@caupulican/pi-adaptative 0.81.40 → 0.81.42

package/dist/core/research/evidence-bundle.js

@@ -1,36 +1,184 @@
 import { isPlainRecord } from "../util/value-guards.js";
-function cloneJsonValue(value) {
-    if (Array.isArray(value)) {
-        return value.map(cloneJsonValue);
-    }
-    if (value !== null && typeof value === "object") {
-        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));
+/** Bounds every durable evidence bundle, including worker-authored evidence. */
+export const MAX_EVIDENCE_QUERY_CHARS = 4_096;
+export const MAX_EVIDENCE_CREATED_AT_CHARS = 128;
+export const MAX_EVIDENCE_SOURCES = 64;
+export const MAX_EVIDENCE_FINDINGS = 64;
+export const MAX_EVIDENCE_SOURCE_ID_CHARS = 256;
+export const MAX_EVIDENCE_FINDING_ID_CHARS = 256;
+export const MAX_EVIDENCE_TEXT_CHARS = 8_000;
+export const MAX_EVIDENCE_EXCERPT_CHARS = 8_000;
+export const MAX_EVIDENCE_IDS_PER_FINDING = 64;
+export const MAX_EVIDENCE_METADATA_DEPTH = 8;
+export const MAX_EVIDENCE_METADATA_ENTRIES = 64;
+export const MAX_EVIDENCE_METADATA_ARRAY_ITEMS = 64;
+export const MAX_EVIDENCE_METADATA_KEY_CHARS = 256;
+export const MAX_EVIDENCE_METADATA_STRING_CHARS = 4_096;
+function invalidEvidence(message) {
+    throw new Error(`Invalid evidence bundle: ${message}`);
+}
+/**
+ * Reads only own data properties. This is deliberately not Object.entries()/spread: snapshots
+ * and external lane reports are untrusted, and a getter must never execute while validating them.
+ */
+function ownDataRecord(value, label) {
+    if (!isPlainRecord(value))
+        invalidEvidence(`${label} must be a plain object.`);
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const record = Object.create(null);
+    for (const [key, descriptor] of Object.entries(descriptors)) {
+        if (!("value" in descriptor))
+            invalidEvidence(`${label}.${key} must not be an accessor.`);
+        record[key] = descriptor.value;
     }
+    return record;
+}
+function requiredBoundedString(value, label, maximumChars) {
+    if (typeof value !== "string" || value.length === 0)
+        invalidEvidence(`${label} must be a non-empty string.`);
+    if (value.length > maximumChars)
+        invalidEvidence(`${label} exceeds ${maximumChars} characters.`);
     return value;
 }
-function cloneJsonObject(value) {
-    return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));
+function optionalBoundedString(value, label, maximumChars) {
+    if (value === undefined)
+        return undefined;
+    return requiredBoundedString(value, label, maximumChars);
 }
-function isJsonValue(value) {
-    if (value === null || typeof value === "string" || typeof value === "boolean") {
-        return true;
+function boundedArray(value, label, maximumItems) {
+    if (!Array.isArray(value))
+        invalidEvidence(`${label} must be an array.`);
+    if (value.length > maximumItems)
+        invalidEvidence(`${label} exceeds ${maximumItems} entries.`);
+    return value;
+}
+function ownArrayValue(array, index, label) {
+    const descriptor = Object.getOwnPropertyDescriptor(array, String(index));
+    if (!descriptor || !("value" in descriptor))
+        invalidEvidence(`${label}[${index}] must be a data value.`);
+    return descriptor.value;
+}
+function normalizeJsonValue(value, label, depth) {
+    if (value === null || typeof value === "boolean")
+        return value;
+    if (typeof value === "string") {
+        if (value.length > MAX_EVIDENCE_METADATA_STRING_CHARS) {
+            invalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_STRING_CHARS} characters.`);
+        }
+        return value;
     }
     if (typeof value === "number") {
-        return Number.isFinite(value);
+        if (!Number.isFinite(value))
+            invalidEvidence(`${label} must be finite.`);
+        return value;
+    }
+    if (depth >= MAX_EVIDENCE_METADATA_DEPTH) {
+        invalidEvidence(`${label} exceeds metadata depth ${MAX_EVIDENCE_METADATA_DEPTH}.`);
     }
     if (Array.isArray(value)) {
-        return value.every(isJsonValue);
+        if (value.length > MAX_EVIDENCE_METADATA_ARRAY_ITEMS) {
