@enbox/dwn-sdk-js 0.1.1 → 0.1.2

package/dist/esm/tests/fuzz/encryption.fuzz.spec.js

@@ -0,0 +1,132 @@
+import { describe, expect, it } from 'bun:test';
+import fc from 'fast-check';
+import { ContentEncryptionAlgorithm, Encryption } from '../../src/utils/encryption.js';
+const numRuns = Number(process.env.FAST_CHECK_NUM_RUNS) || 200;
+/** Generates a random 32-byte key (256-bit) for AES-256-GCM or XChaCha20. */
+function aes256Key() {
+    return fc.uint8Array({ minLength: 32, maxLength: 32 });
+}
+/** Generates a random 12-byte IV for AES-256-GCM. */
+function aesGcmIv() {
+    return fc.uint8Array({ minLength: 12, maxLength: 12 });
+}
+/** Generates a random 24-byte nonce for XChaCha20-Poly1305. */
+function xchachaIv() {
+    return fc.uint8Array({ minLength: 24, maxLength: 24 });
+}
+describe('Encryption — fuzz', () => {
+    describe('AES-256-GCM — encrypt/decrypt roundtrip', () => {
+        it('should roundtrip arbitrary plaintext through AES-256-GCM', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aesGcmIv(), fc.uint8Array({ minLength: 0, maxLength: 1024 }), async (key, iv, plaintext) => {
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, plaintext);
+                const decrypted = await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, ciphertext, tag);
+                expect(decrypted).toEqual(plaintext);
+            }), { numRuns });
+        });
+    });
+    describe('XChaCha20-Poly1305 — encrypt/decrypt roundtrip', () => {
+        it('should roundtrip arbitrary plaintext through XChaCha20-Poly1305', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), xchachaIv(), fc.uint8Array({ minLength: 0, maxLength: 1024 }), async (key, iv, plaintext) => {
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.XC20P, key, iv, plaintext);
+                const decrypted = await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.XC20P, key, iv, ciphertext, tag);
+                expect(decrypted).toEqual(plaintext);
+            }), { numRuns });
+        });
+    });
+    describe('AES-256-GCM — authenticated output differs from plaintext', () => {
+        it('should produce authenticated output (ciphertext + tag) that differs from the plaintext', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aesGcmIv(), fc.uint8Array({ minLength: 1, maxLength: 512 }), async (key, iv, plaintext) => {
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, plaintext);
+                // The full AEAD output is ciphertext || tag.  The 16-byte tag
+                // guarantees the output is always longer than the input, so a
+                // byte-level match is impossible — unlike comparing raw
+                // ciphertext bytes alone, which can coincide for short inputs.
+                const authenticatedOutput = new Uint8Array([...ciphertext, ...tag]);
+                const areEqual = plaintext.length === authenticatedOutput.length &&
+                    plaintext.every((byte, i) => byte === authenticatedOutput[i]);
+                expect(areEqual).toBe(false);
+            }), { numRuns });
+        });
+    });
+    describe('AES-256-GCM — wrong key fails decryption', () => {
+        it('should fail to decrypt with a different key', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aes256Key(), aesGcmIv(), fc.uint8Array({ minLength: 1, maxLength: 256 }), async (key1, key2, iv, plaintext) => {
+                // Skip if keys are identical
+                if (key1.every((byte, i) => byte === key2[i])) {
+                    return;
+                }
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key1, iv, plaintext);
+                try {
+                    await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.A256GCM, key2, iv, ciphertext, tag);
+                    // If decryption somehow succeeds, the result should differ from plaintext
+                    // (astronomically unlikely with AEAD)
+                }
+                catch {
+                    // Expected: AEAD authentication should fail with wrong key
+                }
+            }), { numRuns });
+        });
+    });
+    describe('XChaCha20-Poly1305 — wrong key fails decryption', () => {
+        it('should fail to decrypt with a different key', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aes256Key(), xchachaIv(), fc.uint8Array({ minLength: 1, maxLength: 256 }), async (key1, key2, iv, plaintext) => {
+                // Skip if keys are identical
+                if (key1.every((byte, i) => byte === key2[i])) {
+                    return;
+                }
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.XC20P, key1, iv, plaintext);
+                try {
+                    await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.XC20P, key2, iv, ciphertext, tag);
+                }
+                catch {
+                    // Expected: AEAD authentication should fail with wrong key
+                }
+            }), { numRuns });
+        });
+    });
+    describe('AES-256-GCM — tampered ciphertext fails decryption', () => {
+        it('should fail to decrypt when ciphertext is modified', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aesGcmIv(), fc.uint8Array({ minLength: 1, maxLength: 256 }), fc.nat(), async (key, iv, plaintext, flipIndex) => {
+                const { ciphertext, tag } = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, plaintext);
+                if (ciphertext.length === 0) {
+                    return; // skip empty ciphertext
+                }
+                // Flip a bit in the ciphertext
+                const tampered = new Uint8Array(ciphertext);
+                const idx = flipIndex % tampered.length;
+                tampered[idx] ^= 0xFF;
+                try {
+                    await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, tampered, tag);
