@xemahq/xema 0.50.1 → 0.51.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -64843,7 +64843,9 @@ var SUPPORTED_EDITION_PROTOCOLS = Object.freeze([
|
|
|
64843
64843
|
Object.freeze({ version: 31, contentDigest: "b2026847fdd202e7b9e05815cdc2c9819b60be7007c789cc5b5f291c9c682fdd" }),
|
|
64844
64844
|
Object.freeze({ version: 32, contentDigest: "a4ca824486052ca7f61b9a68f759b798defb620b6b3e9cbaab2c701bee2c6700" }),
|
|
64845
64845
|
Object.freeze({ version: 33, contentDigest: "b070713e7abeeefad6da3a9053843b0f7420a466f6d504f60aaa00ef196b2b05" }),
|
|
64846
|
-
Object.freeze({ version: 34, contentDigest: "370ceef5956d66035265ddbf7b9c46aa686cd10c1e95171c806c0d590ef5f49c" })
|
|
64846
|
+
Object.freeze({ version: 34, contentDigest: "370ceef5956d66035265ddbf7b9c46aa686cd10c1e95171c806c0d590ef5f49c" }),
|
|
64847
|
+
Object.freeze({ version: 35, contentDigest: "3e616e532c45ecbd6277dde31c0d9c12a12139abe06cc0f56329d1ffe9813f8d" }),
|
|
64848
|
+
Object.freeze({ version: 36, contentDigest: "b6b0c8ec3fc4182c6c3b623685af6293cfed1321f8d7c1891a83652d864c3df0" })
|
|
64847
64849
|
]);
|
|
64848
64850
|
var KERNEL_EDITION_PROTOCOL_FILE = "dist/edition-protocol/edition-protocol.json";
|
|
64849
64851
|
var KERNEL_EDITION_CONTRACT_FILE = "dist/edition-protocol/edition-contract.schema.json";
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
|
-
"artifactSha256": "sha256:
|
|
3
|
+
"artifactSha256": "sha256:fea0fc45ae4b317a5ab2eb707b8d940bdfa188c9af8bde28cc42b5e43686e7ce",
|
|
4
4
|
"esbuild": {
|
|
5
5
|
"version": "0.28.2"
|
|
6
6
|
},
|
|
@@ -2521,343 +2521,343 @@
|
|
|
2521
2521
|
},
|
|
2522
2522
|
{
|
|
2523
2523
|
"package": "@xemahq/xema",
|
|
2524
|
-
"version": "0.
|
|
2524
|
+
"version": "0.51.0",
|
|
2525
2525
|
"path": "edition/adapter-host-versions.mjs",
|
|
2526
2526
|
"sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
|
|
2527
2527
|
},
|
|
2528
2528
|
{
|
|
2529
2529
|
"package": "@xemahq/xema",
|
|
2530
|
-
"version": "0.
|
|
2530
|
+
"version": "0.51.0",
|
|
2531
2531
|
"path": "edition/authorization-base.mjs",
|
|
2532
2532
|
"sha256": "sha256:bbeac7ff01376cb89ed2140526d4795d8e559b3f01612b404a701f19aaa24c6a"
|
|
2533
2533
|
},
|
|
2534
2534
|
{
|
|
2535
2535
|
"package": "@xemahq/xema",
|
|
2536
|
-
"version": "0.
|
|
2536
|
+
"version": "0.51.0",
|
|
2537
2537
|
"path": "edition/build-ledger.mjs",
|
|
2538
2538
|
"sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
|
|
2539
2539
|
},
|
|
2540
2540
|
{
|
|
2541
2541
|
"package": "@xemahq/xema",
|
|
2542
|
-
"version": "0.
|
|
2542
|
+
"version": "0.51.0",
|
|
2543
2543
|
"path": "edition/canonical-evidence-json.mjs",
|
|
2544
2544
|
"sha256": "sha256:3b32f6786c9fb1c0deadf2f687077356a503b0db766392d2e0254aa1ab78feec"
|
|
2545
2545
|
},
|
|
2546
2546
|
{
|
|
2547
2547
|
"package": "@xemahq/xema",
|
|
2548
|
-
"version": "0.
