From 786584e861794141657247bb983e1572353d6b52 Mon Sep 17 00:00:00 2001 From: NahumDev <60716442+NahumOchoa@users.noreply.github.com> Date: Fri, 9 Oct 2026 10:29:01 -0600 Subject: [PATCH] Verify admitted archive members without recompression --- .github/workflows/release.yml | 20 +++++++++++--------- TARGET.bound | 10 +++++----- package-lock.json | 4 ++-- package.json | 2 +- receipts.bound | 14 +++++++------- 5 files changed, 26 insertions(+), 24 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 568de8a..dc5096f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,24 +28,26 @@ jobs: run: | version="v$(node -p "require('./package.json').version")" mkdir -p release-assets - gh release download "$version" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets || gh release download "${version}-inputs" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets + gh release download "$version" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets printf '%s %s\n' '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' 'release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' | sha256sum -c - - gh release download "$version" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets || gh release download "${version}-inputs" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets + gh release download "$version" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets printf '%s %s\n' '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' | sha256sum -c - - gh release download "$version" --repo Lapxo/topos-github --pattern 'archive-profile.mjs' --dir release-assets || gh release download "${version}-inputs" --repo Lapxo/topos-github --pattern 'archive-profile.mjs' --dir release-assets - printf '%s %s\n' 'b29b48db2b4d9633a095765ae65e99ca8c14aae10a76735f006fb728a23e5aaa' 'release-assets/archive-profile.mjs' | sha256sum -c - + gh release download "$version" --repo Lapxo/topos-github --pattern 'archive-check.mjs' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern 'archive-check.mjs' --dir release-assets + printf '%s %s\n' 'c58eb9b6e5c0cdf12ca9311e45339399d2fa8ddd7940e840b129af7b258f8f96' 'release-assets/archive-check.mjs' | sha256sum -c - npx --yes --package esbuild@0.28.2 esbuild src/index.ts --bundle --platform=node --format=esm --outfile="$RUNNER_TEMP/runtime-index.js" printf '%s %s\n' 'c99a99e45f88b31979e57281cdf74ee695092724abb65553d95b51f4ed5fb890' "$RUNNER_TEMP/runtime-index.js" | sha256sum -c - - node release-assets/archive-profile.mjs 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'sha256:36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' capsule.bound 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' dist/index.js "$RUNNER_TEMP/runtime-index.js" >&2 - gh release download "$version" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets || gh release download "${version}-inputs" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets + gh release download "$version" --repo Lapxo/topos-github --pattern '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' --dir release-assets + printf '%s %s\n' '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' | sha256sum -c - + node release-assets/archive-check.mjs 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'sha256:36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' capsule.bound 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' dist/index.js "$RUNNER_TEMP/runtime-index.js" >&2 + gh release download "$version" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets printf '%s %s\n' 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' 'release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' | sha256sum -c - - gh release download "$version" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets || gh release download "${version}-inputs" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets + gh release download "$version" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets printf '%s %s\n' '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' 'release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' | sha256sum -c - asset="$(npm pack --silent)" test -f "$asset" expected="$(sha256sum "$asset")" if ! gh release view "$version" >/dev/null 2>&1; then - gh release create "$version" "$asset" 'release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' 