@xemahq/xema 0.59.0 → 0.60.1

package/dist/mirror/preflight/write-probe.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.preflightRepository = exports.PREFLIGHT_TAG = exports.PREFLIGHT_ARTIFACT_TYPE = void 0;
+exports.probeWrite = probeWrite;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const target_access_1 = require("../target/target-access");
+exports.PREFLIGHT_ARTIFACT_TYPE = 'application/vnd.xema.mirror-preflight.v1';
+exports.PREFLIGHT_TAG = 'probe';
+const preflightRepository = (target) => `${target.registry}/${target.project}/xema-mirror/preflight`;
+exports.preflightRepository = preflightRepository;
+function probeWrite(oras, access, repository) {
+    const directory = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-mirror-probe-'));
+    try {
+        const file = (0, node_path_1.join)(directory, 'probe.json');
+        (0, node_fs_1.writeFileSync)(file, '{"xema":"mirror-preflight"}\n');
+        oras([
+            'push',
+            ...(0, target_access_1.targetFlags)(access),
+            '--artifact-type',
+            exports.PREFLIGHT_ARTIFACT_TYPE,
+            '--disable-path-validation',
+            `${repository}:${exports.PREFLIGHT_TAG}`,
+            `${file}:application/json`,
+        ]);
+        return null;
+    }
+    catch (error) {
+        return `the target registry refused a write to ${repository}: ${error instanceof Error ? error.message : String(error)}; check the robot's push right and expiry, that the project exists, and the network`;
+    }
+    finally {
+        (0, node_fs_1.rmSync)(directory, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=write-probe.js.map

package/dist/mirror/preflight/write-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-probe.js","sourceRoot":"","sources":["../../../src/mirror/preflight/write-probe.ts"],"names":[],"mappings":";;;AAqBA,gCAoBC;AAzCD,qCAA6D;AAC7D,qCAAiC;AACjC,yCAAiC;AAEjC,2DAAyE;AAI5D,QAAA,uBAAuB,GAAG,0CAA0C,CAAC;AACrE,QAAA,aAAa,GAAG,OAAO,CAAC;AAG9B,MAAM,mBAAmB,GAAG,CAAC,MAA6C,EAAU,EAAE,CAC3F,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,wBAAwB,CAAC;AADlD,QAAA,mBAAmB,uBAC+B;AAQ/D,SAAgB,UAAU,CAAC,IAAU,EAAE,MAAoB,EAAE,UAAkB;IAC7E,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC3C,IAAA,uBAAa,EAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM;YACN,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC;YACtB,iBAAiB;YACjB,+BAAuB;YACvB,2BAA2B;YAC3B,GAAG,UAAU,IAAI,qBAAa,EAAE;YAChC,GAAG,IAAI,mBAAmB;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,0CAA0C,UAAU,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,qFAAqF,CAAC;IAC9M,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/mirror/target/extras.d.ts

@@ -0,0 +1,16 @@
+import { type Oras } from '@xemahq/oci-closure';
+import { type OciItem } from './oci-items';
+import { type TargetAccess } from './target-access';
+export interface Extras {
+    readonly repositories: readonly string[];
+    readonly tags: readonly {
+        readonly repository: string;
+        readonly tag: string;
+    }[];
+    readonly repositoriesListed: boolean;
+}
+export declare function findExtras(oras: Oras, access: TargetAccess, target: {
+    readonly registry: string;
+    readonly project: string;
+}, items: readonly OciItem[], receiptRepository: string): Extras;
+//# sourceMappingURL=extras.d.ts.map

package/dist/mirror/target/extras.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extras.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/extras.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAIjE,MAAM,WAAW,MAAM;IAErB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAEhF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAqBD,wBAAgB,UAAU,CACxB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC/D,KAAK,EAAE,SAAS,OAAO,EAAE,EACzB,iBAAiB,EAAE,MAAM,GACxB,MAAM,CAuBR"}

