@actuarial-ts/compliance 0.6.1 → 0.7.0

package/dist/diagnosticReplayReader.js

@@ -0,0 +1,346 @@
+import { iterateDiagnosticIdentityJson } from "@actuarial-ts/core";
+import { runValidatedMetricDiagnosticsCompact, validateDiagnosticRunInputCompact, } from "@actuarial-ts/data";
+import { digestDiagnosticArtifactChunks } from "./diagnosticArtifactStream.js";
+import { createCompactDiagnosticRunIdentity, } from "./diagnosticCompactRun.js";
+import { diagnosticByteView } from "./diagnosticByteView.js";
+import { consumeDiagnosticByteSource } from "./diagnosticByteSource.js";
+import { decodeReplayFrames, MAX_REPLAY_READ_BYTES, REPLAY_TEXT_UNITS, } from "./diagnosticReplayFrames.js";
+import { ReplayValueBuilder } from "./diagnosticReplayValue.js";
+import { createSha256 } from "./sha256Stream.js";
+import { REPLAY_FORMAT, REPLAY_VERSION, badReplay, mismatch, replayArray, replayCancellation, replayFrameBytes, replayLimit, replayRecord, replayToken, decodeArtifactChunk, } from "./diagnosticReplayProtocol.js";
+const verifiedStreams = new WeakSet();
+class ReplayCursor {
+    iterator;
+    checkCancellation;
+    sequence = 0;
+    hash = createSha256();
+    constructor(iterator, checkCancellation) {
+        this.iterator = iterator;
+        this.checkCancellation = checkCancellation;
+    }
+    async next() {
+        this.checkCancellation();
+        const item = await this.iterator.next();
+        this.checkCancellation();
+        if (item.done)
+            badReplay("Replay ended before its required trailer or section boundary");
+        const frame = item.value;
+        if (frame.length < 2 ||
+            frame[0] !== this.sequence ||
+            !Number.isSafeInteger(frame[0]) ||
+            typeof frame[1] !== "string")
+            badReplay("Replay frame has an invalid sequence or event");
+        this.sequence++;
+        if (frame[1] !== "end")
+            this.hash.update(replayFrameBytes(frame));
+        return frame.slice(1);
+    }
+    digest() {
+        return this.hash.digest();
+    }
+    async requireEof() {
+        this.checkCancellation();
+        if (!(await this.iterator.next()).done)
+            badReplay("Unexpected frames after the replay trailer");
+        this.checkCancellation();
+    }
+    async close() {
+        await this.iterator.return(undefined);
+    }
+}
+function event(frame, name, arity) {
+    if (frame[0] !== name || frame.length !== arity)
+        badReplay(`Expected ${name} with exact arity ${arity}`);
+}
+async function readValue(cursor, ending, limits) {
+    const builder = new ReplayValueBuilder(limits);
+    for (;;) {
+        const frame = await cursor.next();
+        if (frame[0] === ending) {
+            event(frame, ending, 1);
+            return builder.finish();
+        }
+        builder.push(frame);
+    }
+}
+/** Compare complete expected canonical text with bounded candidate fragments. */
+async function compareEvidence(cursor, channel, document) {
+    const expected = iterateDiagnosticIdentityJson(document);
+    let chunk = "", index = 0, position = 0, done = false;
+    function advance() {
+        while (!done && index === chunk.length) {
+            const item = expected.next();
+            done = Boolean(item.done);
+            chunk = item.done ? "" : item.value;
+            index = 0;
+        }
+    }
+    try {
+        for (;;) {
+            const frame = await cursor.next();
+            if (frame[0] === `${channel}-end`) {
+                event(frame, `${channel}-end`, 1);
+                advance();
+                if (!done)
+                    mismatch(`${channel} evidence is truncated at code-unit offset ${position}`);
+                return;
+            }
+            event(frame, channel, 2);
+            const text = frame[1];
+            if (typeof text !== "string" || text.length === 0 || text.length > REPLAY_TEXT_UNITS)
+                badReplay("Invalid bounded canonical evidence fragment");
+            let start = 0;
+            while (start < text.length) {
+                advance();
+                if (done)
+                    mismatch(`${channel} evidence has extra content at code-unit offset ${position}`);