|
|
2548
|
+
"version": "0.51.0",
|
|
2549
2549
|
"path": "edition/canonical-repository-url.mjs",
|
|
2550
2550
|
"sha256": "sha256:f36e4f7cbe7849789422ec2f0ebce2d62f7dc3684afecc3ac51a32560e72d8a1"
|
|
2551
2551
|
},
|
|
2552
2552
|
{
|
|
2553
2553
|
"package": "@xemahq/xema",
|
|
2554
|
-
"version": "0.
|
|
2554
|
+
"version": "0.51.0",
|
|
2555
2555
|
"path": "edition/connector-source-authority.mjs",
|
|
2556
2556
|
"sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
|
|
2557
2557
|
},
|
|
2558
2558
|
{
|
|
2559
2559
|
"package": "@xemahq/xema",
|
|
2560
|
-
"version": "0.
|
|
2560
|
+
"version": "0.51.0",
|
|
2561
2561
|
"path": "edition/cosign-certificate-constraints.mjs",
|
|
2562
2562
|
"sha256": "sha256:f8776e6095a477d3a6b510df572de804de73d2f5abf4a0fe9040a926dbe42d73"
|
|
2563
2563
|
},
|
|
2564
2564
|
{
|
|
2565
2565
|
"package": "@xemahq/xema",
|
|
2566
|
-
"version": "0.
|
|
2566
|
+
"version": "0.51.0",
|
|
2567
2567
|
"path": "edition/develop-graph.mjs",
|
|
2568
2568
|
"sha256": "sha256:319db77e708dd73a9dd4a81a963d86e52b030cad3346b104c0862af4e38a2237"
|
|
2569
2569
|
},
|
|
2570
2570
|
{
|
|
2571
2571
|
"package": "@xemahq/xema",
|
|
2572
|
-
"version": "0.
|
|
2572
|
+
"version": "0.51.0",
|
|
2573
2573
|
"path": "edition/dispatched-runtime-components.mjs",
|
|
2574
2574
|
"sha256": "sha256:9712823d183a60108cd002b2d36a9e5c0867b9d576dd02825264a18f7b8ece69"
|
|
2575
2575
|
},
|
|
2576
2576
|
{
|
|
2577
2577
|
"package": "@xemahq/xema",
|
|
2578
|
-
"version": "0.
|
|
2578
|
+
"version": "0.51.0",
|
|
2579
2579
|
"path": "edition/distribution-paths.mjs",
|
|
2580
2580
|
"sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
|
|
2581
2581
|
},
|
|
2582
2582
|
{
|
|
2583
2583
|
"package": "@xemahq/xema",
|
|
2584
|
-
"version": "0.
|
|
2584
|
+
"version": "0.51.0",
|
|
2585
2585
|
"path": "edition/edition-artifact.mjs",
|
|
2586
2586
|
"sha256": "sha256:4ca19b111d10252a067a6ee135338716ac5b509b56ba3ac475c05e9ea3c4a805"
|
|
2587
2587
|
},
|
|
2588
2588
|
{
|
|
2589
2589
|
"package": "@xemahq/xema",
|
|
2590
|
-
"version": "0.
|
|
2590
|
+
"version": "0.51.0",
|
|
2591
2591
|
"path": "edition/edition-channel.mjs",
|
|
2592
2592
|
"sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
|
|
2593
2593
|
},
|
|
2594
2594
|
{
|
|
2595
2595
|
"package": "@xemahq/xema",
|
|
2596
|
-
"version": "0.
|
|
2596
|
+
"version": "0.51.0",
|
|
2597
2597
|
"path": "edition/edition-chart-set.mjs",
|
|
2598
2598
|
"sha256": "sha256:f9f16b58279c8c2619a39c5cc92bdbc334543d1a324304cd5d3b120d66dc8f3a"
|
|
2599
2599
|
},
|
|
2600
2600
|
{
|
|
2601
2601
|
"package": "@xemahq/xema",
|
|
2602
|
-
"version": "0.
|
|
2602
|
+
"version": "0.51.0",
|
|
2603
2603
|
"path": "edition/edition-config.mjs",
|
|
2604
2604
|
"sha256": "sha256:58af55e9a2b36ca23485246d44a295260afa240bcdc0649c697563b36085ddaa"
|
|
2605
2605
|
},
|
|
2606
2606
|
{
|
|
2607
2607
|
"package": "@xemahq/xema",
|
|
2608
|
-
"version": "0.