+            invalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_ARRAY_ITEMS} entries.`);
+        }
+        const copied = [];
+        for (let index = 0; index < value.length; index++) {
+            copied.push(normalizeJsonValue(ownArrayValue(value, index, label), `${label}[${index}]`, depth + 1));
+        }
+        return copied;
     }
-    if (typeof value === "object") {
-        return isJsonObject(value);
+    const record = ownDataRecord(value, label);
+    const entries = Object.entries(record);
+    if (entries.length > MAX_EVIDENCE_METADATA_ENTRIES) {
+        invalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_ENTRIES} entries.`);
     }
-    return false;
+    const copied = {};
+    for (const [key, nested] of entries) {
+        if (key.length > MAX_EVIDENCE_METADATA_KEY_CHARS) {
+            invalidEvidence(`${label} contains a key exceeding ${MAX_EVIDENCE_METADATA_KEY_CHARS} characters.`);
+        }
+        copied[key] = normalizeJsonValue(nested, `${label}.${key}`, depth + 1);
+    }
+    return copied;
 }
-function isJsonObject(value) {
-    if (!isPlainRecord(value)) {
-        return false;
+function normalizeMetadata(value, label) {
+    const normalized = normalizeJsonValue(value, label, 0);
+    if (Array.isArray(normalized) || normalized === null || typeof normalized !== "object") {
+        invalidEvidence(`${label} must be an object.`);
     }
-    return Object.values(value).every(isJsonValue);
+    return normalized;
+}
+/**
+ * Validates and copies an evidence bundle without invoking accessors or preserving unbounded
+ * foreign object graphs. This is the sole boundary used for durable worker-claim evidence.
+ */
+export function normalizeEvidenceBundleForStorage(value) {
+    const bundle = ownDataRecord(value, "bundle");
+    const query = requiredBoundedString(bundle.query, "bundle.query", MAX_EVIDENCE_QUERY_CHARS);
+    const createdAt = optionalBoundedString(bundle.createdAt, "bundle.createdAt", MAX_EVIDENCE_CREATED_AT_CHARS);
+    const sourceValues = boundedArray(bundle.sources, "bundle.sources", MAX_EVIDENCE_SOURCES);
+    const findingValues = boundedArray(bundle.findings, "bundle.findings", MAX_EVIDENCE_FINDINGS);
+    const sources = [];
+    for (let index = 0; index < sourceValues.length; index++) {
+        const source = ownDataRecord(ownArrayValue(sourceValues, index, "bundle.sources"), `bundle.sources[${index}]`);
+        const sourceKind = source.kind;
+        if (typeof sourceKind !== "string" ||
+            !["workspace", "transcript", "automata", "web", "user", "tool"].includes(sourceKind)) {
+            invalidEvidence(`bundle.sources[${index}].kind is invalid.`);
+        }
+        const kind = sourceKind;
+        if (typeof source.trusted !== "boolean")
+            invalidEvidence(`bundle.sources[${index}].trusted must be boolean.`);
+        sources.push({
+            id: requiredBoundedString(source.id, `bundle.sources[${index}].id`, MAX_EVIDENCE_SOURCE_ID_CHARS),
+            kind,
+            trusted: source.trusted,
+            ...(source.title !== undefined
+                ? { title: optionalBoundedString(source.title, `bundle.sources[${index}].title`, MAX_EVIDENCE_TEXT_CHARS) }
+                : {}),
+            ...(source.uri !== undefined
+                ? { uri: optionalBoundedString(source.uri, `bundle.sources[${index}].uri`, MAX_EVIDENCE_TEXT_CHARS) }
+                : {}),
+            ...(source.excerpt !== undefined
+                ? {
+                    excerpt: optionalBoundedString(source.excerpt, `bundle.sources[${index}].excerpt`, MAX_EVIDENCE_EXCERPT_CHARS),
+                }
+                : {}),
+            ...(source.metadata !== undefined
+                ? { metadata: normalizeMetadata(source.metadata, `bundle.sources[${index}].metadata`) }
+                : {}),
+        });
+    }
+    const findings = [];
+    for (let index = 0; index < findingValues.length; index++) {
+        const finding = ownDataRecord(ownArrayValue(findingValues, index, "bundle.findings"), `bundle.findings[${index}]`);
+        const evidenceIdValues = boundedArray(finding.evidenceIds, `bundle.findings[${index}].evidenceIds`, MAX_EVIDENCE_IDS_PER_FINDING);
+        const evidenceIds = [];
+        for (let evidenceIndex = 0; evidenceIndex < evidenceIdValues.length; evidenceIndex++) {
+            evidenceIds.push(requiredBoundedString(ownArrayValue(evidenceIdValues, evidenceIndex, `bundle.findings[${index}].evidenceIds`), `bundle.findings[${index}].evidenceIds[${evidenceIndex}]`, MAX_EVIDENCE_SOURCE_ID_CHARS));
+        }
+        if (finding.confidence !== undefined &&
+            (typeof finding.confidence !== "number" || !Number.isFinite(finding.confidence))) {
+            invalidEvidence(`bundle.findings[${index}].confidence must be finite.`);
+        }
+        findings.push({
+            id: requiredBoundedString(finding.id, `bundle.findings[${index}].id`, MAX_EVIDENCE_FINDING_ID_CHARS),
+            summary: requiredBoundedString(finding.summary, `bundle.findings[${index}].summary`, MAX_EVIDENCE_TEXT_CHARS),
+            evidenceIds,
+            ...(finding.confidence !== undefined ? { confidence: finding.confidence } : {}),
+        });
+    }
+    return { query, sources, findings, ...(createdAt !== undefined ? { createdAt } : {}) };
+}
+function cloneJsonValue(value) {
+    if (Array.isArray(value)) {
+        return value.map(cloneJsonValue);
+    }
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));
+    }
+    return value;
+}
+function cloneJsonObject(value) {
+    return Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));
 }
 function cloneEvidenceRef(source) {
     return {
@@ -53,59 +201,15 @@ export function createEvidenceBundle(args) {
     };
 }
 export function cloneEvidenceBundleForStorage(bundle) {
-    return {
-        query: bundle.query,
-        sources: bundle.sources.map(cloneEvidenceRef),
-        findings: bundle.findings.map(cloneFinding),
-        createdAt: bundle.createdAt,
-    };
+    return normalizeEvidenceBundleForStorage(bundle);
 }
 export function isEvidenceBundle(value) {
-    if (!isPlainRecord(value))
-        return false;
-    const bundle = value;
-    if (typeof bundle.query !== "string")
-        return false;
-    if (bundle.createdAt !== undefined && typeof bundle.createdAt !== "string")
-        return false;
-    if (!Array.isArray(bundle.sources))
-        return false;
-    for (const source of bundle.sources) {
-        if (!isPlainRecord(source))
-            return false;
-        const ref = source;
-        if (typeof ref.id !== "string")
-            return false;
-        if (typeof ref.kind !== "string" ||
-            !["workspace", "transcript", "automata", "web", "user", "tool"].includes(ref.kind)) {
-            return false;
-        }
-        if (typeof ref.trusted !== "boolean")
-            return false;
-        if (ref.title !== undefined && typeof ref.title !== "string")
-            return false;
-        if (ref.uri !== undefined && typeof ref.uri !== "string")
-            return false;
-        if (ref.excerpt !== undefined && typeof ref.excerpt !== "string")
-            return false;
-        if (ref.metadata !== undefined && !isJsonObject(ref.metadata))
-            return false;
+    try {
+        normalizeEvidenceBundleForStorage(value);
+        return true;
     }
-    if (!Array.isArray(bundle.findings))
+    catch {
         return false;
-    for (const finding of bundle.findings) {
-        if (!isPlainRecord(finding))
-            return false;
-        const f = finding;
-        if (typeof f.id !== "string")
-            return false;
-        if (typeof f.summary !== "string")
-            return false;
-        if (f.confidence !== undefined && (typeof f.confidence !== "number" || !Number.isFinite(f.confidence)))
-            return false;
-        if (!Array.isArray(f.evidenceIds) || !f.evidenceIds.every((id) => typeof id === "string"))
-            return false;
     }
-    return true;
 }
 //# sourceMappingURL=evidence-bundle.js.map