+                const length = Math.min(text.length - start, chunk.length - index);
+                for (let offset = 0; offset < length; offset++)
+                    if (text.charCodeAt(start + offset) !== chunk.charCodeAt(index + offset))
+                        mismatch(`${channel} evidence differs at code-unit offset ${position + offset}`);
+                start += length;
+                index += length;
+                position += length;
+            }
+        }
+    }
+    finally {
+        expected.return(undefined);
+    }
+}
+function artifactMetadata(value) {
+    const item = replayRecord(value, [
+        "id",
+        "scope",
+        "assurance",
+        "algorithm",
+        "value",
+        "byteLength",
+    ]);
+    const id = replayToken(item.id);
+    if (item.scope !== "input" && item.scope !== "preparation")
+        badReplay("Invalid artifact scope");
+    const scope = item.scope;
+    if (item.assurance === "caller-declared") {
+        if (Object.hasOwn(item, "byteLength"))
+            badReplay("Declared artifact cannot claim a computed byte length");
+        return Object.freeze({
+            id,
+            scope,
+            assurance: "caller-declared",
+            algorithm: replayToken(item.algorithm),
+            value: replayToken(item.value),
+        });
+    }
+    if (item.assurance !== "sdk-computed" ||
+        item.algorithm !== "sha256" ||
+        typeof item.value !== "string" ||
+        !/^[a-f0-9]{64}$/.test(item.value) ||
+        typeof item.byteLength !== "number" ||
+        !Number.isSafeInteger(item.byteLength) ||
+        item.byteLength < 0)
+        badReplay("Invalid computed artifact digest metadata");
+    return Object.freeze({
+        id,
+        scope,
+        assurance: "sdk-computed",
+        algorithm: "sha256",
+        value: item.value,
+        byteLength: item.byteLength,
+    });
+}
+async function readArtifact(cursor, inputLimits, maximumArtifactBytes) {
+    const artifact = artifactMetadata(await readValue(cursor, "artifact-data", inputLimits));
+    if (artifact.assurance === "caller-declared") {
+        event(await cursor.next(), "artifact-end", 1);
+        return artifact;
+    }
+    async function* bytes() {
+        for (;;) {
+            const frame = await cursor.next();
+            if (frame[0] === "artifact-end") {
+                event(frame, "artifact-end", 1);
+                return;
+            }
+            event(frame, "bytes", 2);
+            yield decodeArtifactChunk(frame[1]);
+        }
+    }
+    const computed = await digestDiagnosticArtifactChunks({
+        id: artifact.id,
+        scope: artifact.scope,
+        expectedByteLength: artifact.byteLength,
+        maximumByteLength: maximumArtifactBytes,
+    }, bytes());
+    if (computed.value !== artifact.value)
+        mismatch(`Artifact ${artifact.id} bytes do not match its digest`);
+    return computed;
+}
+async function readRun(cursor, artifacts, used, limits) {
+    const item = replayRecord(await readValue(cursor, "input-end", limits), [
+        "id",
+        "input",
+        "inputArtifactIds",
+        "preparationArtifactIds",
+        "preparationLineage",
+    ]);
+    const id = replayToken(item.id);
+    function resolve(value, scope) {
+        const seen = new Set();
+        return replayArray(value).map((key) => {
+            const token = replayToken(key);
+            if (seen.has(token))
+                badReplay("Duplicate artifact reference in replay run");
+            seen.add(token);
+            const artifact = artifacts.get(token);
+            if (!artifact || artifact.scope !== scope)
+                badReplay("Replay references an absent artifact or the wrong scope");
+            used.add(token);
+            return artifact;
+        });
+    }
+    const inputArtifacts = resolve(item.inputArtifactIds, "input");
+    const preparationArtifacts = resolve(item.preparationArtifactIds, "preparation");
+    // Candidate raw input always crosses the complete SDK schema, ownership,
+    // preparation and execution-policy boundaries. Parsing does not grant trust.