|
|
2608
|
+
"version": "0.51.0",
|
|
2609
2609
|
"path": "edition/edition-constants.mjs",
|
|
2610
2610
|
"sha256": "sha256:217fa5b1fa25cb50ee4e1b46ea5e086061ff1f44e00198e1dc28f52376f236a0"
|
|
2611
2611
|
},
|
|
2612
2612
|
{
|
|
2613
2613
|
"package": "@xemahq/xema",
|
|
2614
|
-
"version": "0.
|
|
2614
|
+
"version": "0.51.0",
|
|
2615
2615
|
"path": "edition/edition-contract-parse.mjs",
|
|
2616
2616
|
"sha256": "sha256:e2c6e66378f878499f44b62d060ae50197f40757b2044d9ce05290e367dfe21d"
|
|
2617
2617
|
},
|
|
2618
2618
|
{
|
|
2619
2619
|
"package": "@xemahq/xema",
|
|
2620
|
-
"version": "0.
|
|
2620
|
+
"version": "0.51.0",
|
|
2621
2621
|
"path": "edition/edition-contract.json",
|
|
2622
2622
|
"sha256": "sha256:566a17301ad15b94a06fef12b26bbe39e292ed2bf30a2659a9bf07ce5ce487e0"
|
|
2623
2623
|
},
|
|
2624
2624
|
{
|
|
2625
2625
|
"package": "@xemahq/xema",
|
|
2626
|
-
"version": "0.
|
|
2626
|
+
"version": "0.51.0",
|
|
2627
2627
|
"path": "edition/edition-kind.mjs",
|
|
2628
2628
|
"sha256": "sha256:b4f3358ffa81bbafb8c37d158b9e01032a7358c38b9d6e5aca409091f989e47a"
|
|
2629
2629
|
},
|
|
2630
2630
|
{
|
|
2631
2631
|
"package": "@xemahq/xema",
|
|
2632
|
-
"version": "0.
|
|
2632
|
+
"version": "0.51.0",
|
|
2633
2633
|
"path": "edition/edition-protocol.mjs",
|
|
2634
|
-
"sha256": "sha256:
|
|
2634
|
+
"sha256": "sha256:12ef72ab05c6a691edf1e704d38c1ee29a130d34ffa0fb141288b4d3ffaf9ae1"
|
|
2635
2635
|
},
|
|
2636
2636
|
{
|
|
2637
2637
|
"package": "@xemahq/xema",
|
|
2638
|
-
"version": "0.
|
|
2638
|
+
"version": "0.51.0",
|
|
2639
2639
|
"path": "edition/edition-publisher.mjs",
|
|
2640
2640
|
"sha256": "sha256:8803b41067d81acbc35a8974426f606b5b8168b7a9c2581c16586a86f36db50f"
|
|
2641
2641
|
},
|
|
2642
2642
|
{
|
|
2643
2643
|
"package": "@xemahq/xema",
|
|
2644
|
-
"version": "0.
|
|
2644
|
+
"version": "0.51.0",
|
|
2645
2645
|
"path": "edition/edition-source-pins.mjs",
|
|
2646
2646
|
"sha256": "sha256:b141474fff33b06734fb62cd2552752b991c8267bb1c9bccb22a81dd80e91c6c"
|
|
2647
2647
|
},
|
|
2648
2648
|
{
|
|
2649
2649
|
"package": "@xemahq/xema",
|
|
2650
|
-
"version": "0.
|
|
2650
|
+
"version": "0.51.0",
|
|
2651
2651
|
"path": "edition/edition-workspace.mjs",
|
|
2652
2652
|
"sha256": "sha256:892b360f9f80d2308b0b12f9b99658ae06173878d9b71cf5d6fc8bd717b3c86e"
|
|
2653
2653
|
},
|
|
2654
2654
|
{
|
|
2655
2655
|
"package": "@xemahq/xema",
|
|
2656
|
-
"version": "0.
