@xemahq/xema 0.57.0 → 0.57.1

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -2599,355 +2599,355 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:815c9be9f71731dcc805d85da2d733350ddb6fbdf32b6f1cf34f228ce6381c7c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/build-ledger.mjs",
       "sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/canonical-evidence-json.mjs",
       "sha256": "sha256:3b32f6786c9fb1c0deadf2f687077356a503b0db766392d2e0254aa1ab78feec"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/canonical-repository-url.mjs",
       "sha256": "sha256:f36e4f7cbe7849789422ec2f0ebce2d62f7dc3684afecc3ac51a32560e72d8a1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/collected-refusals.mjs",
       "sha256": "sha256:ae21c069dbff0afa9aca18b7b909d5de405df2277f6431bc3fda20528115bcd1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/cosign-certificate-constraints.mjs",
       "sha256": "sha256:bb9ba7038f1de9211c9cbcf99f02255f3623ce72d86c71fdcfa146a4e0edbd9a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/develop-graph.mjs",
       "sha256": "sha256:decebd437c9f4c8bdd6bee3baabfdc340fd7b9d175aca7e702cb330e912708d5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/dispatched-runtime-components.mjs",
       "sha256": "sha256:9712823d183a60108cd002b2d36a9e5c0867b9d576dd02825264a18f7b8ece69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-artifact.mjs",
       "sha256": "sha256:3b588c9c50f64f3e7a45b954fe7b5fc67e11fc8ce3e7b323727af4541d29ae7f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-chart-set.mjs",
       "sha256": "sha256:f9f16b58279c8c2619a39c5cc92bdbc334543d1a324304cd5d3b120d66dc8f3a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:58af55e9a2b36ca23485246d44a295260afa240bcdc0649c697563b36085ddaa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:217fa5b1fa25cb50ee4e1b46ea5e086061ff1f44e00198e1dc28f52376f236a0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:e2c6e66378f878499f44b62d060ae50197f40757b2044d9ce05290e367dfe21d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:566a17301ad15b94a06fef12b26bbe39e292ed2bf30a2659a9bf07ce5ce487e0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-kind.mjs",
       "sha256": "sha256:b4f3358ffa81bbafb8c37d158b9e01032a7358c38b9d6e5aca409091f989e47a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:f02ea6427e2fd7ceea2c3cb49f3fa6d85b982870e487082a7466f8037cd2bed9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-publisher.mjs",
       "sha256": "sha256:8803b41067d81acbc35a8974426f606b5b8168b7a9c2581c16586a86f36db50f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-source-pins.mjs",
       "sha256": "sha256:b141474fff33b06734fb62cd2552752b991c8267bb1c9bccb22a81dd80e91c6c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:892b360f9f80d2308b0b12f9b99658ae06173878d9b71cf5d6fc8bd717b3c86e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4bea69437af5a36c139b5b41d0ecf2d1ddcf3f871e10c78e3d351f608eedca3b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:eb46e4d6a79dfac5536b7a439ab9df7dd4b03af369bdcfa9fcdd522aa1aab8dd"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/first-party-source-ids.mjs",
       "sha256": "sha256:20cb1ad7cfb8c6e6686a6be5a51289da4bba76c20b58d9c1b5b6b3813a38dc1c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/fulcio-certificate-extensions.mjs",
       "sha256": "sha256:6f1f5a8ea110a489f7aff4bfb8e0b2d058919fe3e8ba4a1e5e8396fca24861b7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/git-json.mjs",
       "sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/git-source-auth.mjs",
       "sha256": "sha256:c1b32aa6f7d59798db58238d632cafeadbd4f07376396a31acdeb5f0ac56dcac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:c6a202f3fc8efe97f00c7e69532c656646bdc5c93365d68676046c3aabd33233"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/image-subject-identity.mjs",
       "sha256": "sha256:6a64e44f9865f68484540e3264a1d87040ae021dfa6ee4b79239e66805754ac1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:9de2645dca22274cad9fa68d0364bf57e4de704e9d49a8bbadde0e322ae317df"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/kernel-contract-source-path-set.mjs",
       "sha256": "sha256:bc4756f217d80fd8f802932f47da71ab14e782873fa9fa977002a94e058d8a9e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/kernel-package.mjs",
       "sha256": "sha256:e97a9491991d8332a4feed14ac48fe393e44d12c63bdfec89fac8b5b4ea2a574"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/lib.mjs",
-      "sha256": "sha256:a0695c1e1649da205f4e5d0e8d411079d6af4eb00c7d753bb2e9bf9a5ed1232e"
+      "sha256": "sha256:f98c9eb6c50dbaf6c89c5fa9d42f682042265a2d41687a9d2b35f16c0b139326"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:d3b6807953f162ab4204dcd1a0f752e0f9b447726fc17a12534d28abe8e570b0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:32fa918729a83587b4d3bca6e5fe381f5a525397ebc49d52729ec1f8cf216c37"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/sigstore-bundle-media-type.mjs",
       "sha256": "sha256:e0aa5a3992f0385ddbbe69eb0307d642ac428ef516c8394816ac4fd52e0ac39c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:9c351f60e8ea838f445f89c3709c60b7f13b021b78d6e40eaef91350a793f0ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/third-party-admission.mjs",
       "sha256": "sha256:7e32f631a8948e2b93a5cfa163390d52d2a8d9ade87a637c7fe1fc6351fe5974"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/third-party-certificate-extensions.mjs",
       "sha256": "sha256:3293267b09452199f605001d8c14070d1c822b77390caee4088e17b059b7b05d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/third-party-source-pins.mjs",
       "sha256": "sha256:6f12feb9061bd4ea3e5aeab3f369c081ab58da335c0d281e21b250251e1c0dd9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/trust-policy-arming.mjs",
       "sha256": "sha256:f6ed96ee1d0b7698b1eea5066ba10abef1babeede8403a7c481bba53636cb1a5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/trust-policy-image-ownership.mjs",
       "sha256": "sha256:be0c787c6a75124f0143fc0ce3b127a94e3bb7f6aa64e282c91dd84e566e550e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/verify-catalogue-evidence.mjs",
       "sha256": "sha256:156d0ee39210658ec489609629c5b9cddd3ce5b3938d8980dcf8282ae4be60bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:958360f7889985c48abb048852c5bbba349cd7353ce4b532c4511b4902380fac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:1d2aff08bcd9e94b644c85c5b55c90c05b6b02bab662731fe3fcd53fcdf86e93"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.0",
+      "version": "0.57.1",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/edition/lib.mjs

