@actuarial-ts/compliance 0.6.0 → 0.7.0

package/dist/diagnosticReplayProtocol.js

@@ -0,0 +1,98 @@
+import { isDiagnosticPlainRecord, isDiagnosticToken } from "@actuarial-ts/core";
+import { ComplianceError } from "./errors.js";
+import { MAX_REPLAY_FRAME_BYTES } from "./diagnosticReplayFrames.js";
+export const REPLAY_FORMAT = "diagnostic-replay";
+export const REPLAY_VERSION = 1;
+export const ARTIFACT_CHUNK_BYTES = 65_536;
+export function badReplay(message) {
+    throw new ComplianceError("BAD_DIAGNOSTIC_RUN", message, "$.replay");
+}
+export function mismatch(message) {
+    throw new ComplianceError("DIAGNOSTIC_MISMATCH", message, "$.replay");
+}
+/** Snapshot host metadata once, without invoking accessors or caller methods. */
+export function replayRecord(value, keys) {
+    if (!isDiagnosticPlainRecord(value))
+        badReplay("Expected a plain replay metadata object");
+    const result = Object.create(null);
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== "string" || !keys.includes(key))
+            badReplay("Unknown replay metadata field");
+        const field = Object.getOwnPropertyDescriptor(value, key);
+        if (!field || !("value" in field) || !field.enumerable)
+            badReplay("Replay metadata must contain enumerable data properties");
+        result[key] = field.value;
+    }
+    return result;
+}
+export function replayArray(value) {
+    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+        badReplay("Expected a plain replay metadata array");
+    const length = Object.getOwnPropertyDescriptor(value, "length")?.value;
+    if (typeof length !== "number" || !Number.isSafeInteger(length) || length < 0)
+        badReplay("Invalid replay metadata array length");
+    for (const key of Reflect.ownKeys(value))
+        if (key !== "length" &&
+            (typeof key !== "string" || !/^(0|[1-9][0-9]*)$/.test(key) || Number(key) >= length))
+            badReplay("Unexpected replay array property");
+    const result = [];
+    for (let index = 0; index < length; index++) {
+        const field = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!field || !("value" in field) || !field.enumerable)
+            badReplay("Replay array has a hole or accessor");
+        result.push(field.value);
+    }
+    return result;
+}
+export function replayToken(value) {
+    if (!isDiagnosticToken(value))
+        badReplay("Expected a nonempty replay token with valid Unicode");
+    return value;
+}
+export function replayLimit(value, label) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
+        badReplay(`${label} must be a positive safe integer`);
+    return value;
+}
+const signalAborted = Object.getOwnPropertyDescriptor(AbortSignal.prototype, "aborted").get;
+const throwIfAborted = AbortSignal.prototype.throwIfAborted;
+export function replayCancellation(signal) {
+    if (signal === undefined)
+        return () => { };
+    try {
+        signalAborted.call(signal);
+    }
+    catch {
+        badReplay("Replay signal must be an AbortSignal");
+    }
+    return () => throwIfAborted.call(signal);
+}
+/** Exactly the writer's bounded canonical flat-frame bytes, including newline. */
+export function replayFrameBytes(frame) {
+    const bytes = new TextEncoder().encode(`${JSON.stringify(frame)}\n`);
+    if (bytes.byteLength > MAX_REPLAY_FRAME_BYTES)
+        badReplay("Replay frame exceeds its byte limit");
+    return bytes;
+}
+export function encodeArtifactChunk(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+export function decodeArtifactChunk(value) {
+    if (typeof value !== "string" ||
+        !value.length ||
+        value.length > 87_384 ||
+        value.length % 4 ||
+        !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value))
+        badReplay("Invalid bounded artifact base64 chunk");
+    const binary = atob(value);
+    if (binary.length > ARTIFACT_CHUNK_BYTES || btoa(binary) !== value)
+        badReplay("Artifact base64 must use canonical padding bits and bounded chunks");
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index++)
+        bytes[index] = binary.charCodeAt(index);
+    return bytes;
+}
+//# sourceMappingURL=diagnosticReplayProtocol.js.map

