@actuarial-ts/core 0.6.1 → 0.7.0

package/README.md

@@ -7,7 +7,7 @@ The package is designed to support the actuary's compliance with the ASOPs; it d
 ## Install
 
 ```bash
-npm install @actuarial-ts/core@0.6.1
+npm install @actuarial-ts/core@0.7.0
 ```
 
 ESM, TypeScript-first, zero runtime dependencies, Node 20+.
@@ -77,9 +77,18 @@ The six built-in formulas are basis-independent. The factory creates ten count i
 
 All metrics are ratio-of-sums: measures are aggregated at source-group/origin/valuation, groups are mapped and merged, then division happens once. Measure-local `missing: "unknown" | "zero"` is explicit. Exposure timing is either `origin-static` or `valuation-specific`. Calendar and ordered axes derive normalized origins, valuations, development ages, and units; input rows cannot assert a trusted age.
 
+Exposure reconciliation accepts at most 250,000 observations per call. Collection
+capacity is independent of optional source-file/sheet/cell metadata: each record
+retains the JSON depth (256 including the outer array) and one-million-node
+resource guards, while the owned result is frozen by observation/cohort rather
+than rechecked against a single collection-wide JSON node budget. Malformed
+arrays, accessors, non-JSON metadata, and cycles still produce typed validation
+errors. Nonfinite exposure values remain supported audited inputs, not usable
+numeric exposure values. This is a bounded capacity, not an unlimited scale claim.
+
 Compilation validates the whole graph atomically: IDs, sources, role types, compatibility groups, development semantics, derivation acyclicity, expression limits, rule operands, basis/population references, and period coordinates. Authentic compiled/prepared objects are owner-branded and frozen. Formula, calculation, definition, preparation, and result identities are deterministic FNV-1a/JCS integrity aids—not cryptographic signatures.
 
-See the generated [formula and instance catalog](https://github.com/yerromnitsuj/actng/blob/v0.6.1/docs/reference/diagnostic-formulas.md) and [0.6 migration guide](https://github.com/yerromnitsuj/actng/blob/v0.6.1/docs/migrations/0.6-generalized-diagnostics.md).
+See the generated [formula and instance catalog](https://github.com/yerromnitsuj/actng/blob/v0.7.0/docs/reference/diagnostic-formulas.md) and [0.6 migration guide](https://github.com/yerromnitsuj/actng/blob/v0.7.0/docs/migrations/0.6-generalized-diagnostics.md).
 
 ## Main method families
 

package/dist/canonical.d.ts

@@ -16,4 +16,15 @@ export declare function canonicalJson(value: unknown): string;
  * needing tamper evidence must sign or cryptographically hash the payload.
  */
 export declare function fnv1a64(text: string): string;
+/**
+ * The exact integrity tag `fnv1a64(canonicalJson(value))`, without constructing
+ * the complete canonical string or UTF-8 byte array. Validation, key ordering,
+ * escaping and unsupported-value error paths match `canonicalJson`.
+ *
+ * Text and byte buffers are bounded, including for a single large string/key;
+ * object-key sorting, ancestor tracking and paths still scale with input shape.
+ * The caller's input remains in memory. This is not a constant-memory dataset
+ * pipeline, a collision-resistant hash, or a substitute for exact equality.
+ */
+export declare function canonicalFnv1a64(value: unknown): string;
 //# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAyFA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ5C"}
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AA8GA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAsBpD;AAiCD;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA0CvD"}

