@xemahq/xema 0.59.0 → 0.60.1

package/dist/mirror/kit/import-kit.js

@@ -0,0 +1,166 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runImport = runImport;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const mirror_1 = require("@xemahq/contracts/mirror");
+const server_1 = require("@xemahq/contracts/mirror/server");
+const kit_archive_1 = require("./kit-archive");
+const kit_layout_1 = require("./kit-layout");
+const kit_sums_1 = require("./kit-sums");
+const layout_sync_1 = require("./layout-sync");
+const lifecycle_progress_1 = require("../../runtime/lifecycle-progress");
+const preflight_1 = require("../preflight/preflight");
+const npm_sync_1 = require("../target/npm-sync");
+const oci_items_1 = require("../target/oci-items");
+const receipt_1 = require("../target/receipt");
+const receipt_store_1 = require("../target/receipt-store");
+const target_state_1 = require("../target/target-state");
+const stepEvent = (ordinal, total, step) => ({ ordinal, total, step, at: new Date().toISOString() });
+const STAGING_TAG_PREFIX = 'xema-import-';
+function verifyKit(kitRoot, config, ports, current) {
+    const manifestPath = (0, node_path_1.join)(kitRoot, kit_layout_1.KIT_MANIFEST_FILE);
+    if (!(0, node_fs_1.existsSync)(manifestPath)) {
+        throw new Error(`the kit has no ${kit_layout_1.KIT_MANIFEST_FILE}`);
+    }
+    const parsed = mirror_1.MirrorKitManifestSchema.safeParse(JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8')));
+    if (!parsed.success) {
+        throw new Error(`${kit_layout_1.KIT_MANIFEST_FILE} is not a kit manifest: ${parsed.error.issues[0]?.message ?? 'invalid'}`);
+    }
+    const kit = parsed.data;
+    if (kit.installationId !== config.installation) {
+        throw new Error(`the kit is for installation "${kit.installationId}", mirror.yaml is for "${config.installation}"`);
+    }
+    (0, server_1.assertMirrorContentSetDigest)(kit.lock);
+    const expectedId = (0, server_1.mirrorKitId)({ since: kit.since, contentSetDigest: kit.contentSetDigest, items: kit.items });
+    if (expectedId !== kit.kitId) {
+        throw new Error(`${kit_layout_1.KIT_MANIFEST_FILE} kitId ${kit.kitId} is not the id of its own contents (${expectedId})`);
+    }
+    const sums = (0, node_fs_1.readFileSync)((0, node_path_1.join)(kitRoot, kit_layout_1.KIT_SUMS_FILE), 'utf8');
+    if ((0, kit_sums_1.sha256Text)(sums) !== kit.sha256sums) {
+        throw new Error(`${kit_layout_1.KIT_SUMS_FILE} does not match the sha256 recorded in ${kit_layout_1.KIT_MANIFEST_FILE}`);
+    }
+    const violations = (0, kit_sums_1.sumsViolations)(kitRoot, sums);
+    if (violations.length > 0) {
+        throw new Error(`the kit failed its checksums: ${violations.join('; ')}`);
+    }
+    const items = (0, oci_items_1.ociItems)(kit.items, config.target.images.mirror);
+    for (const item of items) {
+        const lacking = (0, layout_sync_1.layoutLacks)(ports.oras, item, (0, kit_layout_1.layoutDirectory)(kitRoot, item.source));
+        if (lacking !== null) {
+            throw new Error(`the kit layout for ${item.source} does not resolve ${lacking}`);
+        }
+    }
+    for (const pkg of kit.items.npm) {
+        const actual = (0, npm_sync_1.integrityOf)((0, node_fs_1.readFileSync)((0, kit_layout_1.npmTarballPath)(kitRoot, pkg)));
+        if (actual !== pkg.integrity) {
+            throw new Error(`the kit tarball of ${pkg.name}@${pkg.version} has integrity ${actual}, not ${pkg.integrity}`);
+        }
+    }
+    if (kit.since !== null && (current === null || (0, server_1.mirrorReceiptDigest)(current) !== kit.since)) {
+        throw new Error(`the kit follows receipt ${kit.since}, but the target holds ${current === null ? 'no receipt' : (0, server_1.mirrorReceiptDigest)(current)}: ` +
+            'a kit was skipped or another import committed; cut the kit again with `xema mirror export --since` from the target\'s receipt');
+    }
+    return { kit, items };
+}
+async function runImport(config, ports, options) {
+    const { progress } = ports;
+    const repository = (0, receipt_store_1.receiptRepository)(config.target.images);
+    const scratch = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-mirror-import-'));
+    try {
+        progress.step(stepEvent(1, 5, 'verify the kit'));
+        await (0, kit_archive_1.listKitEntries)(options.kitFile);
+        await (0, kit_archive_1.unpackKit)(options.kitFile, scratch);
+        const current = (0, receipt_store_1.readCurrentReceipt)(ports.oras, ports.access, repository);
+        const { kit, items } = verifyKit(scratch, config, ports, current);
+        progress.step({ ...stepEvent(1, 5, 'verify the kit'), outcome: lifecycle_progress_1.StepOutcome.Ok, detail: `kit ${(0, server_1.mirrorKitIdShort)(kit.kitId)}, ${String(items.length)} OCI items, ${String(kit.items.npm.length)} npm packages` });
+        progress.table({
+            title: `Import into ${config.target.images.registry}`,
+            columns: ['kind', 'name', 'to'],
+            rows: [
+                ...items.map((item) => [item.section, item.label, `${item.target}@${item.digest.slice(0, 19)}`]),