package/dist/diagnosticReplayProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayProtocol.js","sourceRoot":"","sources":["../src/diagnosticReplayProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAoB,MAAM,6BAA6B,CAAC;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,IAAuB;IAClE,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;YACpD,SAAS,CAAC,yDAAyD,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAC3E,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAY,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC;IAChF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAC3E,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,IACE,GAAG,KAAK,QAAQ;YAChB,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;YAEpF,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU;YACpD,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACxE,SAAS,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAE,CAAC,GAAI,CAAC;AAC9F,MAAM,cAAc,GAAG,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC;AAC5D,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,UAAU,GAAG,sBAAsB;QAAE,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,MAAM,GAAG,MAAM;QACrB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC;QAE/E,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK;QAChE,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/diagnosticReplayReader.d.ts

@@ -0,0 +1,41 @@
+import type { DiagnosticArtifactDigest, DiagnosticRunIdentity } from "./diagnosticRun.js";
+import type { DiagnosticReplayByteSource } from "./diagnosticReplayWriter.js";
+/** Host resource policy, not a representation of the SDK's tested capacity. */
+export interface DiagnosticReplayReadLimits {
+    readonly maximumEncodedBytes: number;
+    readonly maximumArtifacts: number;
+    readonly maximumRuns: number;
+    readonly maximumArtifactBytes: number;
+    readonly maximumInputDepth: number;
+    readonly maximumInputNodes: number;
+    readonly maximumInputStringUnits: number;
+    readonly maximumInputTotalStringUnits: number;
+}
+export interface VerifyDiagnosticReplayStreamOptions {
+    readonly limits: DiagnosticReplayReadLimits;
+    readonly signal?: AbortSignal;
+}
+declare const verifiedReplayBrand: unique symbol;
+export interface VerifiedDiagnosticReplayStream {
+    readonly [verifiedReplayBrand]: true;
+    readonly format: "diagnostic-replay";
+    readonly version: 1;
+    readonly artifacts: readonly DiagnosticArtifactDigest[];
+    readonly runs: readonly (DiagnosticRunIdentity & {
+        readonly id: string;
+    })[];
+    /** SHA-256 of canonical numbered frames before the final trailer; not a signature. */
+    readonly frameDigest: string;
+}
+/**
+ * Verify all bytes/evidence and independently replay every run, sequentially.
+ * Reads must be <=128 KiB. Required resource limits apply before retaining raw
+ * inputs; results/audits are compared as text, never reconstructed from a file.
+ * Only a final receipt is returned after trailer integrity AND EOF. Hosts must
+ * not treat a partially consumed stream as a valid archive. Cancellation is
+ * cooperative between chunks/phases; use the signal for host I/O as well.
+ */
+export declare function verifyDiagnosticReplayStream(chunks: DiagnosticReplayByteSource, supplied: VerifyDiagnosticReplayStreamOptions): Promise<VerifiedDiagnosticReplayStream>;
+export declare function assertVerifiedDiagnosticReplayStream(value: unknown): asserts value is VerifiedDiagnosticReplayStream;
+export {};
+//# sourceMappingURL=diagnosticReplayReader.d.ts.map

package/dist/diagnosticReplayReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayReader.d.ts","sourceRoot":"","sources":["../src/diagnosticReplayReader.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,wBAAwB,EAExB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAgB9E,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;CAC/C;AACD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AACD,OAAO,CAAC,MAAM,mBAAmB,EAAE,OAAO,MAAM,CAAC;AACjD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,qBAAqB,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC5E,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAuPD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,0BAA0B,EAClC,QAAQ,EAAE,mCAAmC,GAC5C,OAAO,CAAC,8BAA8B,CAAC,CAkGzC;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,8BAA8B,CAGjD"}

package/dist/diagnosticReplayReader.js

@@ -0,0 +1,346 @@
+import { iterateDiagnosticIdentityJson } from "@actuarial-ts/core";
+import { runValidatedMetricDiagnosticsCompact, validateDiagnosticRunInputCompact, } from "@actuarial-ts/data";
+import { digestDiagnosticArtifactChunks } from "./diagnosticArtifactStream.js";
+import { createCompactDiagnosticRunIdentity, } from "./diagnosticCompactRun.js";
+import { diagnosticByteView } from "./diagnosticByteView.js";
