha256": "sha256:e0aa5a3992f0385ddbbe69eb0307d642ac428ef516c8394816ac4fd52e0ac39c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:9c351f60e8ea838f445f89c3709c60b7f13b021b78d6e40eaef91350a793f0ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/third-party-admission.mjs",
       "sha256": "sha256:7e32f631a8948e2b93a5cfa163390d52d2a8d9ade87a637c7fe1fc6351fe5974"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/third-party-certificate-extensions.mjs",
       "sha256": "sha256:3293267b09452199f605001d8c14070d1c822b77390caee4088e17b059b7b05d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/third-party-source-pins.mjs",
       "sha256": "sha256:6f12feb9061bd4ea3e5aeab3f369c081ab58da335c0d281e21b250251e1c0dd9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/trust-policy-arming.mjs",
       "sha256": "sha256:6f6f192118407e71a744087caea988bcf3d33aca9803217bceb8134d7e2b9120"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/trust-policy-image-ownership.mjs",
       "sha256": "sha256:be0c787c6a75124f0143fc0ce3b127a94e3bb7f6aa64e282c91dd84e566e550e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/verify-catalogue-evidence.mjs",
       "sha256": "sha256:156d0ee39210658ec489609629c5b9cddd3ce5b3938d8980dcf8282ae4be60bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:958360f7889985c48abb048852c5bbba349cd7353ce4b532c4511b4902380fac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:18c28e9fa2a6b7d8589c8434fc6ed9f1e93954d41339813e711ed0fbbcf5c61d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.49.0",
+      "version": "0.49.1",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/edition/dist-check.mjs

@@ -64,7 +64,7 @@ import {
   validateServiceDependencyOwnerParity,
 } from './lib.mjs';
 import { commandFor } from './remedy-command.mjs';
-import { resolveDistributionWithIndex } from './resolve-distribution.mjs';
+import { assertReleaseGitSourcesDeclareNoBundle, resolveDistributionWithIndex } from './resolve-distribution.mjs';
 import {
   resolveDistributionDeclaredSources,
   resolveDistributionRequiredPlatforms,
@@ -160,6 +160,7 @@ export async function checkDistributionLock(id) {
   const lockPath = join(editionsRoot(), id, 'distribution.lock.json');
   try {
     const { lock: fresh, index } = await resolveDistributionWithIndex(id);
+    assertReleaseGitSourcesDeclareNoBundle(fresh, index);
     const verdict = await compareCommittedLock(lockPath, fresh);
     if (verdict === LockCheck.MISSING) {
       console.error(

package/edition/locked-bundle-signer.mjs

@@ -3,7 +3,8 @@
 // Every `bundleSource: {kind: 'oci'}` row of a lock (a biome's, or one of its host modules') states WHO signs its bundle:
 // `bundleSigner: {policyId, signer}`, the kernel's `lockedBundleSignerOf` projection of ONE row of the data root's evidence
 // trust policy. The row is selected, never defaulted:
-//   - a third-party row by its pin (`third-party-source-pins.json`), whose `bundle.signerPolicyId` names an
+//   - a git-sourced row (one with a lock `source`) carries no OCI bundle at all, and a lock stating one is refused;
+//   - a third-party row (no `source`, `isThirdPartyOciRow`) by its pin (`third-party-source-pins.json`), whose `bundle.signerPolicyId` names an
 //     `oidc-certificate` row held to the checks `thirdPartySignerRow` makes;
 //   - a first-party row by the data root's `firstPartyBundleSigner.policyId`, a `public-key` row whose key is bound to
 //     no other row.
@@ -20,7 +21,7 @@ import { dataRoot, kernelDistPath, kernelPackageDir } from './edition-workspace.
 import { loadPinnedDeclaredTrustPolicy } from './evidence-trust-pin.mjs';
 import { loadTrustedThirdPartySourcePins } from './third-party-pins-trusted.mjs';
 import { thirdPartySignerRow } from './third-party-source-evidence.mjs';
-import { OCI_BUNDLE_SOURCE_KIND, isThirdPartyOciEntry } from './third-party-subjects.mjs';
+import { OCI_BUNDLE_SOURCE_KIND, isThirdPartyOciRow } from './third-party-subjects.mjs';
 
 const requireFromHere = createRequire(import.meta.url);
 