+                    // If decryption somehow succeeds, data integrity has been compromised
+                    // (astronomically unlikely with AEAD)
+                }
+                catch {
+                    // Expected: AEAD authentication should fail on tampered ciphertext
+                }
+            }), { numRuns });
+        });
+    });
+    describe('encrypt — deterministic output for same inputs', () => {
+        it('should produce the same ciphertext and tag for the same key, IV, and plaintext', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), aesGcmIv(), fc.uint8Array({ minLength: 0, maxLength: 256 }), async (key, iv, plaintext) => {
+                const result1 = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, plaintext);
+                const result2 = await Encryption.aeadEncrypt(ContentEncryptionAlgorithm.A256GCM, key, iv, plaintext);
+                expect(result1.ciphertext).toEqual(result2.ciphertext);
+                expect(result1.tag).toEqual(result2.tag);
+            }), { numRuns });
+        });
+    });
+    describe('aeadDecrypt — crash resistance with malformed inputs', () => {
+        it('should throw (not crash) on wrong-length IVs for AES-GCM', async () => {
+            await fc.assert(fc.asyncProperty(aes256Key(), fc.uint8Array({ minLength: 0, maxLength: 50 }).filter((iv) => iv.length !== 12), fc.uint8Array({ minLength: 1, maxLength: 64 }), fc.uint8Array({ minLength: 16, maxLength: 16 }), async (key, badIv, ciphertext, tag) => {
+                try {
+                    await Encryption.aeadDecrypt(ContentEncryptionAlgorithm.A256GCM, key, badIv, ciphertext, tag);
+                }
+                catch {
+                    // Expected: wrong IV length should throw
+                }
+            }), { numRuns: Math.min(numRuns, 50) });
+        });
+    });
+});
+//# sourceMappingURL=encryption.fuzz.spec.js.map

package/dist/esm/tests/fuzz/encryption.fuzz.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.fuzz.spec.js","sourceRoot":"","sources":["../../../../tests/fuzz/encryption.fuzz.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEvF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AAE/D,6EAA6E;AAC7E,SAAS,SAAS;IAChB,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,qDAAqD;AACrD,SAAS,QAAQ;IACf,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,+DAA+D;AAC/D,SAAS,SAAS;IAChB,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAEjC,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,QAAQ,EAAE,EACV,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAChD,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACvD,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,WAAW,CAC5C,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAC7D,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC9D,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,SAAS,EAAE,EACX,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAChD,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACrD,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,WAAW,CAC5C,0BAA0B,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAC3D,CAAC;gBACF,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACzE,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;YACtG,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,QAAQ,EAAE,EACV,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/C,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACvD,CAAC;gBACF,8DAA8D;gBAC9D,8DAA8D;gBAC9D,wDAAwD;gBACxD,+DAA+D;gBAC/D,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;gBACpE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM;oBAC9D,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,SAAS,EAAE,EACX,QAAQ,EAAE,EACV,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAClC,6BAA6B;gBAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,CACxD,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,WAAW,CAC1B,0BAA0B,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAC9D,CAAC;oBACF,0EAA0E;oBAC1E,sCAAsC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,SAAS,EAAE,EACX,SAAS,EAAE,EACX,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAClC,6BAA6B;gBAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,CACtD,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,WAAW,CAC1B,0BAA0B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAC5D,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,QAAQ,EAAE,EACV,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/C,EAAE,CAAC,GAAG,EAAE,EACR,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;gBACtC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,WAAW,CACtD,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACvD,CAAC;gBAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,CAAC,wBAAwB;gBAClC,CAAC;gBAED,+BAA+B;gBAC/B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACxC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;gBAEtB,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,WAAW,CAC1B,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAC3D,CAAC;oBACF,sEAAsE;oBACtE,sCAAsC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;gBACrE,CAAC;YACH,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC9D,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAC9F,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,QAAQ,EAAE,EACV,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAC/C,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC3B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAC1C,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACvD,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,WAAW,CAC1C,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CACvD,CAAC;gBACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;QACpE,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,SAAS,EAAE,EACX,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,EAC/E,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC9C,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC/C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;gBACpC,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,WAAW,CAC1B,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAChE,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC,CACF,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CACnC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/fuzz/filter.fuzz.spec.js