'release-assets/archive-profile.mjs' 'release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' 'release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --title "$version" --notes "$version" + gh release create "$version" "$asset" 'release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' 'release-assets/archive-check.mjs' 'release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' 'release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --title "$version" --notes "$version" fi gh release download "$version" --pattern "$(basename "$asset")" --dir "$RUNNER_TEMP/release-back" actual="$(sha256sum "$RUNNER_TEMP/release-back/$(basename "$asset")")" @@ -71,7 +73,7 @@ jobs: gh release download "$version" --pattern "$(basename "$extra")" --dir "$RUNNER_TEMP/release-back" extra_actual="$(sha256sum "$RUNNER_TEMP/release-back/$(basename "$extra")")" test "${extra_expected%% *}" = "${extra_actual%% *}" - extra='release-assets/archive-profile.mjs' + extra='release-assets/archive-check.mjs' test -f "$extra" test "$(basename "$extra")" != "$(basename "$asset")" extra_expected="$(sha256sum "$extra")" diff --git a/TARGET.bound b/TARGET.bound index afd9806..505c509 100644 --- a/TARGET.bound +++ b/TARGET.bound @@ -43,7 +43,7 @@ bound-lock/1 about="how together a region arrived, one when every line landed at bound-lock/1 about="its leaf" at=policy:form by=target form=alphabet measure=text role=writes scope=form/prose/en/page/regions/leaf value=lock bound-lock/1 about="its regions, read off its own descriptor" at=witness:own-project-prose by=target form=alphabet measure=text role=writes scope=prose/en/door/words value=lock bound-lock/1 about="lines that stand on one origin and are therefore not yet information" at=policy:region/grey by=target form=alphabet measure=text role=writes scope=region/grey value=lock -bound-lock/1 about="mkdir -p release-assets\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets || gh release download \"${version}-inputs\" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets\nprintf '%s %s\\n' '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' 'release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets || gh release download \"${version}-inputs\" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets\nprintf '%s %s\\n' '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern 'archive-profile.mjs' --dir release-assets || gh release download \"${version}-inputs\" --repo Lapxo/topos-github --pattern 'archive-profile.mjs' --dir release-assets\nprintf '%s %s\\n' 'b29b48db2b4d9633a095765ae65e99ca8c14aae10a76735f006fb728a23e5aaa' 'release-assets/archive-profile.mjs' | sha256sum -c -\nnpx --yes --package esbuild@0.28.2 esbuild src/index.ts --bundle --platform=node --format=esm --outfile=\"$RUNNER_TEMP/runtime-index.js\"\nprintf '%s %s\\n' 'c99a99e45f88b31979e57281cdf74ee695092724abb65553d95b51f4ed5fb890' \"$RUNNER_TEMP/runtime-index.js\" | sha256sum -c -\nnode release-assets/archive-profile.mjs 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'sha256:36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' capsule.bound 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' dist/index.js \"$RUNNER_TEMP/runtime-index.js\" >&2\ngh release download \"$version\" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets || gh release download \"${version}-inputs\" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets\nprintf '%s %s\\n' 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' 'release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets || gh release download \"${version}-inputs\" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets\nprintf '%s %s\\n' '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' 'release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' | sha256sum -c -" at=witness:retained-provider-delivery by=target form=alphabet measure=text role=writes scope=pipeline/release/prepare value=lock +bound-lock/1 about="mkdir -p release-assets\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' --dir release-assets\nprintf '%s %s\\n' '0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' 'release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' --dir release-assets\nprintf '%s %s\\n' '97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern 'archive-check.mjs' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern 'archive-check.mjs' --dir release-assets\nprintf '%s %s\\n' 'c58eb9b6e5c0cdf12ca9311e45339399d2fa8ddd7940e840b129af7b258f8f96' 'release-assets/archive-check.mjs' | sha256sum -c -\nnpx --yes --package esbuild@0.28.2 esbuild src/index.ts --bundle --platform=node --format=esm --outfile=\"$RUNNER_TEMP/runtime-index.js\"\nprintf '%s %s\\n' 'c99a99e45f88b31979e57281cdf74ee695092724abb65553d95b51f4ed5fb890' \"$RUNNER_TEMP/runtime-index.js\" | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' --dir release-assets\nprintf '%s %s\\n' '36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' | sha256sum -c -\nnode release-assets/archive-check.mjs 'release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' 'sha256:36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e' capsule.bound 'release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01' dist/index.js \"$RUNNER_TEMP/runtime-index.js\" >&2\ngh release download \"$version\" --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' --dir release-assets\nprintf '%s %s\\n' 'ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' 'release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb' | sha256sum -c -\ngh release download \"$version\" --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets || gh release download v0.1.3-inputs --repo Lapxo/topos-github --pattern '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' --dir release-assets\nprintf '%s %s\\n' '1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' 'release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0' | sha256sum -c -" at=witness:exact-archive-member-verification by=target form=alphabet measure=text role=writes scope=pipeline/release/prepare value=lock bound-lock/1 about="packed as {digest}" at=policy:prose by=target form=alphabet measure=text role=writes scope=prose/en/figure/world/blob value=lock bound-lock/1 about="pinned by {place}" at=policy:prose by=target form=alphabet measure=text role=writes scope=prose/en/figure/world/pinned value=lock bound-lock/1 about="publish the version once, by the trusted publisher" at=policy:form by=target form=alphabet measure=text role=writes scope=form/prose/en/page/pipeline/publish value=lock @@ -474,18 +474,18 @@ bound-lock/1 at=policy:wire/region-measures by=target form=alphabet measure=id r bound-lock/1 at=policy:wire/shapes by=target form=alphabet measure=id role=reads scope=audit/wire/shapes value=decision|lock|package|reader|render|run|vector|view bound-lock/1 at=policy:wire/states by=target form=alphabet measure=id role=reads scope=audit/wire/states value=absent|present|unread|withdraw bound-lock/1 at=policy:wire/templates by=target form=alphabet measure=id role=reads scope=audit/wire/templates value={cone}|{roots} +bound-lock/1 at=witness:exact-archive-member-verification by=target form=alphabet measure=id needs=package.json role=writes scope=version shape=package.json value=0.1.4 +bound-lock/1 at=witness:exact-archive-member-verification by=target form=alphabet measure=id role=writes scope=pipeline/release/assets value=release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d|release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e|release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01|release-assets/archive-check.mjs|release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb|release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0 +bound-lock/1 at=witness:exact-archive-member-verification by=target form=alphabet measure=id role=writes scope=sources/runtime-topos-github value=https://github.com/Lapxo/topos-github/releases/download/v0.1.4/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e +bound-lock/1 at=witness:exact-archive-member-verification by=target form=alphabet measure=id role=writes scope=sources/topos-github value=https://github.com/Lapxo/topos-github/releases/download/v0.1.4/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d bound-lock/1 at=witness:installed-dependencies-are-foreign by=target form=alphabet measure=role role=writes scope=coordinate-role/node_modules value=foreign bound-lock/1 at=witness:native-receipts-ship-with-the-place by=target form=alphabet measure=id role=reads scope=audit/wire/ships value=dist|README.md|LICENSE|TARGET.bound|receipts.bound -bound-lock/1 at=witness:native-render-release