package/dist/canonical.js

@@ -1,4 +1,5 @@
 import { ReservingError } from "./types.js";
+import { createFnvAccumulator } from "./fnvAccumulator.js";
 /**
  * Canonical JSON serialization and the FNV-1a integrity hash — the SDK's
  * single equality oracle, relocated here from @actuarial-ts/compliance so
@@ -32,19 +33,25 @@ function isPlainObject(value) {
     const proto = Object.getPrototypeOf(value);
     return proto === Object.prototype || proto === null;
 }
-function canonicalize(value, path, seen) {
-    if (value === null)
-        return "null";
+/** One traversal owns validation and property access order for both outputs. */
+function canonicalize(value, path, seen, sink) {
+    if (value === null) {
+        sink.write("null");
+        return;
+    }
     switch (typeof value) {
         case "string":
-            return JSON.stringify(value);
+            sink.quote(value);
+            return;
         case "boolean":
-            return value ? "true" : "false";
+            sink.write(value ? "true" : "false");
+            return;
         case "number": {
             if (!Number.isFinite(value)) {
                 throw new ReservingError("UNSUPPORTED_VALUE", `non-finite number (${String(value)}) at ${path}`);
             }
-            return Object.is(value, -0) ? "0" : String(value);
+            sink.write(Object.is(value, -0) ? "0" : String(value));
+            return;
         }
         case "undefined":
             throw new ReservingError("UNSUPPORTED_VALUE", `undefined at ${path}`);
@@ -61,28 +68,33 @@ function canonicalize(value, path, seen) {
         throw new ReservingError("UNSUPPORTED_VALUE", `circular reference at ${path}`);
     }
     seen.add(obj);
-    let out;
     if (Array.isArray(obj)) {
-        const parts = [];
+        sink.startContainer("[");
         for (let i = 0; i < obj.length; i++) {
-            parts.push(canonicalize(obj[i], `${path}[${i}]`, seen));
+            if (i > 0)
+                sink.write(",");
+            canonicalize(obj[i], `${path}[${i}]`, seen, sink);
         }
-        out = `[${parts.join(",")}]`;
+        sink.endContainer("]");
     }
     else if (isPlainObject(obj)) {
         const keys = Object.keys(obj).sort();
-        const parts = [];
-        for (const key of keys) {
-            parts.push(`${JSON.stringify(key)}:${canonicalize(obj[key], `${path}.${key}`, seen)}`);
+        sink.startContainer("{");
+        for (let i = 0; i < keys.length; i++) {
+            if (i > 0)
+                sink.write(",");
+            const key = keys[i];
+            sink.quote(key);
+            sink.write(":");
+            canonicalize(obj[key], `${path}.${key}`, seen, sink);
         }
-        out = `{${parts.join(",")}}`;
+        sink.endContainer("}");
     }
     else {
         const name = obj.constructor?.name ?? "unknown";
         throw new ReservingError("UNSUPPORTED_VALUE", `non-plain object (${name}) at ${path}; only plain objects, arrays, and JSON primitives are canonicalizable`);
     }
     seen.delete(obj);
-    return out;
 }
 /**
  * Deterministic JSON serialization: sorted object keys (recursively), arrays
@@ -92,11 +104,57 @@ function canonicalize(value, path, seen) {
  * "$.rows[2].ultimate" — for any value JSON cannot faithfully represent.
  */
 export function canonicalJson(value) {
-    return canonicalize(value, "$", new Set());
+    // Join finished subtrees as before, rather than retaining a flat token array
+    // for the entire input graph alongside the final serialized string.
+    const frames = [[]];
+    const write = (text) => {
+        frames[frames.length - 1].push(text);
+    };
+    canonicalize(value, "$", new Set(), {
+        write,
+        quote(text) {
+            write(JSON.stringify(text));
+        },
