@hol-org/cigar 0.9.4

package/dist/types.d.ts

@@ -0,0 +1,115 @@
+/** Copy-safe high-level HTTP wire records. */
+export interface PathParameter {
+    readonly name: string;
+    readonly value: string;
+}
+export interface OperationRequest {
+    readonly payloadCbor?: Uint8Array;
+    readonly pathParameters?: readonly PathParameter[];
+    readonly idempotencyKey?: string;
+    readonly expectedRevision?: string;
+    readonly dryRun?: boolean;
+    readonly pageCursor?: string;
+    readonly pageSize?: number;
+}
+export interface TypedOperationRequest<T> {
+    readonly payload: T;
+    readonly idempotencyKey?: string;
+    readonly expectedRevision?: string;
+    readonly dryRun?: boolean;
+    readonly pageCursor?: string;
+    readonly pageSize?: number;
+}
+export interface OperationResponse {
+    readonly operationId: string;
+    readonly payloadCbor: Uint8Array;
+    readonly semanticEtag?: string;
+    readonly nextPageCursor?: string;
+}
+export interface TypedOperationResponse<T> {
+    readonly operationId: string;
+    readonly payload: Readonly<T>;
+    readonly payloadCbor: Uint8Array;
+    readonly semanticEtag?: string;
+    readonly nextPageCursor?: string;
+}
+export interface OperationEvent {
+    readonly operationId: string;
+    readonly eventId: string;
+    readonly payloadCbor: Uint8Array;
+}
+export interface TypedOperationEvent<T> {
+    readonly operationId: string;
+    readonly eventId: string;
+    readonly payload: Readonly<T>;
+    readonly payloadCbor: Uint8Array;
+}
+export type BearerTokenProvider = string | ((signal?: AbortSignal) => string | Promise<string>);
+export interface CallOptions {
+    /** End-to-end deadline in milliseconds. The SDK caps this at five minutes. */
+    readonly timeoutMs?: number;
+    readonly signal?: AbortSignal;
+    /** Maximum total attempts, including the first. Dispatch is always one attempt. */
+    readonly maxAttempts?: number;
+    /** Exact Last-Event-ID for a server stream; distinct from opaque pagination cursors. */
+    readonly resumeFrom?: string;
+}
+export interface ClientOptions {
+    readonly baseUrl: string | URL;
+    /** Mandatory for remote HTTPS; no ambient or inherited credential source is consulted. */
+    readonly bearerToken?: BearerTokenProvider;
+    readonly defaultTimeoutMs?: number;
+    readonly maxAttempts?: number;
+    readonly fetch?: typeof globalThis.fetch;
+    /** Required when injecting a custom fetch implementation with caller-owned proxy/redirect policy. */
+    readonly trustCustomFetch?: boolean;
+    readonly apiVersion?: "1";
+    /** Allows cleartext only for localhost/loopback development endpoints. */
+    readonly allowInsecureLoopback?: boolean;
+}
+export interface EventStream extends AsyncIterable<OperationEvent>, AsyncDisposable {
+    readonly lastEventId: string | undefined;
+    close(): void;
+}
+export interface TypedEventStream<T> extends AsyncIterable<TypedOperationEvent<T>>, AsyncDisposable {
+    readonly lastEventId: string | undefined;
+    close(): void;
+}
+export interface Compatibility {
+    readonly apiVersion: "1";
+    readonly version: OperationResponse;
+    readonly capabilities: OperationResponse;
+}
+interface SemanticBundleBlockBase {
+    readonly block_id: string;
+    readonly lane: "rules" | "task" | "evidence" | "history" | "tools";
+    readonly content_digest: string;
+    readonly token_count: number;
+    readonly provenance: readonly string[];
+}
+export type SemanticBundleBlock = SemanticBundleBlockBase & ({
+    readonly representation: "exact" | "redacted";
+    readonly transform_receipt?: never;
+} | {
+    readonly representation: "extracted" | "summarized";
+    readonly transform_receipt: string;
+});
+export interface SemanticContextBundle {
+    readonly schema_version: "cigar.context-bundle.v1";
+    readonly bundle_id: string;
+    readonly contract_digest: string;
+    readonly manifest_digest: string;
+    readonly blocks: readonly SemanticBundleBlock[];
+    readonly total_tokens: number;
+    readonly extensions: Readonly<Record<string, unknown>>;
+}
+export interface SemanticContextDelta {
+    readonly schema_version: "cigar.context-delta.v1";
+    readonly base_bundle_id: string;
+    readonly target_bundle_id: string;
+    readonly added_blocks: readonly SemanticBundleBlock[];
+    readonly removed_block_ids: readonly string[];
+    readonly resulting_tokens: number;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAE9C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACnD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAEhG,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IAC/B,0FAA0F;IAC1F,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,qGAAqG;IACrG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,WAAY,SAAQ,aAAa,CAAC,cAAc,CAAC,EAAE,eAAe;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC,CAAE,SAAQ,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe;IACjG,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;CAC1C;AAED,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,MAAM,mBAAmB,GAAG,uBAAuB,GAAG,CACxD;IACA,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,UAAU,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC;CACpC,GACC;IACA,QAAQ,CAAC,cAAc,EAAE,WAAW,GAAG,YAAY,CAAC;IACpD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,CACF,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC","sourcesContent":["/** Copy-safe high-level HTTP wire records. */\n\nexport interface PathParameter {\n  readonly name: string;\n  readonly value: string;\n}\n\nexport interface OperationRequest {\n  readonly payloadCbor?: Uint8Array;\n  readonly pathParameters?: readonly PathParameter[];\n  readonly idempotencyKey?: string;\n  readonly expectedRevision?: string;\n  readonly dryRun?: boolean;\n  readonly pageCursor?: string;\n  readonly pageSize?: number;\n}\n\nexport interface TypedOperationRequest<T> {\n  readonly payload: T;\n  readonly idempotencyKey?: string;\n  readonly expectedRevision?: string;\n  readonly dryRun?: boolean;\n  readonly pageCursor?: string;\n  