+                ['npm', `${String(kit.items.npm.length)} packages`, config.target.npm.registry],
+            ],
+        });
+        progress.step(stepEvent(2, 5, 'preflight'));
+        const preflight = await (0, preflight_1.runPreflight)({
+            config,
+            ports,
+            items,
+            npm: kit.items.npm.map((pkg) => ({ pkg, bytes: (0, node_fs_1.statSync)((0, kit_layout_1.npmTarballPath)(scratch, pkg)).size })),
+        });
+        for (const note of preflight.notes) {
+            progress.log({ step: 'preflight', line: note });
+        }
+        if (preflight.problems.length > 0) {
+            throw new Error(`the import would fail, nothing was staged: ${preflight.problems.join('; ')}`);
+        }
+        progress.step({ ...stepEvent(2, 5, 'preflight'), outcome: lifecycle_progress_1.StepOutcome.Ok, detail: '' });
+        const stagingTag = `${STAGING_TAG_PREFIX}${(0, server_1.mirrorKitIdShort)(kit.kitId)}`;
+        progress.step(stepEvent(3, 5, 'stage'));
+        for (const item of items) {
+            (0, layout_sync_1.stageItem)(ports.oras, ports.access, item, (0, kit_layout_1.layoutDirectory)(scratch, item.source));
+            progress.log({ step: 'stage', line: `${item.label} ${item.digest}` });
+        }
+        const tarballs = new Map(kit.items.npm.map((pkg) => [pkg.tarball, (0, node_fs_1.readFileSync)((0, kit_layout_1.npmTarballPath)(scratch, pkg))]));
+        await (0, npm_sync_1.pushNpm)(ports.npm, (url) => {
+            const bytes = tarballs.get(url);
+            return bytes === undefined ? Promise.reject(new Error(`the kit has no tarball for ${url}`)) : Promise.resolve(bytes);
+        }, kit.items.npm, stagingTag, (pkg) => progress.log({ step: 'stage', line: `${pkg.name}@${pkg.version}` }));
+        progress.step({ ...stepEvent(3, 5, 'stage'), outcome: lifecycle_progress_1.StepOutcome.Ok, detail: 'read back from the target' });
+        progress.step(stepEvent(4, 5, 'commit'));
+        const latest = (0, receipt_store_1.readCurrentReceipt)(ports.oras, ports.access, repository);
+        if ((latest === null ? null : (0, server_1.mirrorReceiptDigest)(latest)) !== (current === null ? null : (0, server_1.mirrorReceiptDigest)(current))) {
+            throw new Error('the target receipt changed while this import was staging (a concurrent import committed); nothing was committed, run it again');
+        }
+        for (const item of items) {
+            (0, layout_sync_1.commitItemTags)(ports.oras, ports.access, item, (0, kit_layout_1.layoutDirectory)(scratch, item.source));
+        }
+        for (const pkg of kit.items.npm) {
+            await ports.npm.removeDistTag(pkg.name, stagingTag);
+        }
+        const assessment = await (0, target_state_1.assessTarget)({
+            oras: ports.oras,
+            access: ports.access,
+            npm: ports.npm,
+            set: { ...kit.lock, npm: kit.items.npm },
+            items,
+        });
+        if (!(0, target_state_1.inSync)(assessment)) {
+            throw new Error(`the target lacks content after staging, nothing was committed: ${[...assessment.ociGaps.map((g) => g.what), ...assessment.npmGaps.map((g) => `${g.pkg.name}@${g.pkg.version} ${g.what}`)].join('; ')}`);
+        }
+        const receipt = (0, receipt_1.buildReceipt)({
+            set: kit.lock,
+            config,
+            assessment,
+            previous: current,
+            via: mirror_1.MirrorReceiptVia.Import,
+            verifiedAt: ports.now(),
+            kitId: kit.kitId,
+        });
+        const receiptDigest = (0, receipt_store_1.publishReceipt)(ports.oras, ports.access, repository, receipt, (0, server_1.mirrorKitIdShort)(kit.kitId));
+        progress.step({ ...stepEvent(4, 5, 'commit'), outcome: lifecycle_progress_1.StepOutcome.Ok, detail: `receipt ${receiptDigest}` });
+        progress.step(stepEvent(5, 5, 'report'));
+        if (options.receiptFile !== null) {
+            (0, node_fs_1.writeFileSync)(options.receiptFile, (0, receipt_store_1.serializeReceipt)(receipt));
+        }
+        const edition = (0, oci_items_1.ociItems)({ editionArtifact: kit.lock.editionArtifact, images: [], bundles: [], charts: [] }, config.target.images.mirror)[0];
+        progress.step({ ...stepEvent(5, 5, 'report'), outcome: lifecycle_progress_1.StepOutcome.Ok, detail: '' });
+        progress.summary({
+            title: 'Import committed',
+            outcome: lifecycle_progress_1.SummaryOutcome.Completed,
+            counts: { ociItems: items.length, npmPackages: kit.items.npm.length },
+            facts: [
+                { name: 'edition artifact to deploy', value: `${edition?.target ?? ''}@${kit.lock.editionArtifact.digest}` },
+                { name: 'contentSetDigest', value: kit.contentSetDigest },
+                { name: 'receipt', value: receiptDigest },
+                ...(options.receiptFile === null ? [] : [{ name: 'receiptFile', value: options.receiptFile }]),
+            ],
+        });
+    }
+    finally {
+        (0, node_fs_1.rmSync)(scratch, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=import-kit.js.map