by=target form=alphabet measure=id needs=package.json role=writes scope=version shape=package.json value=0.1.3 bound-lock/1 at=witness:own-page-from-own-prose by=target form=alphabet measure=id needs=README.md role=demands scope=view/readme-capsule shape=README.md value=hero|idea bound-lock/1 at=witness:own-store-never-ships by=target form=alphabet measure=id role=demands scope=view/gitignore shape=.gitignore value=ignore bound-lock/1 at=witness:portable-native-receipts by=target form=alphabet measure=id role=demands scope=view/receipts shape=receipts.bound value=receipts@8|receipts@0|receipts@1 bound-lock/1 at=witness:published-render-contract by=target form=alphabet measure=id needs=package.json role=writes scope=dependencies shape=package.json value=@lapxo/topos@0.1.12 bound-lock/1 at=witness:reproducible-release-assets by=target form=alphabet measure=digest role=writes scope=dep/runtime-topos-github shape=dist/index.js value=sha256:36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e bound-lock/1 at=witness:reproducible-release-assets by=target form=alphabet measure=digest role=writes scope=uses/topos-github value=sha256:0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d -bound-lock/1 at=witness:reproducible-release-assets by=target form=alphabet measure=id role=writes scope=sources/runtime-topos-github value=https://github.com/Lapxo/topos-github/releases/download/v0.1.3/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e -bound-lock/1 at=witness:reproducible-release-assets by=target form=alphabet measure=id role=writes scope=sources/topos-github value=https://github.com/Lapxo/topos-github/releases/download/v0.1.3/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d -bound-lock/1 at=witness:retained-provider-delivery by=target form=alphabet measure=id role=writes scope=pipeline/release/assets value=release-assets/0f5b05b2bd1b1f5e3641e6539e61fae87d791c4d51aa5d3d304ffdc064e7fe4d|release-assets/36e1f6822242625e745e5fb1611d8c74c2b769e39b902d1eff56e384bb3ae29e|release-assets/97190fb5e62ffd89940dc08bbbfc7ff865bd4f2096c1805e172297a4a441cb01|release-assets/archive-profile.mjs|release-assets/ce09169123e270319fcd9cfb46c414d8693d6e28800e1cf58cc4716e531915cb|release-assets/1b6385f068b4d35d6688150e964694353c96c8ed027bac95cc5ef5d90e6035c0 bound-lock/1 at=witness:verified-render-contract by=target form=alphabet measure=digest needs=topos-typescript-tree role=reads scope=dep/typescript-reader value=sha256:ecf86c50adacb3e199e7363fb355ad66d7c76a76ab1e007836d9e9fbc74ad434 bound-lock/1 at=witness:verified-render-contract by=target form=alphabet measure=digest needs=topos-typescript-tree/node_modules/@lapxo/obligations role=reads scope=dep/typescript-reader-algebra shape=package value=sha256:e4b48f480e86c2e1b9518b7a5dbe18e4b4dfa449961c781a291295fa85a3ec72 bound-lock/1 at=witness:verified-render-contract by=target form=alphabet measure=digest needs=topos-typescript-tree/node_modules/@lapxo/topos role=reads scope=dep/typescript-reader-sdk shape=package value=sha256:21e030acdc0d825e183b30f94d400daf351b02f782d474635f246de9e6e12b83 diff --git a/package-lock.json b/package-lock.json index 80b3319..b9ac816 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@lapxo/topos-github", - "version": "0.1.3", + "version": "0.1.4", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@lapxo/topos-github", - "version": "0.1.3", + "version": "0.1.4", "license": "MIT", "dependencies": { "@lapxo/topos": "0.1.12" diff --git a/package.json b/package.json index 44751a9..c71ee27 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@lapxo/topos-github", - "version": "0.1.3", + "version": "0.1.4", "description": "The forge a place asks for, rendered from its lines: the workflows that test, tag and release it, and what its repository never holds.", "type": "module", "license": "MIT", diff --git a/receipts.bound b/receipts.bound index a859cc0..eba6745 100644 --- a/receipts.bound +++ b/receipts.bound @@ -173,16 +173,16 @@ bound-lock/1 at=place:sha256:6133be7754b662e0979dd77c56f0e9e5784346388e9a442ee2c bound-lock/1 at=place:sha256:50103ef5ee25e89663ecf6511b017dc02199eca16674e93fe4c0ed8df3e9b824 by=bound form=alphabet measure=digest role=writes scope=receipts value=sha256:e36e4d0bb4517d39b42b6896b0d896f378b4ee374e2383535be2af6232ba5197 bound-lock/1 