@burnt-labs/expo-satya-attest 3.11.1 → 3.12.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 3.12.0 - 2026-10-07
+
+### Added
+
+- Support claims up to 8 MiB in native and TEE replay, replacing the 64/256 KiB
+  restrictions without requiring provider opt-in.
+- Enforce a shared 80 MiB budget for revealed claim values across endpoints and a
+  separate 80 MiB serialized attestation limit. Exceeding either fails the proof,
+  including partial-completion plans. Unrevealed response bytes are not charged
+  to the disclosure budget; bounded response parsing remains enforced.
+- Bound verifier/proxy uploads, response reads, canonical JSON processing and
+  large-job concurrency while preserving signature and policy validation.
+- Share bounded reveal-regex execution across Android, iOS and TEE. Ordinary
+  patterns use a linear matcher; advanced patterns require inputs of at most 1 KiB.
+
+### Compatibility and rollout
+
+- Rebuild consuming iOS and Android apps and deploy the matching verifier/proxy
+  and measured TEE service before relying on the larger limits. Approve the new
+  TEE measurements in the verifier policy.
+- Artifact metadata, JSON escaping and TEE base64 encoding count toward the
+  serialized limit, so usable claim capacity may be below 80 MiB.
+- Buffered iOS replay retains a conservative 16 MiB raw-response cap (128 MiB
+  per run); Android and TEE allow 96/768 MiB. Raw-response guards are independent
+  of the 8/80 MiB disclosure limits and can reject large unrevealed fields.
+
 ## 3.11.1 - 2026-10-07
 
 ### Fixed

package/PROVIDER_CONFIG.md

@@ -357,8 +357,13 @@ The three `params.type` values:
 case-insensitively across all reveals.
 
 Native replay applies these to the pinned response and emits each match as a claim. The
-body is size-bounded (8 MiB) before regex runs. Patterns come only from the trusted
-registry, never from page content. See §10 for regex authoring tips.
+body is size-bounded before regex runs (16 MiB on iOS; 96 MiB on Android and TEE);
+a revealed claim is capped at 8 MiB of serialized JSON. Native and TEE replay share a
+linear matcher for ordinary patterns (at most 4096 UTF-8 bytes). Advanced patterns,
+including lookarounds/backreferences, allow at most 256 pattern bytes and 1024 input
+bytes with bounded backtracking; violations fail the proof. Use `jsonRegex` to select
+a small field first. Patterns come only from the trusted registry, never from page content.
+See §10 for regex authoring tips.
 
 ### 5.1 Claim presence and empty account states
 

package/PUBLISHING.md

@@ -12,10 +12,12 @@ for a plug-and-play Expo SDK.
 
 ## Release preparation
 
-The next prepared patch release is **3.11.1**. It fixes premature Android HTTP/2
-connection eviction during composite replay. Rebuild consuming Android apps for
-this native fix; no provider configuration change is required. Version 3.11.1 was
-unused on npm when checked on 2026-10-07; confirm again immediately before publishing.
+The next prepared release is **3.12.0**. It raises individual claims to 8 MiB
+and enforces separate 80 MiB budgets for revealed values and serialized artifacts.
+Rebuild consuming iOS and Android apps. Deploy the matching verifier/proxy and
+measured TEE service, then approve its measurements in the trusted verifier policy
+before clients rely on the larger limits. No provider opt-in is required. Version
+3.12.0 was unused on npm when checked on 2026-10-07; confirm again before publishing.
 
 Observability v2 was introduced in 3.11.0; its existing rollout requirements follow.
 
@@ -61,7 +63,7 @@ Local cookie cleanup does not reset remote hosted TeeLS sessions.
 The package check requires both native session managers, the WebView snapshot
 helper, adapter script, Android keep rules and public JS/declarations. Host tests
 use synthetic stores and adapter fixtures; they are not substitutes for device
-cookie isolation tests. Until the app builds and device matrix pass, treat 3.11.1
+cookie isolation tests. Until the app builds and device matrix pass, treat 3.12.0
 as release preparation, not a validated stable release.
 
 ## TEE release requirements
@@ -269,7 +271,7 @@ internal/module_scripts/
 After the release gates pass and publication is authorized, use the consolidated
 `publish-expo-satya-attest.yml` workflow. A stable tag must match the committed
 package version and point to a commit on `main`; for this prepared release the
-package-specific tag is `expo-satya-attest-v3.11.1`. Creating/pushing that tag starts
+package-specific tag is `expo-satya-attest-v3.12.0`. Creating/pushing that tag starts
 publication. Manual workflow dispatch is a dry-run.
 