package/dist/mirror/kit/import-kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-kit.js","sourceRoot":"","sources":["../../../src/mirror/kit/import-kit.ts"],"names":[],"mappings":";;AAmGA,8BAqGC;AAxMD,qCAAiG;AACjG,qCAAiC;AACjC,yCAAiC;AAEjC,qDAKkC;AAClC,4DAKyC;AAGzC,+CAA0D;AAC1D,6CAAiG;AACjG,yCAAwD;AACxD,+CAAuE;AACvE,yEAA+E;AAC/E,sDAAsD;AACtD,iDAA0D;AAC1D,mDAA6D;AAC7D,+CAAiD;AACjD,2DAAkH;AAClH,yDAA8D;AAc9D,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC7H,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAG1C,SAAS,SAAS,CAAC,OAAe,EAAE,MAAoB,EAAE,KAAkB,EAAE,OAA6B;IACzG,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,8BAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kBAAkB,8BAAiB,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,gCAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,8BAAiB,2BAA2B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;IACxB,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,cAAc,0BAA0B,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACtH,CAAC;IACD,IAAA,qCAA4B,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/G,IAAI,UAAU,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,8BAAiB,UAAU,GAAG,CAAC,KAAK,uCAAuC,UAAU,GAAG,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,0BAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,IAAA,qBAAU,EAAC,IAAI,CAAC,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,GAAG,0BAAa,0CAA0C,8BAAiB,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,yBAAc,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,oBAAQ,EAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAA,yBAAW,EAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAA,4BAAe,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,MAAM,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAA,sBAAW,EAAC,IAAA,sBAAY,EAAC,IAAA,2BAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,kBAAkB,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAA,4BAAmB,EAAC,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,CAAC,KAAK,0BAA0B,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,4BAAmB,EAAC,OAAO,CAAC,IAAI;YAC9H,+HAA+H,CAClI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAOM,KAAK,UAAU,SAAS,CAAC,MAAoB,EAAE,KAAkB,EAAE,OAAsB;IAC9F,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAA,iCAAiB,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACjD,MAAM,IAAA,4BAAc,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAA,uBAAS,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAA,kCAAkB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,gCAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,IAAA,yBAAgB,EAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAChN,QAAQ,CAAC,KAAK,CAAC;YACb,KAAK,EAAE,eAAe,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;YACrD,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAC/B,IAAI,EAAE;gBACJ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBAChG,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;aAChF;SACF,CAAC,CAAC;QAEH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,IAAA,wBAAY,EAAC;YACnC,MAAM;YACN,KAAK;YACL,KAAK;YACL,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAA,kBAAQ,EAAC,IAAA,2BAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC/F,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,gCAAW,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,GAAG,kBAAkB,GAAG,IAAA,yBAAgB,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAA,uBAAS,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAA,4BAAe,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAA,sBAAY,EAAC,IAAA,2BAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,MAAM,IAAA,kBAAO,EAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvH,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5G,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,gCAAW,CAAC,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAE7G,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,kCAAkB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,4BAAmB,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,4BAAmB,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxH,MAAM,IAAI,KAAK,CAAC,+HAA+H,CAAC,CAAC;QACnJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAA,4BAAc,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAA,4BAAe,EAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAA,2BAAY,EAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;YACxC,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,IAAA,qBAAM,EAAC,UAAU,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3N,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC;YAC3B,GAAG,EAAE,GAAG,CAAC,IAAI;YACb,MAAM;YACN,UAAU;YACV,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,yBAAgB,CAAC,MAAM;YAC5B,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE;YACvB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAA,yBAAgB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACjH,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gCAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,aAAa,EAAE,EAAE,CAAC,CAAC;QAE7G,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACjC,IAAA,uBAAa,EAAC,OAAO,CAAC,WAAW,EAAE,IAAA,gCAAgB,EAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,oBAAQ,EAAC,EAAE,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,gCAAW,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,QAAQ,CAAC,OAAO,CAAC;YACf,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,mCAAc,CAAC,SAAS;YACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrE,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,MAAM,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE;gBAC5G,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE;gBACzD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE;gBACzC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;aAC/F;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/mirror/kit/kit-archive.d.ts