+        startContainer(token) {
+            frames.push([token]);
+        },
+        endContainer(token) {
+            const parts = frames.pop();
+            parts.push(token);
+            write(parts.join(""));
+        },
+    });
+    return frames[0].join("");
+}
+const UTF8_CHUNK_CODE_UNITS = 16_384;
+const QUOTED_CHUNK_CODE_UNITS = 4_096;
+/** A valid surrogate pair must reach native escaping/encoding together. */
+function chunkEnd(text, start, limit) {
+    let end = Math.min(start + limit, text.length);
+    const before = text.charCodeAt(end - 1);
+    const after = text.charCodeAt(end);
+    if (before >= 0xd800 && before <= 0xdbff && after >= 0xdc00 && after <= 0xdfff)
+        end -= 1;
+    return end;
+}
+/** Reuse at most 48 KiB for long strings instead of duplicating all UTF-8 bytes. */
+function* utf8Chunks(text) {
+    const encoder = new TextEncoder();
+    // Retain TextEncoder's runtime coercion for untyped JavaScript callers.
+    if (typeof text !== "string" || text.length <= UTF8_CHUNK_CODE_UNITS) {
+        yield encoder.encode(text);
+        return;
+    }
+    // A UTF-16 code unit needs at most three UTF-8 bytes (a surrogate pair
+    // needs four bytes for two code units), so encodeInto always consumes a chunk.
+    const buffer = new Uint8Array(UTF8_CHUNK_CODE_UNITS * 3);
+    for (let start = 0; start < text.length;) {
+        const end = chunkEnd(text, start, UTF8_CHUNK_CODE_UNITS);
+        const { written } = encoder.encodeInto(text.slice(start, end), buffer);
+        yield buffer.subarray(0, written);
+        start = end;
+    }
 }
-const FNV_OFFSET_BASIS = 0xcbf29ce484222325n;
-const FNV_PRIME = 0x100000001b3n;
-const MASK_64 = 0xffffffffffffffffn;
 /**
  * FNV-1a 64-bit hash over the UTF-8 bytes of `text`, returned as a 16-hex-char
  * string.
@@ -107,12 +165,64 @@ const MASK_64 = 0xffffffffffffffffn;
  * needing tamper evidence must sign or cryptographically hash the payload.
  */
 export function fnv1a64(text) {
-    const bytes = new TextEncoder().encode(text);
-    let hash = FNV_OFFSET_BASIS;
-    for (const byte of bytes) {
-        hash ^= BigInt(byte);
-        hash = (hash * FNV_PRIME) & MASK_64;
-    }
-    return hash.toString(16).padStart(16, "0");
+    const hash = createFnvAccumulator();
+    for (const bytes of utf8Chunks(text))
+        hash.update(bytes);
+    return hash.digest();
+}
+/**
+ * The exact integrity tag `fnv1a64(canonicalJson(value))`, without constructing
+ * the complete canonical string or UTF-8 byte array. Validation, key ordering,
+ * escaping and unsupported-value error paths match `canonicalJson`.
+ *
+ * Text and byte buffers are bounded, including for a single large string/key;
+ * object-key sorting, ancestor tracking and paths still scale with input shape.
+ * The caller's input remains in memory. This is not a constant-memory dataset
+ * pipeline, a collision-resistant hash, or a substitute for exact equality.
+ */
+export function canonicalFnv1a64(value) {
+    const hash = createFnvAccumulator();
+    const encoder = new TextEncoder();
+    const bytes = new Uint8Array(UTF8_CHUNK_CODE_UNITS * 3);
+    let buffered = "";
+    const flush = () => {
+        if (!buffered.length)
+            return;
+        // Three bytes per UTF-16 code unit always fit; pairs need only four for two.
+        const { written } = encoder.encodeInto(buffered, bytes);
+        hash.update(bytes.subarray(0, written));
+        buffered = "";
+    };
+    const write = (text) => {
+        for (let start = 0; start < text.length;) {
+            const end = chunkEnd(text, start, UTF8_CHUNK_CODE_UNITS - buffered.length);
+            if (end === start) {
+                flush();
+                continue;
+            }
+            buffered += text.slice(start, end);
+            start = end;