package/dist/core/research/evidence-bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence-bundle.js","sourceRoot":"","sources":["../../../src/core/research/evidence-bundle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,SAAS,cAAc,CAAC,KAAgB,EAAa;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,eAAe,CAAC,KAAiB,EAAc;IACvD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CACvG;AAED,SAAS,WAAW,CAAC,KAAc,EAAsB;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,YAAY,CAAC,KAAc,EAAuB;IAC1D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAAA,CAC/C;AAED,SAAS,gBAAgB,CAAC,MAAmB,EAAe;IAC3D,OAAO;QACN,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,OAAgB,EAAW;IAChD,OAAO;QACN,GAAG,OAAO;QACV,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;KACrC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,IAKpC,EAAkB;IAClB,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,GAAG;KACnB,CAAC;AAAA,CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAsB,EAAkB;IACrF,OAAO;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAC;AAAA,CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAA2B;IACzE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7C,IACC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EACjF,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/E,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACrG,OAAO,KAAK,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IACzG,CAAC;IAED,OAAO,IAAI,CAAC;AAAA,CACZ","sourcesContent":["import type { EvidenceBundle, EvidenceRef, Finding, JsonObject, JsonValue } from \"../autonomy/contracts.ts\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\n\nfunction cloneJsonValue(value: JsonValue): JsonValue {\n\tif (Array.isArray(value)) {\n\t\treturn value.map(cloneJsonValue);\n\t}\n\tif (value !== null && typeof value === \"object\") {\n\t\treturn Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));\n\t}\n\treturn value;\n}\n\nfunction cloneJsonObject(value: JsonObject): JsonObject {\n\treturn Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));\n}\n\nfunction isJsonValue(value: unknown): value is JsonValue {\n\tif (value === null || typeof value === \"string\" || typeof value === \"boolean\") {\n\t\treturn true;\n\t}\n\tif (typeof value === \"number\") {\n\t\treturn Number.isFinite(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.every(isJsonValue);\n\t}\n\tif (typeof value === \"object\") {\n\t\treturn isJsonObject(value);\n\t}\n\treturn false;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n\tif (!isPlainRecord(value)) {\n\t\treturn false;\n\t}\n\treturn Object.values(value).every(isJsonValue);\n}\n\nfunction cloneEvidenceRef(source: EvidenceRef): EvidenceRef {\n\treturn {\n\t\t...source,\n\t\tmetadata: source.metadata ? cloneJsonObject(source.metadata) : undefined,\n\t};\n}\n\nfunction cloneFinding(finding: Finding): Finding {\n\treturn {\n\t\t...finding,\n\t\tevidenceIds: [...finding.evidenceIds],\n\t};\n}\n\nexport function createEvidenceBundle(args: {\n\tquery: string;\n\tsources: readonly EvidenceRef[];\n\tfindings: readonly Finding[];\n\tnow?: string;\n}): EvidenceBundle {\n\treturn {\n\t\tquery: args.query,\n\t\tsources: args.sources.map(cloneEvidenceRef),\n\t\tfindings: args.findings.map(cloneFinding),\n\t\tcreatedAt: args.now,\n\t};\n}\n\nexport function cloneEvidenceBundleForStorage(bundle: EvidenceBundle): EvidenceBundle {\n\treturn {\n\t\tquery: bundle.query,\n\t\tsources: bundle.sources.map(cloneEvidenceRef),\n\t\tfindings: bundle.findings.map(cloneFinding),\n\t\tcreatedAt: bundle.createdAt,\n\t};\n}\n\nexport function isEvidenceBundle(value: unknown): value is EvidenceBundle {\n\tif (!isPlainRecord(value)) return false;\n\tconst bundle = value as Record<string, unknown>;\n\n\tif (typeof bundle.query !== \"string\") return false;\n\tif (bundle.createdAt !== undefined && typeof bundle.createdAt !== \"string\") return false;\n\n\tif (!Array.isArray(bundle.sources)) return false;\n\tfor (const source of bundle.sources) {\n\t\tif (!isPlainRecord(source)) return false;\n\t\tconst ref = source as Record<string, unknown>;\n\t\tif (typeof ref.id !== \"string\") return false;\n\t\tif (\n\t\t\ttypeof ref.kind !