readonly pageSize?: number;\n}\n\nexport interface OperationResponse {\n  readonly operationId: string;\n  readonly payloadCbor: Uint8Array;\n  readonly semanticEtag?: string;\n  readonly nextPageCursor?: string;\n}\n\nexport interface TypedOperationResponse<T> {\n  readonly operationId: string;\n  readonly payload: Readonly<T>;\n  readonly payloadCbor: Uint8Array;\n  readonly semanticEtag?: string;\n  readonly nextPageCursor?: string;\n}\n\nexport interface OperationEvent {\n  readonly operationId: string;\n  readonly eventId: string;\n  readonly payloadCbor: Uint8Array;\n}\n\nexport interface TypedOperationEvent<T> {\n  readonly operationId: string;\n  readonly eventId: string;\n  readonly payload: Readonly<T>;\n  readonly payloadCbor: Uint8Array;\n}\n\nexport type BearerTokenProvider = string | ((signal?: AbortSignal) => string | Promise<string>);\n\nexport interface CallOptions {\n  /** End-to-end deadline in milliseconds. The SDK caps this at five minutes. */\n  readonly timeoutMs?: number;\n  readonly signal?: AbortSignal;\n  /** Maximum total attempts, including the first. Dispatch is always one attempt. */\n  readonly maxAttempts?: number;\n  /** Exact Last-Event-ID for a server stream; distinct from opaque pagination cursors. */\n  readonly resumeFrom?: string;\n}\n\nexport interface ClientOptions {\n  readonly baseUrl: string | URL;\n  /** Mandatory for remote HTTPS; no ambient or inherited credential source is consulted. */\n  readonly bearerToken?: BearerTokenProvider;\n  readonly defaultTimeoutMs?: number;\n  readonly maxAttempts?: number;\n  readonly fetch?: typeof globalThis.fetch;\n  /** Required when injecting a custom fetch implementation with caller-owned proxy/redirect policy. */\n  readonly trustCustomFetch?: boolean;\n  readonly apiVersion?: \"1\";\n  /** Allows cleartext only for localhost/loopback development endpoints. */\n  readonly allowInsecureLoopback?: boolean;\n}\n\nexport interface EventStream extends AsyncIterable<OperationEvent>, AsyncDisposable {\n  readonly lastEventId: string | undefined;\n  close(): void;\n}\n\nexport interface TypedEventStream<T> extends AsyncIterable<TypedOperationEvent<T>>, AsyncDisposable {\n  readonly lastEventId: string | undefined;\n  close(): void;\n}\n\nexport interface Compatibility {\n  readonly apiVersion: \"1\";\n  readonly version: OperationResponse;\n  readonly capabilities: OperationResponse;\n}\n\ninterface SemanticBundleBlockBase {\n  readonly block_id: string;\n  readonly lane: \"rules\" | \"task\" | \"evidence\" | \"history\" | \"tools\";\n  readonly content_digest: string;\n  readonly token_count: number;\n  readonly provenance: readonly string[];\n}\n\nexport type SemanticBundleBlock = SemanticBundleBlockBase & (\n  | {\n    readonly representation: \"exact\" | \"redacted\";\n    readonly transform_receipt?: never;\n  }\n  | {\n    readonly representation: \"extracted\" | \"summarized\";\n    readonly transform_receipt: string;\n  }\n);\n\nexport interface SemanticContextBundle {\n  readonly schema_version: \"cigar.context-bundle.v1\";\n  readonly bundle_id: string;\n  readonly contract_digest: string;\n  readonly manifest_digest: string;\n  readonly blocks: readonly SemanticBundleBlock[];\n  readonly total_tokens: number;\n  readonly extensions: Readonly<Record<string, unknown>>;\n}\n\nexport interface SemanticContextDelta {\n  readonly schema_version: \"cigar.context-delta.v1\";\n  readonly base_bundle_id: string;\n  readonly target_bundle_id: string;\n  readonly added_blocks: readonly SemanticBundleBlock[];\n  readonly removed_block_ids: readonly string[];\n  readonly resulting_tokens: number;\n}\n"]}

package/dist/types.js

@@ -0,0 +1,3 @@
+/** Copy-safe high-level HTTP wire records. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8CAA8C","sourcesContent":["/** Copy-safe high-level HTTP wire records. */\n\nexport interface PathParameter {\n  readonly name: string;\n  readonly value: string;\n}\n\nexport interface OperationRequest {\n  readonly payloadCbor?: Uint8Array;\n  readonly pathParameters?: readonly PathParameter[];\n  readonly idempotencyKey?: string;\n  readonly expectedRevision?: string;\n  readonly dryRun?: boolean;\n  readonly pageCursor?: string;\n  readonly pageSize?: number;\n}\n\nexport interface TypedOperationRequest<T> {\n  readonly payload: T;\n  readonly idempotencyKey?: string;\n  readonly expectedRevision?: string;\n  readonly dryRun?: boolean;\n  readonly pageCursor?: string;\n  readonly pageSize?: number;\n}\n\nexport interface OperationResponse {\n  readonly operationId: string;\n  readonly payloadCbor: Uint8Array;\n  readonly semanticEtag?: string;\n  readonly nextPageCursor?: string;\n}\n\nexport interface TypedOperationResponse<T> {\n  readonly operationId: string;\n  readonly payload: Readonly<T>;\n  readonly payloadCbor: Uint8Array;\n  readonly semanticEtag?: string;\n  readonly nextPageCursor?: string;\n}\n\nexport interface OperationEvent {\n  readonly operationId: string;\n  readonly eventId: string;\n  readonly payloadCbor: Uint8Array;\n}\n\nexport interface TypedOperationEvent<T> {\n  readonly operationId: string;\n  readonly eventId: string;\n  readonly payload: Readonly<T>;\n  readonly payloadCbor: Uint8Array;\n}\n\nexport type BearerTokenProvider = string | ((signal?: AbortSignal) => string | Promise<string>);\n\nexport interface CallOptions {\n  /** End-to-end deadline in milliseconds. The SDK caps this at five minutes. */\n  readonly timeoutMs?: number;\n  readonly signal?: AbortSignal;\n  /** Maximum total attempts, including the first. Dispatch is always one attempt. */\n  readonly maxAttempts?: number;\n  /** Exact Last-Event-ID for a server stream; distinct from opaque pagination cursors. */\n  readonly resumeFrom?: string;\n}\n\nexport interface ClientOptions {\n  readonly baseUrl: string | URL;\n  /** Mandatory for remote HTTPS; no ambient or inherited credential source is consulted. */\n  readonly bearerToken?: BearerTokenProvider;\n  readonly defaultTimeoutMs?: number;\n  readonly maxAttempts?: number;\n  readonly fetch?: typeof