package/dist/mirror/target/extras.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findExtras = findExtras;
+const oci_closure_1 = require("@xemahq/oci-closure");
+const target_access_1 = require("./target-access");
+const write_probe_1 = require("../preflight/write-probe");
+function referrerTags(item) {
+    const subjects = [item.digest, ...item.referrers];
+    return subjects.flatMap((digest) => [
+        digest.replace(':', '-'),
+        (0, oci_closure_1.cosignTag)(digest, oci_closure_1.ReferrerKind.CosignSignature),
+        (0, oci_closure_1.cosignTag)(digest, oci_closure_1.ReferrerKind.CosignAttestation),
+    ]);
+}
+function tagsOf(oras, access, repository) {
+    try {
+        return oras(['repo', 'tags', ...(0, target_access_1.targetFlags)(access), repository]);
+    }
+    catch {
+        return '';
+    }
+}
+function findExtras(oras, access, target, items, receiptRepository) {
+    const home = `${target.registry}/${target.project}`;
+    const known = new Set([...items.map((item) => item.target), receiptRepository, (0, write_probe_1.preflightRepository)(target)]);
+    let repositories = [];
+    let repositoriesListed = true;
+    try {
+        repositories = oras(['repo', 'ls', ...(0, target_access_1.targetFlags)(access), home])
+            .split('\n')
+            .map((line) => line.trim())
+            .filter((line) => line.length > 0 && !known.has(`${home}/${line}`));
+    }
+    catch {
+        repositoriesListed = false;
+    }
+    const tags = items.flatMap((item) => {
+        const allowed = new Set([...item.tags, ...referrerTags(item)]);
+        return tagsOf(oras, access, item.target)
+            .split('\n')
+            .map((line) => line.trim())
+            .filter((tag) => tag.length > 0 && !allowed.has(tag))
+            .map((tag) => ({ repository: item.target, tag }));
+    });
+    return { repositories, tags, repositoriesListed };
+}
+//# sourceMappingURL=extras.js.map

package/dist/mirror/target/extras.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extras.js","sourceRoot":"","sources":["../../../src/mirror/target/extras.ts"],"names":[],"mappings":";;AAkCA,gCA6BC;AA/DD,qDAAyE;AAGzE,mDAAiE;AACjE,0DAA+D;AAY/D,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;QACxB,IAAA,uBAAS,EAAC,MAAM,EAAE,0BAAY,CAAC,eAAe,CAAC;QAC/C,IAAA,uBAAS,EAAC,MAAM,EAAE,0BAAY,CAAC,iBAAiB,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAGD,SAAS,MAAM,CAAC,IAAU,EAAE,MAAoB,EAAE,UAAkB;IAClE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CACxB,IAAU,EACV,MAAoB,EACpB,MAA+D,EAC/D,KAAyB,EACzB,iBAAyB;IAEzB,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,IAAA,iCAAmB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7G,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,kBAAkB,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;aAC9D,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QAEP,kBAAkB,GAAG,KAAK,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;aACrC,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACpD,CAAC"}

package/dist/mirror/target/npm-registry.d.ts

@@ -0,0 +1,20 @@
+import type { NpmTarget, TarballSource } from './npm-sync';
+export declare const MIRROR_DIST_TAG = "xema-mirror";
+export type NpmRunner = (args: readonly string[], env: Readonly<Record<string, string>>, cwd: string) => void;
+export declare function createNpmRunner(baseEnv: NodeJS.ProcessEnv): NpmRunner;
+export type FetchLike = (url: string, init?: {
+    headers?: Record<string, string>;
+}) => Promise<{
+    readonly ok: boolean;
+    readonly status: number;
+    json(): Promise<unknown>;
+    arrayBuffer(): Promise<ArrayBuffer>;
+}>;
+export declare function createNpmTarget(input: {
+    readonly registry: string;
+    readonly token: string;
+    readonly fetch: FetchLike;
+    readonly runNpm: NpmRunner;
+}): NpmTarget;
+export declare function createTarballSource(fetchFn: FetchLike): TarballSource;
+//# sourceMappingURL=npm-registry.d.ts.map

package/dist/mirror/target/npm-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/npm-registry.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI3D,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAG7C,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;AAG9G,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAIrE;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAAK,OAAO,CAAC;IAC5F,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACrC,CAAC,CAAC;AAeH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B,GAAG,SAAS,CA0CZ;AAGD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,GAAG,aAAa,CAQrE"}