 The workflow builds native artifacts, runs the release checks, and publishes
@@ -287,13 +289,13 @@ Every push to `main` publishes a snapshot package to the public npm registry wit
 unique prerelease version:
 
 ```text
-3.11.2-snapshot.<run>.<attempt>.sha-<commit>
+3.12.1-snapshot.<run>.<attempt>.sha-<commit>
 ```
 
 The snapshot job (in `publish-expo-satya-attest.yml`) increments the package's patch base
-in CI before publishing. For example, if `package.json` is `3.11.1`, the snapshot version
-is based on `3.11.2`:
-`3.11.2-snapshot.<run>.<attempt>.sha-<commit>`. Snapshots are development builds and
+in CI before publishing. For example, if `package.json` is `3.12.0`, the snapshot version
+is based on `3.12.1`:
+`3.12.1-snapshot.<run>.<attempt>.sha-<commit>`. Snapshots are development builds and
 do not imply completion of the physical-device gates.
 
 Snapshots use the `snapshot` dist-tag so test apps do not need to know the generated

package/README.md

@@ -5,8 +5,9 @@ the Rust `satya-sdk` / `satya-ffi` pipeline for artifact construction and verifi
 policy, while Swift and Kotlin provide platform-specific WebView capture, native HTTPS
 replay, hardware-backed signing, and platform attestation evidence.
 
-**3.11.1:** Fixes premature Android HTTP/2 connection cleanup during native replay.
-Rebuild the Android app to include the fix; provider configuration is unchanged.
+**3.12.0:** Supports 8 MiB claims with shared 80 MiB disclosure and artifact budgets.
+Rebuild consuming native apps and deploy the matching verifier/TEE services;
+provider configuration is unchanged.
 Observability v2 remains opt-in. See the [changelog](./CHANGELOG.md),
 [observability rollout guide](./TEELS_OBSERVABILITY.md) and
 [release requirements](./PUBLISHING.md#release-preparation).
@@ -996,7 +997,44 @@ disabled and only 2xx responses accepted. `onProgress` reports `proofPlanId`, `e
 
 - **1–8 endpoints** per plan, ordered; the order is order-sensitive and participates in
   `policyHash`.
-- **Per-response 8 MiB** and **aggregate 16 MiB** response-byte caps across the plan.
+- **8 MiB per claim value**, measured as UTF-8 serialized JSON, including quotes and
+  escapes; native uses its existing Rust serialization and TEE preserves exact numbers.
+- **80 MiB of revealed claim values across all endpoints** and a separate **80 MiB
+  serialized attestation** limit, including metadata and signatures. Each logical claim
+  counts, including overlapping reveals. Raw unrevealed fields do not debit the claim
+  budget. An overflow aborts the proof and stops subsequent replay endpoints, including
+  plans that otherwise allow partial completion. These limits apply automatically.
+- For example, ten values of exactly 8 MiB exhaust the logical disclosure budget;
+  the full attestation cap can reject earlier because it also includes overhead.
+  A TEE submission includes base64, leaving less than 60 MiB for inner artifact bytes.
+- Separate raw-response guards allow **16 MiB per endpoint / 128 MiB per run on
+  iOS**, whose buffered extraction makes full-body copies. Android and TEE allow
+  **96 MiB per endpoint / 768 MiB per run**, with bounded decompression. Large
+  unrevealed fields can hit these guards before the disclosure budget.
+  The compatible verifier reply carries plain and
+  exact base64 values and is read with a **240 MiB wire cap**; this does not enlarge
+  the 80 MiB disclosure budget.
+- Rust JSON processing bounds depth, number tokens and structural work (4,259,840
+  units per document/proof: one per value plus three per object member). This covers
+  TEE response parsing and native selected claims/artifacts, including duplicated
+  disclosure representations. Android and iOS parse raw JSON before selecting claims;
+  their raw-body byte caps do not bound native object counts. Dense unrevealed fields
+  can therefore still amplify native memory use. Capture, endpoint-count and freshness
+  guards remain in force.
+- Native and TEE reveals share a bounded Rust regex matcher. Ordinary patterns use
+  a linear engine; advanced patterns (such as lookarounds/backreferences) are limited
+  to 256 pattern bytes, 1 KiB inputs and bounded backtracking. Invalid or over-budget
+  patterns fail the proof. Use `jsonRegex` to select a small field before advanced matching.
+- Large server jobs are admitted automatically above the previous small-data ceilings
+  (2 MiB verifier uploads; 8 MiB raw replay input or 512 KiB retained replay output),
+  with one large job and up to 16 active jobs per process; overload fails explicitly without replay retries.
+  Verifier uploads require 4 KiB/s progress with at most 10 seconds of startup/burst
+  allowance, plus 10-second idle / 120-second total deadlines. At most 12 uploads
+  may wait for data, leaving four slots for already-buffered requests. These process
+  limits complement edge DDoS controls. Release qualification still requires
+  physical-device memory tests and deployed mixed-load tests. Native verifier/TEE
+  responses use Expo streaming fetch. Custom TEE fetch overrides must provide
+  streaming bodies; non-streaming responses are rejected.
 - Capture selection runs for at most the plan's `maxDurationMs` (an integer in
   `[1000, 120000]` ms). A readiness signal starts the window when received; otherwise the
   first accepted capture starts it. Later readiness never resets an earlier start.