globalThis.fetch;\n  /** Required when injecting a custom fetch implementation with caller-owned proxy/redirect policy. */\n  readonly trustCustomFetch?: boolean;\n  readonly apiVersion?: \"1\";\n  /** Allows cleartext only for localhost/loopback development endpoints. */\n  readonly allowInsecureLoopback?: boolean;\n}\n\nexport interface EventStream extends AsyncIterable<OperationEvent>, AsyncDisposable {\n  readonly lastEventId: string | undefined;\n  close(): void;\n}\n\nexport interface TypedEventStream<T> extends AsyncIterable<TypedOperationEvent<T>>, AsyncDisposable {\n  readonly lastEventId: string | undefined;\n  close(): void;\n}\n\nexport interface Compatibility {\n  readonly apiVersion: \"1\";\n  readonly version: OperationResponse;\n  readonly capabilities: OperationResponse;\n}\n\ninterface SemanticBundleBlockBase {\n  readonly block_id: string;\n  readonly lane: \"rules\" | \"task\" | \"evidence\" | \"history\" | \"tools\";\n  readonly content_digest: string;\n  readonly token_count: number;\n  readonly provenance: readonly string[];\n}\n\nexport type SemanticBundleBlock = SemanticBundleBlockBase & (\n  | {\n    readonly representation: \"exact\" | \"redacted\";\n    readonly transform_receipt?: never;\n  }\n  | {\n    readonly representation: \"extracted\" | \"summarized\";\n    readonly transform_receipt: string;\n  }\n);\n\nexport interface SemanticContextBundle {\n  readonly schema_version: \"cigar.context-bundle.v1\";\n  readonly bundle_id: string;\n  readonly contract_digest: string;\n  readonly manifest_digest: string;\n  readonly blocks: readonly SemanticBundleBlock[];\n  readonly total_tokens: number;\n  readonly extensions: Readonly<Record<string, unknown>>;\n}\n\nexport interface SemanticContextDelta {\n  readonly schema_version: \"cigar.context-delta.v1\";\n  readonly base_bundle_id: string;\n  readonly target_bundle_id: string;\n  readonly added_blocks: readonly SemanticBundleBlock[];\n  readonly removed_block_ids: readonly string[];\n  readonly resulting_tokens: number;\n}\n"]}

package/dist/verify-replay.d.ts

@@ -0,0 +1,3 @@
+/** Independently verifies the bounded CIGAR replay reproduction vector. */
+export {};
+//# sourceMappingURL=verify-replay.d.ts.map

package/dist/verify-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-replay.d.ts","sourceRoot":"","sources":["../src/verify-replay.ts"],"names":[],"mappings":"AAAA,2EAA2E","sourcesContent":["/** Independently verifies the bounded CIGAR replay reproduction vector. */\n\nimport { createHash } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\n\nconst MAX_FIXTURE_BYTES = 1_048_576;\nconst MAX_RETAINED_BYTES = 1_048_576;\nconst MAX_ENCODED_RETAINED_BYTES = 1_398_104;\nconst MAX_ARTIFACTS = 64;\nconst MAX_OBSERVATIONS = 1_024;\nconst MAX_JSON_DEPTH = 64;\nconst DEPENDENCY_ORDER = [\n  \"source\",\n  \"blob\",\n  \"policy\",\n  \"index\",\n  \"manifest\",\n  \"bundle\",\n  \"tokenizer\",\n  \"adapter\",\n  \"consumer\",\n  \"tool_schema\",\n  \"environment\",\n] as const;\n\ntype JsonObject = Record<string, unknown>;\ntype RetainedArtifact = {\n  kind: string;\n  bytesBase64url: string;\n  digestMultihash: string;\n};\ntype ArtifactVerification = {\n  verifiedBytes: Map<string, Buffer>;\n  missing: string[];\n};\n\nfunction fail(message: string): never {\n  throw new Error(`replay vector verification failed: ${message}`);\n}\n\nfunction strictObject(value: unknown, keys: readonly string[], context: string): JsonObject {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    fail(`${context} must be an object`);\n  }\n  const record = value as JsonObject;\n  const actual = Object.keys(record).sort();\n  const expected = [...keys].sort();\n  if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) {\n    fail(`${context} has unknown or missing fields`);\n  }\n  return record;\n}\n\nfunction stringField(\n  record: JsonObject,\n  key: string,\n  context: string,\n  maximum = 256,\n  allowEmpty = false,\n): string {\n  const value = record[key];\n  if (typeof value !== \"string\" || (!allowEmpty && value.length === 0) || value.length > maximum) {\n    fail(`${context}.${key} must be a bounded string`);\n  }\n  return value;\n}\n\nfunction booleanField(record: JsonObject, key: string, context: string): boolean {\n  const value = record[key];\n  if (typeof value !== \"boolean\") fail(`${context}.${key} must be a boolean`);\n  return value;\n}\n\nfunction stringArray(value: unknown, context: string, maximum = 64): string[] {\n  if (!Array.isArray(value) || value.length > maximum) fail(`${context} must be a bounded array`);\n  return value.map((item, index) => {\n    if (typeof item !== \"string\" || item.length === 0 || item.length > 256) {\n      fail(`${context}[${index}] must be a bounded string`);\n    }\n    return item;\n  });\n}\n\nfunction sameStrings(actual: readonly string[], expected: readonly string[], context: string): void {\n  if (actual.length !== expected.length || actual.some((value, index) => value !== expected[index])) {\n    fail(`${context} differs`);\n  }\n}\n\nfunction decodeExactBase64url(value: string, context: string, allowEmpty: boolean): Buffer {\n  if (value.length === 0) {\n    if (allowEmpty) return Buffer.alloc(0);\n    fail(`${context} must not be empty`);\n  }\n  if (value.length > MAX_ENCODED_RETAINED_BYTES || !/^[A-Za-z0-9_-]+$/u.test(value)) {\n    fail(`${context} is not bounded unpadded base64url`);\n  }\n  const decoded = Buffer.from(value, \"base64url\");\n  if (decoded.length > MAX_RETAINED_BYTES || decoded.toString(\"base64url\") !== value) {\n    fail(`${context} is non-canonical or exceeds its bound`);\n  }\n  return decoded;\n}\n\nfunction multihash(bytes: Uint8Array): string {\n  return `1220${createHash(\"sha256\").update(bytes).digest(\"hex\")}`;\n}\n\nfunction observationMultihash(observations: readonly Buffer[]): string {\n  const hash = createHash(\"sha256\");\n  for (const observation of observations) {\n    if (observation.length > 0xffff_ffff) fail(\"recorded observation exceeds u32 framing\");\n    const length = Buffer.alloc(4);\n    length.writeUInt32BE(observation.length);\n    hash.update(length);\n    hash.update(observation);\n  }\n  return `1220${hash.digest(\"hex\")}`;\n}\n\nfunction verifyDigest(value: string, context: string): void {\n  if (!