package/dist/mirror/target/npm-registry.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MIRROR_DIST_TAG = void 0;
+exports.createNpmRunner = createNpmRunner;
+exports.createNpmTarget = createNpmTarget;
+exports.createTarballSource = createTarballSource;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+exports.MIRROR_DIST_TAG = 'xema-mirror';
+function createNpmRunner(baseEnv) {
+    return (args, env, cwd) => {
+        (0, node_child_process_1.execFileSync)('npm', [...args], { cwd, env: { PATH: baseEnv['PATH'] ?? '', ...env }, stdio: ['ignore', 'inherit', 'inherit'] });
+    };
+}
+const registryUrl = (registry, name) => `${registry.replace(/\/+$/u, '')}/${name.replace('/', '%2F')}`;
+function createNpmTarget(input) {
+    const { runNpm } = input;
+    const authority = new URL(input.registry).host;
+    const readPackument = async (name) => {
+        const response = await input.fetch(registryUrl(input.registry, name), {
+            headers: { authorization: `Bearer ${input.token}`, accept: 'application/json' },
+        });
+        if (response.status === 404) {
+            return null;
+        }
+        if (!response.ok) {
+            throw new Error(`${registryUrl(input.registry, name)} answered ${String(response.status)}`);
+        }
+        return (await response.json());
+    };
+    return {
+        async heldIntegrity(name, version) {
+            const packument = await readPackument(name);
+            return packument?.versions?.[version]?.dist?.integrity ?? null;
+        },
+        async removeDistTag(name, distTag) {
+            const packument = await readPackument(name);
+            if (packument === null || packument['dist-tags']?.[distTag] === undefined) {
+                return;
+            }
+            runNpm(['dist-tag', 'rm', name, distTag, '--registry', input.registry], { [`npm_config_//${authority}/:_authToken`]: input.token }, (0, node_os_1.tmpdir)());
+        },
+        publish(_pkg, tarball, distTag) {
+            const directory = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-mirror-npm-'));
+            try {
+                const file = (0, node_path_1.join)(directory, 'package.tgz');
+                (0, node_fs_1.writeFileSync)(file, tarball);
+                runNpm(['publish', file, '--registry', input.registry, '--tag', distTag, '--ignore-scripts'], { [`npm_config_//${authority}/:_authToken`]: input.token }, directory);
+            }
+            finally {
+                (0, node_fs_1.rmSync)(directory, { recursive: true, force: true });
+            }
+        },
+    };
+}
+function createTarballSource(fetchFn) {
+    return async (url) => {
+        const response = await fetchFn(url);
+        if (!response.ok) {
+            throw new Error(`${url} answered ${String(response.status)}`);
+        }
+        return new Uint8Array(await response.arrayBuffer());
+    };
+}
+//# sourceMappingURL=npm-registry.js.map

package/dist/mirror/target/npm-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.js","sourceRoot":"","sources":["../../../src/mirror/target/npm-registry.ts"],"names":[],"mappings":";;;AAeA,0CAIC;AAsBD,0CA+CC;AAGD,kDAQC;AAnGD,2DAAkD;AAClD,qCAA6D;AAC7D,qCAAiC;AACjC,yCAAiC;AAMpB,QAAA,eAAe,GAAG,aAAa,CAAC;AAM7C,SAAgB,eAAe,CAAC,OAA0B;IACxD,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,IAAA,iCAAY,EAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACjI,CAAC,CAAC;AACJ,CAAC;AAcD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAU,EAAE,CAC7D,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;AAOjE,SAAgB,eAAe,CAAC,KAK/B;IACC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAA6B,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACpE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAChF,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAC;IAC9C,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO;YAC/B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,SAAS,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO;YAC/B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,MAAM,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,gBAAgB,SAAS,cAAc,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,IAAA,gBAAM,GAAE,CAAC,CAAC;QAChJ,CAAC;QACD,OAAO,CAAC,IAAsB,EAAE,OAAmB,EAAE,OAAe;YAClE,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC5C,IAAA,uBAAa,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,CACJ,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,EACrF,EAAE,CAAC,gBAAgB,SAAS,cAAc,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,EAC1D,SAAS,CACV,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAGD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC"}

package/dist/mirror/target/npm-sync.d.ts

@@ -0,0 +1,15 @@
+import type { MirrorNpmPackage } from '@xemahq/contracts/mirror';
+export interface NpmTarget {
+    heldIntegrity(name: string, version: string): Promise<string | null>;
+    publish(pkg: MirrorNpmPackage, tarball: Uint8Array, distTag: string): void;
+    removeDistTag(name: string, distTag: string): Promise<void>;
+}
+export type TarballSource = (url: string) => Promise<Uint8Array>;
+export declare const integrityOf: (bytes: Uint8Array) => string;
+export interface NpmGap {
+    readonly pkg: MirrorNpmPackage;
+    readonly what: string;
+}
+export declare function npmGaps(target: NpmTarget, packages: readonly MirrorNpmPackage[]): Promise<readonly NpmGap[]>;
+export declare function pushNpm(target: NpmTarget, fetchTarball: TarballSource, packages: readonly MirrorNpmPackage[], distTag: string, onPublished: (pkg: MirrorNpmPackage, bytes: number) => void): Promise<void>;
+//# sourceMappingURL=npm-sync.d.ts.map