@@ -0,0 +1,4 @@
+export declare function packKit(directory: string, file: string): Promise<void>;
+export declare function listKitEntries(file: string): Promise<readonly string[]>;
+export declare function unpackKit(file: string, directory: string): Promise<void>;
+//# sourceMappingURL=kit-archive.d.ts.map

package/dist/mirror/kit/kit-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-archive.d.ts","sourceRoot":"","sources":["../../../src/mirror/kit/kit-archive.ts"],"names":[],"mappings":"AAKA,wBAAsB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;AAeD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAY7E;AAGD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9E"}

package/dist/mirror/kit/kit-archive.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.packKit = packKit;
+exports.listKitEntries = listKitEntries;
+exports.unpackKit = unpackKit;
+const node_path_1 = require("node:path");
+const tar_1 = require("tar");
+async function packKit(directory, file) {
+    await (0, tar_1.create)({ file, cwd: directory, portable: true, noMtime: true }, ['.']);
+}
+const ALLOWED_ENTRY_TYPES = new Set(['File', 'Directory']);
+function assertSafeEntry(path, type) {
+    if (!ALLOWED_ENTRY_TYPES.has(type)) {
+        throw new Error(`the kit holds a ${type} entry "${path}"; only files and directories are allowed`);
+    }
+    const normalized = node_path_1.posix.normalize(path);
+    if (path.startsWith('/') || path.includes('\\') || normalized.split('/').includes('..') || /^[A-Za-z]:/u.test(path)) {
+        throw new Error(`the kit holds an unsafe path "${path}"`);
+    }
+}
+async function listKitEntries(file) {
+    const entries = [];
+    await (0, tar_1.list)({
+        file,
+        onReadEntry: (entry) => {
+            entries.push({ path: entry.path, type: entry.type });
+        },
+    });
+    for (const entry of entries) {
+        assertSafeEntry(entry.path, entry.type);
+    }
+    return entries.map((entry) => node_path_1.posix.normalize(entry.path));
+}
+async function unpackKit(file, directory) {
+    await listKitEntries(file);
+    await (0, tar_1.extract)({ file, cwd: directory, strict: true, preservePaths: false });
+}
+//# sourceMappingURL=kit-archive.js.map

package/dist/mirror/kit/kit-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-archive.js","sourceRoot":"","sources":["../../../src/mirror/kit/kit-archive.ts"],"names":[],"mappings":";;AAKA,0BAEC;AAeD,wCAYC;AAGD,8BAGC;AAxCD,yCAAkC;AAElC,6BAA4D;AAGrD,KAAK,UAAU,OAAO,CAAC,SAAiB,EAAE,IAAY;IAC3D,MAAM,IAAA,YAAM,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhF,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,WAAW,IAAI,2CAA2C,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,UAAU,GAAG,iBAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,IAAA,UAAI,EAAC;QACT,IAAI;QACJ,WAAW,EAAE,CAAC,KAAgB,EAAE,EAAE;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAGM,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB;IAC7D,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAA,aAAO,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/mirror/kit/kit-layout.d.ts

@@ -0,0 +1,10 @@
+import type { MirrorNpmPackage } from '@xemahq/contracts/mirror';
+export declare const KIT_MANIFEST_FILE = "kit.json";
+export declare const KIT_SUMS_FILE = "SHA256SUMS";
+export declare const KIT_OCI_DIR = "oci";
+export declare const KIT_NPM_DIR = "npm";
+export declare const KIT_UNLISTED_FILES: ReadonlySet<string>;
+export declare const kitFileName: (installationId: string, kitIdShort: string) => string;
+export declare const layoutDirectory: (kitRoot: string, source: string) => string;
+export declare function npmTarballPath(kitRoot: string, pkg: Pick<MirrorNpmPackage, 'name' | 'version'>): string;
+//# sourceMappingURL=kit-layout.d.ts.map

package/dist/mirror/kit/kit-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-layout.d.ts","sourceRoot":"","sources":["../../../src/mirror/kit/kit-layout.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAC5C,eAAO,MAAM,aAAa,eAAe,CAAC;AAC1C,eAAO,MAAM,WAAW,QAAQ,CAAC;AACjC,eAAO,MAAM,WAAW,QAAQ,CAAC;AAGjC,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAA+C,CAAC;AAEnG,eAAO,MAAM,WAAW,GAAI,gBAAgB,MAAM,EAAE,YAAY,MAAM,KAAG,MAA2D,CAAC;AAGrI,eAAO,MAAM,eAAe,GAAI,SAAS,MAAM,EAAE,QAAQ,MAAM,KAAG,MACT,CAAC;AAG1D,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAGvG"}

package/dist/mirror/kit/kit-layout.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.layoutDirectory = exports.kitFileName = exports.KIT_UNLISTED_FILES = exports.KIT_NPM_DIR = exports.KIT_OCI_DIR = exports.KIT_SUMS_FILE = exports.KIT_MANIFEST_FILE = void 0;
+exports.npmTarballPath = npmTarballPath;
+const node_path_1 = require("node:path");
+exports.KIT_MANIFEST_FILE = 'kit.json';
+exports.KIT_SUMS_FILE = 'SHA256SUMS';
+exports.KIT_OCI_DIR = 'oci';
+exports.KIT_NPM_DIR = 'npm';
+exports.KIT_UNLISTED_FILES = new Set([exports.KIT_MANIFEST_FILE, exports.KIT_SUMS_FILE]);
+const kitFileName = (installationId, kitIdShort) => `xema-mirror-${installationId}-${kitIdShort}.tar`;
+exports.kitFileName = kitFileName;
+const layoutDirectory = (kitRoot, source) => (0, node_path_1.join)(kitRoot, exports.KIT_OCI_DIR, source.replaceAll(':', '_'));
+exports.layoutDirectory = layoutDirectory;
+function npmTarballPath(kitRoot, pkg) {
+    const unscoped = pkg.name.slice(pkg.name.lastIndexOf('/') + 1);
+    return (0, node_path_1.join)(kitRoot, exports.KIT_NPM_DIR, pkg.name, `${unscoped}-${pkg.version}.tgz`);
+}
+//# sourceMappingURL=kit-layout.js.map