/^1220[0-9a-f]{64}$/u.test(value)) fail(`${context} is not a lowercase SHA-256 multihash`);\n}\n\nfunction parseArtifacts(required: readonly string[], value: unknown): RetainedArtifact[] {\n  if (!Array.isArray(value) || value.length > MAX_ARTIFACTS) {\n    fail(\"retained artifact table must be a bounded array\");\n  }\n  const seen = new Set<string>();\n  return value.map((raw, index) => {\n    const entry = strictObject(\n      raw,\n      [\"kind\", \"bytes_base64url\", \"digest_multihash\"],\n      `retained artifact ${index}`,\n    );\n    const kind = stringField(entry, \"kind\", `retained artifact ${index}`);\n    if (!required.includes(kind) || seen.has(kind)) fail(\"retained artifact kind is unknown or duplicated\");\n    seen.add(kind);\n    const bytesBase64url = stringField(\n      entry,\n      \"bytes_base64url\",\n      `retained artifact ${index}`,\n      MAX_ENCODED_RETAINED_BYTES,\n    );\n    const digestMultihash = stringField(entry, \"digest_multihash\", `retained artifact ${index}`, 68);\n    verifyDigest(digestMultihash, `retained artifact ${index} digest`);\n    return { kind, bytesBase64url, digestMultihash };\n  });\n}\n\nfunction verifyArtifacts(required: readonly string[], artifacts: readonly RetainedArtifact[]): ArtifactVerification {\n  const verifiedBytes = new Map<string, Buffer>();\n  for (const artifact of artifacts) {\n    const bytes = decodeExactBase64url(artifact.bytesBase64url, `${artifact.kind} artifact`, false);\n    if (multihash(bytes) === artifact.digestMultihash) verifiedBytes.set(artifact.kind, bytes);\n  }\n  return {\n    verifiedBytes,\n    missing: required.filter((kind) => !verifiedBytes.has(kind)),\n  };\n}\n\nfunction rejectDuplicateJsonKeys(source: string): void {\n  let offset = 0;\n\n  function whitespace(): void {\n    while (offset < source.length && /[\\u0009\\u000a\\u000d\\u0020]/u.test(source[offset] ?? \"\")) offset += 1;\n  }\n\n  function parseString(): string {\n    if (source[offset] !== '\"') fail(\"invalid JSON string\");\n    const start = offset;\n    offset += 1;\n    while (offset < source.length) {\n      const character = source[offset];\n      if (character === '\"') {\n        offset += 1;\n        const decoded = JSON.parse(source.slice(start, offset)) as unknown;\n        if (typeof decoded !== \"string\") fail(\"invalid JSON string\");\n        return decoded;\n      }\n      if (character === \"\\\\\") {\n        offset += 1;\n        const escape = source[offset];\n        if (escape === \"u\") {\n          if (!/^[0-9a-fA-F]{4}$/u.test(source.slice(offset + 1, offset + 5))) fail(\"invalid JSON escape\");\n          offset += 5;\n          continue;\n        }\n        if (escape === undefined || !'\"\\\\/bfnrt'.includes(escape)) fail(\"invalid JSON escape\");\n        offset += 1;\n        continue;\n      }\n      if (character === undefined || character.charCodeAt(0) < 0x20) fail(\"invalid JSON string character\");\n      offset += 1;\n    }\n    fail(\"unterminated JSON string\");\n  }\n\n  function parseValue(depth: number): void {\n    if (depth > MAX_JSON_DEPTH) fail(\"JSON nesting exceeds its bound\");\n    whitespace();\n    const character = source[offset];\n    if (character === \"{\") {\n      offset += 1;\n      whitespace();\n      const keys = new Set<string>();\n      if (source[offset] === \"}\") {\n        offset += 1;\n        return;\n      }\n      while (true) {\n        whitespace();\n        const key = parseString();\n        if (keys.has(key)) fail(\"duplicate JSON object key\");\n        keys.add(key);\n        whitespace();\n        if (source[offset] !== \":\") fail(\"JSON object key lacks a value\");\n        offset += 1;\n        parseValue(depth + 1);\n        whitespace();\n        if (source[offset] === \"}\") {\n          offset += 1;\n          return;\n        }\n        if (source[offset] !== \",\") fail(\"invalid JSON object separator\");\n        offset += 1;\n      }\n    }\n    if (character === \"[\") {\n      offset += 1;\n      whitespace();\n      if (source[offset] === \"]\") {\n        offset += 1;\n        return;\n      }\n      while (true) {\n        parseValue(depth + 1);\n        whitespace();\n        if (source[offset] === \"]\") {\n          offset += 1;\n          return;\n        }\n        if (source[offset] !== \",\") fail(\"invalid JSON array separator\");\n        offset += 1;\n      }\n    }\n    if (character === '\"') {\n      parseString();\n      return;\n    }\n    for (const literal of [\"true\", \"false\", \"null\"] as const) {\n      if (source.startsWith(literal, offset)) {\n        offset += literal.length;\n        return;\n      }\n    }\n    const number = /^-?(?:0|[1-9][0-9]*)(?:\\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/u.exec(source.slice(offset));\n    if (number === null) fail(\"invalid JSON value\");\n    offset += number[0].length;\n  }\n\n  parseValue(0);\n  whitespace();\n  if (offset !== source.length) fail(\"fixture contains trailing JSON\");\n}\n\nfunction main(): void {\n  const path = process.argv[2] ?? \"schemas/vectors/replay-v1.json\";\n  const source = readFileSync(path);\n  if (source.length === 0 || source.length > MAX_FIXTURE_BYTES) fail(\"fixture size is invalid\");\n  let text: string;\n  try {\n    text = new TextDecoder(\"utf-8\", { fatal: true }).decode(source);\n  } catch {\n    fail(\"fixture is not valid UTF-8\");\n  }\n  rejectDuplicateJsonKeys(text);\n  const root = strictObject(JSON.parse(text) as unknown, [\n    \"schema_version\",\n    \"digest_algorithm\",\n    \"observation_framing\",\n    \"retained\",\n    \"required_dependencies\",\n    \"retained_artifacts\",\n    \"missing_artifact_probe\",\n    \"tampered_artifact_probe\",\n    \"empty_recorded_response_probe\",\n    \"expected\",\n  ], \"fixture\");\n  if (stringField(root, \"schema_version\", \"fixture\") !