@@ -0,0 +1,149 @@
+import { describe, expect, it } from 'bun:test';
+import fc from 'fast-check';
+import { equalFilter, filter, keyValues, oneOfFilter, rangeFilter } from './arbitraries/filter.arbitrary.js';
+import { FilterSelector, FilterUtility } from '../../src/utils/filter.js';
+const numRuns = Number(process.env.FAST_CHECK_NUM_RUNS) || 200;
+describe('FilterUtility — fuzz', () => {
+    describe('matchFilter — empty filter matches everything', () => {
+        it('should return true for any keyValues when filter is empty', () => {
+            fc.assert(fc.property(keyValues(), (kv) => {
+                const result = FilterUtility.matchFilter(kv, {});
+                expect(result).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('matchFilter — crash resistance', () => {
+        it('should not crash on arbitrary filter and keyValues combinations', () => {
+            fc.assert(fc.property(keyValues(), filter(), (kv, f) => {
+                // Should return a boolean without crashing
+                const result = FilterUtility.matchFilter(kv, f);
+                expect(typeof result).toBe('boolean');
+            }), { numRuns });
+        });
+    });
+    describe('matchAnyFilter — empty array matches everything', () => {
+        it('should return true when the filter array is empty', () => {
+            fc.assert(fc.property(keyValues(), (kv) => {
+                const result = FilterUtility.matchAnyFilter(kv, []);
+                expect(result).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('matchFilter — equal filter consistency', () => {
+        it('should match when the indexed value equals the filter value', () => {
+            fc.assert(fc.property(fc.string({ minLength: 1, maxLength: 10 }), equalFilter(), (key, value) => {
+                const kv = { [key]: value };
+                const f = { [key]: value };
+                expect(FilterUtility.matchFilter(kv, f)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('matchFilter — oneOf filter contains value', () => {
+        it('should match when the indexed value is in the OneOfFilter array', () => {
+            fc.assert(fc.property(fc.string({ minLength: 1, maxLength: 10 }), oneOfFilter(), (key, values) => {
+                // Use the first value from the OneOf array as the indexed value
+                const indexValue = values[0];
+                const kv = { [key]: indexValue };
+                const f = { [key]: values };
+                expect(FilterUtility.matchFilter(kv, f)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('matchFilter — range filter within bounds', () => {
+        it('should match when a numeric value falls within the range', () => {
+            fc.assert(fc.property(fc.string({ minLength: 1, maxLength: 10 }), fc.integer({ min: -500, max: 500 }), (key, value) => {
+                // Create a range that definitely includes the value
+                const f = { [key]: { gte: value - 1, lt: value + 2 } };
+                const kv = { [key]: value };
+                expect(FilterUtility.matchFilter(kv, f)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('matchFilter — missing key returns false', () => {
+        it('should return false when the filter references a key not in keyValues', () => {
+            fc.assert(fc.property(fc.string({ minLength: 1, maxLength: 10 }), equalFilter(), (key, value) => {
+                // Empty keyValues, so any filter property should fail
+                const kv = {};
+                const f = { [key]: value };
+                expect(FilterUtility.matchFilter(kv, f)).toBe(false);
+            }), { numRuns });
+        });
+    });
+    describe('constructPrefixFilterAsRangeFilter — prefix match property', () => {
+        it('should match strings that start with the prefix', () => {
+            fc.assert(fc.property(fc.string({ minLength: 1, maxLength: 20 }), fc.string({ minLength: 0, maxLength: 20 }), (prefix, suffix) => {
+                const rangeFilterResult = FilterUtility.constructPrefixFilterAsRangeFilter(prefix);
+                const value = prefix + suffix;
+                // The value should be >= prefix and < prefix + \uffff
+                expect(value >= rangeFilterResult.gte).toBe(true);
+                expect(value < rangeFilterResult.lt).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('isEqualFilter / isRangeFilter / isOneOfFilter — mutual exclusivity', () => {
+        it('should classify each filter value into exactly one category', () => {
+            fc.assert(fc.property(fc.oneof(equalFilter(), rangeFilter(), oneOfFilter()), (filterValue) => {
+                const isEqual = FilterUtility.isEqualFilter(filterValue);
+                const isRange = FilterUtility.isRangeFilter(filterValue);
+                const isOneOf = FilterUtility.isOneOfFilter(filterValue);
+                // Exactly one should be true
+                const trueCount = [isEqual, isRange, isOneOf].filter(Boolean).length;
+                expect(trueCount).toBe(1);
+            }), { numRuns });
+        });
+    });
+    describe('convertRangeCriterion — consistency', () => {
+        it('should produce a valid RangeFilter or undefined for any input', () => {
+            fc.assert(fc.property(fc.record({