package/dist/mirror/target/npm-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-sync.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/npm-sync.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,WAAW,SAAS;IAExB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3E,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAGD,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEjE,eAAO,MAAM,WAAW,GAAI,OAAO,UAAU,KAAG,MAAyE,CAAC;AAE1H,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAGD,wBAAsB,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAWlH;AAOD,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,YAAY,EAAE,aAAa,EAC3B,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAC1D,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/mirror/target/npm-sync.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.integrityOf = void 0;
+exports.npmGaps = npmGaps;
+exports.pushNpm = pushNpm;
+const node_crypto_1 = require("node:crypto");
+const integrityOf = (bytes) => `sha512-${(0, node_crypto_1.createHash)('sha512').update(bytes).digest('base64')}`;
+exports.integrityOf = integrityOf;
+async function npmGaps(target, packages) {
+    const gaps = [];
+    for (const pkg of packages) {
+        const held = await target.heldIntegrity(pkg.name, pkg.version);
+        if (held === null) {
+            gaps.push({ pkg, what: 'is not published' });
+        }
+        else if (held !== pkg.integrity) {
+            gaps.push({ pkg, what: `is published with integrity ${held}, not ${pkg.integrity}` });
+        }
+    }
+    return gaps;
+}
+async function pushNpm(target, fetchTarball, packages, distTag, onPublished) {
+    for (const pkg of packages) {
+        const held = await target.heldIntegrity(pkg.name, pkg.version);
+        if (held === pkg.integrity) {
+            continue;
+        }
+        if (held !== null) {
+            throw new Error(`${pkg.name}@${pkg.version} is on the target with integrity ${held}, not ${pkg.integrity}; it is never overwritten`);
+        }
+        const bytes = await fetchTarball(pkg.tarball);
+        const actual = (0, exports.integrityOf)(bytes);
+        if (actual !== pkg.integrity) {
+            throw new Error(`${pkg.tarball} has integrity ${actual}, not the locked ${pkg.integrity}`);
+        }
+        target.publish(pkg, bytes, distTag);
+        const after = await target.heldIntegrity(pkg.name, pkg.version);
+        if (after !== pkg.integrity) {
+            throw new Error(`${pkg.name}@${pkg.version} reads back from the target as ${JSON.stringify(after)} after publishing`);
+        }
+        onPublished(pkg, bytes.byteLength);
+    }
+}
+//# sourceMappingURL=npm-sync.js.map

package/dist/mirror/target/npm-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-sync.js","sourceRoot":"","sources":["../../../src/mirror/target/npm-sync.ts"],"names":[],"mappings":";;;AAyBA,0BAWC;AAOD,0BA2BC;AAtED,6CAAyC;AAiBlC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,UAAU,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAA7G,QAAA,WAAW,eAAkG;AAQnH,KAAK,UAAU,OAAO,CAAC,MAAiB,EAAE,QAAqC;IACpF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,+BAA+B,IAAI,SAAS,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOM,KAAK,UAAU,OAAO,CAC3B,MAAiB,EACjB,YAA2B,EAC3B,QAAqC,EACrC,OAAe,EACf,WAA2D;IAE3D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,oCAAoC,IAAI,SAAS,GAAG,CAAC,SAAS,2BAA2B,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,kBAAkB,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,kCAAkC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxH,CAAC;QACD,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/mirror/target/oci-items.d.ts

@@ -0,0 +1,27 @@
+import { type ImageRegistryMirror, type MirrorContentSet, type MirrorSubject } from '@xemahq/contracts/mirror';
+export declare enum OciSection {
+    Edition = "edition",
+    Image = "image",
+    InfraImage = "infra-image",
+    Bundle = "bundle",
+    Chart = "chart"
+}
+export interface OciItem {
+    readonly section: OciSection;
+    readonly label: string;
+    readonly source: string;
+    readonly target: string;
+    readonly digest: string;
+    readonly referrers: readonly string[];
+    readonly tags: readonly string[];
+}
+export declare const archiveTag: (archiveDigest: string) => string;
+export declare function ociItems(set: Pick<MirrorContentSet, 'images' | 'bundles' | 'charts'> & {
+    readonly editionArtifact: MirrorSubject | null;
+}, mirror: ImageRegistryMirror): readonly OciItem[];
+export declare function seedItem(seed: {
+    readonly source: string;
+    readonly digest: string;
+    readonly tags: readonly string[];
+}, referrers: readonly string[], mirror: ImageRegistryMirror): OciItem;
+//# sourceMappingURL=oci-items.d.ts.map

package/dist/mirror/target/oci-items.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oci-items.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/oci-items.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAEnB,MAAM,0BAA0B,CAAC;AAGlC,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,UAAU,gBAAgB;IAC1B,MAAM,WAAW;IACjB,KAAK,UAAU;CAChB;AAGD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAE7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAWD,eAAO,MAAM,UAAU,GAAI,eAAe,MAAM,KAAG,MAAyC,CAAC;AAyB7F,wBAAgB,QAAQ,CACtB,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,GAAG;IAAE,QAAQ,CAAC,eAAe,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,EACjH,MAAM,EAAE,mBAAmB,GAC1B,SAAS,OAAO,EAAE,CA0BpB;AAGD,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAC5F,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAUT"}