== \"string\" ||\n\t\t\t![\"workspace\", \"transcript\", \"automata\", \"web\", \"user\", \"tool\"].includes(ref.kind)\n\t\t) {\n\t\t\treturn false;\n\t\t}\n\t\tif (typeof ref.trusted !== \"boolean\") return false;\n\t\tif (ref.title !== undefined && typeof ref.title !== \"string\") return false;\n\t\tif (ref.uri !== undefined && typeof ref.uri !== \"string\") return false;\n\t\tif (ref.excerpt !== undefined && typeof ref.excerpt !== \"string\") return false;\n\t\tif (ref.metadata !== undefined && !isJsonObject(ref.metadata)) return false;\n\t}\n\n\tif (!Array.isArray(bundle.findings)) return false;\n\tfor (const finding of bundle.findings) {\n\t\tif (!isPlainRecord(finding)) return false;\n\t\tconst f = finding as Record<string, unknown>;\n\t\tif (typeof f.id !== \"string\") return false;\n\t\tif (typeof f.summary !== \"string\") return false;\n\t\tif (f.confidence !== undefined && (typeof f.confidence !== \"number\" || !Number.isFinite(f.confidence)))\n\t\t\treturn false;\n\t\tif (!Array.isArray(f.evidenceIds) || !f.evidenceIds.every((id) => typeof id === \"string\")) return false;\n\t}\n\n\treturn true;\n}\n"]}
+{"version":3,"file":"evidence-bundle.js","sourceRoot":"","sources":["../../../src/core/research/evidence-bundle.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,CAAC;AAExD,SAAS,eAAe,CAAC,OAAe,EAAS;IAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;AAAA,CACvD;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAA2B;IAC9E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,eAAe,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IACvF,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,eAAe,CAAC,GAAG,KAAK,IAAI,GAAG,2BAA2B,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB,EAAU;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,eAAe,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC7G,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,eAAe,CAAC,GAAG,KAAK,YAAY,YAAY,cAAc,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB,EAAsB;IACvG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAAA,CACzD;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa,EAAE,YAAoB,EAAsB;IAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,eAAe,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,eAAe,CAAC,GAAG,KAAK,YAAY,YAAY,WAAW,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa,EAAE,KAAa,EAAW;IACxF,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;QAAE,eAAe,CAAC,GAAG,KAAK,IAAI,KAAK,yBAAyB,CAAC,CAAC;IACzG,OAAO,UAAU,CAAC,KAAK,CAAC;AAAA,CACxB;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAE,KAAa,EAAa;IACpF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;YACvD,eAAe,CAAC,GAAG,KAAK,YAAY,kCAAkC,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,eAAe,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,IAAI,2BAA2B,EAAE,CAAC;QAC1C,eAAe,CAAC,GAAG,KAAK,2BAA2B,2BAA2B,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,iCAAiC,EAAE,CAAC;YACtD,eAAe,CAAC,GAAG,KAAK,YAAY,iCAAiC,WAAW,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;QACpD,eAAe,CAAC,GAAG,KAAK,YAAY,6BAA6B,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YAClD,eAAe,CAAC,GAAG,KAAK,6BAA6B,+BAA+B,cAAc,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAc;IACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACxF,eAAe,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AAAA,CAClB;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAAc,EAAkB;IACjF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;IAC7G,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IAC1F,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IACC,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EACnF,CAAC;YACF,eAAe,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,UAAgC,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,eAAe,CAAC,kBAAkB,KAAK,4BAA4B,CAAC,CAAC;QAC9G,OAAO,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,kBAAkB,KAAK,MAAM,EAAE,4BAA4B,CAAC;YACjG,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,KAAK,SAAS,EAAE,uBAAuB,CAAC,EAAE;gBAC3G,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,EAAE,uBAAuB,CAAC,EAAE;gBACrG,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;gBAC/B,CAAC,CAAC;oBACA,OAAO,EAAE,qBAAqB,CAC7B,MAAM,CAAC,OAAO,EACd,kBAAkB,KAAK,WAAW,EAClC,0BAA0B,CAC1B;iBACD;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,KAAK,YAAY,CAAC,EAAE;gBACvF,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,aAAa,CAC5B,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,iBAAiB,CAAC,EACtD,mBAAmB,KAAK,GAAG,CAC3B,CAAC;QACF,MAAM,gBAAgB,GAAG,YAAY,CACpC,OAAO,CAAC,WAAW,EACnB,mBAAmB,KAAK,eAAe,EACvC,4BAA4B,CAC5B,CAAC;QACF,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,IAAI,aAAa,GAAG,CAAC,EAAE,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC;YACtF,WAAW,CAAC,IAAI,CACf,qBAAqB,CACpB,aAAa,CAAC,gBAAgB,EAAE,aAAa,EAAE,mBAAmB,KAAK,eAAe,CAAC,EACvF,mBAAmB,KAAK,iBAAiB,aAAa,GAAG,EACzD,4BAA4B,CAC5B,CACD,CAAC;QACH,CAAC;QACD,IACC,OAAO,CAAC,UAAU,KAAK,SAAS;YAChC,CAAC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAC/E,CAAC;YACF,eAAe,CAAC,mBAAmB,KAAK,8BAA8B,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACb,EAAE,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,KAAK,MAAM,EAAE,6BAA6B,CAAC;YACpG,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,KAAK,WAAW,EAAE,uBAAuB,CAAC;YAC7G,WAAW;YACX,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAAA,CACvF;AAED,SAAS,cAAc,CAAC,KAAgB,EAAa;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,eAAe,CAAC,KAAiB,EAAc;IACvD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CACvG;AAED,SAAS,gBAAgB,CAAC,MAAmB,EAAe;IAC3D,OAAO;QACN,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,OAAgB,EAAW;IAChD,OAAO;QACN,GAAG,OAAO;QACV,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;KACrC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,IAKpC,EAAkB;IAClB,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,IAAI,CAAC,GAAG;KACnB,CAAC;AAAA,CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAsB,EAAkB;IACrF,OAAO,iCAAiC,CAAC,MAAM,CAAC,CAAC;AAAA,CACjD;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAA2B;IACzE,IAAI,CAAC;QACJ,iCAAiC,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD","sourcesContent":["import type {\n\tEvidenceBundle,\n\tEvidenceRef,\n\tEvidenceSourceKind,\n\tFinding,\n\tJsonObject,\n\tJsonValue,\n} from \"../autonomy/contracts.ts\";\nimport { isPlainRecord } from \"../util/value-guards.ts\";\n\n/** Bounds every durable evidence bundle, including worker-authored evidence. */\nexport const MAX_EVIDENCE_QUERY_CHARS = 4_096;\nexport const MAX_EVIDENCE_CREATED_AT_CHARS = 128;\nexport const MAX_EVIDENCE_SOURCES = 64;\nexport const MAX_EVIDENCE_FINDINGS = 64;\nexport const MAX_EVIDENCE_SOURCE_ID_CHARS = 256;\nexport const MAX_EVIDENCE_FINDING_ID_CHARS = 256;\nexport const MAX_EVIDENCE_TEXT_CHARS = 8_000;\nexport const MAX_EVIDENCE_EXCERPT_CHARS = 8_000;\nexport const MAX_EVIDENCE_IDS_PER_FINDING = 64;\nexport const MAX_EVIDENCE_METADATA_DEPTH = 8;\nexport const MAX_EVIDENCE_METADATA_ENTRIES = 64;\nexport const MAX_EVIDENCE_METADATA_ARRAY_ITEMS = 64;\nexport const MAX_EVIDENCE_METADATA_KEY_CHARS = 256;\nexport const MAX_EVIDENCE_METADATA_STRING_CHARS = 4_096;\n\nfunction invalidEvidence(message: string): never {\n\tthrow new Error(`Invalid evidence bundle: ${message}`);\n}\n\n/**\n * Reads only own data properties. This is deliberately not Object.entries()/spread: snapshots\n * and external lane reports are untrusted, and a getter must never execute while validating them.\n */\nfunction ownDataRecord(value: unknown, label: string): Record<string, unknown> {\n\tif (!isPlainRecord(value)) invalidEvidence(`${label} must be a plain object.`);\n\tconst descriptors = Object.getOwnPropertyDescriptors(value);\n\tconst record: Record<string, unknown> = Object.create(null) as Record<string, unknown>;\n\tfor (const [key, descriptor] of Object.entries(descriptors)) {\n\t\tif (!(\"value\" in descriptor)) invalidEvidence(`${label}.${key} must not be an accessor.`);\n\t\trecord[key] = descriptor.value;\n\t}\n\treturn record;\n}\n\nfunction requiredBoundedString(value: unknown, label: string, maximumChars: number): string {\n\tif (typeof value !== \"string\" || value.length === 0) invalidEvidence(`${label} must be a non-empty string.`);\n\tif (value.length > maximumChars) invalidEvidence(`${label} exceeds ${maximumChars} characters.