|
|
2656
|
+
"version": "0.51.0",
|
|
2657
2657
|
"path": "edition/evidence-checkout.mjs",
|
|
2658
2658
|
"sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
|
|
2659
2659
|
},
|
|
2660
2660
|
{
|
|
2661
2661
|
"package": "@xemahq/xema",
|
|
2662
|
-
"version": "0.
|
|
2662
|
+
"version": "0.51.0",
|
|
2663
2663
|
"path": "edition/evidence-grammars.mjs",
|
|
2664
2664
|
"sha256": "sha256:4bea69437af5a36c139b5b41d0ecf2d1ddcf3f871e10c78e3d351f608eedca3b"
|
|
2665
2665
|
},
|
|
2666
2666
|
{
|
|
2667
2667
|
"package": "@xemahq/xema",
|
|
2668
|
-
"version": "0.
|
|
2668
|
+
"version": "0.51.0",
|
|
2669
2669
|
"path": "edition/evidence-trust-pin.mjs",
|
|
2670
2670
|
"sha256": "sha256:eb46e4d6a79dfac5536b7a439ab9df7dd4b03af369bdcfa9fcdd522aa1aab8dd"
|
|
2671
2671
|
},
|
|
2672
2672
|
{
|
|
2673
2673
|
"package": "@xemahq/xema",
|
|
2674
|
-
"version": "0.
|
|
2674
|
+
"version": "0.51.0",
|
|
2675
2675
|
"path": "edition/first-party-source-ids.mjs",
|
|
2676
2676
|
"sha256": "sha256:20cb1ad7cfb8c6e6686a6be5a51289da4bba76c20b58d9c1b5b6b3813a38dc1c"
|
|
2677
2677
|
},
|
|
2678
2678
|
{
|
|
2679
2679
|
"package": "@xemahq/xema",
|
|
2680
|
-
"version": "0.
|
|
2680
|
+
"version": "0.51.0",
|
|
2681
2681
|
"path": "edition/fulcio-certificate-extensions.mjs",
|
|
2682
2682
|
"sha256": "sha256:6f1f5a8ea110a489f7aff4bfb8e0b2d058919fe3e8ba4a1e5e8396fca24861b7"
|
|
2683
2683
|
},
|
|
2684
2684
|
{
|
|
2685
2685
|
"package": "@xemahq/xema",
|
|
2686
|
-
"version": "0.
|
|
2686
|
+
"version": "0.51.0",
|
|
2687
2687
|
"path": "edition/git-json.mjs",
|
|
2688
2688
|
"sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
|
|
2689
2689
|
},
|
|
2690
2690
|
{
|
|
2691
2691
|
"package": "@xemahq/xema",
|
|
2692
|
-
"version": "0.
|
|
2692
|
+
"version": "0.51.0",
|
|
2693
2693
|
"path": "edition/git-source-auth.mjs",
|
|
2694
2694
|
"sha256": "sha256:c1b32aa6f7d59798db58238d632cafeadbd4f07376396a31acdeb5f0ac56dcac"
|
|
2695
2695
|
},
|
|
2696
2696
|
{
|
|
2697
2697
|
"package": "@xemahq/xema",
|
|
2698
|
-
"version": "0.
|
|
2698
|
+
"version": "0.51.0",
|
|
2699
2699
|
"path": "edition/image-delivery-entitlement-descriptor.mjs",
|
|
2700
2700
|
"sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
|
|
2701
2701
|
},
|
|
2702
2702
|
{
|
|
2703
2703
|
"package": "@xemahq/xema",
|
|
2704
|
-
"version": "0.
|
|
2704
|
+
"version": "0.51.0",
|
|
2705
2705
|
"path": "edition/image-evidence-replay-state.mjs",
|
|
2706
2706
|
"sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
|
|
2707
2707
|
},
|
|
2708
2708
|
{
|
|
2709
2709
|
"package": "@xemahq/xema",
|
|
2710
|
-
"version": "0.
|
|
2710
|
+
"version": "0.51.0",
|
|
2711
2711
|
"path": "edition/image-evidence.mjs",
|
|
2712
2712
|
"sha256": "sha256:6902845b5a015c6576b787fe9b443bb2876e65bcadbad5b62ef724a373b9be00"
|
|
2713
2713
|
},
|
|
2714
2714
|
{
|
|
2715
2715
|
"package": "@xemahq/xema",
|
|
2716
|
-
"version": "0.
