@altopelago/aeos-core 0.9.1 → 0.9.2

package/dist/types/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,aAAa;CAAG;AAEhE,MAAM,WAAW,aAAa;IAC1B,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAE5B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAE3C,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAE5B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAElC,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,mCAAmC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAEnD,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAEpD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IAEzD,4EAA4E;IAC5E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAE3C,kFAAkF;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAE1C,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAEpC,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAEtC,gDAAgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAEvE,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACrB,qBAAqB;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IAEtC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAEnC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE/C,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC;IAEvD,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CACrE;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CA8BpD,CAAC;AAEH;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAOtF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,aAAa;CAAG;AAEhE,MAAM,WAAW,aAAa;IAC1B,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAE5B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAE3C,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAE5B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAElC,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAE7B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,mCAAmC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAEnD,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAEpD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IAEzD,oFAAoF;IACpF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAE3C,kFAAkF;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAE1C,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAEpC,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAEtC,gDAAgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,8EAA8E;IAC9E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAE3C,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAEvE,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACrB,qBAAqB;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IAEtC,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAEnC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE/C,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,GAAG,QAAQ,CAAC;IAEvD,sEAAsE;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAElE,8DAA8D;IAC9D,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC;CAC/C;AAED,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;CACpD;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CA+BpD,CAAC;AAEH;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAOtF"}

package/dist/types/schema.js

@@ -28,6 +28,7 @@ export const KNOWN_CONSTRAINT_KEYS = new Set([
     'min_digits',
     'max_digits',
     'radix',
+    'allow_unspecified_radix',
     'min_value',
     'max_value',
     'min_length',

package/dist/types/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkIH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,0BAA0B;IAC1B,wBAAwB;IACxB,SAAS;IACT,cAAc;IACd,cAAc;IACd,cAAc;IACd,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,OAAO;IACP,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,UAAU;IACV,YAAY;IACZ,mBAAmB;CACtB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAoC;IACzE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoJH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,0BAA0B;IAC1B,wBAAwB;IACxB,SAAS;IACT,cAAc;IACd,cAAc;IACd,cAAc;IACd,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,OAAO;IACP,yBAAyB;IACzB,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,UAAU;IACV,YAAY;IACZ,mBAAmB;CACtB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAoC;IACzE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/validate.d.ts

@@ -6,6 +6,7 @@
 import type { AES } from './types/aes.js';
 import type { SchemaV1 } from './types/schema.js';
 import type { ResultEnvelope } from './types/envelope.js';
+import type { ResourcePolicyV1 } from './types/schema.js';
 /**
  * Validation options
  */
@@ -21,6 +22,8 @@ export interface ValidateOptions {
      * - error: emit error
      */
     readonly trailingSeparatorDelimiterPolicy?: 'off' | 'warn' | 'error';
+    /** Optional consumer-controlled validation resource limits. */
+    readonly resourcePolicy?: ResourcePolicyV1;
 }
 /**
  * Validate an AES against a schema.