+            if (buffered.length >= UTF8_CHUNK_CODE_UNITS - 1)
+                flush();
+        }
+    };
+    canonicalize(value, "$", new Set(), {
+        write,
+        startContainer: write,
+        endContainer: write,
+        quote(text) {
+            write('"');
+            for (let start = 0; start < text.length;) {
+                const end = chunkEnd(text, start, QUOTED_CHUNK_CODE_UNITS);
+                // Bounded native escaping retains minimal JSON escape spelling and lone
+                // surrogate escapes without allocating one full escaped string atom.
+                write(JSON.stringify(text.slice(start, end)).slice(1, -1));
+                start = end;
+            }
+            write('"');
+        },
+    });
+    flush();
+    return hash.digest();
 }
 //# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,IAAiB;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,WAAW;YACd,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,UAAU;YACb,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,QAAQ;YACX,MAAM;IACV,CAAC;IACD,MAAM,GAAG,GAAG,KAAe,CAAC;IAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,CAAC;SAAM,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAI,GAAG,CAAC,WAA6C,EAAE,IAAI,IAAI,SAAS,CAAC;QACnF,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,qBAAqB,IAAI,QAAQ,IAAI,uEAAuE,CAC7G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,gBAAgB,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AASD,gFAAgF;AAChF,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,IAAiB,EAAE,IAAmB;IACxF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO;QACT,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,sBAAsB,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAClD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,KAAK,WAAW;YACd,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,UAAU;YACb,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,QAAQ;YACX,MAAM;IACV,CAAC;IACD,MAAM,GAAG,GAAG,KAAe,CAAC;IAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAI,GAAG,CAAC,WAA6C,EAAE,IAAI,IAAI,SAAS,CAAC;QACnF,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,qBAAqB,IAAI,QAAQ,IAAI,uEAAuE,CAC7G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,MAAM,GAAe,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE;QAClC,KAAK;QACL,KAAK,CAAC,IAAI;YACR,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,cAAc,CAAC,KAAK;YAClB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,YAAY,CAAC,KAAK;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAG,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IAC1D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,wEAAwE;IACxE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,uEAAuE;IACvE,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;IACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,GAAG,GAAG,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAC7B,6EAA6E;QAC7E,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;YAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3E,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,KAAK,EAAE,CAAC;gBACR,SAAS;YACX,CAAC;YACD,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACnC,KAAK,GAAG,GAAG,CAAC;YACZ,IAAI,QAAQ,CAAC,MAAM,IAAI,qBAAqB,GAAG,CAAC;gBAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE;QAClC,KAAK;QACL,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,KAAK;QACnB,KAAK,CAAC,IAAI;YACR,KAAK,CAAC,GAAG,CAAC,CAAC;YACX,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,GAAI,CAAC;gBAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;gBAC3D,wEAAwE;gBACxE,qEAAqE;gBACrE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,KAAK,GAAG,GAAG,CAAC;YACd,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;KACF,CAAC,CAAC;IACH,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;AACvB,CAAC"}