|
|
2716
|
+
"version": "0.51.0",
|
|
2717
2717
|
"path": "edition/kernel-capability-domain.mjs",
|
|
2718
2718
|
"sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
|
|
2719
2719
|
},
|
|
2720
2720
|
{
|
|
2721
2721
|
"package": "@xemahq/xema",
|
|
2722
|
-
"version": "0.
|
|
2722
|
+
"version": "0.51.0",
|
|
2723
2723
|
"path": "edition/kernel-contract-authority.mjs",
|
|
2724
2724
|
"sha256": "sha256:cf0326f29b6488438497c40665feffa68b470f493cf69a2f3fb5dea9624c40d4"
|
|
2725
2725
|
},
|
|
2726
2726
|
{
|
|
2727
2727
|
"package": "@xemahq/xema",
|
|
2728
|
-
"version": "0.
|
|
2728
|
+
"version": "0.51.0",
|
|
2729
2729
|
"path": "edition/kernel-contract-source-path-set.mjs",
|
|
2730
2730
|
"sha256": "sha256:bc4756f217d80fd8f802932f47da71ab14e782873fa9fa977002a94e058d8a9e"
|
|
2731
2731
|
},
|
|
2732
2732
|
{
|
|
2733
2733
|
"package": "@xemahq/xema",
|
|
2734
|
-
"version": "0.
|
|
2734
|
+
"version": "0.51.0",
|
|
2735
2735
|
"path": "edition/kernel-package.mjs",
|
|
2736
2736
|
"sha256": "sha256:b468039179d89b0251abcdbb3020c6dcadb86a675c398a3cbb4cbca53c59830e"
|
|
2737
2737
|
},
|
|
2738
2738
|
{
|
|
2739
2739
|
"package": "@xemahq/xema",
|
|
2740
|
-
"version": "0.
|
|
2740
|
+
"version": "0.51.0",
|
|
2741
2741
|
"path": "edition/lib.mjs",
|
|
2742
2742
|
"sha256": "sha256:89b6ed1883198fc0b6eff89d9797292d80e307ad983fad559a27edde8c6c644f"
|
|
2743
2743
|
},
|
|
2744
2744
|
{
|
|
2745
2745
|
"package": "@xemahq/xema",
|
|
2746
|
-
"version": "0.
|
|
2746
|
+
"version": "0.51.0",
|
|
2747
2747
|
"path": "edition/no-follow-file.mjs",
|
|
2748
2748
|
"sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
|
|
2749
2749
|
},
|
|
2750
2750
|
{
|
|
2751
2751
|
"package": "@xemahq/xema",
|
|
2752
|
-
"version": "0.
|
|
2752
|
+
"version": "0.51.0",
|
|
2753
2753
|
"path": "edition/operation-requirements.mjs",
|
|
2754
2754
|
"sha256": "sha256:82c0fadc5b10c6f60a1258ad685aeb33e58a53c14f83d4b6d468ac71a5e4e7b4"
|
|
2755
2755
|
},
|
|
2756
2756
|
{
|
|
2757
2757
|
"package": "@xemahq/xema",
|
|
2758
|
-
"version": "0.
|
|
2758
|
+
"version": "0.51.0",
|
|
2759
2759
|
"path": "edition/pin-source.mjs",
|
|
2760
2760
|
"sha256": "sha256:32fa918729a83587b4d3bca6e5fe381f5a525397ebc49d52729ec1f8cf216c37"
|
|
2761
2761
|
},
|
|
2762
2762
|
{
|
|
2763
2763
|
"package": "@xemahq/xema",
|
|
2764
|
-
"version": "0.
|
|
2764
|
+
"version": "0.51.0",
|
|
2765
2765
|
"path": "edition/sigstore-bundle-media-type.mjs",
|
|
2766
2766
|
"sha256": "sha256:e0aa5a3992f0385ddbbe69eb0307d642ac428ef516c8394816ac4fd52e0ac39c"
|
|
2767
2767
|
},
|
|
2768
2768
|
{
|
|
2769
2769
|
"package": "@xemahq/xema",
|
|
2770
|
-
"version": "0.