package/dist/mirror/target/oci-items.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.archiveTag = exports.OciSection = void 0;
+exports.ociItems = ociItems;
+exports.seedItem = seedItem;
+const mirror_1 = require("@xemahq/contracts/mirror");
+var OciSection;
+(function (OciSection) {
+    OciSection["Edition"] = "edition";
+    OciSection["Image"] = "image";
+    OciSection["InfraImage"] = "infra-image";
+    OciSection["Bundle"] = "bundle";
+    OciSection["Chart"] = "chart";
+})(OciSection || (exports.OciSection = OciSection = {}));
+const SUBJECT_SECTIONS = {
+    [mirror_1.MirrorSubjectKind.Edition]: OciSection.Edition,
+    [mirror_1.MirrorSubjectKind.Image]: OciSection.Image,
+    [mirror_1.MirrorSubjectKind.InfraImage]: OciSection.InfraImage,
+};
+const OCI_SCHEME = 'oci://';
+const archiveTag = (archiveDigest) => archiveDigest.replace(':', '-');
+exports.archiveTag = archiveTag;
+function targetRepository(source, mirror) {
+    const mapped = (0, mirror_1.mirrorImageRef)(source, mirror);
+    if (!mapped.covered) {
+        throw new Error(`target.images.mirror has no entry covering ${source}: the target's naming is the map, so every source must be covered`);
+    }
+    return mapped.imageRef;
+}
+function subjectItem(subject, mirror) {
+    return {
+        section: SUBJECT_SECTIONS[subject.kind],
+        label: `${subject.source}`,
+        source: subject.source,
+        target: targetRepository(subject.source, mirror),
+        digest: subject.digest,
+        referrers: subject.referrers,
+        tags: subject.tags,
+    };
+}
+function ociItems(set, mirror) {
+    return [
+        ...(set.editionArtifact === null ? [] : [subjectItem(set.editionArtifact, mirror)]),
+        ...set.images.map((image) => subjectItem(image, mirror)),
+        ...set.bundles.map((bundle) => ({
+            section: OciSection.Bundle,
+            label: `${bundle.biome}${bundle.channel === undefined ? '' : `:${bundle.channel}`}`,
+            source: bundle.source,
+            target: targetRepository(bundle.source, mirror),
+            digest: bundle.digest,
+            referrers: bundle.referrers,
+            tags: [(0, exports.archiveTag)(bundle.archiveDigest), ...(bundle.channel === undefined ? [] : [bundle.channel])].sort(),
+        })),
+        ...set.charts.map((chart) => {
+            const source = chart.source.slice(OCI_SCHEME.length);
+            return {
+                section: OciSection.Chart,
+                label: `${chart.name} ${chart.version}`,
+                source,
+                target: targetRepository(source, mirror),
+                digest: chart.digest,
+                referrers: [],
+                tags: [chart.version],
+            };
+        }),
+    ];
+}
+function seedItem(seed, referrers, mirror) {
+    return {
+        section: OciSection.Image,
+        label: seed.source,
+        source: seed.source,
+        target: targetRepository(seed.source, mirror),
+        digest: seed.digest,
+        referrers,
+        tags: [...seed.tags].sort(),
+    };
+}
+//# sourceMappingURL=oci-items.js.map

package/dist/mirror/target/oci-items.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oci-items.js","sourceRoot":"","sources":["../../../src/mirror/target/oci-items.ts"],"names":[],"mappings":";;;AAgEA,4BA6BC;AAGD,4BAcC;AA9GD,qDAMkC;AAGlC,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,6BAAe,CAAA;IACf,wCAA0B,CAAA;IAC1B,+BAAiB,CAAA;IACjB,6BAAe,CAAA;AACjB,CAAC,EANW,UAAU,0BAAV,UAAU,QAMrB;AAeD,MAAM,gBAAgB,GAAoD;IACxE,CAAC,0BAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO;IAC/C,CAAC,0BAAiB,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK;IAC3C,CAAC,0BAAiB,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,UAAU;CACtD,CAAC;AAEF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAGrB,MAAM,UAAU,GAAG,CAAC,aAAqB,EAAU,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAAhF,QAAA,UAAU,cAAsE;AAE7F,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAA2B;IACnE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,mEAAmE,CACxH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB,EAAE,MAA2B;IACtE,OAAO;QACL,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAGD,SAAgB,QAAQ,CACtB,GAAiH,EACjH,MAA2B;IAE3B,OAAO;QACL,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;QACnF,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxD,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAW,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,UAAU,CAAC,MAAM;YAC1B,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE;YACnF,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,CAAC,IAAA,kBAAU,EAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;SAC3G,CAAC,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAW,EAAE;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,UAAU,CAAC,KAAK;gBACzB,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE;gBACvC,MAAM;gBACN,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aACtB,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAGD,SAAgB,QAAQ,CACtB,IAA4F,EAC5F,SAA4B,EAC5B,MAA2B;IAE3B,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,KAAK;QACzB,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS;QACT,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC"}