at=place:sha256:5c082fef1ce762fa94247263374999862cb5dbacb123320ac771ce079ef38a1d by=bound form=interval measure=count role=writes scope=receipts/. value=2..2 -bound-lock/1 at=place:sha256:b4fb7dffa778d1e05dc0eab4849c81c48f50f2c4629a993ba942fd0782f6570a by=bound form=alphabet measure=bytes role=writes scope=receipts/. value=sha256:b4fb7dffa778d1e05dc0eab4849c81c48f50f2c4629a993ba942fd0782f6570a +bound-lock/1 at=place:sha256:1134c84928f5fe72cd3ac5be48e1a3bbd82735361522f97509fe1419e711133f by=bound form=alphabet measure=bytes role=writes scope=receipts/. value=sha256:1134c84928f5fe72cd3ac5be48e1a3bbd82735361522f97509fe1419e711133f bound-lock/1 at=place:sha256:45577827f043137dfe5cddff39aa4cf6bb61cc4361b6593e58fd119e92de7bfb by=bound form=interval measure=count role=writes scope=receipts/door value=1..1 -bound-lock/1 at=place:sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 by=bound form=alphabet measure=bytes role=writes scope=receipts/door value=sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 +bound-lock/1 at=place:sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 by=bound form=alphabet measure=bytes role=writes scope=receipts/door value=sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 bound-lock/1 at=place:sha256:496d2b3650b6dc875b9d8b36aadc110348d644b227f18e1a7fcb12c1df1c6267 by=bound form=interval measure=count role=writes scope=receipts/instrument value=1..1 -bound-lock/1 at=place:sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 by=bound form=alphabet measure=bytes role=writes scope=receipts/instrument value=sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 +bound-lock/1 at=place:sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 by=bound form=alphabet measure=bytes role=writes scope=receipts/instrument value=sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 bound-lock/1 at=place:sha256:d89c6fb88ef9356228dfe25d617aff88d5068e1af355034fae6baaae339e7a43 by=bound form=interval measure=count role=writes scope=receipts/publish-auth-is-trusted value=1..1 -bound-lock/1 at=place:sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 by=bound form=alphabet measure=bytes role=writes scope=receipts/publish-auth-is-trusted value=sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 +bound-lock/1 at=place:sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 by=bound form=alphabet measure=bytes role=writes scope=receipts/publish-auth-is-trusted value=sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 bound-lock/1 at=place:sha256:c70b90155fb07805bfd601be08f77660778bc502a47ae6131f4789f492dc01c8 by=bound form=interval measure=count role=writes scope=receipts/source value=159..159 -bound-lock/1 at=place:sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 by=bound form=alphabet measure=bytes role=writes scope=receipts/source value=sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 +bound-lock/1 at=place:sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 by=bound form=alphabet measure=bytes role=writes scope=receipts/source value=sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 bound-lock/1 at=place:sha256:e94bdbd6f2774854cf4d1e2f0ef8aec50cc44ded91553114e7d524dd3b9d0c9f by=bound form=interval measure=count role=writes scope=receipts/src value=6..6 -bound-lock/1 at=place:sha256:217423633069bad5ef7905536c1f897ce994f1cfad5b9c3a041b39106592b251 by=bound form=alphabet measure=bytes role=writes scope=receipts/src value=sha256:217423633069bad5ef7905536c1f897ce994f1cfad5b9c3a041b39106592b251 +bound-lock/1 at=place:sha256:a73e647c68eaad6dd8200e5035ed1d830497ce6f216afef654cd9d99081ba5d8 by=bound form=alphabet measure=bytes role=writes scope=receipts/src value=sha256:a73e647c68eaad6dd8200e5035ed1d830497ce6f216afef654cd9d99081ba5d8 bound-lock/1 at=place:sha256:1f8e612d12ae11253468b76be25ce5e71c43ab7c4e4811cef55c8cff57fcae2f by=bound form=interval measure=count role=writes scope=receipts/write value=1..1 -bound-lock/1 at=place:sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 by=bound form=alphabet measure=bytes role=writes scope=receipts/write value=sha256:1c5148ac69f804602c0312f3809755dbad2ad5d77e4c4f5f5faa8910a8b6c077 +bound-lock/1 at=place:sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9 by=bound form=alphabet measure=bytes role=writes scope=receipts/write value=sha256:11e7a385ed7468974440bc59ccf186913343a57001722a030a231720b3362ed9