package/dist/diagnosticEvidenceIntern.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Private, invocation-scoped sharing of small, newly owned evidence nodes.
+ * This is not a validation boundary: callers must finish normalizing/cloning
+ * every child first, and must never submit caller-owned objects or SDK brands.
+ */
+export interface DiagnosticEvidenceInternOptions {
+    readonly maxEntries?: number;
+    readonly maxSignatureCharacters?: number;
+    readonly maxCandidateProperties?: number;
+}
+type EvidenceMode = "plain" | "source" | "free";
+export declare function createDiagnosticEvidenceInterner(options?: DiagnosticEvidenceInternOptions): {
+    internOwned<T extends object>(candidate: T, mode: EvidenceMode): T;
+};
+export {};
+//# sourceMappingURL=diagnosticEvidenceIntern.d.ts.map

package/dist/diagnosticEvidenceIntern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticEvidenceIntern.d.ts","sourceRoot":"","sources":["../src/diagnosticEvidenceIntern.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED,KAAK,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AA8BhD,wBAAgB,gCAAgC,CAC9C,OAAO,GAAE,+BAAoC,GAC5C;IACD,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,GAAG,CAAC,CAAC;CACpE,CAyGA"}

package/dist/diagnosticEvidenceIntern.js

@@ -0,0 +1,139 @@
+const DEFAULT_MAX_ENTRIES = 100_000;
+const DEFAULT_MAX_SIGNATURE_CHARACTERS = 16 * 1024 * 1024;
+// Wide result envelopes are usually unique; focus the budget on their small
+// repeated coordinates, sources, scopes, states, and short child lists.
+const DEFAULT_MAX_CANDIDATE_PROPERTIES = 10;
+const MAX_CANDIDATE_STRING_CHARACTERS = 4096;
+function sameOwnedNode(left, right) {
+    if (Object.getPrototypeOf(left) !== Object.getPrototypeOf(right))
+        return false;
+    const leftKeys = Reflect.ownKeys(left);
+    const rightKeys = Reflect.ownKeys(right);
+    if (leftKeys.length !== rightKeys.length)
+        return false;
+    return leftKeys.every((key, index) => {
+        if (key !== rightKeys[index])
+            return false;
+        const a = Object.getOwnPropertyDescriptor(left, key);
+        const b = Object.getOwnPropertyDescriptor(right, key);
+        return ("value" in a &&
+            "value" in b &&
+            a.enumerable === b.enumerable &&
+            a.configurable === b.configurable &&
+            a.writable === b.writable &&
+            Object.is(a.value, b.value));
+    });
+}
+export function createDiagnosticEvidenceInterner(options = {}) {
+    const maxEntries = options.maxEntries ?? DEFAULT_MAX_ENTRIES;
+    const maxSignatureCharacters = options.maxSignatureCharacters ?? DEFAULT_MAX_SIGNATURE_CHARACTERS;
+    const maxCandidateProperties = options.maxCandidateProperties ?? DEFAULT_MAX_CANDIDATE_PROPERTIES;
+    const pool = new Map();
+    const childIds = new WeakMap();
+    let nextChildId = 1;
+    let signatureCharacters = 0;
+    return {
+        internOwned(candidate, mode) {
+            if (!Object.isFrozen(candidate))
+                return candidate;
+            const prototype = Object.getPrototypeOf(candidate);
+            const array = Array.isArray(candidate);
+            if (array
+                ? prototype !== Array.prototype
+                : prototype !== null && prototype !== Object.prototype)
+                return candidate;
+            if (array && candidate.length >= maxCandidateProperties)
+                return candidate;
+            const keys = Reflect.ownKeys(candidate);
+            if (keys.length > maxCandidateProperties)
+                return candidate;
+            const signatureParts = [
+                mode,
+                array ? "array" : prototype === null ? "null" : "object",
+            ];
+            // A declined candidate must not grow persistent bookkeeping. Stage at
+            // most this small candidate's children, including repeated references,
+            // and commit their IDs only if the candidate enters the bounded pool.
+            let pendingChildIds;
+            let stringCharacters = 0;