+    const completedRun = runValidatedMetricDiagnosticsCompact(validateDiagnosticRunInputCompact(item.input));
+    if (completedRun.status !== "completed")
+        mismatch(`Replay run ${id} is blocked at ${completedRun.stage}`);
+    const provenance = createCompactDiagnosticRunIdentity({
+        completedRun,
+        inputArtifacts,
+        preparationArtifacts,
+        preparationLineage: item.preparationLineage,
+    });
+    await compareEvidence(cursor, "manifest", provenance.manifestIdentityDocument);
+    await compareEvidence(cursor, "result", provenance.resultIdentityDocument);
+    const end = await cursor.next();
+    event(end, "run-end", 4);
+    if (end[1] !== provenance.runFingerprint ||
+        end[2] !== provenance.resultFingerprint ||
+        end[3] !== provenance.runResultFingerprint)
+        mismatch("Replayed fingerprint tags do not match the full verified evidence");
+    return Object.freeze({
+        id,
+        runFingerprint: provenance.runFingerprint,
+        resultFingerprint: provenance.resultFingerprint,
+        runResultFingerprint: provenance.runResultFingerprint,
+    });
+}
+/**
+ * Verify all bytes/evidence and independently replay every run, sequentially.
+ * Reads must be <=128 KiB. Required resource limits apply before retaining raw
+ * inputs; results/audits are compared as text, never reconstructed from a file.
+ * Only a final receipt is returned after trailer integrity AND EOF. Hosts must
+ * not treat a partially consumed stream as a valid archive. Cancellation is
+ * cooperative between chunks/phases; use the signal for host I/O as well.
+ */
+export function verifyDiagnosticReplayStream(chunks, supplied) {
+    const options = replayRecord(supplied, ["limits", "signal"]);
+    const fields = [
+        "maximumEncodedBytes",
+        "maximumArtifacts",
+        "maximumRuns",
+        "maximumArtifactBytes",
+        "maximumInputDepth",
+        "maximumInputNodes",
+        "maximumInputStringUnits",
+        "maximumInputTotalStringUnits",
+    ];
+    const raw = replayRecord(options.limits, fields);
+    const limits = Object.fromEntries(fields.map((key) => [key, replayLimit(raw[key], key)]));
+    const inputLimits = {
+        maximumDepth: limits.maximumInputDepth,
+        maximumNodes: limits.maximumInputNodes,
+        maximumStringUnits: limits.maximumInputStringUnits,
+        maximumTotalStringUnits: limits.maximumInputTotalStringUnits,
+    };
+    const checkCancellation = replayCancellation(options.signal);
+    checkCancellation();
+    async function* bounded() {
+        let size = 0;
+        for await (const chunk of consumeDiagnosticByteSource(chunks, checkCancellation)) {
+            checkCancellation();
+            const view = diagnosticByteView(chunk);
+            if (view.length > MAX_REPLAY_READ_BYTES)
+                badReplay("Replay reads must be at most 128 KiB");
+            if (view.length > limits.maximumEncodedBytes - size)
+                badReplay("Replay exceeds the encoded byte limit");
+            size += view.length;
+            yield new Uint8Array(view);
+        }
+    }
+    async function verify() {
+        const cursor = new ReplayCursor(decodeReplayFrames(bounded()), checkCancellation);
+        let failed = false;
+        try {
+            const header = await cursor.next();
+            event(header, REPLAY_FORMAT, 2);
+            if (header[1] !== REPLAY_VERSION)
+                badReplay("Unsupported diagnostic replay version");
+            const artifacts = new Map();
+            let frame = await cursor.next();
+            while (frame[0] === "artifact") {
+                event(frame, "artifact", 1);
+                if (artifacts.size >= limits.maximumArtifacts)
+                    badReplay("Replay exceeds its artifact count limit");
+                const artifact = await readArtifact(cursor, inputLimits, limits.maximumArtifactBytes);
+                if (artifacts.has(artifact.id))
+                    badReplay("Duplicate artifact ID in replay archive");
+                artifacts.set(artifact.id, artifact);
+                frame = await cursor.next();
+            }
+            const runs = [];
+            const runIds = new Set(), used = new Set();
+            while (frame[0] === "run") {