|
|
2770
|
+
"version": "0.51.0",
|
|
2771
2771
|
"path": "edition/source-authority.mjs",
|
|
2772
2772
|
"sha256": "sha256:9c351f60e8ea838f445f89c3709c60b7f13b021b78d6e40eaef91350a793f0ff"
|
|
2773
2773
|
},
|
|
2774
2774
|
{
|
|
2775
2775
|
"package": "@xemahq/xema",
|
|
2776
|
-
"version": "0.
|
|
2776
|
+
"version": "0.51.0",
|
|
2777
2777
|
"path": "edition/strict-json.mjs",
|
|
2778
2778
|
"sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
|
|
2779
2779
|
},
|
|
2780
2780
|
{
|
|
2781
2781
|
"package": "@xemahq/xema",
|
|
2782
|
-
"version": "0.
|
|
2782
|
+
"version": "0.51.0",
|
|
2783
2783
|
"path": "edition/string-order.mjs",
|
|
2784
2784
|
"sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
|
|
2785
2785
|
},
|
|
2786
2786
|
{
|
|
2787
2787
|
"package": "@xemahq/xema",
|
|
2788
|
-
"version": "0.
|
|
2788
|
+
"version": "0.51.0",
|
|
2789
2789
|
"path": "edition/third-party-admission.mjs",
|
|
2790
2790
|
"sha256": "sha256:7e32f631a8948e2b93a5cfa163390d52d2a8d9ade87a637c7fe1fc6351fe5974"
|
|
2791
2791
|
},
|
|
2792
2792
|
{
|
|
2793
2793
|
"package": "@xemahq/xema",
|
|
2794
|
-
"version": "0.
|
|
2794
|
+
"version": "0.51.0",
|
|
2795
2795
|
"path": "edition/third-party-certificate-extensions.mjs",
|
|
2796
2796
|
"sha256": "sha256:3293267b09452199f605001d8c14070d1c822b77390caee4088e17b059b7b05d"
|
|
2797
2797
|
},
|
|
2798
2798
|
{
|
|
2799
2799
|
"package": "@xemahq/xema",
|
|
2800
|
-
"version": "0.
|
|
2800
|
+
"version": "0.51.0",
|
|
2801
2801
|
"path": "edition/third-party-source-pins.mjs",
|
|
2802
2802
|
"sha256": "sha256:6f12feb9061bd4ea3e5aeab3f369c081ab58da335c0d281e21b250251e1c0dd9"
|
|
2803
2803
|
},
|
|
2804
2804
|
{
|
|
2805
2805
|
"package": "@xemahq/xema",
|
|
2806
|
-
"version": "0.
|
|
2806
|
+
"version": "0.51.0",
|
|
2807
2807
|
"path": "edition/trust-policy-arming.mjs",
|
|
2808
2808
|
"sha256": "sha256:6f6f192118407e71a744087caea988bcf3d33aca9803217bceb8134d7e2b9120"
|
|
2809
2809
|
},
|
|
2810
2810
|
{
|
|
2811
2811
|
"package": "@xemahq/xema",
|
|
2812
|
-
"version": "0.
|
|
2812
|
+
"version": "0.51.0",
|
|
2813
2813
|
"path": "edition/trust-policy-image-ownership.mjs",
|
|
2814
2814
|
"sha256": "sha256:be0c787c6a75124f0143fc0ce3b127a94e3bb7f6aa64e282c91dd84e566e550e"
|
|
2815
2815
|
},
|
|
2816
2816
|
{
|
|
2817
2817
|
"package": "@xemahq/xema",
|
|
2818
|
-
"version": "0.
|
|
2818
|
+
"version": "0.51.0",
|
|
2819
2819
|
"path": "edition/trusted-executable.mjs",
|
|
2820
2820
|
"sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
|
|
2821
2821
|
},
|
|
2822
2822
|
{
|
|
2823
2823
|
"package": "@xemahq/xema",
|
|
2824
|
-
"version": "0.