package/dist/mirror/kit/kit-layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-layout.js","sourceRoot":"","sources":["../../../src/mirror/kit/kit-layout.ts"],"names":[],"mappings":";;;AAoBA,wCAGC;AAvBD,yCAAiC;AAKpB,QAAA,iBAAiB,GAAG,UAAU,CAAC;AAC/B,QAAA,aAAa,GAAG,YAAY,CAAC;AAC7B,QAAA,WAAW,GAAG,KAAK,CAAC;AACpB,QAAA,WAAW,GAAG,KAAK,CAAC;AAGpB,QAAA,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,yBAAiB,EAAE,qBAAa,CAAC,CAAC,CAAC;AAE5F,MAAM,WAAW,GAAG,CAAC,cAAsB,EAAE,UAAkB,EAAU,EAAE,CAAC,eAAe,cAAc,IAAI,UAAU,MAAM,CAAC;AAAxH,QAAA,WAAW,eAA6G;AAG9H,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,MAAc,EAAU,EAAE,CACzE,IAAA,gBAAI,EAAC,OAAO,EAAE,mBAAW,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAD7C,QAAA,eAAe,mBAC8B;AAG1D,SAAgB,cAAc,CAAC,OAAe,EAAE,GAA+C;IAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAA,gBAAI,EAAC,OAAO,EAAE,mBAAW,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC;AAChF,CAAC"}

package/dist/mirror/kit/kit-sums.d.ts

@@ -0,0 +1,5 @@
+export declare function kitFiles(root: string): readonly string[];
+export declare function sumsText(root: string): string;
+export declare const sha256Text: (text: string) => string;
+export declare function sumsViolations(root: string, sums: string): readonly string[];
+//# sourceMappingURL=kit-sums.d.ts.map

package/dist/mirror/kit/kit-sums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-sums.d.ts","sourceRoot":"","sources":["../../../src/mirror/kit/kit-sums.ts"],"names":[],"mappings":"AAWA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAcxD;AAGD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAC;AAGpG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAwB5E"}

package/dist/mirror/kit/kit-sums.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Text = void 0;
+exports.kitFiles = kitFiles;
+exports.sumsText = sumsText;
+exports.sumsViolations = sumsViolations;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const kit_layout_1 = require("./kit-layout");
+const compare = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
+const sha256File = (path) => (0, node_crypto_1.createHash)('sha256').update((0, node_fs_1.readFileSync)(path)).digest('hex');
+function kitFiles(root) {
+    const out = [];
+    const walk = (directory) => {
+        for (const name of (0, node_fs_1.readdirSync)(directory)) {
+            const path = (0, node_path_1.join)(directory, name);
+            if ((0, node_fs_1.statSync)(path).isDirectory()) {
+                walk(path);
+            }
+            else {
+                out.push((0, node_path_1.relative)(root, path).split(node_path_1.sep).join('/'));
+            }
+        }
+    };
+    walk(root);
+    return out.sort(compare);
+}
+function sumsText(root) {
+    return kitFiles(root)
+        .filter((file) => !kit_layout_1.KIT_UNLISTED_FILES.has(file))
+        .map((file) => `${sha256File((0, node_path_1.join)(root, file))}  ${file}\n`)
+        .join('');
+}
+const sha256Text = (text) => (0, node_crypto_1.createHash)('sha256').update(text).digest('hex');
+exports.sha256Text = sha256Text;
+function sumsViolations(root, sums) {
+    const listed = new Map();
+    for (const line of sums.split('\n').filter((l) => l.length > 0)) {
+        const match = /^([a-f0-9]{64}) {2}(.+)$/u.exec(line);
+        if (match === null) {
+            return [`SHA256SUMS has a malformed line: ${JSON.stringify(line)}`];
+        }
+        listed.set(match[2] ?? '', match[1] ?? '');
+    }
+    const problems = [];
+    const present = new Set(kitFiles(root).filter((file) => !kit_layout_1.KIT_UNLISTED_FILES.has(file)));
+    for (const [file, hex] of listed) {
+        if (!present.has(file)) {
+            problems.push(`${file} is listed in SHA256SUMS but missing`);
+        }
+        else if (sha256File((0, node_path_1.join)(root, file)) !== hex) {
+            problems.push(`${file} does not match SHA256SUMS`);
+        }
+    }
+    for (const file of present) {
+        if (!listed.has(file)) {
+            problems.push(`${file} is in the kit but not in SHA256SUMS`);
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=kit-sums.js.map

package/dist/mirror/kit/kit-sums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit-sums.js","sourceRoot":"","sources":["../../../src/mirror/kit/kit-sums.ts"],"names":[],"mappings":";;;AAWA,4BAcC;AAGD,4BAKC;AAKD,wCAwBC;AA9DD,6CAAyC;AACzC,qCAA8D;AAC9D,yCAAgD;AAEhD,6CAAkD;AAElD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAG3G,SAAgB,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACvC,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAW,EAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAGD,SAAgB,QAAQ,CAAC,IAAY;IACnC,OAAO,QAAQ,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,+BAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAEM,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAvF,QAAA,UAAU,cAA6E;AAGpG,SAAgB,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,+BAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,UAAU,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/mirror/kit/layout-sync.d.ts