+                event(frame, "run", 1);
+                if (runs.length >= limits.maximumRuns)
+                    badReplay("Replay exceeds its run count limit");
+                const run = await readRun(cursor, artifacts, used, inputLimits);
+                if (runIds.has(run.id))
+                    badReplay("Duplicate run ID in replay archive");
+                runIds.add(run.id);
+                runs.push(run);
+                frame = await cursor.next();
+            }
+            event(frame, "end", 4);
+            if (!runs.length ||
+                frame[1] !== artifacts.size ||
+                frame[2] !== runs.length ||
+                used.size !== artifacts.size)
+                badReplay("Replay trailer counts, run presence or artifact ownership are invalid");
+            const frameDigest = cursor.digest();
+            if (frame[3] !== frameDigest)
+                mismatch("Replay frame integrity digest does not match");
+            await cursor.requireEof();
+            const receipt = Object.freeze({
+                format: REPLAY_FORMAT,
+                version: REPLAY_VERSION,
+                artifacts: Object.freeze([...artifacts.values()]),
+                runs: Object.freeze(runs),
+                frameDigest,
+            });
+            verifiedStreams.add(receipt);
+            return receipt;
+        }
+        catch (error) {
+            failed = true;
+            throw error;
+        }
+        finally {
+            try {
+                await cursor.close();
+            }
+            catch (cleanupError) {
+                if (!failed)
+                    throw cleanupError;
+            }
+        }
+    }
+    return verify();
+}
+export function assertVerifiedDiagnosticReplayStream(value) {
+    if (value === null || typeof value !== "object" || !verifiedStreams.has(value))
+        badReplay("Value is not an authentic fully verified replay stream receipt");
+}
+//# sourceMappingURL=diagnosticReplayReader.js.map

package/dist/diagnosticReplayReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayReader.js","sourceRoot":"","sources":["../src/diagnosticReplayReader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAmC,MAAM,oBAAoB,CAAC;AACpG,OAAO,EACL,oCAAoC,EACpC,iCAAiC,GAClC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACL,kCAAkC,GAEnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAA0B,MAAM,4BAA4B,CAAC;AAOxF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,aAAa,EACb,cAAc,EACd,SAAS,EACT,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AA2BvC,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAE9C,MAAM,YAAY;IAIG;IACA;IAJX,QAAQ,GAAG,CAAC,CAAC;IACJ,IAAI,GAAG,YAAY,EAAE,CAAC;IACvC,YACmB,QAAqC,EACrC,iBAA6B;QAD7B,aAAQ,GAAR,QAAQ,CAA6B;QACrC,sBAAiB,GAAjB,iBAAiB,CAAY;IAC7C,CAAC;IACJ,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ;YAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAE5B,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI;YAAE,SAAS,CAAC,4CAA4C,CAAC,CAAC;QAChG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AACD,SAAS,KAAK,CAAC,KAAkB,EAAE,IAAY,EAAE,KAAa;IAC5D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;QAC7C,SAAS,CAAC,YAAY,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AACD,KAAK,UAAU,SAAS,CACtB,MAAoB,EACpB,MAAc,EACd,MAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,eAAe,CAC5B,MAAoB,EACpB,OAA8B,EAC9B,QAAoC;IAEpC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,EAAE,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,GAAG,CAAC,EACZ,IAAI,GAAG,KAAK,CAAC;IACf,SAAS,OAAO;QACd,OAAO,CAAC,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACpC,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,MAAM,EAAE,CAAC;gBAClC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClC,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI;oBAAE,QAAQ,CAAC,GAAG,OAAO,8CAA8C,QAAQ,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB;gBAClF,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI;oBAAE,QAAQ,CAAC,GAAG,OAAO,mDAAmD,QAAQ,EAAE,CAAC,CAAC;gBAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;gBACnE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE;oBAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC;wBACtE,QAAQ,CAAC,GAAG,OAAO,yCAAyC,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC;gBACrF,KAAK,IAAI,MAAM,CAAC;gBAChB,KAAK,IAAI,MAAM,CAAC;gBAChB,QAAQ,IAAI,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE;QAC/B,IAAI;QACJ,OAAO;QACP,WAAW;QACX,WAAW;QACX,OAAO;QACP,YAAY;KACb,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa;QAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC;YACnC,SAAS,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE;YACF,KAAK;YACL,SAAS,EAAE,iBAAiB;YAC5B,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;YACtC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,IACE,IAAI,CAAC,SAAS,KAAK,cAAc;QACjC,IAAI,CAAC,SAAS,KAAK,QAAQ;QAC3B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,CAAC;QAEnB,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,KAAK;QACL,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAoB,EACpB,WAA8B,EAC9B,oBAA4B;IAE5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC7C,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,KAAK,SAAS,CAAC,CAAC,KAAK;QACnB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;gBAChC,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACzB,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CACnD;QACE,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,kBAAkB,EAAE,QAAQ,CAAC,UAAU;QACvC,iBAAiB,EAAE,oBAAoB;KACxC,EACD,KAAK,EAAE,CACR,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QACnC,QAAQ,CAAC,YAAY,QAAQ,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAoB,EACpB,SAAiE,EACjE,IAAiB,EACjB,MAAyB;IAEzB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;QACtE,IAAI;QACJ,OAAO;QACP,kBAAkB;QAClB,wBAAwB;QACxB,oBAAoB;KACrB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,SAAS,OAAO,CAAC,KAAc,EAAE,KAA8B;QAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,4CAA4C,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;gBACvC,SAAS,CAAC,yDAAyD,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;IACjF,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,YAAY,GAAG,oCAAoC,CACvD,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAC9C,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW;QACrC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,kCAAkC,CAAC;QACpD,YAAY;QACZ,cAAc;QACd,oBAAoB;QACpB,kBAAkB,EAAE,IAAI,CAAC,kBAA6D;KACvF,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC/E,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzB,IACE,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,cAAc;QACpC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,iBAAiB;QACvC,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,oBAAoB;QAE1C,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;KACtD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAkC,EAClC,QAA6C;IAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG;QACb,qBAAqB;QACrB,kBAAkB;QAClB,aAAa;QACb,sBAAsB;QACtB,mBAAmB;QACnB,mBAAmB;QACnB,yBAAyB;QACzB,8BAA8B;KACtB,CAAC;IACX,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CACd,CAAC;IAC3C,MAAM,WAAW,GAAsB;QACrC,YAAY,EAAE,MAAM,CAAC,iBAAiB;QACtC,YAAY,EAAE,MAAM,CAAC,iBAAiB;QACtC,kBAAkB,EAAE,MAAM,CAAC,uBAAuB;QAClD,uBAAuB,EAAE,MAAM,CAAC,4BAA4B;KAC7D,CAAC;IACF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,iBAAiB,EAAE,CAAC;IACpB,KAAK,SAAS,CAAC,CAAC,OAAO;QACrB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACjF,iBAAiB,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB;gBAAE,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,mBAAmB,GAAG,IAAI;gBACjD,SAAS,CAAC,uCAAuC,CAAC,CAAC;YACrD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,KAAK,UAAU,MAAM;QACnB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClF,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,SAAS,CAAC,uCAAuC,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6C,CAAC;YACvE,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC/B,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5B,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,gBAAgB;oBAC3C,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACtF,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACrF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACrC,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,MAAM,IAAI,GAAwD,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,EAC9B,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;oBAAE,SAAS,CAAC,oCAAoC,CAAC,CAAC;gBACvF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAChE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS,CAAC,oCAAoC,CAAC,CAAC;gBACxE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACf,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACvB,IACE,CAAC,IAAI,CAAC,MAAM;gBACZ,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI;gBAC3B,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;gBACxB,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;gBAE5B,SAAS,CAAC,uEAAuE,CAAC,CAAC;YACrF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW;gBAAE,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACvF,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,WAAW;aACZ,CAAmC,CAAC;YACrC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM;oBAAE,MAAM,YAAY,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5E,SAAS,CAAC,gEAAgE,CAAC,CAAC;AAChF,CAAC"}

package/dist/diagnosticReplayValue.d.ts

@@ -0,0 +1,34 @@
+import { type ReplayFrame } from "./diagnosticReplayFrames.js";
+export interface ReplayValueLimits {
+    readonly maximumDepth: number;
+    readonly maximumNodes: number;
+    /** Maximum UTF-16 code units in one key or string value. */
+    readonly maximumStringUnits: number;
+    /** Maximum UTF-16 code units across every key and string value in this input. */
+    readonly maximumTotalStringUnits: number;
+}
+/**
+ * Reconstruct input only, within explicit host resource bounds. Reconstructed
+ * values still require full SDK validation. Never use this for candidate
+ * result/audit identity channels: those must be compared as text streams.
+ */
+export declare class ReplayValueBuilder {
+    private readonly limits;
+    private readonly stack;
+    private nodes;
+    private assigned;
+    private root;
+    private stringParts;
+    private stringUnits;
+    private totalStringUnits;
+    private stringKind;
+    private sealed;
+    constructor(limits: ReplayValueLimits);
+    private attach;
+    push(frame: ReplayFrame): void;
+    private consume;
+    finish(): unknown;
+}
+/** Live read-only input events. The enclosing genuine run owns its snapshots. */
+export declare function replayValueFrames(value: unknown): Generator<ReplayFrame>;
+//# sourceMappingURL=diagnosticReplayValue.d.ts.map

package/dist/diagnosticReplayValue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticReplayValue.d.ts","sourceRoot":"","sources":["../src/diagnosticReplayValue.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAsCD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,iBAAiB;IAGrC,OAAO,CAAC,MAAM;IAmBd,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAS9B,OAAO,CAAC,OAAO;IA4Ff,MAAM,IAAI,OAAO;CAOlB;AAED,iFAAiF;AACjF,wBAAiB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAsEzE"}

package/dist/diagnosticReplayValue.js

@@ -0,0 +1,269 @@
+import { ComplianceError } from "./errors.js";
+import { REPLAY_TEXT_UNITS } from "./diagnosticReplayFrames.js";
+function invalid(message) {
+    throw new ComplianceError("BAD_DIAGNOSTIC_RUN", message, "$.replayInput");
+}
+function snapshotLimits(limits) {
+    if (limits === null ||
+        typeof limits !== "object" ||
+        (Object.getPrototypeOf(limits) !== Object.prototype && Object.getPrototypeOf(limits) !== null))
+        invalid("Replay value limits must be a plain data object");
+    const fields = [
+        "maximumDepth",
+        "maximumNodes",
+        "maximumStringUnits",
+        "maximumTotalStringUnits",
+    ];
+    const descriptors = Object.getOwnPropertyDescriptors(limits);
+    for (const key of Reflect.ownKeys(descriptors))
+        if (typeof key !== "string" || !fields.some((field) => field === key))
+            invalid("Unknown replay value limit");
+    const owned = Object.create(null);
+    for (const key of fields) {
+        const field = descriptors[key];
+        if (!field || !field.enumerable || !("value" in field))
+            invalid("Replay value limits require own enumerable data properties");
+        const value = field.value;
+        if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
+            invalid("Replay value limits must be positive safe integers");
+        owned[key] = value;
+    }
+    return Object.freeze(owned);
+}
+/**
+ * Reconstruct input only, within explicit host resource bounds. Reconstructed
+ * values still require full SDK validation. Never use this for candidate
+ * result/audit identity channels: those must be compared as text streams.