== \"cigar.replay-vector.v1\"\n    || stringField(root, \"digest_algorithm\", \"fixture\") !== \"sha256-multihash-raw-v1\"\n    || stringField(root, \"observation_framing\", \"fixture\") !== \"u32be-length-prefixed-v1\") {\n    fail(\"fixture declares an unsupported profile\");\n  }\n\n  const retained = strictObject(root.retained, [\n    \"bundle_bytes_base64url\",\n    \"invocation_bytes_base64url\",\n    \"recorded_observation_bytes_base64url\",\n  ], \"retained\");\n  const bundle = decodeExactBase64url(\n    stringField(retained, \"bundle_bytes_base64url\", \"retained\", MAX_ENCODED_RETAINED_BYTES),\n    \"bundle\",\n    false,\n  );\n  const invocation = decodeExactBase64url(\n    stringField(retained, \"invocation_bytes_base64url\", \"retained\", MAX_ENCODED_RETAINED_BYTES),\n    \"invocation\",\n    false,\n  );\n  const encodedObservations = stringArray(\n    retained.recorded_observation_bytes_base64url,\n    \"recorded observations\",\n    MAX_OBSERVATIONS,\n  );\n  if (encodedObservations.length === 0) fail(\"recorded observations must not be empty\");\n  const observations = encodedObservations.map((value, index) =>\n    decodeExactBase64url(value, `recorded observation ${index}`, true));\n\n  const required = stringArray(root.required_dependencies, \"required dependencies\");\n  sameStrings(required, DEPENDENCY_ORDER, \"required dependency order\");\n  const artifacts = parseArtifacts(required, root.retained_artifacts);\n\n  const expected = strictObject(root.expected, [\n    \"bundle_digest_multihash\",\n    \"invocation_digest_multihash\",\n    \"observation_digest_multihash\",\n    \"complete\",\n    \"missing_dependencies\",\n  ], \"expected\");\n  const expectedBundle = stringField(expected, \"bundle_digest_multihash\", \"expected\", 68);\n  const expectedInvocation = stringField(expected, \"invocation_digest_multihash\", \"expected\", 68);\n  const expectedObservations = stringField(expected, \"observation_digest_multihash\", \"expected\", 68);\n  for (const [context, value] of [\n    [\"bundle digest\", expectedBundle],\n    [\"invocation digest\", expectedInvocation],\n    [\"observation digest\", expectedObservations],\n  ] as const) verifyDigest(value, context);\n  const bundleDigest = multihash(bundle);\n  const invocationDigest = multihash(invocation);\n  const observationDigest = observationMultihash(observations);\n  if (bundleDigest !== expectedBundle || invocationDigest !== expectedInvocation\n    || observationDigest !== expectedObservations) fail(\"retained replay digest mismatch\");\n\n  const verification = verifyArtifacts(required, artifacts);\n  const complete = verification.missing.length === 0;\n  if (complete !== booleanField(expected, \"complete\", \"expected\")) fail(\"completeness mismatch\");\n  sameStrings(\n    verification.missing,\n    stringArray(expected.missing_dependencies, \"expected missing dependencies\"),\n    \"missing dependencies\",\n  );\n  const artifactBundle = verification.verifiedBytes.get(\"bundle\");\n  if (artifactBundle === undefined || !artifactBundle.equals(bundle)) {\n    fail(\"retained bundle and bundle dependency artifact differ\");\n  }\n\n  const missingProbe = strictObject(root.missing_artifact_probe, [\n    \"kind\",\n    \"expected_complete\",\n    \"expected_missing_dependencies\",\n  ], \"missing artifact probe\");\n  const missingKind = stringField(missingProbe, \"kind\", \"missing artifact probe\");\n  if (!required.includes(missingKind)) fail(\"missing artifact probe names an unknown dependency\");\n  const missingVerification = verifyArtifacts(\n    required,\n    artifacts.filter((artifact) => artifact.kind !== missingKind),\n  );\n  const missingComplete = missingVerification.missing.length === 0;\n  if (missingComplete !== booleanField(missingProbe, \"expected_complete\", \"missing artifact probe\")) {\n    fail(\"missing artifact probe completeness differs\");\n  }\n  sameStrings(\n    missingVerification.missing,\n    stringArray(missingProbe.expected_missing_dependencies, \"missing artifact probe dependencies\"),\n    \"missing artifact probe dependencies\",\n  );\n\n  const tamperProbe = strictObject(root.tampered_artifact_probe, [\n    \"kind\",\n    \"replacement_bytes_base64url\",\n    \"expected_accepted\",\n    \"expected_missing_dependencies\",\n  ], \"tampered artifact probe\");\n  const tamperKind = stringField(tamperProbe, \"kind\", \"tampered artifact probe\");\n  if (!required.includes(tamperKind)) fail(\"tampered artifact probe names an unknown dependency\");\n  const replacement = stringField(\n    tamperProbe,\n    \"replacement_bytes_base64url\",\n    \"tampered artifact probe\",\n    MAX_ENCODED_RETAINED_BYTES,\n  );\n  let replacements = 0;\n  const tampered = artifacts.map((artifact) => {\n    if (artifact.kind !== tamperKind) return artifact;\n    replacements += 1;\n    return { ...artifact, bytesBase64url: replacement };\n  });\n  if (replacements !== 1) fail(\"tampered artifact probe must identify exactly one artifact\");\n  const tamperedVerification = verifyArtifacts(required, tampered);\n  const tamperAccepted = tamperedVerification.missing.length === 0;\n  if (tamperAccepted !== booleanField(tamperProbe, \"expected_accepted\", \"tampered artifact probe\")) {\n    fail(\"tampered artifact probe acceptance differs\");\n  }\n  sameStrings(\n    tamperedVerification.missing,\n    stringArray(tamperProbe.expected_missing_dependencies, \"tampered artifact probe dependencies\"),\n    \"tampered artifact probe dependencies\",\n  );\n\n  const emptyProbe = strictObject(root.empty_recorded_response_probe, [\n    \"bytes_base64url\",\n    \"digest_multihash\",\n    \"expected_accepted\",\n  ], \"empty recorded response probe\");\n  const emptyResponse = decodeExactBase64url(\n    stringField(\n      emptyProbe,\n      \"bytes_base64url\",\n      \"empty recorded response probe\",\n      MAX_ENCODED_RETAINED_BYTES,\n      true,\n    ),\n    \"empty recorded response\",\n    true,\n  );\n  const expectedEmptyDigest = stringField(emptyProbe, \"digest_multihash\", \"empty recorded response probe\", 68);\n  verifyDigest(expectedEmptyDigest, \"empty recorded response digest\");\n  const emptyDigest = multihash(emptyResponse);\n  const emptyAccepted = emptyResponse.length === 0 && emptyDigest === expectedEmptyDigest;\n  if (emptyAccepted !