package/android/build.gradle

@@ -4,14 +4,14 @@ plugins {
 }
 
 group = 'expo.modules.satyaattest'
-version = '3.11.1'
+version = '3.12.0'
 
 android {
   namespace "expo.modules.satyaattest"
   defaultConfig {
     consumerProguardFiles 'consumer-rules.pro'
     versionCode 1
-    versionName "3.11.1"
+    versionName "3.12.0"
     // StrongBox key attestation needs API 28+; basic Keystore attestation API 24+.
     minSdkVersion 24
   }

package/android/src/main/java/expo/modules/satyaattest/SatyaAttestModule.kt

@@ -64,6 +64,8 @@ import org.json.JSONTokener
 import uniffi.satya_ffi.WitnessStatementSigner
 import uniffi.satya_ffi.generateNativeReplayBundle
 import uniffi.satya_ffi.generateNativeReplayObservation
+import uniffi.satya_ffi.measureRevealClaimValue
+import uniffi.satya_ffi.matchRevealRegex
 import uniffi.satya_ffi.prepareNativeReplayBundle
 import uniffi.satya_ffi.satyaCoreVersion
 import uniffi.satya_ffi.verifyKaggleArtifact
@@ -71,7 +73,17 @@ import uniffi.satya_ffi.verifyKaggleArtifact
 private const val KEY_ALIAS_PREFIX = "satya-w-witness-"
 
 // Cap replay bodies before JSON/regex claim extraction.
-private const val MAX_RESPONSE_BODY_BYTES = 8L * 1024 * 1024
+private const val MAX_RESPONSE_BODY_BYTES = 96L * 1024 * 1024
+
+private class NativeRevealBudget {
+  private var used = 0L
+  fun add(value: Any) {
+    val wrapped = JSONArray().put(value).toString()
+    val bytes = measureRevealClaimValue(wrapped.substring(1, wrapped.length - 1)).toLong()
+    require(bytes <= 80L * 1024 * 1024 - used) { "revealed claim values exceed 80 MiB" }
+    used += bytes
+  }
+}
 
 private const val PLAY_INTEGRITY_BIND_DOMAIN = "satya-w-playintegrity-bind-v1"
 
@@ -762,6 +774,7 @@ class SatyaAttestModule : Module() {
       "composite replay start plan=$proofPlanId endpoints=${orderedRequests.size}",
     )
     var totalResponseBytes = 0L
+    val claimBudget = NativeRevealBudget()
     val observations = ArrayList<CompositeExchangeObservation>(orderedRequests.size)
     try {
       for (exchangeRequest in orderedRequests) {
@@ -782,6 +795,7 @@ class SatyaAttestModule : Module() {
               trustPolicy = trustPolicy,
               cookieJar = cookieJar,
               priorResponseBytes = totalResponseBytes,
+              claimBudget = claimBudget,
               deadlineAtMonotonicMs = deadlineAtMonotonicMs,
             )
           }
@@ -852,6 +866,7 @@ class SatyaAttestModule : Module() {
     trustPolicy: String,
     cookieJar: ProofCookieJar,
     priorResponseBytes: Long,
+    claimBudget: NativeRevealBudget,
     deadlineAtMonotonicMs: Long,
   ): CompositeExchangeObservation {
     val endpointMethod = endpoint.optString("method", "GET")
@@ -1003,7 +1018,7 @@ class SatyaAttestModule : Module() {
 