+                from: fc.option(fc.string({ minLength: 1, maxLength: 30 }), { nil: undefined }),
+                to: fc.option(fc.string({ minLength: 1, maxLength: 30 }), { nil: undefined }),
+            }), (criterion) => {
+                const result = FilterUtility.convertRangeCriterion(criterion);
+                if (criterion.from === undefined && criterion.to === undefined) {
+                    expect(result).toBeUndefined();
+                }
+                else {
+                    expect(result).toBeDefined();
+                    if (criterion.from !== undefined) {
+                        expect(result.gte).toBe(criterion.from);
+                    }
+                    if (criterion.to !== undefined) {
+                        expect(result.lt).toBe(criterion.to);
+                    }
+                }
+            }), { numRuns });
+        });
+    });
+});
+describe('FilterSelector — fuzz', () => {
+    describe('reduceFilter — returns a subset', () => {
+        it('should return a filter with at most 1 property', () => {
+            fc.assert(fc.property(filter(), (f) => {
+                const reduced = FilterSelector.reduceFilter(f);
+                const reducedKeys = Object.keys(reduced);
+                // If input had 0 or 1 keys, reduced should be the same
+                const inputKeys = Object.keys(f);
+                if (inputKeys.length <= 1) {
+                    expect(reduced).toEqual(f);
+                }
+                else {
+                    // Otherwise, reduced should have exactly 1 key
+                    expect(reducedKeys.length).toBe(1);
+                }
+            }), { numRuns });
+        });
+    });
+    describe('reduceFilter — reduced key is from original filter', () => {
+        it('should select a key that exists in the original filter', () => {
+            fc.assert(fc.property(filter(), (f) => {
+                const reduced = FilterSelector.reduceFilter(f);
+                const reducedKeys = Object.keys(reduced);
+                const originalKeys = Object.keys(f);
+                for (const key of reducedKeys) {
+                    expect(originalKeys).toContain(key);
+                }
+            }), { numRuns });
+        });
+    });
+});
+//# sourceMappingURL=filter.fuzz.spec.js.map

package/dist/esm/tests/fuzz/filter.fuzz.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.fuzz.spec.js","sourceRoot":"","sources":["../../../../tests/fuzz/filter.fuzz.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAC7G,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AAE/D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAEpC,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;QAC7D,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;gBAC3C,2CAA2C;gBAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACtD,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,WAAW,EAAE,EACb,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACb,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAA+C,CAAC;gBACzE,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACzD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,WAAW,EAAE,EACb,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,gEAAgE;gBAChE,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAA+C,CAAC;gBAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC5B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACnC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACb,oDAAoD;gBACpD,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;gBACvD,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC5B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,WAAW,EAAE,EACb,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACb,sDAAsD;gBACtD,MAAM,EAAE,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAC1E,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACjB,MAAM,iBAAiB,GAAG,aAAa,CAAC,kCAAkC,CAAC,MAAM,CAAC,CAAC;gBACnF,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;gBAE9B,sDAAsD;gBACtD,MAAM,CAAC,KAAK,IAAI,iBAAiB,CAAC,GAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,CAAC,KAAK,GAAG,iBAAiB,CAAC,EAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAClF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,EACrD,CAAC,WAAW,EAAE,EAAE;gBACd,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBAEzD,6BAA6B;gBAC7B,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;gBACrE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,MAAM,CAAC;gBACR,IAAI,EAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;gBAChF,EAAE,EAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aACjF,CAAC,EACF,CAAC,SAAS,EAAE,EAAE;gBACZ,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;oBAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC7B,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACjC,MAAM,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC3C,CAAC;oBACD,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,CAAC,MAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC;YACH,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IAErC,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAEzC,uDAAuD;gBACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjC,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,+CAA+C;oBAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAEpC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC9B,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/fuzz/get-rule-set-at-path.fuzz.spec.js

@@ -0,0 +1,82 @@
+import { describe, expect, it } from 'bun:test';
+import fc from 'fast-check';
+import { getRuleSetAtPath } from '../../src/utils/protocols.js';
+const numRuns = Number(process.env.FAST_CHECK_NUM_RUNS) || 100;
+describe('getRuleSetAtPath — fuzz', () => {
+    /**
+     * Arbitrary for a valid type name segment (no slashes, non-empty, no $ prefix).