package/dist/mirror/target/oci-sync.d.ts

@@ -0,0 +1,20 @@
+import { type Oras } from '@xemahq/oci-closure';
+import { type TargetAccess } from './target-access';
+import type { OciItem } from './oci-items';
+export interface Gap {
+    readonly item: OciItem;
+    readonly what: string;
+}
+export declare function itemGaps(oras: Oras, access: TargetAccess, item: OciItem): readonly Gap[];
+export declare function cosignTagsToRestore(item: OciItem, resolveTag: (tag: string) => string | null): readonly {
+    tag: string;
+    digest: string;
+}[];
+export declare function tryResolve(oras: Oras, args: readonly string[]): string | null;
+export declare function pushItem(oras: Oras, access: TargetAccess, item: OciItem): void;
+export declare function applyTags(oras: Oras, access: TargetAccess, item: OciItem, tags: readonly {
+    tag: string;
+    digest: string;
+}[]): void;
+export declare function targetHolds(oras: Oras, access: TargetAccess, item: OciItem, digest: string): boolean;
+//# sourceMappingURL=oci-sync.d.ts.map

package/dist/mirror/target/oci-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oci-sync.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/oci-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,KAAK,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAkC,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,WAAW,GAAG;IAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAaD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,EAAE,CAiBxF;AAaD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GACzC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAU5C;AAGD,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAO7E;AAOD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAa9E;AAGD,wBAAgB,SAAS,CACvB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,GAC/C,IAAI,CAWN;AAGD,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEpG"}

package/dist/mirror/target/oci-sync.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.itemGaps = itemGaps;
+exports.cosignTagsToRestore = cosignTagsToRestore;
+exports.tryResolve = tryResolve;
+exports.pushItem = pushItem;
+exports.applyTags = applyTags;
+exports.targetHolds = targetHolds;
+const oci_closure_1 = require("@xemahq/oci-closure");
+const target_access_1 = require("./target-access");
+function resolveOnTarget(oras, access, reference) {
+    try {
+        return oras(['resolve', ...(0, target_access_1.targetFlags)(access), reference]).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function itemGaps(oras, access, item) {
+    const gaps = [];
+    if (resolveOnTarget(oras, access, `${item.target}@${item.digest}`) !== item.digest) {
+        return [{ item, what: `${item.target}@${item.digest} is not resolvable` }];
+    }
+    for (const referrer of item.referrers) {
+        if (resolveOnTarget(oras, access, `${item.target}@${referrer}`) !== referrer) {
+            gaps.push({ item, what: `referrer ${referrer} is not resolvable` });
+        }
+    }
+    for (const tag of item.tags) {
+        const named = resolveOnTarget(oras, access, `${item.target}:${tag}`);
+        if (named !== item.digest) {
+            gaps.push({ item, what: named === null ? `tag ${tag} is absent` : `tag ${tag} names ${named}` });
+        }
+    }
+    return gaps;
+}
+const COPY_SPECS = ['--from-distribution-spec', oci_closure_1.REFERRERS_DISTRIBUTION_SPEC, '--to-distribution-spec', oci_closure_1.REFERRERS_DISTRIBUTION_SPEC];
+function copyDigest(oras, access, item, digest) {
+    oras(['cp', ...COPY_SPECS, ...(0, target_access_1.copyToTargetFlags)(access), `${item.source}@${digest}`, item.target]);
+    const landed = resolveOnTarget(oras, access, `${item.target}@${digest}`);
+    if (landed !== digest) {
+        throw new Error(`${item.target}@${digest} resolves to ${JSON.stringify(landed)} after the copy`);
+    }
+}
+function cosignTagsToRestore(item, resolveTag) {
+    const out = [];
+    for (const kind of [oci_closure_1.ReferrerKind.CosignSignature, oci_closure_1.ReferrerKind.CosignAttestation]) {
+        const tag = (0, oci_closure_1.cosignTag)(item.digest, kind);
+        const named = resolveTag(tag);
+        if (named !== null && item.referrers.includes(named)) {
+            out.push({ tag, digest: named });
+        }
+    }
+    return out;
+}
+function tryResolve(oras, args) {
+    try {
+        return oras(['resolve', ...args]).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function pushItem(oras, access, item) {
+    if (resolveOnTarget(oras, access, `${item.target}@${item.digest}`) !== item.digest) {
+        copyDigest(oras, access, item, item.digest);
+    }
+    for (const referrer of item.referrers) {
+        if (resolveOnTarget(oras, access, `${item.target}@${referrer}`) !== referrer) {
+            copyDigest(oras, access, item, referrer);
+        }
+    }
+    applyTags(oras, access, item, [
+        ...cosignTagsToRestore(item, (tag) => tryResolve(oras, [`${item.source}:${tag}`])),
+        ...item.tags.map((tag) => ({ tag, digest: item.digest })),
+    ]);
+}
+function applyTags(oras, access, item, tags) {
+    for (const { tag, digest } of tags) {
+        if (resolveOnTarget(oras, access, `${item.target}:${tag}`) === digest) {
+            continue;
+        }
+        oras(['tag', ...(0, target_access_1.targetFlags)(access), `${item.target}@${digest}`, tag]);
+        const named = resolveOnTarget(oras, access, `${item.target}:${tag}`);
+        if (named !== digest) {
+            throw new Error(`${item.target}:${tag} names ${JSON.stringify(named)}, not ${digest}`);
+        }
+    }
+}
+function targetHolds(oras, access, item, digest) {
+    return resolveOnTarget(oras, access, `${item.target}@${digest}`) === digest;
+}
+//# sourceMappingURL=oci-sync.js.map