+import { consumeDiagnosticByteSource } from "./diagnosticByteSource.js";
+import { decodeReplayFrames, MAX_REPLAY_READ_BYTES, REPLAY_TEXT_UNITS, } from "./diagnosticReplayFrames.js";
+import { ReplayValueBuilder } from "./diagnosticReplayValue.js";
+import { createSha256 } from "./sha256Stream.js";
+import { REPLAY_FORMAT, REPLAY_VERSION, badReplay, mismatch, replayArray, replayCancellation, replayFrameBytes, replayLimit, replayRecord, replayToken, decodeArtifactChunk, } from "./diagnosticReplayProtocol.js";
+const verifiedStreams = new WeakSet();
+class ReplayCursor {
+    iterator;
+    checkCancellation;
+    sequence = 0;
+    hash = createSha256();
+    constructor(iterator, checkCancellation) {
+        this.iterator = iterator;
+        this.checkCancellation = checkCancellation;
+    }
+    async next() {
+        this.checkCancellation();
+        const item = await this.iterator.next();
+        this.checkCancellation();
+        if (item.done)
+            badReplay("Replay ended before its required trailer or section boundary");
+        const frame = item.value;
+        if (frame.length < 2 ||
+            frame[0] !== this.sequence ||
+            !Number.isSafeInteger(frame[0]) ||
+            typeof frame[1] !== "string")
+            badReplay("Replay frame has an invalid sequence or event");
+        this.sequence++;
+        if (frame[1] !== "end")
+            this.hash.update(replayFrameBytes(frame));
+        return frame.slice(1);
+    }
+    digest() {
+        return this.hash.digest();
+    }
+    async requireEof() {
+        this.checkCancellation();
+        if (!(await this.iterator.next()).done)
+            badReplay("Unexpected frames after the replay trailer");
+        this.checkCancellation();
+    }
+    async close() {
+        await this.iterator.return(undefined);
+    }
+}
+function event(frame, name, arity) {
+    if (frame[0] !== name || frame.length !== arity)
+        badReplay(`Expected ${name} with exact arity ${arity}`);
+}
+async function readValue(cursor, ending, limits) {
+    const builder = new ReplayValueBuilder(limits);
+    for (;;) {
+        const frame = await cursor.next();
+        if (frame[0] === ending) {
+            event(frame, ending, 1);
+            return builder.finish();
+        }
+        builder.push(frame);
+    }
+}
+/** Compare complete expected canonical text with bounded candidate fragments. */
+async function compareEvidence(cursor, channel, document) {
+    const expected = iterateDiagnosticIdentityJson(document);
+    let chunk = "", index = 0, position = 0, done = false;
+    function advance() {
+        while (!done && index === chunk.length) {
+            const item = expected.next();
+            done = Boolean(item.done);
+            chunk = item.done ? "" : item.value;
+            index = 0;
+        }
+    }
+    try {
+        for (;;) {
+            const frame = await cursor.next();
+            if (frame[0] === `${channel}-end`) {
+                event(frame, `${channel}-end`, 1);
+                advance();
+                if (!done)
+                    mismatch(`${channel} evidence is truncated at code-unit offset ${position}`);
+                return;
+            }
+            event(frame, channel, 2);
+            const text = frame[1];
+            if (typeof text !== "string" || text.length === 0 || text.length > REPLAY_TEXT_UNITS)
+                badReplay("Invalid bounded canonical evidence fragment");
+            let start = 0;
+            while (start < text.length) {
+                advance();
+                if (done)
+                    mismatch(`${channel} evidence has extra content at code-unit offset ${position}`);
+                const length = Math.min(text.length - start, chunk.length - index);
+                for (let offset = 0; offset < length; offset++)
+                    if (text.charCodeAt(start + offset) !== chunk.charCodeAt(index + offset))
+                        mismatch(`${channel} evidence differs at code-unit offset ${position + offset}`);
+                start += length;
+                index += length;
+                position += length;
+            }
+        }
+    }
+    finally {
+        expected.return(undefined);
+    }
+}
+function artifactMetadata(value) {
+    const item = replayRecord(value, [
+        "id",
+        "scope",
+        "assurance",
+        "algorithm",
+        "value",
+        "byteLength",
+    ]);
+    const id = replayToken(item.id);
+    if (item.scope !== "input" && item.scope !== "preparation")