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA6D1D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,gCAAgC,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;CAExE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,QAAQ,CACpB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,QAAQ,EAChB,OAAO,GAAE,eAAoB,GAC9B,cAAc,CAqUhB"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAc,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAW1D,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAkDzE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B;;OAEG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,gCAAgC,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAErE,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAE9C;AAgJD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,QAAQ,CACpB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,QAAQ,EAChB,OAAO,GAAE,eAAoB,GAC9B,cAAc,CAuWhB"}

package/dist/validate.js

@@ -12,7 +12,7 @@ import { checkPresence } from './rules/presence.js';
 import { checkTypes } from './rules/typeCheck.js';
 import { checkReferenceForms } from './rules/referenceForm.js';
 import { checkNumericForm } from './rules/numericForm.js';
-import { checkStringForm, checkPatterns } from './rules/stringForm.js';
+import { checkStringForm, checkPatterns, matchesPortablePattern } from './rules/stringForm.js';
 const TYPE_ALIASES = {
     NumberLiteral: ['NumberLiteral'],
     StringLiteral: ['StringLiteral'],
@@ -40,6 +40,113 @@ const TYPE_ALIASES = {
 function formatQuotedMemberSegment(key) {
     return `.[${JSON.stringify(String(key))}]`;
 }
+const DEFAULT_RESOURCE_POLICY = {
+    max_events: 100_000,
+    max_rules: 10_000,
+    max_any_of_cases: 64,
+    max_schema_depth: 64,
+    max_path_length: 4_096,
+    max_reference_resolution_steps: 64,
+    max_selector_expansions: 100_000,
+    max_string_length_default: 10_000_000,
+    max_container_children_default: 1_000_000,
+};
+function normalizeResourcePolicy(policy, source, ctx) {
+    if (policy === undefined)
+        return {};
+    if (policy === null || typeof policy !== 'object') {
+        emitResourceError(ctx, '$', `${source} resource policy must be an object`);
+        return {};
+    }
+    const normalized = {};
+    for (const key of Object.keys(policy)) {
+        if (!(key in DEFAULT_RESOURCE_POLICY)) {
+            emitResourceError(ctx, '$', `Unknown ${source} resource policy key: ${String(key)}`);
+            continue;
+        }
+        const value = policy[key];
+        if (value !== undefined && (typeof value !== 'number' || !Number.isInteger(value) || value < 0)) {
+            emitResourceError(ctx, '$', `${source} resource policy ${String(key)} must be a non-negative integer`);
+            continue;
+        }
+        if (value !== undefined) {
+            normalized[key] = value;
+        }
+    }
+    return normalized;
+}
+function resolveResourcePolicy(schemaPolicy, optionPolicy, ctx) {
+    return {
+        ...DEFAULT_RESOURCE_POLICY,
+        ...normalizeResourcePolicy(schemaPolicy, 'schema', ctx),
+        ...normalizeResourcePolicy(optionPolicy, 'option', ctx),
+    };
+}
+function emitResourceError(ctx, path, message, span = null) {
+    emitError(ctx, createDiag(path, span, message, ErrorCodes.INVALID_SCHEMA_POLICY));
+}
+const STRING_LIKE_VALUE_TYPES = new Set([
+    'StringLiteral',
+    'TrimtickLiteral',
+    'SeparatorLiteral',
+    'HexLiteral',
+    'EncodingLiteral',
+    'NullLiteral',
+    'DateLiteral',
+    'TimeLiteral',
+    'DateTimeLiteral',
+    'ZRUTDateTimeLiteral',
+]);
+function stringLikePayloadLength(event) {
+    if (!STRING_LIKE_VALUE_TYPES.has(event.type))
+        return null;
+    const payload = event.value.length > 0 ? event.value : event.raw;
+    return payload.length;
+}
+function enforceStringLengthResourceBudget(info, path, policy, ctx) {
+    const payloadLength = stringLikePayloadLength(info);