package/dist/mirror/target/oci-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oci-sync.js","sourceRoot":"","sources":["../../../src/mirror/target/oci-sync.ts"],"names":[],"mappings":";;AAuBA,4BAiBC;AAaD,kDAaC;AAGD,gCAOC;AAOD,4BAaC;AAGD,8BAgBC;AAGD,kCAEC;AAxHD,qDAAsG;AAEtG,mDAAoF;AAWpF,SAAS,eAAe,CAAC,IAAU,EAAE,MAAoB,EAAE,SAAiB;IAC1E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAGD,SAAgB,QAAQ,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa;IACtE,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnF,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,QAAQ,oBAAoB,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,GAAG,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,0BAA0B,EAAE,yCAA2B,EAAE,wBAAwB,EAAE,yCAA2B,CAAC,CAAC;AAEpI,SAAS,UAAU,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa,EAAE,MAAc;IACjF,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,IAAA,iCAAiB,EAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnG,CAAC;AACH,CAAC;AAGD,SAAgB,mBAAmB,CACjC,IAAa,EACb,UAA0C;IAE1C,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,CAAC,0BAAY,CAAC,eAAe,EAAE,0BAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClF,MAAM,GAAG,GAAG,IAAA,uBAAS,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,SAAgB,UAAU,CAAC,IAAU,EAAE,IAAuB;IAC5D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAOD,SAAgB,QAAQ,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa;IACtE,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnF,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7E,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAClF,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAGD,SAAgB,SAAS,CACvB,IAAU,EACV,MAAoB,EACpB,IAAa,EACb,IAAgD;IAEhD,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAGD,SAAgB,WAAW,CAAC,IAAU,EAAE,MAAoB,EAAE,IAAa,EAAE,MAAc;IACzF,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,KAAK,MAAM,CAAC;AAC9E,CAAC"}

package/dist/mirror/target/receipt-store.d.ts

@@ -0,0 +1,13 @@
+import { type MirrorReceipt } from '@xemahq/contracts/mirror';
+import { type TargetAccess } from './target-access';
+import type { Oras } from '@xemahq/oci-closure';
+export declare const RECEIPT_ARTIFACT_TYPE = "application/vnd.xema.mirror-receipt.v1+json";
+export declare const RECEIPT_CURRENT_TAG = "current";
+export declare const receiptRepository: (target: {
+    registry: string;
+    project: string;
+}) => string;
+export declare function readCurrentReceipt(oras: Oras, access: TargetAccess, repository: string): MirrorReceipt | null;
+export declare const serializeReceipt: (receipt: MirrorReceipt) => string;
+export declare function publishReceipt(oras: Oras, access: TargetAccess, repository: string, receipt: MirrorReceipt, tagOverride?: string | null): string;
+//# sourceMappingURL=receipt-store.d.ts.map

package/dist/mirror/target/receipt-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-store.d.ts","sourceRoot":"","sources":["../../../src/mirror/target/receipt-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGnF,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAIhD,eAAO,MAAM,qBAAqB,gDAAgD,CAAC;AACnF,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAI7C,eAAO,MAAM,iBAAiB,GAAI,QAAQ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAG,MACtB,CAAC;AAG7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAkB7G;AAED,eAAO,MAAM,gBAAgB,GAAI,SAAS,aAAa,KAAG,MAAiD,CAAC;AAG5G,wBAAgB,cAAc,CAC5B,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,WAAW,GAAE,MAAM,GAAG,IAAW,GAChC,MAAM,CAqBR"}