@@ -0,0 +1,8 @@
+import { type Oras } from '@xemahq/oci-closure';
+import { type TargetAccess } from '../target/target-access';
+import type { OciItem } from '../target/oci-items';
+export declare function exportItemToLayout(oras: Oras, item: OciItem, layoutDir: string): void;
+export declare function layoutLacks(oras: Oras, item: OciItem, layoutDir: string): string | null;
+export declare function stageItem(oras: Oras, access: TargetAccess, item: OciItem, layoutDir: string): void;
+export declare function commitItemTags(oras: Oras, access: TargetAccess, item: OciItem, layoutDir: string): void;
+//# sourceMappingURL=layout-sync.d.ts.map

package/dist/mirror/kit/layout-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-sync.d.ts","sourceRoot":"","sources":["../../../src/mirror/kit/layout-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAG7E,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAanD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAiBrF;AAGD,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEvF;AAGD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAkBlG;AAGD,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAKvG"}

package/dist/mirror/kit/layout-sync.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportItemToLayout = exportItemToLayout;
+exports.layoutLacks = layoutLacks;
+exports.stageItem = stageItem;
+exports.commitItemTags = commitItemTags;
+const oci_closure_1 = require("@xemahq/oci-closure");
+const oci_sync_1 = require("../target/oci-sync");
+const target_access_1 = require("../target/target-access");
+const layoutResolve = (oras, layoutDir, reference) => (0, oci_sync_1.tryResolve)(oras, ['--oci-layout', `${layoutDir}@${reference}`]);
+const digestsOf = (item) => [item.digest, ...item.referrers];
+function exportItemToLayout(oras, item, layoutDir) {
+    for (const digest of digestsOf(item)) {
+        oras([
+            'cp',
+            '--from-distribution-spec',
+            oci_closure_1.REFERRERS_DISTRIBUTION_SPEC,
+            '--to-oci-layout',
+            `${item.source}@${digest}`,
+            layoutDir,
+        ]);
+        if (layoutResolve(oras, layoutDir, digest) !== digest) {
+            throw new Error(`${item.source}@${digest} did not land in the kit layout`);
+        }
+    }
+    for (const { tag, digest } of (0, oci_sync_1.cosignTagsToRestore)(item, (name) => (0, oci_sync_1.tryResolve)(oras, [`${item.source}:${name}`]))) {
+        oras(['tag', '--oci-layout', `${layoutDir}@${digest}`, tag]);
+    }
+}
+function layoutLacks(oras, item, layoutDir) {
+    return digestsOf(item).find((digest) => layoutResolve(oras, layoutDir, digest) !== digest) ?? null;
+}
+function stageItem(oras, access, item, layoutDir) {
+    for (const digest of digestsOf(item)) {
+        if ((0, oci_sync_1.targetHolds)(oras, access, item, digest)) {
+            continue;
+        }
+        oras([
+            'cp',
+            '--to-distribution-spec',
+            oci_closure_1.REFERRERS_DISTRIBUTION_SPEC,
+            ...(0, target_access_1.copyToTargetFlags)(access),
+            '--from-oci-layout',
+            `${layoutDir}@${digest}`,
+            item.target,
+        ]);
+        if (!(0, oci_sync_1.targetHolds)(oras, access, item, digest)) {
+            throw new Error(`${item.target}@${digest} is not on the target after staging`);
+        }
+    }
+}
+function commitItemTags(oras, access, item, layoutDir) {
+    (0, oci_sync_1.applyTags)(oras, access, item, [
+        ...(0, oci_sync_1.cosignTagsToRestore)(item, (tag) => (0, oci_sync_1.tryResolve)(oras, ['--oci-layout', `${layoutDir}:${tag}`])),
+        ...item.tags.map((tag) => ({ tag, digest: item.digest })),
+    ]);
+}
+//# sourceMappingURL=layout-sync.js.map