@@ -47,6 +48,10 @@ export class BundleSignerKeyBoundElsewhereError extends BundleSignerError {}
 export class BundleSignerPolicyNotSelectedError extends BundleSignerError {}
 /** An OCI row of a lock states no `bundleSigner`. */
 export class BundleSignerMissingError extends BundleSignerError {}
+/** A lock row drawn from a git `source` states an OCI `bundleSource`: a git-sourced biome is built from that source, never pulled as a bundle. */
+export class BundleSourceOnGitRowError extends BundleSignerError {}
+/** A resolve found an OCI host-module bundle on a git-sourced biome: such a bundle reaches an edition only through an `oci` source. */
+export class GitSourcedHostModuleBundleError extends BundleSignerError {}
 /** The loaded kernel does not export what the bundle signer plane needs. */
 export class BundleSignerKernelUnsupportedError extends BundleSignerError {}
 
@@ -71,6 +76,16 @@ export function loadBundleSignerKernel() {
 const describeSubject = ({ biomeId, componentKey }) =>
   componentKey === undefined ? `biome "${biomeId}"` : `host module "${componentKey}" of biome "${biomeId}"`;
 
+/** A git-sourced row carries no OCI bundle (resolve omits it), so no signer is selected for one; a lock stating one is refused. */
+function assertNotGitSourced(subject) {
+  if (subject.source !== undefined) {
+    throw new BundleSourceOnGitRowError(
+      `${describeSubject(subject)} is drawn from git source "${subject.source?.name ?? subject.source}" and states an OCI bundleSource; a git-sourced biome carries none ` +
+        '(a third-party biome is an OCI bundle only as an `oci` source with a third-party pin)',
+    );
+  }
+}
+
 const rowsOf = (policy, policyId) => policy.policies.filter((row) => row.policyId === policyId);
 
 /**
@@ -93,7 +108,7 @@ export function createBundleSignerSelection({ policy, thirdPartyPins, firstParty
   function requireKind(subject, row, kind) {
     if (row.kind !== kind) {
       throw new BundleSignerKindMismatchError(
-        `${describeSubject(subject)}: trust policy row "${row.policyId}" is of kind ${JSON.stringify(row.kind)}, but a ${isThirdPartyOciEntry(subject) ? 'third-party' : 'first-party'} bundle is signed by a "${kind}" row`,
+        `${describeSubject(subject)}: trust policy row "${row.policyId}" is of kind ${JSON.stringify(row.kind)}, but a ${isThirdPartyOciRow(subject) ? 'third-party' : 'first-party'} bundle is signed by a "${kind}" row`,
       );
     }
   }
@@ -137,8 +152,9 @@ export function createBundleSignerSelection({ policy, thirdPartyPins, firstParty
   }
 
   function selectedRow(subject) {
+    assertNotGitSourced(subject);
     requirePolicy(subject);
-    return isThirdPartyOciEntry(subject) ? thirdPartyRow(subject) : firstPartyRow(subject);
+    return isThirdPartyOciRow(subject) ? thirdPartyRow(subject) : firstPartyRow(subject);
   }
 
   const signerFor = (subject) => {
@@ -199,12 +215,12 @@ const isOci = (row) => row.bundleSource?.kind === OCI_BUNDLE_SOURCE_KIND;
 /** Every OCI subject of a lock: each biome and each host module whose `bundleSource` is OCI, with the biome's origin and repo. */
 export function lockBundleSubjects(lock) {
   return lock.biomes.flatMap((biome) => [
-    ...(isOci(biome) ? [{ row: biome, subject: { biomeId: biome.id, origin: biome.origin, repo: biome.repo, bundleSource: biome.bundleSource } }] : []),
+    ...(isOci(biome) ? [{ row: biome, subject: { biomeId: biome.id, origin: biome.origin, repo: biome.repo, source: biome.source, bundleSource: biome.bundleSource } }] : []),
     ...(biome.hostModules ?? [])
       .filter(isOci)
       .map((hostModule) => ({
         row: hostModule,
-        subject: { biomeId: biome.id, componentKey: hostModule.componentKey, origin: biome.origin, repo: biome.repo, bundleSource: hostModule.bundleSource },
+        subject: { biomeId: biome.id, componentKey: hostModule.componentKey, origin: biome.origin, repo: biome.repo, source: biome.source, bundleSource: hostModule.bundleSource },
       })),
   ]);
 }
@@ -219,6 +235,7 @@ export function assertLockBundleSigners({ lock, selection, schemas }) {
   if (subjects.length === 0) {return;}
   const chosen = selection ?? loadBundleSignerSelection({ dataRoot: dataRoot(), schemas });
   for (const { row, subject } of subjects) {
+    assertNotGitSourced(subject);
     chosen.assertSealed(subject, row.bundleSigner);
   }
 }