|
|
2824
|
+
"version": "0.51.0",
|
|
2825
2825
|
"path": "edition/verifier-binding.mjs",
|
|
2826
2826
|
"sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
|
|
2827
2827
|
},
|
|
2828
2828
|
{
|
|
2829
2829
|
"package": "@xemahq/xema",
|
|
2830
|
-
"version": "0.
|
|
2830
|
+
"version": "0.51.0",
|
|
2831
2831
|
"path": "edition/verifier-files.mjs",
|
|
2832
2832
|
"sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
|
|
2833
2833
|
},
|
|
2834
2834
|
{
|
|
2835
2835
|
"package": "@xemahq/xema",
|
|
2836
|
-
"version": "0.
|
|
2836
|
+
"version": "0.51.0",
|
|
2837
2837
|
"path": "edition/verifier-provenance.mjs",
|
|
2838
2838
|
"sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
|
|
2839
2839
|
},
|
|
2840
2840
|
{
|
|
2841
2841
|
"package": "@xemahq/xema",
|
|
2842
|
-
"version": "0.
|
|
2842
|
+
"version": "0.51.0",
|
|
2843
2843
|
"path": "edition/verify-catalogue-evidence.mjs",
|
|
2844
2844
|
"sha256": "sha256:156d0ee39210658ec489609629c5b9cddd3ce5b3938d8980dcf8282ae4be60bb"
|
|
2845
2845
|
},
|
|
2846
2846
|
{
|
|
2847
2847
|
"package": "@xemahq/xema",
|
|
2848
|
-
"version": "0.
|
|
2848
|
+
"version": "0.51.0",
|
|
2849
2849
|
"path": "edition/verify-image-evidence.mjs",
|
|
2850
2850
|
"sha256": "sha256:958360f7889985c48abb048852c5bbba349cd7353ce4b532c4511b4902380fac"
|
|
2851
2851
|
},
|
|
2852
2852
|
{
|
|
2853
2853
|
"package": "@xemahq/xema",
|
|
2854
|
-
"version": "0.
|
|
2854
|
+
"version": "0.51.0",
|
|
2855
2855
|
"path": "edition/workspace-sections.mjs",
|
|
2856
2856
|
"sha256": "sha256:18c28e9fa2a6b7d8589c8434fc6ed9f1e93954d41339813e711ed0fbbcf5c61d"
|
|
2857
2857
|
},
|
|
2858
2858
|
{
|
|
2859
2859
|
"package": "@xemahq/xema",
|
|
2860
|
-
"version": "0.
|
|
2860
|
+
"version": "0.51.0",
|
|
2861
2861
|
"path": "scripts/build-evidence-verifier.mjs",
|
|
2862
2862
|
"sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
|
|
2863
2863
|
},
|
package/edition/README.md
CHANGED
|
@@ -146,7 +146,7 @@ The edition library builds, validates and verifies evidence statements; it never
|
|
|
146
146
|
|
|
147
147
|
## Kernel protocol and pins
|
|
148
148
|
|
|
149
|
-
The CLI is coupled to the kernel's edition protocol, not to the kernel package. `@xemahq/contracts` exports the protocol identity as data (`dist/edition-protocol/edition-protocol.json`: `{contentDigest, provisional, version}`). This CLI supports protocols v28, v30, v31, v32, v33 and
|
|
149
|
+
The CLI is coupled to the kernel's edition protocol, not to the kernel package. `@xemahq/contracts` exports the protocol identity as data (`dist/edition-protocol/edition-protocol.json`: `{contentDigest, provisional, version}`). This CLI supports protocols v28, v30, v31, v32, v33, v34, v35 and v36 (no published kernel declares v29; a CLI lists a protocol only while every kernel published under it exports what the CLI imports; v27 and older kernels lack `serviceImageSubjects`, so a data root whose pinned kernel speaks v27 or older stays on an earlier CLI), pinned to its digest and vendored, and REFUSES an identity with `provisional: true`; every loader that executes the kernel, `xema edition check` first, and the evidence verifier compare only that identity and refuse an unsupported one, naming the supported and the declared versions. A protocol change needs a CLI release first; only then does the data root repin its kernel authority.