@@ -1811,6 +1811,10 @@ export async function manifestToIndexEntry({ raw, generatedIndex, rel, repo, pat
   // The workload components that declare `relaysOrgContext`, in manifest order
   // (sorted at the write). Declared intent only: the lock admits it.
   const orgContextRelayers = [];
+  // `component → the edition input families it declares` (`editionInputs`),
+  // keyed like `operationRequirements`. A service reads them through the lock's
+  // `componentEditionInputs`. Declared intent only: the lock admits them.
+  const componentEditionInputs = {};
   // `component → the event subscription clauses it declares` (`subscribesEvents`),
   // keyed like `operationRequirements`. Declared intent only: the lock admits them.
   const eventSubscriptionRequirements = {};
@@ -1996,6 +2000,21 @@ export async function manifestToIndexEntry({ raw, generatedIndex, rel, repo, pat
       const installed = componentInstalledOperationRequests(component, where);
       if (installed !== null) {installedOperationRequests[name] = installed;}
       if (componentRelaysOrgContext(component, where)) {orgContextRelayers.push(name);}
+      if (component.editionInputs !== undefined) {
+        const families = component.editionInputs;
+        if (
+          !Array.isArray(families) ||
+          families.some((family) => typeof family !== 'string' || family.length === 0)
+        ) {
+          throw new Error(
+            `${where} has editionInputs ${JSON.stringify(families)} — expected an array ` +
+              `of non-empty edition input family names`,
+          );
+        }
+        if (families.length > 0) {
+          componentEditionInputs[name] = [...new Set(families)].sort(compareStrings);
+        }
+      }
       const subscriptions = componentEventSubscriptionRequirements(component, where);
       if (subscriptions !== null) {eventSubscriptionRequirements[name] = subscriptions;}
       const sweeps = componentOrganizationSweepRequirements(component, where);
@@ -2444,6 +2463,18 @@ export async function manifestToIndexEntry({ raw, generatedIndex, rel, repo, pat
     ...(orgContextRelayers.length > 0
       ? { orgContextRelayers: [...orgContextRelayers].sort(compareStrings) }
       : {}),
+    // The edition input families each service component declares, keyed by the
+    // lock name in code-unit order, each list sorted and unique; omitted when
+    // none declares any.
+    ...(Object.keys(componentEditionInputs).length > 0
+      ? {
+          componentEditionInputs: Object.fromEntries(
+            Object.entries(componentEditionInputs).sort(([a], [b]) =>
+              compareStrings(a, b),
+            ),
+          ),
+        }
+      : {}),
     // The event subscription clauses each workload component declares, in the
     // kernel's canonical order; omitted when none declares any.
     ...(Object.keys(eventSubscriptionRequirements).length > 0

package/edition/resolve-distribution.mjs

@@ -2164,6 +2164,11 @@ export function resolveUnadmittedDistributionFromInputs(
       ...(e.orgContextRelayers !== undefined && e.orgContextRelayers.length > 0
         ? { orgContextRelayers: e.orgContextRelayers }
         : {}),
+      // The edition input families each service component declares, forwarded
+      // verbatim; `xema-service-nest` reads them from the lock.
+      ...(e.componentEditionInputs !== undefined && Object.keys(e.componentEditionInputs).length > 0
+        ? { componentEditionInputs: e.componentEditionInputs }
+        : {}),
       // The event subscription clauses each workload component declares,
       // forwarded verbatim; the lock admits them (`admitEventSubscriptions`).
       ...(e.eventSubscriptionRequirements !== undefined &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.57.0",
+  "version": "0.57.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -100,7 +100,7 @@
     "typecheck": "tsc --noEmit"
   },
   "xemaRelease": {
-    "sourceDigest": "sha256:23c811648b74b4daf999382a1d0f6aa4cad8bfaad8b3f150e51326d709a4982b",
-    "sha": "b7d08af5d37faac60b04770fd2b0701811b96459"
+    "sourceDigest": "sha256:d587d9025bbf46bc076d6d88075347bd45fa0ca644c804a32a463157091f5bfa",
+    "sha": "286425dc5a0bf4ee9b7a3b3c0b53271f3ec661ed"
   }
 }