package/edition/resolve-distribution.mjs

@@ -95,7 +95,7 @@ import {
   validateImmutableDistributionLock,
   validateServiceDependencyOwnerParity,
 } from './lib.mjs';
-import { BundleSignerPolicyAbsentError, loadBundleSignerSelection } from './locked-bundle-signer.mjs';
+import { BundleSignerPolicyAbsentError, GitSourcedHostModuleBundleError, loadBundleSignerSelection } from './locked-bundle-signer.mjs';
 import {
   assertInstalledOperationCeilingAdmitted,
   assertOperationGrantsAdmitted,
@@ -1805,11 +1805,29 @@ export function resolveDistributionFromInputs(
     }
     return composed.bundleSigners.signerFor(subject);
   };
-  const bundleSignerFor = (e) => (e.bundleSource?.kind === 'oci' ? { bundleSigner: bundleSignerOf(e, e.bundleSource) } : {});
-  const hostModulesOf = (e) =>
-    (Array.isArray(e.hostModules) ? e.hostModules : []).map((hostModule) =>
-      hostModule.bundleSource?.kind === 'oci' ? { ...hostModule, bundleSigner: bundleSignerOf(e, hostModule.bundleSource, hostModule.componentKey) } : hostModule,
-    );
+  // A row drawn from a GIT source carries no OCI bundle (biome-level; an OCI host-module bundle is refused below), hence no bundleSigner: it is built
+  // from the pinned source, and the manifest's `bundleSource` names a release artifact not built from this commit.
+  // Omitted here, at the copy point. (An entry of a declared `oci` source has a stamp but no record: not git.)
+  const isGitSourced = (e) => e.source !== undefined && sourceRecords.has(e.source);
+  const bundleSourceOf = (e) => (e.bundleSource === undefined || isGitSourced(e) ? {} : { bundleSource: e.bundleSource });
+  const bundleSignerFor = (e) => (e.bundleSource?.kind === 'oci' && !isGitSourced(e) ? { bundleSigner: bundleSignerOf(e, e.bundleSource) } : {});
+  const hostModuleOf = (e, hostModule) => {
+    if (isGitSourced(e)) {
+      // The lock schema requires a host module's bundleSource, so an OCI one cannot be omitted: it is refused, in every
+      // channel. A non-OCI one (npm, ...) is untouched.
+      if (hostModule.bundleSource?.kind === 'oci') {
+        throw new GitSourcedHostModuleBundleError(
+          `host module "${hostModule.componentKey}" of biome "${e.id}" (git source "${e.source}") declares an OCI bundleSource (${hostModule.bundleSource.ociRef}); ` +
+            'such a host module bundle reaches an edition only through an `oci` source with a third-party source pin',
+        );
+      }
+      return hostModule;
+    }
+    return hostModule.bundleSource?.kind === 'oci'
+      ? { ...hostModule, bundleSigner: bundleSignerOf(e, hostModule.bundleSource, hostModule.componentKey) }
+      : hostModule;
+  };
+  const hostModulesOf = (e) => (Array.isArray(e.hostModules) ? e.hostModules : []).map((hostModule) => hostModuleOf(e, hostModule));
 