+            for (const key of keys) {
+                // Diagnostic JSON does not contain symbols. Declining unexpected
+                // shapes is harmless and never invokes an accessor or caller method.
+                if (typeof key !== "string")
+                    return candidate;
+                const descriptor = Object.getOwnPropertyDescriptor(candidate, key);
+                if (!("value" in descriptor))
+                    return candidate;
+                const value = descriptor.value;
+                let tokenType;
+                let tokenValue;
+                if (value === null) {
+                    tokenType = "null";
+                    tokenValue = null;
+                }
+                else if (typeof value === "object") {
+                    if (!Object.isFrozen(value))
+                        return candidate;
+                    tokenType = "object";
+                    const existingId = childIds.get(value);
+                    if (existingId !== undefined)
+                        tokenValue = existingId;
+                    else {
+                        pendingChildIds ??= new Map();
+                        let pendingId = pendingChildIds.get(value);
+                        if (pendingId === undefined) {
+                            pendingId = nextChildId + pendingChildIds.size;
+                            pendingChildIds.set(value, pendingId);
+                        }
+                        tokenValue = pendingId;
+                    }
+                }
+                else if (typeof value === "number") {
+                    if (!Number.isFinite(value))
+                        return candidate;
+                    tokenType = "number";
+                    tokenValue = Object.is(value, -0) ? "-0" : value;
+                }
+                else if (typeof value === "string" ||
+                    typeof value === "boolean" ||
+                    value === undefined) {
+                    tokenType = typeof value;
+                    tokenValue = value;
+                    if (typeof value === "string")
+                        stringCharacters += value.length;
+                }
+                else
+                    return candidate;
+                stringCharacters += key.length;
+                if (stringCharacters > MAX_CANDIDATE_STRING_CHARACTERS)
+                    return candidate;
+                // Frozen data properties are necessarily non-configurable and
+                // non-writable. Keep the varying enumerability bit (including array
+                // length) and a fixed four-slot typed tuple, without temporary nested
+                // arrays. The independent equality check still verifies every flag.
+                signatureParts.push(key, descriptor.enumerable, tokenType, tokenValue);
+            }
+            const signature = JSON.stringify(signatureParts);
+            // An unseen child cannot occur in an existing entry: every admitted
+            // entry committed all its child IDs. No equality hit is skipped here.
+            const existing = pendingChildIds ? undefined : pool.get(signature);
+            // Signatures encode exact children and descriptor/order information;
+            // independently check equality before sharing rather than treating a
+            // fingerprint as proof of equality.
+            if (existing !== undefined && sameOwnedNode(existing, candidate))
+                return existing;
+            if (pool.size < maxEntries &&
+                signatureCharacters + signature.length <= maxSignatureCharacters) {
+                if (pendingChildIds) {
+                    for (const [child, id] of pendingChildIds)
+                        childIds.set(child, id);
+                    nextChildId += pendingChildIds.size;
+                }
+                pool.set(signature, candidate);
+                signatureCharacters += signature.length;
+            }
+            return candidate;
+        },
+    };
+}
+//# sourceMappingURL=diagnosticEvidenceIntern.js.map