+        badReplay("Invalid artifact scope");
+    const scope = item.scope;
+    if (item.assurance === "caller-declared") {
+        if (Object.hasOwn(item, "byteLength"))
+            badReplay("Declared artifact cannot claim a computed byte length");
+        return Object.freeze({
+            id,
+            scope,
+            assurance: "caller-declared",
+            algorithm: replayToken(item.algorithm),
+            value: replayToken(item.value),
+        });
+    }
+    if (item.assurance !== "sdk-computed" ||
+        item.algorithm !== "sha256" ||
+        typeof item.value !== "string" ||
+        !/^[a-f0-9]{64}$/.test(item.value) ||
+        typeof item.byteLength !== "number" ||
+        !Number.isSafeInteger(item.byteLength) ||
+        item.byteLength < 0)
+        badReplay("Invalid computed artifact digest metadata");
+    return Object.freeze({
+        id,
+        scope,
+        assurance: "sdk-computed",
+        algorithm: "sha256",
+        value: item.value,
+        byteLength: item.byteLength,
+    });
+}
+async function readArtifact(cursor, inputLimits, maximumArtifactBytes) {
+    const artifact = artifactMetadata(await readValue(cursor, "artifact-data", inputLimits));
+    if (artifact.assurance === "caller-declared") {
+        event(await cursor.next(), "artifact-end", 1);
+        return artifact;
+    }
+    async function* bytes() {
+        for (;;) {
+            const frame = await cursor.next();
+            if (frame[0] === "artifact-end") {
+                event(frame, "artifact-end", 1);
+                return;
+            }
+            event(frame, "bytes", 2);
+            yield decodeArtifactChunk(frame[1]);
+        }
+    }
+    const computed = await digestDiagnosticArtifactChunks({
+        id: artifact.id,
+        scope: artifact.scope,
+        expectedByteLength: artifact.byteLength,
+        maximumByteLength: maximumArtifactBytes,
+    }, bytes());
+    if (computed.value !== artifact.value)
+        mismatch(`Artifact ${artifact.id} bytes do not match its digest`);
+    return computed;
+}
+async function readRun(cursor, artifacts, used, limits) {
+    const item = replayRecord(await readValue(cursor, "input-end", limits), [
+        "id",
+        "input",
+        "inputArtifactIds",
+        "preparationArtifactIds",
+        "preparationLineage",
+    ]);
+    const id = replayToken(item.id);
+    function resolve(value, scope) {
+        const seen = new Set();
+        return replayArray(value).map((key) => {
+            const token = replayToken(key);
+            if (seen.has(token))
+                badReplay("Duplicate artifact reference in replay run");
+            seen.add(token);
+            const artifact = artifacts.get(token);
+            if (!artifact || artifact.scope !== scope)
+                badReplay("Replay references an absent artifact or the wrong scope");
+            used.add(token);
+            return artifact;
+        });
+    }
+    const inputArtifacts = resolve(item.inputArtifactIds, "input");
+    const preparationArtifacts = resolve(item.preparationArtifactIds, "preparation");
+    // Candidate raw input always crosses the complete SDK schema, ownership,
+    // preparation and execution-policy boundaries. Parsing does not grant trust.
+    const completedRun = runValidatedMetricDiagnosticsCompact(validateDiagnosticRunInputCompact(item.input));
+    if (completedRun.status !== "completed")
+        mismatch(`Replay run ${id} is blocked at ${completedRun.stage}`);
+    const provenance = createCompactDiagnosticRunIdentity({
+        completedRun,
+        inputArtifacts,
+        preparationArtifacts,
+        preparationLineage: item.preparationLineage,
+    });
+    await compareEvidence(cursor, "manifest", provenance.manifestIdentityDocument);
+    await compareEvidence(cursor, "result", provenance.resultIdentityDocument);
+    const end = await cursor.next();
+    event(end, "run-end", 4);
+    if (end[1] !== provenance.runFingerprint ||
+        end[2] !== provenance.resultFingerprint ||
+        end[3] !== provenance.runResultFingerprint)
+        mismatch("Replayed fingerprint tags do not match the full verified evidence");
+    return Object.freeze({
+        id,
+        runFingerprint: provenance.runFingerprint,
+        resultFingerprint: provenance.resultFingerprint,
+        runResultFingerprint: provenance.runResultFingerprint,
+    });
+}
+/**
+ * Verify all bytes/evidence and independently replay every run, sequentially.