+    if (payloadLength !== null && payloadLength > policy.max_string_length_default) {
+        emitResourceError(ctx, path, `String-like payload length ${payloadLength} exceeds max_string_length_default ${policy.max_string_length_default}`, info.span);
+    }
+    for (const [key, attribute] of info.attributes ?? []) {
+        enforceStringLengthResourceBudget(attribute, `${path}@${key}`, policy, ctx);
+    }
+}
+function inspectSchemaResourceShape(schema, policy, ctx) {
+    for (const rule of schema.rules) {
+        const rulePath = typeof rule.path === 'string' && rule.path.length > 0
+            ? rule.path
+            : typeof rule.selector === 'string' && rule.selector.length > 0
+                ? rule.selector
+                : '$';
+        if (rulePath.length > policy.max_path_length) {
+            emitResourceError(ctx, rulePath, `Rule path length ${rulePath.length} exceeds max_path_length ${policy.max_path_length}`);
+        }
+        inspectConstraintResourceShape(rule.constraints, rulePath, 1, policy, ctx);
+    }
+    for (const [datatype, constraints] of Object.entries(schema.datatype_rules ?? {})) {
+        inspectConstraintResourceShape(constraints, `datatype_rules.${datatype}`, 1, policy, ctx);
+    }
+}
+function inspectConstraintResourceShape(constraints, path, depth, policy, ctx) {
+    if (depth > policy.max_schema_depth) {
+        emitResourceError(ctx, path, `Schema constraint depth exceeds max_schema_depth ${policy.max_schema_depth}`);
+        return;
+    }
+    if (constraints.any_of !== undefined) {
+        if (constraints.any_of.length > policy.max_any_of_cases) {
+            emitResourceError(ctx, path, `any_of case count ${constraints.any_of.length} exceeds max_any_of_cases ${policy.max_any_of_cases}`);
+        }
+        constraints.any_of.forEach((branch, index) => {
+            inspectConstraintResourceShape(branch, `${path}.any_of[${index}]`, depth + 1, policy, ctx);
+        });
+    }
+    if (constraints.attributes !== undefined) {
+        for (const [key, child] of Object.entries(constraints.attributes)) {
+            inspectConstraintResourceShape(child, `${path}@${key}`, depth + 1, policy, ctx);
+        }
+    }
+}
 /**
  * Validate an AES against a schema.
  *
@@ -70,6 +177,20 @@ export function validate(aes, schema, options = {}) {
     // TODO: Phase 9 - Guarantees
     // Phase 1: Envelope plumbing
     const ctx = createDiagContext();
+    const resourcePolicy = resolveResourcePolicy(schema.resource_policy, options.resourcePolicy, ctx);
+    if (ctx.errors.length > 0) {
+        return createFailingEnvelope(ctx.errors, ctx.warnings, {});
+    }
+    if (aes.length > resourcePolicy.max_events) {
+        emitResourceError(ctx, '$', `AES event count ${aes.length} exceeds max_events ${resourcePolicy.max_events}`);
+    }
+    if (schema.rules.length > resourcePolicy.max_rules) {
+        emitResourceError(ctx, '$', `Schema rule count ${schema.rules.length} exceeds max_rules ${resourcePolicy.max_rules}`);
+    }
+    inspectSchemaResourceShape(schema, resourcePolicy, ctx);
+    if (ctx.errors.length > 0) {
+        return createFailingEnvelope(ctx.errors, ctx.warnings, {});
+    }
     // Phase 3: (moved to run after Phase 2)
     // Helpers: format canonical path (local, no runtime AEON deps)
     function formatCanonicalPath(path) {
@@ -182,6 +303,9 @@ export function validate(aes, schema, options = {}) {
     for (let i = 0; i < aes.length; i++) {
         const event = aes[i];
         const pathStr = formatCanonicalPath(event.path);
+        if (pathStr.length > resourcePolicy.max_path_length) {
+            emitResourceError(ctx, pathStr, `Path length ${pathStr.length} exceeds max_path_length ${resourcePolicy.max_path_length}`, toTuple(event.span));
+        }
         if (Array.isArray(event.path?.segments)) {
             for (const seg of event.path.segments) {
                 if (seg?.type === 'index') {