package/dist/diagnosticEvidenceIntern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticEvidenceIntern.js","sourceRoot":"","sources":["../src/diagnosticEvidenceIntern.ts"],"names":[],"mappings":"AAaA,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,gCAAgC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,4EAA4E;AAC5E,wEAAwE;AACxE,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAC5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACnC,IAAI,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAE,CAAC;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;QACvD,OAAO,CACL,OAAO,IAAI,CAAC;YACZ,OAAO,IAAI,CAAC;YACZ,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAC7B,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;YACjC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YACzB,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,UAA2C,EAAE;IAI7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,IAAI,gCAAgC,CAAC;IACrE,MAAM,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,IAAI,gCAAgC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAkB,CAAC;IAC/C,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAE5B,OAAO;QACL,WAAW,CAAmB,SAAY,EAAE,IAAkB;YAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,IACE,KAAK;gBACH,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBAC/B,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS;gBAExD,OAAO,SAAS,CAAC;YACnB,IAAI,KAAK,IAAI,SAAS,CAAC,MAAM,IAAI,sBAAsB;gBAAE,OAAO,SAAS,CAAC;YAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,GAAG,sBAAsB;gBAAE,OAAO,SAAS,CAAC;YAC3D,MAAM,cAAc,GAAc;gBAChC,IAAI;gBACJ,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;aACzD,CAAC;YACF,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,eAAgD,CAAC;YACrD,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,iEAAiE;gBACjE,qEAAqE;gBACrE,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAE,CAAC;gBACpE,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAC/C,MAAM,KAAK,GAAY,UAAU,CAAC,KAAK,CAAC;gBACxC,IAAI,SAAiB,CAAC;gBACtB,IAAI,UAAmB,CAAC;gBACxB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,SAAS,GAAG,MAAM,CAAC;oBACnB,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAC9C,SAAS,GAAG,QAAQ,CAAC;oBACrB,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvC,IAAI,UAAU,KAAK,SAAS;wBAAE,UAAU,GAAG,UAAU,CAAC;yBACjD,CAAC;wBACJ,eAAe,KAAK,IAAI,GAAG,EAAE,CAAC;wBAC9B,IAAI,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;wBAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;4BAC5B,SAAS,GAAG,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC;4BAC/C,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;wBACxC,CAAC;wBACD,UAAU,GAAG,SAAS,CAAC;oBACzB,CAAC;gBACH,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAC9C,SAAS,GAAG,QAAQ,CAAC;oBACrB,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnD,CAAC;qBAAM,IACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,OAAO,KAAK,KAAK,SAAS;oBAC1B,KAAK,KAAK,SAAS,EACnB,CAAC;oBACD,SAAS,GAAG,OAAO,KAAK,CAAC;oBACzB,UAAU,GAAG,KAAK,CAAC;oBACnB,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC;gBAClE,CAAC;;oBAAM,OAAO,SAAS,CAAC;gBACxB,gBAAgB,IAAI,GAAG,CAAC,MAAM,CAAC;gBAC/B,IAAI,gBAAgB,GAAG,+BAA+B;oBACpD,OAAO,SAAS,CAAC;gBACnB,8DAA8D;gBAC9D,oEAAoE;gBACpE,sEAAsE;gBACtE,oEAAoE;gBACpE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACjD,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,oCAAoC;YACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAC9D,OAAO,QAAa,CAAC;YACvB,IACE,IAAI,CAAC,IAAI,GAAG,UAAU;gBACtB,mBAAmB,GAAG,SAAS,CAAC,MAAM,IAAI,sBAAsB,EAChE,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,eAAe;wBAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACnE,WAAW,IAAI,eAAe,CAAC,IAAI,CAAC;gBACtC,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/B,mBAAmB,IAAI,SAAS,CAAC,MAAM,CAAC;YAC1C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/diagnosticExposure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnosticExposure.d.ts","sourceRoot":"","sources":["../src/diagnosticExposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AAmBpC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CAC5C;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACpD;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,KAAK,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;CAC3E,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CAC5C;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACvD,GACD;IACE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CACxB,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,CACnE,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACtE,CAAC;AAEN,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,6BAA6B,CAyB/B;AA0OD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,SAAS,6BAA6B,EAAE,EACtD,eAAe,EAAE,QAAQ,CACvB,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,oBAAoB,CAAC,CACvD,EACD,UAAU,CAAC,EAAE,oBAAoB,GAChC,SAAS,4BAA4B,EAAE,CA4IzC"}
+{"version":3,"file":"diagnosticExposure.d.ts","sourceRoot":"","sources":["../src/diagnosticExposure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AA8HpC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CAC5C;AAED,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACpD;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,KAAK,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;CAC3E,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CAC5C;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACvD,GACD;IACE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CACxB,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,CACnE,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACtE,CAAC;AAEN,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,6BAA6B,CAyB/B;AA0OD,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,SAAS,6BAA6B,EAAE,EACtD,eAAe,EAAE,QAAQ,CACvB,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,oBAAoB,CAAC,CACvD,EACD,UAAU,CAAC,EAAE,oBAAoB,GAChC,SAAS,4BAA4B,EAAE,CA8IzC"}