+     * Deliberately includes Object.prototype names like "toString" and "valueOf"
+     * to verify that the function is immune to prototype pollution.
+     */
+    const arbTypeName = fc.string({ minLength: 1, maxLength: 10 })
+        .filter((s) => !s.includes('/') && !s.startsWith('$'));
+    describe('single-level path resolution', () => {
+        it('should return the rule set for a root-level type', () => {
+            fc.assert(fc.property(arbTypeName, (typeName) => {
+                const ruleSet = { $size: { min: 0, max: 100 } };
+                const structure = { [typeName]: ruleSet };
+                const result = getRuleSetAtPath(typeName, structure);
+                expect(result).toBe(ruleSet);
+            }), { numRuns });
+        });
+    });
+    describe('nested path resolution', () => {
+        it('should walk nested structure segments correctly', () => {
+            fc.assert(fc.property(fc.array(arbTypeName, { minLength: 2, maxLength: 4 })
+                .filter((segs) => new Set(segs).size === segs.length), // unique segments
+            (segments) => {
+                // Build a nested structure: segments[0] > segments[1] > ... > leaf
+                const leafRuleSet = { $role: true };
+                let current = { [segments[segments.length - 1]]: leafRuleSet };
+                for (let i = segments.length - 2; i >= 0; i--) {
+                    current = { [segments[i]]: current };
+                }
+                const protocolPath = segments.join('/');
+                const result = getRuleSetAtPath(protocolPath, current);
+                expect(result).toBe(leafRuleSet);
+            }), { numRuns });
+        });
+    });
+    describe('missing path returns undefined', () => {
+        it('should return undefined for a path that does not exist', () => {
+            fc.assert(fc.property(arbTypeName, arbTypeName.filter((s) => s !== 'existing'), (missingName, _otherName) => {
+                const structure = { existing: { $size: { min: 0 } } };
+                // Only if missingName !== 'existing' will this be undefined
+                if (missingName === 'existing') {
+                    return;
+                }
+                const result = getRuleSetAtPath(missingName, structure);
+                expect(result).toBeUndefined();
+            }), { numRuns });
+        });
+    });
+    describe('deep missing path returns undefined', () => {
+        it('should return undefined when an intermediate segment is missing', () => {
+            fc.assert(fc.property(arbTypeName, arbTypeName, arbTypeName, (seg1, seg2, missing) => {
+                // Only test when 'missing' differs from seg2 to guarantee the path doesn't exist
+                if (missing === seg2) {
+                    return;
+                }
+                const structure = {
+                    [seg1]: {
+                        [seg2]: { $role: true },
+                    },
+                };
+                const result = getRuleSetAtPath(`${seg1}/${missing}`, structure);
+                expect(result).toBeUndefined();
+            }), { numRuns });
+        });
+    });
+    describe('prototype pollution immunity', () => {
+        it('should return undefined for Object.prototype property names not in the structure', () => {
+            const prototypeNames = Object.getOwnPropertyNames(Object.prototype)
+                .filter((name) => /^[a-zA-Z]+$/.test(name)); // only names valid as protocolPath segments
+            const structure = { message: { $size: { min: 0 } } };
+            for (const name of prototypeNames) {
+                const result = getRuleSetAtPath(name, structure);
+                expect(result).toBeUndefined();
+            }
+        });
+    });
+});
+//# sourceMappingURL=get-rule-set-at-path.fuzz.spec.js.map

package/dist/esm/tests/fuzz/get-rule-set-at-path.fuzz.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-rule-set-at-path.fuzz.spec.js","sourceRoot":"","sources":["../../../../tests/fuzz/get-rule-set-at-path.fuzz.spec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AAE/D,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IAEvC;;;;OAIG;IACH,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAEzD,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACpC,MAAM,OAAO,GAAoB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;gBACjE,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACrD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;iBAClD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB;YAC3E,CAAC,QAAQ,EAAE,EAAE;gBACX,mEAAmE;gBACnE,MAAM,WAAW,GAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAErD,IAAI,OAAO,GAAuC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACnG,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,OAAqC,EAAE,CAAC;gBACrE,CAAC;gBAED,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,WAAW,EACX,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,EAC3C,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAqB,EAAE,CAAC;gBACzE,4DAA4D;gBAC5D,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACxD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;YACjC,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,WAAW,EACX,WAAW,EACX,WAAW,EACX,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBACtB,iFAAiF;gBACjF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,MAAM,SAAS,GAAG;oBAChB,CAAC,IAAI,CAAC,EAAE;wBACN,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAqB;qBACb;iBAChC,CAAC;gBACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;gBACjE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;YACjC,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;YAC1F,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC;iBAChE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,4CAA4C;YAE3F,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAqB,EAAE,CAAC;YAExE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/fuzz/hd-key.fuzz.spec.js

@@ -0,0 +1,77 @@
+import { describe, expect, it } from 'bun:test';
+import fc from 'fast-check';
+import { DwnErrorCode } from '../../src/core/dwn-error.js';
+import { Encoder } from '../../src/utils/encoder.js';
+import { HdKey } from '../../src/utils/hd-key.js';
+const numRuns = Number(process.env.FAST_CHECK_NUM_RUNS) || 100;
+describe('HdKey — fuzz', () => {
+    /**
+     * Generate a valid 32-byte key for use as base key material.