@@ -217,19 +341,31 @@ export function validate(aes, schema, options = {}) {
                 if ((event.value.type === 'TupleLiteral' || event.value.type === 'ListLiteral' || event.value.type === 'ListNode')
                     && Array.isArray(event.value.elements)) {
                     containerArity.set(pathStr, event.value.elements.length);
+                    if (event.value.elements.length > resourcePolicy.max_container_children_default) {
+                        emitResourceError(ctx, pathStr, `Container child count ${event.value.elements.length} exceeds max_container_children_default ${resourcePolicy.max_container_children_default}`, toTuple(event.span));
+                    }
                     hydrateIndexedFallback(pathStr, event.value, toTuple(event.span));
                 }
                 else if (event.value.type === 'ObjectNode' && Array.isArray(event.value.bindings)) {
                     containerArity.set(pathStr, event.value.bindings.length);
+                    if (event.value.bindings.length > resourcePolicy.max_container_children_default) {
+                        emitResourceError(ctx, pathStr, `Container child count ${event.value.bindings.length} exceeds max_container_children_default ${resourcePolicy.max_container_children_default}`, toTuple(event.span));
+                    }
                 }
                 else if (event.value.type === 'NodeLiteral' && Array.isArray(event.value.children)) {
                     containerArity.set(pathStr, event.value.children.length);
+                    if (event.value.children.length > resourcePolicy.max_container_children_default) {
+                        emitResourceError(ctx, pathStr, `Container child count ${event.value.children.length} exceeds max_container_children_default ${resourcePolicy.max_container_children_default}`, toTuple(event.span));
+                    }
                     hydrateIndexedFallback(pathStr, event.value, toTuple(event.span));
                 }
             }
         }
         // Register index even for first occurrence
     }
+    for (const [path, info] of eventsByPath) {
+        enforceStringLengthResourceBudget(info, path, resourcePolicy, ctx);
+    }
     // Optional separator literal trailing-delimiter policy
     if (trailingSeparatorPolicy !== 'off') {
         for (const event of aes) {
@@ -254,14 +390,16 @@ export function validate(aes, schema, options = {}) {
     }
     // Phase 3: Build rule index from schema (run after baseline invariants)
     const ruleIndex = buildRuleIndex(schema, ctx);
-    const effectiveRuleIndex = expandWildcardRules(expandSelectorRules(ruleIndex, schema, eventsByPath, ctx), eventsByPath);
+    const selectorExpansionBudget = { count: 0 };
+    const expandedRuleIndex = expandWildcardRules(expandSelectorRules(ruleIndex, schema, eventsByPath, ctx, resourcePolicy, selectorExpansionBudget), eventsByPath, ctx, resourcePolicy, selectorExpansionBudget);
+    const effectiveRuleIndex = mergeDatatypeRules(expandedRuleIndex, schema.datatype_rules, eventsByPath);
     // Phase 4: Presence checks (required fields)
     const boundPaths = new Set(seen.keys());
     checkPresence(effectiveRuleIndex, boundPaths, ctx);
     checkWorldPolicy(schema, aes, boundPaths, ctx);
     // Phase 5: Type checks (literal kind)
     checkReferenceForms(schema, effectiveRuleIndex, eventsByPath, ctx);
-    const effectiveEventsByPath = resolveReferenceFormEvents(effectiveRuleIndex, eventsByPath);
+    const effectiveEventsByPath = resolveReferenceFormEvents(effectiveRuleIndex, eventsByPath, resourcePolicy, ctx);
     const selectedRuleIndex = selectAnyOfRules(effectiveRuleIndex, effectiveEventsByPath, ctx);
     checkTypes(selectedRuleIndex, effectiveEventsByPath, ctx);
     // Phase 5b: core v1 arity/cardinality checks for tuple/list/node containers
@@ -380,7 +518,7 @@ function checkWorldPolicy(schema, aes, boundPaths, ctx) {