       // Extract ONLY this endpoint's governed reveals.
       val reveals = compositeRevealRules(endpoint)
-      val claimsJson = extractRevealClaims(responseBody.text, reveals)
+      val claimsJson = extractRevealClaims(responseBody.text, reveals, claimBudget)
       val claims = (0 until claimsJson.length()).map { index ->
         val claim = claimsJson.getJSONObject(index)
         CompositeClaim(
@@ -1752,10 +1767,12 @@ class SatyaAttestModule : Module() {
     aliasesByPath: Map<String, String>,
   ): JSONArray {
     val root = JSONObject(body)
+    val budget = NativeRevealBudget()
     val claims = JSONArray()
     for (index in 0 until jsonPaths.length()) {
       val path = jsonPaths.getString(index)
       val value = jsonPathGet(root, path) ?: continue
+      budget.add(value)
       claims.put(
         JSONObject().apply {
           put("name", aliasesByPath[path] ?: claimName(path))
@@ -1768,7 +1785,7 @@ class SatyaAttestModule : Module() {
   }
 
   // Structured JSON/regex claim extraction.
-  private fun extractRevealClaims(body: String, reveals: JSONArray): JSONArray {
+  private fun extractRevealClaims(body: String, reveals: JSONArray, budget: NativeRevealBudget = NativeRevealBudget()): JSONArray {
     val claims = JSONArray()
     val seenAliases = mutableMapOf<String, String>()
     var jsonRoot: Any? = null
@@ -1804,6 +1821,7 @@ class SatyaAttestModule : Module() {
         else -> null
       }
       if (value == null || value == JSONObject.NULL) continue
+      budget.add(value)
       // Regex-only reveals use the alias as the disclosure path.
       val sourcePath = when (type) {
         "json", "jsonRegex" -> path
@@ -1821,20 +1839,11 @@ class SatyaAttestModule : Module() {
   }
 
   private fun applyRevealRegex(input: String, pattern: String, group: Any?): String? {
-    if (pattern.isEmpty()) return null
-    val matcher = runCatching { java.util.regex.Pattern.compile(pattern).matcher(input) }
-      .getOrNull() ?: return null
-    if (!matcher.find()) return null
-    val namedGroup = (group as? String)?.takeIf { it.toIntOrNull() == null }
-    if (namedGroup != null) {
-      return runCatching { matcher.group(namedGroup) }.getOrNull()
-    }
-    val groupIndex = when (group) {
-      is Number -> group.toInt()
-      is String -> group.toIntOrNull() ?: 1
-      else -> if (matcher.groupCount() >= 1) 1 else 0
-    }
-    return runCatching { matcher.group(groupIndex) }.getOrNull()
+    return matchRevealRegex(input, pattern, when (group) {
+      is String -> group
+      is Number -> group.toInt().toString()
+      else -> null
+    })
   }
 
   // Buffer one byte past the cap so oversize bodies fail closed.

package/android/src/main/java/expo/modules/satyaattest/SatyaCompositeReplay.kt

@@ -470,16 +470,16 @@ data class CompositeExchangeObservation(
 )
 
 /**
- * Per-response (8 MiB) and aggregate (16 MiB) response-byte caps for the
+ * Per-response (96 MiB) and aggregate (768 MiB) response-byte caps for the
  * composite bundle, mirroring the Rust `MAX_EXCHANGE_RESPONSE_BYTES` /
  * `MAX_TOTAL_RESPONSE_BYTES`. Pure so the accounting can be unit-tested without a
  * live OkHttp call.
  */
 object CompositeByteBudget {
-  const val MAX_EXCHANGE_RESPONSE_BYTES: Long = 8L * 1024 * 1024
-  const val MAX_BUNDLE_RESPONSE_BYTES: Long = 16L * 1024 * 1024
+  const val MAX_EXCHANGE_RESPONSE_BYTES: Long = 96L * 1024 * 1024
+  const val MAX_BUNDLE_RESPONSE_BYTES: Long = 8 * MAX_EXCHANGE_RESPONSE_BYTES
 
-  /** Rejects a single exchange whose response exceeds 8 MiB; returns the count. */
+  /** Rejects a single exchange whose response exceeds 96 MiB; returns the count. */
   fun requireExchangeWithinCap(byteCount: Long): Long {
     require(byteCount in 0..MAX_EXCHANGE_RESPONSE_BYTES) {
       "composite replay response exceeds $MAX_EXCHANGE_RESPONSE_BYTES bytes"
@@ -489,7 +489,7 @@ object CompositeByteBudget {
 