+     */
+    const arbPrivateKey = fc.uint8Array({ minLength: 32, maxLength: 32 });
+    /**
+     * A non-empty derivation path segment (no empty strings allowed).
+     */
+    const arbSegment = fc.string({ minLength: 1, maxLength: 20 });
+    /**
+     * A valid derivation path (1–5 non-empty segments).
+     */
+    const arbPath = fc.array(arbSegment, { minLength: 1, maxLength: 5 });
+    describe('derivePrivateKeyBytes — determinism', () => {
+        it('should produce identical output for identical inputs', async () => {
+            await fc.assert(fc.asyncProperty(arbPrivateKey, arbPath, async (key, path) => {
+                const result1 = await HdKey.derivePrivateKeyBytes(key, path);
+                const result2 = await HdKey.derivePrivateKeyBytes(key, path);
+                expect(Encoder.bytesToBase64Url(result1)).toBe(Encoder.bytesToBase64Url(result2));
+            }), { numRuns });
+        });
+    });
+    describe('derivePrivateKeyBytes — output size', () => {
+        it('should always produce a 32-byte derived key', async () => {
+            await fc.assert(fc.asyncProperty(arbPrivateKey, arbPath, async (key, path) => {
+                const result = await HdKey.derivePrivateKeyBytes(key, path);
+                expect(result.byteLength).toBe(32);
+            }), { numRuns });
+        });
+    });
+    describe('derivePrivateKeyBytes — path order sensitivity', () => {
+        it('should produce different keys for reversed non-palindrome paths', async () => {
+            await fc.assert(fc.asyncProperty(arbPrivateKey, fc.array(arbSegment, { minLength: 2, maxLength: 5 }).filter((segs) => {
+                // ensure path is NOT a palindrome so reversing changes it
+                const reversed = [...segs].reverse();
+                return segs.some((s, i) => s !== reversed[i]);
+            }), async (key, path) => {
+                const forward = await HdKey.derivePrivateKeyBytes(key, path);
+                const reversed = await HdKey.derivePrivateKeyBytes(key, [...path].reverse());
+                // different path order should produce different key (with overwhelming probability)
+                const forwardB64 = Encoder.bytesToBase64Url(forward);
+                const reversedB64 = Encoder.bytesToBase64Url(reversed);
+                expect(forwardB64).not.toBe(reversedB64);
+            }), { numRuns });
+        });
+    });
+    describe('derivePrivateKeyBytes — incremental derivation equivalence', () => {
+        it('should produce the same key whether derived all at once or incrementally', async () => {
+            await fc.assert(fc.asyncProperty(arbPrivateKey, fc.array(arbSegment, { minLength: 2, maxLength: 5 }), fc.integer({ min: 1 }).chain((splitCandidate) => fc.constant(splitCandidate)), async (key, path, splitCandidate) => {
+                // Split the path at an arbitrary point
+                const splitIndex = (splitCandidate % (path.length - 1)) + 1;
+                const prefix = path.slice(0, splitIndex);
+                const suffix = path.slice(splitIndex);
+                // Derive all at once
+                const allAtOnce = await HdKey.derivePrivateKeyBytes(key, path);
+                // Derive incrementally: first prefix, then suffix from intermediate key
+                const intermediate = await HdKey.derivePrivateKeyBytes(key, prefix);
+                const incremental = await HdKey.derivePrivateKeyBytes(intermediate, suffix);
+                expect(Encoder.bytesToBase64Url(allAtOnce)).toBe(Encoder.bytesToBase64Url(incremental));
+            }), { numRuns });
+        });
+    });
+    describe('derivePrivateKeyBytes — empty segment rejection', () => {
+        it('should throw HdKeyDerivationPathInvalid when any segment is empty', async () => {
+            await fc.assert(fc.asyncProperty(arbPrivateKey, fc.array(fc.string({ maxLength: 10 }), { minLength: 1, maxLength: 5 }).filter((segs) => segs.some((s) => s === '')), async (key, pathWithEmpty) => {
+                await expect(HdKey.derivePrivateKeyBytes(key, pathWithEmpty)).rejects.toThrow(DwnErrorCode.HdKeyDerivationPathInvalid);
+            }), { numRuns });
+        });
+    });
+});
+//# sourceMappingURL=hd-key.fuzz.spec.js.map