         emitError(ctx, createDiag(path, toTupleLocal(event.span), `Binding '${path}' is not allowed by closed-world schema`, ErrorCodes.UNEXPECTED_BINDING));
     }
 }
-function resolveReferenceFormEvents(ruleIndex, eventsByPath) {
+function resolveReferenceFormEvents(ruleIndex, eventsByPath, resourcePolicy, ctx) {
     const resolved = new Map(eventsByPath);
     for (const [path, rule] of ruleIndex.entries()) {
         if (rule.constraints.resolve_reference_form !== true)
@@ -388,8 +526,12 @@ function resolveReferenceFormEvents(ruleIndex, eventsByPath) {
         const event = eventsByPath.get(path);
         if (!event || !isReferenceType(event.type) || !event.referencePath)
             continue;
-        const terminal = resolveTerminalReferenceEvent(event, eventsByPath, new Set());
+        const resolutionState = { exhausted: false };
+        const terminal = resolveTerminalReferenceEvent(event, eventsByPath, new Set(), resourcePolicy.max_reference_resolution_steps, resolutionState);
         if (!terminal) {
+            if (resolutionState.exhausted) {
+                emitResourceError(ctx, path, `Reference resolution exceeded max_reference_resolution_steps ${resourcePolicy.max_reference_resolution_steps}`, event.span);
+            }
             resolved.delete(path);
             continue;
         }
@@ -400,7 +542,7 @@ function resolveReferenceFormEvents(ruleIndex, eventsByPath) {
     }
     return resolved;
 }
-function expandSelectorRules(ruleIndex, schema, eventsByPath, ctx) {
+function expandSelectorRules(ruleIndex, schema, eventsByPath, ctx, resourcePolicy, expansionBudget) {
     const expanded = new Map(ruleIndex);
     for (const rule of schema.rules) {
         if (typeof rule.selector !== 'string' || rule.selector.length === 0)
@@ -412,6 +554,11 @@ function expandSelectorRules(ruleIndex, schema, eventsByPath, ctx) {
             if (!matchesSelectorPath(actualPath, rule.selector))
                 continue;
             matched = true;
+            expansionBudget.count += 1;
+            if (expansionBudget.count > resourcePolicy.max_selector_expansions) {
+                emitResourceError(ctx, rule.selector, `Selector expansion count exceeds max_selector_expansions ${resourcePolicy.max_selector_expansions}`);
+                return expanded;
+            }
             if (!expanded.has(actualPath)) {
                 expanded.set(actualPath, { ...rule, path: actualPath });
             }
@@ -422,7 +569,7 @@ function expandSelectorRules(ruleIndex, schema, eventsByPath, ctx) {
     }
     return expanded;
 }
-function expandWildcardRules(ruleIndex, eventsByPath) {
+function expandWildcardRules(ruleIndex, eventsByPath, ctx, resourcePolicy, expansionBudget) {
     const expanded = new Map(ruleIndex);
     for (const [path, rule] of ruleIndex.entries()) {
         if (!path.includes('[*]'))
@@ -430,6 +577,11 @@ function expandWildcardRules(ruleIndex, eventsByPath) {
         expanded.delete(path);
         for (const actualPath of eventsByPath.keys()) {
             if (matchesAllowedPath(actualPath, path)) {
+                expansionBudget.count += 1;
+                if (expansionBudget.count > resourcePolicy.max_selector_expansions) {
+                    emitResourceError(ctx, path, `Wildcard expansion count exceeds max_selector_expansions ${resourcePolicy.max_selector_expansions}`);
+                    return expanded;
+                }
                 expanded.set(actualPath, { ...rule, path: actualPath });
             }
         }
@@ -459,6 +611,9 @@ function withoutAnyOf(constraints) {
     const { any_of: _anyOf, ...rest } = constraints;
     return rest;
 }
+function patternMatches(pattern, value) {
+    return matchesPortablePattern(pattern, value);
+}
 function constraintBranchMatchesEvent(constraints, event) {
     if (constraints.type_is !== undefined) {
         const containerOk = constraints.type_is === 'list'
@@ -492,7 +647,7 @@ function constraintBranchMatchesEvent(constraints, event) {