== booleanField(emptyProbe, \"expected_accepted\", \"empty recorded response probe\")) {\n    fail(\"empty recorded response probe acceptance differs\");\n  }\n\n  process.stdout.write(`${JSON.stringify({\n    schema_version: \"cigar.replay-reproduction-result.v1\",\n    bundle_digest_multihash: bundleDigest,\n    invocation_digest_multihash: invocationDigest,\n    observation_digest_multihash: observationDigest,\n    complete,\n    missing_dependencies: verification.missing,\n    missing_artifact_probe: {\n      complete: missingComplete,\n      missing_dependencies: missingVerification.missing,\n    },\n    tampered_artifact_probe: {\n      accepted: tamperAccepted,\n      missing_dependencies: tamperedVerification.missing,\n    },\n    empty_recorded_response_probe: {\n      accepted: emptyAccepted,\n      digest_multihash: emptyDigest,\n    },\n  })}\\n`);\n}\n\nmain();\n"]}

package/dist/verify-replay.js

@@ -0,0 +1,391 @@
+/** Independently verifies the bounded CIGAR replay reproduction vector. */
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+const MAX_FIXTURE_BYTES = 1_048_576;
+const MAX_RETAINED_BYTES = 1_048_576;
+const MAX_ENCODED_RETAINED_BYTES = 1_398_104;
+const MAX_ARTIFACTS = 64;
+const MAX_OBSERVATIONS = 1_024;
+const MAX_JSON_DEPTH = 64;
+const DEPENDENCY_ORDER = [
+    "source",
+    "blob",
+    "policy",
+    "index",
+    "manifest",
+    "bundle",
+    "tokenizer",
+    "adapter",
+    "consumer",
+    "tool_schema",
+    "environment",
+];
+function fail(message) {
+    throw new Error(`replay vector verification failed: ${message}`);
+}
+function strictObject(value, keys, context) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        fail(`${context} must be an object`);
+    }
+    const record = value;
+    const actual = Object.keys(record).sort();
+    const expected = [...keys].sort();
+    if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) {
+        fail(`${context} has unknown or missing fields`);
+    }
+    return record;
+}
+function stringField(record, key, context, maximum = 256, allowEmpty = false) {
+    const value = record[key];
+    if (typeof value !== "string" || (!allowEmpty && value.length === 0) || value.length > maximum) {
+        fail(`${context}.${key} must be a bounded string`);
+    }
+    return value;
+}
+function booleanField(record, key, context) {
+    const value = record[key];
+    if (typeof value !== "boolean")
+        fail(`${context}.${key} must be a boolean`);
+    return value;
+}
+function stringArray(value, context, maximum = 64) {
+    if (!Array.isArray(value) || value.length > maximum)
+        fail(`${context} must be a bounded array`);
+    return value.map((item, index) => {
+        if (typeof item !== "string" || item.length === 0 || item.length > 256) {
+            fail(`${context}[${index}] must be a bounded string`);
+        }
+        return item;
+    });
+}
+function sameStrings(actual, expected, context) {
+    if (actual.length !== expected.length || actual.some((value, index) => value !== expected[index])) {
+        fail(`${context} differs`);
+    }
+}
+function decodeExactBase64url(value, context, allowEmpty) {
+    if (value.length === 0) {
+        if (allowEmpty)
+            return Buffer.alloc(0);
+        fail(`${context} must not be empty`);
+    }
+    if (value.length > MAX_ENCODED_RETAINED_BYTES || !/^[A-Za-z0-9_-]+$/u.test(value)) {
+        fail(`${context} is not bounded unpadded base64url`);
+    }
+    const decoded = Buffer.from(value, "base64url");
+    if (decoded.length > MAX_RETAINED_BYTES || decoded.toString("base64url") !== value) {
+        fail(`${context} is non-canonical or exceeds its bound`);
+    }
+    return decoded;
+}
+function multihash(bytes) {
+    return `1220${createHash("sha256").update(bytes).digest("hex")}`;
+}
+function observationMultihash(observations) {
+    const hash = createHash("sha256");
+    for (const observation of observations) {
+        if (observation.length > 0xffff_ffff)
+            fail("recorded observation exceeds u32 framing");
+        const length = Buffer.alloc(4);
+        length.writeUInt32BE(observation.length);
+        hash.update(length);
+        hash.update(observation);
+    }
+    return `1220${hash.digest("hex")}`;
+}
+function verifyDigest(value, context) {
+    if (!/^1220[0-9a-f]{64}$/u.test(value))
+        fail(`${context} is not a lowercase SHA-256 multihash`);
+}
+function parseArtifacts(required, value) {
+    if (!Array.isArray(value) || value.length > MAX_ARTIFACTS) {
+        fail("retained artifact table must be a bounded array");
+    }
+    const seen = new Set();
+    return value.map((raw, index) => {
+        const entry = strictObject(raw, ["kind", "bytes_base64url", "digest_multihash"], `retained artifact ${index}`);
+        const kind = stringField(entry, "kind", `retained artifact ${index}`);
+        if (!required.includes(kind) || seen.has(kind))
+            fail("retained artifact kind is unknown or duplicated");
+        seen.add(kind);
+        const bytesBase64url = stringField(entry, "bytes_base64url", `retained artifact ${index}`, MAX_ENCODED_RETAINED_BYTES);
+        const digestMultihash = stringField(entry, "digest_multihash", `retained artifact ${index}`, 68);
+        verifyDigest(digestMultihash, `retained artifact ${index} digest`);
+        return { kind, bytesBase64url, digestMultihash };
+    });
+}
+function verifyArtifacts(required, artifacts) {
+    const verifiedBytes = new Map();
+    for (const artifact of artifacts) {
+        const bytes = decodeExactBase64url(artifact.bytesBase64url, `${artifact.kind} artifact`, false);
+        if (multihash(bytes) === artifact.digestMultihash)
+            verifiedBytes.set(artifact.kind, bytes);
+    }
+    return {
+        verifiedBytes,