`);\n\treturn value;\n}\n\nfunction optionalBoundedString(value: unknown, label: string, maximumChars: number): string | undefined {\n\tif (value === undefined) return undefined;\n\treturn requiredBoundedString(value, label, maximumChars);\n}\n\nfunction boundedArray(value: unknown, label: string, maximumItems: number): readonly unknown[] {\n\tif (!Array.isArray(value)) invalidEvidence(`${label} must be an array.`);\n\tif (value.length > maximumItems) invalidEvidence(`${label} exceeds ${maximumItems} entries.`);\n\treturn value;\n}\n\nfunction ownArrayValue(array: readonly unknown[], index: number, label: string): unknown {\n\tconst descriptor = Object.getOwnPropertyDescriptor(array, String(index));\n\tif (!descriptor || !(\"value\" in descriptor)) invalidEvidence(`${label}[${index}] must be a data value.`);\n\treturn descriptor.value;\n}\n\nfunction normalizeJsonValue(value: unknown, label: string, depth: number): JsonValue {\n\tif (value === null || typeof value === \"boolean\") return value;\n\tif (typeof value === \"string\") {\n\t\tif (value.length > MAX_EVIDENCE_METADATA_STRING_CHARS) {\n\t\t\tinvalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_STRING_CHARS} characters.`);\n\t\t}\n\t\treturn value;\n\t}\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) invalidEvidence(`${label} must be finite.`);\n\t\treturn value;\n\t}\n\tif (depth >= MAX_EVIDENCE_METADATA_DEPTH) {\n\t\tinvalidEvidence(`${label} exceeds metadata depth ${MAX_EVIDENCE_METADATA_DEPTH}.`);\n\t}\n\tif (Array.isArray(value)) {\n\t\tif (value.length > MAX_EVIDENCE_METADATA_ARRAY_ITEMS) {\n\t\t\tinvalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_ARRAY_ITEMS} entries.`);\n\t\t}\n\t\tconst copied: JsonValue[] = [];\n\t\tfor (let index = 0; index < value.length; index++) {\n\t\t\tcopied.push(normalizeJsonValue(ownArrayValue(value, index, label), `${label}[${index}]`, depth + 1));\n\t\t}\n\t\treturn copied;\n\t}\n\tconst record = ownDataRecord(value, label);\n\tconst entries = Object.entries(record);\n\tif (entries.length > MAX_EVIDENCE_METADATA_ENTRIES) {\n\t\tinvalidEvidence(`${label} exceeds ${MAX_EVIDENCE_METADATA_ENTRIES} entries.`);\n\t}\n\tconst copied: JsonObject = {};\n\tfor (const [key, nested] of entries) {\n\t\tif (key.length > MAX_EVIDENCE_METADATA_KEY_CHARS) {\n\t\t\tinvalidEvidence(`${label} contains a key exceeding ${MAX_EVIDENCE_METADATA_KEY_CHARS} characters.`);\n\t\t}\n\t\tcopied[key] = normalizeJsonValue(nested, `${label}.${key}`, depth + 1);\n\t}\n\treturn copied;\n}\n\nfunction normalizeMetadata(value: unknown, label: string): JsonObject {\n\tconst normalized = normalizeJsonValue(value, label, 0);\n\tif (Array.isArray(normalized) || normalized === null || typeof normalized !== \"object\") {\n\t\tinvalidEvidence(`${label} must be an object.`);\n\t}\n\treturn normalized;\n}\n\n/**\n * Validates and copies an evidence bundle without invoking accessors or preserving unbounded\n * foreign object graphs. This is the sole boundary used for durable worker-claim evidence.\n */\nexport function normalizeEvidenceBundleForStorage(value: unknown): EvidenceBundle {\n\tconst bundle = ownDataRecord(value, \"bundle\");\n\tconst query = requiredBoundedString(bundle.query, \"bundle.query\", MAX_EVIDENCE_QUERY_CHARS);\n\tconst createdAt = optionalBoundedString(bundle.createdAt, \"bundle.createdAt\", MAX_EVIDENCE_CREATED_AT_CHARS);\n\tconst sourceValues = boundedArray(bundle.sources, \"bundle.sources\", MAX_EVIDENCE_SOURCES);\n\tconst findingValues = boundedArray(bundle.findings, \"bundle.findings\", MAX_EVIDENCE_FINDINGS);\n\tconst sources: EvidenceRef[] = [];\n\tfor (let index = 0; index < sourceValues.length; index++) {\n\t\tconst source = ownDataRecord(ownArrayValue(sourceValues, index, \"bundle.sources\"), `bundle.sources[${index}]`);\n\t\tconst sourceKind = source.kind;\n\t\tif (\n\t\t\ttypeof sourceKind !== \"string\" ||\n\t\t\t![\"workspace\", \"transcript\", \"automata\", \"web\", \"user\", \"tool\"].includes(sourceKind)\n\t\t) {\n\t\t\tinvalidEvidence(`bundle.sources[${index}].kind is invalid.