package/dist/diagnosticExposure.js

@@ -5,7 +5,97 @@ import { compareDiagnosticIdentityValues } from "./diagnosticOrdering.js";
 import { normalizeDiagnosticPeriodWithAxis } from "./diagnosticPeriodAxis.js";
 import { validateDiagnosticPeriodAxisInput } from "./diagnosticDefinitions.js";
 import { DiagnosticValidationError, } from "./types.js";
-import { diagnosticJsonPreflight, hasDiagnosticOwn, isDiagnosticPlainRecord, isDiagnosticToken, snapshotDiagnosticJson, } from "./diagnosticRuntime.js";
+import { diagnosticJsonPreflight, diagnosticRecord, hasDiagnosticOwn, isDiagnosticPlainRecord, isDiagnosticToken, snapshotDiagnosticJson, MAX_DIAGNOSTIC_JSON_DEPTH, } from "./diagnosticRuntime.js";
+// Bound the collection separately from each untrusted record. The generic
+// million-node JSON cap otherwise rejects legitimate files at ~71k–100k rows,
+// depending only on how much source provenance each observation carries.
+const MAX_EXPOSURE_OBSERVATIONS = 250_000;
+// JSON enumeration skips hidden properties, but the strict exposure schema
+// reads recognized own fields. Refuse hidden accessors before those reads.
+function hiddenExposureAccessorIssues(value, path) {
+    if (!isDiagnosticPlainRecord(value))
+        return [];
+    const issues = [];
+    for (const key of Object.getOwnPropertyNames(value)) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor.enumerable && !("value" in descriptor))
+            issues.push({
+                domain: "input",
+                code: "invalid-json-value",
+                path: propertyPath(path, key),
+                message: "JSON objects may contain only data properties",
+            });
+    }
+    return issues;
+}
+function exposureCollectionPreflight(value) {
+    if (!Array.isArray(value))
+        return diagnosticJsonPreflight(value, "input");
+    if (Object.getPrototypeOf(value) !== Array.prototype)
+        return [
+            {
+                domain: "input",
+                code: "invalid-json-value",
+                path: "$",
+                message: "Value must use a plain object or array prototype",
+            },
+        ];
+    if (value.length > MAX_EXPOSURE_OBSERVATIONS)
+        return [
+            {
+                domain: "input",
+                code: "expression-limit",
+                path: "$",
+                message: `Exposure observation count exceeds ${MAX_EXPOSURE_OBSERVATIONS}`,
+            },
+        ];
+    const issues = [];
+    for (const key of Reflect.ownKeys(value)) {
+        if (key === "length")
+            continue;
+        const index = typeof key === "string" ? Number(key) : Number.NaN;
+        if (Number.isInteger(index) &&
+            index >= 0 &&
+            index < value.length &&
+            String(index) === key)
+            continue;
+        issues.push({
+            domain: "input",
+            code: "invalid-json-value",
+            path: typeof key === "symbol" ? "$" : propertyPath("$", key),
+            message: "JSON arrays may contain only indexed data properties",
+        });
+    }
+    for (let index = 0; index < value.length; index++) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!descriptor || !("value" in descriptor)) {
+            issues.push({
+                domain: "input",
+                code: "invalid-json-value",
+                path: `$[${index}]`,
+                message: "JSON arrays may contain only indexed data properties",
+            });
+            continue;
+        }
+        issues.push(...hiddenExposureAccessorIssues(descriptor.value, `$[${index}]`));
+        if (isDiagnosticPlainRecord(descriptor.value)) {
+            const source = Object.getOwnPropertyDescriptor(descriptor.value, "source");
+            if (source && "value" in source)
+                issues.push(...hiddenExposureAccessorIssues(source.value, `$[${index}].source`));
+        }
+        // The outer collection used to occupy depth 1: keep the exact depth
+        // contract, and retain the default million-node guard for each record.
+        for (const issue of diagnosticJsonPreflight(descriptor.value, "input", {
+            maxDepth: MAX_DIAGNOSTIC_JSON_DEPTH - 1,
+        }))
+            issues.push({ ...issue, path: `$[${index}]${issue.path.slice(1)}` });
+    }
+    return issues;
+}
+/** Only for new SDK-owned objects whose leaves have already been validated. */
+function freezeExposureRecord(value) {
+    return Object.freeze(Object.assign(diagnosticRecord(), value));
+}
 export function auditDiagnosticNumber(value) {
     if (value !== null && typeof value !== "number")
         throw new DiagnosticValidationError([
@@ -42,7 +132,7 @@ function validateExposureArguments(observations, timingByMeasure, periodAxis) {
     // Nonfinite exposure amounts are supported audited inputs. They are the
     // only non-JSON numbers permitted here; metadata still must be finite.
     const issues = [
-        ...diagnosticJsonPreflight(observations, "input")
+        ...exposureCollectionPreflight(observations)
             .filter((issue) => !(issue.code === "invalid-json-value" &&
             issue.message === "JSON numeric value must be finite" &&
             /^\$\[\d+\]\.value$/.test(issue.path)))
@@ -197,14 +287,14 @@ export function reconcileDiagnosticExposures(observations, timingByMeasure, peri
         cohort.push(observation);
         cohorts.set(identity, cohort);
     }
-    return snapshotDiagnosticJson([...cohorts.values()]
+    return Object.freeze([...cohorts.values()]
         .map((cohort) => {
         const first = cohort[0];
         const timing = hasDiagnosticOwn(timingByMeasure, first.measureId)
             ? timingByMeasure[first.measureId]
             : undefined;
         const audited = cohort
-            .map((item) => ({
+            .map((item) => snapshotDiagnosticJson({
             sourceGroup: item.sourceGroup,
             origin: item.origin,
             ...(item.valuation === undefined
@@ -230,7 +320,7 @@ export function reconcileDiagnosticExposures(observations, timingByMeasure, peri
             issues.push("conflict");
         const validStaticCopies = timing === "origin-static" && issues.length === 0;
         if (issues.length > 0)
-            return Object.freeze({
+            return freezeExposureRecord({
                 measureId: first.measureId,
                 key: first.key,
                 status: "invalid",
@@ -241,8 +331,8 @@ export function reconcileDiagnosticExposures(observations, timingByMeasure, peri
         const value = audited[0].value;
         if (value.status !== "observed")
             throw new Error("unreachable invalid exposure state");
-        const sources = normalizeDiagnosticSourceLocations(audited.map((item) => item.source));
-        return Object.freeze({
+        const sources = normalizeDiagnosticSourceLocations(audited.map((item) => item.source)).map((source) => snapshotDiagnosticJson(source));
+        return freezeExposureRecord({
             measureId: first.measureId,
             key: first.key,
             status: "valid",