+ */
+export class ReplayValueBuilder {
+    limits;
+    stack = [];
+    nodes = 0;
+    assigned = false;
+    root;
+    stringParts = null;
+    stringUnits = 0;
+    totalStringUnits = 0;
+    stringKind = null;
+    sealed = false;
+    constructor(limits) {
+        this.limits = snapshotLimits(limits);
+    }
+    attach(value) {
+        if (++this.nodes > this.limits.maximumNodes)
+            invalid("Replay input exceeds its node limit");
+        const parent = this.stack.at(-1);
+        if (!parent) {
+            if (this.assigned)
+                invalid("Multiple roots in replay input");
+            this.root = value;
+            this.assigned = true;
+        }
+        else if (parent.kind === "array")
+            parent.value.push(value);
+        else {
+            if (parent.key === null)
+                invalid("Object value is missing its key");
+            Object.defineProperty(parent.value, parent.key, {
+                value,
+                enumerable: true,
+                writable: true,
+                configurable: true,
+            });
+            parent.key = null;
+        }
+    }
+    push(frame) {
+        if (this.sealed)
+            invalid("Replay input builder is finalized");
+        try {
+            this.consume(frame);
+        }
+        catch (error) {
+            this.sealed = true;
+            throw error;
+        }
+    }
+    consume(frame) {
+        if (!Array.isArray(frame))
+            invalid("Replay value event must be an array");
+        const [event, payload] = frame;
+        const arity = (expected) => {
+            if (frame.length !== expected)
+                invalid("Invalid replay value event arity");
+        };
+        if (this.stringParts !== null) {
+            if (event === "text") {
+                arity(2);
+                if (typeof payload !== "string" ||
+                    payload.length === 0 ||
+                    payload.length > REPLAY_TEXT_UNITS)
+                    invalid("Invalid replay text fragment");
+                if (payload.length > this.limits.maximumStringUnits - this.stringUnits)
+                    invalid("Replay input exceeds its string limit");
+                if (payload.length > this.limits.maximumTotalStringUnits - this.totalStringUnits)
+                    invalid("Replay input exceeds its total string limit");
+                // Check both budgets before retaining this fragment. Key text counts,
+                // and starting another string never resets the whole-input budget.
+                this.stringUnits += payload.length;
+                this.totalStringUnits += payload.length;
+                this.stringParts.push(payload);
+                return;
+            }
+            if (event !== "string-end")
+                invalid("Replay string was not terminated");
+            arity(1);
+            const text = this.stringParts.join("");
+            const kind = this.stringKind;
+            this.stringParts = null;
+            this.stringKind = null;
+            if (kind === "value")
+                this.attach(text);
+            else {
+                const parent = this.stack.at(-1);
+                if (!parent || parent.kind !== "object" || parent.key !== null)
+                    invalid("Unexpected replay object key");
+                if (parent.lastKey !== null && text <= parent.lastKey)
+                    invalid("Replay object keys must be strictly increasing and unique");
+                parent.lastKey = text;
+                parent.key = text;
+            }
+            return;
+        }
+        if (event === "string-start") {
+            arity(2);
+            if (payload !== "key" && payload !== "value")
+                invalid("Invalid replay string role");
+            const parent = this.stack.at(-1);
+            if (payload === "key" && (!parent || parent.kind !== "object" || parent.key !== null))
+                invalid("Unexpected replay object key");
+            this.stringParts = [];
+            this.stringKind = payload;
+            this.stringUnits = 0;
+        }
+        else if (event === "object" || event === "array") {
+            arity(1);
+            if (this.stack.length >= this.limits.maximumDepth)
+                invalid("Replay input exceeds its depth limit");
+            const container = event === "array"
+                ? { kind: "array", value: [] }
+                : { kind: "object", value: Object.create(null), lastKey: null, key: null };
+            this.attach(container.value);
+            this.stack.push(container);
+        }
+        else if (event === "end-object" || event === "end-array") {
+            arity(1);
+            const parent = this.stack.at(-1);
+            if (!parent ||
+                event !== `end-${parent.kind}` ||
+                (parent.kind === "object" && parent.key !== null))
+                invalid("Mismatched or incomplete replay container");
+            this.stack.pop();
+        }
+        else if (event === "scalar") {
+            arity(2);
+            if (payload !== null &&
+                typeof payload !== "boolean" &&
+                !(typeof payload === "number" && Number.isFinite(payload)))
+                invalid("Invalid replay scalar");
+            this.attach(payload);
+        }
+        else if (event === "special-number") {
+            arity(2);
+            // Preserve raw non-finite observations for SDK audit/blocking, not null.