|
|
150
150
|
|
|
151
151
|
A develop edition does not take the kernel's develop head blindly: `xema edition develop choose-kernel --kernel <package dir> [--kernel-pin <40-hex>] --out <file>` reads the declared protocol of each commit on the checkout's first-parent history (from source, unbuilt) and chooses the newest one this CLI supports. It writes `{chosenSha, headSha, held, reason}` (`reason`: `head-supported` | `head-ahead` | `explicit-pin`; `held` is `head-ahead`), and when held prints `kernel held at v<N> (<sha12>), head at v<M> (<sha12>): raise the CLI` (stdout only, never persisted). The head is the checkout's `refs/remotes/origin/develop` (a full-history checkout). An explicit pin wins but is still checked, and must be on that head's first-parent history (`not-on-develop` otherwise); when no commit is supported it refuses (`EditionProtocolMismatchError`, `no-supported-commit`; the walk ends at the first commit with no declaration file) and never falls back to the head; a declaration that exists but does not parse, at the head or any walked commit, is refused by name (`unparseable`), never skipped. `freeze-graph` applies the same check to `--kernel-sha`.
|
|
152
152
|
|
|
@@ -33,7 +33,8 @@ import { readBoundedNoFollowFile } from './no-follow-file.mjs';
|
|
|
33
33
|
* v27 and older kernels lack `serviceImageSubjects` (first exported by the v28 kernel), so they are not listed.
|
|
34
34
|
* No published kernel declares v29 (0.110.2 is v28, 0.110.3 is v30, 0.111.0 is v31, XEMA-2070 kernel is v32; v33 is the kernel's
|
|
35
35
|
* bundle-signer protocol (`bundleSigner` on every OCI bundle row); v34 is the kernel's output-mapping, JSON Pointer and
|
|
36
|
-
* handoff-repair-turns closure additions (XEMA-2122);
|
|
36
|
+
* handoff-repair-turns closure additions (XEMA-2122); v35 is the kernel's independent releases on a resolved deployment (XEMA-2244);
|
|
37
|
+
* v36 is the kernel's JobFailureReason workflow closure addition (XEMA-2282); v33 to v36 are not yet published: their identities and contracts are captured from the
|
|
37
38
|
* linked kernel), so v29 is not listed either. */
|
|
38
39
|
export const SUPPORTED_EDITION_PROTOCOLS = Object.freeze([
|
|
39
40
|
Object.freeze({ version: 28, contentDigest: 'f7795478b1bfe9a41bcbea9efe496011fcd209a56c90294029a08801e84cf92c' }),
|
|
@@ -42,6 +43,8 @@ export const SUPPORTED_EDITION_PROTOCOLS = Object.freeze([
|
|
|
42
43
|
Object.freeze({ version: 32, contentDigest: 'a4ca824486052ca7f61b9a68f759b798defb620b6b3e9cbaab2c701bee2c6700' }),
|
|
43
44
|
Object.freeze({ version: 33, contentDigest: 'b070713e7abeeefad6da3a9053843b0f7420a466f6d504f60aaa00ef196b2b05' }),
|
|
44
45
|
Object.freeze({ version: 34, contentDigest: '370ceef5956d66035265ddbf7b9c46aa686cd10c1e95171c806c0d590ef5f49c' }),
|
|
46
|
+
Object.freeze({ version: 35, contentDigest: '3e616e532c45ecbd6277dde31c0d9c12a12139abe06cc0f56329d1ffe9813f8d' }),
|
|
47
|
+
Object.freeze({ version: 36, contentDigest: 'b6b0c8ec3fc4182c6c3b623685af6293cfed1321f8d7c1891a83652d864c3df0' }),
|
|
45
48
|
]);
|
|
46
49
|
|
|
47
50
|
/** Where a kernel package publishes its identity and its contract, package-relative. */
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/xema",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.51.0",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "git+https://github.com/xema-dev/xema-cli.git",
|
|
@@ -96,6 +96,6 @@
|
|
|
96
96
|
"typecheck": "tsc --noEmit"
|
|
97
97
|
},
|
|
98
98
|
"xemaRelease": {
|
|
99
|
-
"sourceDigest": "sha256:
|
|
99
|
+
"sourceDigest": "sha256:74f62d9a75483f8cdeec9b7264e56eb043e010e06b39b129c5598565765b1230"
|
|
100
100
|
}
|
|
101
101
|
}
|