package/dist/esm/tests/fuzz/hd-key.fuzz.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd-key.fuzz.spec.js","sourceRoot":"","sources":["../../../../tests/fuzz/hd-key.fuzz.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAElD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AAE/D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAE5B;;OAEG;IACH,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEtE;;OAEG;IACH,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAE9D;;OAEG;IACH,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAErE,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC3D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7D,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;YACpF,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC5D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC9D,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,aAAa,EACb,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACnE,0DAA0D;gBAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,EACF,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,oFAAoF;gBACpF,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACvD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3C,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAC1E,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,aAAa,EACb,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EACpD,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE,CAC9C,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC5B,EACD,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;gBAClC,uCAAuC;gBACvC,MAAM,UAAU,GAAG,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAEtC,qBAAqB;gBACrB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAE/D,wEAAwE;gBACxE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACpE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAE5E,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1F,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC/D,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CACd,aAAa,EACb,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAC3B,EACD,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;gBAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC3E,YAAY,CAAC,0BAA0B,CACxC,CAAC;YACJ,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/tests/fuzz/immutable-properties.fuzz.spec.js

@@ -0,0 +1,86 @@
+import { describe, expect, it } from 'bun:test';
+import fc from 'fast-check';
+import { DwnErrorCode } from '../../src/core/dwn-error.js';
+import { verifyEqualityOfImmutableProperties } from '../../src/interfaces/records-write-query.js';
+const numRuns = Number(process.env.FAST_CHECK_NUM_RUNS) || 100;
+/** The properties that verifyEqualityOfImmutableProperties treats as mutable. */
+const mutableProps = ['dataCid', 'dataSize', 'dataFormat', 'datePublished', 'published', 'messageTimestamp', 'tags'];
+/** Generates a minimal RecordsWrite descriptor with all immutable and mutable fields. */
+function recordsWriteDescriptor() {
+    return fc.record({
+        // Immutable fields
+        interface: fc.constant('Records'),
+        method: fc.constant('Write'),
+        protocol: fc.string({ minLength: 5, maxLength: 30 }),
+        protocolPath: fc.string({ minLength: 3, maxLength: 20 }),
+        schema: fc.string({ minLength: 5, maxLength: 30 }),
+        dateCreated: fc.constant('2024-01-01T00:00:00.000000Z'),
+        // Mutable fields
+        dataCid: fc.string({ minLength: 10, maxLength: 40 }),
+        dataSize: fc.integer({ min: 0, max: 100000 }),
+        dataFormat: fc.string({ minLength: 3, maxLength: 20 }),
+        messageTimestamp: fc.constant('2024-06-01T00:00:00.000000Z'),
+    });
+}
+/** Wraps a descriptor in a minimal RecordsWriteMessage shape. */
+function wrapMessage(descriptor) {
+    return { descriptor };
+}
+describe('verifyEqualityOfImmutableProperties — fuzz', () => {
+    describe('reflexivity', () => {
+        it('should never throw when comparing a message with itself', () => {
+            fc.assert(fc.property(recordsWriteDescriptor(), (descriptor) => {
+                const msg = wrapMessage(descriptor);
+                expect(verifyEqualityOfImmutableProperties(msg, msg)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('symmetry', () => {
+        it('should succeed in both directions when only mutable fields differ', () => {
+            fc.assert(fc.property(recordsWriteDescriptor(), recordsWriteDescriptor(), (desc1, desc2) => {
+                // Copy immutable fields from desc1 to desc2 so only mutable fields differ
+                for (const key of Object.keys(desc1)) {
+                    if (!mutableProps.includes(key)) {
+                        desc2[key] = desc1[key];
+                    }
+                }
+                const msg1 = wrapMessage(desc1);
+                const msg2 = wrapMessage(desc2);
+                expect(verifyEqualityOfImmutableProperties(msg1, msg2)).toBe(true);
+                expect(verifyEqualityOfImmutableProperties(msg2, msg1)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('mutable properties are free', () => {
+        it('should not throw when only mutable properties are changed', () => {