+ * Reads must be <=128 KiB. Required resource limits apply before retaining raw
+ * inputs; results/audits are compared as text, never reconstructed from a file.
+ * Only a final receipt is returned after trailer integrity AND EOF. Hosts must
+ * not treat a partially consumed stream as a valid archive. Cancellation is
+ * cooperative between chunks/phases; use the signal for host I/O as well.
+ */
+export function verifyDiagnosticReplayStream(chunks, supplied) {
+    const options = replayRecord(supplied, ["limits", "signal"]);
+    const fields = [
+        "maximumEncodedBytes",
+        "maximumArtifacts",
+        "maximumRuns",
+        "maximumArtifactBytes",
+        "maximumInputDepth",
+        "maximumInputNodes",
+        "maximumInputStringUnits",
+        "maximumInputTotalStringUnits",
+    ];
+    const raw = replayRecord(options.limits, fields);
+    const limits = Object.fromEntries(fields.map((key) => [key, replayLimit(raw[key], key)]));
+    const inputLimits = {
+        maximumDepth: limits.maximumInputDepth,
+        maximumNodes: limits.maximumInputNodes,
+        maximumStringUnits: limits.maximumInputStringUnits,
+        maximumTotalStringUnits: limits.maximumInputTotalStringUnits,
+    };
+    const checkCancellation = replayCancellation(options.signal);
+    checkCancellation();
+    async function* bounded() {
+        let size = 0;
+        for await (const chunk of consumeDiagnosticByteSource(chunks, checkCancellation)) {
+            checkCancellation();
+            const view = diagnosticByteView(chunk);
+            if (view.length > MAX_REPLAY_READ_BYTES)
+                badReplay("Replay reads must be at most 128 KiB");
+            if (view.length > limits.maximumEncodedBytes - size)
+                badReplay("Replay exceeds the encoded byte limit");
+            size += view.length;
+            yield new Uint8Array(view);
+        }
+    }
+    async function verify() {
+        const cursor = new ReplayCursor(decodeReplayFrames(bounded()), checkCancellation);
+        let failed = false;
+        try {
+            const header = await cursor.next();
+            event(header, REPLAY_FORMAT, 2);
+            if (header[1] !== REPLAY_VERSION)
+                badReplay("Unsupported diagnostic replay version");
+            const artifacts = new Map();
+            let frame = await cursor.next();
+            while (frame[0] === "artifact") {
+                event(frame, "artifact", 1);
+                if (artifacts.size >= limits.maximumArtifacts)
+                    badReplay("Replay exceeds its artifact count limit");
+                const artifact = await readArtifact(cursor, inputLimits, limits.maximumArtifactBytes);
+                if (artifacts.has(artifact.id))
+                    badReplay("Duplicate artifact ID in replay archive");
+                artifacts.set(artifact.id, artifact);
+                frame = await cursor.next();
+            }
+            const runs = [];
+            const runIds = new Set(), used = new Set();
+            while (frame[0] === "run") {
+                event(frame, "run", 1);
+                if (runs.length >= limits.maximumRuns)
+                    badReplay("Replay exceeds its run count limit");
+                const run = await readRun(cursor, artifacts, used, inputLimits);
+                if (runIds.has(run.id))
+                    badReplay("Duplicate run ID in replay archive");
+                runIds.add(run.id);
+                runs.push(run);
+                frame = await cursor.next();
+            }
+            event(frame, "end", 4);
+            if (!runs.length ||
+                frame[1] !== artifacts.size ||
+                frame[2] !== runs.length ||
+                used.size !== artifacts.size)
+                badReplay("Replay trailer counts, run presence or artifact ownership are invalid");
+            const frameDigest = cursor.digest();
+            if (frame[3] !== frameDigest)
+                mismatch("Replay frame integrity digest does not match");
+            await cursor.requireEof();
+            const receipt = Object.freeze({
+                format: REPLAY_FORMAT,
+                version: REPLAY_VERSION,
+                artifacts: Object.freeze([...artifacts.values()]),
+                runs: Object.freeze(runs),
+                frameDigest,
+            });
+            verifiedStreams.add(receipt);
+            return receipt;
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            try {
+                await cursor.close();
+            }
+            catch (cleanupError) {
+                if (!failed)
+                    throw cleanupError;