   /**
    * Adds one exchange's bytes to the running total, enforcing both the
-   * per-exchange 8 MiB cap and the aggregate 16 MiB cap. Returns the new total.
+   * per-exchange 96 MiB cap and the aggregate 768 MiB cap. Returns the new total.
    */
   fun accumulate(priorTotal: Long, exchangeBytes: Long): Long {
     requireExchangeWithinCap(exchangeBytes)

package/android/src/main/java/uniffi/satya_ffi/satya_ffi.kt

@@ -661,6 +661,10 @@ internal object IntegrityCheckingUniffiLib {
     ): Short
     external fun uniffi_satya_ffi_checksum_func_generate_native_replay_observation(
     ): Short
+    external fun uniffi_satya_ffi_checksum_func_match_reveal_regex(
+    ): Short
+    external fun uniffi_satya_ffi_checksum_func_measure_reveal_claim_value(
+    ): Short
     external fun uniffi_satya_ffi_checksum_func_prepare_native_replay_bundle(
     ): Short
     external fun uniffi_satya_ffi_checksum_func_satya_core_version(
@@ -689,6 +693,10 @@ internal object UniffiLib {
     ): RustBuffer.ByValue
     external fun uniffi_satya_ffi_fn_func_generate_native_replay_observation(`replayJson`: RustBuffer.ByValue,`evidenceJson`: RustBuffer.ByValue,`signer`: Long,uniffi_out_err: UniffiRustCallStatus, 
     ): RustBuffer.ByValue
+    external fun uniffi_satya_ffi_fn_func_match_reveal_regex(`input`: RustBuffer.ByValue,`pattern`: RustBuffer.ByValue,`group`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
+    ): RustBuffer.ByValue
+    external fun uniffi_satya_ffi_fn_func_measure_reveal_claim_value(`valueJson`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
+    ): Long
     external fun uniffi_satya_ffi_fn_func_prepare_native_replay_bundle(`replayBundleJson`: RustBuffer.ByValue,uniffi_out_err: UniffiRustCallStatus, 
     ): RustBuffer.ByValue
     external fun uniffi_satya_ffi_fn_func_satya_core_version(uniffi_out_err: UniffiRustCallStatus, 
@@ -820,6 +828,12 @@ private fun uniffiCheckApiChecksums(lib: IntegrityCheckingUniffiLib) {
     if (lib.uniffi_satya_ffi_checksum_func_generate_native_replay_observation() != 992.toShort()) {
         throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
     }
+    if (lib.uniffi_satya_ffi_checksum_func_match_reveal_regex() != 15030.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
+    if (lib.uniffi_satya_ffi_checksum_func_measure_reveal_claim_value() != 26745.toShort()) {
+        throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
+    }
     if (lib.uniffi_satya_ffi_checksum_func_prepare_native_replay_bundle() != 12159.toShort()) {
         throw RuntimeException("UniFFI API checksum mismatch: try cleaning and rebuilding your project")
     }
@@ -956,6 +970,29 @@ public abstract class FfiConverterCallbackInterface<CallbackInterface: Any>: Ffi
     }
 }
 
+/**
+ * @suppress
+ */
+public object FfiConverterULong: FfiConverter<ULong, Long> {
+    override fun lift(value: Long): ULong {
+        return value.toULong()
+    }
+
+    override fun read(buf: ByteBuffer): ULong {
+        return lift(buf.getLong())
+    }
+
+    override fun lower(value: ULong): Long {
+        return value.toLong()
+    }
+
+    override fun allocationSize(value: ULong) = 8UL
+
+    override fun write(value: ULong, buf: ByteBuffer) {
+        buf.putLong(value.toLong())
+    }
+}
+
 /**
  * @suppress
  */
@@ -1364,6 +1401,34 @@ public object FfiConverterOptionalString: FfiConverterRustBuffer<kotlin.String?>
     }
     