package/dist/mirror/target/receipt-store.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeReceipt = exports.receiptRepository = exports.RECEIPT_CURRENT_TAG = exports.RECEIPT_ARTIFACT_TYPE = void 0;
+exports.readCurrentReceipt = readCurrentReceipt;
+exports.publishReceipt = publishReceipt;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const mirror_1 = require("@xemahq/contracts/mirror");
+const server_1 = require("@xemahq/contracts/mirror/server");
+const target_access_1 = require("./target-access");
+exports.RECEIPT_ARTIFACT_TYPE = 'application/vnd.xema.mirror-receipt.v1+json';
+exports.RECEIPT_CURRENT_TAG = 'current';
+const RECEIPT_TAG_LENGTH = 12;
+const receiptRepository = (target) => `${target.registry}/${target.project}/xema-mirror/receipt`;
+exports.receiptRepository = receiptRepository;
+function readCurrentReceipt(oras, access, repository) {
+    let manifestText;
+    try {
+        manifestText = oras(['manifest', 'fetch', ...(0, target_access_1.targetFlags)(access), `${repository}:${exports.RECEIPT_CURRENT_TAG}`]);
+    }
+    catch {
+        return null;
+    }
+    const manifest = JSON.parse(manifestText);
+    const layer = manifest.layers?.[0]?.digest;
+    if (layer === undefined) {
+        throw new Error(`${repository}:${exports.RECEIPT_CURRENT_TAG} is not a receipt artifact (no layer)`);
+    }
+    const parsed = mirror_1.MirrorReceiptSchema.safeParse(JSON.parse(oras(['blob', 'fetch', ...(0, target_access_1.targetFlags)(access), '--output', '-', `${repository}@${layer}`])));
+    if (!parsed.success) {
+        throw new Error(`${repository}:${exports.RECEIPT_CURRENT_TAG} is not a valid receipt: ${parsed.error.issues[0]?.message ?? 'invalid'}`);
+    }
+    return parsed.data;
+}
+const serializeReceipt = (receipt) => `${JSON.stringify(receipt, null, 2)}\n`;
+exports.serializeReceipt = serializeReceipt;
+function publishReceipt(oras, access, repository, receipt, tagOverride = null) {
+    const digest = (0, server_1.mirrorReceiptDigest)(receipt);
+    const tag = tagOverride ?? digest.slice('sha256:'.length, 'sha256:'.length + RECEIPT_TAG_LENGTH);
+    const directory = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'xema-mirror-receipt-'));
+    try {
+        const file = (0, node_path_1.join)(directory, 'receipt.json');
+        (0, node_fs_1.writeFileSync)(file, (0, exports.serializeReceipt)(receipt));
+        oras([
+            'push',
+            ...(0, target_access_1.targetFlags)(access),
+            '--artifact-type',
+            exports.RECEIPT_ARTIFACT_TYPE,
+            '--disable-path-validation',
+            `${repository}:${tag}`,
+            `${file}:application/json`,
+        ]);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(directory, { recursive: true, force: true });
+    }
+    oras(['tag', ...(0, target_access_1.targetFlags)(access), `${repository}:${tag}`, exports.RECEIPT_CURRENT_TAG]);
+    return digest;
+}
+//# sourceMappingURL=receipt-store.js.map

package/dist/mirror/target/receipt-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-store.js","sourceRoot":"","sources":["../../../src/mirror/target/receipt-store.ts"],"names":[],"mappings":";;;AAsBA,gDAkBC;AAKD,wCA2BC;AAxED,qCAA6D;AAC7D,qCAAiC;AACjC,yCAAiC;AAEjC,qDAAmF;AACnF,4DAAsE;AAEtE,mDAAiE;AAMpD,QAAA,qBAAqB,GAAG,6CAA6C,CAAC;AACtE,QAAA,mBAAmB,GAAG,SAAS,CAAC;AAC7C,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAGvB,MAAM,iBAAiB,GAAG,CAAC,MAA6C,EAAU,EAAE,CACzF,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,sBAAsB,CAAC;AADhD,QAAA,iBAAiB,qBAC+B;AAG7D,SAAgB,kBAAkB,CAAC,IAAU,EAAE,MAAoB,EAAE,UAAkB;IACrF,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,GAAG,UAAU,IAAI,2BAAmB,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAuC,CAAC;IAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,2BAAmB,uCAAuC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,4BAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrJ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,IAAI,2BAAmB,4BAA4B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IAClI,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAEM,MAAM,gBAAgB,GAAG,CAAC,OAAsB,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAA/F,QAAA,gBAAgB,oBAA+E;AAG5G,SAAgB,cAAc,CAC5B,IAAU,EACV,MAAoB,EACpB,UAAkB,EAClB,OAAsB,EACtB,cAA6B,IAAI;IAEjC,MAAM,MAAM,GAAG,IAAA,4BAAmB,EAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7C,IAAA,uBAAa,EAAC,IAAI,EAAE,IAAA,wBAAgB,EAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM;YACN,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC;YACtB,iBAAiB;YACjB,6BAAqB;YACrB,2BAA2B;YAC3B,GAAG,UAAU,IAAI,GAAG,EAAE;YACtB,GAAG,IAAI,mBAAmB;SAC3B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,IAAA,2BAAW,EAAC,MAAM,CAAC,EAAE,GAAG,UAAU,IAAI,GAAG,EAAE,EAAE,2BAAmB,CAAC,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC"}