+            fc.assert(fc.property(recordsWriteDescriptor(), fc.string({ minLength: 5, maxLength: 40 }), fc.integer({ min: 0, max: 100000 }), fc.string({ minLength: 3, maxLength: 20 }), (descriptor, newDataCid, newDataSize, newDataFormat) => {
+                const modified = {
+                    ...descriptor,
+                    dataCid: newDataCid,
+                    dataSize: newDataSize,
+                    dataFormat: newDataFormat,
+                    messageTimestamp: '2025-01-01T00:00:00.000000Z',
+                };
+                const msg1 = wrapMessage(descriptor);
+                const msg2 = wrapMessage(modified);
+                expect(verifyEqualityOfImmutableProperties(msg1, msg2)).toBe(true);
+            }), { numRuns });
+        });
+    });
+    describe('immutable properties are strict', () => {
+        it('should throw when any immutable property is changed', () => {
+            const immutableProps = ['interface', 'method', 'protocol', 'protocolPath', 'schema', 'dateCreated'];
+            fc.assert(fc.property(recordsWriteDescriptor(), fc.constantFrom(...immutableProps), fc.string({ minLength: 1, maxLength: 10 }), (descriptor, propToChange, newValue) => {
+                // Ensure the new value is actually different
+                if (descriptor[propToChange] === newValue) {
+                    return;
+                }
+                const modified = { ...descriptor, [propToChange]: newValue };
+                const msg1 = wrapMessage(descriptor);
+                const msg2 = wrapMessage(modified);
+                expect(() => verifyEqualityOfImmutableProperties(msg1, msg2)).toThrow(DwnErrorCode.RecordsWriteImmutablePropertyChanged);
+            }), { numRuns });
+        });
+    });
+});
+//# sourceMappingURL=immutable-properties.fuzz.spec.js.map

package/dist/esm/tests/fuzz/immutable-properties.fuzz.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"immutable-properties.fuzz.spec.js","sourceRoot":"","sources":["../../../../tests/fuzz/immutable-properties.fuzz.spec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,mCAAmC,EAAE,MAAM,6CAA6C,CAAC;AAElG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AAE/D,iFAAiF;AACjF,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAErH,yFAAyF;AACzF,SAAS,sBAAsB;IAC7B,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,mBAAmB;QACnB,SAAS,EAAU,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzC,MAAM,EAAa,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,EAAW,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC7D,YAAY,EAAO,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC7D,MAAM,EAAa,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC7D,WAAW,EAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC7D,iBAAiB;QACjB,OAAO,EAAY,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC9D,QAAQ,EAAW,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACtD,UAAU,EAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC7D,gBAAgB,EAAG,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,UAAmC;IACtD,OAAO,EAAE,UAAU,EAAoC,CAAC;AAC1D,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAE1D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,sBAAsB,EAAE,EACxB,CAAC,UAAU,EAAE,EAAE;gBACb,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACpC,MAAM,CAAC,mCAAmC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,sBAAsB,EAAE,EACxB,sBAAsB,EAAE,EACxB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACf,0EAA0E;gBAC1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAChC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBAEhC,MAAM,CAAC,mCAAmC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnE,MAAM,CAAC,mCAAmC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,sBAAsB,EAAE,EACxB,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EACnC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;gBACrD,MAAM,QAAQ,GAAG;oBACf,GAAG,UAAU;oBACb,OAAO,EAAY,UAAU;oBAC7B,QAAQ,EAAW,WAAW;oBAC9B,UAAU,EAAS,aAAa;oBAChC,gBAAgB,EAAG,6BAA6B;iBACjD,CAAC;gBAEF,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAEnC,MAAM,CAAC,mCAAmC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEpG,EAAE,CAAC,MAAM,CACP,EAAE,CAAC,QAAQ,CACT,sBAAsB,EAAE,EACxB,EAAE,CAAC,YAAY,CAAC,GAAG,cAAc,CAAC,EAClC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAC1C,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE;gBACrC,6CAA6C;gBAC7C,IAAI,UAAU,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAEtD,MAAM,QAAQ,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAEnC,MAAM,CAAC,GAAG,EAAE,CAAC,mCAAmC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CACnE,YAAY,CAAC,oCAAoC,CAClD,CAAC;YACJ,CAAC,CACF,EACD,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}