 
+        /**
+         * Match native reveals with the same bounded engine as TEE replay.
+         */
+    @Throws(FfiException::class) fun `matchRevealRegex`(`input`: kotlin.String, `pattern`: kotlin.String, `group`: kotlin.String?): kotlin.String? {
+            return FfiConverterOptionalString.lift(
+    uniffiRustCallWithError(FfiException) { _status ->
+    UniffiLib.uniffi_satya_ffi_fn_func_match_reveal_regex(
+    
+        FfiConverterString.lower(`input`),FfiConverterString.lower(`pattern`),FfiConverterOptionalString.lower(`group`),_status)
+}
+    )
+    }
+    
+
+        /**
+         * Count with the same serializer as native commitments, including quotes and escapes.
+         */
+    @Throws(FfiException::class) fun `measureRevealClaimValue`(`valueJson`: kotlin.String): kotlin.ULong {
+            return FfiConverterULong.lift(
+    uniffiRustCallWithError(FfiException) { _status ->
+    UniffiLib.uniffi_satya_ffi_fn_func_measure_reveal_claim_value(
+    
+        FfiConverterString.lower(`valueJson`),_status)
+}
+    )
+    }
+    
+
         /**
          * Phase one of the composite flow: parse and fully validate a trusted-native
          * replay bundle, fix the session id / nonce / issuance window, and return the

package/build/SatyaMobileClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SatyaMobileClient.d.ts","sourceRoot":"","sources":["../src/SatyaMobileClient.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,wBAAwB,EACxB,iCAAiC,EAClC,MAAM,mCAAmC,CAAC;AAS3C,OAAO,EACL,aAAa,EACb,uBAAuB,EAGvB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,YAAY,EACb,MAAM,SAAS,CAAC;AAQjB,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AA0B1D,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,eAAe,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC1D,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAOD,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,iCAAiC,CAAC;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;CACjD;AAcD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IAEzD,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOzD,OAAO,CAAC,IAAI;IAYZ,+EAA+E;IACzE,YAAY,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAmBjF,+EAA+E;IACzE,kBAAkB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAyB/E,YAAY;IAiEpB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IAwI9E;;;;;OAKG;IACG,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,aAAa,CAAC;IA0SpF,MAAM,CACV,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,oBAAoB,GACrC,OAAO,CAAC,YAAY,CAAC;IAmDxB,WAAW,IAAI,MAAM;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAGzB"}
+{"version":3,"file":"SatyaMobileClient.d.ts","sourceRoot":"","sources":["../src/SatyaMobileClient.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,wBAAwB,EACxB,iCAAiC,EAClC,MAAM,mCAAmC,CAAC;AAS3C,OAAO,EACL,aAAa,EACb,uBAAuB,EAGvB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,YAAY,EACb,MAAM,SAAS,CAAC;AASjB,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AA0B1D,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,eAAe,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,4BAA4B;IAC3C,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,eAAe,EAAE,oBAAoB,CAAC;IACtC,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC1D,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAOD,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,iCAAiC,CAAC;AAEvF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;CACjD;AAcD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IAEzD,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOzD,OAAO,CAAC,IAAI;IAYZ,+EAA+E;IACzE,YAAY,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAmBjF,+EAA+E;IACzE,kBAAkB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAyB/E,YAAY;IAiEpB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IAyI9E;;;;;OAKG;IACG,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,aAAa,CAAC;IA2SpF,MAAM,CACV,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,oBAAoB,GACrC,OAAO,CAAC,YAAY,CAAC;IAmDxB,WAAW,IAAI,MAAM;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAGzB"}

package/build/SatyaMobileClient.js

@@ -6,6 +6,7 @@ import { nativeReplayBundleArgs } from './nativeReplayArgs';
 import { reportProviderIngest } from './providerMonitor';
 import { getSatyaRuntimeConfig, isPartialEndpointsAllowedForProvider, resolveAppId, } from './satyaConfig';
 import { SatyaErrorCode, asSatyaError, satyaError, } from './types/error.types';
+import { assertArtifactSize } from './utils/dataLimits';
 const REPLAY_PROGRESS = [
     ['witnessEnrollment', 'Enrolling witness key', 0.12],
     ['sessionChallenge', 'Creating session challenge', 0.24],
@@ -166,6 +167,7 @@ export class SatyaMobileClient {
         try {
             artifact = attachArtifactProducer(JSON.parse(raw), this.coreVersion());
             raw = JSON.stringify(artifact);
+            assertArtifactSize(raw);
         }
         catch (cause) {
             const error = satyaError(SatyaErrorCode.ARTIFACT_VERIFICATION_FAILED, 'native replay returned invalid artifact JSON', {
@@ -350,6 +352,7 @@ export class SatyaMobileClient {
         try {
             artifact = attachArtifactProducer(JSON.parse(raw), this.coreVersion());
             raw = JSON.stringify(artifact);
+            assertArtifactSize(raw);
         }
         catch (cause) {
             const error = satyaError(SatyaErrorCode.ARTIFACT_VERIFICATION_FAILED, 'native replay bundle returned invalid artifact JSON', {