+        missing: required.filter((kind) => !verifiedBytes.has(kind)),
+    };
+}
+function rejectDuplicateJsonKeys(source) {
+    let offset = 0;
+    function whitespace() {
+        while (offset < source.length && /[\u0009\u000a\u000d\u0020]/u.test(source[offset] ?? ""))
+            offset += 1;
+    }
+    function parseString() {
+        if (source[offset] !== '"')
+            fail("invalid JSON string");
+        const start = offset;
+        offset += 1;
+        while (offset < source.length) {
+            const character = source[offset];
+            if (character === '"') {
+                offset += 1;
+                const decoded = JSON.parse(source.slice(start, offset));
+                if (typeof decoded !== "string")
+                    fail("invalid JSON string");
+                return decoded;
+            }
+            if (character === "\\") {
+                offset += 1;
+                const escape = source[offset];
+                if (escape === "u") {
+                    if (!/^[0-9a-fA-F]{4}$/u.test(source.slice(offset + 1, offset + 5)))
+                        fail("invalid JSON escape");
+                    offset += 5;
+                    continue;
+                }
+                if (escape === undefined || !'"\\/bfnrt'.includes(escape))
+                    fail("invalid JSON escape");
+                offset += 1;
+                continue;
+            }
+            if (character === undefined || character.charCodeAt(0) < 0x20)
+                fail("invalid JSON string character");
+            offset += 1;
+        }
+        fail("unterminated JSON string");
+    }
+    function parseValue(depth) {
+        if (depth > MAX_JSON_DEPTH)
+            fail("JSON nesting exceeds its bound");
+        whitespace();
+        const character = source[offset];
+        if (character === "{") {
+            offset += 1;
+            whitespace();
+            const keys = new Set();
+            if (source[offset] === "}") {
+                offset += 1;
+                return;
+            }
+            while (true) {
+                whitespace();
+                const key = parseString();
+                if (keys.has(key))
+                    fail("duplicate JSON object key");
+                keys.add(key);
+                whitespace();
+                if (source[offset] !== ":")
+                    fail("JSON object key lacks a value");
+                offset += 1;
+                parseValue(depth + 1);
+                whitespace();
+                if (source[offset] === "}") {
+                    offset += 1;
+                    return;
+                }
+                if (source[offset] !== ",")
+                    fail("invalid JSON object separator");
+                offset += 1;
+            }
+        }
+        if (character === "[") {
+            offset += 1;
+            whitespace();
+            if (source[offset] === "]") {
+                offset += 1;
+                return;
+            }
+            while (true) {
+                parseValue(depth + 1);
+                whitespace();
+                if (source[offset] === "]") {
+                    offset += 1;
+                    return;
+                }
+                if (source[offset] !== ",")
+                    fail("invalid JSON array separator");
+                offset += 1;
+            }
+        }
+        if (character === '"') {
+            parseString();
+            return;
+        }
+        for (const literal of ["true", "false", "null"]) {
+            if (source.startsWith(literal, offset)) {
+                offset += literal.length;
+                return;
+            }
+        }
+        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/u.exec(source.slice(offset));
+        if (number === null)
+            fail("invalid JSON value");
+        offset += number[0].length;
+    }
+    parseValue(0);
+    whitespace();
+    if (offset !== source.length)
+        fail("fixture contains trailing JSON");
+}
+function main() {
+    const path = process.argv[2] ?? "schemas/vectors/replay-v1.json";
+    const source = readFileSync(path);
+    if (source.length === 0 || source.length > MAX_FIXTURE_BYTES)
+        fail("fixture size is invalid");
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(source);
+    }
+    catch {
+        fail("fixture is not valid UTF-8");
+    }
+    rejectDuplicateJsonKeys(text);
+    const root = strictObject(JSON.parse(text), [
+        "schema_version",
+        "digest_algorithm",
+        "observation_framing",
+        "retained",
+        "required_dependencies",
+        "retained_artifacts",
+        "missing_artifact_probe",
+        "tampered_artifact_probe",
+        "empty_recorded_response_probe",
+        "expected",
+    ], "fixture");
+    if (stringField(root, "schema_version", "fixture") !== "cigar.replay-vector.v1"
+        || stringField(root, "digest_algorithm", "fixture") !== "sha256-multihash-raw-v1"
+        || stringField(root, "observation_framing", "fixture") !== "u32be-length-prefixed-v1") {
+        fail("fixture declares an unsupported profile");
+    }
+    const retained = strictObject(root.retained, [
+        "bundle_bytes_base64url",
+        "invocation_bytes_base64url",
+        "recorded_observation_bytes_base64url",
+    ], "retained");
+    const bundle = decodeExactBase64url(stringField(retained, "bundle_bytes_base64url", "retained", MAX_ENCODED_RETAINED_BYTES), "bundle", false);
+    const invocation = decodeExactBase64url(stringField(retained, "invocation_bytes_base64url", "retained", MAX_ENCODED_RETAINED_BYTES), "invocation", false);
+    const encodedObservations = stringArray(retained.recorded_observation_bytes_base64url, "recorded observations", MAX_OBSERVATIONS);
+    if (encodedObservations.length === 0)
+        fail("recorded observations must not be empty");
+    const observations = encodedObservations.map((value, index) => decodeExactBase64url(value, `recorded observation ${index}`, true));