   // (5d) Dispatched runtime components — every `runtime-image` edge of a
   // shipped biome must resolve to a runtime component of a biome in the index.
@@ -1994,7 +2012,7 @@ export function resolveDistributionFromInputs(
       // unconditional key would move the bytes of every committed lock for a
       // fact none of their entries carries. A lock in which SOME biome carries
       // it still is the one v5 grammar once sealed.
-      ...(e.bundleSource === undefined ? {} : { bundleSource: e.bundleSource }),
+      ...bundleSourceOf(e),
       ...bundleSignerFor(e),
       serviceDependencies: Array.isArray(e.serviceDependencies)
         ? e.serviceDependencies
@@ -2401,6 +2419,29 @@ export async function resolveDistributionWithIndex(id, { materialize, inputs, re
   return { lock, index };
 }
 
+/**
+ * A release carries a third-party biome only as an `oci` source with a third-party pin. A git-sourced third-party biome
+ * whose manifest declares an OCI bundleSource (biome-level or host module) names a main-release artifact that is not
+ * built from the pinned commit, so a release resolve refuses it. `lock` is the resolved lock (a git row carries
+ * `source`), `index` the index it was resolved from (which still holds the manifest's bundleSource).
+ */
+export function assertReleaseGitSourcesDeclareNoBundle(lock, index) {
+  const byId = new Map(index.map((entry) => [entry.id, entry]));
+  for (const biome of lock.biomes) {
+    if (biome.source === undefined) {continue;}
+    const entry = byId.get(biome.id);
+    const declared = [entry?.bundleSource, ...(entry?.hostModules ?? []).map((hostModule) => hostModule.bundleSource)].find(
+      (bundleSource) => bundleSource?.kind === 'oci',
+    );
+    if (declared !== undefined) {
+      throw new Error(
+        `biome "${biome.id}" is drawn from git source "${biome.source.name}" and declares an OCI bundleSource (${declared.ociRef}); ` +
+          'a release does not carry it: declare the biome as an `oci` source with a third-party source pin instead',
+      );
+    }
+  }
+}
+
 /**
  * Resolve and persist one distribution lock. The CLI and the plane refresh use
  * this exact writer so an in-process refresh cannot drift from the standalone
@@ -2410,6 +2451,7 @@ export async function writeResolvedDistribution(id, { log = true, materialize, f
   const { lock, index } = await resolveDistributionWithIndex(id, { materialize });
   await assertAdapterBundlesMatchHost({ lock, hostRow: adapterHostRow(index), fetchManifest });
   const outPath = join(editionsRoot(), id, 'distribution.lock.json');
+  assertReleaseGitSourcesDeclareNoBundle(lock, index);
   assertReleaseContent(lock, `the distribution lock for "${id}"`);
   assertReleaseEditionTree(join(editionsRoot(), id));
   mkdirSync(join(editionsRoot(), id), { recursive: true });

package/edition/third-party-subjects.mjs

@@ -32,7 +32,8 @@ export const isThirdPartyOciEntry = (entry) => hasOciBundleSource(entry) && isTh
 /**
  * Refuse an OCI `bundleSource` on a row whose origin is not third-party: only a third-party biome is pulled from an OCI
  * bundle by digest, so the vendor's origin on such a row would place an unevidenced bundle in the vendor's trust domain.
- * A row drawn from a git `source` is held by the source walk and is not this key.
+ * A row drawn from a git `source` is not this key and carries no OCI `bundleSource` at all: resolve omits the manifest's
+ * (it names a release artifact not built from the pinned commit), and a lock stating one is refused (`locked-bundle-signer.mjs`).
  */
 export function assertOciBundleSourceOrigin(row, label) {
   if (row.source === undefined && hasOciBundleSource(row) && !isThirdPartyOrigin(row)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.49.0",
+  "version": "0.49.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -92,6 +92,6 @@
     "typecheck": "tsc --noEmit"
   },
   "xemaRelease": {
-    "sourceDigest": "sha256:b0bda6e99522eaf8d1c8c8ad73de127d4c28dd617ca90a3563cbb150a0a980f8"
+    "sourceDigest": "sha256:f330048c083619658f4721c67c1c4df25e1a9b64b2664a513e871b970d281639"
   }
 }