+            }
+        }
+    }
+    return verify();
+}
+export function assertVerifiedDiagnosticReplayStream(value) {
+    if (value === null || typeof value !== "object" || !verifiedStreams.has(value))
+        badReplay("Value is not an authentic fully verified replay stream receipt");
+}
+//# sourceMappingURL=diagnosticReplayReader.js.map

package/dist/diagnosticReplayReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayReader.js","sourceRoot":"","sources":["../src/diagnosticReplayReader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAmC,MAAM,oBAAoB,CAAC;AACpG,OAAO,EACL,oCAAoC,EACpC,iCAAiC,GAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACL,kCAAkC,GAEnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAA0B,MAAM,4BAA4B,CAAC;AAOxF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AA2BvC,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAE9C,MAAM,YAAY;IAIG;IACA;IAJX,QAAQ,GAAG,CAAC,CAAC;IACJ,IAAI,GAAG,YAAY,EAAE,CAAC;IACvC,YACmB,QAAqC,EACrC,iBAA6B;QAD7B,aAAQ,GAAR,QAAQ,CAA6B;QACrC,sBAAiB,GAAjB,iBAAiB,CAAY;IAC7C,CAAC;IACJ,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ;YAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAE5B,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI;YAAE,SAAS,CAAC,4CAA4C,CAAC,CAAC;QAChG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AACD,SAAS,KAAK,CAAC,KAAkB,EAAE,IAAY,EAAE,KAAa;IAC5D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;QAC7C,SAAS,CAAC,YAAY,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AACD,KAAK,UAAU,SAAS,CACtB,MAAoB,EACpB,MAAc,EACd,MAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,eAAe,CAC5B,MAAoB,EACpB,OAA8B,EAC9B,QAAoC;IAEpC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,EAAE,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,GAAG,CAAC,EACZ,IAAI,GAAG,KAAK,CAAC;IACf,SAAS,OAAO;QACd,OAAO,CAAC,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACpC,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,MAAM,EAAE,CAAC;gBAClC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClC,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI;oBAAE,QAAQ,CAAC,GAAG,OAAO,8CAA8C,QAAQ,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB;gBAClF,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI;oBAAE,QAAQ,CAAC,GAAG,OAAO,mDAAmD,QAAQ,EAAE,CAAC,CAAC;gBAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;gBACnE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE;oBAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC;wBACtE,QAAQ,CAAC,GAAG,OAAO,yCAAyC,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC;gBACrF,KAAK,IAAI,MAAM,CAAC;gBAChB,KAAK,IAAI,MAAM,CAAC;gBAChB,QAAQ,IAAI,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,IAAI;QACJ,OAAO;QACP,WAAW;QACX,WAAW;QACX,OAAO;QACP,YAAY;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa;QAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC;YACnC,SAAS,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE;YACF,KAAK;YACL,SAAS,EAAE,iBAAiB;YAC5B,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;YACtC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,IACE,IAAI,CAAC,SAAS,KAAK,cAAc;QACjC,IAAI,CAAC,SAAS,KAAK,QAAQ;QAC3B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,CAAC;QAEnB,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,KAAK;QACL,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAoB,EACpB,WAA8B,EAC9B,oBAA4B;IAE5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,KAAK,SAAS,CAAC,CAAC,KAAK;QACnB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;gBAChC,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzB,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CACnD;QACE,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,kBAAkB,EAAE,QAAQ,CAAC,UAAU;QACvC,iBAAiB,EAAE,oBAAoB;KACxC,EACD,KAAK,EAAE,CACR,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACnC,QAAQ,CAAC,YAAY,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAoB,EACpB,SAAiE,EACjE,IAAiB,EACjB,MAAyB;IAEzB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;QACtE,IAAI;QACJ,OAAO;QACP,kBAAkB;QAClB,wBAAwB;QACxB,oBAAoB;KACrB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,SAAS,OAAO,CAAC,KAAc,EAAE,KAA8B;QAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,4CAA4C,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;gBACvC,SAAS,CAAC,yDAAyD,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;IACjF,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,YAAY,GAAG,oCAAoC,CACvD,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9C,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW;QACrC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,kCAAkC,CAAC;QACpD,YAAY;QACZ,cAAc;QACd,oBAAoB;QACpB,kBAAkB,EAAE,IAAI,CAAC,kBAA6D;KACvF,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC/E,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzB,IACE,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,cAAc;QACpC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,iBAAiB;QACvC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,oBAAoB;QAE1C,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;KACtD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAkC,EAClC,QAA6C;IAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG;QACb,qBAAqB;QACrB,kBAAkB;QAClB,aAAa;QACb,sBAAsB;QACtB,mBAAmB;QACnB,mBAAmB;QACnB,yBAAyB;QACzB,8BAA8B;KACtB,CAAC;IACX,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CACd,CAAC;IAC3C,MAAM,WAAW,GAAsB;QACrC,YAAY,EAAE,MAAM,CAAC,iBAAiB;QACtC,YAAY,EAAE,MAAM,CAAC,iBAAiB;QACtC,kBAAkB,EAAE,MAAM,CAAC,uBAAuB;QAClD,uBAAuB,EAAE,MAAM,CAAC,4BAA4B;KAC7D,CAAC;IACF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,iBAAiB,EAAE,CAAC;IACpB,KAAK,SAAS,CAAC,CAAC,OAAO;QACrB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACjF,iBAAiB,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB;gBAAE,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,mBAAmB,GAAG,IAAI;gBACjD,SAAS,CAAC,uCAAuC,CAAC,CAAC;YACrD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,KAAK,UAAU,MAAM;QACnB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,SAAS,CAAC,uCAAuC,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6C,CAAC;YACvE,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC/B,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5B,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB;oBAC3C,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACtF,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACrF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACrC,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,GAAwD,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,EAC9B,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;oBAAE,SAAS,CAAC,oCAAoC,CAAC,CAAC;gBACvF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAChE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS,CAAC,oCAAoC,CAAC,CAAC;gBACxE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACf,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACvB,IACE,CAAC,IAAI,CAAC,MAAM;gBACZ,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI;gBAC3B,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;gBACxB,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;gBAE5B,SAAS,CAAC,uEAAuE,CAAC,CAAC;YACrF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW;gBAAE,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACvF,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,WAAW;aACZ,CAAmC,CAAC;YACrC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM;oBAAE,MAAM,YAAY,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5E,SAAS,CAAC,gEAAgE,CAAC,CAAC;AAChF,CAAC"}

package/dist/diagnosticReplayValue.d.ts

@@ -0,0 +1,34 @@
+import { type ReplayFrame } from "./diagnosticReplayFrames.js";
+export interface ReplayValueLimits {
+    readonly maximumDepth: number;
+    readonly maximumNodes: number;
+    /** Maximum UTF-16 code units in one key or string value. */
+    readonly maximumStringUnits: number;
+    /** Maximum UTF-16 code units across every key and string value in this input. */
+    readonly maximumTotalStringUnits: number;
+}
+/**
+ * Reconstruct input only, within explicit host resource bounds. Reconstructed
+ * values still require full SDK validation. Never use this for candidate
+ * result/audit identity channels: those must be compared as text streams.
+ */
+export declare class ReplayValueBuilder {
+    private readonly limits;
+    private readonly stack;
+    private nodes;
+    private assigned;
+    private root;
+    private stringParts;
+    private stringUnits;
+    private totalStringUnits;
+    private stringKind;
+    private sealed;
+    constructor(limits: ReplayValueLimits);
+    private attach;
+    push(frame: ReplayFrame): void;
+    private consume;
+    finish(): unknown;
+}
+/** Live read-only input events. The enclosing genuine run owns its snapshots. */
+export declare function replayValueFrames(value: unknown): Generator<ReplayFrame>;
+//# sourceMappingURL=diagnosticReplayValue.d.ts.map

package/dist/diagnosticReplayValue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayValue.d.ts","sourceRoot":"","sources":["../src/diagnosticReplayValue.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAsCD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,iBAAiB;IAGrC,OAAO,CAAC,MAAM;IAmBd,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAS9B,OAAO,CAAC,OAAO;IA4Ff,MAAM,IAAI,OAAO;CAOlB;AAED,iFAAiF;AACjF,wBAAiB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAsEzE"}