package/dist/mirror/kit/layout-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-sync.js","sourceRoot":"","sources":["../../../src/mirror/kit/layout-sync.ts"],"names":[],"mappings":";;AAkBA,gDAiBC;AAGD,kCAEC;AAGD,8BAkBC;AAGD,wCAKC;AArED,qDAA6E;AAE7E,iDAA6F;AAC7F,2DAA+E;AAI/E,MAAM,aAAa,GAAG,CAAC,IAAU,EAAE,SAAiB,EAAE,SAAiB,EAAiB,EAAE,CACxF,IAAA,qBAAU,EAAC,IAAI,EAAE,CAAC,cAAc,EAAE,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAElE,MAAM,SAAS,GAAG,CAAC,IAAa,EAAqB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;AAQzF,SAAgB,kBAAkB,CAAC,IAAU,EAAE,IAAa,EAAE,SAAiB;IAC7E,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI;YACJ,0BAA0B;YAC1B,yCAA2B;YAC3B,iBAAiB;YACjB,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE;YAC1B,SAAS;SACV,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,iCAAiC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,IAAA,8BAAmB,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,qBAAU,EAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,SAAS,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAGD,SAAgB,WAAW,CAAC,IAAU,EAAE,IAAa,EAAE,SAAiB;IACtE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AACrG,CAAC;AAGD,SAAgB,SAAS,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa,EAAE,SAAiB;IAC1F,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAA,sBAAW,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI;YACJ,wBAAwB;YACxB,yCAA2B;YAC3B,GAAG,IAAA,iCAAiB,EAAC,MAAM,CAAC;YAC5B,mBAAmB;YACnB,GAAG,SAAS,IAAI,MAAM,EAAE;YACxB,IAAI,CAAC,MAAM;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,IAAA,sBAAW,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,qCAAqC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;AACH,CAAC;AAGD,SAAgB,cAAc,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa,EAAE,SAAiB;IAC/F,IAAA,oBAAS,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,GAAG,IAAA,8BAAmB,EAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,qBAAU,EAAC,IAAI,EAAE,CAAC,cAAc,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAChG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC"}

package/dist/mirror/plan/bundle-content.d.ts

@@ -0,0 +1,10 @@
+import { type Oras } from '@xemahq/oci-closure';
+import type { MirrorBundle, MirrorContentDeclaration } from '@xemahq/contracts/mirror';
+export declare function resolveBundles(input: {
+    readonly oras: Oras;
+    readonly packages: MirrorContentDeclaration['packages'];
+    readonly editionBiomes: ReadonlySet<string>;
+    readonly bundleRegistry: string;
+    readonly onResolved: (biome: string, index: number, total: number) => void;
+}): readonly MirrorBundle[];
+//# sourceMappingURL=bundle-content.d.ts.map

package/dist/mirror/plan/bundle-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-content.d.ts","sourceRoot":"","sources":["../../../src/mirror/plan/bundle-content.ts"],"names":[],"mappings":"AACA,OAAO,EAA8D,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAI5G,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AA4BvF,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACpC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5E,GAAG,SAAS,YAAY,EAAE,CAqC1B"}

package/dist/mirror/plan/bundle-content.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveBundles = resolveBundles;
+const biome_bundle_1 = require("@xemahq/contracts/biome-bundle");
+const oci_closure_1 = require("@xemahq/oci-closure");
+const oci_reads_1 = require("./oci-reads");
+const archiveTag = (archiveDigest) => archiveDigest.replace(':', '-');
+function archiveDigestOf(oras, repository, manifestDigest, biome) {
+    const manifest = (0, oci_reads_1.fetchManifest)(oras, `${repository}@${manifestDigest}`);
+    const annotated = manifest.annotations?.[biome_bundle_1.BUNDLE_OCI.annotations.archiveDigest];
+    if (manifest.artifactType !== biome_bundle_1.BUNDLE_OCI.artifactType) {
+        throw new Error(`${repository}@${manifestDigest} (biome ${biome}) has artifactType ${String(manifest.artifactType)}, not ${biome_bundle_1.BUNDLE_OCI.artifactType}`);
+    }
+    const archives = (manifest.layers ?? []).filter((layer) => layer.mediaType === biome_bundle_1.BUNDLE_OCI.archiveMediaType);
+    if (archives.length !== 1) {
+        throw new Error(`${repository}@${manifestDigest} (biome ${biome}) has ${archives.length} ${biome_bundle_1.BUNDLE_OCI.archiveMediaType} layers, not one`);
+    }
+    if (annotated === undefined || !/^sha256:[a-f0-9]{64}$/u.test(annotated)) {
+        throw new Error(`${repository}@${manifestDigest} (biome ${biome}) has no ${biome_bundle_1.BUNDLE_OCI.annotations.archiveDigest} annotation`);
+    }
+    return annotated;
+}
+function resolveBundles(input) {
+    const { oras, bundleRegistry } = input;
+    const tagsOf = (0, oci_closure_1.createTagLister)(oras);
+    const rows = [];
+    const sorted = [...input.packages].sort((a, b) => (a.biome < b.biome ? -1 : a.biome > b.biome ? 1 : 0));
+    for (const [index, entry] of sorted.entries()) {
+        if (!input.editionBiomes.has(entry.biome)) {
+            throw new Error(`package "${entry.biome}" is not a biome of the edition's distribution lock`);
+        }
+        if (entry.digest === undefined && entry.channel === undefined) {
+            throw new Error(`package "${entry.biome}" names neither a channel nor a digest: state one`);
+        }
+        const repository = `${bundleRegistry}/bundles/${entry.biome}`;
+        const pointer = entry.digest !== undefined ? archiveTag(entry.digest) : entry.channel;
+        const manifestDigest = (0, oci_reads_1.resolveDigest)(oras, `${repository}:${pointer}`);
+        const archiveDigest = archiveDigestOf(oras, repository, manifestDigest, entry.biome);
+        if (entry.digest !== undefined && archiveDigest !== entry.digest) {
+            throw new Error(`${repository}:${pointer} holds archive ${archiveDigest}, not the declared ${entry.digest}`);
+        }
+        const closure = (0, oci_closure_1.resolveSubjectClosure)({
+            subjectKind: oci_closure_1.ClosureSubjectKind.Image,
+            repository,
+            digest: manifestDigest,
+            oras,
+            tagsOf,
+        });
+        rows.push({
+            biome: entry.biome,
+            source: repository,
+            digest: manifestDigest,
+            archiveDigest: archiveDigest,
+            ...(entry.channel === undefined ? {} : { channel: entry.channel }),
+            referrers: closure.referrers.map((r) => r.digest).sort(),
+        });
+        input.onResolved(entry.biome, index + 1, sorted.length);
+    }
+    return rows;
+}
+//# sourceMappingURL=bundle-content.js.map