             return false;
         if (constraints.max_length !== undefined && valueLength > constraints.max_length)
             return false;
-        if (constraints.pattern !== undefined && !(new RegExp(constraints.pattern).test(event.value)))
+        if (!patternMatches(constraints.pattern, event.value))
             return false;
     }
     if (hasDigitFormConstraints(constraints) && isDigitFormLiteral(event.type)) {
@@ -503,15 +658,19 @@ function constraintBranchMatchesEvent(constraints, event) {
             return false;
         if (constraints.max_digits !== undefined && digitCount > constraints.max_digits)
             return false;
-        if (event.type === 'RadixLiteral' && constraints.radix !== undefined && firstInvalidRadixDigit(event.raw, constraints.radix) !== null)
+        if (event.type === 'RadixLiteral' && constraints.radix !== undefined && !radixConstraintMatches(event.datatype, event.raw, constraints))
             return false;
     }
     return true;
 }
-function resolveTerminalReferenceEvent(event, eventsByPath, activePaths) {
+function resolveTerminalReferenceEvent(event, eventsByPath, activePaths, remainingSteps, state) {
     if (!isReferenceType(event.type) || !event.referencePath) {
         return event;
     }
+    if (remainingSteps <= 0) {
+        state.exhausted = true;
+        return null;
+    }
     const targetPath = formatReferenceLookupPath(event.referencePath);
     if (activePaths.has(targetPath)) {
         return null;
@@ -522,7 +681,7 @@ function resolveTerminalReferenceEvent(event, eventsByPath, activePaths) {
     }
     activePaths.add(targetPath);
     const resolved = isReferenceType(target.type)
-        ? resolveTerminalReferenceEvent(target, eventsByPath, activePaths)
+        ? resolveTerminalReferenceEvent(target, eventsByPath, activePaths, remainingSteps - 1, state)
         : target;
     activePaths.delete(targetPath);
     return resolved;
@@ -780,6 +939,28 @@ function checkDatatypeRules(datatypeRules, eventsByPath, ctx) {
         }
     }
 }
+function mergeDatatypeRules(ruleIndex, datatypeRules, eventsByPath) {
+    if (!datatypeRules)
+        return ruleIndex;
+    const merged = new Map();
+    for (const [path, rule] of ruleIndex.entries()) {
+        merged.set(path, { ...rule, constraints: { ...rule.constraints } });
+    }
+    for (const [path, event] of eventsByPath.entries()) {
+        if (!event.datatype)
+            continue;
+        const datatypeRule = datatypeRules[datatypeBase(event.datatype).toLowerCase()];
+        if (!datatypeRule)
+            continue;
+        const existing = merged.get(path);
+        const constraints = existing?.constraints ?? {};
+        merged.set(path, {
+            path,
+            constraints: { ...datatypeRule, ...constraints },
+        });
+    }
+    return merged;
+}
 function checkAttributeConstraints(ruleIndex, eventsByPath, datatypeRules, ctx) {
     for (const [path, rule] of ruleIndex) {
         if (!rule.constraints.attributes && rule.constraints.closed_attributes !== true)
@@ -854,20 +1035,26 @@ function validateAttributeEntry(path, entry, constraints, datatypeRules, ctx) {
             emitError(ctx, createDiag(path, entry.span, `Numeric form violation: expected max ${effectiveConstraints.max_digits} digits, got ${digitCount}`, ErrorCodes.NUMERIC_FORM_VIOLATION));
         }
         if (entry.type === 'RadixLiteral' && effectiveConstraints.radix !== undefined) {
+            const declaredRadix = declaredRadixFromDatatype(entry.datatype);
+            if ((declaredRadix === null && effectiveConstraints.allow_unspecified_radix !== true)
+                || (declaredRadix !== null && declaredRadix !== effectiveConstraints.radix)) {
+                emitError(ctx, createDiag(path, entry.span, `Numeric form violation: expected declared radix ${effectiveConstraints.radix}`, ErrorCodes.NUMERIC_FORM_VIOLATION));