+            if (payload === "NaN")
+                this.attach(NaN);
+            else if (payload === "+Infinity")
+                this.attach(Infinity);
+            else if (payload === "-Infinity")
+                this.attach(-Infinity);
+            else if (payload === "-0")
+                this.attach(-0);
+            else
+                invalid("Invalid special replay number");
+        }
+        else
+            invalid("Unknown replay value event");
+    }
+    finish() {
+        if (this.sealed)
+            invalid("Replay input builder is finalized");
+        this.sealed = true;
+        if (!this.assigned || this.stack.length || this.stringParts !== null)
+            invalid("Incomplete replay input value");
+        return this.root;
+    }
+}
+/** Live read-only input events. The enclosing genuine run owns its snapshots. */
+export function* replayValueFrames(value) {
+    const active = new Set();
+    function* string(text, role) {
+        yield ["string-start", role];
+        for (let index = 0; index < text.length; index += REPLAY_TEXT_UNITS)
+            yield ["text", text.slice(index, index + REPLAY_TEXT_UNITS)];
+        yield ["string-end"];
+    }
+    function* visit(value) {
+        if (typeof value === "string") {
+            yield* string(value, "value");
+            return;
+        }
+        if (typeof value === "number" && (!Number.isFinite(value) || Object.is(value, -0))) {
+            yield [
+                "special-number",
+                Number.isNaN(value)
+                    ? "NaN"
+                    : value === Infinity
+                        ? "+Infinity"
+                        : value === -Infinity
+                            ? "-Infinity"
+                            : "-0",
+            ];
+            return;
+        }
+        if (value === null || typeof value === "number" || typeof value === "boolean") {
+            yield ["scalar", value];
+            return;
+        }
+        if (typeof value !== "object")
+            invalid("Unsupported replay input value");
+        const array = Array.isArray(value);
+        const prototype = Object.getPrototypeOf(value);
+        if (array ? prototype !== Array.prototype : prototype !== null && prototype !== Object.prototype)
+            invalid("Replay input must contain plain data");
+        if (active.has(value))
+            invalid("Replay input contains a cycle");
+        active.add(value);
+        try {
+            yield [array ? "array" : "object"];
+            if (array) {
+                for (const key of Reflect.ownKeys(value))
+                    if (key !== "length" &&
+                        (typeof key !== "string" ||
+                            !/^(0|[1-9][0-9]*)$/.test(key) ||
+                            Number(key) >= value.length))
+                        invalid("Replay input arrays must contain indexed data only");
+                for (let index = 0; index < value.length; index++) {
+                    const field = Object.getOwnPropertyDescriptor(value, String(index));
+                    if (!field || !("value" in field))
+                        invalid("Replay input arrays must contain indexed data");
+                    yield* visit(field.value);
+                }
+            }
+            else
+                for (const key of Object.keys(value).sort()) {
+                    const field = Object.getOwnPropertyDescriptor(value, key);
+                    if (!field || !("value" in field))
+                        invalid("Replay input objects must contain data properties");
+                    yield* string(key, "key");
+                    yield* visit(field.value);
+                }
+            yield [array ? "end-array" : "end-object"];
+        }
+        finally {
+            active.delete(value);
+        }
+    }
+    yield* visit(value);
+}
+//# sourceMappingURL=diagnosticReplayValue.js.map