+    const required = stringArray(root.required_dependencies, "required dependencies");
+    sameStrings(required, DEPENDENCY_ORDER, "required dependency order");
+    const artifacts = parseArtifacts(required, root.retained_artifacts);
+    const expected = strictObject(root.expected, [
+        "bundle_digest_multihash",
+        "invocation_digest_multihash",
+        "observation_digest_multihash",
+        "complete",
+        "missing_dependencies",
+    ], "expected");
+    const expectedBundle = stringField(expected, "bundle_digest_multihash", "expected", 68);
+    const expectedInvocation = stringField(expected, "invocation_digest_multihash", "expected", 68);
+    const expectedObservations = stringField(expected, "observation_digest_multihash", "expected", 68);
+    for (const [context, value] of [
+        ["bundle digest", expectedBundle],
+        ["invocation digest", expectedInvocation],
+        ["observation digest", expectedObservations],
+    ])
+        verifyDigest(value, context);
+    const bundleDigest = multihash(bundle);
+    const invocationDigest = multihash(invocation);
+    const observationDigest = observationMultihash(observations);
+    if (bundleDigest !== expectedBundle || invocationDigest !== expectedInvocation
+        || observationDigest !== expectedObservations)
+        fail("retained replay digest mismatch");
+    const verification = verifyArtifacts(required, artifacts);
+    const complete = verification.missing.length === 0;
+    if (complete !== booleanField(expected, "complete", "expected"))
+        fail("completeness mismatch");
+    sameStrings(verification.missing, stringArray(expected.missing_dependencies, "expected missing dependencies"), "missing dependencies");
+    const artifactBundle = verification.verifiedBytes.get("bundle");
+    if (artifactBundle === undefined || !artifactBundle.equals(bundle)) {
+        fail("retained bundle and bundle dependency artifact differ");
+    }
+    const missingProbe = strictObject(root.missing_artifact_probe, [
+        "kind",
+        "expected_complete",
+        "expected_missing_dependencies",
+    ], "missing artifact probe");
+    const missingKind = stringField(missingProbe, "kind", "missing artifact probe");
+    if (!required.includes(missingKind))
+        fail("missing artifact probe names an unknown dependency");
+    const missingVerification = verifyArtifacts(required, artifacts.filter((artifact) => artifact.kind !== missingKind));
+    const missingComplete = missingVerification.missing.length === 0;
+    if (missingComplete !== booleanField(missingProbe, "expected_complete", "missing artifact probe")) {
+        fail("missing artifact probe completeness differs");
+    }
+    sameStrings(missingVerification.missing, stringArray(missingProbe.expected_missing_dependencies, "missing artifact probe dependencies"), "missing artifact probe dependencies");
+    const tamperProbe = strictObject(root.tampered_artifact_probe, [
+        "kind",
+        "replacement_bytes_base64url",
+        "expected_accepted",
+        "expected_missing_dependencies",
+    ], "tampered artifact probe");
+    const tamperKind = stringField(tamperProbe, "kind", "tampered artifact probe");
+    if (!required.includes(tamperKind))
+        fail("tampered artifact probe names an unknown dependency");
+    const replacement = stringField(tamperProbe, "replacement_bytes_base64url", "tampered artifact probe", MAX_ENCODED_RETAINED_BYTES);
+    let replacements = 0;
+    const tampered = artifacts.map((artifact) => {
+        if (artifact.kind !== tamperKind)
+            return artifact;
+        replacements += 1;
+        return { ...artifact, bytesBase64url: replacement };
+    });
+    if (replacements !== 1)
+        fail("tampered artifact probe must identify exactly one artifact");
+    const tamperedVerification = verifyArtifacts(required, tampered);
+    const tamperAccepted = tamperedVerification.missing.length === 0;
+    if (tamperAccepted !== booleanField(tamperProbe, "expected_accepted", "tampered artifact probe")) {
+        fail("tampered artifact probe acceptance differs");
+    }
+    sameStrings(tamperedVerification.missing, stringArray(tamperProbe.expected_missing_dependencies, "tampered artifact probe dependencies"), "tampered artifact probe dependencies");
+    const emptyProbe = strictObject(root.empty_recorded_response_probe, [
+        "bytes_base64url",
+        "digest_multihash",
+        "expected_accepted",
+    ], "empty recorded response probe");
+    const emptyResponse = decodeExactBase64url(stringField(emptyProbe, "bytes_base64url", "empty recorded response probe", MAX_ENCODED_RETAINED_BYTES, true), "empty recorded response", true);
+    const expectedEmptyDigest = stringField(emptyProbe, "digest_multihash", "empty recorded response probe", 68);
+    verifyDigest(expectedEmptyDigest, "empty recorded response digest");
+    const emptyDigest = multihash(emptyResponse);
+    const emptyAccepted = emptyResponse.length === 0 && emptyDigest === expectedEmptyDigest;
+    if (emptyAccepted !== booleanField(emptyProbe, "expected_accepted", "empty recorded response probe")) {
+        fail("empty recorded response probe acceptance differs");
+    }
+    process.stdout.write(`${JSON.stringify({
+        schema_version: "cigar.replay-reproduction-result.v1",
+        bundle_digest_multihash: bundleDigest,
+        invocation_digest_multihash: invocationDigest,
+        observation_digest_multihash: observationDigest,
+        complete,
+        missing_dependencies: verification.missing,
+        missing_artifact_probe: {
+            complete: missingComplete,
+            missing_dependencies: missingVerification.missing,
+        },
+        tampered_artifact_probe: {
+            accepted: tamperAccepted,
+            missing_dependencies: tamperedVerification.missing,
+        },
+        empty_recorded_response_probe: {
+            accepted: emptyAccepted,
+            digest_multihash: emptyDigest,
+        },
+    })}\n`);
+}
+main();
+//# sourceMappingURL=verify-replay.js.map