+                return;
+            }
             const invalidDigit = firstInvalidRadixDigit(entry.raw, effectiveConstraints.radix);
             if (invalidDigit !== null) {
                 emitError(ctx, createDiag(path, entry.span, `Numeric form violation: radix literal digit '${invalidDigit}' is outside radix ${effectiveConstraints.radix}`, ErrorCodes.NUMERIC_FORM_VIOLATION));
             }
         }
     }
-    if (entry.type === 'StringLiteral') {
+    if (isStringType(entry.type)) {
         if (effectiveConstraints.min_length !== undefined && entry.value.length < effectiveConstraints.min_length) {
             emitError(ctx, createDiag(path, entry.span, `String length violation: expected min length ${effectiveConstraints.min_length}, got ${entry.value.length}`, ErrorCodes.STRING_LENGTH_VIOLATION));
         }
         if (effectiveConstraints.max_length !== undefined && entry.value.length > effectiveConstraints.max_length) {
             emitError(ctx, createDiag(path, entry.span, `String length violation: expected max length ${effectiveConstraints.max_length}, got ${entry.value.length}`, ErrorCodes.STRING_LENGTH_VIOLATION));
         }
-        if (effectiveConstraints.pattern !== undefined && !(new RegExp(effectiveConstraints.pattern).test(entry.value))) {
+        if (effectiveConstraints.pattern !== undefined && !patternMatches(effectiveConstraints.pattern, entry.value)) {
             emitError(ctx, createDiag(path, entry.span, `Pattern mismatch: value does not match ${effectiveConstraints.pattern}`, ErrorCodes.PATTERN_MISMATCH));
         }
     }
@@ -1004,10 +1191,38 @@ function hasDigitFormConstraints(constraints) {
     return constraints.sign !== undefined || constraints.min_digits !== undefined || constraints.max_digits !== undefined || constraints.radix !== undefined;
 }
 function isDigitFormLiteral(type) {
-    return type === 'NumberLiteral' || type === 'HexLiteral' || type === 'RadixLiteral' || type === 'SeparatorLiteral';
+    return type === 'NumberLiteral' || type === 'HexLiteral' || type === 'RadixLiteral';
+}
+function radixConstraintMatches(datatype, raw, constraints) {
+    if (constraints.radix === undefined)
+        return true;
+    const declaredRadix = declaredRadixFromDatatype(datatype);
+    if (declaredRadix === null && constraints.allow_unspecified_radix !== true)
+        return false;
+    if (declaredRadix !== null && declaredRadix !== constraints.radix)
+        return false;
+    return firstInvalidRadixDigit(raw, constraints.radix) === null;
+}
+function declaredRadixFromDatatype(datatype) {
+    if (datatype === undefined)
+        return null;
+    const match = /^radix(?:\[(\d+)\]|(\d+))$/i.exec(datatype.trim());
+    if (!match)
+        return null;
+    const value = Number(match[1] ?? match[2]);
+    return Number.isInteger(value) && value >= 0 ? value : null;
 }
 function isStringType(type) {
-    return type === 'StringLiteral' || type === 'TrimtickLiteral';
+    return type === 'StringLiteral'
+        || type === 'TrimtickLiteral'
+        || type === 'TrimtickStringLiteral'
+        || type === 'SeparatorLiteral'
+        || type === 'NullLiteral'
+        || type === 'EncodingLiteral'
+        || type === 'DateLiteral'
+        || type === 'TimeLiteral'
+        || type === 'DateTimeLiteral'
+        || type === 'ZRUTDateTimeLiteral';
 }
 function countFormDigits(type, raw) {
     if (type === 'NumberLiteral')
@@ -1018,7 +1233,7 @@ function countFormDigits(type, raw) {
         .replace(/_/g, '');
     let count = 0;
     for (const char of body) {
-        if ((char >= '0' && char <= '9') || (type !== 'SeparatorLiteral' && ((char >= 'A' && char <= 'Z') || (char >= 'a' && char <= 'z') || char === '&' || char === '!'))) {
+        if ((char >= '0' && char <= '9') || ((char >= 'A' && char <= 'Z') || (char >= 'a' && char <= 'z') || char === '&' || char === '!')) {
             count++;
         }
     }