package/dist/mirror/plan/bundle-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-content.js","sourceRoot":"","sources":["../../../src/mirror/plan/bundle-content.ts"],"names":[],"mappings":";;AAiCA,wCA2CC;AA5ED,iEAA4D;AAC5D,qDAA4G;AAE5G,2CAA2D;AAK3D,MAAM,UAAU,GAAG,CAAC,aAAqB,EAAU,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEtF,SAAS,eAAe,CAAC,IAAU,EAAE,UAAkB,EAAE,cAAsB,EAAE,KAAa;IAC5F,MAAM,QAAQ,GAAG,IAAA,yBAAa,EAAC,IAAI,EAAE,GAAG,UAAU,IAAI,cAAc,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,yBAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,YAAY,KAAK,yBAAU,CAAC,YAAY,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,cAAc,WAAW,KAAK,sBAAsB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,yBAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IACxJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,yBAAU,CAAC,gBAAgB,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,cAAc,WAAW,KAAK,SAAS,QAAQ,CAAC,MAAM,IAAI,yBAAU,CAAC,gBAAgB,kBAAkB,CAAC,CAAC;IAC5I,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,cAAc,WAAW,KAAK,YAAY,yBAAU,CAAC,WAAW,CAAC,aAAa,aAAa,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AASD,SAAgB,cAAc,CAAC,KAM9B;IACC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,IAAA,6BAAe,EAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,KAAK,qDAAqD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,KAAK,mDAAmD,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,cAAc,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,OAAkB,CAAC;QAClG,MAAM,cAAc,GAAG,IAAA,yBAAa,EAAC,IAAI,EAAE,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,OAAO,kBAAkB,aAAa,sBAAsB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,mCAAqB,EAAC;YACpC,WAAW,EAAE,gCAAkB,CAAC,KAAK;YACrC,UAAU;YACV,MAAM,EAAE,cAAc;YACtB,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,cAAwC;YAChD,aAAa,EAAE,aAA8C;YAC7D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAgC,CAAC,CAAC,IAAI,EAAE;SACnF,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mirror/plan/declaration-file.d.ts

@@ -0,0 +1,9 @@
+import { type MirrorContentDeclaration } from '@xemahq/contracts/mirror';
+export interface ReadDeclaration {
+    readonly declaration: MirrorContentDeclaration;
+    readonly sha256: string;
+    readonly directory: string;
+}
+export declare const sha256Hex: (bytes: Uint8Array | string) => string;
+export declare function readDeclaration(path: string): ReadDeclaration;
+//# sourceMappingURL=declaration-file.d.ts.map

package/dist/mirror/plan/declaration-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-file.d.ts","sourceRoot":"","sources":["../../../src/mirror/plan/declaration-file.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEzG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAE/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,KAAG,MAA0D,CAAC;AAGlH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAc7D"}

package/dist/mirror/plan/declaration-file.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Hex = void 0;
+exports.readDeclaration = readDeclaration;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const mirror_1 = require("@xemahq/contracts/mirror");
+const sha256Hex = (bytes) => (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex');
+exports.sha256Hex = sha256Hex;
+function readDeclaration(path) {
+    const bytes = (0, node_fs_1.readFileSync)(path);
+    let json;
+    try {
+        json = JSON.parse(bytes.toString('utf8'));
+    }
+    catch (error) {
+        throw new Error(`${path} is not JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const parsed = mirror_1.MirrorContentDeclarationSchema.safeParse(json);
+    if (!parsed.success) {
+        const issues = parsed.error.issues.map((issue) => `${issue.path.join('.')}: ${issue.message}`).join('; ');
+        throw new Error(`${path} is not a mirror content declaration: ${issues}`);
+    }
+    return { declaration: parsed.data, sha256: (0, exports.sha256Hex)(bytes), directory: (0, node_path_1.dirname)((0, node_path_1.resolve)(path)) };
+}
+//# sourceMappingURL=declaration-file.js.map

package/dist/mirror/plan/declaration-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declaration-file.js","sourceRoot":"","sources":["../../../src/mirror/plan/declaration-file.ts"],"names":[],"mappings":";;;AAgBA,0CAcC;AA9BD,6CAAyC;AACzC,qCAAuC;AACvC,yCAA6C;AAE7C,qDAAyG;AASlG,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAArG,QAAA,SAAS,aAA4F;AAGlH,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,MAAM,GAAG,uCAA8B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yCAAyC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAA,iBAAS,EAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAA,mBAAO,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC"}