`);\n\t\t}\n\t\tconst kind = sourceKind as EvidenceSourceKind;\n\t\tif (typeof source.trusted !== \"boolean\") invalidEvidence(`bundle.sources[${index}].trusted must be boolean.`);\n\t\tsources.push({\n\t\t\tid: requiredBoundedString(source.id, `bundle.sources[${index}].id`, MAX_EVIDENCE_SOURCE_ID_CHARS),\n\t\t\tkind,\n\t\t\ttrusted: source.trusted,\n\t\t\t...(source.title !== undefined\n\t\t\t\t? { title: optionalBoundedString(source.title, `bundle.sources[${index}].title`, MAX_EVIDENCE_TEXT_CHARS) }\n\t\t\t\t: {}),\n\t\t\t...(source.uri !== undefined\n\t\t\t\t? { uri: optionalBoundedString(source.uri, `bundle.sources[${index}].uri`, MAX_EVIDENCE_TEXT_CHARS) }\n\t\t\t\t: {}),\n\t\t\t...(source.excerpt !== undefined\n\t\t\t\t? {\n\t\t\t\t\t\texcerpt: optionalBoundedString(\n\t\t\t\t\t\t\tsource.excerpt,\n\t\t\t\t\t\t\t`bundle.sources[${index}].excerpt`,\n\t\t\t\t\t\t\tMAX_EVIDENCE_EXCERPT_CHARS,\n\t\t\t\t\t\t),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\t...(source.metadata !== undefined\n\t\t\t\t? { metadata: normalizeMetadata(source.metadata, `bundle.sources[${index}].metadata`) }\n\t\t\t\t: {}),\n\t\t});\n\t}\n\tconst findings: Finding[] = [];\n\tfor (let index = 0; index < findingValues.length; index++) {\n\t\tconst finding = ownDataRecord(\n\t\t\townArrayValue(findingValues, index, \"bundle.findings\"),\n\t\t\t`bundle.findings[${index}]`,\n\t\t);\n\t\tconst evidenceIdValues = boundedArray(\n\t\t\tfinding.evidenceIds,\n\t\t\t`bundle.findings[${index}].evidenceIds`,\n\t\t\tMAX_EVIDENCE_IDS_PER_FINDING,\n\t\t);\n\t\tconst evidenceIds: string[] = [];\n\t\tfor (let evidenceIndex = 0; evidenceIndex < evidenceIdValues.length; evidenceIndex++) {\n\t\t\tevidenceIds.push(\n\t\t\t\trequiredBoundedString(\n\t\t\t\t\townArrayValue(evidenceIdValues, evidenceIndex, `bundle.findings[${index}].evidenceIds`),\n\t\t\t\t\t`bundle.findings[${index}].evidenceIds[${evidenceIndex}]`,\n\t\t\t\t\tMAX_EVIDENCE_SOURCE_ID_CHARS,\n\t\t\t\t),\n\t\t\t);\n\t\t}\n\t\tif (\n\t\t\tfinding.confidence !== undefined &&\n\t\t\t(typeof finding.confidence !== \"number\" || !Number.isFinite(finding.confidence))\n\t\t) {\n\t\t\tinvalidEvidence(`bundle.findings[${index}].confidence must be finite.`);\n\t\t}\n\t\tfindings.push({\n\t\t\tid: requiredBoundedString(finding.id, `bundle.findings[${index}].id`, MAX_EVIDENCE_FINDING_ID_CHARS),\n\t\t\tsummary: requiredBoundedString(finding.summary, `bundle.findings[${index}].summary`, MAX_EVIDENCE_TEXT_CHARS),\n\t\t\tevidenceIds,\n\t\t\t...(finding.confidence !== undefined ? { confidence: finding.confidence } : {}),\n\t\t});\n\t}\n\treturn { query, sources, findings, ...(createdAt !== undefined ? { createdAt } : {}) };\n}\n\nfunction cloneJsonValue(value: JsonValue): JsonValue {\n\tif (Array.isArray(value)) {\n\t\treturn value.map(cloneJsonValue);\n\t}\n\tif (value !== null && typeof value === \"object\") {\n\t\treturn Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));\n\t}\n\treturn value;\n}\n\nfunction cloneJsonObject(value: JsonObject): JsonObject {\n\treturn Object.fromEntries(Object.entries(value).map(([key, nested]) => [key, cloneJsonValue(nested)]));\n}\n\nfunction cloneEvidenceRef(source: EvidenceRef): EvidenceRef {\n\treturn {\n\t\t...source,\n\t\tmetadata: source.metadata ? cloneJsonObject(source.metadata) : undefined,\n\t};\n}\n\nfunction cloneFinding(finding: Finding): Finding {\n\treturn {\n\t\t...finding,\n\t\tevidenceIds: [...finding.evidenceIds],\n\t};\n}\n\nexport function createEvidenceBundle(args: {\n\tquery: string;\n\tsources: readonly EvidenceRef[];\n\tfindings: readonly Finding[];\n\tnow?: string;\n}): EvidenceBundle {\n\treturn {\n\t\tquery: args.query,\n\t\tsources: args.sources.map(cloneEvidenceRef),\n\t\tfindings: args.findings.map(cloneFinding),\n\t\tcreatedAt: args.now,\n\t};\n}\n\nexport function cloneEvidenceBundleForStorage(bundle: EvidenceBundle): EvidenceBundle {\n\treturn normalizeEvidenceBundleForStorage(bundle);\n}\n\nexport function isEvidenceBundle(value: unknown): value is EvidenceBundle {\n\ttry {\n\t\tnormalizeEvidenceBundleForStorage(value);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n"]}